[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7mRf9XNSMqWP_KX5ETCY6ctcK_aeJSDFVBbWJ-wMjEE":3,"$fLvZQ9GjyTDHJIBZaMcRWViGVnBkKWeTaaZr3UOs5mDQ":188,"$fo-ECr7Hjnx5e5aZ7npoUn_No0ljmPF_MD5yG74DdCG8":193},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":16,"tags":17,"homepage":20,"download_link":21,"security_score":22,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":24,"discovery_status":25,"vulnerabilities":26,"developer":27,"crawl_stats":23,"alternatives":33,"analysis":111,"fingerprints":163},"aki-toolset","Aki Toolset","1.0.3","Aki Themes","https:\u002F\u002Fprofiles.wordpress.org\u002Fakithemes\u002F","\u003Cp>A easy plugin to import dummy data for themes by Aki Themes.\u003C\u002Fp>\n\u003Ch3>Images License\u003C\u002Fh3>\n\u003Col>\n\u003Cli>https:\u002F\u002Fpxhere.com\u002Fen\u002Flicense [CCO License]\u003C\u002Fli>\n\u003C\u002Fol>\n","Import Dummy data for themes developed by Aki Themes.",100,6845,0,"2019-12-11T08:44:00.000Z","5.3.21","4.6",[18,19],"demo-data","one-click-demo-import","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faki-toolset.zip",85,null,"2026-07-22T17:31:50.256Z","no_bundle",[],{"slug":28,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":11,"avg_security_score":22,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},"akithemes",1,30,84,"2026-08-29T00:24:11.498Z",[34,49,65,83,99],{"slug":35,"name":36,"version":37,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":13,"num_ratings":13,"last_updated":44,"tested_up_to":45,"requires_at_least":16,"requires_php":16,"tags":46,"homepage":20,"download_link":48,"security_score":11,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":24},"keon-toolset","Keon Toolset","2.5.4","keonthemes","https:\u002F\u002Fprofiles.wordpress.org\u002Fkeonthemes\u002F","\u003Cp>A demo importer plugin that makes importing starter sites effortless for building your website!\u003C\u002Fp>\n\u003Ch3>Images License\u003C\u002Fh3>\n\u003Cp>https:\u002F\u002Fpxhere.com\u002Fen\u002Flicense [CCO License]\u003C\u002Fp>\n","Import dummy data for themes developed by Keon Themes.",30000,1603655,"2026-06-29T11:30:00.000Z","7.0.2",[18,47,19],"demo-data-importer","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkeon-toolset.2.5.4.zip",{"slug":50,"name":51,"version":52,"author":53,"author_profile":54,"description":55,"short_description":56,"active_installs":57,"downloaded":58,"rating":13,"num_ratings":13,"last_updated":59,"tested_up_to":60,"requires_at_least":61,"requires_php":62,"tags":63,"homepage":20,"download_link":64,"security_score":22,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":24},"cyclone-demo-importer","Cyclone Demo Importer","2.9.60","Cyclone Themes","https:\u002F\u002Fprofiles.wordpress.org\u002Fcyclonetheme\u002F","\u003Cp>A easy plugin to import dummy data for themes by Cyclone Themes.\u003C\u002Fp>\n","Import Dummy data for themes developed by Cyclone Themes.",10000,540248,"2024-06-18T09:59:00.000Z","6.5.8","4.9","5.6",[18,19],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcyclone-demo-importer.2.9.60.zip",{"slug":66,"name":67,"version":68,"author":69,"author_profile":70,"description":71,"short_description":72,"active_installs":73,"downloaded":74,"rating":13,"num_ratings":13,"last_updated":75,"tested_up_to":76,"requires_at_least":77,"requires_php":78,"tags":79,"homepage":20,"download_link":82,"security_score":11,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":24},"blockskit","Blockskit","1.2.2","BlockskitDev","https:\u002F\u002Fprofiles.wordpress.org\u002Fblockskitdev\u002F","\u003Cp>An easy plugin to import starter sites and add different effects to the image.\u003C\u002Fp>\n","An easy plugin to import starter sites and add different effects to the image.",8000,95797,"2025-12-21T10:23:00.000Z","6.9.5","5.9","7.4.9",[80,18,47,81,19],"block","image-block","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fblockskit.1.2.2.zip",{"slug":84,"name":85,"version":86,"author":87,"author_profile":88,"description":89,"short_description":90,"active_installs":91,"downloaded":92,"rating":13,"num_ratings":13,"last_updated":93,"tested_up_to":94,"requires_at_least":95,"requires_php":16,"tags":96,"homepage":20,"download_link":97,"security_score":98,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":24},"candid-advanced-toolset","Candid Advanced Toolset","1.1.0","candidthemes","https:\u002F\u002Fprofiles.wordpress.org\u002Fcandidthemes\u002F","\u003Cp>A easy plugin to import dummy data for themes by Candid Themes.\u003C\u002Fp>\n\u003Ch3>Images License\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>All the images used on the plugins are GPL compatible\u003C\u002Fli>\n\u003C\u002Ful>\n","Import Dummy data for themes developed by Candid Themes.",1000,46637,"2025-03-10T10:20:00.000Z","6.7.5","6.3",[18,19],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcandid-advanced-toolset.zip",92,{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":91,"downloaded":107,"rating":13,"num_ratings":13,"last_updated":108,"tested_up_to":45,"requires_at_least":16,"requires_php":16,"tags":109,"homepage":20,"download_link":110,"security_score":11,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":24},"kortez-toolset","Kortez Toolset","1.1.3","kortezthemes","https:\u002F\u002Fprofiles.wordpress.org\u002Fkortezthemes\u002F","\u003Cp>A easy plugin to import dummy data for themes by Kortez Themes.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Kortez Toolset is inspired by Keon Toolset. Some of the codes used in this plugin are used from Keon Toolset as they are under GPL license.\u003C\u002Fp>\n\u003Ch3>Images License\u003C\u002Fh3>\n\u003Cp>https:\u002F\u002Fpxhere.com\u002Fen\u002Flicense [CCO License]\u003C\u002Fp>\n","Import dummy data for themes developed by Kortez Themes.",20930,"2026-07-01T11:06:00.000Z",[18,47,19],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkortez-toolset.zip",{"attackSurface":112,"codeSignals":147,"taintFlows":156,"riskAssessment":157,"analyzedAt":162},{"hooks":113,"ajaxHandlers":138,"restRoutes":144,"shortcodes":145,"cronEvents":146,"entryPointCount":29,"unprotectedCount":29},[114,121,125,129,132],{"type":115,"name":116,"callback":117,"priority":118,"file":119,"line":120},"filter","advanced_import_demo_lists","add_demo_lists",10,"inc\\init.php",45,{"type":115,"name":122,"callback":123,"priority":118,"file":119,"line":124},"admin_menu","import_menu",46,{"type":115,"name":126,"callback":127,"priority":118,"file":119,"line":128},"admin_enqueue_scripts","enqueue_styles",48,{"type":115,"name":126,"callback":130,"priority":118,"file":119,"line":131},"enqueue_scripts",49,{"type":133,"name":134,"callback":135,"priority":136,"file":119,"line":137},"action","advanced_import_replace_term_ids","replace_term_ids",20,52,[139],{"action":140,"nopriv":141,"callback":142,"hasNonce":141,"hasCapCheck":141,"file":119,"line":143},"aki_toolset_getting_started",false,"install_advanced_import",47,[],[],[],{"dangerousFunctions":148,"sqlUsage":149,"outputEscaping":151,"fileOperations":13,"externalRequests":13,"nonceChecks":29,"capabilityChecks":154,"bundledLibraries":155},[],{"prepared":13,"raw":13,"locations":150},[],{"escaped":152,"rawEcho":13,"locations":153},5,[],3,[],[],{"summary":158,"deductions":159},"The aki-toolset v1.0.3 plugin exhibits a generally strong security posture based on the provided static analysis.  The absence of dangerous functions, file operations, and external HTTP requests is a positive indicator.  Furthermore, all SQL queries utilize prepared statements, and all identified output is properly escaped, which are crucial security best practices. The plugin also implements nonce and capability checks on some of its entry points.\n\nHowever, a significant concern lies in its attack surface. The plugin exposes one AJAX handler that lacks any authentication checks. This is a direct vulnerability that could allow unauthorized users to trigger functionality within the plugin. The lack of taint analysis data, while potentially indicating no issues were found, also means this area was not thoroughly scrutinized for complex vulnerabilities that might arise from user-supplied data.\n\nThe plugin's vulnerability history is clean, with no recorded CVEs. This suggests a history of secure development or a lack of public discovery of vulnerabilities. While this is positive, it does not negate the identified risk in the current version's attack surface. In conclusion, the plugin demonstrates good coding practices in many areas, but the unprotected AJAX endpoint represents a clear and actionable security risk that needs to be addressed.",[160],{"reason":161,"points":118},"AJAX handler without auth checks","2026-03-16T20:57:00.413Z",{"wat":164,"direct":173},{"assetPaths":165,"generatorPatterns":168,"scriptPaths":169,"versionParams":170},[166,167],"\u002Fwp-content\u002Fplugins\u002Faki-toolset\u002Fassets\u002Faki-toolset.css","\u002Fwp-content\u002Fplugins\u002Faki-toolset\u002Fassets\u002Faki-toolset.js",[],[167],[171,172],"aki-toolset.css?ver=","aki-toolset.js?ver=",{"cssClasses":174,"htmlComments":180,"htmlAttributes":181,"restEndpoints":184,"jsGlobals":185,"shortcodeOutput":187},[175,176,177,178,179],"ads-container","ads-screenshot","ads-notice","plugin-install-notice","ads-gsm-btn",[],[182,183],"data-name","data-slug",[],[186],"aki_toolset",[],{"error":189,"url":190,"statusCode":191,"statusMessage":192,"message":192},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Faki-toolset\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":154,"versions":194},[195,202,209],{"version":196,"download_url":197,"svn_tag_url":198,"released_at":23,"has_diff":141,"diff_files_changed":199,"diff_lines":23,"trac_diff_url":200,"vulnerabilities":201,"is_current":141},"1.0.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faki-toolset.1.0.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Faki-toolset\u002Ftags\u002F1.0.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Faki-toolset%2Ftags%2F1.0.1&new_path=%2Faki-toolset%2Ftags%2F1.0.2",[],{"version":203,"download_url":204,"svn_tag_url":205,"released_at":23,"has_diff":141,"diff_files_changed":206,"diff_lines":23,"trac_diff_url":207,"vulnerabilities":208,"is_current":141},"1.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faki-toolset.1.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Faki-toolset\u002Ftags\u002F1.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Faki-toolset%2Ftags%2F1.0.0&new_path=%2Faki-toolset%2Ftags%2F1.0.1",[],{"version":210,"download_url":211,"svn_tag_url":212,"released_at":23,"has_diff":141,"diff_files_changed":213,"diff_lines":23,"trac_diff_url":23,"vulnerabilities":214,"is_current":141},"1.0.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faki-toolset.1.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Faki-toolset\u002Ftags\u002F1.0.0\u002F",[],[]]