[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuZM9WXKW-Arhil9XPl8XOdbtC4NtYlBJYuwY8KW2Kjs":3,"$flJeqZdSfrW4ls3EZZIEQikROfiEmXPXYiHRJryt7VHI":122,"$fwf7vJJu8_QfyFzDTeboeTXPSMD_UNkLG9Hc10b3LOeE":127},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"discovery_status":27,"vulnerabilities":28,"developer":29,"crawl_stats":25,"alternatives":35,"analysis":36,"fingerprints":102},"cookie-alert","Cookie Alert","1.0","Ricky","https:\u002F\u002Fprofiles.wordpress.org\u002Finfoallgraphicsit\u002F","\u003Cp>Originally designed to add the Cookie Policy advise as requested by recent laws, but you can use it with other intents.\u003C\u002Fp>\n\u003Cp>Once installed and activated you will have a new link under “Settings” in your admin panel.\u003C\u002Fp>\n\u003Cp>In this section you can set the message you what to show, a link url and a link text (both optional) for the privacy\u002Fcookie policy that will be append at the end of the message. Then the text for the close button. Last you can on\u002Foff it.\u003C\u002Fp>\n\u003Cp>When the plugin is on on frontend in every page of your wordpress install you have the message previously settes in admin panel. The user can hide it clicking on the closing button. By clicking the closing button the user set a cookie that lasts for one day.\u003C\u002Fp>\n","Useful for adding a fixed half transparent banner, fullwidth to all of your pages, with custom text and a button to close it.",10,1722,0,"2015-09-28T11:30:00.000Z","4.3.34","3.5","",[19,20,21],"advise-your-users","bottom-fixed-banner","message-for-users","http:\u002F\u002Frickymignanego.com\u002Fcookie-alert\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcookie-alert.1.0.zip",85,null,"2026-07-22T17:31:50.256Z","no_bundle",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":24,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"infoallgraphicsit",1,30,84,"2026-08-29T16:25:10.060Z",[],{"attackSurface":37,"codeSignals":62,"taintFlows":95,"riskAssessment":96,"analyzedAt":101},{"hooks":38,"ajaxHandlers":58,"restRoutes":59,"shortcodes":60,"cronEvents":61,"entryPointCount":13,"unprotectedCount":13},[39,46,51,55],{"type":40,"name":41,"callback":42,"priority":43,"file":44,"line":45},"action","init","cookiealert_css_js",25,"cookiealert.php",45,{"type":40,"name":47,"callback":48,"priority":49,"file":44,"line":50},"wp_footer","cookiealert_stampa_messaggio",20,48,{"type":40,"name":52,"callback":52,"file":53,"line":54},"admin_init","setup.php",9,{"type":40,"name":56,"callback":57,"file":53,"line":11},"admin_menu","add_menu",[],[],[],[],{"dangerousFunctions":63,"sqlUsage":64,"outputEscaping":66,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":31,"bundledLibraries":94},[],{"prepared":13,"raw":13,"locations":65},[],{"escaped":13,"rawEcho":67,"locations":68},12,[69,72,74,76,78,80,82,84,86,88,90,92],{"file":44,"line":70,"context":71},77,"raw output",{"file":53,"line":73,"context":71},129,{"file":53,"line":75,"context":71},144,{"file":53,"line":77,"context":71},146,{"file":53,"line":79,"context":71},152,{"file":53,"line":81,"context":71},154,{"file":53,"line":83,"context":71},171,{"file":53,"line":85,"context":71},172,{"file":53,"line":87,"context":71},177,{"file":53,"line":89,"context":71},180,{"file":53,"line":91,"context":71},196,{"file":53,"line":93,"context":71},208,[],[],{"summary":97,"deductions":98},"The 'cookie-alert' plugin version 1.0 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The complete absence of identified AJAX handlers, REST API routes, shortcodes, and cron events with unprotected entry points indicates a minimal attack surface. Furthermore, the lack of dangerous functions, file operations, and external HTTP requests contributes to a secure foundation. The consistent use of prepared statements for SQL queries is a significant strength, mitigating risks of SQL injection vulnerabilities.\n\nHowever, a critical concern arises from the complete lack of output escaping. With 12 total outputs analyzed and 0% properly escaped, this presents a significant risk of Cross-Site Scripting (XSS) vulnerabilities. Any dynamic content displayed by the plugin could potentially be exploited to inject malicious scripts. While the plugin demonstrates good practices in other areas and has no recorded vulnerabilities, this unescaped output is a glaring weakness that requires immediate attention. The plugin also only shows one capability check, which might indicate a limited scope of functionality, but it's difficult to ascertain the full impact without more context on what that check pertains to.",[99],{"reason":100,"points":49},"Unescaped output","2026-03-17T01:27:52.825Z",{"wat":103,"direct":110},{"assetPaths":104,"generatorPatterns":107,"scriptPaths":108,"versionParams":109},[105,106],"\u002Fwp-content\u002Fplugins\u002Fcookie-alert\u002Fcssjs\u002Fcookiealert.css","\u002Fwp-content\u002Fplugins\u002Fcookie-alert\u002Fcssjs\u002Fcookiealert.js",[],[106],[],{"cssClasses":111,"htmlComments":116,"htmlAttributes":117,"restEndpoints":119,"jsGlobals":120,"shortcodeOutput":121},[112,113,114,115],"cookie-alert-wrap","cookie-alert-text","cookie-alert-link","cookie-alert-chiudi",[],[118],"data-cookiealert-id",[],[],[],{"error":123,"url":124,"statusCode":125,"statusMessage":126,"message":126},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fcookie-alert\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":31,"versions":128},[129],{"version":6,"download_url":23,"svn_tag_url":130,"released_at":25,"has_diff":131,"diff_files_changed":132,"diff_lines":25,"trac_diff_url":25,"vulnerabilities":133,"is_current":123},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcookie-alert\u002Ftags\u002F1.0\u002F",false,[],[]]