[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fi3qun1g5OfZm4dmyya4jwzkLGXfGZpEqxtIPVHDwL4o":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":34,"analysis":128,"fingerprints":214},"xhe-quicktags","XHE Quicktags","1.0.0","xhtmlexpert","https:\u002F\u002Fprofiles.wordpress.org\u002Fxhtmlexpert\u002F","\u003Cp>Allows you to add buttons to the WordPress admin text editor.\u003C\u002Fp>\n","This plugin makes it easy to add Quicktags to the html - and visual-editor.",0,862,"","5.7.15","5.0","5.5",[18,19,20,21,22],"add-buttons","button","editor","quicktag","tinymce","https:\u002F\u002Fxhtmlexpert.com\u002Fplugins\u002Fwp-addquicktags","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fxhe-quicktags.zip",100,null,"2026-03-15T10:48:56.248Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},1,30,94,"2026-04-04T05:26:48.957Z",[35,52,70,92,111],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":10,"active_installs":42,"downloaded":43,"rating":32,"num_ratings":44,"last_updated":45,"tested_up_to":14,"requires_at_least":46,"requires_php":13,"tags":47,"homepage":48,"download_link":49,"security_score":50,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":51},"addquicktag","AddQuicktag","2.6.1","Frank Bueltge","https:\u002F\u002Fprofiles.wordpress.org\u002Fbueltge\u002F","\u003Cp>This plugin makes it easy to add Quicktags to the html – and visual-editor. It is possible to export your Quicktags as a JSON – file that can be imported in other installations of the plugin.\u003C\u002Fp>\n\u003Cp>WP-AddQuicktag for WordPress is originally created by \u003Ca href=\"http:\u002F\u002Froel.meurders.nl\u002F\" title=\"Roel Meurders\" rel=\"nofollow ugc\">Roel Meurders\u003C\u002Fa>. The versions in the Repo of AddQuicktag are newer versions, this is a complete rewrite of version 2.0.0 with more functionality.\u003C\u002Fp>\n\u003Cp>The plugin can add configurable custom quicktags to the editor of every post type, including custom post types from other sources. You may choose a post type for which a quicktag shall show up in the editor.\u003Cbr \u002F>\nIf this should not work perfectly well for you, you may also use the hooks inside the plugin. See the examples and hint inside the tab “\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Faddquicktag\u002Fother_notes\u002F\" rel=\"ugc\">Other Notes\u003C\u002Fa>“.\u003C\u002Fp>\n\u003Ch4>Bugs, technical hints or contribute\u003C\u002Fh4>\n\u003Cp>Please give me feedback, contribute and file technical bugs on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbueltge\u002Faddquicktag\" rel=\"nofollow ugc\">GitHub Repo\u003C\u002Fa>. The Wiki on this page has also several hints for the plugin.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Crafted by \u003Ca href=\"https:\u002F\u002Finpsyde.com\" rel=\"nofollow ugc\">Inpsyde\u003C\u002Fa> · Engineering the web since 2006.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>Hook for custom post types\u003C\u002Fh4>\n\u003Cp>The plugin adds the quicktag by default to post types\u002FID \u003Ccode>post\u003C\u002Fcode>, \u003Ccode>page\u003C\u002Fcode> and \u003Ccode>comment\u003C\u002Fcode>. To use the plugin for other post types also you may use a filter; see the following example or an example plugin in the \u003Ca href=\"https:\u002F\u002Fgist.github.com\u002F1595155\" rel=\"nofollow ugc\">Gist 1595155\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002F\u002F add custom function to filter hook 'addquicktag_post_types'\nadd_filter( 'addquicktag_post_types', 'my_addquicktag_post_types' );\n\u002F**\n * Return array $post_types with custom post types\n *\n * @param   $post_type Array\n * @return  $post_type Array\n *\u002F\nfunction my_addquicktag_post_types( $post_types ) {\n\n    $post_types[] = 'edit-comments';\n    return $post_types;\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Hook for custom pages\u003C\u002Fh4>\n\u003Cp>It is possible also to filter the pages inside the backend. By default the scripts include the pages \u003Ccode>post.php\u003C\u002Fcode>, \u003Ccode>comment.php\u003C\u002Fcode>. The following example changes this for an another page.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter( 'addquicktag_pages', 'my_addquicktag_pages' );\n\u002F**\n * Return array $page with custom page strings\n *\n * @param   $page Array\n * @return  $page Array\n *\u002F\nfunction my_addquicktag_pages( $page ) {\n\n    $page[] = 'edit-comments.php';\n    return $page;\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>See this Gist as an example for how to add the Quicktags to the editor of comments: \u003Ca href=\"https:\u002F\u002Fgist.github.com\u002F3076698\" rel=\"nofollow ugc\">Gist: 3076698\u003C\u002Fa>.\u003Cbr \u002F>\nIf you want the Quicktags of this plugin to work on the Quickedit of comments as well, remove the \u003Ccode>.example\u003C\u002Fcode>-part of \u003Ccode>addquicktag_quickedit_comment.php.example\u003C\u002Fcode> filename. The file is a stand alone helper plugin for Add Quicktag. You’ll need to activate this file (plugin) separately in ‘Manage Plugins’.\u003C\u002Fp>\n\u003Ch4>Hook for custom buttons\u003C\u002Fh4>\n\u003Cp>It is possible to add custom buttons to the editor, if the plugin is active.\u003C\u002Fp>\n\u003Cp>The following example adds buttons. The params inside the array are the same as in the settings of the plugin.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>if ( class_exists( 'Add_Quicktag' ) ) :\nadd_filter( 'addquicktag_buttons', 'my_addquicktag_buttons' );\n\nfunction my_addquicktag_buttons( $buttons ) {\n\n    $buttons[] = array(\n        'text'          => 'Permalink',\n        'title'         => '',\n        'start'         => '[permalink]',\n        'end'           => '[\u002Fpermalink]',\n        'access'        => '',\n        'order'         => 1,\n        'visual'        => 1,\n        'post'          => 0,\n        'page'          => 1,\n        'comment'       => 0,\n        'edit-comments' => 0\n    );\n    $buttons[] = array(\n        'text'          => 'Button',\n        'title'         => '',\n        'start'         => '\u003Cspan class=\"border blue\">',\n        'end'           => '\u003C\u002Fspan>',\n        'access'        => '',\n        'order'         => 2,\n        'visual'        => 1,\n        'post'          => 0,\n        'page'          => 1,\n        'comment'       => 0,\n        'edit-comments' => 0\n    );\n    return $buttons;\n}\nendif;\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>License\u003C\u002Fh4>\n\u003Cp>Good news, this plugin is free for everyone! Since it’s released under the GPL, you can use it free of charge on your personal or commercial blog. But if you enjoy this plugin, you may consider to thank me and leave a \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Faddquicktag\u002Freviews\u002F#new-post\" rel=\"ugc\">positive review\u003C\u002Fa> for the time I’ve spent writing and supporting this plugin. And I really don’t want to know how many hours of my life this plugin has already eaten 😉\u003C\u002Fp>\n",100000,1385273,44,"2021-05-20T13:37:00.000Z","4.0",[18,19,20,21,22],"http:\u002F\u002Fbueltge.de\u002Fwp-addquicktags-de-plugin\u002F120\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faddquicktag.2.6.1.zip",85,"2026-03-15T15:16:48.613Z",{"slug":53,"name":54,"version":55,"author":56,"author_profile":57,"description":58,"short_description":59,"active_installs":60,"downloaded":61,"rating":11,"num_ratings":11,"last_updated":62,"tested_up_to":63,"requires_at_least":64,"requires_php":65,"tags":66,"homepage":13,"download_link":69,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":51},"tcd-classic-editor","TCD Classic Editor","1.3.3","DesignPlus","https:\u002F\u002Fprofiles.wordpress.org\u002Fdesignplus\u002F","\u003Cp>This plugin is a tool for those who want to use the Classic Editor more conveniently.\u003C\u002Fp>\n\u003Ch4>Functions\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Quick tags\u003C\u002Fli>\n\u003Cli>Google Maps\u003C\u002Fli>\n\u003Cli>Table of Contents\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Third Party Services\u003C\u002Fh4>\n\u003Cp>This plugin relies on the following third-party services:\u003C\u002Fp>\n\u003Ch4>Google Maps API\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service URL\u003C\u002Fstrong>: \u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Fmaps\" rel=\"nofollow ugc\">Google Maps API\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of Use\u003C\u002Fstrong>: \u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Fmaps\u002Fterms\" rel=\"nofollow ugc\">Google Maps API Terms of Use\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy Policy\u003C\u002Fstrong>: \u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Fmaps\u002Fterms-20180207\" rel=\"nofollow ugc\">Google Privacy Policy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The Google Maps API is used to embed maps on your website. Your API key is sent to Google to authenticate the requests.\u003C\u002Fp>\n","This is a classic editor extension plug-in for TCD users. It is currently offered as a beta board.",3000,16517,"2026-01-28T07:33:00.000Z","6.8.5","6.7","8.0",[67,68,20,21,22],"block-editor","classic-editor","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftcd-classic-editor.zip",{"slug":71,"name":72,"version":73,"author":74,"author_profile":75,"description":76,"short_description":77,"active_installs":78,"downloaded":79,"rating":80,"num_ratings":81,"last_updated":82,"tested_up_to":83,"requires_at_least":84,"requires_php":13,"tags":85,"homepage":90,"download_link":91,"security_score":50,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":51},"post-editor-buttons-fork","Post Editor Buttons Fork","2.4","Kailey (trepmal)","https:\u002F\u002Fprofiles.wordpress.org\u002Ftrepmal\u002F","\u003Cp>Add custom buttons to the TEXT mode editor toolbar.\u003C\u002Fp>\n\u003Cp>This is a fork of \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fpost-editor-buttons\u002F\" rel=\"ugc\">Oren Yomtov’s\u003C\u002Fa> plugin.\u003C\u002Fp>\n\u003Cp>Unsure of the reason behind the poor rating and “doesn’t work” vote. Possibly the user didn’t realized this only adds tags to the \u003Cstrong>HTML editor\u003C\u002Fstrong>? If you use this plugin and it works for you, I’d appreciate it if you’d give my a good star rating and an “it works” vote.\u003C\u002Fp>\n\u003Cp>Conversely, if you have trouble, please post to the forums, and\u002For ask me on \u003Ca href=\"http:\u002F\u002Ftwitter.com\u002Ftrepmal\" rel=\"nofollow ugc\">twitter (@trepmal)\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>If you need this to work on WordPress \u003C 3.3\u003C\u002Fstrong> download \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fpost-editor-buttons-fork\u002Fdownload\u002F\" rel=\"ugc\">2.2.1\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Ftwitter.com\u002Ftrepmal\" rel=\"nofollow ugc\">I’m on twitter\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin allows you add your own buttons to the post editor's TEXT mode toolbar.",800,14471,98,11,"2016-10-01T03:32:00.000Z","4.6.30","3.3",[18,86,87,88,89],"buttons","post-editor","toolbar","toolbar-buttons","http:\u002F\u002Ftrepmal.com\u002Fplugins\u002Fpost-editor-buttons-fork\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpost-editor-buttons-fork.2.4.zip",{"slug":93,"name":94,"version":95,"author":96,"author_profile":97,"description":98,"short_description":99,"active_installs":100,"downloaded":101,"rating":25,"num_ratings":102,"last_updated":103,"tested_up_to":104,"requires_at_least":105,"requires_php":13,"tags":106,"homepage":109,"download_link":110,"security_score":50,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":51},"tinymce-table","TinyMCE Table","1.0","Gary PEGEOT","https:\u002F\u002Fprofiles.wordpress.org\u002Fgary-pegeot\u002F","\u003Cp>Fr:\u003Cbr \u002F>\nAjoute la création et l’édition des tables à TinyMCE.\u003C\u002Fp>\n\u003Cp>Un bouton permettant de créer ou de modifier les tables existantes apparait dans l’éditeur.\u003C\u002Fp>\n\u003Cp>En:\u003Cbr \u002F>\nAllow you to create and\u002For modify tables through TinyMCE editor.\u003C\u002Fp>\n\u003Cp>** TinyMCE plugin version: 4.1.1\u003C\u002Fp>\n","Ajoute la création et l'édition des tables à TinyMCE",700,6016,2,"2014-07-17T11:48:00.000Z","3.9.40","3.9",[19,20,107,108,22],"table","tables","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftinymce-table\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftinymce-table.zip",{"slug":112,"name":113,"version":6,"author":114,"author_profile":115,"description":116,"short_description":117,"active_installs":118,"downloaded":119,"rating":25,"num_ratings":30,"last_updated":120,"tested_up_to":121,"requires_at_least":122,"requires_php":13,"tags":123,"homepage":13,"download_link":127,"security_score":50,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":51},"manage-tinymce-editor","Manage TinyMCE Editor","Daniele De Santis","https:\u002F\u002Fprofiles.wordpress.org\u002Fdanieledesantis\u002F","\u003Cp>WordPress Manage TinyMCE Editor allows you to \u003Cstrong>add buttons to WordPress TinyMCE editor\u003C\u002Fstrong>.\u003Cbr \u002F>\nUsing the plugin you will be able to add the following buttons to the default WordPress visual editor:\u003C\u002Fp>\n\u003Cp>Cut\u003Cbr \u002F>\nCopy\u003Cbr \u002F>\nPaste\u003Cbr \u002F>\nSource code\u003Cbr \u002F>\nFont family selector\u003Cbr \u002F>\nFont size selector\u003Cbr \u002F>\nStyle selector\u003Cbr \u002F>\nBackground color\u003Cbr \u002F>\nEmpty document\u003Cbr \u002F>\nSuperscript\u003Cbr \u002F>\nSubscript\u003C\u002Fp>\n\u003Cp>Select the desired buttons in the plugin’s settings page and they will be available in TinyMCE.\u003C\u002Fp>\n","Add buttons to TinyMCE, WordPress' default visual editor.",200,4479,"2017-07-13T11:19:00.000Z","4.8.28","4.8",[20,124,125,22,126],"editor-buttons","text-editor","visual-editor","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmanage-tinymce-editor.1.0.0.zip",{"attackSurface":129,"codeSignals":176,"taintFlows":202,"riskAssessment":203,"analyzedAt":213},{"hooks":130,"ajaxHandlers":172,"restRoutes":173,"shortcodes":174,"cronEvents":175,"entryPointCount":11,"unprotectedCount":11},[131,136,140,145,150,153,157,161,165,169],{"type":132,"name":133,"callback":134,"file":135,"line":81},"filter","mce_external_plugins","add_externel_buttons","includes\\class-admin-tinymce.php",{"type":132,"name":137,"callback":138,"file":135,"line":139},"mce_buttons","add_editor_buttons",12,{"type":132,"name":141,"callback":141,"priority":142,"file":143,"line":144},"plugin_action_links",10,"includes\\class-admin.php",13,{"type":146,"name":147,"callback":148,"file":143,"line":149},"action","admin_init","register_settings",15,{"type":146,"name":147,"callback":151,"file":143,"line":152},"redirect_exists_tabs",16,{"type":146,"name":154,"callback":155,"file":143,"line":156},"admin_menu","register_submenu",17,{"type":146,"name":158,"callback":159,"priority":81,"file":143,"line":160},"admin_enqueue_scripts","admin_enqueue_script",19,{"type":146,"name":162,"callback":147,"file":163,"line":164},"init","xhe-quicktags.php",31,{"type":146,"name":166,"callback":167,"file":163,"line":168},"plugins_loaded","load_plugin_textdomain",32,{"type":146,"name":166,"callback":170,"file":163,"line":171},"init_actions",89,[],[],[],[],{"dangerousFunctions":177,"sqlUsage":178,"outputEscaping":180,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":195},[],{"prepared":11,"raw":11,"locations":179},[],{"escaped":32,"rawEcho":181,"locations":182},5,[183,187,189,191,193],{"file":184,"line":185,"context":186},"includes\\helpers.php",99,"raw output",{"file":188,"line":102,"context":186},"templates\\html-admin-settings.php",{"file":163,"line":190,"context":186},73,{"file":163,"line":192,"context":186},74,{"file":163,"line":194,"context":186},75,[196,199],{"name":197,"version":26,"knownCves":198},"Select2",[],{"name":200,"version":26,"knownCves":201},"TinyMCE",[],[],{"summary":204,"deductions":205},"The xhe-quicktags plugin v1.0.0 demonstrates a generally good security posture based on the provided static analysis. The absence of any identified vulnerabilities in its history, coupled with the use of prepared statements for all SQL queries and a high percentage of properly escaped output, are positive indicators. The plugin also has a very small attack surface with no direct entry points found in the static analysis.\n\nHowever, the analysis does reveal some potential areas for concern. The complete lack of nonce checks and capability checks across all identified entry points (even though the static analysis found zero entry points) is a significant oversight. If any new entry points are introduced or discovered, they would be completely unprotected. Additionally, the bundling of libraries like Select2 and TinyMCE, while common, carries a risk if these libraries are not kept up-to-date with their own security patches. The absence of taint analysis results is also noteworthy; while it could indicate no critical issues were found, it might also mean the analysis was not sufficiently comprehensive to identify potential vulnerabilities.\n\nIn conclusion, the plugin appears to be built with some good security practices in place, particularly regarding database interactions and output sanitization. Its clean vulnerability history is a strong positive. Nevertheless, the complete absence of authorization checks (nonces and capabilities) and the potential for bundled library vulnerabilities present clear risks that should be addressed to improve its overall security standing.",[206,208,210],{"reason":207,"points":142},"Missing Nonce Checks",{"reason":209,"points":142},"Missing Capability Checks",{"reason":211,"points":212},"Bundled Outdated Libraries (potential)",3,"2026-03-17T05:59:10.650Z",{"wat":215,"direct":226},{"assetPaths":216,"generatorPatterns":221,"scriptPaths":222,"versionParams":223},[217,218,219,220],"\u002Fwp-content\u002Fplugins\u002Fxhe-quicktags\u002Fassets\u002Fthird-party\u002Fcss\u002Fselect2.min.css","\u002Fwp-content\u002Fplugins\u002Fxhe-quicktags\u002Fassets\u002Fthird-party\u002Fjs\u002Fselect2.min.js","\u002Fwp-content\u002Fplugins\u002Fxhe-quicktags\u002Fassets\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fxhe-quicktags\u002Fassets\u002Fjs\u002Fadmin.js",[],[],[224,225],"xhe-quicktags\u002Fassets\u002Fcss\u002Fadmin.css?ver=","xhe-quicktags\u002Fassets\u002Fjs\u002Fadmin.js?ver=",{"cssClasses":227,"htmlComments":228,"htmlAttributes":229,"restEndpoints":230,"jsGlobals":231,"shortcodeOutput":235},[],[],[],[],[232,233,234],"xhe_waqt_tags","xhe_waqt_post_type","xhe_waqt_js",[]]