[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fi5P8qQQqacixD78wwQPYH_SOmKFBLymSLd1oABsJRmg":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":14,"tags":17,"homepage":20,"download_link":21,"security_score":22,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":24,"vulnerabilities":25,"developer":26,"crawl_stats":23,"alternatives":33,"analysis":55,"fingerprints":93},"wd3k-go-top-down","WD3K Go Top Down","0.92","d3wp","https:\u002F\u002Fprofiles.wordpress.org\u002Fd3wp\u002F","\u003Cp>Creates animated Go Top\u002FGo Down buttons in the right bottom corner of your blog. After click, scrolls to top or bottom of the page.\u003C\u002Fp>\n\u003Cp>Uses jQuery for setting transparency when you move your mouse over the button.\u003C\u002Fp>\n\u003Ch3>Feedback\u003C\u002Fh3>\n\u003Cp>http:\u002F\u002Fwww.webdev3000.com\u002F\u003C\u002Fp>\n","Creates animated Go Top\u002FGo Down buttons in the right bottom corner of your blog. After click, scrolls to top or bottom of the page.",10,3885,0,"","3.1.4","2.5",[18,19],"go-down","go-top","http:\u002F\u002Fwww.webdev3000.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwd3k-go-top-down.0.92.zip",100,null,"2026-03-15T10:48:56.248Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":27,"total_installs":28,"avg_security_score":29,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},11,2110,87,30,85,"2026-04-05T09:36:45.159Z",[34],{"slug":35,"name":36,"version":37,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":13,"num_ratings":13,"last_updated":44,"tested_up_to":45,"requires_at_least":46,"requires_php":14,"tags":47,"homepage":52,"download_link":53,"security_score":31,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":54},"m7-go-top","M7 Go Top","1.1","Mihail Semjonov","https:\u002F\u002Fprofiles.wordpress.org\u002Fmuxahuk1214\u002F","\u003Cp>Creates “top” link on your web so that visitors could simply get back to the top of your site.\u003C\u002Fp>\n\u003Cp>Plugin has it’s own subpage in dashbord where you can specify:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Plugin disable ( alown not to output enything on front end )\u003C\u002Fli>\n\u003Cli>Distance from wich to show button ( can be set in px or % )\u003C\u002Fli>\n\u003Cli>Scroll speed\u003C\u002Fli>\n\u003Cli>Type of the button. Currently there’s 3 types: button, image, vk style ( sticked to side and 100% height)\u003C\u002Fli>\n\u003Cli>Text of the button\u003C\u002Fli>\n\u003Cli>Images on default and hovered state\u003C\u002Fli>\n\u003Cli>Text font size\u003C\u002Fli>\n\u003Cli>Width and height\u003C\u002Fli>\n\u003Cli>Wertical and horizontal position of the button\u003C\u002Fli>\n\u003Cli>The insets.\u003C\u002Fli>\n\u003Cli>Opacity on default and hovered state\u003C\u002Fli>\n\u003Cli>Colors ( text and beckground defaults and hovered states )\u003C\u002Fli>\n\u003Cli>Border\u003C\u002Fli>\n\u003Cli>Border radius\u003C\u002Fli>\n\u003Cli>Text shadow\u003C\u002Fli>\n\u003Cli>Box shadow\u003C\u002Fli>\n\u003Cli>You can specify element classes\u003C\u002Fli>\n\u003Cli>Custom styles\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Languages: Supports Russian and English.\u003C\u002Fp>\n\u003Cp>To-do:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Add image + text support\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Note: In new plugin settings ( starting from version 1.0 ) by default “Disable plugin” setting is set to true ( checked ) it means that plugin wount output enuthing in front end. So you need to uncheck it to work! ( for thous who is updating the value will be changed automaticaly )\u003C\u002Fp>\n\u003Cp>Note: Plugin was developed on WordPress 3.7.1 and haven’t been tested on earlear versions.\u003C\u002Fp>\n\u003Cp>If you find some bug or if plugin isn’t working feel free to write in the support and i’ll answer or make changes do fix bugs.\u003C\u002Fp>\n\u003Cp>Also if you have translated plugin to your language you can send me .mo and .po files and i’ll add them to plugin\u003C\u002Fp>\n\u003Cp>And if you have suggestions how i can improve plugin write me about theme\u003C\u002Fp>\n","Creates \"top\" link on your web so that visitors could simply get back to the top of your site.",50,3800,"2013-12-12T01:45:00.000Z","3.7.41","3.5.1",[48,19,49,50,51],"back-to-top","return-to-top","to-top","top","http:\u002F\u002Fm7-pro.ru\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fm7-go-top.1.1.zip","2026-03-15T15:16:48.613Z",{"attackSurface":56,"codeSignals":72,"taintFlows":85,"riskAssessment":86,"analyzedAt":92},{"hooks":57,"ajaxHandlers":68,"restRoutes":69,"shortcodes":70,"cronEvents":71,"entryPointCount":13,"unprotectedCount":13},[58,64],{"type":59,"name":60,"callback":61,"file":62,"line":63},"action","init","wd3k_go_top_down_init","wd3k-go-top-down.php",23,{"type":59,"name":65,"callback":66,"file":62,"line":67},"wp_footer","wd3k_go_top_down_footer",24,[],[],[],[],{"dangerousFunctions":73,"sqlUsage":74,"outputEscaping":76,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":84},[],{"prepared":13,"raw":13,"locations":75},[],{"escaped":13,"rawEcho":77,"locations":78},2,[79,82],{"file":62,"line":80,"context":81},18,"raw output",{"file":62,"line":83,"context":81},19,[],[],{"summary":87,"deductions":88},"The \"wd3k-go-top-down\" v0.92 plugin exhibits a seemingly secure static analysis profile at first glance, with no identified entry points (AJAX, REST API, shortcodes, cron) that are unprotected by authentication or capability checks.  Furthermore, the code reports no dangerous functions, SQL queries are exclusively parameterized, and there are no file operations or external HTTP requests. The absence of taint flows and a clean vulnerability history further suggest a low risk profile.  However, a critical concern emerges from the static analysis regarding output escaping: 100% of the identified outputs are not properly escaped. This indicates a significant risk of Cross-Site Scripting (XSS) vulnerabilities, where malicious scripts could be injected and executed within the WordPress admin area or on the frontend, depending on where these outputs are rendered.  While the plugin's attack surface is minimal and its historical security record is spotless, the lack of output escaping is a serious oversight that directly exposes users to potential XSS attacks.  This single weakness overshadows the otherwise positive aspects of the plugin's code.",[89],{"reason":90,"points":91},"0% output escaping",8,"2026-03-16T23:30:03.996Z",{"wat":94,"direct":102},{"assetPaths":95,"generatorPatterns":97,"scriptPaths":98,"versionParams":100},[96],"\u002Fwp-content\u002Fplugins\u002Fwd3k-go-top-down\u002F",[],[99],"\u002Fwp-content\u002Fplugins\u002Fwd3k-go-top-down\u002Fwd3k-go-top-down.js",[101],"wd3k-go-top-down.js?ver=",{"cssClasses":103,"htmlComments":104,"htmlAttributes":105,"restEndpoints":106,"jsGlobals":107,"shortcodeOutput":108},[],[],[],[],[],[109,110],"\u003Cdiv id=\"nav_up\" style=\"position: fixed; bottom: 5px; right: 5px; cursor: pointer; opacity: 1; \" title=\"Scroll Back to Top\">\u003Cimg src=\"","\">\u003Cdiv id=\"nav_down\" style=\"position: fixed; bottom: 5px; right: 40px; cursor: pointer; opacity: 1; \" title=\"Scroll Down\">\u003Cimg src=\""]