[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fN8N0KXENA96wf4YvNeUA_meoEDecOWmTph7DzWFAbnU":3,"$fEq13QdBHPHiORBYeiJ1Agouli2VazZNvTVjEsVF3yRM":235,"$fps9t-NRTppIUyNNb8RVHUTxRP3ciLfMH05VHL--n8HA":240},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":22,"download_link":23,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26,"discovery_status":27,"vulnerabilities":28,"developer":29,"crawl_stats":25,"alternatives":35,"analysis":122,"fingerprints":211},"quotepro-office-widget","Quotepro Office Widget","2.0.0","quotepro","https:\u002F\u002Fprofiles.wordpress.org\u002Fquotepro\u002F","\u003Cp>Adds the ability to locate offices directly from your WordPress site.\u003C\u002Fp>\n\u003Cp>Our office locator is added unobtrusively to your site through the use of the WordPress Widgets API, ensuring an\u003Cbr \u002F>\neasy deployment and optimal experience for your customers and also your website developers.\u003C\u002Fp>\n","Adds the ability to locate offices directly from your wordpress site",0,3561,"2018-04-02T14:26:00.000Z","4.9.29","3.3.1","",[18,19,20,7,21],"colorbox","insurance","office","widget","http:\u002F\u002Faq3.processmyquote.com\u002FContent\u002FWidget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fquotepro-office-widget.1.0.0.zip",85,null,"2026-07-22T17:31:50.256Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":24,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},3,40,30,84,"2026-08-29T07:03:00.007Z",[36,50,61,82,103],{"slug":37,"name":38,"version":39,"author":7,"author_profile":8,"description":40,"short_description":41,"active_installs":32,"downloaded":42,"rating":43,"num_ratings":44,"last_updated":45,"tested_up_to":46,"requires_at_least":15,"requires_php":16,"tags":47,"homepage":48,"download_link":49,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"quotepro-insurance-widget","Quotepro Insurance Widget","2.0.9","\u003Cp>Adds the ability to provide your customers with realtime comparison insurance quotes directly from your WordPress site.\u003C\u002Fp>\n\u003Cp>Our insurance rating engine is added unobtrusively to your site through the use of the WordPress Widgets API, ensuring an\u003Cbr \u002F>\neasy deployment and optimal experience for your customers and also your website developers.\u003C\u002Fp>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cp>Our insurance widget currently supports English and Spanish\u003C\u002Fp>\n","Adds the ability to provide your customers with realtime comparison insurance quotes directly from your wordpress site",5124,100,1,"2024-05-30T16:00:00.000Z","6.5.8",[18,19,7,21],"https:\u002F\u002Fgithub.com\u002Fquotepro\u002Fquotepro-insurance-widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fquotepro-insurance-widget.2.0.9.zip",{"slug":51,"name":52,"version":6,"author":7,"author_profile":8,"description":53,"short_description":54,"active_installs":55,"downloaded":56,"rating":11,"num_ratings":11,"last_updated":57,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":58,"homepage":22,"download_link":60,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"quotepro-payment-widget","Quotepro Payment Widget","\u003Cp>Adds the ability to accept monthly insurance, loan, rent or utility payments directly from your WordPress site. We offer payment integration with numerous\u003Cbr \u002F>\npremium finance, agency or dealer management systems and utility payment providers. Additionally, we work with a number of insurance carriers, allowing you to offer the ability to accept direct bill payments as well.\u003C\u002Fp>\n\u003Cp>Our payment portal is added unobtrusively to your site through the use of the WordPress Widgets API, ensuring an\u003Cbr \u002F>\neasy deployment and optimal experience for your customers and also your website developers.\u003C\u002Fp>\n","Adds the ability to accept monthy insurance, loan, rent or utility payments directly from your wordpress site",10,4136,"2018-04-02T15:01:00.000Z",[18,19,59,7,21],"payments","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fquotepro-payment-widget.1.0.0.zip",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":55,"downloaded":69,"rating":70,"num_ratings":71,"last_updated":72,"tested_up_to":73,"requires_at_least":74,"requires_php":16,"tags":75,"homepage":79,"download_link":80,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":81},"office-hours","Office Hours","1.1.1","JohnnyPea","https:\u002F\u002Fprofiles.wordpress.org\u002Fjohnnypea\u002F","\u003Cp>Simple plugin for showing work schedule and message whether we work today or not.\u003C\u002Fp>\n\u003Cp>Thanks the \u003Ca href=\"http:\u002F\u002Fwp.sk\u002F\" rel=\"nofollow ugc\">Slovak WordPress community\u003C\u002Fa> and \u003Ca href=\"http:\u002F\u002Fwww.webikon.sk\u002F\" rel=\"nofollow ugc\">webikon.sk\u003C\u002Fa> for the support. You can find free support for WordPress related stuff on \u003Ca href=\"http:\u002F\u002Fwww.techforum.sk\u002F\" rel=\"nofollow ugc\">Techforum.sk\u003C\u002Fa>.\u003C\u002Fp>\n","Work Schedule - Time Table.",3050,80,2,"2013-02-19T18:24:00.000Z","3.5.2","3.1",[62,76,77,78,21],"openning-hours","time","time-table","http:\u002F\u002Fwp.sk\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foffice-hours.zip","2026-04-06T09:54:40.288Z",{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":55,"downloaded":90,"rating":11,"num_ratings":11,"last_updated":91,"tested_up_to":92,"requires_at_least":74,"requires_php":16,"tags":93,"homepage":101,"download_link":102,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"upcoming-ticketsolve-shows","Ticketsolve Shows","1.1","junap","https:\u002F\u002Fprofiles.wordpress.org\u002Fjunap\u002F","\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.ticketsolve.com\u002F\" rel=\"nofollow ugc\">Ticketsolve\u003C\u002Fa> is an online box office system for selling event tickets. This plugin parses the public XML feed from any account on that system and produces a simple list of upcoming shows that you can display in your Worpdress blog.\u003C\u002Fp>\n","Loads future shows from your Ticketsolve box office server.",1820,"2011-12-20T19:33:00.000Z","3.1.4",[94,95,96,97,98,99,100,21],"box-office","commerce","events","hcalendar","microformats","tickets","ticketsolve","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fupcoming-ticketsolve-shows\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fupcoming-ticketsolve-shows.zip",{"slug":104,"name":105,"version":106,"author":107,"author_profile":108,"description":109,"short_description":110,"active_installs":55,"downloaded":111,"rating":43,"num_ratings":112,"last_updated":113,"tested_up_to":114,"requires_at_least":115,"requires_php":16,"tags":116,"homepage":16,"download_link":121,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"xtcz-top-box-office","XTCZ Top Box Office","2.0","Harish Kumar","https:\u002F\u002Fprofiles.wordpress.org\u002Fhkp1990\u002F","\u003Cp>XTCZ Top Box office provides real time ranking of the weekend box office and always keep users upto date with latest box office results. The data updates automatically every week, no need to do any extra work.\u003C\u002Fp>\n\u003Ch4>It has\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Real time Box Office result.\u003C\u002Fli>\n\u003Cli>Customization options\u003C\u002Fli>\n\u003Cli>Ready shortcode for post, pages or other post type and for wordpress theme\u003C\u002Fli>\n\u003Cli>Ready widget\u003C\u002Fli>\n\u003Cli>Bollywood Box Office (shortcode and widget)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Required settings\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>After plugin installation, go to \u003Ccode>WordPress Dashboard > Settings > XTCZ Box Office\u003C\u002Fcode> and save required configuration here.\u003Cbr \u002F>\n\u003Cstrong>Rottentomatoes Key\u003C\u002Fstrong> is required to work this plugin. You can Register Rottentomatoes key from \u003Ca href=\"http:\u002F\u002Fdeveloper.rottentomatoes.com\u002Fmember\u002Fregister\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>For Bollywood box office no any configration required. And \u003Cstrong>Rottentomatoes Key\u003C\u002Fstrong> is not required for bollywood box office resutls.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>ShortCode\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Use \u003Ccode>[xtcz_topboxoffice]\u003C\u002Fcode> shortcode to display top box office in post, pages or other custom post type.\u003C\u002Fli>\n\u003Cli>Use \u003Ccode>\u003C?php echo do_shortcode('[xtcz_topboxoffice]'); ?>\u003C\u002Fcode> php code to display top box office movie list into wordpress theme file.\u003C\u002Fli>\n\u003Cli>Use \u003Ccode>[xtcz_bollywood_boxoffice]\u003C\u002Fcode> shortcode for bollywood box office.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Optional parameters\u003C\u002Fh4>\n\u003Cp>You can also use optional parameters to override saved setting options.\u003C\u002Fp>\n\u003Cp>For example:\u003Cbr \u002F>\n    [xtcz_topboxoffice theme=”standard” img_width=”25″]\u003C\u002Fp>\n\u003Ch4>List of optional parameters\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ccode>theme\u003C\u002Fcode> : ‘fullview’ or ‘standard’ .\u003C\u002Fli>\n\u003Cli>\u003Ccode>limit\u003C\u002Fcode> : Numeric value to show number of movies in the top box office list.\u003C\u002Fli>\n\u003Cli>\u003Ccode>img\u003C\u002Fcode> : Boolean value ( 1 or 0 ) to show\u002Fhide thumbnail image.\u003C\u002Fli>\n\u003Cli>\u003Ccode>img_width\u003C\u002Fcode> : Numeric value ( 1 or 0 ) to set width of thumbnail image.\u003C\u002Fli>\n\u003Cli>\u003Ccode>mpaa_rating\u003C\u002Fcode> : Boolean value ( 1 or 0 ) to show\u002Fhide movie’s Mpaa rating.\u003C\u002Fli>\n\u003Cli>\u003Ccode>audience_score\u003C\u002Fcode> : Boolean value ( 1 or 0 ) to show\u002Fhide movie’s Audience Score.\u003C\u002Fli>\n\u003Cli>\u003Ccode>release_dates\u003C\u002Fcode> : Boolean value ( 1 or 0 ) to show\u002Fhide movie’s Release dates.\u003C\u002Fli>\n\u003Cli>\u003Ccode>runtime\u003C\u002Fcode> : Boolean value ( 1 or 0 ) to show\u002Fhide movie’s Runtime.\u003C\u002Fli>\n\u003Cli>\u003Ccode>cast\u003C\u002Fcode> : Boolean value ( 1 or 0 ) to show\u002Fhide movie’s Cast.\u003C\u002Fli>\n\u003Cli>\u003Ccode>synopsis\u003C\u002Fcode> : Boolean value ( 1 or 0 ) to show\u002Fhide movie’s synopsis.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For latest news, box office updates, movie reviews, photos, videos, and more, visit \u003Ca href=\"http:\u002F\u002Fwww.xtcz.net\u002F\" title=\"xtcz.net\" rel=\"nofollow ugc\">xtcz.net\u003C\u002Fa>!\u003C\u002Fp>\n","Real time Weekend Box Office results on your blog.",2646,4,"2015-08-26T13:29:00.000Z","4.3.34","3.6",[117,94,118,119,120],"bollywood","box-office-widget","hollywood","movies","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fxtcz-top-box-office.2.0.zip",{"attackSurface":123,"codeSignals":164,"taintFlows":196,"riskAssessment":197,"analyzedAt":210},{"hooks":124,"ajaxHandlers":160,"restRoutes":161,"shortcodes":162,"cronEvents":163,"entryPointCount":11,"unprotectedCount":11},[125,131,135,139,143,146,150,153,156],{"type":126,"name":127,"callback":128,"file":129,"line":130},"action","plugins_loaded","widget_textdomain","plugin.php",43,{"type":126,"name":132,"callback":133,"file":129,"line":134},"admin_print_styles","register_admin_styles",60,{"type":126,"name":136,"callback":137,"file":129,"line":138},"admin_enqueue_scripts","register_admin_scripts",61,{"type":126,"name":140,"callback":141,"file":129,"line":142},"wp_enqueue_scripts","register_widget_styles",64,{"type":126,"name":140,"callback":144,"file":129,"line":145},"register_widget_scripts",65,{"type":126,"name":147,"callback":148,"file":129,"line":149},"save_post","flush_widget_cache",68,{"type":126,"name":151,"callback":148,"file":129,"line":152},"deleted_post",69,{"type":126,"name":154,"callback":148,"file":129,"line":155},"switch_theme",70,{"type":126,"name":157,"callback":158,"file":129,"line":159},"widgets_init","anonymous",261,[],[],[],[],{"dangerousFunctions":165,"sqlUsage":169,"outputEscaping":171,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":195},[166],{"fn":167,"file":129,"line":159,"context":168},"create_function","add_action( 'widgets_init', create_function( '', 'register_widget(\"Quotepro_Office_Widget\");' ) );",{"prepared":11,"raw":11,"locations":170},[],{"escaped":11,"rawEcho":172,"locations":173},12,[174,177,179,181,182,183,185,187,188,190,192,194],{"file":129,"line":175,"context":176},109,"raw output",{"file":129,"line":178,"context":176},131,{"file":180,"line":71,"context":176},"views\u002Fadmin.php",{"file":180,"line":30,"context":176},{"file":180,"line":30,"context":176},{"file":180,"line":184,"context":176},7,{"file":180,"line":186,"context":176},8,{"file":180,"line":186,"context":176},{"file":180,"line":189,"context":176},15,{"file":180,"line":191,"context":176},19,{"file":193,"line":44,"context":176},"views\u002Fwidget.php",{"file":193,"line":44,"context":176},[],[],{"summary":198,"deductions":199},"The \"quotepro-office-widget\" v2.0.0 plugin exhibits a mixed security posture. On one hand, the static analysis reveals a minimal attack surface with no identified AJAX handlers, REST API routes, shortcodes, or cron events that lack proper authentication or permission checks. Furthermore, all SQL queries are performed using prepared statements, and there are no file operations or external HTTP requests, which are positive indicators of secure coding practices in those areas. The absence of known vulnerabilities in its history is also a strong point, suggesting a history of stable and potentially well-maintained code.\n\nHowever, significant concerns arise from the code signals. The presence of the `create_function` is a critical red flag, as it can lead to arbitrary code execution if used with unsanitized input. Additionally, a complete lack of output escaping on all 12 identified output points is a major security weakness, opening the door to Cross-Site Scripting (XSS) vulnerabilities. The absence of nonce checks and capability checks further exacerbates these risks, especially if any of the identified output points are reachable through user-supplied input, even if the attack surface appears limited in traditional entry points.\n\nIn conclusion, while the plugin boasts a clean vulnerability history and a seemingly small attack surface, the identified code-level weaknesses, particularly the use of `create_function` and the pervasive lack of output escaping, introduce substantial security risks. These issues need immediate attention to mitigate potential XSS and arbitrary code execution vulnerabilities, despite the plugin's strengths in other security aspects.",[200,203,205,208],{"reason":201,"points":202},"Unescaped output detected",20,{"reason":204,"points":189},"Dangerous function 'create_function' detected",{"reason":206,"points":207},"Missing nonce checks",5,{"reason":209,"points":207},"Missing capability checks","2026-04-16T14:26:41.438Z",{"wat":212,"direct":226},{"assetPaths":213,"generatorPatterns":218,"scriptPaths":219,"versionParams":221},[214,215,216,217],"\u002Fwp-content\u002Fplugins\u002Fquotepro-office-widget\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fquotepro-office-widget\u002Fjs\u002Fadmin.js","\u002Fwp-content\u002Fplugins\u002Fquotepro-office-widget\u002Fcss\u002Fcolorbox.css","\u002Fwp-content\u002Fplugins\u002Fquotepro-office-widget\u002Fcss\u002Fwidget.css",[],[220],"https:\u002F\u002Fcdnjs.cloudflare.com\u002Fajax\u002Flibs\u002Fjquery.maskedinput\u002F1.4.1\u002Fjquery.maskedinput.min.js",[222,223,224,225],"quotepro-office-widget-admin-styles?ver=","quotepro-office-widget-admin-script?ver=","quotepro-office-widget-colorbox-styles?ver=","quotepro-office-widget-widget-styles?ver=",{"cssClasses":227,"htmlComments":229,"htmlAttributes":230,"restEndpoints":231,"jsGlobals":232,"shortcodeOutput":234},[228],"quotepro-office-widget-class",[],[],[],[233],"jQuery.fn.maskedinput",[],{"error":236,"url":237,"statusCode":238,"statusMessage":239,"message":239},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fquotepro-office-widget\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":44,"versions":241},[242],{"version":243,"download_url":23,"svn_tag_url":244,"released_at":25,"has_diff":245,"diff_files_changed":246,"diff_lines":25,"trac_diff_url":25,"vulnerabilities":247,"is_current":245},"1.0.0","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fquotepro-office-widget\u002Ftags\u002F1.0.0\u002F",false,[],[]]