[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJepOV0oZrSyJ3adpDzN8TWltijiYmM6XIVfzCg7_pGM":3,"$fQOgfVfmgv8j1QF9ufmA7-8LJByrN9LOBQnJdMYAL4X8":475,"$fbBG8fWPBjRgvFdr1SO4d4eOhnXBtlidR2B-D-CuKW6M":479},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"discovery_status":29,"vulnerabilities":30,"developer":31,"crawl_stats":27,"alternatives":39,"analysis":125,"fingerprints":454},"flickr-stream","Flickr-stream","1.3","dustinscarberry","https:\u002F\u002Fprofiles.wordpress.org\u002Fdman25560\u002F","\u003Cp>This plugin allows you to embed your own or others photosets and galleries directly into your WordPress site. This plugin was designed to create a cleaner and simpler interface, both in administration and the frontend of the site.\u003C\u002Fp>\n\u003Cp>The only task that has to be completed to use this plugin is to get a API key from Flickr. Afterwards it is as simple as plugging in options to generate the widget or to create shortcodes that can be placed on any page or post within your wordpress site.\u003C\u002Fp>\n\u003Cp>To create a shortcode first click ‘Create Shortcode’ and enter the various options for the photoset or gallery. Make sure to use the right ‘ID’ format (see FAQ’s) based on whether you are adding a photoset or gallery. Click ‘Save New Shortcode’ and then copy and paste the shortcode into where you want it to appear within your site. For the widget the instructions are the same except for the copy and pasting part, of course.\u003C\u002Fp>\n\u003Cp>Features Include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Hide or show title of photoset or gallery\u003C\u002Fli>\n\u003Cli>Choose between small or medium thumbnails for shortcode embeds\u003C\u002Fli>\n\u003Cli>Cache photo data to prevent Flickr API calls each time a page is generated\u003C\u002Fli>\n\u003Cli>Random or from the top photo thumbnail selection\u003C\u002Fli>\n\u003Cli>Link photos to either Flickr or a lightbox (Magnific Popup plugin included, if needed)\u003C\u002Fli>\n\u003Cli>Choose to hide photo captions or not\u003C\u002Fli>\n\u003Cli>Set photoset \u002F gallery alignment to either left, right, or center\u003C\u002Fli>\n\u003Cli>Set color of photo highlights\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin allows you to include photosets and galleries from Flickr in your WordPress site, either embedded in a page or post, or as a sidebar widge …",100,8518,90,2,"2021-01-12T01:18:00.000Z","4.8.28","4.4.0","",[20,21,22],"flickr","gallery","photos","http:\u002F\u002Fwww.dscarberry.com\u002Fflickrstream\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflickr-stream.1.3.zip",85,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":35,"avg_patch_time_days":36,"trust_score":37,"computed_at":38},"dman25560",3,310,89,215,71,"2026-07-15T07:22:09.850Z",[40,58,76,95,111],{"slug":41,"name":42,"version":6,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":49,"num_ratings":14,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":18,"tags":53,"homepage":56,"download_link":57,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"quick-flickr-widget","Quick Flickr Widget","Konstantin Kovshenin","https:\u002F\u002Fprofiles.wordpress.org\u002Fkovshenin\u002F","\u003Cp>Use this widget to display your Flickr photos in your sidebar, via a Flickr username or a Flickr RSS feed URL.\u003C\u002Fp>\n","Display your Flickr photos in your sidebar.",400,58010,60,"2012-07-25T06:52:00.000Z","3.4.2","3.3",[20,21,54,22,55],"photo","widget","http:\u002F\u002Fkovshenin.com\u002Fwordpress\u002Fplugins\u002Fquick-flickr-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fquick-flickr-widget.1.3.zip",{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":11,"downloaded":66,"rating":67,"num_ratings":14,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":18,"tags":71,"homepage":74,"download_link":75,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"tantan-flickr","Flickr Photo Album","1.1","joetan","https:\u002F\u002Fprofiles.wordpress.org\u002Fjoetan\u002F","\u003Cp>This Flickr plugin for WordPress will allow you to pull in your Flickr photosets and display them as albums on your WordPress site. There is a pretty simple template provided which you can customize to 100% match the look and feel of your own site.\u003C\u002Fp>\n\u003Cp>The plugin is customizable in a number of different ways. There are options to allow you to hook it up with a number of different Lightbox-style popup overlay display libraries. Third party commenting services such as Disqus are also supported, allowing your visitors to comment on your photos without hopping over to Flickr.com. A simple Flickr widget is also included to let you easily include your photos into your blog’s sidebar.\u003C\u002Fp>\n\u003Cp>On the backend, this plugin will add a new Flickr icon to your WordPress edit screen which will allow you to easily insert your Flickr photos and albums into your blog posts with just a couple clicks. You can either have your inserted photos link back to your WordPress Flickr photo album or directly to your Flickr.com photo page.\u003C\u002Fp>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cp>If you need more help installing and customizing templates, \u003Ca href=\"http:\u002F\u002Fcode.google.com\u002Fp\u002Fphoto-album\u002Fwiki\u002FDocumentation\" rel=\"nofollow ugc\">see here for more information\u003C\u002Fa>. Feel free to \u003Ca href=\"www.flickr.com\u002Fgroups\u002Ftantannoodles\u002F\" rel=\"nofollow ugc\">post your question into the support group\u003C\u002Fa> if you get stuck.\u003C\u002Fp>\n\u003Ch3>Examples & Thanks\u003C\u002Fh3>\n\u003Cp>Here’s a couple sample installs from around the web.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Ftantannoodles.com\u002Fphotos\u002F\" rel=\"nofollow ugc\">Tan Tan Noodles\u003C\u002Fa>, \u003Ca href=\"http:\u002F\u002Fmakingitlovely.com\u002Fphotos\u002F\" rel=\"nofollow ugc\">Making it Lovely\u003C\u002Fa>, \u003Ca href=\"http:\u002F\u002Fwww.slipstreamsports.com\u002Fphotos\u002F\" rel=\"nofollow ugc\">Slip Stream Sports\u003C\u002Fa>, \u003Ca href=\"http:\u002F\u002Fwww.lifeofjustin.com\u002Fphotos\u002F\" rel=\"nofollow ugc\">Life of Justin\u003C\u002Fa>, \u003Ca href=\"http:\u002F\u002F72quadrat.de\u002Fblog\u002Fphotos\u002F\" rel=\"nofollow ugc\">72 Quadrat\u003C\u002Fa>, \u003Ca href=\"http:\u002F\u002Fwww.cakejournal.com\u002Fflickr\u002F\" rel=\"nofollow ugc\">Cake Journal\u003C\u002Fa>, \u003Ca href=\"http:\u002F\u002Fwww.dcspride.com\u002Fphotos\u002F\" rel=\"nofollow ugc\">DCS Pride\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Special thanks to the wonderful volunteers from around the Internet who helped translate this plugin:\u003C\u002Fp>\n\u003Cp>S√∏ren Siim Nielsen, Thomas Sturm, Adrianus F. Tumewu, Marco Balzerani, Lindsey Yoo, Hamid Reza, Jonathan Lumb, Guillermo Lopez, and \u003Ca href=\"https:\u002F\u002Ftranslations.launchpad.net\u002Ftantan-flickr\u002Ftrunk\u002F+pots\u002Ftantan-flickr\" rel=\"nofollow ugc\">many others\u003C\u002Fa>.\u003C\u002Fp>\n","This Flickr plugin for WordPress will allow you to pull in your Flickr photosets and display them as albums on your WordPress site.",152687,20,"2009-04-09T19:01:00.000Z","2.7","2.5",[20,21,72,73,22],"images","photo-album","http:\u002F\u002Fwww.tantannoodles.com\u002Ftoolkit\u002Fphoto-album\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftantan-flickr.1.1.1.zip",{"slug":77,"name":78,"version":79,"author":80,"author_profile":81,"description":82,"short_description":83,"active_installs":84,"downloaded":85,"rating":86,"num_ratings":33,"last_updated":87,"tested_up_to":88,"requires_at_least":89,"requires_php":18,"tags":90,"homepage":93,"download_link":94,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"flickr-viewer","Flickr Viewer","1.1.8","nakunakifi","https:\u002F\u002Fprofiles.wordpress.org\u002Fnakunakifi\u002F","\u003Cp>Display your Flickr Photostream, Favourites, Galleries and Albums on your website.\u003Cbr \u002F>\nComes with lightbox and pagination. More features coming soon!\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Use Shortcodes to display your Flickr photostream, favourites, galleries and albums. \u003C\u002Fli>\n\u003Cli>The images are displayed using a lightbox. \u003C\u002Fli>\n\u003Cli>Admin settings to control size of thumbnail images and visibility settings etc\u003C\u002Fli>\n\u003Cli>Just authenticate with your Flickr Account and you are ready to go!\u003C\u002Fli>\n\u003Cli>Visit \u003Ca href=\"http:\u002F\u002Fwordpress-plugin-for-flickr.cheshirewebsolutions.com\u002F?utm_source=cws_fgp_config&utm_medium=text-link&utm_content=readme&utm_campaign=cws_fgp_plugin\" rel=\"friend nofollow ugc\">Flickr Viewer Pro Demo Site\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you have suggestions for a new add-on, feel free to email me at info@cheshirewebsolutions.com.\u003Cbr \u002F>\nWant regular updates?\u003Cbr \u002F>\nfollow me on Twitter!\u003Cbr \u002F>\nhttps:\u002F\u002Ftwitter.com\u002FCheshireWebSol\u003C\u002Fp>\n\u003Ch3>Prerequisites\u003C\u002Fh3>\n\u003Col>\n\u003Cli>PHP v5.5\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Shortcodes\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>[cws_fgp_photostream] Will display your Photostream.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>[cws_fgp_favourites] Will display your Favourites.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Shortcode Usage\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>Display Photostream Example\u003Cbr \u002F>\n[cws_fgp_photostream theme=grid thumb_size=square_150 show_title=0]\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Display Favourites Example\u003Cbr \u002F>\n[cws_fgp_favourites theme=grid thumb_size=square_150 show_title=1]\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Display Gallery Example\u003Cbr \u002F>\n[cws_fgp_galleries theme=grid gallery_id=72157678104065683 show_title=1 thumb_size=square_150]\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>There are 2 main shortcodes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>[cws_fgp_photostream]\u003C\u002Fli>\n\u003Cli>[cws_fgp_favourites]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Flickr Viewer – Ian Kennerley, http:\u002F\u002Fnakunakifi.com \u003C\u002Fli>\n\u003Cli>Lightbox2 (http:\u002F\u002Flokeshdhakar.com\u002Fprojects\u002Flightbox2)\u003C\u002Fli>\n\u003Cli>Masonry (http:\u002F\u002Fdesandro.github.io\u002Fmasonry\u002F)\u003C\u002Fli>\n\u003Cli>phpFlickr (Dan Coulter (dan@dancoulter.com))\u003C\u002Fli>\n\u003Cli>Justified Image Grid – Miro Mannino\u003C\u002Fli>\n\u003Cli>Photoswipe – Dmitry Semenov\u003C\u002Fli>\n\u003C\u002Ful>\n","Awesome simple gallery plugin to display your Flickr Photostream, Favourites, Galleries and Albums on your website.",50,9378,86,"2021-01-31T15:37:00.000Z","5.6.17","4.0.1",[91,20,21,22,92],"album","photostream","http:\u002F\u002Fcheshirewebsolutions.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflickr-viewer.1.1.8.zip",{"slug":96,"name":97,"version":98,"author":99,"author_profile":100,"description":101,"short_description":102,"active_installs":67,"downloaded":103,"rating":84,"num_ratings":14,"last_updated":104,"tested_up_to":105,"requires_at_least":106,"requires_php":18,"tags":107,"homepage":109,"download_link":110,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"flickr-api","Flickr API","0.1.9","Robert O'Rourke","https:\u002F\u002Fprofiles.wordpress.org\u002Fsanchothefat\u002F","\u003Cp>The Flickr API plugin provides tools for displaying your flickr galleries, sets, photostream or favourites and more using a shortcode in posts and pages or as a widget. You can choose the size of image you want, whether it should be linked to another image size or back to flickr or not linked at all, how many images to show and more…\u003C\u002Fp>\n\u003Cp>There are some built in options for displaying your images as a simple slideshow or using the Galleria jquery plugin. Alternatively you can choose to style the output yourself and use your own javascript.\u003C\u002Fp>\n\u003Cp>For developers the plugin also gives you an easy method for calling and caching API responses both in PHP and javascript, and lots of useful tools for working with those responses.\u003C\u002Fp>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Cp>You will need to get an API key from flickr to use this plugin. Under the ‘You’ menu look for ‘Your Apps’. Click to get a key and then go to the media settings screen to add your API key and user name. The plugin will automatically determine your NSID so you never need to look this up.\u003C\u002Fp>\n\u003Cp>To use the plugin either generate a shortcode using the media upload\u002Finsert button and selecting what you want to get or use the Flickr widget provided.\u003C\u002Fp>\n\u003Ch4>For developers\u003C\u002Fh4>\n\u003Cp>The plugin exposes its methods for your use in themes as template tags but the main one you may find useful is \u003Ccode>flickr_api()\u003C\u002Fcode>. This is a general function for calling any API method with the parameters you specify.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\n$response = json_decode( flickr_api( $method, $params, $cache ) );\n?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>All responses are in JSON format so you will need to use \u003Ccode>json_decode()\u003C\u002Fcode> to use the response in PHP.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>@param $method: (string)    This is the API method to call\n@param $params: (array)     Additional arguments to pass into the call such as user_id, photoset_id, gallery_id, text, tags etc...\n@param $cache : (bool)      Whether or not to cache the response based on the arguments passed in\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>You can use the API via javascript as well:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cscript>\nvar photos = flickr_api( method, params, cache );\n\u003C\u002Fscript>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>NSID lookup:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\n$nsid = flickr_get_user_nsid( $username );\n?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Just pass in the Flickr username of the person to get the NSID for.\u003C\u002Fp>\n\u003Ch4>Filters\u002FHooks\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>flickr_galleria_themes\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can enable the choice of custom or purchased galleria themes by extending the themes array. Useful if you want your theme to have a choice of galleria theme beyond the ‘classic’ style.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\nadd_filter( 'flickr_galleria_themes', 'my_galleria_themes' );\nfunction my_galleria_themes( $themes ) {\n    $themes[ \u002F* full or relative url to theme js file *\u002F ] = __( 'Theme Name' );\n    return $themes;\n}\n?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n","A comprehensive Flickr plugin that makes it easy to show off your images in style.",9021,"2014-07-24T15:23:00.000Z","3.9.40","3.0",[20,108,21,72,22],"galleries","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fflickr-api\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflickr-api.0.1.9.zip",{"slug":112,"name":113,"version":114,"author":43,"author_profile":44,"description":115,"short_description":116,"active_installs":117,"downloaded":118,"rating":26,"num_ratings":26,"last_updated":119,"tested_up_to":120,"requires_at_least":69,"requires_php":18,"tags":121,"homepage":122,"download_link":123,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":124},"related-external-links","Related External Links","1.0.2","\u003Cp>Here are some features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy to setup\u003C\u002Fli>\n\u003Cli>Up to five external links per post\u003C\u002Fli>\n\u003Cli>Can display in widget or use shortcode (\u003Ccode>[related-links]\u003C\u002Fcode>) in your post\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’d like to participate in the plugin development feel free to contact me, I’ll be glad to share some thoughts and guide you into the current development stage.\u003C\u002Fp>\n","Display up to five related external links to your post in your sidebar or use a shortcode.",10,4806,"2009-04-07T17:22:00.000Z","2.7.1",[20,21,54,22,55],"http:\u002F\u002Fkovshenin.com\u002Fwordpress\u002Fplugins\u002Frelated-external-links\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frelated-external-links.1.0.2.zip","2026-04-06T09:54:40.288Z",{"attackSurface":126,"codeSignals":176,"taintFlows":357,"riskAssessment":439,"analyzedAt":453},{"hooks":127,"ajaxHandlers":161,"restRoutes":169,"shortcodes":170,"cronEvents":175,"entryPointCount":14,"unprotectedCount":26},[128,134,138,141,145,150,155,159],{"type":129,"name":130,"callback":131,"file":132,"line":133},"action","admin_init","processor","admin.php",32,{"type":129,"name":135,"callback":136,"file":132,"line":137},"admin_enqueue_scripts","addScripts",33,{"type":129,"name":135,"callback":139,"file":132,"line":140},"addStyles",34,{"type":129,"name":142,"callback":143,"file":132,"line":144},"admin_menu","addMenus",35,{"type":129,"name":146,"callback":147,"file":148,"line":149},"admin_footer","_js_vars","class\\fsWPListTableBase.class.php",157,{"type":129,"name":151,"callback":152,"file":153,"line":154},"widgets_init","setup_widgets","flickrstream.php",58,{"type":129,"name":156,"callback":136,"file":157,"line":158},"wp_enqueue_scripts","frontend.php",30,{"type":129,"name":156,"callback":139,"file":157,"line":160},31,[162],{"action":163,"nopriv":164,"callback":165,"hasNonce":166,"hasCapCheck":164,"file":167,"line":168},"fs_deleteshortcode",false,"deleteShortcode",true,"inc\\ajax.inc.php",16,[],[171],{"tag":172,"callback":173,"file":157,"line":174},"flickrstream","shortcode",29,[],{"dangerousFunctions":177,"sqlUsage":183,"outputEscaping":196,"fileOperations":26,"externalRequests":350,"nonceChecks":351,"capabilityChecks":26,"bundledLibraries":352},[178],{"fn":179,"file":180,"line":181,"context":182},"unserialize","class\\fsShortcodeListTable.class.php",166,"$intdata = unserialize($val['option_value']);",{"prepared":33,"raw":184,"locations":185},4,[186,189,192,195],{"file":180,"line":187,"context":188},161,"$wpdb->get_results() with variable interpolation",{"file":153,"line":190,"context":191},73,"$wpdb->get_col() with variable interpolation",{"file":193,"line":194,"context":191},"uninstall.php",13,{"file":193,"line":144,"context":188},{"escaped":197,"rawEcho":198,"locations":199},53,77,[200,203,205,207,209,211,213,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,246,248,250,252,254,255,257,259,261,263,265,267,269,271,273,275,278,280,283,285,287,288,290,292,293,295,297,299,301,302,304,306,308,310,312,314,315,317,319,321,323,324,326,327,329,331,332,334,336,338,340,342,344,346,348],{"file":180,"line":201,"context":202},104,"raw output",{"file":148,"line":204,"context":202},362,{"file":148,"line":206,"context":202},411,{"file":148,"line":208,"context":202},462,{"file":148,"line":210,"context":202},463,{"file":148,"line":212,"context":202},464,{"file":148,"line":214,"context":202},469,{"file":148,"line":216,"context":202},860,{"file":148,"line":218,"context":202},1114,{"file":148,"line":220,"context":202},1131,{"file":148,"line":222,"context":202},1140,{"file":148,"line":224,"context":202},1216,{"file":148,"line":226,"context":202},1289,{"file":148,"line":228,"context":202},1292,{"file":148,"line":230,"context":202},1300,{"file":148,"line":232,"context":202},1301,{"file":148,"line":234,"context":202},1302,{"file":148,"line":236,"context":202},1305,{"file":148,"line":238,"context":202},1306,{"file":148,"line":240,"context":202},1307,{"file":242,"line":160,"context":202},"inc\\forms\\createShortcode.inc.php",{"file":244,"line":245,"context":202},"inc\\forms\\editShortcode.inc.php",28,{"file":244,"line":247,"context":202},43,{"file":244,"line":249,"context":202},45,{"file":244,"line":251,"context":202},56,{"file":244,"line":253,"context":202},69,{"file":244,"line":37,"context":202},{"file":244,"line":256,"context":202},92,{"file":244,"line":258,"context":202},94,{"file":244,"line":260,"context":202},114,{"file":244,"line":262,"context":202},116,{"file":244,"line":264,"context":202},137,{"file":244,"line":266,"context":202},139,{"file":244,"line":268,"context":202},160,{"file":244,"line":270,"context":202},162,{"file":244,"line":272,"context":202},212,{"file":244,"line":274,"context":202},246,{"file":276,"line":277,"context":202},"inc\\forms\\generalOptions.inc.php",17,{"file":276,"line":279,"context":202},22,{"file":281,"line":282,"context":202},"inc\\processor.inc.php",19,{"file":281,"line":284,"context":202},21,{"file":281,"line":286,"context":202},52,{"file":281,"line":49,"context":202},{"file":281,"line":289,"context":202},68,{"file":281,"line":291,"context":202},83,{"file":281,"line":258,"context":202},{"file":281,"line":294,"context":202},96,{"file":281,"line":296,"context":202},126,{"file":281,"line":298,"context":202},134,{"file":281,"line":300,"context":202},142,{"file":281,"line":149,"context":202},{"file":281,"line":303,"context":202},165,{"file":281,"line":305,"context":202},167,{"file":281,"line":307,"context":202},180,{"file":309,"line":137,"context":202},"photos_widget.php",{"file":309,"line":311,"context":202},39,{"file":309,"line":313,"context":202},41,{"file":309,"line":247,"context":202},{"file":309,"line":316,"context":202},99,{"file":309,"line":318,"context":202},110,{"file":309,"line":320,"context":202},112,{"file":309,"line":322,"context":202},122,{"file":309,"line":296,"context":202},{"file":309,"line":325,"context":202},135,{"file":309,"line":264,"context":202},{"file":309,"line":328,"context":202},147,{"file":309,"line":330,"context":202},158,{"file":309,"line":268,"context":202},{"file":309,"line":333,"context":202},170,{"file":309,"line":335,"context":202},181,{"file":309,"line":337,"context":202},183,{"file":309,"line":339,"context":202},196,{"file":309,"line":341,"context":202},198,{"file":309,"line":343,"context":202},207,{"file":309,"line":345,"context":202},209,{"file":309,"line":347,"context":202},218,{"file":309,"line":349,"context":202},220,1,5,[353],{"name":354,"version":355,"knownCves":356},"jQuery","3.0.5",[],[358,396,406],{"entryPoint":359,"graph":360,"unsanitizedCount":184,"severity":395},"search_box (class\\fsWPListTableBase.class.php:346)",{"nodes":361,"edges":390},[362,367,372,376,378,382,384,388],{"id":363,"type":364,"label":365,"file":148,"line":366},"n0","source","$_REQUEST['orderby']",353,{"id":368,"type":369,"label":370,"file":148,"line":366,"wp_function":371},"n1","sink","echo() [XSS]","echo",{"id":373,"type":364,"label":374,"file":148,"line":375},"n2","$_REQUEST['order']",355,{"id":377,"type":369,"label":370,"file":148,"line":375,"wp_function":371},"n3",{"id":379,"type":364,"label":380,"file":148,"line":381},"n4","$_REQUEST['post_mime_type']",357,{"id":383,"type":369,"label":370,"file":148,"line":381,"wp_function":371},"n5",{"id":385,"type":364,"label":386,"file":148,"line":387},"n6","$_REQUEST['detached']",359,{"id":389,"type":369,"label":370,"file":148,"line":387,"wp_function":371},"n7",[391,392,393,394],{"from":363,"to":368,"sanitized":164},{"from":373,"to":377,"sanitized":164},{"from":379,"to":383,"sanitized":164},{"from":385,"to":389,"sanitized":164},"medium",{"entryPoint":397,"graph":398,"unsanitizedCount":184,"severity":405},"\u003CeditShortcode.inc> (inc\\forms\\editShortcode.inc.php:0)",{"nodes":399,"edges":403},[400,402],{"id":363,"type":364,"label":401,"file":244,"line":117},"$_GET (x4)",{"id":368,"type":369,"label":370,"file":244,"line":245,"wp_function":371},[404],{"from":363,"to":368,"sanitized":164},"low",{"entryPoint":407,"graph":408,"unsanitizedCount":437,"severity":438},"\u003CfsWPListTableBase.class> (class\\fsWPListTableBase.class.php:0)",{"nodes":409,"edges":430},[410,411,412,413,414,415,416,417,418,422,424,426],{"id":363,"type":364,"label":365,"file":148,"line":366},{"id":368,"type":369,"label":370,"file":148,"line":366,"wp_function":371},{"id":373,"type":364,"label":374,"file":148,"line":375},{"id":377,"type":369,"label":370,"file":148,"line":375,"wp_function":371},{"id":379,"type":364,"label":380,"file":148,"line":381},{"id":383,"type":369,"label":370,"file":148,"line":381,"wp_function":371},{"id":385,"type":364,"label":386,"file":148,"line":387},{"id":389,"type":369,"label":370,"file":148,"line":387,"wp_function":371},{"id":419,"type":364,"label":420,"file":148,"line":421},"n8","$_SERVER",1053,{"id":423,"type":369,"label":370,"file":148,"line":228,"wp_function":371},"n9",{"id":425,"type":364,"label":420,"file":148,"line":421},"n10",{"id":427,"type":369,"label":428,"file":148,"line":228,"wp_function":429},"n11","call_user_func() [RCE]","call_user_func",[431,432,433,434,435,436],{"from":363,"to":368,"sanitized":164},{"from":373,"to":377,"sanitized":164},{"from":379,"to":383,"sanitized":164},{"from":385,"to":389,"sanitized":164},{"from":419,"to":423,"sanitized":164},{"from":425,"to":427,"sanitized":164},6,"high",{"summary":440,"deductions":441},"The flickr-stream plugin v1.3 presents a mixed security posture.  While it boasts zero known CVEs and a limited attack surface with all identified entry points seemingly protected by authentication mechanisms, several concerning code signals warrant attention.  The presence of the `unserialize` function is a significant red flag, as it's a common vector for object injection vulnerabilities if not handled with extreme care and validation.  Furthermore, a substantial percentage (59%) of its output is not properly escaped, increasing the risk of cross-site scripting (XSS) attacks.  The taint analysis revealing a high-severity flow with unsanitized paths further reinforces these concerns, suggesting potential for malicious data to be processed without adequate sanitization.  The plugin's history of no recorded vulnerabilities is a positive indicator, but it does not negate the inherent risks identified in the static analysis.  Therefore, while the plugin appears to have a relatively clean track record and a controlled entry point, the identified code weaknesses, particularly `unserialize` and insufficient output escaping, introduce considerable risk.",[442,445,448,451],{"reason":443,"points":444},"Use of unserialize() function",15,{"reason":446,"points":447},"High percentage of unescaped output",8,{"reason":449,"points":450},"High severity taint flow with unsanitized paths",12,{"reason":452,"points":33},"Bundled outdated jQuery library","2026-03-16T21:10:26.666Z",{"wat":455,"direct":464},{"assetPaths":456,"generatorPatterns":459,"scriptPaths":460,"versionParams":461},[457,458],"\u002Fwp-content\u002Fplugins\u002Fflickr-stream\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fflickr-stream\u002Fjs\u002Fadmin.min.js",[],[458],[462,463],"flickr-stream\u002Fcss\u002Fadmin.css?ver=","flickr-stream\u002Fjs\u002Fadmin.min.js?ver=",{"cssClasses":465,"htmlComments":468,"htmlAttributes":469,"restEndpoints":471,"jsGlobals":472,"shortcodeOutput":474},[466,467],"fs-shortcode-panel","fs-masthead",[],[470],"id=\"fs-shortcode-panel\"",[],[473],"fsJSData",[],{"error":166,"url":476,"statusCode":477,"statusMessage":478,"message":478},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fflickr-stream\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":450,"versions":480},[481,486,493,500,507,514,521,528,535,541,547,554],{"version":6,"download_url":24,"svn_tag_url":482,"released_at":27,"has_diff":164,"diff_files_changed":483,"diff_lines":27,"trac_diff_url":484,"vulnerabilities":485,"is_current":166},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflickr-stream\u002Ftags\u002F1.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflickr-stream%2Ftags%2F1.2.9&new_path=%2Fflickr-stream%2Ftags%2F1.3",[],{"version":487,"download_url":488,"svn_tag_url":489,"released_at":27,"has_diff":164,"diff_files_changed":490,"diff_lines":27,"trac_diff_url":491,"vulnerabilities":492,"is_current":164},"1.2.9","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflickr-stream.1.2.9.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflickr-stream\u002Ftags\u002F1.2.9\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflickr-stream%2Ftags%2F1.2.7&new_path=%2Fflickr-stream%2Ftags%2F1.2.9",[],{"version":494,"download_url":495,"svn_tag_url":496,"released_at":27,"has_diff":164,"diff_files_changed":497,"diff_lines":27,"trac_diff_url":498,"vulnerabilities":499,"is_current":164},"1.2.7","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflickr-stream.1.2.7.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflickr-stream\u002Ftags\u002F1.2.7\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflickr-stream%2Ftags%2F1.2.6&new_path=%2Fflickr-stream%2Ftags%2F1.2.7",[],{"version":501,"download_url":502,"svn_tag_url":503,"released_at":27,"has_diff":164,"diff_files_changed":504,"diff_lines":27,"trac_diff_url":505,"vulnerabilities":506,"is_current":164},"1.2.6","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflickr-stream.1.2.6.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflickr-stream\u002Ftags\u002F1.2.6\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflickr-stream%2Ftags%2F1.2.5&new_path=%2Fflickr-stream%2Ftags%2F1.2.6",[],{"version":508,"download_url":509,"svn_tag_url":510,"released_at":27,"has_diff":164,"diff_files_changed":511,"diff_lines":27,"trac_diff_url":512,"vulnerabilities":513,"is_current":164},"1.2.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflickr-stream.1.2.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflickr-stream\u002Ftags\u002F1.2.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflickr-stream%2Ftags%2F1.2.1&new_path=%2Fflickr-stream%2Ftags%2F1.2.5",[],{"version":515,"download_url":516,"svn_tag_url":517,"released_at":27,"has_diff":164,"diff_files_changed":518,"diff_lines":27,"trac_diff_url":519,"vulnerabilities":520,"is_current":164},"1.2.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflickr-stream.1.2.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflickr-stream\u002Ftags\u002F1.2.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflickr-stream%2Ftags%2F1.2&new_path=%2Fflickr-stream%2Ftags%2F1.2.1",[],{"version":522,"download_url":523,"svn_tag_url":524,"released_at":27,"has_diff":164,"diff_files_changed":525,"diff_lines":27,"trac_diff_url":526,"vulnerabilities":527,"is_current":164},"1.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflickr-stream.1.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflickr-stream\u002Ftags\u002F1.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflickr-stream%2Ftags%2F1.1.5&new_path=%2Fflickr-stream%2Ftags%2F1.2",[],{"version":529,"download_url":530,"svn_tag_url":531,"released_at":27,"has_diff":164,"diff_files_changed":532,"diff_lines":27,"trac_diff_url":533,"vulnerabilities":534,"is_current":164},"1.1.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflickr-stream.1.1.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflickr-stream\u002Ftags\u002F1.1.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflickr-stream%2Ftags%2F1.1&new_path=%2Fflickr-stream%2Ftags%2F1.1.5",[],{"version":61,"download_url":536,"svn_tag_url":537,"released_at":27,"has_diff":164,"diff_files_changed":538,"diff_lines":27,"trac_diff_url":539,"vulnerabilities":540,"is_current":164},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflickr-stream.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflickr-stream\u002Ftags\u002F1.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflickr-stream%2Ftags%2F1.0.2&new_path=%2Fflickr-stream%2Ftags%2F1.1",[],{"version":114,"download_url":542,"svn_tag_url":543,"released_at":27,"has_diff":164,"diff_files_changed":544,"diff_lines":27,"trac_diff_url":545,"vulnerabilities":546,"is_current":164},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflickr-stream.1.0.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflickr-stream\u002Ftags\u002F1.0.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflickr-stream%2Ftags%2F1.0.1&new_path=%2Fflickr-stream%2Ftags%2F1.0.2",[],{"version":548,"download_url":549,"svn_tag_url":550,"released_at":27,"has_diff":164,"diff_files_changed":551,"diff_lines":27,"trac_diff_url":552,"vulnerabilities":553,"is_current":164},"1.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflickr-stream.1.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflickr-stream\u002Ftags\u002F1.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fflickr-stream%2Ftags%2F1.0&new_path=%2Fflickr-stream%2Ftags%2F1.0.1",[],{"version":555,"download_url":556,"svn_tag_url":557,"released_at":27,"has_diff":164,"diff_files_changed":558,"diff_lines":27,"trac_diff_url":27,"vulnerabilities":559,"is_current":164},"1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflickr-stream.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fflickr-stream\u002Ftags\u002F1.0\u002F",[],[]]