[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fftA8FF4fzASI0B55bZ0SqtEbJwrQGsgC6F5ULjCQ0JU":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":35,"analysis":122,"fingerprints":166},"metar-widget","METAR plugin","0.1","mcantsin","https:\u002F\u002Fprofiles.wordpress.org\u002Fmcantsin\u002F","\u003Cp>METAR-widget lets you enter an ICAO station (airport) in the widget admin and will display the according METAR code as widget on your wordpress site.\u003Cbr \u002F>\nThe METAR data used is provided by NOAA.\u003C\u002Fp>\n","A simple widget to display the current METAR code (Pilot weather code) for a chosen ICAO station.",10,2568,0,"2012-10-26T00:27:00.000Z","3.4.2","3.4","",[19,20,21,22],"metar","noaa","weather","widget","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fmetar-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmetar-widget.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":25,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},2,20,30,84,"2026-04-05T05:18:54.894Z",[36,48,71,93,107],{"slug":37,"name":38,"version":6,"author":7,"author_profile":8,"description":39,"short_description":40,"active_installs":11,"downloaded":41,"rating":13,"num_ratings":13,"last_updated":42,"tested_up_to":43,"requires_at_least":16,"requires_php":17,"tags":44,"homepage":46,"download_link":47,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"taf-widget","TAF plugin","\u003Cp>TAF-widget lets you enter an ICAO station (airport) in the widget admin and will display the according TAF code as widget on your wordpress site.\u003Cbr \u002F>\nThe TAF data used is provided by NOAA.\u003C\u002Fp>\n","A simple widget to display the current TAF (Terminal aerodrome forecast) code for a chosen ICAO station.",1358,"2014-09-09T23:12:00.000Z","4.0.38",[19,20,45,21,22],"taf","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Ftaf-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftaf-widget.zip",{"slug":49,"name":50,"version":51,"author":52,"author_profile":53,"description":54,"short_description":55,"active_installs":56,"downloaded":57,"rating":58,"num_ratings":59,"last_updated":60,"tested_up_to":61,"requires_at_least":62,"requires_php":17,"tags":63,"homepage":69,"download_link":70,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"us-weather-widget-willyweather","US Weather Widget – WillyWeather","1.5","WillyWeather","https:\u002F\u002Fprofiles.wordpress.org\u002Fwillyweather\u002F","\u003Cp>The most accurate US weather widgets, with data provided by the National Oceanic and Atmospheric Administration (NOAA). Willyweather weather widgets come in many different shapes and sizes, you can choose your own colors, and select from multiple weather types such as Weather, Wind, Rain, Swell, Tides, UV, Sun and Moon.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Accurate US data provided by NOAA.\u003C\u002Fli>\n\u003Cli>Beautiful retina graphics with stylish animations.\u003C\u002Fli>\n\u003Cli>Powered by the same WillyWeather API that was built for the award winning \u003Ca href=\"https:\u002F\u002Fitunes.apple.com\u002Fapp\u002Fwillyweather\u002Fid592978502\" rel=\"nofollow ugc\">WillyWeather iPhone app\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Choose from a wide selection of widget shapes and sizes:\n\u003Cul>\n\u003Cli>Sidebar\u003C\u002Fli>\n\u003Cli>Full Page\u003C\u002Fli>\n\u003Cli>Leaderboard\u003C\u002Fli>\n\u003Cli>Thin bar\u003C\u002Fli>\n\u003Cli>High bar\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Choose your own colors to suit your website.\u003C\u002Fli>\n\u003Cli>Adjust the width of any of the widgets to suit your website.\u003C\u002Fli>\n\u003Cli>Scrollable wind and swell graphs (sidebar and full page).\u003C\u002Fli>\n\u003Cli>Add any of the weather types below to a sidebar or full page widget, selected via tabs.\n\u003Cul>\n\u003Cli>Weather\u003C\u002Fli>\n\u003Cli>Wind\u003C\u002Fli>\n\u003Cli>Tides\u003C\u002Fli>\n\u003Cli>Swell\u003C\u002Fli>\n\u003Cli>Rain\u003C\u002Fli>\n\u003Cli>UV\u003C\u002Fli>\n\u003Cli>Sun\u003C\u002Fli>\n\u003Cli>Moon\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Change tab ordering via drag and drop (the first weather type in the list will be the default).\u003C\u002Fli>\n\u003Cli>Choose a fixed location or add a search facility.\u003C\u002Fli>\n\u003Cli>Choose from a database of over 180,000 US locations.\u003C\u002Fli>\n\u003Cli>Update the widget at any time.\u003C\u002Fli>\n\u003C\u002Ful>\n","US weather widgets for Wordpress, with the latest data sourced from NOAA. Custom designs to suit any website.",200,10135,70,6,"2017-10-16T23:48:00.000Z","4.8.28","3.6.1",[64,65,66,67,68],"noaa-widget","observations","weather-forecast","weather-widget","willyweather-widget","http:\u002F\u002Fwillyweather.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fus-weather-widget-willyweather.zip",{"slug":72,"name":73,"version":74,"author":75,"author_profile":76,"description":77,"short_description":78,"active_installs":79,"downloaded":80,"rating":79,"num_ratings":81,"last_updated":82,"tested_up_to":83,"requires_at_least":84,"requires_php":17,"tags":85,"homepage":88,"download_link":89,"security_score":90,"vuln_count":91,"unpatched_count":91,"last_vuln_date":92,"fetched_at":27},"aviation-weather-from-noaa","Aviation Weather from NOAA","0.7.2","machouinard","https:\u002F\u002Fprofiles.wordpress.org\u002Fmachouinard\u002F","\u003Cul>\n\u003Cli>Display METAR & TAF info from NOAA’s Aviation Digital Data Service\u003C\u002Fli>\n\u003Cli>Display up to 6 hours before now\u003C\u002Fli>\n\u003Cli>PIREPs up to 200sm\u003C\u002Fli>\n\u003Cli>Create multiple instances using either widget or shortcode\u003C\u002Fli>\n\u003Cli>WP-CLI Integration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Gutenberg Block\u003C\u002Fh4>\n\u003Cp>A new \u003Ccode>AWFN Block\u003C\u002Fcode> can be found in the Widgets section.\u003C\u002Fp>\n\u003Ch4>Shortcode Usage: ( shown with defaults )\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>[adds_weather apts='KSMF' hours=2 show_metar=1 show_taf=1 show_pireps=1 show_station_info=1 radial_dist=100 title='']\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Data is cached for 30 minutes using the WordPress Transients API.\u003C\u002Fp>\n\u003Ch4>Included Filter Hooks:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>adds_kses: Array of permitted HTML tags.\u003C\u002Fli>\n\u003Cli>adds_custom_css: URL of a user-supplied stylesheet.  Supplying a stylesheet in theme’s directory ( ‘css\u002Faviation_weather_from_noaa.css’ ) will also override stylesheet.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Styling\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Copy \u003Ccode>css\u002Faviation_weather_from_noaa.css\u003C\u002Fcode> from plugin directory into theme directory, keeping that file structure.\u003C\u002Fli>\n\u003Cli>Make desired changes.\u003C\u002Fli>\n\u003Cli>Plugin will load this stylesheet instead of its own.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Code and support available at \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmachouinard\u002Faviation-weather-from-noaa\" title=\"GitHub Repo\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>\u003C\u002Fp>\n","Aviation weather data from NOAA's Aviation Digital Data Service (ADDS)",100,7110,4,"2022-10-31T16:06:00.000Z","6.1.10","3.8",[86,19,20,87,21],"aviation","pireps","https:\u002F\u002Fgithub.com\u002Fmachouinard\u002Faviation-weather-from-noaa","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faviation-weather-from-noaa.0.7.2.zip",61,1,"2025-06-30 00:00:00",{"slug":94,"name":95,"version":96,"author":97,"author_profile":98,"description":99,"short_description":100,"active_installs":31,"downloaded":101,"rating":102,"num_ratings":30,"last_updated":103,"tested_up_to":104,"requires_at_least":16,"requires_php":17,"tags":105,"homepage":17,"download_link":106,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"wp-taf-metar-widget","taf-metar-widget","1.0.4","wptechnology","https:\u002F\u002Fprofiles.wordpress.org\u002Fwptechnology\u002F","\u003Cp>WP TAF METAR Widget is a plugin that allows you to show the TAF or METAR (aviation weather) information from any airport directly to your WordPress WebSite, by just giving the ICAO code of the wanted airport. You can of course place more than one widget on your page, with different settings \u002F airports. The information come directly from AviationWeather.gov databases.\u003C\u002Fp>\n","This Widget allows you to show the TAF or METAR (aviation weather) information for any airport directly to your WordPress WebSite.",1876,90,"2016-11-02T13:57:00.000Z","4.6.30",[86,19,45,21,22],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-taf-metar-widget.zip",{"slug":108,"name":109,"version":110,"author":111,"author_profile":112,"description":113,"short_description":114,"active_installs":11,"downloaded":115,"rating":13,"num_ratings":13,"last_updated":116,"tested_up_to":117,"requires_at_least":16,"requires_php":17,"tags":118,"homepage":120,"download_link":121,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"aviationweather-widget","AviationWeather Plugin","1.1","alessiobravi","https:\u002F\u002Fprofiles.wordpress.org\u002Falessiobravi\u002F","\u003Cp>aviationweather-widget will display in the site the RAW METAR and TAF weather bulletin for the ICAO station selected in the widget administration panel.\u003Cbr \u002F>\nThe METAR and TAF data used is provided by AviationWeather.org\u003C\u002Fp>\n","A simple widget to display current METAR and TAF for the chosen ICAO Station.",2962,"2012-12-14T14:10:00.000Z","3.5.2",[86,119,19,45,22],"aviation-weather","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Faviationweather-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faviationweather-widget.zip",{"attackSurface":123,"codeSignals":135,"taintFlows":154,"riskAssessment":155,"analyzedAt":165},{"hooks":124,"ajaxHandlers":131,"restRoutes":132,"shortcodes":133,"cronEvents":134,"entryPointCount":13,"unprotectedCount":13},[125],{"type":126,"name":127,"callback":128,"file":129,"line":130},"action","widgets_init","anonymous","metar-widget.php",62,[],[],[],[],{"dangerousFunctions":136,"sqlUsage":137,"outputEscaping":139,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":153},[],{"prepared":13,"raw":13,"locations":138},[],{"escaped":13,"rawEcho":140,"locations":141},5,[142,145,147,149,151],{"file":129,"line":143,"context":144},28,"raw output",{"file":129,"line":146,"context":144},29,{"file":129,"line":148,"context":144},56,{"file":129,"line":150,"context":144},57,{"file":129,"line":152,"context":144},58,[],[],{"summary":156,"deductions":157},"The metar-widget plugin v0.1 presents a concerning security posture primarily due to a complete lack of output escaping. While the static analysis indicates no direct SQL injection vulnerabilities, dangerous functions, or external HTTP requests, the absence of output escaping on all 5 identified outputs creates a significant risk of Cross-Site Scripting (XSS) vulnerabilities. Any data processed and displayed by this plugin, if not properly sanitized by the WordPress core or other plugins, could be injected with malicious JavaScript. Furthermore, the plugin demonstrates a lack of fundamental security practices such as capability checks and nonce checks, which are crucial for protecting against unauthorized actions and CSRF attacks, especially if the plugin were to gain more entry points in future updates. The absence of any recorded vulnerability history is a positive indicator of past development, but it cannot compensate for the present critical security flaws identified in the code analysis. The plugin's strengths lie in its limited attack surface and apparent avoidance of direct database manipulation, but these are overshadowed by the high likelihood of XSS vulnerabilities due to unescaped output.",[158,161,163],{"reason":159,"points":160},"No output escaping found",15,{"reason":162,"points":140},"Missing capability checks",{"reason":164,"points":140},"Missing nonce checks","2026-03-17T01:35:43.367Z",{"wat":167,"direct":172},{"assetPaths":168,"generatorPatterns":169,"scriptPaths":170,"versionParams":171},[],[],[],[],{"cssClasses":173,"htmlComments":176,"htmlAttributes":177,"restEndpoints":179,"jsGlobals":180,"shortcodeOutput":181},[174,175],"widget-wrapper","widget-title",[],[178],"id",[],[],[]]