[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYPKRRT-8Oj7RpPaL10MEBUhfaDFxNBl6CgawYShTvaY":3,"$fYnAau8BbZHO0AwNG1jJvEf0tO98p_HNrNZbgGqCNEDw":284,"$f7M1uroGGGKK8FJb0R7BTOBrjo_YH-Mno8rSC6vKvGiQ":289},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"discovery_status":29,"vulnerabilities":30,"developer":31,"crawl_stats":27,"alternatives":38,"analysis":129,"fingerprints":267},"wowtag-widget","WoWTag Widget","0.2.2B","SeiferTim","https:\u002F\u002Fprofiles.wordpress.org\u002Fseifertim\u002F","\u003Cp>Enter your Character’s name and realm and a WoWTag displaying your avatar, name, race, class, guild, level and title will be placed on your site.\u003Cbr \u002F>\nYou can customize how it is displayed.\u003C\u002Fp>\n","Enter your Character's name and realm and a WoWTag displaying your avatar, name, race, class, guild, level and title will be placed on your site.",10,1793,0,"2010-12-22T20:22:00.000Z","3.0.5","3.0.3","",[19,20,21,22,23],"character","display","game","world-of-warcraft","wow","http:\u002F\u002Fwowtag.nfshost.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwowtag-widget.zip",85,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":35,"avg_patch_time_days":34,"trust_score":36,"computed_at":37},"seifertim",3,30,90,87,"2026-05-20T09:28:47.730Z",[39,55,76,93,109],{"slug":40,"name":41,"version":42,"author":7,"author_profile":8,"description":43,"short_description":44,"active_installs":11,"downloaded":45,"rating":13,"num_ratings":13,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":17,"tags":49,"homepage":52,"download_link":53,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":54},"wow-armory","WoW Armory","8.4.3","\u003Cp>Grabs your character from the Armory and displays their basic info.   Allows multiple widgets with different character information.  Works for US and EU realms.  You can choose to hide or display equipment, professions, and achievements.\u003C\u002Fp>\n\u003Cp>You can optionally show a 3D model of your character using Wowhead’s model viewer.\u003C\u002Fp>\n\u003Cp>Caches data for 15 minutes to reduce the number of requests.\u003C\u002Fp>\n\u003Cp>NOTE: Currently this plugin requires cURL and PHP5 to work.\u003C\u002Fp>\n","Easily displays your character's stats from the Armory.",15710,"2009-11-06T13:54:00.000Z","2.8.4","2.8",[50,19,51,22,23],"armory","widget","http:\u002F\u002Ftimsworld.nfshost.com\u002Fwordpress-plugins\u002Fwow-armory-wp-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwow-armory.8.4.3.zip","2026-04-06T09:54:40.288Z",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":34,"downloaded":63,"rating":64,"num_ratings":65,"last_updated":66,"tested_up_to":67,"requires_at_least":68,"requires_php":69,"tags":70,"homepage":17,"download_link":74,"security_score":75,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"wow-progress","WoW Progress","1.24.2","martinek","https:\u002F\u002Fprofiles.wordpress.org\u002Fmartinek\u002F","\u003Cp>A widget that helps to display guild raid progress.\u003Cbr \u002F>\nEach boss have separate option to toggle kill, heroic kill and mythic kill. Each raid can be toggled to be displayed or not and if it should be shown or collapsed by default.\u003C\u002Fp>\n\u003Cp>There is theme support with sample Light and Dark theme. Also my own theme is attached if you are interested. You should create your own theme and customise it to match your needs.\u003C\u002Fp>\n\u003Cp>Progress can be configured in widget menu.\u003Cbr \u002F>\nTheme and backgrounds toggle is in Settings > WoW Progress menu.\u003C\u002Fp>\n\u003Cp>If you managed to find bugs or want to correct some of my code, please don’t hesitate to leave a comment or contact me on martinek@freevision.sk.\u003C\u002Fp>\n\u003Cp>For list of raids, check latest change log. I usually add raids as people report new patch coming up on the support forums.\u003C\u002Fp>\n","A widget that helps to display guild raid progress.",21924,88,5,"2026-03-29T18:31:00.000Z","6.9.4","3.0","5.6",[71,72,73,22,23],"guild","progress","warcraft","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwow-progress.1.24.2.zip",100,{"slug":77,"name":78,"version":79,"author":80,"author_profile":81,"description":82,"short_description":83,"active_installs":84,"downloaded":85,"rating":75,"num_ratings":86,"last_updated":87,"tested_up_to":88,"requires_at_least":48,"requires_php":17,"tags":89,"homepage":91,"download_link":92,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"wow-recruit-widget","WOW Recruitment Widget","1.4.12","Freeman Man","https:\u002F\u002Fprofiles.wordpress.org\u002Ffreegod725\u002F","\u003Cp>A widget that helps to display recruitment message of a World of Warcraft guild.\u003Cbr \u002F>\nIt works just fine out of the box, but it is very customizable with some CSS techniques.\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fwww.ycfreeman.com\u002F2010\u002F08\u002Fwow-recruitment-wordpress-widget.html\" rel=\"nofollow ugc\">Customization tutorial can be found here\u003C\u002Fa>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>please save the widget once after upgrade from 1.0.x to make it work with new codes, \u003C\u002Fli>\n\u003Cli>make sure you backup those color codes before upgrade if you have changed them before 1.2\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>New in 1.4.6:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>added demon hunter class\u003C\u002Fli>\n\u003Cli>this plugin now uses npm to build SCSS stylesheets, see source code for details, mixins will be useful if you’re building your own wordpress theme\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>** I will not be actively updating this plugin, but I’ll still do occasional update like this one when I’m bored,\u003Cbr \u002F>\nplease feel free to fork this project from github.\u003C\u002Fp>\n\u003Cp>To use this widget, simply go to Appearance => Widget and drag it to a sidebar as similar to other widgets.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwow-recruit-widget\u002F\" rel=\"ugc\">Plugin site\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwrdemo.ycfreeman.com\u002F\" rel=\"nofollow ugc\">Demo\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.ycfreeman.com\u002Fwow-recruitment-widget\" rel=\"nofollow ugc\">Full description on the web page of this plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fycfreeman\u002Fwow-guild-recruitment-widget\u002Fissues\" rel=\"nofollow ugc\">Issue Tracker on github\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fycfreeman\u002Fwow-guild-recruitment-widget\" rel=\"nofollow ugc\">Source Code\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you found bugs or want to correct some of my codes, please file issues in github 🙂\u003C\u002Fp>\n\u003Ch3>Development Note\u003C\u002Fh3>\n\u003Cp>require \u003Ca href=\"https:\u002F\u002Fwww.npmjs.com\u002F\" rel=\"nofollow ugc\">npm\u003C\u002Fa> to build stylesheets\u003C\u002Fp>\n\u003Cpre>\u003Ccode>npm run build to build stylesheets continuously to .\u002Fcss\u002F until Ctrl+C to terminate, test page can be viewed at http:\u002F\u002Flocalhost:8001\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>only tested on Mac, should work in *nix platforms, should work in Windows too\u003C\u002Fp>\n","A widget that helps to display recruitment message of a World of Warcraft guild, also can be used for other games that have different classes.",20,19109,1,"2016-01-25T15:08:00.000Z","4.4.34",[71,90,73,22,23],"recruitment","http:\u002F\u002Fwww.ycfreeman.com\u002Fwow-recruitment-widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwow-recruit-widget.1.4.12.zip",{"slug":94,"name":95,"version":96,"author":97,"author_profile":98,"description":99,"short_description":100,"active_installs":84,"downloaded":101,"rating":75,"num_ratings":102,"last_updated":103,"tested_up_to":104,"requires_at_least":105,"requires_php":17,"tags":106,"homepage":107,"download_link":108,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"wowpi","WoWpi","2.5.2","avenirer","https:\u002F\u002Fprofiles.wordpress.org\u002Favenirer\u002F","\u003Cp>\u003Cstrong>ATTENTION: AFTER AN UPDATE IT IS IMPORTANT TO GO TO THE SETTINGS OF THE PLUGIN AND DO A SAVE, IN ORDER TO CLEAR THE OLD DATA\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>Highlights\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Guild Roster\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Guild Progression (as I see it…)\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Guild Achievements\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Guild Tabard\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Character Datasheets\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Realm status\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The plugin allows you to get your character data from Battle.net API service. The plugin uses caching of 12 hours, so you don’t have to worry about reaching the quota established by the Battle.net. Also, for general data, like classes, factions, races and so on, the cache is set for 14 days. If you however find yourself in the position to show data that appeared between the refresh of caches you can go to the admin section and save your data again, which will simply destroy all cache.\u003C\u002Fp>\n\u003Cp>For example, a new expansion appeared in World of Warcraft with and you created a new character of a race that didn’t exist before the expansion. In order to show that race you need to refresh the cache. Just go to WoWpi settings and push the save button. That’s it.\u003C\u002Fp>\n\u003Cp>The plugin allows you to choose if you want to include the Tooltip script from Wowhead (the one that shows a tooltip on mouseover). More info on the Tooltip can be found here (http:\u002F\u002Fwww.wowhead.com\u002Ftooltips).\u003C\u002Fp>\n\u003Cp>Also, when retrieving the Guild Tabard, the plugin uses a personal script located at http:\u002F\u002Fwow-hunter.ro\u002Ftabard-creator (by the way, my wow blog is http:\u002F\u002Fwow-hunter.ro)\u003C\u002Fp>\n","The WoWpi plugin allows you to retrieve data from Battle.net API regarding your World of Warcraft character and\u002For guild.",9083,12,"2019-02-03T15:36:00.000Z","4.9.29","3.0.1",[50,22,23],"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwowpi\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwowpi.zip",{"slug":110,"name":111,"version":112,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":11,"downloaded":117,"rating":118,"num_ratings":86,"last_updated":119,"tested_up_to":120,"requires_at_least":121,"requires_php":17,"tags":122,"homepage":127,"download_link":128,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"game-dev-quotes","Game Dev Quotes","1.5.2","TonyW","https:\u002F\u002Fprofiles.wordpress.org\u002Fnodewerx\u002F","\u003Cp>Easily style posts from game companies in a way that resembles their forum posts using shortcodes. For example: Blizzards ‘blue posts’. The Shortcodes are listed below. If you would like to see a style added please don’t hesitate to contact me and I’ll try to add them in the next releases.\u003C\u002Fp>\n\u003Cp>The icon in the tinyMCE editor is a pair of green quotes(“”).\u003C\u002Fp>\n\u003Cp>Syntax for shortcodes are: ‘[bluepost name=”name”] content [\u002Fbluepost]’.\u003C\u002Fp>\n\u003Ch4>Shortcodes Available\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>‘bluepost’ – Blizzard style quotes\u003C\u002Fli>\n\u003Cli>’torpost’ – Star Wars: The Old Republic style quotes\u003C\u002Fli>\n\u003Cli>‘ps2post’ – SOE Planetside 2 style quotes\u003C\u002Fli>\n\u003Cli>‘valvepost’ – Valve employee style quotes\u003C\u002Fli>\n\u003C\u002Ful>\n","Simple shortcodes to style game developer quotes as they are on the developers site.",2331,80,"2014-07-08T22:55:00.000Z","3.9.40","3.6.0",[123,124,125,126,23],"bioware","blizzard","game-dev","tor","http:\u002F\u002Fwww.tonyw.io\u002Fgame-dev-quotes","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgame-dev-quotes.1.5.2.zip",{"attackSurface":130,"codeSignals":145,"taintFlows":235,"riskAssessment":253,"analyzedAt":266},{"hooks":131,"ajaxHandlers":141,"restRoutes":142,"shortcodes":143,"cronEvents":144,"entryPointCount":13,"unprotectedCount":13},[132,138],{"type":133,"name":134,"callback":135,"file":136,"line":137},"action","widgets_init","load_widget","wowtag-widget.php",29,{"type":133,"name":139,"callback":140,"file":136,"line":34},"wp_head","add_head",[],[],[],[],{"dangerousFunctions":146,"sqlUsage":147,"outputEscaping":149,"fileOperations":86,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":234},[],{"prepared":86,"raw":13,"locations":148},[],{"escaped":150,"rawEcho":151,"locations":152},2,51,[153,157,159,161,163,164,166,168,169,170,172,174,175,176,178,180,181,183,184,186,188,189,190,191,192,193,194,196,198,199,200,202,203,205,207,208,209,210,212,214,215,216,218,220,221,222,224,226,228,230,232],{"file":154,"line":155,"context":156},"simple_html_dom.php",53,"raw output",{"file":154,"line":158,"context":156},57,{"file":136,"line":160,"context":156},41,{"file":136,"line":162,"context":156},59,{"file":136,"line":162,"context":156},{"file":136,"line":165,"context":156},61,{"file":136,"line":167,"context":156},62,{"file":136,"line":167,"context":156},{"file":136,"line":167,"context":156},{"file":136,"line":171,"context":156},65,{"file":136,"line":173,"context":156},66,{"file":136,"line":173,"context":156},{"file":136,"line":173,"context":156},{"file":136,"line":177,"context":156},70,{"file":136,"line":179,"context":156},71,{"file":136,"line":179,"context":156},{"file":136,"line":182,"context":156},76,{"file":136,"line":182,"context":156},{"file":136,"line":185,"context":156},83,{"file":136,"line":187,"context":156},84,{"file":136,"line":187,"context":156},{"file":136,"line":187,"context":156},{"file":136,"line":36,"context":156},{"file":136,"line":64,"context":156},{"file":136,"line":64,"context":156},{"file":136,"line":64,"context":156},{"file":136,"line":195,"context":156},91,{"file":136,"line":197,"context":156},92,{"file":136,"line":197,"context":156},{"file":136,"line":197,"context":156},{"file":136,"line":201,"context":156},95,{"file":136,"line":201,"context":156},{"file":136,"line":204,"context":156},96,{"file":136,"line":206,"context":156},99,{"file":136,"line":75,"context":156},{"file":136,"line":75,"context":156},{"file":136,"line":75,"context":156},{"file":136,"line":211,"context":156},103,{"file":136,"line":213,"context":156},104,{"file":136,"line":213,"context":156},{"file":136,"line":213,"context":156},{"file":136,"line":217,"context":156},107,{"file":136,"line":219,"context":156},108,{"file":136,"line":219,"context":156},{"file":136,"line":219,"context":156},{"file":136,"line":223,"context":156},135,{"file":136,"line":225,"context":156},136,{"file":136,"line":227,"context":156},137,{"file":136,"line":229,"context":156},138,{"file":231,"line":195,"context":156},"wowtag.php",{"file":231,"line":233,"context":156},112,[],[236],{"entryPoint":237,"graph":238,"unsanitizedCount":86,"severity":252},"\u003Cwowtag> (wowtag.php:0)",{"nodes":239,"edges":249},[240,244],{"id":241,"type":242,"label":243,"file":231,"line":219},"n0","source","$_POST",{"id":245,"type":246,"label":247,"file":231,"line":233,"wp_function":248},"n1","sink","echo() [XSS]","echo",[250],{"from":241,"to":245,"sanitized":251},false,"low",{"summary":254,"deductions":255},"The \"wowtag-widget\" v0.2.2B plugin presents a mixed security posture.  On the positive side, there are no known CVEs associated with this plugin, and the code analysis reveals no dangerous functions, no external HTTP requests, and SQL queries are properly prepared, which are excellent indicators of security awareness in development.  The absence of any identified CVEs over time suggests a generally stable and well-maintained plugin.\n\nHowever, significant concerns arise from the code signals and taint analysis. The most critical issue is the extremely low percentage of properly escaped output (4%). This indicates a high probability of cross-site scripting (XSS) vulnerabilities, as user-supplied data is likely being rendered directly into the browser without proper sanitization. Furthermore, the taint analysis shows a flow with an unsanitized path, which, while not classified as critical or high severity in this analysis, is a strong signal for potential security weaknesses, especially when combined with the output escaping issues. The lack of nonce and capability checks on potential entry points (even though the attack surface is reported as zero) is also a concern, as it suggests that any future expansion of functionality without these checks could introduce vulnerabilities.",[256,259,261,264],{"reason":257,"points":258},"Low percentage of properly escaped output",15,{"reason":260,"points":11},"Flow with unsanitized path",{"reason":262,"points":263},"Missing nonce checks",7,{"reason":265,"points":263},"Missing capability checks","2026-04-16T12:45:47.200Z",{"wat":268,"direct":274},{"assetPaths":269,"generatorPatterns":271,"scriptPaths":272,"versionParams":273},[270],"\u002Fwp-content\u002Fplugins\u002Fwowtag-widget\u002Fwowtag.js",[],[270],[],{"cssClasses":275,"htmlComments":277,"htmlAttributes":278,"restEndpoints":280,"jsGlobals":281,"shortcodeOutput":283},[276],"wowtag",[],[279],"id=\"wowtag-widget\"",[],[282],"wT",[],{"error":285,"url":286,"statusCode":287,"statusMessage":288,"message":288},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fwowtag-widget\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":150,"versions":290},[291,298],{"version":292,"download_url":293,"svn_tag_url":294,"released_at":27,"has_diff":251,"diff_files_changed":295,"diff_lines":27,"trac_diff_url":296,"vulnerabilities":297,"is_current":251},"0.2.1B","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwowtag-widget.0.2.1B.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwowtag-widget\u002Ftags\u002F0.2.1B\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwowtag-widget%2Ftags%2F0.2B&new_path=%2Fwowtag-widget%2Ftags%2F0.2.1B",[],{"version":299,"download_url":300,"svn_tag_url":301,"released_at":27,"has_diff":251,"diff_files_changed":302,"diff_lines":27,"trac_diff_url":27,"vulnerabilities":303,"is_current":251},"0.2B","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwowtag-widget.0.2B.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwowtag-widget\u002Ftags\u002F0.2B\u002F",[],[]]