[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5yAY1sG6OtGvJUdOShIJMCgifM2y1sUrh1s4sRXPBOk":3},{"slug":4,"name":5,"version":6,"author":4,"author_profile":7,"description":8,"short_description":9,"active_installs":10,"downloaded":11,"rating":12,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":35,"analysis":125,"fingerprints":246},"wettervorhersage","Wettervorhersage","1.0.0","https:\u002F\u002Fprofiles.wordpress.org\u002Fwettervorhersage\u002F","\u003Cp>Wettervorhersage widget is a free weather forecasting widget for your beautiful wordpress website.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Supported in German and English\u003C\u002Fli>\n\u003Cli>The widget is responsive, perfect for mobile and desktop.\u003C\u002Fli>\n\u003Cli>Widget style like background and color can be customized\u003C\u002Fli>\n\u003Cli>No development skills are needed\u003C\u002Fli>\n\u003Cli>High performance and lightweight code\u003C\u002Fli>\n\u003Cli>SEO friendly\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>** For special customization requests please contact this mail -> wettervorhersage@wetter2.com\u003C\u002Fp>\n\u003Cp>The Wettervorhersage plugin is relying on a 3rd party as a service, the widget is using weather services provided by wetter2.com.\u003Cbr \u002F>\n* Service provider link – https:\u002F\u002Fwww.wetter2.com\u003Cbr \u002F>\n* Service provider terms of use link – https:\u002F\u002Fwww.wetter2.com\u002Fterms\u003Cbr \u002F>\n* Service privacy policy link – https:\u002F\u002Fwww.wetter2.com\u002Fprivacy\u003C\u002Fp>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n","Get the new and amazing weather forecast widget, select location and colors, responsive widget.",2000,15606,100,4,"2024-02-29T18:38:00.000Z","6.4.8","4.0.1","",[19,20,21,22,4],"klima","vreme","weather","wetter","https:\u002F\u002Fwww.wetter2.com\u002Fwidgets","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwettervorhersage.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":4,"display_name":4,"profile_url":7,"plugin_count":31,"total_installs":10,"avg_security_score":25,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},1,30,84,"2026-04-04T15:35:51.656Z",[36,51,70,88,107],{"slug":22,"name":37,"version":6,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":33,"num_ratings":44,"last_updated":45,"tested_up_to":46,"requires_at_least":16,"requires_php":17,"tags":47,"homepage":23,"download_link":50,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"Wetter2","wetter2","https:\u002F\u002Fprofiles.wordpress.org\u002Fwetter2\u002F","\u003Cp>The best German weather forecast widget plugin!\u003C\u002Fp>\n\u003Cp>Wetter2.com offers an accurate weather forecast for all cities around the world.\u003Cbr \u002F>\nJust set the city and country and embed the widget in your website\u002Fblog.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Widgets are free of charge\u003C\u002Fli>\n\u003Cli>Widget style can be customized\u003C\u002Fli>\n\u003Cli>Responsive weather widget\u003C\u002Fli>\n\u003Cli>No development skills are needed\u003C\u002Fli>\n\u003Cli>High performance and lightweight code\u003C\u002Fli>\n\u003Cli>SEO friendly – no iframes\u003C\u002Fli>\n\u003Cli>Select your display language – German\u002FEnglish\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>** For special customization requests please contact this mail -> contact@wetter2.com\u003C\u002Fp>\n","Beautiful English\u002FGerman weather forecast widget, All locations around the world, no need for API key.",300,4627,5,"2021-07-16T07:01:00.000Z","5.8.13",[48,19,22,49,4],"heutige-wetter","wetter-deutschland","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwetter.zip",{"slug":52,"name":53,"version":54,"author":55,"author_profile":56,"description":57,"short_description":58,"active_installs":59,"downloaded":60,"rating":12,"num_ratings":31,"last_updated":61,"tested_up_to":62,"requires_at_least":63,"requires_php":17,"tags":64,"homepage":68,"download_link":69,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"my-weather","My Weather","1.1","enclick","https:\u002F\u002Fprofiles.wordpress.org\u002Fenclick\u002F","\u003Cp>Display the weather for your city on the sidebar. Select from various layouts, designs and colours\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Select your country and city, check \u003Ca href=\"http:\u002F\u002Fopenweather.com\" title=\"Weather round the world\" rel=\"nofollow ugc\">openweather.com\u003C\u002Fa> database of over 60,000 cities\u003C\u002Fli>\n\u003Cli>Select from a range of small to large widget designs\u003C\u002Fli>\n\u003Cli>Select centigrade or fahrenheit\u003C\u002Fli>\n\u003Cli>Select custom text and backround colours\u003C\u002Fli>\n\u003Cli>Examples of the weather widgets can be found at \u003Ca href=\"http:\u002F\u002Fwww.openweather.com\u002Fwordpress.phtml\" title=\"wordpress weather plugins\" rel=\"nofollow ugc\">openweather.com\u002Fwordpress\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Display the weather for your city on the sidebar. Select from various layouts, designs and colours",200,52906,"2015-04-24T14:08:00.000Z","4.2.39","2.8",[65,66,21,67,22],"el-tiempo","meteo","weather-forecast","http:\u002F\u002Fweatherforecastmap.com\u002Fwordpress.phtml","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmy-weather.1.1.zip",{"slug":71,"name":72,"version":54,"author":73,"author_profile":74,"description":75,"short_description":76,"active_installs":77,"downloaded":78,"rating":32,"num_ratings":79,"last_updated":80,"tested_up_to":81,"requires_at_least":82,"requires_php":17,"tags":83,"homepage":86,"download_link":87,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"das-wetter-von-wettercom","Das Wetter von wetter.com","wettercom","https:\u002F\u002Fprofiles.wordpress.org\u002Fwettercom\u002F","\u003Cp>Mehr Informationen zum Plugin finden Sie unter http:\u002F\u002Fwww.wetter.com\u002Fservices\u002Fwetter_tools\u002Fwordpress_plugin\u002F. Damit Sie die Wetterdaten abrufen können, benötigen Sie einen Zugang zu unserer openweather Schnittstelle.\u003C\u002Fp>\n\u003Cp>The current version of this plugin is only available in German.\u003C\u002Fp>\n","Das Wetter Plugin für Wordpress von wetter.com zeigt aktuelle Wetterinformationen für die Stadt deiner Wahl an. Das Plugin ist leicht zu installieren  …",50,8839,2,"2017-05-03T07:52:00.000Z","4.7.32","3.0",[84,66,85,21,22],"forecast","vorhersage","http:\u002F\u002Fwww.wetter.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdas-wetter-von-wettercom.1.1.zip",{"slug":89,"name":90,"version":91,"author":92,"author_profile":93,"description":94,"short_description":95,"active_installs":96,"downloaded":97,"rating":26,"num_ratings":26,"last_updated":98,"tested_up_to":99,"requires_at_least":100,"requires_php":17,"tags":101,"homepage":105,"download_link":106,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"easyweather-widget","EasyWeather widget","1.0","myselfko","https:\u002F\u002Fprofiles.wordpress.org\u002Fmyselfko\u002F","\u003Cp>Simple and lightweight widget for displaying weather data and forecast from Weather Underground (www.wunderground.com).\u003C\u002Fp>\n\u003Cp>Plugin saves a local copy of data for faster and more optimal running.\u003Cbr \u002F>\nYou need a Wunderground API key, which you can get here http:\u002F\u002Fwww.wunderground.com\u002Fweather\u002Fapi\u002F.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cli>simple and lightweight\u003C\u002Fli>\n\u003Cli>multilanguage (currently supported: english, german, italian, slovene)\u003C\u002Fli>\n\u003Cli>easy for translating\u003C\u002Fli>\n\u003Cli>metric and imperial units\u003C\u002Fli>\n\u003Cli>user can define own refreshing interval in minutes\u003C\u002Fli>\n\u003Cli>no need for own weather icons, plugin automatically download them from Wunderground\u003C\u002Fli>\n","Simple and lightweight widget for displaying weather data and forecast from Weather Underground (www.wunderground.com).",20,3407,"2012-12-15T10:08:00.000Z","3.5.2","3.0.1",[102,103,104,20,21],"lightweight","simple","underground","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Feasyweather-widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasyweather-widget.1.0.zip",{"slug":108,"name":109,"version":110,"author":111,"author_profile":112,"description":113,"short_description":114,"active_installs":96,"downloaded":115,"rating":96,"num_ratings":31,"last_updated":116,"tested_up_to":117,"requires_at_least":118,"requires_php":17,"tags":119,"homepage":123,"download_link":124,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"weather-for-germany","schmie_Wetter","1.4.4","schmiddim","https:\u002F\u002Fprofiles.wordpress.org\u002Fschmiddim\u002F","\u003Cp>Update 5.06.11\u003Cbr \u002F>\nIcons werden wieder angezeigt, optional können Temperatur-Tagesmaximum -Tagesminimum ausgegeben werden.\u003Cbr \u002F>\nDas Widget zeigt das Wetter in Deiner Stadt an; geb einfach deine Postleitzahl ein und\u003Cbr \u002F>\nfuer wieviele Tage Du eine Prognose moechtest. Neu hinzugekommen ist die Möglichkeit einen eigenen\u003Cbr \u002F>\nOrtsnamen zu verwenden. Durch Andreas Gregor (www.andreasgregor.de) wurde das Layout verbessert.\u003C\u002Fp>\n\u003Ch3>schmie_Wetter\u003C\u002Fh3>\n\u003Cp>author Schmitt, Michael\u003Cbr \u002F>\nTags weather, germany, by igoogle\u003C\u002Fp>\n","Update 5.06.11",7839,"2011-08-13T08:00:00.000Z","3.1.4","2.0.2",[120,121,122,21,22],"deutschland","german-weather","germany","http:\u002F\u002Fschmiddi.co.cc\u002Fwordpress_plugins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fweather-for-germany.zip",{"attackSurface":126,"codeSignals":153,"taintFlows":234,"riskAssessment":235,"analyzedAt":245},{"hooks":127,"ajaxHandlers":149,"restRoutes":150,"shortcodes":151,"cronEvents":152,"entryPointCount":26,"unprotectedCount":26},[128,134,137,139,142,144],{"type":129,"name":130,"callback":131,"file":132,"line":133},"action","plugins_loaded","anonymous","includes\\class-wettervorhersage.php",142,{"type":129,"name":135,"callback":131,"file":132,"line":136},"admin_enqueue_scripts",157,{"type":129,"name":135,"callback":131,"file":132,"line":138},158,{"type":129,"name":140,"callback":131,"file":132,"line":141},"wp_enqueue_scripts",173,{"type":129,"name":140,"callback":131,"file":132,"line":143},174,{"type":129,"name":145,"callback":146,"file":147,"line":148},"widgets_init","jpen_register_wettervorhersage_widget","wettervorhersage.php",353,[],[],[],[],{"dangerousFunctions":154,"sqlUsage":155,"outputEscaping":157,"fileOperations":26,"externalRequests":26,"nonceChecks":26,"capabilityChecks":26,"bundledLibraries":233},[],{"prepared":26,"raw":26,"locations":156},[],{"escaped":158,"rawEcho":159,"locations":160},8,38,[161,163,165,167,169,171,173,175,177,179,181,183,185,187,188,190,192,194,196,197,198,200,202,204,206,208,210,212,214,216,218,220,222,224,226,228,229,231],{"file":147,"line":12,"context":162},"raw output",{"file":147,"line":164,"context":162},116,{"file":147,"line":166,"context":162},117,{"file":147,"line":168,"context":162},118,{"file":147,"line":170,"context":162},119,{"file":147,"line":172,"context":162},120,{"file":147,"line":174,"context":162},121,{"file":147,"line":176,"context":162},122,{"file":147,"line":178,"context":162},123,{"file":147,"line":180,"context":162},124,{"file":147,"line":182,"context":162},131,{"file":147,"line":184,"context":162},184,{"file":147,"line":186,"context":162},185,{"file":147,"line":186,"context":162},{"file":147,"line":189,"context":162},186,{"file":147,"line":191,"context":162},190,{"file":147,"line":193,"context":162},191,{"file":147,"line":195,"context":162},192,{"file":147,"line":59,"context":162},{"file":147,"line":59,"context":162},{"file":147,"line":199,"context":162},229,{"file":147,"line":201,"context":162},230,{"file":147,"line":203,"context":162},231,{"file":147,"line":205,"context":162},239,{"file":147,"line":207,"context":162},240,{"file":147,"line":209,"context":162},241,{"file":147,"line":211,"context":162},247,{"file":147,"line":213,"context":162},280,{"file":147,"line":215,"context":162},282,{"file":147,"line":217,"context":162},283,{"file":147,"line":219,"context":162},287,{"file":147,"line":221,"context":162},288,{"file":147,"line":223,"context":162},289,{"file":147,"line":225,"context":162},294,{"file":147,"line":227,"context":162},296,{"file":147,"line":42,"context":162},{"file":147,"line":230,"context":162},302,{"file":147,"line":232,"context":162},306,[],[],{"summary":236,"deductions":237},"The 'wettervorhersage' v1.0.0 plugin presents a generally good security posture based on the provided static analysis. It demonstrates adherence to best practices by having zero known vulnerabilities and no recorded CVEs, indicating a history of stable and secure development. The absence of dangerous functions, file operations, external HTTP requests, and the use of prepared statements for all SQL queries are strong positive indicators. Furthermore, the lack of a significant attack surface with zero AJAX handlers, REST API routes, shortcodes, or cron events further minimizes potential entry points for attackers.\n\nHowever, a significant concern arises from the output escaping. With 46 total outputs and only 17% properly escaped, a substantial portion of the plugin's output is potentially vulnerable to cross-site scripting (XSS) attacks. This lack of proper escaping on a majority of its outputs represents a critical weakness, despite the absence of other common vulnerability types or active exploitation vectors in the static analysis. The absence of nonce and capability checks also contributes to a less robust security model, as it implies that any interaction points, if they were to exist, might not be adequately protected against unauthorized access or manipulation.\n\nIn conclusion, while 'wettervorhersage' v1.0.0 excels in preventing common injection vulnerabilities and minimizing its attack surface, the severe deficiency in output escaping poses a tangible and high risk of XSS vulnerabilities. The plugin's history of zero vulnerabilities is a positive sign, but it does not mitigate the current, evidence-backed risk of unescaped output. Developers should prioritize addressing the output escaping issues to bring the plugin to a more secure state.",[238,241,243],{"reason":239,"points":240},"Insufficient output escaping detected",15,{"reason":242,"points":44},"No nonce checks implemented",{"reason":244,"points":44},"No capability checks implemented","2026-03-16T18:41:15.240Z",{"wat":247,"direct":256},{"assetPaths":248,"generatorPatterns":251,"scriptPaths":252,"versionParams":253},[249,250],"\u002Fwp-content\u002Fplugins\u002Fwettervorhersage\u002Fjs\u002Fwettervorhersage.js","\u002Fwp-content\u002Fplugins\u002Fwettervorhersage\u002Fcss\u002Fwettervorhersage.css",[],[249],[254,255],"wettervorhersage\u002Fcss\u002Fwettervorhersage.css?ver=","wettervorhersage\u002Fjs\u002Fwettervorhersage.js?ver=",{"cssClasses":257,"htmlComments":269,"htmlAttributes":270,"restEndpoints":281,"jsGlobals":282,"shortcodeOutput":283},[258,259,260,261,262,263,264,265,266,267,268],"wettervorhersage_widget","weather_widget_wrap","wettervorhersage-widget","weather_widget_style2","weather_widget_placeholder","weather-widget-form","form-section","form-line","text-label","city_name","language-selection",[],[271,272,273,274,275,276,277,278,279,280],"data-text-color","data-background","data-width","data-days","data-sunrise","data-wind","data-language","data-city","data-country","data-widget-id",[],[],[284,285],"\u003Cdiv class=\"weather_widget_wrap wettervorhersage-widget weather_widget_style2\"","\u003Cdiv class=\"weather_widget_placeholder\">\u003C\u002Fdiv>"]