[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPgg3WFt1la9wu8fJhoiepr5GJJD-gnAffw6Q152T6GQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":23,"download_link":24,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":35,"analysis":136,"fingerprints":295},"wp-multibyte-patch","WP Multibyte Patch","2.9.3","Seisuke Kuraishi","https:\u002F\u002Fprofiles.wordpress.org\u002Ftenpura\u002F","\u003Cp>Multibyte functionality enhancement for the WordPress Japanese package.\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Feastcoder.com\u002Fcode\u002Fwp-multibyte-patch\u002F\" title=\"Documentation in Japanese\" rel=\"nofollow ugc\">日本語の説明を読む\u003C\u002Fa>\u003C\u002Fp>\n","Multibyte functionality enhancement for the WordPress Japanese package.",1000000,7864798,100,24,"2025-12-01T21:45:00.000Z","6.9.4","5.2","",[20,21,22,4],"i18n","japanese","multibyte","https:\u002F\u002Feastcoder.com\u002Fcode\u002Fwp-multibyte-patch\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-multibyte-patch.2.9.3.zip",0,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":13,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"tenpura",1,30,94,"2026-04-04T05:02:17.805Z",[36,55,72,95,115],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":13,"num_ratings":46,"last_updated":47,"tested_up_to":16,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":53,"download_link":54,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"wareki","Wareki","2.03","Katsushi Kawamori","https:\u002F\u002Fprofiles.wordpress.org\u002Fkatsushi-kawamori\u002F","\u003Cul>\n\u003Cli>Including the era name.\u003C\u002Fli>\n\u003Cli>Works with post date.\u003C\u002Fli>\n\u003Cli>Works with modified date.\u003C\u002Fli>\n\u003Cli>Works with comment date.\u003C\u002Fli>\n\u003Cli>Works with archive page and archive link.\u003C\u002Fli>\n\u003Cli>Works with calendar widget.\u003C\u002Fli>\n\u003Cli>Works with recent posts widget.\u003C\u002Fli>\n\u003C\u002Ful>\n","Add a Japanese calendar including the era in date format, posts, comments, archives and calendar.",200,5139,3,"2025-11-25T22:11:00.000Z","4.7","8.0",[51,52,20,21],"date","gengo","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwareki\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwareki.2.03.zip",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":32,"downloaded":63,"rating":25,"num_ratings":25,"last_updated":64,"tested_up_to":65,"requires_at_least":66,"requires_php":18,"tags":67,"homepage":18,"download_link":70,"security_score":71,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"ra-mod-multibyt-slug","RA – Mod Multibyt Slug","1.0.4","skuramoto","https:\u002F\u002Fprofiles.wordpress.org\u002Fskuramoto\u002F","\u003Cp>When the multi-byte character is used in slug of new creation post, it changes so that post_type and post_ID may be used.\u003C\u002Fp>\n","When the multi-byte character is used in slug of new creation post, it changes so that post_type and post_ID may be used.",1799,"2015-07-17T06:18:00.000Z","4.2.39","4.0",[21,22,68,69],"rains","slug","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fra-mod-multibyt-slug.1.0.4.zip",85,{"slug":73,"name":74,"version":75,"author":76,"author_profile":77,"description":78,"short_description":79,"active_installs":11,"downloaded":80,"rating":81,"num_ratings":82,"last_updated":83,"tested_up_to":16,"requires_at_least":84,"requires_php":85,"tags":86,"homepage":91,"download_link":92,"security_score":93,"vuln_count":46,"unpatched_count":25,"last_vuln_date":94,"fetched_at":27},"loco-translate","Loco Translate","2.8.3","Tim W","https:\u002F\u002Fprofiles.wordpress.org\u002Ftimwhitlock\u002F","\u003Cp>Loco Translate provides in-browser editing of WordPress translation files and integration with automatic translation services.\u003C\u002Fp>\n\u003Cp>It also provides Gettext\u002Flocalization tools for developers, such as extracting strings and generating templates.\u003C\u002Fp>\n\u003Cp>Features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Built-in translation editor within WordPress admin\u003C\u002Fli>\n\u003Cli>Integration with translation APIs including DeepL, Google, Lecto, Microsoft and OpenAI.\u003C\u002Fli>\n\u003Cli>Create and update language files directly in your theme or plugin\u003C\u002Fli>\n\u003Cli>Extraction of translatable strings from your source code\u003C\u002Fli>\n\u003Cli>Native MO file compilation without the need for Gettext on your system\u003C\u002Fli>\n\u003Cli>JSON (Jed) file compilation compatible with WordPress script localization\u003C\u002Fli>\n\u003Cli>Support for standard PO features including comments, references and plural forms\u003C\u002Fli>\n\u003Cli>PO source view with clickable source code references\u003C\u002Fli>\n\u003Cli>Protected language directory for saving custom translations\u003C\u002Fli>\n\u003Cli>Configurable PO file backups with diff and restore capability\u003C\u002Fli>\n\u003Cli>Built-in WordPress locale codes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Official \u003Ca href=\"https:\u002F\u002Flocalise.biz\u002F\" rel=\"nofollow ugc\">Loco\u003C\u002Fa> WordPress plugin by Tim Whitlock.\u003Cbr \u002F>\nFor more information please visit our \u003Ca href=\"https:\u002F\u002Flocalise.biz\u002Fwordpress\u002Fplugin\" rel=\"nofollow ugc\">plugin page\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Keyboard shortcuts\u003C\u002Fh3>\n\u003Cp>The PO file editor supports the following keyboard shortcuts for faster translating:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Done and Next: \u003Ccode>Ctrl ↵\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Next string: \u003Ccode>Ctrl \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">↓\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Previous string: \u003Ccode>Ctrl \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">↑\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Next untranslated: \u003Ccode>Shift Ctrl \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">↓\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Previous untranslated: \u003Ccode>Shift Ctrl \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">↑\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Copy from source text: \u003Ccode>Ctrl B\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Clear translation: \u003Ccode>Ctrl K\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Toggle Fuzzy: \u003Ccode>Ctrl U\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Save PO \u002F compile MO: \u003Ccode>Ctrl S\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Toggle invisibles: \u003Ccode>Shift Ctrl I\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Suggest translation: \u003Ccode>Ctrl J\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Mac users can use ⌘ Cmd instead of Ctrl.\u003C\u002Fp>\n","Translate WordPress plugins and themes directly in your browser. Versatile PO file editor with integrated AI translation providers.",34331592,96,447,"2026-03-14T11:53:00.000Z","6.6","7.4",[20,87,88,89,90],"l10n","language","multilingual","translation","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Floco-translate\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Floco-translate.2.8.3.zip",98,"2024-06-21 00:00:00",{"slug":96,"name":97,"version":98,"author":99,"author_profile":100,"description":101,"short_description":102,"active_installs":103,"downloaded":104,"rating":93,"num_ratings":105,"last_updated":106,"tested_up_to":16,"requires_at_least":107,"requires_php":108,"tags":109,"homepage":113,"download_link":114,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"performant-translations","Performant Translations","1.2.0","Pascal Birchler","https:\u002F\u002Fprofiles.wordpress.org\u002Fswissspidy\u002F","\u003Cp>Making internationalization\u002Flocalization in WordPress faster than ever before.\u003C\u002Fp>\n\u003Ch3>Disclaimer about WordPress 6.5\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Attention:\u003C\u002Fstrong> most functionality of this plugin has been merged into WordPress 6.5! You might not need it anymore.\u003C\u002Fp>\n\u003Cp>\u003Cem>However\u003C\u002Fem>, this plugin is still relevant for cases where language packs are not downloaded from WordPress.org but somewhere else, for example if you are developing your own plugins or using commercial plugins.\u003C\u002Fp>\n\u003Cp>The Performant Translations plugin converts the translation files of those plugins to the new file format introduced in WordPress 6.5, to really optimize them for speed.\u003C\u002Fp>\n\u003Ch3>What this plugin does\u003C\u002Fh3>\n\u003Cp>This project uses a new approach to handle translation files in WordPress, making localization blazing fast.\u003C\u002Fp>\n\u003Cp>An \u003Ca href=\"https:\u002F\u002Fmake.wordpress.org\u002Fcore\u002F2023\u002F07\u002F24\u002Fi18n-performance-analysis\u002F\" rel=\"nofollow ugc\">in-depth i18n performance analysis\u003C\u002Fa> showed that localized WordPress sites load significantly slower than a site without translations.\u003C\u002Fp>\n\u003Cp>With this plugin’s new approach to localization, this overhead is massively reduced, making your site fast again. It does so by converting \u003Ccode>.mo\u003C\u002Fcode> translation files to \u003Ccode>.php\u003C\u002Fcode> files.\u003C\u002Fp>\n\u003Cp>If your site is using a language other than English (US), you should see immediate speed improvements simply by activating this plugin.\u003C\u002Fp>\n","Making internationalization\u002Flocalization in WordPress faster than ever before.",40000,192704,16,"2025-12-05T10:38:00.000Z","6.5","7.0",[20,110,111,112,90],"internationalization","localization","performance","https:\u002F\u002Fgithub.com\u002Fswissspidy\u002Fperformant-translations","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fperformant-translations.1.2.0.zip",{"slug":116,"name":117,"version":118,"author":119,"author_profile":120,"description":121,"short_description":122,"active_installs":123,"downloaded":124,"rating":33,"num_ratings":125,"last_updated":126,"tested_up_to":127,"requires_at_least":128,"requires_php":108,"tags":129,"homepage":134,"download_link":135,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"aurora-heatmap","Aurora Heatmap","1.7.1","r3098","https:\u002F\u002Fprofiles.wordpress.org\u002Fr3098\u002F","\u003Cp>Goddess Aurora is said to give light to the user world.\u003Cbr \u002F>\nThe name “Aurora Heatmap” visualizes user behavior with a beautiful heatmap.\u003Cbr \u002F>\nBringing light to the activation and optimization of your website.\u003C\u002Fp>\n\u003Ch4>The most important thing in site management.\u003C\u002Fh4>\n\u003Cp>That is, \u003Cem>Is the user satisfied?\u003C\u002Fem>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Where do users see and move through the content?\u003C\u002Fli>\n\u003Cli>Whether the user is not confused?\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Aurora Heatmap is the \u003Cstrong>strongest tool\u003C\u002Fstrong> for visualizing it.\u003C\u002Fp>\n\u003Col>\n\u003Cli>Are you guiding users well?\u003C\u002Fli>\n\u003Cli>Conversion rate\u003C\u002Fli>\n\u003Cli>Are you missing out on prospects and readers?\u003C\u002Fli>\n\u003Cli>How is it evaluated by Google?\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>You will be able to see the points of improvement.\u003C\u002Fp>\n\u003Ch4>Plugin features\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>\u003Cem>No Coding\u003C\u002Fem>\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Cstrong>\u003Cem>No Setting\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You just install and activate the plugin.\u003Cbr \u002F>\nNo troublesome user registration or setup is required.\u003Cbr \u002F>\nIt works as default in most WordPress environments.\u003Cbr \u002F>\nAnd Aurora Heatmap is \u003Cstrong>complete with just plugin\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>The free version can check the click heat map of PC and mobile, and can be used on any number of sites.\u003Cbr \u002F>\nEven if it is free, there is no limit due to the number of PV and analysis pages.\u003C\u002Fp>\n\u003Ch4>Special notes\u003C\u002Fh4>\n\u003Cp>If it does not work well when used with a cache plugin, turn off JavaScript-related optimization, or exclude jQuery and Aurora Heatmap measurement script (reporter.js) from optimization.\u003Cbr \u002F>\nFor more details, please refer to \u003Ca href=\"https:\u002F\u002Fmarket.seous.info\u002Fen\u002Faurora-heatmap#oc-1\" rel=\"nofollow ugc\">official site description page\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Aurora Heatmap can be used with the following cache plugins.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>WP Rocket\u003C\u002Fli>\n\u003Cli>W3 Total Cache\u003C\u002Fli>\n\u003Cli>WP Super Cache\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Usage and support\u003C\u002Fh4>\n\u003Cp>More detailed usage and FAQs are provided on the \u003Ca href=\"https:\u002F\u002Fmarket.seous.info\u002Fen\u002Faurora-heatmap\" rel=\"nofollow ugc\">Aurora Heatmap official site\u003C\u002Fa>.\u003Cbr \u002F>\nIf you can’t find the answer to your question in those documents, use the WordPress.org \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Faurora-heatmap\u002F\" rel=\"ugc\">support forum\u003C\u002Fa>.\u003Cbr \u002F>\nThe premium version has priority email support.\u003C\u002Fp>\n\u003Ch4>About privacy\u003C\u002Fh4>\n\u003Cp>This plugin \u003Cstrong>does not\u003C\u002Fstrong> perform the following operations.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>User tracking\u003C\u002Fli>\n\u003Cli>Send recorded data to external server\u003C\u002Fli>\n\u003Cli>Use of cookies\u003C\u002Fli>\n\u003Cli>Record of personally identifiable data including IP address\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Aurora Heatmap Free version 90 seconds demo\u003C\u002Fh4>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F3W17Gg_vbHg?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n","Beautiful like an aurora! A simple WordPress heatmap that can be completed with just a plugin.",20000,357256,7,"2025-04-14T09:25:00.000Z","6.8.0","4.9",[130,131,132,133,21],"analytics","analyze","click","heatmap","https:\u002F\u002Fmarket.seous.info\u002Faurora-heatmap","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faurora-heatmap.1.7.1.zip",{"attackSurface":137,"codeSignals":264,"taintFlows":281,"riskAssessment":282,"analyzedAt":294},{"hooks":138,"ajaxHandlers":260,"restRoutes":261,"shortcodes":262,"cronEvents":263,"entryPointCount":25,"unprotectedCount":25},[139,145,152,155,158,161,164,169,173,176,179,181,184,187,190,193,196,199,204,207,210,214,217,220,223,226,229,232,236,240,243,245,249,252,256],{"type":140,"name":141,"callback":142,"file":143,"line":144},"action","phpmailer_init","wp_mail","ext\\ja\\class.php",68,{"type":146,"name":147,"callback":148,"priority":149,"file":150,"line":151},"filter","the_title_rss","sanitize_xml_text",99,"wp-multibyte-patch.php",393,{"type":146,"name":153,"callback":148,"priority":149,"file":150,"line":154},"the_content_feed",394,{"type":146,"name":156,"callback":148,"priority":149,"file":150,"line":157},"the_excerpt_rss",395,{"type":146,"name":159,"callback":148,"priority":149,"file":150,"line":160},"comment_text_rss",396,{"type":146,"name":162,"callback":148,"priority":149,"file":150,"line":163},"comment_text",397,{"type":146,"name":165,"callback":166,"priority":167,"file":150,"line":168},"gettext_with_context","force_character_count",10,406,{"type":140,"name":170,"callback":171,"priority":149,"file":150,"line":172},"wp_enqueue_scripts","force_twentytwelve_open_sans_off",410,{"type":140,"name":174,"callback":171,"priority":149,"file":150,"line":175},"admin_print_styles-appearance_page_custom-header",411,{"type":140,"name":170,"callback":177,"priority":149,"file":150,"line":178},"force_twentythirteen_google_fonts_off",415,{"type":140,"name":174,"callback":177,"priority":149,"file":150,"line":180},416,{"type":140,"name":170,"callback":182,"priority":149,"file":150,"line":183},"force_twentyfourteen_google_fonts_off",420,{"type":140,"name":185,"callback":182,"priority":149,"file":150,"line":186},"admin_print_scripts-appearance_page_custom-header",421,{"type":140,"name":170,"callback":188,"priority":149,"file":150,"line":189},"force_twentyfifteen_google_fonts_off",425,{"type":140,"name":170,"callback":191,"priority":149,"file":150,"line":192},"force_twentysixteen_google_fonts_off",432,{"type":140,"name":170,"callback":194,"priority":149,"file":150,"line":195},"force_twentyseventeen_google_fonts_off",439,{"type":146,"name":165,"callback":197,"priority":167,"file":150,"line":198},"wplink_js_minimum_input_length",448,{"type":140,"name":200,"callback":201,"priority":202,"file":150,"line":203},"wp_default_scripts","wplink_js",9,452,{"type":146,"name":205,"callback":205,"priority":149,"file":150,"line":206},"preprocess_comment",459,{"type":146,"name":208,"callback":208,"priority":167,"file":150,"line":209},"pre_remote_source",462,{"type":146,"name":211,"callback":212,"priority":149,"file":150,"line":213},"excerpt_length","excerpt_mblength",465,{"type":146,"name":215,"callback":215,"priority":202,"file":150,"line":216},"excerpt_more",466,{"type":146,"name":218,"callback":218,"priority":167,"file":150,"line":219},"get_comment_excerpt",470,{"type":146,"name":221,"callback":221,"file":150,"line":222},"sanitize_file_name",473,{"type":146,"name":224,"callback":224,"priority":149,"file":150,"line":225},"bp_create_excerpt",476,{"type":146,"name":227,"callback":227,"priority":149,"file":150,"line":228},"bp_get_activity_content_body",477,{"type":146,"name":230,"callback":230,"priority":149,"file":150,"line":231},"wp_trim_words",481,{"type":140,"name":233,"callback":234,"file":150,"line":235},"wp","query_based_settings",484,{"type":140,"name":237,"callback":238,"file":150,"line":239},"sanitize_comment_cookies","process_search_terms",487,{"type":146,"name":142,"callback":241,"priority":149,"file":150,"line":242},"patch_wp_mail_with_custom_phpmailer",491,{"type":140,"name":141,"callback":142,"file":150,"line":244},494,{"type":140,"name":246,"callback":247,"priority":149,"file":150,"line":248},"admin_enqueue_scripts","admin_custom_css",499,{"type":140,"name":250,"callback":247,"priority":149,"file":150,"line":251},"customize_controls_enqueue_scripts",500,{"type":140,"name":253,"callback":254,"priority":149,"file":150,"line":255},"after_setup_theme","filters_after_setup_theme",503,{"type":140,"name":257,"callback":258,"file":150,"line":259},"template_redirect","filters_after_template_redirect",504,[],[],[],[],{"dangerousFunctions":265,"sqlUsage":266,"outputEscaping":268,"fileOperations":31,"externalRequests":25,"nonceChecks":25,"capabilityChecks":25,"bundledLibraries":277},[],{"prepared":25,"raw":25,"locations":267},[],{"escaped":31,"rawEcho":269,"locations":270},2,[271,275],{"file":272,"line":273,"context":274},"wplink.php",46,"raw output",{"file":272,"line":276,"context":274},48,[278],{"name":279,"version":26,"knownCves":280},"PHPMailer",[],[],{"summary":283,"deductions":284},"The wp-multibyte-patch plugin, version 2.9.3, exhibits a generally strong security posture in its static analysis. The absence of any AJAX handlers, REST API routes, shortcodes, or cron events significantly limits the plugin's attack surface, with no apparent unprotected entry points.  Furthermore, the code demonstrates good practices by exclusively using prepared statements for its SQL queries.  However, the analysis does reveal some areas for concern.  Only one-third of the output operations are properly escaped, suggesting a potential risk of cross-site scripting (XSS) vulnerabilities if user-supplied data is outputted without sufficient sanitization.  Additionally, the presence of a file operation, while not inherently malicious, warrants further investigation to ensure it's handled securely. The plugin's vulnerability history is remarkably clean, with no recorded CVEs, which is a significant positive indicator.  Despite the excellent track record, the identified output escaping deficiency and the single file operation represent potential weaknesses that could be exploited if not addressed, especially given the lack of explicit capability checks or nonce validation in the analyzed code.",[285,288,290,292],{"reason":286,"points":287},"Low percentage of properly escaped output",5,{"reason":289,"points":46},"Presence of file operations without explicit checks",{"reason":291,"points":287},"No nonce checks implemented",{"reason":293,"points":287},"No capability checks implemented","2026-03-16T16:58:01.582Z",{"wat":296,"direct":305},{"assetPaths":297,"generatorPatterns":300,"scriptPaths":301,"versionParams":302},[298,299],"\u002Fwp-content\u002Fplugins\u002Fwp-multibyte-patch\u002Fcss\u002Fwp-multibyte-patch.css","\u002Fwp-content\u002Fplugins\u002Fwp-multibyte-patch\u002Fjs\u002Fwp-multibyte-patch.js",[],[299],[303,304],"wp-multibyte-patch\u002Fcss\u002Fwp-multibyte-patch.css?ver=","wp-multibyte-patch\u002Fjs\u002Fwp-multibyte-patch.js?ver=",{"cssClasses":306,"htmlComments":307,"htmlAttributes":308,"restEndpoints":309,"jsGlobals":310,"shortcodeOutput":311},[],[],[],[],[],[]]