[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fx6jL0O_EZIt7_b7EODNERrREveM4V79fibAJH_aNTec":3,"$fNdwqREF-DZwcgAefBWCZlVawglmF5Jh4arpwFhH5RzE":128,"$fxQ-_W3Jm7jhoghN5EkTsjQ9q_ZlamkHVFZdWZ_Y7vOw":132},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":30,"crawl_stats":26,"alternatives":37,"analysis":38,"fingerprints":109},"one-call","One Call – WP REST API Extension","1.1.1","AmaderCode Lab","https:\u002F\u002Fprofiles.wordpress.org\u002Famadercode\u002F","\u003Cp>One Call is a helper or extension of WP REST API. To get featured image details, Categories lits, Tags list, Custom fields & Author detials by single rest api response One Call is giving a you post fileds filter options with custom rest api prefix such as ‘test-api’ where ‘wp-json’ is default.By default wp rest api does not give featured image, tags names, categories name & author details etc and to get them you have to call another rest api for each term which slow down the procedures. One Call is the solution to speed up rest api call in this case.\u003C\u002Fp>\n\u003Ch4>The key features of One Call API are-\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Custom and back end control rest api prefix such as ‘test-api’ where ‘wp-json’ is default to initially secure the api call.\u003C\u002Fli>\n\u003Cli>Get different reponse for list posts and single post responses.\u003C\u002Fli>\n\u003Cli>For posts list (multiple) call, you can control ‘one_call’ fields from back end.\u003C\u002Fli>\n\u003Cli>WordPress Posts fields filtering options from backend for posts litst (loop of Posts).\u003C\u002Fli>\n\u003C\u002Ful>\n","Get featured images, categories, tags, taxonomies,custom fields & author details etc all together by one call from WordPress rest api to reduce re …",10,1310,0,"2019-01-20T07:24:00.000Z","4.9.29","4.7","5.6",[19,20,21,22],"wp-rest-api-all-post-fields-details","wp-rest-api-featured-image","wp-rest-api-filter-fields","wpi-rest-api-prefix","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-call.zip",85,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":25,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"amadercode",4,40,30,84,"2026-05-19T21:40:37.579Z",[],{"attackSurface":39,"codeSignals":66,"taintFlows":75,"riskAssessment":103,"analyzedAt":108},{"hooks":40,"ajaxHandlers":62,"restRoutes":63,"shortcodes":64,"cronEvents":65,"entryPointCount":13,"unprotectedCount":13},[41,47,52,56],{"type":42,"name":43,"callback":44,"file":45,"line":46},"action","admin_init","save_settings_options","ocapi-includes\u002Fclass-ocapi-admin.php",12,{"type":42,"name":48,"callback":49,"file":50,"line":51},"admin_menu","ac_ocapi_admin_menu","one-call.php",55,{"type":42,"name":53,"callback":54,"file":50,"line":55},"rest_api_init","ac_ocapi_load_responses",57,{"type":57,"name":58,"callback":59,"priority":60,"file":50,"line":61},"filter","rest_url_prefix","ac_ocapi_rest_api_prefix",100,62,[],[],[],[],{"dangerousFunctions":67,"sqlUsage":68,"outputEscaping":70,"fileOperations":13,"externalRequests":13,"nonceChecks":73,"capabilityChecks":13,"bundledLibraries":74},[],{"prepared":13,"raw":13,"locations":69},[],{"escaped":71,"rawEcho":13,"locations":72},2,[],1,[],[76,95],{"entryPoint":77,"graph":78,"unsanitizedCount":13,"severity":94},"save_settings_options (ocapi-includes\u002Fclass-ocapi-admin.php:17)",{"nodes":79,"edges":91},[80,85],{"id":81,"type":82,"label":83,"file":45,"line":84},"n0","source","$_POST",32,{"id":86,"type":87,"label":88,"file":45,"line":89,"wp_function":90},"n1","sink","update_option() [Settings Manipulation]",33,"update_option",[92],{"from":81,"to":86,"sanitized":93},true,"low",{"entryPoint":96,"graph":97,"unsanitizedCount":13,"severity":94},"\u003Cclass-ocapi-admin> (ocapi-includes\u002Fclass-ocapi-admin.php:0)",{"nodes":98,"edges":101},[99,100],{"id":81,"type":82,"label":83,"file":45,"line":84},{"id":86,"type":87,"label":88,"file":45,"line":89,"wp_function":90},[102],{"from":81,"to":86,"sanitized":93},{"summary":104,"deductions":105},"The 'one-call' plugin v1.1.1 exhibits a strong security posture based on the provided static analysis. The absence of any detected dangerous functions, raw SQL queries, unescaped output, file operations, or external HTTP requests is highly commendable. Furthermore, the plugin employs proper nonce checks, which is a critical security measure for WordPress plugins. The taint analysis showing zero unsanitized paths further reinforces the confidence in the code's resilience against common injection vulnerabilities.\n\nThe vulnerability history being completely clean, with no recorded CVEs, is another significant positive indicator. This suggests a proactive and well-maintained development process that prioritizes security. The lack of common vulnerability types and recent vulnerabilities further supports this. \n\nIn conclusion, 'one-call' v1.1.1 appears to be a very securely developed plugin. The code analysis reveals excellent adherence to WordPress security best practices, and the absence of historical vulnerabilities suggests a commitment to maintaining this standard. While the lack of capability checks on entry points is a minor point for consideration in very high-security environments, the overall picture is one of a robust and trustworthy plugin.",[106],{"reason":107,"points":71},"Missing capability checks on entry points","2026-04-16T12:30:46.494Z",{"wat":110,"direct":117},{"assetPaths":111,"generatorPatterns":114,"scriptPaths":115,"versionParams":116},[112,113],"\u002Fwp-content\u002Fplugins\u002Fone-call\u002Focapi-includes\u002Fclass-ocapi-admin.php","\u002Fwp-content\u002Fplugins\u002Fone-call\u002Focapi-includes\u002Fclass-ocapi-responses.php",[],[],[],{"cssClasses":118,"htmlComments":119,"htmlAttributes":121,"restEndpoints":123,"jsGlobals":126,"shortcodeOutput":127},[],[120],"\u003C!-- OCAPI plugin Initialization -->",[122],"data-setting-page-slug=\"ac-ocapi-settings\"",[124,125],"\u002Fwp-json\u002Fwp\u002Fv2\u002Fposts?_fields[]=id&_fields[]=title&_fields[]=excerpt&_fields[]=one_call","\u002Fwp-json\u002Fwp\u002Fv2\u002Fpages?_fields[]=id&_fields[]=title&_fields[]=excerpt&_fields[]=one_call",[],[],{"error":93,"url":129,"statusCode":130,"statusMessage":131,"message":131},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fone-call\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":13,"versions":133},[]]