[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQdXiSEZWdG8MUfdl-mmIYSUO_0SBPN7YQEQds4goaZI":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":39,"analysis":136,"fingerprints":273},"blog-post-calendar-widget","Blog Post Calendar Widget","1.1","Ron Zvagelsky","https:\u002F\u002Fprofiles.wordpress.org\u002Frzvagelsky\u002F","\u003Cp>Monthly grid view calendar widget highlighting archived and\u002For future posts.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Additional Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Popup details for each date with posts\u003C\u002Fli>\n\u003Cli>Optional details include post author and comment count.\u003C\u002Fli>\n\u003Cli>Ability to show posts by post type, category, specific taxonomy and\u002For term\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fpresshive.com\u002Fplugins\u002Fwordpress-blog-post-calendar-plugin\" rel=\"nofollow ugc\">\u003Cstrong>For more information or to request additional features, please visit the plugin page\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fp>\n","The Blog Posts Calendar Widget allows you to display your archived or future posts in a calendar as a sidebar widget.",100,14402,96,8,"2013-05-24T19:47:00.000Z","3.5.2","3.2","",[20,21,22,23,24],"calendar","future-posts","post-types","posts","widget","http:\u002F\u002Fpresshive.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fblog-post-calendar-widget.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":35,"avg_security_score":27,"avg_patch_time_days":36,"trust_score":37,"computed_at":38},"rzvagelsky",2,110,30,84,"2026-04-04T16:04:11.505Z",[40,65,83,101,118],{"slug":41,"name":42,"version":43,"author":44,"author_profile":45,"description":46,"short_description":47,"active_installs":48,"downloaded":49,"rating":50,"num_ratings":51,"last_updated":52,"tested_up_to":53,"requires_at_least":54,"requires_php":18,"tags":55,"homepage":60,"download_link":61,"security_score":62,"vuln_count":63,"unpatched_count":28,"last_vuln_date":64,"fetched_at":30},"ultimate-posts-widget","Ultimate Posts Widget","2.3.2","cl272","https:\u002F\u002Fprofiles.wordpress.org\u002Fcl272\u002F","\u003Cp>\u003Cstrong>Try it out on your free dummy site: Click here => \u003Ca href=\"https:\u002F\u002Fdemo.tastewp.com\u002Fultimate-posts-widget\" rel=\"nofollow ugc\">https:\u002F\u002Ftastewp.com\u002Fplugins\u002Fultimate-posts-widget\u003C\u002Fa>.\u003C\u002Fstrong>\u003Cbr \u002F>\n(this trick works for all plugins in the WP repo – just replace “wordpress” with “tastewp” in the URL)\u003C\u002Fp>\n\u003Cp>UPDATE: Plugin ownership changed for this plugin. We are currently evaluating possible enhancements for it. Stay tuned! If you have any suggestions yourself, please let us know in the Support Forum.\u003C\u002Fp>\n\u003Cp>Note: This is a \u003Cstrong>classic widget\u003C\u002Fstrong> type, in order for it to work on the latest version of WordPress you will need \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fclassic-widgets\u002F\" rel=\"ugc\">Classic Widgets\u003C\u002Fa> plugin installed on your site.\u003C\u002Fp>\n\u003Cp>The ultimate widget for displaying posts, custom post types or sticky posts with an array of options to customize the display.\u003C\u002Fp>\n\u003Cp>Designed for both the average user and developer, Ultimate Posts Widgets aims to provide flexibility and ease of use for displaying any kinds of posts within your widget areas. An array of widget options are available as well as hooks, filters and custom templates for more advanced customization.\u003C\u002Fp>\n\u003Ch4>Options\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Filter by categories\u003C\u002Fli>\n\u003Cli>Filter by current category\u003C\u002Fli>\n\u003Cli>Filter by tags\u003C\u002Fli>\n\u003Cli>Filter by current tag\u003C\u002Fli>\n\u003Cli>Filter by custom post types\u003C\u002Fli>\n\u003Cli>Filter by sticky posts\u003C\u002Fli>\n\u003Cli>Select number of posts to display\u003C\u002Fli>\n\u003Cli>Display title\u003C\u002Fli>\n\u003Cli>Display publish date\u002Ftime with custom format options\u003C\u002Fli>\n\u003Cli>Display post author and link\u003C\u002Fli>\n\u003Cli>Display post comment count\u003C\u002Fli>\n\u003Cli>Display excerpt or full content\u003C\u002Fli>\n\u003Cli>Display read more link with custom label\u003C\u002Fli>\n\u003Cli>Display featured image and at any size\u003C\u002Fli>\n\u003Cli>Display post categories\u003C\u002Fli>\n\u003Cli>Display post tags\u003C\u002Fli>\n\u003Cli>Display custom fields\u003C\u002Fli>\n\u003Cli>Add text or HTML before and after posts list\u003C\u002Fli>\n\u003Cli>Add CSS class to widget\u003C\u002Fli>\n\u003Cli>Add widget title link\u003C\u002Fli>\n\u003Cli>Change excerpt length (in words)\u003C\u002Fli>\n\u003Cli>Order by date, title, number of comments, random or a custom field\u003C\u002Fli>\n\u003Cli>Exclude current post from the list\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Documentation\u003C\u002Fh4>\n\u003Cp>See the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fultimate-posts-widget\u002Ffaq\u002F\" rel=\"ugc\">FAQ tab\u003C\u002Fa> for documentation on custom templates, hooks, common issues, and more.\u003C\u002Fp>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>For help please ask in the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fultimate-posts-widget\u002F\" rel=\"ugc\">Support Forum\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Enjoy this plugin? \u003Ca href=\"https:\u002F\u002Fsellcodes.com\u002F5U4SICyc\" rel=\"nofollow ugc\">Send a tip to support development\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>This plugin is part of the Inisev product family – \u003Ca href=\"https:\u002F\u002Finisev.com\" rel=\"nofollow ugc\">check out our other products\u003C\u002Fa>.\u003C\u002Fp>\n","The ultimate widget for displaying posts, custom post types or sticky posts with an array of options.",10000,492332,90,55,"2024-07-17T01:21:00.000Z","6.6.5","3.5",[56,57,58,59,24],"custom-post-types","featured-image","recent-posts","sticky-posts","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fultimate-posts-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fultimate-posts-widget.2.3.2.zip",92,1,"2024-02-13 00:00:00",{"slug":66,"name":67,"version":68,"author":69,"author_profile":70,"description":71,"short_description":72,"active_installs":11,"downloaded":73,"rating":11,"num_ratings":74,"last_updated":75,"tested_up_to":76,"requires_at_least":77,"requires_php":18,"tags":78,"homepage":81,"download_link":82,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"amazing-post-widget","Amazing Posts Widget","1.1.0","faugro","https:\u002F\u002Fprofiles.wordpress.org\u002Ffaugro-1\u002F","\u003Cp>This widget is combining and inspired by two great plugin, recent post flexslider and flexible posts widget, but using different slider. We use liquidslider that fit with this widgets purpose.\u003C\u002Fp>\n\u003Ch4>Features & options\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Customizable widget title\u003C\u002Fli>\n\u003Cli>Get posts using either a selectable category or custom post type.\u003C\u002Fli>\n\u003Cli>Set the number of page displayed (using slider).\u003C\u002Fli>\n\u003Cli>Set the number of columns and row per page displayed.\u003C\u002Fli>\n\u003Cli>Easily set your own image width and height.\u003C\u002Fli>\n\u003Cli>Set the padding for each post.\u003C\u002Fli>\n\u003Cli>Select the sort orderby: Date, ID, Title, Menu Order, Random and sort order: ASC or DESC.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Shortcode\u003C\u002Fh4>\n\u003Cp>Example Use: [pj_apw post_title=”true” excerpt_length=”50″ categories=”all” thumbnail=”true” img_width=”250″ img_height=”150″ rows=”2″ columns=”1″ pages_number=”2″ template=”amaz-columns.php”]\u003C\u002Fp>\n\u003Cp>Check out our demo :\u003Cbr \u002F>\n1. \u003Ca href=\"http:\u002F\u002Fthemeforest.net\u002Fitem\u002Fraddin-elegant-responsive-wordpress-themes\u002F6568509?ref=hainug\" rel=\"nofollow ugc\">demo1\u003C\u002Fa>\u003Cbr \u002F>\n2. \u003Ca href=\"http:\u002F\u002Fwp.themesoul.com\u002Fnyirok\u002F\" rel=\"nofollow ugc\">demo2\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Work great with \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsiteorigin-panels\u002F\" rel=\"ugc\">Page Builder by SiteOrigin\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>If you get an error after updating this plugin, please go to appearance > widget > and just save it,\u003Cbr \u002F>\nor if you need to edit the padding, you may edit it first, than save it.\u003C\u002Fp>\n","Display Posts on widget with amazing way, It's really suitable with your blog or portfolio.",11665,3,"2014-04-28T15:12:00.000Z","3.9.40","3.4",[56,79,23,80,24],"post","thumbnails","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Famazing-post-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Famazing-post-widget.zip",{"slug":84,"name":85,"version":86,"author":87,"author_profile":88,"description":89,"short_description":90,"active_installs":91,"downloaded":92,"rating":11,"num_ratings":63,"last_updated":93,"tested_up_to":94,"requires_at_least":95,"requires_php":18,"tags":96,"homepage":99,"download_link":100,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"future-posts-calendar","Future Posts Calendar","1.6.3","Aaron Butacov","https:\u002F\u002Fprofiles.wordpress.org\u002Faaron-harun\u002F","\u003Cp>It adds a simple month-by-month calendar that shows all the months you have future posts for (and the current month no matter what), it highlights the days you have posts for, and as an added bonus if you click a day, the Post Timestamp boxes change to that day, month and year.\u003C\u002Fp>\n\u003Cp>Also includes a widget so you can show users what upcoming posts you have on your website.\u003C\u002Fp>\n\u003Cp>If you want to ad a widget to your dashboard, uncomment the line \u003Ccode>add_action('wp_dashboard_setup', 'fpc_setup_dashboard_widget');\u003C\u002Fcode> in the future_calendar.php file.\u003C\u002Fp>\n","This plugin adds a monthly calendar that shows all the dates you have future posts.",60,36651,"2013-10-18T19:00:00.000Z","3.6.1","2.7",[20,97,98,21,79],"date","edit","http:\u002F\u002Faahacreative.com\u002Four-projects\u002Ffuture-posts-calendar-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffuture-posts-calendar.1.6.3.zip",{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":36,"downloaded":109,"rating":11,"num_ratings":63,"last_updated":110,"tested_up_to":76,"requires_at_least":111,"requires_php":18,"tags":112,"homepage":116,"download_link":117,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"locus","Locus","1.0","Diana K. Cury","https:\u002F\u002Fprofiles.wordpress.org\u002Fdianakc\u002F","\u003Cp>List post from a specific category with options like date format, link text, order and more. Locus is a very simple plugin for display content in diferrent ways:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Display a single post, page or any available post type.\u003C\u002Fli>\n\u003Cli>Display full content or the excerpt, or both!\u003C\u002Fli>\n\u003Cli>Category descriptions are visible by default, if any.\u003C\u002Fli>\n\u003Cli>Configure date format, link text or hide them all.\u003C\u002Fli>\n\u003Cli>Use styles for every block, (refer the stylesheet in \u003Ccode>locus\u002Fcontrol\u002Flocus-style.css\u003C\u002Fcode>)\u003C\u002Fli>\n\u003Cli>Set display post orders, such random, by date, by author, comment count (popularity) etc\u003C\u002Fli>\n\u003Cli>Display thumbnails, if available\u003C\u002Fli>\n\u003Cli>Easy to use: you don’t have to learn to use it\u003C\u002Fli>\n\u003Cli>Settings per widget, so you can have different widgets.\u003C\u002Fli>\n\u003C\u002Ful>\n","Locus allows you display any post, page or post type in widgetized areas of you site.",5871,"2014-04-17T04:04:00.000Z","3.0",[113,114,22,23,115],"categories","pages","widgets","http:\u002F\u002Fdianakcury.com\u002Fdev\u002Flocus","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flocus.zip",{"slug":119,"name":120,"version":121,"author":122,"author_profile":123,"description":124,"short_description":125,"active_installs":126,"downloaded":127,"rating":28,"num_ratings":28,"last_updated":128,"tested_up_to":129,"requires_at_least":130,"requires_php":18,"tags":131,"homepage":134,"download_link":135,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"linked-future-posts-widget","Linked Future Posts Widget","1.0.0","rickacc","https:\u002F\u002Fprofiles.wordpress.org\u002Frickacc\u002F","\u003Cp>Linked Future Posts Widget acts very much like the upcoming posts widget by displaying\u003Cbr \u002F>\nscheduled posts instead of published ones, but includes a link to each post (using slug\u002Fpost name).  Requires WordPress 2.8+\u003C\u002Fp>\n\u003Cp>Use this plugin in conjunction with the Future plugin from Marion Sudvarg to create a Post Grid of scheduled events and a list of scheduled\u003Cbr \u002F>\nevents on the post page.  Events that change from scheduled to published status will automatically be removed from the grid and list.\u003C\u002Fp>\n\u003Cp>Linked Future Posts Widget is a derivative of the Upcoming Posts Widget plugin created by Aaron D. Campbell.\u003C\u002Fp>\n","A widget that displays a list of scheduled posts with links to the posts.",10,1304,"2016-10-18T12:16:00.000Z","4.6.30","2.8",[21,23,132,133,24],"scheduled-posts","upcoming-posts","http:\u002F\u002Fwww.indianpeakswebdesign.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flinked-future-posts-widget.1.0.0.zip",{"attackSurface":137,"codeSignals":174,"taintFlows":256,"riskAssessment":257,"analyzedAt":272},{"hooks":138,"ajaxHandlers":156,"restRoutes":170,"shortcodes":171,"cronEvents":172,"entryPointCount":173,"unprotectedCount":173},[139,144,148,152],{"type":140,"name":141,"callback":142,"file":143,"line":50},"action","wp_enqueue_scripts","wp_calendar_enqueue_scripts","wp-calendar.php",{"type":140,"name":145,"callback":146,"file":143,"line":147},"wp_head","wp_calendar_load_custom_style_cb",106,{"type":140,"name":149,"callback":150,"file":143,"line":151},"admin_enqueue_scripts","wp_calendar_enqueue_admin_scripts",117,{"type":140,"name":153,"callback":154,"file":143,"line":155},"widgets_init","anonymous",346,[157,161,164,167],{"action":158,"nopriv":159,"callback":158,"hasNonce":159,"hasCapCheck":159,"file":143,"line":160},"wp_calendar_get_taxonomy",false,368,{"action":162,"nopriv":159,"callback":162,"hasNonce":159,"hasCapCheck":159,"file":143,"line":163},"wp_calendar_get_terms",388,{"action":165,"nopriv":159,"callback":165,"hasNonce":159,"hasCapCheck":159,"file":143,"line":166},"wp_calendar_get_posts",594,{"action":165,"nopriv":168,"callback":165,"hasNonce":159,"hasCapCheck":159,"file":143,"line":169},true,595,[],[],[],4,{"dangerousFunctions":175,"sqlUsage":179,"outputEscaping":181,"fileOperations":173,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":255},[176],{"fn":177,"file":143,"line":155,"context":178},"create_function","add_action('widgets_init', create_function('', 'register_widget( \"WP_Calander_Widget\" );'));",{"prepared":28,"raw":28,"locations":180},[],{"escaped":173,"rawEcho":182,"locations":183},41,[184,187,189,191,193,195,197,199,201,202,203,205,207,208,209,210,212,214,215,217,219,221,223,225,227,229,231,232,233,235,237,238,239,241,243,244,245,247,249,251,253],{"file":143,"line":185,"context":186},163,"raw output",{"file":143,"line":188,"context":186},165,{"file":143,"line":190,"context":186},167,{"file":143,"line":192,"context":186},173,{"file":143,"line":194,"context":186},174,{"file":143,"line":196,"context":186},182,{"file":143,"line":198,"context":186},207,{"file":143,"line":200,"context":186},208,{"file":143,"line":200,"context":186},{"file":143,"line":200,"context":186},{"file":143,"line":204,"context":186},212,{"file":143,"line":206,"context":186},213,{"file":143,"line":206,"context":186},{"file":143,"line":206,"context":186},{"file":143,"line":206,"context":186},{"file":143,"line":211,"context":186},221,{"file":143,"line":213,"context":186},233,{"file":143,"line":213,"context":186},{"file":143,"line":216,"context":186},236,{"file":143,"line":218,"context":186},246,{"file":143,"line":220,"context":186},254,{"file":143,"line":222,"context":186},261,{"file":143,"line":224,"context":186},267,{"file":143,"line":226,"context":186},275,{"file":143,"line":228,"context":186},286,{"file":143,"line":230,"context":186},294,{"file":143,"line":230,"context":186},{"file":143,"line":230,"context":186},{"file":143,"line":234,"context":186},299,{"file":143,"line":236,"context":186},308,{"file":143,"line":236,"context":186},{"file":143,"line":236,"context":186},{"file":143,"line":240,"context":186},313,{"file":143,"line":242,"context":186},322,{"file":143,"line":242,"context":186},{"file":143,"line":242,"context":186},{"file":143,"line":246,"context":186},326,{"file":143,"line":248,"context":186},329,{"file":143,"line":250,"context":186},330,{"file":143,"line":252,"context":186},331,{"file":143,"line":254,"context":186},332,[],[],{"summary":258,"deductions":259},"The 'blog-post-calendar-widget' plugin version 1.1 presents a moderate security risk due to several critical omissions in its security implementation. While it exhibits good practices by exclusively using prepared statements for its SQL queries and has no recorded historical vulnerabilities, the plugin suffers from a significant lack of authorization checks on its AJAX handlers.  With 4 AJAX handlers, all of which are unprotected, an attacker could potentially exploit these entry points to perform unauthorized actions. The presence of the dangerous `create_function` construct is also a concern, though its impact is not fully quantifiable without taint analysis. The low percentage of properly escaped output further exacerbates the risk, potentially leading to cross-site scripting vulnerabilities.\n\nDespite the absence of historical CVEs and a clean taint analysis report, the current static analysis reveals a substantial attack surface that is not adequately secured. The reliance on exposed AJAX actions and the poor output escaping practices are significant weaknesses that need immediate attention. The plugin's lack of explicit capability checks and nonce verification on its AJAX endpoints creates a direct path for attackers to interact with the plugin in unintended ways. While the lack of external HTTP requests and bundled libraries are positive security attributes, they do not outweigh the immediate risks posed by the unprotected AJAX handlers and insufficient output sanitization.",[260,262,265,268,270],{"reason":261,"points":126},"4 unprotected AJAX handlers",{"reason":263,"points":264},"Dangerous function: create_function",5,{"reason":266,"points":267},"Low output escaping percentage",6,{"reason":269,"points":264},"No nonce checks on AJAX handlers",{"reason":271,"points":264},"No capability checks on AJAX handlers","2026-03-16T20:32:46.839Z",{"wat":274,"direct":291},{"assetPaths":275,"generatorPatterns":288,"scriptPaths":289,"versionParams":290},[276,277,278,279,280,281,282,283,284,285,286,287],"\u002Fwp-content\u002Fplugins\u002Fblog-post-calendar-widget\u002Fcss\u002Fwp_calendar.css","\u002Fwp-content\u002Fplugins\u002Fblog-post-calendar-widget\u002Fimages\u002Fajax-processing.gif","\u002Fwp-content\u002Fplugins\u002Fblog-post-calendar-widget\u002Fimages\u002Farrow-new.png","\u002Fwp-content\u002Fplugins\u002Fblog-post-calendar-widget\u002Fimages\u002Farrow-new2.png","\u002Fwp-content\u002Fplugins\u002Fblog-post-calendar-widget\u002Fimages\u002Farrow-next-hover.png","\u002Fwp-content\u002Fplugins\u002Fblog-post-calendar-widget\u002Fimages\u002Farrow-prev-hover.png","\u002Fwp-content\u002Fplugins\u002Fblog-post-calendar-widget\u002Fjs\u002Fjquery.ui.datepicker.js","\u002Fwp-content\u002Fplugins\u002Fblog-post-calendar-widget\u002Fjs\u002Fjquery.ui.datepicker-ar.js","\u002Fwp-content\u002Fplugins\u002Fblog-post-calendar-widget\u002Fjs\u002Fjquery.ui.datepicker-fr.js","\u002Fwp-content\u002Fplugins\u002Fblog-post-calendar-widget\u002Fjs\u002Fjquery.ui.datepicker-he.js","\u002Fwp-content\u002Fplugins\u002Fblog-post-calendar-widget\u002Fjs\u002Fwp_calendar.js","\u002Fwp-content\u002Fplugins\u002Fblog-post-calendar-widget\u002Fjs\u002Fwp_calendar_admin.js",[],[282,286,287],[],{"cssClasses":292,"htmlComments":300,"htmlAttributes":301,"restEndpoints":303,"jsGlobals":304,"shortcodeOutput":307},[293,294,295,296,297,298,299],"widget_calendar_\u003C?php echo $calendar_size; ?>","widget_calendar","widget_inner","calendar_wrap_loading","calendar_wrap_loading_hide","wp-cal-prev","wp-cal-next",[],[302],"onclick",[],[305,306],"wpCalancerAdminObj","wpCalendarObj",[]]