[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjd3DX3mV3vuS16xQ-hrlsqCqPGj4Q5DqC2sX1R5zzwE":3,"$femHkCCls2YCqopUbamqmz1La4W15oZKG_Pw0moGiraE":179,"$fmg6tad9ZXCSGUOcVM5u3zDpYWbM-jWBewldBvlDarSU":184},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"discovery_status":31,"vulnerabilities":32,"developer":33,"crawl_stats":29,"alternatives":39,"analysis":137,"fingerprints":166},"wpml-comment-merging","WPML comment merging","1.3","CodingFabian","https:\u002F\u002Fprofiles.wordpress.org\u002Fcodingfabian\u002F","\u003Cp>Because WPML creates posts and pages for each language, comments from one do not appear on the other.\u003Cbr \u002F>\nThis plugin merges comments from all WPML translations of the posts and pages, so that they all are displayed on each other.\u003Cbr \u002F>\nComments are internally still attached to the post or page they were made on.\u003C\u002Fp>\n\u003Cp>It uses the \u003Ccode>get_comments()\u003C\u002Fcode> api call, which in some circumstances might not return all posts.\u003C\u002Fp>\n","This plugin merges comments from all WPML translations of the posts and pages, so that they all are displayed on each other.",100,5917,50,2,"2011-02-07T15:41:00.000Z","3.0.5","2.7","",[20,21,22,23,24],"comments","i18n","multilingual","translation","wpml","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwpml-comment-merging\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpml-comment-merging.1.3.zip",85,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":34,"display_name":7,"profile_url":8,"plugin_count":35,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":36,"trust_score":37,"computed_at":38},"codingfabian",1,30,84,"2026-05-19T21:17:30.693Z",[40,55,79,99,120],{"slug":41,"name":42,"version":43,"author":44,"author_profile":45,"description":46,"short_description":47,"active_installs":48,"downloaded":49,"rating":11,"num_ratings":14,"last_updated":50,"tested_up_to":51,"requires_at_least":17,"requires_php":18,"tags":52,"homepage":53,"download_link":54,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"merged-comments-wpml","Merged Comments for WPML","3.0","Ricky Poon","https:\u002F\u002Fprofiles.wordpress.org\u002Fpoonasor\u002F","\u003Cp>Because WPML creates posts and pages for each language, comments from one do not appear on the other.\u003C\u002Fp>\n\u003Cp>This plugin merges comments from all WPML translations of the posts and pages, so that they all are displayed on each other.\u003Cbr \u002F>\nComments are internally still attached to the post or page they were made on.\u003C\u002Fp>\n\u003Cp>It uses the \u003Ccode>get_comments()\u003C\u002Fcode> api call, which in some circumstances might not return all posts.\u003C\u002Fp>\n\u003Cp>This is a fixed version of the no longer maintained WPML Comment Merging plugin:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwpml-comment-merging\u002F\" title=\"wpml-comment-merging\" rel=\"ugc\">https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwpml-comment-merging\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Thanks to Simon Wheatley for contributing the fix.\u003C\u002Fp>\n\u003Cp>Forked from: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fjgalea\u002Fwpml-comments-merging\u002F\" title=\"Github\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Fjgalea\u002Fwpml-comments-merging\u003C\u002Fa>\u003C\u002Fp>\n","An updated version of the fixed version of the no longer maintained WPML Comment Merging plugin.",10,872,"2022-07-14T01:04:00.000Z","6.0.11",[20,21,22,23,24],"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmerged-comments-wpml\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmerged-comments-wpml.zip",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":65,"num_ratings":66,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":70,"tags":71,"homepage":74,"download_link":75,"security_score":76,"vuln_count":77,"unpatched_count":28,"last_vuln_date":78,"fetched_at":30},"loco-translate","Loco Translate","2.8.3","Tim W","https:\u002F\u002Fprofiles.wordpress.org\u002Ftimwhitlock\u002F","\u003Cp>Loco Translate provides in-browser editing of WordPress translation files and integration with automatic translation services.\u003C\u002Fp>\n\u003Cp>It also provides Gettext\u002Flocalization tools for developers, such as extracting strings and generating templates.\u003C\u002Fp>\n\u003Cp>Features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Built-in translation editor within WordPress admin\u003C\u002Fli>\n\u003Cli>Integration with translation APIs including DeepL, Google, Lecto, Microsoft and OpenAI.\u003C\u002Fli>\n\u003Cli>Create and update language files directly in your theme or plugin\u003C\u002Fli>\n\u003Cli>Extraction of translatable strings from your source code\u003C\u002Fli>\n\u003Cli>Native MO file compilation without the need for Gettext on your system\u003C\u002Fli>\n\u003Cli>JSON (Jed) file compilation compatible with WordPress script localization\u003C\u002Fli>\n\u003Cli>Support for standard PO features including comments, references and plural forms\u003C\u002Fli>\n\u003Cli>PO source view with clickable source code references\u003C\u002Fli>\n\u003Cli>Protected language directory for saving custom translations\u003C\u002Fli>\n\u003Cli>Configurable PO file backups with diff and restore capability\u003C\u002Fli>\n\u003Cli>Built-in WordPress locale codes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Official \u003Ca href=\"https:\u002F\u002Flocalise.biz\u002F\" rel=\"nofollow ugc\">Loco\u003C\u002Fa> WordPress plugin by Tim Whitlock.\u003Cbr \u002F>\nFor more information please visit our \u003Ca href=\"https:\u002F\u002Flocalise.biz\u002Fwordpress\u002Fplugin\" rel=\"nofollow ugc\">plugin page\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Keyboard shortcuts\u003C\u002Fh3>\n\u003Cp>The PO file editor supports the following keyboard shortcuts for faster translating:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Done and Next: \u003Ccode>Ctrl ↵\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Next string: \u003Ccode>Ctrl \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">↓\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Previous string: \u003Ccode>Ctrl \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">↑\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Next untranslated: \u003Ccode>Shift Ctrl \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">↓\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Previous untranslated: \u003Ccode>Shift Ctrl \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">↑\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Copy from source text: \u003Ccode>Ctrl B\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Clear translation: \u003Ccode>Ctrl K\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Toggle Fuzzy: \u003Ccode>Ctrl U\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Save PO \u002F compile MO: \u003Ccode>Ctrl S\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Toggle invisibles: \u003Ccode>Shift Ctrl I\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Suggest translation: \u003Ccode>Ctrl J\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Mac users can use ⌘ Cmd instead of Ctrl.\u003C\u002Fp>\n","Translate WordPress plugins and themes directly in your browser. Versatile PO file editor with integrated AI translation providers.",1000000,34755486,96,449,"2026-03-14T11:53:00.000Z","6.9.4","6.6","7.4",[21,72,73,22,23],"l10n","language","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Floco-translate\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Floco-translate.2.8.3.zip",95,5,"2026-05-04 13:32:17",{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":87,"downloaded":88,"rating":89,"num_ratings":90,"last_updated":91,"tested_up_to":68,"requires_at_least":92,"requires_php":93,"tags":94,"homepage":97,"download_link":98,"security_score":11,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"buddypress-multilingual","WPML Multilingual for BuddyPress and BuddyBoss","1.9.2","Amir Helzer","https:\u002F\u002Fprofiles.wordpress.org\u002Famirhelzer\u002F","\u003Cp>The plugin allows building multilingual \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbuddypress\u002F\" rel=\"ugc\">BuddyPress\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwww.buddyboss.com\u002F\" rel=\"nofollow ugc\">BuddyBoss\u003C\u002Fa> sites with \u003Ca href=\"http:\u002F\u002Fwpml.org\u002F\" rel=\"nofollow ugc\">WPML\u003C\u002Fa>. It works with single-site or multi-site installations. Both the main site and child blogs can run multilingual.\u003C\u002Fp>\n\u003Cp>Guest blogs can choose their language and create multilingual contents. Additionally, each guest can choose the admin language individually .\u003C\u002Fp>\n\u003Cp>Requirements:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>WPML 4.5.x or higher. You must enable ‘languages per directories’ or ‘languages per domain’.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Adds language switching to all BuddyPress\u002FBuddyBoss pages (Activity, Groups, Profile and Register page)\u003C\u002Fli>\n\u003Cli>Allows to select the language when viewing user profiles\u003C\u002Fli>\n\u003Cli>Keeps the language consistent when clicking on different links (by adding the language to links)\u003C\u002Fli>\n\u003Cli>Allows to translate email notifications\u003C\u002Fli>\n\u003Cli>Keeps the entire BuddyPress\u002FBuddyBoss workflow in the current language (create group, change avatars etc.)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Need Support?\u003C\u002Fh4>\n\u003Cp>Please submit support requests to \u003Cstrong>\u003Ca href=\"http:\u002F\u002Fwpml.org\u002Fforums\u002Fforum\u002Fenglish-support\u002F\" rel=\"nofollow ugc\">WPML forum\u003C\u002Fa>\u003C\u002Fstrong>. Remember to report:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The versions of BuddyPress\u002FBuddyBoss, WPML and WordPress that you’re using.\u003C\u002Fli>\n\u003Cli>A URL to your site, where we can see the problem happening.\u003C\u002Fli>\n\u003Cli>A description of what you expect to see and what you’re seeing in practice.\u003C\u002Fli>\n\u003C\u002Ful>\n","WPML Multilingual for BuddyPress and BuddyBoss allows BuddyPress and BuddyBoss sites to run fully multilingual using the WPML plugin.",7000,159967,92,37,"2026-03-17T16:50:00.000Z","4.7","7.2",[95,96,21,22,24],"buddyboss","buddypress","http:\u002F\u002Fwpml.org\u002F?page_id=2890","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-multilingual.1.9.2.zip",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":107,"downloaded":108,"rating":109,"num_ratings":110,"last_updated":111,"tested_up_to":112,"requires_at_least":113,"requires_php":114,"tags":115,"homepage":118,"download_link":119,"security_score":89,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"events-manager-wpml","Events Manager and WPML Compatibility","2.0.4","Marcus (aka @msykes)","https:\u002F\u002Fprofiles.wordpress.org\u002Fnetweblogic\u002F","\u003Cp>This plugin helps make \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fevents-manager\u002F\" rel=\"ugc\">Events Manager\u003C\u002Fa> and \u003Ca href=\"http:\u002F\u002Fwpml.org\" rel=\"nofollow ugc\">WPML\u003C\u002Fa> work better together by allowing translation of all event-related features:\u003C\u002Fp>\n\u003Cp>** Version 2.0 is a major revamp that fixes \u003Cem>all known issues\u003C\u002Fem>, nuances and limitiation. 2.0 enables \u003Cem>full compatiblity\u003C\u002Fem> with \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fevents-manager\u002F\" rel=\"ugc\">Events Manager\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Feventsmanagerpro.com\" rel=\"nofollow ugc\">Events Manager Pro Add-ons\u003C\u002Fa> **\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Detects translated pages of specific EM pages (assigned in Events > Settings > Pages) and displays relevant language content\u003C\u002Fli>\n\u003Cli>Searching locations and events within the context of the current language being viewed.\u003C\u002Fli>\n\u003Cli>Recurring events can be created in multiple languages, recurrence translations are correctly created.\u003C\u002Fli>\n\u003Cli>Event translations will share relevant information across all translations, including\n\u003Cul>\n\u003Cli>Event Times\u003C\u002Fli>\n\u003Cli>Location Information\u003C\u002Fli>\n\u003Cli>If translations for the location exist, translated events will show\u002Flink to location of the same language, if not the original location translation.\u003C\u002Fli>\n\u003Cli>Bookings and Booking Forms\u003C\u002Fli>\n\u003Cli>If you delete an event that is the originally translated event, booking and other meta info is transferred to default language or next available language translation.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Location address information can be translated, whilst sharing coordinate, country\u002Fzip information accross translations.\u003C\u002Fli>\n\u003Cli>Event-related text can be translated for each language including:\n\u003Cul>\n\u003Cli>Custom texts, emails templates and formats on the settings page.\u003C\u002Fli>\n\u003Cli>Booking and attendee custom forms (available in Pro)\u003C\u002Fli>\n\u003Cli>Custom event and gateway emails (available in Pro)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>MultiSite cross-site support, including showing events from other blogs in your network when EM Global Tables Mode is enabled.\u003C\u002Fli>\n\u003Cli>Displaying untranslated items in lists or hiding them, according to WPML settings.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Special Installation Steps\u003C\u002Fh4>\n\u003Cp>Please ensure that WPML 4.2 and EM 5.6.7 or higher are installed BEFORE updating or activating this plugin.\u003C\u002Fp>\n\u003Cp>When setting up EM and WPML, you should create translated versions of the event, location, category, tag, etc. pages assigned in Events > Settings > Pages of your admin area. Duplicating them using WPML is enough.\u003C\u002Fp>\n\u003Cp>Given the flexibiltiy of both plugins, there is an huge number of possible setting\u002Flanguage combinations to test, and despite our rigorous testing it is impossible to test every setting combination and scenario. To the best of our knowledge, we have achieved 100% compatibility, but should you come across on your setup and we’ll do our best to fix them as time permits.\u003C\u002Fp>\n","Integrates the Events Manager and WPML plugins together to provide a smoother multilingual experience (Requires Events Manager and WPML)",1000,38210,56,13,"2025-04-23T10:15:00.000Z","6.8.5","3.3","5.2",[116,117,22,23,24],"events","languages","https:\u002F\u002Fwp-events-plugin.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fevents-manager-wpml.2.0.4.zip",{"slug":121,"name":122,"version":123,"author":83,"author_profile":84,"description":124,"short_description":125,"active_installs":126,"downloaded":127,"rating":128,"num_ratings":129,"last_updated":130,"tested_up_to":68,"requires_at_least":43,"requires_php":18,"tags":131,"homepage":134,"download_link":135,"security_score":11,"vuln_count":35,"unpatched_count":28,"last_vuln_date":136,"fetched_at":30},"qtranslate-to-wpml-export","qTranslate X Cleanup and WPML Import","3.0.2","\u003Cblockquote>\n\u003Ch3>qTranslate X plugin was abandoned years ago, and we don’t actively maintain this migration plugin anymore.\u003C\u002Fh3>\n\u003C\u002Fblockquote>\n\u003Cp>This plugin can either cleanup the qTranslate X meta-HTML tags from your site and leave just one ‘clean’ language, or migrate all languages to WPML’s format.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Very important: This plugin will modify the entire content of your database. You must backup your database before attempting to use it.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>For complete documentation, please refer to the \u003Ca href=\"https:\u002F\u002Fwpml.org\u002Fdocumentation\u002Frelated-projects\u002Fqtranslate-importer\u002F?utm_source=plugin&utm_medium=gui&utm_campaign=qtranslate\" rel=\"nofollow ugc\">qTranslate uninstall and WPML importer documentation\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>qTranslate X uninstall and cleanup mode\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Must-read: All the issues mentioned in the reviews are solved. We are happy to announce the reintroduction of the clean-up mode with plugin version 2.0\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This mode is intended if you just want to keep one language in your site and you want to clean up the language meta-tags that qTranslate added. For this mode, you don’t need WPML.\u003C\u002Fp>\n\u003Cp>Instructions:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Save all qTranslate X settings\u003C\u002Fli>\n\u003Cli>Go to the Plugins admin page and de-activate qTranslate X\u003C\u002Fli>\n\u003Cli>Install & activate QT Importer\u003C\u002Fli>\n\u003Cli>Go to Options -> QT Importer, select language to keep and click Start. \u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Migrate all languages from qTranslate X to WPML\u003C\u002Fh4>\n\u003Cp>In this mode, the QT import plugin will convert the language information from qTranslate’s language tags format to WPML’s post-per-language format. For this to work, you must have \u003Ca href=\"http:\u002F\u002Fwpml.org\" rel=\"nofollow ugc\">WPML\u003C\u002Fa> active in the site (but not necessarily configured).\u003C\u002Fp>\n\u003Cp>Instructions:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Save all qTranslate settings\u003C\u002Fli>\n\u003Cli>Go to the Plugins admin page and de-activate qTranslate X\u003C\u002Fli>\n\u003Cli>Have WPML activated, but not yet configured (just activated)\u003C\u002Fli>\n\u003Cli>Install & activate QT Importer\u003C\u002Fli>\n\u003Cli>Go to Options -> QT Importer and click Start\u003C\u002Fli>\n\u003Cli>Add redirects from old URLs to new URLs\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>The import runs in small batches so it doesn’t have timeout issues with large databases. You can run it on sites of any size.\u003C\u002Fp>\n\u003Cp>During the import process, the plugin generates a set of URL redirect rules. These rules tell visitors and search engines that the URLs in your site have changed (from qTranslate’s format to WPML’s format). When the import completes, you’ll be able to export these rules either as rewrite directives for your .htaccess file or as a PHP file to add to the theme.\u003C\u002Fp>\n\u003Cp>You can skip the redirect rules, but then, incoming links to internal pages may lead to 404 pages.\u003C\u002Fp>\n\u003Cp>The import tool converts posts, meta data and taxonomy. We tried to take every possible scenario in mind, but there’s no alternative to manual testing. Please consider spending time reviewing the final result and possible doing some last touch-ups before relaunching the site with WPML.\u003C\u002Fp>\n","Allows a complete uninstall and cleanup of qTranslate X meta-tags or importing translations into WPML",800,105985,70,26,"2026-01-14T16:41:00.000Z",[21,22,132,133,24],"qtranslate","qtranslatex","https:\u002F\u002Fwpml.org\u002Fdocumentation\u002Frelated-projects\u002Fqtranslate-importer\u002F?utm_source=plugin&utm_medium=gui&utm_campaign=qtranslate","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fqtranslate-to-wpml-export.3.0.2.zip","2023-04-06 00:00:00",{"attackSurface":138,"codeSignals":154,"taintFlows":161,"riskAssessment":162,"analyzedAt":165},{"hooks":139,"ajaxHandlers":150,"restRoutes":151,"shortcodes":152,"cronEvents":153,"entryPointCount":28,"unprotectedCount":28},[140,146],{"type":141,"name":142,"callback":143,"priority":11,"file":144,"line":145},"filter","comments_array","merge_comments","wpml-comment-merging.php",61,{"type":141,"name":147,"callback":148,"priority":11,"file":144,"line":149},"get_comments_number","merge_comment_count",62,[],[],[],[],{"dangerousFunctions":155,"sqlUsage":156,"outputEscaping":158,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":160},[],{"prepared":28,"raw":28,"locations":157},[],{"escaped":28,"rawEcho":28,"locations":159},[],[],[],{"summary":163,"deductions":164},"Based on the provided static analysis and vulnerability history, the wpml-comment-merging plugin version 1.3 appears to have a strong security posture. The code analysis reveals no dangerous functions, no raw SQL queries, and all outputs are properly escaped. Furthermore, there are no identified file operations or external HTTP requests, and crucially, no identified flows through taint analysis. The complete absence of entry points like AJAX handlers, REST API routes, shortcodes, or cron events significantly reduces the potential attack surface.  The plugin also demonstrates good practice by not bundling external libraries, which can often introduce vulnerabilities if not kept up-to-date.\n\nThe vulnerability history further reinforces this positive assessment, showing zero known CVEs, either currently unpatched or historically. This suggests a well-maintained codebase that has not had significant security flaws reported.  While the current data presents a very clean picture, the lack of identified nonce and capability checks on the (zero) entry points, and the zero taint flows analyzed, could be interpreted as areas where the analysis might have been limited in scope or the plugin's functionality is extremely minimal. However, given the absence of any actual entry points, these are not immediate concerns but rather points to consider if functionality were to be added in the future.\n\nIn conclusion, the wpml-comment-merging plugin v1.3 presents a very low-risk profile. The code is clean, secure coding practices are evident, and there's no history of vulnerabilities. The absence of any attack surface is a significant strength.  The primary limitation of this analysis is the lack of detected entry points, which means certain types of security checks (like nonces and capability checks) weren't exercised. However, without any entry points to begin with, this does not constitute a current risk.",[],"2026-03-16T21:04:06.484Z",{"wat":167,"direct":172},{"assetPaths":168,"generatorPatterns":169,"scriptPaths":170,"versionParams":171},[],[],[],[],{"cssClasses":173,"htmlComments":174,"htmlAttributes":175,"restEndpoints":176,"jsGlobals":177,"shortcodeOutput":178},[],[],[],[],[],[],{"error":180,"url":181,"statusCode":182,"statusMessage":183,"message":183},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fwpml-comment-merging\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":185,"versions":186},4,[187,193,200,207],{"version":6,"download_url":26,"svn_tag_url":188,"released_at":29,"has_diff":189,"diff_files_changed":190,"diff_lines":29,"trac_diff_url":191,"vulnerabilities":192,"is_current":180},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwpml-comment-merging\u002Ftags\u002F1.3\u002F",false,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwpml-comment-merging%2Ftags%2F1.2&new_path=%2Fwpml-comment-merging%2Ftags%2F1.3",[],{"version":194,"download_url":195,"svn_tag_url":196,"released_at":29,"has_diff":189,"diff_files_changed":197,"diff_lines":29,"trac_diff_url":198,"vulnerabilities":199,"is_current":189},"1.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpml-comment-merging.1.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwpml-comment-merging\u002Ftags\u002F1.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwpml-comment-merging%2Ftags%2F1.1&new_path=%2Fwpml-comment-merging%2Ftags%2F1.2",[],{"version":201,"download_url":202,"svn_tag_url":203,"released_at":29,"has_diff":189,"diff_files_changed":204,"diff_lines":29,"trac_diff_url":205,"vulnerabilities":206,"is_current":189},"1.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpml-comment-merging.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwpml-comment-merging\u002Ftags\u002F1.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwpml-comment-merging%2Ftags%2F1.0&new_path=%2Fwpml-comment-merging%2Ftags%2F1.1",[],{"version":208,"download_url":209,"svn_tag_url":210,"released_at":29,"has_diff":189,"diff_files_changed":211,"diff_lines":29,"trac_diff_url":29,"vulnerabilities":212,"is_current":189},"1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpml-comment-merging.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwpml-comment-merging\u002Ftags\u002F1.0\u002F",[],[]]