[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fblwbgYdoFb6OZyhW13dV7qX-u2Zo1dVlv9BmAM6dZ20":3,"$faEDQHQMmwAHGj8nlfSZupi7mx7wLwFRlTkCM6i0d7TU":214,"$f7rjLCfAxSRaOYOLM2USZKty2lS4RFvtyVFFlW33kPS0":219},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"discovery_status":27,"vulnerabilities":28,"developer":29,"crawl_stats":25,"alternatives":35,"analysis":133,"fingerprints":199},"category-teaser-widget","Category Teaser","1.1","cpjolicoeur","https:\u002F\u002Fprofiles.wordpress.org\u002Fcpjolicoeur\u002F","\u003Cp>Category Teaser uses a WordPress widget to display the latest post excerpt from a category you choose.  The output can be styled using CSS.\u003C\u002Fp>\n","Displays the excerpt from the latest post in a certain category with link to full post",10,3027,0,"2009-07-29T14:09:00.000Z","2.8.2","2.8","",[19,20,21],"category","sidebar","widget","http:\u002F\u002Fwww.craigjolicoeur.com\u002Fblog\u002Fcategory-teaser","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcategory-teaser-widget.1.1.zip",85,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":24,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},2,20,30,84,"2026-07-15T07:34:26.827Z",[36,58,76,98,116],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":17,"tags":51,"homepage":54,"download_link":55,"security_score":24,"vuln_count":56,"unpatched_count":13,"last_vuln_date":57,"fetched_at":26},"list-custom-taxonomy-widget","List Custom Taxonomy Widget","4.2","Nick Halsey","https:\u002F\u002Fprofiles.wordpress.org\u002Fcelloexpressions\u002F","\u003Cp>The List Custom Taxonomy Widget is a quick and easy way to display custom taxonomies. Simply choose the taxonomy name you want to display from an auto-populated list. You can also set a title to display for the widget. Multiple list custom taxonomy widgets can be added to the same and other sidebars as well. There are several display options (including as a dropdown), and it generally behaves similarly to the built-in categories widget but with the addition of custom taxonomies.\u003C\u002Fp>\n","The List Custom Taxonomy Widget is a quick and easy way to display custom taxonomies. Simply choose the taxonomy name you want to display from an auto &hellip;",9000,119279,94,21,"2024-07-13T01:39:00.000Z","6.6.5","3.3",[19,52,53,20,21],"custom-tax","custom-taxonomy","http:\u002F\u002Fcelloexpressions.com\u002Fplugins\u002Flist-custom-taxonomy-widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flist-custom-taxonomy-widget.4.2.zip",1,"2024-04-22 00:00:00",{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":66,"downloaded":67,"rating":46,"num_ratings":68,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":17,"tags":72,"homepage":17,"download_link":75,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"recent-posts-by-category-widget","Recent Posts by Category Widget","1.3","Ross Cornell","https:\u002F\u002Fprofiles.wordpress.org\u002Frossc\u002F","\u003Cp>This plugin adds a simple widget that allows you to display a number of recent blog posts from a specific category. You have the options to choose a title, category, number of posts and whether or not to show the post date. The posts will be ordered by date just like the default Recent Posts widget included with WordPress.\u003C\u002Fp>\n","Just like the default Recent Posts widget except you can choose a category to pull posts from.",4000,33439,12,"2017-11-28T16:45:00.000Z","4.2.39","3.0.1",[73,19,74,20,21],"categories","recent-posts","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frecent-posts-by-category-widget.zip",{"slug":77,"name":78,"version":79,"author":80,"author_profile":81,"description":82,"short_description":83,"active_installs":84,"downloaded":85,"rating":86,"num_ratings":87,"last_updated":88,"tested_up_to":89,"requires_at_least":90,"requires_php":91,"tags":92,"homepage":95,"download_link":96,"security_score":97,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"ns-category-widget","NS Category Widget","4.1.6","Nilambar Sharma","https:\u002F\u002Fprofiles.wordpress.org\u002Fnilambar\u002F","\u003Cp>Are you frustrated by the lack of customization options in default Category widget in WordPress? Then this plugin is for you. Works in similar fashion but with several customization options. Cheers !\u003C\u002Fp>\n","A plugin to add widget for listing Categories and Taxonomies. Extending Default WordPress Category Widget.",1000,42287,96,34,"2025-09-12T01:32:00.000Z","6.8.5","6.0","7.2.24",[19,93,20,94,21],"listing","taxonomy","https:\u002F\u002Fwww.nilambar.net\u002F2013\u002F12\u002Fns-category-widget-wordpress-plugin.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fns-category-widget.4.1.6.zip",100,{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":97,"downloaded":106,"rating":33,"num_ratings":107,"last_updated":108,"tested_up_to":109,"requires_at_least":110,"requires_php":17,"tags":111,"homepage":114,"download_link":115,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"category-feature","Featured Category Widget","2.5","tepelstreel","https:\u002F\u002Fprofiles.wordpress.org\u002Ftepelstreel\u002F","\u003Cp>The Featured Category Widget is mainly designed because there were people for whom the Featured Post Widget was not enough. They wanted to put a category of their blog in the highlight.\u003Cbr \u002F>\nIf there is a post thumbnail, it will be displayed above the headline of the post. If there is no thumbnail, the first picture of the post is taken. You can set the size for the thumbnail or just take the standard from your options. Decide yourself, whether you want to show the excerpt, saved with your post or just the first three sentences or the first twenty words of the post. Style the widget individually, ready.\u003C\u002Fp>\n\u003Cp>The Featured Category was tested up to WP 4.5. It should work with versions down to 2.9 but was never tested on those.\u003C\u002Fp>\n","The Featured Category Widget is basically a Featured Post Widget for a category.",29693,5,"2016-02-26T10:18:00.000Z","4.5.33","2.9",[19,112,113,20,21],"column","newspaper","http:\u002F\u002Fwasistlos.waldemarstoffel.com\u002Fplugins-fur-wordpress\u002Ffeatured-category-widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcategory-feature.2.5.zip",{"slug":117,"name":118,"version":119,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":97,"downloaded":124,"rating":97,"num_ratings":56,"last_updated":125,"tested_up_to":126,"requires_at_least":127,"requires_php":17,"tags":128,"homepage":131,"download_link":132,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"widget-category-cloud","Category Cloud Widget","1.7","vertino","https:\u002F\u002Fprofiles.wordpress.org\u002Fvertino\u002F","\u003Cp>The Category Cloud Widget is a widget that displays your categories as a tag cloud in your sidebar.\u003C\u002Fp>\n\u003Ch3>Examples\u003C\u002Fh3>\n\u003Cp>You can see this in action on my site: \u003Ca href=\"http:\u002F\u002Fleekelleher.com\u002Flinklog\u002F\" rel=\"nofollow ugc\">http:\u002F\u002Fleekelleher.com\u002Flinklog\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Special Thanks\u003C\u002Fh3>\n\u003Cp>Thank you to Matt Kingston, as this widget was based on his \u003Ca href=\"http:\u002F\u002Fwww.hitormiss.org\u002Fprojects\u002Fweighted-categories\u002F\" rel=\"nofollow ugc\">Weighted Categories\u003C\u002Fa> plugin.\u003Cbr \u002F>\nThanks to \u003Ca href=\"http:\u002F\u002Fwww.minmen.nl\u002F\" rel=\"nofollow ugc\">Peter Hasperhoven\u003C\u002Fa> for introducing the ‘minimum number of posts’ option.\u003C\u002Fp>\n","The Category Cloud Widget is a widget that displays your categories as a tag cloud in your sidebar.",47112,"2008-05-08T12:45:00.000Z","2.3","2.0",[19,129,20,130,21],"cloud","tags","http:\u002F\u002Fleekelleher.com\u002Fwordpress\u002Fplugins\u002Fcategory-cloud-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwidget-category-cloud.zip",{"attackSurface":134,"codeSignals":146,"taintFlows":184,"riskAssessment":185,"analyzedAt":198},{"hooks":135,"ajaxHandlers":142,"restRoutes":143,"shortcodes":144,"cronEvents":145,"entryPointCount":13,"unprotectedCount":13},[136],{"type":137,"name":138,"callback":139,"file":140,"line":141},"action","widgets_init","cat_teaser_load_widgets","category-teaser-widget.php",23,[],[],[],[],{"dangerousFunctions":147,"sqlUsage":148,"outputEscaping":153,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":183},[],{"prepared":13,"raw":56,"locations":149},[150],{"file":140,"line":151,"context":152},75,"$wpdb->query() with variable interpolation",{"escaped":13,"rawEcho":154,"locations":155},16,[156,159,161,163,164,166,168,169,170,172,174,175,176,178,180,181],{"file":140,"line":157,"context":158},68,"raw output",{"file":140,"line":160,"context":158},70,{"file":140,"line":162,"context":158},80,{"file":140,"line":33,"context":158},{"file":140,"line":165,"context":158},111,{"file":140,"line":167,"context":158},112,{"file":140,"line":167,"context":158},{"file":140,"line":167,"context":158},{"file":140,"line":171,"context":158},115,{"file":140,"line":173,"context":158},116,{"file":140,"line":173,"context":158},{"file":140,"line":173,"context":158},{"file":140,"line":177,"context":158},119,{"file":140,"line":179,"context":158},120,{"file":140,"line":179,"context":158},{"file":140,"line":182,"context":158},125,[],[],{"summary":186,"deductions":187},"The \"category-teaser-widget\" v1.1 plugin exhibits a strong overall security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events with insufficient authentication checks indicates a minimal attack surface. Furthermore, the code analysis revealed no dangerous functions, file operations, external HTTP requests, or critical taint flow issues.  This suggests that the plugin is designed with security in mind, prioritizing the protection of user data and system integrity.\n\nHowever, there are significant concerns regarding the handling of SQL queries and output escaping. The single SQL query found is not using prepared statements, which is a considerable risk for SQL injection vulnerabilities, especially if any part of this query is derived from user input. Additionally, 100% of the output escaping is not properly handled, meaning there's a high probability of cross-site scripting (XSS) vulnerabilities.  The lack of any recorded vulnerabilities in its history is a positive sign, but it doesn't mitigate the inherent risks identified in the code.\n\nIn conclusion, while the plugin has a commendable absence of external attack vectors and known critical code flaws, the identified weaknesses in SQL query sanitization and output escaping present tangible security risks that require immediate attention. The lack of past vulnerabilities might be due to limited exposure or past development practices that have since changed, but the current code signals demand remediation.",[188,191,194,196],{"reason":189,"points":190},"SQL query not using prepared statements",8,{"reason":192,"points":193},"100% of output is not properly escaped",7,{"reason":195,"points":107},"0 nonce checks",{"reason":197,"points":107},"0 capability checks","2026-03-16T23:39:14.220Z",{"wat":200,"direct":205},{"assetPaths":201,"generatorPatterns":202,"scriptPaths":203,"versionParams":204},[],[],[],[],{"cssClasses":206,"htmlComments":208,"htmlAttributes":209,"restEndpoints":211,"jsGlobals":212,"shortcodeOutput":213},[207],"category-teaser-widget-wrapper",[],[210],"id=\"category-teaser-widget-wrapper\"",[],[],[],{"error":215,"url":216,"statusCode":217,"statusMessage":218,"message":218},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fcategory-teaser-widget\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":30,"versions":220},[221,227],{"version":6,"download_url":23,"svn_tag_url":222,"released_at":25,"has_diff":223,"diff_files_changed":224,"diff_lines":25,"trac_diff_url":225,"vulnerabilities":226,"is_current":215},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcategory-teaser-widget\u002Ftags\u002F1.1\u002F",false,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fcategory-teaser-widget%2Ftags%2F1.0&new_path=%2Fcategory-teaser-widget%2Ftags%2F1.1",[],{"version":228,"download_url":229,"svn_tag_url":230,"released_at":25,"has_diff":223,"diff_files_changed":231,"diff_lines":25,"trac_diff_url":25,"vulnerabilities":232,"is_current":223},"1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcategory-teaser-widget.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcategory-teaser-widget\u002Ftags\u002F1.0\u002F",[],[]]