[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffI_P0LHnRLVWlSXcjU2Is8_hYA9s74EoHl4oe0yHlqs":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":14,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":37,"analysis":124,"fingerprints":413},"yd-spread-parameter","YD Spread Parameter","0.2.0","Yann at WP&Co","https:\u002F\u002Fprofiles.wordpress.org\u002Fydubois\u002F","\u003Ch4>Spread your http get parameters on all your links!\u003C\u002Fh4>\n\u003Cp>This plugin will automatically take care of “spreading” a parameter on all the links URL inside a WP or WP MU blog.\u003Cbr \u002F>\nIt will add the given parameter at the end of any link URL inside the site.\u003C\u002Fp>\n\u003Cp>It will also add the parameter as a hidden field to any form element contained in the page (such as the Wordress default search form);\u003Cbr \u002F>\nif the form uses GET as a submit method, the URL parameter will be maintained.\u003C\u002Fp>\n\u003Cp>This can be used to propagate identification tokens (for on-line shopping sites, etc.),\u003Cbr \u002F>\nor parameters related to the display\u003Cbr \u002F>\n(eg. used with the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwp-theme-switcher\u002F\" rel=\"ugc\">WP Theme Switcher plugin\u003C\u002Fa> to choose which theme should be used as a display template).\u003C\u002Fp>\n\u003Cp>The plugin works perfectly with WordPress MU, either deployed site-wide or on a single blog.\u003C\u002Fp>\n\u003Cp>The plugin has its own settings page.\u003C\u002Fp>\n\u003Cp>It is \u003Cstrong>fully internationalized\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>Base package includes .pot file for translation of the interface, and English and French versions.\u003C\u002Fp>\n\u003Ch4>Active support\u003C\u002Fh4>\n\u003Cp>Drop me a line on my \u003Ca href=\"http:\u002F\u002Fwww.yann.com\u002Fen\u002Fwp-plugins\u002Fyd-spread-parameter\" title=\"Yann Dubois' Spread Parameter plugin for WordPress\" rel=\"nofollow ugc\">YD Spread Parameter plugin support site\u003C\u002Fa> to report bugs, ask for a specific feature or improvement, or just tell me how you’re using the plugin.\u003C\u002Fp>\n\u003Ch4>Description en Français :\u003C\u002Fh4>\n\u003Cp>Ce plug-in WordPress permet de recopier automatiquement n’importe quel paramètre “get” http à la fin de tous les liens de votre site.\u003C\u002Fp>\n\u003Cp>Le paramètre est également ajouté sous forme de champ caché à tous les formulaires présents dans la page (par exemple le formulaire de recherche par défaut de WordPress)\u003C\u002Fp>\n\u003Cp>Le plugin a sa propre page d’options dans l’administration.\u003C\u002Fp>\n\u003Cp>Il est entièrement internationalisé.\u003C\u002Fp>\n\u003Cp>La distribution standard inclut le fichier de traduction .pot et les versions française, et anglaise.\u003C\u002Fp>\n\u003Cp>Le plugin peut fonctionner avec n’importe quelle langue ou jeu de caractères.\u003C\u002Fp>\n\u003Cp>Pour toute aide ou information en français, laissez-moi un commentaire sur le \u003Ca href=\"http:\u002F\u002Fwww.yann.com\u002Fen\u002Fwp-plugins\u002Fyd-spread-parameter\" title=\"Yann Dubois' Spread Parameter plugin for WordPress\" rel=\"nofollow ugc\">site de support du plugin YD Spread Parameter\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Funding Credits\u003C\u002Fh4>\n\u003Cp>Original development of this plugin has been paid for by \u003Ca href=\"http:\u002F\u002Fwww.wellcom.fr\" title=\"Wellcom\" rel=\"nofollow ugc\">Wellcom.fr\u003C\u002Fa>. Please visit their site!\u003C\u002Fp>\n\u003Cp>Le développement d’origine de ce plugin a été financé par \u003Ca href=\"http:\u002F\u002Fwww.wellcom.fr\" title=\"Wellcom\" rel=\"nofollow ugc\">Wellcom.fr\u003C\u002Fa>. Allez visiter leur site !\u003C\u002Fp>\n\u003Ch4>Translation\u003C\u002Fh4>\n\u003Cp>If you want to contribute to a translation of this plugin, please drop me a line by e-mail or leave a comment on the \u003Ca href=\"http:\u002F\u002Fwww.yann.com\u002Fen\u002Fwp-plugins\u002Fyd-spread-parameter\" title=\"Yann Dubois' Spread Parameter plugin for WordPress\" rel=\"nofollow ugc\">plugin’s page\u003C\u002Fa>.\u003Cbr \u002F>\nYou will get credit for your translation in the plugin file and this documentation, as well as a link on this page and on my developers’ blog.\u003C\u002Fp>\n\u003Ch3>Plugin settingsd\u002Foptions page\u003C\u002Fh3>\n\u003Cp>Use the plugin’s own settings page to select which URL parameters to automatically replicate site-wide.\u003C\u002Fp>\n\u003Ch3>Revisions\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>0.1.0 Original beta version.\u003C\u002Fli>\n\u003Cli>0.2.0 Added support for forms (such as search form); optional sub-domain spreading.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>To Do\u003C\u002Fh3>\n\u003Cp>Test. Final release.\u003C\u002Fp>\n\u003Ch3>Did you like it?\u003C\u002Fh3>\n\u003Cp>Drop me a line on http:\u002F\u002Fwww.yann.com\u002Fen\u002Fwp-plugins\u002Fyd-spread-parameter\u003C\u002Fp>\n\u003Cp>And… \u003Cem>please\u003C\u002Fem> rate this plugin –>\u003C\u002Fp>\n","Tweaks URLs to keep and propagate a http get query parameter in all links site-wide ( like ?tpl=1 ).",10,2150,0,"","2.9.2","2.9.1",[18,19,20,21,22],"admin","administration","automatic","blog","blogs","http:\u002F\u002Fwww.yann.com\u002Fen\u002Fwp-plugins\u002Fyd-spread-parameter","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fyd-spread-parameter.zip",100,null,"2026-03-15T14:44:11.924Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"ydubois",14,180,88,30,86,"2026-04-04T05:24:42.575Z",[38,52,74,92,109],{"slug":39,"name":40,"version":6,"author":7,"author_profile":8,"description":41,"short_description":42,"active_installs":11,"downloaded":43,"rating":13,"num_ratings":13,"last_updated":44,"tested_up_to":15,"requires_at_least":16,"requires_php":14,"tags":45,"homepage":48,"download_link":49,"security_score":50,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":51},"yd-fast-page-update","YD *FAST* Page update","\u003Ch4>Drastically reduce page updating time!\u003C\u002Fh4>\n\u003Cp>This WordPress plugin \u003Cstrong>optimizes page management routines\u003C\u002Fstrong>, it accelerates page saving time by bypassing the very heavy process of rebuilding all the rewriterules of your pretty-permalink enabled blogs each time anything on a page is changed.\u003C\u002Fp>\n\u003Cp>When using WordPress as a CMS, it is not unusual to deal with web sites that have a lot of hierarchical pages.\u003Cbr \u002F>\nWhen reaching a few hundred pages and using custom or pretty SEO-aware permalinks, page updates become \u003Cstrong>VERY\u003C\u002Fstrong> slow.\u003C\u002Fp>\n\u003Cp>Eventually, when reaching about 1000 pages, page management becomes quite tedious and time-consuming, because any change in a page takes a few minutes to be saved (during which the site usually comes to a halt because of heavy database load and table lock)\u003Cbr \u002F>\nwhen script or database max request times are finally reached, it becomes impossible to modify anything in a page.\u003C\u002Fp>\n\u003Cp>The reason is that \u003Cstrong>rewrite rules for \u003Cem>all\u003C\u002Fem> the blog’s pages are rebuilt everytime something is changed and saved in a page\u003C\u002Fstrong>, even if the url structure has no reason to change at all.\u003C\u002Fp>\n\u003Cp>(This is an aknowledged weakness of WordPress, that has been featured on the TRAC development list for a few years already)\u003C\u002Fp>\n\u003Cp>This very short and simple plugin tries to fix this problem for most page updates:\u003Cbr \u002F>\nRewriterules structure will get rebuilt only if the name of the page, or its parent attachment are changed, resulting in tremendous acceleration of the whole updating process.\u003C\u002Fp>\n\u003Cp>Since version 0.2.0 you can decide for yourself when to force flushing of page address rewriterules, or when to completely disable rules flushing.\u003Cbr \u002F>\nPlease take notice that if you disable the rules flushing, your new page addresses will not work until you force a bulk rules flush.\u003C\u002Fp>\n\u003Cp>Expect hundred-fold improvement in page update delay in the admin for a 1000+ pages blog.\u003Cbr \u002F>\n(from over a minute to less than 10 seconds on one of my 2000+ page blog)\u003C\u002Fp>\n\u003Cp>By further \u003Ca href=\"https:\u002F\u002Fcore.trac.wordpress.org\u002Fattachment\u002Fticket\u002F10852\u002F10852_get_page_children.diff\" rel=\"nofollow ugc\">patching your wp-includes\u002Fpost.php core file\u003C\u002Fa>\u003Cbr \u002F>\naccording to \u003Ca href=\"https:\u002F\u002Fcore.trac.wordpress.org\u002Fticket\u002F10852\" rel=\"nofollow ugc\">WP trac Ticket #10852\u003C\u002Fa>, you will possibly get even better performances.\u003C\u002Fp>\n\u003Cp>\u003Cem>(btw. I have another improvement of wp-includes\u002Fpost.php that I could not yet figure out how to build into a plugin that makes me gain a few more seconds on each save.)\u003C\u002Fem>\u003C\u002Fp>\n\u003Ch4>Possible caveat\u003C\u002Fh4>\n\u003Cp>This plugin chooses to bypass an important core function of the WordPress administration workflow for the sake of speed.\u003Cbr \u002F>\nBe aware that on some specific environments, this could cause unwanted side-effects, such as bad page linking or url permalink structure.\u003C\u002Fp>\n\u003Cp>The plugin has however been tested on a 2000+ page medium-loaded site (around 1000 visitors\u002Fday) with 50 popular plugins installed and works perfectly for that purpose.\u003C\u002Fp>\n\u003Cp>Your own mileage may vary.\u003C\u002Fp>\n\u003Ch4>Active support\u003C\u002Fh4>\n\u003Cp>Drop me a line on my \u003Ca href=\"http:\u002F\u002Fwww.yann.com\u002Fen\u002Fwp-plugins\u002Fyd-fast-page-update\" title=\"Yann Dubois' FAST page update plugin for WordPress\" rel=\"nofollow ugc\">YD FAST page update support site\u003C\u002Fa> to report bugs or successful implementations, ask for a specific feature or improvement, or just tell me how you’re using the plugin.\u003C\u002Fp>\n\u003Ch4>Description en Français :\u003C\u002Fh4>\n\u003Cp>Ce plug-in WordPress accélère d’un facteur 100 ou plus le temps de sauvegarde ou mise à jour des pages hiérarchiques d’un blog WordPress comprenant un très grand nombre de pages (plusieurs centaines).\u003C\u002Fp>\n\u003Cp>En effet, dès qu’on atteint quelques centaines de pages sur un blog orienté CMS, si on utilise des url “propres” compatibles avec l’optimisation du référencement (SEO), le temps de mise à jour des pages commence à prendre plusieurs minutes.\u003Cbr \u002F>\nL’administration des pages devient finalement impossible à cause d’une surcharge de la base de données ou de délais d’exécution trop importants.\u003C\u002Fp>\n\u003Cp>Ce plugin règle le problème en évitant de reconstruire toute la structure des liens de toutes les pages du site si le nom de la page ou sa page de rattachement hiérarchique n’ont pas changé.\u003C\u002Fp>\n\u003Cp>Le plugin peut fonctionner avec n’importe quelle langue ou jeu de caractères compatible avec WordPress.\u003C\u002Fp>\n\u003Cp>Pour toute aide ou information en français, laissez-moi un commentaire sur le \u003Ca href=\"http:\u002F\u002Fwww.yann.com\u002Fen\u002Fwp-plugins\u002Fyd-fast-page-update\" title=\"Yann Dubois' FAST page update plugin for WordPress\" rel=\"nofollow ugc\">site de support du plugin YD FAST page update\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Funding Credits\u003C\u002Fh4>\n\u003Cp>Original development of this plugin has been paid for by \u003Ca href=\"http:\u002F\u002Fwww.nogent-citoyen.fr\" title=\"Nogent Citoyen\" rel=\"nofollow ugc\">Nogent Citoyen\u003C\u002Fa>. Please visit their site!\u003C\u002Fp>\n\u003Cp>Le développement d’origine de ce plugin a été financé par \u003Ca href=\"http:\u002F\u002Fwww.nogent-citoyen.com\" title=\"Nogent Citoyen\" rel=\"nofollow ugc\">Nogent Citoyen\u003C\u002Fa>. Allez visiter leur site !\u003C\u002Fp>\n\u003Ch4>Translation\u003C\u002Fh4>\n\u003Cp>If you want to contribute to a translation of this plugin’s documentation, please drop me a line by e-mail or leave a comment on the plugin’s page.\u003C\u002Fp>\n\u003Ch3>Revisions\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>0.1.0 Original beta version.\u003C\u002Fli>\n\u003Cli>0.2.0 Added manual rules flush control.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>To Do\u003C\u002Fh3>\n\u003Cp>Test. Final release.\u003C\u002Fp>\n\u003Ch3>Did you like it?\u003C\u002Fh3>\n\u003Cp>Drop me a line on http:\u002F\u002Fwww.yann.com\u002Fen\u002Fwp-plugins\u002Fyd-fast-page-update\u003C\u002Fp>\n\u003Cp>And… \u003Cem>please\u003C\u002Fem> rate this plugin –>\u003C\u002Fp>\n","Speed-up page updating, when using custom permalinks and a lot of pages.",6344,"2010-05-20T16:03:00.000Z",[18,19,22,46,47],"cms","wordpress","http:\u002F\u002Fwww.yann.com\u002Fen\u002Fwp-plugins\u002Fyd-fast-page-update","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fyd-fast-page-update.zip",85,"2026-03-15T15:16:48.613Z",{"slug":53,"name":54,"version":55,"author":56,"author_profile":57,"description":58,"short_description":59,"active_installs":60,"downloaded":61,"rating":25,"num_ratings":62,"last_updated":63,"tested_up_to":64,"requires_at_least":65,"requires_php":14,"tags":66,"homepage":70,"download_link":71,"security_score":72,"vuln_count":62,"unpatched_count":13,"last_vuln_date":73,"fetched_at":51},"aapanel-wp-toolkit","aapanel WP Toolkit","1.2","aapanel","https:\u002F\u002Fprofiles.wordpress.org\u002Faapanel\u002F","\u003Cp>Allows you to manage WordPress remotely on aapanel, one-click login, and some features will be coming in the future.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This file is part of aapanel WP Toolkit.\u003C\u002Fp>\n\u003Cp>aapanel WP Toolkit is free software: you can redistribute it and\u002For modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.\u003C\u002Fp>\n\u003Cp>aapanel WP Toolkit is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.\u003C\u002Fp>\n\u003Cp>You should have received a copy of the GNU General Public License along with ManageWP Worker. If not, see \u003Ca href=\"https:\u002F\u002Fwww.gnu.org\u002Flicenses\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.gnu.org\u002Flicenses\u002F\u003C\u002Fa>.\u003C\u002Fp>\n","A better way to manage dozens of WordPress websites.",1000,3914,1,"2025-07-29T02:40:00.000Z","6.8.5","3.0",[19,20,67,68,69],"login","manage-wordpress","remote","https:\u002F\u002Fwww.aapanel.com\u002Fnew\u002Ffeature\u002Fwp.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faapanel-wp-toolkit.1.2.zip",98,"2025-07-17 16:21:33",{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":34,"downloaded":82,"rating":13,"num_ratings":13,"last_updated":83,"tested_up_to":84,"requires_at_least":85,"requires_php":14,"tags":86,"homepage":90,"download_link":91,"security_score":50,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":51},"auto-copyright-1","Auto Copyright","14.11","phillcoxon","https:\u002F\u002Fprofiles.wordpress.org\u002Fphillcoxon\u002F","\u003Cp>Automatically generates a copyright notice based on the first and last post published in the WordPress database. The notice can be placed anywhere in the web site template or included as a short code within a post itself.\u003C\u002Fp>\n\u003Cp>The plugin includes the following theme functions:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Ccode>thisismyurl_autocopyright_article( 'format=#c# #y# #sitename#. All Rights Reserved.' )\u003C\u002Fcode> – Will display the copyright for a specific article, must be called from within the Loop.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ccode>thisismyurl_autocopyright( 'Copyright ( #c# ) #from# - #to#' )\u003C\u002Fcode> – Will display the full copyright for the site\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin is maintained by Phill Coxon (http:\u002F\u002Fphillcoxon.com) or you can find him on Twitter at http:\u002F\u002Ftwitter.com\u002Fphillcoxon\u002F\u003C\u002Fp>\n\u003Ch3>Updates\u003C\u002Fh3>\n\u003Ch3>Donations\u003C\u002Fh3>\n\u003Cp>If you would like to donate to help support future development of this tool, please visit http:\u002F\u002Fphillcoxon.com\u002Fwp\u002F\u003C\u002Fp>\n\u003Ch3>Original Developer\u003C\u002Fh3>\n\u003Cp>This plugin was originally created by Christopher Ross before being taken over by Phill Coxon in Jan 2016\u003C\u002Fp>\n","Automatically generates a copyright notice based on the first and last post published in the WordPress database.",22999,"2016-01-17T21:31:00.000Z","4.1.0","3.2.0",[19,21,87,88,89],"copyright","footer","links","http:\u002F\u002Fthisismyurl.com\u002Fdownloads\u002Fauto-copyright-1\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fauto-copyright-1.zip",{"slug":93,"name":94,"version":95,"author":96,"author_profile":97,"description":98,"short_description":99,"active_installs":11,"downloaded":100,"rating":13,"num_ratings":13,"last_updated":101,"tested_up_to":102,"requires_at_least":65,"requires_php":14,"tags":103,"homepage":107,"download_link":108,"security_score":50,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":51},"simple-user-admin","Simple User Admin","1.5","Chris Taylor","https:\u002F\u002Fprofiles.wordpress.org\u002Fmrwiblog\u002F","\u003Cp>Simple user admin is a WordPress MultiSite plugin that gives site administrators a simpler interface to manage blogs and users. The plugin allows you to search for users and blogs, see the blogs that a particular user has access to, and users that have access to a particular blog. You can add users to a blog, or add blogs to a user. You can also easily change roles for a user for all their blogs, or change roles for all users of a particular blog.\u003C\u002Fp>\n\u003Cp>The plugin also makes use of the __() function to allow for easy translation.\u003C\u002Fp>\n\u003Cp>Many thanks to Joost from http:\u002F\u002Fyoast.com\u002F for fixing the plugin to work with MultiSite. Also thanks to Adam Dunson of http:\u002F\u002Fwww.cloudspace.com for lots of development work.\u003C\u002Fp>\n\u003Ch3>1.5 (2015\u002F04\u002F20)\u003C\u002Fh3>\n\u003Cp>Fixed deprecated calls. Tested up to 4.2.\u003C\u002Fp>\n\u003Ch3>1.4 (2011\u002F09\u002F09)\u003C\u002Fh3>\n\u003Cp>Most of the development work for this version was done by Adam Dunson of http:\u002F\u002Fwww.cloudspace.com\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Tightened security\u003C\u002Fli>\n\u003Cli>Made the plugin run from the Network Users admin area\u003C\u002Fli>\n\u003Cli>Made the search boxes more consistent across every page\u003C\u002Fli>\n\u003Cli>Shows all users and blogs by default (pagination will be done for a future release)\u003C\u002Fli>\n\u003Cli>Now shows custom roles, not just the standard roles\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.3 (2010\u002F11\u002F17)\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Implemented fix for WordPress MultiSite (thanks to Joost from http:\u002F\u002Fyoast.com\u002F)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.2\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Fixed bug in blog search\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.1\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Updated plugin URI\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.0\u003C\u002Fh3>\n\u003Cp>Initial version\u003C\u002Fp>\n","Simple user admin is a WordPress MultiSite plugin that gives site administrators a simpler interface to manage blogs and users.",11220,"2015-04-20T21:25:00.000Z","4.2.39",[19,21,104,105,106],"buddypress","user","wordpress-mu","http:\u002F\u002Fwww.stillbreathing.co.uk\u002Fwordpress\u002Fsimple-user-admin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-user-admin.zip",{"slug":110,"name":111,"version":112,"author":7,"author_profile":8,"description":113,"short_description":114,"active_installs":11,"downloaded":115,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":116,"requires_at_least":117,"requires_php":14,"tags":118,"homepage":121,"download_link":122,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":123},"yd-wordpresscom-stats-integration","YD WordPress.com Stats Integration","0.1.1","\u003Ch4>Import your WordPress.com statistics in your posts meta fields automatically\u003C\u002Fh4>\n\u003Cp>This plugin needs the Worpdress.com stats plugin.\u003C\u002Fp>\n\u003Cp>Your WordPress.com statistics account must be activated.\u003C\u002Fp>\n\u003Cp>It will automatically import all your view per post stats inside your WordPress database, using your post’s meta information fields.\u003C\u002Fp>\n\u003Ch4>Active support\u003C\u002Fh4>\n\u003Cp>Drop me a line on my \u003Ca href=\"http:\u002F\u002Fwww.yann.com\u002Fen\u002Fwp-plugins\u002Fyd-wordpress-com-stats-integration\" title=\"Yann Dubois' WordPress.com Stats Integration for WordPress\" rel=\"nofollow ugc\">YD WordPress.com Stats Integration plugin support site\u003C\u002Fa> to report bugs, ask for specific feature or improvement, or just tell me how you’re using the plugin.\u003Cbr \u002F>\nIt’s still in an active development stage, with new features coming out on a regular basis.\u003C\u002Fp>\n\u003Ch3>Revisions\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>0.1.0. Initial beta release of 2010\u002F10\u002F25\u003C\u002Fli>\n\u003Cli>0.1.1. Cron scheduling bugfix + framework upgrade of 2010\u002F10\u002F26\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Did you like it?\u003C\u002Fh3>\n\u003Cp>Drop me a line on http:\u002F\u002Fwww.yann.com\u002Fen\u002Fwp-plugins\u002Fyd-wordpress-com-stats-integration\u003C\u002Fp>\n\u003Cp>And… \u003Cem>please\u003C\u002Fem> rate this plugin –>\u003C\u002Fp>\n","Import your Wordpress.com statistics in your posts meta fields automatically",5052,"3.0.5","2.8",[18,19,20,119,120],"post","posts","http:\u002F\u002Fwww.yann.com\u002Fen\u002Fwp-plugins\u002Fyd-wordpresscom-stats-integration","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fyd-wordpresscom-stats-integration.zip","2026-03-15T10:48:56.248Z",{"attackSurface":125,"codeSignals":217,"taintFlows":329,"riskAssessment":399,"analyzedAt":412},{"hooks":126,"ajaxHandlers":213,"restRoutes":214,"shortcodes":215,"cronEvents":216,"entryPointCount":13,"unprotectedCount":13},[127,133,136,141,145,149,152,155,158,161,164,167,170,173,176,179,182,185,188,191,194,197,200,203,206,209],{"type":128,"name":129,"callback":130,"file":131,"line":132},"action","init","yd_spreadparam_textdomain","yd-spread-parameter.php",74,{"type":128,"name":134,"callback":135,"file":131,"line":50},"admin_menu","yd_spreadparam_menu",{"type":137,"name":138,"callback":139,"priority":11,"file":131,"line":140},"filter","plugin_row_meta","yd_spreadparam_links",367,{"type":128,"name":142,"callback":143,"file":131,"line":144},"wp_footer","yd_spreadparam_linkware",390,{"type":137,"name":146,"callback":147,"priority":11,"file":131,"line":148},"attachment_link","yd_spreadparam_link_filter",451,{"type":137,"name":150,"callback":147,"priority":11,"file":131,"line":151},"author_feed_link",452,{"type":137,"name":153,"callback":147,"priority":11,"file":131,"line":154},"author_link",453,{"type":137,"name":156,"callback":147,"priority":11,"file":131,"line":157},"comment_reply_link",454,{"type":137,"name":159,"callback":147,"priority":11,"file":131,"line":160},"day_link",455,{"type":137,"name":162,"callback":147,"priority":11,"file":131,"line":163},"feed_link",456,{"type":137,"name":165,"callback":147,"priority":11,"file":131,"line":166},"get_comment_author_link",457,{"type":137,"name":168,"callback":147,"priority":11,"file":131,"line":169},"get_comment_author_url_link",458,{"type":137,"name":171,"callback":147,"priority":11,"file":131,"line":172},"month_link",459,{"type":137,"name":174,"callback":147,"priority":62,"file":131,"line":175},"page_link",460,{"type":137,"name":177,"callback":147,"priority":11,"file":131,"line":178},"post_link",461,{"type":137,"name":180,"callback":147,"priority":11,"file":131,"line":181},"the_permalink",462,{"type":137,"name":183,"callback":147,"priority":11,"file":131,"line":184},"year_link",463,{"type":137,"name":186,"callback":147,"priority":11,"file":131,"line":187},"tag_link",464,{"type":137,"name":189,"callback":147,"priority":11,"file":131,"line":190},"post_comments_feed_link",466,{"type":137,"name":192,"callback":147,"priority":11,"file":131,"line":193},"category_feed_link",467,{"type":137,"name":195,"callback":147,"priority":11,"file":131,"line":196},"category_link",468,{"type":137,"name":198,"callback":147,"priority":11,"file":131,"line":199},"admin_url",469,{"type":137,"name":201,"callback":147,"priority":11,"file":131,"line":202},"plugins_url",470,{"type":137,"name":204,"callback":147,"priority":11,"file":131,"line":205},"register",472,{"type":128,"name":207,"callback":207,"file":131,"line":208},"wp_head",549,{"type":128,"name":142,"callback":210,"priority":211,"file":131,"line":212},"ob_flush",1000000000,561,[],[],[],[],{"dangerousFunctions":218,"sqlUsage":219,"outputEscaping":221,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":328},[],{"prepared":13,"raw":13,"locations":220},[],{"escaped":62,"rawEcho":222,"locations":223},52,[224,227,229,231,233,235,237,239,241,243,245,247,249,251,252,254,256,258,260,262,264,266,268,270,272,274,276,278,280,282,284,286,288,290,292,294,296,298,300,302,304,306,308,310,312,314,316,318,320,322,324,326],{"file":131,"line":225,"context":226},109,"raw output",{"file":131,"line":228,"context":226},120,{"file":131,"line":230,"context":226},125,{"file":131,"line":232,"context":226},132,{"file":131,"line":234,"context":226},137,{"file":131,"line":236,"context":226},139,{"file":131,"line":238,"context":226},142,{"file":131,"line":240,"context":226},147,{"file":131,"line":242,"context":226},149,{"file":131,"line":244,"context":226},158,{"file":131,"line":246,"context":226},160,{"file":131,"line":248,"context":226},161,{"file":131,"line":250,"context":226},178,{"file":131,"line":32,"context":226},{"file":131,"line":253,"context":226},197,{"file":131,"line":255,"context":226},210,{"file":131,"line":257,"context":226},212,{"file":131,"line":259,"context":226},214,{"file":131,"line":261,"context":226},216,{"file":131,"line":263,"context":226},217,{"file":131,"line":265,"context":226},219,{"file":131,"line":267,"context":226},220,{"file":131,"line":269,"context":226},221,{"file":131,"line":271,"context":226},222,{"file":131,"line":273,"context":226},223,{"file":131,"line":275,"context":226},224,{"file":131,"line":277,"context":226},232,{"file":131,"line":279,"context":226},234,{"file":131,"line":281,"context":226},236,{"file":131,"line":283,"context":226},237,{"file":131,"line":285,"context":226},238,{"file":131,"line":287,"context":226},240,{"file":131,"line":289,"context":226},241,{"file":131,"line":291,"context":226},242,{"file":131,"line":293,"context":226},243,{"file":131,"line":295,"context":226},261,{"file":131,"line":297,"context":226},266,{"file":131,"line":299,"context":226},273,{"file":131,"line":301,"context":226},274,{"file":131,"line":303,"context":226},278,{"file":131,"line":305,"context":226},284,{"file":131,"line":307,"context":226},286,{"file":131,"line":309,"context":226},298,{"file":131,"line":311,"context":226},303,{"file":131,"line":313,"context":226},314,{"file":131,"line":315,"context":226},333,{"file":131,"line":317,"context":226},334,{"file":131,"line":319,"context":226},335,{"file":131,"line":321,"context":226},343,{"file":131,"line":323,"context":226},344,{"file":131,"line":325,"context":226},397,{"file":131,"line":327,"context":226},416,[],[330,378],{"entryPoint":331,"graph":332,"unsanitizedCount":376,"severity":377},"yd_spreadparam_settings (yd-spread-parameter.php:97)",{"nodes":333,"edges":368},[334,339,344,347,349,353,357,359,363,366],{"id":335,"type":336,"label":337,"file":131,"line":338},"n0","source","$_GET['do']",126,{"id":340,"type":341,"label":342,"file":131,"line":230,"wp_function":343},"n1","sink","echo() [XSS]","echo",{"id":345,"type":336,"label":346,"file":131,"line":248},"n2","$_GET['page'] (x4)",{"id":348,"type":341,"label":342,"file":131,"line":248,"wp_function":343},"n3",{"id":350,"type":336,"label":351,"file":131,"line":352},"n4","$_GET['yd_spreadparam-add_new']",136,{"id":354,"type":355,"label":356,"file":131,"line":352},"n5","transform","→ yd_spreadparam_add()",{"id":358,"type":341,"label":342,"file":131,"line":325,"wp_function":343},"n6",{"id":360,"type":336,"label":361,"file":131,"line":362},"n7","$_GET['del_param']",141,{"id":364,"type":355,"label":365,"file":131,"line":362},"n8","→ yd_spreadparam_del()",{"id":367,"type":341,"label":342,"file":131,"line":327,"wp_function":343},"n9",[369,371,372,373,374,375],{"from":335,"to":340,"sanitized":370},false,{"from":345,"to":348,"sanitized":370},{"from":350,"to":354,"sanitized":370},{"from":354,"to":358,"sanitized":370},{"from":360,"to":364,"sanitized":370},{"from":364,"to":367,"sanitized":370},7,"medium",{"entryPoint":379,"graph":380,"unsanitizedCount":376,"severity":377},"\u003Cyd-spread-parameter> (yd-spread-parameter.php:0)",{"nodes":381,"edges":392},[382,383,384,385,386,387,388,389,390,391],{"id":335,"type":336,"label":337,"file":131,"line":338},{"id":340,"type":341,"label":342,"file":131,"line":230,"wp_function":343},{"id":345,"type":336,"label":346,"file":131,"line":248},{"id":348,"type":341,"label":342,"file":131,"line":248,"wp_function":343},{"id":350,"type":336,"label":351,"file":131,"line":352},{"id":354,"type":355,"label":356,"file":131,"line":352},{"id":358,"type":341,"label":342,"file":131,"line":325,"wp_function":343},{"id":360,"type":336,"label":361,"file":131,"line":362},{"id":364,"type":355,"label":365,"file":131,"line":362},{"id":367,"type":341,"label":342,"file":131,"line":327,"wp_function":343},[393,394,395,396,397,398],{"from":335,"to":340,"sanitized":370},{"from":345,"to":348,"sanitized":370},{"from":350,"to":354,"sanitized":370},{"from":354,"to":358,"sanitized":370},{"from":360,"to":364,"sanitized":370},{"from":364,"to":367,"sanitized":370},{"summary":400,"deductions":401},"The \"yd-spread-parameter\" plugin v0.2.0 exhibits a mixed security posture. On the positive side, the static analysis reveals no identified vulnerabilities in its history, no dangerous functions are used, and all SQL queries utilize prepared statements.  Furthermore, there are no file operations or external HTTP requests, and no bundled libraries are present, reducing potential attack vectors. The plugin also appears to have a very small attack surface with no exposed AJAX handlers, REST API routes, shortcodes, or cron events that are directly accessible or unprotected.\n\nHowever, significant concerns arise from the output escaping and taint analysis. A mere 2% of the 53 total outputs are properly escaped, indicating a high likelihood of Cross-Site Scripting (XSS) vulnerabilities. The taint analysis reveals two flows with unsanitized paths, suggesting that data processed by the plugin might not be adequately validated or sanitized before being used in a way that could lead to security issues, even if a critical or high severity wasn't explicitly flagged in this initial analysis. The complete absence of nonce and capability checks, while potentially explained by the minimal attack surface, still represents a potential gap if functionality were ever exposed or if the analysis missed subtle entry points.\n\nGiven the lack of historical vulnerabilities, the plugin's security history is clean, which is a positive indicator. However, the current code analysis highlights concerning weaknesses, particularly in output sanitization and unsanitized data flows. While the attack surface is small, the identified code quality issues present a real risk to users. The plugin has strengths in its lack of historical issues and secure SQL usage but significant weaknesses in output handling and taint management.",[402,405,407,410],{"reason":403,"points":404},"Low percentage of properly escaped output",15,{"reason":406,"points":11},"Taint flows with unsanitized paths",{"reason":408,"points":409},"No nonce checks",5,{"reason":411,"points":409},"No capability checks","2026-03-16T23:32:22.424Z",{"wat":414,"direct":419},{"assetPaths":415,"generatorPatterns":416,"scriptPaths":417,"versionParams":418},[],[],[],[],{"cssClasses":420,"htmlComments":421,"htmlAttributes":422,"restEndpoints":423,"jsGlobals":424,"shortcodeOutput":425},[],[],[],[],[],[]]