[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fm7QLx1vUdtdLHJ1QDaaev7On2Px5Q54aWWSntOiKixA":3,"$fmTLTRBydzkK-ianRh4qUj-K6NdktjPSaEC82kLozpOQ":226,"$fqjWvbq5p-99VrJ3uDYNqWzZwdtkQBvDGi9BtbN1VH_Q":231},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":30,"crawl_stats":26,"alternatives":36,"analysis":124,"fingerprints":206},"most-comments","Most Comments","1.1","Nader","https:\u002F\u002Fprofiles.wordpress.org\u002Fnaderc\u002F","\u003Cp>The “Most Comments” plugin displays as the name says posts with the most comments. You can either use the widget in the sidebar or integrate the plugin as template tag in your theme files.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Limit the amount of posts to be shown\u003C\u002Fli>\n\u003Cli>Show comments from a specific post category\u003C\u002Fli>\n\u003Cli>Exlude posts without comments\u003C\u002Fli>\n\u003Cli>Select a time range (last XX days) of posts to be taken into account\u003C\u002Fli>\n\u003Cli>Customize the design template via the settings page\u003C\u002Fli>\n\u003Cli>Place a widget in your sidebar\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>More Information & Feature Description:\u003Cbr \u002F>\nhttp:\u002F\u002Fwww.brandinfection.com\u002Fwordpress-plugins\u002Fmost-comments\u002F\u003C\u002Fp>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Cp>You can configure the most comments plugin to your needs. Options can be found under the menu \u003Ccode>Settings > Most Comments\u003C\u002Fcode>\u003C\u002Fp>\n","Display posts with the most comments, as a widget or on a page using the template tag. Customize the look with specific settings.",30,8345,0,"2008-10-18T21:28:00.000Z","2.6","",[18,19,20,21,22],"category","comments","popular","rank","widget","http:\u002F\u002Fwww.brandinfection.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmost-comments.1.1.zip",85,null,"2026-03-15T15:16:48.613Z","no_bundle",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":25,"avg_patch_time_days":11,"trust_score":34,"computed_at":35},"naderc",2,40,84,"2026-07-15T07:22:12.193Z",[37,54,73,90,109],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":13,"num_ratings":13,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":16,"tags":50,"homepage":51,"download_link":52,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":53},"most-commented","Most Commented Widget","3.0","Nick Momrik","https:\u002F\u002Fprofiles.wordpress.org\u002Fnickmomrik\u002F","\u003Cp>Add a widget to display a list of the posts\u002Fpages with the most comments.\u003C\u002Fp>\n","Add a widget to display a list of the posts\u002Fpages with the most comments.",300,116865,"2015-12-08T22:00:00.000Z","4.4.34","2.8",[19,20,21,22],"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmost-commented\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmost-commented.3.0.zip","2026-04-16T10:56:18.058Z",{"slug":55,"name":56,"version":57,"author":58,"author_profile":59,"description":60,"short_description":61,"active_installs":62,"downloaded":63,"rating":13,"num_ratings":13,"last_updated":64,"tested_up_to":65,"requires_at_least":49,"requires_php":16,"tags":66,"homepage":71,"download_link":72,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":53},"most-popular-categories","Most Popular Categories","1.1.1","blueinstyle","https:\u002F\u002Fprofiles.wordpress.org\u002Fblueinstyle\u002F","\u003Cp>This is just a small WordPress plugin that lists the most popular categories by post count in a widget. Includes several options.\u003C\u002Fp>\n\u003Cp>Useful for blogs with many categories and just want to list the most popular.\u003C\u002Fp>\n\u003Cp>For Themes that do not support Widgets, you can now put this code anywhere in your template:\n     \u003C\u002Fp>\n\u003Cp>Support and Feature requests are on my forums at http:\u002F\u002Fjustmyecho.com\u002Fforums\u002F\u003C\u002Fp>\n","Display your most popular categories in a widget",600,5590,"2011-04-07T07:23:00.000Z","3.1.4",[67,68,69,70,22],"categories","category-list","popular-categories","top-categories","http:\u002F\u002Fjustmyecho.com\u002F2010\u002F11\u002Fmost-popular-categories-widget-for-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmost-popular-categories.1.1.1.zip",{"slug":74,"name":75,"version":76,"author":77,"author_profile":78,"description":79,"short_description":80,"active_installs":45,"downloaded":81,"rating":33,"num_ratings":82,"last_updated":83,"tested_up_to":84,"requires_at_least":49,"requires_php":16,"tags":85,"homepage":88,"download_link":89,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":53},"most-popular-posts","Most Popular Posts","1.6.2","wesg","https:\u002F\u002Fprofiles.wordpress.org\u002Fwesg\u002F","\u003Cp>Most Popular Posts is a basic widget for your sidebar that creates a list of links to the top posts on your blog according to the number of comments on the post. You can customize many aspects of the plugin to fit in your blog.\u003C\u002Fp>\n\u003Cp>Updates include including and excluding categories, reverse the order of comments and incorporation of WordPress widget standards.\u003C\u002Fp>\n\u003Cp>For a complete list of the changes from each version, please visit \u003Ca href=\"http:\u002F\u002Fwww.wesg.ca\u002F2008\u002F08\u002Fwordpress-widget-most-popular\u002F#changelog\" rel=\"nofollow ugc\">the plugin homepage\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For examples and tips on using the plugin, please check \u003Ca href=\"http:\u002F\u002Fwww.wesg.ca\u002F2008\u002F08\u002Fwordpress-widget-most-popular\u002F#examples\" rel=\"nofollow ugc\">the examples\u003C\u002Fa> on the plugin homepage.\u003C\u002Fp>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Cp>Used exclusively as a widget at the current time.\u003C\u002Fp>\n","This is a very simple widget that displays a link to the top commented posts on your blog.",51171,1,"2013-02-14T04:23:00.000Z","3.5.2",[19,86,87,22],"most-popular","sidebar","http:\u002F\u002Fwww.wesg.ca\u002F2008\u002F08\u002Fwordpress-widget-most-popular\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmost-popular-posts.1.6.2.zip",{"slug":91,"name":92,"version":93,"author":94,"author_profile":95,"description":96,"short_description":97,"active_installs":98,"downloaded":99,"rating":13,"num_ratings":13,"last_updated":16,"tested_up_to":100,"requires_at_least":101,"requires_php":16,"tags":102,"homepage":105,"download_link":106,"security_score":107,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":108},"simple-category-ranking","Simple Category Ranking","1.2.0","ryokurosu","https:\u002F\u002Fprofiles.wordpress.org\u002Fryokurosu\u002F","\u003Cp>This plugin is easy to set category ranking.\u003Cbr \u002F>\nIf you view the post,Ranking is on the same category.\u003C\u002Fp>\n\u003Cp>This plugin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy setting ranking widget on same category\u003C\u002Fli>\n\u003Cli>Frontpage ranking is able to choose\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Please contact me if you want additional setting.\u003C\u002Fp>\n","this is a better way to ranking widget with category.",10,1318,"5.0.0","4.5",[18,103,104],"popular-post","ranking","https:\u002F\u002Fruana.co.jp\u002Fsimple-category-ranking","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-category-ranking.zip",100,"2026-03-15T10:48:56.248Z",{"slug":110,"name":111,"version":112,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":98,"downloaded":117,"rating":13,"num_ratings":13,"last_updated":118,"tested_up_to":119,"requires_at_least":49,"requires_php":16,"tags":120,"homepage":122,"download_link":123,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":53},"simple-popular-posts","Simple Popular Posts","1.0","jimmysun","https:\u002F\u002Fprofiles.wordpress.org\u002Fjimmysun\u002F","\u003Cp>Simple Popular Posts is a plugin that creates a widget for you to put on your sidebar. The widget shows the most popular posts on your blog, based on the number of comments.\u003C\u002Fp>\n\u003Cp>It is a very simple and basic plugin. It only has 3 options:\u003Cbr \u002F>\n– the widget title\u003Cbr \u002F>\n– the number of posts you want to show\u003Cbr \u002F>\n– whether you want to show the number of comments or not\u003C\u002Fp>\n\u003Cp>Based on the Most Popular Posts plugin by Wes Goodhoofd (http:\u002F\u002Fwww.wesg.ca\u002F2008\u002F08\u002Fwordpress-widget-most-popular\u002F)\u003C\u002Fp>\n","Creates a very simple and basic widget for your sidebar to display most popular posts on your blog based on the number of comments only.",3045,"2010-05-16T15:16:00.000Z","2.9.2",[19,86,74,121,22],"popular-posts","http:\u002F\u002Fwww.jimmysun.net\u002Fteknologi\u002Fwordpress\u002Fwordpress-plugin-simple-popular-posts","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-popular-posts.zip",{"attackSurface":125,"codeSignals":146,"taintFlows":174,"riskAssessment":192,"analyzedAt":205},{"hooks":126,"ajaxHandlers":142,"restRoutes":143,"shortcodes":144,"cronEvents":145,"entryPointCount":13,"unprotectedCount":13},[127,133,138],{"type":128,"name":129,"callback":130,"file":131,"line":132},"action","plugins_loaded","widget_most_comments_init","most-comments-widget.php",60,{"type":128,"name":134,"callback":135,"file":136,"line":137},"admin_menu","most_comments_menu","most-comments.php",28,{"type":128,"name":139,"callback":140,"file":136,"line":141},"activate_most-comments\u002Fmost-comments.php","most_comments_init",118,[],[],[],[],{"dangerousFunctions":147,"sqlUsage":148,"outputEscaping":150,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":173},[],{"prepared":32,"raw":13,"locations":149},[],{"escaped":32,"rawEcho":98,"locations":151},[152,156,158,159,161,163,165,167,169,171],{"file":153,"line":154,"context":155},"most-comments-options.php",56,"raw output",{"file":153,"line":157,"context":155},72,{"file":153,"line":157,"context":155},{"file":153,"line":160,"context":155},98,{"file":131,"line":162,"context":155},22,{"file":131,"line":164,"context":155},26,{"file":131,"line":166,"context":155},44,{"file":131,"line":168,"context":155},47,{"file":131,"line":170,"context":155},50,{"file":136,"line":172,"context":155},110,[],[175],{"entryPoint":176,"graph":177,"unsanitizedCount":82,"severity":191},"\u003Cmost-comments-options> (most-comments-options.php:0)",{"nodes":178,"edges":188},[179,183],{"id":180,"type":181,"label":182,"file":153,"line":154},"n0","source","$_SERVER['REQUEST_URI']",{"id":184,"type":185,"label":186,"file":153,"line":154,"wp_function":187},"n1","sink","echo() [XSS]","echo",[189],{"from":180,"to":184,"sanitized":190},false,"low",{"summary":193,"deductions":194},"The \"most-comments\" v1.1 plugin exhibits a generally positive security posture due to the absence of known vulnerabilities and the use of prepared statements for its SQL queries.  The static analysis also indicates a very small attack surface with no direct entry points like AJAX handlers, REST API routes, or shortcodes that lack authentication. This suggests the developers have a foundational understanding of secure coding practices.\n\nHowever, several significant concerns arise from the code analysis. The most prominent is the taint analysis revealing a flow with unsanitized paths, which, despite not being classified as critical or high severity in this instance, represents a potential weakness. Coupled with this, a very low percentage of output escaping (17%) is a major red flag. This indicates a high likelihood of cross-site scripting (XSS) vulnerabilities, as user-provided data is likely being rendered directly in the browser without proper sanitization. The lack of any nonce checks or capability checks on any entry points, while currently having zero entry points, means that if any are introduced in the future, they will be inherently insecure.\n\nOverall, while the plugin benefits from a clean vulnerability history and secure SQL handling, the substantial output escaping deficiency and the identified unsanitized taint flow present a notable risk. The lack of any checks on potential entry points further compounds these concerns, leaving the plugin vulnerable to XSS if any user input is ever displayed without sanitization. Future development should prioritize robust output escaping and the implementation of appropriate security checks for any new entry points.",[195,198,200,203],{"reason":196,"points":197},"Low percentage of output escaping",15,{"reason":199,"points":98},"Flows with unsanitized paths",{"reason":201,"points":202},"No nonce checks",5,{"reason":204,"points":202},"No capability checks","2026-03-16T22:38:53.809Z",{"wat":207,"direct":212},{"assetPaths":208,"generatorPatterns":209,"scriptPaths":210,"versionParams":211},[],[],[],[],{"cssClasses":213,"htmlComments":215,"htmlAttributes":216,"restEndpoints":217,"jsGlobals":218,"shortcodeOutput":219},[214],"most-comments-widget",[],[],[],[],[220,221,222,223,224,225],"\u003Cli>\u003Ca href=\"","\"  title=\"","\">","\u003C\u002Fa> - "," ","comments\u003C\u002Fli>",{"error":227,"url":228,"statusCode":229,"statusMessage":230,"message":230},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fmost-comments\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":13,"versions":232},[]]