[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frBQg8MNV7COmzsAZ9bTlg3FMP6F-eT6JGVl1B3sLQDE":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":37,"analysis":135,"fingerprints":198},"widget-category-cloud","Category Cloud Widget","1.7","vertino","https:\u002F\u002Fprofiles.wordpress.org\u002Fvertino\u002F","\u003Cp>The Category Cloud Widget is a widget that displays your categories as a tag cloud in your sidebar.\u003C\u002Fp>\n\u003Ch3>Examples\u003C\u002Fh3>\n\u003Cp>You can see this in action on my site: \u003Ca href=\"http:\u002F\u002Fleekelleher.com\u002Flinklog\u002F\" rel=\"nofollow ugc\">http:\u002F\u002Fleekelleher.com\u002Flinklog\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Special Thanks\u003C\u002Fh3>\n\u003Cp>Thank you to Matt Kingston, as this widget was based on his \u003Ca href=\"http:\u002F\u002Fwww.hitormiss.org\u002Fprojects\u002Fweighted-categories\u002F\" rel=\"nofollow ugc\">Weighted Categories\u003C\u002Fa> plugin.\u003Cbr \u002F>\nThanks to \u003Ca href=\"http:\u002F\u002Fwww.minmen.nl\u002F\" rel=\"nofollow ugc\">Peter Hasperhoven\u003C\u002Fa> for introducing the ‘minimum number of posts’ option.\u003C\u002Fp>\n","The Category Cloud Widget is a widget that displays your categories as a tag cloud in your sidebar.",100,47024,1,"2008-05-08T12:45:00.000Z","2.3","2.0","",[19,20,21,22,23],"category","cloud","sidebar","tags","widget","http:\u002F\u002Fleekelleher.com\u002Fwordpress\u002Fplugins\u002Fcategory-cloud-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwidget-category-cloud.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":26,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},2,200,30,84,"2026-04-04T16:58:17.953Z",[38,55,78,100,118],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":11,"num_ratings":13,"last_updated":17,"tested_up_to":48,"requires_at_least":49,"requires_php":17,"tags":50,"homepage":52,"download_link":53,"security_score":11,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":54},"dynamiccategorytagcloud","DynamicCategoryTagCloud","0.1.0","enomoto celtislab","https:\u002F\u002Fprofiles.wordpress.org\u002Fenomoto-celtislab\u002F","\u003Cp>You are using a tag cloud of the standard, and you do not want to display tags that belong to the category not related to the article.\u003Cbr \u002F>\nTry this widget.\u003Cbr \u002F>\nBased on the category of the display article, this widget gets the tag from the article categories of related range.\u003Cbr \u002F>\nFor the article there is no category of post page, etc., or by setting \u003Ccode>all category\u003C\u002Fcode>, \u003Ccode>internal link article\u003C\u002Fcode>, it displays the tag by examining the related category.\u003Cbr \u002F>\nIf you check the ‘internal link article’, get a category from the internal links to articles.\u003C\u002Fp>\n\u003Cp>Select Category related range\u003C\u002Fp>\n\u003Cul>\n\u003Cli>All Category (unrelated article)\u003C\u002Fli>\n\u003Cli>Current article Category\u003C\u002Fli>\n\u003Cli>Include child category tree\u003C\u002Fli>\n\u003Cli>Include parent category tree\u003C\u002Fli>\n\u003Cli>Include internal linked article Category\u003C\u002Fli>\n\u003Cli>Exclude Category\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Other parameters : Display format, Sort by, Order, Font size, Number of tags to display, …\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fceltislab.net\u002Fwp_plugin_DCTagCloud\u002F\" title=\"Documentation in Japanese\" rel=\"nofollow ugc\">日本語の説明\u003C\u002Fa>\u003C\u002Fp>\n","Displays the tag cloud dynamically from related articles belonging to the category of the display article",10,1860,"3.5.2","3.4",[19,51,22,23],"tag-cloud","http:\u002F\u002Fceltislab.net\u002Fwp_plugin_DCTagCloud","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdynamiccategorytagcloud.0.1.0.zip","2026-03-15T10:48:56.248Z",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":65,"num_ratings":66,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":70,"tags":71,"homepage":17,"download_link":75,"security_score":76,"vuln_count":32,"unpatched_count":27,"last_vuln_date":77,"fetched_at":29},"widget-logic","Widget Logic","6.0.9","Widgetlogic.org","https:\u002F\u002Fprofiles.wordpress.org\u002Fwidgetlogics\u002F","\u003Cp>This plugin gives every widget an extra control field called “Widget logic” that lets you control the pages that the widget will appear on. The text field lets you use WP’s \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FConditional_Tags\" rel=\"nofollow ugc\">Conditional Tags\u003C\u002Fa>, or any general PHP code.\u003C\u002Fp>\n\u003Cp>The configuring and options are in the usual widget admin interface.\u003C\u002Fp>\n\u003Cp>BIG UPDATE:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Now you can control widget in Gutenberg Widgets editor as well as in Classic Editor. It is just as easy as before but also in gutenberg view.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Pre-installed widgets let you add special widget with one click of the mouse. First pre-installed widget is Live Match that let you add widget of one random live football game with real time score updates (teams logos, livescore, minute of the match, tournament name). And more interesting widgets to come!\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>NOTE ON DEFAULT FUNCTIONS:\u003C\u002Fstrong> Widget Logic includes a whitelist of common WordPress conditional tags and safe functions. If you need additional WordPress functions that are not currently whitelisted, please create a topic in our \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fwidget-logic\u002F\" rel=\"ugc\">support forum\u003C\u002Fa> to request them. We regularly add commonly requested functions in new releases.\u003C\u002Fp>\n\u003Ch4>Configuration\u003C\u002Fh4>\n\u003Cp>Aside from logic against your widgets, there are three options added to the foot of the widget admin page (see screenshots).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Use ‘wp_reset_query’ fix — Many features of WP, as well as the many themes and plugins out there, can mess with the conditional tags, such that is_home is NOT true on the home page. This can often be fixed with a quick wp_reset_query() statement just before the widgets are called, and this option puts that in for you rather than having to resort to code editing\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Load logic — This option allows you to set the point in the page load at which your widget logic if first checked. Pre v.50 it was when the ‘wp_head’ trigger happened, ie during the creation of the HTML’s HEAD block. Many themes didn’t call wp_head, which was a problem. From v.50 it happens, by default, as early as possible, which is as soon as the plugin loads. You can now specify these ‘late load’ points (in chronological order):\u003C\u002Fp>\n\u003Cul>\n\u003Cli>after the theme loads (after_setup_theme trigger)\u003C\u002Fli>\n\u003Cli>when all PHP loaded (wp_loaded trigger)\u003C\u002Fli>\n\u003Cli>after query variables set (parse_query) – this is the default\u003C\u002Fli>\n\u003Cli>during page header (wp_head trigger)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You may need to delay the load if your logic depends on functions defined, eg in the theme functions.php file. Conversely you may want the load early so that the widget count is calculated correctly, eg to show an alternative layour or content when a sidebar has no widgets.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Don’t cache widget logic results — From v .58 the widget logic code should only execute once, but that might cause unexpected results with some themes, so this option is here to turn that behaviour off. (The truth\u002Ffalse of the code will be evaluated every time the sidebars_widgets filter is called.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Custom PHP Functions — From v.6.0.6 you can use the \u003Ccode>widget_logic_allowed_functions\u003C\u002Fcode> filter to add custom PHP functions that will be allowed in Widget Logic fields. By default, only WordPress conditional tags and a whitelist of safe functions are available. This filter allows you to extend the functionality and use your own custom functions.\u003C\u002Fp>\n\u003Cp>To add a custom function, add the following code to your theme’s \u003Ccode>functions.php\u003C\u002Fcode> file:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>`add_filter('widget_logic_allowed_functions', 'my_allowed_functions');\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>function my_allowed_functions($functions) {\u003Cbr \u002F>\n    $functions[] = ‘\u003Cem>my_custom_function_name\u003C\u002Fem>‘;\u003Cbr \u002F>\n    return $functions;\u003Cbr \u002F>\n}`\u003C\u002Fp>\n\u003Cp>You can add multiple functions by using one wrapper function:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>`add_filter('widget_logic_allowed_functions', 'my_allowed_functions');\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>function my_allowed_functions($functions) {\u003Cbr \u002F>\n    $functions[] = ‘is_special_page’;\u003Cbr \u002F>\n    $functions[] = ‘is_user_verified’;\u003Cbr \u002F>\n    $functions[] = ‘get_sidebar_title’;\u003Cbr \u002F>\n    return $functions;\u003Cbr \u002F>\n}`\u003C\u002Fp>\n\u003Cp>\u003Cstrong>IMPORTANT NOTE ON VARIABLES:\u003C\u002Fstrong> Widget Logic is designed to work with simple data types (strings, numbers, booleans). If you need to use complex variables, global state, or conditional logic that depends on many factors, create a custom function in your theme’s \u003Ccode>functions.php\u003C\u002Fcode> file and call it from Widget Logic:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Good approach (in functions.php):\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>`function is_special_page() {\nglobal $post;\n$special_ids = array(5, 10, 15);\n$conditions = some_complex_function();\n\nreturn is_page() && in_array($post->ID, $special_ids) && $conditions;\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>}`\u003C\u002Fp>\n\u003Cp>Then in Widget Logic field, simply use: \u003Ccode>is_special_page()\u003C\u002Fcode>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Less ideal approach (in Widget Logic field):\u003C\u002Fstrong>\u003Cbr \u002F>\nAvoid putting complex logic directly in the Widget Logic field. Keep it simple and let your custom function handle the complexity. This keeps your widget settings clean and maintainable.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Interaction with External Services\u003C\u002Fh4>\n\u003Cp>Widget Logic uses the external service to obtain up-to-date information about the results of football matches. \u003Ca href=\"https:\u002F\u002Fwidgetlogic.org\" rel=\"nofollow ugc\">widgetlogic.org\u003C\u002Fa> is a source of sports information, that provides a wide range of information about football, including various leagues, tournaments, and championships from around the world.\u003C\u002Fp>\n\u003Cp>The functioning of the \u003Ca href=\"https:\u002F\u002Fwidgetlogic.org\" rel=\"nofollow ugc\">widgetlogic.org\u003C\u002Fa> service is based on delivering real-time data about selected matches without the need to refresh the page. This means that data is automatically updated without requiring page reload. This approach ensures users quick and uninterrupted access to the latest sports data without the effort of manually updating information, allowing them to stay informed about ongoing events in real-time.\u003C\u002Fp>\n\u003Ch3>Writing Logic Code\u003C\u002Fh3>\n\u003Cp>The text in the ‘Widget logic’ field can be full PHP code and should return ‘true’ when you need the widget to appear. If there is no ‘return’ in the text, an implicit ‘return’ is added to the start and a ‘;’ is added on the end. (This is just to make single statements like is_home() more convenient.)\u003C\u002Fp>\n\u003Ch4>The Basics\u003C\u002Fh4>\n\u003Cp>Make good use of \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FConditional_Tags\" rel=\"nofollow ugc\">WP’s own conditional tags\u003C\u002Fa>. You can vary and combine code using:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>!\u003C\u002Fcode> (NOT) to \u003Cstrong>reverse\u003C\u002Fstrong> the logic, eg \u003Ccode>!is_home()\u003C\u002Fcode> is TRUE when this is NOT the home page.\u003C\u002Fli>\n\u003Cli>\u003Ccode>||\u003C\u002Fcode> (OR) to \u003Cstrong>combine\u003C\u002Fstrong> conditions. \u003Ccode>X OR Y\u003C\u002Fcode> is TRUE when either X is true or Y is true.\u003C\u002Fli>\n\u003Cli>\u003Ccode>&&\u003C\u002Fcode> (AND) to make conditions \u003Cstrong>more specific\u003C\u002Fstrong>. \u003Ccode>X AND Y\u003C\u002Fcode> is TRUE when both X is true and Y is true.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>There are lots of great code examples on the WP forums, and on WP sites across the net. But the WP Codex is also full of good examples to adapt, such as \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FTemplate_Tags\u002Fin_category#Testing_if_a_post_is_in_a_descendant_category\" rel=\"nofollow ugc\">Test if post is in a descendent category\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Examples\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ccode>is_home()\u003C\u002Fcode> — just the main blog page\u003C\u002Fli>\n\u003Cli>\u003Ccode>!is_page('about')\u003C\u002Fcode> — everywhere EXCEPT this specific WP ‘page’\u003C\u002Fli>\n\u003Cli>\u003Ccode>!is_user_logged_in()\u003C\u002Fcode> — shown when a user is not logged in\u003C\u002Fli>\n\u003Cli>\u003Ccode>is_category(array(5,9,10,11))\u003C\u002Fcode> — category page of one of the given category IDs\u003C\u002Fli>\n\u003Cli>\u003Ccode>is_single() && in_category('baked-goods')\u003C\u002Fcode> — single post that’s in the category with this slug\u003C\u002Fli>\n\u003Cli>\u003Ccode>current_user_can('level_10')\u003C\u002Fcode> — admin only widget\u003C\u002Fli>\n\u003Cli>\u003Ccode>strpos($_SERVER['HTTP_REFERER'], \"google.com\")!=false\u003C\u002Fcode> — widget to show when clicked through from a google search\u003C\u002Fli>\n\u003Cli>\u003Ccode>is_category() && custom_function_to_check_the_category()\u003C\u002Fcode> — category page that’s a descendent of category 5\u003C\u002Fli>\n\u003Cli>\u003Ccode>custom_function_from_functions_php_to_check_the_page()\u003C\u002Fcode> — WP page that is a child of page 77\u003C\u002Fli>\n\u003Cli>\u003Ccode>custom_function_from_functions_php_to_check_the_page_child_of(13)\u003C\u002Fcode> — home page OR the page that’s a child of page 13\u003C\u002Fli>\n\u003C\u002Ful>\n","Widget Logic lets you control on which pages widgets appear using WP's conditional tags.",100000,3242040,88,188,"2026-01-15T09:43:00.000Z","6.9.4","3.0","5.4",[72,73,74,21,23],"blocks","conditional-tags","gutenberg-widgets","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwidget-logic.6.0.9.zip",95,"2025-06-09 00:00:00",{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":86,"downloaded":87,"rating":88,"num_ratings":89,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":17,"tags":93,"homepage":96,"download_link":97,"security_score":98,"vuln_count":13,"unpatched_count":27,"last_vuln_date":99,"fetched_at":29},"list-custom-taxonomy-widget","List Custom Taxonomy Widget","4.2","Nick Halsey","https:\u002F\u002Fprofiles.wordpress.org\u002Fcelloexpressions\u002F","\u003Cp>The List Custom Taxonomy Widget is a quick and easy way to display custom taxonomies. Simply choose the taxonomy name you want to display from an auto-populated list. You can also set a title to display for the widget. Multiple list custom taxonomy widgets can be added to the same and other sidebars as well. There are several display options (including as a dropdown), and it generally behaves similarly to the built-in categories widget but with the addition of custom taxonomies.\u003C\u002Fp>\n","The List Custom Taxonomy Widget is a quick and easy way to display custom taxonomies. Simply choose the taxonomy name you want to display from an auto &hellip;",9000,118876,94,21,"2024-07-13T01:39:00.000Z","6.6.5","3.3",[19,94,95,21,23],"custom-tax","custom-taxonomy","http:\u002F\u002Fcelloexpressions.com\u002Fplugins\u002Flist-custom-taxonomy-widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flist-custom-taxonomy-widget.4.2.zip",91,"2024-04-22 00:00:00",{"slug":101,"name":102,"version":103,"author":104,"author_profile":105,"description":106,"short_description":107,"active_installs":108,"downloaded":109,"rating":88,"num_ratings":110,"last_updated":111,"tested_up_to":112,"requires_at_least":113,"requires_php":17,"tags":114,"homepage":17,"download_link":117,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"recent-posts-by-category-widget","Recent Posts by Category Widget","1.3","Ross Cornell","https:\u002F\u002Fprofiles.wordpress.org\u002Frossc\u002F","\u003Cp>This plugin adds a simple widget that allows you to display a number of recent blog posts from a specific category. You have the options to choose a title, category, number of posts and whether or not to show the post date. The posts will be ordered by date just like the default Recent Posts widget included with WordPress.\u003C\u002Fp>\n","Just like the default Recent Posts widget except you can choose a category to pull posts from.",4000,33251,12,"2017-11-28T16:45:00.000Z","4.2.39","3.0.1",[115,19,116,21,23],"categories","recent-posts","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frecent-posts-by-category-widget.zip",{"slug":119,"name":120,"version":121,"author":122,"author_profile":123,"description":124,"short_description":125,"active_installs":108,"downloaded":126,"rating":127,"num_ratings":128,"last_updated":129,"tested_up_to":130,"requires_at_least":69,"requires_php":17,"tags":131,"homepage":133,"download_link":134,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"ultimate-tag-cloud-widget","Ultimate Tag Cloud Widget","2.7.2","Rickard Andersson","https:\u002F\u002Fprofiles.wordpress.org\u002Fexz\u002F","\u003Cp>This is the highly configurable tag cloud widget, the main features for this plugin is:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>All, single author or multiple authors per cloud\u003C\u002Fli>\n\u003Cli>Select which taxonomies or post types to show tags for\u003C\u002Fli>\n\u003Cli>Rules for which posts to include when fetching tags\u003C\u002Fli>\n\u003Cli>Inclusion\u002Fexclusion functions\u003C\u002Fli>\n\u003Cli>A bunch of ordering, coloring and styling options\u003C\u002Fli>\n\u003Cli>Multiple strategies for selecting terms with the option to \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frickard2\u002Futcw\u002Fblob\u002Fmaster\u002FSTRATEGY.md\" rel=\"nofollow ugc\">create your own\u003C\u002Fa>. Built in strategies for most popular, random, recently added, from current list of posts\u003C\u002Fli>\n\u003Cli>Short code and API for developers\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The development of this plugin has stopped. I will make sure that the basic features still work with upcoming WordPress versions, but no new features or changes will be made.\u003C\u002Fp>\n\u003Cp>The \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frickard2\u002Futcw\" rel=\"nofollow ugc\">code is available on github\u003C\u002Fa> and if you’re in need of new features, you’re welcome to submit a pull request for it.\u003C\u002Fp>\n\u003Cp>Quick links:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Short code information: https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fultimate-tag-cloud-widget\u002Fother_notes\u002F#Theme-integration-\u002F-Shortcode\u003C\u002Fli>\n\u003Cli>Short code configuration options: https:\u002F\u002Fgithub.com\u002Frickard2\u002Futcw\u002Fblob\u002Fmaster\u002FCONFIG.md\u003C\u002Fli>\n\u003Cli>Playground which shows some configuration options: https:\u002F\u002F0x539.se\u002Fwordpress\u002Ftag-cloud-playground\u002F\u003C\u002Fli>\n\u003Cli>Custom selection strategy documentation: https:\u002F\u002Fgithub.com\u002Frickard2\u002Futcw\u002Fblob\u002Fmaster\u002FSTRATEGY.md\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Feedback\u003C\u002Fh3>\n\u003Cp>This plugin is under active development and my goal is to try to help everyone who have issues or suggestions for this plugin. If you find bugs or have feature requests please use \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frickard2\u002Futcw\u002Fissues\" rel=\"nofollow ugc\">GitHub issues\u003C\u002Fa>, if you need support please use the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fultimate-tag-cloud-widget\" rel=\"ugc\">WordPress forums\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>My contact information is\u003C\u002Fp>\n\u003Cul>\n\u003Cli>rickard (a) 0x539.se (email, hangouts, you name it)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Ftwitter.com\u002Frickard2\" rel=\"nofollow ugc\">twitter.com\u002Frickard2\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you use this plugin and like it, please consider \u003Ca href=\"https:\u002F\u002F0x539.se\u002Fdonations\u002F\" rel=\"nofollow ugc\">leaving a donation\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Theme integration \u002F Shortcode\u003C\u002Fh3>\n\u003Cp>You can integrate the widget within your own theme even if you’re not using standard WordPress widgets. Just install and load the plugin as described and use the function\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php do_utcw($args); ?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>…with \u003Ccode>$args\u003C\u002Fcode> being a array of \u003Ccode>key => value\u003C\u002Fcode> pairs for the options you would like to set. For example if you’d like to change the title of the widget:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\n$args = array( \"title\" => \"Most awesome title ever\" );\n\ndo_utcw( $args );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To use multiple configuration options just separate them with a comma:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\n$args = array( \"title\" => \"Most awesome title ever\", \"max\" => 10 );\n\ndo_utcw( $args );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>If you’re not able to change your theme you can also use the shortcode \u003Ccode>[utcw]\u003C\u002Fcode> anywhere in your posts or pages. You can pass any of the settings along with the shortcode in the format of \u003Ccode>key=\"value\"\u003C\u002Fcode>, for instance if you’d like to change the widget title:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[utcw title=\"Most awesome title ever\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>The plugin also uses a couple of filters for you to be able to alter the output. These are documented in the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frickard2\u002Futcw\u002Fblob\u002Fmaster\u002FFILTERS.md\" rel=\"nofollow ugc\">filters documentation at GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>As of version 2.6 you can create custom selection strategies, more information can be found in the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frickard2\u002Futcw\u002Fblob\u002Fmaster\u002FSTRATEGY.md\" rel=\"nofollow ugc\">strategy documentation at GitHub\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Cp>All the configuration options can be found in the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frickard2\u002Futcw\u002Fblob\u002Fmaster\u002FCONFIG.md\" rel=\"nofollow ugc\">configuration documentation at GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Breaking changes in version 2.0\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Tags lists with named tags will not work in version 2.0, only tags lists with IDs.\u003C\u002Fli>\n\u003Cli>The configuration option for text case has been renamed from case to text_transform\u003C\u002Fli>\n\u003Cli>The styles for links aren’t marked as \u003Ccode>!important\u003C\u002Fcode> in the CSS longer, this might change the cloud presentation in some cases\u003C\u002Fli>\n\u003Cli>The shortcode and theme integration function call no longer accepts the widget arguments \u003Ccode>before_widget\u003C\u002Fcode>, \u003Ccode>after_widget\u003C\u002Fcode>, \u003Ccode>before_title\u003C\u002Fcode> and \u003Ccode>after_title\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Thanks\u003C\u002Fh3>\n\u003Cp>The power of the open source community is being able to help out and submitting patches when bugs are found. I would like to thank the following contributors for submitting patches and helping out with the development:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Andreas Bogavcic\u003C\u002Fli>\n\u003Cli>Fabian Reck\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>With your help this list will hopefully grow in the future 😉\u003C\u002Fp>\n","This plugin aims to be the most configurable tag cloud widget out there, able to suit all your weird tag cloud needs.",245340,92,49,"2017-11-28T10:39:00.000Z","3.9.40",[132,51,22,23],"configurable","https:\u002F\u002Fwww.0x539.se\u002Fwordpress\u002Fultimate-tag-cloud-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fultimate-tag-cloud-widget.2.7.2.zip",{"attackSurface":136,"codeSignals":148,"taintFlows":183,"riskAssessment":184,"analyzedAt":197},{"hooks":137,"ajaxHandlers":144,"restRoutes":145,"shortcodes":146,"cronEvents":147,"entryPointCount":27,"unprotectedCount":27},[138],{"type":139,"name":140,"callback":141,"file":142,"line":143},"action","init","widget_catcloud_init","category-cloud.php",186,[],[],[],[],{"dangerousFunctions":149,"sqlUsage":154,"outputEscaping":156,"fileOperations":27,"externalRequests":27,"nonceChecks":27,"capabilityChecks":27,"bundledLibraries":182},[150],{"fn":151,"file":142,"line":152,"context":153},"create_function",159,"uksort($counts, create_function('$a, $b', 'return -(strnatcasecmp($a, $b));'));",{"prepared":27,"raw":27,"locations":155},[],{"escaped":27,"rawEcho":110,"locations":157},[158,161,163,165,167,169,171,173,175,176,178,180],{"file":142,"line":159,"context":160},58,"raw output",{"file":142,"line":162,"context":160},59,{"file":142,"line":164,"context":160},60,{"file":142,"line":166,"context":160},67,{"file":142,"line":168,"context":160},68,{"file":142,"line":170,"context":160},69,{"file":142,"line":172,"context":160},70,{"file":142,"line":174,"context":160},87,{"file":142,"line":98,"context":160},{"file":142,"line":177,"context":160},147,{"file":142,"line":179,"context":160},167,{"file":142,"line":181,"context":160},176,[],[],{"summary":185,"deductions":186},"The widget-category-cloud plugin, version 1.7, presents a mixed security posture. While it boasts a zero attack surface for external interactions like AJAX, REST API, shortcodes, and cron events, and all its SQL queries are prepared, significant concerns arise from its code signals. The presence of the `create_function` is a major red flag, as it can be exploited for code injection. Furthermore, the complete lack of output escaping (0%) across all 12 output points is highly problematic, potentially leading to cross-site scripting (XSS) vulnerabilities. The absence of nonce checks and capability checks on any potential entry points also weakens its security significantly, as it offers no protection against unauthorized actions if any vulnerabilities were to be found or introduced.\n\nDespite the clean vulnerability history with no recorded CVEs, this should not be interpreted as a sign of robust security. The lack of history might simply indicate that the plugin hasn't been thoroughly audited or exploited yet, especially given the critical code quality issues identified. The absence of taint analysis results is also neutral, as it might mean no complex data flows were analyzed or that the analysis tools were not configured to detect certain types of flows.\n\nIn conclusion, while the plugin avoids common entry point vulnerabilities and uses prepared SQL statements, the use of `create_function` and the complete lack of output escaping are severe weaknesses that make it highly susceptible to code injection and XSS attacks. The absence of any authorization checks further exacerbates these risks. This plugin should be considered high risk due to these fundamental security flaws.",[187,190,192,195],{"reason":188,"points":189},"Use of create_function (code injection risk)",15,{"reason":191,"points":189},"0% output escaping (XSS risk)",{"reason":193,"points":194},"Missing nonce checks",5,{"reason":196,"points":194},"Missing capability checks","2026-03-16T20:56:37.227Z",{"wat":199,"direct":208},{"assetPaths":200,"generatorPatterns":203,"scriptPaths":204,"versionParams":205},[201,202],"\u002Fwp-content\u002Fplugins\u002Fwidget-category-cloud\u002Fwidget-category-cloud.css","\u002Fwp-content\u002Fplugins\u002Fwidget-category-cloud\u002Fwidget-category-cloud.js",[],[202],[206,207],"widget-category-cloud\u002Fwidget-category-cloud.css?ver=","widget-category-cloud\u002Fwidget-category-cloud.js?ver=",{"cssClasses":209,"htmlComments":211,"htmlAttributes":212,"restEndpoints":225,"jsGlobals":226,"shortcodeOutput":227},[210],"catcloud",[],[213,214,215,216,217,218,219,220,221,222,223,224],"catcloud-title","catcloud-small","catcloud-big","catcloud-unit","catcloud-align","catcloud-orderby","catcloud-order","catcloud-min","catcloud-hide-empty","catcloud-hide-poweredby","catcloud-exclude","catcloud-submit",[],[],[]]