[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGY1cq_IEQ2rP0FftMDJhM5AYTYSOlb_bbyDCE_n_dBk":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":37,"analysis":121,"fingerprints":154},"chuck-norris-joke-widget","Chuck Norris Jokes Widget","0.7.1","maarten.decat","https:\u002F\u002Fprofiles.wordpress.org\u002Fmaartendecat\u002F","\u003Cp>This plugin adds a small WordPress widget that shows a random Chuck Norris joke on your blog.\u003Cbr \u002F>\nThese jokes are taken from a database on icndb.com.\u003Cbr \u002F>\nFor personalized Chuck Norris jokes starring yourself, please refer to the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fpersonalized-chuck-norris-joke-widget\u002F\" title=\"Personalized Chuck Norris Jokes Widget\" rel=\"ugc\">Personalized Chuck Norris Jokes Widget\u003C\u002Fa>.\u003C\u002Fp>\n","Shows a random Chuck Norris joke on your blog. For personalized Chuck Norris jokes starring yourself, please refer to the Personalized Chuck Norris Jo …",10,3386,0,"2015-08-20T18:45:00.000Z","4.3.34","2.8","",[19,20,21,22,23],"chuck-norris","fun","jokes","sidebar","widget","http:\u002F\u002Fmaartendecat.be\u002Fchuck-norris-jokes-wordpress-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fchuck-norris-joke-widget.0.7.1.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":26,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"maartendecat",2,20,30,84,"2026-04-05T10:20:40.191Z",[38,49,67,78,94],{"slug":39,"name":40,"version":6,"author":7,"author_profile":8,"description":41,"short_description":42,"active_installs":11,"downloaded":43,"rating":13,"num_ratings":13,"last_updated":44,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":45,"homepage":46,"download_link":47,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":48},"personalized-chuck-norris-joke-widget","Personalized Chuck Norris Jokes Widget","\u003Cp>This plugin adds a small WordPress widget that shows a random personalized Chuck Norris joke on your blog, starring yourself.\u003Cbr \u002F>\nThese jokes are taken from a database on icndb.com.\u003Cbr \u002F>\nFor regular Chuck Norris jokes, please refer to the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fchuck-norris-joke-widget\u002F\" title=\"Chuck Norris Jokes Widget\" rel=\"ugc\">Chuck Norris Jokes Widget\u003C\u002Fa>.\u003C\u002Fp>\n","Shows a random personalized Chuck Norris joke on your blog, starring yourself. For regular Chuck Norris jokes, please refer to the Chuck Norris Jokes  …",2679,"2015-08-20T18:44:00.000Z",[19,20,21,22,23],"http:\u002F\u002Fwww.icndb.com\u002Fon-your-website\u002Fwordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpersonalized-chuck-norris-joke-widget.0.7.1.zip","2026-03-15T14:54:45.397Z",{"slug":50,"name":51,"version":52,"author":53,"author_profile":54,"description":55,"short_description":56,"active_installs":11,"downloaded":57,"rating":33,"num_ratings":58,"last_updated":59,"tested_up_to":60,"requires_at_least":61,"requires_php":17,"tags":62,"homepage":65,"download_link":66,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"funny-photos","Funny Photos","2.9","PResponsive","https:\u002F\u002Fprofiles.wordpress.org\u002Fallis741\u002F","\u003Cp>Plugin “Funny Photos” displays Funny photos on your blog.\u003Cbr \u002F>\nThere are over 5,000 photos.\u003Cbr \u002F>\nAdd Funny Photos to your sidebar on your blog using  a widget.\u003Cbr \u002F>\nPhotos are saved on our database, so you don’t need to have space for all that information.\u003C\u002Fp>\n","Plugin \"Funny Photos\" displays Best photos of the day and Funny photos on your blog. There are over 5,000 photos.",7582,1,"2015-02-28T18:18:00.000Z","4.1.42","3.0",[63,50,64,21,23],"funny-jokes","funny-video","http:\u002F\u002Fwww.premiumresponsive.com\u002Fwordpress-plugins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffunny-photos.zip",{"slug":68,"name":69,"version":61,"author":53,"author_profile":54,"description":70,"short_description":71,"active_installs":11,"downloaded":72,"rating":13,"num_ratings":13,"last_updated":73,"tested_up_to":60,"requires_at_least":61,"requires_php":17,"tags":74,"homepage":65,"download_link":77,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"joke-of-the-day","Joke of the Day","\u003Cp>Plugin “Joke of the Day” displays categorized jokes on your blog. There are over 40,000 jokes in 40 categories. Jokes are saved on our database, so you don’t need to have space for all that information.\u003C\u002Fp>\n","Plugin \"Joke of the Day\" displays jokes on your blog. There are over 40,000 jokes in 40 categories.",10249,"2015-02-28T18:10:00.000Z",[75,64,76,21,23],"funny","joke","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjoke-of-the-day.zip",{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":11,"downloaded":86,"rating":13,"num_ratings":13,"last_updated":17,"tested_up_to":87,"requires_at_least":88,"requires_php":17,"tags":89,"homepage":90,"download_link":91,"security_score":92,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":93},"joke-of-the-day-advanced","Joke of the Day Advanced","1.2","Andy","https:\u002F\u002Fprofiles.wordpress.org\u002Fandycorm\u002F","\u003Cp>Places a Joke of the Day widget on your WordPress blog. Features include the ability to only show jokes containing a particular keyword, a switch between ‘clean’ or ‘dirty’ jokes, as well as an option to change the current joke early if you get tired of it. Jokes are loaded via ajax from \u003Ca href=\"http:\u002F\u002Fwww.joke-db.com\u002F\" rel=\"nofollow ugc\">The Internet Joke Database\u003C\u002Fa>, so your page will never be slowed due to loading jokes.\u003C\u002Fp>\n","Freshen up your WordPress site with a new joke every day.",4004,"3.4.2","2.0.2",[75,63,76,21,23],"http:\u002F\u002Fwww.joke-db.com\u002Fwidgets\u002Fwordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjoke-of-the-day-advanced.zip",100,"2026-03-15T10:48:56.248Z",{"slug":95,"name":96,"version":97,"author":98,"author_profile":99,"description":100,"short_description":101,"active_installs":11,"downloaded":102,"rating":92,"num_ratings":58,"last_updated":103,"tested_up_to":104,"requires_at_least":105,"requires_php":17,"tags":106,"homepage":119,"download_link":120,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"quote-of-the-day-tellmequotes","Quote of The Day by TellmeQuotes","1.6","vivekmoyal","https:\u002F\u002Fprofiles.wordpress.org\u002Fvivekmoyal\u002F","\u003Cp>This plugin lets you add a Quote of the Day widget to your WordPress page. Put the widget and famous quotations will automatically appear on your page, every day!\u003C\u002Fp>\n\u003Cp>Our database having topic feeds contain family-friendly quotes by famous authors that are funny, inspirational, motivational and wise.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.tellmequotes.com\" rel=\"nofollow ugc\">TellmeQuotes\u003C\u002Fa> is the one of the web’s largest quotation site, and with our huge collection of quotes, you can expect a fresh Quote of the Day.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cp>*Widget allows you to place a Quote of the Day sidebar on your page *Widget adapts to the theme of your page\u003C\u002Fp>\n","This plugin lets you add a Quote of the Day widget to your WordPress site.",1374,"2016-07-05T10:41:00.000Z","4.5.33","3.0.1",[107,108,75,109,110,111,112,113,114,115,116,22,117,23,118],"art","famous-quotes","inspirational","love","motivational","nature","quotations","quote","quote-of-the-day","quotes","tellmequotes","wishes","http:\u002F\u002Fwww.tellmequotes.com\u002Flink\u002Fwordpress_plugin.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fquote-of-the-day-tellmequotes.zip",{"attackSurface":122,"codeSignals":134,"taintFlows":146,"riskAssessment":147,"analyzedAt":153},{"hooks":123,"ajaxHandlers":130,"restRoutes":131,"shortcodes":132,"cronEvents":133,"entryPointCount":13,"unprotectedCount":13},[124],{"type":125,"name":126,"callback":127,"file":128,"line":129},"action","widgets_init","load_ChuckNorrisJokeWidget","chuck-norris-joke-widget.php",26,[],[],[],[],{"dangerousFunctions":135,"sqlUsage":136,"outputEscaping":138,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":145},[],{"prepared":13,"raw":13,"locations":137},[],{"escaped":13,"rawEcho":32,"locations":139},[140,143],{"file":128,"line":141,"context":142},60,"raw output",{"file":128,"line":144,"context":142},80,[],[],{"summary":148,"deductions":149},"The \"chuck-norris-joke-widget\" plugin v0.7.1 exhibits a generally positive security posture based on the static analysis provided. There are no identified AJAX handlers, REST API routes, shortcodes, or cron events, resulting in a zero total attack surface. Furthermore, the code signals indicate no dangerous functions, no unescaped outputs, no file operations, and no external HTTP requests. The complete absence of known vulnerabilities, both historically and currently, is a strong indicator of the plugin's security awareness and development practices. The complete lack of taint analysis findings further strengthens this assessment, suggesting no obvious paths for malicious data injection or manipulation.\n\nDespite the overwhelmingly positive findings, a critical area of concern is the complete absence of output escaping. With two total outputs identified and 0% properly escaped, this presents a significant risk for Cross-Site Scripting (XSS) vulnerabilities. Any user-supplied data that is not properly sanitized before being displayed to users could be exploited by attackers to inject malicious scripts. Additionally, the lack of any nonce checks or capability checks, while not directly flagged as an issue due to the absence of entry points, suggests a potential oversight in secure development practices should the plugin evolve to include such entry points in the future. This lack of defensive checks, combined with the unescaped output, creates a potential weakness that could be exploited.\n\nIn conclusion, the plugin demonstrates a strong foundation in security by minimizing its attack surface and avoiding common pitfalls like raw SQL queries and dangerous functions. The lack of historical vulnerabilities is commendable. However, the critical omission of output escaping leaves it susceptible to XSS attacks. Addressing this single, albeit significant, issue would greatly improve the plugin's overall security. It is recommended that developers prioritize implementing proper output sanitization for all displayed data.",[150],{"reason":151,"points":152},"Unescaped output",6,"2026-03-17T00:27:18.026Z",{"wat":155,"direct":161},{"assetPaths":156,"generatorPatterns":158,"scriptPaths":159,"versionParams":160},[157],"\u002Fwp-content\u002Fplugins\u002Fchuck-norris-joke-widget\u002Fjquery.icndb.min.js",[],[],[],{"cssClasses":162,"htmlComments":164,"htmlAttributes":166,"restEndpoints":168,"jsGlobals":169,"shortcodeOutput":173},[163],"chuck-norris-jokes",[165],"Chuck Norris Joke Widget plugin",[167],"id=\"chuck-norris-joke-widget\"",[],[170,171,172],"$.icndb.client.id","$.icndb.client.version","$.icndb.getRandomJoke",[]]