[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKlfWk2MOuIeUTrS74rL7n417C6_oYHub2uHsA59V81M":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":14,"tags":17,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":35,"analysis":123,"fingerprints":182},"json-feeder","JSON Feeder","1.0.6","Signalfade","https:\u002F\u002Fprofiles.wordpress.org\u002Fsignalfade\u002F","\u003Cp>Adds a new type of feed you can subscribe to.\u003Cbr \u002F>\n    http:\u002F\u002Fexample.com\u002Ffeed\u002Fjson or \u003Ccode>http:\u002F\u002Fexample.com\u002F?feed=json\u003C\u002Fcode> to anywhere and you’ll get JSON back.\u003C\u002Fp>\n","Adds a feed based on the jsonfeed.org standard that one can subscribe to or parse.",10,1386,0,"","4.7.32","4.0",[18,19,20,21],"feed","feeds","json","jsonfeed","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjson-feeder\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjson-feeder.1.0.6.zip",100,null,"2026-03-15T10:48:56.248Z",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":32,"avg_patch_time_days":31,"trust_score":33,"computed_at":34},"signalfade",3,30,90,87,"2026-04-04T14:11:17.434Z",[36,55,74,89,110],{"slug":21,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":24,"num_ratings":45,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":51,"download_link":52,"security_score":53,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":54},"JSON Feed (jsonfeed.org)","1.4.5","mantonr","https:\u002F\u002Fprofiles.wordpress.org\u002Fmantonr\u002F","\u003Cp>Adds a JSON Feed to your WordPress site by adding \u003Ccode>\u002Ffeed\u002Fjson\u003C\u002Fcode> to any URL.\u003C\u002Fp>\n\u003Cp>The JSON Feed format is a pragmatic syndication format, like RSS and Atom, but with one big difference: it’s JSON instead of XML. Learn more at \u003Ca href=\"http:\u002F\u002Fjsonfeed.org\u002F\" rel=\"nofollow ugc\">jsonfeed.org\u003C\u002Fa>.\u003C\u002Fp>\n","Adds feeds in JSON Feed format.",1000,55677,5,"2024-04-05T13:41:00.000Z","6.5.8","4.9","5.6",[18,19,20,21],"https:\u002F\u002Fgithub.com\u002Fmanton\u002Fjsonfeed-wp\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjsonfeed.1.4.5.zip",92,"2026-03-15T15:16:48.613Z",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":65,"num_ratings":66,"last_updated":67,"tested_up_to":15,"requires_at_least":68,"requires_php":14,"tags":69,"homepage":71,"download_link":72,"security_score":73,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":54},"feed-json","Feed JSON","1.0.10","wokamoto","https:\u002F\u002Fprofiles.wordpress.org\u002Fwokamoto\u002F","\u003Cp>Adds a new type of feed you can subscribe to.\u003Cbr \u002F>\n    http:\u002F\u002Fexample.com\u002Ffeed\u002Fjson or \u003Ccode>http:\u002F\u002Fexample.com\u002F?feed=json\u003C\u002Fcode> to anywhere you get a JSON form.\u003Cbr \u002F>\n    http:\u002F\u002Fexample.com\u002Ffeed\u002Fjson?callback=callback or \u003Ccode>http:\u002F\u002Fexample.com\u002F?feed=json&callback=callback\u003C\u002Fcode> to anywhere you get a JSONP.\u003C\u002Fp>\n","Adds a new type of feed you can subscribe to.",500,21681,80,4,"2017-01-18T02:29:00.000Z","3.0",[18,19,20,70],"jsonp","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Ffeed-json\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffeed-json.1.0.10.zip",85,{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":24,"downloaded":82,"rating":13,"num_ratings":13,"last_updated":83,"tested_up_to":84,"requires_at_least":85,"requires_php":14,"tags":86,"homepage":87,"download_link":88,"security_score":73,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":54},"json-feed","JSON feed","1.3","chrisnorthwood","https:\u002F\u002Fprofiles.wordpress.org\u002Fchrisnorthwood\u002F","\u003Cp>Pretty simple, really. Adds a new type of feed you can subscribe to. Simply\u003Cbr \u002F>\nadd \u003Ccode>?feed=json\u003C\u002Fcode> to anywhere you get a normal feed to get it in JSON form\u003Cbr \u002F>\n(but with a cutdown version of events).\u003C\u002Fp>\n\u003Cp>Version 1.1 added support for JSONP. To get a JSONP response instead of a\u003Cbr \u002F>\nnormal JSON structure, simply add \u003Ccode>jsonp=callbackName\u003C\u002Fcode> to your query, where\u003Cbr \u002F>\n    callbackName is the name of the function to be wrapped with.\u003C\u002Fp>\n\u003Cp>To use this with jQuery, you’ll want to do something like:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>$.getJSON(\"http:\u002F\u002Fexample.com\u002Ffeed\u002F?feed=json&jsonp=?\",\n       function(data){\n               console.debug(data[0].title);   \u002F\u002F print title of first item to firebug console\n       });\n});\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>(thanks to Dan “Tack” Trudell)\u003C\u002Fp>\n","Pretty simple, really. Adds a new type of feed you can subscribe to. Simply",16484,"2009-11-19T23:31:00.000Z","2.9.2","2.7.1",[18,19,20],"http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjson-feed\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjson-feed.1.3.zip",{"slug":90,"name":91,"version":92,"author":93,"author_profile":94,"description":95,"short_description":96,"active_installs":97,"downloaded":98,"rating":24,"num_ratings":99,"last_updated":100,"tested_up_to":101,"requires_at_least":102,"requires_php":103,"tags":104,"homepage":108,"download_link":109,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":54},"pinecast-wp-sync","Pinecast WordPress Sync","2.0.2","Pinecast","https:\u002F\u002Fprofiles.wordpress.org\u002Fpinecast\u002F","\u003Cp>This plugin allows you to sync your Pinecast podcast (or any JSONFeed-compatible podcast) with your WordPress blog.\u003C\u002Fp>\n\u003Cp>Please see Pinecast’s \u003Ca href=\"https:\u002F\u002Fpinecast.support\u002Fen\u002Farticles\u002F3072843-pinecast-wordpress-sync-plugin\" rel=\"nofollow ugc\">support website\u003C\u002Fa> for more information.\u003C\u002Fp>\n\u003Cp>After installing, visit Settings > Pinecast to add feeds. Add your Pinecast RSS feed URL (found on your podcast dashboard), along with the podcast’s name (for your reference), categories that you wish to be applied to each episode’s post, and whether you’d like to include episode artwork in the posts. Save changes.\u003C\u002Fp>\n\u003Cp>Once your podcast is added, you can press the Sync button to import episodes. Episodes will sync automatically every hour.\u003C\u002Fp>\n","This plugin allows you to sync your Pinecast podcast (or any JSONFeed-compatible podcast) with your WordPress blog.",60,10331,1,"2025-09-03T20:03:00.000Z","6.8.5","5.2","7.0",[21,105,106,107],"pinecast","podcast","sync","https:\u002F\u002Fhelp.pinecast.com\u002Farticles\u002F3072843-pinecast-wordpress-sync-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpinecast-wp-sync.2.0.2.zip",{"slug":111,"name":57,"version":112,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":11,"downloaded":117,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":118,"requires_at_least":68,"requires_php":14,"tags":119,"homepage":121,"download_link":122,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"tabletize-json-connector","1.0.0","appfactory","https:\u002F\u002Fprofiles.wordpress.org\u002Fappfactory\u002F","\u003Cp>Expose a new type of feed compatible with a Tabletize data source.\u003Cbr \u002F>\nYou can point your Tabletize external data source to \u003Ccode>http:\u002F\u002Fexample.com\u002Ffeed\u002Fjson\u003C\u002Fcode> or \u003Ccode>http:\u002F\u002Fexample.com\u002F?feed=json\u003C\u002Fcode> and you get a fully functional Tabletize data source that you can use with a list element.\u003Cbr \u002F>\nYou can find out more about external data sources here: \u003Ccode>http:\u002F\u002Fhelp.tabletize.com\u002Fdata\u002Fexternal-source\u002F\u003C\u002Fcode>.\u003C\u002Fp>\n","Expose Wordpress posts to be used by a Tabletize data source.",1809,"3.9.40",[18,19,20,70,120],"tabletize","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Ftabletize-json\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftabletize-json-connector.zip",{"attackSurface":124,"codeSignals":152,"taintFlows":171,"riskAssessment":172,"analyzedAt":181},{"hooks":125,"ajaxHandlers":148,"restRoutes":149,"shortcodes":150,"cronEvents":151,"entryPointCount":13,"unprotectedCount":13},[126,132,135,140,144],{"type":127,"name":128,"callback":129,"file":130,"line":131},"action","init","add_feed_json","json-feeder.php",51,{"type":127,"name":133,"callback":133,"priority":11,"file":130,"line":134},"do_feed_json",52,{"type":136,"name":137,"callback":138,"file":130,"line":139},"filter","template_include","template_json",53,{"type":136,"name":141,"callback":142,"file":130,"line":143},"query_vars","add_query_vars",54,{"type":127,"name":145,"callback":146,"priority":45,"file":130,"line":147},"wp_head","json_feed_org_tag",55,[],[],[],[],{"dangerousFunctions":153,"sqlUsage":154,"outputEscaping":156,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":170},[],{"prepared":13,"raw":13,"locations":155},[],{"escaped":99,"rawEcho":45,"locations":157},[158,161,163,165,168],{"file":130,"line":159,"context":160},110,"raw output",{"file":130,"line":162,"context":160},112,{"file":130,"line":164,"context":160},115,{"file":166,"line":167,"context":160},"template\\json-feeder.php",78,{"file":166,"line":169,"context":160},167,[],[],{"summary":173,"deductions":174},"The 'json-feeder' v1.0.6 plugin exhibits a strong security posture based on the provided static analysis. The absence of identifiable entry points like AJAX handlers, REST API routes, shortcodes, and cron events significantly limits the potential attack surface. Furthermore, the code signals indicate a conscientious approach to security, with no dangerous functions, all SQL queries using prepared statements, and no file operations or external HTTP requests being made. This suggests a well-contained and carefully developed plugin.\n\nHowever, the analysis does reveal a critical concern regarding output escaping. With only 17% of the outputs properly escaped, there is a high risk of cross-site scripting (XSS) vulnerabilities. Any data displayed to users that originates from untrusted sources and is not properly escaped could be exploited by attackers to inject malicious scripts. The lack of capability checks and nonce checks, while less concerning given the limited attack surface, still represents missed opportunities for robust security.\n\nThe plugin's vulnerability history is entirely clear, with no known CVEs or past issues. This, combined with the static analysis findings, indicates that the plugin has likely been developed with security in mind. Despite the strong history, the significant issue with output escaping warrants attention. The overall security is good due to the minimal attack surface and good practices in critical areas like SQL, but the unescaped output remains a notable weakness.",[175,177,179],{"reason":176,"points":11},"Unescaped output is prevalent",{"reason":178,"points":30},"No capability checks found",{"reason":180,"points":30},"No nonce checks found","2026-03-16T23:20:03.503Z",{"wat":183,"direct":189},{"assetPaths":184,"generatorPatterns":186,"scriptPaths":187,"versionParams":188},[185],"\u002Fwp-content\u002Fplugins\u002Fjson-feeder\u002Fjson-feeder.php",[],[],[],{"cssClasses":190,"htmlComments":191,"htmlAttributes":192,"restEndpoints":193,"jsGlobals":194,"shortcodeOutput":195},[],[],[],[],[],[]]