[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJnsIbv5nW3NBLy4urWahuGV68yUuMECUpAjKfg0qRx4":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":15,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":35,"analysis":131,"fingerprints":295},"xorbin-analog-flash-clock","Xorbin Analog Flash Clock","1.0.2","xorbin","https:\u002F\u002Fprofiles.wordpress.org\u002Fxorbin\u002F","\u003Cp>This plugin displays analog flash clock on your website. It’s easy to use and it’s highly customizable. You can add analog falsh clock to your website as a widget and use as many clocks as you like on one page. Before adding analog clock you can customize it with these parameters:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>select one of the many clock skins (face) we have included or upload your own. You can always check our website for new skins \u003Ca href=\"http:\u002F\u002Fwww.xorbin.com\u002F\" title=\"Widgets for website or blog\" rel=\"nofollow ugc\">www.xorbin.com\u003C\u002Fa>,\u003C\u002Fli>\n\u003Cli>select clockSkin parameter as “-empty-” and use only arrows of the analog clock on your own background, \u003C\u002Fli>\n\u003Cli>change analog clock arrow’s color, size and skin,\u003C\u002Fli>\n\u003Cli>make clock clickable and set your own URL and “_target” parameter,\u003C\u002Fli>\n\u003Cli>set a time zone.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can see DEMO in \u003Ca href=\"http:\u002F\u002Fwww.xorbin.com\u002Fwidgets\u002Fanalog-flash-clock\" title=\"Analog flash clock - Widgets for website or blog\" rel=\"nofollow ugc\">www.xorbin.com\u002Fwidgets\u002Fanalog-flash-clock\u003C\u002Fa>\u003C\u002Fp>\n","Customizable Analog Clock plugin by XorBin.com",80,12683,20,1,"","3.9.40","2.8",[19,20,21,22,23],"analog","clock","clock-widget","flash-clock","widget","http:\u002F\u002Fwww.xorbin.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fxorbin-analog-flash-clock.1.0.2.zip",100,0,null,"2026-03-15T10:48:56.248Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},30,94,"2026-04-04T06:52:02.247Z",[36,57,76,93,114],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":17,"requires_php":15,"tags":50,"homepage":53,"download_link":54,"security_score":55,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":56},"local-time-clock","Local Time Clock","1.3","enclick","https:\u002F\u002Fprofiles.wordpress.org\u002Fenclick\u002F","\u003Cp>Display a clock on your sidebar set automatically to your location’s timezone. Select from a choice of clocks, colors and sizes.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>A wide range of analog and digital clocks. See screenshots tab or designs shown in \u003Ca href=\"http:\u002F\u002Flocaltimes.info\u002Fgetwidget\u002F\" title=\"Clock Widget Designs\" rel=\"nofollow ugc\">localtimes.info\u002Fgetwidget\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Choice of size, colors of text, border and background,\u003C\u002Fli>\n\u003Cli>Automatic adjustment of daylight saving time from the \u003Ca href=\"http:\u002F\u002Flocaltimes.info\" title=\"Local Times round the world\" rel=\"nofollow ugc\">localtimes.info\u003C\u002Fa> servers\u003C\u002Fli>\n\u003Cli>HTML5 responsive plugin, detects device and serves flash, html5, javascript progressively\u003C\u002Fli>\n\u003Cli>Easy addition of multiple clocks\u003C\u002Fli>\n\u003C\u002Ful>\n","Display a clock on your sidebar set automatically to your location's timezone. Select from a choice of clocks, colors and sizes.",1000,116955,62,10,"2024-05-14T16:21:00.000Z","6.5.8",[20,21,22,51,52],"html5-clock","mobile-clock","https:\u002F\u002Flocaltimes.info\u002Fwordpress-clock-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flocal-time-clock.1.3.zip",92,"2026-03-15T15:16:48.613Z",{"slug":58,"name":59,"version":39,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":26,"downloaded":64,"rating":65,"num_ratings":14,"last_updated":66,"tested_up_to":67,"requires_at_least":68,"requires_php":15,"tags":69,"homepage":73,"download_link":74,"security_score":75,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":56},"analog-clock-widget","Analog Clock Widget","mcnika","https:\u002F\u002Fprofiles.wordpress.org\u002Fmcnika\u002F","\u003Cp>Analog Clock Widget plugin allows you to create an unlimited number of different analog clocks. The plugin based on SVG Raphaël – JavaScript Library.\u003C\u002Fp>\n\u003Cp>To be able to add any time zone, you need to have a username in geonames.org.\u003C\u002Fp>\n\u003Cp>Read more on \u003Ca href=\"http:\u002F\u002Fplugins.mcnika.com\u002Fanalog-clock-widget-documentation\u002F\" rel=\"nofollow ugc\">http:\u002F\u002Fplugins.mcnika.com\u002Fanalog-clock-widget-documentation\u002F\u003C\u002Fa>.\u003C\u002Fp>\n","Analog Clock Widget plugin allows you to create an unlimited number of different analog clocks. The plugin based on SVG Raphael - JavaScript Library.",6069,40,"2018-05-24T06:08:00.000Z","4.9.29","4.3",[70,20,21,71,72],"analog-clock","current-time","time","http:\u002F\u002Fplugins.mcnika.com\u002Fanalog-clock-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fanalog-clock-widget.1.3.zip",85,{"slug":77,"name":78,"version":39,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":26,"downloaded":83,"rating":84,"num_ratings":85,"last_updated":86,"tested_up_to":87,"requires_at_least":88,"requires_php":15,"tags":89,"homepage":91,"download_link":92,"security_score":75,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":56},"what-time-is-it","What Time Is It?","Nguyễn Tâm","https:\u002F\u002Fprofiles.wordpress.org\u002Fnguyentam2211\u002F","\u003Cp>What Time Is It is a light-weight plugin to let you create and customize your clocks on your website.\u003C\u002Fp>\n\u003Cp>Main functions:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Local clock\u003C\u002Fli>\n\u003Cli>World clock\u003C\u002Fli>\n\u003Cli>Analog clock\u003C\u002Fli>\n\u003Cli>Digital clock\u003C\u002Fli>\n\u003Cli>Current date\u003C\u002Fli>\n\u003Cli>Multiple widgets\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For normal users:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Select clock template (analog\u002Fdigital)\u003C\u002Fli>\n\u003Cli>Select clock timezone\u003C\u002Fli>\n\u003Cli>Customize clock’s color\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For developers:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Customize every elements with CSS\u003C\u002Fli>\n\u003Cli>Full classes for further customization\u003C\u002Fli>\n\u003Cli>Set color for each element\u003C\u002Fli>\n\u003Cli>Set custom clock’s background image\u003C\u002Fli>\n\u003C\u002Ful>\n","A lightweight plugin to display clock widgets on your website.",6784,60,2,"2015-10-29T13:54:00.000Z","4.3.34","3.8",[70,20,21,90,23],"digital-clock","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwhat-time-is-it\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwhat-time-is-it.1.3.zip",{"slug":94,"name":95,"version":96,"author":97,"author_profile":98,"description":99,"short_description":100,"active_installs":101,"downloaded":102,"rating":103,"num_ratings":104,"last_updated":105,"tested_up_to":106,"requires_at_least":107,"requires_php":108,"tags":109,"homepage":111,"download_link":112,"security_score":75,"vuln_count":14,"unpatched_count":27,"last_vuln_date":113,"fetched_at":56},"coolclock","CoolClock – a Javascript Analog Clock","4.3.7","Rolf Allard van Hagen","https:\u002F\u002Fprofiles.wordpress.org\u002Fravanh\u002F","\u003Cp>This plugin integrates \u003Ca href=\"http:\u002F\u002Frandomibis.com\u002Fcoolclock\u002F\" rel=\"nofollow ugc\">CoolClock – The Javascript Analog Clock\u003C\u002Fa> into your WordPress site. You can add it as a \u003Cstrong>widget\u003C\u002Fstrong> to your sidebar or insert it into your posts and pages with a \u003Cstrong>shortcode\u003C\u002Fstrong>. See \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fcoolclock\u002Ffaq\u002F\" rel=\"ugc\">the FAQ’s\u003C\u002Fa> for available shortcode parameters and how to build the clock into your theme.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Can be added via a widget, shortcode or theme function\u003C\u002Fli>\n\u003Cli>No flash, meaning compatible with tablets and most other javascript enabled mobile devices\u003C\u002Fli>\n\u003Cli>22 different skins to choose from or\u003C\u002Fli>\n\u003Cli>Custom skin option to create your own skin style\u003C\u002Fli>\n\u003Cli>Linear or logarithmic time scale\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Read more on the \u003Ca href=\"https:\u002F\u002Fstatus301.net\u002Fwordpress-plugins\u002Fcoolclock\u002F\" rel=\"nofollow ugc\">CoolClock homepage\u003C\u002Fa> or see \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fcoolclock\u002Ffaq\u002F\" rel=\"ugc\">the FAQ’s\u003C\u002Fa> to learn how to configure your own skin settings.\u003C\u002Fp>\n\u003Ch4>Pro features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Show date or 24h digital time\u003C\u002Fli>\n\u003Cli>Background image or color\u003C\u002Fli>\n\u003Cli>Border radius (rounded corners for background)\u003C\u002Fli>\n\u003Cli>Advanced positioning options (relative to background)\u003C\u002Fli>\n\u003Cli>Advanced shortcode parameters (including background image and custom skin)\u003C\u002Fli>\n\u003Cli>One extra clean skin for use with background image\u003C\u002Fli>\n\u003Cli>Support on the \u003Ca href=\"https:\u002F\u002Fpremium.status301.com\u002Fsupport\u002Fforum\u002Fcoolclock-pro\u002F\" rel=\"nofollow ugc\">CoolClock Pro forum\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Pro features come with the \u003Ca href=\"https:\u002F\u002Fpremium.status301.com\u002Fdownloads\u002Fcoolclock-advanced\u002F\" rel=\"nofollow ugc\">CoolClock – Advanced extension\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Translators\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Dutch\u003C\u002Fstrong> * R.A. van Hagen https:\u002F\u002Fstatus301.net\u002F (version 3.0)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>French\u003C\u002Fstrong> * R.A. van Hagen https:\u002F\u002Fstatus301.net\u002F (version 3.0)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>German\u003C\u002Fstrong> * Manfred Mrak http:\u002F\u002Fwww.niftyfox.ch\u002F (version 3.2)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Serbian\u003C\u002Fstrong> * Borisa Djuraskovic – WebHostingHub http:\u002F\u002Fwww.webhostinghub.com\u002F (version 2.9.4)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Slovenian\u003C\u002Fstrong> * Adijan Dervišević – http:\u002F\u002Fwww.adijan.eu (version 3.2)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Russian\u003C\u002Fstrong> * Наталия Завьялова – http:\u002F\u002Ftime-impressions.ru (version 2.9.8)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Please \u003Ca href=\"https:\u002F\u002Fstatus301.net\u002Fcontact-en\u002F\" rel=\"nofollow ugc\">contact me\u003C\u002Fa> to submit your translation and get mentioned here 🙂\u003C\u002Fp>\n\u003Ch4>Privacy \u002F GDPR\u003C\u002Fh4>\n\u003Cp>This plugin does not collect any user or visitor data nor set browser cookies. Using this plugin should not impact your site privacy policy in any way.\u003C\u002Fp>\n\u003Ch3>Known Issues\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>When IE 8 is manually put or forced (through X-UA-Compatibility meta tag or response header) into Compatibility mode, the Clock will –even though the canvas area is put in place– remain invisible.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>When a shortcode is not placed on its own line but on the same line with text, image or even another shortcode, then the output (div with canvas tag) will be wrapped inside a paragraph tag. While most browsers do not have a problem displaying the clock, this \u003Cem>will\u003C\u002Fem> cause a validation error.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Please report any other issues on the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fcoolclock\" rel=\"ugc\">Support page\u003C\u002Fa>.\u003C\u002Fp>\n","Show an analog clock on your WordPress site sidebar or in post and page content.",2000,87273,98,15,"2023-10-04T17:27:00.000Z","6.3.8","4.8.1","5.6",[70,20,94,110,23],"javascript","https:\u002F\u002Fstatus301.net\u002Fwordpress-plugins\u002Fcoolclock\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcoolclock.zip","2021-08-30 00:00:00",{"slug":115,"name":116,"version":117,"author":118,"author_profile":119,"description":120,"short_description":121,"active_installs":11,"downloaded":122,"rating":26,"num_ratings":14,"last_updated":123,"tested_up_to":124,"requires_at_least":125,"requires_php":15,"tags":126,"homepage":129,"download_link":130,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":56},"wordpress-clock","Live Clock Widget","2.3","Mervin Praison","https:\u002F\u002Fprofiles.wordpress.org\u002Fmervinpraison\u002F","\u003Cp>Live Clock Widget provides a beautiful, modern clock display for your website. Choose between analog and digital styles, customize the size, and display it anywhere using a shortcode or widget.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>🕐 \u003Cstrong>Analog Clock\u003C\u002Fstrong> – Beautiful circular clock with smooth animations\u003C\u002Fli>\n\u003Cli>🔢 \u003Cstrong>Digital Clock\u003C\u002Fstrong> – Modern digital display with date\u003C\u002Fli>\n\u003Cli>📱 \u003Cstrong>Fully Responsive\u003C\u002Fstrong> – Works perfectly on all devices\u003C\u002Fli>\n\u003Cli>🎨 \u003Cstrong>Modern Design\u003C\u002Fstrong> – Gradient backgrounds and smooth animations\u003C\u002Fli>\n\u003Cli>⚡ \u003Cstrong>No Flash\u003C\u002Fstrong> – Pure JavaScript and CSS (Flash removed in v2.0)\u003C\u002Fli>\n\u003Cli>🔒 \u003Cstrong>Secure\u003C\u002Fstrong> – All output properly escaped and sanitized\u003C\u002Fli>\n\u003Cli>🌐 \u003Cstrong>Translation Ready\u003C\u002Fstrong> – Full i18n support\u003C\u002Fli>\n\u003Cli>⚙️ \u003Cstrong>Easy Customization\u003C\u002Fstrong> – Adjustable size and type\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Usage:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Shortcode:\u003C\u002Fstrong> \u003Ccode>[wpclock]\u003C\u002Fcode> – Default analog clock\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcode Options:\u003C\u002Fstrong> \u003Ccode>[wpclock type=\"digital\" size=\"300\"]\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Widget:\u003C\u002Fstrong> Drag and drop from Appearance > Widgets\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PHP Function:\u003C\u002Fstrong> \u003Ccode>\u003C?php echo do_shortcode('[wpclock]'); ?>\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n","Display a modern, responsive analog or digital clock using shortcode or widget. No Flash, pure JavaScript.",10867,"2025-11-10T10:43:00.000Z","6.8.5","4.0",[19,20,127,128,23],"digital","shortcode","https:\u002F\u002Fgithub.com\u002FMervinPraison\u002Fwordpress-clock","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwordpress-clock.2.3.zip",{"attackSurface":132,"codeSignals":148,"taintFlows":280,"riskAssessment":281,"analyzedAt":294},{"hooks":133,"ajaxHandlers":144,"restRoutes":145,"shortcodes":146,"cronEvents":147,"entryPointCount":27,"unprotectedCount":27},[134,140],{"type":135,"name":136,"callback":137,"file":138,"line":139},"action","widgets_init","anonymous","xorbin-analog-flash-clock.php",195,{"type":135,"name":141,"callback":142,"file":138,"line":143},"wp_enqueue_scripts","frontUserHeader",196,[],[],[],[],{"dangerousFunctions":149,"sqlUsage":153,"outputEscaping":155,"fileOperations":27,"externalRequests":27,"nonceChecks":27,"capabilityChecks":27,"bundledLibraries":279},[150],{"fn":151,"file":138,"line":139,"context":152},"create_function","add_action('widgets_init', create_function('', 'return register_widget(\"xorAnalogClockWidget\");'));",{"prepared":27,"raw":27,"locations":154},[],{"escaped":27,"rawEcho":156,"locations":157},74,[158,161,163,165,167,169,171,173,175,177,179,181,183,185,187,189,190,191,193,195,196,197,199,201,202,203,205,207,208,210,211,213,215,216,217,219,221,222,224,225,227,229,230,231,233,235,236,237,239,241,242,243,245,247,248,249,251,253,254,256,258,259,260,262,264,265,267,268,270,272,273,275,276,278],{"file":138,"line":159,"context":160},41,"raw output",{"file":138,"line":162,"context":160},48,{"file":138,"line":164,"context":160},49,{"file":138,"line":166,"context":160},56,{"file":138,"line":168,"context":160},59,{"file":138,"line":170,"context":160},61,{"file":138,"line":172,"context":160},63,{"file":138,"line":174,"context":160},65,{"file":138,"line":176,"context":160},67,{"file":138,"line":178,"context":160},70,{"file":138,"line":180,"context":160},76,{"file":138,"line":182,"context":160},78,{"file":138,"line":184,"context":160},79,{"file":138,"line":186,"context":160},118,{"file":138,"line":188,"context":160},119,{"file":138,"line":188,"context":160},{"file":138,"line":188,"context":160},{"file":138,"line":192,"context":160},121,{"file":138,"line":194,"context":160},122,{"file":138,"line":194,"context":160},{"file":138,"line":194,"context":160},{"file":138,"line":198,"context":160},125,{"file":138,"line":200,"context":160},126,{"file":138,"line":200,"context":160},{"file":138,"line":200,"context":160},{"file":138,"line":204,"context":160},129,{"file":138,"line":206,"context":160},130,{"file":138,"line":206,"context":160},{"file":138,"line":209,"context":160},132,{"file":138,"line":209,"context":160},{"file":138,"line":212,"context":160},136,{"file":138,"line":214,"context":160},137,{"file":138,"line":214,"context":160},{"file":138,"line":214,"context":160},{"file":138,"line":218,"context":160},139,{"file":138,"line":220,"context":160},140,{"file":138,"line":220,"context":160},{"file":138,"line":223,"context":160},143,{"file":138,"line":223,"context":160},{"file":138,"line":226,"context":160},148,{"file":138,"line":228,"context":160},149,{"file":138,"line":228,"context":160},{"file":138,"line":228,"context":160},{"file":138,"line":232,"context":160},151,{"file":138,"line":234,"context":160},152,{"file":138,"line":234,"context":160},{"file":138,"line":234,"context":160},{"file":138,"line":238,"context":160},154,{"file":138,"line":240,"context":160},155,{"file":138,"line":240,"context":160},{"file":138,"line":240,"context":160},{"file":138,"line":244,"context":160},157,{"file":138,"line":246,"context":160},158,{"file":138,"line":246,"context":160},{"file":138,"line":246,"context":160},{"file":138,"line":250,"context":160},160,{"file":138,"line":252,"context":160},161,{"file":138,"line":252,"context":160},{"file":138,"line":255,"context":160},164,{"file":138,"line":257,"context":160},165,{"file":138,"line":257,"context":160},{"file":138,"line":257,"context":160},{"file":138,"line":261,"context":160},167,{"file":138,"line":263,"context":160},168,{"file":138,"line":263,"context":160},{"file":138,"line":266,"context":160},170,{"file":138,"line":266,"context":160},{"file":138,"line":269,"context":160},174,{"file":138,"line":271,"context":160},175,{"file":138,"line":271,"context":160},{"file":138,"line":274,"context":160},177,{"file":138,"line":274,"context":160},{"file":138,"line":277,"context":160},179,{"file":138,"line":277,"context":160},[],[],{"summary":282,"deductions":283},"The xorbin-analog-flash-clock plugin v1.0.2 exhibits a generally good security posture in several areas. It has a very small attack surface with no exposed AJAX handlers, REST API routes, shortcodes, or cron events. Furthermore, all SQL queries are confirmed to use prepared statements, and there are no recorded vulnerabilities or CVEs. This indicates a level of care taken by the developers to avoid common web application vulnerabilities.\n\nHowever, the static analysis reveals significant concerns regarding output escaping. With 74 total outputs and 0% properly escaped, there's a high risk of Cross-Site Scripting (XSS) vulnerabilities. Any user-supplied data displayed by the plugin could potentially be manipulated to execute malicious scripts in the user's browser. Additionally, the presence of the `create_function` call is a dangerous code signal, as it can lead to code injection if not handled with extreme care, although the lack of taint analysis makes it difficult to assess the exact risk here. The absence of nonce and capability checks further amplifies the risk associated with any potential entry points, though currently, none are exposed.\n\nOverall, while the plugin avoids many common pitfalls and has a clean vulnerability history, the critical deficiency in output escaping and the presence of `create_function` represent substantial security weaknesses. The lack of comprehensive taint analysis leaves potential risks unquantified, but the clear output escaping issue is a direct indicator of exploitable vulnerabilities.",[284,286,289,292],{"reason":285,"points":104},"0% of outputs properly escaped",{"reason":287,"points":288},"Dangerous function detected: create_function",8,{"reason":290,"points":291},"0 nonce checks",5,{"reason":293,"points":291},"0 capability checks","2026-03-16T21:23:25.520Z",{"wat":296,"direct":303},{"assetPaths":297,"generatorPatterns":300,"scriptPaths":301,"versionParams":302},[298,299],"\u002Fwp-content\u002Fplugins\u002Fxorbin-analog-flash-clock\u002Fmedia\u002FxorAnalogClock.swf","\u002Fwp-content\u002Fplugins\u002Fxorbin-analog-flash-clock\u002Fmedia\u002FexpressInstall.swf",[],[],[],{"cssClasses":304,"htmlComments":308,"htmlAttributes":309,"restEndpoints":315,"jsGlobals":316,"shortcodeOutput":322},[305,306,307],"xorAnalogClockWidget","xorClockWidget","xorbinLogo",[],[310,311,312,313,314],"id=\"xbAnalogClock-","name=\"xbAnalogClock-","id=\"xorClockWidget\"","class=\"xorClockWidget\"","class=\"xorbinLogo\"",[],[317,318,319,320,321],"xbAnalogClock-","flashvars","params","attributes","swfobject",[323,324],"\u003Cdiv id=\"xbAnalogClock-","\u003Cimg src=\"\u002Fwp-content\u002Fplugins\u002Fxorbin-analog-flash-clock\u002Fmedia\u002Fanalog_clock_by_xorbin.png\" \u002F>"]