[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLvZT4MpLQHT13NXxLm71IWls6cfHKLpn84VitqNX99g":3,"$frmyqJ9TXYIyb7gNe3PxDih_npqt91rOOqSYOdcbF9nQ":366,"$fQmcGwVmEF-PWNYrsFNhUOSv_NoxCt3tAmY-cFIyKTVM":370},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"discovery_status":31,"vulnerabilities":32,"developer":33,"crawl_stats":29,"alternatives":39,"analysis":130,"fingerprints":298},"flexible-posts-widget","Flexible Posts Widget","3.5.0","DaveE","https:\u002F\u002Fprofiles.wordpress.org\u002Fdpe415\u002F","\u003Cp>The default Recent Posts widget is exceptionally basic. I always find myself in need of a way to easily display a selection of posts from any combination post type or taxonomy. Hence, Flexible Posts Widget.\u003C\u002Fp>\n\u003Cp>Flexible Posts Widget (FPW) is more than just a simple alternative to the default Recent Posts widget.  With many per-instance options it is highly customizable and allows advanced users to display the resulting posts virtually any way imaginable.\u003C\u002Fp>\n\u003Ch4>Features & options\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Customizable widget title\u003C\u002Fli>\n\u003Cli>Get posts by post type(s) and\u002For taxonomy & term(s) or directly by a list of post IDs.\u003C\u002Fli>\n\u003Cli>Control the number of posts displayed and the number of posts to offset.\u003C\u002Fli>\n\u003Cli>Option to display the post feature image.\u003C\u002Fli>\n\u003Cli>Select the post feature image size to display from existing image sizes: thumbnail, medium, large, post-thumbnail or any size defined by the current theme.\u003C\u002Fli>\n\u003Cli>Order posts by: date, modified date, ID, title, menu order, random, Post ID Order; and sort posts: ascending or descending.\u003C\u002Fli>\n\u003Cli>Each widget’s output can be customized by user-defined templates added to the current theme folder.\u003C\u002Fli>\n\u003Cli>Multi Language support. Compatible with \u003Ca href=\"http:\u002F\u002Fwpml.org\u002F\" rel=\"nofollow ugc\">WPML\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpolylang\u002F\" rel=\"ugc\">PolyLang\u003C\u002Fa> for sure. Not tested with other multi-language plugins, but it should work.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Plugin Hooks\u003C\u002Fh4>\n\u003Cp>Flexible posts widget currently has two public hooks:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Filter: \u003Ca href=\"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fbrowser\u002Fflexible-posts-widget\u002Ftrunk\u002Fincludes\u002Fclass-fpw-widget.php#L191\" rel=\"nofollow ugc\">\u003Ccode>dpe_fpw_args\u003C\u002Fcode>\u003C\u002Fa> allows filtering the query vars before submitting the widget posts query.\u003C\u002Fli>\n\u003Cli>Filter: \u003Ca href=\"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fbrowser\u002Fflexible-posts-widget\u002Ftrunk\u002Fincludes\u002Fclass-fpw-widget.php#L354\" rel=\"nofollow ugc\">\u003Ccode>dpe_fpw_template_{$template_name}\u003C\u002Fcode>\u003C\u002Fa> filters the template file path used to display the widget output.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Future updates & feature requests list\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Use search box instead of ID text field for post id’s\u003C\u002Fli>\n\u003Cli>Shortcode functionality.\u003C\u002Fli>\n\u003Cli>Get posts by Author.\u003C\u002Fli>\n\u003Cli>Filter out the post currently being viewed.\u003C\u002Fli>\n\u003Cli>Get posts from the same archive (term\u002Fpost type\u002Fetc).\u003C\u002Fli>\n\u003Cli>Limit results by a time period.\u003C\u002Fli>\n\u003C\u002Ful>\n","An advanced posts display widget with many options. Display posts in your sidebars any way you'd like!",8000,214392,92,57,"2017-11-28T09:10:00.000Z","4.7.33","3.2","",[20,21,22,23,24],"categories","posts","tags","widget","widgets","http:\u002F\u002Fflexiblepostswidget.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.3.5.0.zip",85,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":34,"display_name":7,"profile_url":8,"plugin_count":35,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":36,"trust_score":37,"computed_at":38},"dpe415",1,30,84,"2026-05-19T18:32:11.482Z",[40,61,80,99,115],{"slug":41,"name":42,"version":43,"author":44,"author_profile":45,"description":46,"short_description":47,"active_installs":48,"downloaded":49,"rating":50,"num_ratings":51,"last_updated":52,"tested_up_to":53,"requires_at_least":54,"requires_php":18,"tags":55,"homepage":57,"download_link":58,"security_score":59,"vuln_count":51,"unpatched_count":28,"last_vuln_date":60,"fetched_at":30},"essential-widgets","Essential Widgets","3.0.1","Catch Themes","https:\u002F\u002Fprofiles.wordpress.org\u002Fcatchthemes\u002F","\u003Cp>Essential Widgets – a free WordPress plugin for widgets allows you to create and add interesting widgets on your website to make it more attractive and welcoming. Essential Widgets stays true to the essence of its name and offers exactly what you expect from a widgets plugin—all the “essential” widgets for your website. The plugin has been crafted beautifully to draw the extra attention to the important parts of your website. Essential Widgets provides you with the ability to have more control over the widgets with the various customization options. This free WordPress plugin for widgets allows you to create 7 different interesting widgets on your website. All the 7 widgets provided to you comes with so many customization options and are very easy to use. So, with Essential Widgets plugin, customize the interesting widgets your way and display them anywhere you want on your website to make it more dynamic.\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>EW: Archives\u003Cbr \u002F>\nThe Archives widget comes with various customization options. Choose a title, limit the number of posts, select the archive type, post type, order and more with the Archives widget.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>EW: Authors\u003Cbr \u002F>\nDisplaying the author’s information is kind of a must-have feature if your website has multiple authors. Our new WordPress widgets plugin allows you to add Authors widget. With this widget, you can show the list of the authors on your website, the number of posts, select feed type, and more.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>EW: Categories\u003Cbr \u002F>\nEssential Widgets Pro supports Categories widget. The widget provides you with various customizable options such as the title of the widget, taxonomy option, order option, number of categories to show, display as a list or none, number of posts to display, sort by option, select feed type ton display and display as text or image.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>EW: Menus\u003Cbr \u002F>\nBored with the same default menu? Our new WordPress plugin for widgets, Essential Widgets Pro supports Menus widget. With the Menus widget filled with various customization options, you can display your menus elegantly anywhere you want on your website.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>EW: Pages\u003Cbr \u002F>\nDisplay a list of pages with the Pages widget. With various customization options being provided to you, you can showcase the pages that are more important on your website wherever you want with Essential Widgets Pro.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>EW: Posts\u003Cbr \u002F>\nEssential Widgets Pro supports Posts widget. With the widget and its customizable options, you can easily display a list of posts on your website. You can add a title, select the post type, number of items to display, order, sort by, and more.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>EW: Tags\u003Cbr \u002F>\nAnd last, but definitely not the least, the Tags widget. You can display a list of tags as cloud or list, select the order of the tags, sort by option and the number of items to be displayed. The widget also provides you with more customization options including the unit, separator, search, text type, and more.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cp>To translate the plugin, use translate.wordpress.org (GlotPress). You only need your WordPress.org account to join the collaborative translation project.\u003C\u002Fp>\n\u003Cp>You can translate Essential Widgets on \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fessential-widgets\u002F\" rel=\"nofollow ugc\">translate.wordpress.org\u003C\u002Fa>.\u003C\u002Fp>\n","Essential Widgets is a WordPress plugin for widgets that allows you to create and add amazing widgets with high customization option",10000,490680,70,2,"2026-01-26T17:59:00.000Z","6.9.4","5.9",[20,56,21,22,24],"pages","https:\u002F\u002Fcatchplugins.com\u002Fplugins\u002Fessential-widgets\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fessential-widgets.3.0.1.zip",98,"2026-02-04 18:41:50",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":71,"num_ratings":51,"last_updated":72,"tested_up_to":73,"requires_at_least":74,"requires_php":18,"tags":75,"homepage":78,"download_link":79,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"most-popular-tags","Most Popular Tags","5.1","maxpagels","https:\u002F\u002Fprofiles.wordpress.org\u002Fmaxpagels\u002F","\u003Cp>Most Popular Tags is a WordPress plugin that allows you to display your blog’s most popular tags or categories as a sidebar widget. The plugin takes advantage of the new Widget API introduced in WordPress 2.8, allowing multiple instances of the same widget, each with it’s own unique configuration. You can specify how many tags\u002Fcategories\u002Flink categories to show, the size of the smallest and largest ones, which unit and format to use as well as advanced ordering options.\u003C\u002Fp>\n","Most Popular Tags is a plugin that displays your WordPress site's most popular tags, categories and custom taxonomies as a sidebar widget.",300,38119,100,"2015-07-30T12:16:00.000Z","4.2.39","2.9",[20,76,77,22,24],"popular","tagcloud","http:\u002F\u002Fwww.maxpagels.com\u002Fprojects\u002Fmptags","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmost-popular-tags.zip",{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":88,"downloaded":89,"rating":28,"num_ratings":28,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":18,"tags":93,"homepage":95,"download_link":96,"security_score":97,"vuln_count":35,"unpatched_count":35,"last_vuln_date":98,"fetched_at":30},"sensitive-tag-cloud","SensitiveTagCloud","1.4.1","reneade","https:\u002F\u002Fprofiles.wordpress.org\u002Freneade\u002F","\u003Cp>This wordpress plugin provides a configurable tagcloud that shows tags depending of the current context only. For example the tagcloud shows only tags that really occur in the current category, or within the current date-, author-, tag- archive or even only the tags that occur in the search results.\u003Cbr \u002F>\nIt is also possible to restrict the links of the tag cloud to the current viewing tag archive or category: If you click on the tag “test1” within the tag cloud of the tag archive of “test2” the target page will only contain posts that have both tags, like a drill down navigation. It is possible to exclude the tag of the tag-archive itself from the tagcloud.\u003Cbr \u002F>\nFor the single post pages you can configure the tagcloud to show also related tags of the current posts, not only the direct tags of the post. And you can configure the tagcloud to exclude the tag of the current post, to show only the related tags.\u003Cbr \u002F>\nThe style and sizes of the tagcloud can be configured, and the widget can be configured to be only visible if viewing a tag archive, category, a sinlge post or even only if viewing the searchresults for example. It is also possible to configure the number of tags that should be displayed in the different conditions.\u003C\u002Fp>\n\u003Cp>Plugin Website: http:\u002F\u002Fwww.rene-ade.de\u002Finhalte\u002Fwordpress-plugin-sensitivetagcloud.html\u003Cbr \u002F>\nDonations: http:\u002F\u002Fwww.rene-ade.de\u002Fstichwoerter\u002Fspenden\u003C\u002Fp>\n\u003Ch3>Update\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Deactivate the Plugin\u003C\u002Fli>\n\u003Cli>Remove the existing folder ‘sensitive-tag-cloud’ with all files from the ‘wp-content\u002Fplugins’ folder on your webserver\u003C\u002Fli>\n\u003Cli>Upload the new folder ‘sensitive-tag-cloud’ with all files to ‘\u002Fwp-content\u002Fplugins’ on your webserver\u003C\u002Fli>\n\u003Cli>Activate the plugin through the ‘Plugins’ menu in WordPress\u003C\u002Fli>\n\u003C\u002Fol>\n","This wordpress plugin provides a tagcloud that shows tags depending of the current context (e.g. Category, Author, Tag, Post) only.",50,15146,"2009-06-25T01:17:00.000Z","2.99999","2.3",[20,21,94,22,23],"sidebar","http:\u002F\u002Fwww.rene-ade.de\u002Finhalte\u002Fwordpress-plugin-sensitivetagcloud.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsensitive-tag-cloud.zip",63,"2025-12-31 00:00:00",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":36,"downloaded":107,"rating":71,"num_ratings":35,"last_updated":108,"tested_up_to":109,"requires_at_least":110,"requires_php":18,"tags":111,"homepage":113,"download_link":114,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"locus","Locus","1.0","Diana K. Cury","https:\u002F\u002Fprofiles.wordpress.org\u002Fdianakc\u002F","\u003Cp>List post from a specific category with options like date format, link text, order and more. Locus is a very simple plugin for display content in diferrent ways:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Display a single post, page or any available post type.\u003C\u002Fli>\n\u003Cli>Display full content or the excerpt, or both!\u003C\u002Fli>\n\u003Cli>Category descriptions are visible by default, if any.\u003C\u002Fli>\n\u003Cli>Configure date format, link text or hide them all.\u003C\u002Fli>\n\u003Cli>Use styles for every block, (refer the stylesheet in \u003Ccode>locus\u002Fcontrol\u002Flocus-style.css\u003C\u002Fcode>)\u003C\u002Fli>\n\u003Cli>Set display post orders, such random, by date, by author, comment count (popularity) etc\u003C\u002Fli>\n\u003Cli>Display thumbnails, if available\u003C\u002Fli>\n\u003Cli>Easy to use: you don’t have to learn to use it\u003C\u002Fli>\n\u003Cli>Settings per widget, so you can have different widgets.\u003C\u002Fli>\n\u003C\u002Ful>\n","Locus allows you display any post, page or post type in widgetized areas of you site.",5937,"2014-04-17T04:04:00.000Z","3.9.40","3.0",[20,56,112,21,24],"post-types","http:\u002F\u002Fdianakcury.com\u002Fdev\u002Flocus","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flocus.zip",{"slug":116,"name":117,"version":102,"author":118,"author_profile":119,"description":120,"short_description":121,"active_installs":122,"downloaded":123,"rating":71,"num_ratings":35,"last_updated":124,"tested_up_to":125,"requires_at_least":126,"requires_php":18,"tags":127,"homepage":128,"download_link":129,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"minimalist-tag-cloud","Minimalist Tag Cloud","saucecode","https:\u002F\u002Fprofiles.wordpress.org\u002Fhoongmooi\u002F","\u003Cp>Minimalist Tag Cloud is a WordPress plugin that allows you to display your website’s most popular tags, categories or custom taxonomies as a widget or using a shortcode.\u003Cbr \u002F>\nThe plugin styles the tag cloud in a minimalist style with the option to include tag count.\u003C\u002Fp>\n\u003Cp>You can use Minimalist Tag Cloud as a widget or shortcode.\u003C\u002Fp>\n\u003Cp>There are a number of options that you can customise:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>number of items (tags) to show\u003C\u002Fli>\n\u003Cli>type of taxonomies (tags \u002F categories \u002F custom taxonomies) to show \u003C\u002Fli>\n\u003Cli>include\u002Fexclude a list of tags\u003C\u002Fli>\n\u003Cli>smallest and largest font sizes\u003C\u002Fli>\n\u003Cli>font size unit\u003C\u002Fli>\n\u003Cli>display format (flat \u002F list)\u003C\u002Fli>\n\u003Cli>flat format separator\u003C\u002Fli>\n\u003Cli>order by and order\u003C\u002Fli>\n\u003Cli>show\u002Fhide tag count\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Check ‘Installation’ tab for details on how to embed the shortcode.\u003C\u002Fp>\n","Customisable widget and shortcode to display tag cloud with option to show tag count anywhere you want.",20,2136,"2017-11-12T07:29:00.000Z","4.9.29","4.6",[20,76,77,22,24],"http:\u002F\u002Fwww.saucecode.com.sg\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fminimalist-tag-cloud.zip",{"attackSurface":131,"codeSignals":167,"taintFlows":287,"riskAssessment":288,"analyzedAt":297},{"hooks":132,"ajaxHandlers":158,"restRoutes":164,"shortcodes":165,"cronEvents":166,"entryPointCount":35,"unprotectedCount":35},[133,139,143,147,150,154],{"type":134,"name":135,"callback":136,"priority":35,"file":137,"line":138},"action","wp_loaded","maybe_update","flexible-posts-widget.php",132,{"type":134,"name":140,"callback":141,"file":137,"line":142},"init","load_plugin_textdomain",135,{"type":134,"name":144,"callback":145,"file":137,"line":146},"admin_enqueue_scripts","enqueue_admin_styles",138,{"type":134,"name":144,"callback":148,"file":137,"line":149},"enqueue_admin_scripts",139,{"type":134,"name":151,"callback":152,"file":137,"line":153},"widgets_init","register_widgets",142,{"type":134,"name":135,"callback":155,"file":156,"line":157},"setup_defaults","includes\\class-fpw-widget.php",123,[159],{"action":160,"nopriv":161,"callback":162,"hasNonce":161,"hasCapCheck":161,"file":156,"line":163},"dpe_fp_get_terms",false,"terms_checklist",126,[],[],[],{"dangerousFunctions":168,"sqlUsage":169,"outputEscaping":171,"fileOperations":28,"externalRequests":28,"nonceChecks":35,"capabilityChecks":285,"bundledLibraries":286},[],{"prepared":28,"raw":28,"locations":170},[],{"escaped":172,"rawEcho":50,"locations":173},7,[174,177,179,182,184,185,186,188,190,191,192,194,196,197,199,201,203,205,207,208,210,211,213,215,216,217,219,221,222,224,226,228,229,230,231,233,234,235,237,239,240,242,243,245,246,247,249,250,252,253,255,257,259,260,262,263,265,266,267,268,269,271,273,275,277,278,280,282,283,284],{"file":156,"line":175,"context":176},404,"raw output",{"file":156,"line":178,"context":176},423,{"file":180,"line":181,"context":176},"views\\admin.php",15,{"file":180,"line":183,"context":176},16,{"file":180,"line":183,"context":176},{"file":180,"line":183,"context":176},{"file":180,"line":187,"context":176},24,{"file":180,"line":189,"context":176},26,{"file":180,"line":189,"context":176},{"file":180,"line":189,"context":176},{"file":180,"line":193,"context":176},28,{"file":180,"line":195,"context":176},29,{"file":180,"line":36,"context":176},{"file":180,"line":198,"context":176},31,{"file":180,"line":200,"context":176},34,{"file":180,"line":202,"context":176},38,{"file":180,"line":204,"context":176},40,{"file":180,"line":206,"context":176},41,{"file":180,"line":206,"context":176},{"file":180,"line":209,"context":176},45,{"file":180,"line":209,"context":176},{"file":180,"line":212,"context":176},60,{"file":180,"line":214,"context":176},62,{"file":180,"line":97,"context":176},{"file":180,"line":97,"context":176},{"file":180,"line":218,"context":176},68,{"file":180,"line":220,"context":176},77,{"file":180,"line":220,"context":176},{"file":180,"line":223,"context":176},78,{"file":180,"line":225,"context":176},81,{"file":180,"line":227,"context":176},82,{"file":180,"line":227,"context":176},{"file":180,"line":227,"context":176},{"file":180,"line":27,"context":176},{"file":180,"line":232,"context":176},86,{"file":180,"line":232,"context":176},{"file":180,"line":232,"context":176},{"file":180,"line":236,"context":176},89,{"file":180,"line":238,"context":176},90,{"file":180,"line":238,"context":176},{"file":180,"line":241,"context":176},93,{"file":180,"line":241,"context":176},{"file":180,"line":244,"context":176},99,{"file":180,"line":71,"context":176},{"file":180,"line":71,"context":176},{"file":180,"line":248,"context":176},103,{"file":180,"line":248,"context":176},{"file":180,"line":251,"context":176},112,{"file":180,"line":251,"context":176},{"file":180,"line":254,"context":176},113,{"file":180,"line":256,"context":176},116,{"file":180,"line":258,"context":176},117,{"file":180,"line":258,"context":176},{"file":180,"line":261,"context":176},120,{"file":180,"line":261,"context":176},{"file":180,"line":264,"context":176},129,{"file":180,"line":138,"context":176},{"file":180,"line":138,"context":176},{"file":180,"line":142,"context":176},{"file":180,"line":142,"context":176},{"file":270,"line":181,"context":176},"views\\default.php",{"file":270,"line":272,"context":176},18,{"file":270,"line":274,"context":176},25,{"file":270,"line":276,"context":176},33,{"file":270,"line":209,"context":176},{"file":279,"line":183,"context":176},"views\\widget.php",{"file":279,"line":281,"context":176},19,{"file":279,"line":189,"context":176},{"file":279,"line":200,"context":176},{"file":279,"line":88,"context":176},3,[],[],{"summary":289,"deductions":290},"The \"flexible-posts-widget\" plugin, version 3.5.0, exhibits a mixed security posture. On the positive side, the plugin demonstrates good practices by avoiding dangerous functions, using prepared statements for all SQL queries, and having no known unpatched vulnerabilities. The absence of recorded vulnerabilities and a clean taint analysis further suggest a generally well-maintained codebase.\n\nHowever, significant concerns arise from the attack surface analysis. The plugin exposes a single AJAX handler without authentication checks. This unprotected entry point presents a critical risk, as any unauthenticated user could potentially interact with this handler, leading to unintended actions or information disclosure. While the output escaping is a concern (only 9% properly escaped), its impact is mitigated by the lack of critical taint flows and the single, unprotected AJAX handler. The presence of nonces and capability checks for some operations is a positive but does not address the fundamental issue of an unauthenticated AJAX endpoint.\n\nIn conclusion, while the plugin's vulnerability history and SQL handling are commendable, the unprotected AJAX handler is a severe weakness that needs immediate attention. The low percentage of properly escaped output also warrants review to prevent potential cross-site scripting (XSS) vulnerabilities, especially in conjunction with user-controllable data passed through the unprotected AJAX handler.",[291,294],{"reason":292,"points":293},"Unprotected AJAX handler",10,{"reason":295,"points":296},"Low percentage of properly escaped output",5,"2026-03-16T17:56:03.904Z",{"wat":299,"direct":312},{"assetPaths":300,"generatorPatterns":303,"scriptPaths":304,"versionParams":307},[301,302],"\u002Fwp-content\u002Fplugins\u002Fflexible-posts-widget\u002Fcss\u002Fadmin-style.css","\u002Fwp-content\u002Fplugins\u002Fflexible-posts-widget\u002Fcss\u002Fstyle.css",[],[305,306],"\u002Fwp-content\u002Fplugins\u002Fflexible-posts-widget\u002Fjs\u002Fadmin-script.js","\u002Fwp-content\u002Fplugins\u002Fflexible-posts-widget\u002Fjs\u002Fscript.js",[308,309,310,311],"flexible-posts-widget\u002Fcss\u002Fadmin-style.css?ver=","flexible-posts-widget\u002Fcss\u002Fstyle.css?ver=","flexible-posts-widget\u002Fjs\u002Fadmin-script.js?ver=","flexible-posts-widget\u002Fjs\u002Fscript.js?ver=",{"cssClasses":313,"htmlComments":316,"htmlAttributes":317,"restEndpoints":363,"jsGlobals":364,"shortcodeOutput":365},[314,315],"fpw-widget","fpw-widget-posts",[],[318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,322,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,327,360,361,362,351,328,329,330,331],"data-id","data-type","data-taxonomy","data-terms","data-posts_per_page","data-orderby","data-order","data-offset","data-ignore_sticky_posts","data-post_status","data-post__in","data-post__not_in","data-tax_query","data-meta_query","data-author","data-post_format","data-meta_key","data-meta_value","data-comment_count","data-comment_date","data-comment_date_old","data-comment_karma","data-comment_karma_old","data-comment_approved","data-date","data-date_old","data-date_modified","data-date_modified_old","data-menu_order","data-menu_order_old","data-post_excerpt","data-post_title","data-post_title_old","data-rand","data-title_attribute","data-title_attribute_old","data-post_content","data-post_content_old","data-post_parent","data-post_parent_old","data-post_type","data-post_type_old","data-post_status_old","data-post_author","data-post_author_old",[],[],[],{"error":367,"url":368,"statusCode":175,"statusMessage":369,"message":369},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fflexible-posts-widget\u002Fbundle","no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":371,"versions":372},23,[373,378,385,392,399,406,413,420,426,433,440,447,454,460,466,473,480,487,494,501,508,515,522],{"version":6,"download_url":26,"svn_tag_url":374,"released_at":29,"has_diff":161,"diff_files_changed":375,"diff_lines":29,"trac_diff_url":376,"vulnerabilities":377,"is_current":367},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F3.5.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F3.4.1&new_path=%2Fflexible-posts-widget%2Ftags%2F3.5.0",[],{"version":379,"download_url":380,"svn_tag_url":381,"released_at":29,"has_diff":161,"diff_files_changed":382,"diff_lines":29,"trac_diff_url":383,"vulnerabilities":384,"is_current":161},"3.4.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.3.4.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F3.4.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F3.4&new_path=%2Fflexible-posts-widget%2Ftags%2F3.4.1",[],{"version":386,"download_url":387,"svn_tag_url":388,"released_at":29,"has_diff":161,"diff_files_changed":389,"diff_lines":29,"trac_diff_url":390,"vulnerabilities":391,"is_current":161},"3.4","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.3.4.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F3.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F3.3.1&new_path=%2Fflexible-posts-widget%2Ftags%2F3.4",[],{"version":393,"download_url":394,"svn_tag_url":395,"released_at":29,"has_diff":161,"diff_files_changed":396,"diff_lines":29,"trac_diff_url":397,"vulnerabilities":398,"is_current":161},"3.3.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.3.3.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F3.3.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F3.3&new_path=%2Fflexible-posts-widget%2Ftags%2F3.3.1",[],{"version":400,"download_url":401,"svn_tag_url":402,"released_at":29,"has_diff":161,"diff_files_changed":403,"diff_lines":29,"trac_diff_url":404,"vulnerabilities":405,"is_current":161},"3.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.3.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F3.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F3.2.2&new_path=%2Fflexible-posts-widget%2Ftags%2F3.3",[],{"version":407,"download_url":408,"svn_tag_url":409,"released_at":29,"has_diff":161,"diff_files_changed":410,"diff_lines":29,"trac_diff_url":411,"vulnerabilities":412,"is_current":161},"3.2.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.3.2.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F3.2.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F3.2.1&new_path=%2Fflexible-posts-widget%2Ftags%2F3.2.2",[],{"version":414,"download_url":415,"svn_tag_url":416,"released_at":29,"has_diff":161,"diff_files_changed":417,"diff_lines":29,"trac_diff_url":418,"vulnerabilities":419,"is_current":161},"3.2.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.3.2.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F3.2.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F3.2&new_path=%2Fflexible-posts-widget%2Ftags%2F3.2.1",[],{"version":17,"download_url":421,"svn_tag_url":422,"released_at":29,"has_diff":161,"diff_files_changed":423,"diff_lines":29,"trac_diff_url":424,"vulnerabilities":425,"is_current":161},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.3.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F3.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F3.1.2&new_path=%2Fflexible-posts-widget%2Ftags%2F3.2",[],{"version":427,"download_url":428,"svn_tag_url":429,"released_at":29,"has_diff":161,"diff_files_changed":430,"diff_lines":29,"trac_diff_url":431,"vulnerabilities":432,"is_current":161},"3.1.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.3.1.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F3.1.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F3.1.1&new_path=%2Fflexible-posts-widget%2Ftags%2F3.1.2",[],{"version":434,"download_url":435,"svn_tag_url":436,"released_at":29,"has_diff":161,"diff_files_changed":437,"diff_lines":29,"trac_diff_url":438,"vulnerabilities":439,"is_current":161},"3.1.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.3.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F3.1.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F3.1&new_path=%2Fflexible-posts-widget%2Ftags%2F3.1.1",[],{"version":441,"download_url":442,"svn_tag_url":443,"released_at":29,"has_diff":161,"diff_files_changed":444,"diff_lines":29,"trac_diff_url":445,"vulnerabilities":446,"is_current":161},"3.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.3.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F3.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F3.0.2&new_path=%2Fflexible-posts-widget%2Ftags%2F3.1",[],{"version":448,"download_url":449,"svn_tag_url":450,"released_at":29,"has_diff":161,"diff_files_changed":451,"diff_lines":29,"trac_diff_url":452,"vulnerabilities":453,"is_current":161},"3.0.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.3.0.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F3.0.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F3.0.1&new_path=%2Fflexible-posts-widget%2Ftags%2F3.0.2",[],{"version":43,"download_url":455,"svn_tag_url":456,"released_at":29,"has_diff":161,"diff_files_changed":457,"diff_lines":29,"trac_diff_url":458,"vulnerabilities":459,"is_current":161},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.3.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F3.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F3.0&new_path=%2Fflexible-posts-widget%2Ftags%2F3.0.1",[],{"version":110,"download_url":461,"svn_tag_url":462,"released_at":29,"has_diff":161,"diff_files_changed":463,"diff_lines":29,"trac_diff_url":464,"vulnerabilities":465,"is_current":161},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.3.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F3.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F2.1.1&new_path=%2Fflexible-posts-widget%2Ftags%2F3.0",[],{"version":467,"download_url":468,"svn_tag_url":469,"released_at":29,"has_diff":161,"diff_files_changed":470,"diff_lines":29,"trac_diff_url":471,"vulnerabilities":472,"is_current":161},"2.1.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.2.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F2.1.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F2.1&new_path=%2Fflexible-posts-widget%2Ftags%2F2.1.1",[],{"version":474,"download_url":475,"svn_tag_url":476,"released_at":29,"has_diff":161,"diff_files_changed":477,"diff_lines":29,"trac_diff_url":478,"vulnerabilities":479,"is_current":161},"2.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.2.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F2.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F2.0&new_path=%2Fflexible-posts-widget%2Ftags%2F2.1",[],{"version":481,"download_url":482,"svn_tag_url":483,"released_at":29,"has_diff":161,"diff_files_changed":484,"diff_lines":29,"trac_diff_url":485,"vulnerabilities":486,"is_current":161},"2.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.2.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F2.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F1.0.5&new_path=%2Fflexible-posts-widget%2Ftags%2F2.0",[],{"version":488,"download_url":489,"svn_tag_url":490,"released_at":29,"has_diff":161,"diff_files_changed":491,"diff_lines":29,"trac_diff_url":492,"vulnerabilities":493,"is_current":161},"1.0.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.1.0.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F1.0.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F1.0.4&new_path=%2Fflexible-posts-widget%2Ftags%2F1.0.5",[],{"version":495,"download_url":496,"svn_tag_url":497,"released_at":29,"has_diff":161,"diff_files_changed":498,"diff_lines":29,"trac_diff_url":499,"vulnerabilities":500,"is_current":161},"1.0.4","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.1.0.4.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F1.0.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F1.0.3&new_path=%2Fflexible-posts-widget%2Ftags%2F1.0.4",[],{"version":502,"download_url":503,"svn_tag_url":504,"released_at":29,"has_diff":161,"diff_files_changed":505,"diff_lines":29,"trac_diff_url":506,"vulnerabilities":507,"is_current":161},"1.0.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.1.0.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F1.0.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F1.0.2&new_path=%2Fflexible-posts-widget%2Ftags%2F1.0.3",[],{"version":509,"download_url":510,"svn_tag_url":511,"released_at":29,"has_diff":161,"diff_files_changed":512,"diff_lines":29,"trac_diff_url":513,"vulnerabilities":514,"is_current":161},"1.0.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.1.0.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F1.0.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F1.0.1&new_path=%2Fflexible-posts-widget%2Ftags%2F1.0.2",[],{"version":516,"download_url":517,"svn_tag_url":518,"released_at":29,"has_diff":161,"diff_files_changed":519,"diff_lines":29,"trac_diff_url":520,"vulnerabilities":521,"is_current":161},"1.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.1.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F1.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflexible-posts-widget%2Ftags%2F1.0&new_path=%2Fflexible-posts-widget%2Ftags%2F1.0.1",[],{"version":102,"download_url":523,"svn_tag_url":524,"released_at":29,"has_diff":161,"diff_files_changed":525,"diff_lines":29,"trac_diff_url":29,"vulnerabilities":526,"is_current":161},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-posts-widget.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflexible-posts-widget\u002Ftags\u002F1.0\u002F",[],[]]