[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ft0C0lihn2IFpoef8TPCbYgIF-UtfjuF0PrLl78g--U0":3,"$f163ZFWbhfxpa8WRdHYTiso8nL1W3e544EFRXhk8_S54":190,"$f0L3wjFwasT4_FlBYWf09arybQgkhbxBnozGadSa6n1c":195},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"discovery_status":27,"vulnerabilities":28,"developer":29,"crawl_stats":25,"alternatives":35,"analysis":106,"fingerprints":176},"alexa-traffic-widget","Alexa Traffic Widget","0.1","3eo","https:\u002F\u002Fprofiles.wordpress.org\u002F3eo\u002F","\u003Cp>Alexa is the leading provider of free, global web metrics. Search Alexa to discover the most successful sites on the web by keyword, category, or country. Use our analytics for competitive analysis, benchmarking, market research, or business development.\u003C\u002Fp>\n","Shows your site Alexa rank instantly in the widget area without editing code.",10,4839,0,"2014-02-16T07:51:00.000Z","3.7.41","2.0","",[19,4,20,21],"alexa-button","alexa-widget","traffic-widget","http:\u002F\u002Fwww.3eo.ir\u002F2441\u002Falexa-traffic-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Falexa-traffic-widget.zip",85,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":24,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},2,20,30,84,"2026-05-20T08:04:47.463Z",[36,55,71,92],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":13,"num_ratings":13,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":17,"tags":49,"homepage":53,"download_link":54,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"traffic-counter-widget","Plugin Name: Traffic Counter Widget Plugin","2.1.2","aviaxis","https:\u002F\u002Fprofiles.wordpress.org\u002Faviaxis\u002F","\u003Cp>TCW shows the number of visitors \u002F hits \u002F unique IPs in the past 24 hours, 7 days and 30 days. It also shows the number of users currently online.\u003C\u002Fp>\n\u003Cp>It provides a robots filter, but the automatic traffic could also be considered.\u003C\u002Fp>\n\u003Cp>Traffic Counter Widget offers language support and automatic log deletion.\u003C\u002Fp>\n\u003Cp>For help or reporting bugs please refer to: http:\u002F\u002Fwww.pixme.org\u002Ftehnologie-internet\u002Fwordpress-traffic-counter-widget\u002F4228\u003C\u002Fp>\n\u003Ch3>Other\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>You may use the code any way you wish, with respect to the WordPress general licensing rules. However I do not guaratee anythig, of course 🙂 \u003C\u002Fli>\n\u003Cli>Please do not remove the link to the plugin’s page unless you donate. Help me keep it free.\u003C\u002Fli>\n\u003Cli>If you enjoy it, and find it useful please donete 2 Euro here: http:\u002F\u002Fwww.pixme.org\u002Fwp-content\u002Fuploads\u002Fwidget-traffic-counter\u002F\u003C\u002Fli>\n\u003C\u002Ful>\n","TCW lets your users know how much traffic you have on your blog. It counts pages visited, hits and unique IPs on your blog and shows it in a widget.",700,75480,"2017-11-28T21:17:00.000Z","3.2.1","2.8.0",[50,21,51,52],"traffic-counter","user-traffic","visitors-counter","http:\u002F\u002Fwww.pixme.org\u002Fwp-content\u002Fuploads\u002Fwidget-traffic-counter\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftraffic-counter-widget.zip",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":44,"downloaded":63,"rating":64,"num_ratings":65,"last_updated":66,"tested_up_to":67,"requires_at_least":48,"requires_php":17,"tags":68,"homepage":17,"download_link":70,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"traffic-stats-widget","Plugin Name: Traffic Stats Widget Plugin","1.0.2","helenthomaswp","https:\u002F\u002Fprofiles.wordpress.org\u002Fhelenthomaswp\u002F","\u003Cp>TSW shows the number of visitors \u002F hits \u002F unique IPs in the past 24 hours, 7 days and 30 days. It also shows the number of users currently online.\u003C\u002Fp>\n\u003Cp>It provides a robots filter, but the automatic traffic could also be considered.\u003C\u002Fp>\n\u003Cp>Traffic Stats Widget offers language support and automatic log deletion.\u003C\u002Fp>\n","TSW lets your users know how much traffic you have on your blog. It counts pages visited, hits and unique IPs on your blog and shows it in a widget.",50380,88,7,"2017-11-28T20:05:00.000Z","4.0.38",[69,50,21,51,52],"hit-counter","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftraffic-stats-widget.1.0.2.zip",{"slug":72,"name":73,"version":74,"author":75,"author_profile":76,"description":77,"short_description":78,"active_installs":79,"downloaded":80,"rating":81,"num_ratings":82,"last_updated":83,"tested_up_to":84,"requires_at_least":85,"requires_php":17,"tags":86,"homepage":90,"download_link":91,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"pulsemaps","PulseMaps Visitor World Map","1.7.2","aitosoftware","https:\u002F\u002Fprofiles.wordpress.org\u002Faitosoftware\u002F","\u003Cp>The PulseMaps plugin visualizes your site visitors’ locations on the world map.  The plugin includes a map widget which you place on the pages you want to track.  The areas where you get the most visitors are shown with a lighter color.  The most recent visitors are show as flashing dots on the map.  The total number of visits is also shown.\u003C\u002Fp>\n\u003Cp>For a live demo, visit the \u003Ca href=\"http:\u002F\u002Fpulsemaps.com\u002F\" rel=\"nofollow ugc\">PulseMaps website\u003C\u002Fa> and the \u003Ca href=\"http:\u002F\u002Fpulsemaps.com\u002Fmaps\u002F526958181\u002F\" rel=\"nofollow ugc\">detail page for PulseMap website visitors\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Simply drop the widget on your blog’s sidebar. The map widget will work as a form of “social proof” : your visitors see that your blog is being read by people all over the world. This makes your blog instantly more trustworthy–who would trust a blog nobody reads? With this widget, you show readers that your site DOES get visitors. As an added bonus, the map just looks pretty dang cool!\u003C\u002Fp>\n\u003Cp>Click on the widget to get to a detail page sporting a huge map which can be freely zoomed and panned, along with other interesting details and statistics.\u003C\u002Fp>\n\u003Cp>The widget size and colors are fully customizable; you can choose any colors and size you wish on the admin panel.\u003C\u002Fp>\n\u003Cp>Features\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Map widget shows visitors in real time\u003C\u002Fli>\n\u003Cli>Customizable map widget size and colors\u003C\u002Fli>\n\u003Cli>Click on map to open a large map with more details and statistics\u003C\u002Fli>\n\u003Cli>Works on all popular browsers\u003C\u002Fli>\n\u003Cli>Lightweight plugin (does not need a lot of disk space)\u003C\u002Fli>\n\u003C\u002Ful>\n","Show off your website visitors on the world map. When people around the world visit your blog, the corresponding areas on the heat map widget light up …",90,42113,56,4,"2015-02-02T17:05:00.000Z","3.5.2","3.0",[87,50,21,88,89],"heat-map","visitor-map","world-map","http:\u002F\u002Fpulsemaps.com\u002Fwordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpulsemaps.1.7.2.zip",{"slug":93,"name":94,"version":95,"author":96,"author_profile":97,"description":98,"short_description":99,"active_installs":32,"downloaded":100,"rating":13,"num_ratings":13,"last_updated":101,"tested_up_to":47,"requires_at_least":102,"requires_php":17,"tags":103,"homepage":104,"download_link":105,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"traffic-flash-counter","Traffic flash counter","1.0.1","donimedia","https:\u002F\u002Fprofiles.wordpress.org\u002Fdonimedia\u002F","\u003Cp>Traffic flash counter is a widget which allows to display , on your wordpress website ,\u003Cbr \u002F>\nan animated flash counter .\u003C\u002Fp>\n\u003Cp>It consists of four blocks of hits counters , respectively called :\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Today counter\u003C\u002Fli>\n\u003Cli>Yesterday counter\u003C\u002Fli>\n\u003Cli>Daily average counter\u003C\u002Fli>\n\u003Cli>Total counter\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The name of these counter blocks can be changed , at your convenience .\u003C\u002Fp>\n\u003Cp>Each counter block displays a unique visitors traffic .\u003C\u002Fp>\n\u003Cp>Traffic flash counter widget is distinguished by a prefix to avoid conflicts\u003Cbr \u002F>\nin database Options table .\u003Cbr \u002F>\nBesides , it generates an XML file that passes users parameters to its Flash program part .\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.donimedia-servicetique.net\u002Fnewsletters\" title=\"Be well informed about our latest  creations or updates\" rel=\"nofollow ugc\">Newsletter\u003C\u002Fa> | \u003Ca href=\"http:\u002F\u002Fwww.donimedia-servicetique.net\u002Fsupport-forum-donimedia-servicetique-cms-extensions\" title=\"Click here to receive assistance or report a problem with this plugin\" rel=\"nofollow ugc\">Forum\u003C\u002Fa>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fdonicounters.donimedia-servicetique.net\u002F?p=40\" rel=\"nofollow ugc\">LIVE DEMO\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Author plugin : David DONISA\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>Author E-mail : donimedia-servicetique@orange.fr\u003C\u002Fli>\n\u003Cli>Plugin license type : GPL v2.0\u003C\u002Fli>\n\u003C\u002Ful>\n","Animated traffic flash counter .",22461,"2011-12-03T14:54:00.000Z","3.0.1",[69,50,21,51,52],"http:\u002F\u002Fdonicounters.donimedia-servicetique.net\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftraffic-flash-counter.1.0.1.zip",{"attackSurface":107,"codeSignals":119,"taintFlows":132,"riskAssessment":159,"analyzedAt":175},{"hooks":108,"ajaxHandlers":115,"restRoutes":116,"shortcodes":117,"cronEvents":118,"entryPointCount":13,"unprotectedCount":13},[109],{"type":110,"name":111,"callback":112,"file":113,"line":114},"action","widgets_init","anonymous","alexa-traffic-widget.php",25,[],[],[],[],{"dangerousFunctions":120,"sqlUsage":124,"outputEscaping":126,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":131},[121],{"fn":122,"file":113,"line":114,"context":123},"create_function","add_action('widgets_init', create_function('', 'return register_widget(\"AlexaTrafficWidget\");'));",{"prepared":13,"raw":13,"locations":125},[],{"escaped":13,"rawEcho":127,"locations":128},1,[129],{"file":113,"line":31,"context":130},"raw output",[],[133,150],{"entryPoint":134,"graph":135,"unsanitizedCount":127,"severity":149},"widget (alexa-traffic-widget.php:16)",{"nodes":136,"edges":146},[137,141],{"id":138,"type":139,"label":140,"file":113,"line":31},"n0","source","$_SERVER['HTTP_HOST']",{"id":142,"type":143,"label":144,"file":113,"line":31,"wp_function":145},"n1","sink","echo() [XSS]","echo",[147],{"from":138,"to":142,"sanitized":148},false,"medium",{"entryPoint":151,"graph":152,"unsanitizedCount":127,"severity":158},"\u003Calexa-traffic-widget> (alexa-traffic-widget.php:0)",{"nodes":153,"edges":156},[154,155],{"id":138,"type":139,"label":140,"file":113,"line":31},{"id":142,"type":143,"label":144,"file":113,"line":31,"wp_function":145},[157],{"from":138,"to":142,"sanitized":148},"low",{"summary":160,"deductions":161},"The 'alexa-traffic-widget' plugin version 0.1 exhibits a concerning security posture despite having no recorded vulnerabilities. The static analysis reveals a complete lack of entry points, which is generally positive. However, this is overshadowed by significant code quality issues. The presence of the `create_function` function is a critical red flag, as it can lead to code injection vulnerabilities if user-supplied data is passed to it without proper sanitization. Furthermore, none of the total outputs are properly escaped, meaning any data displayed by the widget could be vulnerable to Cross-Site Scripting (XSS) attacks, allowing attackers to execute arbitrary JavaScript in the user's browser. The taint analysis showing flows with unsanitized paths, though not rated as critical or high severity, further suggests potential for data mishandling. The absence of nonce checks and capability checks on any potential, albeit nonexistent, entry points is also a weakness that would be critical if entry points were discovered. The plugin's vulnerability history being clear is a positive sign, but it may also be due to its limited functionality and lack of exposure rather than robust security. In conclusion, while the plugin appears to have a minimal attack surface and no known CVEs, the fundamental code quality issues like the use of `create_function` and unescaped output represent significant and actionable security risks.",[162,165,168,171,173],{"reason":163,"points":164},"Use of create_function",15,{"reason":166,"points":167},"Unescaped output found",8,{"reason":169,"points":170},"Taint flow with unsanitized paths",5,{"reason":172,"points":170},"Missing nonce checks (potential)",{"reason":174,"points":170},"Missing capability checks (potential)","2026-03-17T00:44:52.284Z",{"wat":177,"direct":182},{"assetPaths":178,"generatorPatterns":179,"scriptPaths":180,"versionParams":181},[],[],[],[],{"cssClasses":183,"htmlComments":184,"htmlAttributes":185,"restEndpoints":186,"jsGlobals":187,"shortcodeOutput":188},[],[],[],[],[],[189],"\u003Cdiv align=\"center\">\u003Cscript type='text\u002Fjavascript' src='http:\u002F\u002Fxslt.alexa.com\u002Fsite_stats\u002Fjs\u002Fs\u002Fa?url=",{"error":191,"url":192,"statusCode":193,"statusMessage":194,"message":194},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Falexa-traffic-widget\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":13,"versions":196},[]]