[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmPyiidtS4l8CEX6oCWGH0rzhMuGKtfF_y89-3Yq_Qyc":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":6,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":35,"analysis":125,"fingerprints":517},"wp-mtg-helper","WP MtG-Helper","1.2.7","distractedBySquirrels","https:\u002F\u002Fprofiles.wordpress.org\u002Fbackseatsurfer\u002F","\u003Cp>The goal of this plugin is to help you writing articels about Magic: the Gathering like tournament reports or draft walkthroughs and reducing the time you need for posting decks and link cards to their picture.\u003Cbr \u002F>\nAll this stuff is taken care of by the plugin and that’s not the enf of it. MtG-Helper does not only link cards for you it also creates good looking deck lists, sealed pools and booster drafts.\u003Cbr \u002F>\nThe only thing you have to do is typ in the cards.\u003Cbr \u002F>\nIf you still not convinced, take a look at the screenshots.\u003C\u002Fp>\n\u003Cp>If your have any questions how to use the plugin take a look into the FAQ (or readme-file). If this doesn’t help, \u003Ca href=\"http:\u002F\u002Fwww.backseatsurfer.de\u002Ffeedback\u002F\" rel=\"nofollow ugc\">contact me\u003C\u002Fa>. Maybe I could help\u003C\u002Fp>\n\u003Ch4>Upgrading from older version to 1.0+\u003C\u002Fh4>\n\u003Cp>\u003Cem>To save yourself trouble deactivate the plugin and remove it from your wordpress instalation before upgrading to a newer version!\u003C\u002Fem>\u003C\u002Fp>\n","The goal of this plugin is to help you writing articels about Magic: the Gathering like tournament reports or draft walkthroughs and reducing the time …",10,6186,0,"2013-05-25T08:06:00.000Z","2.5","",[18,19,20,21,22],"deck","help","magic","magic-the-gathering","mtg","http:\u002F\u002Fwww.distractedbysquirrels.com\u002Fwork\u002F#work1178","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-mtg-helper.1.2.7.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"backseatsurfer",1,30,84,"2026-04-04T13:47:48.967Z",[36,59,73,89,109],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":33,"num_ratings":46,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":16,"tags":50,"homepage":54,"download_link":55,"security_score":56,"vuln_count":57,"unpatched_count":13,"last_vuln_date":58,"fetched_at":27},"magic-the-gathering-card-tooltips","Magic the Gathering Card Tooltips","3.8.0","grimdonkey","https:\u002F\u002Fprofiles.wordpress.org\u002Fgrimdonkey\u002F","\u003Cp>The plugin adds shortcodes that transform mtg card names and decks to provide a mouseover image. For cards use the [mtg_card][\u002Fmtg_card] shortcode (or the shortened version [c][\u002Fc]). When viewing the post, the card name will show up as a link to the card’s page on https:\u002F\u002Fdeckbox.org . Hovering over the link will show the card’s image in a tooltip.\u003C\u002Fp>\n\u003Cp>A similar tag can be used to quickly create deck listings: [mtg_deck][\u002Fmtg_deck] (or the shortened version [d][\u002Fd]). A deck listing should contain a list of cards and categories. All cards have a number before their name. All other lines are interpreted as category names. Do \u003Cem>not\u003C\u002Fem> include card numbers on the category name lines, they will automatically be computed and displayed by the plugin. A short example follows.\u003C\u002Fp>\n\u003Cp>The default style for displaying decks is a card listing with each card having a mouseover tooltip. This style can be changed to an embedded view, where the listing has a card image to the right of the deck. This can be toggled in the plugin settings for all decks, or specifically for a deck by setting the style attribute to the tag, as can be seen below.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[d title=\"Really Small Deck\" style=\"embedded\"]\n    Creatures\n    2 Bloodbraid Elf\n    4 Grizzly Bears\n\n    Spells\n    4 Lightning Bolt\n\n    Sideboard\n    4 Cultivate\n[\u002Fd]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>The screenshot section includes an image of the above deck listing.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Embedded Card Display\u003C\u002Fstrong>: Individual card shortcodes also support the embedded style, displaying the card image inline instead of as a tooltip:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[card style=\"embedded\"]Lightning Bolt[\u002Fcard]\n[c style=\"embedded\"]Tarmogoyf (FUT) 153[\u002Fc]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Arena Format Support\u003C\u002Fstrong>: You can now paste deck lists directly from MTG Arena (or other compatible exports – like Moxfield) with set codes and collector numbers:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[deck]\n4 Lightning Bolt (M10) 146\n4 Mountain (FIN)\n2 Snapcaster Mage\n[\u002Fdeck]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>The plugin will display only the card name and link to the specific printing when set code and number are provided. Set codes are case-insensitive. This format also works with the [card] shortcode: [card]Lightning Bolt (M10) 146[\u002Fcard]\u003C\u002Fp>\n","Easily transform Magic the Gathering card names into links that show the card image in a tooltip when hovering over them. You can also quickly create  …",100,11682,6,"2025-12-24T14:10:00.000Z","6.9.4","2.8.6",[51,52,21,22,53],"ccg","deckbox","tcg","https:\u002F\u002Fgithub.com\u002FSebastianZaha\u002Fwordpress_mtg_tooltips","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmagic-the-gathering-card-tooltips.3.8.0.zip",98,2,"2025-02-14 00:00:00",{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":11,"downloaded":67,"rating":44,"num_ratings":31,"last_updated":68,"tested_up_to":69,"requires_at_least":49,"requires_php":16,"tags":70,"homepage":71,"download_link":72,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"mtgpulse-magic-the-gathering-deckbox-plugin","MTGPulse deckbox embedding tool","1.0.3","perstilling","https:\u002F\u002Fprofiles.wordpress.org\u002Fperstilling\u002F","\u003Cp>The plugin adds any number of Magic: The Gathering deckboxes from mtgpulse.com to your wordpress site. The syntax for adding a deckbox is as follows:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[deckbox did=\"number\" size=\"small|normal\" width=\"number\" bgcolor=\"hexcolor\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cul>\n\u003Cli>did: Deck id from mtgpulse.com\u003C\u002Fli>\n\u003Cli>width: Width of the deckbox in pixels.\u003C\u002Fli>\n\u003Cli>size: small or normal (use small if width \u003C 800, normal if above). Difference is whether two or columns are used.\u003C\u002Fli>\n\u003Cli>bgcolor: the desired hex background color. For example FFFFFF for white.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For a custom decklist use the following syntax:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[deckboxcustom name=\"test deck\" size=\"small|normal\" width=\"number\" bgcolor=\"hexcolor\"]\n4 Glint Hawk Idol\n4 Origin Spellbomb\n4 Etched Champion\n4 Memnite\n4 Signal Pest\n4 Vault Skirge\n4 Glint Hawk\n1 Oblivion Ring\n4 Tempered Steel\n3 Dispatch\n4 Mox Opal\n9 Plains\n3 Gavony Township\n4 Inkmoth Nexus\n4 Razorverge Thicket\nSB:\n4 Shrine of Loyal Legions\n2 Spellskite\n4 Hero of Bladehold\n1 Oblivion Ring\n1 Celestial Purge\n1 Dispatch\n2 Mental Misstep\n[\u002Fdeckboxcustom]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Same meaning as above, but name is the deck name that will be displayed.\u003C\u002Fp>\n\u003Cp>For the three settings: size, width and color there is a settings page where you can apply the default value for these. This way you don’t have to specify these every time you use the deckbox.\u003C\u002Fp>\n","Facilitates embedding of MTGPulse.com deckboxes on your word press site",1844,"2012-02-07T17:29:00.000Z","3.3.2",[51,52,21,22,53],"http:\u002F\u002Fmtgpulse.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmtgpulse-magic-the-gathering-deckbox-plugin.zip",{"slug":74,"name":75,"version":76,"author":77,"author_profile":78,"description":79,"short_description":80,"active_installs":11,"downloaded":81,"rating":13,"num_ratings":13,"last_updated":82,"tested_up_to":83,"requires_at_least":84,"requires_php":16,"tags":85,"homepage":87,"download_link":88,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"mtg-tutorde-cardlinker","MtG-Tutor.de CardLinker","0.1","pascalkleindienst","https:\u002F\u002Fprofiles.wordpress.org\u002Fpascalkleindienst\u002F","\u003Cp>(English description below German version!)\u003C\u002Fp>\n\u003Ch4>DE\u003C\u002Fh4>\n\u003Cp>Dieses Plugin enthät zwei Shortcodes mit denen man ganz einfach Magic the Gathering Karten oder komplette Magic Decks oder Listen verlinken kann.\u003Cbr \u002F>\nDie Karten werden mithilfe von \u003Ca href=\"http:\u002F\u002Fwww.mtg-tutor.de\" title=\"Deine Magic Kartendatenbank mit Kombos und mehr\" rel=\"nofollow ugc\">MtG-Tutor\u003C\u002Fa> verlinkt.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Enthält Buttons für den Editor, um die Handhabung mit den Shortcodes zu vereinfachen\u003C\u002Fli>\n\u003Cli>Optional können Kartenbilder bei Karten oder Decks angezeigt werden, wenn man mit der Maus über die Kartennamen fährt\u003C\u002Fli>\n\u003Cli>Optional kann die Starthand-Wahrscheinlichkeit bei Karten in einem Deck angezeigt werden\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Feedback\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Ich bin jederzeit offen für Vorschläge und Korrekturen\u003C\u002Fli>\n\u003Cli>Kontakt via Website \u003Ca href=\"http:\u002F\u002Fwww.mtg-tutor.de\" title=\"Deine Magic Kartendatenbank mit Kombos und mehr\" rel=\"nofollow ugc\">MtG-Tutor\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Kontakt via Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fmtg_tutor\" rel=\"nofollow ugc\">@mtg_tutor\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Folge mir auf meiner \u003Ca href=\"http:\u002F\u002Fde-de.facebook.com\u002Fmtg_tutor\" rel=\"nofollow ugc\">Facebook-Seite\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Oder folge mir \u003Ca href=\"https:\u002F\u002Fplus.google.com\u002Fu\u002F0\u002F114000458757848852888\u002Fposts\" rel=\"nofollow ugc\">+MtG-Tutor\u003C\u002Fa> bei Google Plus\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>EN\u003C\u002Fh4>\n\u003Cp>This plugin contains two shortcodes, which can be used to link Magic the Gathering cards or complete Magic Decks.\u003Cbr \u002F>\nThe cards will be linked to \u003Ca href=\"http:\u002F\u002Fwww.mtg-tutor.de\" rel=\"nofollow ugc\">MtG-Tutor\u003C\u002Fa>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Contains buttons for the WordPress Editor\u003C\u002Fli>\n\u003Cli>Optional mouseover card images\u003C\u002Fli>\n\u003Cli>Optional starting-hand probabillity\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Feedback\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>I am open for your suggestions and feedback \u003C\u002Fli>\n\u003Cli>Tweet me \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fmtg_tutor\" rel=\"nofollow ugc\">@mtg_tutor\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Follow me on \u003Ca href=\"http:\u002F\u002Fde-de.facebook.com\u002Fmtg_tutor\" rel=\"nofollow ugc\">my Facebook page\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Or follow me on \u003Ca href=\"https:\u002F\u002Fplus.google.com\u002Fu\u002F0\u002F114000458757848852888\u002Fposts\" rel=\"nofollow ugc\">+MtG-Tutor\u003C\u002Fa> on Google Plus\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin provides some shortcode to easily link MtG Cards and Decks! - Ein Plugin mit dem man ganz leicht MtG Karten und Decks verlinken kann!",1587,"2012-10-07T17:23:00.000Z","3.4.2","3.0.1",[21,22,53,86],"trading-cards","http:\u002F\u002Fwww.mtg-tutor.de\u002Fgadgets","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmtg-tutorde-cardlinker.0.1.zip",{"slug":90,"name":91,"version":92,"author":93,"author_profile":94,"description":95,"short_description":96,"active_installs":97,"downloaded":98,"rating":13,"num_ratings":13,"last_updated":99,"tested_up_to":48,"requires_at_least":100,"requires_php":101,"tags":102,"homepage":107,"download_link":108,"security_score":44,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"browsealoud","ReachDeck Toolbar","1.11.8","texthelp","https:\u002F\u002Fprofiles.wordpress.org\u002Ftexthelp\u002F","\u003Ch4>Add speech, reading and translation support to your website or blog with the ReachDeck Toolbar\u003C\u002Fh4>\n\u003Cp>Want to provide a better experience for your website or blog visitors?\u003C\u002Fp>\n\u003Cp>Millions of people can’t understand the information on your website or blog site – they can with the ReachDeck Toolbar.\u003C\u002Fp>\n\u003Cp>Our innovative support software, ReachDeck, helps to reduce the barriers between your content and your audiences by adding speech, reading and translation to your website or blog site.  This support helps you reach a much wider audience – such as those with dyslexia, low literacy, mild visual impairments or where English is a second language.\u003C\u002Fp>\n\u003Ch4>What does the ReachDeck Toolbar do?\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Text-to-speech\u003C\u002Fstrong>: makes online services and information more accessible with a choice of read aloud voices, different reading speeds and highlighters to enhance understanding.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Translation\u003C\u002Fstrong>: translates web pages into 99 languages and can read aloud 40 of the most commonly used languages including Spanish and Chinese.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>MP3 Creation\u003C\u002Fstrong>: instantly converts online content into audio versions for easy offline listening.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Screen Masking\u003C\u002Fstrong>: blocks online clutter – letting the user focus on the text they want to read.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Web Page Simplifier\u003C\u002Fstrong>: removes distracting content creating a simple format for online information – ideal for those with dyslexia, cognitive or learning disabilities.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Custom Settings\u003C\u002Fstrong>: users can tailor the settings to suit their individual needs and preferences.\u003C\u002Fp>\n\u003Ch4>What our customers say\u003C\u002Fh4>\n\u003Cp>\u003Cem>Student Loans Company, UK\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>“Identifying ways of improving digital accessibility for our customers is of the utmost importance to us and the ReachDeck Toolbar is an ideal solution as it is simple to use, free to the customer, and also compatible with mobile devices.”\u003C\u002Fp>\n\u003Cp>\u003Cem>Elections Nova Scotia, Canada\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>“Adding the ReachDeck Toolbar to our websites is reflective of our commitment to accessibility in every aspect of Nova Scotia elections, particularly for those persons and groups most likely to experience difficulty in exercising their democratic rights.”\u003C\u002Fp>\n","Websites made more accessible with easy speech, reading and translation tools.",200,17230,"2026-02-26T13:46:00.000Z","6.2","8.2",[103,104,105,93,106],"accessibility","reachdeck","speech","web","https:\u002F\u002Fwww.texthelp.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbrowsealoud.zip",{"slug":110,"name":111,"version":76,"author":112,"author_profile":113,"description":114,"short_description":115,"active_installs":32,"downloaded":116,"rating":44,"num_ratings":57,"last_updated":117,"tested_up_to":118,"requires_at_least":119,"requires_php":16,"tags":120,"homepage":16,"download_link":124,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"mana-symbols","Mana Symbols","Tim Glushkov","https:\u002F\u002Fprofiles.wordpress.org\u002Fbeatrepeat\u002F","\u003Cp>Mana Symbols replaces shortcodes with Magic: The Gathering mana symbols.\u003C\u002Fp>\n\u003Cp>Text in curly braces will be replaced with appropriate mana symbols. For example: {3W}, {T}, {R\u002FW}, {2\u002FW2\u002FW2\u002FW}, {1WP}.\u003C\u002Fp>\n\u003Cp>Magic: The Gathering, the mana symbols, the tap symbol and all other related images are owned by Wizards of the Coast.\u003C\u002Fp>\n","Mana Symbols replaces shortcodes with Magic: The Gathering mana symbols.",2147,"2013-03-22T14:41:00.000Z","3.5.2","3.2",[20,121,22,122,123],"mana","replace","symbols","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmana-symbols.0.1.zip",{"attackSurface":126,"codeSignals":182,"taintFlows":380,"riskAssessment":508,"analyzedAt":516},{"hooks":127,"ajaxHandlers":174,"restRoutes":175,"shortcodes":176,"cronEvents":181,"entryPointCount":57,"unprotectedCount":13},[128,134,138,143,146,149,153,157,160,164,166,167,168,169,170,171,172,173],{"type":129,"name":130,"callback":131,"file":132,"line":133},"action","admin_menu","add_mtgh_admin_page","js\\mtg_helper.php",50,{"type":129,"name":135,"callback":136,"file":132,"line":137},"init","mtgh_init",53,{"type":139,"name":140,"callback":141,"file":132,"line":142},"filter","the_content","mtgh_list",55,{"type":139,"name":140,"callback":144,"file":132,"line":145},"mtgh_card",56,{"type":139,"name":147,"callback":144,"file":132,"line":148},"comment_text",58,{"type":139,"name":150,"callback":151,"priority":11,"file":132,"line":152},"plugin_action_links","mtgh_filter_plugin_actions",76,{"type":129,"name":154,"callback":155,"file":132,"line":156},"wp_head","init_css",179,{"type":129,"name":154,"callback":158,"file":132,"line":159},"init_header",181,{"type":129,"name":161,"callback":162,"file":132,"line":163},"admin_footer","mtg_add_buttons",206,{"type":129,"name":130,"callback":131,"file":165,"line":133},"mtg_helper.php",{"type":129,"name":135,"callback":136,"file":165,"line":137},{"type":139,"name":140,"callback":141,"file":165,"line":142},{"type":139,"name":140,"callback":144,"file":165,"line":145},{"type":139,"name":147,"callback":144,"file":165,"line":148},{"type":139,"name":150,"callback":151,"priority":11,"file":165,"line":152},{"type":129,"name":154,"callback":155,"file":165,"line":156},{"type":129,"name":154,"callback":158,"file":165,"line":159},{"type":129,"name":161,"callback":162,"file":165,"line":163},[],[],[177,180],{"tag":178,"callback":141,"file":132,"line":179},"cardlist",54,{"tag":178,"callback":141,"file":165,"line":179},[],{"dangerousFunctions":183,"sqlUsage":184,"outputEscaping":202,"fileOperations":13,"externalRequests":13,"nonceChecks":377,"capabilityChecks":378,"bundledLibraries":379},[],{"prepared":13,"raw":185,"locations":186},8,[187,191,193,195,197,199,200,201],{"file":188,"line":189,"context":190},"js\\mtg_helper_options.php",12,"$wpdb->query() with variable interpolation",{"file":188,"line":192,"context":190},37,{"file":188,"line":194,"context":190},45,{"file":188,"line":196,"context":190},1344,{"file":198,"line":189,"context":190},"mtg_helper_options.php",{"file":198,"line":192,"context":190},{"file":198,"line":194,"context":190},{"file":198,"line":196,"context":190},{"escaped":13,"rawEcho":203,"locations":204},114,[205,208,210,212,214,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,245,247,249,251,253,255,257,259,261,263,265,267,269,271,273,275,277,279,281,283,285,287,289,291,293,295,297,299,301,303,305,307,309,311,313,315,317,319,320,321,322,323,324,325,326,327,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376],{"file":132,"line":206,"context":207},129,"raw output",{"file":132,"line":209,"context":207},191,{"file":132,"line":211,"context":207},192,{"file":132,"line":213,"context":207},193,{"file":132,"line":97,"context":207},{"file":132,"line":216,"context":207},250,{"file":132,"line":218,"context":207},358,{"file":132,"line":220,"context":207},363,{"file":222,"line":46,"context":207},"js\\mtg_helper_cardfinder.php",{"file":188,"line":224,"context":207},66,{"file":188,"line":226,"context":207},316,{"file":188,"line":228,"context":207},366,{"file":188,"line":230,"context":207},378,{"file":188,"line":232,"context":207},388,{"file":188,"line":234,"context":207},397,{"file":188,"line":236,"context":207},406,{"file":188,"line":238,"context":207},418,{"file":188,"line":240,"context":207},420,{"file":188,"line":242,"context":207},426,{"file":188,"line":244,"context":207},434,{"file":188,"line":246,"context":207},459,{"file":188,"line":248,"context":207},480,{"file":188,"line":250,"context":207},501,{"file":188,"line":252,"context":207},503,{"file":188,"line":254,"context":207},509,{"file":188,"line":256,"context":207},511,{"file":188,"line":258,"context":207},517,{"file":188,"line":260,"context":207},572,{"file":188,"line":262,"context":207},593,{"file":188,"line":264,"context":207},615,{"file":188,"line":266,"context":207},623,{"file":188,"line":268,"context":207},678,{"file":188,"line":270,"context":207},761,{"file":188,"line":272,"context":207},805,{"file":188,"line":274,"context":207},830,{"file":188,"line":276,"context":207},847,{"file":188,"line":278,"context":207},854,{"file":188,"line":280,"context":207},868,{"file":188,"line":282,"context":207},881,{"file":188,"line":284,"context":207},887,{"file":188,"line":286,"context":207},896,{"file":188,"line":288,"context":207},903,{"file":188,"line":290,"context":207},920,{"file":188,"line":292,"context":207},934,{"file":188,"line":294,"context":207},939,{"file":188,"line":296,"context":207},942,{"file":188,"line":298,"context":207},945,{"file":188,"line":300,"context":207},948,{"file":188,"line":302,"context":207},955,{"file":188,"line":304,"context":207},958,{"file":188,"line":306,"context":207},961,{"file":188,"line":308,"context":207},974,{"file":188,"line":310,"context":207},975,{"file":188,"line":312,"context":207},995,{"file":188,"line":314,"context":207},1008,{"file":188,"line":316,"context":207},1014,{"file":188,"line":318,"context":207},1109,{"file":165,"line":206,"context":207},{"file":165,"line":209,"context":207},{"file":165,"line":211,"context":207},{"file":165,"line":213,"context":207},{"file":165,"line":97,"context":207},{"file":165,"line":216,"context":207},{"file":165,"line":218,"context":207},{"file":165,"line":220,"context":207},{"file":328,"line":46,"context":207},"mtg_helper_cardfinder.php",{"file":198,"line":224,"context":207},{"file":198,"line":226,"context":207},{"file":198,"line":228,"context":207},{"file":198,"line":230,"context":207},{"file":198,"line":232,"context":207},{"file":198,"line":234,"context":207},{"file":198,"line":236,"context":207},{"file":198,"line":238,"context":207},{"file":198,"line":240,"context":207},{"file":198,"line":242,"context":207},{"file":198,"line":244,"context":207},{"file":198,"line":246,"context":207},{"file":198,"line":248,"context":207},{"file":198,"line":250,"context":207},{"file":198,"line":252,"context":207},{"file":198,"line":254,"context":207},{"file":198,"line":256,"context":207},{"file":198,"line":258,"context":207},{"file":198,"line":260,"context":207},{"file":198,"line":262,"context":207},{"file":198,"line":264,"context":207},{"file":198,"line":266,"context":207},{"file":198,"line":268,"context":207},{"file":198,"line":270,"context":207},{"file":198,"line":272,"context":207},{"file":198,"line":274,"context":207},{"file":198,"line":276,"context":207},{"file":198,"line":278,"context":207},{"file":198,"line":280,"context":207},{"file":198,"line":282,"context":207},{"file":198,"line":284,"context":207},{"file":198,"line":286,"context":207},{"file":198,"line":288,"context":207},{"file":198,"line":290,"context":207},{"file":198,"line":292,"context":207},{"file":198,"line":294,"context":207},{"file":198,"line":296,"context":207},{"file":198,"line":298,"context":207},{"file":198,"line":300,"context":207},{"file":198,"line":302,"context":207},{"file":198,"line":304,"context":207},{"file":198,"line":306,"context":207},{"file":198,"line":308,"context":207},{"file":198,"line":310,"context":207},{"file":198,"line":312,"context":207},{"file":198,"line":314,"context":207},{"file":198,"line":316,"context":207},{"file":198,"line":318,"context":207},14,16,[],[381,414,443,460,474,491],{"entryPoint":382,"graph":383,"unsanitizedCount":13,"severity":413},"\u003Cmtg_helper> (js\\mtg_helper.php:0)",{"nodes":384,"edges":408},[385,390,396,400,402,404],{"id":386,"type":387,"label":388,"file":132,"line":389},"n0","source","$_GET",115,{"id":391,"type":392,"label":393,"file":132,"line":394,"wp_function":395},"n1","sink","header() [Header Injection]",127,"header",{"id":397,"type":387,"label":398,"file":132,"line":399},"n2","$_GET['resource']",128,{"id":401,"type":392,"label":393,"file":132,"line":399,"wp_function":395},"n3",{"id":403,"type":387,"label":388,"file":132,"line":389},"n4",{"id":405,"type":392,"label":406,"file":132,"line":206,"wp_function":407},"n5","echo() [XSS]","echo",[409,411,412],{"from":386,"to":391,"sanitized":410},true,{"from":397,"to":401,"sanitized":410},{"from":403,"to":405,"sanitized":410},"low",{"entryPoint":415,"graph":416,"unsanitizedCount":13,"severity":413},"mtgh_admin_page (js\\mtg_helper_options.php:70)",{"nodes":417,"edges":438},[418,421,425,428,429,431,432,436],{"id":386,"type":387,"label":419,"file":188,"line":420},"$_POST (x3)",93,{"id":391,"type":392,"label":422,"file":188,"line":423,"wp_function":424},"update_option() [Settings Manipulation]",94,"update_option",{"id":397,"type":387,"label":426,"file":188,"line":427},"$_POST['mtgh_align']",150,{"id":401,"type":392,"label":422,"file":188,"line":427,"wp_function":424},{"id":403,"type":387,"label":430,"file":188,"line":226},"$_SERVER['REQUEST_URI'] (x7)",{"id":405,"type":392,"label":406,"file":188,"line":226,"wp_function":407},{"id":433,"type":387,"label":434,"file":188,"line":435},"n6","$_POST",301,{"id":437,"type":392,"label":406,"file":188,"line":232,"wp_function":407},"n7",[439,440,441,442],{"from":386,"to":391,"sanitized":410},{"from":397,"to":401,"sanitized":410},{"from":403,"to":405,"sanitized":410},{"from":433,"to":437,"sanitized":410},{"entryPoint":444,"graph":445,"unsanitizedCount":13,"severity":413},"\u003Cmtg_helper_options> (js\\mtg_helper_options.php:0)",{"nodes":446,"edges":455},[447,448,449,450,451,452,453,454],{"id":386,"type":387,"label":419,"file":188,"line":420},{"id":391,"type":392,"label":422,"file":188,"line":423,"wp_function":424},{"id":397,"type":387,"label":426,"file":188,"line":427},{"id":401,"type":392,"label":422,"file":188,"line":427,"wp_function":424},{"id":403,"type":387,"label":430,"file":188,"line":226},{"id":405,"type":392,"label":406,"file":188,"line":226,"wp_function":407},{"id":433,"type":387,"label":434,"file":188,"line":435},{"id":437,"type":392,"label":406,"file":188,"line":232,"wp_function":407},[456,457,458,459],{"from":386,"to":391,"sanitized":410},{"from":397,"to":401,"sanitized":410},{"from":403,"to":405,"sanitized":410},{"from":433,"to":437,"sanitized":410},{"entryPoint":461,"graph":462,"unsanitizedCount":13,"severity":413},"\u003Cmtg_helper> (mtg_helper.php:0)",{"nodes":463,"edges":470},[464,465,466,467,468,469],{"id":386,"type":387,"label":388,"file":165,"line":389},{"id":391,"type":392,"label":393,"file":165,"line":394,"wp_function":395},{"id":397,"type":387,"label":398,"file":165,"line":399},{"id":401,"type":392,"label":393,"file":165,"line":399,"wp_function":395},{"id":403,"type":387,"label":388,"file":165,"line":389},{"id":405,"type":392,"label":406,"file":165,"line":206,"wp_function":407},[471,472,473],{"from":386,"to":391,"sanitized":410},{"from":397,"to":401,"sanitized":410},{"from":403,"to":405,"sanitized":410},{"entryPoint":475,"graph":476,"unsanitizedCount":13,"severity":413},"mtgh_admin_page (mtg_helper_options.php:70)",{"nodes":477,"edges":486},[478,479,480,481,482,483,484,485],{"id":386,"type":387,"label":419,"file":198,"line":420},{"id":391,"type":392,"label":422,"file":198,"line":423,"wp_function":424},{"id":397,"type":387,"label":426,"file":198,"line":427},{"id":401,"type":392,"label":422,"file":198,"line":427,"wp_function":424},{"id":403,"type":387,"label":430,"file":198,"line":226},{"id":405,"type":392,"label":406,"file":198,"line":226,"wp_function":407},{"id":433,"type":387,"label":434,"file":198,"line":435},{"id":437,"type":392,"label":406,"file":198,"line":232,"wp_function":407},[487,488,489,490],{"from":386,"to":391,"sanitized":410},{"from":397,"to":401,"sanitized":410},{"from":403,"to":405,"sanitized":410},{"from":433,"to":437,"sanitized":410},{"entryPoint":492,"graph":493,"unsanitizedCount":13,"severity":413},"\u003Cmtg_helper_options> (mtg_helper_options.php:0)",{"nodes":494,"edges":503},[495,496,497,498,499,500,501,502],{"id":386,"type":387,"label":419,"file":198,"line":420},{"id":391,"type":392,"label":422,"file":198,"line":423,"wp_function":424},{"id":397,"type":387,"label":426,"file":198,"line":427},{"id":401,"type":392,"label":422,"file":198,"line":427,"wp_function":424},{"id":403,"type":387,"label":430,"file":198,"line":226},{"id":405,"type":392,"label":406,"file":198,"line":226,"wp_function":407},{"id":433,"type":387,"label":434,"file":198,"line":435},{"id":437,"type":392,"label":406,"file":198,"line":232,"wp_function":407},[504,505,506,507],{"from":386,"to":391,"sanitized":410},{"from":397,"to":401,"sanitized":410},{"from":403,"to":405,"sanitized":410},{"from":433,"to":437,"sanitized":410},{"summary":509,"deductions":510},"The wp-mtg-helper v1.2.7 plugin exhibits a mixed security posture. On the positive side, it has no known vulnerabilities in its history and demonstrates good use of nonce and capability checks, indicating an awareness of security principles. The absence of critical or high-severity taint flows and dangerous functions further contributes to a seemingly robust internal code structure regarding common exploit vectors.\n\nHowever, significant concerns arise from the static analysis. The plugin executes 8 SQL queries, none of which utilize prepared statements. This is a major security risk, as it opens the door to SQL injection vulnerabilities if any of the data feeding these queries originates from user input without proper sanitization. Furthermore, out of 114 output operations, a concerning 0% are properly escaped. This lack of output escaping is a critical flaw that could lead to cross-site scripting (XSS) vulnerabilities, allowing attackers to inject malicious scripts into the website.\n\nWhile the plugin has no recorded vulnerabilities, the identified static analysis issues represent significant potential weaknesses. The absence of past CVEs might indicate diligent patching by developers or simply that the plugin hasn't been a target, but it does not negate the inherent risks in the current codebase. The plugin's strength lies in its entry point management and use of checks, but its weakness is in fundamental data handling and output sanitization.",[511,514],{"reason":512,"points":513},"SQL queries without prepared statements",20,{"reason":515,"points":513},"Output escaping not properly implemented","2026-03-17T00:11:29.876Z",{"wat":518,"direct":528},{"assetPaths":519,"generatorPatterns":523,"scriptPaths":524,"versionParams":525},[520,521,522],"\u002Fwp-content\u002Fplugins\u002Fwp-mtg-helper\u002Fjs\u002Fmtgh.js","\u002Fwp-content\u002Fplugins\u002Fwp-mtg-helper\u002Fjs\u002Fjquery.dimensions.min.js","\u002Fwp-content\u002Fplugins\u002Fwp-mtg-helper\u002Fcss\u002Fmtgh.css",[],[520,521],[526,527],"wp-mtg-helper\u002Fjs\u002Fmtgh.js?ver=","wp-mtg-helper\u002Fjs\u002Fjquery.dimensions.min.js?ver=",{"cssClasses":529,"htmlComments":530,"htmlAttributes":531,"restEndpoints":532,"jsGlobals":533,"shortcodeOutput":534},[],[],[],[],[],[]]