[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNuGcSDdYmJHkjNuwYXdKIuFiLVuqf8AdFCTl_Aj0pyE":3,"$fNCjkpqtffESicgeSmWNdQjNqMQ18X2EiOZ5fkJtVuVU":135,"$fhsBWvGnMG4hjUjk8s6rB5uqKhEnYsjrz0orpKlI_tkI":140},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":20,"download_link":21,"security_score":13,"vuln_count":22,"unpatched_count":22,"last_vuln_date":23,"fetched_at":24,"discovery_status":25,"vulnerabilities":26,"developer":27,"crawl_stats":23,"alternatives":34,"analysis":35,"fingerprints":87},"wp-theme-statistic","WP Theme Statistic","1.0.7","postmagthemes","https:\u002F\u002Fprofiles.wordpress.org\u002Fpostmagthemes\u002F","\u003Cp>Wp theme statistic plugin reflect theme statistic data from wordpress.org repository using shortcode. Wp theme statistic plugin shows version no, last theme update date, released date, total download, within days, average download per day, active installation, yesterday download, required WordPress version, required php version and ratings. “ Wp theme statistic “ plugin is useful for theme developer who wants to show their theme download statistic to their viewers in their own site.\u003C\u002Fp>\n","Wp theme statistic plugin reflect theme statistic data from wordpress.org repository using shortcode. Wp theme statistic plugin shows version no, last …",60,2961,100,1,"2026-02-10T16:00:00.000Z","6.9.4","4.7","5.2.4",[4],"https:\u002F\u002Fwww.postmagthemes.com\u002Fwp-theme-statistic\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-theme-statistic.zip",0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":28,"total_installs":29,"avg_security_score":30,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},15,5550,96,278,76,"2026-07-21T23:36:37.797Z",[],{"attackSurface":36,"codeSignals":60,"taintFlows":74,"riskAssessment":75,"analyzedAt":86},{"hooks":37,"ajaxHandlers":52,"restRoutes":53,"shortcodes":54,"cronEvents":59,"entryPointCount":14,"unprotectedCount":22},[38,44,48],{"type":39,"name":40,"callback":41,"file":42,"line":43},"action","admin_enqueue_scripts","enqueue","wp-theme-statistic.php",47,{"type":39,"name":45,"callback":46,"file":42,"line":47},"wp_enqueue_scripts","front_enqueue",48,{"type":39,"name":49,"callback":50,"file":42,"line":51},"admin_menu","add_admin_pages",49,[],[],[55],{"tag":56,"callback":57,"file":42,"line":58},"theme-info","wp_org_api_theme_info",94,[],{"dangerousFunctions":61,"sqlUsage":62,"outputEscaping":64,"fileOperations":22,"externalRequests":65,"nonceChecks":22,"capabilityChecks":22,"bundledLibraries":73},[],{"prepared":22,"raw":22,"locations":63},[],{"escaped":65,"rawEcho":65,"locations":66},2,[67,71],{"file":68,"line":69,"context":70},"templates\\admin.php",13,"raw output",{"file":68,"line":72,"context":70},16,[],[],{"summary":76,"deductions":77},"The \"wp-theme-statistic\" plugin v1.0.7 exhibits a generally good security posture based on the provided static analysis. The absence of dangerous functions, SQL injection vulnerabilities, file operations, and external HTTP requests, combined with the use of prepared statements for all SQL queries, are positive indicators.  Furthermore, the plugin's vulnerability history is clean, with no recorded CVEs, suggesting a history of responsible development. However, there are some areas for improvement. The presence of unsanitized output is a concern, as half of the identified output points are not properly escaped, leaving them vulnerable to Cross-Site Scripting (XSS) attacks. Additionally, the lack of nonce checks and capability checks for its sole shortcode entry point is a significant oversight, potentially allowing for unauthorized actions or information disclosure if the shortcode is vulnerable.",[78,81,84],{"reason":79,"points":80},"Unescaped output detected",6,{"reason":82,"points":83},"Missing nonce checks on shortcode",5,{"reason":85,"points":83},"Missing capability checks on shortcode","2026-03-16T21:45:50.884Z",{"wat":88,"direct":95},{"assetPaths":89,"generatorPatterns":92,"scriptPaths":93,"versionParams":94},[90,91],"\u002Fwp-content\u002Fplugins\u002Fwp-theme-statistic\u002Fassets\u002Fadmin-style.css","\u002Fwp-content\u002Fplugins\u002Fwp-theme-statistic\u002Fassets\u002Ffrontpage.css",[],[],[],{"cssClasses":96,"htmlComments":107,"htmlAttributes":108,"restEndpoints":113,"jsGlobals":114,"shortcodeOutput":115},[56,97,98,99,100,101,102,103,104,105,106],"rating-section","average-rating","star-ratings-sprite","star-ratings-sprite-rating","rating-text","ratings-star","wp-statistic","wp-statistic-bar","wp-statistic-bar-success","sr-only",[],[109,110,111,112],"role=\"wp-statistic-bar\"","aria-valuenow=\"5\"","aria-valuemin=\"0\"","aria-valuemax=\"5\"",[],[],[116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134],"\u003Cdiv class=\"theme-info\"","\u003Cp class=\"version\">","\u003Cp class=\"last_updated\">","\u003Cp class=\"release-date\">","\u003Cp class=\"total_download\">","\u003Cp class=\"within-day\">","\u003Cp class=\"active_installs\">","\u003Cp class=\"average-downloaded\">","\u003Cp class=\"wordpress_version\">","\u003Cp class=\"requires_php\">","\u003Cdiv class=\"rating-section\"","\u003Cdiv class=\"average-rating\">","\u003Cdiv class=\"star-ratings-sprite\">","\u003Cspan class=\"star-ratings-sprite-rating\">","\u003Cdiv class=\"rating-text\">","\u003Cdiv class=\"ratings-star\">","\u003Cdiv class=\"star\">5 \u003Cspan class=\"glyphicon glyphicon-star\">\u003C\u002Fspan>\u003C\u002Fdiv>","\u003Cdiv class=\"star wp-statistic\">","\u003Cdiv class=\"wp-statistic-bar wp-statistic-bar-success\"",{"error":136,"url":137,"statusCode":138,"statusMessage":139,"message":139},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fwp-theme-statistic\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":22,"versions":141},[]]