[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0qmeIZDvs2vIMBWfDyGr5tSs8NuH3jfYuh_JZqHEOG4":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":93,"crawl_stats":38,"alternatives":101,"analysis":203,"fingerprints":779},"wplr-sync","Photo Engine (Media Organizer & Lightroom)","6.5.0","Jordy Meow","https:\u002F\u002Fprofiles.wordpress.org\u002Ftigroumeow\u002F","\u003Cp>\u003Cstrong>Media Organizer\u003C\u002Fstrong>. You can now organize your photos in folders and collections. From those collections, you will be able to create galleries easily, without the need of a specific plugin.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Synchronize with Lightroom\u003C\u002Fstrong>. Upload and keep your photos, collections, keywords and metadata synchronized with WordPress. Then, for instance, modifying your photos, their quality, or changing your watermark on all of them at once will be easy!\u003C\u002Fp>\n\u003Cp>Learn more about it all here: \u003Ca href=\"https:\u002F\u002Fmeowapps.com\u002Fwplr-sync\u002F\" rel=\"nofollow ugc\">Photo Engine\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Media Organizer\u003C\u002Fh3>\n\u003Cp>You can use attributes (collections=’…’, keywords=’…’) in the standard WP Gallery shortcode to link your galleries to your collections and keywords. No need to own a specific plugin or anything, it works naturally with WordPress. The \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmeow-gallery\u002F\" rel=\"ugc\">Meow Gallery\u003C\u002Fa> and the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmeow-lightbox\u002F\" rel=\"ugc\">Meow Lightbox\u003C\u002Fa> are recommended to enhance your galleries with better layouts and options. They can directly get your collections.\u003C\u002Fp>\n\u003Ch3>Synchronize with Lightroom\u003C\u002Fh3>\n\u003Cp>If your plan is to synchronize Lightroom with WordPress, you will also need the WP\u002FLR Sync Plugin for Lightroom. Please have a look at the official website of \u003Ca href=\"https:\u002F\u002Fmeowapps.com\u002Fwplr-sync\u002F\" rel=\"nofollow ugc\">Photo Engine\u003C\u002Fa> for more information.\u003C\u002Fp>\n\u003Cp>Do you have many photos in your WordPress already and they are not linked with your Lightroom? No problem, Photo Engine can do that too. Using EXIF and image perceptual analysis, the plugin will help you linking them through a process call Total Synchronization or you can do it manually. The process is explained here: \u003Ca href=\"https:\u002F\u002Fmeowapps.com\u002Fwplr-sync\u002Ftutorial\u002F\" rel=\"nofollow ugc\">Total Synchronization\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>You are using a certain photo everywhere but you now have a better one? From Lightroom, you can swap one photo to another and this will be replicated automatically on your WordPress. You have nothing else to do. The module is called “Switch Photos” in Lightroom.\u003C\u002Fp>\n\u003Ch3>Support for Themes and Plugins\u003C\u002Fh3>\n\u003Cp>If you are using specific gallery plugins or photography themes, Photo Engine can bring all the power of Lightroom to them, magically, seamlessly. You will be free to choose the theme or gallery plugin you like the best and even switch between them. Photo Engine has a built-in extensions system so that you can extend it easily and support specific themes and plugins. A powerful extension called “Post Types” is already included and probably does everything you need. More information about it here: \u003Ca href=\"https:\u002F\u002Fmeowapps.com\u002Fwplr-sync\u002Ftutorial\u002F\" rel=\"nofollow ugc\">Post Types Extension\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>API & External Apps\u003C\u002Fh3>\n\u003Cp>There is an external API available through Photo Engine that iPhone, Android developers or anybody else can use to make apps. There is one available for iPhone, you can search for it on the iTunes Store (it is not free, and not made by Meow Apps).\u003C\u002Fp>\n\u003Ch3>Unique & Powerful Plugin\u003C\u002Fh3>\n\u003Cp>I am myself an user of this plugin and even though it is the only one, I want to make it better every day. If you have issues, frustrations, or anything to say, contact me. I will work hard to make it even more awesome.\u003C\u002Fp>\n\u003Cp>Languages: English, Spanish (by \u003Ca href=\"https:\u002F\u002Fnbadiola.com\" rel=\"nofollow ugc\">Nahuai Badiola\u003C\u002Fa>). If you want to translate the plugin in another language, please contact me 🙂\u003C\u002Fp>\n","Organize your photos in folders and collections. Synchronize with Lightroom. Make your life easier! :)",2000,244855,98,208,"2026-02-25T15:11:00.000Z","6.9.4","6.0","7.4",[20,21,22,23,24],"export","image","lightroom","manager","sync","https:\u002F\u002Fmeowapps.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwplr-sync.6.5.0.zip",96,4,0,"2025-07-30 00:00:00","2026-03-15T15:16:48.613Z",[33,49,63,78],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2025-54672","photo-engine-cross-site-request-forgery","Photo Engine \u003C= 6.4.3 - Cross-Site Request Forgery","The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.4.3. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site administrator into performing an action such as clicking on a link.",null,"\u003C=6.4.3","6.4.4","medium",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2025-08-04 21:09:24",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Ff4fe0a29-aa0c-423d-874f-7a0242fef996?source=api-prod",6,{"id":50,"url_slug":51,"title":52,"description":53,"plugin_slug":4,"theme_slug":38,"affected_versions":54,"patched_in_version":55,"severity":41,"cvss_score":42,"cvss_vector":56,"vuln_type":57,"published_date":58,"updated_date":59,"references":60,"days_to_patch":62},"CVE-2024-43332","photo-engine-missing-authorization","Photo Engine \u003C= 6.4.0 - Missing Authorization","The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the rest_api_init() function in all versions up to, and including, 6.4.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.","\u003C=6.4.0","6.4.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Missing Authorization","2024-08-16 00:00:00","2024-08-26 17:01:51",[61],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F86f84434-ac85-4c5f-8dd7-11d02ae9ee89?source=api-prod",11,{"id":64,"url_slug":65,"title":66,"description":67,"plugin_slug":4,"theme_slug":38,"affected_versions":68,"patched_in_version":69,"severity":41,"cvss_score":70,"cvss_vector":71,"vuln_type":72,"published_date":73,"updated_date":74,"references":75,"days_to_patch":77},"CVE-2024-39660","photo-engine-authenticated-author-stored-cross-site-scripting","Photo Engine \u003C= 6.3.1 - Authenticated (Author+) Stored Cross-Site Scripting","The Photo Engine plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","\u003C=6.3.1","6.3.2",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-08-01 00:00:00","2024-08-07 16:10:53",[76],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F00a7768f-5fd6-49ff-bcd6-e44dd59ae8d9?source=api-prod",7,{"id":79,"url_slug":80,"title":81,"description":82,"plugin_slug":4,"theme_slug":38,"affected_versions":83,"patched_in_version":84,"severity":41,"cvss_score":85,"cvss_vector":86,"vuln_type":87,"published_date":88,"updated_date":89,"references":90,"days_to_patch":92},"CVE-2023-38513","photo-engine-authenticated-author-insecure-direct-object-reference-in-ajaxgenerateauthtoken","Photo Engine \u003C= 6.2.5 - Authenticated (Author+) Insecure Direct Object Reference in ajax_generate_auth_token","The Photo Engine plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 6.2.5. This is due to missing validation on a user controlled key within the ajax_generate_auth_token function. This makes it possible for unauthenticated attackers to generate authentication tokens on behalf of another user.","\u003C=6.2.5","6.2.6",5.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N","Authorization Bypass Through User-Controlled Key","2023-07-20 00:00:00","2024-01-22 19:56:02",[91],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fdb6bec6c-77d1-4dab-9893-cf33a2fac629?source=api-prod",187,{"slug":94,"display_name":7,"profile_url":8,"plugin_count":95,"total_installs":96,"avg_security_score":97,"avg_patch_time_days":98,"trust_score":99,"computed_at":100},"tigroumeow",27,371190,92,372,73,"2026-04-04T05:53:27.063Z",[102,120,137,160,184],{"slug":103,"name":104,"version":105,"author":103,"author_profile":106,"description":107,"short_description":108,"active_installs":29,"downloaded":109,"rating":29,"num_ratings":29,"last_updated":110,"tested_up_to":16,"requires_at_least":111,"requires_php":18,"tags":112,"homepage":117,"download_link":118,"security_score":119,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"lightsyncpro","LightSync Pro – Connect & Sync Cloud Assets | Lightroom, Canva, Figma, Dropbox & Shutterstock","2.1.6","https:\u002F\u002Fprofiles.wordpress.org\u002Flightsyncpro\u002F","\u003Cp>\u003Cstrong>LightSync Pro creates a cloud-to-CMS image pipeline for WordPress and Shopify.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Connect your creative tools, browse your cloud content inside WordPress, and sync images without downloading, renaming, or re-uploading anything — to WordPress and Shopify simultaneously. When a source image changes, simply re-sync to update it in place — without breaking attachment IDs, layouts, or product images.\u003C\u002Fp>\n\u003Cp>Whether you’re a photographer publishing from Lightroom, a designer working in Canva or Figma, or a Shopify merchant managing product images — LightSync Pro eliminates the repetitive download-upload cycle with automatic compression and optional AI image generation.\u003C\u002Fp>\n\u003Cp>No exports. No duplicate uploads. No broken links.\u003C\u002Fp>\n\u003Ch4>How It Works\u003C\u002Fh4>\n\u003Col>\n\u003Cli>\u003Cstrong>Connect\u003C\u002Fstrong> — Authorize Lightroom, Canva, Figma, Dropbox, Shutterstock, or OpenRouter (AI) via secure OAuth\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Browse\u003C\u002Fstrong> — View albums, designs, files, folders, licensed images, or generate AI images directly inside WordPress\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Choose Destination\u003C\u002Fstrong> — Sync to WordPress, Shopify, or both simultaneously\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Sync\u003C\u002Fstrong> — Images are optimized, compressed, and added to your Media Library or Shopify Files\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>All sources sync to both WordPress and Shopify in the free version — no upgrade required for multi-destination sync.\u003C\u002Fp>\n\u003Ch4>Why LightSync Pro Is Different\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>No manual downloads from Canva, Lightroom, or Dropbox  \u003C\u002Fli>\n\u003Cli>No duplicate uploads to WordPress or Shopify  \u003C\u002Fli>\n\u003Cli>No broken image links when updating hero or product images  \u003C\u002Fli>\n\u003Cli>No developer API keys required  \u003C\u002Fli>\n\u003Cli>Replace images in place without changing attachment IDs  \u003C\u002Fli>\n\u003Cli>Update once, sync everywhere  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Supported Sources\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Adobe Lightroom\u003C\u002Fstrong> — Browse albums, select photos, choose rendition sizes, and sync with version history\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Canva\u003C\u002Fstrong> — Browse designs and sync individual pages as images\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Figma\u003C\u002Fstrong> — Browse teams, projects, and files; sync individual frames as images\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Dropbox\u003C\u002Fstrong> — Browse folders, preview images, and sync files directly\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shutterstock\u003C\u002Fstrong> — Sync images you’ve already licensed with your Shutterstock subscription — no re-downloading required\u003C\u002Fli>\n\u003Cli>\u003Cstrong>AI Image Generation\u003C\u002Fstrong> — Generate images using 400+ AI models via OpenRouter (Flux, DALL-E, Stable Diffusion, Gemini, and more), then compress and sync directly to WordPress or Shopify\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Sync Destinations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>WordPress Media Library\u003C\u002Fstrong> — Images sync as standard attachments, ready for posts, pages, WooCommerce products, and galleries\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shopify Files\u003C\u002Fstrong> — Sync images directly to your Shopify store’s Files library for products, collections, and themes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Cloud-Native OAuth\u003C\u002Fstrong> — Secure broker-based authentication handles API credentials. No developer keys required.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Non-Destructive Updates\u003C\u002Fstrong> — Re-sync an image and the existing attachment updates in place. All posts and products using it reflect the change automatically.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Version History\u003C\u002Fstrong> — Track changes and roll back to previous versions of AI-generated images.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>AI Image Generation\u003C\u002Fstrong> — Generate images using 400+ AI models including Flux, DALL-E, Stable Diffusion, and Gemini via OpenRouter.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shopify Integration\u003C\u002Fstrong> — Sync images from any source to Shopify Files.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WebP Compression\u003C\u002Fstrong> — Automatic image optimization on sync improves page speed and reduces bandwidth usage.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Background Sync\u003C\u002Fstrong> — Large batches process in the background so you can continue working.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Activity Feed\u003C\u002Fstrong> — Complete sync history with timestamps and details.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Weekly Digest\u003C\u002Fstrong> — Email summary of sync activity for your team.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Who Is This For?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Photographers\u003C\u002Fstrong> publishing Lightroom portfolios to WordPress  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Designers\u003C\u002Fstrong> moving Canva or Figma visuals to their website  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Stock image subscribers\u003C\u002Fstrong> syncing licensed Shutterstock images  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shopify merchants\u003C\u002Fstrong> managing product images across platforms  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Content creators\u003C\u002Fstrong> generating AI images inside WordPress  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Agencies\u003C\u002Fstrong> managing client sites with cloud-based creative assets  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Content teams\u003C\u002Fstrong> eliminating repetitive download-upload workflows  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Upgrade to Pro\u003C\u002Fh4>\n\u003Cp>The free version includes full manual sync for all supported sources to WordPress and Shopify with WebP compression and AI image generation.\u003C\u002Fp>\n\u003Cp>Upgrade to \u003Ca href=\"https:\u002F\u002Flightsyncpro.com\u002Fpricing\" rel=\"nofollow ugc\">LightSync Pro\u003C\u002Fa> for:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Automation & Control\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Auto-Sync Scheduling\u003C\u002Fstrong> — Keep albums and folders in sync automatically without manual intervention\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Task Builder\u003C\u002Fstrong> — Build custom sync rules that run on a schedule directly from your dashboard\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Individual Image Selection\u003C\u002Fstrong> — Select specific images from Lightroom albums rather than syncing the entire album\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Unlimited Albums & Images\u003C\u002Fstrong> — Remove sync limits across all sources\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>AI Intelligence\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Hero Picker\u003C\u002Fstrong> — AI ranks your images for your specific use case so the best asset always leads\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Auto Alt Text\u003C\u002Fstrong> — AI-generated alt text for every synced image, improving accessibility and SEO automatically\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Filter by AI Scores\u003C\u002Fstrong> — Sort and filter your Media Library by AI performance ratings\u003C\u002Fli>\n\u003Cli>\u003Cstrong>A\u002FB Image Testing\u003C\u002Fstrong> — Test image variants and track which performs better\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Optimization Analytics\u003C\u002Fstrong> — Insights into image performance across your site\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Workflow Tools\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>AI Assistant (MCP)\u003C\u002Fstrong> — Claude-powered sync assistant built directly into your WordPress dashboard\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Library Mode\u003C\u002Fstrong> — Unified, filterable, searchable grid of all your assets across every connected source\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Chrome Extension\u003C\u002Fstrong> — Sync directly from Lightroom via browser without leaving your workflow\u003C\u002Fli>\n\u003Cli>\u003Cstrong>AVIF Compression\u003C\u002Fstrong> — Next-generation image optimization beyond WebP for even smaller file sizes\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Performance Analytics\u003C\u002Fstrong> — Track sync activity and image performance over time\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Priority Support\u003C\u002Fstrong> — Direct access to the development team\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Need enterprise-scale asset distribution?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Flightsyncpro.com\u002Fmulti-site-distribution\" rel=\"nofollow ugc\">Syncific Hub\u003C\u002Fa> extends LightSync Pro for teams managing multiple WordPress sites, Shopify stores, HubSpot portals, or Contentful spaces simultaneously — with a single sync pushing assets to unlimited destinations at once.\u003C\u002Fp>\n\u003Ch3>Third-Party Services\u003C\u002Fh3>\n\u003Cp>This plugin connects to external services to provide its functionality. By using this plugin, you agree to the terms and privacy policies of the following services:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>LightSync Pro Broker Service\u003C\u002Fstrong>\u003Cbr \u002F>\nHandles secure OAuth authentication and sync coordination.\u003Cbr \u002F>\n* Service URL: https:\u002F\u002Flightsyncpro.com\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Flightsyncpro.com\u002Fprivacy\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Flightsyncpro.com\u002Fterms\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Adobe Lightroom\u003C\u002Fstrong>\u003Cbr \u002F>\n* Service URL: https:\u002F\u002Flightroom.adobe.com\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fwww.adobe.com\u002Fprivacy\u002Fpolicy.html\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fwww.adobe.com\u002Flegal\u002Fterms.html\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Canva\u003C\u002Fstrong>\u003Cbr \u002F>\n* Service URL: https:\u002F\u002Fwww.canva.com\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fwww.canva.com\u002Fpolicies\u002Fprivacy-policy\u002F\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fwww.canva.com\u002Fpolicies\u002Fterms-of-use\u002F\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Figma\u003C\u002Fstrong>\u003Cbr \u002F>\n* Service URL: https:\u002F\u002Fwww.figma.com\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fwww.figma.com\u002Fprivacy\u002F\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fwww.figma.com\u002Ftos\u002F\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Dropbox\u003C\u002Fstrong>\u003Cbr \u002F>\n* Service URL: https:\u002F\u002Fwww.dropbox.com\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fwww.dropbox.com\u002Fprivacy\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fwww.dropbox.com\u002Fterms\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Shutterstock\u003C\u002Fstrong>\u003Cbr \u002F>\n* Service URL: https:\u002F\u002Fwww.shutterstock.com\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fwww.shutterstock.com\u002Fprivacy\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fwww.shutterstock.com\u002Fterms\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Shopify\u003C\u002Fstrong>\u003Cbr \u002F>\n* Service URL: https:\u002F\u002Fwww.shopify.com\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fwww.shopify.com\u002Flegal\u002Fprivacy\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fwww.shopify.com\u002Flegal\u002Fterms\u003C\u002Fp>\n\u003Cp>\u003Cstrong>OpenRouter (AI Image Generation)\u003C\u002Fstrong>\u003Cbr \u002F>\n* Service URL: https:\u002F\u002Fopenrouter.ai\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fopenrouter.ai\u002Fprivacy\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fopenrouter.ai\u002Fterms\u003C\u002Fp>\n\u003Cp>\u003Cstrong>AI Insights (Optional)\u003C\u002Fstrong>\u003Cbr \u002F>\nIf you enable AI Insights and provide your own API key, image URLs are sent to either Anthropic (Claude) or OpenAI (GPT) for analysis. No data is sent unless explicitly configured.\u003Cbr \u002F>\n* Anthropic: https:\u002F\u002Fwww.anthropic.com — Privacy Policy: https:\u002F\u002Fwww.anthropic.com\u002Fprivacy\u003Cbr \u002F>\n* OpenAI: https:\u002F\u002Fopenai.com — Privacy Policy: https:\u002F\u002Fopenai.com\u002Fprivacy\u002F\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Google Fonts\u003C\u002Fstrong>\u003Cbr \u002F>\nLoads the Montserrat font for admin UI styling.\u003Cbr \u002F>\n* Service URL: https:\u002F\u002Ffonts.google.com\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fpolicies.google.com\u002Fprivacy\u003C\u002Fp>\n","Cloud-to-CMS image synchronization for WordPress & Shopify. Connect Lightroom, Canva, Figma, Dropbox, Shutterstock or generate with AI models — up …",548,"2026-03-06T14:57:00.000Z","5.8",[113,114,115,22,116],"canva","dropbox","image-sync","shutterstock","https:\u002F\u002Flightsyncpro.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flightsyncpro.2.1.6.zip",100,{"slug":121,"name":122,"version":123,"author":7,"author_profile":8,"description":124,"short_description":125,"active_installs":126,"downloaded":127,"rating":13,"num_ratings":128,"last_updated":129,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":130,"homepage":25,"download_link":134,"security_score":135,"vuln_count":28,"unpatched_count":29,"last_vuln_date":136,"fetched_at":31},"meow-gallery","Meow Gallery","5.4.5","\u003Cp>\u003Cstrong>Meow Gallery is the lightweight, polished gallery solution for WordPress.\u003C\u002Fstrong> Built from scratch for simplicity, appearance, and speed. Features a Gallery Block, shortcode support, or works as an override for the standard WordPress gallery. It’s responsive, retina-friendly, with modern layouts, and tightly optimized.\u003C\u002Fp>\n\u003Cp>Stop fighting bloated gallery plugins that turn your WordPress into a slower experience! 😘\u003C\u002Fp>\n\u003Cp>Meow Gallery focuses on what actually matters: \u003Cstrong>Beautiful Layouts\u003C\u002Fstrong> and \u003Cstrong>Performance\u003C\u002Fstrong>. Check out \u003Ca href=\"https:\u002F\u002Fmeowapps.com\u002Fmeow-gallery\u002F\" rel=\"nofollow ugc\">our official site\u003C\u002Fa> and see \u003Ca href=\"https:\u002F\u002Fmeowapps.com\u002Fmeow-gallery\u002Flayouts\u002F\" rel=\"nofollow ugc\">the layouts in action\u003C\u002Fa> to get started.\u003C\u002Fp>\n\u003Ch3>Core Features\u003C\u002Fh3>\n\u003Cp>🎨 \u003Cstrong>Beautiful Layouts\u003C\u002Fstrong>\u003Cbr \u002F>\nChoose from Tiles, Masonry, Justified (like Flickr), Square (like Instagram), Cascade, and Horizontal. Pro version adds Carousel and Map layouts.\u003C\u002Fp>\n\u003Cp>🚀 \u003Cstrong>Performance First\u003C\u002Fstrong>\u003Cbr \u002F>\nBuilt from scratch with modern code. No legacy bloat, no unnecessary features. Just clean, fast galleries.\u003C\u002Fp>\n\u003Cp>🔌 \u003Cstrong>WordPress Native\u003C\u002Fstrong>\u003Cbr \u002F>\nWorks naturally with WordPress and Gutenberg without hacking it. Use the Gallery Block, shortcode, or override the standard WordPress gallery. Switch back anytime—no lock-in.\u003C\u002Fp>\n\u003Cp>📱 \u003Cstrong>Responsive & Retina\u003C\u002Fstrong>\u003Cbr \u002F>\nAll layouts are fully responsive and retina-ready for crisp images on any device.\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FZyboZqZb9JQ?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch3>Compatibility\u003C\u002Fh3>\n\u003Cp>Since Meow Gallery works with WordPress naturally, it’s compatible with most plugins and themes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Lightbox\u003C\u002Fstrong>: Use any lightbox you prefer. We recommend \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmeow-lightbox\u002F\" rel=\"ugc\">Meow Lightbox\u003C\u002Fa> for the best experience.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Lightroom\u003C\u002Fstrong>: Fully compatible with \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwplr-sync\u002F\" rel=\"ugc\">Photo Engine\u003C\u002Fa> for media organization and Lightroom sync.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>External Links\u003C\u002Fstrong>: Use \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgallery-custom-links\u002F\" rel=\"ugc\">Gallery Custom Links\u003C\u002Fa> to add custom URLs to your images.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Audio\u003C\u002Fstrong>: Add audio to images with \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Faudio-story-images\u002F\" rel=\"ugc\">Audio Story Images\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>SEO-friendly with automatic sitemap integration (works with Yoast SEO and others).\u003C\u002Fp>\n\u003Ch3>Pro Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Infinite\u002FLazy Loading\u003C\u002Fstrong>: Faster page loading and smoother experience\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Carousel Layout\u003C\u002Fstrong>: Dynamic slider\u002Fcarousel that can also work as a hero\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Map Layout\u003C\u002Fstrong>: GPS-based photo display for travel galleries\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Animations\u003C\u002Fstrong>: Bring your galleries to life with smooth animations\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can find more information on \u003Ca href=\"https:\u002F\u002Fmeowapps.com\u002Fmeow-gallery\u002F\" rel=\"nofollow ugc\">Meow Apps: Meow Gallery\u003C\u002Fa>.\u003C\u002Fp>\n","Tired of slow, bloated gallery plugins? You've earned a coffee ☺️ Polished, beautiful galleries that are blazing fast.",10000,491015,193,"2026-02-25T14:40:00.000Z",[131,132,21,22,133],"block","gallery","masonry","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmeow-gallery.5.4.5.zip",93,"2025-05-07 00:00:00",{"slug":138,"name":139,"version":140,"author":141,"author_profile":142,"description":143,"short_description":144,"active_installs":126,"downloaded":145,"rating":146,"num_ratings":147,"last_updated":148,"tested_up_to":149,"requires_at_least":150,"requires_php":151,"tags":152,"homepage":158,"download_link":159,"security_score":119,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"simple-image-widget","Simple Image Widget","4.4.2","Cedaro","https:\u002F\u002Fprofiles.wordpress.org\u002Fcedaro\u002F","\u003Cp>Simple Image Widget is what the name implies — the easiest way to add images to your sidebars. Display advertisements, calls-to-action, or even build a slider based on image widgets.\u003C\u002Fp>\n\u003Cp>Despite its simplicity, Simple Image Widget is built with extensibility in mind, making it super easy to spin off new image-based widgets, or customize the widget ouput using the available template hierarchy.\u003C\u002Fp>\n\u003Ch3>Additional Resources\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fview\u002Fplugin-reviews\u002Fsimple-image-widget#postform\" rel=\"ugc\">Write a review\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcedaro\u002Fsimple-image-widget\" rel=\"nofollow ugc\">Contribute on GitHub\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fcedaroco\" rel=\"nofollow ugc\">Follow @cedaroco\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.cedaro.com\u002F?utm_source=wordpress.org&utm_medium=link&utm_content=simple-image-widget-readme&utm_campaign=plugins\" rel=\"nofollow ugc\">Visit Cedaro\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","A simple widget that makes it a breeze to add images to your sidebars.",854415,90,39,"2025-07-20T14:44:00.000Z","6.8.5","4.9","",[153,154,155,156,157],"image-widget","media","media-manager","sidebar","widget","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsimple-image-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-image-widget.4.4.2.zip",{"slug":161,"name":162,"version":163,"author":164,"author_profile":165,"description":166,"short_description":167,"active_installs":168,"downloaded":169,"rating":170,"num_ratings":171,"last_updated":172,"tested_up_to":173,"requires_at_least":174,"requires_php":151,"tags":175,"homepage":181,"download_link":182,"security_score":183,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"fully-background-manager","Full Background Manager","2.1","Perception System System Pvt. Ltd.","https:\u002F\u002Fprofiles.wordpress.org\u002Fuvesh123\u002F","\u003Cp>A full background manager WordPress plugin allows users to set different background images on each page. Being a free and feature-rich plugin, it delivers an incredible experience to users by allowing them to set images to the background of the body.\u003C\u002Fp>\n\u003Cp>The company developed this full-fledged plugin for all the WordPress users, who wanted to give different look on the each page of their website as it has capability to change the entire look, feel and touch of your website within just few seconds.Moreover, users of plugin are also allowed to set the background color, background Layout and background image as per their ease.\u003C\u002Fp>\n\u003Cp>One of the best things about this plugin is that it comes with lots of features that will surely give a wonderful experience that you ever get with any other plugin. Moreover, it also allows you to set images as per your convenience like in the fixed, middle, right, left, stretch and more. However, it is a page WordPress plugin, not a post plugin, so users need to make sure it while downloading it.\u003C\u002Fp>\n\u003Cp>To update the version of this plugin, the company has done lots of changes in the coding part of it and various bugs have been solved as well.Therefore, users will not get any problem while using this plugin in their website as it brings numerous new options like background Layout and background image\u003C\u002Fp>\n\u003Cp>Imp Note – While updating this new version of the plugin, you should make sure to take all back-up of your website with database so that you will not face any problem in near future.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>How to Install Full Background Manager WordPress Plugin?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>First of all, you need to download the plugin and install it in your website.\u003C\u002Fli>\n\u003Cli>Now, you can activate and go the page in WordPress admin.\u003C\u002Fli>\n\u003Cli>After this, you can find the meta box its name like Full Background Manager at last the of every page in admin section.\u003C\u002Fli>\n\u003Cli>Now, you have to upload an image by just clicking on the ‘Choose Image’.\u003C\u002Fli>\n\u003Cli>After uploading image you can see one dropdown to set background postion of page.\u003C\u002Fli>\n\u003Cli>At last, you just need to publish the page and you will get the image in the background of the page.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>So, these were simple steps that you can follow to install this plugin on your website and successfully change the background of each pageYou can also check-out the demo of this plugin in order to get its view. \u003Ca href=\"http:\u002F\u002F115.112.143.25\u002FCMS\u002Fwp\u002Ffully-background-manager\" rel=\"nofollow ugc\">Click here \u003C\u002Fa> to check-out the demo of this plugin.\u003Cbr \u002F>\nPerception System offers this user-friendly and highly flexible plugin to enable you to give your website’s each page a refreshing look that you desire. Additionally, the company also provides various other products for its precious customers. To know more about the other products of the company, you can\u003Cbr \u002F>\nhttp:\u002F\u002Fwww.store.perceptionsystem.com\u003C\u002Fp>\n","Full Background Image Manager WordPress Plugin allows you to set separate background image of each page.",8000,172303,68,22,"2023-02-08T09:58:00.000Z","6.1.10","3.6",[176,177,178,179,180],"background-image","background-manager","different-background-per-pagepost","full-background-image","page-background","http:\u002F\u002Fwww.perceptionsystem.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffully-background-manager.zip",85,{"slug":185,"name":186,"version":187,"author":188,"author_profile":189,"description":190,"short_description":191,"active_installs":11,"downloaded":192,"rating":193,"num_ratings":194,"last_updated":195,"tested_up_to":196,"requires_at_least":151,"requires_php":151,"tags":197,"homepage":201,"download_link":202,"security_score":183,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"export-featured-images","Export Featured Images","1.0","Damian","https:\u002F\u002Fprofiles.wordpress.org\u002Ftimersys\u002F","\u003Cp>Simple and basic plugin that let you export Featured images from posts or custom post types into a WordPress xml so you can import them in other sites using the WordPress importer tool\u003C\u002Fp>\n","Export Categories, Tags and Taxonomies",78002,94,72,"2017-11-28T21:11:00.000Z","3.9.40",[20,198,185,199,200],"export-featured","export-images","featured-image","http:\u002F\u002Fwp.timersys.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fexport-featured-images.zip",{"attackSurface":204,"codeSignals":395,"taintFlows":569,"riskAssessment":761,"analyzedAt":778},{"hooks":205,"ajaxHandlers":358,"restRoutes":377,"shortcodes":392,"cronEvents":393,"entryPointCount":225,"unprotectedCount":394},[206,212,215,218,223,227,231,233,237,240,243,247,250,253,255,258,260,263,266,271,274,275,277,282,286,290,294,298,300,304,306,310,312,315,319,323,327,329,333,337,340,343,347,350,354,356],{"type":207,"name":208,"callback":209,"file":210,"line":211},"action","show_user_profile","auth_token_field","classes\\admin.php",14,{"type":207,"name":213,"callback":209,"file":210,"line":214},"edit_user_profile",15,{"type":207,"name":216,"callback":216,"file":210,"line":217},"admin_menu",16,{"type":219,"name":220,"callback":221,"file":210,"line":222},"filter","wplr_meowapps_is_registered","anonymous",19,{"type":219,"name":224,"callback":224,"priority":225,"file":210,"line":226},"media_row_actions",10,20,{"type":207,"name":228,"callback":229,"file":210,"line":230},"add_meta_boxes","add_format_warning_metabox",28,{"type":207,"name":232,"callback":232,"file":210,"line":147},"admin_enqueue_scripts",{"type":207,"name":234,"callback":235,"priority":225,"file":236,"line":226},"init","handleRequest","classes\\api.php",{"type":207,"name":238,"callback":238,"file":239,"line":217},"delete_attachment","classes\\core.php",{"type":219,"name":241,"callback":241,"file":239,"line":242},"manage_media_columns",17,{"type":219,"name":244,"callback":245,"priority":225,"file":239,"line":246},"shortcode_atts_gallery","gallery_images_shortcode",18,{"type":219,"name":248,"callback":249,"priority":225,"file":239,"line":222},"shortcode_atts_collection","collection_images_shortcode",{"type":207,"name":251,"callback":251,"priority":225,"file":239,"line":252},"manage_media_custom_column",21,{"type":207,"name":254,"callback":254,"priority":225,"file":239,"line":171},"admin_head",{"type":207,"name":256,"callback":256,"file":239,"line":257},"plugins_loaded",23,{"type":207,"name":234,"callback":234,"file":239,"line":259},24,{"type":207,"name":261,"callback":261,"file":239,"line":262},"profile_update",25,{"type":219,"name":264,"callback":264,"file":239,"line":265},"big_image_size_threshold",177,{"type":207,"name":267,"callback":268,"file":269,"line":270},"pre_get_posts","media_filters","classes\\explorer.php",13,{"type":207,"name":272,"callback":273,"file":269,"line":211},"restrict_manage_posts","media_dropdown",{"type":207,"name":254,"callback":254,"file":269,"line":222},{"type":207,"name":276,"callback":276,"file":269,"line":226},"admin_footer",{"type":207,"name":278,"callback":279,"priority":225,"file":280,"line":281},"wplr_add_tag","add_tag","classes\\keywords.php",48,{"type":207,"name":283,"callback":284,"priority":225,"file":280,"line":285},"wplr_update_tag","update_tag",49,{"type":207,"name":287,"callback":288,"priority":225,"file":280,"line":289},"wplr_remove_tag","remove_tag",50,{"type":207,"name":291,"callback":292,"priority":225,"file":280,"line":293},"wplr_add_media_tag","add_media_tag",51,{"type":207,"name":295,"callback":296,"priority":225,"file":280,"line":297},"wplr_remove_media_tag","remove_media_tag",52,{"type":219,"name":267,"callback":267,"file":280,"line":299},57,{"type":207,"name":301,"callback":302,"file":303,"line":77},"rest_api_init","init_rest","classes\\public_api.php",{"type":207,"name":301,"callback":301,"file":305,"line":214},"classes\\rest.php",{"type":219,"name":307,"callback":308,"priority":225,"file":309,"line":225},"wplr_issues","wordfence","classes\\troubleshoot.php",{"type":219,"name":307,"callback":311,"priority":225,"file":309,"line":270},"ninjafirewall",{"type":207,"name":216,"callback":216,"file":313,"line":314},"classes\\ui.php",8,{"type":207,"name":316,"callback":317,"file":318,"line":194},"admin_notices","admin_notices_licensed_free","common\\admin.php",{"type":219,"name":320,"callback":321,"priority":225,"file":318,"line":322},"plugin_row_meta","custom_plugin_row_meta",77,{"type":219,"name":324,"callback":325,"priority":225,"file":318,"line":326},"edd_sl_api_request_verify_ssl","request_verify_ssl",78,{"type":207,"name":234,"callback":328,"file":318,"line":27},"process_deferred_instances",{"type":207,"name":216,"callback":330,"priority":331,"file":318,"line":332},"admin_menu_start",5,153,{"type":219,"name":334,"callback":334,"priority":335,"file":318,"line":336},"admin_footer_text",100000,158,{"type":207,"name":276,"callback":338,"file":318,"line":339},"output_network_license_modal",218,{"type":207,"name":254,"callback":341,"file":318,"line":342},"closure",456,{"type":207,"name":316,"callback":344,"file":345,"line":346},"admin_notices_news","common\\news.php",43,{"type":219,"name":348,"callback":341,"file":345,"line":349},"safe_style_css",44,{"type":207,"name":316,"callback":351,"file":352,"line":353},"admin_notices_rating","common\\ratings.php",33,{"type":219,"name":348,"callback":341,"file":352,"line":355},34,{"type":207,"name":301,"callback":301,"file":357,"line":211},"common\\rest.php",[359,364,366,368,370,372,375],{"action":360,"nopriv":361,"callback":362,"hasNonce":363,"hasCapCheck":361,"file":210,"line":252},"wplrsync_generate_auth_token",false,"ajax_generate_auth_token",true,{"action":365,"nopriv":361,"callback":365,"hasNonce":361,"hasCapCheck":361,"file":210,"line":171},"wplrsync_link",{"action":367,"nopriv":361,"callback":367,"hasNonce":361,"hasCapCheck":361,"file":210,"line":257},"wplrsync_unlink",{"action":369,"nopriv":361,"callback":369,"hasNonce":361,"hasCapCheck":361,"file":210,"line":259},"wplrsync_clean",{"action":371,"nopriv":361,"callback":371,"hasNonce":361,"hasCapCheck":361,"file":210,"line":262},"wplrsync_extensions_reset",{"action":373,"nopriv":361,"callback":373,"hasNonce":361,"hasCapCheck":361,"file":210,"line":374},"wplrsync_extensions_init",26,{"action":376,"nopriv":361,"callback":376,"hasNonce":361,"hasCapCheck":361,"file":210,"line":95},"wplrsync_extensions_query",[378,385,389],{"namespace":379,"route":380,"methods":381,"callback":383,"permissionCallback":384,"file":303,"line":62},"wplr\u002Fv1","\u002Fauth",[382],"GET","auth","__return_true",{"namespace":379,"route":386,"methods":387,"callback":388,"permissionCallback":384,"file":303,"line":222},"\u002Fhierarchy",[382],"hierarchy",{"namespace":379,"route":390,"methods":391,"callback":132,"permissionCallback":384,"file":303,"line":95},"\u002Fgallery\u002F(?P\u003Cid>[0-9]+)",[382],[],[],9,{"dangerousFunctions":396,"sqlUsage":397,"outputEscaping":469,"fileOperations":211,"externalRequests":566,"nonceChecks":567,"capabilityChecks":242,"bundledLibraries":568},[],{"prepared":398,"raw":355,"locations":399},152,[400,403,405,407,409,412,415,417,419,421,423,426,428,430,432,434,436,438,440,442,444,445,446,448,449,451,453,455,457,459,461,463,465,467],{"file":210,"line":401,"context":402},334,"$wpdb->query() with variable interpolation",{"file":210,"line":404,"context":402},335,{"file":210,"line":406,"context":402},336,{"file":210,"line":408,"context":402},337,{"file":239,"line":410,"context":411},381,"$wpdb->get_results() with variable interpolation",{"file":239,"line":413,"context":414},512,"$wpdb->get_col() with variable interpolation",{"file":239,"line":416,"context":414},526,{"file":239,"line":418,"context":411},601,{"file":239,"line":420,"context":411},748,{"file":239,"line":422,"context":411},792,{"file":239,"line":424,"context":425},814,"$wpdb->get_var() with variable interpolation",{"file":239,"line":427,"context":411},972,{"file":239,"line":429,"context":411},1556,{"file":239,"line":431,"context":411},1567,{"file":239,"line":433,"context":411},1603,{"file":239,"line":435,"context":414},1612,{"file":239,"line":437,"context":411},1650,{"file":239,"line":439,"context":414},1658,{"file":269,"line":441,"context":411},53,{"file":443,"line":222,"context":425},"classes\\init.php",{"file":443,"line":349,"context":425},{"file":443,"line":299,"context":402},{"file":443,"line":447,"context":402},63,{"file":443,"line":99,"context":402},{"file":443,"line":450,"context":402},74,{"file":443,"line":452,"context":402},75,{"file":443,"line":454,"context":402},76,{"file":305,"line":456,"context":425},246,{"file":305,"line":458,"context":425},325,{"file":305,"line":460,"context":402},787,{"file":305,"line":462,"context":402},788,{"file":305,"line":464,"context":402},789,{"file":305,"line":466,"context":402},790,{"file":357,"line":468,"context":425},86,{"escaped":346,"rawEcho":285,"locations":470},[471,474,476,478,480,482,484,486,488,490,492,494,496,498,500,502,504,506,508,510,512,514,516,518,520,522,523,524,526,527,529,531,533,535,537,539,541,543,545,547,549,551,553,555,557,559,560,562,564],{"file":210,"line":472,"context":473},209,"raw output",{"file":210,"line":475,"context":473},338,{"file":210,"line":477,"context":473},342,{"file":210,"line":479,"context":473},396,{"file":210,"line":481,"context":473},400,{"file":210,"line":483,"context":473},452,{"file":210,"line":485,"context":473},462,{"file":210,"line":487,"context":473},471,{"file":210,"line":489,"context":473},480,{"file":210,"line":491,"context":473},498,{"file":210,"line":493,"context":473},525,{"file":210,"line":495,"context":473},531,{"file":210,"line":497,"context":473},534,{"file":210,"line":499,"context":473},538,{"file":210,"line":501,"context":473},546,{"file":210,"line":503,"context":473},550,{"file":210,"line":505,"context":473},553,{"file":210,"line":507,"context":473},570,{"file":210,"line":509,"context":473},577,{"file":210,"line":511,"context":473},718,{"file":210,"line":513,"context":473},719,{"file":210,"line":515,"context":473},735,{"file":210,"line":517,"context":473},756,{"file":210,"line":519,"context":473},771,{"file":210,"line":521,"context":473},776,{"file":210,"line":462,"context":473},{"file":210,"line":422,"context":473},{"file":210,"line":525,"context":473},810,{"file":210,"line":424,"context":473},{"file":210,"line":528,"context":473},820,{"file":210,"line":530,"context":473},824,{"file":210,"line":532,"context":473},829,{"file":210,"line":534,"context":473},833,{"file":210,"line":536,"context":473},881,{"file":210,"line":538,"context":473},887,{"file":210,"line":540,"context":473},898,{"file":210,"line":542,"context":473},911,{"file":239,"line":544,"context":473},2172,{"file":239,"line":546,"context":473},2176,{"file":239,"line":548,"context":473},2187,{"file":239,"line":550,"context":473},2193,{"file":239,"line":552,"context":473},2202,{"file":239,"line":554,"context":473},2208,{"file":239,"line":556,"context":473},2312,{"file":269,"line":558,"context":473},60,{"file":309,"line":259,"context":473},{"file":318,"line":561,"context":473},351,{"file":318,"line":563,"context":473},357,{"file":318,"line":565,"context":473},469,1,3,[],[570,587,595,605,662,695,714,733,748],{"entryPoint":571,"graph":572,"unsanitizedCount":586,"severity":41},"display_hierarchy (classes\\admin.php:501)",{"nodes":573,"edges":584},[574,579],{"id":575,"type":576,"label":577,"file":210,"line":578},"n0","source","$_GET (x2)",524,{"id":580,"type":581,"label":582,"file":210,"line":497,"wp_function":583},"n1","sink","echo() [XSS]","echo",[585],{"from":575,"to":580,"sanitized":361},2,{"entryPoint":588,"graph":589,"unsanitizedCount":586,"severity":41},"display_internal_hierarchy (classes\\admin.php:521)",{"nodes":590,"edges":593},[591,592],{"id":575,"type":576,"label":577,"file":210,"line":578},{"id":580,"type":581,"label":582,"file":210,"line":497,"wp_function":583},[594],{"from":575,"to":580,"sanitized":361},{"entryPoint":596,"graph":597,"unsanitizedCount":566,"severity":41},"media_dropdown (classes\\explorer.php:47)",{"nodes":598,"edges":603},[599,602],{"id":575,"type":576,"label":600,"file":269,"line":601},"$_GET",54,{"id":580,"type":581,"label":582,"file":269,"line":558,"wp_function":583},[604],{"from":575,"to":580,"sanitized":361},{"entryPoint":606,"graph":607,"unsanitizedCount":28,"severity":661},"admin_debug (classes\\admin.php:725)",{"nodes":608,"edges":651},[609,611,612,616,620,625,628,631,634,637,639,642,645,648],{"id":575,"type":576,"label":610,"file":210,"line":525},"$_POST['lr_id'] (x3)",{"id":580,"type":581,"label":582,"file":210,"line":525,"wp_function":583},{"id":613,"type":576,"label":614,"file":210,"line":615},"n2","$_POST['lr_id']",770,{"id":617,"type":618,"label":619,"file":210,"line":615},"n3","transform","→ link_media()",{"id":621,"type":581,"label":622,"file":239,"line":623,"wp_function":624},"n4","query() [SQLi]",959,"query",{"id":626,"type":576,"label":614,"file":210,"line":627},"n5",818,{"id":629,"type":618,"label":630,"file":210,"line":627},"n6","→ unlink_media()",{"id":632,"type":581,"label":622,"file":239,"line":633,"wp_function":624},"n7",927,{"id":635,"type":576,"label":636,"file":210,"line":627},"n8","$_POST['wp_id']",{"id":638,"type":618,"label":630,"file":210,"line":627},"n9",{"id":640,"type":581,"label":622,"file":239,"line":641,"wp_function":624},"n10",922,{"id":643,"type":576,"label":614,"file":210,"line":644},"n11",827,{"id":646,"type":618,"label":647,"file":210,"line":644},"n12","→ delete_media()",{"id":649,"type":581,"label":622,"file":239,"line":650,"wp_function":624},"n13",865,[652,653,654,655,656,657,658,659,660],{"from":575,"to":580,"sanitized":363},{"from":613,"to":617,"sanitized":361},{"from":617,"to":621,"sanitized":361},{"from":626,"to":629,"sanitized":361},{"from":629,"to":632,"sanitized":361},{"from":635,"to":638,"sanitized":361},{"from":638,"to":640,"sanitized":361},{"from":643,"to":646,"sanitized":361},{"from":646,"to":649,"sanitized":361},"high",{"entryPoint":663,"graph":664,"unsanitizedCount":28,"severity":661},"\u003Cadmin> (classes\\admin.php:0)",{"nodes":665,"edges":684},[666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,682],{"id":575,"type":576,"label":577,"file":210,"line":578},{"id":580,"type":581,"label":582,"file":210,"line":497,"wp_function":583},{"id":613,"type":576,"label":610,"file":210,"line":525},{"id":617,"type":581,"label":582,"file":210,"line":525,"wp_function":583},{"id":621,"type":576,"label":614,"file":210,"line":615},{"id":626,"type":618,"label":619,"file":210,"line":615},{"id":629,"type":581,"label":622,"file":239,"line":623,"wp_function":624},{"id":632,"type":576,"label":614,"file":210,"line":627},{"id":635,"type":618,"label":630,"file":210,"line":627},{"id":638,"type":581,"label":622,"file":239,"line":633,"wp_function":624},{"id":640,"type":576,"label":636,"file":210,"line":627},{"id":643,"type":618,"label":630,"file":210,"line":627},{"id":646,"type":581,"label":622,"file":239,"line":641,"wp_function":624},{"id":649,"type":576,"label":614,"file":210,"line":644},{"id":681,"type":618,"label":647,"file":210,"line":644},"n14",{"id":683,"type":581,"label":622,"file":239,"line":650,"wp_function":624},"n15",[685,686,687,688,689,690,691,692,693,694],{"from":575,"to":580,"sanitized":363},{"from":613,"to":617,"sanitized":363},{"from":621,"to":626,"sanitized":361},{"from":626,"to":629,"sanitized":361},{"from":632,"to":635,"sanitized":361},{"from":635,"to":638,"sanitized":361},{"from":640,"to":643,"sanitized":361},{"from":643,"to":646,"sanitized":361},{"from":649,"to":681,"sanitized":361},{"from":681,"to":683,"sanitized":361},{"entryPoint":696,"graph":697,"unsanitizedCount":567,"severity":661},"wplrsync_ajax_link_unlink (classes\\core.php:2170)",{"nodes":698,"edges":709},[699,702,703,704,707,708],{"id":575,"type":576,"label":700,"file":239,"line":701},"$_POST (x2)",2186,{"id":580,"type":618,"label":630,"file":239,"line":701},{"id":613,"type":581,"label":622,"file":239,"line":633,"wp_function":624},{"id":617,"type":576,"label":705,"file":239,"line":706},"$_POST",2200,{"id":621,"type":618,"label":619,"file":239,"line":706},{"id":626,"type":581,"label":622,"file":239,"line":623,"wp_function":624},[710,711,712,713],{"from":575,"to":580,"sanitized":361},{"from":580,"to":613,"sanitized":361},{"from":617,"to":621,"sanitized":361},{"from":621,"to":626,"sanitized":361},{"entryPoint":715,"graph":716,"unsanitizedCount":567,"severity":661},"\u003Ccore> (classes\\core.php:0)",{"nodes":717,"edges":727},[718,720,721,722,723,724,725,726],{"id":575,"type":576,"label":705,"file":239,"line":719},2180,{"id":580,"type":581,"label":582,"file":239,"line":556,"wp_function":583},{"id":613,"type":576,"label":700,"file":239,"line":701},{"id":617,"type":618,"label":630,"file":239,"line":701},{"id":621,"type":581,"label":622,"file":239,"line":633,"wp_function":624},{"id":626,"type":576,"label":705,"file":239,"line":706},{"id":629,"type":618,"label":619,"file":239,"line":706},{"id":632,"type":581,"label":622,"file":239,"line":623,"wp_function":624},[728,729,730,731,732],{"from":575,"to":580,"sanitized":363},{"from":613,"to":617,"sanitized":361},{"from":617,"to":621,"sanitized":361},{"from":626,"to":629,"sanitized":361},{"from":629,"to":632,"sanitized":361},{"entryPoint":734,"graph":735,"unsanitizedCount":566,"severity":661},"media_filters (classes\\explorer.php:29)",{"nodes":736,"edges":745},[737,739,741],{"id":575,"type":576,"label":705,"file":269,"line":738},37,{"id":580,"type":618,"label":740,"file":269,"line":738},"→ get_media_from_collection()",{"id":613,"type":581,"label":742,"file":239,"line":743,"wp_function":744},"get_col() [SQLi]",451,"get_col",[746,747],{"from":575,"to":580,"sanitized":361},{"from":580,"to":613,"sanitized":361},{"entryPoint":749,"graph":750,"unsanitizedCount":586,"severity":661},"\u003Cexplorer> (classes\\explorer.php:0)",{"nodes":751,"edges":757},[752,753,754,755,756],{"id":575,"type":576,"label":600,"file":269,"line":601},{"id":580,"type":581,"label":582,"file":269,"line":558,"wp_function":583},{"id":613,"type":576,"label":705,"file":269,"line":738},{"id":617,"type":618,"label":740,"file":269,"line":738},{"id":621,"type":581,"label":742,"file":239,"line":743,"wp_function":744},[758,759,760],{"from":575,"to":580,"sanitized":361},{"from":613,"to":617,"sanitized":361},{"from":617,"to":621,"sanitized":361},{"summary":762,"deductions":763},"The plugin \"wplr-sync\" v6.5.0 presents a mixed security posture. While it demonstrates good practices by using prepared statements for a majority of its SQL queries and performing a significant number of capability checks, several concerning areas warrant attention. The plugin has a substantial attack surface with 10 entry points, 9 of which lack proper authentication or permission checks. This is exacerbated by the taint analysis revealing 6 high-severity flows with unsanitized paths, indicating potential for severe vulnerabilities like cross-site scripting or path traversal if these flows are exploited. The vulnerability history further highlights past issues with Cross-Site Request Forgery, Missing Authorization, and Cross-site Scripting, suggesting a recurring pattern of authorization and input sanitization weaknesses.\n\nDespite the absence of currently unpatched CVEs and the presence of nonce checks, the high number of unprotected entry points and the critical taint analysis findings are significant risks. The prevalence of past vulnerabilities in similar categories points to systemic issues that may not have been fully addressed. While the use of prepared statements and capability checks are positive indicators, they do not fully mitigate the risks posed by the exposed attack surface and unsanitized data flows. A comprehensive review and hardening of the input validation and authorization mechanisms for all entry points is strongly recommended.",[764,766,768,770,772,774,776],{"reason":765,"points":225},"Unprotected AJAX handlers",{"reason":767,"points":225},"Unprotected REST API routes",{"reason":769,"points":214},"High severity unsanitized taint flows",{"reason":771,"points":314},"Significant number of unprotected entry points",{"reason":773,"points":331},"Low output escaping rate",{"reason":775,"points":77},"History of authorization bypass issues",{"reason":777,"points":77},"History of XSS vulnerabilities","2026-03-16T18:29:31.536Z",{"wat":780,"direct":791},{"assetPaths":781,"generatorPatterns":784,"scriptPaths":785,"versionParams":788},[782,783],"\u002Fwp-content\u002Fplugins\u002Fwplr-sync\u002Fapp\u002Fvendor.js","\u002Fwp-content\u002Fplugins\u002Fwplr-sync\u002Fapp\u002Findex.js",[],[786,787],"app\u002Fvendor.js","app\u002Findex.js",[789,790],"wplr-sync\u002Fapp\u002Fvendor.js?ver=","wplr-sync\u002Fapp\u002Findex.js?ver=",{"cssClasses":792,"htmlComments":794,"htmlAttributes":795,"restEndpoints":799,"jsGlobals":801,"shortcodeOutput":803},[793],"wplr-sync-wrap",[],[796,797,798],"data-options","data-plugin-url","data-api-url",[800],"\u002Fwplr-sync\u002Fv1",[802],"pEngine",[]]