[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1dl-KNSfgleI5FgQGxsL8UQ0QI4SjOQSrxnozKc3Tz4":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":22,"download_link":23,"security_score":13,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":33,"analysis":135,"fingerprints":222},"shamor","Shamor","1.8.3","Shamor Team","https:\u002F\u002Fprofiles.wordpress.org\u002Fshamor\u002F","\u003Cp>Redirect user out of your site on Shabbat and Holiday.\u003C\u002Fp>\n\u003Cp>Read more on the \u003Ca href=\"https:\u002F\u002Fwpshamor.com\u002F\" rel=\"nofollow ugc\">official website\u003C\u002Fa>.\u003C\u002Fp>\n","Redirect user out of your site on Shabbat and Holiday.",400,4293,100,4,"2025-10-23T07:59:00.000Z","6.4.8","2.0","5.3",[20,21],"jewish","shabbat","https:\u002F\u002Fwpshamor.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshamor.1.8.3.zip",0,null,"2026-03-15T15:16:48.613Z",[],{"slug":4,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":11,"avg_security_score":13,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},1,30,94,"2026-04-04T19:14:44.901Z",[34,56,77,95,115],{"slug":35,"name":36,"version":37,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":13,"num_ratings":29,"last_updated":44,"tested_up_to":45,"requires_at_least":46,"requires_php":47,"tags":48,"homepage":53,"download_link":54,"security_score":13,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":55},"holy-day-off","Holy Day Off","1.2.4","topwp","https:\u002F\u002Fprofiles.wordpress.org\u002Ftopwp\u002F","\u003Cp>\u003Cstrong>Holy Day Off\u003C\u002Fstrong> is the most trusted way for Jewish-owned WooCommerce stores to observe Shabbat and Jewish holidays — fully automated, zero manual work.\u003C\u002Fp>\n\u003Cp>Pick your city, and the plugin does the rest. It knows exactly when Shabbat starts and ends based on halachic times for your location, and automatically manages your entire store: disabling purchases, hiding payment options, and showing visitors a beautiful, customizable alert bar.\u003C\u002Fp>\n\u003Cp>Whether you run a small online shop or a high-traffic eCommerce site, Holy Day Off keeps your store compliant with your values — while you rest.\u003C\u002Fp>\n\u003Ch4>Why Store Owners Choose Holy Day Off\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Set it and forget it.\u003C\u002Fstrong> No need to manually close and reopen your store every week. Holy Day Off runs on autopilot — checking Shabbat times every 5 minutes so your store transitions seamlessly.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Works with modern WooCommerce.\u003C\u002Fstrong> Full support for WooCommerce Blocks (cart & checkout), classic templates, and HPOS (High-Performance Order Storage). No matter how your store is set up, Holy Day Off has you covered.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Beautiful admin experience.\u003C\u002Fstrong> A clean, card-based dashboard gives you instant visibility into your store’s status, next Shabbat times, and all settings — with a live alert bar preview so you see exactly what your visitors will see.\u003C\u002Fp>\n\u003Ch4>Full Feature List\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Automatic Shabbat scheduling\u003C\u002Fstrong> — Candle-lighting and Havdalah times calculated for your city\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WooCommerce integration\u003C\u002Fstrong> — Hide “Add to Cart” buttons, disable payment gateways, and block checkout during Shabbat\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WooCommerce Blocks support\u003C\u002Fstrong> — Works seamlessly with block-based cart and checkout pages\u003C\u002Fli>\n\u003Cli>\u003Cstrong>HPOS compatible\u003C\u002Fstrong> — Fully compatible with WooCommerce High-Performance Order Storage\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable alert bar\u003C\u002Fstrong> — Styled notification bar with custom message, colors, and optional close button\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Full-page redirect\u003C\u002Fstrong> — Redirect your entire site to a dedicated Shabbat landing page\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Force close\u003C\u002Fstrong> — Manually close your shop at any time with a single toggle\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Live admin preview\u003C\u002Fstrong> — See your alert bar styling in real-time as you configure it\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cache-friendly\u003C\u002Fstrong> — Automatically clears WP Rocket cache when Shabbat status changes\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Timezone-accurate\u003C\u002Fstrong> — Displays times in your city’s local timezone, not the server’s\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Lightweight & fast\u003C\u002Fstrong> — Transient caching for API calls, scripts load only on plugin pages\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Translation-ready\u003C\u002Fstrong> — Fully internationalized with i18n support\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Clean uninstall\u003C\u002Fstrong> — Removes all plugin data and scheduled events when you uninstall\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How It Works\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Install & activate the plugin\u003C\u002Fli>\n\u003Cli>Enter your license key\u003C\u002Fli>\n\u003Cli>Select your city from the dropdown\u003C\u002Fli>\n\u003Cli>Configure your preferences — alert bar style, WooCommerce behavior, or page redirect\u003C\u002Fli>\n\u003Cli>Done! The plugin automatically manages your store every Shabbat\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Who Is This For?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Jewish eCommerce store owners\u003C\u002Fstrong> who want to observe Shabbat without the weekly hassle\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Agencies & developers\u003C\u002Fstrong> building stores for religious clients\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Any WordPress site owner\u003C\u002Fstrong> who wants to display a scheduled alert bar or redirect visitors on specific days\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Pro Features\u003C\u002Fh4>\n\u003Cp>Unlock the full power of Holy Day Off with a Pro license — automatic scheduling, custom alert bars, WooCommerce integration, and page redirects.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ftopwp.net\u002Fproduct\u002Fholy-day-off-wp-plugin\u002F\" rel=\"nofollow ugc\">Get Pro Version\u003C\u002Fa>\u003C\u002Fp>\n","The #1 Shabbat & Jewish holiday plugin for WordPress. Automatically close your WooCommerce store on schedule. Set your city once, rest every week.",10,1272,"","6.7.5","6.0","7.4",[49,50,51,21,52],"close-shop","holiday","jewish-holidays","woocommerce","https:\u002F\u002Ftopwp.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fholy-day-off.1.2.4.zip","2026-03-15T10:48:56.248Z",{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":42,"downloaded":64,"rating":13,"num_ratings":65,"last_updated":66,"tested_up_to":67,"requires_at_least":68,"requires_php":44,"tags":69,"homepage":74,"download_link":75,"security_score":76,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26},"wp-shabbat","WP-Shabbat","2.3","DrMosko","https:\u002F\u002Fprofiles.wordpress.org\u002Fdrmosko\u002F","\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.dossihost.net\u002F%D7%AA%D7%95%D7%A1%D7%A3-%D7%95%D7%95%D7%A8%D7%93%D7%A4%D7%A1-%D7%A1%D7%95%D7%92%D7%A8-%D7%90%D7%AA%D7%A8-%D7%91%D7%A9%D7%91%D7%AA%D7%95%D7%AA-%D7%95%D7%97%D7%92%D7%99%D7%9D\u002F\" rel=\"nofollow ugc\">WP-Shabbat\u003C\u002Fa> is a WordPress plugin that will help you and your visitors observe the shabbat.\u003C\u002Fp>\n\u003Cp>For more information in hebrew, check out \u003Ca href=\"http:\u002F\u002Fwww.dossihost.net\u002F%D7%AA%D7%95%D7%A1%D7%A3-%D7%95%D7%95%D7%A8%D7%93%D7%A4%D7%A1-%D7%A1%D7%95%D7%92%D7%A8-%D7%90%D7%AA%D7%A8-%D7%91%D7%A9%D7%91%D7%AA%D7%95%D7%AA-%D7%95%D7%97%D7%92%D7%99%D7%9D\u002F\" rel=\"nofollow ugc\">WP-Shabbat\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>close the site by setting the Shabbat and holiday enter time in minutes when the minimum is 20 minutes.\u003C\u002Fli>\n\u003Cli>close the site by setting the Shabbat and holiday exit time in temporary minutes from 18 minutes to 72 minutes.\u003C\u002Fli>\n\u003Cli>Ip databse is updated automatically every week. (est. size : 17Mb)\u003C\u002Fli>\n\u003Cli>search engine bots get http header 503.(SEO-Friendly) :\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fproductforums.google.com\u002Fforum\u002F#!topic\u002Fwebmasters\u002FbjpQtTwzadI\u002Fdiscussion\" rel=\"nofollow ugc\">Answer from Google about WP-Shabbat\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>plugin languages : English,Hebrew,Russian.\u003C\u002Fli>\n\u003Cli>plugin will generate on fly page with your template for visitor to come back later.\u003C\u002Fli>\n\u003Cli>Display popup message when its shabbat or holiday.\u003C\u002Fli>\n\u003Cli>Display one hour countdown before site closes to soft the user termination.\u003C\u002Fli>\n\u003Cli>Add custom messages and images etc, below the plugin default message.\u003C\u002Fli>\n\u003Cli>select which css class\u002Fid to hide when site closed.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Notes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Shabbat and holiday exit time is temporary minutes that calculated from sunrise to sunset and divided into 12 hours.\u003C\u002Fli>\n\u003Cli>The sunrise and sunset times is calculated for each user by his location. \u003C\u002Fli>\n\u003Cli>Identification place of the user is by its IP address close to 40 km.\u003C\u002Fli>\n\u003Cli>This script uses GeoLite Country from MaxMind (http:\u002F\u002Fwww.maxmind.com) which is available under terms of GPL\u002FLGPL \u003C\u002Fli>\n\u003Cli>DB file GeoLiteCity.dat downloaded every week from maxmind servers to plugin directory.\u003C\u002Fli>\n\u003C\u002Ful>\n","Close site or display popup message on Shabbat and Holidays by identifying the address of the user IP and close to 40 km",9382,8,"2017-09-17T09:56:00.000Z","4.8.28","3.7.0",[70,71,72,73,21],"503","close-site","jewish-holiday","popup-window","http:\u002F\u002Fwww.dossihost.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-shabbat.2.3.zip",85,{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":85,"downloaded":86,"rating":13,"num_ratings":87,"last_updated":88,"tested_up_to":89,"requires_at_least":17,"requires_php":44,"tags":90,"homepage":93,"download_link":94,"security_score":13,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26},"wordpress-hebrew-date","WP Hebrew Date","2.0.5","hatul","https:\u002F\u002Fprofiles.wordpress.org\u002Fhatul\u002F","\u003Cp>The plugin preview Hebrew date in date of post and date of comments.\u003Cbr \u002F>\nThe hebrew date format able to change in options page of the plugin.\u003C\u002Fp>\n\u003Cp>Note: This plugin was previously known as “WordPress Hebrew Date”.\u003C\u002Fp>\n\u003Ch4>Shortcode\u003C\u002Fh4>\n\u003Cp>You can add the shortcode \u003Ccode>[today_hebdate]\u003C\u002Fcode> in posts or pages for show the hebrew date of today.\u003C\u002Fp>\n\u003Ch4>Widget\u003C\u002Fh4>\n\u003Cp>You can add widget for show the hebrew date of today.\u003C\u002Fp>\n","Convert dates in wordpress to Hebrew dates.",700,15166,9,"2025-09-15T07:54:00.000Z","6.8.5",[91,92,20],"date","hebrew","https:\u002F\u002Fhatul.info\u002Fhebdate\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwordpress-hebrew-date.2.0.5.zip",{"slug":96,"name":97,"version":98,"author":96,"author_profile":99,"description":100,"short_description":101,"active_installs":102,"downloaded":103,"rating":104,"num_ratings":105,"last_updated":106,"tested_up_to":107,"requires_at_least":108,"requires_php":109,"tags":110,"homepage":113,"download_link":114,"security_score":13,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26},"calj","CalJ","1.5","https:\u002F\u002Fprofiles.wordpress.org\u002Fcalj\u002F","\u003Cp>Use the popular CalJ API to display the begin and end times of Shabbat as well as the name of the week’s Parasha on your blog,\u003Cbr \u002F>\nwith the help of a simple \u003Cem>shortcode\u003C\u002Fem>\u003C\u002Fp>\n","Display the Shabbat times (zmanim) for the city of your choice.",90,3685,68,5,"2025-06-20T14:49:00.000Z","6.6.5","4.9","5.6",[111,91,112,92,20],"calendar","events","https:\u002F\u002Fcalj.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcalj.zip",{"slug":116,"name":117,"version":118,"author":119,"author_profile":120,"description":121,"short_description":122,"active_installs":123,"downloaded":124,"rating":31,"num_ratings":125,"last_updated":126,"tested_up_to":127,"requires_at_least":128,"requires_php":44,"tags":129,"homepage":132,"download_link":133,"security_score":134,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26},"adatosystems-friday-zmanim","Shabbat Zman Widget","1.8","adatosystems","https:\u002F\u002Fprofiles.wordpress.org\u002Fadatosystems\u002F","\u003Cp>THIS PLUGIN IS NO LONGER SUPPORTED.\u003C\u002Fp>\n\u003Cp>For a version that works with current WordPress installations, please see \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fzmanim-wp\u002F#description\" rel=\"ugc\">Zmanim WP\u003C\u002Fa> or some other plugin.\u003C\u002Fp>\n\u003Ch3>LEGACY INFORMATION\u003C\u002Fh3>\n\u003Cp>Displays Shabbat information for the coming week. Display is highly customizable, with options to display or hide:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Hebrew date\u003C\u002Fli>\n\u003Cli>Candle lighting time\u003C\u002Fli>\n\u003Cli>Parsha HaShavuah\u002Fweekly Torah reading\u003C\u002Fli>\n\u003Cli>Sunrise and\u002For sunset\u003C\u002Fli>\n\u003Cli>Havdalah time\u003C\u002Fli>\n\u003Cli>Earliest time for Plag haMincha\u003C\u002Fli>\n\u003Cli>Latest time to say morning Shema\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Within those options, there are choices to show English or Hebrew, Ashkenazi or Sephardi transliterations, and multiple options for calculating times (GR”A, M”A, etc)\u003C\u002Fp>\n\u003Cp>This plugin makes two JSON calls to hebcal.com (one to get the Hebrew date and one for the weekly Torah reading). More information on how this feature works can be found here:\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fwww.hebcal.com\u002Fhome\u002F219\u002Fhebrew-date-converter-rest-api\" rel=\"nofollow ugc\">http:\u002F\u002Fwww.hebcal.com\u002Fhome\u002F219\u002Fhebrew-date-converter-rest-api\u003C\u002Fa>\u003Cbr \u002F>\n…and here…\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fwww.hebcal.com\u002Fhome\u002F195\u002Fjewish-calendar-rest-api\" rel=\"nofollow ugc\">http:\u002F\u002Fwww.hebcal.com\u002Fhome\u002F195\u002Fjewish-calendar-rest-api\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>This plugin also makes three JSON calls to GeoNames.org API to get the sunrise\u002Fsunset times for Friday and Saturday, and to obtain the latitude\u002Flongitude for the provided zip code. More information can be found here:\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fwww.geonames.org\u002Fexport\u002Fweb-services.html\u002F\" rel=\"nofollow ugc\">http:\u002F\u002Fwww.geonames.org\u002Fexport\u002Fweb-services.html\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>For Daily Zmanim display, please see this plugin: \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdaily-zman-widget\" rel=\"ugc\">https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdaily-zman-widget\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>LEGACY INFORMATION\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Download a copy of the zip file to your computer\u003C\u002Fli>\n\u003Cli>Extract the files.\u003C\u002Fli>\n\u003Cli>FTP to your webserver\u003C\u002Fli>\n\u003Cli>Create a directory inside \u002Fwp-content\u002Fplugins named “shabbatzmanim”\u003C\u002Fli>\n\u003Cli>Upload \u003Ccode>zmanfriday.php\u003C\u002Fcode> to the \u003Ccode>\u002Fwp-content\u002Fplugins\u002Fshabbatzmanim\u003C\u002Fcode> directory\u003C\u002Fli>\n\u003Cli>Activate the plugin through the ‘Plugins’ menu in WordPress\u003C\u002Fli>\n\u003Cli>Use Appareance -> Widgets to place this information on your page (does not currently support shortcodes or php inserts)\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>Formatting\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Several CSS style codes are included:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>#frizman: a DIV tag that wraps all the widget content\u003C\u002Fli>\n\u003Cli>#zmanbigtitle: a SPAN tag for the title of the widget\u003C\u002Fli>\n\u003Cli>#zmantitle: a SPAN tag for each of the titles within the widget.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Thus, you could format the text by adding the following to your style sheet:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>#frizman { font-size: 12px; }\n#zmanbigtitle {\n        font-size: 12px;\n        font-weight: bold;\n        text-decoration: underline;\n       }\n#zmantitle { font-weight: bold; }\u003Ch3>LEGACY INFORMATION\u003C\u002Fh3>= Something isn't working. Any way I can see what might be going wrong? =\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Check the “debug” option at the bottom of the widget to get some of the initial calculations that are coming in. Otherwise, contact the developer. I hear he’s a great guy.\u003C\u002Fp>\n\u003Ch4>I put in my zipcode but I’m not getting the right location.\u003C\u002Fh4>\n\u003Cp>Get the latitude\u002Flongitude for your location and use that instead.\u003C\u002Fp>\n\u003Ch4>I put in the latitude\u002Flongitude but it’s showing the completely wrong city\u003C\u002Fh4>\n\u003Cp>The chances are when you googled “latitude longitude for xxxx” it gave you two regular numbers. What you need to pay attention to is the North\u002FSouth and East\u002FWest items. If the number is South or West, then you need to make the number negative. Example: San Francisco is 37.7833 N, 122.4167 W. But if you leave the longitude as 122.4167 you’ll get Weihai, China.\u003C\u002Fp>\n","THIS PLUGIN IS NO LONGER SUPPORTED!!",50,4640,6,"2025-02-12T15:17:00.000Z","3.8.41","3.3",[21,130,131],"shabbat-times","zman","http:\u002F\u002Fwebdesign.adatosystems.com\u002Fshabbatzmanwidget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadatosystems-friday-zmanim.2.0.zip",92,{"attackSurface":136,"codeSignals":190,"taintFlows":209,"riskAssessment":210,"analyzedAt":221},{"hooks":137,"ajaxHandlers":171,"restRoutes":179,"shortcodes":180,"cronEvents":188,"entryPointCount":14,"unprotectedCount":189},[138,144,150,154,158,162,165,167],{"type":139,"name":140,"callback":141,"file":142,"line":143},"action","admin_notices","show_admin_error","wp-shamor.php",29,{"type":145,"name":146,"callback":147,"priority":148,"file":142,"line":149},"filter","template_include","move_out_of_site",9999,33,{"type":145,"name":151,"callback":152,"priority":42,"file":142,"line":153},"status_header","capture_status",34,{"type":139,"name":155,"callback":156,"file":142,"line":157},"admin_menu","shamor_plugin_menu",35,{"type":139,"name":159,"callback":160,"file":142,"line":161},"wp_enqueue_scripts","wp_shammor_enqueue",36,{"type":139,"name":159,"callback":163,"file":142,"line":164},"load_elementor_css",179,{"type":139,"name":159,"callback":163,"file":142,"line":166},205,{"type":139,"name":168,"callback":169,"file":142,"line":170},"admin_init","register_shamor_plugin_settings",260,[172,176],{"action":173,"nopriv":174,"callback":173,"hasNonce":174,"hasCapCheck":174,"file":142,"line":175},"validate_wp_shammor",false,37,{"action":173,"nopriv":177,"callback":173,"hasNonce":174,"hasCapCheck":174,"file":142,"line":178},true,38,[],[181,184],{"tag":182,"callback":182,"file":142,"line":183},"wp_shammor_countdown",39,{"tag":185,"callback":186,"file":142,"line":187},"wp_shamor_havdalah_hour","get_havdalah_hour",40,[],2,{"dangerousFunctions":191,"sqlUsage":192,"outputEscaping":194,"fileOperations":24,"externalRequests":24,"nonceChecks":24,"capabilityChecks":24,"bundledLibraries":208},[],{"prepared":24,"raw":24,"locations":193},[],{"escaped":65,"rawEcho":125,"locations":195},[196,200,201,202,204,206],{"file":197,"line":198,"context":199},"block_template.php",26,"raw output",{"file":197,"line":143,"context":199},{"file":197,"line":149,"context":199},{"file":142,"line":203,"context":199},318,{"file":142,"line":205,"context":199},321,{"file":142,"line":207,"context":199},360,[],[],{"summary":211,"deductions":212},"The \"shamor\" plugin version 1.8.3 exhibits a mixed security posture. On the positive side, it demonstrates good practices regarding SQL queries, utilizing prepared statements exclusively, and has no recorded vulnerabilities (CVEs) or active security advisories. The absence of dangerous functions, file operations, and external HTTP requests further contributes to its current stable state. However, significant concerns arise from the attack surface analysis. Two AJAX handlers are present, and alarmingly, both lack authentication checks. This creates a direct pathway for unauthenticated users to interact with potentially sensitive plugin functionalities, posing a notable risk. The taint analysis also shows no flows analyzed, which, while not indicating a problem, means this aspect of security hasn't been thoroughly vetted.\n\nDespite the lack of a known vulnerability history, the presence of unprotected AJAX endpoints is a critical weakness that could be exploited. The plugin's strengths lie in its SQL handling and lack of known past issues, but the immediate risk of unauthenticated access to AJAX endpoints cannot be overlooked. A balanced conclusion suggests that while the plugin has avoided historical vulnerabilities and employs good database practices, its current implementation introduces a significant and immediate security concern due to the exposed AJAX handlers. Further security auditing, particularly around taint analysis and output escaping, would be beneficial.",[213,215,217,219],{"reason":214,"points":42},"Unprotected AJAX handlers",{"reason":216,"points":105},"Low percentage of properly escaped output",{"reason":218,"points":42},"No nonce checks on entry points",{"reason":220,"points":42},"No capability checks on entry points","2026-03-16T19:48:23.204Z",{"wat":223,"direct":229},{"assetPaths":224,"generatorPatterns":226,"scriptPaths":227,"versionParams":228},[225],"\u002Fwp-content\u002Fplugins\u002Fshamor\u002Fblock_template.php",[],[],[],{"cssClasses":230,"htmlComments":231,"htmlAttributes":232,"restEndpoints":233,"jsGlobals":234,"shortcodeOutput":235},[],[],[],[],[],[236,237],"\u003Cdiv class=\"wp-shammor-countdown-container\">\u003C\u002Fdiv>","\u003Cdiv class=\"wp-shamor-havdalah-hour-container\">\u003C\u002Fdiv>"]