[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNBBHhU8Z1wQIvwsQ7k86lFOTUITiyqmJMO_h6y3UF0Y":3},{"slug":4,"name":4,"version":5,"author":6,"author_profile":7,"description":8,"short_description":9,"active_installs":10,"downloaded":11,"rating":12,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":36,"analysis":136,"fingerprints":429},"wp-jalali","5.0.1","mani_monaj","https:\u002F\u002Fprofiles.wordpress.org\u002Fmani_monaj\u002F","\u003Cp>wp-jalali is a “Full Jalali (خورشیدی – شمسی) Calendar and Persian(Farsi)\u002FAfghan\u002FTajik” support package for WordPress.\u003C\u002Fp>\n\u003Cp>Features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Transparent and configurable Jalali date conversion for posts, pages and comments\u003C\u002Fli>\n\u003Cli>Jalali Archive template tag and widget (Monthly and Daily)\u003C\u002Fli>\n\u003Cli>Jalali\u002FGregorian Calendar template tag and widget\u003C\u002Fli>\n\u003Cli>Jalali\u002FGregorian compatible permalinks\u003C\u002Fli>\n\u003Cli>Improvements to TinyMCE (WordPress Editor)\u003C\u002Fli>\n\u003Cli>Auto conversion of some Arabic characters (ي , ك) to Persian (ی , ک) with smart search\u003C\u002Fli>\n\u003Cli>Auto conversion of Latin numbers to Persian numbers.\u003C\u002Fli>\n\u003Cli>Fully customizable through custom admin page\u003C\u002Fli>\n\u003Cli>Jalali timestamp edit in new post and new page sections\u003C\u002Fli>\n\u003Cli>Jalali dates in edit tables\u003C\u002Fli>\n\u003Cli>Support for both Iranian and Afghan month names\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plug-in is part of \u003Ca href=\"http:\u002F\u002Fwp-persian.com\u002F\" title=\"پروژه وردپرس فارسی\" rel=\"nofollow ugc\">Persian WordPress Project\u003C\u002Fa>. Since version 5.0, this plugin is being maintained in collaboration with \u003Ca href=\"http:\u002F\u002Fzakrot.com\u002F\" rel=\"nofollow ugc\">Zakrot Web Solutions\u003C\u002Fa>.\u003C\u002Fp>\n","Full Jalali calendar support for Wordpress and localization improvements for Persian\u002FAfghan\u002FTajik users.",20000,402484,80,21,"2017-11-28T04:08:00.000Z","4.6.30","3.9","",[19,20,21,22,23],"afghan","calendar-conversion","farsi","persian","tajik","http:\u002F\u002Fwp-persian.com\u002Fwp-jalali","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-jalali.5.0.1.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":6,"display_name":6,"profile_url":7,"plugin_count":32,"total_installs":10,"avg_security_score":26,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},1,30,84,"2026-04-04T05:28:09.207Z",[37,57,78,97,117],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":34,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":17,"tags":51,"homepage":55,"download_link":56,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"wp-persian","WP-Persian","3.3.0","Siavash","https:\u002F\u002Fprofiles.wordpress.org\u002Fsalemi\u002F","\u003Cp>WP-Persian is a fast and powerful plugin for jalali calendar and persian language support in wordpress and standard plugins.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>If you like the plugin, feel free to rate it (on the right side of this page)!\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Jalali DatePicker for Woocommerce\u003C\u002Fli>\n\u003Cli>Farsi Fonts for Admin Dashboard\u003C\u002Fli>\n\u003Cli>Full posts and comments dates conversion to jalali.\u003C\u002Fli>\n\u003Cli>Customizable through specific WordPress admin page.\u003C\u002Fli>\n\u003Cli>Jalali timestamp edit in new post and new page sections.\u003C\u002Fli>\n\u003Cli>Jalali dates in inline edit tables.\u003C\u002Fli>\n\u003Cli>Change wordpress language from admin control panel.\u003C\u002Fli>\n\u003Cli>Adds RTL and LTR buttons to the TinyMCE editor to enable writing text in Right to Left and Left to Right directions.\u003C\u002Fli>\n\u003Cli>Jalali Archive widget.\u003C\u002Fli>\n\u003Cli>Jalali Calendar widget.\u003C\u002Fli>\n\u003Cli>Jalali\u002FGregorian compatible permalinks.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Farsi Description\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>امکان تغییر فونت بخش مدیریت سایت\u003C\u002Fli>\n\u003Cli>پشتیبانی از تاریخ هجری شمسی در ووکامرس\u003C\u002Fli>\n\u003Cli>تاریخ هجری شمسی در همه بخش ها حتی بخش آپلود عکس و مدیا\u003C\u002Fli>\n\u003Cli>تشخیص خودکار جهت متن ورودی در بخش مدیریت\u003C\u002Fli>\n\u003Cli>قابلیت تبدیل کلیه تاریخ های میلادی به هجری شمسی\u003C\u002Fli>\n\u003Cli>امکان تغییر زبان و تقویم بخش مدیریت و بخش کاربری به صورت مجزا‬\u003C\u002Fli>\n\u003Cli>به همراه راهنمای کامل تنظیمات به زبان فارسی\u003C\u002Fli>\n\u003Cli>بدون ایجاد تغییرات در هسته وردپرس\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Related Links\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbitbucket.org\u002F30yavash\u002Fwp-persian\u002Fdownloads\u002F\" title=\"Download Beta Version\" rel=\"nofollow ugc\">Download Latest Version\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.30yavash.com\u002Ftag\u002Fwp-persian\u002F\" title=\"Farsi Online Documents\" rel=\"nofollow ugc\">Online Documents\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwp-persian\u002Fassets\u002Fhelp.pdf\" title=\"Farsi Help\" rel=\"nofollow ugc\">PDF Document\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwp-persian\u002Fassets\u002Finstall.pdf\" title=\"Farsi Installation Help\" rel=\"nofollow ugc\">PDF Installation Help\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Fast and Powerful plugin for Jalali calendar and Farsi language support in Wordpress and standard plugins.",9000,171111,32,"2020-09-11T17:41:00.000Z","5.3.21","4.0",[52,53,21,54,22],"calendar","date","jalali","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-persian\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-persian.zip",{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":67,"num_ratings":68,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":17,"tags":72,"homepage":17,"download_link":76,"security_score":77,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"gateway-aqayepardakht-for-woocommerce","Gateway AqayePardakht for Woocommerce","1.6","Aqaye Pardakht","https:\u002F\u002Fprofiles.wordpress.org\u002Faqayepardakht\u002F","\u003Cp>افزونه درگاه پرداخت آقای پرداخت برای Woocommerce\u003C\u002Fp>\n\u003Ch4>امکانات\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>واحد های پولی ریال تومن هزار ریال و هزار تومان\u003C\u002Fli>\n\u003Cli>سازگار با ووکامرس جدید و قدیمی\u003C\u002Fli>\n\u003Cli>تنظیم پیام دلخواه در هنگام پرداخت موفقیت آمیز و یا پرداخت ناموفق\u003C\u002Fli>\n\u003Cli>نمایش خطاهای درگاه پرداخت\u003C\u002Fli>\n\u003Cli>امکان فعال سازی حالت آزمایشی\u003C\u002Fli>\n\u003Cli>نمایش شماره کارت های ذخیره شده در صفحه بانکی درصورت تکمیل فیلد شماره موبایل توسط خریدار\u003C\u002Fli>\n\u003Cli>بهینه سازی کد ها و سازگار سازی با نسخه های جدید ووکامرس\u003C\u002Fli>\n\u003Cli>پنل تنظیمات ساده و کاربرپسند\u003C\u002Fli>\n\u003Cli>درج شماره کارت پرداخت کننده در بخش یادداشت های سفارش\u003C\u002Fli>\n\u003Cli>درج شماره تراکنش آقای پرداختی در بخش یادداشت های سفارش\u003C\u002Fli>\n\u003Cli>سازگار با نسخه جدید وب سرویس آقای پرداخت\u003C\u002Fli>\n\u003C\u002Ful>\n","با نصب این پلاگین می توانید از خدمات درگاه آقای پرداخت برای پلاگین ووکامرس استفاده کنید!",4000,18986,86,3,"2025-01-17T16:53:00.000Z","6.7.5","4.5",[73,21,74,22,75],"aqayepardakht","iran","woocommerce","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgateway-aqayepardakht-for-woocommerce.zip",92,{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":86,"downloaded":87,"rating":27,"num_ratings":27,"last_updated":88,"tested_up_to":89,"requires_at_least":90,"requires_php":91,"tags":92,"homepage":95,"download_link":96,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"vazir-font","Vazir Font","1.0","sadeghpm","https:\u002F\u002Fprofiles.wordpress.org\u002Fsadeghpm\u002F","\u003Cp>\u003Cstrong>فونت وزیرمتن برای داشبورد و قالب وردپرس\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>با این افزونه می توانید فونت وزیرمتن را برای داشبورد و قالب وردپرس تنظیم کنید.\u003Cbr \u002F>\nبا تشکر از صابر راستی‌کردار طراح فونت. آدرس اصلی مخزن فونت: https:\u002F\u002Frastikerdar.github.io\u002Fvazirmatn\u002F\u003C\u002Fp>\n\u003Ch4>امکانات\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>قابل استفاده در قالب های پیش فرض پردپرس\u003C\u002Fli>\n\u003Cli>قابل استفاده در قالب های پر استفاده وردپرس مانند neve\u003C\u002Fli>\n\u003C\u002Ful>\n","فونت وزیرمتن برای وردپرس",700,5319,"2022-05-15T08:07:00.000Z","6.0.11","5.0","5.6",[21,93,22,94],"font","vazir","https:\u002F\u002Frastikerdar.github.io\u002Fvazirmatn\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvazir-font.1.0.2.zip",{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":105,"downloaded":106,"rating":27,"num_ratings":27,"last_updated":107,"tested_up_to":108,"requires_at_least":109,"requires_php":110,"tags":111,"homepage":115,"download_link":116,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"webkima-elements","Webkima Elements","1.7.6","Nabi Abdi","https:\u002F\u002Fprofiles.wordpress.org\u002Fnabiabdi\u002F","\u003Cp>افزونه وبکیما المنت یک پلاگین بسیار سبک و سریع برای افزودن فونت های فارسی به سایت های وردپرسی و المنتوری است، توسط این افزونه می توانید فونت های فارسی را به افزونه المنتور، پیشخوان وردپرس، و بخش دیداری سایت اضافه کنید.\u003C\u002Fp>\n\u003Cp>توجه کنید که شما می‌توانید از این افزونه بدون نصب افزونه المنتور هم استفاده کنید، فقط در این صورت امکاناتی که برای المنتور طراحی شده است به هیچ عنوان لود نشده و شما می‌توانید با سرعتی بالا به دیگر امکانات پلاگین دسترسی داشته باشید.\u003C\u002Fp>\n\u003Ch4>ویژگی ها\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>فارسی سازی افزونه المنتور\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>فارسی سازی ادیتور المنتور\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>فارسی سازی پیشخوان وردپرس\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>فارسی سازی بخش دیداری یا همان فرانت اند سایت\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>دکمه بازگشت به بالا با قابلیت شخصی سازی\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>ویجت های حرفه‌ای المنتور\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>لیست فونت های رایگان\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>IRANYekan\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>‌Vazir\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>فونت های دیگر بزودی اعمال می‌شود\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>برای غیر فعال سازی و عدم بارگذاری فونت ها می توانید از پیشخوان وردپرس، گزینه وبکیما المنت و از تب تنظیمات بارگذاری فونت ها را در هر بخش به صورت مجزا مدیریت کنید.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>بهبود ظاهر ویرایشگر المنتور\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>با نصب این افزونه ظاهر ویرایشگر را با فونت ایران یکان زیباتر کنید. در حالت عادی از فونت پیش فرض سیستمی استفاده می شود که در زبان فارسی خوانایی خوبی ندارد.\u003Cbr \u002F>\nهمچنین بهبود هایی درارتفاع بین خط ها برای خوانایی بهتر اعمال شده است.\u003C\u002Fp>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>پشتیبانی \u003Ca href=\"https:\u002F\u002Fwebkima.com\u002Fwordpress-tutorials\u002F\" rel=\"nofollow ugc\">آموزش وردپرس\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>پشتیبانی \u003Ca href=\"https:\u002F\u002Fwebkima.com\u002Felementor-tutorials\u002F\" rel=\"nofollow ugc\">آموزش المنتور\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","افزونه وبکیما المنت یک پلاگین بسیار سبک و سریع برای افزودن فونت های فارسی به سایت های وردپرسی و المنتوری است، توسط این افزونه می توانید فونت های فارسی …",300,6469,"2024-03-18T15:14:00.000Z","6.4.8","5.7","7.4",[112,21,113,22,114],"elementor","parsi","webkima","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwebkima-elements\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwebkima-elements.1.7.6.zip",{"slug":118,"name":119,"version":120,"author":121,"author_profile":122,"description":123,"short_description":124,"active_installs":125,"downloaded":126,"rating":127,"num_ratings":128,"last_updated":129,"tested_up_to":108,"requires_at_least":130,"requires_php":91,"tags":131,"homepage":134,"download_link":135,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"better-rtl-support","Better RTL Support","2.1.0","Salar Gholizadeh","https:\u002F\u002Fprofiles.wordpress.org\u002Fsalar6990\u002F","\u003Cp>پشتیبانی بهتر از زبان‌های راست به چپ برای وردپرس\u003C\u002Fp>\n\u003Cp>این افزونه به شما کمک می کند تا بلاگ یا وب‌سایت وردپرسی شما با پوسته‌های معمول و پر طرفدار وردپرس نظیر پوسته‌های پیش فرض، آسترا، هیومن و برخی پوسته‌های دیگر به صورت صحیح تر و زیباتر نمایش داده شود.\u003C\u002Fp>\n\u003Cp>از نسخه ۲ به بعد فونت وزیرمتن جایگزین ایران‌سنس شده تا کاربران نیازی به خریداری لایسنس نداشته باشند.\u003Cbr \u002F>\nاین فونت حاصل دسترنج زنده‌یاد صابر راستی‌کردار می‌باشد.\u003C\u002Fp>\n\u003Cp>لیست پوسته‌های تست شده:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Astra  (آسترا)\u003C\u002Fli>\n\u003Cli>Hueman (هیومن)\u003C\u002Fli>\n\u003Cli>Twenty Twenty Three (دو هزار و بیست و سه)\u003C\u002Fli>\n\u003Cli>Twenty Twenty Two (دو هزار و بیست و دو)\u003C\u002Fli>\n\u003Cli>Twenty Twenty (دو هزار و بیست)\u003C\u002Fli>\n\u003Cli>Twenty Nineteen (دو هزار و نوزده)\u003C\u002Fli>\n\u003Cli>Twenty Seventeen (دوهزاروهفده)\u003C\u002Fli>\n\u003Cli>Twenty Sixteen (دوهزار و شانزده)\u003C\u002Fli>\n\u003Cli>Twenty Fifteen (دو هزار و پانزده)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>پروژه در گیت‌هاب: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsalar90\u002Fbetter-rtl-support\" rel=\"nofollow ugc\">Better RTL Support\u003C\u002Fa>\u003C\u002Fp>\n","Wordpress plugin for better Right to Left support for widely used themes and plugins.",200,21361,100,2,"2023-11-15T22:27:00.000Z","4.6",[21,132,22,133],"fonts","rtl","https:\u002F\u002Fgithub.com\u002Fsalar90\u002Fbetter-rtl-support","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbetter-rtl-support.2.1.0.zip",{"attackSurface":137,"codeSignals":286,"taintFlows":389,"riskAssessment":416,"analyzedAt":428},{"hooks":138,"ajaxHandlers":282,"restRoutes":283,"shortcodes":284,"cronEvents":285,"entryPointCount":27,"unprotectedCount":27},[139,145,149,153,159,163,167,171,175,178,183,187,191,195,199,202,205,208,211,214,216,218,220,222,225,228,231,234,236,238,240,242,245,248,249,252,257,261,266,270,275,278],{"type":140,"name":141,"callback":142,"file":143,"line":144},"action","admin_menu","ztjalali_reg_admin_meun_fn","inc\\wp-jalali-admin.php",7,{"type":140,"name":146,"callback":147,"file":143,"line":148},"admin_init","ztjalali_after_install_actions",78,{"type":140,"name":150,"callback":151,"file":143,"line":152},"admin_notices","ztjalali_admin_message",83,{"type":154,"name":155,"callback":156,"priority":157,"file":143,"line":158},"filter","dashboard_primary_link","ztjalali_dashboard_primary_link",111,105,{"type":154,"name":160,"callback":161,"priority":157,"file":143,"line":162},"dashboard_primary_feed","ztjalali_dashboard_primary_feed",106,{"type":154,"name":164,"callback":165,"priority":157,"file":143,"line":166},"dashboard_primary_title","ztjalali_dashboard_primary_title",107,{"type":154,"name":168,"callback":169,"priority":157,"file":143,"line":170},"dashboard_secondary_link","ztjalali_dashboard_secondary_link",109,{"type":154,"name":172,"callback":173,"priority":157,"file":143,"line":174},"dashboard_secondary_feed","ztjalali_dashboard_secondary_feed",110,{"type":154,"name":176,"callback":177,"priority":157,"file":143,"line":157},"dashboard_secondary_title","ztjalali_dashboard_secondary_title",{"type":154,"name":179,"callback":180,"priority":157,"file":181,"line":182},"date_i18n","ztjalali_ch_date_i18n","inc\\wp-jalali-filters.php",14,{"type":154,"name":184,"callback":185,"priority":27,"file":181,"line":186},"post_link","ztjalali_permalink_filter_fn",18,{"type":140,"name":188,"callback":189,"file":181,"line":190},"pre_get_posts","ztjalali_pre_get_posts_filter_fn",19,{"type":154,"name":192,"callback":193,"file":181,"line":194},"posts_where","ztjalali_posts_where_filter_fn",20,{"type":154,"name":196,"callback":197,"file":181,"line":198},"title_save_pre","ztjalali_persian_num",25,{"type":154,"name":200,"callback":197,"file":181,"line":201},"content_save_pre",28,{"type":154,"name":203,"callback":197,"file":181,"line":204},"excerpt_save_pre",31,{"type":154,"name":206,"callback":197,"file":181,"line":207},"comment_save_pre",34,{"type":154,"name":209,"callback":197,"file":181,"line":210},"pre_comment_content",35,{"type":154,"name":200,"callback":212,"file":181,"line":213},"ztjalali_ch_arabic_to_persian",40,{"type":154,"name":196,"callback":212,"file":181,"line":215},41,{"type":154,"name":203,"callback":212,"file":181,"line":217},42,{"type":154,"name":206,"callback":212,"file":181,"line":219},44,{"type":154,"name":209,"callback":212,"file":181,"line":221},45,{"type":154,"name":223,"callback":197,"file":181,"line":224},"the_title",50,{"type":154,"name":226,"callback":197,"file":181,"line":227},"the_content",53,{"type":154,"name":229,"callback":197,"file":181,"line":230},"the_excerpt",56,{"type":154,"name":232,"callback":197,"file":181,"line":233},"comment_text",59,{"type":154,"name":226,"callback":212,"file":181,"line":235},63,{"type":154,"name":223,"callback":212,"file":181,"line":237},64,{"type":154,"name":229,"callback":212,"file":181,"line":239},65,{"type":154,"name":232,"callback":212,"file":181,"line":241},66,{"type":154,"name":243,"callback":197,"file":181,"line":244},"comments_number",71,{"type":154,"name":246,"callback":197,"file":181,"line":247},"wp_list_categories",75,{"type":154,"name":246,"callback":212,"file":181,"line":148},{"type":154,"name":250,"callback":251,"priority":157,"file":181,"line":152},"wp_title","ztjalali_ch_archive_title",{"type":140,"name":253,"callback":254,"file":255,"line":256},"widgets_init","register_ztjalali_archive","widget\\widget_archive.php",128,{"type":140,"name":253,"callback":258,"file":259,"line":260},"register_ztjalali_calendar","widget\\widget_calendar.php",60,{"type":140,"name":262,"callback":263,"file":264,"line":265},"upgrader_process_complete","ztjalali_updater","wp-jalali-init.php",61,{"type":140,"name":267,"callback":268,"file":264,"line":269},"admin_enqueue_scripts","ztjalali_reg_admin_css_and_js",139,{"type":140,"name":271,"callback":272,"priority":273,"file":264,"line":274},"admin_print_styles-plugin-editor.php","ztjalali_reg_theme_editor_css_and_js",11,160,{"type":140,"name":276,"callback":272,"priority":273,"file":264,"line":277},"admin_print_styles-theme-editor.php",161,{"type":154,"name":279,"callback":280,"priority":157,"file":264,"line":281},"login_headertitle","ztjalali_login_text",175,[],[],[],[],{"dangerousFunctions":287,"sqlUsage":288,"outputEscaping":312,"fileOperations":27,"externalRequests":27,"nonceChecks":32,"capabilityChecks":27,"bundledLibraries":388},[],{"prepared":289,"raw":290,"locations":291},4,9,[292,295,297,299,301,304,307,308,310],{"file":255,"line":293,"context":294},141,"$wpdb->get_results() with variable interpolation",{"file":255,"line":296,"context":294},179,{"file":255,"line":298,"context":294},225,{"file":255,"line":300,"context":294},258,{"file":259,"line":302,"context":303},133,"$wpdb->get_var() with variable interpolation",{"file":259,"line":305,"context":306},155,"$wpdb->get_row() with variable interpolation",{"file":259,"line":277,"context":306},{"file":259,"line":309,"context":294},227,{"file":259,"line":311,"context":294},245,{"escaped":273,"rawEcho":224,"locations":313},[314,318,320,322,324,325,326,327,328,330,332,333,335,336,337,339,341,342,343,345,346,347,348,349,350,351,352,353,354,356,357,359,360,362,364,366,368,370,371,373,374,375,377,378,379,380,381,383,384,386],{"file":315,"line":316,"context":317},"inc\\wp-jalali-admin-option.php",12,"raw output",{"file":143,"line":319,"context":317},97,{"file":321,"line":204,"context":317},"inc\\wp-jalali-help-page.php",{"file":321,"line":323,"context":317},199,{"file":255,"line":47,"context":317},{"file":255,"line":207,"context":317},{"file":255,"line":207,"context":317},{"file":255,"line":207,"context":317},{"file":255,"line":329,"context":317},38,{"file":255,"line":331,"context":317},39,{"file":255,"line":331,"context":317},{"file":255,"line":334,"context":317},43,{"file":255,"line":219,"context":317},{"file":255,"line":219,"context":317},{"file":255,"line":338,"context":317},48,{"file":255,"line":340,"context":317},49,{"file":255,"line":340,"context":317},{"file":255,"line":227,"context":317},{"file":255,"line":344,"context":317},54,{"file":255,"line":344,"context":317},{"file":255,"line":233,"context":317},{"file":255,"line":265,"context":317},{"file":255,"line":265,"context":317},{"file":255,"line":265,"context":317},{"file":255,"line":239,"context":317},{"file":255,"line":241,"context":317},{"file":255,"line":241,"context":317},{"file":255,"line":244,"context":317},{"file":255,"line":355,"context":317},72,{"file":255,"line":355,"context":317},{"file":255,"line":358,"context":317},108,{"file":255,"line":170,"context":317},{"file":255,"line":361,"context":317},120,{"file":255,"line":363,"context":317},172,{"file":255,"line":365,"context":317},213,{"file":255,"line":367,"context":317},249,{"file":255,"line":369,"context":317},263,{"file":259,"line":13,"context":317},{"file":259,"line":372,"context":317},23,{"file":259,"line":372,"context":317},{"file":259,"line":372,"context":317},{"file":259,"line":376,"context":317},27,{"file":259,"line":201,"context":317},{"file":259,"line":201,"context":317},{"file":259,"line":340,"context":317},{"file":259,"line":224,"context":317},{"file":259,"line":382,"context":317},52,{"file":259,"line":361,"context":317},{"file":259,"line":385,"context":317},317,{"file":264,"line":387,"context":317},187,[],[390,408],{"entryPoint":391,"graph":392,"unsanitizedCount":27,"severity":407},"ztjalali_admin_save_option_page_fn (inc\\wp-jalali-admin.php:35)",{"nodes":393,"edges":404},[394,398],{"id":395,"type":396,"label":397,"file":143,"line":241},"n0","source","$_POST",{"id":399,"type":400,"label":401,"file":143,"line":402,"wp_function":403},"n1","sink","update_option() [Settings Manipulation]",68,"update_option",[405],{"from":395,"to":399,"sanitized":406},true,"low",{"entryPoint":409,"graph":410,"unsanitizedCount":27,"severity":407},"\u003Cwp-jalali-admin> (inc\\wp-jalali-admin.php:0)",{"nodes":411,"edges":414},[412,413],{"id":395,"type":396,"label":397,"file":143,"line":241},{"id":399,"type":400,"label":401,"file":143,"line":402,"wp_function":403},[415],{"from":395,"to":399,"sanitized":406},{"summary":417,"deductions":418},"The wp-jalali plugin version 5.0.1 demonstrates a generally strong security posture based on the provided static analysis. The absence of any recorded vulnerabilities, including critical or high severity ones, is a significant positive indicator. Furthermore, the plugin exhibits good practices by having no identified AJAX handlers, REST API routes, shortcodes, or cron events that are directly exposed without authentication or permission checks, resulting in a zero attack surface.  The lack of dangerous functions and external HTTP requests also contributes to its secure design.\n\nHowever, there are areas for improvement. The relatively low percentage of SQL queries using prepared statements (31%) and the even lower percentage of properly escaped outputs (18%) present potential risks.  While no taint flows were found with unsanitized paths, these weaknesses could be exploited if an attacker could inject malicious data that bypasses existing, albeit minimal, input validation.  The presence of only one nonce check across the entire codebase also suggests a potential lack of robust protection against CSRF attacks, especially if the plugin were to introduce new features with user-interactive elements in the future.\n\nIn conclusion, wp-jalali v5.0.1 appears to be a relatively secure plugin due to its limited attack surface and clean vulnerability history. The primary concerns lie in the insufficient use of prepared statements for SQL queries and the lack of comprehensive output escaping, which could be exploited under specific conditions. The minimal number of nonce checks also warrants attention. Despite these weaknesses, the absence of any known exploits or vulnerabilities paints a picture of a plugin that prioritizes security, but can still benefit from hardening its data handling practices.",[419,422,425],{"reason":420,"points":421},"SQL queries not using prepared statements",10,{"reason":423,"points":424},"Low percentage of properly escaped outputs",8,{"reason":426,"points":427},"Limited nonce checks",5,"2026-03-16T17:34:42.619Z",{"wat":430,"direct":441},{"assetPaths":431,"generatorPatterns":435,"scriptPaths":436,"versionParams":437},[432,433,434],"\u002Fwp-content\u002Fplugins\u002Fwp-jalali\u002Fassets\u002Fcss\u002Fwp-jalali-admin.css","\u002Fwp-content\u002Fplugins\u002Fwp-jalali\u002Fassets\u002Fjs\u002Fwp-jalali-admin.js","\u002Fwp-content\u002Fplugins\u002Fwp-jalali\u002Fassets\u002Fjs\u002Fwp-jalali-frontend.js",[],[433,434],[438,439,440],"\u002Fwp-content\u002Fplugins\u002Fwp-jalali\u002Fassets\u002Fcss\u002Fwp-jalali-admin.css?ver=","\u002Fwp-content\u002Fplugins\u002Fwp-jalali\u002Fassets\u002Fjs\u002Fwp-jalali-admin.js?ver=","\u002Fwp-content\u002Fplugins\u002Fwp-jalali\u002Fassets\u002Fjs\u002Fwp-jalali-frontend.js?ver=",{"cssClasses":442,"htmlComments":444,"htmlAttributes":445,"restEndpoints":447,"jsGlobals":448,"shortcodeOutput":450},[443],"ztjalali_admin_page",[],[446],"dashicons-ztjalali",[],[449],"window.ztjalali_opts",[]]