[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB1RBQqZ-WiI80ZzaMVxlFovxGuVyLONZPm1ekwCtErs":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":37,"analysis":38,"fingerprints":382},"logo-and-address-widget-with-schema","Logo and Address Widget with Schema","2.9","wsxplugindev","https:\u002F\u002Fprofiles.wordpress.org\u002Fwsxplugindev\u002F","\u003Cp>Are you still trying to show your business address in the plain text widget? Are you tired of adding custom CSS to make your business hours look good on your website? No more worries! Here is a widget, which will help you to add your business address and hours (if you want) as a widget with schema in less than 5 minutes.\u003C\u002Fp>\n\u003Cp>The widget takes care of all the formatting. You can change labels, show hours for Monday through Friday or each day separately. We’ve even included schema markup, which is great for SEO.\u003C\u002Fp>\n\u003Cp>Features List:\u003Cbr \u002F>\n– Upload your logo and even specify alternate text for your logo. Use the WordPress Media Library to upload\u002Fselect your logo.\u003Cbr \u002F>\n– Add your full address, email, phone, and fax number.\u003Cbr \u002F>\n– You can either show labels or show icons for the address, email, phone and fax number.\u003Cbr \u002F>\n– Enable or disable schema for the address.\u003Cbr \u002F>\n– Show business hours by weekdays and for weekends.\u003C\u002Fp>\n\u003Ch3>Short Description\u003C\u002Fh3>\n\u003Cp>Widget to add your company logo, address, and business hours with schema.\u003C\u002Fp>\n","Are you still trying to show your business address in the plain text widget? Are you tired of adding custom CSS to make your business hours look good  …",100,12366,0,"2023-02-10T11:42:00.000Z","6.1.10","4.7.5","",[19,20,21,22,23],"address-widget-with-schema","logo-address-widget","logo-address-widget-with-schema","logo-and-address","manage-different-locations","https:\u002F\u002Fwww.webstix.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flogo-and-address-widget-with-schema.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},4,720,89,253,71,"2026-04-04T04:00:02.201Z",[],{"attackSurface":39,"codeSignals":65,"taintFlows":368,"riskAssessment":369,"analyzedAt":381},{"hooks":40,"ajaxHandlers":55,"restRoutes":61,"shortcodes":62,"cronEvents":63,"entryPointCount":64,"unprotectedCount":64},[41,47,51],{"type":42,"name":43,"callback":44,"file":45,"line":46},"action","widgets_init","closure","logo-and-address-widget-with-schema.php",48,{"type":42,"name":48,"callback":49,"file":45,"line":50},"admin_enqueue_scripts","laawws_assets",49,{"type":42,"name":52,"callback":53,"file":45,"line":54},"init","laawws_styles",50,[56],{"action":57,"nopriv":58,"callback":59,"hasNonce":58,"hasCapCheck":58,"file":45,"line":60},"list_items",false,"laawws_time_picker",87,[],[],[],1,{"dangerousFunctions":66,"sqlUsage":67,"outputEscaping":69,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":367},[],{"prepared":13,"raw":13,"locations":68},[],{"escaped":70,"rawEcho":71,"locations":72},132,177,[73,76,78,79,80,82,84,85,87,89,90,91,93,95,97,98,100,102,103,105,107,108,110,112,113,114,116,118,119,120,122,124,125,126,128,130,131,132,134,136,137,138,140,142,144,145,147,149,150,152,154,156,157,158,160,162,163,165,167,169,170,172,174,175,176,178,180,181,182,184,186,187,188,190,192,193,195,197,198,200,202,203,205,207,208,210,211,213,215,217,219,220,221,223,224,226,228,229,231,232,234,235,237,239,240,242,243,245,246,248,250,251,253,254,256,257,259,261,262,264,265,267,268,270,272,273,275,276,278,279,281,283,284,286,287,289,290,292,294,295,297,298,300,301,303,305,306,308,309,311,313,315,317,319,321,323,325,327,329,331,333,335,337,339,341,343,345,347,349,351,353,355,357,359,361,363,365],{"file":45,"line":74,"context":75},255,"raw output",{"file":45,"line":77,"context":75},256,{"file":45,"line":77,"context":75},{"file":45,"line":77,"context":75},{"file":45,"line":81,"context":75},260,{"file":45,"line":83,"context":75},261,{"file":45,"line":83,"context":75},{"file":45,"line":86,"context":75},267,{"file":45,"line":88,"context":75},268,{"file":45,"line":88,"context":75},{"file":45,"line":88,"context":75},{"file":45,"line":92,"context":75},272,{"file":45,"line":94,"context":75},273,{"file":45,"line":96,"context":75},274,{"file":45,"line":96,"context":75},{"file":45,"line":99,"context":75},276,{"file":45,"line":101,"context":75},277,{"file":45,"line":101,"context":75},{"file":45,"line":104,"context":75},279,{"file":45,"line":106,"context":75},280,{"file":45,"line":106,"context":75},{"file":45,"line":109,"context":75},288,{"file":45,"line":111,"context":75},289,{"file":45,"line":111,"context":75},{"file":45,"line":111,"context":75},{"file":45,"line":115,"context":75},293,{"file":45,"line":117,"context":75},294,{"file":45,"line":117,"context":75},{"file":45,"line":117,"context":75},{"file":45,"line":121,"context":75},298,{"file":45,"line":123,"context":75},299,{"file":45,"line":123,"context":75},{"file":45,"line":123,"context":75},{"file":45,"line":127,"context":75},303,{"file":45,"line":129,"context":75},304,{"file":45,"line":129,"context":75},{"file":45,"line":129,"context":75},{"file":45,"line":133,"context":75},308,{"file":45,"line":135,"context":75},309,{"file":45,"line":135,"context":75},{"file":45,"line":135,"context":75},{"file":45,"line":139,"context":75},313,{"file":45,"line":141,"context":75},314,{"file":45,"line":143,"context":75},315,{"file":45,"line":143,"context":75},{"file":45,"line":146,"context":75},317,{"file":45,"line":148,"context":75},318,{"file":45,"line":148,"context":75},{"file":45,"line":151,"context":75},327,{"file":45,"line":153,"context":75},328,{"file":45,"line":155,"context":75},329,{"file":45,"line":155,"context":75},{"file":45,"line":155,"context":75},{"file":45,"line":159,"context":75},332,{"file":45,"line":161,"context":75},333,{"file":45,"line":161,"context":75},{"file":45,"line":164,"context":75},342,{"file":45,"line":166,"context":75},343,{"file":45,"line":168,"context":75},344,{"file":45,"line":168,"context":75},{"file":45,"line":171,"context":75},355,{"file":45,"line":173,"context":75},356,{"file":45,"line":173,"context":75},{"file":45,"line":173,"context":75},{"file":45,"line":177,"context":75},360,{"file":45,"line":179,"context":75},361,{"file":45,"line":179,"context":75},{"file":45,"line":179,"context":75},{"file":45,"line":183,"context":75},365,{"file":45,"line":185,"context":75},366,{"file":45,"line":185,"context":75},{"file":45,"line":185,"context":75},{"file":45,"line":189,"context":75},371,{"file":45,"line":191,"context":75},372,{"file":45,"line":191,"context":75},{"file":45,"line":194,"context":75},374,{"file":45,"line":196,"context":75},375,{"file":45,"line":196,"context":75},{"file":45,"line":199,"context":75},383,{"file":45,"line":201,"context":75},384,{"file":45,"line":201,"context":75},{"file":45,"line":204,"context":75},386,{"file":45,"line":206,"context":75},387,{"file":45,"line":206,"context":75},{"file":45,"line":209,"context":75},395,{"file":45,"line":209,"context":75},{"file":45,"line":212,"context":75},397,{"file":45,"line":214,"context":75},407,{"file":45,"line":216,"context":75},410,{"file":45,"line":218,"context":75},412,{"file":45,"line":218,"context":75},{"file":45,"line":218,"context":75},{"file":45,"line":222,"context":75},421,{"file":45,"line":222,"context":75},{"file":45,"line":225,"context":75},423,{"file":45,"line":227,"context":75},430,{"file":45,"line":227,"context":75},{"file":45,"line":230,"context":75},441,{"file":45,"line":230,"context":75},{"file":45,"line":233,"context":75},459,{"file":45,"line":233,"context":75},{"file":45,"line":236,"context":75},461,{"file":45,"line":238,"context":75},468,{"file":45,"line":238,"context":75},{"file":45,"line":241,"context":75},479,{"file":45,"line":241,"context":75},{"file":45,"line":244,"context":75},494,{"file":45,"line":244,"context":75},{"file":45,"line":247,"context":75},496,{"file":45,"line":249,"context":75},501,{"file":45,"line":249,"context":75},{"file":45,"line":252,"context":75},511,{"file":45,"line":252,"context":75},{"file":45,"line":255,"context":75},526,{"file":45,"line":255,"context":75},{"file":45,"line":258,"context":75},528,{"file":45,"line":260,"context":75},534,{"file":45,"line":260,"context":75},{"file":45,"line":263,"context":75},545,{"file":45,"line":263,"context":75},{"file":45,"line":266,"context":75},560,{"file":45,"line":266,"context":75},{"file":45,"line":269,"context":75},562,{"file":45,"line":271,"context":75},569,{"file":45,"line":271,"context":75},{"file":45,"line":274,"context":75},580,{"file":45,"line":274,"context":75},{"file":45,"line":277,"context":75},595,{"file":45,"line":277,"context":75},{"file":45,"line":280,"context":75},597,{"file":45,"line":282,"context":75},604,{"file":45,"line":282,"context":75},{"file":45,"line":285,"context":75},615,{"file":45,"line":285,"context":75},{"file":45,"line":288,"context":75},631,{"file":45,"line":288,"context":75},{"file":45,"line":291,"context":75},633,{"file":45,"line":293,"context":75},640,{"file":45,"line":293,"context":75},{"file":45,"line":296,"context":75},651,{"file":45,"line":296,"context":75},{"file":45,"line":299,"context":75},666,{"file":45,"line":299,"context":75},{"file":45,"line":302,"context":75},668,{"file":45,"line":304,"context":75},674,{"file":45,"line":304,"context":75},{"file":45,"line":307,"context":75},685,{"file":45,"line":307,"context":75},{"file":45,"line":310,"context":75},912,{"file":45,"line":312,"context":75},920,{"file":45,"line":314,"context":75},935,{"file":45,"line":316,"context":75},937,{"file":45,"line":318,"context":75},948,{"file":45,"line":320,"context":75},950,{"file":45,"line":322,"context":75},952,{"file":45,"line":324,"context":75},960,{"file":45,"line":326,"context":75},962,{"file":45,"line":328,"context":75},968,{"file":45,"line":330,"context":75},970,{"file":45,"line":332,"context":75},972,{"file":45,"line":334,"context":75},1017,{"file":45,"line":336,"context":75},1024,{"file":45,"line":338,"context":75},1026,{"file":45,"line":340,"context":75},1033,{"file":45,"line":342,"context":75},1035,{"file":45,"line":344,"context":75},1042,{"file":45,"line":346,"context":75},1044,{"file":45,"line":348,"context":75},1054,{"file":45,"line":350,"context":75},1069,{"file":45,"line":352,"context":75},1077,{"file":45,"line":354,"context":75},1086,{"file":45,"line":356,"context":75},1094,{"file":45,"line":358,"context":75},1102,{"file":45,"line":360,"context":75},1110,{"file":45,"line":362,"context":75},1120,{"file":45,"line":364,"context":75},1128,{"file":45,"line":366,"context":75},1136,[],[],{"summary":370,"deductions":371},"The \"logo-and-address-widget-with-schema\" plugin v2.9 exhibits a mixed security posture.  On the positive side, it shows excellent practices regarding SQL queries, exclusively using prepared statements, and has no recorded vulnerabilities in its history, suggesting a generally stable codebase. The absence of file operations and external HTTP requests further limits potential attack vectors.\n\nHowever, significant concerns arise from the static analysis. The plugin presents a single AJAX entry point that lacks any authentication or authorization checks, making it a prime target for unauthorized access or execution. Furthermore, a concerning 43% of output operations are not properly escaped, indicating a high risk of Cross-Site Scripting (XSS) vulnerabilities, especially when combined with the unprotected AJAX handler. The lack of nonce checks on the AJAX endpoint exacerbates this risk. While taint analysis shows no explicit flows, the combination of unprotected AJAX and unescaped output creates a dangerous environment.\n\nIn conclusion, while the plugin demonstrates good SQL hygiene and a clean vulnerability history, the unprotected AJAX handler and widespread unescaped output represent critical security weaknesses that require immediate attention. The plugin's strengths in SQL and vulnerability history are overshadowed by these fundamental security oversights.",[372,375,378],{"reason":373,"points":374},"Unprotected AJAX handler found",8,{"reason":376,"points":377},"Significant unescaped output (43%)",6,{"reason":379,"points":380},"Missing nonce checks on AJAX handler",7,"2026-03-16T21:08:48.375Z",{"wat":383,"direct":392},{"assetPaths":384,"generatorPatterns":387,"scriptPaths":388,"versionParams":389},[385,386],"\u002Fwp-content\u002Fplugins\u002Flogo-and-address-widget-with-schema\u002Fjs\u002Flaawws-media-upload.js","\u002Fwp-content\u002Fplugins\u002Flogo-and-address-widget-with-schema\u002Fcss\u002Flaawws-custom.css",[],[385],[390,391],"logo-and-address-widget-with-schema\u002Fjs\u002Flaawws-media-upload.js?ver=","logo-and-address-widget-with-schema\u002Fcss\u002Flaawws-custom.css?ver=",{"cssClasses":393,"htmlComments":424,"htmlAttributes":425,"restEndpoints":446,"jsGlobals":448,"shortcodeOutput":450},[394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423],"laawws_widget_title","laawws_footer_logo","laawws_image_radio_buttons","laawws_address_line1","laawws_city","laawws_state","laawws_zip","laawws_address_radio_buttons","laawws_address_fawesome_icon","laawws_phone","laawws_fax","laawws_email","laawws_epf_radio_buttons","laawws_open_hours","laawws_open_hours_title","laawws_open_hours_mon_fri","laawws_close_hours_mon_fri","laawws_open_hours_mon","laawws_close_hours_mon","laawws_open_hours_tue","laawws_close_hours_tue","laawws_open_hours_wed","laawws_close_hours_wed","laawws_open_hours_thu","laawws_close_hours_thu","laawws_open_hours_fri","laawws_close_hours_fri","laawws_open_hours_sun","laawws_close_hours_sun","laawws_address_schema_buttons",[],[426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445],"data-laawws_fawesome_icon","data-laawws_custom_image","data-laawws_epf_radio_buttons","data-laawws_open_hours","data-laawws_open_hours_title","data-laawws_open_hours_mon_fri","data-laawws_close_hours_mon_fri","data-laawws_open_hours_mon","data-laawws_close_hours_mon","data-laawws_open_hours_tue","data-laawws_close_hours_tue","data-laawws_open_hours_wed","data-laawws_close_hours_wed","data-laawws_open_hours_thu","data-laawws_close_hours_thu","data-laawws_open_hours_fri","data-laawws_close_hours_fri","data-laawws_open_hours_sun","data-laawws_close_hours_sun","data-laawws_address_schema_buttons",[447],"\u002Fwp-json\u002Flogo-and-address-widget-with-schema\u002Fv1\u002Flist_items",[449,59],"laawws_media_upload",[]]