[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7xzNDFwvUFubZgH4G0tAagsBr-qUZqrHa2LY5GH9-84":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":36,"analysis":125,"fingerprints":207},"minecraft-server-status-widget","MCStatusWidget","1.1","WhiteSK","https:\u002F\u002Fprofiles.wordpress.org\u002Fwhitesk\u002F","\u003Cp>It show:\u003Cbr \u002F>\nHostName, IP:Port, Version, World, Player online \u002F Player max, Player list, Plugin list.\u003Cbr \u002F>\nDont need MineQuery Plugin.\u003Cbr \u002F>\nNeed only enable-query=true line in server.properties.\u003C\u002Fp>\n","MCStatusWidget is a widget which show INFO Of Bukkit server.",10,6684,0,"2012-06-24T21:55:00.000Z","2.1","2.0.2","",[19,20,21,22,23],"bukkit","minecraft","server","serverstatus","status","Waiting for URI","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fminecraft-server-status-widget.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"whitesk",1,30,84,"2026-04-05T02:02:59.790Z",[37,57,73,91,109],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":33,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":17,"tags":51,"homepage":55,"download_link":56,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"server-status-for-minecraft-pc-pe","Server Status For Minecraft PC & PE (MCServerStatus)","1.3.3","GoneTone","https:\u002F\u002Fprofiles.wordpress.org\u002Fgonetone\u002F","\u003Cp>Server Status For Minecraft PC & PE is a WordPress Widget, show Minecraft Java and Bedrock editions server data.\u003C\u002Fp>\n\u003Cp>GitHub: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FMCNewsTools\u002FMCServerStatus-WordPressWidget\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002FMCNewsTools\u002FMCServerStatus-WordPressWidget\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>You can display \u002F hide these information:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Server name (MOTD)\u003C\u002Fli>\n\u003Cli>Status (online\u002Foffline)\u003C\u002Fli>\n\u003Cli>IP address \u002F hostname\u003C\u002Fli>\n\u003Cli>Port\u003C\u002Fli>\n\u003Cli>Server platform\u003C\u002Fli>\n\u003Cli>Server software\u003C\u002Fli>\n\u003Cli>Game version\u003C\u002Fli>\n\u003Cli>Website\u003C\u002Fli>\n\u003Cli>DynMap\u003C\u002Fli>\n\u003Cli>Plugins count\u003C\u002Fli>\n\u003Cli>Plugins list\u003C\u002Fli>\n\u003Cli>Player count (current \u002F maximum)\u003C\u002Fli>\n\u003Cli>Player list\u003C\u002Fli>\n\u003Cli>Player skin avatar\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>and more features are planned.\u003C\u002Fp>\n\u003Cp>Other functions:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Display web site link\u003C\u002Fli>\n\u003Cli>DynMap\u003C\u002Fli>\n\u003Cli>Set player avatar size\u003C\u002Fli>\n\u003Cli>Auto update status (Beta)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Precautions:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>This method use GameSpy4 protocol, and requires enabling query listener in your server.properties like this: \u003Ccode>enable-query=true\u003C\u002Fcode> and \u003Ccode>query.port=25565\u003C\u002Fcode>.\u003C\u002Fli>\n\u003Cli>Enabled query listener, can’t get server data, it may be that your website hosting provider doesn’t allow requests, you can try setting query port to 25565 (\u003Ccode>query.port=25565\u003C\u002Fcode>) in \u003Ccode>server.properties\u003C\u002Fcode> file and then testing it.\u003C\u002Fli>\n\u003Cli>If you still can’t, please contact your website hosting provider.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If query listener cannot be used, it automatically switches to ping.\u003C\u002Fp>\n","Server Status For Minecraft PC & PE is a WordPress Widget, show Minecraft Java and Bedrock editions server data.",14826,74,6,"2018-08-01T04:13:00.000Z","4.9.29","3.5",[52,20,53,54,23],"mcserverstatus","minecraft-pc","minecraft-pe","https:\u002F\u002Fgithub.com\u002FMCServerStatus\u002FMCServerStatus-WordPressWidget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fserver-status-for-minecraft-pc-pe.zip",{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":11,"downloaded":65,"rating":13,"num_ratings":13,"last_updated":66,"tested_up_to":67,"requires_at_least":68,"requires_php":17,"tags":69,"homepage":71,"download_link":72,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"minecraft-server-status-checker","Minecraft Server Status Checker","0.1","verblick","https:\u002F\u002Fprofiles.wordpress.org\u002Fverblick\u002F","\u003Cp>This plugin will detect and show the Minecraft Server Status. Works with any kinds of server.\u003C\u002Fp>\n\u003Ch3>Template tags\u003C\u002Fh3>\n\u003Cp>Coming soon in the next version.\u003C\u002Fp>\n","This plugin will detect and show the Minecraft Server Status. Works with any kinds of server.",14051,"2012-05-20T19:28:00.000Z","3.3.2","2.5",[19,70,20,21,23],"checker","http:\u002F\u002Fwww.minecraftsv.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fminecraft-server-status-checker.0.1.1.zip",{"slug":74,"name":75,"version":76,"author":77,"author_profile":78,"description":79,"short_description":80,"active_installs":33,"downloaded":81,"rating":82,"num_ratings":83,"last_updated":84,"tested_up_to":85,"requires_at_least":86,"requires_php":17,"tags":87,"homepage":89,"download_link":90,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"minestatus","Minestatus","3.0.1","Jeroen Weustink","https:\u002F\u002Fprofiles.wordpress.org\u002Fjweustink\u002F","\u003Cp>Minestatus is a WordPress Widget that enables you to show data from a \u003Ca href=\"https:\u002F\u002Fminecraft.net\u002F\" rel=\"nofollow ugc\">Minecraft\u003C\u002Fa> server. It uses the \u003Ca href=\"http:\u002F\u002Fminers.me\" rel=\"nofollow ugc\">Miners.me\u003C\u002Fa> REST API to get server data.\u003C\u002Fp>\n\u003Cp>Returned parameters are:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Server status\u003C\u002Fli>\n\u003Cli>Server latency\u003C\u002Fli>\n\u003Cli>Server host\u003C\u002Fli>\n\u003Cli>Server ip\u003C\u002Fli>\n\u003Cli>Server port\u003C\u002Fli>\n\u003Cli>Server version\u003C\u002Fli>\n\u003Cli>Server protocol\u003C\u002Fli>\n\u003Cli>Maximum players\u003C\u002Fli>\n\u003Cli>Online players\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>On a personal note\u003C\u002Fstrong>\u003Cbr \u002F>\nMy sincere apologies for the plugin not working, the last 2 years have been really busy. A lot has changed in minecraft land so some features are changed and new features will arrive later on. If you want to be a part of this plugin please let me know.\u003C\u002Fp>\n","Minestatus is a WordPress Widget that enables you to show data from a Minecraft server. It uses the Miners.me REST API to get server data.",29647,60,8,"2016-09-21T07:26:00.000Z","4.6.30","3.0",[20,88,21,23],"minequery","https:\u002F\u002Fminers.me","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fminestatus.3.0.1.zip",{"slug":92,"name":93,"version":94,"author":95,"author_profile":96,"description":97,"short_description":98,"active_installs":99,"downloaded":100,"rating":101,"num_ratings":32,"last_updated":102,"tested_up_to":103,"requires_at_least":104,"requires_php":105,"tags":106,"homepage":107,"download_link":108,"security_score":101,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"server-status-for-mc-by-mrdino","Server Status for MC by MrDino","0.0.6","mrdinocarlos","https:\u002F\u002Fprofiles.wordpress.org\u002Fmrdinocarlos\u002F","\u003Cp>Display your Minecraft server status on your WordPress site. Basic mode works without any Minecraft plugin.\u003Cbr \u002F>\nServer Status for MC by MrDino lets you show a clean, modern status card for your Minecraft server.\u003C\u002Fp>\n\u003Ch3>Quick start\u003C\u002Fh3>\n\u003Cp>Enter your Minecraft server address and port in the “Basic server settings” section above and save the changes.\u003Cbr \u002F>\nOptionally adjust the display options (banner, MOTD, dark mode, player list, etc.).\u003Cbr \u002F>\nCreate or edit a page, paste the shortcode you want to use and publish the page.\u003Cbr \u002F>\nTip: the status and players cards auto-refresh in the background, so visitors will see updated information without reloading the whole page.\u003C\u002Fp>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>This plugin is developed and maintained by MrDino (https:\u002F\u002Fmrdino.es).\u003Cbr \u002F>\nAll live status and avatar features are powered by the external services listed below.\u003Cbr \u002F>\nYour WordPress site does not send any data to mrdino.es beyond the normal plugin links and metadata.\u003C\u002Fp>\n\u003Cp>This plugin connects to two external services to display live Minecraft data and player avatars.\u003C\u002Fp>\n\u003Ch4>mcsrvstat.us API\u003C\u002Fh4>\n\u003Cp>This service is used to fetch live status information (online state, players, MOTD, version, ping, etc.) and an optional banner image for the Minecraft server you configure in the plugin settings.\u003Cbr \u002F>\n* What data is sent: the server address (host and port) that you enter in the plugin settings.\u003Cbr \u002F>\n* When data is sent: whenever the status or player list shortcodes are loaded on a page, or when they refresh via AJAX in the background.\u003Cbr \u002F>\n* Service website and API documentation: https:\u002F\u002Fmcsrvstat.us\u002F (API at https:\u002F\u002Fapi.mcsrvstat.us\u002F)\u003Cbr \u002F>\n* Legal \u002F privacy: please refer to the legal information and privacy details linked from their website.\u003C\u002Fp>\n\u003Ch4>MCHeads (mc-heads.net)\u003C\u002Fh4>\n\u003Cp>This service is used to generate square avatar images (“heads”) for Minecraft players based on their in-game name.\u003Cbr \u002F>\n* What data is sent: the Minecraft player name(s) reported by your server (no WordPress user data is sent).\u003Cbr \u002F>\n* When data is sent: when the player list is displayed and an avatar image needs to be shown for an online player.\u003Cbr \u002F>\n* Service website: https:\u002F\u002Fmc-heads.net\u002F\u003Cbr \u002F>\n* Terms of use: https:\u002F\u002Fminecraft-heads.com\u002Fterms-of-use\u003Cbr \u002F>\n* Privacy policy: https:\u002F\u002Fminecraft-heads.com\u002Fprivacy-policy\u003C\u002Fp>\n","Display your Minecraft server status on your WordPress site. Basic mode works without any Minecraft plugin.",20,252,100,"2025-12-10T20:15:00.000Z","6.9.4","6.0","7.4",[20,21,23],"https:\u002F\u002Fmrdino.es\u002Fmcsmd","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fserver-status-for-mc-by-mrdino.0.0.6.zip",{"slug":110,"name":111,"version":6,"author":112,"author_profile":113,"description":114,"short_description":115,"active_installs":11,"downloaded":116,"rating":101,"num_ratings":32,"last_updated":17,"tested_up_to":117,"requires_at_least":118,"requires_php":17,"tags":119,"homepage":122,"download_link":123,"security_score":101,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":124},"statusmc","StatusMC","sync667","https:\u002F\u002Fprofiles.wordpress.org\u002Fsync667\u002F","\u003Ch3>Opis\u003C\u002Fh3>\n\u003Cp>Wyświetla informacje odnośnie serwera bukkit poprzez JSONAPI.\u003C\u002Fp>\n\u003Cp>Plugin wymaga działającego pluginu JsonAPI po stronie serwera bukkit.\u003Cbr \u002F>\nhttp:\u002F\u002Fdev.bukkit.org\u002Fserver-mods\u002Fjsonapi\u002F\u003C\u002Fp>\n\u003Cp>You must install JsonAPI Plugin on bukkit server before use it.\u003C\u002Fp>\n\u003Ch3>Instalacja\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Wgraj plugin StatusMC do \u003Ccode>\u002Fwp-content\u002Fplugins\u002F\u003C\u002Fcode> na swoim serwerze\u003C\u002Fli>\n\u003Cli>Aktywuj plugin poprzez zakładkę ‘Plugins’ w menu WordPress\u003C\u002Fli>\n\u003Cli>Umieść nowy widget w porządanym miejscu i skonfiguruj go do działania z serwerem.\u003C\u002Fli>\n\u003C\u002Fol>\n","Wyświetla informacje odnośnie serwera bukkit poprzez JSONAPI.\u002F\u002FIts shows server status via JsonAPI Plugin.",3783,"3.4.2","3.0.0",[19,120,20,21,121],"jsonapi","widget","http:\u002F\u002Fsync667.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatusmc.zip","2026-03-15T10:48:56.248Z",{"attackSurface":126,"codeSignals":138,"taintFlows":193,"riskAssessment":194,"analyzedAt":206},{"hooks":127,"ajaxHandlers":134,"restRoutes":135,"shortcodes":136,"cronEvents":137,"entryPointCount":13,"unprotectedCount":13},[128],{"type":129,"name":130,"callback":131,"file":132,"line":133},"action","widgets_init","anonymous","MCStatusWidget.php",36,[],[],[],[],{"dangerousFunctions":139,"sqlUsage":143,"outputEscaping":145,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":192},[140],{"fn":141,"file":132,"line":133,"context":142},"create_function","add_action( 'widgets_init', create_function( '', 'register_widget(\"MCStatusWidget\");' ) );",{"prepared":13,"raw":13,"locations":144},[],{"escaped":13,"rawEcho":146,"locations":147},26,[148,150,152,154,156,158,159,161,163,165,167,168,170,172,174,176,178,179,180,182,184,185,186,188,190,191],{"file":132,"line":82,"context":149},"raw output",{"file":132,"line":151,"context":149},65,{"file":132,"line":153,"context":149},66,{"file":132,"line":155,"context":149},70,{"file":132,"line":157,"context":149},73,{"file":132,"line":46,"context":149},{"file":132,"line":160,"context":149},75,{"file":132,"line":162,"context":149},76,{"file":132,"line":164,"context":149},77,{"file":132,"line":166,"context":149},82,{"file":132,"line":34,"context":149},{"file":132,"line":169,"context":149},88,{"file":132,"line":171,"context":149},93,{"file":132,"line":173,"context":149},98,{"file":132,"line":175,"context":149},107,{"file":132,"line":177,"context":149},108,{"file":132,"line":177,"context":149},{"file":132,"line":177,"context":149},{"file":132,"line":181,"context":149},112,{"file":132,"line":183,"context":149},113,{"file":132,"line":183,"context":149},{"file":132,"line":183,"context":149},{"file":132,"line":187,"context":149},116,{"file":132,"line":189,"context":149},117,{"file":132,"line":189,"context":149},{"file":132,"line":189,"context":149},[],[],{"summary":195,"deductions":196},"The \"minecraft-server-status-widget\" v1.1 plugin exhibits a mixed security posture.  On one hand, it demonstrates good practices by not exposing a large attack surface through AJAX, REST API, shortcodes, or cron events.  Furthermore, all identified SQL queries are properly prepared, indicating a mindful approach to database interactions. The absence of known CVEs and historical vulnerabilities is also a positive sign, suggesting a relatively stable codebase concerning previously discovered flaws.\n\nHowever, several significant concerns emerge from the static analysis. The presence of the `create_function` function is a critical security risk, as it can be exploited to inject and execute arbitrary PHP code.  Compounding this, a substantial percentage (100%) of its output is not properly escaped, opening the door to cross-site scripting (XSS) vulnerabilities. The complete lack of nonce and capability checks for its entry points, while the attack surface is zero, is still a concerning oversight.  The total absence of taint analysis flows analyzed is also unusual and could mask undiscovered vulnerabilities. In conclusion, while the plugin avoids common pitfalls like unpatched CVEs and extensive attack vectors, the identified `create_function` usage and the pervasive lack of output escaping represent critical security weaknesses that require immediate attention.",[197,199,201,204],{"reason":198,"points":99},"Use of dangerous create_function",{"reason":200,"points":83},"No output escaping",{"reason":202,"points":203},"No nonce checks",5,{"reason":205,"points":203},"No capability checks","2026-03-17T00:11:47.622Z",{"wat":208,"direct":213},{"assetPaths":209,"generatorPatterns":210,"scriptPaths":211,"versionParams":212},[],[],[],[],{"cssClasses":214,"htmlComments":215,"htmlAttributes":216,"restEndpoints":217,"jsGlobals":218,"shortcodeOutput":220},[5],[],[],[],[219],"togluj",[221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236],"Status:  \u003C\u002Ftd>\u003Ctd>\u003Cb>\u003Cfont style='color:red;'>Offline\u003C\u002Ffont>\u003C\u002Fb>","Status:  \u003C\u002Ftd>\u003Ctd>\u003Cb>\u003Cfont style='color:green;'>Online\u003C\u002Ffont>\u003C\u002Fb>","IP Port:  \u003C\u002Ftd>\u003Ctd>\u003Cb>","Verze:  \u003C\u002Ftd>\u003Ctd>\u003Cb>","Odozva:  \u003C\u002Ftd>\u003Ctd>\u003Cb>","ms\u003C\u002Fb>\u003C\u002Ftd>\u003C\u002Ftr>","Mapa:  \u003C\u002Ftd>\u003Ctd>\u003Cb>","Hráči:  \u003C\u002Ftd>\u003Ctd>\u003Cb>"," \u002F ","\u003C\u002Fb>\u003C\u002Ftd>\u003C\u002Ftr>","\u003Ca href='javascript:void(0)' onClick='togluj(\"","')'>Hráči Online \u002F Pluginy\u003C\u002Fa>","\u003Cdiv id='","' style='display: none; font-weight: bold;'>","Žádny hráči na serveru..","\u003Cbr> Pluginy: \u003Cbr>\u003Ci>"]