[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxZGH-Y7c1NwLYBDWaos2Q8pKO4ibUI8_iXKr3eMWL1s":3,"$f2-0vggN4uuhhsTEHQJy_AndJQ-OOUczigeuuBXbYxbo":505,"$f_6Be5Uth9nyH9ssBRmcu-Z9AKslUi1Tqhqys9EI2Pwg":510},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":19,"download_link":20,"security_score":21,"vuln_count":13,"unpatched_count":13,"last_vuln_date":22,"fetched_at":23,"discovery_status":24,"vulnerabilities":25,"developer":26,"crawl_stats":22,"alternatives":33,"analysis":34,"fingerprints":487},"parallel-theme-extensions","Parallel Extensions","1.1.1","themely","https:\u002F\u002Fprofiles.wordpress.org\u002Fthemely\u002F","\u003Cp>This plugin adds widgets required by the Parallel WordPress theme by Themely.\u003C\u002Fp>\n\u003Ch3>Copyright\u003C\u002Fh3>\n\u003Cp>Parallel Extensions WordPress Plugin, Copyright 2016 Ishmael ‘Hans’ Desjarlais\u003C\u002Fp>\n\u003Cp>Parallel Extensions is distributed under the terms of the GNU GPL\u003C\u002Fp>\n\u003Cp>This program is free software; you can redistribute it and\u002For modify\u003Cbr \u002F>\nit under the terms of the GNU General Public License as published by\u003Cbr \u002F>\nthe Free Software Foundation; either version 2 of the License, or\u003Cbr \u002F>\n(at your option) any later version.\u003C\u002Fp>\n\u003Cp>This program is distributed in the hope that it will be useful,\u003Cbr \u002F>\nbut WITHOUT ANY WARRANTY; without even the implied warranty of\u003Cbr \u002F>\nMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the\u003Cbr \u002F>\nGNU General Public License for more details.\u003C\u002Fp>\n\u003Cp>You should have received a copy of the GNU General Public License along\u003Cbr \u002F>\nwith this program; if not, write to the Free Software Foundation, Inc.,\u003Cbr \u002F>\n51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.\u003C\u002Fp>\n","This plugin adds widgets required by the Parallel WordPress theme by Themely.",400,18449,0,"2020-12-16T18:05:00.000Z","5.6.17","3.8","5.6",[],"https:\u002F\u002Fwww.themely.com\u002Fthemes\u002Fparallel\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fparallel-theme-extensions.zip",85,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":27,"total_installs":28,"avg_security_score":29,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},4,5660,76,30,77,"2026-05-19T20:14:44.991Z",[],{"attackSurface":35,"codeSignals":83,"taintFlows":479,"riskAssessment":480,"analyzedAt":486},{"hooks":36,"ajaxHandlers":79,"restRoutes":80,"shortcodes":81,"cronEvents":82,"entryPointCount":13,"unprotectedCount":13},[37,43,47,52,55,58,61,64,67,70,73,76],{"type":38,"name":39,"callback":40,"file":41,"line":42},"action","admin_enqueue_scripts","parallel_wcp_upload_script","inc\\widgets.php",18,{"type":38,"name":44,"callback":45,"file":41,"line":46},"wp_head","parallel_wcp_image_styles",19,{"type":38,"name":48,"callback":49,"file":50,"line":51},"widgets_init","closure","widgets\\brands_widget.php",110,{"type":38,"name":48,"callback":49,"file":53,"line":54},"widgets\\feature_widget.php",127,{"type":38,"name":48,"callback":49,"file":56,"line":57},"widgets\\our_clients_widget.php",97,{"type":38,"name":48,"callback":49,"file":59,"line":60},"widgets\\our_team_widget.php",188,{"type":38,"name":48,"callback":49,"file":62,"line":63},"widgets\\pricing_tables_widget.php",182,{"type":38,"name":48,"callback":49,"file":65,"line":66},"widgets\\projects_single_widget.php",169,{"type":38,"name":48,"callback":49,"file":68,"line":69},"widgets\\project_grid_widget.php",126,{"type":38,"name":48,"callback":49,"file":71,"line":72},"widgets\\service_widget.php",124,{"type":38,"name":48,"callback":49,"file":74,"line":75},"widgets\\stats_widget.php",142,{"type":38,"name":48,"callback":49,"file":77,"line":78},"widgets\\testimonials_widget.php",113,[],[],[],[],{"dangerousFunctions":84,"sqlUsage":85,"outputEscaping":87,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":477,"bundledLibraries":478},[],{"prepared":13,"raw":13,"locations":86},[],{"escaped":88,"rawEcho":89,"locations":90},198,274,[91,94,96,98,100,102,104,106,107,109,110,111,113,114,116,118,120,122,124,126,128,130,131,132,133,134,136,137,139,141,142,144,146,147,149,151,152,153,155,157,158,160,162,163,165,167,169,171,173,174,175,177,179,180,181,183,185,186,188,190,191,193,195,196,198,200,201,203,205,206,208,210,211,213,215,216,218,220,221,223,225,226,227,229,230,232,234,235,237,239,240,242,243,244,245,246,248,249,251,253,254,255,257,258,260,261,263,264,266,268,270,272,273,275,276,277,279,281,282,283,284,285,287,288,289,291,292,293,295,297,298,299,301,302,304,306,307,309,311,312,313,315,316,317,319,320,321,323,324,325,327,328,329,331,332,333,335,336,337,338,339,341,343,344,346,347,348,349,350,351,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,372,374,375,376,378,380,381,383,384,385,386,387,388,389,390,391,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,411,412,413,415,416,417,419,420,422,424,425,426,427,428,429,430,431,433,434,435,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,454,455,456,457,458,459,461,463,464,466,468,469,470,472,473,475,476],{"file":50,"line":92,"context":93},42,"raw output",{"file":50,"line":95,"context":93},45,{"file":50,"line":97,"context":93},48,{"file":50,"line":99,"context":93},51,{"file":50,"line":101,"context":93},56,{"file":50,"line":103,"context":93},88,{"file":50,"line":105,"context":93},89,{"file":50,"line":105,"context":93},{"file":50,"line":108,"context":93},96,{"file":50,"line":57,"context":93},{"file":50,"line":57,"context":93},{"file":50,"line":112,"context":93},100,{"file":50,"line":112,"context":93},{"file":50,"line":115,"context":93},101,{"file":50,"line":117,"context":93},104,{"file":53,"line":119,"context":93},43,{"file":53,"line":121,"context":93},49,{"file":53,"line":123,"context":93},52,{"file":53,"line":125,"context":93},57,{"file":53,"line":127,"context":93},61,{"file":53,"line":129,"context":93},63,{"file":53,"line":112,"context":93},{"file":53,"line":115,"context":93},{"file":53,"line":115,"context":93},{"file":53,"line":117,"context":93},{"file":53,"line":135,"context":93},105,{"file":53,"line":135,"context":93},{"file":53,"line":138,"context":93},109,{"file":53,"line":140,"context":93},111,{"file":53,"line":140,"context":93},{"file":53,"line":143,"context":93},119,{"file":53,"line":145,"context":93},120,{"file":53,"line":145,"context":93},{"file":56,"line":148,"context":93},37,{"file":56,"line":150,"context":93},40,{"file":56,"line":119,"context":93},{"file":56,"line":97,"context":93},{"file":56,"line":154,"context":93},80,{"file":56,"line":156,"context":93},81,{"file":56,"line":156,"context":93},{"file":56,"line":159,"context":93},86,{"file":56,"line":161,"context":93},87,{"file":56,"line":161,"context":93},{"file":59,"line":164,"context":93},59,{"file":59,"line":166,"context":93},64,{"file":59,"line":168,"context":93},70,{"file":59,"line":170,"context":93},72,{"file":59,"line":172,"context":93},74,{"file":59,"line":29,"context":93},{"file":59,"line":31,"context":93},{"file":59,"line":176,"context":93},78,{"file":59,"line":178,"context":93},79,{"file":59,"line":154,"context":93},{"file":59,"line":156,"context":93},{"file":59,"line":182,"context":93},82,{"file":59,"line":184,"context":93},83,{"file":59,"line":161,"context":93},{"file":59,"line":187,"context":93},131,{"file":59,"line":189,"context":93},132,{"file":59,"line":189,"context":93},{"file":59,"line":192,"context":93},135,{"file":59,"line":194,"context":93},136,{"file":59,"line":194,"context":93},{"file":59,"line":197,"context":93},144,{"file":59,"line":199,"context":93},145,{"file":59,"line":199,"context":93},{"file":59,"line":202,"context":93},148,{"file":59,"line":204,"context":93},149,{"file":59,"line":204,"context":93},{"file":59,"line":207,"context":93},153,{"file":59,"line":209,"context":93},154,{"file":59,"line":209,"context":93},{"file":59,"line":212,"context":93},157,{"file":59,"line":214,"context":93},158,{"file":59,"line":214,"context":93},{"file":59,"line":217,"context":93},161,{"file":59,"line":219,"context":93},162,{"file":59,"line":219,"context":93},{"file":59,"line":222,"context":93},165,{"file":59,"line":224,"context":93},166,{"file":59,"line":224,"context":93},{"file":59,"line":66,"context":93},{"file":59,"line":228,"context":93},170,{"file":59,"line":228,"context":93},{"file":59,"line":231,"context":93},173,{"file":59,"line":233,"context":93},174,{"file":59,"line":233,"context":93},{"file":59,"line":236,"context":93},177,{"file":59,"line":238,"context":93},178,{"file":59,"line":238,"context":93},{"file":59,"line":241,"context":93},181,{"file":59,"line":63,"context":93},{"file":59,"line":63,"context":93},{"file":62,"line":95,"context":93},{"file":62,"line":121,"context":93},{"file":62,"line":247,"context":93},50,{"file":62,"line":99,"context":93},{"file":62,"line":250,"context":93},54,{"file":62,"line":252,"context":93},55,{"file":62,"line":101,"context":93},{"file":62,"line":125,"context":93},{"file":62,"line":256,"context":93},58,{"file":62,"line":164,"context":93},{"file":62,"line":259,"context":93},60,{"file":62,"line":127,"context":93},{"file":62,"line":262,"context":93},62,{"file":62,"line":129,"context":93},{"file":62,"line":265,"context":93},65,{"file":62,"line":267,"context":93},68,{"file":62,"line":269,"context":93},114,{"file":62,"line":271,"context":93},115,{"file":62,"line":271,"context":93},{"file":62,"line":274,"context":93},118,{"file":62,"line":143,"context":93},{"file":62,"line":143,"context":93},{"file":62,"line":278,"context":93},122,{"file":62,"line":280,"context":93},123,{"file":62,"line":280,"context":93},{"file":62,"line":69,"context":93},{"file":62,"line":54,"context":93},{"file":62,"line":54,"context":93},{"file":62,"line":286,"context":93},130,{"file":62,"line":187,"context":93},{"file":62,"line":187,"context":93},{"file":62,"line":290,"context":93},134,{"file":62,"line":192,"context":93},{"file":62,"line":192,"context":93},{"file":62,"line":294,"context":93},138,{"file":62,"line":296,"context":93},139,{"file":62,"line":296,"context":93},{"file":62,"line":75,"context":93},{"file":62,"line":300,"context":93},143,{"file":62,"line":300,"context":93},{"file":62,"line":303,"context":93},146,{"file":62,"line":305,"context":93},147,{"file":62,"line":305,"context":93},{"file":62,"line":308,"context":93},150,{"file":62,"line":310,"context":93},151,{"file":62,"line":310,"context":93},{"file":62,"line":209,"context":93},{"file":62,"line":314,"context":93},155,{"file":62,"line":314,"context":93},{"file":62,"line":214,"context":93},{"file":62,"line":318,"context":93},159,{"file":62,"line":318,"context":93},{"file":62,"line":219,"context":93},{"file":62,"line":322,"context":93},163,{"file":62,"line":322,"context":93},{"file":62,"line":224,"context":93},{"file":62,"line":326,"context":93},167,{"file":62,"line":326,"context":93},{"file":62,"line":228,"context":93},{"file":62,"line":330,"context":93},171,{"file":62,"line":330,"context":93},{"file":62,"line":233,"context":93},{"file":62,"line":334,"context":93},175,{"file":62,"line":334,"context":93},{"file":65,"line":247,"context":93},{"file":65,"line":125,"context":93},{"file":65,"line":127,"context":93},{"file":65,"line":340,"context":93},66,{"file":65,"line":342,"context":93},67,{"file":65,"line":267,"context":93},{"file":65,"line":345,"context":93},69,{"file":65,"line":176,"context":93},{"file":65,"line":184,"context":93},{"file":65,"line":278,"context":93},{"file":65,"line":187,"context":93},{"file":65,"line":294,"context":93},{"file":65,"line":352,"context":93},141,{"file":65,"line":75,"context":93},{"file":65,"line":75,"context":93},{"file":65,"line":199,"context":93},{"file":65,"line":303,"context":93},{"file":65,"line":303,"context":93},{"file":65,"line":204,"context":93},{"file":65,"line":308,"context":93},{"file":65,"line":308,"context":93},{"file":65,"line":207,"context":93},{"file":65,"line":209,"context":93},{"file":65,"line":209,"context":93},{"file":65,"line":212,"context":93},{"file":65,"line":214,"context":93},{"file":65,"line":214,"context":93},{"file":65,"line":217,"context":93},{"file":65,"line":219,"context":93},{"file":65,"line":219,"context":93},{"file":68,"line":371,"context":93},36,{"file":68,"line":373,"context":93},39,{"file":68,"line":150,"context":93},{"file":68,"line":119,"context":93},{"file":68,"line":377,"context":93},44,{"file":68,"line":379,"context":93},47,{"file":68,"line":97,"context":93},{"file":68,"line":382,"context":93},53,{"file":68,"line":125,"context":93},{"file":68,"line":164,"context":93},{"file":68,"line":108,"context":93},{"file":68,"line":57,"context":93},{"file":68,"line":57,"context":93},{"file":68,"line":112,"context":93},{"file":68,"line":115,"context":93},{"file":68,"line":115,"context":93},{"file":68,"line":392,"context":93},106,{"file":68,"line":138,"context":93},{"file":68,"line":51,"context":93},{"file":68,"line":51,"context":93},{"file":68,"line":269,"context":93},{"file":68,"line":269,"context":93},{"file":68,"line":271,"context":93},{"file":68,"line":274,"context":93},{"file":68,"line":143,"context":93},{"file":68,"line":143,"context":93},{"file":71,"line":92,"context":93},{"file":71,"line":97,"context":93},{"file":71,"line":99,"context":93},{"file":71,"line":252,"context":93},{"file":71,"line":164,"context":93},{"file":71,"line":127,"context":93},{"file":71,"line":57,"context":93},{"file":71,"line":410,"context":93},98,{"file":71,"line":410,"context":93},{"file":71,"line":115,"context":93},{"file":71,"line":414,"context":93},102,{"file":71,"line":414,"context":93},{"file":71,"line":392,"context":93},{"file":71,"line":418,"context":93},108,{"file":71,"line":418,"context":93},{"file":71,"line":421,"context":93},116,{"file":71,"line":423,"context":93},117,{"file":71,"line":423,"context":93},{"file":74,"line":379,"context":93},{"file":74,"line":250,"context":93},{"file":74,"line":125,"context":93},{"file":74,"line":262,"context":93},{"file":74,"line":340,"context":93},{"file":74,"line":267,"context":93},{"file":74,"line":432,"context":93},107,{"file":74,"line":418,"context":93},{"file":74,"line":418,"context":93},{"file":74,"line":436,"context":93},112,{"file":74,"line":269,"context":93},{"file":74,"line":269,"context":93},{"file":74,"line":143,"context":93},{"file":74,"line":278,"context":93},{"file":74,"line":280,"context":93},{"file":74,"line":280,"context":93},{"file":74,"line":69,"context":93},{"file":74,"line":54,"context":93},{"file":74,"line":54,"context":93},{"file":74,"line":286,"context":93},{"file":74,"line":187,"context":93},{"file":74,"line":187,"context":93},{"file":74,"line":290,"context":93},{"file":74,"line":192,"context":93},{"file":74,"line":192,"context":93},{"file":77,"line":453,"context":93},41,{"file":77,"line":95,"context":93},{"file":77,"line":97,"context":93},{"file":77,"line":99,"context":93},{"file":77,"line":382,"context":93},{"file":77,"line":252,"context":93},{"file":77,"line":460,"context":93},90,{"file":77,"line":462,"context":93},91,{"file":77,"line":462,"context":93},{"file":77,"line":465,"context":93},94,{"file":77,"line":467,"context":93},95,{"file":77,"line":467,"context":93},{"file":77,"line":410,"context":93},{"file":77,"line":471,"context":93},99,{"file":77,"line":471,"context":93},{"file":77,"line":474,"context":93},103,{"file":77,"line":135,"context":93},{"file":77,"line":135,"context":93},7,[],[],{"summary":481,"deductions":482},"The 'parallel-theme-extensions' v1.1.1 plugin exhibits a generally good security posture based on the provided static analysis. The absence of any recorded CVEs, coupled with the plugin's adherence to using prepared statements for its SQL queries and the presence of capability checks, are positive indicators. The static analysis reports no dangerous functions, file operations, or external HTTP requests, further contributing to a reduced attack surface.\n\nHowever, a significant concern arises from the low percentage of properly escaped output (42%). This indicates a substantial risk of Cross-Site Scripting (XSS) vulnerabilities, as user-supplied data could be rendered directly in the browser without sufficient sanitization. The lack of any taint analysis results, while seemingly positive, might also suggest that the analysis was not comprehensive enough to detect potential flows or that the plugin's functionality is very limited, thus not presenting obvious taint paths.\n\nGiven the strong adherence to prepared statements and capability checks, the primary weakness lies in output sanitization. The vulnerability history shows a clean slate, which is reassuring, but the potential for XSS due to poor output escaping cannot be overlooked. The plugin is currently at a moderate risk level, with the primary threat stemming from unescaped output, which could be exploited if a user can influence the data being displayed.",[483],{"reason":484,"points":485},"Low percentage of properly escaped output",8,"2026-03-16T19:48:19.414Z",{"wat":488,"direct":497},{"assetPaths":489,"generatorPatterns":492,"scriptPaths":493,"versionParams":494},[490,491],"\u002Fwp-content\u002Fplugins\u002Fparallel-theme-extensions\u002Fcss\u002Fwidgets.css","\u002Fwp-content\u002Fplugins\u002Fparallel-theme-extensions\u002Fjs\u002Fadmin.js",[],[491],[495,496],"parallel-theme-extensions\u002Fjs\u002Fadmin.js?ver=","parallel-theme-extensions\u002Fcss\u002Fwidgets.css?ver=",{"cssClasses":498,"htmlComments":499,"htmlAttributes":501,"restEndpoints":502,"jsGlobals":503,"shortcodeOutput":504},[],[500],"\u003C!-- Check for Pro Version -->",[],[],[],[],{"error":506,"url":507,"statusCode":508,"statusMessage":509,"message":509},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fparallel-theme-extensions\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":13,"versions":511},[]]