[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhcm0g10ab-e3zWxtqWeqLGq_T6AmzLDMuqPIaDC97YM":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":14,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":35,"analysis":145,"fingerprints":272},"xve-various-embed","XVE Various Embed","1.0.4","SaltwaterC","https:\u002F\u002Fprofiles.wordpress.org\u002Fsaltwaterc\u002F","\u003Cp>XVE (XVE Various Embed) is a simple yet powerful way to add media content to your WordPress blog. It is a drop-in replacement for my old XHTML Video Embed plug-in, while it aims to continue the original support.\u003C\u002Fp>\n\u003Cp>The plug-in is self documented, so there’s the point where you may want to start. The help is integrated into the WordPress help system. If you’re looking for it, it’s into the above menu, the ‘Help’ item. For some of you, this isn’t so obvious as the Help system is kinda new.\u003C\u002Fp>\n\u003Cp>New features and support requests are honored better if you open a \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FSaltwaterC\u002FXVE-Various-Embed\" title=\"GitHub\" rel=\"nofollow ugc\">ticket on GitHub\u003C\u002Fa> where this plug-in is actually hosted.\u003C\u002Fp>\n\u003Cp>Supported video services: youtube.com (youtu.be URLs as well), metacafe.com, dailymotion.com, revver.com, spike.com, vimeo.com, livestream.com, capped.tv, trilulilu.ro, 220.ro, collegehumor.com, myvideo.de, snotr.com, gametrailers.com, blip.tv\u003C\u002Fp>\n\u003Cp>Supported audio services: trilulilu.ro, 220.ro\u003C\u002Fp>\n\u003Cp>Supported image services: trilulilu.ro\u003C\u002Fp>\n\u003Cp>It also supports generic SWF \u002F FLV (MP4) embedding.\u003C\u002Fp>\n\u003Cp>For the FLV (MP4) embedding, there are three provided players: Flowplayer, FLV Player, and JW Player. You may change them on the fly without the need to change the embed code.\u003C\u002Fp>\n","XVE (XVE Various Embed) is a simple yet powerful way to add media content to your WordPress blog.",10,6295,0,"","3.4.2","3.0",[18,19,20,21,22],"audio","embed","flash","video","xhtml","https:\u002F\u002Fgithub.com\u002FSaltwaterC\u002FXVE-Various-Embed","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fxve-various-embed.1.0.4.zip",100,null,"2026-03-15T10:48:56.248Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"saltwaterc",1,30,94,"2026-04-04T14:16:35.272Z",[36,75,94,110,127],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":11,"downloaded":44,"rating":13,"num_ratings":13,"last_updated":45,"tested_up_to":46,"requires_at_least":47,"requires_php":14,"tags":48,"homepage":71,"download_link":72,"security_score":73,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":74},"podcast-searcher-by-clarify","Podcast Searcher by Clarify","1.0.2","caseysoftware","https:\u002F\u002Fprofiles.wordpress.org\u002Fcaseysoftware\u002F","\u003Cp>The Podcast Searcher plugin uses \u003Ca href=\"http:\u002F\u002FClarify.io\" rel=\"nofollow ugc\">Clarify’s\u003C\u002Fa> technology to make audio and video searchable.  It uses automatic speech recognition to extract spoken English, Spanish, and French and lets you retrieve detailed information about your media with simple API calls. Getting started takes minutes.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Minimal setup: Adds search to your podcast without any additional plugins or custom theming required.\u003C\u002Fli>\n\u003Cli>Simple to Use: You just add the link to your podcast as you’ve always done. We handle the rest.\u003C\u002Fli>\n\u003Cli>No transcripts: Lets you skip the expensive and time-consuming step of getting transcripts.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Cp>Now whenever you add a URL to your audio or video file – either by directly copy\u002Fpasting the url into the post or using a media embed – it will automatically be sent to Clarify for indexing.\u003C\u002Fp>\n\u003Cp>Once the file is done processing, using your on-site search will return results describing where your word is heard in the audio down to the second. If you’re using the default embed\u002Fshortcode, these mentions will be clickable and jump you directly to that spot in the audio or video.\u003C\u002Fp>\n\u003Ch4>Further Usage\u003C\u002Fh4>\n\u003Cp>If you have archives with media – audio or video – already embedded, this plugin will not automatically index it for you. We didn’t want to surprise you with a massive bill. Instead, just open any of your old posts and re-save them. No editing or changes required. The media will get processed just like any other media.\u003C\u002Fp>\n\u003Ch4>Housekeeping\u003C\u002Fh4>\n\u003Cp>While this is hosted in WordPress’ SVN repository, no development is performed there. For the latest and greatest development version, check out the Github repository: https:\u002F\u002Fgithub.com\u002FClarify\u002Fwp-clarify\u003C\u002Fp>\n","The Clarify plugin allows you to make any audio or video embedded in your posts, pages, etc searchable via the standard WordPress search box.",1631,"2015-06-13T05:45:00.000Z","4.2.39","2.5",[18,49,50,19,51,52,20,53,54,55,56,57,58,59,60,61,62,63,64,65,66,21,67,68,69,70],"audio-search","clarify","enclosure","episodes","flv","id3","itunes","m4v","media","mp3","mp4","music","player","podcast","podcaster","podcasting","podcasts","rss","video-blogging","video-search","videocasts","webm","http:\u002F\u002Fgithub.com\u002FClarify\u002Fwp-clarify","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpodcast-searcher-by-clarify.1.0.2.zip",85,"2026-03-15T15:16:48.613Z",{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":83,"downloaded":84,"rating":13,"num_ratings":13,"last_updated":85,"tested_up_to":86,"requires_at_least":87,"requires_php":14,"tags":88,"homepage":92,"download_link":93,"security_score":73,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":74},"magyar-video-embed","Magyar Video Embed","0.3","DjZoNe","https:\u002F\u002Fprofiles.wordpress.org\u002Fdjzone\u002F","\u003Cp>This plugin helps different hungarian online video service provider videos to be embeded just like youtube links.\u003C\u002Fp>\n\u003Cp>Ez a bővítmény a különböző magyar tartalomszolgáltatók videó és audió anyagait segít úgy beágyazni a weboldalakba, mintha csak egy youtube link lenne.\u003C\u002Fp>\n","This plugin helps different hungarian online video service provider videos to be embeded just like youtube links. So, this is not intresting to you un …",1000,9061,"2015-08-26T09:22:00.000Z","4.3.34","4.1",[18,89,90,91,21],"magyar","oembed","post","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmagyar-video-embed","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmagyar-video-embed.zip",{"slug":95,"name":96,"version":39,"author":97,"author_profile":98,"description":99,"short_description":100,"active_installs":11,"downloaded":101,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":102,"requires_at_least":103,"requires_php":14,"tags":104,"homepage":108,"download_link":109,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"advanced-videobox","Advanced Videobox","wptom","https:\u002F\u002Fprofiles.wordpress.org\u002Fhellysium\u002F","\u003Cp>With this plugin you can add videos to your sidebar (or any other widgetized area of your site). Just copy and paste code of the video into the Advanced Video widget.\u003Cbr \u002F>\nThe Youtube’s original video code doesn’t pass W3C validation. The filtered video code of the Advanced Videobox will keep your site XHTML valid.\u003Cbr \u002F>\nThe plugin is easily customizable through widget panel. This plugin is ideal for music, tutorial, ads videos. Check for more on \u003Ca href=\"http:\u002F\u002Fwptom.com\u002Fwordpress\u002Fplugins\u002Fadvanced-videobox\u002F\" rel=\"nofollow ugc\">the plugin’s page\u003C\u002Fa>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy to manage\u003C\u002Fli>\n\u003Cli>Option to change width and height\u003C\u002Fli>\n\u003Cli>Option to disable parameters that produce invalid XHTML code\u003C\u002Fli>\n\u003Cli>Web 2.0 graphics\u003C\u002Fli>\n\u003Cli>Add up to 20 videos\u003C\u002Fli>\n\u003Cli>Easily customizable via CSS\u003C\u002Fli>\n\u003Cli>Ideal plugin for music, tutorials, ads videos\u003C\u002Fli>\n\u003Cli>You can add ANY videos, not only from Youtube. Just keep “Enable parameters” option checked.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Contributors\u002FChangelog\u003C\u002Fh3>\n\u003Cpre>\u003Ccode> Version Date       Changes\n\n 1.0.0   2009\u002F14\u002F01 Initial release     \n 1.0.1   2009\u002F15\u002F01 Sucesfully tested on WordPress 2.9.2\n 1.0.2   2009\u002F15\u002F11 Sucesfully tested on WordPress 3.0.1, minor tweaks\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Thanks to all who sent bug reports and ideas for\u003Cbr \u002F>\nimprovements.\u003C\u002Fp>\n","With this plugin you can add videos to your sidebar (or any other widgetized area of your site). Just copy and paste code of the video into the Advanc …",7181,"3.0.5","1.5",[19,21,105,106,107],"videobox","xhtml-valid","youtube","http:\u002F\u002Fwptom.com\u002Fwordpress\u002Fplugins\u002Fadvanced-videobox\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadvanced-videobox.zip",{"slug":111,"name":112,"version":113,"author":114,"author_profile":115,"description":116,"short_description":117,"active_installs":11,"downloaded":118,"rating":25,"num_ratings":31,"last_updated":119,"tested_up_to":120,"requires_at_least":47,"requires_php":14,"tags":121,"homepage":124,"download_link":125,"security_score":73,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":126},"attachments-plus-plus","Attachments++","0.6","Dan Rossiter","https:\u002F\u002Fprofiles.wordpress.org\u002Fdanrossiter\u002F","\u003Cp>Attachments++ enables auto-embedding of most document, video, and audio filetypes\u003Cbr \u002F>\ndirectly into their respective attachment page. No longer will you have to\u003Cbr \u002F>\ndownload that one-page MS Word document just to read it.\u003C\u002Fp>\n\u003Cp>Additionally, the plugin functions with \u003Cem>any\u003C\u002Fem> theme you decide to use. It\u003Cbr \u002F>\nseamlessly integrates into whatever environment it is being used.\u003C\u002Fp>\n\u003Cp>\u003Cem>Attachments++ is still being developed, but it is already a valuable tool for\u003Cbr \u002F>\nany WordPress site. If you have any suggestions, please do not hesitate to voice\u003Cbr \u002F>\nthem in the support forum! Additionally, if this plugin has helped you, please\u003Cbr \u002F>\ntake a moment to \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fview\u002Fplugin-reviews\u002Fattachments-plus-plus#postform\" rel=\"ugc\">rate\u003Cbr \u002F>\nit\u003C\u002Fa>!\u003C\u002Fem>\u003C\u002Fp>\n","Plussify your attachments! Attachments++ allows auto-embedding of most document, video and audio files. No need to download that MS Word doc to read.",2680,"2013-09-03T02:55:00.000Z","3.6.1",[122,18,19,123,21],"attachments","google-viewer","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fattachments-plus-plus\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fattachments-plus-plus.0.6.zip","2026-03-15T14:54:45.397Z",{"slug":128,"name":128,"version":129,"author":130,"author_profile":131,"description":132,"short_description":133,"active_installs":11,"downloaded":134,"rating":13,"num_ratings":13,"last_updated":135,"tested_up_to":136,"requires_at_least":16,"requires_php":14,"tags":137,"homepage":143,"download_link":144,"security_score":73,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":74},"flash-swfobject","1.0","keepkuler","https:\u002F\u002Fprofiles.wordpress.org\u002Fkeepkuler\u002F","\u003Cp>Embed arquivos SWFs em seus post’s, possibilitando a visualização de aplicações, vídeos em flash player.\u003Cbr \u002F>\nAceita configuração de flashvars e adição de atributos.\u003C\u002Fp>\n\u003Cp>Utiliza a bibilioteca swfobjtect do próprio WordPress.\u003C\u002Fp>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n\u003Ch3>A brief Markdown Example\u003C\u002Fh3>\n\u003Cp>\u003Ccode>\u003C?php code(); \u002F\u002F goes in backticks ?>\u003C\u002Fcode>\u003C\u002Fp>\n","Adicione arquivos em formato Adobe Flash de forma fácil e rápida, utilizando apenas uma linha de comando em seus post's.",2547,"2011-05-17T02:51:00.000Z","3.1.4",[138,139,140,141,142],"wordpress-flash-embed","wordpress-video","wordpress-video-embed","wordpress-youtube","youtube-wordpress-embed","http:\u002F\u002Fwww.studiotag.com.br\u002Fblog\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflash-swfobject.zip",{"attackSurface":146,"codeSignals":168,"taintFlows":257,"riskAssessment":258,"analyzedAt":271},{"hooks":147,"ajaxHandlers":160,"restRoutes":165,"shortcodes":166,"cronEvents":167,"entryPointCount":31,"unprotectedCount":31},[148,153,156],{"type":149,"name":150,"callback":149,"priority":31,"file":151,"line":152},"filter","the_content","index.php",25,{"type":149,"name":154,"callback":149,"priority":31,"file":151,"line":155},"the_excerpt",26,{"type":157,"name":158,"callback":159,"file":151,"line":32},"action","admin_menu","panel",[161],{"action":162,"nopriv":163,"callback":162,"hasNonce":163,"hasCapCheck":163,"file":151,"line":164},"xve_save_options",false,34,[],[],[],{"dangerousFunctions":169,"sqlUsage":170,"outputEscaping":172,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":256},[],{"prepared":13,"raw":13,"locations":171},[],{"escaped":13,"rawEcho":173,"locations":174},49,[175,179,181,183,185,186,188,190,191,193,195,196,198,199,200,201,202,205,206,207,209,210,211,213,214,215,217,219,222,223,224,226,227,228,230,231,232,233,234,236,237,239,240,241,244,247,249,251,254],{"file":176,"line":177,"context":178},"classes\\views\\dashboard.php",3,"raw output",{"file":176,"line":180,"context":178},21,{"file":176,"line":182,"context":178},44,{"file":176,"line":184,"context":178},45,{"file":176,"line":184,"context":178},{"file":176,"line":187,"context":178},53,{"file":176,"line":189,"context":178},54,{"file":176,"line":189,"context":178},{"file":176,"line":192,"context":178},62,{"file":176,"line":194,"context":178},63,{"file":176,"line":194,"context":178},{"file":176,"line":197,"context":178},86,{"file":176,"line":197,"context":178},{"file":176,"line":197,"context":178},{"file":176,"line":197,"context":178},{"file":176,"line":25,"context":178},{"file":203,"line":204,"context":178},"classes\\views\\object.feed.php",2,{"file":203,"line":204,"context":178},{"file":203,"line":177,"context":178},{"file":203,"line":208,"context":178},6,{"file":203,"line":208,"context":178},{"file":203,"line":208,"context":178},{"file":212,"line":204,"context":178},"classes\\views\\object.php",{"file":212,"line":204,"context":178},{"file":212,"line":204,"context":178},{"file":212,"line":216,"context":178},7,{"file":212,"line":218,"context":178},9,{"file":220,"line":221,"context":178},"classes\\views\\specific.php",47,{"file":220,"line":173,"context":178},{"file":220,"line":173,"context":178},{"file":220,"line":225,"context":178},50,{"file":220,"line":225,"context":178},{"file":220,"line":225,"context":178},{"file":220,"line":229,"context":178},52,{"file":220,"line":229,"context":178},{"file":220,"line":187,"context":178},{"file":220,"line":187,"context":178},{"file":220,"line":187,"context":178},{"file":220,"line":235,"context":178},55,{"file":220,"line":235,"context":178},{"file":220,"line":238,"context":178},56,{"file":220,"line":238,"context":178},{"file":220,"line":238,"context":178},{"file":242,"line":243,"context":178},"classes\\views\\xve.js.php",8,{"file":245,"line":246,"context":178},"classes\\XVE_Admin.php",60,{"file":245,"line":248,"context":178},230,{"file":245,"line":250,"context":178},236,{"file":252,"line":253,"context":178},"phpunit.php",15,{"file":252,"line":255,"context":178},31,[],[],{"summary":259,"deductions":260},"The xve-various-embed plugin, in version 1.0.4, exhibits a concerning security posture primarily due to a significant lack of input validation and authorization checks.  While the plugin demonstrates good practices in its SQL query handling and avoids external HTTP requests and file operations, its \"attack surface\" is small but critically unprotected. The single AJAX handler lacks any authentication or capability checks, presenting a direct pathway for unauthenticated users to interact with potentially sensitive plugin functionality. Furthermore, the complete absence of output escaping for all identified outputs is a major red flag, indicating a high probability of Cross-Site Scripting (XSS) vulnerabilities.\n\nThe vulnerability history for this plugin is clean, with no known CVEs. This could indicate either a lack of past security scrutiny or a genuinely well-developed codebase in previous iterations. However, the current static analysis findings, particularly the unescaped outputs and the unprotected AJAX endpoint, significantly outweigh this positive historical data. The absence of taint analysis results is noted but doesn't negate the clear risks identified in other areas.\n\nIn conclusion, despite its lack of known vulnerabilities and good SQL practices, the xve-various-embed plugin has critical security weaknesses. The unprotected AJAX handler and the pervasive lack of output escaping create significant risks of XSS and unauthorized action. These issues, even with a clean history, demand immediate attention and remediation before the plugin can be considered secure.",[261,263,266,269],{"reason":262,"points":243},"Unprotected AJAX handler",{"reason":264,"points":265},"100% of outputs unescaped",16,{"reason":267,"points":268},"No capability checks",5,{"reason":270,"points":268},"No nonce checks","2026-03-16T23:13:57.339Z",{"wat":273,"direct":282},{"assetPaths":274,"generatorPatterns":277,"scriptPaths":278,"versionParams":279},[275,276],"\u002Fwp-content\u002Fplugins\u002Fxve-various-embed\u002Fcss\u002Fxve.css","\u002Fwp-content\u002Fplugins\u002Fxve-various-embed\u002Fjs\u002Fxve.js",[],[276],[280,281],"xve-various-embed\u002Fcss\u002Fxve.css?ver=","xve-various-embed\u002Fjs\u002Fxve.js?ver=",{"cssClasses":283,"htmlComments":284,"htmlAttributes":285,"restEndpoints":287,"jsGlobals":289,"shortcodeOutput":291},[],[],[286],"data-xve-id",[288],"\u002Fwp-json\u002Fxve\u002Fv1\u002Fsettings",[290],"XVE_Embed",[]]