[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDrmwHn6LdoB4YwYK2dkdf1aMa5CDHuZ7Him6vyNxc7c":3,"$fE9K5GXzXo7uWARQaLzWF8_hVpmKY7hcPTiiv33LLOeM":255,"$f2uOyrzvXIx9gDUXPCeyHDjCby5VgeBWi8tCqU8wF7Lc":260},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":21,"download_link":22,"security_score":23,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26,"discovery_status":27,"vulnerabilities":28,"developer":29,"crawl_stats":25,"alternatives":37,"analysis":38,"fingerprints":117},"show-state-field-for-woocommerce","Show State Field for WooCommerce","1.2","JC","https:\u002F\u002Fprofiles.wordpress.org\u002Fcoder426\u002F","\u003Cp>By default, WooCommerce does not show Billing or Shipping State field on checkout page for many countries like Afghanistan,  Austria,  Åland Islands,  Belgium,  Bulgaria,  Bahrain,  Burundi,  Benin etc.. and if you wanted to show them then you can use this plugin and use the settings page to select those countries.\u003C\u002Fp>\n\u003Cp>For many countries in Europe like Denmark, Greece, Netherlands etc.. Billing \u002F Shipping state field is compulsory for the checkout. So, you can use this plugin to have that field available on woocommerce checkout for all countries you want.\u003C\u002Fp>\n\u003Cp>Watch this video to see how the plugin works:\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FdgojRZLE_pY?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n","By default, WooCommerce does not show Billing or Shipping State field on checkout page for many countries like Afghanistan,  Austria,  Åland Islands,  …",100,3710,1,"2025-04-15T11:34:00.000Z","6.8.5","6.3.2","8.0",[19,20],"hidden-state-field-for-woocommerce","show-state-field","https:\u002F\u002Fplugins.hirewebxperts.com\u002Fshow-state-field-for-woocommerce\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshow-state-field-for-woocommerce.1.2.zip",92,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"coder426",8,5010,95,183,76,"2026-05-19T21:22:46.369Z",[],{"attackSurface":39,"codeSignals":65,"taintFlows":109,"riskAssessment":110,"analyzedAt":116},{"hooks":40,"ajaxHandlers":61,"restRoutes":62,"shortcodes":63,"cronEvents":64,"entryPointCount":24,"unprotectedCount":24},[41,47,51,57],{"type":42,"name":43,"callback":44,"file":45,"line":46},"action","admin_enqueue_scripts","wchsf_add_admin_scripts","woo-checkout-hidden-state-field.php",74,{"type":42,"name":48,"callback":49,"file":45,"line":50},"admin_menu","wchsf_admin_menu",81,{"type":52,"name":53,"callback":54,"priority":55,"file":45,"line":56},"filter","woocommerce_states","wchsf_filter_woocommerce_states",10,341,{"type":52,"name":58,"callback":59,"priority":55,"file":45,"line":60},"woocommerce_get_country_locale","wchsf_filter_woocommerce_get_country_locale",359,[],[],[],[],{"dangerousFunctions":66,"sqlUsage":67,"outputEscaping":69,"fileOperations":24,"externalRequests":24,"nonceChecks":13,"capabilityChecks":24,"bundledLibraries":108},[],{"prepared":24,"raw":24,"locations":68},[],{"escaped":70,"rawEcho":71,"locations":72},7,17,[73,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106],{"file":45,"line":74,"context":75},137,"raw output",{"file":45,"line":77,"context":75},145,{"file":45,"line":79,"context":75},188,{"file":45,"line":81,"context":75},193,{"file":45,"line":83,"context":75},194,{"file":45,"line":85,"context":75},201,{"file":45,"line":87,"context":75},205,{"file":45,"line":89,"context":75},213,{"file":45,"line":91,"context":75},219,{"file":45,"line":93,"context":75},221,{"file":45,"line":95,"context":75},228,{"file":45,"line":97,"context":75},235,{"file":45,"line":99,"context":75},241,{"file":45,"line":101,"context":75},248,{"file":45,"line":103,"context":75},255,{"file":45,"line":105,"context":75},262,{"file":45,"line":107,"context":75},271,[],[],{"summary":111,"deductions":112},"The \"show-state-field-for-woocommerce\" plugin, version 1.2, exhibits a generally strong security posture based on the provided static analysis.  The complete absence of identified attack vectors such as AJAX handlers, REST API routes, shortcodes, and cron events significantly limits the plugin's potential for exploitation. Furthermore, the exclusive use of prepared statements for SQL queries and the lack of file operations or external HTTP requests are excellent security practices.  The presence of a nonce check is also a positive indicator of security awareness.\n\nHowever, a notable concern arises from the low percentage of properly escaped output (29%). This indicates a significant risk of Cross-Site Scripting (XSS) vulnerabilities, as user-supplied or dynamically generated data may not be adequately sanitized before being displayed to users. While the taint analysis did not reveal any flows with unsanitized paths, this is likely due to the limited attack surface and the absence of complex data flows within the plugin, rather than a guarantee of absolute safety.  The vulnerability history being empty is a positive sign, suggesting the plugin has not had publicly known security issues, but this should not be relied upon as a sole indicator of security, especially given the output escaping concerns.\n\nIn conclusion, the plugin has several robust security features, particularly in its limited attack surface and secure database interaction. The primary weakness lies in its output escaping, which introduces a tangible risk of XSS.  Developers should prioritize addressing the output escaping to achieve a more secure overall product.",[113],{"reason":114,"points":115},"Low percentage of properly escaped output",15,"2026-03-16T21:11:32.646Z",{"wat":118,"direct":143},{"assetPaths":119,"generatorPatterns":129,"scriptPaths":130,"versionParams":135},[120,121,122,123,124,125,126,127,128],"\u002Fwp-content\u002Fplugins\u002Fshow-state-field-for-woocommerce\u002Fassets\u002Flibs\u002Ffontawesome\u002Fall.css","\u002Fwp-content\u002Fplugins\u002Fshow-state-field-for-woocommerce\u002Fassets\u002Flibs\u002Fbootstrap\u002Fcss\u002Fbootstrap.min.css","\u002Fwp-content\u002Fplugins\u002Fshow-state-field-for-woocommerce\u002Fassets\u002Flibs\u002Fowl-carousel\u002Fcss\u002Fowl.carousel.min.css","\u002Fwp-content\u002Fplugins\u002Fshow-state-field-for-woocommerce\u002Fassets\u002Flibs\u002Fowl-carousel\u002Fcss\u002Fowl.theme.default.min.css","\u002Fwp-content\u002Fplugins\u002Fshow-state-field-for-woocommerce\u002Fassets\u002Fcss\u002Fwchsf-admin.css","\u002Fwp-content\u002Fplugins\u002Fshow-state-field-for-woocommerce\u002Fassets\u002Flibs\u002Fpopper\u002Fpopper.min.js","\u002Fwp-content\u002Fplugins\u002Fshow-state-field-for-woocommerce\u002Fassets\u002Flibs\u002Fbootstrap\u002Fjs\u002Fbootstrap.min.js","\u002Fwp-content\u002Fplugins\u002Fshow-state-field-for-woocommerce\u002Fassets\u002Flibs\u002Fowl-carousel\u002Fjs\u002Fowl.carousel.min.js","\u002Fwp-content\u002Fplugins\u002Fshow-state-field-for-woocommerce\u002Fassets\u002Fjs\u002Fwchsf-admin.js",[],[131,132,133,134],"assets\u002Flibs\u002Fpopper\u002Fpopper.min.js","assets\u002Flibs\u002Fbootstrap\u002Fjs\u002Fbootstrap.min.js","assets\u002Flibs\u002Fowl-carousel\u002Fjs\u002Fowl.carousel.min.js","assets\u002Fjs\u002Fwchsf-admin.js",[136,137,138,139,140,141,137,142,140],"woo-show-state-field_fontawesome_min","woo-show-state-field_bootstrap_min","woo-show-state-field-owl-carousel-css","woo-show-state-field-owl-carousel-theme","woo-show-state-field_admin","woo-show-state-field_popper","woo-show-state-field-owl-carousel-js",{"cssClasses":144,"htmlComments":146,"htmlAttributes":156,"restEndpoints":251,"jsGlobals":252,"shortcodeOutput":254},[145],"wchsf_support_page",[147,148,149,150,151,152,153,154,155],"define plugin paths","exit if accessed directly","Include css js files","Admin Dashboard Style","Admin Dashboard Script","Create wchsf menu","Create wchsf sub-menu","Setting Save","How to use Show State Field for WooCommerce?",[157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250],"name=\"wchsf_setting[wchsf_countries][AF]\"","name=\"wchsf_setting[wchsf_countries][AX]\"","name=\"wchsf_setting[wchsf_countries][AT]\"","name=\"wchsf_setting[wchsf_countries][BH]\"","name=\"wchsf_setting[wchsf_countries][BE]\"","name=\"wchsf_setting[wchsf_countries][BJ]\"","name=\"wchsf_setting[wchsf_countries][BG]\"","name=\"wchsf_setting[wchsf_countries][BI]\"","name=\"wchsf_setting[wchsf_countries][CY]\"","name=\"wchsf_setting[wchsf_countries][CZ]\"","name=\"wchsf_setting[wchsf_countries][DE]\"","name=\"wchsf_setting[wchsf_countries][DK]\"","name=\"wchsf_setting[wchsf_countries][EE]\"","name=\"wchsf_setting[wchsf_countries][ES]\"","name=\"wchsf_setting[wchsf_countries][FI]\"","name=\"wchsf_setting[wchsf_countries][FR]\"","name=\"wchsf_setting[wchsf_countries][GR]\"","name=\"wchsf_setting[wchsf_countries][GF]\"","name=\"wchsf_setting[wchsf_countries][GP]\"","name=\"wchsf_setting[wchsf_countries][HU]\"","name=\"wchsf_setting[wchsf_countries][HR]\"","name=\"wchsf_setting[wchsf_countries][IS]\"","name=\"wchsf_setting[wchsf_countries][IM]\"","name=\"wchsf_setting[wchsf_countries][IL]\"","name=\"wchsf_setting[wchsf_countries][IE]\"","name=\"wchsf_setting[wchsf_countries][IT]\"","name=\"wchsf_setting[wchsf_countries][KW]\"","name=\"wchsf_setting[wchsf_countries][KR]\"","name=\"wchsf_setting[wchsf_countries][LB]\"","name=\"wchsf_setting[wchsf_countries][LT]\"","name=\"wchsf_setting[wchsf_countries][LK]\"","name=\"wchsf_setting[wchsf_countries][LU]\"","name=\"wchsf_setting[wchsf_countries][LV]\"","name=\"wchsf_setting[wchsf_countries][MT]\"","name=\"wchsf_setting[wchsf_countries][MQ]\"","name=\"wchsf_setting[wchsf_countries][YT]\"","name=\"wchsf_setting[wchsf_countries][NL]\"","name=\"wchsf_setting[wchsf_countries][NO]\"","name=\"wchsf_setting[wchsf_countries][PL]\"","name=\"wchsf_setting[wchsf_countries][PT]\"","name=\"wchsf_setting[wchsf_countries][RO]\"","name=\"wchsf_setting[wchsf_countries][RE]\"","name=\"wchsf_setting[wchsf_countries][SG]\"","name=\"wchsf_setting[wchsf_countries][SE]\"","name=\"wchsf_setting[wchsf_countries][SI]\"","name=\"wchsf_setting[wchsf_countries][SK]\"","name=\"wchsf_setting[wchsf_countries][VN]\"","id=\"AF\"","id=\"AX\"","id=\"AT\"","id=\"BH\"","id=\"BE\"","id=\"BJ\"","id=\"BG\"","id=\"BI\"","id=\"CY\"","id=\"CZ\"","id=\"DE\"","id=\"DK\"","id=\"EE\"","id=\"ES\"","id=\"FI\"","id=\"FR\"","id=\"GR\"","id=\"GF\"","id=\"GP\"","id=\"HU\"","id=\"HR\"","id=\"IS\"","id=\"IM\"","id=\"IL\"","id=\"IE\"","id=\"IT\"","id=\"KW\"","id=\"KR\"","id=\"LB\"","id=\"LT\"","id=\"LK\"","id=\"LU\"","id=\"LV\"","id=\"MT\"","id=\"MQ\"","id=\"YT\"","id=\"NL\"","id=\"NO\"","id=\"PL\"","id=\"PT\"","id=\"RO\"","id=\"RE\"","id=\"SG\"","id=\"SE\"","id=\"SI\"","id=\"SK\"","id=\"VN\"",[],[253],"MyAjax",[],{"error":256,"url":257,"statusCode":258,"statusMessage":259,"message":259},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fshow-state-field-for-woocommerce\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":261,"versions":262},3,[263,269,276],{"version":6,"download_url":22,"svn_tag_url":264,"released_at":25,"has_diff":265,"diff_files_changed":266,"diff_lines":25,"trac_diff_url":267,"vulnerabilities":268,"is_current":256},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fshow-state-field-for-woocommerce\u002Ftags\u002F1.2\u002F",false,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fshow-state-field-for-woocommerce%2Ftags%2F1.1&new_path=%2Fshow-state-field-for-woocommerce%2Ftags%2F1.2",[],{"version":270,"download_url":271,"svn_tag_url":272,"released_at":25,"has_diff":265,"diff_files_changed":273,"diff_lines":25,"trac_diff_url":274,"vulnerabilities":275,"is_current":265},"1.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshow-state-field-for-woocommerce.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fshow-state-field-for-woocommerce\u002Ftags\u002F1.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fshow-state-field-for-woocommerce%2Ftags%2F1.0&new_path=%2Fshow-state-field-for-woocommerce%2Ftags%2F1.1",[],{"version":277,"download_url":278,"svn_tag_url":279,"released_at":25,"has_diff":265,"diff_files_changed":280,"diff_lines":25,"trac_diff_url":25,"vulnerabilities":281,"is_current":265},"1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshow-state-field-for-woocommerce.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fshow-state-field-for-woocommerce\u002Ftags\u002F1.0\u002F",[],[]]