Security update. This release fixes unauthenticated stored cross-site scripting and unauthorized post-creation risks in inbound REST API processing. Update immediately.<\/p>","3.7.7":"
Major update with security improvements and code standardization. Please update to ensure API compatibility.<\/p>"},"ratings":{"1":0,"2":0,"3":0,"4":0,"5":3},"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3479843,"resolution":"128x128","location":"assets","locale":"","width":534,"height":534},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3479843,"resolution":"256x256","location":"assets","locale":"","width":1067,"height":1067}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3479843,"resolution":"1544x500","location":"assets","locale":"","width":6434,"height":2084},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3479843,"resolution":"772x250","location":"assets","locale":"","width":3217,"height":1042}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["3.7.9","3.9.0","3.9.1","3.9.2"],"block_files":[],"assets_screenshots":[],"screenshots":{"1":"Main Dashboard:<\/strong> The 2-pane interface for generating and reviewing content with AI.","2":"Bulk Generator:<\/strong> Interface for uploading Excel files for mass generation.","3":"Image Results:<\/strong> AI-generated images with automatic logo and text insertion.","4":"License Activation:<\/strong> Simple activation screen for connecting to EONSR Cloud."}},"plugin_section":[],"plugin_tags":[244526,2353,13175,186,207607],"plugin_category":[55],"plugin_contributors":[257512],"plugin_business_model":[],"class_list":["post-280720","plugin","type-plugin","status-closed","hentry","plugin_tags-aeo","plugin_tags-ai","plugin_tags-content-generator","plugin_tags-seo","plugin_tags-writing-assistant","plugin_category-seo-and-marketing","plugin_contributors-smitheonsr","plugin_committers-smitheonsr"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/s.w.org\/plugins\/geopattern-icon\/eonsr-aeo-agent_373549.svg","icon_2x":false,"generated":true},"screenshots":[],"raw_content":"\n EONSR AEO Agent is a powerful content generation tool designed to help website owners automate the creation of SEO and AEO (Answer Engine Optimization) friendly articles.<\/p>\n\n Unlike generic AI writers, this plugin utilizes a specialized 2-pane UI workflow and structured prompt engineering to produce in-depth, formatted, and media-rich content directly within your WordPress dashboard.<\/p>\n\n How it works (SaaS Service)<\/strong><\/p>\n\n This plugin operates as a connector (client) to the EONSR Cloud Platform. It sends your input (keywords, topics, settings) to our external Node.js processing servers to generate content using advanced AI models (Google Gemini API). This architecture ensures your WordPress site remains fast and is not burdened by heavy AI processing tasks.<\/p>\n\n All plugin features are fully functional. The plugin itself contains no locked or restricted functionality. API usage limits are managed entirely server-side by the EONSR Cloud service.<\/p>\n\n Key Features<\/strong><\/p>\n\n This plugin connects to the following external services. By using this plugin, you agree to the terms of each service listed below.<\/p>\n\n This plugin requires the EONSR Cloud API to function. All content generation, image creation, and translation features are processed on EONSR's external servers \u2014 no AI processing is done locally on your WordPress site.<\/p>\n\n This plugin optionally uses the YouTube Data API v3 to search for and embed relevant videos inside generated articles.<\/p>\n\n This plugin registers REST API endpoints on the connected WordPress site so that the EONSR Cloud service can return generated content and retrieve the limited site information required for article generation.<\/p>\n\n The protected endpoints require an HMAC-signed request generated with a unique per-site secret. Every signed request includes a timestamp, a random nonce, and a SHA-256 hash of the raw request body. Expired, modified, incorrectly signed, or replayed requests are rejected.<\/p>\n\n The inbound endpoints do not return WordPress passwords, authentication cookies, private user credentials, payment credentials, or unrestricted post metadata.<\/p>\n\n This plugin bundles the following third-party library. It is served locally so that no request is made to an external CDN.<\/p>\n\n Alternatively, you can upload the plugin zip file via the Plugins -> Add New -> Upload Plugin<\/strong> screen.<\/p>\n\n\n The plugin itself is free to download and all features are fully accessible without a license key. The plugin connects to the EONSR Cloud service for AI processing, which is available to all users using EONSR's default shared quota. A License Key is available for purchase at https:\/\/aeo.eonsr.com and grants you a dedicated, higher-volume quota for third-party integrations such as the YouTube Data API and Google Search API \u2014 resources that EONSR provisions and manages on your behalf.<\/p><\/dd>\n Depending on the feature you use, the plugin may send keywords, article settings, selected source content, image prompts, language and country settings, site URL, license information, and payment product identifiers to AI content generation, especially image creation and long-form text processing, requires significant computational power. Running this directly on your WordPress hosting would likely cause timeout errors. Our Node.js cloud infrastructure handles the heavy lifting to ensure stability.<\/p><\/dd>\n No. To ensure quality consistency, structured prompt engineering security, and advanced features (like text-on-image generation), the system uses our managed API infrastructure.<\/p><\/dd>\n The plugin registers protected inbound endpoints used to receive generated articles and retrieve the limited site information required for translation, internal linking, license synchronization, and duplicate-content prevention. All listed inbound endpoints require signed HMAC authentication. See the \"External Services\" section for the endpoint list and data-flow details.<\/p><\/dd>\n\n<\/dl>\n\n\n <<\/p>\n\n iframe> plus a separately enqueued script).\n* Security:<\/p>\n\n <<\/p>\n\n iframe> embeds are now restricted to YouTube hosts; any other iframe src is stripped when a post is saved.\n* Hardens the scheduled-post, languages and sync-license REST routes, which already require HMAC authentication, against stored cross-site scripting in the article body.<\/p>\n\n\n
External Services<\/h3>\n\n
1. EONSR Cloud API<\/h4>\n\n
\n
https:\/\/commercial-api.congtyeon.com<\/code><\/li>\n\n
POST \/api\/v1\/article\/generate<\/code> \u2014 Generates article text.<\/li>\nPOST \/api\/v1\/article\/generate-images<\/code> \u2014 Generates illustration images.<\/li>\nPOST \/api\/v1\/article\/bulk\/upload-scheduled<\/code> \u2014 Uploads an XLSX job list for bulk generation. The spreadsheet is parsed and every article in it is written on EONSR's servers.<\/li>\nGET \/api\/v1\/article\/bulk\/status-scheduled<\/code> \u2014 Polls the progress of a bulk job.<\/li>\nGET \/api\/v1\/apiConfig\/config\/get<\/code> \u2014 Retrieves the generation configuration for the active plan.<\/li>\nPOST \/api\/v1\/license\/create<\/code>, \/activate<\/code>, \/validate<\/code>, \/trial<\/code>, GET \/api\/v1\/license\/details\/<\/code>, POST \/api\/v1\/license\/cancel\/<\/code> \u2014 License lifecycle.<\/li>\nGET \/api\/v1\/product<\/code>, POST \/api\/v1\/paypal\/capture-order\/<\/code> \u2014 Plan catalogue and payment confirmation.<\/li>\n<\/ul><\/li>\n2. YouTube Data API v3 (Google)<\/h4>\n\n
\n
https:\/\/www.googleapis.com\/youtube\/v3\/search<\/code><\/li>\nREST API Endpoints (Inbound Webhooks)<\/h4>\n\n
\n
POST \/wp-json\/eonsr-aeo-agent\/v1\/scheduled-post\/create<\/code> \u2014 Receives completed article data from EONSR Cloud and creates or schedules a WordPress post. Requires HMAC authentication. Incoming HTML is sanitized before it is stored.<\/li>\nPOST \/wp-json\/eonsr-aeo-agent\/v1\/sync-license<\/code> \u2014 Receives a license synchronization request. Requires HMAC authentication and verifies that the supplied domain matches the current WordPress site.<\/li>\nGET \/wp-json\/eonsr-aeo-agent\/v1\/languages<\/code> \u2014 Returns the active language configuration needed for translation routing. Requires HMAC authentication.<\/li>\nGET \/wp-json\/eonsr-aeo-agent\/v1\/posts<\/code> \u2014 Returns a limited list of published post information used for internal-link suggestions and duplicate-content prevention. Requires HMAC authentication and enforces a maximum result limit.<\/li>\nGET \/wp-json\/eonsr-aeo-agent\/v1\/keyphrases<\/code> \u2014 Returns a limited list of existing SEO focus keyphrases used to reduce keyword cannibalization. Requires HMAC authentication, validates the search query, excludes deleted and auto-draft posts, and limits the response size.<\/li>\n<\/ul>\n\nThird-Party Libraries<\/h3>\n\n
\n
\n
assets\/js\/sweetalert2.all.min.js<\/code><\/li>\n\n
\n
Do I need to pay to use this plugin?<\/h3><\/dt>\n
Where is my data sent?<\/h3><\/dt>\n
https:\/\/commercial-api.congtyeon.com<\/code>. WordPress account passwords and authentication cookies are not sent to the service. Please review the Terms of Service and Privacy Policy listed in the External Services section for retention and processing details.<\/p><\/dd>\nWhy does it use an external server?<\/h3><\/dt>\n
Can I use my own Google Gemini API Key?<\/h3><\/dt>\n
What are the REST API endpoints registered by this plugin?<\/h3><\/dt>\n
3.9.2<\/h4>\n\n
\n
3.9.0<\/h4>\n\n
\n
3.8.0<\/h4>\n\n
\n
3.7.7<\/h4>\n\n
\n
1.0.0<\/h4>\n\n
\n