[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB6j2gNsdpHwQLerNY9EIK1z2TgIaAP-he0oze0gfZFw":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":15,"tags":18,"homepage":22,"download_link":23,"security_score":13,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":34,"analysis":120,"fingerprints":299},"wowpi","WoWpi","2.5.2","avenirer","https:\u002F\u002Fprofiles.wordpress.org\u002Favenirer\u002F","\u003Cp>\u003Cstrong>ATTENTION: AFTER AN UPDATE IT IS IMPORTANT TO GO TO THE SETTINGS OF THE PLUGIN AND DO A SAVE, IN ORDER TO CLEAR THE OLD DATA\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>Highlights\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Guild Roster\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Guild Progression (as I see it…)\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Guild Achievements\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Guild Tabard\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Character Datasheets\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Realm status\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The plugin allows you to get your character data from Battle.net API service. The plugin uses caching of 12 hours, so you don’t have to worry about reaching the quota established by the Battle.net. Also, for general data, like classes, factions, races and so on, the cache is set for 14 days. If you however find yourself in the position to show data that appeared between the refresh of caches you can go to the admin section and save your data again, which will simply destroy all cache.\u003C\u002Fp>\n\u003Cp>For example, a new expansion appeared in World of Warcraft with and you created a new character of a race that didn’t exist before the expansion. In order to show that race you need to refresh the cache. Just go to WoWpi settings and push the save button. That’s it.\u003C\u002Fp>\n\u003Cp>The plugin allows you to choose if you want to include the Tooltip script from Wowhead (the one that shows a tooltip on mouseover). More info on the Tooltip can be found here (http:\u002F\u002Fwww.wowhead.com\u002Ftooltips).\u003C\u002Fp>\n\u003Cp>Also, when retrieving the Guild Tabard, the plugin uses a personal script located at http:\u002F\u002Fwow-hunter.ro\u002Ftabard-creator (by the way, my wow blog is http:\u002F\u002Fwow-hunter.ro)\u003C\u002Fp>\n","The WoWpi plugin allows you to retrieve data from Battle.net API regarding your World of Warcraft character and\u002For guild.",20,8854,100,12,"","4.9.29","3.0.1",[19,20,21],"armory","world-of-warcraft","wow","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwowpi\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwowpi.zip",0,null,"2026-03-15T10:48:56.248Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":30,"avg_security_score":31,"avg_patch_time_days":30,"trust_score":32,"computed_at":33},2,30,93,89,"2026-04-04T14:11:15.315Z",[35,55,68,85,104],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":24,"num_ratings":24,"last_updated":45,"tested_up_to":46,"requires_at_least":47,"requires_php":15,"tags":48,"homepage":51,"download_link":52,"security_score":53,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":54},"wow-armory","WoW Armory","8.4.3","SeiferTim","https:\u002F\u002Fprofiles.wordpress.org\u002Fseifertim\u002F","\u003Cp>Grabs your character from the Armory and displays their basic info.   Allows multiple widgets with different character information.  Works for US and EU realms.  You can choose to hide or display equipment, professions, and achievements.\u003C\u002Fp>\n\u003Cp>You can optionally show a 3D model of your character using Wowhead’s model viewer.\u003C\u002Fp>\n\u003Cp>Caches data for 15 minutes to reduce the number of requests.\u003C\u002Fp>\n\u003Cp>NOTE: Currently this plugin requires cURL and PHP5 to work.\u003C\u002Fp>\n","Easily displays your character's stats from the Armory.",10,15654,"2009-11-06T13:54:00.000Z","2.8.4","2.8",[19,49,50,20,21],"character","widget","http:\u002F\u002Ftimsworld.nfshost.com\u002Fwordpress-plugins\u002Fwow-armory-wp-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwow-armory.8.4.3.zip",85,"2026-03-15T15:16:48.613Z",{"slug":56,"name":57,"version":58,"author":39,"author_profile":40,"description":59,"short_description":60,"active_installs":43,"downloaded":61,"rating":24,"num_ratings":24,"last_updated":15,"tested_up_to":62,"requires_at_least":63,"requires_php":15,"tags":64,"homepage":66,"download_link":67,"security_score":13,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26},"wow-guild","WoW Guild","1.5","\u003Cp>Grabs your guild’s characters from the Armory and display them.   Allows multiple widgets with different character information.  Works for US and EU realms.  You set how many characters to show at a time, and the plugin will create ‘back\u002Fnext’ links to see all characters.\u003C\u002Fp>\n\u003Cp>Requirers cURL support on your server.\u003C\u002Fp>\n","Easily displays your Guild's Roster from the armory",5819,"2.7.1","2.6",[19,65,50,20,21],"guild","http:\u002F\u002Ftimsworld.nfshost.com\u002Fwordpress-plugins\u002Fwow-guild-wp-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwow-guild.1.5.zip",{"slug":69,"name":70,"version":71,"author":7,"author_profile":8,"description":72,"short_description":73,"active_installs":43,"downloaded":74,"rating":75,"num_ratings":76,"last_updated":77,"tested_up_to":78,"requires_at_least":79,"requires_php":80,"tags":81,"homepage":83,"download_link":84,"security_score":53,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":54},"wowpi-guild","WoWpi Guild","1.4.5","\u003Cp>This plugin started from an older plugin named WoWpi. That plugin was developped with the gamer in mind. But then, it seemed that a lot of guilds wanted to use the plugin for their needs. So that plugin kept evolving until it couldn’t anymore.\u003C\u002Fp>\n\u003Cp>This time I am working on a plugin that revolves around guilds in World of Warcraft. I hope it will evolve further, becoming the go to tool for a guild’s website needs.\u003C\u002Fp>\n\u003Ch4>Highlights\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Guild Roster\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Character post types\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Recruitment Widget\u003C\u002Fstrong>\u003C\u002Fp>\n","You want a proper World of Warcraft's guild website but you don't know how? Look no further. This is the plugin for your guild's needs.",2026,74,3,"2021-01-07T13:47:00.000Z","5.4.19","4.7","7.0",[19,65,82,20,21],"roster","http:\u002F\u002Fwowpi-guild","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwowpi-guild.zip",{"slug":86,"name":87,"version":88,"author":89,"author_profile":90,"description":91,"short_description":92,"active_installs":30,"downloaded":93,"rating":94,"num_ratings":95,"last_updated":96,"tested_up_to":97,"requires_at_least":98,"requires_php":99,"tags":100,"homepage":15,"download_link":103,"security_score":13,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":54},"wow-progress","WoW Progress","1.23.0","martinek","https:\u002F\u002Fprofiles.wordpress.org\u002Fmartinek\u002F","\u003Cp>A widget that helps to display guild raid progress.\u003Cbr \u002F>\nEach boss have separate option to toggle kill, heroic kill and mythic kill. Each raid can be toggled to be displayed or not and if it should be shown or collapsed by default.\u003C\u002Fp>\n\u003Cp>There is theme support with sample Light and Dark theme. Also my own theme is attached if you are interested. You should create your own theme and customise it to match your needs.\u003C\u002Fp>\n\u003Cp>Progress can be configured in widget menu.\u003Cbr \u002F>\nTheme and backgrounds toggle is in Settings > WoW Progress menu.\u003C\u002Fp>\n\u003Cp>If you managed to find bugs or want to correct some of my code, please don’t hesitate to leave a comment or contact me on martinek@freevision.sk.\u003C\u002Fp>\n\u003Cp>For list of raids, check latest change log. I usually add raids as people report new patch coming up on the support forums.\u003C\u002Fp>\n","A widget that helps to display guild raid progress.",21627,88,5,"2025-08-17T12:56:00.000Z","6.8.5","3.0","5.6",[65,101,102,20,21],"progress","warcraft","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwow-progress.1.23.0.zip",{"slug":105,"name":106,"version":107,"author":108,"author_profile":109,"description":110,"short_description":111,"active_installs":11,"downloaded":112,"rating":13,"num_ratings":113,"last_updated":114,"tested_up_to":115,"requires_at_least":47,"requires_php":15,"tags":116,"homepage":118,"download_link":119,"security_score":53,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":54},"wow-recruit-widget","WOW Recruitment Widget","1.4.12","Freeman Man","https:\u002F\u002Fprofiles.wordpress.org\u002Ffreegod725\u002F","\u003Cp>A widget that helps to display recruitment message of a World of Warcraft guild.\u003Cbr \u002F>\nIt works just fine out of the box, but it is very customizable with some CSS techniques.\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fwww.ycfreeman.com\u002F2010\u002F08\u002Fwow-recruitment-wordpress-widget.html\" rel=\"nofollow ugc\">Customization tutorial can be found here\u003C\u002Fa>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>please save the widget once after upgrade from 1.0.x to make it work with new codes, \u003C\u002Fli>\n\u003Cli>make sure you backup those color codes before upgrade if you have changed them before 1.2\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>New in 1.4.6:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>added demon hunter class\u003C\u002Fli>\n\u003Cli>this plugin now uses npm to build SCSS stylesheets, see source code for details, mixins will be useful if you’re building your own wordpress theme\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>** I will not be actively updating this plugin, but I’ll still do occasional update like this one when I’m bored,\u003Cbr \u002F>\nplease feel free to fork this project from github.\u003C\u002Fp>\n\u003Cp>To use this widget, simply go to Appearance => Widget and drag it to a sidebar as similar to other widgets.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwow-recruit-widget\u002F\" rel=\"ugc\">Plugin site\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwrdemo.ycfreeman.com\u002F\" rel=\"nofollow ugc\">Demo\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.ycfreeman.com\u002Fwow-recruitment-widget\" rel=\"nofollow ugc\">Full description on the web page of this plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fycfreeman\u002Fwow-guild-recruitment-widget\u002Fissues\" rel=\"nofollow ugc\">Issue Tracker on github\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fycfreeman\u002Fwow-guild-recruitment-widget\" rel=\"nofollow ugc\">Source Code\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you found bugs or want to correct some of my codes, please file issues in github 🙂\u003C\u002Fp>\n\u003Ch3>Development Note\u003C\u002Fh3>\n\u003Cp>require \u003Ca href=\"https:\u002F\u002Fwww.npmjs.com\u002F\" rel=\"nofollow ugc\">npm\u003C\u002Fa> to build stylesheets\u003C\u002Fp>\n\u003Cpre>\u003Ccode>npm run build to build stylesheets continuously to .\u002Fcss\u002F until Ctrl+C to terminate, test page can be viewed at http:\u002F\u002Flocalhost:8001\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>only tested on Mac, should work in *nix platforms, should work in Windows too\u003C\u002Fp>\n","A widget that helps to display recruitment message of a World of Warcraft guild, also can be used for other games that have different classes.",18998,1,"2016-01-25T15:08:00.000Z","4.4.34",[65,117,102,20,21],"recruitment","http:\u002F\u002Fwww.ycfreeman.com\u002Fwow-recruitment-widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwow-recruit-widget.1.4.12.zip",{"attackSurface":121,"codeSignals":178,"taintFlows":288,"riskAssessment":289,"analyzedAt":298},{"hooks":122,"ajaxHandlers":153,"restRoutes":154,"shortcodes":155,"cronEvents":177,"entryPointCount":162,"unprotectedCount":24},[123,129,134,138,143,148],{"type":124,"name":125,"callback":126,"file":127,"line":128},"action","wp_enqueue_scripts","wowpi_scripts","includes\\scripts.php",37,{"type":124,"name":130,"callback":131,"file":132,"line":133},"admin_menu","wowpi_admin_add_page","includes\\wowpi_admin.php",15,{"type":124,"name":135,"callback":136,"file":132,"line":137},"admin_init","wowpi_admin_init",40,{"type":124,"name":139,"callback":140,"file":141,"line":142},"init","wowpi_register_shortcodes","includes\\wowpi_shortcodes.php",13,{"type":124,"name":144,"callback":145,"file":146,"line":147},"widgets_init","wowpi_load_widget","includes\\wowpi_widgets.php",7,{"type":124,"name":149,"callback":150,"file":151,"line":152},"plugins_loaded","wowpi_load_plugin_textdomain","wowpi.php",29,[],[],[156,159,163,166,170,174],{"tag":157,"callback":158,"file":141,"line":95},"wowpi_character","wowpi_shortcode_character",{"tag":160,"callback":161,"file":141,"line":162},"wowpi_guild_members","wowpi_shortcode_guild_members",6,{"tag":164,"callback":165,"file":141,"line":147},"wowpi_guild_progression","wowpi_shortcode_guild_progression",{"tag":167,"callback":168,"file":141,"line":169},"wowpi_guild_achievements","wowpi_shortcode_guild_achievements",8,{"tag":171,"callback":172,"file":141,"line":173},"wowpi_tabard","wowpi_shortcode_guild_tabard",9,{"tag":175,"callback":176,"file":141,"line":43},"wowpi_realms","wowpi_shortcode_realms",[],{"dangerousFunctions":179,"sqlUsage":180,"outputEscaping":182,"fileOperations":271,"externalRequests":29,"nonceChecks":24,"capabilityChecks":24,"bundledLibraries":287},[],{"prepared":24,"raw":24,"locations":181},[],{"escaped":183,"rawEcho":184,"locations":185},61,54,[186,189,191,193,195,197,199,201,203,205,207,209,212,215,218,221,223,224,225,226,227,229,230,232,234,236,238,240,242,244,246,248,250,252,254,255,257,259,260,261,262,264,267,269,270,272,274,276,277,279,281,282,284,286],{"file":132,"line":187,"context":188},33,"raw output",{"file":132,"line":190,"context":188},77,{"file":132,"line":192,"context":188},133,{"file":132,"line":194,"context":188},136,{"file":132,"line":196,"context":188},150,{"file":132,"line":198,"context":188},168,{"file":132,"line":200,"context":188},174,{"file":132,"line":202,"context":188},179,{"file":132,"line":204,"context":188},184,{"file":132,"line":206,"context":188},189,{"file":132,"line":208,"context":188},194,{"file":210,"line":211,"context":188},"includes\\wowpi_data_processing.php",111,{"file":213,"line":214,"context":188},"includes\\wowpi_helpers.php",50,{"file":216,"line":217,"context":188},"includes\\wowpi_shortcodes_characters.php",58,{"file":219,"line":220,"context":188},"includes\\wowpi_views.php",24,{"file":219,"line":222,"context":188},26,{"file":219,"line":30,"context":188},{"file":219,"line":187,"context":188},{"file":219,"line":184,"context":188},{"file":219,"line":32,"context":188},{"file":219,"line":228,"context":188},103,{"file":219,"line":211,"context":188},{"file":219,"line":231,"context":188},122,{"file":219,"line":233,"context":188},129,{"file":219,"line":235,"context":188},144,{"file":219,"line":237,"context":188},149,{"file":219,"line":239,"context":188},374,{"file":219,"line":241,"context":188},378,{"file":219,"line":243,"context":188},382,{"file":245,"line":187,"context":188},"includes\\wowpi_widget_character.php",{"file":245,"line":247,"context":188},34,{"file":245,"line":249,"context":188},41,{"file":245,"line":251,"context":188},68,{"file":245,"line":253,"context":188},69,{"file":245,"line":253,"context":188},{"file":245,"line":256,"context":188},72,{"file":245,"line":258,"context":188},73,{"file":245,"line":258,"context":188},{"file":245,"line":32,"context":188},{"file":245,"line":31,"context":188},{"file":245,"line":263,"context":188},95,{"file":265,"line":266,"context":188},"includes\\wowpi_widget_realms.php",17,{"file":265,"line":268,"context":188},18,{"file":265,"line":11,"context":188},{"file":265,"line":271,"context":188},22,{"file":265,"line":273,"context":188},46,{"file":265,"line":275,"context":188},47,{"file":265,"line":275,"context":188},{"file":265,"line":278,"context":188},51,{"file":265,"line":280,"context":188},52,{"file":265,"line":280,"context":188},{"file":265,"line":283,"context":188},55,{"file":265,"line":285,"context":188},56,{"file":265,"line":285,"context":188},[],[],{"summary":290,"deductions":291},"The \"wowpi\" plugin v2.5.2 exhibits a generally good security posture based on the provided static analysis and vulnerability history.  The absence of known CVEs and critical taint flows is a significant positive indicator. The plugin demonstrates good practices in SQL query handling, with 100% of queries utilizing prepared statements, and a healthy number of output operations are properly escaped.  However, several areas raise concerns that temper this positive outlook. The lack of nonce checks and capability checks across all entry points is a significant weakness, potentially exposing the plugin to various attack vectors if any of its entry points were to be manipulated. Additionally, the moderate output escaping rate suggests a risk of Cross-Site Scripting (XSS) vulnerabilities if user-supplied data is not handled carefully in the 47% of outputs that are not properly escaped. The file operations and external HTTP requests, while not explicitly flagged as problematic in the static analysis, warrant careful review in the context of the overall security.\n\nWhile the plugin has no recorded vulnerability history, this does not guarantee future security. The absence of known vulnerabilities could be due to a lack of thorough historical analysis of the plugin itself, or simply that no exploitable vulnerabilities have been discovered and reported. The total entry points are manageable, and all appear to be protected by some form of authentication or authorization, which is a positive sign. However, the absence of specific nonce and capability checks on these entry points is a critical oversight that significantly increases the risk profile. The plugin's strengths lie in its secure SQL handling and the absence of critical taint flows and CVEs. Its weaknesses are primarily in the lack of granular access control mechanisms like nonce and capability checks, and the moderate output escaping rate.",[292,294,296],{"reason":293,"points":43},"No nonce checks found",{"reason":295,"points":43},"No capability checks found",{"reason":297,"points":95},"Moderate output escaping (53%)","2026-03-16T22:43:12.291Z",{"wat":300,"direct":313},{"assetPaths":301,"generatorPatterns":306,"scriptPaths":307,"versionParams":311},[302,303,304,305],"\u002Fwp-content\u002Fplugins\u002Fwowpi\u002Fassets\u002Fcss\u002Fwowpi_faction.css","\u002Fwp-content\u002Fplugins\u002Fwowpi\u002Fassets\u002Fcss\u002Fwowpi_light.css","\u002Fwp-content\u002Fplugins\u002Fwowpi\u002Fassets\u002Fcss\u002Fwowpi_dark.css","\u002Fwp-content\u002Fplugins\u002Fwowpi\u002Fassets\u002Fjs\u002Fwowpi.js",[],[308,309,310],"\u002F\u002Fwow.zamimg.com\u002Fwidgets\u002Fpower.js","\u002F\u002Fstatic-azeroth.cursecdn.com\u002Fcurrent\u002Fjs\u002Fsyndication\u002Ftt.js","\u002F\u002Fcdn.datatables.net\u002F1.10.12\u002Fjs\u002Fjquery.dataTables.min.js",[312],"wowpi\u002Fassets\u002Fjs\u002Fwowpi.js?ver=",{"cssClasses":314,"htmlComments":315,"htmlAttributes":316,"restEndpoints":317,"jsGlobals":318,"shortcodeOutput":319},[],[],[],[],[],[]]