[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhdmnb6gO0dgeU9NqSKG3TiOYjHtf8AaQf1g4Yj06CZs":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":38,"analysis":110,"fingerprints":207},"wp-stateless-elementor-website-builder-addon","WP-Stateless – Elementor Website Builder Addon","0.0.4","UDX Usability Dynamics","https:\u002F\u002Fprofiles.wordpress.org\u002Fusability_dynamics\u002F","\u003Cp>Provides compatibility between the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Felementor\u002F\" rel=\"ugc\">Elementor Website Builder\u003C\u002Fa> and the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-stateless\u002F\" rel=\"ugc\">WP-Stateless\u003C\u002Fa> plugins.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Sync CSS files generated by Elementor Website Builder with Google Cloud Storage.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Notes\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Tested with Elementor Website Builder plugin version 3.24.3\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Support, Feedback, & Contribute\u003C\u002Fh4>\n\u003Cp>We welcome community involvement via the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fudx\u002Fwp-stateless-elementor-website-builder-addon\" rel=\"nofollow ugc\">GitHub repository\u003C\u002Fa>.\u003C\u002Fp>\n","Provides compatibility between the Elementor Website Builder and the WP-Stateless plugins.",200,3180,0,"2024-10-18T14:33:00.000Z","6.6.5","5.0","8.0",[19,20,21,22,23],"elementor-website-builder","elementor-website-builder-addon-extension","google-cloud-storage","stateless","wp-stateless","https:\u002F\u002Fstateless.udx.io\u002Faddons\u002Felementor\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-stateless-elementor-website-builder-addon.0.0.4.zip",92,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":34,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"usability_dynamics",15,4840,96,322,76,"2026-04-03T21:31:18.089Z",[39,55,69,83,97],{"slug":40,"name":41,"version":42,"author":7,"author_profile":8,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":13,"num_ratings":13,"last_updated":47,"tested_up_to":48,"requires_at_least":16,"requires_php":17,"tags":49,"homepage":52,"download_link":53,"security_score":54,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"wp-stateless-gravity-forms-addon","WP-Stateless – Gravity Forms Addon","0.0.3","\u003Cp>Provides compatibility between the \u003Ca href=\"https:\u002F\u002Fwww.gravityforms.com\u002F\" rel=\"nofollow ugc\">Gravity Forms\u003C\u002Fa> and the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-stateless\u002F\" rel=\"ugc\">WP-Stateless\u003C\u002Fa> plugins.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Sync files uploaded using Gravity Forms with Google Cloud Storage. \u003C\u002Fli>\n\u003Cli>Skip cache busting when using Gravity Forms export functionality.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Notes\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Tested with Gravity Forms plugin version 2.9.16.1\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Support, Feedback, & Contribute\u003C\u002Fh4>\n\u003Cp>We welcome community involvement via the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fudx\u002Fwp-stateless-gravity-forms-addon\" rel=\"nofollow ugc\">GitHub repository\u003C\u002Fa>.\u003C\u002Fp>\n","Provides compatibility between the Gravity Forms and the WP-Stateless plugins.",300,17030,"2025-08-29T14:48:00.000Z","6.8.5",[21,50,51,22,23],"gravity-forms","gravity-forms-addon-extension","https:\u002F\u002Fstateless.udx.io\u002Faddons\u002Fgravity-forms\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-stateless-gravity-forms-addon.0.0.3.zip",100,{"slug":56,"name":57,"version":58,"author":7,"author_profile":8,"description":59,"short_description":60,"active_installs":54,"downloaded":61,"rating":13,"num_ratings":13,"last_updated":62,"tested_up_to":63,"requires_at_least":16,"requires_php":17,"tags":64,"homepage":67,"download_link":68,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"wp-stateless-woocommerce-addon","WP-Stateless – WooCommerce Addon","0.0.2","\u003Cp>Provides compatibility between the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoocommerce\u002F\" rel=\"ugc\">WooCommerce\u003C\u002Fa> and the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-stateless\u002F\" rel=\"ugc\">WP-Stateless\u003C\u002Fa> plugins.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Skips cache busting for WooCommerce export templates.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Notes\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Tested with WooCommerce plugin version 9.4.3\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Support, Feedback, & Contribute\u003C\u002Fh4>\n\u003Cp>We welcome community involvement via the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fudx\u002Fwp-stateless-woocommerce-addon\" rel=\"nofollow ugc\">GitHub repository\u003C\u002Fa>.\u003C\u002Fp>\n","Provides compatibility between the WooCommerce and the WP-Stateless plugins.",2985,"2024-12-16T14:55:00.000Z","6.7.5",[21,22,65,66,23],"woocommerce","woocommerce-addon-extension","https:\u002F\u002Fstateless.udx.io\u002Faddons\u002Fwoocommerce\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-stateless-woocommerce-addon.0.0.2.zip",{"slug":70,"name":71,"version":72,"author":7,"author_profile":8,"description":73,"short_description":74,"active_installs":75,"downloaded":76,"rating":13,"num_ratings":13,"last_updated":77,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":78,"homepage":81,"download_link":82,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"wp-stateless-litespeed-cache-addon","WP-Stateless – LiteSpeed Cache Addon","0.0.1","\u003Cp>Provides compatibility between the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Flitespeed-cache\u002F\" rel=\"ugc\">LiteSpeed Cache\u003C\u002Fa> and the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-stateless\u002F\" rel=\"ugc\">WP-Stateless\u003C\u002Fa> plugins.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Sync images optimized by LiteSpeed Cache with Google Cloud Storage.\u003C\u002Fli>\n\u003Cli>Bypass LiteSpeed Cache image check for files located on Google Cloud Storage.\u003C\u002Fli>\n\u003Cli>Override LiteSpeed Cache file information for files located on Google Cloud Storage.\u003C\u002Fli>\n\u003Cli>Add support for \u003Ccode>webp\u003C\u002Fcode> images.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Notes\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Tested with LiteSpeed Cache plugin version 6.5.1\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Support, Feedback, & Contribute\u003C\u002Fh4>\n\u003Cp>We welcome community involvement via the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fudx\u002Fwp-stateless-litespeed-cache-addon\" rel=\"nofollow ugc\">GitHub repository\u003C\u002Fa>.\u003C\u002Fp>\n","Provides compatibility between the LiteSpeed Cache and the WP-Stateless plugins.",90,1410,"2024-10-16T17:45:00.000Z",[21,79,80,22,23],"litespeed-addon-extension","litespeed-cache","https:\u002F\u002Fstateless.udx.io\u002Faddons\u002Flite-speed-cache\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-stateless-litespeed-cache-addon.0.0.1.zip",{"slug":84,"name":85,"version":72,"author":7,"author_profile":8,"description":86,"short_description":87,"active_installs":88,"downloaded":89,"rating":13,"num_ratings":13,"last_updated":90,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":91,"homepage":94,"download_link":95,"security_score":54,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":96},"wp-stateless-divi-theme-addon","WP-Stateless – Divi Theme Addon","\u003Cp>Provides compatibility between the \u003Ca href=\"https:\u002F\u002Fwww.elegantthemes.com\u002Fgallery\u002Fdivi\u002F\" rel=\"nofollow ugc\">Divi theme\u003C\u002Fa> and the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-stateless\u002F\" rel=\"ugc\">WP-Stateless\u003C\u002Fa> plugin.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Exclude randomize file name while doing export.\u003C\u002Fli>\n\u003Cli>Skip cache busting for page builder.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Notes\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Tested with Divi theme version 4.22.2\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Support, Feedback, & Contribute\u003C\u002Fh4>\n\u003Cp>We welcome community involvement via the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fudx\u002Fwp-stateless-divi-addon\" rel=\"nofollow ugc\">GitHub repository\u003C\u002Fa>.\u003C\u002Fp>\n","Provides compatibility between the Divi theme and the WP-Stateless plugin.",60,984,"",[92,93,21,22,23],"divi","divi-addon-extension","https:\u002F\u002Fstateless.udx.io\u002Faddons\u002Fdivi\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-stateless-divi-theme-addon.0.0.1.zip","2026-03-15T10:48:56.248Z",{"slug":98,"name":99,"version":58,"author":7,"author_profile":8,"description":100,"short_description":101,"active_installs":102,"downloaded":103,"rating":13,"num_ratings":13,"last_updated":104,"tested_up_to":48,"requires_at_least":16,"requires_php":17,"tags":105,"homepage":108,"download_link":109,"security_score":54,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"wp-stateless-siteorigin-widgets-bundle-addon","WP-Stateless – SiteOrigin Widgets Bundle Addon","\u003Cp>Provides compatibility between the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fso-widgets-bundle\u002F\" rel=\"ugc\">SiteOrigin Widgets Bundle\u003C\u002Fa> and the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-stateless\u002F\" rel=\"ugc\">WP-Stateless\u003C\u002Fa> plugins.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Sync CSS files generated by SiteOrigin Widgets Bundle plugin with Google Cloud Storage.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Notes\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Tested with SiteOrigin Widgets Bundle plugin version 1.69.3\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Support, Feedback, & Contribute\u003C\u002Fh4>\n\u003Cp>We welcome community involvement via the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fudx\u002Fwp-stateless-siteorigin-widgets-bundle-addon\" rel=\"nofollow ugc\">GitHub repository\u003C\u002Fa>.\u003C\u002Fp>\n","Provides compatibility between the SiteOrigin Widgets Bundle and the WP-Stateless plugins.",30,1804,"2025-08-29T15:12:00.000Z",[21,106,107,22,23],"site-origin-addon-extension","siteorigin-widgets-bundle","https:\u002F\u002Fstateless.udx.io\u002Faddons\u002Fsiteorigin-widgets-bundle\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-stateless-siteorigin-widgets-bundle-addon.0.0.2.zip",{"attackSurface":111,"codeSignals":188,"taintFlows":195,"riskAssessment":196,"analyzedAt":206},{"hooks":112,"ajaxHandlers":175,"restRoutes":184,"shortcodes":185,"cronEvents":186,"entryPointCount":187,"unprotectedCount":187},[113,119,124,127,131,136,141,145,149,153,157,161,164,167,172],{"type":114,"name":115,"callback":116,"file":117,"line":118},"action","elementor\u002Fcore\u002Ffiles\u002Fclear_cache","delete_elementor_files","class-elementor.php",35,{"type":114,"name":120,"callback":121,"priority":122,"file":117,"line":123},"save_post","delete_css_files",10,36,{"type":114,"name":125,"callback":121,"file":117,"line":126},"deleted_post",37,{"type":114,"name":128,"callback":129,"priority":122,"file":117,"line":130},"sm::pre::sync::nonMediaFiles","filter_css_file",38,{"type":114,"name":132,"callback":133,"priority":134,"file":117,"line":135},"elementor_pro\u002Fforms\u002Fprocess","process_files",20,41,{"type":137,"name":138,"callback":139,"priority":122,"file":117,"line":140},"filter","set_url_scheme","sync_rewrite_url",43,{"type":137,"name":142,"callback":143,"priority":122,"file":117,"line":144},"elementor\u002Fsettings\u002Fgeneral\u002Fsuccess_response_data","delete_global_css",44,{"type":137,"name":146,"callback":147,"priority":122,"file":117,"line":148},"sm:sync::syncArgs","sync_args",45,{"type":137,"name":150,"callback":151,"priority":134,"file":117,"line":152},"sm:sync::nonMediaFiles","get_sync_files",46,{"type":137,"name":154,"callback":155,"file":117,"line":156},"elementor_pro\u002Fforms\u002Fupload_path","get_upload_path",47,{"type":137,"name":158,"callback":159,"file":117,"line":160},"elementor_pro\u002Fforms\u002Fupload_url","get_upload_file_url",48,{"type":137,"name":162,"callback":155,"file":117,"line":163},"elementor_pro\u002Ficons_manager\u002Fcustom_icons\u002Fdir",49,{"type":137,"name":165,"callback":159,"file":117,"line":166},"elementor_pro\u002Ficons_manager\u002Fcustom_icons\u002Furl",50,{"type":114,"name":168,"callback":169,"file":170,"line":171},"plugins_loaded","closure","wp-stateless-elementor-addon.php",18,{"type":137,"name":173,"callback":169,"priority":122,"file":170,"line":174},"plugin_row_meta",25,[176,181],{"action":177,"nopriv":178,"callback":179,"hasNonce":178,"hasCapCheck":178,"file":117,"line":180},"elementor_pro_forms_send_form",false,"remove_cache_busting",39,{"action":177,"nopriv":182,"callback":179,"hasNonce":178,"hasCapCheck":178,"file":117,"line":183},true,40,[],[],[],2,{"dangerousFunctions":189,"sqlUsage":190,"outputEscaping":192,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":194},[],{"prepared":13,"raw":13,"locations":191},[],{"escaped":13,"rawEcho":13,"locations":193},[],[],[],{"summary":197,"deductions":198},"The \"wp-stateless-elementor-website-builder-addon\" plugin v0.0.4 exhibits a concerning security posture due to a significant number of unprotected entry points. While the static analysis indicates a lack of dangerous functions, raw SQL queries, file operations, external requests, and potential output escaping issues, the presence of two AJAX handlers without authentication checks is a critical weakness. This means that any user, regardless of their role or permissions, could potentially trigger these AJAX actions, opening the door for unauthorized operations or information disclosure.\n\nThe vulnerability history shows no recorded CVEs, which is a positive sign. However, this alone does not negate the risks identified in the code. The absence of taint analysis results is neutral, as it might imply no such flows were detected or the analysis tooling had limitations. The plugin demonstrates good practices by not bundling external libraries and by utilizing prepared statements for SQL queries, but these strengths are overshadowed by the critical exposure of AJAX endpoints.\n\nIn conclusion, while the plugin avoids some common pitfalls, the unprotected AJAX handlers represent a significant and immediate security risk. The lack of explicit capability checks and nonce validation on these entry points makes them prime targets for exploitation. Further investigation into the functionality of these AJAX handlers is crucial to understand the full impact of this vulnerability.",[199,201,204],{"reason":200,"points":122},"AJAX handlers without auth checks",{"reason":202,"points":203},"Lack of nonce checks on AJAX handlers",7,{"reason":205,"points":203},"Lack of capability checks on AJAX handlers","2026-03-16T20:26:41.378Z",{"wat":208,"direct":214},{"assetPaths":209,"generatorPatterns":211,"scriptPaths":212,"versionParams":213},[210],"\u002Fwp-content\u002Fplugins\u002Fwp-stateless-elementor-website-builder-addon\u002Fvendor\u002Fwpcloud\u002Fstateless-media\u002Fsrc\u002FCompatibility\u002Felementor-compatibility.php",[],[],[],{"cssClasses":215,"htmlComments":216,"htmlAttributes":217,"restEndpoints":218,"jsGlobals":219,"shortcodeOutput":220},[],[],[],[],[],[]]