[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fp8AsZk341bi4zeSFQfNmuWV9cPa9XxsykGlDg3ZVGlo":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":39,"analysis":102,"fingerprints":207},"statsfc-table","StatsFC Table","2.2.1","Will Woodward","https:\u002F\u002Fprofiles.wordpress.org\u002Fwilljw\u002F","\u003Cp>Add a football league table to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Fleague-table\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Fleague-table\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003Cli>Türkçe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’re interested in translating for us, please get in touch at \u003Ca href=\"mailto:hello@statsfc.com\" rel=\"nofollow ugc\">hello@statsfc.com\u003C\u002Fa> or on Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FStatsFC\" rel=\"nofollow ugc\">@StatsFC\u003C\u002Fa>.\u003C\u002Fp>\n","This widget will place a football league table on your website.",80,11707,86,4,"2023-06-21T23:28:00.000Z","6.2.9","3.3","",[20,21,22,23,24],"football","premier-league","soccer","uefa","widget","https:\u002F\u002Fstatsfc.com\u002Fleague-table","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-table.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":35,"avg_security_score":36,"avg_patch_time_days":37,"trust_score":13,"computed_at":38},"willjw",13,360,88,30,"2026-04-04T14:37:50.029Z",[40,56,69,80,91],{"slug":41,"name":42,"version":43,"author":7,"author_profile":8,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":51,"homepage":53,"download_link":54,"security_score":55,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"statsfc-fixtures","StatsFC Fixtures","3.1.0","\u003Cp>Add a list of football fixtures to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\u002Fsign-up\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Ffixtures\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Ffixtures\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003Cli>Türkçe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’re interested in translating for us, please get in touch at \u003Ca href=\"mailto:hello@statsfc.com\" rel=\"nofollow ugc\">hello@statsfc.com\u003C\u002Fa> or on Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FStatsFC\" rel=\"nofollow ugc\">@StatsFC\u003C\u002Fa>.\u003C\u002Fp>\n","This widget will display a list of football fixtures on your website, for a chosen competition or team.",50,8179,100,2,"2024-04-22T22:53:00.000Z",[52,20,21,22,24],"fixtures","https:\u002F\u002Fstatsfc.com\u002Ffixtures","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-fixtures.zip",92,{"slug":57,"name":58,"version":43,"author":7,"author_profile":8,"description":59,"short_description":60,"active_installs":61,"downloaded":62,"rating":48,"num_ratings":63,"last_updated":64,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":65,"homepage":67,"download_link":68,"security_score":55,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"statsfc-results","StatsFC Results","\u003Cp>Add a list of football results to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Fresults\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Fresults\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003Cli>Türkçe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’re interested in translating for us, please get in touch at \u003Ca href=\"mailto:hello@statsfc.com\" rel=\"nofollow ugc\">hello@statsfc.com\u003C\u002Fa> or on Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FStatsFC\" rel=\"nofollow ugc\">@StatsFC\u003C\u002Fa>.\u003C\u002Fp>\n","This widget will place list of football results in your website.",40,6460,1,"2024-04-22T22:56:00.000Z",[20,21,66,22,24],"results","https:\u002F\u002Fstatsfc.com\u002Fresults","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-results.zip",{"slug":70,"name":71,"version":72,"author":7,"author_profile":8,"description":73,"short_description":74,"active_installs":37,"downloaded":75,"rating":48,"num_ratings":63,"last_updated":76,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":77,"homepage":78,"download_link":79,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"statsfc-next-fixture","StatsFC Next Fixture","3.0.1","\u003Cp>Add the next fixture for any Premier League team to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Fixture times are automatically adjusted to your website’s local time.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Fnext-fixture\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Fnext-fixture\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003Cli>Türkçe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’re interested in translating for us, please get in touch at \u003Ca href=\"mailto:hello@statsfc.com\" rel=\"nofollow ugc\">hello@statsfc.com\u003C\u002Fa> or on Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FStatsFC\" rel=\"nofollow ugc\">@StatsFC\u003C\u002Fa>.\u003C\u002Fp>\n","This widget will show the next fixture for a Premier League team on your website.",4948,"2023-06-21T23:27:00.000Z",[52,20,21,22,24],"https:\u002F\u002Fstatsfc.com\u002Fnext-fixture","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-next-fixture.zip",{"slug":81,"name":82,"version":72,"author":7,"author_profile":8,"description":83,"short_description":84,"active_installs":85,"downloaded":86,"rating":48,"num_ratings":63,"last_updated":87,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":88,"homepage":89,"download_link":90,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"statsfc-form","StatsFC Form","\u003Cp>Add a football form guide to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\u002Fsign-up\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Fform\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Fform\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003Cli>Türkçe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’re interested in translating for us, please get in touch at \u003Ca href=\"mailto:hello@statsfc.com\" rel=\"nofollow ugc\">hello@statsfc.com\u003C\u002Fa> or on Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FStatsFC\" rel=\"nofollow ugc\">@StatsFC\u003C\u002Fa>.\u003C\u002Fp>\n","This widget will place a current football form guide in your website.",20,3623,"2023-06-21T23:26:00.000Z",[20,21,22,24],"https:\u002F\u002Fstatsfc.com\u002Fteam-form","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-form.zip",{"slug":92,"name":93,"version":94,"author":7,"author_profile":8,"description":95,"short_description":96,"active_installs":97,"downloaded":98,"rating":28,"num_ratings":28,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":99,"homepage":100,"download_link":101,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"statsfc-top-assisters","StatsFC Top Assisters","2.0.1","\u003Cp>Add a football top assisters table to your WordPress website. To request a key sign up for your free trial at \u003Ca href=\"https:\u002F\u002Fstatsfc.com\" rel=\"nofollow ugc\">statsfc.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For a demo, check out \u003Ca href=\"https:\u002F\u002Fwp.statsfc.com\u002Ftop-assisters\u002F\" rel=\"nofollow ugc\">wp.statsfc.com\u002Ftop-assisters\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bahasa Indonesia\u003C\u002Fli>\n\u003Cli>Dansk\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Eesti\u003C\u002Fli>\n\u003Cli>Español\u003C\u002Fli>\n\u003Cli>Français\u003C\u002Fli>\n\u003Cli>Hrvatski Jezik\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Magyar\u003C\u002Fli>\n\u003Cli>Norsk bokmål\u003C\u002Fli>\n\u003Cli>Slovenčina\u003C\u002Fli>\n\u003Cli>Slovenski Jezik\u003C\u002Fli>\n\u003Cli>Suomi\u003C\u002Fli>\n\u003Cli>Svenska\u003C\u002Fli>\n\u003Cli>Türkçe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you’re interested in translating for us, please get in touch at \u003Ca href=\"mailto:hello@statsfc.com\" rel=\"nofollow ugc\">hello@statsfc.com\u003C\u002Fa> or on Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FStatsFC\" rel=\"nofollow ugc\">@StatsFC\u003C\u002Fa>.\u003C\u002Fp>\n","This widget will place a live football top assisters table in your website.",10,1335,[20,21,22,24],"https:\u002F\u002Fstatsfc.com\u002Ftop-assisters","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstatsfc-top-assisters.zip",{"attackSurface":103,"codeSignals":121,"taintFlows":165,"riskAssessment":193,"analyzedAt":206},{"hooks":104,"ajaxHandlers":114,"restRoutes":115,"shortcodes":116,"cronEvents":120,"entryPointCount":63,"unprotectedCount":28},[105,111],{"type":106,"name":107,"callback":108,"file":109,"line":110},"action","wp_print_footer_scripts","closure","statsfc-table.php",304,{"type":106,"name":112,"callback":108,"file":109,"line":113},"widgets_init",327,[],[],[117],{"tag":4,"callback":118,"file":109,"line":119},"anonymous",331,[],{"dangerousFunctions":122,"sqlUsage":123,"outputEscaping":125,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":164},[],{"prepared":28,"raw":28,"locations":124},[],{"escaped":126,"rawEcho":127,"locations":128},16,17,[129,132,134,136,138,140,142,144,146,148,150,152,154,156,158,160,162],{"file":109,"line":130,"context":131},109,"raw output",{"file":109,"line":133,"context":131},115,{"file":109,"line":135,"context":131},121,{"file":109,"line":137,"context":131},127,{"file":109,"line":139,"context":131},133,{"file":109,"line":141,"context":131},138,{"file":109,"line":143,"context":131},139,{"file":109,"line":145,"context":131},144,{"file":109,"line":147,"context":131},150,{"file":109,"line":149,"context":131},156,{"file":109,"line":151,"context":131},162,{"file":109,"line":153,"context":131},168,{"file":109,"line":155,"context":131},174,{"file":109,"line":157,"context":131},180,{"file":109,"line":159,"context":131},186,{"file":109,"line":161,"context":131},305,{"file":109,"line":163,"context":131},311,[],[166,184],{"entryPoint":167,"graph":168,"unsanitizedCount":63,"severity":183},"widget (statsfc-table.php:231)",{"nodes":169,"edges":180},[170,175],{"id":171,"type":172,"label":173,"file":109,"line":174},"n0","source","$_SERVER",238,{"id":176,"type":177,"label":178,"file":109,"line":161,"wp_function":179},"n1","sink","echo() [XSS]","echo",[181],{"from":171,"to":176,"sanitized":182},false,"medium",{"entryPoint":185,"graph":186,"unsanitizedCount":63,"severity":192},"\u003Cstatsfc-table> (statsfc-table.php:0)",{"nodes":187,"edges":190},[188,189],{"id":171,"type":172,"label":173,"file":109,"line":174},{"id":176,"type":177,"label":178,"file":109,"line":161,"wp_function":179},[191],{"from":171,"to":176,"sanitized":182},"low",{"summary":194,"deductions":195},"The statsfc-table v2.2.1 plugin exhibits a generally good security posture based on the provided static analysis. It does not utilize dangerous functions, perform file operations, make external HTTP requests, or contain known vulnerabilities. The use of prepared statements for all SQL queries is a strong security practice. However, there are notable concerns regarding output escaping, with less than half of the detected outputs being properly escaped, indicating a potential for cross-site scripting (XSS) vulnerabilities. Additionally, the absence of nonce checks and capability checks across all entry points, including the single shortcode, is a significant weakness. While no critical or high severity taint flows were identified in the limited analysis, the presence of unsanitized paths in the analyzed flows is a red flag that warrants further investigation.\n\nThe plugin's history of zero known CVEs is positive, suggesting a good track record. However, this is in the context of a limited attack surface and the potential for unaddressed vulnerabilities due to the lack of robust security checks like nonce and capability checks. The absence of vulnerabilities in the past does not guarantee future security, especially if the identified weaknesses in output escaping and authorization are exploited.\n\nIn conclusion, while the plugin has strengths in its SQL handling and lack of external dependencies or dangerous functions, the significant percentage of unescaped output and the complete lack of nonce\u002Fcapability checks on its shortcode create a tangible risk. The taint analysis, though limited, also points to potential issues with unsanitized paths. Addressing the output escaping and implementing proper authorization checks on the shortcode are critical steps to improve its security.",[196,199,201,203],{"reason":197,"points":198},"Unescaped output detected",15,{"reason":200,"points":97},"No nonce checks on entry points",{"reason":202,"points":97},"No capability checks on entry points",{"reason":204,"points":205},"Unsanitized paths in taint flows",8,"2026-03-16T21:28:42.461Z",{"wat":208,"direct":217},{"assetPaths":209,"generatorPatterns":212,"scriptPaths":213,"versionParams":214},[210,211],"\u002Fwp-content\u002Fplugins\u002Fstatsfc-table\u002Fcss\u002Fstatsfc-table.css","\u002Fwp-content\u002Fplugins\u002Fstatsfc-table\u002Fjs\u002Fstatsfc-table.js",[],[211],[215,216],"statsfc-table\u002Fcss\u002Fstatsfc-table.css?ver=","statsfc-table\u002Fjs\u002Fstatsfc-table.js?ver=",{"cssClasses":218,"htmlComments":232,"htmlAttributes":234,"restEndpoints":246,"jsGlobals":247,"shortcodeOutput":249},[219,220,221,222,223,224,225,226,227,228,229,230,231],"statsfc-table-widget","statsfc-table-competition","statsfc-table-group","statsfc-table-season","statsfc-table-type","statsfc-table-highlight","statsfc-table-rows","statsfc-table-date","statsfc-table-show-badges","statsfc-table-show-form","statsfc-table-show-status","statsfc-table-default-css","statsfc-table-omit-errors",[233],"\u003C!-- StatsFC League Table -->",[235,236,237,238,239,240,241,242,243,244,245],"data-competition","data-group","data-season","data-type","data-highlight","data-rows","data-date","data-show-badges","data-show-form","data-show-status","data-omit-errors",[],[248],"statsfc_table_params",[250],"[statsfc_table"]