[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fya4s_WAxxD7q8gQ4uIwrtlcV9cy26JxJl97f-cQdLrE":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":22,"download_link":23,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":36,"analysis":127,"fingerprints":200},"promotion-bar","Promotion Bar","1.3.0","Nimesh Gorfad","https:\u002F\u002Fprofiles.wordpress.org\u002Fgorfadnimesh\u002F","\u003Cp>The Promotion Bar plugin allows you to create and display customizable promotion bars on your WordPress site. Use it to highlight special offers, announcements, or any important information you want to draw attention to.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later. For more information, see \u003Ca href=\"http:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-2.0.html\" rel=\"nofollow ugc\">License URI\u003C\u002Fa>.\u003C\u002Fp>\n","Special offers, announcements, Black Friday, Cyber Monday, or any other Promotion bar is here",0,412,"2025-12-18T18:16:00.000Z","6.9.4","6.3","7.3",[18,19,20,21],"announcement","bar","customizable","promotion","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpromotion-bar.1.3.0.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":32,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"gorfadnimesh",2,50,96,30,91,"2026-04-05T11:58:10.115Z",[37,57,77,94,112],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":30,"last_updated":48,"tested_up_to":14,"requires_at_least":49,"requires_php":50,"tags":51,"homepage":55,"download_link":56,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"header-promo","Header Promo – Show Top Bar Message or Call to Action","1.1.1","bPlugins","https:\u002F\u002Fprofiles.wordpress.org\u002Fbplugins\u002F","\u003Cp>Best Black Friday, Cyber Monday, or any other promo bar is here\u003C\u002Fp>\n\u003Ch3>Best Black Friday, Cyber Monday or any other promo bar is here\u003C\u002Fh3>\n\u003Cp>Header Promo is a lightweight plugin, which enables you to display promotional information in the header or footer of a WordPress website. You can use this plugin to show Black Friday, Cyber Monday or other offers.\u003Cbr \u002F>\nThis promotional bar will help you get more attention from visitors.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Display promo message and a countdown timer in the header and footer.\u003C\u002Fli>\n\u003Cli>Change colors and background for the promo and countdown.\u003C\u002Fli>\n\u003Cli>Customize the button with the normal and hover color and background as well as the border radius.\u003C\u002Fli>\n\u003Cli>User-friendly interface\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How to use\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>After installation, you can see a sidebar menu in the dashboard called “Header Promo”\u003C\u002Fli>\n\u003Cli>Set up the promo and countdown time from there.\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Enjoy!\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>For installation help click on Installation Tab\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Feedback\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Did you like this plugin? Dislike it? Do you have a feature request? \u003Ca href=\"mailto:support@bplugins.com\" title=\"Send feedback\" rel=\"nofollow ugc\">Please share your feedback with us\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>⭐ Check out our other WordPress Plugins-\u003C\u002Fh3>\n\u003Cp>🔥 \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fbplugins.com\u002Fproducts\u002Fhtml5-audio-player\" rel=\"nofollow ugc\">Html5 Audio Player\u003C\u002Fa>\u003C\u002Fstrong> – Best audio player plugin for WordPress.\u003C\u002Fp>\n\u003Cp>🔥 \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fbplugins.com\u002Fproducts\u002Fhtml5-video-player\" rel=\"nofollow ugc\">Html5 Video Player\u003C\u002Fa>\u003C\u002Fstrong> – Best video player plugin for WordPress.\u003C\u002Fp>\n\u003Cp>🔥 \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fbplugins.com\u002Fproducts\u002Fpdf-poster\" rel=\"nofollow ugc\">PDF Poster\u003C\u002Fa>\u003C\u002Fstrong> – A fully-featured PDF Viewer Plugin for WordPress.\u003C\u002Fp>\n\u003Cp>🔥 \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fbplugins.com\u002Fproducts\u002Fdocument-embedder\" rel=\"nofollow ugc\">Document Embedder\u003C\u002Fa>\u003C\u002Fstrong> – Best WordPress Document Embeder Plugin.\u003C\u002Fp>\n\u003Cp>🔥 \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fbplugins.com\u002Fproducts\u002F3d-viewer\" rel=\"nofollow ugc\">3D Viewer\u003C\u002Fa>\u003C\u002Fstrong> – Display interactive 3D models on the webs.\u003C\u002Fp>\n\u003Cp>🔥 \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fbplugins.com\u002Fproducts\u002Fadvanced-post-block\" rel=\"nofollow ugc\">Advanced Post Block\u003C\u002Fa>\u003C\u002Fstrong> – Best Post Display Plugin for WordPress.\u003C\u002Fp>\n","Best Black Friday, Cyber Monday, or any other promo bar is here",500,7311,80,"2026-02-26T09:15:00.000Z","5.2","7.1",[18,52,53,54,4],"footer-promotion","header-promotion","promo-header","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmy-pricing-table","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fheader-promo.1.1.1.zip",{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":11,"num_ratings":11,"last_updated":22,"tested_up_to":67,"requires_at_least":68,"requires_php":22,"tags":69,"homepage":74,"download_link":75,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":76},"muca-free-shipping-bar-for-woo","Ajax Free Shipping Bar for WooCommerce","1.0.1","MucaSoft","https:\u002F\u002Fprofiles.wordpress.org\u002Fmucasoft\u002F","\u003Cp>Ajax Free Shipping Bar for WooCommerce \u002F Announcement Bar is a free WordPress plugin that gives you ability to add a free shipping bar \u002F announcement bar on your website as a marketing tool to increase overall order revenue. AjaxFree Shipping bar is a very useful marketing tool. Customers would spend more to get free shipping. Customer will see congratulations message and link to Checkout page if they reached the minimum spend.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ftest.mucasoft.com\u002F\" rel=\"nofollow ugc\">\u003Cstrong>View demo\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Important Notice:\u003C\u002Fh3>\n\u003Cp>-Plugin works based on WooCommerce plugin. Version 3.0 and above.\u003C\u002Fp>\n\u003Cp>-The plugin is released on WordPress.org and you can use plugin as free to build themes for sale.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ftest.mucasoft.com\u002F\" rel=\"nofollow ugc\">\u003Cstrong>View demo\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FSlrsuLO7WG4?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n","Ajax Free Shipping Bar for WooCommerce \u002F Announcement Bar is a free WordPress plugin that gives you ability to add a free shipping bar \u002F announcement  …",10,1057,"5.6.17","4.5",[70,71,72,4,73],"free-announcement-bar","free-shipping-bar","free-shipping-bar-for-woocommerce","woocommerce","https:\u002F\u002Fmucasoft.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmuca-free-shipping-bar-for-woo.zip","2026-03-15T10:48:56.248Z",{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":11,"downloaded":85,"rating":11,"num_ratings":11,"last_updated":86,"tested_up_to":14,"requires_at_least":87,"requires_php":88,"tags":89,"homepage":22,"download_link":93,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"barilo-light-top-bar-message","Barilo Light – Top Bar Message","1.1.0","Radislav","https:\u002F\u002Fprofiles.wordpress.org\u002Fnahabagroup\u002F","\u003Cp>Barilo Light allows site admins to easily display a custom message in a stylish top bar across their site. Useful for:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Announcements or alerts\u003C\u002Fli>\n\u003Cli>Holiday greetings\u003C\u002Fli>\n\u003Cli>Special deals and promotions\u003C\u002Fli>\n\u003Cli>Maintenance notices\u003C\u002Fli>\n\u003Cli>Welcoming new visitors\u003C\u002Fli>\n\u003Cli>Contact info (email and phone)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Simple message text with optional HTML links (e.g. \u003Ccode>\u003Ca href=\"...\">Click here\u003C\u002Fa>\u003C\u002Fcode>)\u003C\u002Fli>\n\u003Cli>Background and text color pickers (choose any color, not just presets)\u003C\u002Fli>\n\u003Cli>Optional phone link (tappable on mobile)\u003C\u002Fli>\n\u003Cli>Optional email link\u003C\u002Fli>\n\u003Cli>Option to temporarily hide the bar (only admin can do that)\u003C\u002Fli>\n\u003Cli>Optional “hide after date” – automatically stop showing the bar after a specific day\u003C\u002Fli>\n\u003Cli>Designed to be lightweight and easy to use\u003C\u002Fli>\n\u003C\u002Ful>\n","A free plugin to display a customizable top bar message on your WordPress site. Great for announcements, greetings, notifications or promotions.",291,"2025-12-15T11:30:00.000Z","6.7","8.2",[18,90,91,4,92],"header-message","notification-bar","top-bar","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbarilo-light-top-bar-message.1.1.0.zip",{"slug":95,"name":96,"version":97,"author":98,"author_profile":99,"description":100,"short_description":101,"active_installs":11,"downloaded":102,"rating":11,"num_ratings":11,"last_updated":103,"tested_up_to":104,"requires_at_least":105,"requires_php":106,"tags":107,"homepage":22,"download_link":111,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"lightweight-high-performance-sticky-bar","Lightweight High Performance Sticky Bar","1.5.3","alexgodlewski","https:\u002F\u002Fprofiles.wordpress.org\u002Falexgodlewski\u002F","\u003Cp>The Lightweight High Performance Sticky Bar is perfect for announcements, promotions, or important messages that need visibility without disrupting the user experience. It adds a customizable sticky bar to the top of your website with options for a countdown timer.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Smooth Animations\u003C\u002Fstrong>: Clean transitions when showing and hiding the bar\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable Text\u003C\u002Fstrong>: Set your own message to display\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Color Picker\u003C\u002Fstrong>: Choose any background color with the built-in WordPress color picker\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cookie Integration\u003C\u002Fstrong>: Bar stays hidden for visitors who close it\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Configurable Duration\u003C\u002Fstrong>: Set how many hours the bar stays hidden after being closed\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Admin Bar Compatible\u003C\u002Fstrong>: Automatically adjusts position when WordPress admin bar is present\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Content-Friendly\u003C\u002Fstrong>: Adds padding to avoid covering your website content\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Lightweight\u003C\u002Fstrong>: Minimal impact on page load times and performance\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Mobile-Friendly\u003C\u002Fstrong>: Fully responsive design that works on all devices\u003C\u002Fli>\n\u003Cli>\u003Cstrong>No Dependencies\u003C\u002Fstrong>: Doesn’t require any external libraries beyond jQuery (included with WordPress)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Countdown Timer\u003C\u002Fstrong>: Display a countdown to a specific date and time\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cache-Compatible\u003C\u002Fstrong>: Works with page caching plugins\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable Countdown\u003C\u002Fstrong>: Position, colors, labels, and end actions\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Technical Details\u003C\u002Fh3>\n\u003Cp>The sticky bar appears at the top of your website as the first element in the header. It includes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Smart Positioning\u003C\u002Fstrong>: Detects and adjusts for the WordPress admin bar when logged in\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Body Padding\u003C\u002Fstrong>: Automatically adds padding to prevent content from being hidden\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Responsive Layout\u003C\u002Fstrong>: Adapts to all screen sizes from mobile to desktop\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Performance Optimized\u003C\u002Fstrong>: JavaScript and CSS are minified and only loaded when needed\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cookie-Based Memory\u003C\u002Fstrong>: Respects user preferences by remembering when they’ve dismissed the bar\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Countdown Feature\u003C\u002Fstrong>: Display days, hours, minutes, and seconds remaining until a target date\u003C\u002Fli>\n\u003Cli>\u003Cstrong>AJAX Updates\u003C\u002Fstrong>: Ensures countdown accuracy even with cached pages\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Configuration Options\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Bar Text\u003C\u002Fstrong>: The message displayed in the sticky bar\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Background Color\u003C\u002Fstrong>: Color picker for the bar background\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hide Duration\u003C\u002Fstrong>: Hours the bar stays hidden after closing\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enable Bar\u003C\u002Fstrong>: Toggle to activate\u002Fdeactivate the bar\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enable Countdown\u003C\u002Fstrong>: Toggle to enable the countdown timer\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Target Date\u003C\u002Fstrong>: The date and time that the countdown targets\u003C\u002Fli>\n\u003Cli>\u003Cstrong>After Countdown Ends\u003C\u002Fstrong>: What happens when countdown reaches zero (Show Zeros, Remove Countdown, or Remove Bar)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Countdown Position\u003C\u002Fstrong>: Where to display the countdown relative to text\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Numbers Background\u003C\u002Fstrong>: Background color for countdown digits\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Numbers Font Color\u003C\u002Fstrong>: Text color for countdown digits\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Show Labels\u003C\u002Fstrong>: Toggle to show\u002Fhide time unit labels (Days, Hours, etc.)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Labels Position\u003C\u002Fstrong>: Display labels above or below the numbers\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Labels\u003C\u002Fstrong>: Customize the text for each time unit label\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Requirements\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>WordPress 5.0 or higher\u003C\u002Fli>\n\u003Cli>PHP 7.4 or higher\u003C\u002Fli>\n\u003Cli>JavaScript enabled in the browser\u003C\u002Fli>\n\u003Cli>Cookies enabled for remembering user preferences\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Requirements\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>WordPress 5.0 or higher\u003C\u002Fli>\n\u003Cli>PHP 7.4 or higher\u003C\u002Fli>\n\u003Cli>JavaScript enabled in the browser\u003C\u002Fli>\n\u003Cli>Cookies enabled for remembering user preferences\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Developed by Alex Godlewski, \u003Ca href=\"https:\u002F\u002Fhyroes.com\" rel=\"nofollow ugc\">Hyroes.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Privacy\u003C\u002Fh3>\n\u003Cp>This plugin sets a cookie (HyroesStickyBarClosed) in the visitor’s browser when they close the sticky bar. This cookie only stores a simple “closed” status and does not collect any personal information or track users.\u003C\u002Fp>\n\u003Cp>The cookie expires after the configured number of hours (default: 24 hours). No data is sent to external servers except for the AJAX requests used to update the countdown timer, which do not contain any personal information.\u003C\u002Fp>\n","Add a customizable sticky notification bar with countdown functionality to your website with minimal performance impact.",264,"2025-06-07T14:03:00.000Z","6.8.5","5.0","7.0",[108,109,91,4,110],"announcement-bar","countdown-timer","sticky-bar","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flightweight-high-performance-sticky-bar.zip",{"slug":113,"name":114,"version":115,"author":116,"author_profile":117,"description":118,"short_description":119,"active_installs":11,"downloaded":120,"rating":11,"num_ratings":11,"last_updated":22,"tested_up_to":104,"requires_at_least":15,"requires_php":121,"tags":122,"homepage":22,"download_link":126,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":76},"urban-insight-promobar","Urban Insight Promobar","1.4","Urban Insight","https:\u002F\u002Fprofiles.wordpress.org\u002Furbaninsight\u002F","\u003Cp>Urban Insight Promobar makes it easy to add an attractive and functional promobar to the top of your website. This dismissable announcement promobar displays HTML content and Dashicons on a customizable background color. Administrative users can schedule, enable, and reset the promobar display with intuitive plugin settings.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cp>The Urban Insight Promobar plugin comes with everything you need to create and manage your sitewide announcement:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Custom HTML content display\u003C\u002Fli>\n\u003Cli>WordPress Dashicons font icon selector\u003C\u002Fli>\n\u003Cli>Background color picker option\u003C\u002Fli>\n\u003Cli>Options to schedule promobar display with start\u002Fend date and time settings.\u003C\u002Fli>\n\u003Cli>User dismissal tracking with js-cookie\u003C\u002Fli>\n\u003Cli>Browser cookie expiration (set in days)\u003C\u002Fli>\n\u003Cli>Dismissal reset setting using roll browser cookie value\u003C\u002Fli>\n\u003Cli>Localhost development option\u003C\u002Fli>\n\u003C\u002Ful>\n","Urban Insight Promobar is a simple promobar plugin which allows you to customize a dismissable promobar at the top of your WordPress website.",3299,"5.6",[123,18,124,125,21],"announce","banner","promobar","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Furban-insight-promobar.1.4.zip",{"attackSurface":128,"codeSignals":153,"taintFlows":166,"riskAssessment":193,"analyzedAt":199},{"hooks":129,"ajaxHandlers":149,"restRoutes":150,"shortcodes":151,"cronEvents":152,"entryPointCount":11,"unprotectedCount":11},[130,136,141,145],{"type":131,"name":132,"callback":133,"file":134,"line":135},"action","admin_menu","create_setting_menu","includes\\class-promobar-admin.php",24,{"type":131,"name":137,"callback":138,"file":139,"line":140},"wp_enqueue_scripts","promobar_scripts_front","promotion-bar.php",79,{"type":131,"name":142,"callback":143,"file":139,"line":144},"wp_head","promobar_show",82,{"type":131,"name":146,"callback":147,"file":139,"line":148},"plugins_loaded","promobar_get_instance",130,[],[],[],[],{"dangerousFunctions":154,"sqlUsage":155,"outputEscaping":157,"fileOperations":11,"externalRequests":11,"nonceChecks":159,"capabilityChecks":11,"bundledLibraries":165},[],{"prepared":11,"raw":11,"locations":156},[],{"escaped":158,"rawEcho":159,"locations":160},11,1,[161],{"file":162,"line":163,"context":164},"includes\\admin-setting-page.php",45,"raw output",[],[167],{"entryPoint":168,"graph":169,"unsanitizedCount":11,"severity":192},"\u003Cadmin-setting-page> (includes\\admin-setting-page.php:0)",{"nodes":170,"edges":188},[171,176,182,184],{"id":172,"type":173,"label":174,"file":162,"line":175},"n0","source","$_POST (x4)",14,{"id":177,"type":178,"label":179,"file":162,"line":180,"wp_function":181},"n1","sink","update_option() [Settings Manipulation]",19,"update_option",{"id":183,"type":173,"label":174,"file":162,"line":175},"n2",{"id":185,"type":178,"label":186,"file":162,"line":163,"wp_function":187},"n3","echo() [XSS]","echo",[189,191],{"from":172,"to":177,"sanitized":190},true,{"from":183,"to":185,"sanitized":190},"low",{"summary":194,"deductions":195},"The static analysis of the \"promotion-bar\" plugin version 1.3.0 indicates a generally strong security posture.  The plugin demonstrates good practices by having zero unprotected entry points, utilizing prepared statements for all SQL queries, and performing output escaping on the vast majority of its outputs.  The presence of a nonce check also suggests an awareness of common WordPress security vulnerabilities.\n\nWhile the static analysis reveals no critical or high-severity issues in taint flows and a complete absence of known vulnerabilities in its history, there is a notable area of concern: the lack of capability checks on any entry points. Although the current attack surface is zero, if any new functionality were added that introduced entry points without proper authorization checks, it could lead to security risks.  The absence of past vulnerabilities is a positive sign, suggesting careful development, but it doesn't guarantee future immunity.  Overall, the plugin is well-secured in its current iteration, but the potential for future risk exists if new entry points are not adequately secured.\n\nIn conclusion, \"promotion-bar\" v1.3.0 exhibits several strengths, including secure SQL handling and output sanitization. The zero known CVEs and lack of critical taint flows are excellent indicators. However, the absence of capability checks on entry points, even with a current zero attack surface, represents a potential weakness that warrants attention for any future development.  It is a robust plugin as is, but vigilance for evolving security needs is recommended.",[196],{"reason":197,"points":198},"Capability checks missing on entry points",5,"2026-03-17T06:23:36.877Z",{"wat":201,"direct":212},{"assetPaths":202,"generatorPatterns":206,"scriptPaths":207,"versionParams":208},[203,204,205],"\u002Fwp-content\u002Fplugins\u002Fpromotion-bar\u002Fcss\u002Fwp-promotion.css","\u002Fwp-content\u002Fplugins\u002Fpromotion-bar\u002Fcss\u002Ffont-awesome.css","\u002Fwp-content\u002Fplugins\u002Fpromotion-bar\u002Fjs\u002Fwp-promotion.js",[],[205],[209,210,211],"wp-promotion.css?ver=","font-awesome.css?ver=","wp-promotion.js?ver=",{"cssClasses":213,"htmlComments":216,"htmlAttributes":217,"restEndpoints":220,"jsGlobals":221,"shortcodeOutput":222},[214,215],"fa","fa-times",[],[218,219],"id=\"promobar_bar\"","id=\"close_promobar_bar\"",[],[],[]]