[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkjRvLerDyQp6k2JzYUrPBil3H-38WBxuVKPNZuoUzDk":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":40,"analysis":137,"fingerprints":212},"wp-instantarticles","WP-InstantArticles","1.0.0","Lester Chan","https:\u002F\u002Fprofiles.wordpress.org\u002Fgamerz\u002F","\u003Cp>Facebook Instant Articles is a new way for publishers to distribute stories on Facebook. Instant Articles load up to 10 times faster than the mobile web.\u003C\u002Fp>\n\u003Cp>You can access your Instant Articles RSS feed at \u003Ccode>http:\u002F\u002Fyoursite.com\u002Finstant-articles\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cp>For more information checkout \u003Ca href=\"https:\u002F\u002Fdevelopers.facebook.com\u002Fdocs\u002Finstant-articles\" rel=\"nofollow ugc\">Facebook’s Instant Articles Developer Guide\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Build Status\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ftravis-ci.org\u002Flesterchan\u002Fwp-instantarticles\" rel=\"nofollow ugc\">\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Development\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-instantarticles\" title=\"https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-instantarticles\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-instantarticles\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Plugin icon by \u003Ca href=\"http:\u002F\u002Fwww.freepik.com\" rel=\"nofollow ugc\">Freepik\u003C\u002Fa> from \u003Ca href=\"http:\u002F\u002Fwww.flaticon.com\" rel=\"nofollow ugc\">Flaticon\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Donations\u003C\u002Fh3>\n\u003Cp>I spent most of my free time creating, updating, maintaining and supporting these plugins, if you really love my plugins and could spare me a couple of bucks, I will really appreciate it. If not feel free to use it without any obligations.\u003C\u002Fp>\n","WP-InstantArticles generates a RSS feed of your WordPress posts as Instant Articles for Facebook to consume.",100,14698,60,2,"2023-08-09T02:59:00.000Z","6.3.8","4.4","",[20,21,22,23,24],"article","facebook","instant","instant-articles","quick","https:\u002F\u002Flesterchan.net\u002Fportfolio\u002Fprogramming\u002Fphp\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-instantarticles.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":35,"avg_security_score":36,"avg_patch_time_days":37,"trust_score":38,"computed_at":39},"gamerz",20,889190,89,1377,71,"2026-04-04T10:05:06.430Z",[41,57,78,96,116],{"slug":42,"name":43,"version":44,"author":45,"author_profile":46,"description":47,"short_description":48,"active_installs":49,"downloaded":50,"rating":28,"num_ratings":28,"last_updated":51,"tested_up_to":52,"requires_at_least":53,"requires_php":18,"tags":54,"homepage":18,"download_link":56,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"fb-instant-articles-pubexchange-filter","Add PubExchange Tracking to Instant Articles for WP","0.2","PubExchange","https:\u002F\u002Fprofiles.wordpress.org\u002Fpubexchange\u002F","\u003Cp>This plugin adds a filter to WordPress’ Instant Articles plugin so that clicks can be recorded by PubExchange. Instant Articles for Facebook is a new way for publishers to distribute fast, interactive stories on Facebook. Instant Articles are preloaded in the Facebook mobile app so they load instantly.\u003C\u002Fp>\n\u003Cp>For this plugin to work properly, you must also install the official \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ffb-instant-articles\u002F\" rel=\"ugc\">WordPress plugin\u003C\u002Fa>. You must also have an account with PubExchange, but NOT have installed the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpubexchange\u002F\" rel=\"ugc\">PubExchange module plugin\u003C\u002Fa> (version 2.0.2 or later), since that plugin already adds the filter.\u003C\u002Fp>\n\u003Cp>Developers: please note that since the WordPress plugin is still in the early stages and may experience changes, this plugin may change frequently as well.\u003C\u002Fp>\n","Extend Wordpress's plugin for Instant Articles for Facebook to include PubExchange click tracking.",10,1597,"2017-01-13T22:08:00.000Z","4.4.34","4.3",[21,23,55],"mobile","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffb-instant-articles-pubexchange-filter.zip",{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":49,"downloaded":65,"rating":11,"num_ratings":66,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":18,"tags":70,"homepage":76,"download_link":77,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"sovrn-workbench","Workbench by Sovrn","1.3.3","Sovrn","https:\u002F\u002Fprofiles.wordpress.org\u002Fsovrn\u002F","\u003Cp>The power of a large publisher tech team in one complete, free plugin. Publish, share, understand, and create WordPress mobile optimized content with ease. No technical expertise needed.\u003C\u002Fp>\n\u003Ch4>Mobile Optimized Publishing\u003C\u002Fh4>\n\u003Cp>Workbench automatically formats your content for:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Google Accelerated Mobile Pages (AMP)\u003C\u002Fstrong>\u003Cbr \u002F>\n* Super fast loading on mobile (relative to mobile version of your website)\u003Cbr \u002F>\n* Available for cache by Google and inclusion as a card in mobile search results\u003Cbr \u002F>\n* Boosts SEO for your content\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Facebook Instant Articles\u003C\u002Fstrong>\u003Cbr \u002F>\n* Users remain in the Facebook app to view your content – making them more likely to engage with your content (reacting, sharing, commenting)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Apple News\u003C\u002Fstrong>\u003Cbr \u002F>\n* Digital newsstand where users can discover new publishers\u003Cbr \u002F>\n* Small pubs are visually formatted same as top media giants\u003C\u002Fp>\n\u003Ch4>Social Sharing\u003C\u002Fh4>\n\u003Cp>Social platforms get your content in front of more eyes than your website alone. Workbench promotes your content by:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Sharing posts to Facebook, Twitter, Google+\u003C\u002Fli>\n\u003Cli>Workbench’s API integration allows for custom messages in your posts – making it more relatable and noticeable to your readers\u003C\u002Fli>\n\u003Cli>Sharing becomes part of the standard WordPress publishing flow\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Understand Engagement Data\u003C\u002Fh4>\n\u003Cp>Understanding how people engage with your content can bring your blog to the next level. Workbench gives you detailed reporting:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Likes, Shares, Comments across Facebook, Twitter, and Google+ are tracked for each article in one, simple interface\u003C\u002Fli>\n\u003Cli>Aggregated engagement metrics give you insights into which articles resonate the strongest with your audience\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Powered by Sovrn – a trusted partner to over 80,000 sites; building better tools and services to help them promote, understand, and make money from their content.\u003C\u002Fp>\n","Automatically publish to Google AMP, Facebook Instant Articles, and Apple News. Share to top social platforms. Understand engagement with your content …",2510,1,"2017-05-16T16:35:00.000Z","4.7.32","4.6",[71,72,73,74,75],"amp","apple-news","facebook-instant-articles","fbia","google-amp","https:\u002F\u002Fwww.sovrn.com\u002Fmeridian\u002Fworkbench\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsovrn-workbench.1.3.3.zip",{"slug":79,"name":80,"version":81,"author":80,"author_profile":82,"description":83,"short_description":84,"active_installs":85,"downloaded":86,"rating":87,"num_ratings":14,"last_updated":88,"tested_up_to":68,"requires_at_least":89,"requires_php":18,"tags":90,"homepage":92,"download_link":93,"security_score":94,"vuln_count":66,"unpatched_count":66,"last_vuln_date":95,"fetched_at":30},"chartbeat","Chartbeat","2.0.7","https:\u002F\u002Fprofiles.wordpress.org\u002Fchartbeat\u002F","\u003Cp>Chartbeat for Publishing shows you live audience and traffic data for your websites and apps, and helps you track important trends over time. If you have a Chartbeat subscription, you can use this plugin to automatically add Chartbeat’s JavaScript to your WordPress site. After installing, you’ll see your site’s traffic and audience data visualized in real time, all within WordPress.\u003C\u002Fp>\n\u003Cp>Questions? Problems? Need more info? Email us at \u003Ca href=\"support@chartbeat.com\" rel=\"nofollow ugc\">support@chartbeat.com\u003C\u002Fa>.\u003C\u002Fp>\n","The Chartbeat plugin automatically adds real-time data and a top pages widget to your blog. See who’s on your site, what they’re doing - right now",1000,584418,50,"2020-07-01T21:11:00.000Z","2.8",[71,91,79,23],"analytics","http:\u002F\u002Fchartbeat.com\u002Fwordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fchartbeat.2.0.7.zip",63,"2025-08-26 00:00:00",{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":11,"downloaded":104,"rating":28,"num_ratings":28,"last_updated":105,"tested_up_to":106,"requires_at_least":107,"requires_php":18,"tags":108,"homepage":114,"download_link":115,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"group-contact-buttons-pht-blog","Call Now – Group Contact Buttons – PHT Blog","2.4","Pham Thanh","https:\u002F\u002Fprofiles.wordpress.org\u002Fthanhph\u002F","\u003Cp>Insert quick call buttons, chat Facebook, Skype, Line, quick contact via Zalo, Viber, Contact Form 7 … all wrapped up in a Group Contact button neatly displayed. The plugin is completely free for WordPress websites.\u003C\u002Fp>\n\u003Ch4>Currently the Plugin is providing the following display functions that allow website owners to customize:\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Customize phone number\u003C\u002Fli>\n\u003Cli>Customize your Facebook ID to make chat on Messenger\u003C\u002Fli>\n\u003Cli>Customize chat via Zalo, Viber, Skype, Line…\u003C\u002Fli>\n\u003Cli>Customize Shortcode Contact Form\u003C\u002Fli>\n\u003Cli>Add embed code: Google Analytics, verification tag, embed code css, js, script code, meta tags…\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Empty fields mean the corresponding function button is hidden.\u003C\u002Fp>\n\u003Ch4>Need support\u003C\u002Fh4>\n\u003Cp>If you want to get support, please visit \u003Ca href=\"https:\u002F\u002Fwww.phamhuuthanh.com\" rel=\"nofollow ugc\">PHT Blog\u003C\u002Fa> for more detail.\u003C\u002Fp>\n","Insert call now buttons, chat Facebook, quick contact via Zalo, Viber, Skype, Line, Contact Form 7 ... all wrapped up in a Group Contact button neatly …",3833,"2020-05-27T10:07:00.000Z","5.4.19","3.5",[109,110,111,112,113],"call-now-button","facebook-chat","group-contact","quick-call-button","zalo-chat","https:\u002F\u002Fwww.phamhuuthanh.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgroup-contact-buttons-pht-blog.zip",{"slug":117,"name":118,"version":119,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":49,"downloaded":124,"rating":28,"num_ratings":28,"last_updated":125,"tested_up_to":126,"requires_at_least":127,"requires_php":128,"tags":129,"homepage":135,"download_link":136,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"checkout-add-on-woo-onepage","Checkout Add-on for Woo OnePage – Lite","0.9","AmaderCode Lab","https:\u002F\u002Fprofiles.wordpress.org\u002Famadercode\u002F","\u003Cp>To make user’s instant\u002Fquick purchase Checkout Add-on for Woo OnePage – Lite is a awesome Add-on for Woo OnePage Checkout Shop.\u003C\u002Fp>\n\u003Ch4>Advantages of Woocommerce OnePage Checkout Add-on – Lite\u003C\u002Fh4>\n\u003Cp>👉 Easy Installation.\u003Cbr \u002F>\n👉 Instant\u002FQuick\u002FOnPage\u002FFloating Checkout.\u003Cbr \u002F>\n👉 Auto cart item update on the checkout area.\u003Cbr \u002F>\n👉 Coupon apply\u002Fremove.\u003Cbr \u002F>\n👉 Shipping automatically calculation.\u003Cbr \u002F>\n👉 Address validation.\u003Cbr \u002F>\n👉 Ajax based action.\u003Cbr \u002F>\n👉 100% mobile friendly.\u003C\u002Fp>\n\u003Ch4>Required Plugins\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong> \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoocommerce\" rel=\"ugc\">WooCommerce\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong> \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoo-onepage\" rel=\"ugc\">Woo OnePage Checkout Shop\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Support, Bug Fix, Feature Request\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Your are always welcome for your feedback and new feature requests for this Checkout Add-on for Woo OnePage -Lite Plugin!\u003C\u002Fli>\n\u003Cli>Don’t worry to contact us for any problem or need help with Checkout Add-on for Woo OnePage -Lite Plugin through WordPress support center or Help & Info page in the plugin backend panel.\u003C\u002Fli>\n\u003C\u002Ful>\n","Checkout Add-on for Woo OnePage - Lite is a Instant\u002FQuick\u002FOnPage\u002FFloating Checkout Add-on for Woo OnePage Checkout Shop.",1475,"2019-11-14T18:11:00.000Z","5.2.24","4.0","5.4.0",[130,131,132,133,134],"checkout-add-on-for-woo-onepage","woocommerce-floating-checkout","woocommerce-instant-checkout","woocommerce-quick-checkout","woocommerce-single-page-checkout","https:\u002F\u002Famadercode.com\u002Fpremium-products\u002Fwoocommerce-one-page-checkout-shop","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcheckout-add-on-woo-onepage.zip",{"attackSurface":138,"codeSignals":155,"taintFlows":199,"riskAssessment":200,"analyzedAt":211},{"hooks":139,"ajaxHandlers":151,"restRoutes":152,"shortcodes":153,"cronEvents":154,"entryPointCount":28,"unprotectedCount":28},[140,145,148],{"type":141,"name":142,"callback":143,"file":144,"line":27},"action","plugins_loaded","add_hooks","wp-instantarticles.php",{"type":141,"name":146,"callback":146,"file":144,"line":147},"init",120,{"type":141,"name":149,"callback":149,"file":144,"line":150},"after_setup_theme",121,[],[],[],[],{"dangerousFunctions":156,"sqlUsage":157,"outputEscaping":159,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":198},[],{"prepared":28,"raw":28,"locations":158},[],{"escaped":28,"rawEcho":160,"locations":161},17,[162,166,168,170,172,174,176,178,180,182,184,185,187,189,191,193,196],{"file":163,"line":164,"context":165},"templates\\instantarticles-rss2-items.php",27,"raw output",{"file":163,"line":167,"context":165},29,{"file":163,"line":169,"context":165},30,{"file":163,"line":171,"context":165},38,{"file":163,"line":173,"context":165},46,{"file":163,"line":175,"context":165},48,{"file":163,"line":177,"context":165},56,{"file":163,"line":179,"context":165},57,{"file":163,"line":181,"context":165},58,{"file":163,"line":183,"context":165},61,{"file":163,"line":94,"context":165},{"file":163,"line":186,"context":165},66,{"file":163,"line":188,"context":165},72,{"file":163,"line":190,"context":165},78,{"file":163,"line":192,"context":165},80,{"file":194,"line":195,"context":165},"templates\\instantarticles-rss2.php",7,{"file":144,"line":197,"context":165},165,[],[],{"summary":201,"deductions":202},"The wp-instantarticles v1.0.0 plugin exhibits a strong security posture in several key areas.  The absence of any known CVEs, coupled with a complete lack of critical or high-severity taint flows, suggests that the developers have a good understanding of common web vulnerabilities. Furthermore, the use of prepared statements for all SQL queries is a significant strength, mitigating the risk of SQL injection attacks. The plugin also appears to have a minimal attack surface, with no exposed AJAX handlers, REST API routes, or shortcodes, which limits potential entry points for attackers.\n\nHowever, a major concern is the complete lack of output escaping for all 17 identified output points. This presents a significant risk of Cross-Site Scripting (XSS) vulnerabilities, as user-supplied data or other dynamic content is being rendered directly without sanitization. The absence of nonce checks and capability checks, while not immediately tied to a specific vulnerability in this version, indicates a potential weakness that could be exploited if the attack surface were to expand or if other vulnerabilities were introduced in the future. The zero-count for these checks, combined with the unescaped output, indicates a significant gap in standard WordPress security practices.\n\nIn conclusion, while the plugin has commendable strengths in its lack of known vulnerabilities and robust SQL handling, the critical deficiency in output escaping and the absence of essential security checks like nonces and capability checks create a substantial risk. The plugin is currently susceptible to XSS attacks, and its broader security framework is less robust than it could be. Addressing the output escaping is paramount, and implementing capability checks on any future sensitive operations would be highly recommended.",[203,206,209],{"reason":204,"points":205},"100% of output unescaped",15,{"reason":207,"points":208},"No nonce checks",5,{"reason":210,"points":208},"No capability checks","2026-03-16T20:55:36.581Z",{"wat":213,"direct":220},{"assetPaths":214,"generatorPatterns":217,"scriptPaths":218,"versionParams":219},[215,216],"\u002Fwp-content\u002Fplugins\u002Fwp-instantarticles\u002Ftemplates\u002Finstantarticles-rss2.php","\u002Fwp-content\u002Fplugins\u002Fwp-instantarticles\u002Ftemplates\u002Finstantarticles-rss2-items.php",[],[],[],{"cssClasses":221,"htmlComments":222,"htmlAttributes":223,"restEndpoints":224,"jsGlobals":225,"shortcodeOutput":226},[],[],[],[],[],[]]