[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpE1ruRPm3mv_jA2Bd-NhOBbwT4oJ_rYSgxH68osaZDQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":15,"requires_php":15,"tags":17,"homepage":23,"download_link":24,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":37,"analysis":121,"fingerprints":338},"warcraft-bundle","Warcraft Bundle","2.3.2","leaklords","https:\u002F\u002Fprofiles.wordpress.org\u002Fkwark\u002F","\u003Cp>WoW collection for wordpress. 4 widgets: widget guild Perks, widget official server informations, widget guild achievements, widget guild news. 4 pages with shortcodes: guild perks pages, guild roster pages, guild progress page, guild datas page. Also character signatures with shortcode.\u003C\u002Fp>\n\u003Cp>You must update this plugin manualy (130 mo of files is not supported with the automatic upgrade WordPress from most hosters).\u003C\u002Fp>\n\u003Cp>There is the theme was build for the plugin. It’s the first developmement I made but it’s work correctly without any css change with the warcraft-bundle. You may preview @ http:\u002F\u002Fstyle-cataclysm.com and purchase @ http:\u002F\u002Fkwark.allwebtuts.net\u003C\u002Fp>\n\u003Cp>You host must support php5.2.X and allow_url_fopen\u003C\u002Fp>\n\u003Cp>This plugin is non-affiliate with Blizzard entertainment. Images are trademarked and are the propriety of Blizzard Entertainment. Api policy rules http:\u002F\u002Fblizzard.github.com\u002Fapi-wow-docs\u002F#policies-and-support\u002Fapi-policy\u003C\u002Fp>\n\u003Cp>Happy Christmas\u003C\u002Fp>\n\u003Cp>FIRST STEP\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Define some information in Dashboard > Warcraft Bundle (mandatory guild name, server name and mandatory only for progress page, GM character name)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>PAGES\u003C\u002Fp>\n\u003Cp>Add a page roster\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Create your page “roster” or “members” under wordpress and add in the content before publish\u003C\u002Fli>\n\u003Cli>\n\u003Cp>This page is under cron task to generate a cache of this page in html format\u003C\u002Fp>\n\u003Cp>[warcraft type=”guild members page”]\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Add a page perks\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Create your page “perks” or “avantages” under wordpress and add in the content before publish\u003C\u002Fp>\n\u003Cp>[warcraft type=”guild perks page”]\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Add page progression\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Create your page “progression” or “down” under wordpress and add in the content before publish\u003C\u002Fp>\n\u003Cp>[warcraft type=”guild progress page”]\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Add page datas\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Create your page “datas” or “loot” or “news” under wordpress and add in the content before publish\u003C\u002Fp>\n\u003Cp>[warcraft type=”guild datas page”]\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>More option for datas page\u003C\u002Fp>\n\u003Cp>[warcraft type=”guild datas page” column=”4″ sort=”1″ stuff=”seperate” limit=”30″]\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Col>\n\u003Cli>Column, start @ 1\u003C\u002Fli>\n\u003Cli>sort, 0 or 1 for asc\u002Fdesc\u003C\u002Fli>\n\u003Cli>Limit, the limit of entries to display\u003C\u002Fli>\n\u003Cli>stuff, may take parameters full or seperate (and if defined, add one or two zone under the main list)\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>WIDGETS\u003C\u002Fp>\n\u003Cp>Widget Perks\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Drag – drop the widget and define the inputs (title, limit and the type of displaying icon or full)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Widget Server\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Drag – drop the widget and define the input (server) with the exact InGame server name (majuscule, minuscule, apostrophe needed)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Widget News\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Drag – drop the widget and define the input (title, limit)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Widget Achievements\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Drag – drop the widget and define the input (title, limit)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>SIGNATURES\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>work only if this character is in the guild defined in Dashboard > warcraft bundle\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Work in some forums plugin in a signature spaces\u003C\u002Fp>\n\u003Cp>[warcraft type=”signature” character=”…”]\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Where \u003Ccode>...\u003C\u002Fcode> is the exact name from your character in this guild\u003C\u002Fp>\n","Warcraft Bundle for WordPress. World of Warcraft collection pages and widgets for WordPress.",10,5169,100,1,"","3.4.2",[18,19,20,21,22],"widget-guild-news","widget-guild-perks","widget-server-news","world-of-warcraft","wow","http:\u002F\u002Fkwark.allwebtuts.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwarcraft-bundle.zip",0,null,"2026-03-15T10:48:56.248Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"kwark",7,70,91,30,88,"2026-04-04T11:03:56.835Z",[38,58,76,92,108],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":34,"downloaded":46,"rating":35,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":15,"download_link":56,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":57},"wow-progress","WoW Progress","1.23.0","martinek","https:\u002F\u002Fprofiles.wordpress.org\u002Fmartinek\u002F","\u003Cp>A widget that helps to display guild raid progress.\u003Cbr \u002F>\nEach boss have separate option to toggle kill, heroic kill and mythic kill. Each raid can be toggled to be displayed or not and if it should be shown or collapsed by default.\u003C\u002Fp>\n\u003Cp>There is theme support with sample Light and Dark theme. Also my own theme is attached if you are interested. You should create your own theme and customise it to match your needs.\u003C\u002Fp>\n\u003Cp>Progress can be configured in widget menu.\u003Cbr \u002F>\nTheme and backgrounds toggle is in Settings > WoW Progress menu.\u003C\u002Fp>\n\u003Cp>If you managed to find bugs or want to correct some of my code, please don’t hesitate to leave a comment or contact me on martinek@freevision.sk.\u003C\u002Fp>\n\u003Cp>For list of raids, check latest change log. I usually add raids as people report new patch coming up on the support forums.\u003C\u002Fp>\n","A widget that helps to display guild raid progress.",21627,5,"2025-08-17T12:56:00.000Z","6.8.5","3.0","5.6",[53,54,55,21,22],"guild","progress","warcraft","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwow-progress.1.23.0.zip","2026-03-15T15:16:48.613Z",{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":66,"downloaded":67,"rating":13,"num_ratings":14,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":15,"tags":71,"homepage":73,"download_link":74,"security_score":75,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":57},"wow-recruit-widget","WOW Recruitment Widget","1.4.12","Freeman Man","https:\u002F\u002Fprofiles.wordpress.org\u002Ffreegod725\u002F","\u003Cp>A widget that helps to display recruitment message of a World of Warcraft guild.\u003Cbr \u002F>\nIt works just fine out of the box, but it is very customizable with some CSS techniques.\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fwww.ycfreeman.com\u002F2010\u002F08\u002Fwow-recruitment-wordpress-widget.html\" rel=\"nofollow ugc\">Customization tutorial can be found here\u003C\u002Fa>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>please save the widget once after upgrade from 1.0.x to make it work with new codes, \u003C\u002Fli>\n\u003Cli>make sure you backup those color codes before upgrade if you have changed them before 1.2\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>New in 1.4.6:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>added demon hunter class\u003C\u002Fli>\n\u003Cli>this plugin now uses npm to build SCSS stylesheets, see source code for details, mixins will be useful if you’re building your own wordpress theme\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>** I will not be actively updating this plugin, but I’ll still do occasional update like this one when I’m bored,\u003Cbr \u002F>\nplease feel free to fork this project from github.\u003C\u002Fp>\n\u003Cp>To use this widget, simply go to Appearance => Widget and drag it to a sidebar as similar to other widgets.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwow-recruit-widget\u002F\" rel=\"ugc\">Plugin site\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwrdemo.ycfreeman.com\u002F\" rel=\"nofollow ugc\">Demo\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.ycfreeman.com\u002Fwow-recruitment-widget\" rel=\"nofollow ugc\">Full description on the web page of this plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fycfreeman\u002Fwow-guild-recruitment-widget\u002Fissues\" rel=\"nofollow ugc\">Issue Tracker on github\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fycfreeman\u002Fwow-guild-recruitment-widget\" rel=\"nofollow ugc\">Source Code\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you found bugs or want to correct some of my codes, please file issues in github 🙂\u003C\u002Fp>\n\u003Ch3>Development Note\u003C\u002Fh3>\n\u003Cp>require \u003Ca href=\"https:\u002F\u002Fwww.npmjs.com\u002F\" rel=\"nofollow ugc\">npm\u003C\u002Fa> to build stylesheets\u003C\u002Fp>\n\u003Cpre>\u003Ccode>npm run build to build stylesheets continuously to .\u002Fcss\u002F until Ctrl+C to terminate, test page can be viewed at http:\u002F\u002Flocalhost:8001\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>only tested on Mac, should work in *nix platforms, should work in Windows too\u003C\u002Fp>\n","A widget that helps to display recruitment message of a World of Warcraft guild, also can be used for other games that have different classes.",20,18998,"2016-01-25T15:08:00.000Z","4.4.34","2.8",[53,72,55,21,22],"recruitment","http:\u002F\u002Fwww.ycfreeman.com\u002Fwow-recruitment-widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwow-recruit-widget.1.4.12.zip",85,{"slug":77,"name":78,"version":79,"author":80,"author_profile":81,"description":82,"short_description":83,"active_installs":66,"downloaded":84,"rating":13,"num_ratings":85,"last_updated":15,"tested_up_to":86,"requires_at_least":87,"requires_php":15,"tags":88,"homepage":90,"download_link":91,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"wowpi","WoWpi","2.5.2","avenirer","https:\u002F\u002Fprofiles.wordpress.org\u002Favenirer\u002F","\u003Cp>\u003Cstrong>ATTENTION: AFTER AN UPDATE IT IS IMPORTANT TO GO TO THE SETTINGS OF THE PLUGIN AND DO A SAVE, IN ORDER TO CLEAR THE OLD DATA\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>Highlights\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Guild Roster\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Guild Progression (as I see it…)\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Guild Achievements\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Guild Tabard\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Character Datasheets\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Realm status\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The plugin allows you to get your character data from Battle.net API service. The plugin uses caching of 12 hours, so you don’t have to worry about reaching the quota established by the Battle.net. Also, for general data, like classes, factions, races and so on, the cache is set for 14 days. If you however find yourself in the position to show data that appeared between the refresh of caches you can go to the admin section and save your data again, which will simply destroy all cache.\u003C\u002Fp>\n\u003Cp>For example, a new expansion appeared in World of Warcraft with and you created a new character of a race that didn’t exist before the expansion. In order to show that race you need to refresh the cache. Just go to WoWpi settings and push the save button. That’s it.\u003C\u002Fp>\n\u003Cp>The plugin allows you to choose if you want to include the Tooltip script from Wowhead (the one that shows a tooltip on mouseover). More info on the Tooltip can be found here (http:\u002F\u002Fwww.wowhead.com\u002Ftooltips).\u003C\u002Fp>\n\u003Cp>Also, when retrieving the Guild Tabard, the plugin uses a personal script located at http:\u002F\u002Fwow-hunter.ro\u002Ftabard-creator (by the way, my wow blog is http:\u002F\u002Fwow-hunter.ro)\u003C\u002Fp>\n","The WoWpi plugin allows you to retrieve data from Battle.net API regarding your World of Warcraft character and\u002For guild.",8854,12,"4.9.29","3.0.1",[89,21,22],"armory","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwowpi\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwowpi.zip",{"slug":93,"name":94,"version":95,"author":96,"author_profile":97,"description":98,"short_description":99,"active_installs":11,"downloaded":100,"rating":25,"num_ratings":25,"last_updated":101,"tested_up_to":102,"requires_at_least":70,"requires_php":15,"tags":103,"homepage":106,"download_link":107,"security_score":75,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":57},"wow-armory","WoW Armory","8.4.3","SeiferTim","https:\u002F\u002Fprofiles.wordpress.org\u002Fseifertim\u002F","\u003Cp>Grabs your character from the Armory and displays their basic info.   Allows multiple widgets with different character information.  Works for US and EU realms.  You can choose to hide or display equipment, professions, and achievements.\u003C\u002Fp>\n\u003Cp>You can optionally show a 3D model of your character using Wowhead’s model viewer.\u003C\u002Fp>\n\u003Cp>Caches data for 15 minutes to reduce the number of requests.\u003C\u002Fp>\n\u003Cp>NOTE: Currently this plugin requires cURL and PHP5 to work.\u003C\u002Fp>\n","Easily displays your character's stats from the Armory.",15654,"2009-11-06T13:54:00.000Z","2.8.4",[89,104,105,21,22],"character","widget","http:\u002F\u002Ftimsworld.nfshost.com\u002Fwordpress-plugins\u002Fwow-armory-wp-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwow-armory.8.4.3.zip",{"slug":109,"name":110,"version":111,"author":112,"author_profile":113,"description":114,"short_description":115,"active_installs":11,"downloaded":116,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":117,"requires_at_least":70,"requires_php":15,"tags":118,"homepage":119,"download_link":120,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"wow-breaking-news","WoW Breaking News","2.1","Ticstyle","https:\u002F\u002Fprofiles.wordpress.org\u002Fstoffetix\u002F","\u003Cp>This plugin will let you add a widget on your wordpress site displaying the in-game breaking news that you can se while logging in to World of Warcraft.\u003C\u002Fp>\n\u003Cp>Supports EU, US, DE, RU, ES, FR, BR, TW, CN and KR Servers\u003C\u002Fp>\n\u003Ch3>Changing Realm\u003C\u002Fh3>\n\u003Cp>To edit realm location settings edit wow-breaking-news.php and find:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002F\u002FRealm location settings: (Default is eu)\n  eu(); \u002F\u002FEurope (English)\n\u002F\u002Fus(); \u002F\u002FUnitead States & Australia (English)\n\u002F\u002Fde(); \u002F\u002FGerman\n\u002F\u002Fru(); \u002F\u002FRussian\n\u002F\u002Fes(); \u002F\u002FSpanish\n\u002F\u002Ffr(); \u002F\u002FFrench    \n\u002F\u002Fbr(); \u002F\u002FPortuguese\n\u002F\u002Ftw(); \u002F\u002FTaiwanese\n\u002F\u002Fcn(); \u002F\u002FChinese\n\u002F\u002Fkr(); \u002F\u002FKorean\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Europe is in this case the choosen setting.\u003C\u002Fp>\n\u003Cp>To change it to let’s say Russian, edit the code to look like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002F\u002FRealm location settings: (Default is eu)\n\u002F\u002Feu(); \u002F\u002FEurope (English)\n\u002F\u002Fus(); \u002F\u002FUnitead States & Australia (English)\n\u002F\u002Fde(); \u002F\u002FGerman\n  ru(); \u002F\u002FRussian\n\u002F\u002Fes(); \u002F\u002FSpanish\n\u002F\u002Ffr(); \u002F\u002FFrench    \n\u002F\u002Fbr(); \u002F\u002FPortuguese\n\u002F\u002Ftw(); \u002F\u002FTaiwanese\n\u002F\u002Fcn(); \u002F\u002FChinese\n\u002F\u002Fkr(); \u002F\u002FKorean\n\u003C\u002Fcode>\u003C\u002Fpre>\n","This plugin will let you add a widget on your wordpress site displaying the in-game breaking news that you can se while logging in to World of Warcraf …",7500,"3.9.40",[21,22],"http:\u002F\u002Fwow-breaking-news.ticstyle.se\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwow-breaking-news.zip",{"attackSurface":122,"codeSignals":153,"taintFlows":294,"riskAssessment":322,"analyzedAt":337},{"hooks":123,"ajaxHandlers":144,"restRoutes":145,"shortcodes":146,"cronEvents":150,"entryPointCount":14,"unprotectedCount":25},[124,129,134,138,140,142],{"type":125,"name":126,"callback":127,"file":128,"line":85},"action","admin_menu","wb_options_page","pages-admin\\admin-wb-main-fork.php",{"type":125,"name":130,"callback":131,"priority":14,"file":132,"line":133},"wb_schedule_roster","wb_schedule_roster_function","wb-main-fork.php",211,{"type":125,"name":135,"callback":136,"file":132,"line":137},"widgets_init","anonymous",2943,{"type":125,"name":135,"callback":136,"file":132,"line":139},3042,{"type":125,"name":135,"callback":136,"file":132,"line":141},3122,{"type":125,"name":135,"callback":136,"file":132,"line":143},3185,[],[],[147],{"tag":55,"callback":148,"file":132,"line":149},"wb_do_all_warcraft_shortcode",1052,[151],{"hook":130,"callback":130,"file":132,"line":152},1370,{"dangerousFunctions":154,"sqlUsage":164,"outputEscaping":166,"fileOperations":31,"externalRequests":14,"nonceChecks":25,"capabilityChecks":25,"bundledLibraries":293},[155,158,160,162],{"fn":156,"file":132,"line":137,"context":157},"create_function","add_action('widgets_init', create_function( '', 'register_widget( \"wb_achievements_widget\" );'));",{"fn":156,"file":132,"line":139,"context":159},"add_action('widgets_init', create_function( '', 'register_widget( \"wb_perks_widget\" );'));",{"fn":156,"file":132,"line":141,"context":161},"add_action('widgets_init', create_function( '', 'register_widget( \"wb_news_widget\" );'));",{"fn":156,"file":132,"line":143,"context":163},"add_action('widgets_init', create_function( '', 'register_widget( \"wb_server_widget\" );'));",{"prepared":31,"raw":25,"locations":165},[],{"escaped":167,"rawEcho":168,"locations":169},41,69,[170,173,175,177,179,181,183,185,186,188,190,191,193,194,196,198,200,201,203,204,206,208,210,212,214,216,218,220,222,224,225,227,229,230,232,233,235,237,239,241,243,245,246,248,250,251,253,254,256,258,259,261,263,265,267,269,271,272,274,276,277,279,280,282,284,286,288,290,292],{"file":128,"line":171,"context":172},89,"raw output",{"file":128,"line":174,"context":172},95,{"file":128,"line":176,"context":172},117,{"file":128,"line":178,"context":172},128,{"file":128,"line":180,"context":172},139,{"file":128,"line":182,"context":172},150,{"file":128,"line":184,"context":172},193,{"file":128,"line":184,"context":172},{"file":132,"line":187,"context":172},1858,{"file":132,"line":189,"context":172},1859,{"file":132,"line":189,"context":172},{"file":132,"line":192,"context":172},1860,{"file":132,"line":192,"context":172},{"file":132,"line":195,"context":172},1861,{"file":132,"line":197,"context":172},1863,{"file":132,"line":199,"context":172},1864,{"file":132,"line":199,"context":172},{"file":132,"line":202,"context":172},1865,{"file":132,"line":202,"context":172},{"file":132,"line":205,"context":172},1866,{"file":132,"line":207,"context":172},1868,{"file":132,"line":209,"context":172},1872,{"file":132,"line":211,"context":172},1876,{"file":132,"line":213,"context":172},2887,{"file":132,"line":215,"context":172},2890,{"file":132,"line":217,"context":172},2892,{"file":132,"line":219,"context":172},2894,{"file":132,"line":221,"context":172},2928,{"file":132,"line":223,"context":172},2929,{"file":132,"line":223,"context":172},{"file":132,"line":226,"context":172},2932,{"file":132,"line":228,"context":172},2933,{"file":132,"line":228,"context":172},{"file":132,"line":231,"context":172},2935,{"file":132,"line":231,"context":172},{"file":132,"line":234,"context":172},2969,{"file":132,"line":236,"context":172},2972,{"file":132,"line":238,"context":172},2974,{"file":132,"line":240,"context":172},2976,{"file":132,"line":242,"context":172},3020,{"file":132,"line":244,"context":172},3021,{"file":132,"line":244,"context":172},{"file":132,"line":247,"context":172},3024,{"file":132,"line":249,"context":172},3025,{"file":132,"line":249,"context":172},{"file":132,"line":252,"context":172},3027,{"file":132,"line":252,"context":172},{"file":132,"line":255,"context":172},3032,{"file":132,"line":257,"context":172},3033,{"file":132,"line":257,"context":172},{"file":132,"line":260,"context":172},3066,{"file":132,"line":262,"context":172},3069,{"file":132,"line":264,"context":172},3071,{"file":132,"line":266,"context":172},3073,{"file":132,"line":268,"context":172},3107,{"file":132,"line":270,"context":172},3108,{"file":132,"line":270,"context":172},{"file":132,"line":273,"context":172},3111,{"file":132,"line":275,"context":172},3112,{"file":132,"line":275,"context":172},{"file":132,"line":278,"context":172},3114,{"file":132,"line":278,"context":172},{"file":132,"line":281,"context":172},3145,{"file":132,"line":283,"context":172},3148,{"file":132,"line":285,"context":172},3150,{"file":132,"line":287,"context":172},3152,{"file":132,"line":289,"context":172},3177,{"file":132,"line":291,"context":172},3178,{"file":132,"line":291,"context":172},[],[295,314],{"entryPoint":296,"graph":297,"unsanitizedCount":11,"severity":313},"wb_do_admin_page_mainconf (pages-admin\\admin-wb-main-fork.php:51)",{"nodes":298,"edges":310},[299,304],{"id":300,"type":301,"label":302,"file":128,"line":303},"n0","source","$_POST (x10)",55,{"id":305,"type":306,"label":307,"file":128,"line":308,"wp_function":309},"n1","sink","update_option() [Settings Manipulation]",56,"update_option",[311],{"from":300,"to":305,"sanitized":312},false,"low",{"entryPoint":315,"graph":316,"unsanitizedCount":11,"severity":313},"\u003Cadmin-wb-main-fork> (pages-admin\\admin-wb-main-fork.php:0)",{"nodes":317,"edges":320},[318,319],{"id":300,"type":301,"label":302,"file":128,"line":303},{"id":305,"type":306,"label":307,"file":128,"line":308,"wp_function":309},[321],{"from":300,"to":305,"sanitized":312},{"summary":323,"deductions":324},"The \"warcraft-bundle\" v2.3.2 plugin presents a mixed security posture. On the positive side, it demonstrates good practices in handling SQL queries, exclusively using prepared statements, and its vulnerability history is clean with no known CVEs.  The static analysis also indicates a minimal attack surface in terms of AJAX handlers and REST API routes, with no unprotected entry points identified in these areas.  However, several concerning signals exist within the code analysis. The presence of \"dangerous functions\" like create_function is a red flag, as it can lead to security vulnerabilities if not handled with extreme care. Furthermore, a significant portion of output (63%) is not properly escaped, posing a risk of Cross-Site Scripting (XSS) vulnerabilities. The taint analysis, while limited in scope with only two flows analyzed, revealed unsanitized paths, which, if not handled correctly, could lead to security issues. The complete absence of nonce checks and capability checks on its identified entry points (shortcodes, cron events) is a significant weakness, leaving these functionalities potentially vulnerable to unauthorized access or execution.  While the plugin has no recorded history of vulnerabilities, the internal code analysis reveals potential weaknesses that could be exploited if not addressed.",[325,327,330,333,335],{"reason":326,"points":11},"Unsanitized paths in taint analysis",{"reason":328,"points":329},"Dangerous functions (create_function) used",15,{"reason":331,"points":332},"Significant unescaped output (37% escaped)",8,{"reason":334,"points":11},"No nonce checks on entry points",{"reason":336,"points":11},"No capability checks on entry points","2026-03-16T23:23:45.179Z",{"wat":339,"direct":364},{"assetPaths":340,"generatorPatterns":351,"scriptPaths":352,"versionParams":353},[341,342,343,344,345,346,347,348,349,350],"\u002Fwp-content\u002Fplugins\u002Fwarcraft-bundle\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fwarcraft-bundle\u002Fcss\u002Ffrontend.css","\u002Fwp-content\u002Fplugins\u002Fwarcraft-bundle\u002Fjs\u002Fjquery.tables.min.js","\u002Fwp-content\u002Fplugins\u002Fwarcraft-bundle\u002Fjs\u002Fjquery.countdown.js","\u002Fwp-content\u002Fplugins\u002Fwarcraft-bundle\u002Fjs\u002Fbasic-jquery-slider.min.js","\u002Fwp-content\u002Fplugins\u002Fwarcraft-bundle\u002Fjs\u002Fjquery.freeow.min.js","\u002Fwp-content\u002Fplugins\u002Fwarcraft-bundle\u002Fjs\u002FjPages.min.js","\u002Fwp-content\u002Fplugins\u002Fwarcraft-bundle\u002Fjs\u002Fjquery.qtip.min.js","\u002Fwp-content\u002Fplugins\u002Fwarcraft-bundle\u002Fjs\u002Fwarcraft-qtip-dark.js","\u002Fwp-content\u002Fplugins\u002Fwarcraft-bundle\u002Fcss\u002Fjquery.qtip.min.css",[],[343,344,345,346,347,348,349],[354,355,356,357,358,359,360,361,362,363],"warcraft-bundle\u002Fcss\u002Fadmin.css?ver=","warcraft-bundle\u002Fcss\u002Ffrontend.css?ver=","warcraft-bundle\u002Fjs\u002Fjquery.tables.min.js?ver=","warcraft-bundle\u002Fjs\u002Fjquery.countdown.js?ver=","warcraft-bundle\u002Fjs\u002Fbasic-jquery-slider.min.js?ver=","warcraft-bundle\u002Fjs\u002Fjquery.freeow.min.js?ver=","warcraft-bundle\u002Fjs\u002FjPages.min.js?ver=","warcraft-bundle\u002Fjs\u002Fjquery.qtip.min.js?ver=","warcraft-bundle\u002Fjs\u002Fwarcraft-qtip-dark.js?ver=","warcraft-bundle\u002Fcss\u002Fjquery.qtip.min.css?ver=",{"cssClasses":365,"htmlComments":366,"htmlAttributes":408,"restEndpoints":416,"jsGlobals":417,"shortcodeOutput":420},[],[367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,397,398,399,400,401,402,403,404,405,406,407],"\u003C!-- Copyright  Laurent (KwarK) Bertrand  (email : kwark@allwebtuts.net) -->","\u003C!-- php class by Thomas Andersen http:\u002F\u002Fwww.acoon.dk\u002F -->","\u003C!-- You can not remove these comments such as authors informations. -->","\u003C!-- This program is free software; you can redistribute it and\u002For modify -->","\u003C!-- it under the terms of the GNU General Public License as published by -->","\u003C!-- the Free Software Foundation; either version 2 of the License, or -->","\u003C!-- (at your option) any later version. -->","\u003C!-- This program is distributed in the hope that it will be useful, -->","\u003C!-- but WITHOUT ANY WARRANTY; without even the implied warranty of -->","\u003C!-- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the -->","\u003C!-- GNU General Public License for more details. -->","\u003C!-- You should have received a copy of the GNU General Public License -->","\u003C!-- along with this program; if not, write to the Free Software -->","\u003C!-- Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA -->","\u003C!-- disallow direct access to file -->","\u003C!-- Change id if you have a test-site -->","\u003C!-- Leave off for others blogs in multi-sites -->","\u003C!-- General plugins path or url -->","\u003C!-- LEAVE COMMENTED (for localhost - build images from game only) -->","\u003C!-- Respects SSL, Style.css is relative to the current file -->","\u003C!-- Construct admin page -->","\u003C!-- Example if you need to change the css with yours -->","\u003C!-- Your css must be in \u002Fcss\u002F folder and named your-style.css -->","\u003C!-- Api config -->","\u003C!-- Dont change. Only mysql supported so far. -->","\u003C!-- Hostname of server. -->","\u003C!-- Name of your database -->","\u003C!-- Insert your database username -->","\u003C!-- Insert your database password -->","\u003C!-- Only use the two below if you have received API keys from Blizzard. -->","\u003C!-- if you have an API key from Blizzard -->","\u003C!-- Table -->","\u003C!-- Countdown -->","\u003C!-- Simple slider -->","\u003C!-- Alert modal -->","\u003C!-- Pagination for roster -->","\u003C!-- Compatibily check - bug with multiple load of q-tip by multiple plugins (my plugin liveTV Bundle load this q-tip) -->","\u003C!-- Load qtip in admin and frontend -->","\u003C!-- Hook for scheduled task -->","\u003C!-- Fonction for cron tasked the page roster - end cron function @ line ~1012 -->","\u003C!-- include the main class  -->",[409,410,411,412,413,414,415],"data-wb-guild-name","data-wb-realm-name","data-wb-guild-rank","data-wb-player-rank","data-wb-player-name","data-wb-player-class","data-wb-player-spec",[],[418,419],"wb_plugin_url","wowarmory",[]]