[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYH6ineVo5fElTekqEid_amFljJIrmio4jRvdK8pBze0":3,"$fOTYVUszHouuTFt8t5qDPZPfa7AkMIbmQRBirdx-4KUg":285,"$flhsaIeexh2024s4I7mfqVzXI1sm-DwQz4EI7VBH9-bE":289},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"discovery_status":30,"vulnerabilities":31,"developer":32,"crawl_stats":28,"alternatives":37,"analysis":125,"fingerprints":261},"potter-kit","Potter Kit – Elementor, Beaver Builder, Gutenberg Templates and Elementor Blocks Builder","1.0.9","Potter","https:\u002F\u002Fprofiles.wordpress.org\u002Fwppotter\u002F","\u003Cp>Import \u003Ca href=\"https:\u002F\u002Fwppotter.com\" rel=\"nofollow ugc\">Potter Theme\u003C\u002Fa> official themes demo content, widgets and theme settings with just one click.\u003C\u002Fp>\n\u003Cp>Get \u003Ca href=\"https:\u002F\u002Fpottertheme.com\u002Fsupport\u002F\" rel=\"nofollow ugc\">free support\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>The plugin is a modified version of \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fone-click-demo-import\u002F\" rel=\"ugc\">One Click Demo Importer\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WordPress 4.7 or later.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpottertheme.com\u002F\" rel=\"nofollow ugc\">Potter Official Themes\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Contribute\u003C\u002Fh4>\n\u003Cp>You can contribute to the source code in our \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwppotter\u002Fpotter-kit\u002F\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa> page.\u003C\u002Fp>\n","Import Potter themes demo content, widgets and theme settings with just one click.",70,15369,100,1,"2021-09-21T17:41:00.000Z","5.4.19","4.7","",[20,21,22,4,23],"demo","importer","one-click-import","theme-demos","https:\u002F\u002Fwppotter.com\u002Fpotter-kit\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpotter-kit.zip",85,0,null,"2026-07-22T17:31:50.256Z","no_bundle",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"wppotter",30,84,"2026-08-28T19:39:24.880Z",[38,61,76,93,108],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":53,"tags":54,"homepage":56,"download_link":57,"security_score":58,"vuln_count":59,"unpatched_count":27,"last_vuln_date":60,"fetched_at":29},"themegrill-demo-importer","Starter Templates & Sites Pack by ThemeGrill","2.1.1","ThemeGrill","https:\u002F\u002Fprofiles.wordpress.org\u002Fthemegrill\u002F","\u003Cp>Discover a vast collection of premium starter sites and website templates. Instantly import complete demo content, widgets, and theme settings with a single click. Ideal for business websites, online courses, portfolios, blogs, and more — giving you a professional, ready-to-launch website in minutes.\u003C\u002Fp>\n\u003Ch4>Contribute\u003C\u002Fh4>\n\u003Cp>You can contribute to the source code in our \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fthemegrill\u002Fthemegrill-demo-importer\u002F\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa> page.\u003C\u002Fp>\n","Premium starter sites and website templates by ThemeGrill. Import demo content, widgets, and theme settings with one click.",70000,5593514,94,197,"2026-07-09T04:57:00.000Z","7.0.2","5.7","7.4",[20,21,22,23,55],"themegrill","https:\u002F\u002Fthemegrill.com\u002Fdemo-importer\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fthemegrill-demo-importer.2.1.1.zip",93,2,"2026-03-06 00:00:00",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":71,"num_ratings":59,"last_updated":72,"tested_up_to":51,"requires_at_least":73,"requires_php":18,"tags":74,"homepage":18,"download_link":75,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"icyclub","Icyclub","2.8","themeansar","https:\u002F\u002Fprofiles.wordpress.org\u002Fthemeansar\u002F","\u003Cp>Icyclub plugin for all Themeansar Theme\u003C\u002Fp>\n\u003Cp>The Icyclub plugin features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Beautiful pre-build homepage layouts\u003C\u002Fli>\n\u003Cli>Drag and drop page customization\u003C\u002Fli>\n\u003Cli>Predefined usefull sections\u003C\u002Fli>\n\u003Cli>Live content editing \u003C\u002Fli>\n\u003Cli>and many other features\u003C\u002Fli>\n\u003C\u002Ful>\n","Icyclub plugin for Provided a readymade template for all Themeansar Theme",9000,418216,60,"2026-05-21T10:11:00.000Z","6.6",[20,21,22,23],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ficyclub.zip",{"slug":77,"name":78,"version":79,"author":80,"author_profile":81,"description":82,"short_description":83,"active_installs":84,"downloaded":85,"rating":27,"num_ratings":27,"last_updated":86,"tested_up_to":87,"requires_at_least":88,"requires_php":89,"tags":90,"homepage":91,"download_link":92,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"theme-one-click-demo-import","Theme One Click Demo Importer","2.1","theme404","https:\u002F\u002Fprofiles.wordpress.org\u002Ftheme404\u002F","\u003Cp>Theme404 One Click Demo Import is the right tool to import inbuilt demos into your business sites within a click. It displays predefined features like demo content, widgets, and theme settings within a single click. If you are having problems implementing various features available in the theme, here it will reinforce you to get all with just one tap.\u003Cbr \u002F>\nOnce you install and activate any of the demos from Theme404 templates, you can download or manually install this plugin. It is compatible with WordPress 5.0 or higher version and only supports PHP 7.0 or later.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WordPress 5.0 or Higher.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fauthor\u002Ftheme404\u002F\" rel=\"ugc\">Theme404 Official Themes\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n","Import Theme404 official themes demo content, widgets and theme settings with just one click.",500,50641,"2020-10-13T03:16:00.000Z","5.5.18","5.2","7.0",[21,22,23,80],"https:\u002F\u002Ftheme404.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftheme-one-click-demo-import.2.1.zip",{"slug":94,"name":95,"version":96,"author":97,"author_profile":98,"description":99,"short_description":100,"active_installs":84,"downloaded":101,"rating":13,"num_ratings":14,"last_updated":102,"tested_up_to":103,"requires_at_least":104,"requires_php":105,"tags":106,"homepage":18,"download_link":107,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"thememiles-toolset","Thememiles Toolset","1.1.2","thememiles","https:\u002F\u002Fprofiles.wordpress.org\u002Fthememiles\u002F","\u003Cp>Import \u003Ca href=\"https:\u002F\u002Fwww.thememiles.com\u002Fthemes\u002F\" rel=\"nofollow ugc\">ThemeMiles\u003C\u002Fa> official themes demo content, widgets and theme settings with just one click.\u003C\u002Fp>\n\u003Cp>Get \u003Ca href=\"https:\u002F\u002Fwww.thememiles.com\u002Fsupports\u002F\" rel=\"nofollow ugc\">free support\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Images License\u003C\u002Fh3>\n\u003Col>\n\u003Cli>https:\u002F\u002Fpxhere.com\u002Fen\u002Flicense [CCO License]\u003C\u002Fli>\n\u003C\u002Fol>\n","Import ThemeMiles Official Themes Demo Content, Widgets and Theme settings with just one click.",30456,"2023-06-11T21:12:00.000Z","6.2.9","5.0","7.0.0",[20,21,22,23,97],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fthememiles-toolset.zip",{"slug":109,"name":110,"version":111,"author":112,"author_profile":113,"description":114,"short_description":115,"active_installs":116,"downloaded":117,"rating":27,"num_ratings":27,"last_updated":118,"tested_up_to":119,"requires_at_least":120,"requires_php":89,"tags":121,"homepage":123,"download_link":124,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"aarambha-demo-sites","Aarambha Demo Sites","1.1.7","aarambhathemes","https:\u002F\u002Fprofiles.wordpress.org\u002Faarambhathemes\u002F","\u003Cp>Aarambha Demo Sites – it is the perfect plugin to import already inbuilt theme’s demos into your business websites within a click. It shows predefined features like demo content, widgets, and theme settings within a single click. If you are having problems implementing various features available in the theme, here it will reinforce you to get all with just one tap.\u003Cbr \u002F>\nOnce you install and activate any of the themes from Aarambha Themes, you can download or manually install this plugin. It is compatible with WordPress 5.0 or higher version and only supports PHP 7.0 or later.\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=BTcMS1mvN-w\" rel=\"nofollow ugc\">Video\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WordPress 5.0 or Higher.\u003C\u002Fli>\n\u003Cli>This plugin doesn’t work with any other themes besides our official themes available @ \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fauthor\u002Faarambhathemes\u002F\" rel=\"ugc\">AarambhaThemes Official Themes\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Notice\u003C\u002Fh4>\n\u003Cp>Aarambha Demo Sites uses third party service (API) at (https:\u002F\u002Fdemo.aarambhathemes.com) to query the demo listings, download & install the demos. In order to perform this action, the plugin only sends theme slug to our server and not any of your other details. Please check our \u003Ca href=\"https:\u002F\u002Faarambhathemes.com\u002Fprivacy-policy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa> for further information. If you are not OK with this, you may uninstall this plugin and contact us through our forum to get further assistance.\u003C\u002Fp>\n","Import Aarambha Themes inbuilt themes demo content, widgets and its all settings with one click.",200,17134,"2023-11-22T03:31:00.000Z","6.4.8","5.9",[112,122,21,22,23],"demo-templates","https:\u002F\u002Faarambhathemes.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faarambha-demo-sites.1.1.7.zip",{"attackSurface":126,"codeSignals":187,"taintFlows":224,"riskAssessment":252,"analyzedAt":260},{"hooks":127,"ajaxHandlers":160,"restRoutes":183,"shortcodes":184,"cronEvents":185,"entryPointCount":186,"unprotectedCount":186},[128,134,137,139,142,145,148,151,154],{"type":129,"name":130,"callback":131,"file":132,"line":133},"action","plugins_loaded","anonymous","includes\\class-potter-kit.php",212,{"type":129,"name":135,"callback":131,"file":132,"line":136},"admin_enqueue_scripts",227,{"type":129,"name":135,"callback":131,"file":132,"line":138},228,{"type":129,"name":140,"callback":131,"file":132,"line":141},"mime_types",231,{"type":129,"name":143,"callback":131,"file":132,"line":144},"admin_menu",234,{"type":129,"name":146,"callback":131,"file":132,"line":147},"current_screen",235,{"type":129,"name":149,"callback":131,"file":132,"line":150},"wp_loaded",247,{"type":129,"name":152,"callback":131,"file":132,"line":153},"admin_init",248,{"type":155,"name":156,"callback":157,"file":158,"line":159},"filter","potter_kit_demo_lists","add_template_library","includes\\class-theme-template-library-base.php",28,[161,165,168,171,174,177,180],{"action":162,"nopriv":163,"callback":131,"hasNonce":163,"hasCapCheck":163,"file":132,"line":164},"potter_kit_ajax_setup",false,238,{"action":166,"nopriv":163,"callback":131,"hasNonce":163,"hasCapCheck":163,"file":132,"line":167},"demo_download_and_unzip",239,{"action":169,"nopriv":163,"callback":131,"hasNonce":163,"hasCapCheck":163,"file":132,"line":170},"plugin_screen",240,{"action":172,"nopriv":163,"callback":131,"hasNonce":163,"hasCapCheck":163,"file":132,"line":173},"install_plugin",241,{"action":175,"nopriv":163,"callback":131,"hasNonce":163,"hasCapCheck":163,"file":132,"line":176},"content_screen",242,{"action":178,"nopriv":163,"callback":131,"hasNonce":163,"hasCapCheck":163,"file":132,"line":179},"import_content",243,{"action":181,"nopriv":163,"callback":131,"hasNonce":163,"hasCapCheck":163,"file":132,"line":182},"complete_screen",244,[],[],[],7,{"dangerousFunctions":188,"sqlUsage":189,"outputEscaping":196,"fileOperations":221,"externalRequests":222,"nonceChecks":186,"capabilityChecks":197,"bundledLibraries":223},[],{"prepared":190,"raw":14,"locations":191},5,[192],{"file":193,"line":194,"context":195},"admin\\class-reset.php",109,"$wpdb->query() with variable interpolation",{"escaped":11,"rawEcho":197,"locations":198},11,[199,202,204,206,208,210,212,214,216,218,219],{"file":200,"line":170,"context":201},"admin\\class-potter-kit-admin.php","raw output",{"file":200,"line":203,"context":201},410,{"file":200,"line":205,"context":201},437,{"file":200,"line":207,"context":201},707,{"file":200,"line":209,"context":201},708,{"file":200,"line":211,"context":201},753,{"file":200,"line":213,"context":201},754,{"file":200,"line":215,"context":201},828,{"file":200,"line":217,"context":201},837,{"file":200,"line":217,"context":201},{"file":200,"line":220,"context":201},2367,13,4,[],[225,244],{"entryPoint":226,"graph":227,"unsanitizedCount":27,"severity":243},"demo_download_and_unzip (admin\\class-potter-kit-admin.php:523)",{"nodes":228,"edges":240},[229,234],{"id":230,"type":231,"label":232,"file":200,"line":233},"n0","source","$_POST",536,{"id":235,"type":236,"label":237,"file":200,"line":238,"wp_function":239},"n1","sink","wp_remote_get() [SSRF]",587,"wp_remote_get",[241],{"from":230,"to":235,"sanitized":242},true,"low",{"entryPoint":245,"graph":246,"unsanitizedCount":27,"severity":243},"\u003Cclass-potter-kit-admin> (admin\\class-potter-kit-admin.php:0)",{"nodes":247,"edges":250},[248,249],{"id":230,"type":231,"label":232,"file":200,"line":233},{"id":235,"type":236,"label":237,"file":200,"line":238,"wp_function":239},[251],{"from":230,"to":235,"sanitized":242},{"summary":253,"deductions":254},"The potter-kit plugin v1.0.9 exhibits a concerning security posture due to a significant number of unprotected AJAX handlers. While the plugin avoids dangerous functions, uses prepared statements for most SQL queries, and properly escapes the majority of its output, the presence of 7 AJAX handlers without authentication checks presents a substantial attack surface. These handlers are potential entry points for unauthorized actions or data manipulation if they can be triggered externally without proper validation. The absence of any recorded vulnerabilities in its history is positive, suggesting a potentially diligent development process in the past or a lack of targeted attacks. However, this history alone does not mitigate the immediate risks identified in the static analysis. The plugin's strengths lie in its careful handling of SQL and output, but the lack of authorization on its primary entry points is a critical weakness that needs to be addressed.",[255,258],{"reason":256,"points":257},"AJAX handlers without authentication checks",10,{"reason":259,"points":186},"Unprotected entry points (AJAX)","2026-03-16T21:26:10.019Z",{"wat":262,"direct":271},{"assetPaths":263,"generatorPatterns":266,"scriptPaths":267,"versionParams":268},[264,265],"\u002Fwp-content\u002Fplugins\u002Fpotter-kit\u002Fadmin\u002Fjs\u002Fpotter-kit-admin.js","\u002Fwp-content\u002Fplugins\u002Fpotter-kit\u002Fadmin\u002Fcss\u002Fpotter-kit-admin.css",[],[264],[269,270],"potter-kit\u002Fadmin\u002Fjs\u002Fpotter-kit-admin.js?ver=","potter-kit\u002Fadmin\u002Fcss\u002Fpotter-kit-admin.css?ver=",{"cssClasses":272,"htmlComments":279,"htmlAttributes":280,"restEndpoints":282,"jsGlobals":283,"shortcodeOutput":284},[273,274,275,276,277,278],"ai-demo-import","ai-item-import","is-button","is-default","is-primary","is-large",[],[281],"data-plugins",[],[],[],{"error":242,"url":286,"statusCode":287,"statusMessage":288,"message":288},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fpotter-kit\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":190,"versions":290},[291,297,304,311,318],{"version":6,"download_url":292,"svn_tag_url":293,"released_at":28,"has_diff":163,"diff_files_changed":294,"diff_lines":28,"trac_diff_url":295,"vulnerabilities":296,"is_current":242},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpotter-kit.1.0.9.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fpotter-kit\u002Ftags\u002F1.0.9\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fpotter-kit%2Ftags%2F1.0.7&new_path=%2Fpotter-kit%2Ftags%2F1.0.9",[],{"version":298,"download_url":299,"svn_tag_url":300,"released_at":28,"has_diff":163,"diff_files_changed":301,"diff_lines":28,"trac_diff_url":302,"vulnerabilities":303,"is_current":163},"1.0.7","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpotter-kit.1.0.7.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fpotter-kit\u002Ftags\u002F1.0.7\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fpotter-kit%2Ftags%2F1.0.6&new_path=%2Fpotter-kit%2Ftags%2F1.0.7",[],{"version":305,"download_url":306,"svn_tag_url":307,"released_at":28,"has_diff":163,"diff_files_changed":308,"diff_lines":28,"trac_diff_url":309,"vulnerabilities":310,"is_current":163},"1.0.6","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpotter-kit.1.0.6.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fpotter-kit\u002Ftags\u002F1.0.6\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fpotter-kit%2Ftags%2F1.0.5&new_path=%2Fpotter-kit%2Ftags%2F1.0.6",[],{"version":312,"download_url":313,"svn_tag_url":314,"released_at":28,"has_diff":163,"diff_files_changed":315,"diff_lines":28,"trac_diff_url":316,"vulnerabilities":317,"is_current":163},"1.0.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpotter-kit.1.0.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fpotter-kit\u002Ftags\u002F1.0.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fpotter-kit%2Ftags%2F1.0.4&new_path=%2Fpotter-kit%2Ftags%2F1.0.5",[],{"version":319,"download_url":320,"svn_tag_url":321,"released_at":28,"has_diff":163,"diff_files_changed":322,"diff_lines":28,"trac_diff_url":28,"vulnerabilities":323,"is_current":163},"1.0.4","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpotter-kit.1.0.4.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fpotter-kit\u002Ftags\u002F1.0.4\u002F",[],[]]