[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fa0LjCMN3sQbbD5jmcLtAZwkind6Vcj_yokSkq0V2C0Q":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":36,"analysis":128,"fingerprints":204},"multiple-twitter-widgets","Multiple Twitter Widgets","1.0","Patrick Chia","https:\u002F\u002Fprofiles.wordpress.org\u002Fmypatricks\u002F","\u003Cp>Allows for multiple twitter widgets to be displayed.\u003C\u002Fp>\n","Allows for multiple twitter widgets to be displayed.",10,4396,0,"2009-07-04T17:36:00.000Z","2.8","2.7","",[19,20,21,22],"twitter","widgets","wordpressmu","wpmu","http:\u002F\u002Fpatrick.bloggles.info\u002Fplugins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmultiple-twitter-widgets.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":25,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"mypatricks",8,170,30,84,"2026-04-05T14:54:26.112Z",[37,54,74,93,111],{"slug":38,"name":39,"version":40,"author":7,"author_profile":8,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":43,"num_ratings":45,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":17,"tags":49,"homepage":23,"download_link":53,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"gravatar-favicon","Gravatar Favicon","3.1","\u003Cp>This plugin allows you to generate a \u003Ccode>gravatar favicon\u003C\u002Fcode> for your blog and admin logo included Apple touch icon. Just activate the plugin, and it will add gravatars to your blog template and admin panel automatically, no setting and nothing. But you must enable your avatar(Discussion Settings). (W6A4N4-L26P6-WSH)\u003C\u002Fp>\n","This plugin allows you to generate a gravatar favicon for your blog and admin logo included Apple touch icon.",100,21869,1,"2012-06-10T07:13:00.000Z","3.3.2","2.5",[50,51,52,21,22],"avatar","avatars","images","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravatar-favicon.zip",{"slug":55,"name":56,"version":57,"author":58,"author_profile":59,"description":60,"short_description":61,"active_installs":62,"downloaded":63,"rating":43,"num_ratings":64,"last_updated":65,"tested_up_to":66,"requires_at_least":67,"requires_php":17,"tags":68,"homepage":72,"download_link":73,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"teg-twitter-api","Twitter API Master – Twitter Widgets For WordPress","1.2.5","Theme Egg","https:\u002F\u002Fprofiles.wordpress.org\u002Fthemeegg\u002F","\u003Cp>This plugin help you to show twitter tweets, trends, post to twitter feature.\u003C\u002Fp>\n\u003Cp>Some demo shortcode of this plugin\u003C\u002Fp>\n\u003Cp>For Tweet shortcode please type [twitter_feeds count=”5″]\u003Cbr \u002F>\nFor Trends shortcode please type [twitter_trends count=”3″]\u003C\u002Fp>\n\u003Cul>\n\u003Cli>[twitter_feeds count=”5″]\u003C\u002Fli>\n\u003Cli>[twitter_trends count=”3″ ]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can dragged and dropped teg feed and trends widget from widget panel also.\u003C\u002Fp>\n\u003Cp>You can change shortcode attribute as per requirement, please visit our official page \u003Ca href=\"http:\u002F\u002Fdocs.themeegg.com\u002Fdocs\u002Fteg-twitter-api\u002F\" rel=\"nofollow ugc\">http:\u002F\u002Fdocs.themeegg.com\u002Fdocs\u002Fteg-twitter-api\u002F\u003C\u002Fa> for more information.\u003C\u002Fp>\n\u003Cp>Get free support at https:\u002F\u002Fthemeegg.com\u002Fsupport-forum\u002F\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WordPress 4.5 or later.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Contribute\u003C\u002Fh4>\n\u003Cp>You can contribute to the source code in our \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fthemeegg\u002Fteg-twitter-api\u002F\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa> page.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Twitter Tweets shortcode and widget\u003C\u002Fli>\n\u003Cli>Twitter Trends shortcode and widget\u003C\u002Fli>\n\u003Cli>Also tweet your wordpress post to twitter\u003C\u002Fli>\n\u003Cli>Official twitter timeline widgets and shortcode\u003C\u002Fli>\n\u003C\u002Fol>\n","Post to twitter, twitter feeds, twitter trends shortcode and widget wordpres plugin.",50,4561,2,"2018-01-26T08:12:00.000Z","4.9.29","4.5",[69,70,71,19,20],"api","settings","shortcode","https:\u002F\u002Fthemeegg.com\u002Fplugins\u002Fteg-twitter-api","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fteg-twitter-api.1.2.5.zip",{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":62,"downloaded":82,"rating":13,"num_ratings":13,"last_updated":83,"tested_up_to":84,"requires_at_least":17,"requires_php":85,"tags":86,"homepage":91,"download_link":92,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"theme-powerkit","Theme Powerkit","1.0.3","themeinwp","https:\u002F\u002Fprofiles.wordpress.org\u002Fthemeinwp\u002F","\u003Cp>Theme Powerkit is WordPress free plugin with multiple feature. Plugin have 5 useful widget like Author, Category, Recent Posts, Social Icon and Tab Posts Widgets and also, this plugin have webmaster verification meta field, Open Graph, Twitter Summery Card and you can add script before header and after footer as well.\u003C\u002Fp>\n\u003Ch3>Plugin Features:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Author, Category,Recent Posts, Social Icon and Tab Posts Widget\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Webmasters Verification meta\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Open Graph\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Twitter Summary Card\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Header and Footer Script Area\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cpre>\u003Ccode>License: GPLv2\nLicense URI: http:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-2.0.html\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Theme Powerkit is WordPress free plugin with multiple feature. Plugin have 5 useful widget like Author, Category, Recent Posts, Social Icon and Tab Po …",1979,"2020-09-08T15:10:00.000Z","5.5.18","5.5",[87,88,89,90,20],"header-script","open-graph","twitter-summary-card","webmasters-verification-meta","https:\u002F\u002Fwww.themeinwp.com\u002Ftheme-powerkit\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftheme-powerkit.1.0.3.zip",{"slug":94,"name":95,"version":96,"author":97,"author_profile":98,"description":99,"short_description":100,"active_installs":33,"downloaded":101,"rating":102,"num_ratings":64,"last_updated":103,"tested_up_to":104,"requires_at_least":15,"requires_php":17,"tags":105,"homepage":109,"download_link":110,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"multi-twitter-widget","Multi Twitter Stream","1.5.0","Clay McIlrath","https:\u002F\u002Fprofiles.wordpress.org\u002Fclaymcilrath\u002F","\u003Cp>Have a team or group of tweeters that you’d like to show on a site?\u003Cbr \u002F>\nThe problem with most WordPress Twitter Plugins is that the few that support multiple twitter accounts\u003Cbr \u002F>\nusually show the tweets of the users in chronological order. This means if USER_A tweets more than USER_B\u003Cbr \u002F>\nyour whole feed might be all about USER_A. I found in many cases that I’d rather pull in the most recent tweet\u003Cbr \u002F>\nfrom each user. So that’s what this plugin does. It will also pull in search results and hashtags\u003C\u002Fp>\n\u003Cp>Another fork exists here: https:\u002F\u002Fgithub.com\u002Fmsenateatplos\u002Fmulti-twitter-widget\u002Fblob\u002Fmaster\u002Fwidget.php\u003C\u002Fp>\n","A simple widget that displays only the most recent tweet from multiple accounts.",9536,60,"2013-04-12T01:56:00.000Z","3.5.2",[106,107,19,108,20],"multi-twitter","multiple-twitter","twitter-account","http:\u002F\u002Fthinkclay.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmulti-twitter-widget.zip",{"slug":112,"name":113,"version":114,"author":115,"author_profile":116,"description":117,"short_description":118,"active_installs":11,"downloaded":119,"rating":13,"num_ratings":13,"last_updated":120,"tested_up_to":48,"requires_at_least":121,"requires_php":17,"tags":122,"homepage":126,"download_link":127,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"at-reply","@reply","1.1","Jeff Waugh","https:\u002F\u002Fprofiles.wordpress.org\u002Fjdub\u002F","\u003Cp>Automagically link Twitterish “@name:” replies in comments.\u003C\u002Fp>\n\u003Cp>Note: It hasn’t been tested on versions earlier than 2.1, but may very well work.\u003C\u002Fp>\n","Automagically link Twitterish \"@name:\" replies in comments.",4534,"2008-03-05T06:15:00.000Z","2.1",[123,124,125,19,22],"comments","filter","reply","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fat-reply\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fat-reply.1.1.zip",{"attackSurface":129,"codeSignals":141,"taintFlows":191,"riskAssessment":192,"analyzedAt":203},{"hooks":130,"ajaxHandlers":137,"restRoutes":138,"shortcodes":139,"cronEvents":140,"entryPointCount":13,"unprotectedCount":13},[131],{"type":132,"name":133,"callback":134,"priority":45,"file":135,"line":136},"action","init","wp_twitter_init","multiple-twitter-widgets.php",317,[],[],[],[],{"dangerousFunctions":142,"sqlUsage":143,"outputEscaping":145,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":190},[],{"prepared":13,"raw":13,"locations":144},[],{"escaped":13,"rawEcho":146,"locations":147},25,[148,151,153,155,157,159,161,163,165,167,168,169,171,173,174,175,177,179,180,182,184,186,187,188,189],{"file":135,"line":149,"context":150},54,"raw output",{"file":135,"line":152,"context":150},55,{"file":135,"line":154,"context":150},59,{"file":135,"line":156,"context":150},123,{"file":135,"line":158,"context":150},125,{"file":135,"line":160,"context":150},127,{"file":135,"line":162,"context":150},132,{"file":135,"line":164,"context":150},225,{"file":135,"line":166,"context":150},226,{"file":135,"line":166,"context":150},{"file":135,"line":166,"context":150},{"file":135,"line":170,"context":150},231,{"file":135,"line":172,"context":150},232,{"file":135,"line":172,"context":150},{"file":135,"line":172,"context":150},{"file":135,"line":176,"context":150},237,{"file":135,"line":178,"context":150},238,{"file":135,"line":178,"context":150},{"file":135,"line":181,"context":150},241,{"file":135,"line":183,"context":150},246,{"file":135,"line":185,"context":150},253,{"file":135,"line":185,"context":150},{"file":135,"line":185,"context":150},{"file":135,"line":185,"context":150},{"file":135,"line":185,"context":150},[],[],{"summary":193,"deductions":194},"The \"multiple-twitter-widgets\" plugin version 1.0 exhibits a mixed security posture. On the positive side, static analysis reveals no direct attack surface through AJAX, REST API, shortcodes, or cron events that are not protected by authentication checks. Furthermore, the code avoids dangerous functions, file operations, external HTTP requests, and does not bundle external libraries. SQL queries are exclusively handled using prepared statements, and there's no record of past vulnerabilities, suggesting a generally cautious development approach and a clean history.\n\nHowever, a significant concern arises from the complete lack of output escaping (0% properly escaped). This indicates a high risk of Cross-Site Scripting (XSS) vulnerabilities, as user-supplied data displayed on the frontend is not sanitized, leaving the site and its users vulnerable to malicious script injection. The absence of nonce checks and capability checks across the (albeit non-existent) entry points is also noteworthy, though less critical given the limited attack surface. While the vulnerability history is clean, the lack of output escaping is a critical flaw that needs immediate attention.",[195,198,201],{"reason":196,"points":197},"0% output escaping",12,{"reason":199,"points":200},"No nonce checks",5,{"reason":202,"points":200},"No capability checks","2026-03-17T00:04:39.443Z",{"wat":205,"direct":210},{"assetPaths":206,"generatorPatterns":207,"scriptPaths":208,"versionParams":209},[],[],[],[],{"cssClasses":211,"htmlComments":215,"htmlAttributes":217,"restEndpoints":219,"jsGlobals":220,"shortcodeOutput":221},[212,213,214],"rsswidget","twitter-user","twitter-link",[216],"\u003C!-- Widgets by Patrick Chia http:\u002F\u002Fpatrickchia.com\u002F -->",[218],"rel='nofollow'",[],[],[]]