[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_p1vHWLaART0wu_sVQxsNOT9piOIaf3OgMk0JGqgzDs":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":36,"analysis":130,"fingerprints":237},"wp30-by-who","WP30 By Who","1.0.0","terrytsang","https:\u002F\u002Fprofiles.wordpress.org\u002Fterrytsang\u002F","\u003Cp>This is first plugin from Challenge “WP30” by Terry Tsang. It aims to give credits to the maker and also the portfolio and social media link as a marketing add-on for all the WordPress sites.\u003C\u002Fp>\n\u003Cp>There are 2 option tabs:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>“Settings” Genera settings for E-commerce\u003C\u002Fli>\n\u003Cli>“Social Options” list of social media account\u003C\u002Fli>\n\u003C\u002Ful>\n","\"WP30 By Who\" is a simple add-on that enable a small bar for label \"Designed by\" and social media icons links at the bottom.",0,989,"2017-12-16T12:45:00.000Z","4.9.0","3.3","",[18,19,20,21,22],"bar","follow","footer","social","starter","http:\u002F\u002Fwww.terrytsang.com\u002Fwp30\u002Fby-who","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp30-by-who.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":32,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},8,1050,93,30,89,"2026-04-04T14:01:55.439Z",[37,59,77,97,115],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":16,"tags":52,"homepage":57,"download_link":58,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"social-media-widgets","Social Media Widget","1.0","ashirbad.cs","https:\u002F\u002Fprofiles.wordpress.org\u002Fashirbadcs\u002F","\u003Cp>Easily create beautiful social media link with the install of this plugin.This widget takes a simple, extendable approach for displaying your social media profiles on wordpress website.\u003C\u002Fp>\n\u003Ch4>Social Media Widget\u003C\u002Fh4>\n\u003Cp>*Social media widget which let’s you add icons for Facebook, Twitter, Google+, Pinterest.\u003C\u002Fp>\n\u003Cp>This plugin helps you add social Profiles to your wordpress Website .\u003C\u002Fp>\n","Easily create beautiful social media link with the install of this plugin.This widget takes a simple, extendable approach for displaying your social m …",400,25190,100,5,"2015-09-21T12:50:00.000Z","4.3.34","4.0.1",[53,21,54,55,56],"sidebar","social-follow","social-following","social-links","http:\u002F\u002Fwww.tatwa.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsocial-media-widgets.1.0.zip",{"slug":60,"name":61,"version":51,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":47,"downloaded":66,"rating":67,"num_ratings":68,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":16,"tags":72,"homepage":75,"download_link":76,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"social-space","Social Space","Shah Rishabh","https:\u002F\u002Fprofiles.wordpress.org\u002Frishabh_19\u002F","\u003Cp>\u003Cstrong>Social Space\u003C\u002Fstrong> is a very light weight widget that will help you to easily share your social links. When you activate this plugin widget, you’ll see ‘Social Space’ appear in the widget’s list. Just drag and drop it wherever you wish to show your social links on the website.\u003C\u002Fp>\n\u003Cp>Within the widget, you can add a ‘Title’ that will appear on the website as widget’s title. Then there is a list of different social networking websites where you can directly link them to your social profile by simply providing your profile URL in the given area. Only those social icons will be displayed on your website for which you have added your profile link\u002FURL.\u003C\u002Fp>\n\u003Cp>For example – If you provide links only for Twitter, Skype, Instagram and leave all the other blank, then you’ll only see Twitter, Skype and Instagram icons appear on the website. So its easily customizable and you can ‘Choose what you want to Share’\u003C\u002Fp>\n\u003Ch3>Features And Options:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Customizable icon shapes.\u003C\u002Fli>\n\u003Cli>Supports 11 major popular social icons.\u003C\u002Fli>\n\u003Cli>3 different and attractive rollover (hover) effects for icons.\u003C\u002Fli>\n\u003Cli>Ridiculously simple and easy to customize.\u003C\u002Fli>\n\u003Cli>Light weight plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Note: Be sure to enter the URL for each social site by starting with ‘http:\u002F\u002F’ or ‘https:\u002F\u002F’ (Example: http:\u002F\u002Fwww.navkarya.com\u002F) in order to make the social icons properly link to your social profile.\u003C\u002Fp>\n","A ridiculously simple plugin for showing your social network links using a simple widget so that people can connect with you more easily.",11598,94,7,"2016-05-21T13:32:00.000Z","4.8.28","2.9.2",[20,53,21,73,74],"social-icon","widget","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsocial-space\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsocial-space.4.0.1.zip",{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":47,"downloaded":85,"rating":86,"num_ratings":87,"last_updated":88,"tested_up_to":89,"requires_at_least":15,"requires_php":16,"tags":90,"homepage":95,"download_link":96,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"social-toolbar","Social Toolbar","3.2","Daddydesign","https:\u002F\u002Fprofiles.wordpress.org\u002Fdaddydesign\u002F","\u003Cul>\n\u003Cli>Now updated with a full web-based, management and customization engine!\u003C\u002Fli>\n\u003Cli>Add Social Power to your Website\u003C\u002Fli>\n\u003Cli>Increase engagement, sharing and relationship building for your website and brand.\u003C\u002Fli>\n\u003Cli>Integrate all of your social content and community into one cohesive experience.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>More Info and Demo’s\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fsocialtoolbarpro.com\" title=\"social toolbar pro\" rel=\"nofollow ugc\">Social Toolbar Website\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fsocialtools.fm\" title=\"social tools\" rel=\"nofollow ugc\">SocialTools.FM\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.daddydesign.com\u002Fwordpress\u002Fsocialtools-fm-and-the-new-social-toolbar-pro\u002F\" title=\"social tools\" rel=\"nofollow ugc\">Daddy Design\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>What Inside?\u003C\u002Fp>\n\u003Cp>ADD SOCIAL POWER\u003Cbr \u002F>\nSocial Toolbar adds social power to any website or blog, by integrating the most popular Social Networking properties into one, powerful toolbar.\u003C\u002Fp>\n\u003Cp>HIGHLY CUSTOMIZABLE\u003Cbr \u002F>\nWe designed our Social Toolbar to look awesome right out of the box with a clean, sleek and minimal design. It is also be completely customizable to match your site’s branding.\u003C\u002Fp>\n\u003Cp>MOBILE RESPONSIVE\u003Cbr \u002F>\nOur new Social Toolbar is now fully responsive within small-screen mobile environments, and you have the option of allowing or not allowing a display of the Social ToolBar when your site is rendered on a mobile device.\u003C\u002Fp>\n\u003Cp>70+ SOCIAL NETWORK ICONS\u003Cbr \u002F>\nSocial Toolbar includes major Social Networking site icons such as Facebook, Twitter, YouTube, LinkedIn, and more. While our FREE version has a limited amount of icons available, the PRO version has 70+ icons to choose from.\u003C\u002Fp>\n\u003Ch4>More Info and Demo’s\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fsocialtoolbarpro.com\" title=\"social toolbar pro\" rel=\"nofollow ugc\">Social Toolbar Pro\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fsocialtools.fm\" title=\"social tools\" rel=\"nofollow ugc\">SocialTools.FM\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>———\u003C\u002Fp>\n","Plugin for adding a highly customizable toolbar with color selection, social network icons, recent tweet and share buttons into footer.",96533,66,16,"2014-11-07T22:30:00.000Z","4.0.38",[20,91,92,93,94],"social-icons","social-networking","tool-bar","toolbar","http:\u002F\u002Fsocialtoolbarpro.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsocial-toolbar.3.2.zip",{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":105,"downloaded":106,"rating":47,"num_ratings":107,"last_updated":108,"tested_up_to":109,"requires_at_least":110,"requires_php":16,"tags":111,"homepage":113,"download_link":114,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"don-social-widget","Don Social Widget","0.1.2","Rodrigo Donini","https:\u002F\u002Fprofiles.wordpress.org\u002Frodrigodonini\u002F","\u003Cp>This plugin was created to deliver a simple way to list links of profiles social networks.\u003C\u002Fp>\n\u003Cp>It can be used in sidebar, footer and any other type of WordPress sidebar.\u003C\u002Fp>\n\u003Cp>With this widget you can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Add a profile of a social network.\u003C\u002Fli>\n\u003Cli>Define the size of widget.\u003C\u002Fli>\n\u003Cli>Define if only icons showed or if icon and name is showed.\u003C\u002Fli>\n\u003Cli>Define presentation of widget, select a color you want.\u003C\u002Fli>\n\u003Cli>Define target of links.\u003C\u002Fli>\n\u003Cli>Define orientation of the presentation of widget.\u003C\u002Fli>\n\u003C\u002Ful>\n","Just another social widget plugin, put it in your sidebars and footer. Simple and flat.",10,1291,1,"2016-10-22T02:59:00.000Z","4.6.30","4.6",[20,112,53,21,74],"icons","https:\u002F\u002Fbr.wordpress.org\u002Fplugins\u002Fdon-social-widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdon-social-widget.0.1.2.zip",{"slug":116,"name":117,"version":118,"author":119,"author_profile":120,"description":121,"short_description":122,"active_installs":105,"downloaded":123,"rating":11,"num_ratings":11,"last_updated":124,"tested_up_to":125,"requires_at_least":126,"requires_php":16,"tags":127,"homepage":16,"download_link":129,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"tf-button","TF Button","0.3","janheuninck","https:\u002F\u002Fprofiles.wordpress.org\u002Fjanheuninck\u002F","\u003Cp>Adds a Twitter Follow Button widget in your sidebar.\u003C\u002Fp>\n\u003Cp>Available in English, French and Dutch!\u003C\u002Fp>\n","Add the new Twitter Follow Button to your website to increase engagement and create a lasting connection with your audience.",2103,"2011-06-03T11:59:00.000Z","3.1.4","2.8",[19,53,21,128,74],"twitter","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftf-button.0.3.zip",{"attackSurface":131,"codeSignals":166,"taintFlows":230,"riskAssessment":231,"analyzedAt":236},{"hooks":132,"ajaxHandlers":162,"restRoutes":163,"shortcodes":164,"cronEvents":165,"entryPointCount":11,"unprotectedCount":11},[133,139,142,144,147,150,152,154,157,159],{"type":134,"name":135,"callback":136,"file":137,"line":138},"action","plugins_loaded","anonymous","includes\\class-wp30-by-who.php",142,{"type":134,"name":140,"callback":136,"file":137,"line":141},"admin_enqueue_scripts",158,{"type":134,"name":140,"callback":136,"file":137,"line":143},159,{"type":134,"name":145,"callback":136,"file":137,"line":146},"admin_menu",161,{"type":134,"name":148,"callback":136,"file":137,"line":149},"admin_init",162,{"type":134,"name":148,"callback":136,"file":137,"line":151},163,{"type":134,"name":148,"callback":136,"file":137,"line":153},164,{"type":134,"name":155,"callback":136,"file":137,"line":156},"wp_enqueue_scripts",179,{"type":134,"name":155,"callback":136,"file":137,"line":158},180,{"type":134,"name":160,"callback":136,"file":137,"line":161},"wp_footer",182,[],[],[],[],{"dangerousFunctions":167,"sqlUsage":168,"outputEscaping":170,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":229},[],{"prepared":11,"raw":11,"locations":169},[],{"escaped":68,"rawEcho":171,"locations":172},27,[173,177,179,181,183,185,187,189,191,193,195,197,199,201,203,205,207,209,212,214,215,217,219,221,223,225,227],{"file":174,"line":175,"context":176},"admin\\class-wp30-by-who-settings.php",203,"raw output",{"file":174,"line":178,"context":176},215,{"file":174,"line":180,"context":176},227,{"file":174,"line":182,"context":176},466,{"file":174,"line":184,"context":176},477,{"file":174,"line":186,"context":176},494,{"file":174,"line":188,"context":176},510,{"file":174,"line":190,"context":176},524,{"file":174,"line":192,"context":176},538,{"file":174,"line":194,"context":176},552,{"file":174,"line":196,"context":176},566,{"file":174,"line":198,"context":176},580,{"file":174,"line":200,"context":176},590,{"file":174,"line":202,"context":176},599,{"file":174,"line":204,"context":176},608,{"file":174,"line":206,"context":176},624,{"file":174,"line":208,"context":176},638,{"file":210,"line":211,"context":176},"public\\class-wp30-by-who-public.php",95,{"file":210,"line":213,"context":176},97,{"file":210,"line":47,"context":176},{"file":210,"line":216,"context":176},103,{"file":210,"line":218,"context":176},105,{"file":210,"line":220,"context":176},107,{"file":210,"line":222,"context":176},109,{"file":210,"line":224,"context":176},111,{"file":210,"line":226,"context":176},113,{"file":210,"line":228,"context":176},115,[],[],{"summary":232,"deductions":233},"The plugin \"wp30-by-who\" v1.0.0 exhibits a very strong security posture based on the provided static analysis and vulnerability history.  The absence of any identified entry points, dangerous functions, raw SQL queries, file operations, external HTTP requests, or taint flows suggests a meticulously crafted codebase that adheres to best security practices.  Furthermore, the lack of any known vulnerabilities in its history reinforces this positive outlook, indicating a well-maintained and secure plugin.\n\nHowever, a critical area of concern is the significantly low percentage of properly escaped output (21%). This indicates a high risk of cross-site scripting (XSS) vulnerabilities. While the static analysis did not detect specific XSS flows, the sheer volume of unescaped output presents a substantial attack surface for privilege escalation and user data compromise. The absence of nonce and capability checks, while not directly flagged as critical in this instance due to the lack of exposed entry points, represents a missed opportunity for robust authorization, which could become a weakness if the plugin's attack surface were to expand in future versions.\n\nIn conclusion, the plugin demonstrates excellent security by avoiding common pitfalls like raw SQL and external requests. The primary weakness lies in the inadequate output escaping, which requires immediate attention. The clean vulnerability history is a significant strength, but it should not overshadow the critical need to address the output sanitization issues.",[234],{"reason":235,"points":30},"Low percentage of properly escaped output","2026-03-17T06:25:34.795Z",{"wat":238,"direct":247},{"assetPaths":239,"generatorPatterns":242,"scriptPaths":243,"versionParams":244},[240,241],"\u002Fwp-content\u002Fplugins\u002Fwp30-by-who\u002Fcss\u002Fwp30-by-who-admin.css","\u002Fwp-content\u002Fplugins\u002Fwp30-by-who\u002Fjs\u002Fwp30-by-who-admin.js",[],[241],[245,246],"wp30-by-who\u002Fcss\u002Fwp30-by-who-admin.css?ver=","wp30-by-who\u002Fjs\u002Fwp30-by-who-admin.js?ver=",{"cssClasses":248,"htmlComments":249,"htmlAttributes":250,"restEndpoints":251,"jsGlobals":252,"shortcodeOutput":253},[],[],[],[],[],[]]