[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4A4Mi-WqmiqWaZkGnYWS9G_00u_zNehxDYSXH_O0ot0":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":15,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":34,"analysis":132,"fingerprints":156},"curs-valutar-bnr","Curs Valutar BNR","1.0","neeeeeeext","https:\u002F\u002Fprofiles.wordpress.org\u002Fneeeeeeext\u002F","\u003Cp>Acest plugin ofera posibilitatea de a alege pt afisare cursul valutar BNR in RON pt oricare dintre valute plus otiunea de a modifca culorile sau dimensiunea modulului.\u003C\u002Fp>\n\u003Cp>Plugin dezvoltat din \u003Ca href=\"http:\u002F\u002Fcursul-valutar.net\u002Fpreluare_curs_valutar.php\" rel=\"nofollow ugc\">Preluare curs valutar BNR\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Pentru instalare urmati pasii:\u003C\u002Fp>\n\u003Col>\n\u003Cli>copiati fisierul “curs_valutar_bnr.php” in directorul \u002Fwp-content\u002Fplugins al blogului\u003C\u002Fli>\n\u003Cli>activati plugin-ul\u003C\u002Fli>\n\u003Cli>accesati meniul Appearance ==> Widgets\u003C\u002Fli>\n\u003Cli>adaugati pluginul “Curs Valutar BNR” in sidebar\u003C\u002Fli>\n\u003Cli>salvati setarile\u003C\u002Fli>\n\u003C\u002Fol>\n","Acest plugin ofera posibilitatea de a alege pt afisare cursul valutar BNR in RON pt oricare dintre valute plus otiunea de a modifca culorile sau dimen &hellip;",20,4980,1,"2012-07-06T15:30:00.000Z","","2.0",[18,19,20,21,22],"bnr","curs","sidebar","valutar","widget","http:\u002F\u002Fcursul-valutar.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcurs-valutar-bnr.1.1.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":13,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},30,84,"2026-04-04T11:22:46.940Z",[35,56,70,86,111],{"slug":36,"name":37,"version":6,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":44,"num_ratings":45,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":15,"tags":49,"homepage":54,"download_link":55,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"curs-valutar-live-bnr","Curs Valutar Live BNR","bobyrou","https:\u002F\u002Fprofiles.wordpress.org\u002Fbobyrou\u002F","\u003Cp>Multumesc pentru ca ai ales pluginul: Curs Valutar Live BNR\u003C\u002Fp>\n\u003Cp>Iti permite afisarea Cursului Valutar live al BNR pe orice pagina, articol, in widget sau sidebar.\u003C\u002Fp>\n\u003Cp>Shortcode-ul [curs_bnr] permite afisarea cursului valutar oriunde doriti: in pagina, widget, sidebar etc.\u003C\u002Fp>\n","Afiseaza ca widget sau oriunde si pe orice pagina Cursul Valutar live al BNR - Banca Nationala a Romaniei. Curs actualizat in fiecare ora!",100,2769,86,6,"2016-04-12T00:13:00.000Z","4.4.34","3.0.1",[50,51,52,4,53],"curs-bnr","curs-online","curs-valutar","romania","http:\u002F\u002Fwww.casedevanzare.ro","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcurs-valutar-live-bnr.1.0.zip",{"slug":57,"name":58,"version":59,"author":38,"author_profile":39,"description":60,"short_description":61,"active_installs":11,"downloaded":62,"rating":42,"num_ratings":63,"last_updated":64,"tested_up_to":47,"requires_at_least":48,"requires_php":15,"tags":65,"homepage":54,"download_link":69,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"convertor-valutar-curs-bnr","Convertor valutar curs 3 Banci: BNR, BCR si BT","3","\u003Cp>Multumesc pentru ca ai ales pluginul: Convertor valutar curs BNR\u003Cbr \u002F>\nIti permite afisarea unui convertor pe orice pagina, articol, in widget sau sidebar.\u003Cbr \u002F>\nOfera vizitatorilor optiunea de a converti din EURO in RON \u002F RON in EURO la cursul zilei pentru urmatoarele 3 banci:\u003Cbr \u002F>\n– BNR (Banca Nationala a Romaniei)\u003Cbr \u002F>\n– BCR (Banca Comerciala Romana)\u003Cbr \u002F>\n– BT (Banca Transilvania)\u003C\u002Fp>\n\u003Cp>Shortcode-ul [eron_converter] permite afisarea convertorului valutar oriunde doriti.\u003C\u002Fp>\n","Multumesc pentru ca ai ales pluginul: Convertor valutar curs BNR",11138,5,"2016-03-22T21:05:00.000Z",[66,67,68,50,53],"bucuresti","convertor-online","convertor-valutar","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconvertor-valutar-curs-bnr.3.zip",{"slug":71,"name":72,"version":73,"author":74,"author_profile":75,"description":76,"short_description":77,"active_installs":11,"downloaded":78,"rating":26,"num_ratings":26,"last_updated":79,"tested_up_to":80,"requires_at_least":81,"requires_php":15,"tags":82,"homepage":84,"download_link":85,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"wp-cursbnr","Curs BNR","1.1","Aurel Canciu","https:\u002F\u002Fprofiles.wordpress.org\u002Fshockware\u002F","\u003Cp>EN: This plugin generates a small exchange rate panel for RON (Romanian\u003Cbr \u002F>\nLeu) that you can put anywhere you like on your WordPress powered\u003Cbr \u002F>\nwebsite. To use, just insert the \u003Cstrong>[curs_bnr]\u003C\u002Fstrong> shortcode in your\u003Cbr \u002F>\nposts\u002Fpages\u002Ftextwidgets or use the widget that comes with this plugin.\u003Cbr \u002F>\nThe shortcode accepts as attributes currency codes (EUR, USD, GBP etc.),\u003Cbr \u002F>\nallowing you to specify what currencies to display exchange rates for.\u003Cbr \u002F>\nIf you do not specify any attributes, the plugin displays all available\u003Cbr \u002F>\ncurrency exchange rates from BNR (Banca Națională a României). If you\u003Cbr \u002F>\nwant to use custom styling, you can add the \u003Cstrong>nocss\u003C\u002Fstrong> attribute to the\u003Cbr \u002F>\nshortcode and define your own CSS layout for the exchange rate panel.\u003C\u002Fp>\n\u003Cp>RO: Acest modul generează un mic panou ce conține cursul valutar pentru\u003Cbr \u002F>\nRON, pe care îl poți pune oriunde pe site-ul tău bazat pe WordPress.\u003Cbr \u002F>\nPentru a-l folosi, inserează shortcode-ul \u003Cstrong>[curs_bnr]\u003C\u002Fstrong> în\u003Cbr \u002F>\npostări\u002Fpagini\u002Fwidgeturi text sau folosește widget-ul care vine cu acest\u003Cbr \u002F>\nplugin.\u003Cbr \u002F>\nShortcode-ul acceptă ca și atribute coduri valutare (EUR, USD, GBP\u003Cbr \u002F>\netc.), oferind astfel posibilitatea de a alege pentru ce monede să fie\u003Cbr \u002F>\nafișate ratele de schimb. Dacă nu se specifică nici un atribut, atunci\u003Cbr \u002F>\nmodulul va afișa toate ratele disponibilie ale BNR. Dacă dorești să\u003Cbr \u002F>\nstilizezi panoul de curs valutar, poți adăuga atributul \u003Cstrong>nocss\u003C\u002Fstrong> și\u003Cbr \u002F>\nastfel îți poți defini propria configurație CSS.\u003C\u002Fp>\n","EN: This plugin generates a small exchange rate panel for RON (Romanian",2277,"2011-12-18T23:01:00.000Z","3.3.2","2.9",[18,52,83],"exchange","https:\u002F\u002Fgithub.com\u002Frelu\u002Fwp-cursbnr","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-cursbnr.1.1.zip",{"slug":87,"name":88,"version":89,"author":90,"author_profile":91,"description":92,"short_description":93,"active_installs":94,"downloaded":95,"rating":96,"num_ratings":97,"last_updated":98,"tested_up_to":99,"requires_at_least":100,"requires_php":101,"tags":102,"homepage":106,"download_link":107,"security_score":108,"vuln_count":109,"unpatched_count":26,"last_vuln_date":110,"fetched_at":28},"custom-sidebars","Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager","3.38","WebFactory","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebfactory\u002F","\u003Cp>\u003Cstrong>Manage and replace sidebars and other classic widget areas on your site with Custom Sidebars, a flexible widget area manager.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Make custom sidebar configurations and be able to choose what classic widgets display on each page or post of your site.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Need to make a \u003Cstrong>widget sticky\u003C\u002Fstrong> or fixed? Try our free \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsticky-menu-or-anything-on-scroll\u002F\" rel=\"ugc\">WP Sticky Anything\u003C\u002Fa> plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Custom Sidebars works ONLY with the classic widgets screen that was used in WordPress before version 5.8. If you want to use it with version 5.8 (and above) you have to install the official \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fclassic-widgets\u002F\" rel=\"ugc\">Classic Widgets\u003C\u002Fa> plugin, or enable the classic widgets interface yourself. Once the classic widgets screen is activated the plugin will work the same as before.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Having problems setting up SSL or generating an SSL certificate? Install the free \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-force-ssl\u002F\" rel=\"ugc\">WP Force SSL\u003C\u002Fa> plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Display Different Sidebars on Pages and Posts\u003C\u002Fh4>\n\u003Cp>Custom Sidebars allows you to dynamically display custom widget configurations on any page, post, category, post type, or archive page.\u003C\u002Fp>\n\u003Cp>★★★★★\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>“Custom Sidebars will go on my “essential plugins” list from now on. I am pleased by how easy it was to figure out and by how many options are available in the free version.” – \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fmonkeyhateclean\" rel=\"nofollow ugc\">monkeyhateclean\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>★★★★★\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>“This plugin does exactly what it says. It’s light, integrates well into WordPress and gives you tons of possibilities.” – \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fdarknova11\" rel=\"nofollow ugc\">DarkNova\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>Every part of Custom Sidebars integrates seamlessly with the Widgets menu for simplicity and control. No confusing settings pages or added menu items, just simple core integration.\u003C\u002Fp>\n\u003Ch4>A Simple Flexible Sidebar Manager\u003C\u002Fh4>\n\u003Cp>** Custom Sidebars Includes: **\u003Cbr \u002F>\n* Unlimited custom widget configurations\u003Cbr \u002F>\n* Set custom widgets for individual posts and pages, categories, post types, and archives\u003Cbr \u002F>\n* Seamless integration with the WordPress Widgets menu\u003Cbr \u002F>\n* Works with well-coded themes and doesn’t slow down your site\u003Cbr \u002F>\n* Set individual widget visibility – for guests, by user role, by post type, for special pages or categories\u003Cbr \u002F>\n* Author specific sidebars – display a custom sidebar for each of your authors\u003Cbr \u002F>\n* Clone and sync widget settings – quickly edit complex configurations\u003Cbr \u002F>\n* Import and export custom sidebars – backup and share sidebars\u003C\u002Fp>\n\u003Cp>Install Custom Sidebars and see for yourself why it’s the most popular widget extension plugin available for WordPress with over 200,000 active installs.\u003C\u002Fp>\n\u003Ch3>Contact and Credits\u003C\u002Fh3>\n\u003Cp>Original development completed by \u003Ca href=\"http:\u002F\u002Fmarquex.es\u002F\" rel=\"nofollow ugc\">Javier Marquez\u003C\u002Fa>.\u003C\u002Fp>\n","Flexible sidebars for custom classic widget configurations on any page or post. Create custom sidebars with ease!",100000,5193767,94,1028,"2025-12-03T19:20:00.000Z","6.9.4","4.6","5.6",[103,104,105,20,22],"classic-widgets","custom-sidebar","dynamic-widgets","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcustom-sidebars\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-sidebars.3.38.zip",98,3,"2017-10-04 00:00:00",{"slug":112,"name":113,"version":114,"author":115,"author_profile":116,"description":117,"short_description":118,"active_installs":94,"downloaded":119,"rating":108,"num_ratings":120,"last_updated":121,"tested_up_to":122,"requires_at_least":123,"requires_php":15,"tags":124,"homepage":128,"download_link":129,"security_score":130,"vuln_count":13,"unpatched_count":26,"last_vuln_date":131,"fetched_at":28},"image-widget","Image Widget","4.4.11","StellarWP","https:\u002F\u002Fprofiles.wordpress.org\u002Fstellarwp\u002F","\u003Cp>Image Widget is a simple plugin that uses the native WordPress media manager to add image widgets to your site.\u003C\u002Fp>\n\u003Ch4>Image Widget Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Responsive\u003C\u002Fli>\n\u003Cli>MU Compatible\u003C\u002Fli>\n\u003Cli>Handles image resizing and alignment\u003C\u002Fli>\n\u003Cli>Link the image\u003C\u002Fli>\n\u003Cli>Add title and description\u003C\u002Fli>\n\u003Cli>Versatile – all fields are optional\u003C\u002Fli>\n\u003Cli>Upload, link to external image, or select an image from your media collection\u003C\u002Fli>\n\u003Cli>Customize the look & feel with filter hooks or theme overrides\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Quality You Can Trust\u003C\u002Fh4>\n\u003Cp>Image Widget is developed and maintained by \u003Ca href=\"https:\u002F\u002Fevnt.is\u002F1aor\" rel=\"nofollow ugc\">The Events Calendar\u003C\u002Fa>, the same folks behind \u003Ca href=\"https:\u002F\u002Fevnt.is\u002F19me\" rel=\"nofollow ugc\">The Events Calendar, Event Tickets, and a full suite of premium plugins\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>This plugin is actively supported by our team and contributions from community members. If you see a question in the forum you can help with or have a great idea and want to code it up or submit a patch, that would be awesome! Not only will we shower you with praise and thanks, it’s also a good way to get to know us and lead into options for paid work if you freelance.\u003C\u002Fp>\n\u003Ch4>Pull Requests & Translations\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fthe-events-calendar\u002Fimage-widget\" rel=\"nofollow ugc\">Check us out on GitHub\u003C\u002Fa> to pull request changes.\u003C\u002Fp>\n\u003Cp>Translations can be submitted \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fimage-widget\" rel=\"nofollow ugc\">here on WordPress.org\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cp>The built in template can be overridden by files within your template.\u003C\u002Fp>\n\u003Ch4>Default vs. Custom Templates\u003C\u002Fh4>\n\u003Cp>The Image Widget comes with a default template for the widget output. If you would like to alter the widget display code, create a new folder called “image-widget” in your template directory and copy over the “views\u002Fwidget.php” file.\u003C\u002Fp>\n\u003Cp>Edit the new file to your hearts content. Please do not edit the one in the plugin folder as that will cause conflicts when you update the plugin to the latest release.\u003C\u002Fp>\n\u003Cp>New in 3.2: You may now also use the “sp_template_image-widget_widget.php” filter to override the default template behavior for .php template files. Eg: if you wanted widget.php to reside in a folder called my-custom-templates\u002F and wanted it to be called my-custom-name.php:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter('sp_template_image-widget_widget.php', 'my_template_filter');\nfunction my_template_filter($template) {\n    return get_template_directory() . '\u002Fmy-custom-templates\u002Fmy-custom-name.php';\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Filters\u003C\u002Fh4>\n\u003Cp>There are a number of filters in the code that will allow you to override data as you see fit. The best way to learn what filters are available is always by simply searching the code for ‘apply_filters’. But all the same, here are a few of the more essential filters:\u003C\u002Fp>\n\u003Cp>\u003Cem>widget_title\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>This is actually a pretty typical filter in widgets and is applied to the widget title.\u003C\u002Fp>\n\u003Cp>\u003Cem>widget_text\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Another very typical widget filter that is applied to the description body text. This filter also takes 2 additional arguments for $args and $instance so that you can learn more about the specific widget instance in the process of filtering the content.\u003C\u002Fp>\n\u003Cp>\u003Cem>image_widget_image_attachment_id\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Filters the attachment id of the image.\u003Cbr \u002F>\nAccepts additional $args and $instance arguments.\u003C\u002Fp>\n\u003Cp>\u003Cem>image_widget_image_url\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Filters the url of the image displayed in the widget.\u003Cbr \u002F>\nAccepts additional $args and $instance arguments.\u003Cbr \u002F>\nTHIS IS DEPRECATED AND WILL EVENTUALLY BE DELETED\u003C\u002Fp>\n\u003Cp>\u003Cem>image_widget_image_width\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Filters the display width of the image.\u003Cbr \u002F>\nAccepts additional $args and $instance arguments.\u003C\u002Fp>\n\u003Cp>\u003Cem>image_widget_image_height\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Filters the display height of the image.\u003Cbr \u002F>\nAccepts additional $args and $instance arguments.\u003C\u002Fp>\n\u003Cp>\u003Cem>image_widget_image_maxwidth\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Filters the inline max-width style of the image. Hint: override this to use this in responsive designs 🙂\u003Cbr \u002F>\nAccepts additional $args and $instance arguments.\u003Cbr \u002F>\nReturn null to remove this css from the image output (defaults to ‘100%’).\u003C\u002Fp>\n\u003Cp>\u003Cem>image_widget_image_maxheight\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Filters the inline max-height style of the image.\u003Cbr \u002F>\nAccepts additional $args and $instance arguments.\u003Cbr \u002F>\nReturn null to remove this css from the image output (defaults to null)\u003C\u002Fp>\n\u003Cp>\u003Cem>image_widget_image_size\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Filters the selected image ‘size’ corresponding to WordPress registered sizes.\u003Cbr \u002F>\nIf this is set to ‘tribe_image_widget_custom’ then the width and height are used instead.\u003Cbr \u002F>\nAccepts additional $args and $instance arguments.\u003C\u002Fp>\n\u003Cp>\u003Cem>image_widget_image_align\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Filters the display alignment of the image.\u003Cbr \u002F>\nAccepts additional $args and $instance arguments.\u003C\u002Fp>\n\u003Cp>\u003Cem>image_widget_image_alt\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Filters the alt text of the image.\u003Cbr \u002F>\nAccepts additional $args and $instance arguments.\u003C\u002Fp>\n\u003Cp>\u003Cem>image_widget_image_link\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Filters the url that the image links to.\u003Cbr \u002F>\nAccepts additional $args and $instance arguments.\u003C\u002Fp>\n\u003Cp>\u003Cem>image_widget_image_link_target\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Filters the link target of the image link.\u003Cbr \u002F>\nAccepts additional $args and $instance arguments.\u003C\u002Fp>\n\u003Cp>\u003Cem>image_widget_image_attributes\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Filters a list of image attributes used in the image output. Similar to ‘wp_get_attachment_image_attributes’\u003Cbr \u002F>\nAccepts $instance arguments\u003C\u002Fp>\n\u003Cp>\u003Cem>image_widget_link_attributes\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Filters a list of attributes used in the image link. Similar to ‘wp_get_attachment_image_attributes’\u003Cbr \u002F>\nAccepts $instance arguments\u003C\u002Fp>\n\u003Ch4>Have You Supported the Image Widget?\u003C\u002Fh4>\n\u003Cp>If so, then THANK YOU! Also, feel free to add this line to your wp-config.php file to prevent the image widget from displaying a message after upgrades.\u003C\u002Fp>\n\u003Cp>define( ‘I_HAVE_SUPPORTED_THE_IMAGE_WIDGET’, true );\u003C\u002Fp>\n\u003Cp>For more info on the philosophy here, check out our \u003Ca href=\"http:\u002F\u002Ftri.be\u002Fdefine-i-have-donated-true\u002F\" rel=\"nofollow ugc\">blog post\u003C\u002Fa>\u003C\u002Fp>\n","A simple image widget that uses the native WordPress media manager to add image widgets to your site.",4620377,287,"2024-11-20T20:44:00.000Z","6.7.5","3.5",[125,126,127,20,22],"ad","banner","image","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fimage-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fimage-widget.4.4.11.zip",91,"2024-11-22 00:00:00",{"attackSurface":133,"codeSignals":139,"taintFlows":146,"riskAssessment":147,"analyzedAt":155},{"hooks":134,"ajaxHandlers":135,"restRoutes":136,"shortcodes":137,"cronEvents":138,"entryPointCount":26,"unprotectedCount":26},[],[],[],[],[],{"dangerousFunctions":140,"sqlUsage":141,"outputEscaping":143,"fileOperations":26,"externalRequests":26,"nonceChecks":26,"capabilityChecks":26,"bundledLibraries":145},[],{"prepared":26,"raw":26,"locations":142},[],{"escaped":26,"rawEcho":26,"locations":144},[],[],[],{"summary":148,"deductions":149},"The static analysis of \"curs-valutar-bnr\" v1.0 indicates a generally strong security posture. The plugin demonstrates excellent adherence to secure coding practices, with zero identified dangerous functions, SQL queries using prepared statements exclusively, and all output properly escaped. Furthermore, there are no observed file operations or external HTTP requests, which significantly reduces the attack surface and potential for injection or information disclosure vulnerabilities. The absence of any taint analysis findings, including unsanitized paths, further reinforces this positive assessment.\n\nThe vulnerability history for this plugin is also remarkably clean, with zero known CVEs recorded across all severity levels and no common vulnerability types. This suggests a history of diligent security maintenance and proactive issue resolution by the developers. The fact that there are no recorded vulnerabilities at all is a significant strength.\n\nDespite the overwhelmingly positive findings, the most notable area for improvement lies in the complete absence of capability and nonce checks. While the current analysis shows no entry points without authentication, this is a critical omission for any plugin that might introduce future functionality, particularly AJAX handlers or REST API endpoints. Relying solely on the absence of exposed endpoints currently is a fragile security model. The plugin's strengths are its clean code and development history, but the lack of inherent security checks like nonces and capability checks introduces a potential future risk if the attack surface expands.",[150,153],{"reason":151,"points":152},"Missing nonce checks",10,{"reason":154,"points":152},"Missing capability checks","2026-03-16T22:52:52.784Z",{"wat":157,"direct":165},{"assetPaths":158,"generatorPatterns":160,"scriptPaths":161,"versionParams":163},[159],"\u002Fwp-content\u002Fplugins\u002Fcurs-valutar-bnr\u002Fstyle.css",[],[162],"\u002Fwp-content\u002Fplugins\u002Fcurs-valutar-bnr\u002Fcp\u002Fscript.js",[164],"curs-valutar-bnr\u002Fstyle.css?ver=",{"cssClasses":166,"htmlComments":168,"htmlAttributes":171,"restEndpoints":177,"jsGlobals":178,"shortcodeOutput":183},[167],"valute",[169,170],"START cod - cursul-valutar.net","END cod - cursul-valutar.net",[172,173,174,175,176],"name='titlu_preferat_curs_valutar'","name='valute_alese[]'","name='culoare_curs_valutar'","name='latime_curs_valutar'","value='titlu_preferat_curs_valutar,valute_alese,latime_curs_valutar,culoare_curs_valutar'",[],[179,180,181,182],"titlu_preferat_curs_valutar","valute_alese","latime_curs_valutar","culoare_curs_valutar",[184,185,186],"\u003Ca href=\"http:\u002F\u002Fcursul-valutar.net\u002F\" title=\"Curs Valutar\"","\u003Cscript language=\"JavaScript\" src=\"http:\u002F\u002Fcursul-valutar.net\u002Ff1.php?","\u003Cnoscript>\u003Ca href=\"http:\u002F\u002Fcursul-valutar.net\" title=\"curs valutar\">Curs Valutar BNR\u003C\u002Fa>\u003C\u002Fnoscript>"]