{"id":20427418,"url":"https://github.com/mervinpraison/featured-image","last_synced_at":"2026-02-12T15:06:33.314Z","repository":{"id":149330073,"uuid":"73083297","full_name":"MervinPraison/featured-image","owner":"MervinPraison","description":null,"archived":false,"fork":false,"pushed_at":"2026-02-03T05:34:04.000Z","size":104,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-02-03T18:44:28.442Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/MervinPraison.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","dco":null,"cla":null}},"created_at":"2016-11-07T13:56:05.000Z","updated_at":"2026-02-03T05:34:07.000Z","dependencies_parsed_at":"2023-05-19T19:45:49.605Z","dependency_job_id":null,"html_url":"https://github.com/MervinPraison/featured-image","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/MervinPraison/featured-image","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MervinPraison%2Ffeatured-image","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MervinPraison%2Ffeatured-image/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MervinPraison%2Ffeatured-image/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MervinPraison%2Ffeatured-image/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/MervinPraison","download_url":"https://codeload.github.com/MervinPraison/featured-image/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MervinPraison%2Ffeatured-image/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29369473,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-12T08:51:36.827Z","status":"ssl_error","status_checked_at":"2026-02-12T08:51:26.849Z","response_time":55,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-15T07:20:11.830Z","updated_at":"2026-02-12T15:06:33.309Z","avatar_url":"https://github.com/MervinPraison.png","language":"PHP","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Featured Image - WordPress Plugin\n\n[![WordPress Plugin Version](https://img.shields.io/badge/version-2.2-blue.svg)](https://wordpress.org/plugins/featured-image/)\n[![WordPress Tested](https://img.shields.io/badge/WordPress-6.8-green.svg)](https://wordpress.org/)\n[![License](https://img.shields.io/badge/license-GPL--2.0-orange.svg)](https://www.gnu.org/licenses/gpl-2.0.html)\n[![Security Fix](https://img.shields.io/badge/security-CVE--2025--12019%20Fixed-success.svg)](SECURITY-FIX-SUMMARY.md)\n\nAdd featured images to any part of your WordPress website with ease. Provides shortcodes, widgets, and PHP functions for maximum flexibility.\n\n## 🚨 Security Update v2.2\n\n**CRITICAL**: Version 2.2 fixes a Stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-12019). Please update immediately.\n\n## Features\n\n- ✅ **Easy Implementation** - Simple shortcode and widget\n- ✅ **Flexible Display** - Use inside or outside the loop\n- ✅ **Featured Image Caption** - Display image captions\n- ✅ **Alt Text Support** - SEO-friendly with proper alt attributes\n- ✅ **Secure** - Properly escaped output to prevent XSS\n- ✅ **WordPress Standards** - Follows WordPress coding standards\n\n## Installation\n\n### From WordPress.org\n\n1. Go to **Plugins → Add New**\n2. Search for \"Featured Image\"\n3. Click **Install Now** and then **Activate**\n\n### Manual Installation\n\n1. Download the plugin zip file\n2. Extract the contents\n3. Upload the `featured-image` folder to `/wp-content/plugins/`\n4. Activate the plugin through the **Plugins** menu in WordPress\n\n## Usage\n\n### Shortcode\n\nDisplay featured image in posts/pages:\n\n```\n[featured-img]\n```\n\nDisplay featured image caption:\n\n```\n[featured-img-caption]\n```\n\n### PHP Function\n\nUse inside the loop in your theme:\n\n```php\n\u003c?php if ( function_exists('get_featured_img') ) get_featured_img(); ?\u003e\n```\n\nFor caption:\n\n```php\n\u003c?php if ( function_exists('get_featured_img_caption') ) get_featured_img_caption(); ?\u003e\n```\n\n### Widget\n\n1. Go to **Appearance → Widgets**\n2. Find \"Featured Image\" widget\n3. Drag it to your desired widget area\n4. Configure and save\n\n## Changelog\n\n### Version 2.2 (2025-01-08) - Security Release\n\n**Security Fixes:**\n- Fixed Stored Cross-Site Scripting (XSS) vulnerability in image metadata (CVE-2025-12019)\n- Added `esc_url()` for image URLs\n- Added `esc_attr()` for alt text attributes\n- Added `wp_kses_post()` for caption sanitization\n\n**Bug Fixes:**\n- Fixed missing `global $post` declaration in `getting_featured_img_caption()`\n- Improved error handling to prevent PHP warnings\n\n**Improvements:**\n- Code refactored to use `sprintf()` for better readability\n- Enhanced WordPress coding standards compliance\n- Better null checks and validation\n\n### Version 2.1\n- Fixed global $post issue\n\n### Version 2.0\n- Added Featured Image Caption\n- Added Alt Text for images\n- Fixed various bugs\n\n### Version 1.0\n- Initial release\n\n## Security\n\nThis plugin follows WordPress security best practices:\n\n- ✅ All output is properly escaped\n- ✅ Input is sanitized before use\n- ✅ No SQL injection vulnerabilities\n- ✅ No XSS vulnerabilities\n- ✅ Follows WordPress coding standards\n\nIf you discover a security vulnerability, please email security@mer.vin\n\n## Requirements\n\n- WordPress 3.0 or higher\n- PHP 5.6 or higher (7.4+ recommended)\n\n## Support\n\n- **WordPress.org Support**: [Plugin Support Forum](https://wordpress.org/support/plugin/featured-image/)\n- **Documentation**: [Plugin Documentation](https://mer.vin/wordpress-featured-image)\n- **Bug Reports**: [GitHub Issues](https://github.com/MervinPraison/featured-image/issues)\n\n## Contributing\n\nContributions are welcome! Please feel free to submit a Pull Request.\n\n1. Fork the repository\n2. Create your feature branch (`git checkout -b feature/AmazingFeature`)\n3. Commit your changes (`git commit -m 'Add some AmazingFeature'`)\n4. Push to the branch (`git push origin feature/AmazingFeature`)\n5. Open a Pull Request\n\n## License\n\nThis plugin is licensed under the GPL v2 or later.\n\n```\nThis program is free software; you can redistribute it and/or modify\nit under the terms of the GNU General Public License as published by\nthe Free Software Foundation; either version 2 of the License, or\n(at your option) any later version.\n\nThis program is distributed in the hope that it will be useful,\nbut WITHOUT ANY WARRANTY; without even the implied warranty of\nMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\nGNU General Public License for more details.\n```\n\n## Author\n\n**Mervin Praison**\n- Website: [mer.vin](https://mer.vin)\n- Plugin URI: [WordPress Featured Image](https://mer.vin/wordpress-featured-image)\n\n## Credits\n\n- Security vulnerability discovered by: ZAST.AI\n- Reported by: Wordfence\n\n---\n\n⭐ If you find this plugin useful, please consider leaving a review on [WordPress.org](https://wordpress.org/plugins/featured-image/)!\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmervinpraison%2Ffeatured-image","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmervinpraison%2Ffeatured-image","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmervinpraison%2Ffeatured-image/lists"}