[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQb5ciny1OhqK3-R164aRJq1QmBFVwjuEybzY_WtlC50":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":38,"analysis":139,"fingerprints":231},"display-live-visitors-counter","Display Live Visitors & Counter","1.0","Rajdip Sinha Roy","https:\u002F\u002Fprofiles.wordpress.org\u002Frajdipsinharoy\u002F","\u003Cp>Show How Many Users Are Online On Your WordPress Site.\u003Cbr \u002F>\nUsage and customization possibilities are endless!\u003Cbr \u002F>\nKeep Track In Admin Dashboard.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Show Users Gravatars\u003C\u002Fli>\n\u003Cli>Sidebar Widget – Use Anywhere\u003C\u002Fli>\n\u003Cli>Admin Dashboard – See Online Users in admin\u003C\u002Fli>\n\u003Cli>Track Registered Users\u003C\u002Fli>\n\u003Cli>Theme PHP function get_whos_online()\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>SHORTCODE\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ccode>\u003C?php echo do_shortcode('[who-is-online]'); ?>\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Suggestions\u003C\u002Fh3>\n\u003Cp>The plugin does not change any core files or database.\u003C\u002Fp>\n\u003Cp>If you’re facing any issues:-\u003Cbr \u002F>\nDeactivate the plugin through the ‘Plugins’ screen in WordPress.\u003C\u002Fp>\n\u003Ch3>Translators\u003C\u002Fh3>\n\u003Ch4>Available Languages\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>English\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you can’t find this plugin in your language and want to translate it, use the dedicated tool at [Translating WordPress] (https:\u002F\u002Ftranslate.wordpress.org\u002Flocale\u002Fit\u002Fdefault\u002Fwp-plugins\u002Fdisplay-live-visitors-counter “Translating WordPress”).\u003C\u002Fp>\n\u003Cp>Or, if you have created your own language pack, or have an update for an existing one, you can send it as an email attachment at \u003Cstrong>rajdipsinharoy@yahoo.in\u003C\u002Fstrong>.\u003C\u002Fp>\n","Show How Many Users Are Online On Your Wordpress Site.",100,5025,1,"2020-07-17T14:46:00.000Z","5.4.19","5.0","7.0",[19,20,21,22,23],"counter","display","live","users-online","visitors","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdisplay-live-visitors-counter","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdisplay-live-visitors-counter.1.0.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":26,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"rajdipsinharoy",5,400,30,84,"2026-04-05T10:32:07.792Z",[39,58,77,100,119],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":11,"num_ratings":13,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":52,"tags":53,"homepage":56,"download_link":57,"security_score":11,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"counter-hits","Counter-Hits","2.11","wpgear","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpgear\u002F","\u003Cp>A simple, easy, fast, adaptive, local, objective counter to visit your site.\u003Cbr \u002F>\nIt does not use any additional requests to other servers, which means it consumes minimal resources.\u003Cbr \u002F>\nDisplays the count of all views of any page as a number.\u003Cbr \u002F>\nYou can customize your own display style. Use class: ‘wpgear_counter_hits’\u003C\u002Fp>\n\u003Cp>Just paste Shortcode [Get_Counter_Hits] wherever you like and that’s it.\u003Cbr \u002F>\nOr you can use calls in PHP scripts code: echo get_Counter_Hits ();\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Simple local Counter.\u003C\u002Fli>\n\u003Cli>It always works, even if the result is not displayed anywhere.\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Doesn’t count if Admin Page.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>ShortCode for use: [Get_Counter_Hits]\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>ShortCode for use with correction +100000: [Get_Counter_Hits base=”100000″]\u003C\u002Fli>\n\u003Cli>\n\u003Cp>PHP use: echo get_Counter_Hits ($base);\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>CSS Class ‘wpgear_counter_hits’ – for disign customisation.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Demo\u003C\u002Fh4>\n\u003Cp>\u003Ca>\u003C\u002Fa>You can see the Demo here\u003C\u002Fp>\n","A simple, easy, fast, adaptive, local, objective counter to visit your site.",1000,10567,"2026-01-27T13:00:00.000Z","6.9.4","4.1","5.4",[54,19,55,23],"activity","hits","https:\u002F\u002Fwpgear.xyz\u002Fcounter-hits\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcounter-hits.zip",{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":47,"downloaded":66,"rating":11,"num_ratings":33,"last_updated":67,"tested_up_to":50,"requires_at_least":68,"requires_php":16,"tags":69,"homepage":73,"download_link":74,"security_score":75,"vuln_count":13,"unpatched_count":27,"last_vuln_date":76,"fetched_at":29},"counter-visitor-for-woocommerce","Counter live visitors for WooCommerce","1.4.0","DanielRiera","https:\u002F\u002Fprofiles.wordpress.org\u002Fdanielriera\u002F","\u003Cp>🎉+1.000 Active installations!!🎉\u003C\u002Fp>\n\u003Cblockquote>\n\u003Ch3>Important NOTE\u003C\u002Fh3>\n\u003Cp>If your website uses a cache plugin, you can activate the option ‘Your site use cache system?’, This option will enable an additional call to show the block of active users 🙂\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>It is not a simple visitor counter, this counter is shown on each product with the number of users who are currently viewing that same product\u003C\u002Fp>\n\u003Cp>Navigate to Woocommerce -> Visitor Counter in the administration menu for configure\u003C\u002Fp>\n\u003Cp>You use Elementor or other page builder?\u003C\u002Fp>\n\u003Cp>Try [wcvisitor] shortcode, available from 1.1.2 version\u003C\u002Fp>\n\u003Cp>Since version 1.2.0 the \u003Cstrong>\u003Cem>msgone\u003C\u002Fem>\u003C\u002Fstrong> and \u003Cstrong>\u003Cem>msgmore\u003C\u002Fem>\u003C\u002Fstrong> parameters are included (optionals) to customize the message for each shortcode, example:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>`\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>[wcvisitor msgOne=”Only One” msgMore=”Now %n users on this product”]\u003Cbr \u002F>\n    `\u003C\u002Fp>\n\u003Ch3>Localization\u003C\u002Fh3>\n\u003Cp>Español (Spanish), English (English US)\u003C\u002Fp>\n","Show user count on product",34563,"2026-03-15T01:02:00.000Z","4.3",[19,21,70,71,72],"visitor","visitor-counter","woocommerce","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcounter-visitor-for-woocommerce.1.4.0.zip",98,"2025-07-15 18:17:09",{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":47,"downloaded":85,"rating":86,"num_ratings":87,"last_updated":88,"tested_up_to":89,"requires_at_least":90,"requires_php":73,"tags":91,"homepage":96,"download_link":97,"security_score":75,"vuln_count":98,"unpatched_count":27,"last_vuln_date":99,"fetched_at":29},"visitors-online","Visitors Online by BestWebSoft","1.1.6","bestweblayout","https:\u002F\u002Fprofiles.wordpress.org\u002Fbestweblayout\u002F","\u003Cp>Visitors Online plugin is a helpful tool which displays your website visitors count on WordPress admin dashboard or as a widget in the front-end.\u003Cbr \u002F>\nCustomize and manage your visitor statistic list, see how many visitors are on your website, and the highest level of visits.\u003C\u002Fp>\n\u003Cp>Start tracking your live traffic today!\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fdemo-visitors-online-for-wordpress\u002F?ref=readme\" rel=\"nofollow ugc\">View Demo\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F7e6LzyRzxwA?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch4>Free Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Automatically display visitor statistics on your dashboard\u003C\u002Fli>\n\u003Cli>Add visitor statistics to widgets\u003C\u002Fli>\n\u003Cli>Set the time when the visitor is considered being online without making any actions\u003C\u002Fli>\n\u003Cli>Customize the structure for data input\u003C\u002Fli>\n\u003Cli>Reset the statistics table\u003C\u002Fli>\n\u003Cli>Add custom code via plugin settings page\u003C\u002Fli>\n\u003Cli>Compatible with latest WordPress version\u003C\u002Fli>\n\u003Cli>Incredibly simple settings for fast setup without modifying code\u003C\u002Fli>\n\u003Cli>Detailed step-by-step documentation and videos\u003C\u002Fli>\n\u003Cli>Multilingual and RTL ready\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Pro Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>All features from Free version included plus:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Automatically download and update list of countries and IP addresses\u003C\u002Fli>\n\u003Cli>Display detailed user information\u003C\u002Fli>\n\u003Cli>Displays online users\u003C\u002Fli>\n\u003Cli>Get answer to your question within one business day (\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fsupport-policy\u002F\" rel=\"nofollow ugc\">Support Policy\u003C\u002Fa>)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fproducts\u002Fwordpress\u002Fplugins\u002Fvisitors-online\u002F?k=a58d73e5dee0c701959b47ea355c6e5b\" rel=\"nofollow ugc\">Upgrade to Pro Now\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>If you have a feature suggestion or idea you’d like to see in the plugin, we’d love to hear about it! \u003Ca href=\"https:\u002F\u002Fsupport.bestwebsoft.com\u002Fhc\u002Fen-us\u002Frequests\u002Fnew\" rel=\"nofollow ugc\">Suggest a Feature\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Documentation & Videos\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.google.com\u002Fdocument\u002Fd\u002F1FaTnRsYs64adPiRz_REGH9u0pOPz2flCL4gi49qdfaw\" rel=\"nofollow ugc\">[Doc] User Guide\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.google.com\u002Fdocument\u002Fd\u002F1-hvn6WRvWnOqj5v5pLUk7Awyu87lq5B_dO-Tv-MC9JQ\u002F\" rel=\"nofollow ugc\">[Doc] Installation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.google.com\u002Fdocument\u002Fd\u002F1EUdBVvnm7IHZ6y0DNyldZypUQKpB8UVPToSc_LdOYQI\u002F\" rel=\"nofollow ugc\">[Doc] Purchase\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=izPS7Tbgxqg\" rel=\"nofollow ugc\">[Video] Installation Instruction\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Help & Support\u003C\u002Fh4>\n\u003Cp>Visit our Help Center if you have any questions, our friendly Support Team is happy to help — \u003Ca href=\"https:\u002F\u002Fsupport.bestwebsoft.com\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fsupport.bestwebsoft.com\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Translation\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Arabic (ar) (thanks to \u003Ca href=\"mailto:support@saidmoulla.com\" rel=\"nofollow ugc\">Said Moulla\u003C\u002Fa>, www.SaidMoulla.com)\u003C\u002Fli>\n\u003Cli>Czech (cs_CZ) (thanks to \u003Ca href=\"mailto:info@pamadessoft.cz\" rel=\"nofollow ugc\">PaMaDeSSoft\u003C\u002Fa>, www.pamadessoft.cz)\u003C\u002Fli>\n\u003Cli>Italian (it_IT) (thanks to \u003Ca href=\"mailto:dromar030186@gmail.com\" rel=\"nofollow ugc\">Dromar\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>Russian (ru_RU)\u003C\u002Fli>\n\u003Cli>Ukrainian (uk)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Some of these translations are not complete. We are constantly adding new features which should be translated. If you would like to create your own language pack or update the existing one, you can send \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FTranslating_WordPress\" rel=\"nofollow ugc\">the text of PO and MO files\u003C\u002Fa> to \u003Ca href=\"https:\u002F\u002Fsupport.bestwebsoft.com\u002Fhc\u002Fen-us\u002Frequests\u002Fnew\" rel=\"nofollow ugc\">BestWebSoft\u003C\u002Fa> and we’ll add it to the plugin. You can download the latest version of the program for work with PO and MO \u003Ca href=\"https:\u002F\u002Fwww.poedit.net\u002Fdownload.php\" rel=\"nofollow ugc\">files Poedit\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Recommended Plugins\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fproducts\u002Fwordpress\u002Fplugins\u002Fupdater\u002F?k=c2bb0350098ca869742b01301148f8f8\" rel=\"nofollow ugc\">Updater\u003C\u002Fa> – Automatically check and update WordPress website core with all installed plugins and themes to the latest versions.\u003C\u002Fli>\n\u003C\u002Ful>\n","Display live count of online visitors who are currently browsing your WordPress website.",82113,70,11,"2025-06-09T12:27:00.000Z","6.8.5","5.6",[92,93,94,78,95],"count-visitor","guests","guests-counter","visitors-online-plugin","https:\u002F\u002Fbestwebsoft.com\u002Fproducts\u002Fwordpress\u002Fplugins\u002Fvisitors-online\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvisitors-online.1.1.6.zip",2,"2017-04-12 00:00:00",{"slug":101,"name":102,"version":6,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":107,"downloaded":108,"rating":109,"num_ratings":110,"last_updated":111,"tested_up_to":112,"requires_at_least":113,"requires_php":73,"tags":114,"homepage":73,"download_link":118,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"simple-visitor-counter-widget","Simple Visitor Counter","plugindeveloper112","https:\u002F\u002Fprofiles.wordpress.org\u002Fplugindeveloper112\u002F","\u003Cp>The Simple Visitor Counter widget displays a daily, weekly and monthly visitor count. Count your up to date traffic safely and show your current visitors.\u003Cbr \u002F>\nMore info? Visit: \u003Ca href=\"http:\u002F\u002Fsimplevisitorcounter.info\" rel=\"nofollow ugc\">simplevisitorcounter.info\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>You can simply download and install the Simple Visitor Counter widget through the WordPress directory and install it in any widget, sidebar or footer that your theme allows.\u003C\u002Fp>\n\u003Cp>The Best Visitor Counter Plugin for WP:\u003Cbr \u002F>\nFully-compatible with WordPress!\u003C\u002Fp>\n\u003Cp>Easy to use and setup in seconds\u003C\u002Fp>\n\u003Cp>Downloading the Simple Visitor Counter widget is super easy. Simply click on the download and extract the documents from the .zip file.\u003C\u002Fp>\n\u003Cp>No third-parties required!\u003Cbr \u002F>\nIt’s FREE!\u003C\u002Fp>\n\u003Cp>There is no sign up or signing in to to any service.\u003Cbr \u002F>\nDownload the Simple Visitor Counter now to start promoting the traffic you have on your website!\u003C\u002Fp>\n","The Simple Visitor Counter widget displays a daily, weekly and monthly visitor count. Count your up to date traffic safely and show your current visit …",800,32906,90,6,"2017-02-09T20:50:00.000Z","4.7.32","3.0.1",[115,116,19,117,71],"count-visitors","count-website-visitors","counter-visitors","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-visitor-counter-widget.zip",{"slug":120,"name":121,"version":122,"author":123,"author_profile":124,"description":125,"short_description":126,"active_installs":127,"downloaded":128,"rating":27,"num_ratings":27,"last_updated":129,"tested_up_to":130,"requires_at_least":131,"requires_php":73,"tags":132,"homepage":137,"download_link":138,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"traffic-counter-widget","Plugin Name: Traffic Counter Widget Plugin","2.1.2","aviaxis","https:\u002F\u002Fprofiles.wordpress.org\u002Faviaxis\u002F","\u003Cp>TCW shows the number of visitors \u002F hits \u002F unique IPs in the past 24 hours, 7 days and 30 days. It also shows the number of users currently online.\u003C\u002Fp>\n\u003Cp>It provides a robots filter, but the automatic traffic could also be considered.\u003C\u002Fp>\n\u003Cp>Traffic Counter Widget offers language support and automatic log deletion.\u003C\u002Fp>\n\u003Cp>For help or reporting bugs please refer to: http:\u002F\u002Fwww.pixme.org\u002Ftehnologie-internet\u002Fwordpress-traffic-counter-widget\u002F4228\u003C\u002Fp>\n\u003Ch3>Other\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>You may use the code any way you wish, with respect to the WordPress general licensing rules. However I do not guaratee anythig, of course 🙂 \u003C\u002Fli>\n\u003Cli>Please do not remove the link to the plugin’s page unless you donate. Help me keep it free.\u003C\u002Fli>\n\u003Cli>If you enjoy it, and find it useful please donete 2 Euro here: http:\u002F\u002Fwww.pixme.org\u002Fwp-content\u002Fuploads\u002Fwidget-traffic-counter\u002F\u003C\u002Fli>\n\u003C\u002Ful>\n","TCW lets your users know how much traffic you have on your blog. It counts pages visited, hits and unique IPs on your blog and shows it in a widget.",700,75359,"2017-11-28T21:17:00.000Z","3.2.1","2.8.0",[133,134,135,136],"traffic-counter","traffic-widget","user-traffic","visitors-counter","http:\u002F\u002Fwww.pixme.org\u002Fwp-content\u002Fuploads\u002Fwidget-traffic-counter\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftraffic-counter-widget.zip",{"attackSurface":140,"codeSignals":177,"taintFlows":216,"riskAssessment":217,"analyzedAt":230},{"hooks":141,"ajaxHandlers":173,"restRoutes":174,"shortcodes":175,"cronEvents":176,"entryPointCount":27,"unprotectedCount":27},[142,148,153,158,162,166,169],{"type":143,"name":144,"callback":145,"file":146,"line":147},"action","admin_footer","warning","display-live-visitors-counter.php",31,{"type":149,"name":150,"callback":151,"file":146,"line":152},"filter","widget_text","do_shortcode",38,{"type":149,"name":154,"callback":155,"priority":156,"file":146,"line":157},"manage_users_columns","users_columns",10,41,{"type":143,"name":159,"callback":160,"priority":156,"file":146,"line":161},"manage_users_custom_column","users_columns_last_visit",42,{"type":143,"name":163,"callback":164,"file":146,"line":165},"wp_dashboard_setup","add_dashboard_widget",43,{"type":143,"name":167,"callback":167,"file":146,"line":168},"init",296,{"type":143,"name":170,"callback":171,"file":146,"line":172},"widgets_init","wf_register_widgets",297,[],[],[],[],{"dangerousFunctions":178,"sqlUsage":179,"outputEscaping":184,"fileOperations":27,"externalRequests":27,"nonceChecks":27,"capabilityChecks":27,"bundledLibraries":215},[],{"prepared":27,"raw":13,"locations":180},[181],{"file":146,"line":182,"context":183},182,"$wpdb->get_results() with variable interpolation",{"escaped":27,"rawEcho":185,"locations":186},17,[187,190,192,194,196,198,200,202,203,205,206,207,209,210,211,213,214],{"file":146,"line":188,"context":189},58,"raw output",{"file":146,"line":191,"context":189},238,{"file":146,"line":193,"context":189},240,{"file":146,"line":195,"context":189},244,{"file":146,"line":197,"context":189},246,{"file":146,"line":199,"context":189},249,{"file":146,"line":201,"context":189},267,{"file":146,"line":201,"context":189},{"file":146,"line":204,"context":189},268,{"file":146,"line":204,"context":189},{"file":146,"line":204,"context":189},{"file":146,"line":208,"context":189},272,{"file":146,"line":208,"context":189},{"file":146,"line":208,"context":189},{"file":146,"line":212,"context":189},275,{"file":146,"line":212,"context":189},{"file":146,"line":212,"context":189},[],[],{"summary":218,"deductions":219},"The plugin \"display-live-visitors-counter\" v1.0 exhibits a generally concerning security posture despite its minimal attack surface. While the static analysis indicates no exposed entry points like AJAX handlers, REST API routes, or shortcodes without authentication checks, this is heavily overshadowed by critical code quality issues. A significant concern is the complete lack of proper output escaping across all identified outputs, meaning any data processed by the plugin and displayed to users is potentially vulnerable to cross-site scripting (XSS) attacks. Furthermore, the presence of SQL queries that are not using prepared statements introduces a risk of SQL injection vulnerabilities, particularly if user-supplied data is involved in these queries. The absence of nonce and capability checks further exacerbates these risks by providing attackers with easier avenues to exploit potential weaknesses. The plugin's vulnerability history, showing no known CVEs, is a positive sign but does not mitigate the inherent risks identified in its current codebase. The lack of any recorded vulnerabilities could also indicate a lack of rigorous security auditing or simply that the plugin has not been a target of widespread exploitation due to its limited functionality or user base, rather than indicating inherent strength. In conclusion, while the plugin has a small attack surface, the critical flaws in output escaping and the use of raw SQL queries represent significant security weaknesses that require immediate attention. The absence of proper authorization checks on any potential, albeit unadvertised, data processing points further adds to the risk profile.",[220,223,226,228],{"reason":221,"points":222},"SQL queries not using prepared statements",8,{"reason":224,"points":225},"All outputs unescaped",7,{"reason":227,"points":33},"No nonce checks",{"reason":229,"points":33},"No capability checks","2026-03-16T21:08:15.472Z",{"wat":232,"direct":237},{"assetPaths":233,"generatorPatterns":234,"scriptPaths":235,"versionParams":236},[],[],[],[],{"cssClasses":238,"htmlComments":239,"htmlAttributes":241,"restEndpoints":244,"jsGlobals":245,"shortcodeOutput":246},[],[240],"\u003C!-- 5sec Who's Online is not active! -->",[242,243],"id=\"whois_disp_dashboard_widget\"","id=\"message\" class=\"error\"",[],[],[247,248,249],"\u003Cli>Total users online: {total_cnt}\u003C\u002Fli>","\u003Cli>Guests online: {guests_cnt}\u003C\u002Fli>","\u003Cli>Logged in users online: {loggedin_cnt}; {loggedin_list_links}\u003C\u002Fli>"]