[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNSJw0uuvl-Y9OYYfsyEqZcIvQQgqSi_wJmfmq_K6KbA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":18,"download_link":23,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":35,"analysis":126,"fingerprints":245},"youtube-subscriber","YouTube Subscriber","2.0","WEB4PRO_co","https:\u002F\u002Fprofiles.wordpress.org\u002Fweb4pro_co\u002F","\u003Cp>This plugin creates widget and shortcode with YouTube subscribing channel form or button.\u003C\u002Fp>\n","This plugin creates widget and shortcode with YouTube subscribing channel form or button.",70,9834,90,4,"2016-08-22T13:38:00.000Z","4.6.30","3.5.1","",[20,21,22],"share","subscribing","youtube","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fyoutube-subscriber.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":13,"avg_security_score":24,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"web4pro_co",3,30,84,"2026-04-04T13:10:50.838Z",[36,53,69,86,106],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":25,"num_ratings":25,"last_updated":46,"tested_up_to":18,"requires_at_least":47,"requires_php":18,"tags":48,"homepage":18,"download_link":52,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"press-tube","Press Tube","0.0.3","Erik","https:\u002F\u002Fprofiles.wordpress.org\u002Fcodekraft\u002F","\u003Cp>Press Tube let you access YouTube content from your site administration panel, easily find them and embed in your posts content. You can access to your channel content and create custom playlists.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Easily select YouTube content from post edit page.\u003C\u002Fli>\n\u003Cli>Embed content in your posts with many options.\u003C\u002Fli>\n\u003Cli>Display YouTube playlists in various styles (default, list, slider, gallery).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Shortcodes\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>[subscribe]: Display the YouTube subscribe button for a given Channel Id\u003C\u002Fli>\n\u003Cli>[playlist]: Display the playlist for a given Id that can be YouTube playlist Id or custom playlists Id\u003C\u002Fli>\n\u003Cli>[live-chat]: Display the live chat frame for a given Live video id.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Widgets\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>YouTube LiveStream: Display your live stream video with chat and many options\u003C\u002Fli>\n\u003Cli>YouTube Videos: Display a set of videos that match your options in different styles\u003C\u002Fli>\n\u003Cli>YouTube Subscribe: Display the YouTube Subscribe button for your channel or any channel with many options\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>More to come in next versions.\u003C\u002Fp>\n\u003Ch4>Please Vote and Enjoy\u003C\u002Fh4>\n\u003Cp>Your votes really make a difference! Thanks.\u003C\u002Fp>\n","With Press Tube you can easily access to YouTube content directly from your site administration panel.",50,3354,"2017-04-03T10:19:00.000Z","4.6",[49,50,20,51,22],"embed","playlist","video","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpress-tube.zip",{"slug":54,"name":55,"version":6,"author":56,"author_profile":57,"description":58,"short_description":59,"active_installs":60,"downloaded":61,"rating":25,"num_ratings":25,"last_updated":62,"tested_up_to":63,"requires_at_least":47,"requires_php":18,"tags":64,"homepage":18,"download_link":68,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"awsome-youtube-subscribe","Awesome Youtube Subscribe","Raihanul Islam","https:\u002F\u002Fprofiles.wordpress.org\u002Fraihancse\u002F","\u003Cp>add shortcode:[Awesome-youtube-subscribe]\u003Cbr \u002F>\nThe pluging for subscribe youtube channel using channel id.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Enable or Disable Full Layout.\u003C\u002Fli>\n\u003Cli>Show or hide subscriber count.\u003C\u002Fli>\n\u003Cli>YouTube Subscribe Settings.\u003C\u002Fli>\n\u003Cli>Shortcode for YouTube Subscribe Button\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n\u003Cp>You may provide arbitrary sections, in the same format as the ones above.  This may be of use for extremely complicated\u003Cbr \u002F>\nplugins where more information needs to be conveyed that doesn’t fit into the categories of “description” or\u003Cbr \u002F>\n“installation.”  Arbitrary sections will be shown below the built-in sections outlined above.\u003C\u002Fp>\n\u003Ch3>A brief Markdown Example\u003C\u002Fh3>\n\u003Cp>Ordered list:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Some feature\u003C\u002Fli>\n\u003Cli>Another feature\u003C\u002Fli>\n\u003Cli>Something else about the plugin\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Unordered list:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>something\u003C\u002Fli>\n\u003Cli>something else\u003C\u002Fli>\n\u003Cli>third thing\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Here’s a link to \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002F\" title=\"Your favorite software\" rel=\"ugc\">WordPress\u003C\u002Fa> and one to \u003Ca href=\"http:\u002F\u002Fdaringfireball.net\u002Fprojects\u002Fmarkdown\u002Fsyntax\" title=\"Markdown is what the parser uses to process much of the readme file\" rel=\"nofollow ugc\">Markdown’s Syntax Documentation\u003C\u002Fa>.\u003Cbr \u002F>\nTitles are optional, naturally.\u003C\u002Fp>\n\u003Cp>Markdown uses email style notation for blockquotes and I’ve been told:\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>Asterisks for \u003Cem>emphasis\u003C\u002Fem>. Double it up  for \u003Cstrong>strong\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cpre>\u003Ccode>\u003C?php code(); \u002F\u002F goes in backticks ?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Here is a short description of the plugin.  This should be no more than 150 characters.  No markup here.",10,1925,"2018-10-25T22:43:00.000Z","4.7.32",[20,65,66,67,22],"shortcode","subscribe","widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fawsome-youtube-subscribe.zip",{"slug":70,"name":71,"version":72,"author":73,"author_profile":74,"description":75,"short_description":76,"active_installs":60,"downloaded":77,"rating":25,"num_ratings":25,"last_updated":78,"tested_up_to":79,"requires_at_least":80,"requires_php":18,"tags":81,"homepage":84,"download_link":85,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"wpdevelopers-youtube-share-buttons","WPDevelopers YouTube Share Buttons","1.2","Tyler Johnson","https:\u002F\u002Fprofiles.wordpress.org\u002Ftylerjohnsondesign\u002F","\u003Cp>This plugin searches your posts for YouTube embeds and then wraps the player with share buttons that appear on hover when view on desktop or display on place when view on mobile devices. There’s both a share button for Facebook and for Twitter that share your current post URL. When the post share on Facebook, it share the full URL. When sharing on Twitter however, it uses the shortlink, so that the tweet does not surpass the 180 character limit. It works with both regular YouTube iFrame embeds and the oEmbed system.\u003C\u002Fp>\n\u003Cp>View the demo here: http:\u002F\u002Fwpdevelopers.com\u002Fwpdeveloper-youtube-share-buttons\u002F\u003C\u002Fp>\n","Plugin that automatically creates share buttons over YouTube embeds that appear on hover when viewed on desktop or display on play on mobile devices.",1312,"2015-09-03T18:26:00.000Z","4.3.34","3.5",[82,20,83,22],"facebook","twitter","http:\u002F\u002Fwpdevelopers.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpdevelopers-youtube-share-buttons.zip",{"slug":87,"name":88,"version":89,"author":90,"author_profile":91,"description":92,"short_description":93,"active_installs":25,"downloaded":94,"rating":25,"num_ratings":25,"last_updated":18,"tested_up_to":95,"requires_at_least":96,"requires_php":97,"tags":98,"homepage":102,"download_link":103,"security_score":104,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":105},"my-social-media","My Social Media","1.0.0","Abdul Hadi","https:\u002F\u002Fprofiles.wordpress.org\u002Fabdulhadicse\u002F","\u003Cp>This is a social media plugin that allows to display the administrator information where admin enter their social media information like Facebook, Twitter, LinkedIn, YouTube and more.\u003C\u002Fp>\n","A simple and nice plugin to display the administrator information where admin enter their social media information like Facebook, Twitter, LinkedIn, Y …",851,"5.7.15","4.1","5.6",[82,99,100,101,22],"share-buttons","social-media","social-sharing","https:\u002F\u002Fgithub.com\u002Fabdulhadicse\u002Fmy-social-media","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmy-social-media.zip",100,"2026-03-15T10:48:56.248Z",{"slug":107,"name":108,"version":109,"author":110,"author_profile":111,"description":112,"short_description":113,"active_installs":25,"downloaded":114,"rating":25,"num_ratings":25,"last_updated":18,"tested_up_to":115,"requires_at_least":116,"requires_php":117,"tags":118,"homepage":124,"download_link":125,"security_score":104,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":105},"product-sharing-buttons","Social Sharing Button","1.0.2","Abu Huraira Bin Aman","https:\u002F\u002Fprofiles.wordpress.org\u002Fshamsbd71\u002F","\u003Cp>Share your zest with your friends and others.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Facebook Share\u003C\u002Fli>\n\u003Cli>Twitter Share\u003C\u002Fli>\n\u003Cli>LinkedIn Share\u003C\u002Fli>\n\u003Cli>YouTube Share\u003C\u002Fli>\n\u003Cli>and Share with any other Social network\u003C\u002Fli>\n\u003C\u002Fol>\n","Share your zest with your friends and others.",892,"6.0.11","4.0","7.0",[119,120,121,122,123],"share-to-facebook","share-youtube","social-network-share","social-share","twitter-share","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwcma-social-sharing-button","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fproduct-sharing-buttons.zip",{"attackSurface":127,"codeSignals":157,"taintFlows":232,"riskAssessment":233,"analyzedAt":244},{"hooks":128,"ajaxHandlers":149,"restRoutes":150,"shortcodes":151,"cronEvents":155,"entryPointCount":156,"unprotectedCount":25},[129,135,139,144],{"type":130,"name":131,"callback":132,"file":133,"line":134},"filter","mce_external_plugins","youtube_subscriber_plugin","shortcodes.php",55,{"type":130,"name":136,"callback":137,"file":133,"line":138},"mce_buttons","youtube_subscriber_register_button",56,{"type":140,"name":141,"callback":142,"file":133,"line":143},"action","init","youtube_subscriber_button",60,{"type":140,"name":145,"callback":146,"file":147,"line":148},"widgets_init","anonymous","youtube-subscriber.php",11,[],[],[152],{"tag":4,"callback":153,"file":133,"line":154},"youtube_subscriber_shortcode",47,[],1,{"dangerousFunctions":158,"sqlUsage":162,"outputEscaping":164,"fileOperations":25,"externalRequests":25,"nonceChecks":25,"capabilityChecks":156,"bundledLibraries":231},[159],{"fn":160,"file":147,"line":148,"context":161},"create_function","add_action( 'widgets_init', create_function( '', 'register_widget( \"YouTube_Subscriber\" );' ) ); \u002F\u002FW",{"prepared":25,"raw":25,"locations":163},[],{"escaped":60,"rawEcho":165,"locations":166},34,[167,170,172,174,176,178,180,182,183,184,186,188,190,192,193,195,197,199,200,202,204,206,208,210,212,214,216,218,220,221,223,225,227,229],{"file":133,"line":168,"context":169},21,"raw output",{"file":133,"line":171,"context":169},27,{"file":133,"line":173,"context":169},28,{"file":133,"line":175,"context":169},29,{"file":133,"line":177,"context":169},36,{"file":133,"line":179,"context":169},37,{"file":133,"line":181,"context":169},38,{"file":147,"line":179,"context":169},{"file":147,"line":181,"context":169},{"file":147,"line":185,"context":169},39,{"file":147,"line":187,"context":169},43,{"file":147,"line":189,"context":169},44,{"file":147,"line":191,"context":169},45,{"file":147,"line":44,"context":169},{"file":147,"line":194,"context":169},51,{"file":147,"line":196,"context":169},52,{"file":147,"line":198,"context":169},59,{"file":147,"line":143,"context":169},{"file":147,"line":201,"context":169},61,{"file":147,"line":203,"context":169},67,{"file":147,"line":205,"context":169},68,{"file":147,"line":207,"context":169},69,{"file":147,"line":209,"context":169},75,{"file":147,"line":211,"context":169},79,{"file":147,"line":213,"context":169},80,{"file":147,"line":215,"context":169},91,{"file":147,"line":217,"context":169},95,{"file":147,"line":219,"context":169},96,{"file":147,"line":104,"context":169},{"file":147,"line":222,"context":169},127,{"file":147,"line":224,"context":169},129,{"file":147,"line":226,"context":169},132,{"file":147,"line":228,"context":169},140,{"file":147,"line":230,"context":169},164,[],[],{"summary":234,"deductions":235},"The \"youtube-subscriber\" v2.0 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices by not making external HTTP requests, having no file operations, and utilizing prepared statements for its SQL queries. The lack of known CVEs and a clean vulnerability history are also strong indicators of a well-maintained and secure plugin over time. However, the code analysis reveals significant areas of concern. The presence of a dangerous function, `create_function`, is a notable risk. Furthermore, a substantial percentage of output (77%) is not properly escaped, which can lead to cross-site scripting (XSS) vulnerabilities if user-supplied data is ever processed by these outputs. The absence of nonce checks on its single shortcode entry point, despite a capability check being present, could still allow for certain types of attacks if the shortcode's functionality is sensitive. The taint analysis showing zero flows is positive, but this may be due to the limited scope of analysis or the absence of user input being directly fed into potentially dangerous operations. Overall, while the plugin's history is reassuring, the static analysis highlights potential vulnerabilities that require attention to ensure continued security.",[236,238,241],{"reason":237,"points":60},"Dangerous function 'create_function' used",{"reason":239,"points":240},"High percentage of unescaped output",8,{"reason":242,"points":243},"Nonce check missing on shortcode entry point",5,"2026-03-16T21:32:45.363Z",{"wat":246,"direct":253},{"assetPaths":247,"generatorPatterns":248,"scriptPaths":249,"versionParams":251},[],[],[250],"\u002Fwp-content\u002Fplugins\u002Fyoutube-subscriber\u002Fjs\u002Fyoutube-subscriber.js",[252],"youtube-subscriber\u002Fjs\u002Fyoutube-subscriber.js?ver=",{"cssClasses":254,"htmlComments":256,"htmlAttributes":257,"restEndpoints":262,"jsGlobals":263,"shortcodeOutput":264},[255],"g-ytsubscribe",[],[258,259,260,261],"data-channel","data-channelid","data-layout","data-count",[],[],[265,266,267],"[youtube_subscriber","\u003Ciframe id=\"fr\"","\u003Cdiv class=\"g-ytsubscribe\""]