[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2XtvCyhOM3V8_byFCt5MDxk-3aDBJQsxBimKlxRl6_Q":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":36,"analysis":130,"fingerprints":176},"arcw-popover-addon","ARCW Popover Addon","0.1.4","alek","https:\u002F\u002Fprofiles.wordpress.org\u002Falekart\u002F","\u003Cp>\u003Cem>Shows a popover with list of links to the posts of the month\u002Fday.\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Compatible with \u003Cstrong>ARCW 1.0.9+\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This will not work if you don’t have Archives Calendar Widget installed\u002Factivated.\u003Cbr \u002F>\nGet it here : \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Farchives-calendar-widget\u002F\" rel=\"ugc\">Archives Calendar Widget\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>There is no any settings, just install and activate.\u003C\u002Fp>\n\u003Ch4>Notes\u003C\u002Fh4>\n\u003Cp>Please use the Support section to report issues.\u003C\u002Fp>\n","Popover Addon for Archives Calendar Widget",30,2777,100,1,"2016-08-16T22:31:00.000Z","4.6.30","4.0","",[20,21,22,23,24],"archives","calendar","sidebar","view","widget","http:\u002F\u002Flabs.alek.be\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Farcw-popover-addon.0.1.4.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":11,"trust_score":34,"computed_at":35},"alekart",84,"2026-04-04T13:51:40.657Z",[37,59,80,99,116],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":18,"tags":52,"homepage":55,"download_link":56,"security_score":57,"vuln_count":14,"unpatched_count":28,"last_vuln_date":58,"fetched_at":30},"collapsing-archives","Collapsing Archives","3.0.8","robfelty","https:\u002F\u002Fprofiles.wordpress.org\u002Frobfelty\u002F","\u003Cp>Create collapsible archives by year or month. Features include: link to archive pages, display of individual posts and support for custom post-types.\u003C\u002Fp>\n\u003Ch3>Demo\u003C\u002Fh3>\n\u003Cp>I use this plugin in my blog at http:\u002F\u002Fblog.robfelty.com\u003C\u002Fp>\n","This plugin uses Javascript to dynamically expand or collapse the set of months for each year and posts for each month in the archive listing of your  &hellip;",3000,146200,82,21,"2026-02-12T03:41:00.000Z","6.9.4","2.8",[53,20,54,22,24],"accordion","collapse","http:\u002F\u002Frobfelty.com\u002Fplugins\u002Fcollapsing-archives","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcollapsing-archives.3.0.8.zip",99,"2024-08-26 00:00:00",{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":69,"num_ratings":70,"last_updated":71,"tested_up_to":72,"requires_at_least":73,"requires_php":74,"tags":75,"homepage":78,"download_link":79,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"expanding-archives","Expanding Archives","2.1.0","Ashley","https:\u002F\u002Fprofiles.wordpress.org\u002Fnosegraze\u002F","\u003Cp>Expanding Archives adds a widget that shows your old posts in an expandable\u002Fcollapsible format. Each post is categorized under its year and month, so you can expand all the posts in a given month and year.\u003C\u002Fp>\n\u003Cp>This plugin comes with very minimal CSS styling so you can easily customize it to match your design.\u003C\u002Fp>\n\u003Cp>JavaScript is required. No IE support.\u003C\u002Fp>\n","This plugin adds a new widget where you can view your old posts by expanding certain years and months.",2000,22798,94,6,"2024-03-23T14:55:00.000Z","6.4.8","3.0","7.4",[20,76,77,22,24],"navigation","posts","https:\u002F\u002Fshop.nosegraze.com\u002Fproduct\u002Fexpanding-archives\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fexpanding-archives.zip",{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":88,"downloaded":89,"rating":13,"num_ratings":90,"last_updated":91,"tested_up_to":92,"requires_at_least":93,"requires_php":18,"tags":94,"homepage":97,"download_link":98,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"kalendar-cz","Kalendář \u002F Calendar","2.0","Webster.K","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebsterk\u002F","\u003Ch4>CZ\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Plugin zobrazuje hodiny, čas, kdo má dnes a zítra svátek, sudý\u002Flichý týden, číslo týdne a počet dní do Vánoc či konce roku. To vše v postranním panelu (možno použít jako widget).\u003C\u002Fli>\n\u003Cli>Autor slovenského překladu Patrik Bodnár\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>SK\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Plugin zobrazuje hodiny, čas, kto má dnes a zajtra sviatok, párny, nepárny týždeň, číslo týždňa a počet dní do Vianoc či do konca roka. To všetko v postranným panelu (možnosť  použiť  ako widget).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>EN\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Plugin show the date, time, days to the Christmas and the cz\u002Fsk festivals on sidebar (you can use it as widget).\u003C\u002Fli>\n\u003C\u002Ful>\n","CZ",200,8271,3,"2015-05-13T09:24:00.000Z","4.1.42","2.5",[21,95,96,22,24],"czech","kalendar","http:\u002F\u002Fphgame.cz","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkalendar-cz.zip",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":13,"downloaded":107,"rating":69,"num_ratings":90,"last_updated":108,"tested_up_to":109,"requires_at_least":110,"requires_php":18,"tags":111,"homepage":18,"download_link":115,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"cpt-calender-widget","CPT Calender Widget for WordPress","1.0.0","Ahir Hemant","https:\u002F\u002Fprofiles.wordpress.org\u002Fhemant-ahir\u002F","\u003Col>\n\u003Cli>Create Custom Post and  and select CPT from dropdown.\u003C\u002Fli>\n\u003Cli>CPT Calnder Widget for WordPress is the easiest way to Display CPT Calnder in page and post\u003C\u002Fli>\n\u003Cli>Create Custom Post type Select from deropdown and add widget in sidebar.\u003C\u002Fli>\n\u003Cli>feel free to contact me via support \u003C\u002Fli>\n\u003Cli>please rate this plugin,Thanks \u003C\u002Fli>\n\u003Cli>enjoy!\u003Cbr \u002F>\nplease check installation and screenshot tab for more idea!.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Fully integrated \u003C\u002Fli>\n\u003Cli>Fully responsive design\u003C\u002Fli>\n\u003C\u002Ful>\n","Create Custom Post and  and select CPT from dropdown.",9683,"2015-09-24T16:35:00.000Z","4.3.34","3.3",[21,112,113,100,114],"calendar-sidebar","calendar-widget","custom-post-type-calendar","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcpt-calender-widget.zip",{"slug":117,"name":118,"version":119,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":13,"downloaded":124,"rating":13,"num_ratings":14,"last_updated":125,"tested_up_to":126,"requires_at_least":93,"requires_php":18,"tags":127,"homepage":128,"download_link":129,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"kalendarium-cz","Kalendarium CZ","1.2.1","svasek","https:\u002F\u002Fprofiles.wordpress.org\u002Fsvasek\u002F","\u003Cul>\n\u003Cli>CZ: Zobrazuje datum a české svátky (jmeniny) v postranním panelu (možno použít jako widget).\u003C\u002Fli>\n\u003Cli>EN: Shows actual date and the czech name days in the sidebar (possible as widget).\u003C\u002Fli>\n\u003C\u002Ful>\n","Shows actual date and the czech name days in the sidebar",4225,"2010-06-18T07:28:00.000Z","3.0.5",[21,95,22,24],"http:\u002F\u002Fmilos.svasek.net\u002F2009\u002F06\u002Fplugin-kalendarium-cz\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkalendarium-cz.1.2.1.zip",{"attackSurface":131,"codeSignals":152,"taintFlows":162,"riskAssessment":163,"analyzedAt":175},{"hooks":132,"ajaxHandlers":139,"restRoutes":148,"shortcodes":149,"cronEvents":150,"entryPointCount":151,"unprotectedCount":151},[133],{"type":134,"name":135,"callback":136,"file":137,"line":138},"action","init","arcwp_init","arcw-popover.php",39,[140,145],{"action":141,"nopriv":142,"callback":143,"hasNonce":142,"hasCapCheck":142,"file":137,"line":144},"get_archives_list",false,"arcwp_get_archives_list",59,{"action":141,"nopriv":146,"callback":143,"hasNonce":142,"hasCapCheck":142,"file":137,"line":147},true,60,[],[],[],2,{"dangerousFunctions":153,"sqlUsage":154,"outputEscaping":156,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":161},[],{"prepared":28,"raw":28,"locations":155},[],{"escaped":28,"rawEcho":14,"locations":157},[158],{"file":137,"line":159,"context":160},127,"raw output",[],[],{"summary":164,"deductions":165},"The plugin \"arcw-popover-addon\" v0.1.4 exhibits several concerning security practices, despite a lack of known historical vulnerabilities. The static analysis reveals a significant attack surface with two AJAX handlers, both of which lack authentication checks. This is a critical oversight, as it potentially allows any unauthenticated user to trigger plugin functionality, which could be exploited if further vulnerabilities exist within those handlers. Furthermore, the analysis indicates that none of the total outputs are properly escaped, presenting a high risk of Cross-Site Scripting (XSS) vulnerabilities. While the plugin uses prepared statements for its SQL queries, mitigating the risk of SQL Injection, and has no recorded vulnerabilities in its history, these strengths are overshadowed by the immediate and severe risks identified in the code analysis.",[166,169,172],{"reason":167,"points":168},"Unprotected AJAX handlers",10,{"reason":170,"points":171},"Unescaped output detected",8,{"reason":173,"points":174},"No capability checks on entry points",5,"2026-03-16T22:30:26.683Z",{"wat":177,"direct":186},{"assetPaths":178,"generatorPatterns":181,"scriptPaths":182,"versionParams":183},[179,180],"\u002Fwp-content\u002Fplugins\u002Farcw-popover-addon\u002Fjs\u002Farcw-popover.min.js","\u002Fwp-content\u002Fplugins\u002Farcw-popover-addon\u002Fcss\u002Farcw-popover.css",[],[179],[184,185],"arcw-popover-addon\u002Fjs\u002Farcw-popover.min.js?ver=","arcw-popover-addon\u002Fcss\u002Farcw-popover.css?ver=",{"cssClasses":187,"htmlComments":188,"htmlAttributes":189,"restEndpoints":190,"jsGlobals":192,"shortcodeOutput":194},[],[],[],[191],"\u002Fwp-json\u002Farcw-popover-addon\u002Fv1\u002Fget-archives-list",[193],"ajaxurl",[]]