[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCiWa6g6NXgKqxtbZM3H417CJOSDkOpknwkQPU7HPffc":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":13,"tags":16,"homepage":13,"download_link":20,"security_score":21,"vuln_count":11,"unpatched_count":11,"last_vuln_date":22,"fetched_at":23,"vulnerabilities":24,"developer":25,"crawl_stats":22,"alternatives":33,"analysis":138,"fingerprints":186},"simple-virtu-widget","Simple Virtu Widget","1.2.1","Hayk Chamyan","https:\u002F\u002Fprofiles.wordpress.org\u002Fhayk\u002F","\u003Cp>This plugin adds the required javascript for Virtu mortgage widget.\u003C\u002Fp>\n\u003Cp>For more information visit: \u003Ca href=\"https:\u002F\u002Fvirtusystems.ru\u002F\" rel=\"nofollow ugc\">Virtu Systems\u003C\u002Fa>\u003C\u002Fp>\n","Enables Virtu Systems mortgage widget and shortcode.",0,835,"","5.6.17","4.5.0",[17,18,19],"javascript","virtu","widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-virtu-widget.zip",100,null,"2026-03-15T10:48:56.248Z",[],{"slug":26,"display_name":7,"profile_url":8,"plugin_count":27,"total_installs":28,"avg_security_score":29,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},"hayk",7,20,91,30,88,"2026-04-04T11:22:29.089Z",[34,59,80,99,118],{"slug":35,"name":36,"version":37,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":44,"num_ratings":45,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":53,"download_link":54,"security_score":55,"vuln_count":56,"unpatched_count":11,"last_vuln_date":57,"fetched_at":58},"coolclock","CoolClock – a Javascript Analog Clock","4.3.7","Rolf Allard van Hagen","https:\u002F\u002Fprofiles.wordpress.org\u002Fravanh\u002F","\u003Cp>This plugin integrates \u003Ca href=\"http:\u002F\u002Frandomibis.com\u002Fcoolclock\u002F\" rel=\"nofollow ugc\">CoolClock – The Javascript Analog Clock\u003C\u002Fa> into your WordPress site. You can add it as a \u003Cstrong>widget\u003C\u002Fstrong> to your sidebar or insert it into your posts and pages with a \u003Cstrong>shortcode\u003C\u002Fstrong>. See \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fcoolclock\u002Ffaq\u002F\" rel=\"ugc\">the FAQ’s\u003C\u002Fa> for available shortcode parameters and how to build the clock into your theme.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Can be added via a widget, shortcode or theme function\u003C\u002Fli>\n\u003Cli>No flash, meaning compatible with tablets and most other javascript enabled mobile devices\u003C\u002Fli>\n\u003Cli>22 different skins to choose from or\u003C\u002Fli>\n\u003Cli>Custom skin option to create your own skin style\u003C\u002Fli>\n\u003Cli>Linear or logarithmic time scale\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Read more on the \u003Ca href=\"https:\u002F\u002Fstatus301.net\u002Fwordpress-plugins\u002Fcoolclock\u002F\" rel=\"nofollow ugc\">CoolClock homepage\u003C\u002Fa> or see \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fcoolclock\u002Ffaq\u002F\" rel=\"ugc\">the FAQ’s\u003C\u002Fa> to learn how to configure your own skin settings.\u003C\u002Fp>\n\u003Ch4>Pro features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Show date or 24h digital time\u003C\u002Fli>\n\u003Cli>Background image or color\u003C\u002Fli>\n\u003Cli>Border radius (rounded corners for background)\u003C\u002Fli>\n\u003Cli>Advanced positioning options (relative to background)\u003C\u002Fli>\n\u003Cli>Advanced shortcode parameters (including background image and custom skin)\u003C\u002Fli>\n\u003Cli>One extra clean skin for use with background image\u003C\u002Fli>\n\u003Cli>Support on the \u003Ca href=\"https:\u002F\u002Fpremium.status301.com\u002Fsupport\u002Fforum\u002Fcoolclock-pro\u002F\" rel=\"nofollow ugc\">CoolClock Pro forum\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Pro features come with the \u003Ca href=\"https:\u002F\u002Fpremium.status301.com\u002Fdownloads\u002Fcoolclock-advanced\u002F\" rel=\"nofollow ugc\">CoolClock – Advanced extension\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translators\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Dutch\u003C\u002Fstrong> * R.A. van Hagen https:\u002F\u002Fstatus301.net\u002F (version 3.0)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>French\u003C\u002Fstrong> * R.A. van Hagen https:\u002F\u002Fstatus301.net\u002F (version 3.0)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>German\u003C\u002Fstrong> * Manfred Mrak http:\u002F\u002Fwww.niftyfox.ch\u002F (version 3.2)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Serbian\u003C\u002Fstrong> * Borisa Djuraskovic – WebHostingHub http:\u002F\u002Fwww.webhostinghub.com\u002F (version 2.9.4)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Slovenian\u003C\u002Fstrong> * Adijan Dervišević – http:\u002F\u002Fwww.adijan.eu (version 3.2)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Russian\u003C\u002Fstrong> * Наталия Завьялова – http:\u002F\u002Ftime-impressions.ru (version 2.9.8)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Please \u003Ca href=\"https:\u002F\u002Fstatus301.net\u002Fcontact-en\u002F\" rel=\"nofollow ugc\">contact me\u003C\u002Fa> to submit your translation and get mentioned here 🙂\u003C\u002Fp>\n\u003Ch4>Privacy \u002F GDPR\u003C\u002Fh4>\n\u003Cp>This plugin does not collect any user or visitor data nor set browser cookies. Using this plugin should not impact your site privacy policy in any way.\u003C\u002Fp>\n\u003Ch3>Known Issues\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>When IE 8 is manually put or forced (through X-UA-Compatibility meta tag or response header) into Compatibility mode, the Clock will –even though the canvas area is put in place– remain invisible.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>When a shortcode is not placed on its own line but on the same line with text, image or even another shortcode, then the output (div with canvas tag) will be wrapped inside a paragraph tag. While most browsers do not have a problem displaying the clock, this \u003Cem>will\u003C\u002Fem> cause a validation error.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Please report any other issues on the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fcoolclock\" rel=\"ugc\">Support page\u003C\u002Fa>.\u003C\u002Fp>\n","Show an analog clock on your WordPress site sidebar or in post and page content.",2000,87273,98,15,"2023-10-04T17:27:00.000Z","6.3.8","4.8.1","5.6",[51,52,35,17,19],"analog-clock","clock","https:\u002F\u002Fstatus301.net\u002Fwordpress-plugins\u002Fcoolclock\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcoolclock.zip",85,1,"2021-08-30 00:00:00","2026-03-15T15:16:48.613Z",{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":69,"num_ratings":70,"last_updated":71,"tested_up_to":72,"requires_at_least":73,"requires_php":72,"tags":74,"homepage":78,"download_link":79,"security_score":21,"vuln_count":11,"unpatched_count":11,"last_vuln_date":22,"fetched_at":58},"jquery-categories-list","JS Categories List Widget","4.0.3","Miguel Useche","https:\u002F\u002Fprofiles.wordpress.org\u002Fskatox\u002F","\u003Cp>This plugin provides a widget and a filter to display a collapsible list of categories in your sidebar or posts by using vanilla Javascript.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Support for Gutenberg blocks. Add it to any FSE theme or Gutenberg compatible theme.\u003C\u002Fli>\n\u003Cli>Display a collapsed list of your archives to reduce space.\u003C\u002Fli>\n\u003Cli>Uses vanilla JS to add effects and to be compatible with all browsers.\u003C\u002Fli>\n\u003Cli>Select the symbol for expanding\u002Fcollapsing categories\u003C\u002Fli>\n\u003Cli>Select categories to exclude, so it shows only the categories you want.\u003C\u002Fli>\n\u003Cli>Autoexpand selected category (including it parent or child).\u003C\u002Fli>\n\u003Cli>Support for multiple instances.\u003C\u002Fli>\n\u003Cli>Simple layout configuration\u003C\u002Fli>\n\u003Cli>Shortcode support  \u003Cem>[JsCategoriesList]\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>Translated to Spanish, Italian Russian, Slovak, Czech.\u003C\u002Fli>\n\u003Cli>Compatible with most JS cache and minify plugins.\u003C\u002Fli>\n\u003Cli>And more to come…\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Title: title of the widget.\u003C\u002Fli>\n\u003Cli>Trigger Symbol:  characters to be displayed as a bullet.\u003C\u002Fli>\n\u003Cli>Symbol position: where to put the expand\u002Fcollapse symbol.\u003C\u002Fli>\n\u003Cli>Effect: JS’s effect to use.\u003C\u002Fli>\n\u003Cli>Order by: display order of categories.\u003C\u002Fli>\n\u003Cli>Expand: if list should be expanded or callapsed by default.\u003C\u002Fli>\n\u003Cli>Show number of posts: display how many post are published in the category.\u003C\u002Fli>\n\u003Cli>Show empty categories: display categories with no posts.\u003C\u002Fli>\n\u003Cli>Categories to include: categories to be included from the list.\u003C\u002Fli>\n\u003Cli>Categories to exclude: categories to be excluded from the list.\u003C\u002Fli>\n\u003C\u002Ful>\n","A simple Gutenberg block and JS widget (can be called from posts) for displaying categories in a list with some effects.",1000,73957,96,16,"2026-01-12T20:32:00.000Z","7.0","6.1",[75,76,77,17,19],"block","categories","gutenberg","https:\u002F\u002Fskatox.com\u002Fblog\u002Fjquery-categories-list-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjquery-categories-list.4.0.3.zip",{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":21,"downloaded":88,"rating":21,"num_ratings":89,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":13,"tags":93,"homepage":97,"download_link":98,"security_score":55,"vuln_count":11,"unpatched_count":11,"last_vuln_date":22,"fetched_at":58},"allow-javascript-in-text-widgets","Allow Javascript in Text Widgets","0.3","Philip John","https:\u002F\u002Fprofiles.wordpress.org\u002Fphilipjohn\u002F","\u003Cp>Replaces the default text widget with one that allows Javascript so you can do basic things like add Google Ads to your sidebar without using other plugins.\u003C\u002Fp>\n\u003Cp>Important: It’s only intended for Multisite. If you use it in standard WordPress and it doesn’t work or breaks something don’t expect any sympathy.\u003C\u002Fp>\n","Replaces the default text widget with one that allows Javascript so you can do basic things like add Google Ads to your sidebar without using other pl …",11242,2,"2014-09-03T20:15:00.000Z","4.0.38","3.2.1",[94,17,95,96,19],"filter","kses","text-widget","http:\u002F\u002Fphilipjohn.co.uk\u002F#pj-better-multisite-text-widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fallow-javascript-in-text-widgets.0.3.zip",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":107,"downloaded":108,"rating":11,"num_ratings":11,"last_updated":109,"tested_up_to":110,"requires_at_least":111,"requires_php":13,"tags":112,"homepage":116,"download_link":117,"security_score":55,"vuln_count":11,"unpatched_count":11,"last_vuln_date":22,"fetched_at":58},"safe-php-code-widget","Safe PHP Code Widget","1.0","k0tik","https:\u002F\u002Fprofiles.wordpress.org\u002Fk0tik\u002F","\u003Cp>The usual Text widget allows you to insert arbitrary Text and\u002For HTML code. This allows that too, but also parses any PHP or JavaScript code in the text widget and executes it.\u003C\u002Fp>\n\u003Cp>This plugin is based on “PHP Code Widget”, but now available for use by site administrators ONLY, which makes it more secure.\u003C\u002Fp>\n\u003Cp>All PHP code must be enclosed in the standard php opening and closing tags ( \u003Ccode>\u003C?php\u003C\u002Fcode> and \u003Ccode>?>\u003C\u002Fcode> ) for it to be recognized and executed. Also JavaScript code must be enclosed in the \u003Ccode>\u003Cscript>\u003C\u002Fcode> and \u003Ccode>\u003C\u002Fscript>\u003C\u002Fcode> tags, as usual.\u003C\u002Fp>\n","Adds a secure and simple widget in which you can use PHP and JavaScript code. Also you can use unfiltered HTML or just Text. Admin Use Only.",70,2248,"2019-01-09T01:28:00.000Z","5.0.25","2.8",[113,114,17,115,19],"code","html","php","https:\u002F\u002Fnewbiz.online\u002Fwp","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsafe-php-code-widget.zip",{"slug":119,"name":120,"version":121,"author":122,"author_profile":123,"description":124,"short_description":125,"active_installs":107,"downloaded":126,"rating":127,"num_ratings":128,"last_updated":129,"tested_up_to":130,"requires_at_least":131,"requires_php":13,"tags":132,"homepage":136,"download_link":137,"security_score":55,"vuln_count":11,"unpatched_count":11,"last_vuln_date":22,"fetched_at":58},"sliding-panel","Sliding Panel","0.2.0","Justin Tadlock","https:\u002F\u002Fprofiles.wordpress.org\u002Fgreenshady\u002F","\u003Cp>The Sliding Panel plugin creates a new sidebar for your site that allows you to add widgets.  These widgets appear within a responsive sliding panel at the top of your site on the front end.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>It’s a jQuery-powered sliding panel.  That’s a feature in-and-of itself, right?\u003C\u002Fli>\n\u003Cli>Uses widgets, so you can add pretty much anything you can add to any other sidebar.\u003C\u002Fli>\n\u003Cli>Uses the WordPress-packaged jQuery.\u003C\u002Fli>\n\u003Cli>Will automatically display with any correctly-coded theme.\u003C\u002Fli>\n\u003Cli>Supports HTML5 and Schema.org microdata.\u003C\u002Fli>\n\u003Cli>It’s responsive, so it’ll look good on any device.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Professional Support\u003C\u002Fh3>\n\u003Cp>If you need professional plugin support from me, the plugin author, you can access the support forums at \u003Ca href=\"http:\u002F\u002Fthemehybrid.com\u002Fsupport\" rel=\"nofollow ugc\">Theme Hybrid\u003C\u002Fa>, which is a professional WordPress help\u002Fsupport site where I handle support for all my plugins and themes for a community of 40,000+ users (and growing).\u003C\u002Fp>\n\u003Ch3>Plugin Development\u003C\u002Fh3>\n\u003Cp>If you’re a theme author, plugin author, or just a code hobbyist, you can follow the development of this plugin on it’s \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fjustintadlock\u002Fsliding-panel\" rel=\"nofollow ugc\">GitHub repository\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Donations\u003C\u002Fh3>\n\u003Cp>Yes, I do accept donations.  If you want to buy me a beer or whatever, you can do so from my \u003Ca href=\"http:\u002F\u002Fthemehybrid.com\u002Fdonate\" rel=\"nofollow ugc\">donations page\u003C\u002Fa>.  I appreciate all donations, no matter the size.  Further development of this plugin is not contingent on donations, but they are always a nice incentive.\u003C\u002Fp>\n","Adds a responsive sliding panel to the top of your WordPress-powered site.",36833,90,4,"2013-10-11T04:04:00.000Z","3.7.41","3.6",[17,133,134,135,19],"jquery","sidebar","slider","http:\u002F\u002Fthemehybrid.com\u002Fplugins\u002Fsliding-panel","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsliding-panel.0.2.0.zip",{"attackSurface":139,"codeSignals":165,"taintFlows":178,"riskAssessment":179,"analyzedAt":185},{"hooks":140,"ajaxHandlers":157,"restRoutes":158,"shortcodes":159,"cronEvents":164,"entryPointCount":56,"unprotectedCount":11},[141,146,150,153],{"type":142,"name":143,"callback":144,"file":145,"line":31},"action","admin_init","admin_init_simple_virtu_widget","simple-virtu-widget.php",{"type":142,"name":147,"callback":148,"file":145,"line":149},"admin_menu","admin_menu_simple_virtu_widget",89,{"type":142,"name":151,"callback":152,"file":145,"line":44},"init","add_get_val",{"type":142,"name":154,"callback":155,"file":145,"line":156},"plugins_loaded","simple_virtu_widget_locale",107,[],[],[160],{"tag":161,"callback":162,"file":145,"line":163},"virtu-widget","simple_virtu_widget",92,[],{"dangerousFunctions":166,"sqlUsage":167,"outputEscaping":169,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":177},[],{"prepared":11,"raw":11,"locations":168},[],{"escaped":11,"rawEcho":89,"locations":170},[171,175],{"file":172,"line":173,"context":174},"options.php",13,"raw output",{"file":172,"line":176,"context":174},27,[],[],{"summary":180,"deductions":181},"The `simple-virtu-widget` plugin, version 1.2.1, presents a generally good security posture based on the provided static analysis. There are no detected dangerous functions, SQL injection vulnerabilities due to prepared statements, file operations, or external HTTP requests.  The absence of known CVEs and a clean vulnerability history further bolster this perception. However, a significant concern arises from the lack of output escaping for all identified outputs. This means that any data processed and displayed by the plugin could potentially be vulnerable to cross-site scripting (XSS) attacks if that data originates from an untrusted source.  While the attack surface appears small with only one shortcode and no unprotected entry points, the unescaped output represents a tangible risk that should be addressed.",[182],{"reason":183,"points":184},"Unescaped output identified",6,"2026-03-17T05:51:29.794Z",{"wat":187,"direct":194},{"assetPaths":188,"generatorPatterns":190,"scriptPaths":191,"versionParams":193},[189],"\u002Fwp-content\u002Fplugins\u002Fsimple-virtu-widget\u002Flanguages\u002F",[],[192],"https:\u002F\u002Fbkr.jarvis.su\u002Fvirtu-widget\u002Fvirtu-widgets.js",[],{"cssClasses":195,"htmlComments":196,"htmlAttributes":197,"restEndpoints":200,"jsGlobals":201,"shortcodeOutput":202},[],[],[198,199],"managerID","gaID",[],[],[203,204,205],"\u003Cvirtu-widget","managerID=\"","gaID=\""]