[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fib0uxF4dcpRmLPI5obH1Yo5aw58XCLB2-nDyINwexR4":3,"$fDBZ7uRWpRqkmGqpSbgs49Hn-ExLDISRT9eRHkw16PWE":196,"$f2VXV9MYaVz-s59P0l8GSUsnK7_ZQvHM3SYDIZ2MhqeE":201},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"discovery_status":27,"vulnerabilities":28,"developer":29,"crawl_stats":25,"alternatives":34,"analysis":114,"fingerprints":178},"standwithukraine","Stand With Ukraine","1.0.3","imsadhappy","https:\u002F\u002Fprofiles.wordpress.org\u002Fimsadhappy\u002F","\u003Cp>This plugin is written and distriubted only in infromation purposes. No payments and no analytics are implemented through this plugin.\u003C\u002Fp>\n\u003Cp>This plugin simply adds button to the bottom of the page or a full-page line (at the top or at the bottom of the page). See all the available styles on the screenshots below. When user clicks the button – a popup appears with the following text:\u003C\u002Fp>\n\u003Cp>StandWithUkraine\u003C\u002Fp>\n\u003Cp>We don’t know how long the war will last. But what we do know is that we can’t stand aside and watch.\u003C\u002Fp>\n\u003Cp>The fastest way you can help too is to support Ukraine financially. The National Bank of Ukraine (NBU) has opened a multi-currency account for that purpose.\u003C\u002Fp>\n\u003Cp>This account accepts donations in US, Canadian and Australian dollars, euros, British pounds, Swiss francs, yuan and yen.\u003C\u002Fp>\n\u003Cp>UA823000010000032302338301027\u003C\u002Fp>\n\u003Cp>Also accepting cryptocurrency donations – the fastest way to help.\u003C\u002Fp>\n\u003Cp>BTC – 357a3So9CbsNfBBgFYACGvxxS6tMaDoa1P\u003Cbr \u002F>\nETH, USDT (ERC-20) – 0x165CD37b4C644C2921454429E7F9358d18A45e14\u003C\u002Fp>\n\u003Cp>Spread the word!\u003C\u002Fp>\n\u003Ch4>Installation\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Install using the WordPress built-in Plugin installer, or Extract the zip file and drop the contents in the \u003Ccode>wp-content\u002Fplugins\u002F\u003C\u002Fcode> directory of your WordPress installation.\u003C\u002Fli>\n\u003Cli>Activate the plugin through the ‘Plugins’ menu in WordPress.\u003C\u002Fli>\n\u003Cli>Go to Stand with Ukraine settings page in menu\u003C\u002Fli>\n\u003Cli>Select format and style for the banner.\u003C\u002Fli>\n\u003C\u002Fol>\n","Inform visitors of your website that you support Ukraine. Tell them how they can help too - donate to Ukrainian Army and government.",10,1063,0,"2022-03-22T17:31:00.000Z","5.9.13","5.0","5.6",[19,20,4,21],"help-ukraine","stand-with-ukraine","ukraine","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstandwithukraine.1.0.3.zip",85,null,"2026-04-06T09:54:40.288Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":11,"avg_security_score":24,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},1,30,84,"2026-05-20T03:57:23.488Z",[35,49,68,80,96],{"slug":20,"name":5,"version":36,"author":37,"author_profile":38,"description":39,"short_description":40,"active_installs":11,"downloaded":41,"rating":42,"num_ratings":43,"last_updated":44,"tested_up_to":15,"requires_at_least":45,"requires_php":17,"tags":46,"homepage":22,"download_link":47,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":48},"1.0.5","Jonathan Bossenger","https:\u002F\u002Fprofiles.wordpress.org\u002Fpsykro\u002F","\u003Cp>Displays a banner on your site to show your support for Ukraine. Customize your banner using the \u003Ccode>#stand_with_ukraine_overlay\u003C\u002Fcode> CSS ID-attribute.\u003C\u002Fp>\n","Displays a banner and link on your site to show your support for Ukraine. Styles are output inline for performance reasons, but can be filtered using …",1491,100,6,"2022-03-08T18:46:00.000Z","4.6",[4],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstand-with-ukraine.1.0.5.zip","2026-04-16T10:56:18.058Z",{"slug":50,"name":51,"version":52,"author":53,"author_profile":54,"description":55,"short_description":56,"active_installs":57,"downloaded":58,"rating":42,"num_ratings":59,"last_updated":60,"tested_up_to":61,"requires_at_least":62,"requires_php":22,"tags":63,"homepage":65,"download_link":66,"security_score":67,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":48},"stand-ukraine","Stand with Ukraine","1.2","closemarketing","https:\u002F\u002Fprofiles.wordpress.org\u002Fclosemarketing\u002F","\u003Cp>Creates a Flag in the footer to show that you stand with Ukraine.\u003C\u002Fp>\n\u003Ch3>Developers\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fclosemarketing\u002Fstand-ukraine\" rel=\"nofollow ugc\">Official Repository Github\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Links\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fen.close.marketing\u002F\" rel=\"nofollow ugc\">Closemarketing\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fen.close.technology\u002F\" rel=\"nofollow ugc\">CloseTechnology\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Shows a flag in the footer to show that you stand with Ukraine.",70,2675,3,"2024-11-04T15:56:00.000Z","6.7.5","4.0",[64,50,21],"flag","https:\u002F\u002Fclose.technology","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstand-ukraine.1.2.zip",92,{"slug":19,"name":69,"version":70,"author":71,"author_profile":72,"description":73,"short_description":74,"active_installs":11,"downloaded":75,"rating":42,"num_ratings":30,"last_updated":76,"tested_up_to":77,"requires_at_least":16,"requires_php":22,"tags":78,"homepage":22,"download_link":79,"security_score":67,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":48},"Help Ukraine","1.0.4","Eric Binnion","https:\u002F\u002Fprofiles.wordpress.org\u002Febinnion\u002F","\u003Cp>A plugin to simplify adding a Help Ukraine banner, from the folks at \u003Ca href=\"https:\u002F\u002Fhelpukrainewin.org\u002F\" rel=\"nofollow ugc\">helpukrainewin.org\u003C\u002Fa>, to WordPress websites.\u003C\u002Fp>\n\u003Cp>This plugin allows you to choose from three different style variations as well as control which corner of your website the widget will display in.\u003C\u002Fp>\n","A plugin to simplify adding a Help Ukraine banner, from the folks at helpukrainewin.org, to WordPress websites.",2206,"2025-04-25T08:17:00.000Z","6.8.5",[21],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhelp-ukraine.1.0.4.zip",{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":13,"downloaded":88,"rating":13,"num_ratings":13,"last_updated":89,"tested_up_to":90,"requires_at_least":62,"requires_php":22,"tags":91,"homepage":22,"download_link":95,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":48},"support-ukraine-floating-flag","Support Ukraine – Floating Flag","1.0","TOSTAD","https:\u002F\u002Fprofiles.wordpress.org\u002Ftostad\u002F","\u003Cp>Displays the slogans “Slava Ukraini!” and “Herojam slava!” to non-invasively show support for Ukraine.\u003C\u002Fp>\n\u003Ch3>Developers\u003C\u002Fh3>\n\u003Cp>TOSTAD.sk\u003C\u002Fp>\n\u003Ch3>Links\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftostad.sk\u002F\" rel=\"nofollow ugc\">TOSTAD.sk\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Adds a floating flag of Ukraine to the left side of the screen, which opens on hover.",606,"2023-08-03T06:30:00.000Z","6.2.9",[64,92,93,94,21],"herojam-slava","slava-ukraini","support-ukraine","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsupport-ukraine-floating-flag.zip",{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":13,"downloaded":104,"rating":13,"num_ratings":13,"last_updated":105,"tested_up_to":15,"requires_at_least":106,"requires_php":107,"tags":108,"homepage":112,"download_link":113,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":48},"we-stand-with-ukraine-banner","Stand with Ukraine Banner","1.0.8","qstudio","https:\u002F\u002Fprofiles.wordpress.org\u002Fqlstudio\u002F","\u003Cp>Version 1 is very basic – a banner with a flag and a link to donate.\u003C\u002Fp>\n\u003Cp>If there is a skilled UI designer with a few hours to spare, it would be great to improve the design and perhaps offer an alternative version also – please reach out to discuss this.\u003C\u002Fp>\n\u003Cp>Future plans:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Translation .po\u002F.mo files\u003C\u002Fli>\n\u003Cli>Admin screen option to control\n\u003Cul>\n\u003Cli>Select banner designs ( for example horizontal \u002F corner triangle )\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Template editor\u003C\u002Fli>\n\u003Cli>Block option to include banner\u003C\u002Fli>\n\u003Cli>Central list of donation sources, managed from API call\u003C\u002Fli>\n\u003C\u002Ful>\n","Stand with Ukraine Banner Plugin for WordPress.org",1341,"2022-03-09T08:57:00.000Z","4.8","7.0",[109,110,111,21],"anner","plugin","support","https:\u002F\u002Fgithub.com\u002Fqstudio\u002Fwordpress-plugin-stand-with-ukraine","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwe-stand-with-ukraine-banner.1.0.8.zip",{"attackSurface":115,"codeSignals":136,"taintFlows":144,"riskAssessment":171,"analyzedAt":177},{"hooks":116,"ajaxHandlers":132,"restRoutes":133,"shortcodes":134,"cronEvents":135,"entryPointCount":13,"unprotectedCount":13},[117,123,126,129],{"type":118,"name":119,"callback":120,"file":121,"line":122},"action","admin_menu","closure","stand-with-ukraine.php",27,{"type":118,"name":124,"callback":120,"file":121,"line":125},"admin_init",39,{"type":118,"name":127,"callback":120,"file":121,"line":128},"plugins_loaded",58,{"type":118,"name":130,"callback":120,"file":121,"line":131},"wp_footer",63,[],[],[],[],{"dangerousFunctions":137,"sqlUsage":138,"outputEscaping":140,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":143},[],{"prepared":13,"raw":13,"locations":139},[],{"escaped":141,"rawEcho":13,"locations":142},31,[],[],[145],{"entryPoint":146,"graph":147,"unsanitizedCount":169,"severity":170},"\u003Cstand-with-ukraine> (stand-with-ukraine.php:0)",{"nodes":148,"edges":165},[149,154,159,163],{"id":150,"type":151,"label":152,"file":121,"line":153},"n0","source","$_REQUEST['format']",49,{"id":155,"type":156,"label":157,"file":121,"line":153,"wp_function":158},"n1","sink","update_option() [Settings Manipulation]","update_option",{"id":160,"type":151,"label":161,"file":121,"line":162},"n2","$_REQUEST['style']",52,{"id":164,"type":156,"label":157,"file":121,"line":162,"wp_function":158},"n3",[166,168],{"from":150,"to":155,"sanitized":167},false,{"from":160,"to":164,"sanitized":167},2,"low",{"summary":172,"deductions":173},"The 'standwithukraine' plugin version 1.0.3 exhibits a strong security posture based on the provided static analysis.  The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events significantly limits its attack surface. Furthermore, the code adheres to best practices by not utilizing dangerous functions, performing no file operations or external HTTP requests, and, crucially, all SQL queries are prepared statements and all output is properly escaped. This indicates a diligent approach to secure coding in these critical areas.\n\nHowever, a notable concern arises from the taint analysis, which identified one flow with an unsanitized path. While classified as non-critical, any unsanitized path represents a potential weakness that could be exploited if combined with other factors or if the plugin were to gain additional entry points in the future. The plugin's vulnerability history is clean, with no recorded CVEs, which is a positive indicator of its current security and the development team's responsiveness. This lack of historical issues, coupled with the strong static analysis results, suggests the plugin is currently well-maintained and secure, with the taint flow being the primary area for attention.\n\nIn conclusion, the 'standwithukraine' plugin is generally secure due to its limited attack surface and excellent adherence to secure coding practices like prepared SQL statements and output escaping. The sole point of caution is the single identified flow with an unsanitized path from the taint analysis. While no current vulnerabilities are recorded, this specific flow warrants attention to ensure it does not become a vector for future exploitation, especially as the plugin evolves. Overall, the plugin presents a low security risk.",[174],{"reason":175,"points":176},"Flow with unsanitized path detected",7,"2026-04-16T11:38:26.660Z",{"wat":179,"direct":188},{"assetPaths":180,"generatorPatterns":183,"scriptPaths":184,"versionParams":185},[181,182],"\u002Fwp-content\u002Fplugins\u002Fstand-with-ukraine\u002Fassets\u002Fcss\u002Fbanner.css","\u002Fwp-content\u002Fplugins\u002Fstand-with-ukraine\u002Fassets\u002Fjs\u002Fbanner.js",[],[182],[186,187],"standwithukraine\u002Fassets\u002Fcss\u002Fbanner.css?ver=","standwithukraine\u002Fassets\u002Fjs\u002Fbanner.js?ver=",{"cssClasses":189,"htmlComments":191,"htmlAttributes":192,"restEndpoints":193,"jsGlobals":194,"shortcodeOutput":195},[190],"stand-with-ukraine-banner",[],[],[],[],[],{"error":197,"url":198,"statusCode":199,"statusMessage":200,"message":200},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fstandwithukraine\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":202,"versions":203},4,[204,209,216,223],{"version":6,"download_url":23,"svn_tag_url":205,"released_at":25,"has_diff":167,"diff_files_changed":206,"diff_lines":25,"trac_diff_url":207,"vulnerabilities":208,"is_current":197},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fstandwithukraine\u002Ftags\u002F1.0.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fstandwithukraine%2Ftags%2F1.0.2&new_path=%2Fstandwithukraine%2Ftags%2F1.0.3",[],{"version":210,"download_url":211,"svn_tag_url":212,"released_at":25,"has_diff":167,"diff_files_changed":213,"diff_lines":25,"trac_diff_url":214,"vulnerabilities":215,"is_current":167},"1.0.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstandwithukraine.1.0.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fstandwithukraine\u002Ftags\u002F1.0.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fstandwithukraine%2Ftags%2F1.0.1&new_path=%2Fstandwithukraine%2Ftags%2F1.0.2",[],{"version":217,"download_url":218,"svn_tag_url":219,"released_at":25,"has_diff":167,"diff_files_changed":220,"diff_lines":25,"trac_diff_url":221,"vulnerabilities":222,"is_current":167},"1.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstandwithukraine.1.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fstandwithukraine\u002Ftags\u002F1.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fstandwithukraine%2Ftags%2F1.0.0&new_path=%2Fstandwithukraine%2Ftags%2F1.0.1",[],{"version":224,"download_url":225,"svn_tag_url":226,"released_at":25,"has_diff":167,"diff_files_changed":227,"diff_lines":25,"trac_diff_url":25,"vulnerabilities":228,"is_current":167},"1.0.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstandwithukraine.1.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fstandwithukraine\u002Ftags\u002F1.0.0\u002F",[],[]]