[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flzWtDKQD_4iUIZOpTZ_RyHyUcBoKv-I24holwen3b8U":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":13,"tags":16,"homepage":22,"download_link":23,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":36,"analysis":37,"fingerprints":129},"interactive-map-of-new-york","Interactive Map of New York","2.7","WP Map Plugins","https:\u002F\u002Fprofiles.wordpress.org\u002Fclickmaps\u002F","\u003Cp>Interactive map of New York WordPress plugin with clickable counties. Edit colors, link, etc for each county through an easy to use dashboard with a Visual Editor.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Does NOT require ANY coding knowledge.\u003C\u002Fli>\n\u003Cli>EASY to use dashboard.\u003C\u002Fli>\n\u003Cli>Bulk Edit option.\u003C\u002Fli>\n\u003Cli>Works on desktop and mobile devices.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You may be interested in the \u003Ca href=\"https:\u002F\u002Fwww.wpmapplugins.com\u002Fstates\u002Finteractive-map-of-new-york-wordpress-plugin.html\" rel=\"nofollow ugc\">Premium Interactive Map of New York\u003C\u002Fa> which has more options.\u003C\u002Fp>\n\u003Cp>Other interesting maps: \u003Ca href=\"https:\u002F\u002Fwww.wpmapplugins.com\u002Finteractive-world-map-by-countries-wordpress-plugin.html\" rel=\"nofollow ugc\">World\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.wpmapplugins.com\u002Finteractive-us-map-wordpress-plugin.html\" rel=\"nofollow ugc\">US\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.wpmapplugins.com\u002Finteractive-map-of-canada-wordpress-plugin.html\" rel=\"nofollow ugc\">Canada\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.wpmapplugins.com\u002Fstates\u002Findividual-us-state-maps-package-wordpress-plugins.html\" rel=\"nofollow ugc\">Other States\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.wpmapplugins.com\u002Fall-maps.html\" rel=\"nofollow ugc\">All Maps\u003C\u002Fa>.\u003C\u002Fp>\n","Interactive map of New York WordPress plugin with counties.",0,1482,"","6.8.5","3.4",[17,18,19,20,21],"new-york-map","new-york-map-plugin","ny-county-map","wordpress-map-ny","wp-map-ny","https:\u002F\u002Fwww.wpmapplugins.com\u002Fstates\u002Finteractive-map-of-new-york-wordpress-plugin.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finteractive-map-of-new-york.zip",100,null,"2026-03-15T10:48:56.248Z",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":32,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"clickmaps",7,1540,84,81,77,"2026-04-04T14:48:25.873Z",[],{"attackSurface":38,"codeSignals":67,"taintFlows":92,"riskAssessment":121,"analyzedAt":128},{"hooks":39,"ajaxHandlers":58,"restRoutes":59,"shortcodes":60,"cronEvents":65,"entryPointCount":66,"unprotectedCount":11},[40,46,50,54],{"type":41,"name":42,"callback":43,"file":44,"line":45},"action","admin_menu","addOptionsPage","nyus-map-org.php",49,{"type":41,"name":47,"callback":48,"file":44,"line":49},"admin_footer","addJsConfigInFooter",50,{"type":41,"name":51,"callback":52,"file":44,"line":53},"admin_enqueue_scripts","initAdminScript",51,{"type":41,"name":55,"callback":56,"file":44,"line":57},"init","loadTextdomain",52,[],[],[61],{"tag":62,"callback":63,"file":44,"line":64},"nyus_map_org","NYUSMap_ORGShortcode",56,[],1,{"dangerousFunctions":68,"sqlUsage":69,"outputEscaping":71,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":87,"bundledLibraries":88},[],{"prepared":11,"raw":11,"locations":70},[],{"escaped":72,"rawEcho":73,"locations":74},891,5,[75,79,81,83,85],{"file":76,"line":77,"context":78},"includes\\js-config.php",4,"raw output",{"file":76,"line":80,"context":78},8,{"file":76,"line":82,"context":78},10,{"file":76,"line":84,"context":78},11,{"file":76,"line":86,"context":78},12,2,[89],{"name":90,"version":25,"knownCves":91},"TinyMCE",[],[93,112],{"entryPoint":94,"graph":95,"unsanitizedCount":110,"severity":111},"updateOptions (nyus-map-org.php:113)",{"nodes":96,"edges":107},[97,102],{"id":98,"type":99,"label":100,"file":44,"line":101},"n0","source","$_POST (x3)",124,{"id":103,"type":104,"label":105,"file":44,"line":101,"wp_function":106},"n1","sink","update_option() [Settings Manipulation]","update_option",[108],{"from":98,"to":103,"sanitized":109},false,3,"low",{"entryPoint":113,"graph":114,"unsanitizedCount":11,"severity":111},"\u003Cnyus-map-org> (nyus-map-org.php:0)",{"nodes":115,"edges":118},[116,117],{"id":98,"type":99,"label":100,"file":44,"line":101},{"id":103,"type":104,"label":105,"file":44,"line":101,"wp_function":106},[119],{"from":98,"to":103,"sanitized":120},true,{"summary":122,"deductions":123},"The interactive-map-of-new-york plugin version 2.7 exhibits a generally strong security posture, with excellent adherence to secure coding practices. The plugin demonstrates a commitment to preventing common web vulnerabilities by utilizing prepared statements for all SQL queries and ensuring that almost all output is properly escaped. The absence of dangerous functions, file operations, and external HTTP requests further strengthens its security. The vulnerability history is also a significant positive, with no recorded CVEs, indicating a well-maintained and secure codebase over time.\n\nDespite the overall positive assessment, there are a few areas that warrant attention. The presence of one flow with an unsanitized path in the taint analysis, even if not rated as critical or high severity, represents a potential avenue for attack if exploited. Additionally, the plugin lacks nonce checks, which is a crucial security measure for preventing Cross-Site Request Forgery (CSRF) attacks, particularly on entry points like shortcodes. While the capability checks are present, the absence of nonce checks on the identified shortcode entry point leaves it exposed.\n\nIn conclusion, interactive-map-of-new-york v2.7 is a securely developed plugin with a clean history and robust defense against many common threats. However, the identified unsanitized path and the missing nonce checks on the shortcode represent specific, albeit potentially low-severity, risks that should be addressed to achieve a truly robust security profile.",[124,126],{"reason":125,"points":30},"Flow with unsanitized path identified",{"reason":127,"points":73},"Missing nonce checks on shortcode","2026-03-17T05:49:41.550Z",{"wat":130,"direct":150},{"assetPaths":131,"generatorPatterns":138,"scriptPaths":139,"versionParams":143},[132,133,134,135,136,137],"\u002Fwp-content\u002Fplugins\u002Finteractive-map-of-new-york\u002Fpublic\u002Fcss\u002Fmap-style.css","\u002Fwp-content\u002Fplugins\u002Finteractive-map-of-new-york\u002Fpublic\u002Fjs\u002Fmap-interact.js","\u002Fwp-content\u002Fplugins\u002Finteractive-map-of-new-york\u002Fpublic\u002Fcss\u002Fdashboard-style.css","\u002Fwp-content\u002Fplugins\u002Finteractive-map-of-new-york\u002Fpublic\u002Fcss\u002Ftinyeditor.css","\u002Fwp-content\u002Fplugins\u002Finteractive-map-of-new-york\u002Fpublic\u002Fjs\u002Feditor\u002Ftinymce.min.js","\u002Fwp-content\u002Fplugins\u002Finteractive-map-of-new-york\u002Fpublic\u002Fjs\u002Feditor\u002Fscripts.js",[],[140,141,142],"public\u002Fjs\u002Fmap-interact.js","public\u002Fjs\u002Feditor\u002Ftinymce.min.js","public\u002Fjs\u002Feditor\u002Fscripts.js",[144,145,146,147,148,149],"interactive-map-of-new-york\u002Fpublic\u002Fcss\u002Fmap-style.css?ver=1.0","interactive-map-of-new-york\u002Fpublic\u002Fjs\u002Fmap-interact.js?t=","interactive-map-of-new-york\u002Fpublic\u002Fcss\u002Fdashboard-style.css?ver=1.0","interactive-map-of-new-york\u002Fpublic\u002Fcss\u002Ftinyeditor.css?ver=1.0","interactive-map-of-new-york\u002Fpublic\u002Fjs\u002Feditor\u002Ftinymce.min.js?ver=1.0","interactive-map-of-new-york\u002Fpublic\u002Fjs\u002Feditor\u002Fscripts.js?ver=true",{"cssClasses":151,"htmlComments":153,"htmlAttributes":154,"restEndpoints":160,"jsGlobals":161,"shortcodeOutput":163},[152],"nyus-map-org-container",[],[155,156,157,158,159],"data-county","data-upclr","data-ovrclr","data-dwnclr","data-url",[],[162],"nyus_map_org_options",[164,165,166,167,168,169],"\u003Cdiv id=\"nyus-map-org-container\">","\u003Csvg class=\"nyus-map-org-container\" version=\"1.1\" id=\"Layer_1\" xmlns=\"http:\u002F\u002Fwww.w3.org\u002F2000\u002Fsvg\" xmlns:xlink=\"http:\u002F\u002Fwww.w3.org\u002F1999\u002Fxlink\" x=\"0px\" y=\"0px\" viewBox=\"0 0 800 600\" enable-background=\"new 0 0 800 600\" xml:space=\"preserve\">","\u003Cstyle type=\"text\u002Fcss\">",".nyus-map-org-container .county { cursor: pointer; }",".nyus-map-org-container .county:hover { fill-opacity: 0.8; }","\u003C\u002Fstyle>"]