[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBzklUkw8cMwoO6sgtaqrHDBd3c8-70szh188RrJ69WY":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":40,"analysis":112,"fingerprints":210},"statsfc-score-predictor","StatsFC Score Predictor","3.1.0","Will Woodward","https:\u002F\u002Fprofiles.wordpress.org\u002Fwilljw\u002F","\u003Cp>Add a score predictor for football matches to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Fscore-predictor\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Fscore-predictor\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003Cli>Türkçe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’re interested in translating for us, please get in touch at \u003Ca href=\"mailto:hello@statsfc.com\" rel=\"nofollow ugc\">hello@statsfc.com\u003C\u002Fa> or on Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FStatsFC\" rel=\"nofollow ugc\">@StatsFC\u003C\u002Fa>.\u003C\u002Fp>\n","This widget will place a score predictor for a football team's matches on your website.",20,8459,100,1,"2023-06-21T23:28:00.000Z","6.2.9","3.3","",[20,21,22,23,24],"football","predictor","score","soccer","widget","https:\u002F\u002Fstatsfc.com\u002Fscore-predictor","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-score-predictor.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":35,"avg_security_score":36,"avg_patch_time_days":37,"trust_score":38,"computed_at":39},"willjw",13,360,88,30,86,"2026-04-04T21:41:33.804Z",[41,52,65,85,99],{"slug":42,"name":43,"version":44,"author":7,"author_profile":8,"description":45,"short_description":46,"active_installs":37,"downloaded":47,"rating":13,"num_ratings":14,"last_updated":48,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":49,"homepage":50,"download_link":51,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"statsfc-prediction-league","StatsFC Prediction League","2.0.1","\u003Cp>Add a prediction league to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Fprediction-league\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Fprediction-league\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003C\u002Ful>\n","This widget will place a prediction league for a competition of your choice on your website.",5834,"2023-06-21T23:27:00.000Z",[20,21,22,23,24],"https:\u002F\u002Fstatsfc.com\u002Fprediction-league","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-prediction-league.zip",{"slug":53,"name":54,"version":55,"author":7,"author_profile":8,"description":56,"short_description":57,"active_installs":37,"downloaded":58,"rating":13,"num_ratings":14,"last_updated":18,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":59,"homepage":62,"download_link":63,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":64},"statsfc-live","StatsFC Live","3.0.1","\u003Cp>Add live football scores to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\u002Fsign-up\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Flive\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Flive\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003Cli>Türkçe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’re interested in translating for us, please get in touch at \u003Ca href=\"mailto:hello@statsfc.com\" rel=\"nofollow ugc\">hello@statsfc.com\u003C\u002Fa> or on Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FStatsFC\" rel=\"nofollow ugc\">@StatsFC\u003C\u002Fa>.\u003C\u002Fp>\n","This widget will display live football scores on your website, for a chosen competition or team.",7733,[60,20,61,23,24],"fixtures","scores","https:\u002F\u002Fstatsfc.com\u002Flive-games","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-live.zip","2026-03-15T10:48:56.248Z",{"slug":66,"name":67,"version":68,"author":69,"author_profile":70,"description":71,"short_description":72,"active_installs":13,"downloaded":73,"rating":13,"num_ratings":14,"last_updated":74,"tested_up_to":75,"requires_at_least":76,"requires_php":18,"tags":77,"homepage":83,"download_link":84,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"webeki-soccer-scores","Soccer Widgets – Football Results & Rankings","1.3","widgetlab","https:\u002F\u002Fprofiles.wordpress.org\u002Fnvmnewvision\u002F","\u003Cp>Show football scores and table rankings in your WordPress website using Soccer Widgets shortcodes. Free data, updated automatically, from 250+ football competitions from all over the world, available in multiple languages.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>widgets with football table rankings and latest match results from 250+ competitions around the world\u003C\u002Fli>\n\u003Cli>data available for pull in 16 languages (English, Spanish, French, German, Swedish, Danish, Norwegian, Finnish, Dutch, Italian, Portuguese, Polish, Romanian, Hungarian, Czech, Greek)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>How to use:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>install the plugin and activate it in your WordPress website\u003C\u002Fli>\n\u003Cli>in the left side menu in Admin area look for Soccer Widgets item\u003C\u002Fli>\n\u003Cli>go to Soccer Widgets to generate the shortcode for any data options like results and table rankings\u003C\u002Fli>\n\u003Cli>copy the shortcode and paste it in your blog post or page\u003C\u002Fli>\n\u003Cli>optional: most data in widgets are presented in table formats, with 100% width. You can use html code to control the size of the width\u003C\u002Fli>\n\u003Cli>optional: data tables from these widgets make use of your website CSS style. However if you do not like how they look in your pages, play with the Customization option of the plugin to change style colors\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n","Soccer Widgets: use shortcodes to deliver updated soccer data like various table rankings and football results by competition.",5966,"2024-01-22T02:31:00.000Z","6.4.8","4.1",[78,79,80,81,82],"football-rankings","football-tables","soccer-results","soccer-statistics","soccer-widgets","https:\u002F\u002Fwww.widgetlab.net\u002Fwordpress-plugins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwebeki-soccer-scores.1.3.zip",{"slug":86,"name":87,"version":88,"author":7,"author_profile":8,"description":89,"short_description":90,"active_installs":91,"downloaded":92,"rating":38,"num_ratings":93,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":94,"homepage":97,"download_link":98,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"statsfc-table","StatsFC Table","2.2.1","\u003Cp>Add a football league table to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Fleague-table\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Fleague-table\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003Cli>Türkçe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’re interested in translating for us, please get in touch at \u003Ca href=\"mailto:hello@statsfc.com\" rel=\"nofollow ugc\">hello@statsfc.com\u003C\u002Fa> or on Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FStatsFC\" rel=\"nofollow ugc\">@StatsFC\u003C\u002Fa>.\u003C\u002Fp>\n","This widget will place a football league table on your website.",80,11707,4,[20,95,23,96,24],"premier-league","uefa","https:\u002F\u002Fstatsfc.com\u002Fleague-table","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-table.zip",{"slug":100,"name":101,"version":6,"author":7,"author_profile":8,"description":102,"short_description":103,"active_installs":104,"downloaded":105,"rating":13,"num_ratings":106,"last_updated":107,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":108,"homepage":109,"download_link":110,"security_score":111,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"statsfc-fixtures","StatsFC Fixtures","\u003Cp>Add a list of football fixtures to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\u002Fsign-up\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Ffixtures\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Ffixtures\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003Cli>Türkçe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’re interested in translating for us, please get in touch at \u003Ca href=\"mailto:hello@statsfc.com\" rel=\"nofollow ugc\">hello@statsfc.com\u003C\u002Fa> or on Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FStatsFC\" rel=\"nofollow ugc\">@StatsFC\u003C\u002Fa>.\u003C\u002Fp>\n","This widget will display a list of football fixtures on your website, for a chosen competition or team.",50,8179,2,"2024-04-22T22:53:00.000Z",[60,20,95,23,24],"https:\u002F\u002Fstatsfc.com\u002Ffixtures","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-fixtures.zip",92,{"attackSurface":113,"codeSignals":131,"taintFlows":167,"riskAssessment":195,"analyzedAt":209},{"hooks":114,"ajaxHandlers":124,"restRoutes":125,"shortcodes":126,"cronEvents":130,"entryPointCount":14,"unprotectedCount":28},[115,121],{"type":116,"name":117,"callback":118,"file":119,"line":120},"action","wp_print_footer_scripts","closure","statsfc-score-predictor.php",282,{"type":116,"name":122,"callback":118,"file":119,"line":123},"widgets_init",305,[],[],[127],{"tag":4,"callback":128,"file":119,"line":129},"anonymous",309,[],{"dangerousFunctions":132,"sqlUsage":133,"outputEscaping":135,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":166},[],{"prepared":28,"raw":28,"locations":134},[],{"escaped":136,"rawEcho":136,"locations":137},14,[138,140,142,144,146,148,150,152,154,156,158,160,162,164],{"file":119,"line":13,"context":139},"raw output",{"file":119,"line":141,"context":139},106,{"file":119,"line":143,"context":139},112,{"file":119,"line":145,"context":139},118,{"file":119,"line":147,"context":139},124,{"file":119,"line":149,"context":139},130,{"file":119,"line":151,"context":139},136,{"file":119,"line":153,"context":139},142,{"file":119,"line":155,"context":139},148,{"file":119,"line":157,"context":139},155,{"file":119,"line":159,"context":139},164,{"file":119,"line":161,"context":139},170,{"file":119,"line":163,"context":139},283,{"file":119,"line":165,"context":139},289,[],[168,186],{"entryPoint":169,"graph":170,"unsanitizedCount":14,"severity":185},"widget (statsfc-score-predictor.php:212)",{"nodes":171,"edges":182},[172,177],{"id":173,"type":174,"label":175,"file":119,"line":176},"n0","source","$_SERVER",219,{"id":178,"type":179,"label":180,"file":119,"line":163,"wp_function":181},"n1","sink","echo() [XSS]","echo",[183],{"from":173,"to":178,"sanitized":184},false,"medium",{"entryPoint":187,"graph":188,"unsanitizedCount":14,"severity":194},"\u003Cstatsfc-score-predictor> (statsfc-score-predictor.php:0)",{"nodes":189,"edges":192},[190,191],{"id":173,"type":174,"label":175,"file":119,"line":176},{"id":178,"type":179,"label":180,"file":119,"line":163,"wp_function":181},[193],{"from":173,"to":178,"sanitized":184},"low",{"summary":196,"deductions":197},"The \"statsfc-score-predictor\" plugin v3.1.0 exhibits a generally positive security posture with some notable areas of concern.  The absence of known CVEs and unpatched vulnerabilities is a strong indicator of good past security practices. The code analysis reveals a very limited attack surface with only one shortcode entry point and no AJAX handlers or REST API routes exposed without proper checks, which is commendable.  Furthermore, the plugin utilizes prepared statements for all SQL queries, mitigating SQL injection risks effectively.\n\nHowever, a significant weakness lies in the output escaping, where only 50% of outputs are properly escaped. This opens the door to potential Cross-Site Scripting (XSS) vulnerabilities if user-supplied data is not handled carefully before being displayed. The taint analysis, while having a small number of flows, identified two flows with unsanitized paths, which, despite not being flagged as critical or high severity, warrant attention. The complete lack of nonce and capability checks on the identified entry points, while the attack surface is currently small, represents a future risk should the plugin's functionality expand.\n\nIn conclusion, the plugin benefits from a clean vulnerability history and robust SQL handling. The primary risks stem from the insufficient output escaping and the presence of unsanitized paths in taint flows. The absence of nonce and capability checks on existing entry points is a potential vulnerability waiting to be exploited if the plugin's exposure increases. Addressing the output escaping and investigating the unsanitized paths are crucial next steps.",[198,201,204,207],{"reason":199,"points":200},"Unsanitized paths in taint flows (2 flows)",8,{"reason":202,"points":203},"Output escaping only 50% proper",6,{"reason":205,"points":206},"No nonce checks on entry points",5,{"reason":208,"points":206},"No capability checks on entry points","2026-03-16T22:44:17.337Z",{"wat":211,"direct":218},{"assetPaths":212,"generatorPatterns":214,"scriptPaths":215,"versionParams":216},[213],"\u002Fwp-content\u002Fplugins\u002Fstatsfc-score-predictor\u002Fjs\u002Fstatsfc-score-predictor.js",[],[],[217],"statsfc-score-predictor\u002Fjs\u002Fstatsfc-score-predictor.js?ver=",{"cssClasses":219,"htmlComments":221,"htmlAttributes":222,"restEndpoints":234,"jsGlobals":235,"shortcodeOutput":237},[220],"statsfc-score-predictor-widget",[],[223,224,225,226,227,228,229,230,231,232,233],"data-widget-id","data-key","data-team","data-competition","data-date","data-show-match-details","data-restricted","data-max-display-predictions","data-timezone","data-omit-errors","data-default-css",[],[236],"statsfc_score_predictor_ajax_object",[238,220],"\u003Cdiv id=\"statsfc-score-predictor-widget-"]