[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-aNQLOXGWc8-_8plIJtFJqevFukRteOQVjisA_Zd1Bo":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":22,"download_link":23,"security_score":11,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":36,"analysis":130,"fingerprints":167},"mc-server-status","MC Server Status","1.5.1","Marc Tönsing","https:\u002F\u002Fprofiles.wordpress.org\u002Fmarcdk\u002F","\u003Cp>This plugin provides a dynamic display of your Minecraft server’s status, including current active players. Simply input your server’s address and port to get started.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Real-time Server Status: Instantly view whether your Minecraft server is online or offline.\u003C\u002Fli>\n\u003Cli>Active Player Display: See a list of currently active players on your server.\u003C\u002Fli>\n\u003Cli>Supports only Java Minecraft. Bedrock may be supported on popular demand.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Technology\u003C\u002Fh4>\n\u003Cp>Utilizes the robust PHP-Minecraft-Query library for retrieving server information. More details can be found on \u003Ca href=\"https:\u002F\u002Fpackagist.org\u002Fpackages\u002Fxpaw\u002Fphp-minecraft-query\" rel=\"nofollow ugc\">Packagist\u003C\u002Fa>.\u003C\u002Fp>\n","Displays the Minecraft server status along with the active players.",100,4151,2,"2026-01-08T15:37:00.000Z","6.8.5","6.1","7.0",[19,20,21],"gutenberg","minecraft","server","https:\u002F\u002Ftoensing.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmc-server-status.1.5.1.zip",0,null,"2026-03-15T15:16:48.613Z",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":32,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"marcdk",14,11100,95,1,97,"2026-04-05T01:35:40.849Z",[37,59,79,96,113],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":52,"tags":53,"homepage":56,"download_link":57,"security_score":58,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26},"minestatus","Minestatus","3.0.1","Jeroen Weustink","https:\u002F\u002Fprofiles.wordpress.org\u002Fjweustink\u002F","\u003Cp>Minestatus is a WordPress Widget that enables you to show data from a \u003Ca href=\"https:\u002F\u002Fminecraft.net\u002F\" rel=\"nofollow ugc\">Minecraft\u003C\u002Fa> server. It uses the \u003Ca href=\"http:\u002F\u002Fminers.me\" rel=\"nofollow ugc\">Miners.me\u003C\u002Fa> REST API to get server data.\u003C\u002Fp>\n\u003Cp>Returned parameters are:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Server status\u003C\u002Fli>\n\u003Cli>Server latency\u003C\u002Fli>\n\u003Cli>Server host\u003C\u002Fli>\n\u003Cli>Server ip\u003C\u002Fli>\n\u003Cli>Server port\u003C\u002Fli>\n\u003Cli>Server version\u003C\u002Fli>\n\u003Cli>Server protocol\u003C\u002Fli>\n\u003Cli>Maximum players\u003C\u002Fli>\n\u003Cli>Online players\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>On a personal note\u003C\u002Fstrong>\u003Cbr \u002F>\nMy sincere apologies for the plugin not working, the last 2 years have been really busy. A lot has changed in minecraft land so some features are changed and new features will arrive later on. If you want to be a part of this plugin please let me know.\u003C\u002Fp>\n","Minestatus is a WordPress Widget that enables you to show data from a Minecraft server. It uses the Miners.me REST API to get server data.",30,29647,60,8,"2016-09-21T07:26:00.000Z","4.6.30","3.0","",[20,54,21,55],"minequery","status","https:\u002F\u002Fminers.me","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fminestatus.3.0.1.zip",85,{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":45,"downloaded":67,"rating":68,"num_ratings":69,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":52,"tags":73,"homepage":77,"download_link":78,"security_score":58,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26},"server-status-for-minecraft-pc-pe","Server Status For Minecraft PC & PE (MCServerStatus)","1.3.3","GoneTone","https:\u002F\u002Fprofiles.wordpress.org\u002Fgonetone\u002F","\u003Cp>Server Status For Minecraft PC & PE is a WordPress Widget, show Minecraft Java and Bedrock editions server data.\u003C\u002Fp>\n\u003Cp>GitHub: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FMCNewsTools\u002FMCServerStatus-WordPressWidget\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002FMCNewsTools\u002FMCServerStatus-WordPressWidget\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>You can display \u002F hide these information:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Server name (MOTD)\u003C\u002Fli>\n\u003Cli>Status (online\u002Foffline)\u003C\u002Fli>\n\u003Cli>IP address \u002F hostname\u003C\u002Fli>\n\u003Cli>Port\u003C\u002Fli>\n\u003Cli>Server platform\u003C\u002Fli>\n\u003Cli>Server software\u003C\u002Fli>\n\u003Cli>Game version\u003C\u002Fli>\n\u003Cli>Website\u003C\u002Fli>\n\u003Cli>DynMap\u003C\u002Fli>\n\u003Cli>Plugins count\u003C\u002Fli>\n\u003Cli>Plugins list\u003C\u002Fli>\n\u003Cli>Player count (current \u002F maximum)\u003C\u002Fli>\n\u003Cli>Player list\u003C\u002Fli>\n\u003Cli>Player skin avatar\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>and more features are planned.\u003C\u002Fp>\n\u003Cp>Other functions:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Display web site link\u003C\u002Fli>\n\u003Cli>DynMap\u003C\u002Fli>\n\u003Cli>Set player avatar size\u003C\u002Fli>\n\u003Cli>Auto update status (Beta)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Precautions:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>This method use GameSpy4 protocol, and requires enabling query listener in your server.properties like this: \u003Ccode>enable-query=true\u003C\u002Fcode> and \u003Ccode>query.port=25565\u003C\u002Fcode>.\u003C\u002Fli>\n\u003Cli>Enabled query listener, can’t get server data, it may be that your website hosting provider doesn’t allow requests, you can try setting query port to 25565 (\u003Ccode>query.port=25565\u003C\u002Fcode>) in \u003Ccode>server.properties\u003C\u002Fcode> file and then testing it.\u003C\u002Fli>\n\u003Cli>If you still can’t, please contact your website hosting provider.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If query listener cannot be used, it automatically switches to ping.\u003C\u002Fp>\n","Server Status For Minecraft PC & PE is a WordPress Widget, show Minecraft Java and Bedrock editions server data.",14826,74,6,"2018-08-01T04:13:00.000Z","4.9.29","3.5",[74,20,75,76,55],"mcserverstatus","minecraft-pc","minecraft-pe","https:\u002F\u002Fgithub.com\u002FMCServerStatus\u002FMCServerStatus-WordPressWidget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fserver-status-for-minecraft-pc-pe.zip",{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":87,"downloaded":88,"rating":11,"num_ratings":33,"last_updated":89,"tested_up_to":90,"requires_at_least":91,"requires_php":92,"tags":93,"homepage":94,"download_link":95,"security_score":11,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26},"server-status-for-mc-by-mrdino","Server Status for MC by MrDino","0.0.6","mrdinocarlos","https:\u002F\u002Fprofiles.wordpress.org\u002Fmrdinocarlos\u002F","\u003Cp>Display your Minecraft server status on your WordPress site. Basic mode works without any Minecraft plugin.\u003Cbr \u002F>\nServer Status for MC by MrDino lets you show a clean, modern status card for your Minecraft server.\u003C\u002Fp>\n\u003Ch3>Quick start\u003C\u002Fh3>\n\u003Cp>Enter your Minecraft server address and port in the “Basic server settings” section above and save the changes.\u003Cbr \u002F>\nOptionally adjust the display options (banner, MOTD, dark mode, player list, etc.).\u003Cbr \u002F>\nCreate or edit a page, paste the shortcode you want to use and publish the page.\u003Cbr \u002F>\nTip: the status and players cards auto-refresh in the background, so visitors will see updated information without reloading the whole page.\u003C\u002Fp>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>This plugin is developed and maintained by MrDino (https:\u002F\u002Fmrdino.es).\u003Cbr \u002F>\nAll live status and avatar features are powered by the external services listed below.\u003Cbr \u002F>\nYour WordPress site does not send any data to mrdino.es beyond the normal plugin links and metadata.\u003C\u002Fp>\n\u003Cp>This plugin connects to two external services to display live Minecraft data and player avatars.\u003C\u002Fp>\n\u003Ch4>mcsrvstat.us API\u003C\u002Fh4>\n\u003Cp>This service is used to fetch live status information (online state, players, MOTD, version, ping, etc.) and an optional banner image for the Minecraft server you configure in the plugin settings.\u003Cbr \u002F>\n* What data is sent: the server address (host and port) that you enter in the plugin settings.\u003Cbr \u002F>\n* When data is sent: whenever the status or player list shortcodes are loaded on a page, or when they refresh via AJAX in the background.\u003Cbr \u002F>\n* Service website and API documentation: https:\u002F\u002Fmcsrvstat.us\u002F (API at https:\u002F\u002Fapi.mcsrvstat.us\u002F)\u003Cbr \u002F>\n* Legal \u002F privacy: please refer to the legal information and privacy details linked from their website.\u003C\u002Fp>\n\u003Ch4>MCHeads (mc-heads.net)\u003C\u002Fh4>\n\u003Cp>This service is used to generate square avatar images (“heads”) for Minecraft players based on their in-game name.\u003Cbr \u002F>\n* What data is sent: the Minecraft player name(s) reported by your server (no WordPress user data is sent).\u003Cbr \u002F>\n* When data is sent: when the player list is displayed and an avatar image needs to be shown for an online player.\u003Cbr \u002F>\n* Service website: https:\u002F\u002Fmc-heads.net\u002F\u003Cbr \u002F>\n* Terms of use: https:\u002F\u002Fminecraft-heads.com\u002Fterms-of-use\u003Cbr \u002F>\n* Privacy policy: https:\u002F\u002Fminecraft-heads.com\u002Fprivacy-policy\u003C\u002Fp>\n","Display your Minecraft server status on your WordPress site. Basic mode works without any Minecraft plugin.",20,252,"2025-12-10T20:15:00.000Z","6.9.4","6.0","7.4",[20,21,55],"https:\u002F\u002Fmrdino.es\u002Fmcsmd","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fserver-status-for-mc-by-mrdino.0.0.6.zip",{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":104,"downloaded":105,"rating":24,"num_ratings":24,"last_updated":106,"tested_up_to":107,"requires_at_least":108,"requires_php":109,"tags":110,"homepage":52,"download_link":112,"security_score":58,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26},"mcping","MCPing","1.1","Tutorialwork","https:\u002F\u002Fprofiles.wordpress.org\u002Ftutorialwork\u002F","\u003Cp>This plugin shows the status of your Minecraft server using a shortcode and a widget.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Shortcode – For the shortcode please use [mcserver] or [mcserverplayer]\u003C\u002Fli>\n\u003Cli>Widget – Set your sidebar widget under dashboard and then design\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin shows the status of your Minecraft server using a shortcode and a widget",10,4322,"2019-02-15T13:33:00.000Z","5.0.25","3.7.1","5.5.33",[97,20,111],"minecraft-server","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmcping.zip",{"slug":114,"name":115,"version":116,"author":117,"author_profile":118,"description":119,"short_description":120,"active_installs":104,"downloaded":121,"rating":24,"num_ratings":24,"last_updated":122,"tested_up_to":123,"requires_at_least":124,"requires_php":52,"tags":125,"homepage":128,"download_link":129,"security_score":58,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26},"minecraft-server-status-checker","Minecraft Server Status Checker","0.1","verblick","https:\u002F\u002Fprofiles.wordpress.org\u002Fverblick\u002F","\u003Cp>This plugin will detect and show the Minecraft Server Status. Works with any kinds of server.\u003C\u002Fp>\n\u003Ch3>Template tags\u003C\u002Fh3>\n\u003Cp>Coming soon in the next version.\u003C\u002Fp>\n","This plugin will detect and show the Minecraft Server Status. Works with any kinds of server.",14051,"2012-05-20T19:28:00.000Z","3.3.2","2.5",[126,127,20,21,55],"bukkit","checker","http:\u002F\u002Fwww.minecraftsv.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fminecraft-server-status-checker.0.1.1.zip",{"attackSurface":131,"codeSignals":143,"taintFlows":154,"riskAssessment":155,"analyzedAt":166},{"hooks":132,"ajaxHandlers":139,"restRoutes":140,"shortcodes":141,"cronEvents":142,"entryPointCount":24,"unprotectedCount":24},[133],{"type":134,"name":135,"callback":136,"file":137,"line":138},"action","init","minecraft_server_info_init","mc-server-status.php",310,[],[],[],[],{"dangerousFunctions":144,"sqlUsage":149,"outputEscaping":151,"fileOperations":24,"externalRequests":24,"nonceChecks":24,"capabilityChecks":24,"bundledLibraries":153},[145],{"fn":146,"file":137,"line":147,"context":148},"unserialize",62,"$serverData = unserialize(get_option($serverDataKey, '')) ?: [",{"prepared":24,"raw":24,"locations":150},[],{"escaped":48,"rawEcho":24,"locations":152},[],[],[],{"summary":156,"deductions":157},"The mc-server-status plugin version 1.5.2 demonstrates a strong security posture in several key areas. The absence of known vulnerabilities, a clean slate for taint analysis, and 100% proper output escaping are commendable.  Furthermore, the plugin avoids common pitfalls like direct SQL queries without prepared statements and external HTTP requests, indicating a good understanding of secure coding practices.\n\nHowever, a significant concern arises from the presence of the `unserialize` function. Without proper validation of the serialized data before unserialization, this function can be exploited for Remote Code Execution (RCE) vulnerabilities, especially if the data originates from user input. The lack of nonce and capability checks, while not directly exploitable given the zero entry points, suggests a potential weakness if new entry points were introduced without corresponding security measures.  The vulnerability history is clean, which is positive, but it doesn't entirely mitigate the inherent risk of `unserialize` if used improperly.\n\nIn conclusion, while the plugin exhibits strengths in many secure coding areas and has no recorded vulnerabilities, the presence of `unserialize` without explicit input validation introduces a critical potential risk. The absence of nonce and capability checks also warrants attention, although the current attack surface is limited. It's crucial to either remove the `unserialize` function or implement robust input validation before its use.",[158,161,164],{"reason":159,"points":160},"Presence of unserialize function",15,{"reason":162,"points":163},"Missing nonce checks",5,{"reason":165,"points":163},"Missing capability checks","2026-03-16T20:50:35.456Z",{"wat":168,"direct":173},{"assetPaths":169,"generatorPatterns":170,"scriptPaths":171,"versionParams":172},[],[],[],[],{"cssClasses":174,"htmlComments":175,"htmlAttributes":176,"restEndpoints":177,"jsGlobals":178,"shortcodeOutput":179},[],[],[],[],[],[]]