[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDvZR67ynz2y5pJxIHPF8PU0amDpMgwnQlOmHl8S3QQs":3,"$fkrO-zg9BPFG7HFI1fMDn4wNRziq1tEzZUbtyTEiUA5I":81,"$fBs8DE6UZTxAEaLM323VhuhtMVTlWsrXRnjBVyOzl2jM":86},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":20,"download_link":21,"security_score":22,"vuln_count":11,"unpatched_count":11,"last_vuln_date":23,"fetched_at":24,"discovery_status":25,"vulnerabilities":26,"developer":27,"crawl_stats":23,"alternatives":34,"analysis":35,"fingerprints":61},"model-trains-data","Model Trains Data","1.0","Mads Phikamphon","https:\u002F\u002Fprofiles.wordpress.org\u002Fmadsphi\u002F","\u003Cp>This plugin connects to the Model Prices API, so you can display model train prices using WordPress shortcodes.\u003C\u002Fp>\n\u003Cp>To use the plugin, you need a Model Prices API key. \u003Ca href=\"https:\u002F\u002Fwww.modelprices.com\u002Fapi\u002F\" rel=\"nofollow ugc\">Get that here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>When you got your API key, you can use the plugin like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[model_trains_data_min_price brand='marklin' model='30000' currency='EUR' api-key='API-KEY']\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>If you want to style the link with a CSS class, you can add the parameter ‘css-class’. Like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[model_trains_data_min_price brand='marklin' model='30000' currency='EUR' api-key='API-KEY' css-class='fh-underline-link']\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Access to the Model Train Prices API. Display model train prices using Wordpress shortcodes.",0,661,"2023-05-02T12:19:00.000Z","6.0.11","4.7","7.0",[18,19],"model-railway","model-train","https:\u002F\u002Fwww.modelprices.com\u002Fwp-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmodel-trains-data.zip",85,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":28,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":30,"avg_security_score":22,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},"madsphi",2,10,30,84,"2026-05-20T14:29:47.314Z",[],{"attackSurface":36,"codeSignals":47,"taintFlows":54,"riskAssessment":55,"analyzedAt":60},{"hooks":37,"ajaxHandlers":38,"restRoutes":39,"shortcodes":40,"cronEvents":45,"entryPointCount":46,"unprotectedCount":11},[],[],[],[41],{"tag":42,"callback":42,"file":43,"line":44},"model_trains_data_min_price","shortcode.php",3,[],1,{"dangerousFunctions":48,"sqlUsage":49,"outputEscaping":51,"fileOperations":11,"externalRequests":46,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":53},[],{"prepared":11,"raw":11,"locations":50},[],{"escaped":11,"rawEcho":11,"locations":52},[],[],[],{"summary":56,"deductions":57},"The \"model-trains-data\" plugin v1.0 demonstrates a strong adherence to secure coding practices in its static analysis. The absence of dangerous functions, the complete reliance on prepared statements for SQL queries, and 100% proper output escaping are excellent indicators of a well-developed plugin. Furthermore, the lack of any identified vulnerability history suggests a consistent focus on security by the developers.  However, a critical concern arises from the presence of a single external HTTP request that lacks any explicit mention of authentication or authorization checks in the provided data. While the attack surface is small and has no directly unprotected entry points, this outbound communication could potentially be exploited if the target service is compromised or if the plugin doesn't properly validate or sanitize the data sent in this request, potentially leading to unintended consequences or information leakage.",[58],{"reason":59,"points":30},"External HTTP request without evident auth\u002Fvalidation","2026-03-17T06:32:07.659Z",{"wat":62,"direct":67},{"assetPaths":63,"generatorPatterns":64,"scriptPaths":65,"versionParams":66},[],[],[],[],{"cssClasses":68,"htmlComments":69,"htmlAttributes":70,"restEndpoints":71,"jsGlobals":73,"shortcodeOutput":74},[],[],[],[72],"https:\u002F\u002Fwww.modelprices.com\u002Fwp-json\u002Fpublic\u002Fget-product",[],[75,76,77,78,79,78,80],"\u003Ca href='","'",">"," "," from ","\u003C\u002Fa>",{"error":82,"url":83,"statusCode":84,"statusMessage":85,"message":85},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fmodel-trains-data\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":11,"versions":87},[]]