[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0zmsPLE9ZLkvDMGmd-6TYfgnLq8tMWj_bJtoqqGD9GI":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":37,"analysis":132,"fingerprints":443},"wp-persian","WP-Persian","3.3.0","Siavash","https:\u002F\u002Fprofiles.wordpress.org\u002Fsalemi\u002F","\u003Cp>WP-Persian is a fast and powerful plugin for jalali calendar and persian language support in wordpress and standard plugins.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>If you like the plugin, feel free to rate it (on the right side of this page)!\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Jalali DatePicker for Woocommerce\u003C\u002Fli>\n\u003Cli>Farsi Fonts for Admin Dashboard\u003C\u002Fli>\n\u003Cli>Full posts and comments dates conversion to jalali.\u003C\u002Fli>\n\u003Cli>Customizable through specific WordPress admin page.\u003C\u002Fli>\n\u003Cli>Jalali timestamp edit in new post and new page sections.\u003C\u002Fli>\n\u003Cli>Jalali dates in inline edit tables.\u003C\u002Fli>\n\u003Cli>Change wordpress language from admin control panel.\u003C\u002Fli>\n\u003Cli>Adds RTL and LTR buttons to the TinyMCE editor to enable writing text in Right to Left and Left to Right directions.\u003C\u002Fli>\n\u003Cli>Jalali Archive widget.\u003C\u002Fli>\n\u003Cli>Jalali Calendar widget.\u003C\u002Fli>\n\u003Cli>Jalali\u002FGregorian compatible permalinks.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Farsi Description\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>امکان تغییر فونت بخش مدیریت سایت\u003C\u002Fli>\n\u003Cli>پشتیبانی از تاریخ هجری شمسی در ووکامرس\u003C\u002Fli>\n\u003Cli>تاریخ هجری شمسی در همه بخش ها حتی بخش آپلود عکس و مدیا\u003C\u002Fli>\n\u003Cli>تشخیص خودکار جهت متن ورودی در بخش مدیریت\u003C\u002Fli>\n\u003Cli>قابلیت تبدیل کلیه تاریخ های میلادی به هجری شمسی\u003C\u002Fli>\n\u003Cli>امکان تغییر زبان و تقویم بخش مدیریت و بخش کاربری به صورت مجزا‬\u003C\u002Fli>\n\u003Cli>به همراه راهنمای کامل تنظیمات به زبان فارسی\u003C\u002Fli>\n\u003Cli>بدون ایجاد تغییرات در هسته وردپرس\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Related Links\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbitbucket.org\u002F30yavash\u002Fwp-persian\u002Fdownloads\u002F\" title=\"Download Beta Version\" rel=\"nofollow ugc\">Download Latest Version\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.30yavash.com\u002Ftag\u002Fwp-persian\u002F\" title=\"Farsi Online Documents\" rel=\"nofollow ugc\">Online Documents\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwp-persian\u002Fassets\u002Fhelp.pdf\" title=\"Farsi Help\" rel=\"nofollow ugc\">PDF Document\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwp-persian\u002Fassets\u002Finstall.pdf\" title=\"Farsi Installation Help\" rel=\"nofollow ugc\">PDF Installation Help\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Fast and Powerful plugin for Jalali calendar and Farsi language support in Wordpress and standard plugins.",9000,171111,84,32,"2020-09-11T17:41:00.000Z","5.3.21","4.0","",[20,21,22,23,24],"calendar","date","farsi","jalali","persian","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-persian\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-persian.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":35,"trust_score":13,"computed_at":36},"salemi",1,30,"2026-04-04T21:13:37.637Z",[38,57,75,92,112],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":17,"requires_php":52,"tags":53,"homepage":55,"download_link":56,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"persian-date","Persian Date","0.1.3","Mahdi Yousefi [MahdiY]","https:\u002F\u002Fprofiles.wordpress.org\u002Fmahdiy\u002F","\u003Cp>با استفاده از این پلاگین در وردپرس خود از تاریخ شمسی استفاده نمایید.\u003C\u002Fp>\n\u003Ch4>امکانات\u003C\u002Fh4>\n\u003Cp>فعلا فقط تاریخ رو شمسی می کنه! اگر ووکامرس نصب دارین، بجای این افزونه، افزونه “ووکامرس فارسی” رو نصب کنید و از منو “ووکامرس فارسی > ابزارها” تاریخ شمسی را برای وردپرس و ووکامرس فعال کنید.\u003C\u002Fp>\n\u003Ch4>سازگاری\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WordPress 5.*\u003C\u002Fli>\n\u003Cli>PHP 7.1+\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>مستندات\u003C\u002Fh4>\n\u003Cp>شما می توانید مستندات فنی این افزونه را از \u003Ca href=\"https:\u002F\u002Fmahdiy.gitbook.io\u002Fpersian-date\" rel=\"nofollow ugc\">اینجا\u003C\u002Fa> مشاهده کنید.\u003C\u002Fp>\n","تاریخ شمسی برای وردپرس",4000,27122,90,16,"2020-09-05T09:18:00.000Z","5.4.19","7.1",[20,21,23,39,54],"shamsi","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpersian-date\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpersian-date.zip",{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":65,"num_ratings":67,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":18,"tags":71,"homepage":73,"download_link":74,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"persian-date-short-code","persian date shortcode","1.2","esmail ebrahimi","https:\u002F\u002Fprofiles.wordpress.org\u002Fee_persian\u002F","\u003Cul>\n\u003Cli>Easy way for Display persian date in multi format and unlimited color in wordpress site.\u003C\u002Fli>\n\u003Cli>you can insert persian date in wigdet,post,page with simple shortcode .\u003C\u002Fli>\n\u003Cli>\n\u003Cp>also you can display persian date in favorite place of theme by “do_shortcode” function.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fkanithemes.com\" rel=\"nofollow ugc\">Persian Support in Kanithemes.com\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","Easy way for Display persian date in multi format and unlimited color in wordpress site",100,6839,4,"2019-08-04T20:17:00.000Z","5.2.24","3.1",[21,22,23,72,24],"parsi","https:\u002F\u002Fkanithemes.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpersian-date-short-code.1.2.zip",{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":48,"downloaded":83,"rating":84,"num_ratings":34,"last_updated":85,"tested_up_to":86,"requires_at_least":87,"requires_php":18,"tags":88,"homepage":18,"download_link":91,"security_score":65,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"persian-text-and-date-converter","Persian Text and Date Converter","1.4","saeed tosifyan","https:\u002F\u002Fprofiles.wordpress.org\u002Fsaeedtx\u002F","\u003Cp>This plugin automatically converts Arabic characters (like ي and ك) to Persian (like ی and ک), Arabic and English numbers to Persian numbers, and Gregorian dates to Jalali (Persian) format. It works seamlessly across posts, pages, comments, archives, categories, and search pages, with full support for Persian WordPress installations.\u003C\u002Fp>\n\u003Cp>ویژگی‌ها:\u003Cbr \u002F>\n– تبدیل خودکار حروف عربی به فارسی\u003Cbr \u002F>\n– تبدیل اعداد عربی و انگلیسی به فارسی\u003Cbr \u002F>\n– تبدیل تاریخ میلادی به شمسی با فرمت زیبای فارسی (مثل “۱۹ فروردین ۱۴۰۴”)\u003Cbr \u002F>\n– پشتیبانی از نوشته‌ها، برگه‌ها، نظرات، آرشیوها، دسته‌ها و جستجو\u003Cbr \u002F>\n– تبدیل محتوای قدیمی هنگام فعال‌سازی\u003C\u002Fp>\n","به‌طور خودکار حروف عربی، اعداد و تاریخ میلادی را در محتوای وردپرس، نظرات، صفحات و آرشیوها به فارسی تبدیل می‌کند.",1537,20,"2025-05-04T09:05:00.000Z","6.7.5","5.0",[89,90,22,23,24],"arabic-to-persian","date-converter","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpersian-text-and-date-converter.1.4.zip",{"slug":93,"name":93,"version":94,"author":95,"author_profile":96,"description":97,"short_description":98,"active_installs":99,"downloaded":100,"rating":101,"num_ratings":102,"last_updated":103,"tested_up_to":104,"requires_at_least":105,"requires_php":18,"tags":106,"homepage":110,"download_link":111,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-jalali","5.0.1","mani_monaj","https:\u002F\u002Fprofiles.wordpress.org\u002Fmani_monaj\u002F","\u003Cp>wp-jalali is a “Full Jalali (خورشیدی – شمسی) Calendar and Persian(Farsi)\u002FAfghan\u002FTajik” support package for WordPress.\u003C\u002Fp>\n\u003Cp>Features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Transparent and configurable Jalali date conversion for posts, pages and comments\u003C\u002Fli>\n\u003Cli>Jalali Archive template tag and widget (Monthly and Daily)\u003C\u002Fli>\n\u003Cli>Jalali\u002FGregorian Calendar template tag and widget\u003C\u002Fli>\n\u003Cli>Jalali\u002FGregorian compatible permalinks\u003C\u002Fli>\n\u003Cli>Improvements to TinyMCE (WordPress Editor)\u003C\u002Fli>\n\u003Cli>Auto conversion of some Arabic characters (ي , ك) to Persian (ی , ک) with smart search\u003C\u002Fli>\n\u003Cli>Auto conversion of Latin numbers to Persian numbers.\u003C\u002Fli>\n\u003Cli>Fully customizable through custom admin page\u003C\u002Fli>\n\u003Cli>Jalali timestamp edit in new post and new page sections\u003C\u002Fli>\n\u003Cli>Jalali dates in edit tables\u003C\u002Fli>\n\u003Cli>Support for both Iranian and Afghan month names\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plug-in is part of \u003Ca href=\"http:\u002F\u002Fwp-persian.com\u002F\" title=\"پروژه وردپرس فارسی\" rel=\"nofollow ugc\">Persian WordPress Project\u003C\u002Fa>. Since version 5.0, this plugin is being maintained in collaboration with \u003Ca href=\"http:\u002F\u002Fzakrot.com\u002F\" rel=\"nofollow ugc\">Zakrot Web Solutions\u003C\u002Fa>.\u003C\u002Fp>\n","Full Jalali calendar support for Wordpress and localization improvements for Persian\u002FAfghan\u002FTajik users.",20000,402484,80,21,"2017-11-28T04:08:00.000Z","4.6.30","3.9",[107,108,22,24,109],"afghan","calendar-conversion","tajik","http:\u002F\u002Fwp-persian.com\u002Fwp-jalali","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-jalali.5.0.1.zip",{"slug":113,"name":114,"version":115,"author":116,"author_profile":117,"description":118,"short_description":119,"active_installs":84,"downloaded":120,"rating":28,"num_ratings":28,"last_updated":121,"tested_up_to":122,"requires_at_least":123,"requires_php":124,"tags":125,"homepage":18,"download_link":131,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"persian-date-for-codestar-framework","Persian date for codestar framework","1.1","saeed Taheri","https:\u002F\u002Fprofiles.wordpress.org\u002Fsaeedtaheri\u002F","\u003Cp>Codestar Framework Is A Simple and Lightweight WordPress Option Framework for Themes and Plugins. Persian date for codestar framework adds a new\u003Cbr \u002F>\nfield to codestar framwork. new field is a date field which user can choose jalali\u002Fpersian date. For using persian date the field type should set as \u003Cem>“pdate”\u003C\u002Fem>. also you can use format and other settings. for full settings please visit: \u003Ca href=\"http:\u002F\u002Fbabakhani.github.io\u002FPersianWebToolkit\u002Fdoc\u002Fdatepicker\u002F\" rel=\"nofollow ugc\">persian datepicker\u003C\u002Fa>.\u003C\u002Fp>\n","Codestar Framework Is A Simple and Lightweight WordPress Option Framework for Themes and Plugins. Persian date for codestar framework adds a new field …",2398,"2022-07-09T16:52:00.000Z","6.3.8","5.5","7.0",[126,127,128,129,130],"codestar","codestar-jalali","codestar-persian","codestar-persian-date","codestar-shamsi","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpersian-date-for-codestar-framework.1.2.zip",{"attackSurface":133,"codeSignals":341,"taintFlows":403,"riskAssessment":431,"analyzedAt":442},{"hooks":134,"ajaxHandlers":337,"restRoutes":338,"shortcodes":339,"cronEvents":340,"entryPointCount":28,"unprotectedCount":28},[135,142,147,150,154,157,161,164,168,171,175,179,183,187,191,195,199,203,207,211,214,218,222,226,230,234,237,240,243,247,251,255,258,262,266,270,272,275,277,280,283,286,289,292,294,296,298,300,302,304,306,309,314,316,318,320,324,328,330,335],{"type":136,"name":137,"callback":138,"priority":139,"file":140,"line":141},"filter","locale","wpp_set_locale",10,"includes\\class-wp-persian.php",61,{"type":143,"name":144,"callback":145,"file":140,"line":146},"action","widgets_init","register_wpp_widgets",63,{"type":143,"name":148,"callback":148,"priority":139,"file":140,"line":149},"init",65,{"type":136,"name":151,"callback":151,"priority":152,"file":140,"line":153},"load_textdomain_mofile",99,69,{"type":143,"name":155,"callback":155,"priority":139,"file":140,"line":156},"plugins_loaded",71,{"type":143,"name":158,"callback":158,"priority":159,"file":140,"line":160},"setup_theme",999,72,{"type":143,"name":162,"callback":162,"priority":159,"file":140,"line":163},"after_setup_theme",73,{"type":143,"name":165,"callback":166,"priority":139,"file":140,"line":167},"shutdown","wp_shutdown",75,{"type":136,"name":169,"callback":170,"priority":139,"file":140,"line":65},"media_library_months_with_files","wpp_media_library_months_with_files",{"type":136,"name":172,"callback":173,"priority":139,"file":140,"line":174},"ajax_query_attachments_args","wpp_ajax_query_attachments_args",101,{"type":136,"name":176,"callback":177,"file":140,"line":178},"mce_external_plugins","wpp_mce_external_plugins",119,{"type":136,"name":180,"callback":181,"file":140,"line":182},"mce_buttons","wpp_mce_buttons",120,{"type":143,"name":184,"callback":185,"file":140,"line":186},"mce_css","wpp_mce_css",124,{"type":143,"name":188,"callback":189,"file":140,"line":190},"all_admin_notices","rtl_src_admin_notice",170,{"type":136,"name":192,"callback":193,"priority":139,"file":140,"line":194},"date_formats","wpp_date_formats",196,{"type":136,"name":196,"callback":197,"priority":139,"file":140,"line":198},"date_i18n","wpp_date_i18n",197,{"type":143,"name":200,"callback":201,"file":140,"line":202},"restrict_manage_posts","wpp_restrict_manage_posts",198,{"type":136,"name":204,"callback":205,"priority":139,"file":140,"line":206},"disable_months_dropdown","wpp_disable_months_dropdown",199,{"type":143,"name":208,"callback":209,"priority":139,"file":140,"line":210},"load-edit.php","wpp_load_editphp",200,{"type":143,"name":212,"callback":209,"priority":139,"file":140,"line":213},"load-upload.php",201,{"type":143,"name":215,"callback":216,"file":140,"line":217},"admin_enqueue_scripts","wpp_admin_enqueue_scripts",203,{"type":143,"name":219,"callback":220,"priority":139,"file":140,"line":221},"load-options-general.php","wpp_load_options_general",205,{"type":136,"name":223,"callback":224,"file":140,"line":225},"number_format_i18n","wpp_numbers_en2fa",208,{"type":136,"name":227,"callback":228,"file":140,"line":229},"get_term","wpp_get_term",211,{"type":136,"name":231,"callback":232,"file":140,"line":233},"get_comment","wpp_comment",212,{"type":136,"name":235,"callback":232,"file":140,"line":236},"comment_save_pre",213,{"type":136,"name":238,"callback":224,"file":140,"line":239},"the_title",216,{"type":136,"name":238,"callback":241,"file":140,"line":242},"wpp_letters_ar2fa",219,{"type":136,"name":244,"callback":245,"priority":139,"file":140,"line":246},"plugin_row_meta","wpp_plugin_row_meta",223,{"type":143,"name":248,"callback":249,"priority":139,"file":140,"line":250},"save_post","wpp_save_post",227,{"type":143,"name":252,"callback":253,"priority":139,"file":140,"line":254},"woocommerce_before_save_order_items","wpp_woocommerce_before_save_order_items",229,{"type":136,"name":256,"callback":197,"priority":139,"file":140,"line":257},"wp_date",240,{"type":136,"name":259,"callback":260,"priority":139,"file":140,"line":261},"post_link","wpp_post_link",243,{"type":136,"name":263,"callback":264,"priority":139,"file":140,"line":265},"posts_where","wpp_jalali_query",247,{"type":136,"name":267,"callback":268,"file":140,"line":269},"pre_get_posts","wpp_filter_posts",248,{"type":136,"name":223,"callback":224,"file":140,"line":271},253,{"type":136,"name":273,"callback":224,"file":140,"line":274},"wp_title",256,{"type":136,"name":238,"callback":224,"file":140,"line":276},259,{"type":136,"name":278,"callback":224,"file":140,"line":279},"the_excerpt",262,{"type":136,"name":281,"callback":224,"file":140,"line":282},"the_content",265,{"type":136,"name":284,"callback":224,"file":140,"line":285},"comment_text",268,{"type":136,"name":287,"callback":224,"file":140,"line":288},"comments_number",271,{"type":136,"name":290,"callback":224,"file":140,"line":291},"wp_list_categories",274,{"type":136,"name":273,"callback":241,"file":140,"line":293},278,{"type":136,"name":238,"callback":241,"file":140,"line":295},279,{"type":136,"name":278,"callback":241,"file":140,"line":297},280,{"type":136,"name":281,"callback":241,"file":140,"line":299},281,{"type":136,"name":284,"callback":241,"file":140,"line":301},282,{"type":136,"name":287,"callback":241,"file":140,"line":303},283,{"type":136,"name":290,"callback":241,"file":140,"line":305},284,{"type":136,"name":307,"callback":241,"file":140,"line":308},"the_category",285,{"type":143,"name":310,"callback":311,"file":312,"line":313},"admin_head","DynamicStyle","includes\\class-wpp-hooks.php",182,{"type":136,"name":267,"callback":268,"file":312,"line":315},440,{"type":136,"name":263,"callback":264,"file":312,"line":317},442,{"type":136,"name":196,"callback":197,"priority":139,"file":312,"line":319},452,{"type":143,"name":321,"callback":321,"priority":139,"file":322,"line":323},"admin_menu","includes\\class-wpp-options.php",27,{"type":143,"name":325,"callback":326,"priority":139,"file":322,"line":327},"admin_init","register_fields",28,{"type":143,"name":148,"callback":148,"file":322,"line":329},29,{"type":136,"name":331,"callback":332,"priority":139,"file":333,"line":334},"wpp_disable_jalali_date","wcp_disable_jdate","plugins\\wc-persian\\wc-persian.php",50,{"type":143,"name":215,"callback":336,"file":333,"line":141},"wcp_admin_enqueue_scripts",[],[],[],[],{"dangerousFunctions":342,"sqlUsage":343,"outputEscaping":354,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":34,"bundledLibraries":399},[],{"prepared":344,"raw":345,"locations":346},9,2,[347,351],{"file":348,"line":349,"context":350},"includes\\general-template.php",117,"$wpdb->get_var() with variable interpolation",{"file":348,"line":352,"context":353},230,"$wpdb->get_results() with variable interpolation",{"escaped":355,"rawEcho":356,"locations":357},18,24,[358,360,361,363,365,367,370,372,374,375,376,378,380,382,384,386,388,389,390,392,394,395,397,398],{"file":312,"line":194,"context":359},"raw output",{"file":312,"line":352,"context":359},{"file":348,"line":362,"context":359},89,{"file":348,"line":364,"context":359},105,{"file":348,"line":366,"context":359},295,{"file":368,"line":369,"context":359},"includes\\widgets\\class-wpp-widget-jarchive.php",36,{"file":368,"line":371,"context":359},38,{"file":368,"line":373,"context":359},48,{"file":368,"line":149,"context":359},{"file":368,"line":362,"context":359},{"file":368,"line":377,"context":359},91,{"file":368,"line":379,"context":359},92,{"file":368,"line":381,"context":359},94,{"file":368,"line":383,"context":359},95,{"file":368,"line":385,"context":359},97,{"file":368,"line":387,"context":359},98,{"file":368,"line":152,"context":359},{"file":368,"line":174,"context":359},{"file":391,"line":334,"context":359},"includes\\widgets\\class-wpp-widget-jcalendar.php",{"file":391,"line":393,"context":359},52,{"file":391,"line":156,"context":359},{"file":391,"line":396,"context":359},96,{"file":391,"line":385,"context":359},{"file":391,"line":385,"context":359},[400],{"name":401,"version":29,"knownCves":402},"TinyMCE",[],[404,422],{"entryPoint":405,"graph":406,"unsanitizedCount":34,"severity":421},"wpp_restrict_manage_posts (includes\\class-wpp-hooks.php:213)",{"nodes":407,"edges":418},[408,413],{"id":409,"type":410,"label":411,"file":312,"line":412},"n0","source","$_GET",226,{"id":414,"type":415,"label":416,"file":312,"line":352,"wp_function":417},"n1","sink","echo() [XSS]","echo",[419],{"from":409,"to":414,"sanitized":420},false,"medium",{"entryPoint":423,"graph":424,"unsanitizedCount":34,"severity":430},"\u003Cclass-wpp-hooks> (includes\\class-wpp-hooks.php:0)",{"nodes":425,"edges":428},[426,427],{"id":409,"type":410,"label":411,"file":312,"line":412},{"id":414,"type":415,"label":416,"file":312,"line":352,"wp_function":417},[429],{"from":409,"to":414,"sanitized":420},"low",{"summary":432,"deductions":433},"The wp-persian plugin v3.3.0 presents a mixed security profile. On the positive side, the plugin exhibits a very small attack surface, with no identifiable AJAX handlers, REST API routes, shortcodes, or cron events exposed. Furthermore, there are no known vulnerabilities (CVEs) associated with this plugin, and its history is clean, suggesting a generally well-maintained codebase.\n\nHowever, the static analysis reveals some areas of concern. A significant portion of the output (57%) is not properly escaped, which could lead to cross-site scripting (XSS) vulnerabilities if user-supplied data is not handled carefully. While only one capability check is present, the lack of any nonce checks on the zero AJAX handlers is notable, though the absence of any AJAX handlers itself mitigates this risk currently. The taint analysis indicated two flows with unsanitized paths, which, while not classified as critical or high, warrant attention as potential vectors for path traversal or information disclosure if these paths are ever exposed to external input.\n\nIn conclusion, the plugin's strength lies in its minimal attack surface and lack of known vulnerabilities. The primary weaknesses identified are the significant number of unescaped outputs and the presence of unsanitized paths in the taint analysis. These issues, while not currently leading to high-severity exploitable vulnerabilities based on the provided data, represent potential risks that should be addressed to improve the plugin's overall security posture.",[434,437,440],{"reason":435,"points":436},"High percentage of unescaped output",8,{"reason":438,"points":439},"Taint flows with unsanitized paths",5,{"reason":441,"points":439},"No nonce checks on AJAX handlers","2026-03-16T17:53:49.343Z",{"wat":444,"direct":463},{"assetPaths":445,"generatorPatterns":453,"scriptPaths":454,"versionParams":455},[446,447,448,449,450,451,452],"\u002Fwp-content\u002Fplugins\u002Fwp-persian\u002Fassets\u002Fcss\u002Fwpp-context.css","\u002Fwp-content\u002Fplugins\u002Fwp-persian\u002Fassets\u002Fjs\u002Fwpp-context.js","\u002Fwp-content\u002Fplugins\u002Fwp-persian\u002Fassets\u002Fcss\u002Fwp-persian.css","\u002Fwp-content\u002Fplugins\u002Fwp-persian\u002Fassets\u002Fjs\u002Fwpp-jalali.js","\u002Fwp-content\u002Fplugins\u002Fwp-persian\u002Fassets\u002Fjs\u002Fwp-persian.js","\u002Fwp-content\u002Fplugins\u002Fwc-persian\u002Fassets\u002Fjs\u002Fwc-persian.js","\u002Fwp-content\u002Fplugins\u002Fwc-persian\u002Fassets\u002Fcss\u002Fwc-persian.css",[],[447,449,450,451],[456,457,458,459,460,461,462],"wp-persian\u002Fassets\u002Fcss\u002Fwpp-context.css?ver=","wp-persian\u002Fassets\u002Fjs\u002Fwpp-context.js?ver=","wp-persian\u002Fassets\u002Fcss\u002Fwp-persian.css?ver=","wp-persian\u002Fassets\u002Fjs\u002Fwpp-jalali.js?ver=","wp-persian\u002Fassets\u002Fjs\u002Fwp-persian.js?ver=","wc-persian\u002Fassets\u002Fjs\u002Fwc-persian.js?ver=","wc-persian\u002Fassets\u002Fcss\u002Fwc-persian.css?ver=",{"cssClasses":464,"htmlComments":465,"htmlAttributes":466,"restEndpoints":467,"jsGlobals":468,"shortcodeOutput":471},[],[],[],[],[469,470],"window.wp_persian","window.WP_Persian",[]]