[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLMIWfuBDTh3Vply6Qv3t10QRykxA-E3a-Nh7PvuBFbg":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":38,"analysis":137,"fingerprints":302},"wp-minify-fix","WP Minify Fix","1.4.1","NodeCode","https:\u002F\u002Fprofiles.wordpress.org\u002Fnodecode\u002F","\u003Cp>This plugin is a fork of \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-minify\u002F\" rel=\"ugc\">WP Minify\u003C\u002Fa> to fix bugs and add features, because it has not been updated since 2012-6-4.\u003C\u002Fp>\n\u003Cp>This plugin integrates the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmrclay\u002Fminify\" rel=\"nofollow ugc\">Minify engine\u003C\u002Fa>\u003Cbr \u002F>\ninto your WordPress blog.  Once enabled, this plugin will combine and compress\u003Cbr \u002F>\nJS and CSS files to improve page load time.\u003C\u002Fp>\n\u003Ch4>What has been fixed?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Minify engine updated to version 2.1.7\u003C\u002Fli>\n\u003Cli>Cache interval option has been fixed\u003C\u002Fli>\n\u003Cli>Move CSS-@imports to the top of the output\u003C\u002Fli>\n\u003Cli>Bottom CSS- and JavaScript output fixed\u003C\u002Fli>\n\u003Cli>Support for script tags without \u003Ccode>type=\"text\u002Fjavascript\"\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Detection of protocol-relative URLs as external file (e.g. Google AdSense)\u003C\u002Fli>\n\u003Cli>New option for the HTML5 async attribute\u003C\u002Fli>\n\u003Cli>A separate JavaScript file in the footer is now possible\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How Does it Work?\u003C\u002Fh4>\n\u003Cp>WP Minify Fix grabs JS\u002FCSS files in your generated WordPress page and passes that\u003Cbr \u002F>\nlist to the Minify engine. The Minify engine then returns a consolidated,\u003Cbr \u002F>\nminified, and compressed script or style for WP Minify to reference in the\u003Cbr \u002F>\nWordPress header.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Easily integrate Minify into your WordPress blog.\u003C\u002Fli>\n\u003Cli>Minifies JavaScript, CSS, and HTML.\u003C\u002Fli>\n\u003Cli>Debug tools to help you debug your issues.\u003C\u002Fli>\n\u003Cli>Ability to include extra JS and CSS files for Minifying.\u003C\u002Fli>\n\u003Cli>Ability to exclude certain JS and CSS files for Minifying.\u003C\u002Fli>\n\u003Cli>Minified JS and CSS files can be placed wherever you want.\u003C\u002Fli>\n\u003Cli>Support for to minifying external files via caching.\u003C\u002Fli>\n\u003Cli>Ability to pass extra arguments to Minify engine.\u003C\u002Fli>\n\u003Cli>Expire headers for minified JS and CSS files.\u003C\u002Fli>\n\u003Cli>Detection and elimination of duplicate sources.\u003C\u002Fli>\n\u003Cli>Plugin hooks!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can also commit changes on our \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fnodecode\u002Fwp-minify-fix\" rel=\"nofollow ugc\">Github repository\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>All contents under the wp-minify-fix\u002Fmin\u002F directory is licensed under\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fwww.opensource.org\u002Flicenses\u002Fbsd-license.php\" rel=\"nofollow ugc\">New BSD License\u003C\u002Fa> (which is\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fwww.gnu.org\u002Fcopyleft\u002Fgpl.html\" rel=\"nofollow ugc\">GPL\u003C\u002Fa> compatible).  All other\u003Cbr \u002F>\ncontents within this package is licensed under GPLv3.\u003C\u002Fp>\n","[Fixed] This plugin uses the Minify engine to combine and compress JS and CSS files to improve page load time.",1000,73691,80,40,"2017-11-28T20:47:00.000Z","4.3.34","2.8","",[20,21,22,23,24],"css","html","javascript","js","minify","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-minify-fixed\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-minify-fix.1.4.1.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"nodecode",1,30,84,"2026-04-04T09:19:28.852Z",[39,57,79,100,120],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":49,"num_ratings":50,"last_updated":51,"tested_up_to":52,"requires_at_least":53,"requires_php":18,"tags":54,"homepage":55,"download_link":56,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-inline-js-converter","WP Fast Minify","1.5.1","sakaitaka","https:\u002F\u002Fprofiles.wordpress.org\u002Fskita45\u002F","\u003Cp>Compress HTML Code, And Converting Inline Script and Style To JavaScript and CSS Compressed File.\u003C\u002Fp>\n","Compress HTML Code, And Converting Inline Script and Style To JavaScript and CSS Compressed File.",10,6301,60,2,"2021-05-27T12:24:00.000Z","5.7.15","3.9",[20,21,22,23,24],"http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwp-inline-js-converter\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-inline-js-converter.1.5.1.zip",{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":67,"num_ratings":68,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":72,"tags":73,"homepage":75,"download_link":76,"security_score":77,"vuln_count":34,"unpatched_count":28,"last_vuln_date":78,"fetched_at":30},"wp-super-minify","WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript","2.0.1","Dipak C. Gajjar","https:\u002F\u002Fprofiles.wordpress.org\u002Fdipakcg\u002F","\u003Cp>\u003Cstrong>WP Super Minify automatically minifies, compresses, and caches HTML, CSS & JavaScript files (inline and individual) on demand to enhance website’s load speed.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Once activated, the plugin seamlessly compresses HTML, inline CSS, and JavaScript, reducing file sizes for faster page loading. This optimisation helps improve your site’s Google PageSpeed Insights and GTmetrix performance scores.\u003C\u002Fp>\n\u003Cp>Additionally, WP Super Minify minifies individual JavaScript and CSS files, ensuring they load correctly and are automatically updated whenever the original files are modified or added — no manual settings needed!\u003C\u002Fp>\n\u003Cp>Optimise your website effortlessly and deliver a faster, smoother experience to your visitors.\u003C\u002Fp>\n\u003Cp>To check whether this plugin works properly, simply view your site source or press Ctrl + U from your keyboard. In the end of the source, you should see message something like:\u003C\u002Fp>\n\u003Cp>*** Total size saved: 11.341% | Size before compression: 27104 bytes | Size after compression: 24030 bytes. ***\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Like this plugin? You’ll love my other plugin: \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-performance-score-booster\u002F\" rel=\"ugc\">WP Performance Score Booster\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>Development & Support\u003C\u002Fh4>\n\u003Cp>Follow the development of this plugin on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fdipakcg\u002Fwp-super-minify\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>P.S. It is always the best policy to open a \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fwp-super-minify\" rel=\"ugc\">support thread\u003C\u002Fa> first before posting any negative review.\u003C\u002Fp>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cp>A big shoutout to \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmrclay\u002Fminify\" rel=\"nofollow ugc\">Steve Clay\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmatthiasmullie\u002Fminify\" rel=\"nofollow ugc\">Matthias Mullie\u003C\u002Fa> for sharing their Minify libraries on GitHub. While these libraries are no longer actively maintained, their work has been invaluable, and I sincerely thank them.\u003C\u002Fp>\n","A lightweight plugin that automatically minifies, compresses, and caches HTML, CSS, and JavaScript on demand to improve your website’s load speed.",9000,357076,82,70,"2026-02-10T11:55:00.000Z","6.9.4","3.5","5.6",[74,20,21,22,24],"compress","https:\u002F\u002Fgithub.com\u002Fdipakcg\u002Fwp-super-minify","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-super-minify.2.0.1.zip",100,"2023-08-28 00:00:00",{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":87,"downloaded":88,"rating":36,"num_ratings":89,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":18,"tags":93,"homepage":98,"download_link":99,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"bwp-minify","Better WordPress Minify","1.3.3","Khang Minh","https:\u002F\u002Fprofiles.wordpress.org\u002Foddoneout\u002F","\u003Cp>Allows you to combine and minify your CSS and JS files to improve page load time. This plugin uses the PHP library \u003Ca href=\"http:\u002F\u002Fcode.google.com\u002Fp\u002Fminify\u002F\" rel=\"nofollow ugc\">Minify\u003C\u002Fa> and relies on WordPress’s enqueueing system rather than the output buffer, which respects the order of CSS and JS files as well as their dependencies. BWP Minify is very customizable and easy to use.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Useful resources to help you get started and make the most out of BWP Minify\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fbetterwp.net\u002Fwordpress-plugins\u002Fbwp-minify\u002F#usage\" rel=\"nofollow ugc\">Official Documentation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fbetterwp.net\u002Fwordpress-minify-javascript-css\u002F\" rel=\"nofollow ugc\">WordPress Minify Best Practices\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Some Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Uses enqueueing system of WordPress which improves compatibility with other plugins and themes\u003C\u002Fli>\n\u003Cli>Allows you to move enqueued files to desired locations (header, footer, oblivion, etc.) via a dedicated management page\u003C\u002Fli>\n\u003Cli>Allows you to change various Minify settings (cache directory, cache age, debug mode, etc.) directly in admin\u003C\u002Fli>\n\u003Cli>Allows you to use friendly Minify urls, such as \u003Ccode>http:\u002F\u002Fexample.com\u002Fpath\u002Fto\u002Fcache\u002Fsomestring.js\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Allows you to use CDN for minified contents, one CDN host for JS and one for CSS with SSL support\u003C\u002Fli>\n\u003Cli>Allows you to split long Minify strings into shorter ones\u003C\u002Fli>\n\u003Cli>Offers various way to add a cache buster to your minify string such as WordPress’s version, Theme’s version, Cache folder’s last modified timestap, etc.\u003C\u002Fli>\n\u003Cli>Supports script localization (\u003Ccode>wp_localize_script()\u003C\u002Fcode>)\u003C\u002Fli>\n\u003Cli>Supports inline styles\u003C\u002Fli>\n\u003Cli>Supports RTL stylesheets\u003C\u002Fli>\n\u003Cli>Supports media-specific stylesheets (e.g. ‘screen’, ‘print’, etc.)\u003C\u002Fli>\n\u003Cli>Supports conditional stylesheets (e.g. \u003Ccode>\u003C!--[if lt IE 7]>\u003C\u002Fcode>)\u003C\u002Fli>\n\u003Cli>Provides hooks for further customization\u003C\u002Fli>\n\u003Cli>WordPress Multi-site compatible\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Please don’t forget to rate this plugin \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fview\u002Fplugin-reviews\u002Fbwp-minify?filter=5\" rel=\"ugc\">5 shining stars\u003C\u002Fa> if you like it, thanks!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Get in touch\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Support is provided via \u003Ca href=\"http:\u002F\u002Fbetterwp.net\u002Fcommunity\u002F\" rel=\"nofollow ugc\">BetterWP.net Community\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Follow and contribute to development via \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FOddOneOut\u002FBetter-WordPress-Minify\" rel=\"nofollow ugc\">Github\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>You can also follow me on \u003Ca href=\"http:\u002F\u002Ftwitter.com\u002F0dd0ne0ut\" rel=\"nofollow ugc\">Twitter\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Check out \u003Ca href=\"http:\u002F\u002Ffeeds.feedburner.com\u002FBetterWPnet\" rel=\"nofollow ugc\">latest WordPress Tips and Ideas\u003C\u002Fa> from BetterWP.net.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Languages\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>English (default)\u003C\u002Fli>\n\u003Cli>Romanian (ro_RO) – Thanks to \u003Ca href=\"www.enjoyprepaid.com\" rel=\"nofollow ugc\">Luke Tyler, International Calling Cards\u003C\u002Fa>!\u003C\u002Fli>\n\u003Cli>Turkish (tr_TR) – Thanks to Hakan E\u003C\u002Fli>\n\u003Cli>French (fr_FR) – Thanks to Sebastien\u003C\u002Fli>\n\u003Cli>Italian (it_IT) – Thanks to Gabriele – http:\u002F\u002Fcookspot.it\u003C\u002Fli>\n\u003Cli>Spanish (es_ES) –  Thanks to Ruben Hernandez – http:\u002F\u002Fusitility.com\u002F\u003C\u002Fli>\n\u003Cli>Dutch (nl_NL) – Thanks to Martijn van Egmond\u003C\u002Fli>\n\u003Cli>German (de_DE) – Thanks to Matthias\u003C\u002Fli>\n\u003Cli>Serbo-Croatian (sr_RS) – Thanks to Borisa Djuraskovic – \u003Ca href=\"http:\u002F\u002Fwww.webhostinghub.com\u002F\" rel=\"nofollow ugc\">Web Hosting Hub\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Indonesian (id_ID) – Thanks to Nasrulhaq Muiz – http:\u002F\u002Fal-badar.net\u003C\u002Fli>\n\u003Cli>Russian (ru_RU) – Thanks to Эдуард Валеев\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Please \u003Ca href=\"http:\u002F\u002Fbetterwp.net\u002Fwordpress-tips\u002Fcreate-pot-file-using-poedit\u002F\" rel=\"nofollow ugc\">help translate\u003C\u002Fa> this plugin!\u003C\u002Fp>\n","Allows you to combine and minify your CSS and JS files to improve page load time.",8000,692951,137,"2017-11-28T05:12:00.000Z","4.0.38","3.1",[24,94,95,96,97],"minify-css","minify-javascript","minify-js","minify-stylesheet","http:\u002F\u002Fbetterwp.net\u002Fwordpress-plugins\u002Fbwp-minify\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbwp-minify.1.3.3.zip",{"slug":101,"name":102,"version":103,"author":104,"author_profile":105,"description":106,"short_description":107,"active_installs":108,"downloaded":109,"rating":77,"num_ratings":50,"last_updated":110,"tested_up_to":111,"requires_at_least":112,"requires_php":18,"tags":113,"homepage":118,"download_link":119,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wpc-insert-code","Insert Code by Angie Makes","1.2","Chris Baldelomar","https:\u002F\u002Fprofiles.wordpress.org\u002Fcbaldelomar\u002F","\u003Cp>This plugin makes it easy for you to add custom scripts to the head and footer sections of your site. A theme can also add theme support to enable the insert of custom code (HTML, Javascript, and CSS) at the top of a page, above header, below header, above content, and below content.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fhallie.angiemakes.com\u002Fad-spots\u002F\" rel=\"nofollow ugc\">Live Demo & Documentation\u003C\u002Fa>\u003C\u002Fp>\n","Easily insert HTML, Javascript, CSS, into the head and footer areas of your site.",900,26197,"2017-05-10T16:44:00.000Z","4.7.32","3.9.1",[21,114,115,116,117],"insert-css","insert-html","insert-javascript","insert-js","http:\u002F\u002Fangiemakes.com\u002Ffeminine-wordpress-blog-themes-women\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpc-insert-code.zip",{"slug":121,"name":122,"version":123,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":128,"downloaded":129,"rating":77,"num_ratings":50,"last_updated":130,"tested_up_to":131,"requires_at_least":132,"requires_php":18,"tags":133,"homepage":135,"download_link":136,"security_score":77,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"powered-minifier","Powered Minifier","1.7.8","neoslab","https:\u002F\u002Fprofiles.wordpress.org\u002Fneoslab\u002F","\u003Cp>Powered Minifier allow you to reduce your page load and increase your performance by minifying your HTML source along with all the CSS and JS code present in your markup.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>Good news, this plugin is free for everyone! Since it’s released under the GPL, you can use it free of charge on your personal or commercial site.\u003C\u002Fp>\n","Reduce your page load by minifying your HTML source along with all the CSS and JS code present in your markup.",300,17722,"2025-04-26T00:13:00.000Z","6.8.5","4.9",[20,21,23,24,134],"optimize","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpowered-minifier\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpowered-minifier.1.7.9.zip",{"attackSurface":138,"codeSignals":218,"taintFlows":263,"riskAssessment":290,"analyzedAt":301},{"hooks":139,"ajaxHandlers":208,"restRoutes":215,"shortcodes":216,"cronEvents":217,"entryPointCount":34,"unprotectedCount":28},[140,146,149,151,154,157,160,163,166,171,174,178,182,186,191,194,196,199,202,205],{"type":141,"name":142,"callback":143,"file":144,"line":145},"action","admin_notices","a_notify_version","common.php",18,{"type":141,"name":142,"callback":147,"file":144,"line":148},"anonymous",45,{"type":141,"name":142,"callback":147,"file":144,"line":150},59,{"type":141,"name":142,"callback":152,"file":144,"line":153},"a_notify_upgrade",157,{"type":141,"name":142,"callback":155,"file":144,"line":156},"a_notify_imported",181,{"type":141,"name":142,"callback":158,"file":144,"line":159},"a_notify_import_failed",183,{"type":141,"name":142,"callback":161,"file":144,"line":162},"a_notify_import_failed_syntax",186,{"type":141,"name":142,"callback":164,"file":144,"line":165},"a_notify_import_failed_missing",189,{"type":141,"name":167,"callback":168,"file":169,"line":170},"admin_init","a_register_scripts","wp-minify.php",57,{"type":141,"name":167,"callback":172,"file":169,"line":173},"a_register_styles",58,{"type":141,"name":175,"callback":176,"file":169,"line":177},"admin_head","a_check_version",61,{"type":141,"name":179,"callback":180,"file":169,"line":181},"admin_menu","a_menu",64,{"type":141,"name":183,"callback":184,"priority":34,"file":169,"line":185},"wp_footer","footer_placeholder",74,{"type":141,"name":187,"callback":188,"priority":189,"file":169,"line":190},"init","pre_content",99999,76,{"type":141,"name":183,"callback":192,"priority":189,"file":169,"line":193},"post_content",77,{"type":141,"name":183,"callback":195,"file":169,"line":13},"advertise",{"type":141,"name":142,"callback":197,"file":169,"line":198},"a_notify_updated",245,{"type":141,"name":142,"callback":200,"file":169,"line":201},"a_notify_cache_cleared",251,{"type":141,"name":142,"callback":203,"file":169,"line":204},"a_notify_upgraded",257,{"type":141,"name":142,"callback":206,"file":169,"line":207},"a_notify_reset",263,[209],{"action":210,"nopriv":211,"callback":212,"hasNonce":213,"hasCapCheck":211,"file":169,"line":214},"wpm",false,"a_ajax_handler",true,67,[],[],[],{"dangerousFunctions":219,"sqlUsage":220,"outputEscaping":222,"fileOperations":260,"externalRequests":34,"nonceChecks":261,"capabilityChecks":28,"bundledLibraries":262},[],{"prepared":28,"raw":28,"locations":221},[],{"escaped":223,"rawEcho":145,"locations":224},7,[225,227,228,230,232,234,236,238,240,242,244,246,248,250,252,254,256,258],{"file":144,"line":214,"context":226},"raw output",{"file":144,"line":68,"context":226},{"file":144,"line":229,"context":226},201,{"file":231,"line":190,"context":226},"min\\builder\\index.php",{"file":231,"line":233,"context":226},88,{"file":231,"line":235,"context":226},91,{"file":237,"line":145,"context":226},"options-generic.php",{"file":237,"line":239,"context":226},22,{"file":237,"line":241,"context":226},35,{"file":237,"line":243,"context":226},39,{"file":245,"line":34,"context":226},"options-sidebar.php",{"file":169,"line":247,"context":226},551,{"file":169,"line":249,"context":226},559,{"file":169,"line":251,"context":226},564,{"file":169,"line":253,"context":226},572,{"file":169,"line":255,"context":226},580,{"file":169,"line":257,"context":226},585,{"file":169,"line":259,"context":226},906,15,5,[],[264,282],{"entryPoint":265,"graph":266,"unsanitizedCount":34,"severity":281},"a_import_options (common.php:174)",{"nodes":267,"edges":279},[268,273],{"id":269,"type":270,"label":271,"file":144,"line":272},"n0","source","$_FILES",176,{"id":274,"type":275,"label":276,"file":144,"line":277,"wp_function":278},"n1","sink","update_option() [Settings Manipulation]",180,"update_option",[280],{"from":269,"to":274,"sanitized":211},"low",{"entryPoint":283,"graph":284,"unsanitizedCount":34,"severity":281},"\u003Ccommon> (common.php:0)",{"nodes":285,"edges":288},[286,287],{"id":269,"type":270,"label":271,"file":144,"line":272},{"id":274,"type":275,"label":276,"file":144,"line":277,"wp_function":278},[289],{"from":269,"to":274,"sanitized":211},{"summary":291,"deductions":292},"The wp-minify-fix v1.4.1 plugin exhibits a mixed security posture.  On the positive side, it demonstrates good practices by utilizing prepared statements for all SQL queries and performing nonce checks on its entry points. The vulnerability history is clean, with no recorded CVEs, suggesting a stable and well-maintained codebase. However, a significant concern arises from the static analysis results regarding output escaping and file operations.\n\nSpecifically, only 28% of identified output operations are properly escaped, leaving a substantial portion vulnerable to cross-site scripting (XSS) attacks if user-supplied data is involved. Furthermore, the plugin performs 15 file operations, and the taint analysis indicates two flows with unsanitized paths. While no critical or high-severity issues were flagged in the taint analysis, the presence of unsanitized paths in conjunction with file operations presents a potential avenue for arbitrary file read or write vulnerabilities. The absence of capability checks on its single AJAX handler is also a concern, as it means the functionality is accessible to unauthenticated users, potentially leading to unauthorized actions.\n\nIn conclusion, while the plugin's SQL handling and nonce checks are commendable, the low percentage of properly escaped output and the presence of unsanitized paths in file operations represent notable weaknesses. The lack of capability checks on the AJAX handler further amplifies the risk. These factors necessitate careful consideration and potential remediation to improve the plugin's overall security.",[293,296,299],{"reason":294,"points":295},"Low percentage of properly escaped output",8,{"reason":297,"points":298},"Unsanitized paths in taint flows (file operations)",12,{"reason":300,"points":295},"AJAX handler without capability checks","2026-03-16T19:10:37.361Z",{"wat":303,"direct":312},{"assetPaths":304,"generatorPatterns":307,"scriptPaths":308,"versionParams":309},[305,306],"\u002Fwp-content\u002Fplugins\u002Fwp-minify-fix\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fwp-minify-fix\u002Fjs\u002Fadmin-script.js",[],[306],[310,311],"wp-minify-fix\u002Fcss\u002Fstyle.css?ver=","wp-minify-fix\u002Fjs\u002Fadmin-script.js?ver=",{"cssClasses":313,"htmlComments":314,"htmlAttributes":327,"restEndpoints":331,"jsGlobals":332,"shortcodeOutput":335},[],[315,316,317,318,319,320,321,322,323,324,325,326],"\u003C!-- WPMINIFY -->","\u003C!-- END WPMINIFY -->","\u003C!-- WPMINIFY_CSS -->","\u003C!-- END WPMINIFY_CSS -->","\u003C!-- WPMINIFY_JS -->","\u003C!-- END WPMINIFY_JS -->","\u003C!-- WPMINIFY_HTML -->","\u003C!-- END WPMINIFY_HTML -->","\u003C!-- WPMINIFY_HEADER -->","\u003C!-- END WPMINIFY_HEADER -->","\u003C!-- WPMINIFY_FOOTER -->","\u003C!-- END WPMINIFY_FOOTER -->",[328,329,330],"data-wpm-id","data-wpm-css","data-wpm-js",[],[333,334],"wpMinify","wpm_async_loaded",[]]