[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFYB20C7lFG2cruM4CHTjxhZ0GkY6ONYfE3R6VMxJ3TE":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":36,"analysis":131,"fingerprints":266},"tag-cloud-canvas","Tag Cloud Canvas","0.1.0","Javier López Úbeda","https:\u002F\u002Fprofiles.wordpress.org\u002Fnoknok\u002F","\u003Cp>This widget add a tag cloud 3d to your sidebar.\u003C\u002Fp>\n\u003Cp>Based on the jquery plugin tagcanvas.js from http:\u002F\u002Fwww.goat1000.com\u002F.\u003C\u002Fp>\n","This widget add a tag cloud 3d to your sidebar.",100,9603,4,"2012-04-23T01:06:00.000Z","3.3.2","2.8","",[19,20,21,22],"cloud","html5","tags","widget","https:\u002F\u002Fgithub.com\u002Fnoknokstdio\u002Ftag-cloud-canvas","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftag-cloud-canvas.0.1.0.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"noknok",1,30,84,"2026-04-05T02:28:59.282Z",[37,57,75,96,114],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":17,"tags":52,"homepage":55,"download_link":56,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"ultimate-tag-cloud-widget","Ultimate Tag Cloud Widget","2.7.2","Rickard Andersson","https:\u002F\u002Fprofiles.wordpress.org\u002Fexz\u002F","\u003Cp>This is the highly configurable tag cloud widget, the main features for this plugin is:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>All, single author or multiple authors per cloud\u003C\u002Fli>\n\u003Cli>Select which taxonomies or post types to show tags for\u003C\u002Fli>\n\u003Cli>Rules for which posts to include when fetching tags\u003C\u002Fli>\n\u003Cli>Inclusion\u002Fexclusion functions\u003C\u002Fli>\n\u003Cli>A bunch of ordering, coloring and styling options\u003C\u002Fli>\n\u003Cli>Multiple strategies for selecting terms with the option to \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frickard2\u002Futcw\u002Fblob\u002Fmaster\u002FSTRATEGY.md\" rel=\"nofollow ugc\">create your own\u003C\u002Fa>. Built in strategies for most popular, random, recently added, from current list of posts\u003C\u002Fli>\n\u003Cli>Short code and API for developers\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The development of this plugin has stopped. I will make sure that the basic features still work with upcoming WordPress versions, but no new features or changes will be made.\u003C\u002Fp>\n\u003Cp>The \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frickard2\u002Futcw\" rel=\"nofollow ugc\">code is available on github\u003C\u002Fa> and if you’re in need of new features, you’re welcome to submit a pull request for it.\u003C\u002Fp>\n\u003Cp>Quick links:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Short code information: https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fultimate-tag-cloud-widget\u002Fother_notes\u002F#Theme-integration-\u002F-Shortcode\u003C\u002Fli>\n\u003Cli>Short code configuration options: https:\u002F\u002Fgithub.com\u002Frickard2\u002Futcw\u002Fblob\u002Fmaster\u002FCONFIG.md\u003C\u002Fli>\n\u003Cli>Playground which shows some configuration options: https:\u002F\u002F0x539.se\u002Fwordpress\u002Ftag-cloud-playground\u002F\u003C\u002Fli>\n\u003Cli>Custom selection strategy documentation: https:\u002F\u002Fgithub.com\u002Frickard2\u002Futcw\u002Fblob\u002Fmaster\u002FSTRATEGY.md\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Feedback\u003C\u002Fh3>\n\u003Cp>This plugin is under active development and my goal is to try to help everyone who have issues or suggestions for this plugin. If you find bugs or have feature requests please use \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frickard2\u002Futcw\u002Fissues\" rel=\"nofollow ugc\">GitHub issues\u003C\u002Fa>, if you need support please use the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fultimate-tag-cloud-widget\" rel=\"ugc\">WordPress forums\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>My contact information is\u003C\u002Fp>\n\u003Cul>\n\u003Cli>rickard (a) 0x539.se (email, hangouts, you name it)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Ftwitter.com\u002Frickard2\" rel=\"nofollow ugc\">twitter.com\u002Frickard2\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you use this plugin and like it, please consider \u003Ca href=\"https:\u002F\u002F0x539.se\u002Fdonations\u002F\" rel=\"nofollow ugc\">leaving a donation\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Theme integration \u002F Shortcode\u003C\u002Fh3>\n\u003Cp>You can integrate the widget within your own theme even if you’re not using standard WordPress widgets. Just install and load the plugin as described and use the function\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php do_utcw($args); ?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>…with \u003Ccode>$args\u003C\u002Fcode> being a array of \u003Ccode>key => value\u003C\u002Fcode> pairs for the options you would like to set. For example if you’d like to change the title of the widget:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\n$args = array( \"title\" => \"Most awesome title ever\" );\n\ndo_utcw( $args );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To use multiple configuration options just separate them with a comma:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\n$args = array( \"title\" => \"Most awesome title ever\", \"max\" => 10 );\n\ndo_utcw( $args );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>If you’re not able to change your theme you can also use the shortcode \u003Ccode>[utcw]\u003C\u002Fcode> anywhere in your posts or pages. You can pass any of the settings along with the shortcode in the format of \u003Ccode>key=\"value\"\u003C\u002Fcode>, for instance if you’d like to change the widget title:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[utcw title=\"Most awesome title ever\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>The plugin also uses a couple of filters for you to be able to alter the output. These are documented in the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frickard2\u002Futcw\u002Fblob\u002Fmaster\u002FFILTERS.md\" rel=\"nofollow ugc\">filters documentation at GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>As of version 2.6 you can create custom selection strategies, more information can be found in the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frickard2\u002Futcw\u002Fblob\u002Fmaster\u002FSTRATEGY.md\" rel=\"nofollow ugc\">strategy documentation at GitHub\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Cp>All the configuration options can be found in the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frickard2\u002Futcw\u002Fblob\u002Fmaster\u002FCONFIG.md\" rel=\"nofollow ugc\">configuration documentation at GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Breaking changes in version 2.0\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Tags lists with named tags will not work in version 2.0, only tags lists with IDs.\u003C\u002Fli>\n\u003Cli>The configuration option for text case has been renamed from case to text_transform\u003C\u002Fli>\n\u003Cli>The styles for links aren’t marked as \u003Ccode>!important\u003C\u002Fcode> in the CSS longer, this might change the cloud presentation in some cases\u003C\u002Fli>\n\u003Cli>The shortcode and theme integration function call no longer accepts the widget arguments \u003Ccode>before_widget\u003C\u002Fcode>, \u003Ccode>after_widget\u003C\u002Fcode>, \u003Ccode>before_title\u003C\u002Fcode> and \u003Ccode>after_title\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Thanks\u003C\u002Fh3>\n\u003Cp>The power of the open source community is being able to help out and submitting patches when bugs are found. I would like to thank the following contributors for submitting patches and helping out with the development:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Andreas Bogavcic\u003C\u002Fli>\n\u003Cli>Fabian Reck\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>With your help this list will hopefully grow in the future 😉\u003C\u002Fp>\n","This plugin aims to be the most configurable tag cloud widget out there, able to suit all your weird tag cloud needs.",4000,245340,92,49,"2017-11-28T10:39:00.000Z","3.9.40","3.0",[53,54,21,22],"configurable","tag-cloud","https:\u002F\u002Fwww.0x539.se\u002Fwordpress\u002Fultimate-tag-cloud-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fultimate-tag-cloud-widget.2.7.2.zip",{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":67,"num_ratings":68,"last_updated":69,"tested_up_to":70,"requires_at_least":16,"requires_php":17,"tags":71,"homepage":72,"download_link":73,"security_score":25,"vuln_count":32,"unpatched_count":26,"last_vuln_date":74,"fetched_at":28},"configurable-tag-cloud-widget","Configurable Tag Cloud (CTC)","5.3","Keith S.","https:\u002F\u002Fprofiles.wordpress.org\u002Fzarathos\u002F","\u003Cp>The best new feature in WordPress 2.3 is the integration of tagging into the core of WordPress. However, the tag cloud widget & functions that are included leaves a lot to be desired. So, with time on my hands, I decided to whip up my own version of the tag cloud that lets you configure the tag cloud with all the customizations (well, almost, see below) the tag cloud template tag allows.\u003C\u002Fp>\n\u003Cp>You can find the plugin home page (and leave comments) \u003Ca href=\"http:\u002F\u002Fkeithsolomon.net\u002Fctc\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>NOTE\u003C\u002Fh3>\n\u003Cp>Development on this plugin has STOPPED!  I am looking for someone to take it over.  Find more info \u003Ca href=\"http:\u002F\u002Fwp.me\u002Fp4xrG-7q\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Upgrade\u003C\u002Fh3>\n\u003Cp>I suggest using the built-in WordPress plugin update feature, but to manually upgrade, follow these instructions:\u003Cbr \u002F>\n1. Deactivate the plugin in the WordPress admin menu.\u003Cbr \u002F>\n2. Delete the existing \u003Ccode>tag-cloud.php\u003C\u002Fcode> file from the \u003Ccode>\u002Fwp-content\u002Fplugins\u003C\u002Fcode> folder.\u003Cbr \u002F>\n3. Upload the \u003Ccode>tag_cloud\u003C\u002Fcode> folder to the \u003Ccode>\u002Fwp-content\u002Fplugins\u002F\u003C\u002Fcode> directory.\u003Cbr \u002F>\n4. Activate \u003Ccode>Configurable Tag Cloud\u003C\u002Fcode> through the ‘Plugins’ menu in WordPress and add the widget to your sidebar.\u003Cbr \u002F>\n5. (Optional) Add \u003Ccode>ctc()\u003C\u002Fcode> template tag to your theme.  Can be configured either via the Options menu, or via parameters in the template tag.\u003C\u002Fp>\n","Display a tag cloud customized with your preferences in the sidebar.",2000,137349,74,10,"2023-03-29T14:21:00.000Z","6.1.10",[54,21,22],"http:\u002F\u002Fkeithsolomon.net\u002Fctc\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconfigurable-tag-cloud-widget.zip","2023-03-30 00:00:00",{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":83,"downloaded":84,"rating":11,"num_ratings":85,"last_updated":86,"tested_up_to":87,"requires_at_least":88,"requires_php":17,"tags":89,"homepage":94,"download_link":95,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"most-popular-tags","Most Popular Tags","5.1","maxpagels","https:\u002F\u002Fprofiles.wordpress.org\u002Fmaxpagels\u002F","\u003Cp>Most Popular Tags is a WordPress plugin that allows you to display your blog’s most popular tags or categories as a sidebar widget. The plugin takes advantage of the new Widget API introduced in WordPress 2.8, allowing multiple instances of the same widget, each with it’s own unique configuration. You can specify how many tags\u002Fcategories\u002Flink categories to show, the size of the smallest and largest ones, which unit and format to use as well as advanced ordering options.\u003C\u002Fp>\n","Most Popular Tags is a plugin that displays your WordPress site's most popular tags, categories and custom taxonomies as a sidebar widget.",300,38008,2,"2015-07-30T12:16:00.000Z","4.2.39","2.9",[90,91,92,21,93],"categories","popular","tagcloud","widgets","http:\u002F\u002Fwww.maxpagels.com\u002Fprojects\u002Fmptags","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmost-popular-tags.zip",{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":104,"downloaded":105,"rating":26,"num_ratings":26,"last_updated":106,"tested_up_to":107,"requires_at_least":108,"requires_php":17,"tags":109,"homepage":112,"download_link":113,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"random-tags-cloud-widget","Random Tags Cloud Widget","1.2","yakuphan","https:\u002F\u002Fprofiles.wordpress.org\u002Fyakuphan\u002F","\u003Cp>Random Tag Cloud allows you to display your site’s tags. It works just like a regular tags cloud, but you can customize it. If you set, it gets your tags by selecting randomly.\u003Cbr \u002F>\nOf course, you can set other settings; font sizes, number of tags to display, how to order etc.\u003Cbr \u002F>\nNow, you can add a link to your tags archive page by writing its ID. It adds a ‘Show All Tags’ link.\u003C\u002Fp>\n\u003Ch3>Options\u003C\u002Fh3>\n\u003Cp>Widget’s options allow you to change your tag cloud’s displaying.\u003C\u002Fp>\n\u003Ch4>Title\u003C\u002Fh4>\n\u003Cp>Your tag cloud’s title on your sidebar.\u003C\u002Fp>\n\u003Ch4>Number of Tags\u003C\u002Fh4>\n\u003Cp>Controls the total number of tags in your cloud.\u003C\u002Fp>\n\u003Ch4>Font Unit\u003C\u002Fh4>\n\u003Cp>What unit to use for font sizes.\u003C\u002Fp>\n\u003Ch4>Smallest Font Size\u003C\u002Fh4>\n\u003Cp>Tags will be displayed no smaller than this value.\u003C\u002Fp>\n\u003Ch4>Largest Font Size\u003C\u002Fh4>\n\u003Cp>Tags will be displayed no larger that this value.\u003C\u002Fp>\n\u003Ch4>Cloud Format\u003C\u002Fh4>\n\u003Cp>How to display the cloud.\u003C\u002Fp>\n\u003Ch4>Select Tags Randomly\u003C\u002Fh4>\n\u003Cp>Select your tags randomly from database.\u003C\u002Fp>\n\u003Ch4>Sort by\u003C\u002Fh4>\n\u003Cp>What field to sort by.\u003C\u002Fp>\n\u003Ch4>Sort Order\u003C\u002Fh4>\n\u003Cp>Direction of sort.\u003C\u002Fp>\n\u003Ch4>Exclude Tags\u003C\u002Fh4>\n\u003Cp>These tags won’t display in cloud.\u003C\u002Fp>\n\u003Ch4>Include Tags\u003C\u002Fh4>\n\u003Cp>Only these tags will display in cloud.\u003C\u002Fp>\n\u003Ch4>Your Tags Page ID\u003C\u002Fh4>\n\u003Cp>If you want to add a link to your tags archive page, write its page id.\u003C\u002Fp>\n\u003Cp>You can format ‘Show All Tags’ link by adding ‘alltags_link’ class in your style.css.\u003C\u002Fp>\n\u003Ch3>Version history\u003C\u002Fh3>\n\u003Ch4>Version 1.2\u003C\u002Fh4>\n\u003Cp>Compatible up to 2.7\u003C\u002Fp>\n\u003Ch4>Version 1.1\u003C\u002Fh4>\n\u003Cp>Add an option to add ‘Show All Tags’ link.\u003C\u002Fp>\n\u003Ch4>Version 1.0\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Initial release version.\u003C\u002Fli>\n\u003C\u002Ful>\n","Random Tags Cloud displays your tags by selecting randomly. Of course, you can customize other tag cloud's settings.",200,13039,"2008-12-15T20:22:00.000Z","2.7","2.3",[110,111,54,21,22],"random-tags","random-tags-cloud","http:\u002F\u002Fwww.yakupgovler.com\u002F?p=402","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frandom-tags-cloud-widget.zip",{"slug":115,"name":116,"version":117,"author":118,"author_profile":119,"description":120,"short_description":121,"active_installs":11,"downloaded":122,"rating":123,"num_ratings":124,"last_updated":125,"tested_up_to":126,"requires_at_least":127,"requires_php":17,"tags":128,"homepage":129,"download_link":130,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"muki-tag-cloud","Muki Tag Cloud","2.1.4","Muki Wu","https:\u002F\u002Fprofiles.wordpress.org\u002Fmuki\u002F","\u003Cul>\n\u003Cli>Another wordpress tag cloud plugin based on jQCloud plugin, which is creative, beauty and colorful.\u003C\u002Fli>\n\u003Cli>If has any suggestion of design thought, please visit and leave comments in \u003Ca href=\"http:\u002F\u002Fmuki.tw\u002Ftech\u002Fwordpress-plugin-muki-tag-cloud\u002F\" rel=\"nofollow ugc\">MUKI space*\u003C\u002Fa>, who is the authoer about plugin design, front-end, and creative;\u003C\u002Fli>\n\u003Cli>\n\u003Cp>About plugin program discuss, you can visit to \u003Ca href=\"http:\u002F\u002Fmesak.tw\u002Fcode\u002Fphp\u002F3817\u002Fwordpress-plugin-muki-tag-cloud\" rel=\"nofollow ugc\">MesakTW\u003C\u002Fa>, who is the author about plugin development, and back-end.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>可以在側邊欄或是支援小工具的位置加入這個標籤雲外掛。他跟一般標籤雲最大的差別是不規則的排列形狀，而且顏色豐富多彩，非常的有質感。\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","Another wordpress tag cloud plugin based on jQCloud, which is creative, beauty and colorful.",10377,80,7,"2017-04-15T07:37:00.000Z","4.7.32","3.5",[54,21,22],"http:\u002F\u002Fwww.mukispace.com\u002Fwordpress-plugin-muki-tag-cloud","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmuki-tag-cloud.2.1.4.zip",{"attackSurface":132,"codeSignals":148,"taintFlows":250,"riskAssessment":251,"analyzedAt":265},{"hooks":133,"ajaxHandlers":144,"restRoutes":145,"shortcodes":146,"cronEvents":147,"entryPointCount":26,"unprotectedCount":26},[134,140],{"type":135,"name":136,"callback":137,"file":138,"line":139},"action","widgets_init","anonymous","tag-cloud-canvas.php",231,{"type":135,"name":141,"callback":142,"file":138,"line":143},"init","tag_cloud_canvas_widget_init",237,[],[],[],[],{"dangerousFunctions":149,"sqlUsage":153,"outputEscaping":155,"fileOperations":26,"externalRequests":26,"nonceChecks":26,"capabilityChecks":26,"bundledLibraries":249},[150],{"fn":151,"file":138,"line":139,"context":152},"create_function","add_action('widgets_init', create_function('', 'register_widget(\"tag_cloud_canvas\");'));",{"prepared":26,"raw":26,"locations":154},[],{"escaped":85,"rawEcho":156,"locations":157},54,[158,161,163,165,166,167,168,170,172,174,176,178,180,182,184,185,187,189,190,192,194,195,197,199,200,201,203,205,206,207,209,211,212,213,215,217,219,220,221,223,225,227,228,230,232,233,234,236,238,240,242,243,245,247],{"file":138,"line":159,"context":160},69,"raw output",{"file":138,"line":162,"context":160},70,{"file":138,"line":164,"context":160},73,{"file":138,"line":164,"context":160},{"file":138,"line":164,"context":160},{"file":138,"line":67,"context":160},{"file":138,"line":169,"context":160},75,{"file":138,"line":171,"context":160},87,{"file":138,"line":173,"context":160},88,{"file":138,"line":175,"context":160},89,{"file":138,"line":177,"context":160},95,{"file":138,"line":179,"context":160},101,{"file":138,"line":181,"context":160},146,{"file":138,"line":183,"context":160},147,{"file":138,"line":183,"context":160},{"file":138,"line":186,"context":160},152,{"file":138,"line":188,"context":160},153,{"file":138,"line":188,"context":160},{"file":138,"line":191,"context":160},160,{"file":138,"line":193,"context":160},161,{"file":138,"line":193,"context":160},{"file":138,"line":196,"context":160},169,{"file":138,"line":198,"context":160},170,{"file":138,"line":198,"context":160},{"file":138,"line":198,"context":160},{"file":138,"line":202,"context":160},173,{"file":138,"line":204,"context":160},174,{"file":138,"line":204,"context":160},{"file":138,"line":204,"context":160},{"file":138,"line":208,"context":160},179,{"file":138,"line":210,"context":160},180,{"file":138,"line":210,"context":160},{"file":138,"line":210,"context":160},{"file":138,"line":214,"context":160},181,{"file":138,"line":216,"context":160},184,{"file":138,"line":218,"context":160},185,{"file":138,"line":218,"context":160},{"file":138,"line":218,"context":160},{"file":138,"line":222,"context":160},186,{"file":138,"line":224,"context":160},191,{"file":138,"line":226,"context":160},192,{"file":138,"line":226,"context":160},{"file":138,"line":229,"context":160},198,{"file":138,"line":231,"context":160},199,{"file":138,"line":231,"context":160},{"file":138,"line":104,"context":160},{"file":138,"line":235,"context":160},201,{"file":138,"line":237,"context":160},206,{"file":138,"line":239,"context":160},211,{"file":138,"line":241,"context":160},212,{"file":138,"line":241,"context":160},{"file":138,"line":244,"context":160},213,{"file":138,"line":246,"context":160},214,{"file":138,"line":248,"context":160},219,[],[],{"summary":252,"deductions":253},"The \"tag-cloud-canvas\" plugin, version 0.1.0, presents a mixed security posture.  On the positive side, the plugin exhibits excellent practices regarding SQL queries, utilizing prepared statements exclusively, and has no recorded vulnerabilities or CVEs.  Furthermore, the attack surface appears minimal, with no AJAX handlers, REST API routes, shortcodes, or cron events exposed. There are also no reported file operations or external HTTP requests, and no taint analysis reveals any critical or high severity issues.\n\nHowever, several significant concerns are raised by the static code analysis.  The presence of the `create_function` function is a serious red flag, as it can be a vector for code injection if used with unsanitized input.  A shockingly low percentage of outputs are properly escaped (4%), indicating a high risk of Cross-Site Scripting (XSS) vulnerabilities, especially if any of the minimal attack surface points were to become exploitable.  The complete absence of nonce and capability checks, even with a small attack surface, leaves any potential entry points vulnerable to unauthorized actions.  The lack of taint analysis results, while potentially meaning no issues were found, could also be due to the limited analysis performed, not necessarily a guarantee of safety.\n\nIn conclusion, while the plugin benefits from a clean vulnerability history and secure database practices, the identified code quality issues, particularly the unescaped output and the use of `create_function`, represent substantial risks.  The absence of security checks like nonces and capability checks further amplifies these concerns.  Until these issues are addressed, the plugin should be considered moderately to highly risky.",[254,257,260,263],{"reason":255,"points":256},"High percentage of unescaped output",15,{"reason":258,"points":259},"Use of dangerous function 'create_function'",12,{"reason":261,"points":262},"No nonce checks present",8,{"reason":264,"points":262},"No capability checks present","2026-03-16T20:41:23.406Z",{"wat":267,"direct":276},{"assetPaths":268,"generatorPatterns":271,"scriptPaths":272,"versionParams":273},[269,270],"\u002Fwp-content\u002Fplugins\u002Ftag-cloud-canvas\u002Fcss\u002Ftag-cloud-canvas.css","\u002Fwp-content\u002Fplugins\u002Ftag-cloud-canvas\u002Fjs\u002Ftag-cloud-canvas.js",[],[270],[274,275],"tag-cloud-canvas\u002Fstyle.css?ver=","tag-cloud-canvas\u002Fscript.js?ver=",{"cssClasses":277,"htmlComments":278,"htmlAttributes":279,"restEndpoints":282,"jsGlobals":283,"shortcodeOutput":285},[],[],[280,281],"id=\"tagCloudCanvas","id=\"tags\"",[],[284],"tagcanvas",[286,287],"\u003Ccanvas id=\"tagCloudCanvas","\u003Cdiv id=\"tags\">"]