[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnAnrfFdGzqHRLxitAzmcjoKXDL515mjAIkhB-2adqrg":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":34,"analysis":117,"fingerprints":156},"json-feed","JSON feed","1.3","chrisnorthwood","https:\u002F\u002Fprofiles.wordpress.org\u002Fchrisnorthwood\u002F","\u003Cp>Pretty simple, really. Adds a new type of feed you can subscribe to. Simply\u003Cbr \u002F>\nadd \u003Ccode>?feed=json\u003C\u002Fcode> to anywhere you get a normal feed to get it in JSON form\u003Cbr \u002F>\n(but with a cutdown version of events).\u003C\u002Fp>\n\u003Cp>Version 1.1 added support for JSONP. To get a JSONP response instead of a\u003Cbr \u002F>\nnormal JSON structure, simply add \u003Ccode>jsonp=callbackName\u003C\u002Fcode> to your query, where\u003Cbr \u002F>\n    callbackName is the name of the function to be wrapped with.\u003C\u002Fp>\n\u003Cp>To use this with jQuery, you’ll want to do something like:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>$.getJSON(\"http:\u002F\u002Fexample.com\u002Ffeed\u002F?feed=json&jsonp=?\",\n       function(data){\n               console.debug(data[0].title);   \u002F\u002F print title of first item to firebug console\n       });\n});\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>(thanks to Dan “Tack” Trudell)\u003C\u002Fp>\n","Pretty simple, really. Adds a new type of feed you can subscribe to. Simply",100,16484,0,"2009-11-19T23:31:00.000Z","2.9.2","2.7.1","",[19,20,21],"feed","feeds","json","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjson-feed\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjson-feed.1.3.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":30,"avg_security_score":24,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},5,240,30,84,"2026-04-04T11:16:38.539Z",[35,53,72,87,100],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":11,"num_ratings":29,"last_updated":45,"tested_up_to":46,"requires_at_least":47,"requires_php":48,"tags":49,"homepage":50,"download_link":51,"security_score":52,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"jsonfeed","JSON Feed (jsonfeed.org)","1.4.5","mantonr","https:\u002F\u002Fprofiles.wordpress.org\u002Fmantonr\u002F","\u003Cp>Adds a JSON Feed to your WordPress site by adding \u003Ccode>\u002Ffeed\u002Fjson\u003C\u002Fcode> to any URL.\u003C\u002Fp>\n\u003Cp>The JSON Feed format is a pragmatic syndication format, like RSS and Atom, but with one big difference: it’s JSON instead of XML. Learn more at \u003Ca href=\"http:\u002F\u002Fjsonfeed.org\u002F\" rel=\"nofollow ugc\">jsonfeed.org\u003C\u002Fa>.\u003C\u002Fp>\n","Adds feeds in JSON Feed format.",1000,55677,"2024-04-05T13:41:00.000Z","6.5.8","4.9","5.6",[19,20,21,36],"https:\u002F\u002Fgithub.com\u002Fmanton\u002Fjsonfeed-wp\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjsonfeed.1.4.5.zip",92,{"slug":54,"name":55,"version":56,"author":57,"author_profile":58,"description":59,"short_description":60,"active_installs":61,"downloaded":62,"rating":63,"num_ratings":64,"last_updated":65,"tested_up_to":66,"requires_at_least":67,"requires_php":17,"tags":68,"homepage":70,"download_link":71,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"feed-json","Feed JSON","1.0.10","wokamoto","https:\u002F\u002Fprofiles.wordpress.org\u002Fwokamoto\u002F","\u003Cp>Adds a new type of feed you can subscribe to.\u003Cbr \u002F>\n    http:\u002F\u002Fexample.com\u002Ffeed\u002Fjson or \u003Ccode>http:\u002F\u002Fexample.com\u002F?feed=json\u003C\u002Fcode> to anywhere you get a JSON form.\u003Cbr \u002F>\n    http:\u002F\u002Fexample.com\u002Ffeed\u002Fjson?callback=callback or \u003Ccode>http:\u002F\u002Fexample.com\u002F?feed=json&callback=callback\u003C\u002Fcode> to anywhere you get a JSONP.\u003C\u002Fp>\n","Adds a new type of feed you can subscribe to.",500,21681,80,4,"2017-01-18T02:29:00.000Z","4.7.32","3.0",[19,20,21,69],"jsonp","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Ffeed-json\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffeed-json.1.0.10.zip",{"slug":73,"name":74,"version":75,"author":76,"author_profile":77,"description":78,"short_description":79,"active_installs":80,"downloaded":81,"rating":13,"num_ratings":13,"last_updated":17,"tested_up_to":66,"requires_at_least":82,"requires_php":17,"tags":83,"homepage":84,"download_link":85,"security_score":11,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":86},"json-feeder","JSON Feeder","1.0.6","Signalfade","https:\u002F\u002Fprofiles.wordpress.org\u002Fsignalfade\u002F","\u003Cp>Adds a new type of feed you can subscribe to.\u003Cbr \u002F>\n    http:\u002F\u002Fexample.com\u002Ffeed\u002Fjson or \u003Ccode>http:\u002F\u002Fexample.com\u002F?feed=json\u003C\u002Fcode> to anywhere and you’ll get JSON back.\u003C\u002Fp>\n","Adds a feed based on the jsonfeed.org standard that one can subscribe to or parse.",10,1386,"4.0",[19,20,21,36],"http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjson-feeder\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjson-feeder.1.0.6.zip","2026-03-15T10:48:56.248Z",{"slug":88,"name":55,"version":89,"author":90,"author_profile":91,"description":92,"short_description":93,"active_installs":80,"downloaded":94,"rating":13,"num_ratings":13,"last_updated":17,"tested_up_to":95,"requires_at_least":67,"requires_php":17,"tags":96,"homepage":98,"download_link":99,"security_score":11,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":86},"tabletize-json-connector","1.0.0","appfactory","https:\u002F\u002Fprofiles.wordpress.org\u002Fappfactory\u002F","\u003Cp>Expose a new type of feed compatible with a Tabletize data source.\u003Cbr \u002F>\nYou can point your Tabletize external data source to \u003Ccode>http:\u002F\u002Fexample.com\u002Ffeed\u002Fjson\u003C\u002Fcode> or \u003Ccode>http:\u002F\u002Fexample.com\u002F?feed=json\u003C\u002Fcode> and you get a fully functional Tabletize data source that you can use with a list element.\u003Cbr \u002F>\nYou can find out more about external data sources here: \u003Ccode>http:\u002F\u002Fhelp.tabletize.com\u002Fdata\u002Fexternal-source\u002F\u003C\u002Fcode>.\u003C\u002Fp>\n","Expose Wordpress posts to be used by a Tabletize data source.",1809,"3.9.40",[19,20,21,69,97],"tabletize","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Ftabletize-json\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftabletize-json-connector.zip",{"slug":101,"name":102,"version":103,"author":104,"author_profile":105,"description":106,"short_description":107,"active_installs":80,"downloaded":108,"rating":11,"num_ratings":109,"last_updated":110,"tested_up_to":111,"requires_at_least":112,"requires_php":17,"tags":113,"homepage":115,"download_link":116,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"wp-api-json-reader","WP API JSON READER","1.1","elsteno","https:\u002F\u002Fprofiles.wordpress.org\u002Felsteno\u002F","\u003Cp>This plugin provide a widget(s) to get, read and show posts from wordpress sites (with WP REST API Installed) to an other(s) wordpress site(s)!\u003C\u002Fp>\n","Get and show posts from an other WP website which have installed the WP REST API and provide json feeds via the API",1852,1,"2015-05-28T09:07:00.000Z","4.4.34","4.0.0",[20,21,114],"wp-api","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwpapi-json-reader\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-api-json-reader.1.1.zip",{"attackSurface":118,"codeSignals":135,"taintFlows":148,"riskAssessment":149,"analyzedAt":155},{"hooks":119,"ajaxHandlers":131,"restRoutes":132,"shortcodes":133,"cronEvents":134,"entryPointCount":13,"unprotectedCount":13},[120,126],{"type":121,"name":122,"callback":123,"file":124,"line":125},"filter","query_vars","json_feed_queryvars","json-feed.php",11,{"type":127,"name":128,"callback":129,"file":124,"line":130},"action","do_feed_json","json_feed",127,[],[],[],[],{"dangerousFunctions":136,"sqlUsage":137,"outputEscaping":139,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":147},[],{"prepared":13,"raw":13,"locations":138},[],{"escaped":13,"rawEcho":140,"locations":141},2,[142,145],{"file":124,"line":143,"context":144},42,"raw output",{"file":124,"line":146,"context":144},47,[],[],{"summary":150,"deductions":151},"The 'json-feed' v1.3 plugin presents a mixed security picture.  On the positive side, static analysis reveals no identified attack surface points, no dangerous functions, and all SQL queries utilize prepared statements. The vulnerability history is also clear, with no known CVEs recorded, suggesting a history of good security practices or limited exposure.  However, a significant concern arises from the output escaping. With 2 total outputs and 0% properly escaped, this indicates a high risk of Cross-Site Scripting (XSS) vulnerabilities.  Any data displayed by the plugin that originates from user input or external sources could potentially be manipulated to inject malicious scripts, impacting users visiting the site or administrators managing the plugin.",[152],{"reason":153,"points":154},"All outputs are unescaped",7,"2026-03-16T20:58:04.466Z",{"wat":157,"direct":162},{"assetPaths":158,"generatorPatterns":159,"scriptPaths":160,"versionParams":161},[],[],[],[],{"cssClasses":163,"htmlComments":164,"htmlAttributes":165,"restEndpoints":166,"jsGlobals":168,"shortcodeOutput":169},[],[],[],[167],"\u002Fwp-json\u002F",[],[]]