[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f08Be5T6JFvAcrSU6HA1A5sktNIjDffHcfj3EISW2N0M":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":22,"download_link":23,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":35,"analysis":55,"fingerprints":164},"runtastic-widget","Runtastic Widget","1.4","Daniel Papenfuß","https:\u002F\u002Fprofiles.wordpress.org\u002Fdanielpapenfuss\u002F","\u003Cp>Achtung – das Widget ist aktuell ohne Funktion und eine Weiterentwicklung ist ungewiss. Bitte nutzt stattdessen das Plugin RunPress.\u003C\u002Fp>\n\u003Cp>Das ist die erste Version meines Runtastic Widgets. Dieses Widget zeigt euch eure letzte Runtastic Aktivität in eurem Blog an. (bis jetzt nur auf Deutsch)\u003Cbr \u002F>\nDafür musst du folgendes tun:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Plugin installieren\u003C\u002Fli>\n\u003Cli>Widget in eine Sitebar ziehen\u003C\u002Fli>\n\u003Cli>Logindaten eingeben und die Aktualisierungszeit setzen\u003C\u002Fli>\n\u003Cli>Genießen\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Wenn du irgendwelche Probleme oder Verbesserungsvorschläge erstelle bitte ein Supporteintrag auf wordpress.org.\u003C\u002Fp>\n","Das ist die erste Version meines Runtastic Widgets. Achtung - das Widget ist aktuell ohne Funktion und eine Weiterentwicklung ist ungewiss.",10,2076,70,2,"2016-11-16T19:50:00.000Z","4.1.42","3.9.1","",[20,21,4],"fitness-widget","runtastic","http:\u002F\u002Fwww.daniel-papenfuss.de","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fruntastic-widget.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":24,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"danielpapenfuss",1,30,84,"2026-04-05T14:40:28.887Z",[36],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":11,"downloaded":44,"rating":25,"num_ratings":25,"last_updated":18,"tested_up_to":45,"requires_at_least":46,"requires_php":18,"tags":47,"homepage":51,"download_link":52,"security_score":53,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":54},"runpress","RunPress","1.4.2","Markus Frenzel","https:\u002F\u002Fprofiles.wordpress.org\u002Fmarkusfrenzel\u002F","\u003Cp>Do you ever want to display your sports activities from Runtastic.com on your own Website? This is no problem any longer.\u003C\u002Fp>\n\u003Cp>RunPress gives you the opportunity to query the Runtastic website by using your Runtastic username and password. It imports your Runtastic sports activities into a table of your wordpress installation.\u003C\u002Fp>\n\u003Cp>You will be capable of viewing your runtastic sports activities in the admin backend. By the use of shortcodes you’re able to show your activities on non-admin pages of your site like posts and pages. Use the shortcode generator to easily create the needed shortcodes without any programming knowledge.\u003C\u002Fp>\n\u003Cp>A widget is included to show your very latest sport activity, your high-scores or the last 5 sports activities in a table.\u003C\u002Fp>\n\u003Cp>RunPress is continuously under development. Just share your wishes with me and I’ll have a look at them.\u003C\u002Fp>\n\u003Cp>You want to see it in action? Have a look at the plugin homepage \u003Ca href=\"http:\u002F\u002Fmarkusfrenzel.de\u002Fwordpress\u002F?page_id=2247\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Do you think RunPress is useful for you? Then please consider to \u003Ca href=\"http:\u002F\u002Fmarkusfrenzel.de\u002Fwordpress\u002F?page_id=2336\" rel=\"nofollow ugc\">donate\u003C\u002Fa> to keep the developer motivated and the plugin up and running.\u003C\u002Fp>\n\u003Cp>ATTENTION: You MUST have CURL-Support in your PHP.INI active!\u003C\u002Fp>\n\u003Cp>RunPress is now multisite capable (implemented February 2016).\u003C\u002Fp>\n\u003Cp>Please consider a donation if you like RunPress. Every (even the smallest) donation is going to motivate the developer of RunPress to create new functions and additions to the plugin without splitting it up into a free and a buyable edition.\u003C\u002Fp>\n\u003Ch3>Importable Activities\u003C\u002Fh3>\n\u003Cp>The following Activities are importable from the Runtastic Website to your local WordPress Database\u003C\u002Fp>\n\u003Cul>\n\u003Cli>running\u003C\u002Fli>\n\u003Cli>nordicwalking\u003C\u002Fli>\n\u003Cli>cycling\u003C\u002Fli>\n\u003Cli>mountainbiking\u003C\u002Fli>\n\u003Cli>racecycling\u003C\u002Fli>\n\u003Cli>hiking\u003C\u002Fli>\n\u003Cli>treadmill\u003C\u002Fli>\n\u003Cli>ergometer\u003C\u002Fli>\n\u003Cli>elliptical\u003C\u002Fli>\n\u003Cli>spinning\u003C\u002Fli>\n\u003Cli>handbike\u003C\u002Fli>\n\u003Cli>skating\u003C\u002Fli>\n\u003Cli>skateboarding\u003C\u002Fli>\n\u003Cli>rowing\u003C\u002Fli>\n\u003Cli>swimming\u003C\u002Fli>\n\u003Cli>crosscountryskiing\u003C\u002Fli>\n\u003Cli>skiing\u003C\u002Fli>\n\u003Cli>snowboarding\u003C\u002Fli>\n\u003Cli>backcountryskiing\u003C\u002Fli>\n\u003Cli>sledding\u003C\u002Fli>\n\u003Cli>motorbiking\u003C\u002Fli>\n\u003Cli>walking\u003C\u002Fli>\n\u003Cli>riding\u003C\u002Fli>\n\u003C\u002Ful>\n","Imports your sports activities (have a look at the readme for details) from the Runtastic website. Displays the data via shortcodes on your webpage.",2646,"4.7.32","3.3.1",[48,49,50,37,21],"cycling","nordicwalking","running","http:\u002F\u002Frunpress.markusfrenzel.de","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frunpress.1.4.2.zip",100,"2026-03-15T10:48:56.248Z",{"attackSurface":56,"codeSignals":68,"taintFlows":149,"riskAssessment":150,"analyzedAt":163},{"hooks":57,"ajaxHandlers":64,"restRoutes":65,"shortcodes":66,"cronEvents":67,"entryPointCount":25,"unprotectedCount":25},[58],{"type":59,"name":60,"callback":61,"file":62,"line":63},"action","widgets_init","runtastic_widget_init","runtastic.php",14,[],[],[],[],{"dangerousFunctions":69,"sqlUsage":70,"outputEscaping":89,"fileOperations":25,"externalRequests":147,"nonceChecks":25,"capabilityChecks":25,"bundledLibraries":148},[],{"prepared":25,"raw":71,"locations":72},7,[73,76,79,81,83,84,86],{"file":62,"line":74,"context":75},73,"$wpdb->get_var() with variable interpolation",{"file":62,"line":77,"context":78},74,"$wpdb->query() with variable interpolation",{"file":62,"line":80,"context":78},75,{"file":62,"line":82,"context":75},83,{"file":62,"line":33,"context":78},{"file":62,"line":85,"context":78},120,{"file":87,"line":88,"context":78},"Update_Cache.php",11,{"escaped":71,"rawEcho":90,"locations":91},35,[92,95,96,98,100,102,105,106,107,108,109,111,113,114,115,116,117,118,120,122,124,126,128,129,131,133,135,137,138,139,140,141,142,143,145],{"file":93,"line":71,"context":94},"anzeige.php","raw output",{"file":93,"line":88,"context":94},{"file":93,"line":97,"context":94},15,{"file":93,"line":99,"context":94},19,{"file":93,"line":101,"context":94},23,{"file":103,"line":104,"context":94},"anzeige_Deutsch.php",3,{"file":103,"line":71,"context":94},{"file":103,"line":88,"context":94},{"file":103,"line":97,"context":94},{"file":103,"line":99,"context":94},{"file":103,"line":110,"context":94},26,{"file":112,"line":104,"context":94},"anzeige_Englisch.php",{"file":112,"line":71,"context":94},{"file":112,"line":88,"context":94},{"file":112,"line":97,"context":94},{"file":112,"line":99,"context":94},{"file":112,"line":110,"context":94},{"file":119,"line":101,"context":94},"forms\\admin.php",{"file":119,"line":121,"context":94},24,{"file":119,"line":123,"context":94},25,{"file":119,"line":125,"context":94},28,{"file":119,"line":127,"context":94},29,{"file":119,"line":32,"context":94},{"file":119,"line":130,"context":94},31,{"file":119,"line":132,"context":94},33,{"file":119,"line":134,"context":94},34,{"file":136,"line":104,"context":94},"forms\\widget.php",{"file":136,"line":104,"context":94},{"file":136,"line":71,"context":94},{"file":136,"line":88,"context":94},{"file":136,"line":97,"context":94},{"file":136,"line":99,"context":94},{"file":136,"line":110,"context":94},{"file":62,"line":144,"context":94},61,{"file":62,"line":146,"context":94},64,4,[],[],{"summary":151,"deductions":152},"The runtastic-widget plugin version 1.4 exhibits a generally positive security posture with a very small attack surface and no recorded vulnerabilities. The static analysis shows a complete lack of AJAX handlers, REST API routes, shortcodes, and cron events, indicating minimal potential for external interaction or exploitation. Furthermore, the absence of dangerous functions, file operations, and external HTTP requests is commendable. However, several significant concerns emerge from the code signals. The plugin performs 7 SQL queries, none of which utilize prepared statements, representing a substantial risk of SQL injection vulnerabilities. Additionally, only 17% of output is properly escaped, leaving 83% vulnerable to cross-site scripting (XSS) attacks. The complete absence of nonce and capability checks is also a critical oversight, meaning any functionality, if present, would likely be unprotected against unauthorized access or manipulation.",[153,155,158,161],{"reason":154,"points":11},"No SQL prepared statements",{"reason":156,"points":157},"Low output escaping percentage",8,{"reason":159,"points":160},"No nonce checks",5,{"reason":162,"points":160},"No capability checks","2026-03-17T01:11:02.010Z",{"wat":165,"direct":174},{"assetPaths":166,"generatorPatterns":168,"scriptPaths":169,"versionParams":171},[167],"\u002Fwp-content\u002Fplugins\u002Fruntastic-widget\u002Fstyle.css",[],[170],"\u002Fwp-content\u002Fplugins\u002Fruntastic-widget\u002Fcustom-script.js",[172,173],"runtastic-widget\u002Fstyle.css?ver=","runtastic-widget\u002Fcustom-script.js?ver=",{"cssClasses":175,"htmlComments":177,"htmlAttributes":178,"restEndpoints":180,"jsGlobals":181,"shortcodeOutput":182},[176],"runtastic_widget_class",[],[179],"runtastic_widget_id",[],[],[]]