[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSd3IyiFFLwBCxpeekx8kiTtf2V932ATHNvqx5Phzi18":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":14,"download_link":18,"security_score":19,"vuln_count":11,"unpatched_count":11,"last_vuln_date":20,"fetched_at":21,"vulnerabilities":22,"developer":23,"crawl_stats":20,"alternatives":30,"analysis":31,"fingerprints":65},"archive-custom-filter","Archive Custom Filter","1.0.0","hashsalacop","https:\u002F\u002Fprofiles.wordpress.org\u002Fhashsalacop\u002F","\u003Cp>This plugin is for Accepts ‘daily’, ‘weekly’, ‘monthly’, ‘yearly’, ‘postbypost’, or ‘alpha’. Both ‘postbypost’ and ‘alpha’ display the same archive link\u003C\u002Fp>\n","This plugin is for Accepts 'daily', 'weekly', 'monthly', 'yearly', 'postbypost', or 'alpha'. Both 'postbypost' and 'alpha' display the same archive link",0,927,"2020-08-27T13:58:00.000Z","","5.3","7.4",[],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Farchive-custom-filter.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":24,"total_installs":25,"avg_security_score":26,"avg_patch_time_days":27,"trust_score":28,"computed_at":29},3,300,90,30,87,"2026-04-04T14:15:09.588Z",[],{"attackSurface":32,"codeSignals":48,"taintFlows":55,"riskAssessment":56,"analyzedAt":64},{"hooks":33,"ajaxHandlers":39,"restRoutes":40,"shortcodes":41,"cronEvents":46,"entryPointCount":47,"unprotectedCount":11},[34],{"type":35,"name":36,"callback":37,"file":38,"line":27},"action","wp_footer","archive_custom_filter_enquee","archive_custom_filter.php",[],[],[42],{"tag":43,"callback":44,"file":38,"line":45},"archive","archive_custom_filter",53,[],1,{"dangerousFunctions":49,"sqlUsage":50,"outputEscaping":52,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":54},[],{"prepared":11,"raw":11,"locations":51},[],{"escaped":11,"rawEcho":11,"locations":53},[],[],[],{"summary":57,"deductions":58},"The \"archive-custom-filter\" v1.0.0 plugin exhibits a strong security posture based on the provided static analysis and vulnerability history.  The absence of dangerous functions, unsanitized taint flows, direct SQL queries, file operations, external HTTP requests, and the presence of 100% prepared statements and properly escaped output are all positive indicators. Furthermore, the plugin has no recorded vulnerabilities, CVEs, or common vulnerability types, suggesting a history of secure development and maintenance.\n\nHowever, a key concern arises from the complete lack of nonce and capability checks for its single entry point, the shortcode. While the attack surface is small, this absence means any user, even unauthenticated ones, could potentially trigger the shortcode's functionality. Without proper authorization and validation, this could lead to unintended behavior or an information disclosure if the shortcode processes sensitive data or interacts with other WordPress components in an insecure manner. \n\nIn conclusion, the plugin demonstrates excellent coding practices regarding data handling and query security. The primary weakness lies in the insufficient access control for its shortcode, which, despite a small attack surface, represents a potential security gap. Future versions should prioritize implementing robust nonce and capability checks for all entry points.",[59,62],{"reason":60,"points":61},"Missing nonce checks on shortcode",10,{"reason":63,"points":61},"Missing capability checks on shortcode","2026-03-17T07:06:01.461Z",{"wat":66,"direct":72},{"assetPaths":67,"generatorPatterns":69,"scriptPaths":70,"versionParams":71},[68],"\u002Fwp-content\u002Fplugins\u002Farchive-custom-filter\u002Fjs\u002Farchive.js",[],[68],[],{"cssClasses":73,"htmlComments":74,"htmlAttributes":75,"restEndpoints":77,"jsGlobals":78,"shortcodeOutput":79},[],[],[76],"id=\"yearsdata\"",[],[],[80],"\u003Cselect id=\"yearsdata\">"]