[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fa9hpYN00ZybAOXM4TC3MiZkE1aFG6emG8mn3eMpw39Q":3,"$fsrg9XwS0iuh9SCLnzcWWut7JOJ0tDMFh2LwbQ7UKlJU":264,"$fIwl77oW1BT27uYORWAtx_gJZdIto0BUjcxoE3iigoVM":269},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"discovery_status":31,"vulnerabilities":32,"developer":33,"crawl_stats":29,"alternatives":40,"analysis":147,"fingerprints":249},"unique-post-view-conter","Unique Post Views Counter","1.0","chandra sekhar Gudavalli","https:\u002F\u002Fprofiles.wordpress.org\u002Fchandra-sekhar-gudavalli\u002F","\u003Cp>This one is counts and dipslay all unique users hits or views for each post on our blog.\u003Cbr \u002F>\nWe are saving every information in the database.\u003Cbr \u002F>\nOnce we activate this plugin, it will automatically create table in the database.\u003C\u002Fp>\n","This plugin will enable you to display how many times a post has been viewed by unique users and we can get the total views also.",10,3796,100,3,"2013-09-13T19:07:00.000Z","3.4.2","3.0.1","",[20,21,22,23,24],"postviews","unique-counter","unique-hits","unique-views","unquer-page-count","http:\u002F\u002Fwww.spicyclassified.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Funique-post-view-conter.zip",85,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":34,"display_name":7,"profile_url":8,"plugin_count":35,"total_installs":36,"avg_security_score":27,"avg_patch_time_days":37,"trust_score":38,"computed_at":39},"chandra-sekhar-gudavalli",2,20,30,84,"2026-05-19T21:00:24.086Z",[41,66,88,109,129],{"slug":42,"name":43,"version":44,"author":45,"author_profile":46,"description":47,"short_description":48,"active_installs":49,"downloaded":50,"rating":51,"num_ratings":52,"last_updated":53,"tested_up_to":54,"requires_at_least":55,"requires_php":56,"tags":57,"homepage":62,"download_link":63,"security_score":64,"vuln_count":35,"unpatched_count":28,"last_vuln_date":65,"fetched_at":30},"post-views-counter","Post Views Counter","1.7.9","dFactory","https:\u002F\u002Fprofiles.wordpress.org\u002Fdfactory\u002F","\u003Cp>Post Views Counter allows you to collect and display how many times a post, page, or other content has been viewed in a simple, fast and reliable way.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpostviewscounter.com\u002F\" rel=\"nofollow ugc\">Post Views Counter\u003C\u002Fa> gives you clear, accurate post view stats — right inside WordPress. No external tools. No bloat. Just the numbers you need to see what’s working.\u003C\u002Fp>\n\u003Ch4>Key Benefits\u003C\u002Fh4>\n\u003Cp>Clarity, speed, and control:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Clear, Focused Metrics\u003C\u002Fstrong> — You get a clear picture of how your posts are performing.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Made for WordPress\u003C\u002Fstrong> — Runs entirely in your site. No GA, no third-party pipes; accurate counts in your Dashboard.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy-first\u003C\u002Fstrong> — Data lives on your server, with controls that respect visitors’ rights and privacy regulations.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Works at scale\u003C\u002Fstrong> — Minimal overhead, no external scripts, Multisite-ready.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Display anywhere\u003C\u002Fstrong> — Automatically show counts, or place them exactly where you want via blocks or shortcode.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cp>Practical features that matter:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Count & display views for \u003Cstrong>any post type\u003C\u002Fstrong> you select.\u003C\u002Fli>\n\u003Cli>Three counting modes: \u003Cstrong>PHP, JavaScript, REST API\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Dashboard post views \u003Cstrong>stats widget\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Sortable Post Views \u003Cstrong>admin column\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Exclude bots, logged-in users, specific roles, or IPs\u003C\u002Fli>\n\u003Cli>Manually adjust a post’s views when needed.\u003C\u002Fli>\n\u003Cli>Query and \u003Cstrong>order content by views\u003C\u002Fstrong> (developer-friendly)\u003C\u002Fli>\n\u003Cli>Custom REST API endpoints\u003C\u002Fli>\n\u003Cli>Option to set count interval\u003C\u002Fli>\n\u003Cli>One-click data import from \u003Cstrong>WP-PostViews\u003C\u002Fstrong>, \u003Cstrong>Statify\u003C\u002Fstrong> and \u003Cstrong>Page Views Count\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Post views \u003Cstrong>display position\u003C\u002Fstrong>, automatic or manual via shortcode\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multisite\u003C\u002Fstrong> compatibile\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WPML\u002FPolylang\u003C\u002Fstrong> compatible; translation-ready (.pot)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Post Views Counter Pro\u003C\u002Fh4>\n\u003Cp>More capability without extra complexity:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Fast AJAX counting\u003C\u002Fstrong> for more accurate data.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Caching optimization\u003C\u002Fstrong> that guarantees performance even under heavy traffic.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Reports\u003C\u002Fstrong>: Views by Date, Post, Author to spot winners, trends, and top contributors.\u003C\u002Fli>\n\u003Cli>Customizable \u003Cstrong>Views Period\u003C\u002Fstrong> (e.g., last 7\u002F30 days) to control the views count timeframe.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Export to CSV\u002FXML\u003C\u002Fstrong> to download and share data.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Integrations\u003C\u002Fstrong> for ordering by views in popular builders (e.g., \u003Cstrong>Elementor Pro, Divi, GenerateBlocks\u003C\u002Fstrong>).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpostviewscounter.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">Learn more about Pro \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan>\u003C\u002Fa>\u003C\u002Fp>\n","Post Views Counter allows you to collect and display how many times a post, page, or other content has been viewed in a simple, fast and reliable way.",200000,5233876,98,1198,"2026-03-23T20:41:00.000Z","6.9.4","6.3.0","7.0",[58,59,60,20,61],"analytics","counter","pageviews","statistics","https:\u002F\u002Fpostviewscounter.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpost-views-counter.1.7.9.zip",99,"2024-04-05 00:00:00",{"slug":67,"name":68,"version":69,"author":70,"author_profile":71,"description":72,"short_description":73,"active_installs":74,"downloaded":75,"rating":76,"num_ratings":77,"last_updated":78,"tested_up_to":79,"requires_at_least":80,"requires_php":18,"tags":81,"homepage":84,"download_link":85,"security_score":64,"vuln_count":86,"unpatched_count":28,"last_vuln_date":87,"fetched_at":30},"wp-postviews","WP-PostViews","1.78","Lester Chan","https:\u002F\u002Fprofiles.wordpress.org\u002Fgamerz\u002F","\u003Ch3>Usage\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Open \u003Ccode>wp-content\u002Fthemes\u002F\u003CYOUR THEME NAME>\u002Findex.php\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>You may place it in archive.php, single.php, post.php or page.php also.\u003C\u002Fli>\n\u003Cli>Find: \u003Ccode>\u003C?php while (have_posts()) : the_post(); ?>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Add Anywhere Below It (The Place You Want The Views To Show): \u003Ccode>\u003C?php if(function_exists('the_views')) { the_views(); } ?>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Or you can use the shortcode \u003Ccode>[views]\u003C\u002Fcode> or \u003Ccode>[views id=\"1\"]\u003C\u002Fcode> (where 1 is the post ID) in a post\u003C\u002Fli>\n\u003Cli>Go to \u003Ccode>WP-Admin -> Settings -> PostViews\u003C\u002Fcode> to configure the plugin.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Development\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-postviews\u002F\" title=\"https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-postviews\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-postviews\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fdev.wp-plugins.org\u002Fbrowser\u002Fwp-postviews\u002Fi18n\u002F\" title=\"http:\u002F\u002Fdev.wp-plugins.org\u002Fbrowser\u002Fwp-postviews\u002Fi18n\u002F\" rel=\"nofollow ugc\">http:\u002F\u002Fdev.wp-plugins.org\u002Fbrowser\u002Fwp-postviews\u002Fi18n\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Plugin icon by \u003Ca href=\"http:\u002F\u002Fwww.icomoon.io\" rel=\"nofollow ugc\">Iconmoon\u003C\u002Fa> from \u003Ca href=\"http:\u002F\u002Fwww.flaticon.com\" rel=\"nofollow ugc\">Flaticon\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Donations\u003C\u002Fh3>\n\u003Cp>I spent most of my free time creating, updating, maintaining and supporting these plugins, if you really love my plugins and could spare me a couple of bucks, I will really appreciate it. If not feel free to use it without any obligations.\u003C\u002Fp>\n\u003Ch3>Version 1.76.1\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Add Post Author in views template\u003C\u002Fli>\n\u003Cli>NEW: Bump for WordPress 5.3\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.76\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Added postviews_should_count filter\u003C\u002Fli>\n\u003Cli>FIXED: Change to (int) from intval() and use sanitize_key() with it.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.75\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Use WP_Query() for most\u002Fleast viewed posts\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.74\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Bump WordPress 4.7\u003C\u002Fli>\n\u003Cli>NEW: Template variable %POST_CATEGORY_ID%. It returns Post’s Category ID. If you are using Yoast SEO Plugin, it will return the priority Category ID. Props @FunFrog-BY\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.73\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>FIXED: In preview mode, don’t count views\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.72\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Add %POST_THUMBNAIL% to template variables\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.71\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>FIXED: Notices in Widget Constructor for WordPress 4.3\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.70\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>FIXED: Integration with WP-Stats\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.69\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Shortcode \u003Ccode>[views]\u003C\u002Fcode> or [views id=”POST_ID”]` to embed view count into post\u003C\u002Fli>\n\u003Cli>NEW: Added template variable \u003Ccode>%VIEW_COUNT_ROUNDED%\u003C\u002Fcode> to support rounded view count like 10.1k or 11.2M\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.68\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Added action hook ‘postviews_increment_views’ and ‘postviews_increment_views_ajax’\u003C\u002Fli>\n\u003Cli>NEW: Allow custom post type to be chosen under the widget\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.67\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Allow user to not use AJAX to update the views even though WP_CACHE is true\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.66\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Supports MultiSite Network Activation\u003C\u002Fli>\n\u003Cli>NEW: Add %POST_DATE% and %POST_TIME% to template variables\u003C\u002Fli>\n\u003Cli>NEW: Add China isearch engines bots\u003C\u002Fli>\n\u003Cli>NEW: Ability to pass in an array of post types for get_most\u002Fleast_*() functions. Props Leo Plaw.\u003C\u002Fli>\n\u003Cli>FIXED: Moved uninstall to uninstall.php and hence fix missing nonce. Props Julio Potier.\u003C\u002Fli>\n\u003Cli>FIXED: Notices and better way to get views from meta. Props daankortenbach.\u003C\u002Fli>\n\u003Cli>FIXED: No longer needing add_post_meta() if update_post_meta() fails.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.65 (02-06-2013)\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>FIXED: Views not showing in WP-Admin if “Display Options” is not set to “Display to everyone”\u003C\u002Fli>\n\u003C\u002Ful>\n","Enables you to display how many times a post\u002Fpage had been viewed.",100000,3388162,88,65,"2025-08-31T05:28:00.000Z","6.8.5","4.0",[59,82,20,83],"hits","views","https:\u002F\u002Flesterchan.net\u002Fportfolio\u002Fprogramming\u002Fphp\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-postviews.1.78.zip",1,"2013-05-08 00:00:00",{"slug":89,"name":90,"version":91,"author":92,"author_profile":93,"description":94,"short_description":95,"active_installs":96,"downloaded":97,"rating":98,"num_ratings":99,"last_updated":100,"tested_up_to":79,"requires_at_least":101,"requires_php":102,"tags":103,"homepage":106,"download_link":107,"security_score":13,"vuln_count":86,"unpatched_count":28,"last_vuln_date":108,"fetched_at":30},"wp-simple-post-view","Post View Count","3.1","Naresh Parmar","https:\u002F\u002Fprofiles.wordpress.org\u002Fnareshparmar827\u002F","\u003Cp>“Post View Count” is an easy-to-use and lightweight post views count plugin. It allows you to display how many times a post type has been viewed.\u003C\u002Fp>\n\u003Ch4>Main Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Lightweight plugin\u003C\u002Fli>\n\u003Cli>No third party dependency\u003C\u002Fli>\n\u003Cli>Post views display in backend post grid\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Need Help\u003C\u002Fh4>\n\u003Cp>If you’re stuck or have any questions regarding the use of this plugin, you can email us at: \u003Ca href=\"mailto:nareshparmar827@gmail.com\" rel=\"nofollow ugc\">nareshparmar827@gmail.com\u003C\u002Fa>\u003C\u002Fp>\n","Add a \"Post View Count\" plugin to get the count of views for your posts.",4000,77665,92,18,"2025-09-01T16:43:00.000Z","6.8","7.1",[104,59,20,105],"count","view","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-simple-post-view\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-simple-post-view.3.1.zip","2023-10-03 00:00:00",{"slug":110,"name":111,"version":112,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":117,"downloaded":118,"rating":119,"num_ratings":120,"last_updated":121,"tested_up_to":122,"requires_at_least":123,"requires_php":18,"tags":124,"homepage":127,"download_link":128,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"post-views-stats-counter","Post Views Stats Counter","1.1.7","Kazuki Yanamoto","https:\u002F\u002Fprofiles.wordpress.org\u002Fkazukiyanamoto\u002F","\u003Cp>This plugin will display how many times post and page viewed.\u003C\u002Fp>\n\u003Cp>It`s a simple stat analytics that also shows total view per day, week, month and all days. Those view are showed with titles and permalink.\u003Cbr \u002F>\nSelect only by title to see particular pages.\u003C\u002Fp>\n\u003Cp>You can exclude admin user and login users + you can ignore bots and useragents.\u003C\u002Fp>\n\u003Cp>The another merit is that “Most Popular articles” section can be added on to your widget.\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>Display how many times post and page viewed\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>View total access per day, week, month, and all days\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Show titles and permalinks as well\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Change view order by date and title\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>You can ignore bots and UserAgents\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Exclude admin user and login users\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>“Most Popular articles” section can be added on to your widget\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n","This plugin will display how many times post and page viewed. It shows total view of access per day, week, month, and all days.",700,22382,80,4,"2023-04-12T05:51:00.000Z","6.2.9","4.6",[59,82,125,126,20],"post-views","posts","https:\u002F\u002Fglobal-s-h.com\u002Fpvs\u002Fen\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpost-views-stats-counter.1.1.7.zip",{"slug":130,"name":131,"version":132,"author":133,"author_profile":134,"description":135,"short_description":136,"active_installs":137,"downloaded":138,"rating":13,"num_ratings":14,"last_updated":139,"tested_up_to":140,"requires_at_least":141,"requires_php":142,"tags":143,"homepage":145,"download_link":146,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-postviews-plus","WP-PostViews Plus","2.1.2","Richer Yang","https:\u002F\u002Fprofiles.wordpress.org\u002Ffantasyworld\u002F","\u003Cp>It can set that if count the registered member views OR views in index page.\u003Cbr \u002F>\nTo differentiate between USER and BOT is by HTTP_agent, and it can set at admin\u003C\u002Fp>\n","Enables You To Display How Many Times A Post Had Been Viewed By User Or Bot.",400,106724,"2020-05-08T02:43:00.000Z","5.4.19","5.0","5.6.20",[144,59,82,20,83],"bot","https:\u002F\u002Fricher.tw\u002Fwp-postviews-plus","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-postviews-plus.2.1.2.zip",{"attackSurface":148,"codeSignals":154,"taintFlows":184,"riskAssessment":234,"analyzedAt":248},{"hooks":149,"ajaxHandlers":150,"restRoutes":151,"shortcodes":152,"cronEvents":153,"entryPointCount":28,"unprotectedCount":28},[],[],[],[],[],{"dangerousFunctions":155,"sqlUsage":156,"outputEscaping":176,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":183},[],{"prepared":28,"raw":157,"locations":158},7,[159,163,165,168,170,173,175],{"file":160,"line":161,"context":162},"uniquep2views.php",17,"$wpdb->get_var() with variable interpolation",{"file":160,"line":164,"context":162},35,{"file":160,"line":166,"context":167},58,"$wpdb->query() with variable interpolation",{"file":160,"line":169,"context":167},69,{"file":160,"line":171,"context":172},76,"$wpdb->get_results() with variable interpolation",{"file":160,"line":174,"context":172},87,{"file":160,"line":51,"context":172},{"escaped":28,"rawEcho":35,"locations":177},[178,181],{"file":160,"line":179,"context":180},48,"raw output",{"file":160,"line":182,"context":180},113,[],[185,202,210,220],{"entryPoint":186,"graph":187,"unsanitizedCount":86,"severity":201},"insert_views (uniquep2views.php:55)",{"nodes":188,"edges":198},[189,193],{"id":190,"type":191,"label":192,"file":160,"line":166},"n0","source","$_SERVER['REMOTE_ADDR']",{"id":194,"type":195,"label":196,"file":160,"line":166,"wp_function":197},"n1","sink","query() [SQLi]","query",[199],{"from":190,"to":194,"sanitized":200},false,"high",{"entryPoint":203,"graph":204,"unsanitizedCount":86,"severity":201},"update_views (uniquep2views.php:62)",{"nodes":205,"edges":208},[206,207],{"id":190,"type":191,"label":192,"file":160,"line":169},{"id":194,"type":195,"label":196,"file":160,"line":169,"wp_function":197},[209],{"from":190,"to":194,"sanitized":200},{"entryPoint":211,"graph":212,"unsanitizedCount":86,"severity":201},"get_total_views (uniquep2views.php:73)",{"nodes":213,"edges":218},[214,215],{"id":190,"type":191,"label":192,"file":160,"line":171},{"id":194,"type":195,"label":216,"file":160,"line":171,"wp_function":217},"get_results() [SQLi]","get_results",[219],{"from":190,"to":194,"sanitized":200},{"entryPoint":221,"graph":222,"unsanitizedCount":14,"severity":201},"\u003Cuniquep2views> (uniquep2views.php:0)",{"nodes":223,"edges":231},[224,226,227,229],{"id":190,"type":191,"label":225,"file":160,"line":166},"$_SERVER['REMOTE_ADDR'] (x2)",{"id":194,"type":195,"label":196,"file":160,"line":166,"wp_function":197},{"id":228,"type":191,"label":192,"file":160,"line":171},"n2",{"id":230,"type":195,"label":216,"file":160,"line":171,"wp_function":217},"n3",[232,233],{"from":190,"to":194,"sanitized":200},{"from":228,"to":230,"sanitized":200},{"summary":235,"deductions":236},"The \"unique-post-view-counter\" v1.0 plugin exhibits a concerning security posture despite having no recorded vulnerability history or known CVEs. While the attack surface appears minimal with no identified AJAX handlers, REST API routes, shortcodes, or cron events, the static analysis reveals significant code-level weaknesses.  A critical area of concern is the complete lack of prepared statements for all SQL queries and the absence of output escaping, indicating a high risk of SQL injection and cross-site scripting (XSS) vulnerabilities. The taint analysis further confirms this, with four flows identified with unsanitized paths and high severity, strongly suggesting the potential for malicious data to be executed or displayed without proper sanitization.\n\nDespite the absence of documented vulnerabilities, the code itself presents substantial risks due to the identified insecure practices. The plugin lacks any nonce or capability checks, further compounding the potential for unauthorized actions or data manipulation if any entry points were to be discovered or introduced. The vulnerability history being clean is a positive sign, but it does not negate the clear and present dangers indicated by the static analysis. Therefore, while the plugin's footprint might be small, the lack of fundamental security controls makes it a high-risk component that requires immediate remediation.",[237,239,242,244,246],{"reason":238,"points":36},"Raw SQL without prepared statements",{"reason":240,"points":241},"No output escaping",16,{"reason":243,"points":36},"High severity taint flows",{"reason":245,"points":11},"No nonce checks",{"reason":247,"points":11},"No capability checks","2026-03-17T00:02:10.075Z",{"wat":250,"direct":255},{"assetPaths":251,"generatorPatterns":252,"scriptPaths":253,"versionParams":254},[],[],[],[],{"cssClasses":256,"htmlComments":257,"htmlAttributes":258,"restEndpoints":259,"jsGlobals":260,"shortcodeOutput":261},[],[],[],[],[],[262,263],"total_views","unique_views",{"error":265,"url":266,"statusCode":267,"statusMessage":268,"message":268},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Funique-post-view-conter\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":28,"versions":270},[]]