[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsTvz1_Ehelgr3bP9Z8JgFKIRORnL58TSgT_umU7ABDE":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":37,"analysis":129,"fingerprints":176},"wpcore","WPCore Plugin Manager","1.9.2","stueynet","https:\u002F\u002Fprofiles.wordpress.org\u002Fstueynet\u002F","\u003Cp>WPCore is a tool that allows you to manage collections of WordPress plugins and then quickly install them on any WordPress site. You can generate your collections at https:\u002F\u002Fwpcore.com and then import them to your WordPress site by copying and pasting your unique collection key in WordPress.\u003C\u002Fp>\n","Create plugin collections and install them in one click on any WordPress site.",10000,168565,96,32,"2025-05-20T17:15:00.000Z","6.8.5","3.5","",[20,21,22,23,24],"admin","administration","install","installation","plugins","https:\u002F\u002Fwpcore.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpcore.1.9.2.zip",100,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},1,30,94,"2026-04-04T03:33:37.966Z",[38,58,75,94,114],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":18,"tags":53,"homepage":55,"download_link":56,"security_score":57,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"install-profiles","WP Install Profiles","3.4.1","rockgod100","https:\u002F\u002Fprofiles.wordpress.org\u002Frockgod100\u002F","\u003Cp>Save time setting up new sites by automatically downloading groups of plugins. Add new plugins by adding the slug from the plugin’s url in the WordPress plugin directory. For instance, the plugin “All In One SEO Pack” is listed here: \u003Ccode>https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fall-in-one-seo-pack\u002F\u003C\u002Fcode>. Add “All In One SEO Pack” to an installation profile by adding \u003Ccode>all-in-one-seo-pack\u003C\u002Fcode> in the plugins field (one plugin per line).\u003C\u002Fp>\n\u003Cp>WP Install Profiles (WPIP) allows users to define groups of plugins, called profiles. Once a profile has been entered, WPIP calls to the WordPress Plugin Directory, downloads the plugin files and unzips them to the site’s plugins folder. Additionally, WPIP saves the profile in a downloadable format, so you can upload it to your next site and download the same plugins with a single click.\u003C\u002Fp>\n\u003Cp>Store your profiles online at http:\u002F\u002Fplugins.ancillaryfactory.com and import them easily into all of your WordPress installs. \u003Ca href=\"http:\u002F\u002Fplugins.ancillaryfactory.com\" rel=\"nofollow ugc\">Learn more and create an account\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>See Install Profiles in action: \u003Ca href=\"http:\u002F\u002Fwww.youtube.com\u002Fwatch?v=W-mBhPA1XGA\" rel=\"nofollow ugc\">http:\u002F\u002Fwww.youtube.com\u002Fwatch?v=W-mBhPA1XGA\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Troubleshooting\u003C\u002Fh3>\n\u003Ch4>Required PHP libraries\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>SimpleXML\u003C\u002Fli>\n\u003Cli>ZipArchive\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>These libraries are installed by default on most shared hosting accounts, but they may need to be installed manually if your site is hosted by certain providers, including Media Temple.\u003C\u002Fp>\n\u003Ch4>File Permissions\u003C\u002Fh4>\n\u003Cp>If you are unable to save or import profiles, you may need to set \u003Ccode>wp-content\u002Fplugins\u002Finstall-profiles\u002Fprofiles\u003C\u002Fcode> to 777.\u003C\u002Fp>\n","Download custom collections of plugins automatically from the WordPress plugin directory.",400,20134,72,9,"2013-05-22T01:17:00.000Z","3.6.1","3.1",[20,21,23,24,54],"wp","http:\u002F\u002Fplugins.ancillaryfactory.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finstall-profiles.zip",85,{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":66,"downloaded":67,"rating":27,"num_ratings":33,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":18,"tags":71,"homepage":73,"download_link":74,"security_score":57,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"plugin-installer-speedup","Plugin Installer Speedup","0.2.2","Viktor Szépe","https:\u002F\u002Fprofiles.wordpress.org\u002Fszepeviktor\u002F","\u003Cp>Speed up plugin installation.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Don’t load featured plugins.\u003C\u002Fli>\n\u003Cli>Make Search Plugins button visible.\u003C\u002Fli>\n\u003Cli>Set focus to search field.\u003C\u002Fli>\n\u003Cli>Skip plugin install confirmation.\u003C\u002Fli>\n\u003Cli>Add admin menu items under “Plugins” for Upload Plugin and Favorites.\u003C\u002Fli>\n\u003Cli>Add admin bar menu item under “+ New”.\u003C\u002Fli>\n\u003Cli>Remove “-master” from (mainly GitHub) ZIP archive names.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>No admin page for this plugin. Ready to go right after activation.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fszepeviktor\u002Fplugin-installer-speedup\" rel=\"nofollow ugc\">GitHub repository\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>The feature of plugin upload from URL has been moved to a\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fszepeviktor\u002Fwordpress-plugin-construction\u002Fblob\u002Fmaster\u002Fmu-plugin-upload-from-url\u002Fplugin-upload-from-url.php\" rel=\"nofollow ugc\">MU plugin\u003C\u002Fa>.\u003C\u002Fp>\n","Make plugin installation faster.",10,2140,"2017-01-12T18:52:00.000Z","4.7.32","4.0",[21,23,72],"upload-plugins","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fplugin-installer-speedup\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fplugin-installer-speedup.0.2.2.zip",{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":83,"downloaded":84,"rating":27,"num_ratings":85,"last_updated":86,"tested_up_to":87,"requires_at_least":88,"requires_php":18,"tags":89,"homepage":18,"download_link":93,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"upload-larger-plugins","Upload Larger Plugins","2.0","David Anderson \u002F Team Updraft","https:\u002F\u002Fprofiles.wordpress.org\u002Fdavidanderson\u002F","\u003Cp>This plugin replaces the built-in WordPress plugin uploader with one that allows you to upload a plugin of any size.\u003C\u002Fp>\n\u003Cp>This is something you might need if your web hosting has a low maximum file upload limit (some default PHP installs have 2MB), and the plugin you wish to install is too large for this.\u003C\u002Fp>\n\u003Cp>It accomplishes this task by replacing WordPress’s default plugin uploader with a more sophisticated component that can upload larger files in chunks. You just install this plugin, activate it, and that’s it – you can now get back to the real work.\u003C\u002Fp>\n\u003Cp>Want to see some more quality plugins and products?\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca title=\"WordPress backup, clone and restoration\" href=\"https:\u002F\u002Fupdraftplus.com\u002F\" rel=\"nofollow ugc\">UpdraftPlus – best WordPress backup, clone and restore plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca title=\"WooCommerce extensions for WordPress\" href=\"https:\u002F\u002Fwww.simbahosting.co.uk\u002Fs3\u002Fshop\u002F\" rel=\"nofollow ugc\">Some other premium WordPress plugins (mostly WooCommerce extensions)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fdavidanderson#content-plugins\" rel=\"nofollow ugc\">Other free plugins on my WordPress profile page\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>Copyright 2014- David Anderson\u003C\u002Fp>\n\u003Cp>MIT License:\u003C\u002Fp>\n\u003Cp>Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and\u002For sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:\u003C\u002Fp>\n\u003Cp>The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.\u003C\u002Fp>\n\u003Cp>THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\u003C\u002Fp>\n","Install plugins of any size (i.e. work around web hosting limits)",7000,144485,20,"2025-11-17T22:15:00.000Z","6.9.4","3.3",[90,91,92,76],"plugins-installation","plupload","upload-file-limit","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fupload-larger-plugins.2.0.zip",{"slug":95,"name":96,"version":97,"author":98,"author_profile":99,"description":100,"short_description":101,"active_installs":102,"downloaded":103,"rating":35,"num_ratings":14,"last_updated":104,"tested_up_to":105,"requires_at_least":106,"requires_php":18,"tags":107,"homepage":112,"download_link":113,"security_score":57,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wpfavs","Wp Favs – Plugin Manager","1.2.1.1","Ido Navarro","https:\u002F\u002Fprofiles.wordpress.org\u002Fnavarroido\u002F","\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F9dw9rzkZ7gg?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>Wp Favs is a bulk plugin manager tool that let’s you import your plugins lists (aka Wp Favs) from \u003Ca href=\"https:\u002F\u002Fwpfavs.com\" rel=\"nofollow ugc\">https:\u002F\u002Fwpfavs.com\u003C\u002Fa> or get your favorites plugins from WordPress.org\u003C\u002Fp>\n\u003Cp>You can either go to Wp Favs site and \u003Ca href=\"https:\u002F\u002Fwpfavs.com\u002F\" rel=\"nofollow ugc\">register an account\u003C\u002Fa> to create your own lists or you can \u003Ca href=\"https:\u002F\u002Fwpfavs.com\u002Fwpfavs\" rel=\"nofollow ugc\">browse\u003C\u002Fa> other users existing lists and use them with quick token key.\u003C\u002Fp>\n\u003Cp>With the Wpfavs plugin you can install, delete or active multiple plugins in just a few clicks. It’s a great tool for developers that install dozens of WordPress Sites every month.\u003C\u002Fp>\n\u003Cp>Once installed simple go to Tools -> Wpfavs\u003C\u002Fp>\n\u003Cp>You can read a tutorial on how to use the plugin in \u003Ca href=\"http:\u002F\u002Fcode.tutsplus.com\u002Farticles\u002Finstall-multiple-wordpress-plugins-in-just-a-few-clicks--cms-21311\" rel=\"nofollow ugc\">Tuts+\u003C\u002Fa>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Premium Version\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Check the \u003Cstrong>new premium version\u003C\u002Fstrong> available in \u003Ca href=\"https:\u002F\u002Fwpfavs.com\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwpfavs.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Build private lists of plugins for streamline your process\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Upload custom plugins\u003C\u002Fli>\n\u003Cli>Connect your codecannyon account and import purchased plugins\u003C\u002Fli>\n\u003Cli>Powerful API\u003C\u002Fli>\n\u003Cli>Many features to come..\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fblockquote>\n\u003Ch4>Buy Now Button for woocommerce\u003C\u002Fh4>\n\u003Cp>Best buy now button plugin ever (\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbuy-now-button-for-woocommerce\u002F\" rel=\"ugc\">buy-now-button-for-woocommerce\u003C\u002Fa>)\u003C\u002Fp>\n\u003Ch4>Advanced Sale Percentage Badge\u003C\u002Fh4>\n\u003Cp>Check how to \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdisplay-sale-percentage-value\u002F\" rel=\"ugc\">show beautiful badge with percentage\u003C\u002Fa> on Woocommerce product loop\u003C\u002Fp>\n","Wpfavs is a plugin manager tool that let's you import your plugins lists from https:\u002F\u002Fwpfavs.com",3000,83280,"2023-12-20T21:10:00.000Z","6.4.8","3.6",[108,109,110,111,24],"bulk-plugin-installation","favorite-plugins","install-multiple-plugins","multiple-plugins","https:\u002F\u002Fwpfavs.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpfavs.1.2.1.1.zip",{"slug":108,"name":115,"version":116,"author":117,"author_profile":118,"description":119,"short_description":120,"active_installs":121,"downloaded":122,"rating":48,"num_ratings":66,"last_updated":123,"tested_up_to":124,"requires_at_least":125,"requires_php":18,"tags":126,"homepage":18,"download_link":128,"security_score":57,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"Bulk Plugin Installation","1.1","Cristian Beckerle","https:\u002F\u002Fprofiles.wordpress.org\u002Festudiobee\u002F","\u003Cp>This plugin is an improvement to the current WordPress plugin installation methods. It allows you to install one or more plugins simply by typing their names or download URLs in a textarea.\u003C\u002Fp>\n\u003Cp>All credit goes to \u003Cstrong>improvingtheweb\u003C\u002Fstrong>. This plugin is only a modification of \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fimproved-plugin-installation\u002F\" rel=\"ugc\">Improved Plugin Installation\u003C\u002Fa>\u003C\u002Fstrong>. The idea was to run the original plugin in the newer versions of WordPress. That’s it. Also, we cut off the bookmarklet feature.\u003C\u002Fp>\n\u003Cp>Thank you very much for the contributions: \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fdrewapicture\u002F\" rel=\"nofollow ugc\">drewapicture\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Example\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The installation form will accept any of these inputs:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Contact Form 7\u003C\u002Fli>\n\u003Cli>https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fcontact-form-7\u002F\u003C\u002Fli>\n\u003Cli>https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcontact-form-7.3.3.2.zip\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Plugins don’t need to be hosted at wordpress.org. As long as you use the direct download URL, third party plugins will install without a problem.\u003C\u002Fp>\n","Allows you to install one or more plugins simply by typing their names or download URLs in a textarea.",300,23802,"2013-01-14T14:12:00.000Z","3.5.2","2.7",[20,127,22,24],"automation","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbulk-plugin-installation.1.1.zip",{"attackSurface":130,"codeSignals":142,"taintFlows":168,"riskAssessment":169,"analyzedAt":175},{"hooks":131,"ajaxHandlers":138,"restRoutes":139,"shortcodes":140,"cronEvents":141,"entryPointCount":28,"unprotectedCount":28},[132],{"type":133,"name":134,"callback":135,"file":136,"line":137},"action","plugins_loaded","get_instance","wpcore.php",26,[],[],[],[],{"dangerousFunctions":143,"sqlUsage":144,"outputEscaping":146,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":167},[],{"prepared":28,"raw":28,"locations":145},[],{"escaped":28,"rawEcho":147,"locations":148},11,[149,153,154,156,157,158,159,161,162,164,166],{"file":150,"line":151,"context":152},"views\\settings.php",24,"raw output",{"file":150,"line":137,"context":152},{"file":150,"line":155,"context":152},37,{"file":150,"line":155,"context":152},{"file":150,"line":155,"context":152},{"file":150,"line":155,"context":152},{"file":150,"line":160,"context":152},65,{"file":150,"line":160,"context":152},{"file":150,"line":163,"context":152},86,{"file":150,"line":165,"context":152},87,{"file":150,"line":13,"context":152},[],[],{"summary":170,"deductions":171},"The static analysis of the \"wpcore\" plugin v1.9.2 reveals a seemingly robust security posture with no identified attack surface, dangerous functions, or taint flows. The plugin also boasts a clean vulnerability history, with no known CVEs or common vulnerability types recorded.  The code signals indicate a strong adherence to secure coding practices, with 100% of SQL queries utilizing prepared statements and no file operations or external HTTP requests detected. This suggests the plugin is designed with security in mind and has not had publicly disclosed vulnerabilities.\n\nHowever, a significant concern arises from the \"Output escaping\" metric, which indicates that 0% of the 11 total outputs are properly escaped. This is a critical weakness that could lead to Cross-Site Scripting (XSS) vulnerabilities if user-supplied data is directly outputted without sanitization. While the plugin appears to avoid common attack vectors and has no historical vulnerabilities, this lack of output escaping represents a substantial risk that could be exploited. The absence of nonce and capability checks, while not directly indicative of a vulnerability without an exposed attack surface, could become a problem if any entry points are introduced in future updates.",[172],{"reason":173,"points":174},"Output not properly escaped",8,"2026-03-16T17:50:22.869Z",{"wat":177,"direct":188},{"assetPaths":178,"generatorPatterns":182,"scriptPaths":183,"versionParams":184},[179,180,181],"\u002Fwp-content\u002Fplugins\u002Fwpcore\u002Fassets\u002Fcss\u002Fwpcore.css","\u002Fwp-content\u002Fplugins\u002Fwpcore\u002Fassets\u002Fjs\u002Fwpcore.js","\u002Fwp-content\u002Fplugins\u002Fwpcore\u002Fassets\u002Fjs\u002Fwpcore-admin.js",[],[],[185,186,187],"wpcore\u002Fassets\u002Fcss\u002Fwpcore.css?ver=","wpcore\u002Fassets\u002Fjs\u002Fwpcore.js?ver=","wpcore\u002Fassets\u002Fjs\u002Fwpcore-admin.js?ver=",{"cssClasses":189,"htmlComments":194,"htmlAttributes":195,"restEndpoints":200,"jsGlobals":202,"shortcodeOutput":205},[190,191,192,193],"wpcore_ibtnDel","wpcore_addrow","wpcore_keys","metabox-holder",[],[196,197,198,199],"id=\"wpcore_keys\"","id=\"wpcore_addrow\"","class=\"wpcore_ibtnDel button button-small\"","data-wpcore-key",[201],"\u002Fwp-json\u002Fwpcore\u002Fv1\u002Fcollection",[203,204],"wpcoreAdmin","wpcore_admin_vars",[206,207,208,209,210,211,212,213,214,215,216,217],"\u003Ch3>Collection name and key\u003C\u002Fh3>","\u003Cp>Plugins in the collection\u003C\u002Fp>","\u003Ca href=\"https:\u002F\u002Fwpcore.com\u002Fcollections\u002F","plugin-install.php?tab=plugin-information&plugin=","class=\"thickbox\"","input type=\"button\" id=\"wpcore_addrow\"","Install Plugins\u003C\u002Fa>","Clear Cache","Export active plugins","Export all plugins","Use the WP-CLI","wp wpcore install --key="]