[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fm3LFp4kaKPZ-ivTlkqShzn1uzFi6BvitVO7Dnu2tcBQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":49,"crawl_stats":38,"alternatives":56,"analysis":153,"fingerprints":197},"collapsing-archives","Collapsing Archives","3.0.8","robfelty","https:\u002F\u002Fprofiles.wordpress.org\u002Frobfelty\u002F","\u003Cp>Create collapsible archives by year or month. Features include: link to archive pages, display of individual posts and support for custom post-types.\u003C\u002Fp>\n\u003Ch3>Demo\u003C\u002Fh3>\n\u003Cp>I use this plugin in my blog at http:\u002F\u002Fblog.robfelty.com\u003C\u002Fp>\n","This plugin uses Javascript to dynamically expand or collapse the set of months for each year and posts for each month in the archive listing of your  …",3000,146200,82,21,"2026-02-12T03:41:00.000Z","6.9.4","2.8","",[20,21,22,23,24],"accordion","archives","collapse","sidebar","widget","http:\u002F\u002Frobfelty.com\u002Fplugins\u002Fcollapsing-archives","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcollapsing-archives.3.0.8.zip",99,1,0,"2024-08-26 00:00:00","2026-03-15T15:16:48.613Z",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2024-43934","collapsing-archives-authenticated-contributor-stored-cross-site-scripting","Collapsing Archives \u003C= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting","The Collapsing Archives plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=3.0.5","3.0.6","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-09-04 19:58:52",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F8bdbd196-cb77-4042-86bb-7c67325c8c07?source=api-prod",10,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":50,"total_installs":51,"avg_security_score":52,"avg_patch_time_days":53,"trust_score":54,"computed_at":55},7,7350,89,6,92,"2026-04-04T04:20:13.867Z",[57,78,98,119,137],{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":67,"num_ratings":53,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":71,"tags":72,"homepage":75,"download_link":76,"security_score":77,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"expanding-archives","Expanding Archives","2.1.0","Ashley","https:\u002F\u002Fprofiles.wordpress.org\u002Fnosegraze\u002F","\u003Cp>Expanding Archives adds a widget that shows your old posts in an expandable\u002Fcollapsible format. Each post is categorized under its year and month, so you can expand all the posts in a given month and year.\u003C\u002Fp>\n\u003Cp>This plugin comes with very minimal CSS styling so you can easily customize it to match your design.\u003C\u002Fp>\n\u003Cp>JavaScript is required. No IE support.\u003C\u002Fp>\n","This plugin adds a new widget where you can view your old posts by expanding certain years and months.",2000,22798,94,"2024-03-23T14:55:00.000Z","6.4.8","3.0","7.4",[21,73,74,23,24],"navigation","posts","https:\u002F\u002Fshop.nosegraze.com\u002Fproduct\u002Fexpanding-archives\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fexpanding-archives.zip",85,{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":86,"downloaded":87,"rating":88,"num_ratings":89,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":18,"tags":93,"homepage":96,"download_link":97,"security_score":77,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"ultimate-tabbed-widgets","Ultimate Tabbed Widgets","1.1.2","Claude Vedovini","https:\u002F\u002Fprofiles.wordpress.org\u002Fcvedovini\u002F","\u003Cp>A plugin that allows you to create widget areas that can be turned into tabs or\u003Cbr \u002F>\naccordion using widgets or shortcodes.\u003C\u002Fp>\n\u003Cp>Use the settings page to define as many widgets areas as you want then use the\u003Cbr \u002F>\n“Ultimate Tabbed Widgets” widget to show those areas as a set of tabs or an\u003Cbr \u002F>\naccordion in your sidebars.\u003C\u002Fp>\n\u003Cp>You can also use the \u003Ccode>[utw widgets=\"name of area\" template=\"tabs|accordion\"]\u003C\u002Fcode>\u003Cbr \u002F>\nshortcode to show a set of tabs or an accordion inside a post or a page.\u003C\u002Fp>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>This plugin does not collect any personal information from your visitors.\u003C\u002Fp>\n","A plugin that allows you to create widget areas that can be turned into tabs or",200,6158,80,2,"2018-05-18T04:21:00.000Z","4.9.29","2.7",[20,23,94,24,95],"tabs","widgets","http:\u002F\u002Fvdvn.me\u002Fpga","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fultimate-tabbed-widgets.1.1.2.zip",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":108,"num_ratings":89,"last_updated":109,"tested_up_to":110,"requires_at_least":111,"requires_php":18,"tags":112,"homepage":117,"download_link":118,"security_score":108,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"wpb-woocommerce-widgets-accordion","WPB Widgets Accordion for WooCommerce","1.0.5","WPBean","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpbean\u002F","\u003Cp>You may have so many widgets on your shop page and you want to show all the widgets in a clean accordion. So that your shop page looks more professional and clean. In that situation, our WPB Widgets Accordion for WooCommerce plugin comes handy.\u003C\u002Fp>\n\u003Cp>This Widgets Accordion Plugin can turn your widgets to a collapsible accordion. So that you can add more widgets with more contents than your theme default widgets.  Our Widgets Accordion Plugin will work like a charm.\u003C\u002Fp>\n\u003Cp>You can check our WPB Widgets Accordion for WooCommerce plugin live demo and if you have any questions or any feature request, please open a support ticket on our forum.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fdemo3.wpbean.com\u002Fshop\u002F\" rel=\"nofollow ugc\">Live DEMO\u003C\u002Fa>  |  \u003Ca href=\"https:\u002F\u002Fwpbean.com\u002Fsupport\u002F\" rel=\"nofollow ugc\">Support Forum\u003C\u002Fa> |  \u003Ca href=\"http:\u002F\u002Fdocs.wpbean.com\u002Fdocs\u002Fwpb-woocommerce-widgets-accordion\u002Finstalling\u002F\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>👋 Need expert WordPress & WooCommerce development help?\u003C\u002Fh3>\n\u003Cp>I’m currently available for hire — WordPress and WooCommerce development, custom features, bug fixing, speed optimization, performance tuning, full site development, and more.\u003Cbr \u002F>\nWith over 10 years of experience building high-quality WordPress solutions, I can help you take your website to the next level.\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwpbean.com\u002Fweb-development-services\u002F?utm_source=WordPress&utm_medium=desc-link&utm_campaign=available-for-hire&utm_content=WPB+WooCommerce+widgets+Accordion\" rel=\"nofollow ugc\">\u003Cstrong>Contact me here \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan>\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Plugin Features:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Two different styles for the accordion.\u003C\u002Fli>\n\u003Cli>Very simple and easy to use with shortcode.\u003C\u002Fli>\n\u003Cli>Work with any WordPress theme.\u003C\u002Fli>\n\u003Cli>Modern responsive clean design.\u003C\u002Fli>\n\u003Cli>Easy ShortCode system.\u003C\u002Fli>\n\u003Cli>All Modern Browser Support. \u003C\u002Fli>\n\u003Cli>Translation & RTL Language ready. \u003C\u002Fli>\n\u003Cli>Very Lightweight & many More\u003C\u002Fli>\n\u003C\u002Ful>\n","WPB Widgets Accordion for WooCommerce will allow you to show your widgets in an accordion.",70,2654,100,"2026-03-13T10:01:00.000Z","6.6.5","5.0",[20,113,114,115,116],"sidebar-accordion","widgets-accordion","woocommerce-widgets-accordion","wordpress-widgets-accordion","https:\u002F\u002Fwpbean.com\u002Fdownloads\u002Fwpb-woocommerce-widgets-accordion","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpb-woocommerce-widgets-accordion.1.0.5.zip",{"slug":120,"name":121,"version":122,"author":123,"author_profile":124,"description":125,"short_description":126,"active_installs":127,"downloaded":128,"rating":108,"num_ratings":28,"last_updated":129,"tested_up_to":130,"requires_at_least":131,"requires_php":18,"tags":132,"homepage":135,"download_link":136,"security_score":77,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"arcw-popover-addon","ARCW Popover Addon","0.1.4","alek","https:\u002F\u002Fprofiles.wordpress.org\u002Falekart\u002F","\u003Cp>\u003Cem>Shows a popover with list of links to the posts of the month\u002Fday.\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Compatible with \u003Cstrong>ARCW 1.0.9+\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This will not work if you don’t have Archives Calendar Widget installed\u002Factivated.\u003Cbr \u002F>\nGet it here : \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Farchives-calendar-widget\u002F\" rel=\"ugc\">Archives Calendar Widget\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>There is no any settings, just install and activate.\u003C\u002Fp>\n\u003Ch4>Notes\u003C\u002Fh4>\n\u003Cp>Please use the Support section to report issues.\u003C\u002Fp>\n","Popover Addon for Archives Calendar Widget",30,2777,"2016-08-16T22:31:00.000Z","4.6.30","4.0",[21,133,23,134,24],"calendar","view","http:\u002F\u002Flabs.alek.be\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Farcw-popover-addon.0.1.4.zip",{"slug":138,"name":139,"version":140,"author":141,"author_profile":142,"description":143,"short_description":144,"active_installs":48,"downloaded":145,"rating":29,"num_ratings":29,"last_updated":18,"tested_up_to":146,"requires_at_least":70,"requires_php":18,"tags":147,"homepage":150,"download_link":151,"security_score":108,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":152},"folding-archives","Folding Archives","1.0","ray.viljoen","https:\u002F\u002Fprofiles.wordpress.org\u002Frayviljoen\u002F","\u003Cp>The Folding Archives plugin provides a sidebar widget to display archives in a small and simple jQuery dropdown menu.\u003Cbr \u002F>\nThe widget allows you to select how far back to display archives ( in days ), a custom title and an option for including jQuery.\u003C\u002Fp>\n\u003Cp>The folding animation is javascript dependant, although the widget will fallback to a basic non-animated version should javascript be disabled.\u003C\u002Fp>\n\u003Cp>Developed by \u003Ca href=\"http:\u002F\u002Fwww.catn.com\" rel=\"nofollow ugc\">PHP Hosting Experts CatN\u003C\u002Fa>\u003C\u002Fp>\n","A simple widget providing a customisable, animated dropdown menu to display archives.",3001,"3.1.4",[21,148,149,23,24],"colapsing","jquery","http:\u002F\u002Fcatn.com\u002Fcommunity\u002Fplugins\u002Ffolding-archives\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffolding-archives.zip","2026-03-15T10:48:56.248Z",{"attackSurface":154,"codeSignals":169,"taintFlows":182,"riskAssessment":183,"analyzedAt":196},{"hooks":155,"ajaxHandlers":165,"restRoutes":166,"shortcodes":167,"cronEvents":168,"entryPointCount":29,"unprotectedCount":29},[156,162],{"type":157,"name":158,"callback":159,"file":160,"line":161},"action","init","collapsArch_load_domain","collapsArch.php",36,{"type":157,"name":158,"callback":163,"file":160,"line":164},"create_block_collapsArch_block_init",174,[],[],[],[],{"dangerousFunctions":170,"sqlUsage":171,"outputEscaping":173,"fileOperations":28,"externalRequests":29,"nonceChecks":29,"capabilityChecks":29,"bundledLibraries":181},[],{"prepared":89,"raw":29,"locations":172},[],{"escaped":50,"rawEcho":89,"locations":174},[175,178],{"file":160,"line":176,"context":177},162,"raw output",{"file":179,"line":180,"context":177},"collapsArchList.php",111,[],[],{"summary":184,"deductions":185},"The plugin \"collapsing-archives\" v3.0.8 presents a mixed security posture. On the positive side, static analysis reveals no identifiable attack surface through AJAX handlers, REST API routes, shortcodes, or cron events that are not properly authenticated or permission-checked. Furthermore, the plugin demonstrates good practices by exclusively using prepared statements for its SQL queries and having no external HTTP requests, reducing common attack vectors. However, there are significant concerns regarding output escaping, with only 78% of outputs being properly escaped, leaving potential for cross-site scripting vulnerabilities. The absence of nonce checks and capability checks for any potential entry points, though currently none are identified, is a notable gap in defense-in-depth. The plugin's vulnerability history, specifically a medium-severity CVE discovered very recently (2024-08-26) related to Cross-site Scripting, is a red flag that underscores the potential for exploitable flaws despite the current lack of identified critical issues in static analysis.",[186,188,191,193],{"reason":187,"points":53},"Output escaping is not comprehensive (78%)",{"reason":189,"points":190},"No nonce checks present",5,{"reason":192,"points":190},"No capability checks present",{"reason":194,"points":195},"Medium severity CVE in vulnerability history",15,"2026-03-16T18:22:45.315Z",{"wat":198,"direct":210},{"assetPaths":199,"generatorPatterns":203,"scriptPaths":204,"versionParams":205},[200,201,202],"\u002Fwp-content\u002Fplugins\u002Fcollapsing-archives\u002FcollapsArchStyles.php","\u002Fwp-content\u002Fplugins\u002Fcollapsing-archives\u002FcollapsFunctions.js","\u002Fwp-content\u002Fplugins\u002Fcollapsing-archives\u002Fsymbols.php",[],[201],[206,207,208,209],"collapsing-archives\u002Fstyle.css?ver=","collapsing-archives\u002FcollapsArchStyles.php?ver=","collapsing-archives\u002FcollapsFunctions.js?ver=","collapsing-archives\u002Fsymbols.php?ver=",{"cssClasses":211,"htmlComments":214,"htmlAttributes":217,"restEndpoints":219,"jsGlobals":220,"shortcodeOutput":224},[212,213],"widget-title","collapsArch",[215,216],"\u002F* These variables are part of the Collapsing Archives Plugin\n   * version: 3.0.8\n   * revision: $Id: collapsArch.php 3459499 2026-02-12 03:40:52Z robfelty $","* Copyright 2008 Robert Felty (robfelty.com)",[218],"widget-collapsArch-",[],[221,222,223],"collapsItems","widgetRoot","addExpandCollapseArch",[225,226],"\u003Ch2 class='widget-title'>Archives\u003C\u002Fh2>","\u003Cul id='widget-collapsArch-"]