[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fO9jI5nIZuO_e54sTy26ue2Ozyl3l5uf3yLyhuEkU7O8":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":36,"analysis":122,"fingerprints":162},"taf-widget","TAF plugin","0.1","mcantsin","https:\u002F\u002Fprofiles.wordpress.org\u002Fmcantsin\u002F","\u003Cp>TAF-widget lets you enter an ICAO station (airport) in the widget admin and will display the according TAF code as widget on your wordpress site.\u003Cbr \u002F>\nThe TAF data used is provided by NOAA.\u003C\u002Fp>\n","A simple widget to display the current TAF (Terminal aerodrome forecast) code for a chosen ICAO station.",10,1358,0,"2014-09-09T23:12:00.000Z","4.0.38","3.4","",[19,20,21,22,23],"metar","noaa","taf","weather","widget","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Ftaf-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftaf-widget.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":26,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},2,20,30,84,"2026-04-05T05:30:50.352Z",[37,52,67,78,101],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":32,"downloaded":45,"rating":46,"num_ratings":31,"last_updated":47,"tested_up_to":48,"requires_at_least":16,"requires_php":17,"tags":49,"homepage":17,"download_link":51,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"wp-taf-metar-widget","taf-metar-widget","1.0.4","wptechnology","https:\u002F\u002Fprofiles.wordpress.org\u002Fwptechnology\u002F","\u003Cp>WP TAF METAR Widget is a plugin that allows you to show the TAF or METAR (aviation weather) information from any airport directly to your WordPress WebSite, by just giving the ICAO code of the wanted airport. You can of course place more than one widget on your page, with different settings \u002F airports. The information come directly from AviationWeather.gov databases.\u003C\u002Fp>\n","This Widget allows you to show the TAF or METAR (aviation weather) information for any airport directly to your WordPress WebSite.",1876,90,"2016-11-02T13:57:00.000Z","4.6.30",[50,19,21,22,23],"aviation","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-taf-metar-widget.zip",{"slug":53,"name":54,"version":55,"author":56,"author_profile":57,"description":58,"short_description":59,"active_installs":11,"downloaded":60,"rating":13,"num_ratings":13,"last_updated":61,"tested_up_to":62,"requires_at_least":16,"requires_php":17,"tags":63,"homepage":65,"download_link":66,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"aviationweather-widget","AviationWeather Plugin","1.1","alessiobravi","https:\u002F\u002Fprofiles.wordpress.org\u002Falessiobravi\u002F","\u003Cp>aviationweather-widget will display in the site the RAW METAR and TAF weather bulletin for the ICAO station selected in the widget administration panel.\u003Cbr \u002F>\nThe METAR and TAF data used is provided by AviationWeather.org\u003C\u002Fp>\n","A simple widget to display current METAR and TAF for the chosen ICAO Station.",2962,"2012-12-14T14:10:00.000Z","3.5.2",[50,64,19,21,23],"aviation-weather","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Faviationweather-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faviationweather-widget.zip",{"slug":68,"name":69,"version":6,"author":7,"author_profile":8,"description":70,"short_description":71,"active_installs":11,"downloaded":72,"rating":13,"num_ratings":13,"last_updated":73,"tested_up_to":74,"requires_at_least":16,"requires_php":17,"tags":75,"homepage":76,"download_link":77,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"metar-widget","METAR plugin","\u003Cp>METAR-widget lets you enter an ICAO station (airport) in the widget admin and will display the according METAR code as widget on your wordpress site.\u003Cbr \u002F>\nThe METAR data used is provided by NOAA.\u003C\u002Fp>\n","A simple widget to display the current METAR code (Pilot weather code) for a chosen ICAO station.",2568,"2012-10-26T00:27:00.000Z","3.4.2",[19,20,22,23],"http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fmetar-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmetar-widget.zip",{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":86,"downloaded":87,"rating":88,"num_ratings":89,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":17,"tags":93,"homepage":99,"download_link":100,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"us-weather-widget-willyweather","US Weather Widget – WillyWeather","1.5","WillyWeather","https:\u002F\u002Fprofiles.wordpress.org\u002Fwillyweather\u002F","\u003Cp>The most accurate US weather widgets, with data provided by the National Oceanic and Atmospheric Administration (NOAA). Willyweather weather widgets come in many different shapes and sizes, you can choose your own colors, and select from multiple weather types such as Weather, Wind, Rain, Swell, Tides, UV, Sun and Moon.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Accurate US data provided by NOAA.\u003C\u002Fli>\n\u003Cli>Beautiful retina graphics with stylish animations.\u003C\u002Fli>\n\u003Cli>Powered by the same WillyWeather API that was built for the award winning \u003Ca href=\"https:\u002F\u002Fitunes.apple.com\u002Fapp\u002Fwillyweather\u002Fid592978502\" rel=\"nofollow ugc\">WillyWeather iPhone app\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Choose from a wide selection of widget shapes and sizes:\n\u003Cul>\n\u003Cli>Sidebar\u003C\u002Fli>\n\u003Cli>Full Page\u003C\u002Fli>\n\u003Cli>Leaderboard\u003C\u002Fli>\n\u003Cli>Thin bar\u003C\u002Fli>\n\u003Cli>High bar\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Choose your own colors to suit your website.\u003C\u002Fli>\n\u003Cli>Adjust the width of any of the widgets to suit your website.\u003C\u002Fli>\n\u003Cli>Scrollable wind and swell graphs (sidebar and full page).\u003C\u002Fli>\n\u003Cli>Add any of the weather types below to a sidebar or full page widget, selected via tabs.\n\u003Cul>\n\u003Cli>Weather\u003C\u002Fli>\n\u003Cli>Wind\u003C\u002Fli>\n\u003Cli>Tides\u003C\u002Fli>\n\u003Cli>Swell\u003C\u002Fli>\n\u003Cli>Rain\u003C\u002Fli>\n\u003Cli>UV\u003C\u002Fli>\n\u003Cli>Sun\u003C\u002Fli>\n\u003Cli>Moon\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Change tab ordering via drag and drop (the first weather type in the list will be the default).\u003C\u002Fli>\n\u003Cli>Choose a fixed location or add a search facility.\u003C\u002Fli>\n\u003Cli>Choose from a database of over 180,000 US locations.\u003C\u002Fli>\n\u003Cli>Update the widget at any time.\u003C\u002Fli>\n\u003C\u002Ful>\n","US weather widgets for Wordpress, with the latest data sourced from NOAA. Custom designs to suit any website.",200,10135,70,6,"2017-10-16T23:48:00.000Z","4.8.28","3.6.1",[94,95,96,97,98],"noaa-widget","observations","weather-forecast","weather-widget","willyweather-widget","http:\u002F\u002Fwillyweather.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fus-weather-widget-willyweather.zip",{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":109,"downloaded":110,"rating":109,"num_ratings":111,"last_updated":112,"tested_up_to":113,"requires_at_least":114,"requires_php":17,"tags":115,"homepage":117,"download_link":118,"security_score":119,"vuln_count":120,"unpatched_count":120,"last_vuln_date":121,"fetched_at":28},"aviation-weather-from-noaa","Aviation Weather from NOAA","0.7.2","machouinard","https:\u002F\u002Fprofiles.wordpress.org\u002Fmachouinard\u002F","\u003Cul>\n\u003Cli>Display METAR & TAF info from NOAA’s Aviation Digital Data Service\u003C\u002Fli>\n\u003Cli>Display up to 6 hours before now\u003C\u002Fli>\n\u003Cli>PIREPs up to 200sm\u003C\u002Fli>\n\u003Cli>Create multiple instances using either widget or shortcode\u003C\u002Fli>\n\u003Cli>WP-CLI Integration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Gutenberg Block\u003C\u002Fh4>\n\u003Cp>A new \u003Ccode>AWFN Block\u003C\u002Fcode> can be found in the Widgets section.\u003C\u002Fp>\n\u003Ch4>Shortcode Usage: ( shown with defaults )\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>[adds_weather apts='KSMF' hours=2 show_metar=1 show_taf=1 show_pireps=1 show_station_info=1 radial_dist=100 title='']\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Data is cached for 30 minutes using the WordPress Transients API.\u003C\u002Fp>\n\u003Ch4>Included Filter Hooks:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>adds_kses: Array of permitted HTML tags.\u003C\u002Fli>\n\u003Cli>adds_custom_css: URL of a user-supplied stylesheet.  Supplying a stylesheet in theme’s directory ( ‘css\u002Faviation_weather_from_noaa.css’ ) will also override stylesheet.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Styling\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Copy \u003Ccode>css\u002Faviation_weather_from_noaa.css\u003C\u002Fcode> from plugin directory into theme directory, keeping that file structure.\u003C\u002Fli>\n\u003Cli>Make desired changes.\u003C\u002Fli>\n\u003Cli>Plugin will load this stylesheet instead of its own.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Code and support available at \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmachouinard\u002Faviation-weather-from-noaa\" title=\"GitHub Repo\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>\u003C\u002Fp>\n","Aviation weather data from NOAA's Aviation Digital Data Service (ADDS)",100,7110,4,"2022-10-31T16:06:00.000Z","6.1.10","3.8",[50,19,20,116,22],"pireps","https:\u002F\u002Fgithub.com\u002Fmachouinard\u002Faviation-weather-from-noaa","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faviation-weather-from-noaa.0.7.2.zip",61,1,"2025-06-30 00:00:00",{"attackSurface":123,"codeSignals":135,"taintFlows":154,"riskAssessment":155,"analyzedAt":161},{"hooks":124,"ajaxHandlers":131,"restRoutes":132,"shortcodes":133,"cronEvents":134,"entryPointCount":13,"unprotectedCount":13},[125],{"type":126,"name":127,"callback":128,"file":129,"line":130},"action","widgets_init","anonymous","taf-widget.php",62,[],[],[],[],{"dangerousFunctions":136,"sqlUsage":137,"outputEscaping":139,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":153},[],{"prepared":13,"raw":13,"locations":138},[],{"escaped":13,"rawEcho":140,"locations":141},5,[142,145,147,149,151],{"file":129,"line":143,"context":144},28,"raw output",{"file":129,"line":146,"context":144},29,{"file":129,"line":148,"context":144},56,{"file":129,"line":150,"context":144},57,{"file":129,"line":152,"context":144},58,[],[],{"summary":156,"deductions":157},"The \"taf-widget\" v0.1 plugin currently exhibits a strong security posture based on the provided static analysis. The absence of any identified attack surface entry points, dangerous functions, or taint flows suggests a well-contained and potentially inactive plugin. Furthermore, the fact that all SQL queries, though none were found, would utilize prepared statements indicates a good practice in database interaction. The lack of any recorded vulnerabilities or CVEs in its history further strengthens this positive assessment, implying a history of secure development or a very low profile.\n\nHowever, the static analysis does highlight a significant concern: 0% output escaping. This means that any data outputted by the plugin, even if it's not directly exposed through a typical entry point, is not being properly sanitized. This could lead to Cross-Site Scripting (XSS) vulnerabilities if the plugin were to output user-controlled or external data without proper escaping. While the current attack surface is zero, this weakness remains a critical oversight that could be exploited if the plugin's functionality or interaction points were to change or be discovered.\n\nIn conclusion, the \"taf-widget\" v0.1 presents a mixed security profile. Its strengths lie in its apparent lack of exploitable entry points and its historical security record. The primary and most critical weakness is the complete lack of output escaping, which represents a significant risk that needs immediate attention. The plugin's current unpatched status for any vulnerabilities is a testament to its apparent safety, but the unescaped output is a silent threat that could be easily triggered.",[158],{"reason":159,"points":160},"Output escaping is completely missing",15,"2026-03-17T00:46:28.301Z",{"wat":163,"direct":168},{"assetPaths":164,"generatorPatterns":165,"scriptPaths":166,"versionParams":167},[],[],[],[],{"cssClasses":169,"htmlComments":172,"htmlAttributes":173,"restEndpoints":175,"jsGlobals":176,"shortcodeOutput":177},[23,170,171],"widget-wrapper","widget-title",[],[174],"id=\"icao\"",[],[],[]]