[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYw0MVxdjWYXDuAvz0pdBxl5zh0xScOO7tmNDNLF_kTQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":17,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":37,"analysis":131,"fingerprints":295},"wp-page-extension","WP Page Extension","1.1","Daddydesign","https:\u002F\u002Fprofiles.wordpress.org\u002Fdaddydesign\u002F","\u003Cp>Converting an old HTML, PHP, or ASP site to WordPress? WP Page Extension will let you create pages inside of wordpress and give them any extension you want. It will help your site never lose any old backlinks and seo. You can choose any page to have any extension. Choices are: .html, .htm, .php, .xml, .shtml and .asp. If you dont pick an extension then it will just default to no extension.\u003C\u002Fp>\n\u003Cp>Plugin Created By \u003Ca href=\"http:\u002F\u002Fwww.daddydesign.com\" rel=\"nofollow ugc\">Daddy Design\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For support or comments please \u003Ca href=\"http:\u002F\u002Fdaddydesign.com\u002Fwordpress\u002Fpage-extension-wordpress-plugin\" title=\"wp page extension plugin support\" rel=\"nofollow ugc\">go here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Our Other Plugins\u003C\u002Fh4>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fsocialtoolbarpro.com\" title=\"social toolbar\" rel=\"nofollow ugc\">Social Toolbar\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.daddydesign.com\u002Fwordpress\u002Fjavascript-detect-wordpress-plugin\u002F\" title=\"javascript detect wordpress plugin\" rel=\"nofollow ugc\">Javascript Detect\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.daddydesign.com\u002Fwordpress\u002Freport-error-wp-plugin\u002F\" title=\"WP Report Error\" rel=\"nofollow ugc\">WP Report Error\u003C\u002Fa>\u003Cbr \u002F>\nFor support or comments please \u003Ca href=\"http:\u002F\u002Fwww.daddydesign.com\u002Fwordpress\u002Fpage-extension-wordpress-plugin\" title=\"Custom WordPress plugin\" rel=\"nofollow ugc\">go here\u003C\u002Fa>.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Demo’s\u003C\u002Fh4>\n\u003Col>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.daddydesign.com\u002Fwordpress\u002Fthis-is-an-extension-demo-page.htm\" title=\"wordpress demo page with extension\" rel=\"nofollow ugc\">Demo Page with a .htm extension\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Fol>\n","Converting an old HTML, PHP, or ASP site to WordPress? WP Page Extension will let you create pages inside of wordpress and give them any extension you …",80,11158,9,"2012-08-29T23:38:00.000Z","3.3.2","3.0","",[19,20,21,22,23],"extension","fake","htm","html","url","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-page-extension.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":25,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"daddydesign",5,240,30,84,"2026-04-05T12:09:11.746Z",[38,58,81,100,117],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":17,"tags":53,"homepage":56,"download_link":57,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"html-after-url","html after URL","1.0","Aftab Ali Muni","https:\u002F\u002Fprofiles.wordpress.org\u002Faftabmuni\u002F","\u003Cp>Plugin is used to add .html after every URL of page\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Before:\u003C\u002Fstrong> http:\u002F\u002Fwww.example.com\u002Fabout-us\u003C\u002Fp>\n\u003Cp>\u003Cstrong>After:\u003C\u002Fstrong> http:\u002F\u002Fwww.example.com\u002Fabout-us.html\u003C\u002Fp>\n","Plugin is used to add .html after every URL of page",4000,28863,100,7,"2023-11-26T07:20:00.000Z","6.4.8","3.2",[39,54,55],"add-html-after-page-url","html-extension-after-page-url","https:\u002F\u002Faftabmuni.wordpress.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhtml-after-url.zip",{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":66,"downloaded":67,"rating":48,"num_ratings":68,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":72,"tags":73,"homepage":78,"download_link":79,"security_score":80,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"add-html-extension-to-pages","Add .html Extension to Pages","1.0.3","Subodh Ghulaxe","https:\u002F\u002Fprofiles.wordpress.org\u002Fsubodhghulaxe\u002F","\u003Cp>This plugin adds .html extension to pages in WordPress. Adding .html extension on posts is easy as it can be updated from permalinks, but by default it is not possible on pages.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Useful in following cases:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>You want to convert your static site to WordPress but don’t want to change .html extension in URLs.\u003C\u002Fli>\n\u003Cli>Want to append .html extension to end of all page in WordPress.\u003C\u002Fli>\n\u003Cli>You already added .html to post URLs and want to keep similar URL structure.\u003C\u002Fli>\n\u003C\u002Ful>\n","A simple and easy way to add .html extension to WordPress pages.",800,7231,1,"2024-06-23T08:59:00.000Z","6.5.8","2.7","5.2.4",[74,75,76,19,77],"html-in-url","html-to-pages","ext","extensions","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fadd-html-extension-to-pages\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadd-html-extension-to-pages.1.0.3.zip",92,{"slug":82,"name":83,"version":41,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":88,"downloaded":89,"rating":48,"num_ratings":90,"last_updated":91,"tested_up_to":92,"requires_at_least":93,"requires_php":17,"tags":94,"homepage":98,"download_link":99,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"add-html-to-pages","Add HTML to Page","Dinesh S","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebdesignerdinesh\u002F","\u003Cp>\u003Cstrong>If you need support to get this plugin installed or have a Custom version of the plugin please email us on \u003Ca href=\"mailto:info@itchimes.com\" rel=\"nofollow ugc\">info@itchimes.com\u003C\u002Fa>\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>Add .html to the URL of PAGES only.\u003C\u002Fp>\n\u003Ch4>Feature\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Add .html to the URL of PAGES only.\u003C\u002Fli>\n\u003Cli>Should re-activate after changing Permalink (Recommanded).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can visit our website \u003Ca href=\"http:\u002F\u002Fwww.itchimes.com\u002F\" rel=\"nofollow ugc\">itchimes.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Wating for your valuable feedback\u002Fcomments.\u003C\u002Fp>\n","Add .html to the URL of PAGES only.",400,7931,2,"2014-02-20T17:28:00.000Z","3.8.0","3.0.0",[95,96,97],"add-html-extension-to-page-url-only","add-html-to-page-url-only","html-to-page-url","http:\u002F\u002Fwww.itchimes.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadd-html-to-pages.zip",{"slug":101,"name":102,"version":41,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":107,"downloaded":108,"rating":48,"num_ratings":109,"last_updated":110,"tested_up_to":111,"requires_at_least":93,"requires_php":17,"tags":112,"homepage":115,"download_link":116,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"add-html-extension-to-specific-pages","Add HTML Extension to Specific Pages","CherryAnt.com","https:\u002F\u002Fprofiles.wordpress.org\u002Fcherryantcom\u002F","\u003Cp>Appends .html extension to the Page URL when using seo permalinks and page permalink box has _html text.\u003C\u002Fp>\n","Appends .html extension to the Page URL when using seo permalinks and page permalink box has _html text.",60,3984,3,"2014-11-20T23:35:00.000Z","4.0.38",[113,114],"add-html-extension-to-specific-page-url","page-url-extension","http:\u002F\u002Fwww.cherryant.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadd-html-extension-to-specific-pages.zip",{"slug":118,"name":119,"version":41,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":124,"downloaded":125,"rating":26,"num_ratings":26,"last_updated":126,"tested_up_to":127,"requires_at_least":52,"requires_php":17,"tags":128,"homepage":129,"download_link":130,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"add-html-after-url","Add .html after URL","nghialuu","https:\u002F\u002Fprofiles.wordpress.org\u002Fnghialuu\u002F","\u003Cp>Plugin is used for rewrite URL by default of page name or post name with new URL add .html at the end of URLs\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Before:\u003C\u002Fstrong> http:\u002F\u002Fwww.example.com\u002Fsample-post\u003C\u002Fp>\n\u003Cp>\u003Cstrong>After:\u003C\u002Fstrong> http:\u002F\u002Fwww.example.com\u002Fsample-post.html\u003C\u002Fp>\n","Plugin is used for rewrite URL by default of page name or post name with new URL add .html at the end of URLs",10,1121,"2020-09-07T15:19:00.000Z","5.4.19",[39,54,55],"https:\u002F\u002Fgithub.com\u002Fluutrongnghia\u002Fwordpress-add-html-after-URL","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadd-html-after-url.zip",{"attackSurface":132,"codeSignals":162,"taintFlows":204,"riskAssessment":280,"analyzedAt":294},{"hooks":133,"ajaxHandlers":158,"restRoutes":159,"shortcodes":160,"cronEvents":161,"entryPointCount":26,"unprotectedCount":26},[134,140,144,148,152],{"type":135,"name":136,"callback":137,"file":138,"line":139},"action","admin_init","fake_url_init","wp-page_extension.php",13,{"type":135,"name":141,"callback":142,"file":138,"line":143},"template_redirect","check_url",14,{"type":135,"name":145,"callback":146,"file":138,"line":147},"add_meta_boxes","fake_page_box",16,{"type":135,"name":149,"callback":150,"priority":68,"file":138,"line":151},"wp_insert_post","save_fake_url",17,{"type":153,"name":154,"callback":155,"priority":156,"file":138,"line":157},"filter","user_trailingslashit","no_page_slash",66,18,[],[],[],[],{"dangerousFunctions":163,"sqlUsage":164,"outputEscaping":186,"fileOperations":26,"externalRequests":26,"nonceChecks":26,"capabilityChecks":26,"bundledLibraries":203},[],{"prepared":165,"raw":165,"locations":166},8,[167,170,173,175,177,179,181,184],{"file":138,"line":168,"context":169},154,"$wpdb->get_results() with variable interpolation",{"file":138,"line":171,"context":172},214,"$wpdb->get_var() with variable interpolation",{"file":138,"line":174,"context":169},256,{"file":138,"line":176,"context":169},275,{"file":138,"line":178,"context":169},283,{"file":138,"line":180,"context":169},697,{"file":138,"line":182,"context":183},702,"$wpdb->query() with variable interpolation",{"file":138,"line":185,"context":183},705,{"escaped":26,"rawEcho":49,"locations":187},[188,191,193,195,197,199,201],{"file":138,"line":189,"context":190},189,"raw output",{"file":138,"line":192,"context":190},190,{"file":138,"line":194,"context":190},191,{"file":138,"line":196,"context":190},192,{"file":138,"line":198,"context":190},193,{"file":138,"line":200,"context":190},194,{"file":138,"line":202,"context":190},195,[],[205,232,251],{"entryPoint":206,"graph":207,"unsanitizedCount":147,"severity":231},"check_url (wp-page_extension.php:234)",{"nodes":208,"edges":227},[209,214,219,222],{"id":210,"type":211,"label":212,"file":138,"line":213},"n0","source","$_SERVER (x3)",242,{"id":215,"type":216,"label":217,"file":138,"line":174,"wp_function":218},"n1","sink","get_results() [SQLi]","get_results",{"id":220,"type":211,"label":221,"file":138,"line":213},"n2","$_SERVER (x13)",{"id":223,"type":216,"label":224,"file":138,"line":225,"wp_function":226},"n3","header() [Header Injection]",319,"header",[228,230],{"from":210,"to":215,"sanitized":229},false,{"from":220,"to":223,"sanitized":229},"high",{"entryPoint":233,"graph":234,"unsanitizedCount":90,"severity":231},"save_fake_url (wp-page_extension.php:679)",{"nodes":235,"edges":248},[236,238,241,244],{"id":210,"type":211,"label":237,"file":138,"line":182},"$_POST['fake_extension']",{"id":215,"type":216,"label":239,"file":138,"line":182,"wp_function":240},"query() [SQLi]","query",{"id":220,"type":211,"label":242,"file":138,"line":243},"$_POST",711,{"id":223,"type":216,"label":245,"file":138,"line":246,"wp_function":247},"update_option() [Settings Manipulation]",712,"update_option",[249,250],{"from":210,"to":215,"sanitized":229},{"from":220,"to":223,"sanitized":229},{"entryPoint":252,"graph":253,"unsanitizedCount":279,"severity":231},"\u003Cwp-page_extension> (wp-page_extension.php:0)",{"nodes":254,"edges":273},[255,257,258,259,260,262,264,267,269,271],{"id":210,"type":211,"label":256,"file":138,"line":213},"$_SERVER (x4)",{"id":215,"type":216,"label":217,"file":138,"line":174,"wp_function":218},{"id":220,"type":211,"label":221,"file":138,"line":213},{"id":223,"type":216,"label":224,"file":138,"line":225,"wp_function":226},{"id":261,"type":211,"label":237,"file":138,"line":182},"n4",{"id":263,"type":216,"label":239,"file":138,"line":182,"wp_function":240},"n5",{"id":265,"type":211,"label":266,"file":138,"line":213},"n6","$_SERVER",{"id":268,"type":216,"label":239,"file":138,"line":185,"wp_function":240},"n7",{"id":270,"type":211,"label":242,"file":138,"line":243},"n8",{"id":272,"type":216,"label":245,"file":138,"line":246,"wp_function":247},"n9",[274,275,276,277,278],{"from":210,"to":215,"sanitized":229},{"from":220,"to":223,"sanitized":229},{"from":261,"to":263,"sanitized":229},{"from":265,"to":268,"sanitized":229},{"from":270,"to":272,"sanitized":229},20,{"summary":281,"deductions":282},"The 'wp-page-extension' v1.1 plugin exhibits a mixed security posture. On the positive side, it has a remarkably small attack surface with no identified AJAX handlers, REST API routes, shortcodes, or cron events, and importantly, no known CVEs in its history. This suggests a development team that is either very disciplined or has had limited exposure to security issues.\n\nHowever, the static analysis reveals significant concerns. The complete lack of capability checks and nonce checks on any potential entry points is a major weakness. Coupled with the fact that 3 out of 3 analyzed taint flows have unsanitized paths and a 0% rate of proper output escaping, this indicates a high risk of various injection vulnerabilities, such as cross-site scripting (XSS) or potentially SQL injection if the raw SQL queries are not handled carefully in conjunction with the unsanitized inputs.\n\nWhile the plugin has no recorded vulnerabilities, the code analysis signals are alarming and suggest potential vulnerabilities that may not have been discovered or reported yet. The high number of SQL queries, with only half using prepared statements, also adds to the risk, especially when combined with unsanitized inputs. The plugin's strengths lie in its limited attack surface and clean vulnerability history, but these are heavily overshadowed by the critical findings in the code analysis.",[283,286,288,290,292],{"reason":284,"points":285},"Unsanitized paths in taint flows (High severity)",15,{"reason":287,"points":124},"No capability checks",{"reason":289,"points":124},"No nonce checks",{"reason":291,"points":32},"SQL queries with prepared statements at 50%",{"reason":293,"points":165},"No properly escaped output","2026-03-16T21:25:56.546Z",{"wat":296,"direct":301},{"assetPaths":297,"generatorPatterns":298,"scriptPaths":299,"versionParams":300},[],[],[],[],{"cssClasses":302,"htmlComments":303,"htmlAttributes":304,"restEndpoints":313,"jsGlobals":314,"shortcodeOutput":315},[],[],[305,306,307,308,309,310,311,312],"name=\"fake_extension\"","id=\"fake_extension0\"","id=\"fake_extension1\"","id=\"fake_extension2\"","id=\"fake_extension3\"","id=\"fake_extension4\"","id=\"fake_extension5\"","id=\"fake_extension6\"",[],[],[]]