[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-DNXCrQYZHmcGlhKpOwKe6Nm7MBcHsKCxknwgraJfR0":3,"$fppCaKTf2eXJqQA9QmXsid9TADSXDOJ26WrJihkjeOM4":135,"$fKFCkql_T3EiEhRBiMH2pYVh8QQbO3GdCi3DGHWzbK_g":140},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"discovery_status":29,"vulnerabilities":30,"developer":31,"crawl_stats":27,"alternatives":37,"analysis":55,"fingerprints":120},"bf3-infobox","BF3 Infobox","1.0.1","Calaelen","https:\u002F\u002Fprofiles.wordpress.org\u002Fcalaelen\u002F","\u003Cul>\n\u003Cli>2013 Update\u003C\u002Fli>\n\u003Cli>display your Battlefield 3 Player Statistics from bf3stats.com\u003C\u002Fli>\n\u003Cli>Insert additional widgets for other players or accounts\u003C\u002Fli>\n\u003Cli>Show\u002Fhide values via the settings (e.g. hide Origin username)\u003C\u002Fli>\n\u003Cli>More features will be added in the future, e.g. a short Buddie List, last earned medal\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>For support and latest dev builds visit the GitHub Page:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fgithub.com\u002FCalaelen\u002Fwordpress-bf3info-plugin\" title=\"https:\u002F\u002Fgithub.com\u002FCalaelen\u002Fwordpress-bf3info-plugin\" rel=\"nofollow ugc\">BF3 Infobox at GitHub\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>There will be no support within this WordPress page\u002Fforum. Please use the issue tracker at GitHub!\u003C\u002Fp>\n\u003Ch4>Attribution\u003C\u002Fh4>\n\u003Cp>BF3 statistics are provided by \u003Ca href=\"http:\u002F\u002Fbf3stats.com\" title=\"bf3stats.com\" rel=\"nofollow ugc\">bf3stats.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>API Infos: \u003Ca href=\"http:\u002F\u002Fbf3stats.com\u002Fapi\" title=\"http:\u002F\u002Fbf3stats.com\u002Fapi\" rel=\"nofollow ugc\">bf3stats.com\u002Fapi\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Images by bf3stats.com and Dice\u002FEA.\u003C\u002Fp>\n\u003Ch4>Licence\u003C\u002Fh4>\n\u003Cp>GPLv2 or later, please read the license.txt for more informations.\u003C\u002Fp>\n","2013 Update! Display your Battlefield 3 Player Statistics from bf3stats.com as a sidebar widget.",10,2093,0,"2013-04-02T07:21:00.000Z","3.5.2","3.0","",[19,20,21,22,23],"battlefield","battlefield-3","battlefield3","bf3","bf4","https:\u002F\u002Fgithub.com\u002FCalaelen\u002Fwordpress-bf3info-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbf3-infobox.zip",85,null,"2026-04-06T09:54:40.288Z","no_bundle",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"calaelen",1,30,84,"2026-07-15T08:31:30.844Z",[38],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":11,"downloaded":46,"rating":13,"num_ratings":13,"last_updated":47,"tested_up_to":48,"requires_at_least":16,"requires_php":17,"tags":49,"homepage":52,"download_link":53,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":54},"battlefield-3-statistics","Battlefield 3 Statistics","1.1","Jeroen Weustink","https:\u002F\u002Fprofiles.wordpress.org\u002Fjweustink\u002F","\u003Cp>A widget that shows player data received from the bf3stats.com API. There are several options a user can enable and disable in the widget settings.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>ATTENTION\u003C\u002Fstrong>: The data that is shown can be old. This is because bf3stats.com has not got a player update function yet. A soon as there is I will implement it into this widget.\u003Cbr \u002F>\nYou can use the “Manual Update” link in the widget settings to update the data on bf3stats.com.\u003C\u002Fp>\n\u003Cp>Shown data will be:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Progress\u003C\u002Fli>\n\u003Cli>Ranking\u003C\u002Fli>\n\u003Cli>Kill \u002F death ratio\u003C\u002Fli>\n\u003Cli>Win \u002F lose ratio\u003C\u002Fli>\n\u003Cli>Accuracy\u003C\u002Fli>\n\u003Cli>Longest headshot\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Todo:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Implement automatic player update\u003C\u002Fli>\n\u003Cli>Add cache\u003C\u002Fli>\n\u003C\u002Ful>\n","A widget that shows player data received from the bf3stats.com API",3291,"2011-11-11T13:19:00.000Z","3.2.1",[19,20,22,50,51],"statistics","stats","http:\u002F\u002Fwww.jeroenweustink.nl\u002Fbattlefield-3-statistics\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbattlefield-3-statistics.1.1.zip","2026-04-16T10:56:18.058Z",{"attackSurface":56,"codeSignals":88,"taintFlows":105,"riskAssessment":106,"analyzedAt":119},{"hooks":57,"ajaxHandlers":84,"restRoutes":85,"shortcodes":86,"cronEvents":87,"entryPointCount":13,"unprotectedCount":13},[58,64,68,72,76,81],{"type":59,"name":60,"callback":61,"file":62,"line":63},"action","widgets_init","bf3infobox_register_widget","bf3infobox.php",44,{"type":59,"name":65,"callback":66,"file":62,"line":67},"wp_enqueue_scripts","bf3infobox_stylesheet",49,{"type":59,"name":69,"callback":70,"file":62,"line":71},"admin_menu","bf3infobox_register_optionspage",56,{"type":59,"name":73,"callback":74,"file":62,"line":75},"admin_init","bf3infobox_init_optionspage",61,{"type":77,"name":78,"callback":79,"priority":11,"file":62,"line":80},"filter","plugin_row_meta","set_plugin_meta",72,{"type":59,"name":82,"callback":83,"file":62,"line":26},"init","bf3infobox_load_plugin_textdomain",[],[],[],[],{"dangerousFunctions":89,"sqlUsage":90,"outputEscaping":92,"fileOperations":13,"externalRequests":33,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":104},[],{"prepared":13,"raw":13,"locations":91},[],{"escaped":33,"rawEcho":93,"locations":94},3,[95,99,101],{"file":96,"line":97,"context":98},"inc\\bf3infobox-options.php",48,"raw output",{"file":96,"line":100,"context":98},119,{"file":102,"line":103,"context":98},"inc\\bf3infobox-widget.php",46,[],[],{"summary":107,"deductions":108},"The 'bf3-infobox' plugin v1.0.1 exhibits a strong foundational security posture based on the provided static analysis. The absence of any identified entry points (AJAX, REST API, shortcodes, cron events) significantly reduces the potential attack surface. Furthermore, the complete reliance on prepared statements for SQL queries and the lack of dangerous function usage are excellent security practices. There are no recorded vulnerabilities in its history, suggesting a mature and stable codebase.\n\nHowever, there are notable areas for improvement. The most concerning aspect is the extremely low output escaping rate (25%), indicating a high likelihood of cross-site scripting (XSS) vulnerabilities. The presence of an external HTTP request without further context on its security (e.g., validation of incoming data or escaping of outgoing data) is also a potential risk. The complete absence of capability checks and nonce checks, while potentially justified by the zero entry points, leaves the plugin vulnerable should any new entry points be introduced in the future without proper security controls. The lack of taint analysis results also means that complex data flows that could lead to vulnerabilities might not have been detected.\n\nIn conclusion, 'bf3-infobox' v1.0.1 benefits from a limited attack surface and secure database practices. Its clean vulnerability history is a positive sign. Nevertheless, the critical weakness in output escaping and the potential risks associated with the external HTTP request, coupled with the lack of robust authentication\u002Fauthorization checks, warrant careful consideration and remediation to ensure comprehensive security.",[109,112,115,117],{"reason":110,"points":111},"Low output escaping rate",12,{"reason":113,"points":114},"External HTTP request without further checks",5,{"reason":116,"points":114},"No capability checks",{"reason":118,"points":114},"No nonce checks","2026-03-16T23:28:54.064Z",{"wat":121,"direct":128},{"assetPaths":122,"generatorPatterns":124,"scriptPaths":125,"versionParams":126},[123],"\u002Fwp-content\u002Fplugins\u002Fbf3-infobox\u002Fstyle.css",[],[],[127],"bf3-infobox\u002Fstyle.css?ver=",{"cssClasses":129,"htmlComments":130,"htmlAttributes":131,"restEndpoints":132,"jsGlobals":133,"shortcodeOutput":134},[],[],[],[],[],[],{"error":136,"url":137,"statusCode":138,"statusMessage":139,"message":139},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fbf3-infobox\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":141,"versions":142},2,[143,150],{"version":6,"download_url":144,"svn_tag_url":145,"released_at":27,"has_diff":146,"diff_files_changed":147,"diff_lines":27,"trac_diff_url":148,"vulnerabilities":149,"is_current":136},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbf3-infobox.1.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fbf3-infobox\u002Ftags\u002F1.0.1\u002F",false,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fbf3-infobox%2Ftags%2F1.0&new_path=%2Fbf3-infobox%2Ftags%2F1.0.1",[],{"version":151,"download_url":152,"svn_tag_url":153,"released_at":27,"has_diff":146,"diff_files_changed":154,"diff_lines":27,"trac_diff_url":27,"vulnerabilities":155,"is_current":146},"1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbf3-infobox.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fbf3-infobox\u002Ftags\u002F1.0\u002F",[],[]]