[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fejXwO-1QhF0bh0uhlnqfWkM_h17TtGPMUqPsfffMfkk":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":49,"crawl_stats":38,"alternatives":57,"analysis":58,"fingerprints":314},"wp-trending-post-slider-and-widget","Trending\u002FPopular Post Slider and Widget","1.8.6","Essential Plugin","https:\u002F\u002Fprofiles.wordpress.org\u002Fessentialplugin\u002F","\u003Cp>✅ Now that you have your website ready why don’t you \u003Cstrong>download\u003C\u002Fstrong> and try out this Trending\u002FPopular Post slider to give it better functionality.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Download Now\u003C\u002Fstrong> and WP Trending Post Slider and Widget allow you to display the most popular posts\u002Ftrending posts on your blog by posts views or posts comments. Display your popular post in a page by shortcode or in a sidebar by widget with desired time range.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Download Now\u003C\u002Fstrong> this Trending\u002FPopular Post slider because It is proven that Trending Post sliders have been a powerful tool to present your content in a very neat manner with the help of fancy sliders and customized designs.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fdemo.essentialplugin.com\u002Ftrending-post-demo\u002F?utm_source=WP&utm_medium=Trending-Popular&utm_campaign=Read-Me\" rel=\"nofollow ugc\">FREE DEMO\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fdemo.essentialplugin.com\u002Fprodemo\u002Fpro-featured-and-trending-post\u002F?utm_source=WP&utm_medium=Trending-Popular&utm_campaign=Read-Me\" rel=\"nofollow ugc\">PRO DEMO\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Your customer might like the professional and fancy vibe of your site with Trending Post sliders\u003C\u002Fp>\n\u003Cp>\u003Cstrong>✅ This plugin displays your trending posts using :\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Trending Slider (1 design)\u003C\u002Fli>\n\u003Cli>Trending Carousel (1 design)\u003C\u002Fli>\n\u003Cli>Trending Gridbox (1 design)\u003C\u002Fli>\n\u003Cli>Trending widget (1 design)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Download Now\u003C\u002Fstrong> it today and explore all the features.\u003C\u002Fp>\n\u003Cp>When you want to makeover your WordPress website theme with something extraordinary and creative, you must consider the Trending post slider.\u003C\u002Fp>\n\u003Cp>Help your website get a slide-wise display to show the custom posts. Not just eye appealing, it is also loved by visitors as they find it quite easy to locate custom posts.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note:\u003C\u002Fstrong> After inserting shortcode or widget to site, if you are not seeing any post list then kindly visit blog\u002Fpost section on frontend. It will store the post count on the database**\u003C\u002Fp>\n\u003Cp>WP Trending Post Slider and Widget will list post based on your post views or Comment Count. Once you visit post page then plugin will automatic take that post into list.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Also added Gutenberg block support.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>✅ Here is the plugin shortcode example\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Trending Slider\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wtpsw_popular_post]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Trending Carousel\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wtpsw_carousel]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Trending gridbox\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wtpsw_gridbox]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>To display only Trending 4 post:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wtpsw_popular_post limit=\"4\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Where limit define the number of posts to display. You can use same parameter with all shortcode.\u003C\u002Fp>\n\u003Ch4>✅ Here is Template code\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>\u003C?php echo do_shortcode('[wtpsw_popular_post]'); ?> \n\u003C?php echo do_shortcode('[wtpsw_carousel]'); ?> \n\u003C?php echo do_shortcode('[wtpsw_gridbox]'); ?> \n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>✅ Use Following Trending Slider parameters with shortcode\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>[wtpsw_popular_post]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cul>\n\u003Cli>\u003Cstrong>Limit\u003C\u002Fstrong> : [wtpsw_popular_post limit=”10″] (Display no of post in a slider)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post Type\u003C\u002Fstrong> : [wtpsw_popular_post post_type=”post,page”] ( Display post list of your desired post type. )\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post List By\u003C\u002Fstrong> : [wtpsw_popular_post view_by=”views”] (Display Post list by Views or Comment count. You can use “views” OR “comment”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Order\u003C\u002Fstrong> : [wtpsw_popular_post order=”DESC”] (Display post in a ascending or descending way. You can use “ASC” OR “DESC”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post Date\u003C\u002Fstrong> : [wtpsw_popular_post showdate=”true”] (Display post date. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Author\u003C\u002Fstrong> : [wtpsw_popular_post showauthor=”true”] (Display post author. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post Content\u003C\u002Fstrong> : [wtpsw_popular_post showcontent=”true”] (Display post content. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post content words limit\u003C\u002Fstrong> : [wtpsw_popular_post words_limit=”title”] (Display number of words in a post content.)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Show Comment Count\u003C\u002Fstrong> : [wtpsw_popular_post show_comment_count=”true”] (Display comment count. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hide empty comment count\u003C\u002Fstrong> : [wtpsw_popular_post hide_empty_comment_count=”true”] (Display comment that having 0 count. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Slider Dots\u003C\u002Fstrong> : [wtpsw_popular_post dots=”true”] (Display slider dots. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Slider Arrows\u003C\u002Fstrong> : [wtpsw_popular_post arrows=”true”] (Display slider arrows. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Slider Speed\u003C\u002Fstrong> : [wtpsw_popular_post speed=”300″] (Controls slider speed.)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Autoplay\u003C\u002Fstrong> : [wtpsw_popular_post autoplay=”false”]\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Autoplay Interval\u003C\u002Fstrong> : [wtpsw_popular_post autoplayinterval=”3000″]\u003C\u002Fli>\n\u003Cli>\u003Cstrong>extra_class\u003C\u002Fstrong> : [wtpsw_popular_post extra_class=””] (Enter extra CSS class for design customization ).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>✅ Use Following Trending Carousel parameters with shortcode\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>[wtpsw_carousel]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cul>\n\u003Cli>\u003Cstrong>Limit\u003C\u002Fstrong> : [wtpsw_carousel limit=”10″] (Display no of post in a slider)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post Type\u003C\u002Fstrong> : [wtpsw_carousel post_type=”post,page”] ( Display post list of your desired post type. )\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post List By\u003C\u002Fstrong> : [wtpsw_carousel view_by=”views”] (Display Post list by Views or Comment count. You can use “views” OR “comment”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Order\u003C\u002Fstrong> : [wtpsw_carousel order=”DESC”] (Display post in a ascending or descending way. You can use “ASC” OR “DESC”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post Date\u003C\u002Fstrong> : [wtpsw_carousel showdate=”true”] (Display post date. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Author\u003C\u002Fstrong> : [wtpsw_carousel showauthor=”true”] (Display post author. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post Content\u003C\u002Fstrong> : [wtpsw_carousel showcontent=”true”] (Display post content. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post content words limit\u003C\u002Fstrong> : [wtpsw_carousel words_limit=”title”] (Display number of words in a post content.)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>show_comment_count\u003C\u002Fstrong> : [wtpsw_carousel show_comment_count=”true”] (Display comment count. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hide empty comment count\u003C\u002Fstrong> : [wtpsw_carousel hide_empty_comment_count=”true”] (Display comment that having 0 count. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>** slides to show at a time** : [wtpsw_carousel slides_to_show=”3″] (You can use 1,2,3,4,5 etc)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Slides to scroll at a time\u003C\u002Fstrong> : [wtpsw_carousel slides_to_scroll=”1″] (You can use 1,2,3,4,5 etc)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Slider Dots\u003C\u002Fstrong> : [wtpsw_carousel dots=”true”] (Display slider dots. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Slider Arrows\u003C\u002Fstrong> : [wtpsw_carousel arrows=”true”] (Display slider arrows. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Slider Speed\u003C\u002Fstrong> : [wtpsw_carousel speed=”300″] (Controls slider speed.)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Autoplay\u003C\u002Fstrong> : [wtpsw_carousel autoplay=”false”]\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Autoplay Interval\u003C\u002Fstrong> : [wtpsw_carousel autoplayinterval=”3000″]\u003C\u002Fli>\n\u003Cli>\u003Cstrong>extra_class\u003C\u002Fstrong> : [wtpsw_carousel extra_class=””] (Enter extra CSS class for design customization ).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>✅ Use Following Trending Gridbox parameters with shortcode\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>[wtpsw_gridbox]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cul>\n\u003Cli>\u003Cstrong>Limit\u003C\u002Fstrong> : [wtpsw_gridbox limit=”5″] (Display no of post in a grid)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post Type\u003C\u002Fstrong> : [wtpsw_gridbox post_type=”post,page”] ( Display post list of your desired post type. )\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post List By\u003C\u002Fstrong> : [wtpsw_gridbox view_by=”views”] (Display Post list by Views or Comment count. You can use “views” OR “comment”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Order\u003C\u002Fstrong> : [wtpsw_gridbox order=”DESC”] (Display post in a ascending or descending way. You can use “ASC” OR “DESC”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post Date\u003C\u002Fstrong> : [wtpsw_gridbox showdate=”true”] (Display post date. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Author\u003C\u002Fstrong> : [wtpsw_gridbox showauthor=”true”] (Display post author. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post Content Limit\u003C\u002Fstrong> : [wtpsw_gridbox words_limit=”title”] (Display number of words in a post content.)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>show_comment_count\u003C\u002Fstrong> : [wtpsw_gridbox show_comment_count=”true”] (Display comment count. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hide empty comment count\u003C\u002Fstrong> : [wtpsw_gridbox hide_empty_comment_count=”true”] (Display comment that having 0 count. You can use “true” OR “false”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>extra_class\u003C\u002Fstrong> : [wtpsw_gridbox extra_class=””] (Enter extra CSS class for design customization ).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>✅ \u003Cstrong>Checkout demo for better understanding\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fdemo.essentialplugin.com\u002Ftrending-post-demo\u002F?utm_source=WP&utm_medium=Trending-Popular&utm_campaign=Read-Me\" rel=\"nofollow ugc\">FREE DEMO\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fdemo.essentialplugin.com\u002Fprodemo\u002Fpro-featured-and-trending-post\u002F?utm_source=WP&utm_medium=Trending-Popular&utm_campaign=Read-Me\" rel=\"nofollow ugc\">PRO DEMO\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Essential Plugin Bundle Deal\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.essentialplugin.com\u002Fpricing\u002F?utm_source=WP&utm_medium=Trending-Popular&utm_campaign=Read-Me\" rel=\"nofollow ugc\">Annual or Lifetime Bundle Deal\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Why Use WP Trending Post Slider and Widget Plugin?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Also work with Gutenberg shortcode block.\u003C\u002Fli>\n\u003Cli>WP Trending Post Slider and Widget Plugin is made with WordPress standard.\u003C\u002Fli>\n\u003Cli>This plugin helps you to display popular post, trending post, what’s hot on your site in a easy way.\u003C\u002Fli>\n\u003Cli>WP Trending Post Slider and Widget Plugin, when used effectively, is a great tool to attract your blogs visitors!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>✅ Features include:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Added Gutenberg block support.\u003C\u002Fli>\n\u003Cli>Trending post slider\u003C\u002Fli>\n\u003Cli>Trending post carousel\u003C\u002Fli>\n\u003Cli>Trending post gridbox\u003C\u002Fli>\n\u003Cli>Trending post Widget\u003C\u002Fli>\n\u003Cli>Easy to add.\u003C\u002Fli>\n\u003Cli>Also work with Gutenberg shortcode block. \u003C\u002Fli>\n\u003Cli>Elementor, Beaver and SiteOrigin Page Builder Native Support (New).\u003C\u002Fli>\n\u003Cli>Divi Page Builder Native Support (New).\u003C\u002Fli>\n\u003Cli>Fusion Page Builder (Avada) Native Support (New).\u003C\u002Fli>\n\u003Cli>Responsive.\u003C\u002Fli>\n\u003Cli>You can create multiple testimonial slider with different options at single page or post.\u003C\u002Fli>\n\u003Cli>Fully responsive. Scales with its container.\u003C\u002Fli>\n\u003Cli>100% Multi Language.\u003C\u002Fli>\n\u003C\u002Ful>\n","A quick, easy way to add Popular\u002FTrending posts slider, grid block and widget. Also work with Gutenberg shortcode block.",2000,146164,84,24,"2026-02-20T19:39:00.000Z","6.9.4","4.0","",[20,21,22,23,24],"daily-popular-post-views","popular-posts-slider","popular-trending-posts-carousel","popular-trending-posts-widget","trending-posts-slider","https:\u002F\u002Fessentialplugin.com\u002Fwordpress-plugin\u002Ftrending-post-slider-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-trending-post-slider-and-widget.1.8.6.zip",100,1,0,"2023-03-30 00:00:00","2026-03-15T15:16:48.613Z",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2022-46846","trendingpopular-post-slider-and-widget-cross-site-request-forgery-via-wtpswpostviewcount","Trending\u002FPopular Post Slider and Widget \u003C= 1.5.7 - Cross-Site Request Forgery via wtpsw_post_view_count","The Trending\u002FPopular Post Slider and Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce verification on the wtpsw_post_view_count() function in versions up to, and including, 1.5.7. This makes it possible for unauthenticated attackers to increment the post view count via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link.",null,"\u003C=1.5.7","1.5.8","medium",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2024-01-22 19:56:02",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F4a0cffca-94d8-46b8-8b84-57e76a5bfd94?source=api-prod",299,{"slug":50,"display_name":7,"profile_url":8,"plugin_count":51,"total_installs":52,"avg_security_score":53,"avg_patch_time_days":54,"trust_score":55,"computed_at":56},"essentialplugin",33,204710,99,219,78,"2026-04-03T18:42:47.956Z",[],{"attackSurface":59,"codeSignals":223,"taintFlows":305,"riskAssessment":306,"analyzedAt":313},{"hooks":60,"ajaxHandlers":197,"restRoutes":205,"shortcodes":206,"cronEvents":219,"entryPointCount":222,"unprotectedCount":29},[61,67,71,76,80,85,89,92,96,100,105,108,111,116,118,123,127,131,136,140,143,146,150,154,157,161,165,169,173,176,181,185,190,193],{"type":62,"name":63,"callback":64,"file":65,"line":66},"action","admin_menu","wtpsw_register_menu","includes\\admin\\class-wtpsw-admin.php",20,{"type":62,"name":68,"callback":69,"file":65,"line":70},"admin_init","wtpsw_admin_processes",23,{"type":62,"name":72,"callback":73,"file":74,"line":75},"init","wtpsw_register_guten_block","includes\\admin\\supports\\gutenberg-block.php",242,{"type":62,"name":77,"callback":78,"file":74,"line":79},"enqueue_block_editor_assets","wtpsw_editor_assets",265,{"type":81,"name":82,"callback":83,"file":74,"line":84},"filter","block_categories_all","wtpsw_add_block_category",286,{"type":62,"name":86,"callback":87,"file":88,"line":66},"admin_enqueue_scripts","wtpsw_admin_script","includes\\class-wtpsw-script.php",{"type":62,"name":90,"callback":91,"file":88,"line":70},"wp_enqueue_scripts","wtpsw_front_end_style_script",{"type":62,"name":93,"callback":94,"file":88,"line":95},"elementor\u002Feditor\u002Fafter_enqueue_scripts","wtpsw_admin_builder_script_style",26,{"type":62,"name":97,"callback":94,"priority":98,"file":88,"line":99},"siteorigin_panel_enqueue_admin_scripts",10,29,{"type":81,"name":101,"callback":102,"file":103,"line":104},"posts_where","wtpsw_query_where","includes\\shortcode\\wtpsw-carousel.php",123,{"type":81,"name":101,"callback":102,"file":106,"line":107},"includes\\shortcode\\wtpsw-gridbox.php",108,{"type":81,"name":101,"callback":102,"file":109,"line":110},"includes\\shortcode\\wtpsw-slider.php",119,{"type":62,"name":112,"callback":113,"file":114,"line":115},"widgets_init","wtpsw_post_list_widget","includes\\widgets\\class-wtpsw-post-list-widget.php",7,{"type":81,"name":101,"callback":102,"file":114,"line":117},255,{"type":62,"name":119,"callback":120,"file":121,"line":122},"plugins_loaded","wtpsw_load_textdomain","wp-trending-post-slider-widget.php",89,{"type":62,"name":124,"callback":125,"file":121,"line":126},"update_option_active_plugins","wtpsw_deactivate_version",140,{"type":62,"name":128,"callback":129,"file":121,"line":130},"admin_notices","wtpsw_admin_notice",200,{"type":62,"name":63,"callback":132,"priority":133,"file":134,"line":135},"wpos_anylc_remove_admin_menu",999,"wpos-analytics\\includes\\class-anylc-admin.php",45,{"type":62,"name":63,"callback":137,"priority":138,"file":134,"line":139},"wpos_anylc_register_admin_menu",15,48,{"type":62,"name":68,"callback":141,"file":134,"line":142},"wpos_anylc_admin_init_process",51,{"type":62,"name":128,"callback":144,"file":134,"line":145},"wpos_anylc_optin_notice",54,{"type":62,"name":147,"callback":148,"file":134,"line":149},"admin_footer","wpos_anylc_optout_popup",57,{"type":62,"name":151,"callback":152,"file":134,"line":153},"wp_loaded","wpos_anylc_action_process",60,{"type":62,"name":72,"callback":155,"file":134,"line":156},"wpos_init",63,{"type":81,"name":158,"callback":159,"file":134,"line":160},"cron_schedules","wpos_cron_schedules",66,{"type":62,"name":162,"callback":163,"file":134,"line":164},"wpos_monthly_cron_hook","wpos_monthly_cron_hook_fn",69,{"type":62,"name":166,"callback":167,"file":134,"line":168},"rest_api_init","wpos_rest_api_init",72,{"type":81,"name":170,"callback":171,"priority":98,"file":134,"line":172},"rest_pre_serve_request","wpos_cors_headers",585,{"type":62,"name":86,"callback":174,"file":175,"line":66},"wpos_anylc_admin_script_style","wpos-analytics\\includes\\class-anylc-script.php",{"type":62,"name":177,"callback":178,"priority":98,"file":179,"line":180},"activated_plugin","wpos_anylc_plugin_activation","wpos-analytics\\wpos-analytics.php",244,{"type":62,"name":119,"callback":182,"priority":183,"file":179,"line":184},"wpos_anylc_plugins_loaded",12,258,{"type":62,"name":63,"callback":186,"priority":187,"file":188,"line":189},"espbw_register_menu",14,"wpos-plugins\\includes\\admin\\class-espbw-admin.php",19,{"type":62,"name":86,"callback":191,"file":192,"line":189},"espbw_admin_script_style","wpos-plugins\\includes\\class-espbw-script.php",{"type":62,"name":119,"callback":194,"priority":183,"file":195,"line":196},"wpos_espbw_plugins_loaded","wpos-plugins\\wpos-recommendation.php",185,[198,203],{"action":199,"nopriv":200,"callback":199,"hasNonce":201,"hasCapCheck":200,"file":202,"line":66},"wtpsw_post_view_count",false,true,"includes\\class-wtpsw-public.php",{"action":199,"nopriv":201,"callback":199,"hasNonce":201,"hasCapCheck":200,"file":202,"line":204},21,[],[207,211,215],{"tag":208,"callback":209,"file":103,"line":210},"wtpsw_carousel","wtpsw_popular_post_carousel",158,{"tag":212,"callback":213,"file":106,"line":214},"wtpsw_gridbox","wtpsw_trending_post_gridbox",144,{"tag":216,"callback":217,"file":109,"line":218},"wtpsw_popular_post","wtpsw_trending_post_slider",154,[220],{"hook":162,"callback":162,"file":134,"line":221},520,5,{"dangerousFunctions":224,"sqlUsage":229,"outputEscaping":231,"fileOperations":302,"externalRequests":28,"nonceChecks":115,"capabilityChecks":303,"bundledLibraries":304},[225],{"fn":226,"file":134,"line":227,"context":228},"unserialize",696,"$info = @unserialize($data);",{"prepared":29,"raw":29,"locations":230},[],{"escaped":232,"rawEcho":51,"locations":233},239,[234,237,239,241,243,245,247,249,251,253,256,257,260,262,265,266,269,271,272,274,276,279,282,284,286,288,290,291,293,295,297,299,300],{"file":235,"line":70,"context":236},"includes\\admin\\form\\wtpsw-settings.php","raw output",{"file":235,"line":238,"context":236},73,{"file":103,"line":240,"context":236},135,{"file":109,"line":242,"context":236},131,{"file":114,"line":244,"context":236},114,{"file":114,"line":246,"context":236},204,{"file":114,"line":248,"context":236},263,{"file":114,"line":250,"context":236},266,{"file":114,"line":252,"context":236},287,{"file":254,"line":255,"context":236},"templates\\carousel\\design-1.php",39,{"file":254,"line":135,"context":236},{"file":258,"line":259,"context":236},"templates\\grid-box\\design-1.php",38,{"file":258,"line":261,"context":236},44,{"file":263,"line":264,"context":236},"templates\\slider\\design-1.php",42,{"file":263,"line":139,"context":236},{"file":267,"line":268,"context":236},"templates\\wtpsw-post-lists.php",28,{"file":267,"line":270,"context":236},40,{"file":267,"line":135,"context":236},{"file":121,"line":273,"context":236},191,{"file":134,"line":275,"context":236},387,{"file":277,"line":278,"context":236},"wpos-analytics\\templates\\offers.php",53,{"file":280,"line":281,"context":236},"wpos-plugins\\includes\\admin\\views\\dashboard.php",43,{"file":280,"line":283,"context":236},75,{"file":280,"line":285,"context":236},227,{"file":280,"line":287,"context":236},228,{"file":280,"line":289,"context":236},233,{"file":280,"line":75,"context":236},{"file":280,"line":292,"context":236},248,{"file":280,"line":294,"context":236},249,{"file":280,"line":296,"context":236},264,{"file":280,"line":298,"context":236},297,{"file":280,"line":48,"context":236},{"file":280,"line":301,"context":236},301,3,6,[],[],{"summary":307,"deductions":308},"The 'wp-trending-post-slider-and-widget' plugin, version 1.8.6, presents a mixed security posture.  On the positive side, it demonstrates good practices such as utilizing prepared statements for all SQL queries, implementing a significant number of nonce and capability checks, and maintaining a relatively low overall attack surface with no unprotected entry points identified in the static analysis.  The high percentage of properly escaped output is also a strong indicator of secure development.\n\nHowever, there are some areas of concern. The presence of the `unserialize` function is a critical signal, as it can be a vector for Remote Code Execution (RCE) if not handled with extreme caution and proper input validation. While no taint flows with unsanitized paths were found in this static analysis, the potential for an attacker to manipulate serialized data passed to `unserialize` remains a significant risk.\n\nThe vulnerability history shows a single medium-severity CVE, which is currently patched. This indicates that the plugin has had past security weaknesses, and while the immediate risk from this specific CVE is mitigated, it suggests a pattern of past vulnerabilities that warrants continued vigilance. The fact that the last vulnerability was in March 2023 and is now patched is a good sign of ongoing maintenance, but the presence of `unserialize` coupled with past CVEs elevates the overall risk profile.",[309,311],{"reason":310,"points":138},"Use of unserialize function",{"reason":312,"points":222},"Past medium severity CVE","2026-03-17T05:36:30.670Z",{"wat":315,"direct":332},{"assetPaths":316,"generatorPatterns":323,"scriptPaths":324,"versionParams":325},[317,318,319,320,321,322],"\u002Fwp-content\u002Fplugins\u002Fwp-trending-post-slider-and-widget\u002Fassets\u002Fcss\u002Fwtpsw-public.css","\u002Fwp-content\u002Fplugins\u002Fwp-trending-post-slider-and-widget\u002Fassets\u002Fcss\u002Fslick.css","\u002Fwp-content\u002Fplugins\u002Fwp-trending-post-slider-and-widget\u002Fassets\u002Fcss\u002Fslick-theme.css","\u002Fwp-content\u002Fplugins\u002Fwp-trending-post-slider-and-widget\u002Fassets\u002Fjs\u002Fwtpsw-public.js","\u002Fwp-content\u002Fplugins\u002Fwp-trending-post-slider-and-widget\u002Fassets\u002Fjs\u002Fslick.min.js","\u002Fwp-content\u002Fplugins\u002Fwp-trending-post-slider-and-widget\u002Fassets\u002Fjs\u002Fpublic.js",[],[],[326,327,328,329,330,331],"wp-trending-post-slider-and-widget\u002Fassets\u002Fcss\u002Fwtpsw-public.css?ver=","wp-trending-post-slider-and-widget\u002Fassets\u002Fcss\u002Fslick.css?ver=","wp-trending-post-slider-and-widget\u002Fassets\u002Fcss\u002Fslick-theme.css?ver=","wp-trending-post-slider-and-widget\u002Fassets\u002Fjs\u002Fwtpsw-public.js?ver=","wp-trending-post-slider-and-widget\u002Fassets\u002Fjs\u002Fslick.min.js?ver=","wp-trending-post-slider-and-widget\u002Fassets\u002Fjs\u002Fpublic.js?ver=",{"cssClasses":333,"htmlComments":341,"htmlAttributes":350,"restEndpoints":352,"jsGlobals":353,"shortcodeOutput":355},[334,335,336,337,338,339,340],"wtpsw-slider-wrap","wtpsw-slider","wtpsw-grid-wrap","wtpsw-gridbox","wtpsw-carousel-wrap","wtpsw-carousel","wtpsw-post-list-widget",[342,343,344,345,346,347,348,349],"\u003C!-- start: wp trending post slider widget -->","\u003C!-- \u002F\u002F end: wp trending post slider widget -->","\u003C!-- start: wp trending post grid box -->","\u003C!-- \u002F\u002F end: wp trending post grid box -->","\u003C!-- start: wp trending post carousel -->","\u003C!-- \u002F\u002F end: wp trending post carousel -->","\u003C!-- start: trending post list widget -->","\u003C!-- \u002F\u002F end: trending post list widget -->",[351],"data-settings",[],[354],"wtpsw_data",[356,357,358,359],"[wtpsw_slider]","[wtpsw_gridbox]","[wtpsw_carousel]","[wtpsw_post_list]"]