[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVn_W24ipUbcf3oQygAvS57wci0Qsn80fLBqYledQnXA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":19,"download_link":20,"security_score":21,"vuln_count":13,"unpatched_count":13,"last_vuln_date":22,"fetched_at":23,"vulnerabilities":24,"developer":25,"crawl_stats":22,"alternatives":31,"analysis":32,"fingerprints":73},"apidae-insertion-widget","Wapidae","3.0","Apidae","https:\u002F\u002Fprofiles.wordpress.org\u002Fmabrg\u002F","\u003Cp>Ce plugin permet de faciliter l’intégration dans WordPress d’un \u003Ca href=\"https:\u002F\u002Fwww.apidae-tourisme.com\u002Fnouveaux-widgets\u002F\" rel=\"nofollow ugc\">widget javascript fourni par le réseau Apidae\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Attention : pour pouvoir utiliser ce plugin, vous aurez besoin de l’identifiant Widget Apidae que vous aura transmis votre Office du Tourisme.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Ce plugin créé un “code court” a intégrer dans vos pages pour vous permettre d’ajouter un widget Apidae sans entrer la moindre ligne de code et sans modifier votre thème.\u003C\u002Fp>\n\u003Ch4>Utilisation\u003C\u002Fh4>\n\u003Cp>Récupérez le numéro de votre Widget Apidae auprès de votre Office du Tourisme.\u003C\u002Fp>\n\u003Cp>Dans l’une de vos pages ou dans l’un de vos articles WordPress, ajoutez un bloc de type “[\u002F] Code Court”. (screenshot n°1)\u003C\u002Fp>\n\u003Cp>Dans ce code court, saisissez \u003Ccode>[wapidae id=\"123456\"]\u003C\u002Fcode> où 123456 correspond à l’identifiant de votre Widget Apidae. (screenshot n°2)\u003C\u002Fp>\n\u003Cp>Votre Widget est prêt, il vous suffit de publier votre page ou votre article. (screenshot n°3)\u003C\u002Fp>\n\u003Ch3>Contributeurs & Développeurs\u003C\u002Fh3>\n\u003Cp>Ce plugin est développé par \u003Ca href=\"https:\u002F\u002Fwww.perouges-bugey-tourisme.com\u002F\" rel=\"nofollow ugc\">Bugey Plaine de l’Ain Tourisme\u003C\u002Fa> et \u003Ca href=\"https:\u002F\u002Fwww.apidae-tourisme.com\u002F\" rel=\"nofollow ugc\">Apidae Tourisme\u003C\u002Fa> pour utilisation par des partenaires Apidae.\u003Cbr \u002F>\nEn cas de bug, veuillez prendre contact avec la hotline Apidae : hotline.dev@apidae-tourisme.com\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Vincent GAULLIER https:\u002F\u002Fvincentgaullier.fr\u002F, https:\u002F\u002Fwww.perouges-bugey-tourisme.com\u002F\u003C\u002Fli>\n\u003Cli>Maxime BERGER https:\u002F\u002Fapidae-tourisme.com\u002F\u003C\u002Fli>\n\u003C\u002Ful>\n","Permet d'installer facilement un Widget Apidae fourni par votre Office du Tourisme.",50,1422,0,"","5.5.18","4.7","7.0",[],"https:\u002F\u002Fwww.perouges-bugey-tourisme.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fapidae-insertion-widget.zip",100,null,"2026-03-15T10:48:56.248Z",[],{"slug":26,"display_name":7,"profile_url":8,"plugin_count":27,"total_installs":11,"avg_security_score":21,"avg_patch_time_days":28,"trust_score":29,"computed_at":30},"mabrg",1,30,94,"2026-04-05T15:10:17.837Z",[],{"attackSurface":33,"codeSignals":55,"taintFlows":62,"riskAssessment":63,"analyzedAt":72},{"hooks":34,"ajaxHandlers":47,"restRoutes":48,"shortcodes":49,"cronEvents":54,"entryPointCount":27,"unprotectedCount":13},[35,41],{"type":36,"name":37,"callback":38,"file":39,"line":40},"action","init","ot_iwa_load_plugin_textdomain","ot_widget_apidae.php",57,{"type":42,"name":43,"callback":44,"priority":45,"file":39,"line":46},"filter","script_loader_tag","ot_iwa_async_attribute",10,72,[],[],[50],{"tag":51,"callback":52,"file":39,"line":53},"wapidae","ot_iwa_shortcode",117,[],{"dangerousFunctions":56,"sqlUsage":57,"outputEscaping":59,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":27,"bundledLibraries":61},[],{"prepared":13,"raw":13,"locations":58},[],{"escaped":13,"rawEcho":13,"locations":60},[],[],[],{"summary":64,"deductions":65},"The 'apidae-insertion-widget' v3.0 plugin exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of dangerous functions, use of prepared statements for all SQL queries, and proper output escaping are significant strengths, indicating good coding practices. Furthermore, the lack of any known vulnerabilities (CVEs) or recorded taint flows suggests a mature and well-maintained codebase.\n\nHowever, there are a few areas that warrant attention. The presence of a shortcode as an entry point, while only one and not explicitly noted as unprotected, represents a potential attack vector. The static analysis also indicates zero nonce checks. While there's one capability check, the lack of nonce checks on potentially sensitive operations could be a concern, especially if the shortcode handles user-supplied input that is not adequately validated and sanitized within its execution context.\n\nIn conclusion, the plugin appears to be well-developed with a clear focus on secure coding. The primary area for improvement would be to ensure that all shortcode functionality includes appropriate nonce checks and robust input validation, even if current testing did not reveal immediate risks. The excellent track record of no historical vulnerabilities is a positive indicator, but maintaining this requires ongoing vigilance.",[66,69],{"reason":67,"points":68},"Shortcode as an entry point",3,{"reason":70,"points":71},"Zero nonce checks detected",5,"2026-03-16T21:51:14.299Z",{"wat":74,"direct":81},{"assetPaths":75,"generatorPatterns":77,"scriptPaths":78,"versionParams":80},[76],"\u002Fwp-content\u002Fplugins\u002Fapidae-insertion-widget\u002Flanguages\u002F",[],[79],"https:\u002F\u002Fwidgets.apidae-tourisme.com\u002Fwidget\u002F",[],{"cssClasses":82,"htmlComments":84,"htmlAttributes":85,"restEndpoints":86,"jsGlobals":87,"shortcodeOutput":88},[83],"ot-iwa-debug",[],[],[],[],[89],"[wapidae id="]