[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSvSze99nZaBingr5Cn7WYVkiEwosYJ4F3hLVP2stYXc":3,"$fsyYdJMLs04dYQe1OzSaUAwiqYjg63xiAK_VrTMrD-Hw":193,"$fs3oGYnajIrYOB_KizluYVSA6xll1PUVbIj2xTcV0iwE":197},{"slug":4,"name":5,"version":6,"author":4,"author_profile":7,"description":8,"short_description":9,"active_installs":10,"downloaded":11,"rating":10,"num_ratings":10,"last_updated":12,"tested_up_to":13,"requires_at_least":14,"requires_php":15,"tags":16,"homepage":22,"download_link":23,"security_score":24,"vuln_count":10,"unpatched_count":10,"last_vuln_date":25,"fetched_at":26,"discovery_status":27,"vulnerabilities":28,"developer":29,"crawl_stats":25,"alternatives":34,"analysis":35,"fingerprints":171},"trustmetrics","Trustmetrics","1.0","https:\u002F\u002Fprofiles.wordpress.org\u002Ftrustmetrics\u002F","\u003Cp>Trustmetrics helps you collect and display genuine customer reviews from multiple platforms on your website. We are trusted by thousands of clients. Join Trustmetrics to read, write, and collect reviews from various platforms.\u003C\u002Fp>\n\u003Ch3>Third-Party Service Usage\u003C\u002Fh3>\n\u003Cp>This plugin relies on the Trustmetrics API service for certain functionalities. The Trustmetrics API service is used under the following circumstances:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Retrieving dashboard summaries.\u003C\u002Fli>\n\u003Cli>Managing user authentication and sessions.\u003C\u002Fli>\n\u003Cli>Fetching widgets and badges for display.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Service Details\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service Name:\u003C\u002Fstrong> Trustmetrics\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Service URL:\u003C\u002Fstrong> https:\u002F\u002Fapi.trustmetrics.me\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of Use:\u003C\u002Fstrong> https:\u002F\u002Fwww.trustmetrics.io\u002Fterms-and-conditions\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy Policy:\u003C\u002Fstrong> https:\u002F\u002Fwww.trustmetrics.io\u002Fprivacy-policy\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>By using this plugin, you acknowledge and agree to the terms of use and privacy policy of the Trustmetrics API service.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.trustmetrics.io\u002F\" rel=\"nofollow ugc\">Learn more about Trustmetrics\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fyoutube.com\u002F@trustmetricsio?si=YCJTnbceG1nLOY39\" rel=\"nofollow ugc\">Watch our videos on YouTube\u003C\u002Fa>\u003C\u002Fp>\n","Trustmetrics: WordPress plugin for review aggregation & analytics. Boost trust score with Google, Facebook reviews & gain insights.",0,687,"2024-07-10T10:09:00.000Z","6.5.8","5.5","7.0",[17,18,19,20,21],"facebook-review-widget-badge","google-review-widget-badge","reputation-management-plugin","review-management-plugin","trustmetrics-review-widget-badge","https:\u002F\u002Fwww.trustmetrics.io\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftrustmetrics.1.0.zip",85,null,"2026-04-06T09:54:40.288Z","no_bundle",[],{"slug":4,"display_name":4,"profile_url":7,"plugin_count":30,"total_installs":10,"avg_security_score":24,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},1,30,84,"2026-07-15T06:14:08.918Z",[],{"attackSurface":36,"codeSignals":105,"taintFlows":117,"riskAssessment":160,"analyzedAt":170},{"hooks":37,"ajaxHandlers":92,"restRoutes":93,"shortcodes":94,"cronEvents":103,"entryPointCount":104,"unprotectedCount":10},[38,44,47,51,54,57,60,63,66,69,73,78,84,86,89],{"type":39,"name":40,"callback":41,"file":42,"line":43},"action","wp_enqueue_styles","trustmetrics_enqueue_custom_styles","inc\u002Ffunction.php",23,{"type":39,"name":40,"callback":45,"file":42,"line":46},"trustmetrics_enqueue_dashboard_styles",31,{"type":39,"name":48,"callback":49,"file":42,"line":50},"wp_enqueue_scripts","trustmetrics_enqueue_dashboard_script",55,{"type":39,"name":40,"callback":52,"file":42,"line":53},"enqueue_widget_styles",62,{"type":39,"name":48,"callback":55,"file":42,"line":56},"trustmetrics_enqueue_widget_script",69,{"type":39,"name":40,"callback":58,"file":42,"line":59},"trustmetrics_enqueue_badge_styles",76,{"type":39,"name":48,"callback":61,"file":42,"line":62},"trustmetrics_enqueue_badge_script",83,{"type":39,"name":40,"callback":64,"file":42,"line":65},"trustmetrics_enqueue_setting_styles",90,{"type":39,"name":48,"callback":67,"file":42,"line":68},"trustmetrics_enqueue_footer_scripts",116,{"type":39,"name":70,"callback":71,"file":42,"line":72},"admin_post_logout","trustmetrics_logout",120,{"type":39,"name":74,"callback":75,"file":76,"line":77},"admin_menu","trustmetrics_sub_menu","trustmetrics.php",44,{"type":79,"name":80,"callback":81,"priority":82,"file":76,"line":83},"filter","script_loader_tag","closure",10,190,{"type":79,"name":80,"callback":81,"priority":82,"file":76,"line":85},232,{"type":39,"name":74,"callback":87,"file":76,"line":88},"trustmetrics_add_hidden_admin_page",260,{"type":39,"name":48,"callback":90,"file":76,"line":91},"trustmetrics_enqueue_token_script",283,[],[],[95,99],{"tag":96,"callback":97,"file":76,"line":98},"trustmetrics_widget","trustmetrics_widget_shortcode",211,{"tag":100,"callback":101,"file":76,"line":102},"trustmetrics_badge","trustmetrics_badge_shortcode",248,[],2,{"dangerousFunctions":106,"sqlUsage":107,"outputEscaping":109,"fileOperations":10,"externalRequests":112,"nonceChecks":30,"capabilityChecks":10,"bundledLibraries":113},[],{"prepared":10,"raw":10,"locations":108},[],{"escaped":110,"rawEcho":10,"locations":111},282,[],12,[114],{"name":115,"version":25,"knownCves":116},"DataTables",[],[118,136,144],{"entryPoint":119,"graph":120,"unsanitizedCount":30,"severity":135},"trustmetrics_reload_page (inc\u002Ffunction.php:94)",{"nodes":121,"edges":132},[122,127],{"id":123,"type":124,"label":125,"file":42,"line":126},"n0","source","$_SERVER['REQUEST_URI']",95,{"id":128,"type":129,"label":130,"file":42,"line":126,"wp_function":131},"n1","sink","header() [Header Injection]","header",[133],{"from":123,"to":128,"sanitized":134},false,"medium",{"entryPoint":137,"graph":138,"unsanitizedCount":30,"severity":135},"\u003Cfunction> (inc\u002Ffunction.php:0)",{"nodes":139,"edges":142},[140,141],{"id":123,"type":124,"label":125,"file":42,"line":126},{"id":128,"type":129,"label":130,"file":42,"line":126,"wp_function":131},[143],{"from":123,"to":128,"sanitized":134},{"entryPoint":145,"graph":146,"unsanitizedCount":10,"severity":159},"\u003Ctm-widgets> (pages\u002Ftm-widgets.php:0)",{"nodes":147,"edges":156},[148,152],{"id":123,"type":124,"label":149,"file":150,"line":151},"$_GET","pages\u002Ftm-widgets.php",11,{"id":128,"type":129,"label":153,"file":150,"line":154,"wp_function":155},"echo() [XSS]",327,"echo",[157],{"from":123,"to":128,"sanitized":158},true,"low",{"summary":161,"deductions":162},"The \"trustmetrics\" v1.0 plugin exhibits a generally good security posture, with several positive indicators. The static analysis reveals no dangerous function calls, all SQL queries utilize prepared statements, and all output is properly escaped, which are strong security practices. The absence of known vulnerabilities in its history further contributes to its favorable assessment.  \n\nHowever, the analysis does highlight some areas for improvement. The presence of two flows with unsanitized paths in the taint analysis warrants attention, as these could potentially lead to security issues if not properly handled. While the number of external HTTP requests (12) is not inherently a vulnerability, it represents an attack vector that should be monitored for any potential malicious activity or data leakage. The single nonce check suggests that some critical operations might be exposed without adequate protection against CSRF attacks.\n\nOverall, \"trustmetrics\" v1.0 demonstrates a foundation of good security coding practices. The lack of critical issues and vulnerabilities is encouraging. However, the identified unsanitized paths and the single nonce check represent potential weaknesses that should be addressed to strengthen its security and minimize potential risks.",[163,165,167],{"reason":164,"points":82},"Flows with unsanitized paths found",{"reason":166,"points":104},"External HTTP requests made",{"reason":168,"points":169},"Only one nonce check found",5,"2026-04-16T13:23:19.319Z",{"wat":172,"direct":179},{"assetPaths":173,"generatorPatterns":175,"scriptPaths":176,"versionParams":178},[174],"\u002Fwp-content\u002Fplugins\u002Ftrustmetrics\u002Fassets\u002Fimages\u002Ftrustmetrics-logo.svg",[],[177],"https:\u002F\u002Fapi.trustmetrics.me\u002Fembed\u002Ftrustmetrics.js",[],{"cssClasses":180,"htmlComments":183,"htmlAttributes":184,"restEndpoints":186,"jsGlobals":188,"shortcodeOutput":190},[181,182],"trustmetrics-widget","tmscript",[],[185],"token",[187],"\u002Fwp-json\u002Ftrustmetrics\u002F",[189],"trustmetrics_custom_auth_token",[191,192],"\u003Cdiv class=\"trustmetrics-widget\"","\u003Cdiv class=\"trustmetrics-widget popup\"",{"error":158,"url":194,"statusCode":195,"statusMessage":196,"message":196},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Ftrustmetrics\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":30,"versions":198},[199],{"version":6,"download_url":23,"svn_tag_url":200,"released_at":25,"has_diff":134,"diff_files_changed":201,"diff_lines":25,"trac_diff_url":25,"vulnerabilities":202,"is_current":158},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftrustmetrics\u002Ftags\u002F1.0\u002F",[],[]]