[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCSU4jDWAdEhPmjoLUqG8B40MxVBBv7OU4Q57mIFkEQc":3,"$feATmRDLY6XLE7nssMQg6Q4705iR7sTCF-HSS3Z2fdMU":247,"$fnA_K2Vd2jKInBiNHDukmXnq0lYVek3fxWDxhhUsbUD0":251},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"discovery_status":31,"vulnerabilities":32,"developer":51,"crawl_stats":38,"alternatives":59,"analysis":121,"fingerprints":222},"nepali-date-converter","Nepali Date Converter","3.0.5","AddonsPress","https:\u002F\u002Fprofiles.wordpress.org\u002Faddonspress\u002F","\u003Cp>Nepali Date Converter makes converting dates between English (Gregorian) and Nepali (Bikram Sambat) formats easy. Whether you’re building a Nepali-language WordPress site or just need to display today’s Nepali date, this plugin has you covered.\u003C\u002Fp>\n\u003Cp>For the best experience with Nepali Date Converter, check out the free \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fcosmoswp\u002F\" rel=\"ugc\">CosmosWP\u003C\u002Fa> theme.\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fdemo.cosmoswp.com\u002Fdemo-99\u002F\" rel=\"nofollow ugc\">View Demo\u003C\u002Fa> \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> See Nepali Date Converter in action with real-world implementations.\u003C\u002Fp>\n\u003Cp>Includes:\u003Cbr \u002F>\n– Post Date to Nepali conversion\u003Cbr \u002F>\n– Today’s Nepali date display\u003Cbr \u002F>\n– Nepali human time differences (e.g., “३ सेकेन्ड अगाडि”)\u003Cbr \u002F>\n– Shortcodes and widgets\u003Cbr \u002F>\n– Custom functions for developers\u003C\u002Fp>\n\u003Cp>Fully rewritten for version 3.0.0, this release modernizes the plugin from the ground up, improves accuracy, and ensures better compatibility.\u003C\u002Fp>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>🔁 Convert English \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">↔\u003C\u002Fspan> Nepali dates\u003C\u002Fli>\n\u003Cli>🗓️ Show Nepali date for post publish dates\u003C\u002Fli>\n\u003Cli>⏳ Nepali human time differences (e.g., ३ मिनेट अगाडि)\u003C\u002Fli>\n\u003Cli>🧩 Widgets: Date Converter and Today’s Date\u003C\u002Fli>\n\u003Cli>🧪 Shortcodes: \u003Ccode>[nepali-date-converter]\u003C\u002Fcode>, \u003Ccode>[ndc-today-date]\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>🔧 Developer functions: \u003Ccode>ndc_eng_to_nep_date\u003C\u002Fcode>, \u003Ccode>ndc_nep_to_eng_date\u003C\u002Fcode>, and more\u003C\u002Fli>\n\u003Cli>📅 Supports Bikram Sambat years 2000 to 2099 BS\u003C\u002Fli>\n\u003Cli>🔒 Security improvements and code hardening\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Shortcodes\u003C\u002Fh3>\n\u003Ch3>1. \u003Ccode>[nepali-date-converter]\u003C\u002Fcode>\u003C\u002Fh3>\n\u003Cp>Display a Nepali date converter form.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Attributes:\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Ccode>title\u003C\u002Fcode>: Custom title (default: Nepali Date Converter)\u003Cbr \u002F>\n– \u003Ccode>result_format\u003C\u002Fcode>: Format for output (e.g., \u003Ccode>l, F j, Y\u003C\u002Fcode>)\u003Cbr \u002F>\n– \u003Ccode>disable_ndc_convert_eng_to_nep\u003C\u002Fcode>: \u003Ccode>1\u003C\u002Fcode> to disable English to Nepali conversion\u003Cbr \u002F>\n– \u003Ccode>disable_ndc_convert_nep_to_eng\u003C\u002Fcode>: \u003Ccode>1\u003C\u002Fcode> to disable Nepali to English conversion\u003Cbr \u002F>\n– \u003Ccode>nepali_date_lang\u003C\u002Fcode>: \u003Ccode>nep_char\u003C\u002Fcode> (e.g., \u003Ccode>शुक्रबार, अशोज ८, २०७२\u003C\u002Fcode>) or \u003Ccode>eng_char\u003C\u002Fcode>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Examples:\u003C\u002Fstrong>\u003Cbr \u002F>\n    \u003Ccode>[nepali-date-converter]\u003Cbr \u002F>\n[nepali-date-converter title=\"Nepali Date\"]\u003Cbr \u002F>\n[nepali-date-converter title=\"Nepali date\" result_format=\"l, F j, Y\"]\u003C\u002Fcode>\u003C\u002Fp>\n\u003Ch3>2. \u003Ccode>[ndc-today-date]\u003C\u002Fcode>\u003C\u002Fh3>\n\u003Cp>Displays today’s Nepali date.\u003C\u002Fp>\n\u003Ch3>Widgets\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>NDC: Nepali Date Converter\u003C\u002Fstrong> – Date converter widget\u003C\u002Fli>\n\u003Cli>\u003Cstrong>NDC: Today Date\u003C\u002Fstrong> – Show today’s Nepali date\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Developer Functions\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ccode>ndc_eng_to_nep_date()\u003C\u002Fcode> – Convert English to Nepali\u003C\u002Fli>\n\u003Cli>\u003Ccode>ndc_convert_eng_to_nep()\u003C\u002Fcode> – Convert using formatted string\u003C\u002Fli>\n\u003Cli>\u003Ccode>ndc_nep_to_eng_date()\u003C\u002Fcode> – Convert Nepali to English\u003C\u002Fli>\n\u003Cli>\u003Ccode>ndc_convert_nep_to_eng()\u003C\u002Fcode> – Convert using formatted string\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Use in code:\u003Cbr \u002F>\necho do_shortcode(‘[nepali-date-converter]’);\u003Cbr \u002F>\necho do_shortcode(‘[ndc-today-date]’);\u003Cbr \u002F>\n    `\u003Cbr \u002F>\nPlease visit \u003Ca href=\"https:\u002F\u002Fwww.addonspress.com\u002Fwordpress-plugins\u002Fnepali-date-converter\u002F\" rel=\"nofollow ugc\">Nepali Date Converter\u003C\u002Fa> for more information about another shortcode [ndc-today-date] and for all available functions.\u003C\u002Fp>\n","Convert English dates to Nepali and vice versa, including WordPress post dates. Includes widgets, shortcodes, and custom functions.",900,13989,100,4,"2025-05-18T05:10:00.000Z","6.8.5","4.9","7.2",[20,4,21,22,23],"english-to-nepali-date-converter","nepali-post-date","nepali-to-english-date-converter","today-nepali-date","https:\u002F\u002Fwww.addonspress.com\u002Fwordpress-plugins\u002Fnepali-date-converter\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.3.0.5.zip",91,1,0,"2025-04-11 00:00:00","2026-04-16T10:56:18.058Z","no_bundle",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":29,"updated_date":45,"references":46,"days_to_patch":48,"patch_diff_files":49,"patch_trac_url":38,"research_status":38,"research_verified":50,"research_rounds_completed":28,"research_plan":38,"research_summary":38,"research_vulnerable_code":38,"research_fix_diff":38,"research_exploit_outline":38,"research_model_used":38,"research_started_at":38,"research_completed_at":38,"research_error":38,"poc_status":38,"poc_video_id":38,"poc_summary":38,"poc_steps":38,"poc_tested_at":38,"poc_wp_version":38,"poc_php_version":38,"poc_playwright_script":38,"poc_exploit_code":38,"poc_has_trace":50,"poc_model_used":38,"poc_verification_depth":38},"CVE-2025-26950","nepali-date-converter-authenticated-contributor-stored-cross-site-scripting","Nepali Date Converter \u003C= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting","The Nepali Date Converter plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=2.0.8","3.0.0","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-04-16 19:16:13",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F4ab53ebb-c18e-4791-b4dc-84b84aea65c6?source=api-prod",6,[],false,{"slug":52,"display_name":7,"profile_url":8,"plugin_count":53,"total_installs":54,"avg_security_score":55,"avg_patch_time_days":56,"trust_score":57,"computed_at":58},"addonspress",5,91800,93,221,74,"2026-05-20T00:52:06.365Z",[60,82,103],{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":68,"downloaded":69,"rating":70,"num_ratings":71,"last_updated":72,"tested_up_to":16,"requires_at_least":73,"requires_php":74,"tags":75,"homepage":78,"download_link":79,"security_score":80,"vuln_count":27,"unpatched_count":27,"last_vuln_date":81,"fetched_at":30},"nepali-date-utilities","Nepali Date Utilities","1.0.15","ashokbasnet","https:\u002F\u002Fprofiles.wordpress.org\u002Fashokbasnet\u002F","\u003Cp>“Nepali Date Utilities” plugin converts English to Nepali dates, offering post dates and today’s date via shortcode for easy display on sites.\u003C\u002Fp>\n","\"Nepali Date Utilities\" plugin converts English to Nepali dates, offering post dates and today’s date via shortcode for easy display on sites.",1000,8550,94,3,"2025-05-14T16:37:00.000Z","4.0","5.2.4",[76,77,61,21],"display-nepali-date","nepali-date","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-utilities.1.0.15.zip",71,"2025-04-09 00:00:00",{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":90,"downloaded":91,"rating":13,"num_ratings":92,"last_updated":93,"tested_up_to":94,"requires_at_least":95,"requires_php":78,"tags":96,"homepage":100,"download_link":101,"security_score":102,"vuln_count":28,"unpatched_count":28,"last_vuln_date":38,"fetched_at":30},"nyasro-nepali-date-converter","Nyasro Nepali Date Converter","2.0.1","nyasro","https:\u002F\u002Fprofiles.wordpress.org\u002Fnyasro\u002F","\u003Cp>Nyasro Nepali Date Converter is plugin with widget which convert Nepali Date to English Date and English Date to Nepali Date.\u003Cbr \u002F>\nYou can use following shortcode either to display today’s nepali date or to convert english-nepali date, anywhere in the post or pages.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Use \u003Ccode>[ny_dateconvert]\u003C\u002Fcode> to show today nepali date.\u003C\u002Fli>\n\u003Cli>Use \u003Ccode>[ny_dateconvert date='{date}']\u003C\u002Fcode> to convert nepali date to english date.\u003C\u002Fli>\n\u003Cli>Use \u003Ccode>[ny_dateconvert date='{date}' convert='{type}']\u003C\u002Fcode> to convert nepali to english date or english to nepali date.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Where,\u003C\u002Fp>\n\u003Cul>\n\u003Cli>{date} format is \u003Ccode>YYYY-MM-DD\u003C\u002Fcode> [\u003Ccode>YYYY\u003C\u002Fcode> : four digit year, \u003Ccode>MM\u003C\u002Fcode> : one or tow digits month, \u003Ccode>DD\u003C\u002Fcode> : one or digits day]\u003C\u002Fli>\n\u003Cli>{type} format is \u003Ccode>eng_to_nep\u003C\u002Fcode> or \u003Ccode>nep_to_eng\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin have special widget which allows user interface to convert english-nepali date or vice versa.\u003Cbr \u002F>\nYou can use following shortcode to display nyasro nepali date converter widget.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Use \u003Ccode>[ny_datewidget]\u003C\u002Fcode> to show date converter widget anywhere in your post or pages.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Not only that but also it has date converter \u003Cem>widget\u003C\u002Fem> for \u003Cem>theme widgets\u003C\u002Fem> named \u003Cstrong>Nyasro Nepali Date Converter\u003C\u002Fstrong>,\u003Cbr \u002F>\nwhich you can use to show date converter from \u003Cem>Dashboard > Appearance > Widgets\u003C\u002Fem> section in your theme sidebar.\u003C\u002Fp>\n\u003Cp>If you are a developer then use following \u003Cem>PHP\u003C\u002Fem> code for date converter.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>To show today’s nepali date :\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\n\n    if(function_exists('_Nyasro_todayDate'))\n        _Nyasro_todayDate();        \n\n?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>To convert english-nepali date or vice versa:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\n    if(function_exists('_Nyasro_NepaliDateConverter'))\n        _Nyasro_NepaliDateConverter( $date, $conversion);\n?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>where \u003Ccode>$date = YYYY-MM-DD\u003C\u002Fcode> and \u003Ccode>$conversion = eng_to_nep | nep_to_eng\u003C\u002Fcode>.\u003C\u002Fem>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>To show date converter widget or box:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\n    if(function_exists('_Nyasro_NepaliDateConverterWidget'))\n        _Nyasro_NepaliDateConverterWidget();\n?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","Nyasro Nepali Date Converter allows to convert A.D. (English Date) to B.S. (Nepali Date) and Vice Versa.",200,4725,2,"2020-07-05T18:26:00.000Z","5.4.19","2.8",[97,98,99,77,4],"date-converter","nepal","nepali","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fnyasro-nepali-date-converter\u002Fadvanced\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnyasro-nepali-date-converter.2.0.1.zip",85,{"slug":104,"name":105,"version":106,"author":107,"author_profile":108,"description":109,"short_description":110,"active_installs":28,"downloaded":111,"rating":28,"num_ratings":28,"last_updated":112,"tested_up_to":113,"requires_at_least":114,"requires_php":115,"tags":116,"homepage":119,"download_link":120,"security_score":102,"vuln_count":28,"unpatched_count":28,"last_vuln_date":38,"fetched_at":30},"chp-nepali-date-converter","CHP Nepali Date Converter","1.0.2","Suresh Chand","https:\u002F\u002Fprofiles.wordpress.org\u002Fsureshchand00a\u002F","\u003Cp>CHP Nepali Date Converter plugin is developed in order to provide dates conversion from English to Nepali dates and Vice Versa. This plugin converts pages, posts and comments date from English to Nepali or Vice Versa. This plugin also supports Shortcode that helps you to display Nepali dates anywhere in your website.\u003C\u002Fp>\n\u003Ch3>Main Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Show Posts, Pages, Comments Date to Nepali\u003C\u002Fli>\n\u003Cli>Supports Time Diff (Eg: ३ सेकेन्ड अगाडि)\u003C\u002Fli>\n\u003Cli>Time ago available for comments. Such as \u003Ccode>३ माहिना पहिले\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Various Custom function to convert English Date to Nepali and Nepali Date to English\u003C\u002Fli>\n\u003Cli>Real Timer system\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>AVAILABLE SHORTCODES\u003C\u002Fh3>\n\u003Cp>You can use following shortcodes to display Nepali Date or Today Date anywhere in the posts or pages:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Use \u003Ccode>[CHPNPDATE date=\"YOUR_DATE\"]\u003C\u002Fcode> to show Nepali Date Converter\u003C\u002Fli>\n\u003Cli>Use \u003Ccode>[CHPNPDATE date=\"TODAY\"]\u003C\u002Fcode> or \u003Ccode>[CHPNPDATE]\u003C\u002Fcode> to show Today Date\u003C\u002Fli>\n\u003Cli>Use \u003Ccode>[CHPNPDATE date=\"REALTIME\"]\u003C\u002Fcode> to show Real Timer with Date\u003C\u002Fli>\n\u003Cli>Use \u003Ccode>[CHPNPDATE date=\"REALTIMEONLY\"]\u003C\u002Fcode> to show Real Timer without Date\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>AVAILABLE FUNCTIONS\u003C\u002Fh3>\n\u003Cp>You can use following functions to display Nepali Date or Today Date:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Use \u003Ccode>chp_real_time\u003C\u002Fcode> to show Real Timer. It accepts an boolean argument (true or false), whether to show time only or timer with  full date\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Use \u003Ccode>chp_np_to_en\u003C\u002Fcode> to convert english date to nepali date. It accepts an argument, that is YOUR_DATE\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Use \u003Ccode>chp_np_date\u003C\u002Fcode> to display Nepali Date. It accepts three arguments. First is date and second is DATE FORMAT and third one is boolean(true or false) whether to show timer or not.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>AVAILABLE WIDGET\u003C\u002Fh3>\n\u003Cp>Currently Our plugin supports two widgets.\u003Cbr \u002F>\n* \u003Ccode>CHP NP Date Converter\u003C\u002Fcode> helps you to display nepali date with or without timer\u003Cbr \u002F>\n* \u003Ccode>CHP NP Date Theme\u003C\u002Fcode> helps you to display time and date in beautiful way.\u003C\u002Fp>\n\u003Ch3>Working Flow\u003C\u002Fh3>\n\u003Cp>This plugin is working under a single \u003Ccode>PHP CLASS\u003C\u002Fcode> that converts English Date to Nepali Date. https:\u002F\u002Fcodehelppro.com\u002Fwordpress-plugin-development\u002Fscripts\u002Fchp-nepali-date-converter.\u003C\u002Fp>\n\u003Ch3>Developers\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Suresh Chand\u003C\u002Fli>\n\u003C\u002Ful>\n","CHP Nepali Date Converter plugin is developed in order to provide dates conversion from English to Nepali dates and Vice Versa.",1186,"2020-09-24T12:32:00.000Z","4.8.28","5.2","5.4",[117,118,99,77,4],"chp","code-help-pro","https:\u002F\u002Fcodehelppro.com\u002Fwordpress-plugin-development\u002Fprojects\u002Fchp-nepali-date-converter","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fchp-nepali-date-converter.zip",{"attackSurface":122,"codeSignals":190,"taintFlows":212,"riskAssessment":213,"analyzedAt":221},{"hooks":123,"ajaxHandlers":167,"restRoutes":180,"shortcodes":181,"cronEvents":189,"entryPointCount":53,"unprotectedCount":28},[124,130,133,136,142,147,150,154,158,162],{"type":125,"name":126,"callback":127,"file":128,"line":129},"action","admin_init","register_settings","inc\\class\\ndc-post-date.php",84,{"type":125,"name":131,"callback":132,"file":128,"line":102},"admin_head","add_settings_js",{"type":125,"name":134,"callback":134,"file":128,"line":135},"init",87,{"type":137,"name":138,"callback":139,"priority":140,"file":128,"line":141},"filter","get_the_time","fix_time_display",999,617,{"type":125,"name":143,"callback":144,"file":145,"line":146},"wp_enqueue_scripts","ndc_widget_scripts","inc\\hooks\\enqueue-scripts.php",27,{"type":125,"name":143,"callback":144,"file":148,"line":149},"inc\\widgets\\widget-nepali-date-converter.php",35,{"type":125,"name":151,"callback":152,"file":148,"line":153},"wp_footer","ndc_widget_wp_footer",36,{"type":125,"name":155,"callback":156,"file":148,"line":157},"widgets_init","register_ndc_widget",220,{"type":125,"name":155,"callback":159,"file":160,"line":161},"register_ndc_today_widget","inc\\widgets\\widget-today-date.php",198,{"type":125,"name":163,"callback":164,"file":165,"line":166},"plugins_loaded","nepali_date_converter_load_textdomain","nepali-date-converter.php",46,[168,173,178],{"action":169,"nopriv":50,"callback":170,"hasNonce":171,"hasCapCheck":50,"file":128,"line":172},"ndc_date_format","ajax_get_date_format",true,86,{"action":174,"nopriv":50,"callback":175,"hasNonce":171,"hasCapCheck":50,"file":176,"line":177},"nepali_date_converter_ajax","ndc_ajax_callback","inc\\hooks\\wp-ajax.php",12,{"action":174,"nopriv":171,"callback":175,"hasNonce":171,"hasCapCheck":50,"file":176,"line":179},13,[],[182,185],{"tag":4,"callback":183,"file":184,"line":179},"ndc_shortcode","inc\\shortcode\\shortcode-nepali-date-converter.php",{"tag":186,"callback":187,"file":188,"line":179},"ndc-today-date","ndc_today_shortcode","inc\\shortcode\\shortcode-today-date.php",[],{"dangerousFunctions":191,"sqlUsage":192,"outputEscaping":194,"fileOperations":28,"externalRequests":28,"nonceChecks":71,"capabilityChecks":28,"bundledLibraries":211},[],{"prepared":28,"raw":28,"locations":193},[],{"escaped":195,"rawEcho":48,"locations":196},155,[197,201,203,205,207,209],{"file":198,"line":199,"context":200},"inc\\class\\ndc-frontend.php",409,"raw output",{"file":198,"line":202,"context":200},412,{"file":198,"line":204,"context":200},415,{"file":198,"line":206,"context":200},441,{"file":198,"line":208,"context":200},444,{"file":198,"line":210,"context":200},447,[],[],{"summary":214,"deductions":215},"The 'nepali-date-converter' v3.0.5 plugin exhibits a generally strong security posture, particularly in its handling of SQL queries and output escaping, which are largely implemented correctly. The absence of dangerous functions, file operations, and external HTTP requests is also a positive indicator.  Furthermore, the plugin utilizes nonce checks for its AJAX handlers, a crucial security measure.  However, the analysis reveals a concerning lack of capability checks on its entry points.  While the static analysis did not find immediate exploitable vulnerabilities, the absence of capability checks means that any user, regardless of their WordPress role, could potentially trigger the plugin's AJAX handlers, which could lead to unintended actions or information disclosure if not properly secured within the handler's logic itself.\n\nThe plugin's vulnerability history shows a single known CVE in the past, which is now patched. This suggests a willingness to address security issues, but the presence of even one past vulnerability warrants continued vigilance.  The common vulnerability type being Cross-site Scripting is a reminder that input validation and output sanitization are critical, and while the current output escaping is high, the past history means this area should be continuously monitored.  Overall, the plugin has good foundational security practices, but the missing capability checks on entry points represent a significant area for improvement to further harden its security.",[216,219],{"reason":217,"points":218},"Missing capability checks on entry points",10,{"reason":220,"points":53},"Past CVE: Improper Neutralization of Input During Web Page Generation ('Cross-si","2026-03-16T19:11:24.788Z",{"wat":223,"direct":232},{"assetPaths":224,"generatorPatterns":227,"scriptPaths":228,"versionParams":229},[225,226],"\u002Fwp-content\u002Fplugins\u002Fnepali-date-converter\u002Fassets\u002Fcss\u002Fscript.css","\u002Fwp-content\u002Fplugins\u002Fnepali-date-converter\u002Fassets\u002Fjs\u002Fwidget.js",[],[226],[230,231],"nepali-date-converter\u002Fassets\u002Fcss\u002Fscript.css?ver=","nepali-date-converter\u002Fassets\u002Fjs\u002Fwidget.js?ver=",{"cssClasses":233,"htmlComments":235,"htmlAttributes":236,"restEndpoints":243,"jsGlobals":244,"shortcodeOutput":246},[234],"widget_nepali_date_converter",[],[237,238,239,240,241,242],"data-nepali_date_lang","data-nep_to_eng_button_text","data-eng_to_nep_button_text","data-disable_ndc_convert_nep_to_eng","data-disable_ndc_convert_eng_to_nep","data-nepali_date_converter_result_format",[],[245],"ndc_widget_data",[],{"error":171,"url":248,"statusCode":249,"statusMessage":250,"message":250},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fnepali-date-converter\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":252,"versions":253},17,[254,259,266,273,280,287,293,301,309,317,325,333,341,349,356,364,372],{"version":6,"download_url":25,"svn_tag_url":255,"released_at":38,"has_diff":50,"diff_files_changed":256,"diff_lines":38,"trac_diff_url":257,"vulnerabilities":258,"is_current":171},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F3.0.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fnepali-date-converter%2Ftags%2F3.0.4&new_path=%2Fnepali-date-converter%2Ftags%2F3.0.5",[],{"version":260,"download_url":261,"svn_tag_url":262,"released_at":38,"has_diff":50,"diff_files_changed":263,"diff_lines":38,"trac_diff_url":264,"vulnerabilities":265,"is_current":50},"3.0.4","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.3.0.4.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F3.0.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fnepali-date-converter%2Ftags%2F3.0.3&new_path=%2Fnepali-date-converter%2Ftags%2F3.0.4",[],{"version":267,"download_url":268,"svn_tag_url":269,"released_at":38,"has_diff":50,"diff_files_changed":270,"diff_lines":38,"trac_diff_url":271,"vulnerabilities":272,"is_current":50},"3.0.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.3.0.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F3.0.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fnepali-date-converter%2Ftags%2F3.0.2&new_path=%2Fnepali-date-converter%2Ftags%2F3.0.3",[],{"version":274,"download_url":275,"svn_tag_url":276,"released_at":38,"has_diff":50,"diff_files_changed":277,"diff_lines":38,"trac_diff_url":278,"vulnerabilities":279,"is_current":50},"3.0.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.3.0.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F3.0.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fnepali-date-converter%2Ftags%2F3.0.1&new_path=%2Fnepali-date-converter%2Ftags%2F3.0.2",[],{"version":281,"download_url":282,"svn_tag_url":283,"released_at":38,"has_diff":50,"diff_files_changed":284,"diff_lines":38,"trac_diff_url":285,"vulnerabilities":286,"is_current":50},"3.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.3.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F3.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fnepali-date-converter%2Ftags%2F3.0.0&new_path=%2Fnepali-date-converter%2Ftags%2F3.0.1",[],{"version":40,"download_url":288,"svn_tag_url":289,"released_at":38,"has_diff":50,"diff_files_changed":290,"diff_lines":38,"trac_diff_url":291,"vulnerabilities":292,"is_current":50},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.3.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F3.0.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fnepali-date-converter%2Ftags%2F2.0.8&new_path=%2Fnepali-date-converter%2Ftags%2F3.0.0",[],{"version":294,"download_url":295,"svn_tag_url":296,"released_at":38,"has_diff":50,"diff_files_changed":297,"diff_lines":38,"trac_diff_url":298,"vulnerabilities":299,"is_current":50},"2.0.8","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.2.0.8.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F2.0.8\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fnepali-date-converter%2Ftags%2F2.0.7&new_path=%2Fnepali-date-converter%2Ftags%2F2.0.8",[300],{"id":34,"url_slug":35,"title":36,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":40},{"version":302,"download_url":303,"svn_tag_url":304,"released_at":38,"has_diff":50,"diff_files_changed":305,"diff_lines":38,"trac_diff_url":306,"vulnerabilities":307,"is_current":50},"2.0.7","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.2.0.7.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F2.0.7\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fnepali-date-converter%2Ftags%2F2.0.6&new_path=%2Fnepali-date-converter%2Ftags%2F2.0.7",[308],{"id":34,"url_slug":35,"title":36,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":40},{"version":310,"download_url":311,"svn_tag_url":312,"released_at":38,"has_diff":50,"diff_files_changed":313,"diff_lines":38,"trac_diff_url":314,"vulnerabilities":315,"is_current":50},"2.0.6","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.2.0.6.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F2.0.6\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fnepali-date-converter%2Ftags%2F2.0.5&new_path=%2Fnepali-date-converter%2Ftags%2F2.0.6",[316],{"id":34,"url_slug":35,"title":36,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":40},{"version":318,"download_url":319,"svn_tag_url":320,"released_at":38,"has_diff":50,"diff_files_changed":321,"diff_lines":38,"trac_diff_url":322,"vulnerabilities":323,"is_current":50},"2.0.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.2.0.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F2.0.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fnepali-date-converter%2Ftags%2F2.0.4&new_path=%2Fnepali-date-converter%2Ftags%2F2.0.5",[324],{"id":34,"url_slug":35,"title":36,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":40},{"version":326,"download_url":327,"svn_tag_url":328,"released_at":38,"has_diff":50,"diff_files_changed":329,"diff_lines":38,"trac_diff_url":330,"vulnerabilities":331,"is_current":50},"2.0.4","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.2.0.4.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F2.0.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fnepali-date-converter%2Ftags%2F2.0.3&new_path=%2Fnepali-date-converter%2Ftags%2F2.0.4",[332],{"id":34,"url_slug":35,"title":36,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":40},{"version":334,"download_url":335,"svn_tag_url":336,"released_at":38,"has_diff":50,"diff_files_changed":337,"diff_lines":38,"trac_diff_url":338,"vulnerabilities":339,"is_current":50},"2.0.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.2.0.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F2.0.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fnepali-date-converter%2Ftags%2F2.0.2&new_path=%2Fnepali-date-converter%2Ftags%2F2.0.3",[340],{"id":34,"url_slug":35,"title":36,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":40},{"version":342,"download_url":343,"svn_tag_url":344,"released_at":38,"has_diff":50,"diff_files_changed":345,"diff_lines":38,"trac_diff_url":346,"vulnerabilities":347,"is_current":50},"2.0.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.2.0.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F2.0.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fnepali-date-converter%2Ftags%2F2.0.1&new_path=%2Fnepali-date-converter%2Ftags%2F2.0.2",[348],{"id":34,"url_slug":35,"title":36,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":40},{"version":85,"download_url":350,"svn_tag_url":351,"released_at":38,"has_diff":50,"diff_files_changed":352,"diff_lines":38,"trac_diff_url":353,"vulnerabilities":354,"is_current":50},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.2.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F2.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fnepali-date-converter%2Ftags%2F2.0.0&new_path=%2Fnepali-date-converter%2Ftags%2F2.0.1",[355],{"id":34,"url_slug":35,"title":36,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":40},{"version":357,"download_url":358,"svn_tag_url":359,"released_at":38,"has_diff":50,"diff_files_changed":360,"diff_lines":38,"trac_diff_url":361,"vulnerabilities":362,"is_current":50},"2.0.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.2.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F2.0.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fnepali-date-converter%2Ftags%2F1.0.1&new_path=%2Fnepali-date-converter%2Ftags%2F2.0.0",[363],{"id":34,"url_slug":35,"title":36,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":40},{"version":365,"download_url":366,"svn_tag_url":367,"released_at":38,"has_diff":50,"diff_files_changed":368,"diff_lines":38,"trac_diff_url":369,"vulnerabilities":370,"is_current":50},"1.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.1.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F1.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fnepali-date-converter%2Ftags%2F1.0&new_path=%2Fnepali-date-converter%2Ftags%2F1.0.1",[371],{"id":34,"url_slug":35,"title":36,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":40},{"version":373,"download_url":374,"svn_tag_url":375,"released_at":38,"has_diff":50,"diff_files_changed":376,"diff_lines":38,"trac_diff_url":38,"vulnerabilities":377,"is_current":50},"1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnepali-date-converter\u002Ftags\u002F1.0\u002F",[],[378],{"id":34,"url_slug":35,"title":36,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":40}]