[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fekPC43yYSFjEDwzka1_n2AfYbPeoMhktkk6CQ0Fp5ec":3,"$foLTZ0LfhLo7WJ4lSIvVihAQ7DJNGksPL_osMC9aKfno":222,"$fviwoa8nqUrj7KeEGTn13Aj9x26YhBNo7UZ9hLZOB0KM":227},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"discovery_status":27,"vulnerabilities":28,"developer":29,"crawl_stats":25,"alternatives":35,"analysis":135,"fingerprints":198},"gazeta-news","Plugin Gazeta News – Gazeta da Ilha","0.3","erick.pessoa","https:\u002F\u002Fprofiles.wordpress.org\u002Ferickpessoa-1\u002F","\u003Cp>Plugin desenvolvido por WEBSISTI Soluções Inteligentes, a pedido do Jornal Gazeta da Ilha, para ser um instrumento\u003Cbr \u002F>\natravés do qual todo e qualquer usuário interessado e que utilize WordPress, tenha a possibilidade de incorporar as\u003Cbr \u002F>\nnotícias publicadas pela Gazeta da Ilha em seu site.\u003C\u002Fp>\n","Este widget lhe permite manter seu site sempre atualizado com as principais noticias do Portal Gazeta da Ilha",10,1771,0,"2013-03-01T14:58:00.000Z","3.4.2","3.0.1","",[19,20,21],"gazerta","noticias","sao-luis","http:\u002F\u002Fwww.gazetadailha.com.br\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgazeta-news.zip",85,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":24,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"erickpessoa-1",1,30,84,"2026-07-15T03:02:19.846Z",[36,56,76,96,116],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":13,"num_ratings":13,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":54,"download_link":55,"security_score":44,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"brasil-61-conteudo-gratuito-para-radios-sites-e-blogs","Brasil 61 – Conteúdo gratuito para rádios, sites e blogs.","1.1.1","brasil61","https:\u002F\u002Fprofiles.wordpress.org\u002Fbrasil61\u002F","\u003Cp>O Brasil 61 fornece diariamente conteúdos radiofônicos e em texto web para comunicadores de rádio e mídias digitais online de todo o Brasil. Todos os conteúdos são gratuitos, livres para veiculação, e tratam de temáticas regionalizadas e informações estratégicas para os municípios, como repasses de recursos federais para as prefeituras de todo o país.\u003C\u002Fp>\n\u003Cp>Agora, você pode manter um site que se atualiza automaticamente, com novos conteúdos diários. A melhor parte? O plugin do Brasil 61 é gratuito e vai te ajudar a impulsionar seu marketing de conteúdo, a melhorar o seu SEO, a aumentar o envolvimento do seu público e trazer mais visualizações. Tudo isso pode trazer um maior ganho financeiro para seu veículo.\u003C\u002Fp>\n\u003Cp>Experimente o plugin do Brasil 61 hoje mesmo!\u003C\u002Fp>\n\u003Ch4>Confira a seguir nossos principais editoriais:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbrasil61.com\u002Ftempo\" rel=\"nofollow ugc\">Tempo\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbrasil61.com\u002Fagronegocios\" rel=\"nofollow ugc\">Agro\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbrasil61.com\u002Fsaude\" rel=\"nofollow ugc\">Saúde\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbrasil61.com\u002Fnoticias\u002Ftag\u002Ffpm\" rel=\"nofollow ugc\">FPM\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbrasil61.com\u002Fnoticias\u002Ftag\u002Fcfem\" rel=\"nofollow ugc\">CFEM\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbrasil61.com\u002Fpolitica\" rel=\"nofollow ugc\">Política\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbrasil61.com\u002Feconomia\" rel=\"nofollow ugc\">Economia\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbrasil61.com\u002Fmeio-ambiente\" rel=\"nofollow ugc\">Meio Ambiente\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbrasil61.com\u002Feducacao\" rel=\"nofollow ugc\">Educação\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbrasil61.com\u002Fcultura\" rel=\"nofollow ugc\">Cultura\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Plugin para importação automática de notícias do portal Brasil61.",100,5107,"2025-11-06T18:38:00.000Z","6.8.5","5.2","7.2",[51,40,52,53],"brasil-61","importacao-de-noticias","importar-noticias-brasil61","https:\u002F\u002Fbrasil61.com\u002Fquem-somos","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbrasil-61-conteudo-gratuito-para-radios-sites-e-blogs.1.1.1.zip",{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":64,"downloaded":65,"rating":13,"num_ratings":13,"last_updated":66,"tested_up_to":47,"requires_at_least":67,"requires_php":68,"tags":69,"homepage":74,"download_link":75,"security_score":44,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"dino-divulgador-de-noticias","Dino Divulgador de Notícias","3.4","dinoknewin","https:\u002F\u002Fprofiles.wordpress.org\u002Fdinoknewin\u002F","\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>Este plugin se conecta aos seguintes serviços externos:\u003Cbr \u002F>\n– Gravatar (https:\u002F\u002Fgravatar.com) para exibir avatares.\u003Cbr \u002F>\n– Vimeo API (https:\u002F\u002Fvimeo.com) para carregar vídeos.\u003Cbr \u002F>\nNenhum dado pessoal é enviado sem consentimento. Consulte as políticas:\u003Cbr \u002F>\n– Gravatar: https:\u002F\u002Fautomattic.com\u002Fprivacy\u002F\u003Cbr \u002F>\n– Vimeo: https:\u002F\u002Fvimeo.com\u002Fprivacy\u003C\u002Fp>\n","External services",20,327,"2025-10-08T19:25:00.000Z","4.6","8.0",[70,71,72,73,20],"conhecimento","corporativo","informacoes","negocios","https:\u002F\u002Fdino.com.br\u002Fplanos","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdino-divulgador-de-noticias.3.4.zip",{"slug":77,"name":78,"version":79,"author":80,"author_profile":81,"description":82,"short_description":83,"active_installs":64,"downloaded":84,"rating":44,"num_ratings":31,"last_updated":85,"tested_up_to":47,"requires_at_least":86,"requires_php":87,"tags":88,"homepage":93,"download_link":94,"security_score":44,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":95},"notipress-noticias","NotiPress Noticias","1.4.12","ntpmx","https:\u002F\u002Fprofiles.wordpress.org\u002Fntpmx\u002F","\u003Cp>El complemento NotiPress Noticias es la manera más fácil de tener acceso a contenidos informativos de negocios, tecnología, economía, internacionales y estilo de vida, entre otros contenidos. La agencia de noticias NotiPress con sede en Ciudad de México pone a disposición de los medios de comunicación el plugin para descargar notas, directo a WordPress.\u003C\u002Fp>\n\u003Cp>Para activar el plugin, el medio de comunicación deberá contar con una clave de licencia. Podrá \u003Ca href=\"https:\u002F\u002Fn8.ar\u002Fnotifree\" rel=\"nofollow ugc\">solicitar una licencia de prueba\u003C\u002Fa> para evaluar el servicio NotiPro Connect.\u003C\u002Fp>\n","Plugin para la obtención de contenidos informativos de la agencia de noticias NotiPress.",4022,"2025-10-01T06:32:00.000Z","5.0","5.6",[89,90,91,20,92],"argentina","colombia","news","noticia","https:\u002F\u002Fnotipress.mx\u002Fntpmx","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnotipress-noticias.1.4.12.zip","2026-03-15T15:16:48.613Z",{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":11,"downloaded":104,"rating":13,"num_ratings":13,"last_updated":105,"tested_up_to":106,"requires_at_least":107,"requires_php":17,"tags":108,"homepage":113,"download_link":114,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":115},"calendario-del-peru","Calendario del Perú","1","deperucom","https:\u002F\u002Fprofiles.wordpress.org\u002Fdeperucom\u002F","\u003Cp>Muestra los eventos del día en el \u003Ca href=\"https:\u002F\u002Fwww.deperu.com\u002Fcalendario\u002F\" rel=\"nofollow ugc\">Calendario peruano\u003C\u002Fa> publicados en DePeru.com\u003C\u002Fp>\n\u003Cp>\u003Cem>El Calendario incluye los días internacionales, celebraciones nacionales, efemérides, etc.\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Este plugin mostrará 5 eventos del Calendario, todos los días. Es muy probable que algunos días tengamos registrados más de 5 eventos, pero solo se mostrará esa cantidad. Si observa menos es porque no tenemos registrados más eventos.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Observaciones del Calendario:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Todos los titulares tienen un link hacia el artículo correspondiente.\u003C\u002Fli>\n\u003Cli>Muestra 5 eventos en forma predeterminada, a menos que tengamos menos notas registradas en el sitio.\u003C\u002Fli>\n\u003Cli>Próxima versión mostrará si el día es feriado, permitirá aumentar o disminuir los eventos mostrados, permitirá cambiar el título, etc.\u003C\u002Fli>\n\u003Cli>Funciona con todos los temas, usa los colores y tamaños del tema que se esté usando.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Muchas gracias por usar nuestro calendario, le recomendamos visite nuestra sección de \u003Ca href=\"https:\u002F\u002Fwww.deperu.com\u002Fnoticias\u002F\" rel=\"nofollow ugc\">noticias de actualidad\u003C\u002Fa> en nuestro portal.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>CONFIANZA\u003C\u002Fstrong>\u003Cbr \u002F>\nEste plugin \u003Cem>no recoge datos y no muestra publicidad\u003C\u002Fem> dentro del blog instalado. La privacidad de sus visitantes está garantizada.\u003C\u002Fp>\n","Muestra eventos del día del Calendario peruano. Este plugin mostrará 5 titulares del Calendario, todos los días.",2448,"2021-07-14T02:01:00.000Z","5.8.13","4.1",[109,110,20,111,112],"calendario","eventos","peru","peruanos","http:\u002F\u002Fwww.deperu.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcalendario-del-peru.zip","2026-04-06T09:54:40.288Z",{"slug":117,"name":118,"version":119,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":11,"downloaded":124,"rating":13,"num_ratings":13,"last_updated":125,"tested_up_to":126,"requires_at_least":127,"requires_php":17,"tags":128,"homepage":133,"download_link":134,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":115},"manchete-atual-fotojornal","Manchete Atual – Fotojornal","1.0.3","Luís Peralta","https:\u002F\u002Fprofiles.wordpress.org\u002Faeiouads\u002F","\u003Cp>Agora pode ter um Fotojornal no seu site ou blog com as notícias mais importantes do dia ilustradas com fotos selecionadas pelo Manchete Atual.\u003Cbr \u002F>\nO Fotojornal usa design responsivo para se adaptar ao seu site e pode ser personalizado nas cores e temas das notícias.\u003C\u002Fp>\n\u003Cp>Nota:\u003Cbr \u002F>\nEste plugin efectua pedidos de dados remotos ao nosso servidor do Manchete Atual.\u003Cbr \u002F>\nUm pedido inicial, carrega o conteúdo mínimo para mostrar o fotojornal.\u003Cbr \u002F>\nTodos os restantes pedidos são gerados pelos utilizadores ao navegarem no fotojornal para verem outras notícias.\u003C\u002Fp>\n","Fotojornal, Galeria de Notícias em Imagem, personalizavel, disponibilizado com conteúdos do site Manchete Atual.",2836,"2013-08-12T16:03:00.000Z","3.5.2","2.5",[129,130,131,132,20],"brasil","fotojornal","manchete-atual","manchetes","http:\u002F\u002Fmancheteatual.com.br\u002Fsites\u002Fdefault\u002Ffiles\u002Ffotojornal","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmanchete-atual-fotojornal.1.0.3.zip",{"attackSurface":136,"codeSignals":148,"taintFlows":191,"riskAssessment":192,"analyzedAt":197},{"hooks":137,"ajaxHandlers":144,"restRoutes":145,"shortcodes":146,"cronEvents":147,"entryPointCount":13,"unprotectedCount":13},[138],{"type":139,"name":140,"callback":141,"file":142,"line":143},"action","widgets_init","GINews","gazetailhanews-widget.php",254,[],[],[],[],{"dangerousFunctions":149,"sqlUsage":150,"outputEscaping":152,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":190},[],{"prepared":13,"raw":13,"locations":151},[],{"escaped":13,"rawEcho":153,"locations":154},17,[155,158,160,162,164,166,168,170,172,174,176,178,180,182,184,186,188],{"file":142,"line":156,"context":157},36,"raw output",{"file":142,"line":159,"context":157},41,{"file":142,"line":161,"context":157},43,{"file":142,"line":163,"context":157},45,{"file":142,"line":165,"context":157},101,{"file":142,"line":167,"context":157},219,{"file":142,"line":169,"context":157},221,{"file":142,"line":171,"context":157},222,{"file":142,"line":173,"context":157},227,{"file":142,"line":175,"context":157},229,{"file":142,"line":177,"context":157},230,{"file":142,"line":179,"context":157},235,{"file":142,"line":181,"context":157},237,{"file":142,"line":183,"context":157},238,{"file":142,"line":185,"context":157},242,{"file":142,"line":187,"context":157},244,{"file":142,"line":189,"context":157},245,[],[],{"summary":193,"deductions":194},"The \"gazeta-news\" v0.3 plugin exhibits a concerning security posture primarily due to a complete lack of output escaping. While the static analysis reveals no directly exploitable attack surface points like unprotected AJAX handlers, REST API routes, or shortcodes, and no dangerous functions or file operations are present, the absence of output escaping for all 17 identified outputs is a significant vulnerability. This means that any data displayed to users, including potentially user-provided content or data from external sources, is not being properly sanitized, opening the door for Cross-Site Scripting (XSS) attacks. The taint analysis is inconclusive due to zero flows analyzed, but the output escaping issue is a concrete and serious risk.  The plugin's vulnerability history is clean, which is a positive indicator. However, this historical lack of issues does not mitigate the immediate and severe risk posed by the unescaped output in the current version. The plugin's strengths lie in its limited attack surface and the use of prepared statements for SQL queries. The primary weakness is the pervasive lack of output escaping, which creates a high risk of XSS vulnerabilities.",[195],{"reason":196,"points":153},"All outputs are unescaped","2026-03-17T01:11:00.770Z",{"wat":199,"direct":205},{"assetPaths":200,"generatorPatterns":202,"scriptPaths":203,"versionParams":204},[201],"\u002Fwp-content\u002Fplugins\u002Fgazeta-news\u002FGINews.css",[],[],[],{"cssClasses":206,"htmlComments":214,"htmlAttributes":215,"restEndpoints":219,"jsGlobals":220,"shortcodeOutput":221},[207,208,92,209,210,211,212,213],"websisti_GINews","ginp_noticias","titulo","categoria","data","copyright","hgazetaTopo",[],[216,217,218],"id=\"websisti_GINewsWidget-widgets\"","name=\"numberposts\"","name=\"show_on\"",[],[],[],{"error":223,"url":224,"statusCode":225,"statusMessage":226,"message":226},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fgazeta-news\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":13,"versions":228},[]]