[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feShT-GkVEyDNQftZHZZZwx3MlS65u7tjSzykn2NgAZ4":3,"$fix7O22DkPHNvOMkgPe1caYk10JAfKBOL-ii2OgPk_hw":165,"$fl9CnESUaohSwNfATmkQfTi6NRrW4t2LpuA-tANSJMuw":170},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":20,"download_link":21,"security_score":22,"vuln_count":11,"unpatched_count":11,"last_vuln_date":23,"fetched_at":24,"discovery_status":25,"vulnerabilities":26,"developer":27,"crawl_stats":23,"alternatives":34,"analysis":35,"fingerprints":139},"cits-social-page-widget-like-box","CITS Social Page Widget","2.2.0","Ashikur Rahman","https:\u002F\u002Fprofiles.wordpress.org\u002Fashikcse\u002F","\u003Cp>CITS Social page widget  Plugin to display the Social page likes in sidebar widget. Display like button for the posts. All Options Available.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>See how many users already like your Page\u003C\u002Fli>\n\u003Cli>which of their friends like it too\u003C\u002Fli>\n\u003Cli>Read recent posts from the Page\u003C\u002Fli>\n\u003Cli>Like the Page with one click, without needing to visit the Page.\u003C\u002Fli>\n\u003Cli>Add like button for the posts.\u003C\u002Fli>\n\u003Cli>Add a shortcode to display the social like box on any page or post.\u003C\u002Fli>\n\u003C\u002Ful>\n","CITS Social page widget Plugin to display the Social page likes in sidebar widget. Display like button for the posts. All Options Available.",0,1207,"2023-08-14T17:52:00.000Z","6.3.8","5.0","7.0",[18,19],"cits-social-page-widget","social-page-widget","https:\u002F\u002Fcoderitsolution.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcits-social-page-widget-like-box.zip",85,null,"2026-07-22T17:31:50.256Z","no_bundle",[],{"slug":28,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":11,"avg_security_score":30,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},"ashikcse",3,90,30,87,"2026-08-29T11:08:25.511Z",[],{"attackSurface":36,"codeSignals":53,"taintFlows":126,"riskAssessment":127,"analyzedAt":138},{"hooks":37,"ajaxHandlers":44,"restRoutes":45,"shortcodes":46,"cronEvents":51,"entryPointCount":52,"unprotectedCount":11},[38],{"type":39,"name":40,"callback":41,"file":42,"line":43},"action","widgets_init","cits_social_page_widget","init.php",19,[],[],[47],{"tag":48,"callback":49,"file":42,"line":50},"cits_page_widget","cits_page_widget_shortcode",20,[],1,{"dangerousFunctions":54,"sqlUsage":55,"outputEscaping":57,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":125},[],{"prepared":11,"raw":11,"locations":56},[],{"escaped":11,"rawEcho":58,"locations":59},44,[60,63,64,65,66,67,68,69,70,71,72,74,75,77,78,79,81,83,84,85,87,89,90,91,93,95,96,97,99,101,102,103,105,107,108,110,112,113,115,117,118,120,122,123],{"file":42,"line":61,"context":62},43,"raw output",{"file":42,"line":61,"context":62},{"file":42,"line":61,"context":62},{"file":42,"line":61,"context":62},{"file":42,"line":61,"context":62},{"file":42,"line":61,"context":62},{"file":42,"line":61,"context":62},{"file":42,"line":61,"context":62},{"file":42,"line":58,"context":62},{"file":42,"line":58,"context":62},{"file":42,"line":73,"context":62},81,{"file":42,"line":32,"context":62},{"file":42,"line":76,"context":62},88,{"file":42,"line":76,"context":62},{"file":42,"line":76,"context":62},{"file":42,"line":80,"context":62},91,{"file":42,"line":82,"context":62},92,{"file":42,"line":82,"context":62},{"file":42,"line":82,"context":62},{"file":42,"line":86,"context":62},95,{"file":42,"line":88,"context":62},96,{"file":42,"line":88,"context":62},{"file":42,"line":88,"context":62},{"file":42,"line":92,"context":62},99,{"file":42,"line":94,"context":62},100,{"file":42,"line":94,"context":62},{"file":42,"line":94,"context":62},{"file":42,"line":98,"context":62},104,{"file":42,"line":100,"context":62},105,{"file":42,"line":100,"context":62},{"file":42,"line":100,"context":62},{"file":42,"line":104,"context":62},109,{"file":42,"line":106,"context":62},110,{"file":42,"line":106,"context":62},{"file":42,"line":109,"context":62},112,{"file":42,"line":111,"context":62},128,{"file":42,"line":111,"context":62},{"file":42,"line":114,"context":62},133,{"file":42,"line":116,"context":62},136,{"file":42,"line":116,"context":62},{"file":42,"line":119,"context":62},141,{"file":42,"line":121,"context":62},145,{"file":42,"line":121,"context":62},{"file":42,"line":124,"context":62},150,[],[],{"summary":128,"deductions":129},"The \"cits-social-page-widget-like-box\" plugin v2.2.0 exhibits a mixed security posture. On the positive side, the plugin demonstrates excellent practices regarding database interactions, with all SQL queries utilizing prepared statements. Furthermore, there are no recorded vulnerabilities (CVEs) in its history, suggesting a generally stable and well-maintained codebase.  The static analysis shows a very small attack surface with only one shortcode and no AJAX handlers or REST API routes exposed, which is a positive sign for limiting potential entry points.\n\nHowever, the analysis also reveals significant concerns, primarily around output escaping. A striking 0% of the 44 identified output points are properly escaped. This is a critical weakness, as it opens the door to Cross-Site Scripting (XSS) vulnerabilities. Attackers could potentially inject malicious scripts through user-supplied data that is later displayed on the front-end of the website. Additionally, the absence of nonce checks and capability checks across all entry points means that even the single shortcode is not protected against unauthorized use or abuse, although the lack of other exposed entry points mitigates this risk somewhat.",[130,133,136],{"reason":131,"points":132},"All output is unescaped",15,{"reason":134,"points":135},"No nonce checks on entry points",5,{"reason":137,"points":135},"No capability checks on entry points","2026-03-17T06:17:06.938Z",{"wat":140,"direct":147},{"assetPaths":141,"generatorPatterns":142,"scriptPaths":143,"versionParams":145},[],[],[144],"https:\u002F\u002Fconnect.facebook.net\u002Fen_GB\u002Fsdk.js#xfbml=1&version=v10.0",[146],"cits-social-page-widget-like-box\u002Fstyle.css?ver=",{"cssClasses":148,"htmlComments":151,"htmlAttributes":152,"restEndpoints":161,"jsGlobals":162,"shortcodeOutput":163},[149,150],"fb-page","fb-xfbml-parse-ignore",[],[153,154,155,156,157,158,159,160],"data-href","data-tabs","data-width","data-height","data-adapt-container-width","data-hide-cover","data-small-header","data-show-facepile",[],[],[164],"\u003Cdiv class=\"fb-page\" data-href=\"",{"error":166,"url":167,"statusCode":168,"statusMessage":169,"message":169},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fcits-social-page-widget-like-box\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":11,"versions":171},[]]