[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwLQN5Q8V_egEETnCuKDbgAUG4F2MdR81khUk4hfShFk":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":15,"tags":16,"homepage":21,"download_link":22,"security_score":23,"vuln_count":11,"unpatched_count":11,"last_vuln_date":24,"fetched_at":25,"vulnerabilities":26,"developer":27,"crawl_stats":24,"alternatives":34,"analysis":110,"fingerprints":186},"hosted-jft","Hosted JFT","1.0.3","pjaudiomv","https:\u002F\u002Fprofiles.wordpress.org\u002Fpjaudiomv\u002F","\u003Cp>Hosted JFT is a plugin that allows an NA Community to host their own translated version of the JFT. Add the [hosted_jft]\u003Cbr \u002F>\nshortcode to your page or use the widget Hosted JFT to add to your sidebar or footer.\u003C\u002Fp>\n\u003Cp>SHORTCODE\u003Cbr \u002F>\nBasic: [hosted_jft]\u003Cbr \u002F>\nCustom Field Name:  This is the name of the Custom Field used on your post to store the date in MM-DD format\u003Cbr \u002F>\nTimezone: This should probably just be your local timezone but can be changed in a shortcode if needed [jft jft_timezone=”Europe\u002FRome”].\u003Cbr \u002F>\nA list of supported timezones can be found here \u003Ca href=\"https:\u002F\u002Fwww.php.net\u002Fmanual\u002Fen\u002Ftimezones.php\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.php.net\u002Fmanual\u002Fen\u002Ftimezones.php\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>EXAMPLES\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.mvana.org\u002Fjust-for-today\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.mvana.org\u002Fjust-for-today\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>As A Widget\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fcrossroadsarea.org\u002Fevents-activities\u002F\" rel=\"nofollow ugc\">http:\u002F\u002Fcrossroadsarea.org\u002Fevents-activities\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>MORE INFORMATION\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbmlt-enabled\u002Ffetch-jft\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Fbmlt-enabled\u002Ffetch-jft\u003C\u002Fa>\u003C\u002Fp>\n","Hosted JFT is a plugin that allows an NA Community to host their own translated version of the JFT. Add the [hosted_jft]",0,1101,"2023-05-17T21:14:00.000Z","6.2.9","",[4,17,18,19,20],"jft","just-for-today","na","narcotics-anonymous","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhosted-jft\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhosted-jft.1.0.3.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":28,"total_installs":29,"avg_security_score":30,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},10,370,98,1,99,"2026-04-05T05:53:59.314Z",[35,52,71,84,97],{"slug":36,"name":37,"version":38,"author":7,"author_profile":8,"description":39,"short_description":40,"active_installs":41,"downloaded":42,"rating":43,"num_ratings":44,"last_updated":45,"tested_up_to":46,"requires_at_least":15,"requires_php":47,"tags":48,"homepage":49,"download_link":50,"security_score":32,"vuln_count":31,"unpatched_count":11,"last_vuln_date":51,"fetched_at":25},"fetch-jft","Fetch JFT","1.9.1","\u003Cp>Fetch JFT is a plugin that pulls the Just For Today from jftna.org and puts it on your page or post. Use the widget Fetch JFT to add to your sidebar or footer.\u003C\u002Fp>\n\u003Cp>SHORTCODE\u003Cbr \u002F>\nBasic: [jft]\u003Cbr \u002F>\nLanguages: Danish, English, Farsi, French, German, Italian, Japanese, Portuguese, Russian, Spanish, Swedish [jft language=””]\u003Cbr \u002F>\nLayout: Table, Block [jft layout=””]\u003Cbr \u002F>\n— Shortcode parameters can be combined and accept either uppercase or lowercase\u003C\u002Fp>\n\u003Cp>EXAMPLES\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.mvana.org\u002Fjust-for-today\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.mvana.org\u002Fjust-for-today\u002F\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fnewyorkna.org\u002Finformation\u002Fjust-for-today\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fnewyorkna.org\u002Finformation\u002Fjust-for-today\u002F\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.na-ireland.org\u002Ffor-our-members\u002Fjust-for-today\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.na-ireland.org\u002Ffor-our-members\u002Fjust-for-today\u002F\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fhillcountryna.org\u002Fjust-for-today\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fhillcountryna.org\u002Fjust-for-today\u002F\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.otwna.org\u002Fjust-for-today\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.otwna.org\u002Fjust-for-today\u002F\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Femeraldcoastareana.org\u002F\" rel=\"nofollow ugc\">http:\u002F\u002Femeraldcoastareana.org\u002F\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fsuncityna.org\u002Fmembers\u002Fjust-for-today\u002F\" rel=\"nofollow ugc\">http:\u002F\u002Fsuncityna.org\u002Fmembers\u002Fjust-for-today\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>As A Widget\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fcrossroadsarea.org\u002Fevents-activities\u002F\" rel=\"nofollow ugc\">http:\u002F\u002Fcrossroadsarea.org\u002Fevents-activities\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>MORE INFORMATION\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbmlt-enabled\u002Ffetch-jft\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Fbmlt-enabled\u002Ffetch-jft\u003C\u002Fa>\u003C\u002Fp>\n","Fetch JFT is a plugin that pulls the Just For Today from jftna.org and puts it on your page or post.",100,6657,90,2,"2025-06-06T17:39:00.000Z","6.8.5","7.3",[17,18,19,20],"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ffetch-jft\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffetch-jft.1.9.1.zip","2024-05-28 16:54:09",{"slug":53,"name":54,"version":55,"author":56,"author_profile":57,"description":58,"short_description":59,"active_installs":60,"downloaded":61,"rating":11,"num_ratings":11,"last_updated":62,"tested_up_to":63,"requires_at_least":64,"requires_php":65,"tags":66,"homepage":69,"download_link":70,"security_score":41,"vuln_count":11,"unpatched_count":11,"last_vuln_date":24,"fetched_at":25},"bread","Bread","2.9.11","radius314","https:\u002F\u002Fprofiles.wordpress.org\u002Fradius314\u002F","\u003Cp>“bread” is a fork of the BMLT meeting list generator.  It allows for the creation of a meeting schedule from a BMLT server.\u003C\u002Fp>\n","A web-based tool that creates, maintains and generates a PDF meeting list from BMLT.",300,17421,"2026-02-05T14:01:00.000Z","6.9.4","6.2","8.1",[67,68,19,20],"bmlt","meeting-list","https:\u002F\u002Fbmlt.app","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbread.2.9.11.zip",{"slug":72,"name":72,"version":73,"author":56,"author_profile":57,"description":74,"short_description":75,"active_installs":60,"downloaded":76,"rating":41,"num_ratings":44,"last_updated":77,"tested_up_to":63,"requires_at_least":78,"requires_php":79,"tags":80,"homepage":82,"download_link":83,"security_score":41,"vuln_count":11,"unpatched_count":11,"last_vuln_date":24,"fetched_at":25},"crouton","4.1.4","\u003Cp>Crouton provides a UI for viewing recovery meetings stored in a Basic Meeting List Toolbox (BMLT) database.  Simply put a shortcode on a WordPress page to get an interactive display list of meetings.\u003Cbr \u002F>\nThis plugin provides shortcodes to view the meetings as a table, a map or insert the number of meetings and groups in specified service bodies.  Configure Crouton from the WordPress backend, using attributes in the shortcode or using query string parameters.  The admin UI contains detailed instructions.\u003C\u002Fp>\n","crouton provides a UI and more for view recovery meetings as stored in a Basic Meeting List Toolbox (BMLT) database.",34335,"2026-03-10T07:11:00.000Z","4.0","8.0",[67,68,20,81],"recovery","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcrouton\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcrouton.4.1.4.zip",{"slug":85,"name":86,"version":87,"author":7,"author_profile":8,"description":88,"short_description":89,"active_installs":90,"downloaded":91,"rating":11,"num_ratings":11,"last_updated":92,"tested_up_to":63,"requires_at_least":64,"requires_php":65,"tags":93,"homepage":95,"download_link":96,"security_score":41,"vuln_count":11,"unpatched_count":11,"last_vuln_date":24,"fetched_at":25},"fetch-meditation","Fetch Meditation","1.5.0","\u003Cp>Fetch Meditation is a plugin that pulls either the Spiritual Principle A Day or Just For Today and puts it on your page or post.\u003C\u002Fp>\n\u003Cp>Use one of the following shortcodes in your page or post:\u003Cbr \u002F>\n– [fetch_meditation] – General shortcode (requires book attribute)\u003Cbr \u002F>\n– [jft] – Just For Today meditation\u003Cbr \u002F>\n– [spad] – Spiritual Principle A Day meditation\u003C\u002Fp>\n\u003Cp>SHORTCODES\u003Cbr \u002F>\nBasic JFT: [jft]\u003Cbr \u002F>\nBasic SPAD: [spad]\u003Cbr \u002F>\nBoth (Tabbed): [fetch_meditation book=”both”]\u003Cbr \u002F>\nGeneral: [fetch_meditation book=”jft”]\u003Cbr \u002F>\nLayout: table, block [jft layout=”block”] or [spad layout=”table”]\u003Cbr \u002F>\nLanguage: JFT: english, french, german, italian, portuguese, russian, spanish, swedish. SPAD: english, german [jft language=”spanish”] or [spad language=”german”]\u003Cbr \u002F>\nTimezone (English Only): Any valid IANA \u003Ca href=\"https:\u002F\u002Fwww.php.net\u002Fmanual\u002Fen\u002Ftimezones.php\" rel=\"nofollow ugc\">timezone\u003C\u002Fa> [jft timezone=”America\u002FNew_York”]\u003Cbr \u002F>\nTheme: default, jft-style, spad-style [jft theme=”default”] or [fetch_meditation theme=”spad-style”] (Note: [jft] defaults to jft-style, [spad] defaults to spad-style)\u003Cbr \u002F>\nExcerpt: Show quote and metadata with read more link (hides paragraphs\u002Fthought) [jft excerpt=”true” read_more_url=”\u002Ffull-page\u002F”]\u003C\u002Fp>\n\u003Cp>TABBED DISPLAY (book=”both” only)\u003Cbr \u002F>\nDisplay both JFT and SPAD meditations in an interactive interface:\u003Cbr \u002F>\n– Basic (horizontal tabs): [fetch_meditation book=”both”]\u003Cbr \u002F>\n– Accordion layout: [fetch_meditation book=”both” tabs_layout=”accordion”]\u003Cbr \u002F>\n– Tabs layout (default): [fetch_meditation book=”both” tabs_layout=”tabs”]\u003C\u002Fp>\n\u003Cp>EXCERPT MODE\u003Cbr \u002F>\nShow meditation preview on front page with link to full reading.\u003Cbr \u002F>\nDisplays date, title, page, quote, and source with “Read more” link (skips paragraphs, thought, copyright).\u003Cbr \u002F>\nTypical workflow: Use excerpt on homepage, full meditation on dedicated page:\u003Cbr \u002F>\n– Homepage: [jft excerpt=”true” read_more_url=”\u002Fdaily-meditation\u002F”]\u003Cbr \u002F>\n– Full meditation page (\u002Fdaily-meditation\u002F): [jft excerpt=”false”]\u003C\u002Fp>\n\u003Cp>MORE INFORMATION\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbmlt-enabled\u002Ffetch-meditation-wp\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Fbmlt-enabled\u002Ffetch-meditation-wp\u003C\u002Fa>\u003C\u002Fp>\n","Fetch Meditation is a plugin that pulls either the Spiritual Principle A Day or Just For Today and puts it on your page or post.",70,2698,"2026-01-30T16:52:00.000Z",[67,85,17,19,94],"spad","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ffetch-meditation\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffetch-meditation.1.5.0.zip",{"slug":98,"name":99,"version":100,"author":7,"author_profile":8,"description":101,"short_description":102,"active_installs":90,"downloaded":103,"rating":41,"num_ratings":31,"last_updated":104,"tested_up_to":46,"requires_at_least":15,"requires_php":79,"tags":105,"homepage":108,"download_link":109,"security_score":41,"vuln_count":11,"unpatched_count":11,"last_vuln_date":24,"fetched_at":25},"list-locations-bmlt","List Locations BMLT","2.4.0","\u003Cp>List Locations BMLT is a plugin that returns all unique towns or counties from your BMLT server for a given service body on your site.\u003C\u002Fp>\n\u003Cp>SHORTCODE\u003Cbr \u002F>\nBasic: [list_locations]\u003Cbr \u002F>\nAttributes: root_server, services, recursive, state, delimiter, list, state_skip, city_skip\u003C\u002Fp>\n\u003Cp>— Shortcode parameters can be combined\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>A minimum of root_server and services attribute are required, which would return all towns for that service body seperated by a comma.\u003C\u002Fp>\n\u003Cp>Ex. [list_locations root_server=\"https:\u002F\u002Fwww.domain.org\u002Fmain_server\" services=\"50\"]\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Recursive:\u003C\u002Fstrong> to recurse service bodies add recursive=\"1\"\u003Cbr \u002F>\nEx. [list_locations root_server=\"https:\u002F\u002Fwww.domain.org\u002Fmain_server\" services=\"50\" recursive=\"1\"]\u003C\u002Fp>\n\u003Cp>\u003Cstrong>State:\u003C\u002Fstrong> to remove appending of the state add state=\"0\"\u003Cbr \u002F>\nEx. [list_locations root_server=\"https:\u002F\u002Fwww.domain.org\u002Fmain_server\" services=\"50\" state=\"0\"]\u003C\u002Fp>\n\u003Cp>\u003Cstrong>State Skip:\u003C\u002Fstrong> to skip the inclusion of a state when using state=\"1\" add state_skip=\"NC\"\u003Cbr \u002F>\nEx. [list_locations root_server=\"https:\u002F\u002Fwww.domain.org\u002Fmain_server\" services=\"50\" state=\"1\" state_skip=\"NC\"]\u003C\u002Fp>\n\u003Cp>\u003Cstrong>City Skip\u003C\u002Fstrong> To skip the inclusion of a city add city_skip=\"Indianapolis\". This can be useful when mentioning a city out of order or in a different part of the text.\u003Cbr \u002F>\nEx. [list_locations root_server=\"https:\u002F\u002Fwww.domain.org\u002Fmain_server\" services=\"50\" state=\"1\" city_skip=\"Indianapolis\"]\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Services:\u003C\u002Fstrong> to add multiple service bodies just seperate by a comma.\u003Cbr \u002F>\nEx. [list_locations root_server=\"https:\u002F\u002Fwww.domain.org\u002Fmain_server\" services=\"50,37,26\"]\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Delimiter:\u003C\u002Fstrong> to change the delimiter to something besides a comma I would add delimiter=\" – \" or to create newlines between each I could do this delimiter=\"\u003Cbr>\", or delimiter=\"\u003Cp>\u003C\u002Fp>\"\u003Cbr \u002F>\nEx. [list_locations root_server=\"https:\u002F\u002Fwww.domain.org\u002Fmain_server\" delimiter=\"\u003Cbr>\"]\u003C\u002Fp>\n\u003Cp>\u003Cstrong>List:\u003C\u002Fstrong> You can list by the following town, county, borough, neighborhood. The default is town.\u003Cbr \u002F>\nEx. [list_locations root_server=\"https:\u002F\u002Fwww.domain.org\u002Fmain_server\" list=\"town\"]\u003C\u002Fp>\n\u003Cp>\u003Cstrong>custom_query\u003C\u002Fstrong> You can add a custom query from semantic api to filter results, for ex by format \u003Ccode>&formats=54\u003C\u002Fcode>.\u003Cbr \u002F>\nEx. [list_locations root_server=\"https:\u002F\u002Fwww.domain.org\u002Fmain_server\" custom_query=\"&formats=54\"]\u003C\u002Fp>\n\u003Ch3>EXAMPLES\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.crna.org\u002Farea-service-committees\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.crna.org\u002Farea-service-committees\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fheartoflongislandna.org\" rel=\"nofollow ugc\">https:\u002F\u002Fheartoflongislandna.org\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Feanaonline.org\" rel=\"nofollow ugc\">https:\u002F\u002Feanaonline.org\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>MORE INFORMATION\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbmlt-enabled\u002Flist-locations-bmlt\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Fbmlt-enabled\u002Flist-locations-bmlt\u003C\u002Fa>\u003C\u002Fp>\n","List Locations BMLT is a plugin that returns all unique towns or counties from your BMLT server for a given service body on your site.",3112,"2025-09-12T22:24:00.000Z",[106,67,107,98,20],"basic-meeting-list-toolbox","list-locations","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Flist-locations-bmlt\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flist-locations-bmlt.2.4.0.zip",{"attackSurface":111,"codeSignals":139,"taintFlows":174,"riskAssessment":175,"analyzedAt":185},{"hooks":112,"ajaxHandlers":131,"restRoutes":132,"shortcodes":133,"cronEvents":138,"entryPointCount":31,"unprotectedCount":11},[113,119,124,128],{"type":114,"name":115,"callback":116,"file":117,"line":118},"action","admin_init","hosted_jft_plugin_settings","admin\\hosted-jft-dashboard.php",14,{"type":114,"name":120,"callback":121,"file":122,"line":123},"admin_menu","hosted_jft_options_menu","hosted-jft-plugin.php",17,{"type":114,"name":125,"callback":126,"file":122,"line":127},"pre_get_posts","closure",95,{"type":114,"name":129,"callback":126,"file":122,"line":130},"widgets_init",133,[],[],[134],{"tag":135,"callback":136,"file":122,"line":137},"hosted_jft","hosted_jft_func",129,[],{"dangerousFunctions":140,"sqlUsage":141,"outputEscaping":143,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":173},[],{"prepared":11,"raw":11,"locations":142},[],{"escaped":144,"rawEcho":118,"locations":145},11,[146,149,151,152,154,155,157,159,161,163,165,167,169,171],{"file":117,"line":147,"context":148},30,"raw output",{"file":117,"line":150,"context":148},44,{"file":117,"line":150,"context":148},{"file":117,"line":153,"context":148},46,{"file":117,"line":153,"context":148},{"file":117,"line":156,"context":148},56,{"file":117,"line":158,"context":148},63,{"file":122,"line":160,"context":148},122,{"file":122,"line":162,"context":148},169,{"file":122,"line":164,"context":148},171,{"file":122,"line":166,"context":148},176,{"file":122,"line":168,"context":148},177,{"file":122,"line":170,"context":148},178,{"file":122,"line":172,"context":148},179,[],[],{"summary":176,"deductions":177},"The \"hosted-jft\" plugin v1.0.3 exhibits a generally positive security posture based on the static analysis provided. The absence of dangerous functions, file operations, external HTTP requests, and a complete reliance on prepared statements for SQL queries are strong indicators of good development practices.  The plugin also scores well on output escaping with 44% of outputs properly handled, which is a reasonable starting point, though further improvement is always beneficial. The vulnerability history is also a significant strength, with no known CVEs recorded, suggesting a history of secure development or thorough vetting.\n\nHowever, there are areas that warrant attention. The analysis indicates zero nonce checks and zero capability checks across all entry points. While the static analysis reports no unprotected entry points (AJAX handlers, REST API routes, shortcodes, cron events), the absence of explicit capability checks and nonce verification on any code signals is a significant concern. This leaves potential avenues for unauthorized actions or cross-site request forgery (CSRF) if any of the 1 entry point (shortcode) could be manipulated without proper authorization checks.  The taint analysis showing zero flows is good, but it's important to note that the total flows analyzed is also zero, which might indicate limited scope or complexity in the plugin's operation, not necessarily a guarantee of perfect taint handling if more complex interactions were present.\n\nIn conclusion, \"hosted-jft\" v1.0.3 has several strong security foundations, particularly in its SQL handling and lack of historical vulnerabilities. Nevertheless, the complete absence of nonce and capability checks across its entry points represents a notable weakness that could be exploited. The plugin is relatively secure but has clear room for improvement in authorization and authentication mechanisms for its accessible features.",[178,180,182],{"reason":179,"points":28},"No nonce checks on entry points",{"reason":181,"points":28},"No capability checks on entry points",{"reason":183,"points":184},"Output escaping only 44% proper",5,"2026-03-17T06:36:17.922Z",{"wat":187,"direct":192},{"assetPaths":188,"generatorPatterns":189,"scriptPaths":190,"versionParams":191},[],[],[],[],{"cssClasses":193,"htmlComments":198,"htmlAttributes":201,"restEndpoints":203,"jsGlobals":205,"shortcodeOutput":206},[194,195,196,197],"spo-title","jft-widget-title","jft-widget-excerpt","jft-widget-link",[199,200]," START Hosted JFT Widget "," END Hosted JFT Widget ",[202],"hosted_jft_widget",[204],"\u002Fwp-json\u002Fhosted-jft\u002Fv1\u002Fget-jft",[],[207,208,209,210,211],"\u003Cdiv class=\"spo-title\">\u003Ch2 class=\"spo-title\">","\u003Cdiv class=\"jft-widget-title\">","\u003Cdiv class=\"jft-widget-excerpt\">","\u003Ca href=\"","\" class=\"jft-widget-link\">"]