[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHeM9DkcrV9H7aG0JQ5bptbyWgVxl95OUlI2rjlZBvEQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":39,"analysis":102,"fingerprints":202},"statsfc-form","StatsFC Form","3.0.1","Will Woodward","https:\u002F\u002Fprofiles.wordpress.org\u002Fwilljw\u002F","\u003Cp>Add a football form guide to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\u002Fsign-up\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Fform\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Fform\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003Cli>Türkçe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’re interested in translating for us, please get in touch at \u003Ca href=\"mailto:hello@statsfc.com\" rel=\"nofollow ugc\">hello@statsfc.com\u003C\u002Fa> or on Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FStatsFC\" rel=\"nofollow ugc\">@StatsFC\u003C\u002Fa>.\u003C\u002Fp>\n","This widget will place a current football form guide in your website.",20,3623,100,1,"2023-06-21T23:26:00.000Z","6.2.9","3.3","",[20,21,22,23],"football","premier-league","soccer","widget","https:\u002F\u002Fstatsfc.com\u002Fteam-form","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-form.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":35,"avg_patch_time_days":36,"trust_score":37,"computed_at":38},"willjw",13,360,88,30,86,"2026-04-04T15:07:39.332Z",[40,54,69,81,91],{"slug":41,"name":42,"version":43,"author":7,"author_profile":8,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":37,"num_ratings":48,"last_updated":49,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":50,"homepage":52,"download_link":53,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"statsfc-table","StatsFC Table","2.2.1","\u003Cp>Add a football league table to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Fleague-table\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Fleague-table\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003Cli>Türkçe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’re interested in translating for us, please get in touch at \u003Ca href=\"mailto:hello@statsfc.com\" rel=\"nofollow ugc\">hello@statsfc.com\u003C\u002Fa> or on Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FStatsFC\" rel=\"nofollow ugc\">@StatsFC\u003C\u002Fa>.\u003C\u002Fp>\n","This widget will place a football league table on your website.",80,11707,4,"2023-06-21T23:28:00.000Z",[20,21,22,51,23],"uefa","https:\u002F\u002Fstatsfc.com\u002Fleague-table","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-table.zip",{"slug":55,"name":56,"version":57,"author":7,"author_profile":8,"description":58,"short_description":59,"active_installs":60,"downloaded":61,"rating":13,"num_ratings":62,"last_updated":63,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":64,"homepage":66,"download_link":67,"security_score":68,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"statsfc-fixtures","StatsFC Fixtures","3.1.0","\u003Cp>Add a list of football fixtures to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\u002Fsign-up\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Ffixtures\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Ffixtures\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003Cli>Türkçe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’re interested in translating for us, please get in touch at \u003Ca href=\"mailto:hello@statsfc.com\" rel=\"nofollow ugc\">hello@statsfc.com\u003C\u002Fa> or on Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FStatsFC\" rel=\"nofollow ugc\">@StatsFC\u003C\u002Fa>.\u003C\u002Fp>\n","This widget will display a list of football fixtures on your website, for a chosen competition or team.",50,8179,2,"2024-04-22T22:53:00.000Z",[65,20,21,22,23],"fixtures","https:\u002F\u002Fstatsfc.com\u002Ffixtures","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-fixtures.zip",92,{"slug":70,"name":71,"version":57,"author":7,"author_profile":8,"description":72,"short_description":73,"active_installs":74,"downloaded":75,"rating":13,"num_ratings":14,"last_updated":76,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":77,"homepage":79,"download_link":80,"security_score":68,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"statsfc-results","StatsFC Results","\u003Cp>Add a list of football results to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Fresults\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Fresults\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003Cli>Türkçe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’re interested in translating for us, please get in touch at \u003Ca href=\"mailto:hello@statsfc.com\" rel=\"nofollow ugc\">hello@statsfc.com\u003C\u002Fa> or on Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FStatsFC\" rel=\"nofollow ugc\">@StatsFC\u003C\u002Fa>.\u003C\u002Fp>\n","This widget will place list of football results in your website.",40,6460,"2024-04-22T22:56:00.000Z",[20,21,78,22,23],"results","https:\u002F\u002Fstatsfc.com\u002Fresults","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-results.zip",{"slug":82,"name":83,"version":6,"author":7,"author_profile":8,"description":84,"short_description":85,"active_installs":36,"downloaded":86,"rating":13,"num_ratings":14,"last_updated":87,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":88,"homepage":89,"download_link":90,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"statsfc-next-fixture","StatsFC Next Fixture","\u003Cp>Add the next fixture for any Premier League team to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Fixture times are automatically adjusted to your website’s local time.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Fnext-fixture\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Fnext-fixture\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003Cli>Türkçe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’re interested in translating for us, please get in touch at \u003Ca href=\"mailto:hello@statsfc.com\" rel=\"nofollow ugc\">hello@statsfc.com\u003C\u002Fa> or on Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FStatsFC\" rel=\"nofollow ugc\">@StatsFC\u003C\u002Fa>.\u003C\u002Fp>\n","This widget will show the next fixture for a Premier League team on your website.",4948,"2023-06-21T23:27:00.000Z",[65,20,21,22,23],"https:\u002F\u002Fstatsfc.com\u002Fnext-fixture","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-next-fixture.zip",{"slug":92,"name":93,"version":94,"author":7,"author_profile":8,"description":95,"short_description":96,"active_installs":97,"downloaded":98,"rating":27,"num_ratings":27,"last_updated":49,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":99,"homepage":100,"download_link":101,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"statsfc-top-assisters","StatsFC Top Assisters","2.0.1","\u003Cp>Add a football top assisters table to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Ftop-assisters\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Ftop-assisters\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003Cli>Türkçe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’re interested in translating for us, please get in touch at \u003Ca href=\"mailto:hello@statsfc.com\" rel=\"nofollow ugc\">hello@statsfc.com\u003C\u002Fa> or on Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FStatsFC\" rel=\"nofollow ugc\">@StatsFC\u003C\u002Fa>.\u003C\u002Fp>\n","This widget will place a live football top assisters table in your website.",10,1335,[20,21,22,23],"https:\u002F\u002Fstatsfc.com\u002Ftop-assisters","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-top-assisters.zip",{"attackSurface":103,"codeSignals":121,"taintFlows":159,"riskAssessment":187,"analyzedAt":201},{"hooks":104,"ajaxHandlers":114,"restRoutes":115,"shortcodes":116,"cronEvents":120,"entryPointCount":14,"unprotectedCount":27},[105,111],{"type":106,"name":107,"callback":108,"file":109,"line":110},"action","wp_print_footer_scripts","closure","statsfc-form.php",283,{"type":106,"name":112,"callback":108,"file":109,"line":113},"widgets_init",306,[],[],[117],{"tag":4,"callback":118,"file":109,"line":119},"anonymous",310,[],{"dangerousFunctions":122,"sqlUsage":123,"outputEscaping":125,"fileOperations":27,"externalRequests":27,"nonceChecks":27,"capabilityChecks":27,"bundledLibraries":158},[],{"prepared":27,"raw":27,"locations":124},[],{"escaped":126,"rawEcho":127,"locations":128},16,14,[129,132,134,136,138,140,142,144,146,148,150,152,154,156],{"file":109,"line":130,"context":131},103,"raw output",{"file":109,"line":133,"context":131},109,{"file":109,"line":135,"context":131},115,{"file":109,"line":137,"context":131},121,{"file":109,"line":139,"context":131},127,{"file":109,"line":141,"context":131},133,{"file":109,"line":143,"context":131},139,{"file":109,"line":145,"context":131},145,{"file":109,"line":147,"context":131},151,{"file":109,"line":149,"context":131},157,{"file":109,"line":151,"context":131},163,{"file":109,"line":153,"context":131},169,{"file":109,"line":155,"context":131},284,{"file":109,"line":157,"context":131},290,[],[160,178],{"entryPoint":161,"graph":162,"unsanitizedCount":14,"severity":177},"widget (statsfc-form.php:212)",{"nodes":163,"edges":174},[164,169],{"id":165,"type":166,"label":167,"file":109,"line":168},"n0","source","$_SERVER",219,{"id":170,"type":171,"label":172,"file":109,"line":155,"wp_function":173},"n1","sink","echo() [XSS]","echo",[175],{"from":165,"to":170,"sanitized":176},false,"medium",{"entryPoint":179,"graph":180,"unsanitizedCount":14,"severity":186},"\u003Cstatsfc-form> (statsfc-form.php:0)",{"nodes":181,"edges":184},[182,183],{"id":165,"type":166,"label":167,"file":109,"line":168},{"id":170,"type":171,"label":172,"file":109,"line":155,"wp_function":173},[185],{"from":165,"to":170,"sanitized":176},"low",{"summary":188,"deductions":189},"The 'statsfc-form' plugin v3.0.1 exhibits a generally good security posture with no recorded vulnerabilities and a limited attack surface consisting of a single shortcode. The plugin also demonstrates positive development practices by exclusively using prepared statements for SQL queries and not performing file operations or external HTTP requests, which significantly reduces common attack vectors. However, there are notable areas of concern that detract from its overall security.\n\nA significant weakness identified is the lack of proper output escaping, with only 53% of outputs being correctly sanitized. This leaves the plugin susceptible to Cross-Site Scripting (XSS) vulnerabilities, particularly if user-supplied data is rendered without adequate escaping within the shortcode's output. Furthermore, the analysis reveals two taint flows with unsanitized paths, although they are not classified as critical or high severity. The absence of nonce checks and capability checks on its entry points is also a concern, as it implies that unauthorized users could potentially trigger unintended functionality or manipulate data, especially given the presence of a shortcode that could be invoked by various users.\n\nIn conclusion, while the plugin benefits from a clean vulnerability history and responsible SQL handling, the unescaped outputs and lack of authentication\u002Fauthorization checks on its single entry point present clear security risks. Addressing the output escaping and implementing appropriate checks would greatly enhance its security.",[190,193,196,199],{"reason":191,"points":192},"Insufficient output escaping (47% unescaped)",8,{"reason":194,"points":195},"Taint flows with unsanitized paths detected",5,{"reason":197,"points":198},"Missing nonce checks on entry points",7,{"reason":200,"points":198},"Missing capability checks on entry points","2026-03-16T22:53:56.522Z",{"wat":203,"direct":212},{"assetPaths":204,"generatorPatterns":206,"scriptPaths":207,"versionParams":209},[205],"\u002Fwp-content\u002Fplugins\u002Fstatsfc-form\u002Fcss\u002Fstyle.css",[],[208],"\u002Fwp-content\u002Fplugins\u002Fstatsfc-form\u002Fjs\u002Fstatsfc-form.js",[210,211],"statsfc-form\u002Fcss\u002Fstyle.css?ver=","statsfc-form\u002Fjs\u002Fstatsfc-form.js?ver=",{"cssClasses":213,"htmlComments":216,"htmlAttributes":219,"restEndpoints":230,"jsGlobals":231,"shortcodeOutput":233},[214,41,215],"statsfc-widget-container","statsfc-team-highlight",[217,218],"\u003C!-- BEGIN STATSFC FORM WIDGET -->","\u003C!-- END STATSFC FORM WIDGET -->",[220,221,222,223,224,225,226,227,228,229],"data-statsfc-key","data-statsfc-competition","data-statsfc-team","data-statsfc-year","data-statsfc-date","data-statsfc-highlight","data-statsfc-show-badges","data-statsfc-show-score","data-statsfc-limit","data-statsfc-omit-errors",[],[232],"StatsFC",[234],"[statsfc_form"]