[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fztNMT7mqvZtUuMwNJxAtl_W8U5zWLsUXsngRaGr0HqM":3,"$frqgXUfwaZC2ozIihWIWv3uyMgdfzSE5Ht5Nf5h0EMxw":218,"$f8waK9MrRM1byL5IIl0VRtgo3ou73JI0AmKG6PhTgilI":222},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":21,"download_link":22,"security_score":23,"vuln_count":11,"unpatched_count":11,"last_vuln_date":24,"fetched_at":25,"discovery_status":26,"vulnerabilities":27,"developer":28,"crawl_stats":24,"alternatives":34,"analysis":35,"fingerprints":175},"radio-unlock-code-calculator-for-m-v-serials","Radio Unlock Code Calculator For M & V Serials","1.0.0","Plasmatize Media LTD","https:\u002F\u002Fprofiles.wordpress.org\u002Fplasmatizemedia\u002F","\u003Cp>Car radio unlock code calculator for radio’s with serials starting M & V, offer your users an easy way to unlock there M & V serial code radio’s in seconds.\u003C\u002Fp>\n\u003Cp>(\u003Ca href=\"https:\u002F\u002Fplasmatizemedia.co.uk\u002Fmandvcalc\u002F\" rel=\"nofollow ugc\">Live Plugin Demo >\u003C\u002Fa>)\u003C\u002Fp>\n\u003Ch3>Add M & V Radio Unlock Code Calculator To Your Website In Less Than 60 seconds\u003C\u002Fh3>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F-ItqABW0x3E?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch4>Privacy notices\u003C\u002Fh4>\n\u003Cp>This plugin relies on 3rd party API access from (\u003Ca href=\"https:\u002F\u002Fwww.radiocodeking.co.uk\u002F\" rel=\"nofollow ugc\">Radio Code King\u003C\u002Fa>), this means when someone makes a lookup on your WordPress site, the Radio Code King API will be contacted, use of the Radio Code King API and plugin are subject to the terms and conditions \u002F privacy policy:\u003C\u002Fp>\n\u003Cp>(\u003Ca href=\"https:\u002F\u002Fwww.radiocodeking.co.uk\u002Fapi-terms-and-conditions\u002F\" rel=\"nofollow ugc\">Terms and Conditions\u003C\u002Fa>)\u003Cbr \u002F>\n(\u003Ca href=\"https:\u002F\u002Fwww.radiocodeking.co.uk\u002Fapi-privacy-policy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>)\u003C\u002Fp>\n","Car radio unlock code calculator for radio's with serials starting M & V, offer your users an easy way to unlock there M & V serial code  …",0,864,"2021-11-16T09:43:00.000Z","5.8.13","4.0","",[18,19,20],"radio-code-king","radio-unlock-code","radio-unlock-codes","https:\u002F\u002Fwww.radiocodeking.co.uk","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fradio-unlock-code-calculator-for-m-v-serials.1.0.0.zip",85,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":11,"avg_security_score":23,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},"plasmatizemedia",2,30,84,"2026-05-20T00:17:12.645Z",[],{"attackSurface":36,"codeSignals":68,"taintFlows":119,"riskAssessment":158,"analyzedAt":174},{"hooks":37,"ajaxHandlers":53,"restRoutes":61,"shortcodes":62,"cronEvents":67,"entryPointCount":43,"unprotectedCount":30},[38,44,48],{"type":39,"name":40,"callback":41,"file":42,"line":43},"action","admin_menu","rck_funlock_code","admin_area.php",3,{"type":39,"name":45,"callback":46,"file":42,"line":47},"admin_head","rck_funlock_code_admin_styles",4,{"type":39,"name":49,"callback":50,"file":51,"line":52},"wp_enqueue_scripts","radio_calc_m_v_plugin_assets","radio_code_calc_mv.php",33,[54,59],{"action":55,"nopriv":56,"callback":55,"hasNonce":57,"hasCapCheck":57,"file":51,"line":58},"rck_lookup_by_ser",true,false,64,{"action":55,"nopriv":57,"callback":55,"hasNonce":57,"hasCapCheck":57,"file":51,"line":60},65,[],[63],{"tag":64,"callback":64,"file":65,"line":66},"mandv_radiounlock_search","radio_code_calc_mv_shortcodes.php",6,[],{"dangerousFunctions":69,"sqlUsage":70,"outputEscaping":72,"fileOperations":117,"externalRequests":47,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":118},[],{"prepared":11,"raw":11,"locations":71},[],{"escaped":73,"rawEcho":74,"locations":75},11,20,[76,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115],{"file":42,"line":77,"context":78},34,"raw output",{"file":42,"line":80,"context":78},90,{"file":42,"line":82,"context":78},98,{"file":42,"line":84,"context":78},100,{"file":42,"line":86,"context":78},108,{"file":42,"line":88,"context":78},112,{"file":42,"line":90,"context":78},113,{"file":42,"line":92,"context":78},114,{"file":42,"line":94,"context":78},115,{"file":42,"line":96,"context":78},116,{"file":42,"line":98,"context":78},130,{"file":42,"line":100,"context":78},132,{"file":42,"line":102,"context":78},139,{"file":42,"line":104,"context":78},142,{"file":42,"line":106,"context":78},143,{"file":42,"line":108,"context":78},144,{"file":42,"line":110,"context":78},145,{"file":42,"line":112,"context":78},158,{"file":42,"line":114,"context":78},181,{"file":42,"line":116,"context":78},192,1,[],[120,147],{"entryPoint":121,"graph":122,"unsanitizedCount":30,"severity":146},"rck_lookup_by_ser (radio_code_calc_mv.php:39)",{"nodes":123,"edges":143},[124,129,134,138],{"id":125,"type":126,"label":127,"file":51,"line":128},"n0","source","$_POST['Serial']",40,{"id":130,"type":131,"label":132,"file":51,"line":128,"wp_function":133},"n1","sink","wp_remote_get() [SSRF]","wp_remote_get",{"id":135,"type":126,"label":136,"file":51,"line":137},"n2","$_POST",44,{"id":139,"type":131,"label":140,"file":51,"line":141,"wp_function":142},"n3","file_put_contents() [File Write]",49,"file_put_contents",[144,145],{"from":125,"to":130,"sanitized":57},{"from":135,"to":139,"sanitized":57},"medium",{"entryPoint":148,"graph":149,"unsanitizedCount":30,"severity":146},"\u003Cradio_code_calc_mv> (radio_code_calc_mv.php:0)",{"nodes":150,"edges":155},[151,152,153,154],{"id":125,"type":126,"label":127,"file":51,"line":128},{"id":130,"type":131,"label":132,"file":51,"line":128,"wp_function":133},{"id":135,"type":126,"label":136,"file":51,"line":137},{"id":139,"type":131,"label":140,"file":51,"line":141,"wp_function":142},[156,157],{"from":125,"to":130,"sanitized":57},{"from":135,"to":139,"sanitized":57},{"summary":159,"deductions":160},"The \"radio-unlock-code-calculator-for-m-v-serials\" plugin version 1.0.0 exhibits a mixed security posture. While it demonstrates good practices by using prepared statements for all SQL queries and lacks any known historical vulnerabilities, significant concerns arise from its attack surface and code signals. The presence of two AJAX handlers without authentication checks represents a direct pathway for unauthorized execution of plugin functions. Furthermore, the low percentage of properly escaped output indicates a high risk of cross-site scripting (XSS) vulnerabilities, as user-supplied data is likely being rendered directly without proper sanitization.\n\nThe taint analysis reveals two flows with unsanitized paths, which, while not classified as critical or high severity in this specific analysis, are still indicators of potential data handling weaknesses. The complete absence of nonce checks on AJAX handlers is a critical oversight, as it fails to protect against cross-site request forgery (CSRF) attacks. Coupled with the lack of capability checks, this means any unauthenticated user could potentially trigger sensitive actions within the plugin. The plugin's file operation and external HTTP request capabilities, without apparent input validation or sanitization, also introduce potential risks.",[161,164,166,168,171],{"reason":162,"points":163},"AJAX handlers without authentication checks",10,{"reason":165,"points":66},"Output escaping is low (35%)",{"reason":167,"points":163},"No nonce checks on AJAX",{"reason":169,"points":170},"No capability checks",8,{"reason":172,"points":173},"Taint analysis shows unsanitized paths",5,"2026-04-16T14:29:01.621Z",{"wat":176,"direct":185},{"assetPaths":177,"generatorPatterns":180,"scriptPaths":181,"versionParams":182},[178,179],"\u002Fwp-content\u002Fplugins\u002Fradio-unlock-code-calculator-for-m-v-serials\u002Fassets\u002Fcss\u002Fstylex.css","\u002Fwp-content\u002Fplugins\u002Fradio-unlock-code-calculator-for-m-v-serials\u002Fassets\u002Fcss\u002Fadmin.css",[],[],[183,184],"radio-unlock-code-calculator-for-m-v-serials\u002Fassets\u002Fcss\u002Fstylex.css?ver=","radio-unlock-code-calculator-for-m-v-serials\u002Fassets\u002Fcss\u002Fadmin.css?ver=",{"cssClasses":186,"htmlComments":197,"htmlAttributes":203,"restEndpoints":214,"jsGlobals":215,"shortcodeOutput":216},[187,188,189,190,191,192,193,194,195,196],"RCKresult","rck-title","admin-spacer","gen_button_sign","sign-up-button1","backend-font-heavy","backend-font-light","backend-font-heavy-big","clear-font-text","backend-api-stats",[198,199,200,201,202],"\u003C!-- Radio Code Calculator For M & V WordPress Plugin is distributed in the hope that it will be useful -->","\u003C!-- user must agree to TOS of API access -->","\u003C!-- activated, admin backend -->","\u003C!-- how to use plugin area -->","\u003C!-- bronze api -->",[204,205,206,207,208,209,210,211,212,213],"aria-hidden=\"true\"","class=\"admin-spacer\"","class=\"gen_button_sign\"","class=\"sign-up-button1\"","target=\"_blank\"","class=\"backend-font-heavy\"","class=\"backend-font-light\"","class=\"backend-font-heavy-big\"","class=\"clear-font-text\"","class=\"backend-api-stats\"",[],[],[217],"[mandv_radiounlock_search]",{"error":56,"url":219,"statusCode":220,"statusMessage":221,"message":221},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fradio-unlock-code-calculator-for-m-v-serials\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":117,"versions":223},[224],{"version":6,"download_url":22,"svn_tag_url":225,"released_at":24,"has_diff":57,"diff_files_changed":226,"diff_lines":24,"trac_diff_url":24,"vulnerabilities":227,"is_current":56},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fradio-unlock-code-calculator-for-m-v-serials\u002Ftags\u002F1.0.0\u002F",[],[]]