[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fN1lJFCF9X7RkGVjf3N5h7hyVuMEz5QDGWHXNLX_9f0w":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":40,"analysis":139,"fingerprints":212},"pwd-theme-switcher","PWD Theme Switcher","1.2.2","NicolasKulka","https:\u002F\u002Fprofiles.wordpress.org\u002Fnicolaskulka\u002F","\u003Ch4>English\u003C\u002Fh4>\n\u003Cp>Change theme to see your changes without saving it just for your session\u003C\u002Fp>\n\u003Cp>If you love the plugin, please consider rating it and clicking on “it works” button.\u003C\u002Fp>\n\u003Ch4>Français\u003C\u002Fh4>\n\u003Cp>Switcher facilement de thème pour voir vos modifications sans le changer en backoffice et l’enregistrer.\u003C\u002Fp>\n\u003Cp>Si vous aimez le plugin, laisser une évaluation et cliquer sur ​​le bouton «it works».\u003C\u002Fp>\n\u003Ch4>Localization\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>French\u003C\u002Fli>\n\u003Cli>English\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>My Links\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Twitter @\u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fplateformewp\" rel=\"nofollow ugc\">plateformewp\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Facebook \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fplateformewpdigital\" rel=\"nofollow ugc\">Plateforme WP Digital\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Google+ \u003Ca href=\"https:\u002F\u002Fplus.google.com\u002Fu\u002F0\u002F101743421589257173603\u002F\" rel=\"nofollow ugc\">Plateforme WP Digital\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Twitter @\u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FKulkaNicolas\" rel=\"nofollow ugc\">KulkaNicolas\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Google+ \u003Ca href=\"https:\u002F\u002Fplus.google.com\u002Fu\u002F0\u002F105181416749428983955\u002F\" rel=\"nofollow ugc\">Nicolas Kulka\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.plateformewpdigital.fr\u002F\" rel=\"nofollow ugc\">Plateforme WP digital\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","Change theme to see your changes without saving it just for your session.",60,4352,100,3,"2023-08-24T08:06:00.000Z","6.3.8","3.2","",[20,21,22,23,24],"changer","presentation","preview","preview-theme","selector","http:\u002F\u002Fwww.plateformewpdigital.fr\u002Fplugins\u002Fpwd-theme-switcher","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpwd-theme-switcher.1.2.2.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":35,"avg_security_score":36,"avg_patch_time_days":37,"trust_score":38,"computed_at":39},"nicolaskulka",9,149090,95,1444,76,"2026-04-04T03:50:39.664Z",[41,60,79,96,114],{"slug":42,"name":43,"version":44,"author":45,"author_profile":46,"description":47,"short_description":48,"active_installs":13,"downloaded":49,"rating":50,"num_ratings":14,"last_updated":51,"tested_up_to":52,"requires_at_least":53,"requires_php":18,"tags":54,"homepage":55,"download_link":56,"security_score":57,"vuln_count":58,"unpatched_count":58,"last_vuln_date":59,"fetched_at":30},"theme-switcher-reloaded","Theme Switcher Reloaded","1.1","undoIT","https:\u002F\u002Fprofiles.wordpress.org\u002Fundoit\u002F","\u003Cp>Theme Switcher Reloaded is sponsored by Themebot for use with the demos in the \u003Ca href=\"http:\u002F\u002Fthemebot.com\u002Fwordpress-themes\" title=\"WordPress Themes\" rel=\"nofollow ugc\">WordPress Themes\u003C\u002Fa> section on themebot.com. Coding was done by kingler of \u003Ca href=\"http:\u002F\u002Fcode.72pines.org\u002F\" title=\"72pines\" rel=\"nofollow ugc\">72pines\u003C\u002Fa>. This is an updated version of the venerable themeswitcher by Ryan Boren and Theme Switcher Widget by Jared Bangs. Theme Switcher Reloaded adds new features and enhancements.\u003C\u002Fp>\n","Theme Switcher Reloaded is an updated and much improved version of the original Theme Switcher. Comes with a widget and can also switch themes via URL …",26275,46,"2014-10-20T22:20:00.000Z","4.0.38","2.9.2",[20,21,22,23,24],"http:\u002F\u002Fthemebot.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftheme-switcher-reloaded.1.1.zip",63,1,"2025-08-25 00:00:00",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":68,"downloaded":69,"rating":13,"num_ratings":58,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":18,"tags":73,"homepage":77,"download_link":78,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"theme-preview","Theme Preview","1.4","Dougal Campbell","https:\u002F\u002Fprofiles.wordpress.org\u002Fdougal\u002F","\u003Cp>By default, the only way to see how a new theme looks on your site is to\u003Cbr \u002F>\nactivate it, making it visible to everyone who visits. With this plugin, it\u003Cbr \u002F>\nis possible to view how a new theme looks without activating it.\u003C\u002Fp>\n\u003Ch3>TODO\u003C\u002Fh3>\n\u003Cp>Possible future enhancements:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Add an options screen.\u003C\u002Fli>\n\u003Cli>Allow choice of theme to preview from a known list of installed themes.\u003C\u002Fli>\n\u003Cli>Provide persistent previews by setting a cookie.\u003C\u002Fli>\n\u003Cli>Restrict preview ability by user Roles\u002FCapabilities.\u003C\u002Fli>\n\u003Cli>Child-theme friendliness.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Notes\u003C\u002Fh3>\n\u003Cp>May not work properly with child themes. This is because it will not be able\u003Cbr \u002F>\nto inherit from the parent theme as it normally would.\u003C\u002Fp>\n","Allows you test how a theme looks on your site without activating it.",300,41450,"2016-02-17T16:20:00.000Z","4.4.34","2.6.0",[74,21,22,75,76],"css","testing","themes","http:\u002F\u002Fdougal.gunters.org\u002Fplugins\u002Ftheme-preview","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftheme-preview.1.4.zip",{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":87,"downloaded":88,"rating":28,"num_ratings":28,"last_updated":89,"tested_up_to":90,"requires_at_least":91,"requires_php":18,"tags":92,"homepage":94,"download_link":95,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"preview-themes","Preview Themes","0.1","Abinav Thakuri","https:\u002F\u002Fprofiles.wordpress.org\u002Fabinav\u002F","\u003Cp>The Preview Themes plugin allows wordpress users to preview all installed themes without having to activate and deactivate them simultaneously.An updated version is likely to come up soon as this is the initial development release.\u003C\u002Fp>\n\u003Cp>Note:The docs will be available at http:\u002F\u002Fdreamsdeveloped.com pretty soon.\u003C\u002Fp>\n","The Preview Themes plugin allows wordpress users to preview all installed themes without having to activate and deactivate them simultaneously.",10,4103,"2011-06-24T11:52:00.000Z","3.1.4","2.5.1",[93,23,61,76],"layout","http:\u002F\u002Fabinavsblog.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpreview-themes.zip",{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":87,"downloaded":104,"rating":28,"num_ratings":28,"last_updated":105,"tested_up_to":106,"requires_at_least":107,"requires_php":18,"tags":108,"homepage":112,"download_link":113,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wave-your-theme","Wave Your Theme","1.2.1","qiqiboy","https:\u002F\u002Fprofiles.wordpress.org\u002Fqiqiboy\u002F","\u003Cp>*A cool, beautiful method that allows themes to be previewed without activation.\u003Cbr \u002F>\n*It will generate a button on the page link, when clicked, will Xianchu theme switch panel\u003Cbr \u002F>\n*Ajax way through to get all of your theme, and then displayed on the screen, then you can switch the theme of free choice. \u003Cbr \u002F>\n*After the switch there will be cookie records. \u003Cbr \u002F>\n*You can customize the cookie is valid. \u003Cbr \u002F>\n*You can also customize the display of the link button location.\u003C\u002Fp>\n\u003Cp>*If you have questions, Please contact [imqiqiboy#gmail.com] or leave a message in my blog(http:\u002F\u002Fwww.qiqiboy.com).\u003Cbr \u002F>\n*这是一种很酷的，奇妙的主题切换预览方式\u003Cbr \u002F>\n*插件将会在你的页面上生成一个按钮链接（你也可以自定义，不用插件自己生成），点击后将会弹出一个面板\u003Cbr \u002F>\n*通过ajax请求，插件会获取到你当前主机上的所有可用主题，然后按顺序将这些主题显示在弹出的面板上。\u003Cbr \u002F>\n*你此时可以点击任意主题，就可以切换到你所选择的主题了。当你点击时，插件又会发送一条ajax请求，主题设置切换好后，页面将自动刷新，然后你就能看到一个全新的主题了\u003Cbr \u002F>\n*主题切换会记录cookie，你可以自定义cookie的有效期，在有效期内将会一直显示所切换的主题\u003Cbr \u002F>\n*你也可以自定义按钮连接的显示位置、显示样式。\u003Cbr \u002F>\n*提供技术支持及咨询，联系邮件请发【imqiqiboy#gmail.com】或者在我博客【http:\u002F\u002Fwww.qiqiboy.com】留言\u003C\u002Fp>\n\u003Cp>注意：请最好不要勾选“自定义显示位置”，那样会很麻烦，容易出错。一切都交给插件吧！\u003Cbr \u002F>\n你可以直接将要作为按钮的图片放到插件的“img”目录中，然后在后台就可以选择你添加的这张图片了。\u003Cbr \u002F>\n但是还要注意，如果你选择的图片的宽度和高度不是默认的22，那么你还需要在图片的宽度和高度选项中填写你的这张图片的宽度和高度，否则图片将无法完整显示。\u003C\u002Fp>\n","A cool, beautiful method that allows themes to be previewed without activation. It will generate a button on the page link, when clicked, will show th …",3243,"2010-09-24T11:06:00.000Z","3.0.5","2.7",[109,23,110,111],"ajax","switch-theme","theme","http:\u002F\u002Fwww.qiqiboy.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwave-your-theme.1.2.1.zip",{"slug":115,"name":116,"version":117,"author":118,"author_profile":119,"description":120,"short_description":121,"active_installs":122,"downloaded":123,"rating":124,"num_ratings":125,"last_updated":126,"tested_up_to":127,"requires_at_least":128,"requires_php":18,"tags":129,"homepage":134,"download_link":135,"security_score":136,"vuln_count":137,"unpatched_count":28,"last_vuln_date":138,"fetched_at":30},"mw-wp-form","MW WP Form","5.1.0","Takashi Kitajima","https:\u002F\u002Fprofiles.wordpress.org\u002Finc2734\u002F","\u003Cp>\u003Cstrong>This plugin currently has only the minimum required maintenance releases.\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Cstrong>Main maintainer has been handed over from @inc2734 to @websoudan.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>MW WP Form can create mail form with a confirmation screen using shortcode.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Form created using shortcodes\u003C\u002Fli>\n\u003Cli>Using confirmation page is possible.\u003C\u002Fli>\n\u003Cli>The page changes by the same URL or individual URL are possible.\u003C\u002Fli>\n\u003Cli>Many validation rules\u003C\u002Fli>\n\u003Cli>Saving inquiry data is possible.\u003C\u002Fli>\n\u003Cli>Displaying Chart using saved inquiry data is possible.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Official\u003C\u002Fh4>\n\u003Cp>https:\u002F\u002Fmw-wp-form.web-soudan.co.jp\u003C\u002Fp>\n\u003Ch4>GitHub\u003C\u002Fh4>\n\u003Cp>https:\u002F\u002Fgithub.com\u002Fweb-soudan\u002Fmw-wp-form\u003C\u002Fp>\n\u003Ch4>The following third-party resources\u003C\u002Fh4>\n\u003Cp>Google Charts\u003Cbr \u002F>\nSource: https:\u002F\u002Fdevelopers.google.com\u002Fchart\u002F\u003C\u002Fp>\n\u003Ch4>Contributors\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002F2inc.org\" rel=\"nofollow ugc\">Takashi Kitajima\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Finc2734\" rel=\"nofollow ugc\">inc2734\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwebcre-archive.com\" rel=\"nofollow ugc\">Ryujiro Yamamoto\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fryu263\" rel=\"nofollow ugc\">ryu263\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fkee-non.com\" rel=\"nofollow ugc\">Tsujimoto Tomoyuki\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Ftomothumb\" rel=\"nofollow ugc\">tomothumb\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>[Naoyuki Ohata] ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fnanniku\" rel=\"nofollow ugc\">nanniku\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmt8.biz\u002F\" rel=\"nofollow ugc\">Kazuto Takeshita\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fmt8biz\u002F\" rel=\"nofollow ugc\">moto hachi\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.next-season.net\u002F\" rel=\"nofollow ugc\">Atsushi Ando\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fnext-season\u002F\" rel=\"nofollow ugc\">NExt-Season\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fvisualive.jp\u002F\" rel=\"nofollow ugc\">Kazuki Tomiyasu\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fkuck1u\u002F\" rel=\"nofollow ugc\">KUCKLU\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmypacecreator.net\u002F\" rel=\"nofollow ugc\">Kei Nomura\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fmypacecreator\u002F\" rel=\"nofollow ugc\">mypacecreator\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fmh35\" rel=\"nofollow ugc\">mh35\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fnojimage\" rel=\"nofollow ugc\">Takashi Nojima\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fherikutu\" rel=\"nofollow ugc\">herikutu\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftsucharoku\" rel=\"nofollow ugc\">tsucharoku\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ft-hamano\" rel=\"nofollow ugc\">Tetsuaki Hamano\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fwildworks\u002F\" rel=\"nofollow ugc\">t-hamano\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmusus\" rel=\"nofollow ugc\">Susumu Seino\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fmusus\u002F\" rel=\"nofollow ugc\">Susumu Seino\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Flikr\" rel=\"nofollow ugc\">Yosuke Onoue\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Flikr\u002F\" rel=\"nofollow ugc\">likr\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fyudai524\" rel=\"nofollow ugc\">Yudai Konishi\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fyudai524\u002F\" rel=\"nofollow ugc\">Yudai Konishi\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fnoldorinfo\" rel=\"nofollow ugc\">takekoshi\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fnoldorinfo\u002F\" rel=\"nofollow ugc\">takekoshi\u003C\u002Fa> )\u003C\u002Fli>\n\u003C\u002Ful>\n","MW WP Form is shortcode base contact form plugin. This plugin have many features. For example you can use many validation rules, inquiry data saving,  …",200000,1771027,86,22,"2024-03-13T02:48:00.000Z","6.4.8","6.0",[130,131,132,22,133],"confirm","form","mail","shortcode","https:\u002F\u002Fmw-wp-form.web-soudan.co.jp","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmw-wp-form.5.1.0.zip",81,5,"2024-01-31 00:00:00",{"attackSurface":140,"codeSignals":168,"taintFlows":175,"riskAssessment":202,"analyzedAt":211},{"hooks":141,"ajaxHandlers":164,"restRoutes":165,"shortcodes":166,"cronEvents":167,"entryPointCount":28,"unprotectedCount":28},[142,147,149,153,156,159],{"type":143,"name":144,"callback":144,"priority":145,"file":146,"line":34},"action","admin_bar_menu",1000,"classes\\plugin.php",{"type":143,"name":148,"callback":148,"file":146,"line":87},"init",{"type":150,"name":151,"callback":151,"file":146,"line":152},"filter","current_theme",13,{"type":150,"name":154,"callback":154,"file":146,"line":155},"template",14,{"type":150,"name":157,"callback":157,"file":146,"line":158},"stylesheet",15,{"type":143,"name":160,"callback":161,"file":162,"line":163},"plugins_loaded","init_pwd_theme_switcher_plugin","pwd-theme-switcher.php",38,[],[],[],[],{"dangerousFunctions":169,"sqlUsage":170,"outputEscaping":172,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":174},[],{"prepared":28,"raw":28,"locations":171},[],{"escaped":28,"rawEcho":28,"locations":173},[],[],[176,194],{"entryPoint":177,"graph":178,"unsanitizedCount":58,"severity":193},"init (classes\\plugin.php:26)",{"nodes":179,"edges":190},[180,185],{"id":181,"type":182,"label":183,"file":146,"line":184},"n0","source","$_SERVER['HTTP_HOST']",40,{"id":186,"type":187,"label":188,"file":146,"line":184,"wp_function":189},"n1","sink","wp_redirect() [Open Redirect]","wp_redirect",[191],{"from":181,"to":186,"sanitized":192},false,"medium",{"entryPoint":195,"graph":196,"unsanitizedCount":58,"severity":193},"\u003Cplugin> (classes\\plugin.php:0)",{"nodes":197,"edges":200},[198,199],{"id":181,"type":182,"label":183,"file":146,"line":184},{"id":186,"type":187,"label":188,"file":146,"line":184,"wp_function":189},[201],{"from":181,"to":186,"sanitized":192},{"summary":203,"deductions":204},"The static analysis of the \"pwd-theme-switcher\" plugin v1.2.2 reveals a remarkably clean codebase with no identified entry points such as AJAX handlers, REST API routes, shortcodes, or cron events that are exposed without authentication.  Furthermore, the code adheres to best practices by not utilizing dangerous functions, performing all SQL queries using prepared statements, and ensuring all output is properly escaped.  The absence of file operations and external HTTP requests further reduces the attack surface.\n\nDespite the strong static analysis results, there are two identified flows with unsanitized paths. While the taint analysis did not flag these as critical or high severity, the presence of unsanitized paths is a potential concern as it indicates a weakness where user-supplied input could potentially be manipulated to traverse directory structures or execute unintended commands.  The vulnerability history is entirely clear, with no recorded CVEs, which is a positive indicator of the plugin's overall security maturity.  However, this pristine history, combined with the identified unsanitized paths, suggests that while the plugin may not have been targeted or discovered with vulnerabilities yet, the potential for such issues remains due to the identified code weaknesses.\n\nIn conclusion, \"pwd-theme-switcher\" v1.2.2 demonstrates a high level of security awareness in its development, particularly in its minimal attack surface and secure handling of database operations and output.  The primary concern lies with the two identified unsanitized path flows, which, despite not currently posing a critical risk, represent a technical debt that should be addressed to further harden the plugin against potential future exploits.  The lack of any historical vulnerabilities is a strong point, but it should not lead to complacency given the discovered code signals.",[205,207,209],{"reason":206,"points":87},"Unsanitized path flows found",{"reason":208,"points":137},"No nonce checks present",{"reason":210,"points":137},"No capability checks present","2026-03-16T21:48:54.227Z",{"wat":213,"direct":218},{"assetPaths":214,"generatorPatterns":215,"scriptPaths":216,"versionParams":217},[],[],[],[],{"cssClasses":219,"htmlComments":221,"htmlAttributes":222,"restEndpoints":223,"jsGlobals":224,"shortcodeOutput":225},[220],"theme-switcher",[],[],[],[],[]]