[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fO_T7lMAe7umaKvQyb1W4dUfT21jHx4HUoz6FSfE_2mo":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":44,"crawl_stats":35,"alternatives":48,"analysis":131,"fingerprints":275},"nepali-date-utilities","Nepali Date Utilities","1.0.15","ashokbasnet","https:\u002F\u002Fprofiles.wordpress.org\u002Fashokbasnet\u002F","\u003Cp>“Nepali Date Utilities” plugin converts English to Nepali dates, offering post dates and today’s date via shortcode for easy display on sites.\u003C\u002Fp>\n","\"Nepali Date Utilities\" plugin converts English to Nepali dates, offering post dates and today’s date via shortcode for easy display on sites.",1000,8392,94,3,"2025-05-14T16:37:00.000Z","6.8.5","4.0","5.2.4",[20,21,4,22],"display-nepali-date","nepali-date","nepali-post-date","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-utilities.1.0.15.zip",78,1,"2025-04-09 00:00:00","2026-03-15T15:16:48.613Z",[30],{"id":31,"url_slug":32,"title":33,"description":34,"plugin_slug":4,"theme_slug":35,"affected_versions":36,"patched_in_version":35,"severity":37,"cvss_score":38,"cvss_vector":39,"vuln_type":40,"published_date":27,"updated_date":41,"references":42,"days_to_patch":35},"CVE-2025-32664","nepali-date-utilities-cross-site-request-forgery-to-stored-cross-site-scripting","Nepali Date Utilities \u003C= 1.0.13 - Cross-Site Request Forgery to Stored Cross-Site Scripting","The Nepali Date Utilities plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.13. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.",null,"\u003C=1.0.13","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2025-04-15 13:44:50",[43],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F1b5dee10-7dd3-4ce7-9e37-e54fc98dbc7b?source=api-prod",{"slug":7,"display_name":7,"profile_url":8,"plugin_count":26,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":45,"trust_score":46,"computed_at":47},30,79,"2026-04-04T14:18:32.867Z",[49,73,94,113],{"slug":50,"name":51,"version":52,"author":53,"author_profile":54,"description":55,"short_description":56,"active_installs":57,"downloaded":58,"rating":59,"num_ratings":60,"last_updated":61,"tested_up_to":16,"requires_at_least":62,"requires_php":63,"tags":64,"homepage":68,"download_link":69,"security_score":70,"vuln_count":26,"unpatched_count":71,"last_vuln_date":72,"fetched_at":28},"nepali-date-converter","Nepali Date Converter","3.0.5","AddonsPress","https:\u002F\u002Fprofiles.wordpress.org\u002Faddonspress\u002F","\u003Cp>Nepali Date Converter makes converting dates between English (Gregorian) and Nepali (Bikram Sambat) formats easy. Whether you’re building a Nepali-language WordPress site or just need to display today’s Nepali date, this plugin has you covered.\u003C\u002Fp>\n\u003Cp>For the best experience with Nepali Date Converter, check out the free \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fcosmoswp\u002F\" rel=\"ugc\">CosmosWP\u003C\u002Fa> theme.\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fdemo.cosmoswp.com\u002Fdemo-99\u002F\" rel=\"nofollow ugc\">View Demo\u003C\u002Fa> \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> See Nepali Date Converter in action with real-world implementations.\u003C\u002Fp>\n\u003Cp>Includes:\u003Cbr \u002F>\n– Post Date to Nepali conversion\u003Cbr \u002F>\n– Today’s Nepali date display\u003Cbr \u002F>\n– Nepali human time differences (e.g., “३ सेकेन्ड अगाडि”)\u003Cbr \u002F>\n– Shortcodes and widgets\u003Cbr \u002F>\n– Custom functions for developers\u003C\u002Fp>\n\u003Cp>Fully rewritten for version 3.0.0, this release modernizes the plugin from the ground up, improves accuracy, and ensures better compatibility.\u003C\u002Fp>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>🔁 Convert English \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">↔\u003C\u002Fspan> Nepali dates\u003C\u002Fli>\n\u003Cli>🗓️ Show Nepali date for post publish dates\u003C\u002Fli>\n\u003Cli>⏳ Nepali human time differences (e.g., ३ मिनेट अगाडि)\u003C\u002Fli>\n\u003Cli>🧩 Widgets: Date Converter and Today’s Date\u003C\u002Fli>\n\u003Cli>🧪 Shortcodes: \u003Ccode>[nepali-date-converter]\u003C\u002Fcode>, \u003Ccode>[ndc-today-date]\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>🔧 Developer functions: \u003Ccode>ndc_eng_to_nep_date\u003C\u002Fcode>, \u003Ccode>ndc_nep_to_eng_date\u003C\u002Fcode>, and more\u003C\u002Fli>\n\u003Cli>📅 Supports Bikram Sambat years 2000 to 2099 BS\u003C\u002Fli>\n\u003Cli>🔒 Security improvements and code hardening\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Shortcodes\u003C\u002Fh3>\n\u003Ch3>1. \u003Ccode>[nepali-date-converter]\u003C\u002Fcode>\u003C\u002Fh3>\n\u003Cp>Display a Nepali date converter form.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Attributes:\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Ccode>title\u003C\u002Fcode>: Custom title (default: Nepali Date Converter)\u003Cbr \u002F>\n– \u003Ccode>result_format\u003C\u002Fcode>: Format for output (e.g., \u003Ccode>l, F j, Y\u003C\u002Fcode>)\u003Cbr \u002F>\n– \u003Ccode>disable_ndc_convert_eng_to_nep\u003C\u002Fcode>: \u003Ccode>1\u003C\u002Fcode> to disable English to Nepali conversion\u003Cbr \u002F>\n– \u003Ccode>disable_ndc_convert_nep_to_eng\u003C\u002Fcode>: \u003Ccode>1\u003C\u002Fcode> to disable Nepali to English conversion\u003Cbr \u002F>\n– \u003Ccode>nepali_date_lang\u003C\u002Fcode>: \u003Ccode>nep_char\u003C\u002Fcode> (e.g., \u003Ccode>शुक्रबार, अशोज ८, २०७२\u003C\u002Fcode>) or \u003Ccode>eng_char\u003C\u002Fcode>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Examples:\u003C\u002Fstrong>\u003Cbr \u002F>\n    \u003Ccode>[nepali-date-converter]\u003Cbr \u002F>\n[nepali-date-converter title=\"Nepali Date\"]\u003Cbr \u002F>\n[nepali-date-converter title=\"Nepali date\" result_format=\"l, F j, Y\"]\u003C\u002Fcode>\u003C\u002Fp>\n\u003Ch3>2. \u003Ccode>[ndc-today-date]\u003C\u002Fcode>\u003C\u002Fh3>\n\u003Cp>Displays today’s Nepali date.\u003C\u002Fp>\n\u003Ch3>Widgets\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>NDC: Nepali Date Converter\u003C\u002Fstrong> – Date converter widget\u003C\u002Fli>\n\u003Cli>\u003Cstrong>NDC: Today Date\u003C\u002Fstrong> – Show today’s Nepali date\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Developer Functions\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ccode>ndc_eng_to_nep_date()\u003C\u002Fcode> – Convert English to Nepali\u003C\u002Fli>\n\u003Cli>\u003Ccode>ndc_convert_eng_to_nep()\u003C\u002Fcode> – Convert using formatted string\u003C\u002Fli>\n\u003Cli>\u003Ccode>ndc_nep_to_eng_date()\u003C\u002Fcode> – Convert Nepali to English\u003C\u002Fli>\n\u003Cli>\u003Ccode>ndc_convert_nep_to_eng()\u003C\u002Fcode> – Convert using formatted string\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Use in code:\u003Cbr \u002F>\necho do_shortcode(‘[nepali-date-converter]’);\u003Cbr \u002F>\necho do_shortcode(‘[ndc-today-date]’);\u003Cbr \u002F>\n    `\u003Cbr \u002F>\nPlease visit \u003Ca href=\"https:\u002F\u002Fwww.addonspress.com\u002Fwordpress-plugins\u002Fnepali-date-converter\u002F\" rel=\"nofollow ugc\">Nepali Date Converter\u003C\u002Fa> for more information about another shortcode [ndc-today-date] and for all available functions.\u003C\u002Fp>\n","Convert English dates to Nepali and vice versa, including WordPress post dates. Includes widgets, shortcodes, and custom functions.",900,13834,100,4,"2025-05-18T05:10:00.000Z","4.9","7.2",[65,50,22,66,67],"english-to-nepali-date-converter","nepali-to-english-date-converter","today-nepali-date","https:\u002F\u002Fwww.addonspress.com\u002Fwordpress-plugins\u002Fnepali-date-converter\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-date-converter.3.0.5.zip",99,0,"2025-04-11 00:00:00",{"slug":74,"name":75,"version":76,"author":77,"author_profile":78,"description":79,"short_description":80,"active_installs":81,"downloaded":82,"rating":59,"num_ratings":83,"last_updated":84,"tested_up_to":85,"requires_at_least":86,"requires_php":23,"tags":87,"homepage":91,"download_link":92,"security_score":93,"vuln_count":71,"unpatched_count":71,"last_vuln_date":35,"fetched_at":28},"nyasro-nepali-date-converter","Nyasro Nepali Date Converter","2.0.1","nyasro","https:\u002F\u002Fprofiles.wordpress.org\u002Fnyasro\u002F","\u003Cp>Nyasro Nepali Date Converter is plugin with widget which convert Nepali Date to English Date and English Date to Nepali Date.\u003Cbr \u002F>\nYou can use following shortcode either to display today’s nepali date or to convert english-nepali date, anywhere in the post or pages.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Use \u003Ccode>[ny_dateconvert]\u003C\u002Fcode> to show today nepali date.\u003C\u002Fli>\n\u003Cli>Use \u003Ccode>[ny_dateconvert date='{date}']\u003C\u002Fcode> to convert nepali date to english date.\u003C\u002Fli>\n\u003Cli>Use \u003Ccode>[ny_dateconvert date='{date}' convert='{type}']\u003C\u002Fcode> to convert nepali to english date or english to nepali date.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Where,\u003C\u002Fp>\n\u003Cul>\n\u003Cli>{date} format is \u003Ccode>YYYY-MM-DD\u003C\u002Fcode> [\u003Ccode>YYYY\u003C\u002Fcode> : four digit year, \u003Ccode>MM\u003C\u002Fcode> : one or tow digits month, \u003Ccode>DD\u003C\u002Fcode> : one or digits day]\u003C\u002Fli>\n\u003Cli>{type} format is \u003Ccode>eng_to_nep\u003C\u002Fcode> or \u003Ccode>nep_to_eng\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin have special widget which allows user interface to convert english-nepali date or vice versa.\u003Cbr \u002F>\nYou can use following shortcode to display nyasro nepali date converter widget.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Use \u003Ccode>[ny_datewidget]\u003C\u002Fcode> to show date converter widget anywhere in your post or pages.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Not only that but also it has date converter \u003Cem>widget\u003C\u002Fem> for \u003Cem>theme widgets\u003C\u002Fem> named \u003Cstrong>Nyasro Nepali Date Converter\u003C\u002Fstrong>,\u003Cbr \u002F>\nwhich you can use to show date converter from \u003Cem>Dashboard > Appearance > Widgets\u003C\u002Fem> section in your theme sidebar.\u003C\u002Fp>\n\u003Cp>If you are a developer then use following \u003Cem>PHP\u003C\u002Fem> code for date converter.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>To show today’s nepali date :\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\n\n    if(function_exists('_Nyasro_todayDate'))\n        _Nyasro_todayDate();        \n\n?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>To convert english-nepali date or vice versa:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\n    if(function_exists('_Nyasro_NepaliDateConverter'))\n        _Nyasro_NepaliDateConverter( $date, $conversion);\n?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>where \u003Ccode>$date = YYYY-MM-DD\u003C\u002Fcode> and \u003Ccode>$conversion = eng_to_nep | nep_to_eng\u003C\u002Fcode>.\u003C\u002Fem>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>To show date converter widget or box:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\n    if(function_exists('_Nyasro_NepaliDateConverterWidget'))\n        _Nyasro_NepaliDateConverterWidget();\n?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","Nyasro Nepali Date Converter allows to convert A.D. (English Date) to B.S. (Nepali Date) and Vice Versa.",200,4670,2,"2020-07-05T18:26:00.000Z","5.4.19","2.8",[88,89,90,21,50],"date-converter","nepal","nepali","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fnyasro-nepali-date-converter\u002Fadvanced\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnyasro-nepali-date-converter.2.0.1.zip",85,{"slug":95,"name":96,"version":97,"author":98,"author_profile":99,"description":100,"short_description":101,"active_installs":102,"downloaded":103,"rating":71,"num_ratings":71,"last_updated":104,"tested_up_to":105,"requires_at_least":106,"requires_php":107,"tags":108,"homepage":111,"download_link":112,"security_score":93,"vuln_count":71,"unpatched_count":71,"last_vuln_date":35,"fetched_at":28},"nepali-chrono-craft","Nepali Chrono Craft","1.0.1","WP Refers","https:\u002F\u002Fprofiles.wordpress.org\u002Fwprefers\u002F","\u003Cp>The plugin allows you to effortlessly convert dates between AD (Gregorian) and BS (Bikram Sambat) calendars.\u003C\u002Fp>\n\u003Cp>Features :\u003C\u002Fp>\n\u003Col>\n\u003Cli>Date Conversion: Effortlessly convert dates between AD (Gregorian) and BS (Bikram Sambat) calendars.\u003C\u002Fli>\n\u003Cli>Two-Way Conversion: Convert any date from the Gregorian calendar to its equivalent date in the Bikram Sambat calendar and vice versa.\u003C\u002Fli>\n\u003Cli>Ideal for Nepali Dates: Perfect for individuals and developers working with Nepali dates, making it convenient to handle date conversions.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Quick Links\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Tutorial: \u003Ca href=\"https:\u002F\u002Fwprefers.com\u002Fnepali-date-converter\u002F\" rel=\"nofollow ugc\">Nepali Chrono Craft\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Demo: \u003Ca href=\"https:\u002F\u002Fwprefers.com\u002Fnepali-date-converter\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwprefers.com\u002Fnepali-date-converter\u002F\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.buymeacoffee.com\u002Fsachinkiranti\" rel=\"nofollow ugc\">Buy me a coffee\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","With this easy-to-use tool, you can convert any date from the Gregorian calendar to its equivalent date in the Bikram Sambat calendar and vice versa.",10,2080,"2023-10-19T17:35:00.000Z","6.3.8","5.0","5.6",[109,88,110,21],"bikram-sambat","gregorian","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fnepali-chrono-craft\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnepali-chrono-craft.1.0.1.zip",{"slug":114,"name":115,"version":116,"author":117,"author_profile":118,"description":119,"short_description":120,"active_installs":71,"downloaded":121,"rating":71,"num_ratings":71,"last_updated":122,"tested_up_to":123,"requires_at_least":124,"requires_php":125,"tags":126,"homepage":129,"download_link":130,"security_score":93,"vuln_count":71,"unpatched_count":71,"last_vuln_date":35,"fetched_at":28},"chp-nepali-date-converter","CHP Nepali Date Converter","1.0.2","Suresh Chand","https:\u002F\u002Fprofiles.wordpress.org\u002Fsureshchand00a\u002F","\u003Cp>CHP Nepali Date Converter plugin is developed in order to provide dates conversion from English to Nepali dates and Vice Versa. This plugin converts pages, posts and comments date from English to Nepali or Vice Versa. This plugin also supports Shortcode that helps you to display Nepali dates anywhere in your website.\u003C\u002Fp>\n\u003Ch3>Main Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Show Posts, Pages, Comments Date to Nepali\u003C\u002Fli>\n\u003Cli>Supports Time Diff (Eg: ३ सेकेन्ड अगाडि)\u003C\u002Fli>\n\u003Cli>Time ago available for comments. Such as \u003Ccode>३ माहिना पहिले\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Various Custom function to convert English Date to Nepali and Nepali Date to English\u003C\u002Fli>\n\u003Cli>Real Timer system\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>AVAILABLE SHORTCODES\u003C\u002Fh3>\n\u003Cp>You can use following shortcodes to display Nepali Date or Today Date anywhere in the posts or pages:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Use \u003Ccode>[CHPNPDATE date=\"YOUR_DATE\"]\u003C\u002Fcode> to show Nepali Date Converter\u003C\u002Fli>\n\u003Cli>Use \u003Ccode>[CHPNPDATE date=\"TODAY\"]\u003C\u002Fcode> or \u003Ccode>[CHPNPDATE]\u003C\u002Fcode> to show Today Date\u003C\u002Fli>\n\u003Cli>Use \u003Ccode>[CHPNPDATE date=\"REALTIME\"]\u003C\u002Fcode> to show Real Timer with Date\u003C\u002Fli>\n\u003Cli>Use \u003Ccode>[CHPNPDATE date=\"REALTIMEONLY\"]\u003C\u002Fcode> to show Real Timer without Date\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>AVAILABLE FUNCTIONS\u003C\u002Fh3>\n\u003Cp>You can use following functions to display Nepali Date or Today Date:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Use \u003Ccode>chp_real_time\u003C\u002Fcode> to show Real Timer. It accepts an boolean argument (true or false), whether to show time only or timer with  full date\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Use \u003Ccode>chp_np_to_en\u003C\u002Fcode> to convert english date to nepali date. It accepts an argument, that is YOUR_DATE\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Use \u003Ccode>chp_np_date\u003C\u002Fcode> to display Nepali Date. It accepts three arguments. First is date and second is DATE FORMAT and third one is boolean(true or false) whether to show timer or not.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>AVAILABLE WIDGET\u003C\u002Fh3>\n\u003Cp>Currently Our plugin supports two widgets.\u003Cbr \u002F>\n* \u003Ccode>CHP NP Date Converter\u003C\u002Fcode> helps you to display nepali date with or without timer\u003Cbr \u002F>\n* \u003Ccode>CHP NP Date Theme\u003C\u002Fcode> helps you to display time and date in beautiful way.\u003C\u002Fp>\n\u003Ch3>Working Flow\u003C\u002Fh3>\n\u003Cp>This plugin is working under a single \u003Ccode>PHP CLASS\u003C\u002Fcode> that converts English Date to Nepali Date. https:\u002F\u002Fcodehelppro.com\u002Fwordpress-plugin-development\u002Fscripts\u002Fchp-nepali-date-converter.\u003C\u002Fp>\n\u003Ch3>Developers\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Suresh Chand\u003C\u002Fli>\n\u003C\u002Ful>\n","CHP Nepali Date Converter plugin is developed in order to provide dates conversion from English to Nepali dates and Vice Versa.",1142,"2020-09-24T12:32:00.000Z","4.8.28","5.2","5.4",[127,128,90,21,50],"chp","code-help-pro","https:\u002F\u002Fcodehelppro.com\u002Fwordpress-plugin-development\u002Fprojects\u002Fchp-nepali-date-converter","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fchp-nepali-date-converter.zip",{"attackSurface":132,"codeSignals":184,"taintFlows":212,"riskAssessment":259,"analyzedAt":274},{"hooks":133,"ajaxHandlers":177,"restRoutes":178,"shortcodes":179,"cronEvents":183,"entryPointCount":26,"unprotectedCount":71},[134,140,146,151,154,157,160,164,167,170,173],{"type":135,"name":136,"callback":137,"file":138,"line":139},"action","widgets_init","my_register_ndu_today_date_widget","class.todaydate.php",67,{"type":135,"name":141,"callback":142,"priority":143,"file":144,"line":145},"plugins_loaded","ndu_init",15,"nepali-date-utilities.php",21,{"type":147,"name":148,"callback":149,"priority":102,"file":144,"line":150},"filter","get_the_date","ndu_convert_to_nepali_date_time",122,{"type":147,"name":152,"callback":149,"priority":102,"file":144,"line":153},"the_date",123,{"type":147,"name":155,"callback":149,"priority":102,"file":144,"line":156},"get_the_time",124,{"type":147,"name":158,"callback":149,"priority":102,"file":144,"line":159},"the_time",125,{"type":147,"name":161,"callback":162,"priority":102,"file":144,"line":163},"the_modified_time","ndu_convert_to_nepali_date_time_modified",127,{"type":147,"name":165,"callback":162,"priority":102,"file":144,"line":166},"get_the_modified_time",128,{"type":147,"name":168,"callback":162,"priority":102,"file":144,"line":169},"the_modified_date",129,{"type":147,"name":171,"callback":162,"priority":102,"file":144,"line":172},"get_the_modified_date",130,{"type":135,"name":174,"callback":175,"file":144,"line":176},"admin_menu","ndu_nepali_date_utilities_menu",301,[],[],[180],{"tag":181,"callback":181,"file":144,"line":182},"ndu_today_date",117,[],{"dangerousFunctions":185,"sqlUsage":186,"outputEscaping":188,"fileOperations":71,"externalRequests":71,"nonceChecks":71,"capabilityChecks":71,"bundledLibraries":211},[],{"prepared":71,"raw":71,"locations":187},[],{"escaped":189,"rawEcho":102,"locations":190},8,[191,194,196,198,200,201,203,205,207,209],{"file":138,"line":192,"context":193},48,"raw output",{"file":138,"line":195,"context":193},52,{"file":138,"line":197,"context":193},55,{"file":138,"line":199,"context":193},59,{"file":144,"line":25,"context":193},{"file":144,"line":202,"context":193},240,{"file":144,"line":204,"context":193},250,{"file":144,"line":206,"context":193},252,{"file":144,"line":208,"context":193},262,{"file":144,"line":210,"context":193},266,[],[213,245],{"entryPoint":214,"graph":215,"unsanitizedCount":14,"severity":244},"ndu_nepali_date_utilities_page (nepali-date-utilities.php:203)",{"nodes":216,"edges":239},[217,222,227,231,233,237],{"id":218,"type":219,"label":220,"file":144,"line":221},"n0","source","$_POST['ndu_date_format']",207,{"id":223,"type":224,"label":225,"file":144,"line":221,"wp_function":226},"n1","sink","update_option() [Settings Manipulation]","update_option",{"id":228,"type":219,"label":229,"file":144,"line":230},"n2","$_POST['ndu_today_date_format']",208,{"id":232,"type":224,"label":225,"file":144,"line":230,"wp_function":226},"n3",{"id":234,"type":219,"label":235,"file":144,"line":236},"n4","$_POST['ndu_date_format_for_home']",209,{"id":238,"type":224,"label":225,"file":144,"line":236,"wp_function":226},"n5",[240,242,243],{"from":218,"to":223,"sanitized":241},false,{"from":228,"to":232,"sanitized":241},{"from":234,"to":238,"sanitized":241},"low",{"entryPoint":246,"graph":247,"unsanitizedCount":14,"severity":244},"\u003Cnepali-date-utilities> (nepali-date-utilities.php:0)",{"nodes":248,"edges":255},[249,250,251,252,253,254],{"id":218,"type":219,"label":220,"file":144,"line":221},{"id":223,"type":224,"label":225,"file":144,"line":221,"wp_function":226},{"id":228,"type":219,"label":229,"file":144,"line":230},{"id":232,"type":224,"label":225,"file":144,"line":230,"wp_function":226},{"id":234,"type":219,"label":235,"file":144,"line":236},{"id":238,"type":224,"label":225,"file":144,"line":236,"wp_function":226},[256,257,258],{"from":218,"to":223,"sanitized":241},{"from":228,"to":232,"sanitized":241},{"from":234,"to":238,"sanitized":241},{"summary":260,"deductions":261},"The \"nepali-date-utilities\" plugin v1.0.15 exhibits a mixed security posture. On the positive side, the code adheres to good practices by exclusively using prepared statements for SQL queries and performing no file operations or external HTTP requests.  However, there are significant concerns regarding output escaping, with only 44% of outputs being properly escaped, leaving a substantial portion vulnerable to Cross-Site Scripting (XSS) attacks.  Additionally, the absence of nonce checks and capability checks for its sole shortcode entry point is a notable weakness, potentially exposing it to Cross-Site Request Forgery (CSRF) attacks. The vulnerability history indicates a past medium-severity CVE, which is currently unpatched. This, coupled with the identified output escaping issues and lack of authentication on the shortcode, suggests a medium to high risk profile for this plugin.",[262,264,266,269,271],{"reason":263,"points":143},"Unpatched medium severity CVE",{"reason":265,"points":189},"Insufficient output escaping (56% unescaped)",{"reason":267,"points":268},"Missing nonce check on shortcode",7,{"reason":270,"points":268},"Missing capability check on shortcode",{"reason":272,"points":273},"Flows with unsanitized paths",5,"2026-03-16T19:03:35.777Z",{"wat":276,"direct":281},{"assetPaths":277,"generatorPatterns":278,"scriptPaths":279,"versionParams":280},[],[],[],[],{"cssClasses":282,"htmlComments":283,"htmlAttributes":284,"restEndpoints":285,"jsGlobals":286,"shortcodeOutput":287},[],[],[],[],[],[288],"[ndu_today_date]"]