[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fi1s65vye5p_dUkb-m3gKOQXjpB90tFayF5BDDEFam34":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":37,"analysis":129,"fingerprints":198},"aviationweather-widget","AviationWeather Plugin","1.1","alessiobravi","https:\u002F\u002Fprofiles.wordpress.org\u002Falessiobravi\u002F","\u003Cp>aviationweather-widget will display in the site the RAW METAR and TAF weather bulletin for the ICAO station selected in the widget administration panel.\u003Cbr \u002F>\nThe METAR and TAF data used is provided by AviationWeather.org\u003C\u002Fp>\n","A simple widget to display current METAR and TAF for the chosen ICAO Station.",10,2962,0,"2012-12-14T14:10:00.000Z","3.5.2","3.4","",[19,20,21,22,23],"aviation","aviation-weather","metar","taf","widget","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Faviationweather-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faviationweather-widget.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},2,20,93,30,89,"2026-04-05T05:35:01.720Z",[38,56,70,85,109],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":34,"downloaded":46,"rating":47,"num_ratings":31,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":17,"tags":51,"homepage":54,"download_link":55,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"aviation-weather-briefing","Aviation Weather Briefing","1.0","xf117a","https:\u002F\u002Fprofiles.wordpress.org\u002Fxf117a\u002F","\u003Cp>Aviation Weather Briefing plugin allows the user to display and generate the basic Aviation Weather briefings.  This includes the latest METAR’s, TAF’s,\u003Cbr \u002F>\nSignificant Weather and Upper Winds and Temperature.  On submission of user inputs the plugin will fetch the data from NOAA servers and display them to the user.\u003C\u002Fp>\n\u003Cp>The WordPress site administrator can simply display modules for METAR and TAF, Significant Weather and Upper Winds and Temperature via the below shortcodes.\u003C\u002Fp>\n","Display the most important Aviation Weather information such as METAR,TAF,Significant Weather and Upper Winds and Temperature.",2230,90,"2015-01-31T10:54:00.000Z","4.1.42","3.0.1",[20,21,52,22,53],"significant-weather","upper-winds-and-temperature","http:\u002F\u002Fhowtoflyahelicopter.com\u002Faviation-weather-briefing\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faviation-weather-briefing.1.0.zip",{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":32,"downloaded":64,"rating":47,"num_ratings":31,"last_updated":65,"tested_up_to":66,"requires_at_least":16,"requires_php":17,"tags":67,"homepage":17,"download_link":69,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"wp-taf-metar-widget","taf-metar-widget","1.0.4","wptechnology","https:\u002F\u002Fprofiles.wordpress.org\u002Fwptechnology\u002F","\u003Cp>WP TAF METAR Widget is a plugin that allows you to show the TAF or METAR (aviation weather) information from any airport directly to your WordPress WebSite, by just giving the ICAO code of the wanted airport. You can of course place more than one widget on your page, with different settings \u002F airports. The information come directly from AviationWeather.gov databases.\u003C\u002Fp>\n","This Widget allows you to show the TAF or METAR (aviation weather) information for any airport directly to your WordPress WebSite.",1876,"2016-11-02T13:57:00.000Z","4.6.30",[19,21,22,68,23],"weather","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-taf-metar-widget.zip",{"slug":71,"name":72,"version":73,"author":74,"author_profile":75,"description":76,"short_description":77,"active_installs":11,"downloaded":78,"rating":13,"num_ratings":13,"last_updated":79,"tested_up_to":80,"requires_at_least":16,"requires_php":17,"tags":81,"homepage":83,"download_link":84,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"taf-widget","TAF plugin","0.1","mcantsin","https:\u002F\u002Fprofiles.wordpress.org\u002Fmcantsin\u002F","\u003Cp>TAF-widget lets you enter an ICAO station (airport) in the widget admin and will display the according TAF code as widget on your wordpress site.\u003Cbr \u002F>\nThe TAF data used is provided by NOAA.\u003C\u002Fp>\n","A simple widget to display the current TAF (Terminal aerodrome forecast) code for a chosen ICAO station.",1358,"2014-09-09T23:12:00.000Z","4.0.38",[21,82,22,68,23],"noaa","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Ftaf-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftaf-widget.zip",{"slug":86,"name":87,"version":88,"author":89,"author_profile":90,"description":91,"short_description":92,"active_installs":93,"downloaded":94,"rating":95,"num_ratings":96,"last_updated":97,"tested_up_to":98,"requires_at_least":99,"requires_php":100,"tags":101,"homepage":107,"download_link":108,"security_score":95,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"our-team-widget-for-elementor","Our Team Widget for Elementor","1.3.8","Aezaz Shaikh","https:\u002F\u002Fprofiles.wordpress.org\u002Fshaikhaezaz80\u002F","\u003Cp>Our Team Widget for Elementor helps you showcase team member detail in a unique style.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>No coding skill required\u003C\u002Fli>\n\u003Cli>Fully Customizable\u003C\u002Fli>\n\u003Cli>Fully Responsive\u003C\u002Fli>\n\u003Cli>Unlimited team members\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Demo\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Felementordemo.flickdevs.com\u002Four-team-box\u002F\" rel=\"nofollow ugc\">Our Team Widget for Elementor\u003C\u002Fa>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>More features coming soon\u003C\u002Fstrong>\u003Cbr \u002F>\n  \u003Cstrong>We update our plugins actively 🙂\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Technical Support\u003C\u002Fh4>\n\u003Cp>We’re active for any support issues and feature suggestions. You can post on our support forum here: \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Four-team-widget-for-elementor\u002F\" rel=\"ugc\">support forum\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Want to create custom elementor widget\u002Faddon plugin for your WordPress website?\u003C\u002Fh4>\n\u003Cp>\u003Cem>Feel free to \u003Ca href=\"https:\u002F\u002Fflickdevs.com\u002Fcontact-us\u002F\" rel=\"nofollow ugc\">contact us\u003C\u002Fa> and we will make it for you 🙂\u003C\u002Fem>\u003C\u002Fp>\n","Our Team Widget for Elementor helps you showcase team member detail in a unique style.",300,5253,100,5,"2025-12-11T06:07:00.000Z","6.9.4","5.9","7.0",[102,103,104,105,106],"elementor-addon-widget","elementor-team-widget","team-members","team-showcase","team-staff","https:\u002F\u002Fflickdevs.com\u002Felementor\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Four-team-widget-for-elementor.zip",{"slug":110,"name":111,"version":112,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":95,"downloaded":117,"rating":95,"num_ratings":118,"last_updated":119,"tested_up_to":120,"requires_at_least":121,"requires_php":17,"tags":122,"homepage":124,"download_link":125,"security_score":126,"vuln_count":127,"unpatched_count":127,"last_vuln_date":128,"fetched_at":28},"aviation-weather-from-noaa","Aviation Weather from NOAA","0.7.2","machouinard","https:\u002F\u002Fprofiles.wordpress.org\u002Fmachouinard\u002F","\u003Cul>\n\u003Cli>Display METAR & TAF info from NOAA’s Aviation Digital Data Service\u003C\u002Fli>\n\u003Cli>Display up to 6 hours before now\u003C\u002Fli>\n\u003Cli>PIREPs up to 200sm\u003C\u002Fli>\n\u003Cli>Create multiple instances using either widget or shortcode\u003C\u002Fli>\n\u003Cli>WP-CLI Integration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Gutenberg Block\u003C\u002Fh4>\n\u003Cp>A new \u003Ccode>AWFN Block\u003C\u002Fcode> can be found in the Widgets section.\u003C\u002Fp>\n\u003Ch4>Shortcode Usage: ( shown with defaults )\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>[adds_weather apts='KSMF' hours=2 show_metar=1 show_taf=1 show_pireps=1 show_station_info=1 radial_dist=100 title='']\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Data is cached for 30 minutes using the WordPress Transients API.\u003C\u002Fp>\n\u003Ch4>Included Filter Hooks:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>adds_kses: Array of permitted HTML tags.\u003C\u002Fli>\n\u003Cli>adds_custom_css: URL of a user-supplied stylesheet.  Supplying a stylesheet in theme’s directory ( ‘css\u002Faviation_weather_from_noaa.css’ ) will also override stylesheet.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Styling\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Copy \u003Ccode>css\u002Faviation_weather_from_noaa.css\u003C\u002Fcode> from plugin directory into theme directory, keeping that file structure.\u003C\u002Fli>\n\u003Cli>Make desired changes.\u003C\u002Fli>\n\u003Cli>Plugin will load this stylesheet instead of its own.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Code and support available at \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmachouinard\u002Faviation-weather-from-noaa\" title=\"GitHub Repo\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>\u003C\u002Fp>\n","Aviation weather data from NOAA's Aviation Digital Data Service (ADDS)",7110,4,"2022-10-31T16:06:00.000Z","6.1.10","3.8",[19,21,82,123,68],"pireps","https:\u002F\u002Fgithub.com\u002Fmachouinard\u002Faviation-weather-from-noaa","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faviation-weather-from-noaa.0.7.2.zip",61,1,"2025-06-30 00:00:00",{"attackSurface":130,"codeSignals":142,"taintFlows":183,"riskAssessment":184,"analyzedAt":197},{"hooks":131,"ajaxHandlers":138,"restRoutes":139,"shortcodes":140,"cronEvents":141,"entryPointCount":13,"unprotectedCount":13},[132],{"type":133,"name":134,"callback":135,"file":136,"line":137},"action","widgets_init","anonymous","aviationweather-widget.php",108,[],[],[],[],{"dangerousFunctions":143,"sqlUsage":147,"outputEscaping":149,"fileOperations":13,"externalRequests":127,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":182},[144],{"fn":145,"file":136,"line":137,"context":146},"create_function","add_action('widgets_init', create_function('', 'return register_widget(\"AviationWeatherWidget\");'));",{"prepared":13,"raw":13,"locations":148},[],{"escaped":96,"rawEcho":150,"locations":151},17,[152,155,157,159,161,163,165,167,169,171,172,173,175,177,178,179,180],{"file":136,"line":153,"context":154},38,"raw output",{"file":136,"line":156,"context":154},39,{"file":136,"line":158,"context":154},40,{"file":136,"line":160,"context":154},42,{"file":136,"line":162,"context":154},44,{"file":136,"line":164,"context":154},45,{"file":136,"line":166,"context":154},60,{"file":136,"line":168,"context":154},63,{"file":136,"line":170,"context":154},92,{"file":136,"line":33,"context":154},{"file":136,"line":33,"context":154},{"file":136,"line":174,"context":154},96,{"file":136,"line":176,"context":154},97,{"file":136,"line":176,"context":154},{"file":136,"line":95,"context":154},{"file":136,"line":95,"context":154},{"file":136,"line":181,"context":154},101,[],[],{"summary":185,"deductions":186},"The \"aviationweather-widget\" plugin v1.1 exhibits a mixed security posture.  On the positive side, the static analysis indicates a limited attack surface with no identified AJAX handlers, REST API routes, shortcodes, or cron events that are exposed.  Furthermore, all SQL queries are correctly using prepared statements, which significantly mitigates the risk of SQL injection vulnerabilities.\n\nHowever, several concerning code signals were detected. The use of the `create_function` is a significant red flag, as it can be a vector for code execution vulnerabilities if user-supplied input is not rigorously sanitized before being passed to it.  The low percentage of properly escaped output (23%) is also a major concern, indicating a high risk of Cross-Site Scripting (XSS) vulnerabilities.  The absence of nonce checks and capability checks means that any functionality, however limited, is not protected against unauthorized use or manipulation.\n\nThe plugin's vulnerability history is clean, with no recorded CVEs. While this is a positive indicator, it does not negate the risks identified in the code analysis.  The lack of past vulnerabilities could be due to the plugin's limited adoption, lack of targeted attacks, or simply not having been thoroughly audited for all potential issues.  In conclusion, while the plugin has a small attack surface and uses prepared statements for SQL, the presence of `create_function`, poor output escaping, and a lack of authorization checks present significant security risks that require immediate attention.",[187,190,193,195],{"reason":188,"points":189},"Dangerous function detected: create_function",15,{"reason":191,"points":192},"Low output escaping percentage",8,{"reason":194,"points":96},"Missing nonce checks",{"reason":196,"points":96},"Missing capability checks","2026-03-17T00:41:08.369Z",{"wat":199,"direct":204},{"assetPaths":200,"generatorPatterns":201,"scriptPaths":202,"versionParams":203},[],[],[],[],{"cssClasses":205,"htmlComments":206,"htmlAttributes":207,"restEndpoints":209,"jsGlobals":210,"shortcodeOutput":211},[4],[],[208],"id=\"aviationweather-widget-bulletin\"",[],[],[]]