[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxEhJ6zpRHkmc7nXQHE_RchjtvzmKFpM-i1NKtuDbsJ4":3,"$f72W182yQBsNJ9-_7Ac5hM5iYWTAZ0CvgxuiCBCQ8bNA":210,"$fU91R5n1ckSS69iBouBJUK2YDRngBiWyQeqwfEAKEhgc":215},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"discovery_status":31,"vulnerabilities":32,"developer":33,"crawl_stats":29,"alternatives":41,"analysis":150,"fingerprints":197},"wpml-widgets","WPML Widgets","1.0.6","Jeroen Sormani","https:\u002F\u002Fprofiles.wordpress.org\u002Fsormano\u002F","\u003Cp>WPML Widgets is a simple to use extension to add a language selector dropdown to your widgets.\u003C\u002Fp>\n\u003Cp>This plugin is the easiest way to add multilingual widgets to your website.\u003C\u002Fp>\n\u003Cp>WPML Widgets is a ultra lightweight plugin, so there will be (about) zero extra loading time.\u003C\u002Fp>\n","WPML Widgets is a simple to use extension to add a language selector dropdown to your widgets.",10000,171964,98,36,"2017-11-28T08:13:00.000Z","4.7.33","3.6","",[20,21,22,23,24],"wordpress-multilanguage","wordpress-multilanguage-widget","wpml","wpml-widget","wpml-widget-selector","http:\u002F\u002Fjeroensormani.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpml-widgets.1.0.6.zip",85,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":34,"display_name":7,"profile_url":8,"plugin_count":35,"total_installs":36,"avg_security_score":37,"avg_patch_time_days":38,"trust_score":39,"computed_at":40},"sormano",10,91530,94,35,84,"2026-05-19T20:02:16.077Z",[42,63,86,109,129],{"slug":43,"name":44,"version":45,"author":46,"author_profile":47,"description":48,"short_description":49,"active_installs":11,"downloaded":50,"rating":51,"num_ratings":52,"last_updated":53,"tested_up_to":54,"requires_at_least":55,"requires_php":18,"tags":56,"homepage":61,"download_link":62,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-editor-widget","WP Editor Widget","0.6.0","feedmeastraycat","https:\u002F\u002Fprofiles.wordpress.org\u002Ffeedmeastraycat\u002F","\u003Cp>\u003Cstrong>Note:\u003C\u002Fstrong> This plugin still works but it doesn’t really contain any major features that the native Text widget is missing. The plugin is no longer in active developement.\u003C\u002Fp>\n\u003Cp>This plugin adds a rich text widget where the content is edited using the standard WordPress visual editor which most users already are familiar with.\u003Cbr \u002F>\nIt uses the WP core function wp_editor() without adding a custom post type post for each widget making the widget quicker and simpler to edit.\u003C\u002Fp>\n\u003Cp>Feel free to help with developement or issue reporting on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffeedmeastraycat\u002Fwp-editor-widget\" rel=\"nofollow ugc\">Github\u003C\u002Fa>!\u003C\u002Fp>\n\u003Ch4>Languages\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>English\u003C\u002Fli>\n\u003Cli>Swedish\u003C\u002Fli>\n\u003Cli>German\u003C\u002Fli>\n\u003Cli>Danish\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fwp-editor-widget\" rel=\"nofollow ugc\">More translations\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","WP Editor Widget adds a rich text widget where the content is edited using the standard WordPress visual editor.",153536,92,18,"2020-11-07T22:20:00.000Z","5.5.18","3.5.1",[57,58,59,22,60],"editor","rich-text","widget","wysiwyg","https:\u002F\u002Fgithub.com\u002Ffeedmeastraycat\u002Fwp-editor-widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-editor-widget.0.6.0.zip",{"slug":64,"name":65,"version":66,"author":67,"author_profile":68,"description":69,"short_description":70,"active_installs":71,"downloaded":72,"rating":51,"num_ratings":73,"last_updated":74,"tested_up_to":75,"requires_at_least":76,"requires_php":77,"tags":78,"homepage":83,"download_link":84,"security_score":85,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"buddypress-multilingual","WPML Multilingual for BuddyPress and BuddyBoss","1.9.2","Amir Helzer","https:\u002F\u002Fprofiles.wordpress.org\u002Famirhelzer\u002F","\u003Cp>The plugin allows building multilingual \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbuddypress\u002F\" rel=\"ugc\">BuddyPress\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwww.buddyboss.com\u002F\" rel=\"nofollow ugc\">BuddyBoss\u003C\u002Fa> sites with \u003Ca href=\"http:\u002F\u002Fwpml.org\u002F\" rel=\"nofollow ugc\">WPML\u003C\u002Fa>. It works with single-site or multi-site installations. Both the main site and child blogs can run multilingual.\u003C\u002Fp>\n\u003Cp>Guest blogs can choose their language and create multilingual contents. Additionally, each guest can choose the admin language individually .\u003C\u002Fp>\n\u003Cp>Requirements:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>WPML 4.5.x or higher. You must enable ‘languages per directories’ or ‘languages per domain’.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Adds language switching to all BuddyPress\u002FBuddyBoss pages (Activity, Groups, Profile and Register page)\u003C\u002Fli>\n\u003Cli>Allows to select the language when viewing user profiles\u003C\u002Fli>\n\u003Cli>Keeps the language consistent when clicking on different links (by adding the language to links)\u003C\u002Fli>\n\u003Cli>Allows to translate email notifications\u003C\u002Fli>\n\u003Cli>Keeps the entire BuddyPress\u002FBuddyBoss workflow in the current language (create group, change avatars etc.)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Need Support?\u003C\u002Fh4>\n\u003Cp>Please submit support requests to \u003Cstrong>\u003Ca href=\"http:\u002F\u002Fwpml.org\u002Fforums\u002Fforum\u002Fenglish-support\u002F\" rel=\"nofollow ugc\">WPML forum\u003C\u002Fa>\u003C\u002Fstrong>. Remember to report:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The versions of BuddyPress\u002FBuddyBoss, WPML and WordPress that you’re using.\u003C\u002Fli>\n\u003Cli>A URL to your site, where we can see the problem happening.\u003C\u002Fli>\n\u003Cli>A description of what you expect to see and what you’re seeing in practice.\u003C\u002Fli>\n\u003C\u002Ful>\n","WPML Multilingual for BuddyPress and BuddyBoss allows BuddyPress and BuddyBoss sites to run fully multilingual using the WPML plugin.",7000,159967,37,"2026-03-17T16:50:00.000Z","6.9.4","4.7","7.2",[79,80,81,82,22],"buddyboss","buddypress","i18n","multilingual","http:\u002F\u002Fwpml.org\u002F?page_id=2890","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-multilingual.1.9.2.zip",100,{"slug":87,"name":88,"version":89,"author":90,"author_profile":91,"description":92,"short_description":93,"active_installs":94,"downloaded":95,"rating":37,"num_ratings":96,"last_updated":97,"tested_up_to":98,"requires_at_least":99,"requires_php":18,"tags":100,"homepage":105,"download_link":106,"security_score":85,"vuln_count":107,"unpatched_count":28,"last_vuln_date":108,"fetched_at":30},"simple-yearly-archive","Simple Yearly Archive","2.2.4","wpseek","https:\u002F\u002Fprofiles.wordpress.org\u002Falphawolf\u002F","\u003Cp>Simple Yearly Archive is a rather neat and simple WordPress plugin that allows you to \u003Cstrong>display your archives in a year-based list\u003C\u002Fstrong>. It works mostly like the usual WP archive, but displays all published posts seperated by their year of publication. That said, it’s also possible to restrict the output to certain categories, and much more.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>See \u003Ca href=\"https:\u002F\u002Fwww.schloebe.de\u002Fwordpress\u002Fsimple-yearly-archive-plugin\u002F#tabwidget-27592\" title=\"Usage\" rel=\"nofollow ugc\">Usage\u003C\u002Fa> for examples, available parameters and more.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Included languages:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>English\u003C\u002Fli>\n\u003Cli>German (de_DE) (Thanks to me ;-))\u003C\u002Fli>\n\u003Cli>German (de_DE_formal) (Thanks for contributing formal german language goes to \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fpavog\" rel=\"nofollow ugc\">Paul Vogel\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>Italian (it_IT) (Thanks for contributing italian language goes to \u003Ca href=\"https:\u002F\u002Fgidibao.net\" rel=\"nofollow ugc\">Gianni Diurno\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>Russian (ru_RU) (Thanks for contributing russian language goes to \u003Ca href=\"https:\u002F\u002Fgrugl.me\" rel=\"nofollow ugc\">Dimitry German\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>Belorussian (by_BY) (Thanks for contributing belorussian language goes to \u003Ca href=\"https:\u002F\u002Fwww.fatcow.com\" rel=\"nofollow ugc\">Marcis Gasuns\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>Uzbek (uz_UZ) (Thanks for contributing uzbek language goes to \u003Ca href=\"https:\u002F\u002Fwww.comfi.com\" rel=\"nofollow ugc\">Alexandra Bolshova\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>French (fr_FR) (Thanks for contributing french language goes to \u003Ca href=\"https:\u002F\u002Fwww.li-an.fr\u002Fblog\" rel=\"nofollow ugc\">Jean-Michel Meyer\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>Chinese (zh_CN) (Thanks for contributing chinese language goes to \u003Ca href=\"https:\u002F\u002Fmarianama.net\" rel=\"nofollow ugc\">Mariana Ma\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>Japanese (ja) (Thanks for contributing japanese language goes to \u003Ca href=\"https:\u002F\u002Fstaff.blog.bng.net\" rel=\"nofollow ugc\">Chestnut\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>Portuguese Brazil (pt_BR) (Thanks for contributing portuguese brazil language goes to LucasTolle)\u003C\u002Fli>\n\u003Cli>Dutch (nl_NL) (Thanks for contributing dutch language goes to Bart Verkerk)\u003C\u002Fli>\n\u003Cli>Spanish (es) (Spanish translation by \u003Ca href=\"https:\u002F\u002Fwww.ibidemgroup.com\" rel=\"nofollow ugc\">Ibidem Group\u003C\u002Fa>)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.schloebe.de\u002Farchiv\u002F\" title=\"Click here for a demo\" rel=\"nofollow ugc\">Click here for a demo\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fx.com\u002Fwpseek\" title=\"Developer on X\" rel=\"nofollow ugc\">Developer on X\u003C\u002Fa> \u003Ca href=\"https:\u002F\u002Fbsky.app\u002Fprofile\u002Fcyberblitzbirne.bsky.social\" title=\"Developer on Bluesky\" rel=\"nofollow ugc\">Developer on Bluesky\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Looking for more WordPress plugins? Visit \u003Ca href=\"https:\u002F\u002Fwww.schloebe.de\u002Fportfolio\u002F\" rel=\"nofollow ugc\">www.schloebe.de\u002Fportfolio\u002F\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n","Simple Yearly Archive is a rather neat and simple Wordpress plugin that allows you to display your archives in a year-based list.",6000,189638,30,"2026-02-15T14:05:00.000Z","6.9.99","3.7",[101,102,103,22,104],"archive","archives","gettext","wp_query","https:\u002F\u002Fwww.schloebe.de\u002Fwordpress\u002Fsimple-yearly-archive-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-yearly-archive.zip",1,"2023-02-13 00:00:00",{"slug":110,"name":111,"version":112,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":94,"downloaded":117,"rating":85,"num_ratings":118,"last_updated":119,"tested_up_to":120,"requires_at_least":121,"requires_php":122,"tags":123,"homepage":127,"download_link":128,"security_score":51,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wpml-to-polylang","WPML to Polylang","0.6","Chouby","https:\u002F\u002Fprofiles.wordpress.org\u002Fchouby\u002F","\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Imports languages and WPML options (when the same options exist in Polylang).\u003C\u002Fli>\n\u003Cli>Imports posts and terms languages as well as translations (including for custom post types and custom taxonomies).\u003C\u002Fli>\n\u003Cli>Imports multilingual nav menus.\u003C\u002Fli>\n\u003Cli>Imports strings translations.\u003C\u002Fli>\n\u003Cli>Does not delete WPML data.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Important\u003C\u002Fh4>\n\u003Cp>Although WPML data should not be corrupted, as Polylang data are created without deleting anything, \u003Cstrong>make a database backup before proceeding\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Ch4>How to proceed?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>De-activate WPML\u003C\u002Fli>\n\u003Cli>Activate Polylang or \u003Ca href=\"https:\u002F\u002Fpolylang.pro\" rel=\"nofollow ugc\">Polylang Pro\u003C\u002Fa> and WPML to Polylang. Do \u003Cstrong>not\u003C\u002Fstrong> create any language with Polylang (they will be imported).\u003C\u002Fli>\n\u003Cli>Go to Tools -> WPML Importer.\u003C\u002Fli>\n\u003Cli>If all checks are passed, then you can click on ‘Import’.\u003C\u002Fli>\n\u003Cli>De-activate WPML to Polylang (You can even delete it).\u003C\u002Fli>\n\u003Cli>Setup a language switcher either as a widget or in nav menus.\u003C\u002Fli>\n\u003Cli>Check that everything is OK.\u003C\u002Fli>\n\u003Cli>If something went wrong and you want to revert to WPML, you can delete Polylang using the red link in the Plugins table. To delete all data created for Polylang, Please read \u003Ca href=\"https:\u002F\u002Fpolylang.pro\u002Fdoc\u002Fhow-to-uninstall-polylang\u002F\" rel=\"nofollow ugc\">how\u003C\u002Fa> \u003Cstrong>before\u003C\u002Fstrong> deleting Polylang. Finally you can re-activate WPML.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Notes\u003C\u002Fh4>\n\u003Cp>This plugin does not include error management. It has however been tested successfully to migrate a site with about 9,000 posts and media.\u003C\u002Fp>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cp>The banner and icon were designed by \u003Ca href=\"http:\u002F\u002Fwww.alexlopez.rocks\u002F\" rel=\"nofollow ugc\">Alex Lopez\u003C\u002Fa>\u003C\u002Fp>\n","Import multilingual data from WPML into Polylang.",152736,20,"2024-11-04T16:05:00.000Z","6.7.5","5.8","5.6",[124,125,82,126,22],"bilingual","importer","polylang","https:\u002F\u002Fpolylang.pro","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpml-to-polylang.0.6.zip",{"slug":130,"name":131,"version":132,"author":133,"author_profile":134,"description":135,"short_description":136,"active_installs":137,"downloaded":138,"rating":51,"num_ratings":139,"last_updated":140,"tested_up_to":141,"requires_at_least":142,"requires_php":143,"tags":144,"homepage":148,"download_link":149,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"better-recent-comments","Better Recent Comments","1.2.0","Kestrel","https:\u002F\u002Fprofiles.wordpress.org\u002Fkestrelwp\u002F","\u003Cp>The default Recent Comments widget is somewhat limited. Better Recent Comments improves on this by providing a more flexible widget with options to show the user’s actual comment, as well as show avatars and the ability to show or hide the comment date.\u003C\u002Fp>\n\u003Cp>As well as the widget, there’s a handy shortcode you can use to display your recent comments. This is useful if you need to display comments somewhere other than your sidebar or footer, such as on your homepage. Simply add the shortcode \u003Ccode>[better_recent_comments]\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cp>That’s not all! The plugin is also WPML compatible, which means that the comments will be restricted to those in the current language. The default WordPress widget will list all recent comments, regardless of language, so you might end up with comments for German-language posts in the sidebar of your English site. Better Recent Comments solves this and makes sure the comments are for the current language only.\u003C\u002Fp>\n\u003Cp>Translations currently provided in Spanish, French and Italian.\u003C\u002Fp>\n\u003Cp>View the full \u003Ca href=\"https:\u002F\u002Fbarn2.com\u002Fkb-categories\u002Fbetter-recent-comments-kb\u002F\" rel=\"nofollow ugc\">plugin documentation\u003C\u002Fa> in our Knowledge Base.\u003C\u002Fp>\n\u003Cp>Options available with the shortcode:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>format\u003C\u002Fcode> – the format of each recent comment. This option uses ‘placeholders’ which are substituted with the actual data when the comments are displayed. See the FAQs for details.\u003C\u002Fli>\n\u003Cli>\u003Ccode>number\u003C\u002Fcode> – the number of comments to display. Default: 5 comments\u003C\u002Fli>\n\u003Cli>\u003Ccode>date_format\u003C\u002Fcode> – the date and time format to use. Like WordPress, this uses a PHP date format. It defaults to ‘M j, H:i’. See \u003Ca href=\"https:\u002F\u002Fbarn2.com\u002FPHP-Date-Format.pdf\" rel=\"nofollow ugc\">this cheat sheet\u003C\u002Fa> for a full list of date and time options.\u003C\u002Fli>\n\u003Cli>\u003Ccode>avatar_size\u003C\u002Fcode> – the size of the avatar in pixels. Only used if you have included {avatar} in your comment format (see ‘format’ option). Default: 50\u003C\u002Fli>\n\u003Cli>\u003Ccode>post_status\u003C\u002Fcode> – the status of posts to retrieve comments for. Defaults to ‘publish’. Can be a single status or a comma-separated list, or ‘any’ to show comments for all post statuses.\u003C\u002Fli>\n\u003Cli>\u003Ccode>post_type\u003C\u002Fcode> – the post type to retrieve comments for. Accepts a single or multiple post types (e.g. ‘post’ or ‘post, dlp_document’) or ‘any’ to show comments for all post types. Default: ‘any’\u003C\u002Fli>\n\u003Cli>\u003Ccode>excerpts\u003C\u002Fcode> – set to ‘true’ to show an excerpt of the comment (limited to 20 words), or ‘false’ to show the full comment. Default: true\u003C\u002Fli>\n\u003Cli>\u003Ccode>replies\u003C\u002Fcode> – set to ‘true’ to also show responses to comments, or ‘false’ to only see the top level comments. Default: true\u003C\u002Fli>\n\u003C\u002Ful>\n","Provides an improved Recent Comments widget and a shortcode to display your recent comments on any post or page.",2000,66863,17,"2024-03-28T02:06:00.000Z","6.5.8","6.0","7.4",[145,146,147,59,22],"avatar","comments","shortcode","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbetter-recent-comments\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbetter-recent-comments.1.2.0.zip",{"attackSurface":151,"codeSignals":176,"taintFlows":189,"riskAssessment":190,"analyzedAt":196},{"hooks":152,"ajaxHandlers":172,"restRoutes":173,"shortcodes":174,"cronEvents":175,"entryPointCount":28,"unprotectedCount":28},[153,159,163,168],{"type":154,"name":155,"callback":156,"file":157,"line":158},"action","admin_notices","wpml_nag_message","wpml-widgets.php",71,{"type":154,"name":160,"callback":161,"priority":35,"file":157,"line":162},"in_widget_form","widget_dropdown",77,{"type":164,"name":165,"callback":166,"priority":35,"file":157,"line":167},"filter","widget_update_callback","widget_update",80,{"type":164,"name":169,"callback":170,"priority":35,"file":157,"line":171},"widget_display_callback","display_widget",83,[],[],[],[],{"dangerousFunctions":177,"sqlUsage":178,"outputEscaping":180,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":188},[],{"prepared":28,"raw":28,"locations":179},[],{"escaped":181,"rawEcho":181,"locations":182},2,[183,186],{"file":157,"line":184,"context":185},130,"raw output",{"file":157,"line":187,"context":185},131,[],[],{"summary":191,"deductions":192},"The \"wpml-widgets\" plugin v1.0.6 exhibits a seemingly strong security posture based on the provided static analysis and vulnerability history.  The absence of identified AJAX handlers, REST API routes, shortcodes, cron events, dangerous functions, file operations, external HTTP requests, nonces, and capability checks, along with the complete use of prepared statements for SQL queries, are all positive indicators. The lack of recorded vulnerabilities or known CVEs further suggests a history of responsible development or a very low impact profile.\n\nHowever, the static analysis also reveals potential areas for concern. With 50% of output not properly escaped, there's a moderate risk of cross-site scripting (XSS) vulnerabilities if the unescaped output involves user-supplied data. The absence of nonce and capability checks on any potential entry points, although there are currently none identified, means that if new entry points are introduced in the future without proper security measures, they could be immediately exploitable. The lack of taint analysis results is also noteworthy; while it could indicate no critical issues were found, it might also mean the analysis was incomplete or not performed for certain code paths.\n\nIn conclusion, the plugin currently presents a low direct risk due to its minimal attack surface and clean vulnerability history. The primary weakness lies in the incomplete output escaping, which could lead to XSS if the plugin evolves. Developers should prioritize addressing the unescaped output and ensure any future additions to the attack surface include robust nonce and capability checks.",[193],{"reason":194,"points":195},"Unescaped output detected",6,"2026-03-16T17:51:19.562Z",{"wat":198,"direct":203},{"assetPaths":199,"generatorPatterns":200,"scriptPaths":201,"versionParams":202},[],[],[],[],{"cssClasses":204,"htmlComments":205,"htmlAttributes":206,"restEndpoints":207,"jsGlobals":208,"shortcodeOutput":209},[],[],[],[],[],[],{"error":211,"url":212,"statusCode":213,"statusMessage":214,"message":214},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fwpml-widgets\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":195,"versions":216},[217,223,230,237,244,251],{"version":6,"download_url":26,"svn_tag_url":218,"released_at":29,"has_diff":219,"diff_files_changed":220,"diff_lines":29,"trac_diff_url":221,"vulnerabilities":222,"is_current":211},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwpml-widgets\u002Ftags\u002F1.0.6\u002F",false,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwpml-widgets%2Ftags%2F1.0.5&new_path=%2Fwpml-widgets%2Ftags%2F1.0.6",[],{"version":224,"download_url":225,"svn_tag_url":226,"released_at":29,"has_diff":219,"diff_files_changed":227,"diff_lines":29,"trac_diff_url":228,"vulnerabilities":229,"is_current":219},"1.0.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpml-widgets.1.0.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwpml-widgets\u002Ftags\u002F1.0.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwpml-widgets%2Ftags%2F1.0.4&new_path=%2Fwpml-widgets%2Ftags%2F1.0.5",[],{"version":231,"download_url":232,"svn_tag_url":233,"released_at":29,"has_diff":219,"diff_files_changed":234,"diff_lines":29,"trac_diff_url":235,"vulnerabilities":236,"is_current":219},"1.0.4","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpml-widgets.1.0.4.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwpml-widgets\u002Ftags\u002F1.0.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwpml-widgets%2Ftags%2F1.0.3&new_path=%2Fwpml-widgets%2Ftags%2F1.0.4",[],{"version":238,"download_url":239,"svn_tag_url":240,"released_at":29,"has_diff":219,"diff_files_changed":241,"diff_lines":29,"trac_diff_url":242,"vulnerabilities":243,"is_current":219},"1.0.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpml-widgets.1.0.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwpml-widgets\u002Ftags\u002F1.0.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwpml-widgets%2Ftags%2F1.0.2&new_path=%2Fwpml-widgets%2Ftags%2F1.0.3",[],{"version":245,"download_url":246,"svn_tag_url":247,"released_at":29,"has_diff":219,"diff_files_changed":248,"diff_lines":29,"trac_diff_url":249,"vulnerabilities":250,"is_current":219},"1.0.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpml-widgets.1.0.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwpml-widgets\u002Ftags\u002F1.0.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwpml-widgets%2Ftags%2F1.0.1&new_path=%2Fwpml-widgets%2Ftags%2F1.0.2",[],{"version":252,"download_url":253,"svn_tag_url":254,"released_at":29,"has_diff":219,"diff_files_changed":255,"diff_lines":29,"trac_diff_url":29,"vulnerabilities":256,"is_current":219},"1.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpml-widgets.1.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwpml-widgets\u002Ftags\u002F1.0.1\u002F",[],[]]