[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhLlKPh5Nat7SsG4XCsUNEZEndt_DHMRQEygVW096O-o":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":37,"analysis":97,"fingerprints":166},"wpac-typing","Urdu Typing","1.0","Mian Shahzad Raza","https:\u002F\u002Fprofiles.wordpress.org\u002Fmianshahzadraza\u002F","\u003Cp>This Urdu Typing plugin will let you write Urdu in WordPress. You can write Urdu for Post Title, Post Content, Category Names & Tags. And thats all with a great Urdu font Nafees Nastaleeq. You don’t have to install any font or keyboard in your system.\u003C\u002Fp>\n\u003Cp>This plugin is compatible with Cklassic Editor only at the moment, so make sure you have classic editor plugin installed and activated.\u003C\u002Fp>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cp>This plugin is based on \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Furdu-keyboard\u002F\" title=\"Urdu Keyboard\" rel=\"ugc\">Urdu Keyboard\u003C\u002Fa> orginally developed by @zayedbaloch.\u003Cbr \u002F>\nUrdu Keyboard JS Library by \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Furduweb\u002Furdueditor\u002Ftree\u002Fmaster\u002Fjquery\" rel=\"nofollow ugc\">UrduWeb\u003C\u002Fa>\u003C\u002Fp>\n","Now you can write Urdu Unicode in your WordPress Posts or Pages.",300,6493,0,"2019-11-18T12:53:00.000Z","5.3.21","4.0","5.6.0",[19,20,21,22],"urdu","urdu-keyboard","urdu-typing","urdu-writting","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwpac-typing\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpac-typing.1.0.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"mianshahzadraza",4,600,93,30,89,"2026-04-06T09:29:01.583Z",[38,58,78],{"slug":20,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":11,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":55,"download_link":56,"security_score":57,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"Urdu Keyboard","1.3","Zayed Baloch","https:\u002F\u002Fprofiles.wordpress.org\u002Fzayedbaloch\u002F","\u003Cp>This is the First Urdu writing keyboard Plugin for WordPress. Now you can easily write Urdu posts and pages directly in WordPress without installing Urdu keyboard on your system.\u003C\u002Fp>\n\u003Cp>This Urdu Keyoboard (Phonetic) for WordPress, enables you to easily type Urdu in WordPress without installing Urduphonetic keyboard in your system.\u003C\u002Fp>\n\u003Ch4>Note\u003C\u002Fh4>\n\u003Cp>The plugin works with the WordPress Classic editor.\u003C\u002Fp>\n\u003Ch4>Compatible Browsers\u003C\u002Fh4>\n\u003Cp>Chrome, Firefox, IE10, IE11, Safari and Opera.\u003C\u002Fp>\n","Easily write Urdu unicode on WordPress without installing Urdu keyboard on your system.",28901,90,8,"2024-07-02T08:37:00.000Z","6.5.8","3.2","",[53,54,19,20,22],"pages","posts","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Furdu-keyboard\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Furdu-keyboard.1.3.zip",92,{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":11,"downloaded":66,"rating":67,"num_ratings":68,"last_updated":69,"tested_up_to":49,"requires_at_least":70,"requires_php":71,"tags":72,"homepage":76,"download_link":77,"security_score":57,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"wpurdu","WPUrdu","1.0.6","Hassan Ali ⚡️","https:\u002F\u002Fprofiles.wordpress.org\u002Fcreativehassan\u002F","\u003Cp>WP Urdu is simple and efficient Urdu writing plugin, this plugin will allow you to write Urdu with in the WordPress editors. When you will write roman Urdu like Text “Mujhay Urdu Likhna Pasand Hai” in editor It will convert that to “مجھے اردو لکھنا پسند ہے”. You can enable this option by clicking the button over editors.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Plugin Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Urdu Writing.\u003C\u002Fli>\n\u003Cli>Urdu Fonts (Nafees Nastaleeq famous Urdu font) and many more.\u003C\u002Fli>\n\u003Cli>Gutenberg Editor Block.\u003C\u002Fli>\n\u003Cli>Gutenberg Editor Sidebar Block Urdu Fonts (Nafees Nastaleeq) and Font Size.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>WordPress Editor\u003Cbr \u002F>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F7TR9Y3meIwg?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>WordPress Gutenberg Block\u003Cbr \u002F>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F1daxzjUBqxk?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Upcoming Features\u003C\u002Fstrong>\u003Cbr \u002F>\n* Comments section Urdu Typing.\u003Cbr \u002F>\n* Some Exiting hidden features.\u003C\u002Fp>\n","WPUrdu Make Possible Urdu writing in WordPress editor Urdu -> اردو",8095,100,2,"2024-05-21T10:57:00.000Z","5.0","7.4",[73,74,21,75,59],"urdu-editor","urdu-language","wp-urdu","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwpurdu","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpurdu.zip",{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":86,"downloaded":87,"rating":67,"num_ratings":68,"last_updated":88,"tested_up_to":89,"requires_at_least":70,"requires_php":51,"tags":90,"homepage":95,"download_link":96,"security_score":67,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"smart-rtl-post","Smart RTL Post","1.0.0","Luqman Safay","https:\u002F\u002Fprofiles.wordpress.org\u002Fluqmansafay\u002F","\u003Cp>Smart RTL Post changes your post layout direction to right-to-left for languages like Pashto, Arabic, and Urdu with just one click.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This program is free software; you can redistribute it and\u002For modify it under the terms of the GNU General Public License version 2 or later.\u003Cbr \u002F>\nFor more details, visit: https:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-2.0.html.\u003C\u002Fp>\n","Smartly switch your post layout to right-to-left for languages like Pashto, Arabic, and Urdu.",20,436,"2025-09-11T13:12:00.000Z","6.8.5",[91,92,93,94,19],"arabic","content-direction","right-to-left","rtl","https:\u002F\u002Fpoetrypashto.com\u002Fsmart-rtl-post\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsmart-rtl-post.1.0.0.zip",{"attackSurface":98,"codeSignals":143,"taintFlows":154,"riskAssessment":155,"analyzedAt":165},{"hooks":99,"ajaxHandlers":139,"restRoutes":140,"shortcodes":141,"cronEvents":142,"entryPointCount":13,"unprotectedCount":13},[100,106,110,114,118,122,125,130,134],{"type":101,"name":102,"callback":103,"file":104,"line":105},"action","wp_loaded","init","wpac-typing.php",22,{"type":101,"name":107,"callback":108,"file":104,"line":109},"admin_menu","wpac_typing_admin_page",26,{"type":101,"name":111,"callback":112,"file":104,"line":113},"admin_init","add_editor_buttons",27,{"type":101,"name":115,"callback":116,"file":104,"line":117},"admin_footer","popup",28,{"type":101,"name":119,"callback":120,"file":104,"line":121},"admin_print_styles","admin_styles",31,{"type":101,"name":119,"callback":123,"file":104,"line":124},"admin_scripts",32,{"type":126,"name":127,"callback":128,"file":104,"line":129},"filter","enter_title_here","wpac_typing_title_text_input",34,{"type":126,"name":131,"callback":132,"file":104,"line":133},"wp_default_editor","closure",37,{"type":101,"name":135,"callback":136,"priority":137,"file":104,"line":138},"media_buttons","wpac_ut_help_button",10,61,[],[],[],[],{"dangerousFunctions":144,"sqlUsage":145,"outputEscaping":147,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":153},[],{"prepared":13,"raw":13,"locations":146},[],{"escaped":13,"rawEcho":68,"locations":148},[149,152],{"file":104,"line":150,"context":151},70,"raw output",{"file":104,"line":150,"context":151},[],[],{"summary":156,"deductions":157},"The wpac-typing v1.0 plugin exhibits a generally good security posture based on the provided static analysis. The complete absence of entry points like AJAX handlers, REST API routes, shortcodes, and cron events significantly limits the potential attack surface. Furthermore, the code does not utilize dangerous functions, perform file operations, make external HTTP requests, or appear to have known vulnerability history, all of which are positive indicators. The use of prepared statements for SQL queries is also a strong security practice.\n\nHowever, a significant concern arises from the 100% rate of unescaped output. This indicates that data processed by the plugin and then displayed to users is not properly sanitized, creating a high risk of Cross-Site Scripting (XSS) vulnerabilities. Additionally, the complete lack of nonce and capability checks on any potential, albeit currently non-existent, entry points is a weakness. While there are no active entry points to exploit, if the plugin were to be extended in the future without careful implementation of these security measures, it could easily become vulnerable.\n\nIn conclusion, while the plugin's current design minimizes direct exploit vectors and adheres to secure SQL practices, the unescaped output is a critical flaw that could lead to significant security issues. The lack of security checks, though not currently exploitable, represents a potential future risk. Addressing the output escaping is paramount to improving the plugin's security.",[158,160,163],{"reason":159,"points":47},"100% of outputs are not properly escaped",{"reason":161,"points":162},"No nonce checks implemented",5,{"reason":164,"points":162},"No capability checks implemented","2026-03-16T19:58:12.517Z",{"wat":167,"direct":178},{"assetPaths":168,"generatorPatterns":172,"scriptPaths":173,"versionParams":174},[169,170,171],"\u002Fwp-content\u002Fplugins\u002Fwpac-typing\u002Fassets\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fwpac-typing\u002Fassets\u002Fjs\u002FUrduEditor.js","\u002Fwp-content\u002Fplugins\u002Fwpac-typing\u002Fassets\u002Fjs\u002Finit.js",[],[170,171],[175,176,177],"wpac-ut-admin","wpac-ut-editor","wpac-ut-init",{"cssClasses":179,"htmlComments":183,"htmlAttributes":184,"restEndpoints":190,"jsGlobals":191,"shortcodeOutput":192},[180,181,182],"wpac-ut","wpac-ut_keyboard","wpac-ut_content",[],[185,186,187,188,189],"id=\"urdu_keyboard_help\"","id=\"wpac-ut-wrap\"","class=\"wpac-ut\"","data-page","data-target",[],[],[193],"\u003Ca href=\"#TB_inline?width=640&height=600&inlineId=wpac-ut-wrap\" id=\"urdu_keyboard_help\" class=\"thickbox button\" title=\"Urdu Typing Help\" data-page=\"\u003C?php echo $page; ?>\" data-target=\"\u003C?php echo $target; ?>\">\n        \u003Cimg src=\"\u003C?php echo WPACUT_URL . \"\u002Fassets\u002Fimages\u002Fkeyboard.png\";?>\" alt=\"\" \u002F>\n      \u003C\u002Fa>"]