[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIWMkF7gvR8cqz3VomnP1Qi8dJMrmjsqeurYb0tazMis":3,"$fCR4ZIe01daVsDMZ8Z0T-_xlik4_7j4ssSUW99CMXA6Y":159,"$f1dVdIaP5oC84tdauXGGQE9cy7tYtY8LYzFcdkYPHwmY":163},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":16,"download_link":23,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26,"discovery_status":27,"vulnerabilities":28,"developer":29,"crawl_stats":25,"alternatives":35,"analysis":36,"fingerprints":138},"display-realtime-json-data-through-ajax","Display Real Time JSON data with Auto update","1.0","Mahesh Bisen","https:\u002F\u002Fprofiles.wordpress.org\u002Fmaheshbisen\u002F","\u003Ch4>Overview\u003C\u002Fh4>\n\u003Cp>Display real time JSON data on Page\u002FPost using simple ShortCode. It can be used for displaying real time event, data from third party site or application.\u003Cbr \u002F>\nVery user friendly, easy to use and can easily work with nested JSON data as well. You can set auto refresh time to display actual real time data. It can be used to display current song playing on any channel, for displaying real time pricing of any third party portal, real time event price etc.\u003C\u002Fp>\n\u003Ch4>Display Real Time JSON data with Auto update Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Display real time JSON data in preformatted HTML using format string.\u003C\u002Fli>\n\u003Cli>Able to render nested JSON data in simple way.\u003C\u002Fli>\n\u003Cli>Refresh data through AJAX in specified interval.\u003C\u002Fli>\n\u003C\u002Ful>\n","Display real time JSON data on Page\u002FPost using simple ShortCode. It can be used for displaying real time event, data from third party site or applicat …",0,1447,"2018-05-23T05:37:00.000Z","4.9.29","3.0","",[18,19,20,21,22],"display-real-time-event-information","display-real-time-feed","json-data","show-json-data-with-html-formatting","third-party-json-data","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdisplay-realtime-json-data-through-ajax.zip",85,null,"2026-07-22T17:31:50.256Z","no_bundle",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":24,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"maheshbisen",1,30,84,"2026-08-29T13:44:49.528Z",[],{"attackSurface":37,"codeSignals":95,"taintFlows":128,"riskAssessment":129,"analyzedAt":137},{"hooks":38,"ajaxHandlers":71,"restRoutes":86,"shortcodes":87,"cronEvents":92,"entryPointCount":93,"unprotectedCount":94},[39,46,52,57,62,66],{"type":40,"name":41,"callback":42,"priority":43,"file":44,"line":45},"action","admin_menu","drjsondata_admin_menu",20,"admin\u002Fdrjsondata_nav.php",7,{"type":47,"name":48,"callback":49,"priority":50,"file":44,"line":51},"filter","plugin_action_links","drjsondata_plugin_settings_link",10,14,{"type":40,"name":53,"callback":54,"file":55,"line":56},"admin_enqueue_scripts","drjsondata_admin_enqueue","admin\u002Fdrjsondata_settings.php",22,{"type":47,"name":58,"callback":59,"file":60,"line":61},"wpcf7_editor_panels","cf7ccav_editor_panels","admin\u002Ftabs_page.php",21,{"type":40,"name":63,"callback":64,"file":60,"line":65},"wpcf7_after_save","cf7ccav_save_contact_form",73,{"type":40,"name":67,"callback":68,"file":69,"line":70},"wp_enqueue_scripts","drjsondata_submit_scripts","json-realtime-data-ajax.php",48,[72,76,79,84],{"action":73,"nopriv":74,"callback":73,"hasNonce":74,"hasCapCheck":74,"file":55,"line":75},"drjsondata_displayJsonDataPreview",false,158,{"action":77,"nopriv":74,"callback":77,"hasNonce":74,"hasCapCheck":74,"file":55,"line":78},"drjsondata_displayJsonPreview",224,{"action":80,"nopriv":74,"callback":81,"hasNonce":82,"hasCapCheck":74,"file":69,"line":83},"refreshJsonData","drjsondata_myajax_refreshJsonData",true,49,{"action":80,"nopriv":82,"callback":81,"hasNonce":82,"hasCapCheck":74,"file":69,"line":85},50,[],[88],{"tag":89,"callback":90,"file":69,"line":91},"show-json-realtime-data","drjsondata_show_json_realtime_data",212,[],5,2,{"dangerousFunctions":96,"sqlUsage":97,"outputEscaping":99,"fileOperations":11,"externalRequests":126,"nonceChecks":31,"capabilityChecks":31,"bundledLibraries":127},[],{"prepared":11,"raw":11,"locations":98},[],{"escaped":100,"rawEcho":101,"locations":102},8,11,[103,106,108,110,112,114,116,118,120,122,124],{"file":55,"line":104,"context":105},92,"raw output",{"file":55,"line":107,"context":105},94,{"file":55,"line":109,"context":105},98,{"file":55,"line":111,"context":105},99,{"file":55,"line":113,"context":105},120,{"file":55,"line":115,"context":105},219,{"file":55,"line":117,"context":105},250,{"file":60,"line":119,"context":105},67,{"file":69,"line":121,"context":105},133,{"file":69,"line":123,"context":105},154,{"file":69,"line":125,"context":105},208,4,[],[],{"summary":130,"deductions":131},"The \"display-realtime-json-data-through-ajax\" plugin version 1.0 exhibits a mixed security posture. On the positive side, it demonstrates good practices by utilizing prepared statements for all SQL queries and has no recorded vulnerabilities (CVEs) in its history. This suggests a developer who is mindful of common database-related attack vectors and has maintained a clean security track record. However, concerns arise from the attack surface analysis. Specifically, the plugin exposes four AJAX handlers, two of which lack proper authentication checks. This is a significant risk as it allows any unauthenticated user to trigger potentially sensitive actions within the plugin.\n\nWhile taint analysis did not reveal any unsanitized paths or critical\u002Fhigh severity flows, the presence of unprotected AJAX endpoints is a direct vulnerability. Coupled with a low percentage of properly escaped output (42%), there is a potential for Cross-Site Scripting (XSS) attacks if user-supplied data is reflected in the output without adequate sanitization. The plugin also relies on a single nonce check and a single capability check, which, while present, might not be sufficient to protect all sensitive operations, especially given the two unprotected AJAX handlers.\n\nIn conclusion, the plugin has strengths in its SQL handling and lack of historical vulnerabilities. However, the unprotected AJAX handlers and insufficient output escaping present tangible security risks that could be exploited. The limited number of entry points without authentication is the most immediate concern, followed by the output escaping issue. Addressing these specific weaknesses would significantly improve the plugin's overall security.",[132,134],{"reason":133,"points":50},"AJAX handlers without auth checks",{"reason":135,"points":136},"Low percentage of properly escaped output",6,"2026-04-16T14:45:11.004Z",{"wat":139,"direct":147},{"assetPaths":140,"generatorPatterns":144,"scriptPaths":145,"versionParams":146},[141,142,143],"\u002Fwp-content\u002Fplugins\u002Fdisplay-realtime-json-data-through-ajax\u002Fassets\u002Fjs\u002Fload-json-data.js","\u002Fwp-content\u002Fplugins\u002Fdisplay-realtime-json-data-through-ajax\u002Fassets\u002Fcss\u002Fdrjsondata-admin.css","\u002Fwp-content\u002Fplugins\u002Fdisplay-realtime-json-data-through-ajax\u002Fassets\u002Fjs\u002Fadmin.js",[],[141,143],[],{"cssClasses":148,"htmlComments":150,"htmlAttributes":151,"restEndpoints":152,"jsGlobals":153,"shortcodeOutput":156},[149],"file_error",[],[],[],[154,155],"PT_Ajax","drjsondata_object",[157,158],"\u003Cdiv id=\"drjsondataCont\">","\u003C\u002Fdiv>",{"error":82,"url":160,"statusCode":161,"statusMessage":162,"message":162},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fdisplay-realtime-json-data-through-ajax\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":11,"versions":164},[]]