{ "ml": { "v": "7", "eng": "2.8.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.06411701, "rte": "az", "prob": 0.06411701 }, { "cls": 0, "raw": 0.010701527, "rte": "az/zip", "prob": 0.010701527 } ], "prob": 0.06411701, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.06411700695753098, "type": "zip" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.00006934007251402363, "type": "php" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000015964111298671924, "type": "text" }, { "id": 289, "lvl": -1, "conf": 0, "prob": 0.000019252300262451172, "type": "php" }, { "id": 290, "lvl": -1, "conf": 0, "prob": 0.000016013780623325147, "type": "php" }, { "id": 291, "lvl": -1, "conf": 0, "prob": 0.000017176071196445264, "type": "php" }, { "id": 292, "lvl": -1, "conf": 0, "prob": 0.000021884838133701123, "type": "php" }, { "id": 294, "lvl": -1, "conf": 0, "prob": 0.00001815954783523921, "type": "php" }, { "id": 295, "lvl": -1, "conf": 0, "prob": 0.00001537799835205078, "type": "php" }, { "id": 296, "lvl": -1, "conf": 0, "prob": 0.000013589859008789062, "type": "php" }, { "id": 297, "lvl": -1, "conf": 0, "prob": 0.000030120214432827197, "type": "php" }, { "id": 298, "lvl": -1, "conf": 0, "prob": 0.000015209118828352075, "type": "php" }, { "id": 299, "lvl": -1, "conf": 0, "prob": 0.0000161131229106104, "type": "php" }, { "id": 300, "lvl": -1, "conf": 0, "prob": 0.000019550323486328125, "type": "php" }, { "id": 301, "lvl": -1, "conf": 0, "prob": 0.0000154872741404688, "type": "php" }, { "id": 302, "lvl": -1, "conf": 0, "prob": 0.00001531839370727539, "type": "php" }, { "id": 303, "lvl": -1, "conf": 0, "prob": 0.00001745422741805669, "type": "php" }, { "id": 304, "lvl": -1, "conf": 0, "prob": 0.000014593203559343237, "type": "php" }, { "id": 306, "lvl": -1, "conf": 0, "prob": 0.00002954403498733882, "type": "javascript" } ], "version": "v18.18", "analyzed_at": "2026-09-08T03:13:26Z" }, "path": "accesspress-social-icons-1.8.2.zip", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([3ig5a000o-E]lmD0000000000000(p003Cqv}x.5Ab]JhB1IDKv}/v/eOOZkzGvEco9kqh0000800\u003eJkqKFuW87c3%0kIIk05T-R0axwEwPI{iA+frkePU\u0026ux\u003c\u003e*fx\u003e870B1Z%iv}x.5Ab]JhB1IDKv}/v/eOL", "ln": 0 }, { "b": "!sz@?Tzd9TW4+0C^()HL{[.vkvme}UxsLLn5HpQfe\u003c-#C^Eb\u0026Ac.vn=]g^MePmU3ro}xB=9CVwfb0}?fr6=%oZ5N\u003cjD(OMxlyoi2N8zzMH.h$vpD/xc!xA%8WqSkX", "ln": 1523961 } ], "mol": "H₆(Cm₈Db₃F₂HfOs₄U₂)", "sha": "a7bde819464b9dea94cecd331297d02b9595b112e2eb80fc24ecfc5630904115", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip", "risk": 10, "size": 1996158, "type": "zip", "facts": { "metrics": { "file": { "size": 1996158, "entropy": 7.99 }, "binary": { "peak_region_bytes": 1961984, "peak_region_entropy": 7.86 }, "archive": { "file_count": 312, "member_count": 334, "script_count": 22, "zip_bomb_ratio": 17.58, "compressed_size": 1935322, "directory_count": 22, "executable_count": 0, "extra_field_size": 0, "noise_file_count": 0, "compression.ratio": 0.44, "hidden_file_count": 0, "uncompressed_size": 4379089, "crc_collision_count": 0, "entry_comment_count": 0, "max_filename_length": 76, "rtlo_filename_count": 0, "format.regular_count": 312, "nested_archive_count": 0, "path_traversal_count": 0, "symlink_escape_count": 0, "security.setgid_count": 0, "security.setuid_count": 0, "security.sticky_count": 0, "double_extension_count": 0, "duplicate_member_count": 0, "format.directory_count": 22, "security.symlink_count": 0, "unicode_filename_count": 0, "homoglyph_filename_count": 0, "security.encrypted_count": 0, "timing.mtime_unique_count": 1, "timing.mtime_unique_ratio": 0, "misplaced_executable_count": 0, "timing.mtime_dominant_count": 334, "timing.mtime_spread_seconds": 0, "timing.sentinel_mtime_count": 0, "security.world_writable_count": 0, "timing.mtime_dominant_fraction": 1, "compression.method_counts.stored": 85, "compression.method_counts.deflate": 249 } } }, "ident": { "name": { "value": "accesspress-social-icons", "source": "source.wordpress.slug", "verified": false }, "title": { "value": "AccessPress Social Icons", "source": "source.wordpress.plugin_name", "verified": false }, "trust": "unsigned", "version": { "value": "1.8.2", "source": "source.wordpress.version", "verified": false } }, "traits": [ { "id": "micro-behaviors/ui/window/manage/style::fixed-viewport-style", "conf": 0.9, "crit": 3, "desc": "Fixed CSS element spans viewport", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/request/params::http-request-server-variable", "conf": 0.8, "crit": 3, "desc": "Reads PHP HTTP request server variable" }, { "id": "micro-behaviors/communications/http/request/cgi::request-uri-server-var", "conf": 0.85, "crit": 3, "desc": "Names the CGI REQUEST_URI variable", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/post::html-form-post-method", "atk": "T1071.001", "mbc": "C0002", "conf": 0.96, "crit": 3, "desc": "HTML form declares the POST method", "from": [ { "file": 289 } ] }, { "id": "metadata/package/files/ecosystem::wordpress-plugin-text-domain", "conf": 0.95, "crit": 2, "desc": "WordPress plugin text domain", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/path/construct::realpath-call", "conf": 0.9, "crit": 3, "desc": "Resolves canonical filesystem path", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/client/resource::external-iframe-element-load", "conf": 0.92, "crit": 3, "desc": "Loads external iframe content", "from": [ { "file": 298 } ] }, { "id": "micro-behaviors/data/serialize/json::php-json-encode", "conf": 0.86, "crit": 3, "desc": "PHP JSON serialization", "from": [ { "file": 1 } ] }, { "id": "metadata/library/web-frameworks::wordpress-core-api-symbols--lowercase", "conf": 0.9, "crit": 1, "desc": "WordPress lowercase API symbol prefix", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/request/params::wordpress-nonce-parameter", "conf": 0.94, "crit": 3, "desc": "Handles a WordPress nonce parameter", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/ui/window/manage/dom::dom-click-call", "conf": 0.82, "crit": 3, "desc": "Calls click() on a DOM element", "from": [ { "file": 306 } ] }, { "id": "micro-behaviors/data/serialize/object::serialize-symbol", "conf": 0.7, "crit": 3, "desc": "References PHP serialize() or a serialize method", "from": [ { "file": 300 } ] }, { "id": "metadata/library/web-frameworks::wordpress-plugin-dir-constants", "conf": 0.9, "crit": 2, "desc": "WordPress plugin directory constants", "from": [ { "file": 1 } ], "uses": [ 30 ] }, { "id": "micro-behaviors/os/security/runtime::wordpress-nonce-verification", "conf": 0.9, "crit": 3, "desc": "Verifies a WordPress request nonce", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/serialize/object::unserialize", "atk": "T1059", "mbc": "E1059", "conf": 0.65, "crit": 3, "desc": "PHP object deserialization call", "from": [ { "file": 292 } ] }, { "id": "micro-behaviors/fs/directory/traverse::php-dir-traverse-fn", "atk": "T1083", "conf": 1.0, "crit": 2, "desc": "Enumerates directories with PHP functions", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/env/access::php-server-superglobal", "conf": 0.85, "crit": 3, "desc": "Reads PHP $_SERVER execution environment data", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/security/auth/password::php-secret-literal-comparison", "conf": 0.94, "crit": 3, "desc": "PHP secret variable compared to literal", "from": [ { "file": 300 } ] }, { "id": "micro-behaviors/communications/http/response::wordpress-admin-redirect", "mbc": "C0002", "conf": 0.92, "crit": 3, "desc": "Redirects to WordPress admin URL", "from": [ { "file": 290 } ] }, { "id": "micro-behaviors/data/string/concat::dense-string-fragment-concatenation", "conf": 0.9, "crit": 3, "desc": "Dense concatenated string fragments", "from": [ { "file": 306 } ] }, { "id": "micro-behaviors/communications/http/request/json::dynamic-link-attribute-assignment", "conf": 0.9, "crit": 3, "desc": "Assigns a URL into a link attribute", "from": [ { "file": 306 } ] }, { "id": "micro-behaviors/communications/http/request/cgi::server-name-server-var", "conf": 0.85, "crit": 3, "desc": "Names the CGI SERVER_NAME variable", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/hardware/input/event::on-keyboard-event-handler", "conf": 0.92, "crit": 3, "desc": "Registers keyboard event handler with on()", "from": [ { "file": 306 } ] }, { "id": "micro-behaviors/communications/http/response::wordpress-redirect", "mbc": "C0002", "conf": 0.92, "crit": 3, "desc": "Sends a WordPress HTTP redirect", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/io/buffer::ob-get-contents", "conf": 0.6, "crit": 2, "desc": "Gets output buffer contents", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Code embeds cleartext HTTP URL literal", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/io/buffer::ob-get-clean", "conf": 0.6, "crit": 2, "desc": "Gets and cleans output buffer", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/request/params::post-dup", "conf": 0.85, "crit": 3, "desc": "Reads PHP form parameters via $_POST", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/ecosystem::wordpress-plugin-header-name", "conf": 0.95, "crit": 2, "desc": "WordPress plugin header name", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/request/params::server-name", "conf": 0.8, "crit": 3, "desc": "Reads PHP SERVER_NAME request variable", "from": [ { "file": 1 } ] }, { "id": "metadata/library/web-frameworks::wordpress-plugin-dir-constants--abspath", "conf": 0.9, "crit": 2, "desc": "WordPress plugin directory constants (ABSPATH)", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/stdio::php-echo-statement", "conf": 0.95, "crit": 3, "desc": "Emits data with a PHP echo statement" }, { "id": "micro-behaviors/fs/directory/readdir::php-opendir", "conf": 1.0, "crit": 3, "desc": "Opens directory with PHP opendir", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/io/buffer::ob-start", "conf": 0.7, "crit": 2, "desc": "Starts output buffering", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/request/client::jquery-ajax-call", "atk": "T1071.001", "mbc": "C0002", "conf": 0.82, "crit": 3, "desc": "Calls jQuery.ajax() to send an HTTP request", "from": [ { "file": 306 } ] }, { "id": "micro-behaviors/communications/http/request/params::get-dup", "conf": 0.85, "crit": 3, "desc": "Reads PHP query parameters via $_GET", "from": [ { "file": 1 } ] } ] }, { "ctx": [ { "b": "ju)^#A3eX5w[=c]wge/\u003elq{YDr7Fw=aA8oywnbQ6b2i50B7ol8Ac9jrx\u003eg:*wPF#ky?m3@wG-lDi$hJIdK\u003e(masXHgy\u0026%x8zxIX.zdL:Jl1szoB8$e#wPI]nq/ueWvqE5Tv@Dma4gjjcaw=(%xk8larz(yHazt\u003esAc15[fjwv2wPI{iA+frkBzbl5wPGFlz/4dKz/PxcA+frkePtJGxk8m8fjwv2wPI{iA+frkePU\u0026ux\u003c\u003e*fx\u003e870B1W$fasXH4wD", "ln": 0, "col": 1, "line": 1 }, { "b": "v@DmaazCZoD2E?CaAImswGVhgwPzv9wPw]sz/)gDvqZffwo\u002663ze0G*y\u00261wtCwhejazth3wm/$2aA7\u003cmv@Dl%x\u003eINevpB4:aAIaoBzkS9B1N[easXHmwPz\u003caz/dPUf!LBrg7sNkdJ?31BzbPkiZEm=wPI]?A+frkaxi2=zdN+$3lQ/vl3mo.z/M$2qB@].BAzE.fe3:zv}x.5Ab]JhB988bzdN=vv@Diq4gjjcaxh]%BrA$\u0026zddc@iV}\u003cvv}x.5Ab]JhB1IDKv}/v/eOOZkzGul]asXH4z/5]%zxI+:Bz9YTfkL6mxlvS}wPGHl3lQ/voLF0FzGxwIm]h)5g9yHQaz+FdwPwj!asXG-fawmwdK\u003e(masXHiwOkZ#By/Fnz!pbox\u003eg\u003c/BAm(#asXG", "ln": 240, "col": 41, "line": 5 }, { "b": "zEWH9wmYa^zEWlacUWEdfjFv1yH}x]fl.bvxjVgae]UGycN?a^3tB8{c)r8pvrlG%wQ4{gBAn\u0026Tk#pG!lU{gLB0\u0026y=aBsL84gjj2arUfgvrlGjk#pG!lU{gLB0b/s3i", "ln": 564, "col": 2, "line": 16 }, { "b": "3lQDlarR^Hazb+lv@#B6zxJp[v@DmaBAhIlBsnNXDKQr8arR^HarR^HarR^LBzbxfeK0YRw[=c]uT[1(B97\u0026dBAn\u0026Vi$hJtarR^HarR^HarR!EwOkZ#By/G1vpKy[C42Gbz/e]}z/oztuTDn]oHSq}efFwwA::kwbY)ZlB1wBYAboVfx(mo^v@#Bdvruj4zyl\u003eZj0lgfv{%g\u0026B0bBrB.tAaayO=4x)9{bx(v(iw{503BzkVh4gjj2arR^HarR^HarU96wm5+PBzkVh", "ln": 747, "col": 15, "line": 22 }, { "b": "x(+*FcVA)Axk8l\u003cBy/YsuU17(vqfQbdjEt3fe4cWvpTB4By/Ysay]zcvqfQ4w]zYjBAg/cB8kobx(v(iA+eV\u0026C)$96arR^HarR^HarR!nwmP4Qv@#B6zyu(RA9)f]ADL\u0026nwNxH*A+PGmB0\u0026HYvrcx%C{\u003c}WxLzJsaszhvxk8BewPzc\u0026A=k\u0026qwO#2", "ln": 981, "col": 41, "line": 26 }, { "b": "xLzJsaszhvxk8BewPzc^wnM3#uTX1%wPR#vdjEt3fe4uSxk8BewPz\u0026mvqG:5BzbkdvrlH3BAnNBwPq\u003cbA+e=7w]zYjCw]cxwnM3#4gjj2arR^HarR^HarU96wm5+PBzkVhc)@Clze0({AbP/tuTW[{uTWFQuV6C0uVP!2cOcxGA=LPlc)S[Fx(+*", "ln": 1328, "col": 57, "line": 29 }, { "b": "x(mo\u0026z/o-eA:J{1CYUtRbY)QxBrA2V4gjj2arR^HarR^HarR^Ly?W^5auZ?{xMOunB2\u003e%cCw?IjAb]JhB1RxKxd[sGAbY-oBt4PHB.tAafjwv2wPI{iA+frkePU\u0026ux\u003c\u003e*fx\u003e870B1.MBC4\u003eJiB1X+QwP].Bz/Z1Fi$hJtarR^HarR^HarR^HbYE^xuU\u003cB]yAL+.cUNQzAc15[fjwv2wPI{iA+frkBzbl5wPGFlz/4dKz/PxcA+frkePtJGxk8m8fjwv2wPI{iA+frkePU\u0026ux\u003c\u003e*fx\u003e870B1IuKz.AF14gjj2arR^HarR^HarUxgc#0:zwPPsybWT5gr9HE)Aa9x\u003ccM(XqdjGPM3lQDlarR^HarR^HazCBobWT5gr9HE)Aa9x\u003ccM(XqjV%]nvq{otB8LM5vqEJ7wmN5gE0^4ZuQ)K:toCqjvp%d0ayc9MjS(aXAc0QLz!0G\u0026y:QuMD\u003c{A9arR^HarR^HarR^LuQ)K:toCqjve", "ln": 2959, "col": 21, "line": 48 }, { "b": "cM(XqdiG@:as7q:mo0FlcVAHbwHwQaau.\u003egcT*$neO5^fy?W^5B0\u00267VaBsL8arR^HarR^HarR^HarR^HCw{]fwN]H}wN/*gasy\u0026ABz#pZfe3:zv}x.5Ab]JhB988bzdN=vv@Diqwn+$2zdNQbvruj4zzbBdv}x.5Ab]JhB1IDKv}/v/eOOZkzGvDUasPwY3lQDlarR^HarR^HarR^Haz2!iBsnO14gjj2arR^HarR^HarV7w3lQDlarR^HarR^HazCBgc)ikBB7GCwas7q:mo0FlcVAHbwHwQaasOAWclKNvm[3w", "ln": 3931, "col": 37, "line": 62 }, { "b": "arR^LzE[30y?W^5B09Q*vrcx%C{\u003caearR^HarR^HarR^HarR^HarR^HcUc!9zZMU\u003cj%hjnvixl7wOa7HxMOuniXJc%wO(urvpJ!UB8#qvwPI{mxK#3(B1Q%vz7*9KA+6cfwPI]AAboVfx(m#BvpJ!UB8#qvwPI]AB8LM5vqEJfv@Dmaa%p#oA+w%9jTalxy*?i%b0FbgAa9Sbv@bN{B3gZTvrl9@v@Dmaay[]4xLy%{zGvyNwO+\u003c{zdLqxx\u003eqGuB7]-cb0FaxB8UM9k1]WlwGTxLzeRJ\u0026vlM4\u00264gjj2arR^HarR^HarR^HarR^HarS4xz^$dqjW6#ojyGvC", "ln": 4516, "col": 14, "line": 74 }, { "b": "l#MNTzdNQbvruj4zAGNXj%}(\u003c3lQDlarR^HarR^HarR^HarR^HaszkMAbY-oBseg]j%hjnvixl7wOa7HxMOuniXJc{v}f7\u003eB8VehB8#CpwO(11e[n*pflqnPAbP=sa%p#oA+w%9jTalxy*?i%b0FbgAa9Sbv@bN{B3gZTvrl9@v@Dmaay[]4xLy%{zGvyrwnM3#eP(bCA=SA*jtg+{vqXncB-qqrA=:z%vlM4\u00264gjj2arR^HarR^HarR^HarR^HarS4JA=irFjW6#ojyGvCA+e\u0026Cb4#7u", "ln": 4932, "col": 183, "line": 76 }, { "b": "A3)7@4gjj2arR^HarV7w3lQDlarR^Hatkx*wOkZ#By/GlayP85aARpdazL%uvqYP#v@(Ylx(k5qA4LHeze0\u003e%3lQDlarR^Hazb+lv@#B6zxJ$hxk8BewPzc^wnM3#uTX1%wPR#wdiJ%D3lQDlarR^HarR^HaA}^iwO#HgwP.M\u003ezdNl(vjiM^4gjj2arR^HarR^HarSr\u003cx(mA%B.2i7xcqqfwGV57A+PGmB0bgmaARpdaAhdtxk8m8aAg+4wPF#jzFTOc3lQDlarR^HarR^HazCBgc#0:zwPPsCuQ)K:tl", "ln": 9068, "col": 53, "line": 160 }, { "b": "vqoj}e]UGycObYlarR^HarR^HarR^HarR^HarR^HcT*:#CWCubzEWl9au.[hCw{]0A+eW3wNxs[zEWlacT*$neN-y5CR9/KzEWl9dj+]narR^HarR^HarR^HarR^HarR^HcUW7ezEmP@A=bPexd1/+j%jitc)}r3wGVnpBS+:FA+cwsz/)gDvqZffBz\u0026pjx(^=)A+3o", "ln": 10238, "col": 56, "line": 173 }, { "b": "wO#33lSl[)3lQDlarR^HarR^HarR^HarScRdLzkrarR^HarR^HarR^HarR^HCw{]2zGf/gB.a{3BA}Xlc)@CxB1H*hze0(tv@(YsefEkPq^R)\u003cq^R{:qxNOmcOF}qv@2T[wg?wkB0\u0026IJvqH0@ej09huSGP[q+o+WdlwU9flgSpx(!xcA+PA7aAhdtxk8lavpTj?zxJCg", "ln": 10674, "col": 24, "line": 179 }, { "b": "yH}x]awbMw3lQDlarR^HarR^HarR^HarScRdLzkrarR^HarR^HarR^HarR^HCw{]2zGf/gB.a{3v@=p5BsnINwN]H-eP(2Gz^^f7dlwU9fj]cyaA.Ttz^^f\u003czF78azdd6*aA.:tzF78oA3f4bBzk]faA.Ttz^^f/AT-u#arR^HarR^HarR^HarR!JA9)f]ADL\u0026nwNxH*AS", "ln": 11170, "col": 23, "line": 186 }, { "b": "flgSpx(!xcA+PA7aAhdtxk8lhB0a[4ze0(gyi6*\u003earR^HarR^HarR^HarR^HCw{]9z!0i(x)Kt$B7ol8Ac9GQvq{otvpTj?zy]QAcOcw/vq{o{B7ol8AcbDgvrc6\u003cvR/Q6efDiDAc2xcv@=p5Byfi1A+O@\u003ey?k4Satkx:z!0i(x)Kifx(v(iz!pbhxMb8qvrc6\u003cvR/P#x(i", "ln": 11556, "col": 150, "line": 190 }, { "b": "vHSU!arR^HarR!sB-7Yhx(v(ivq{o{vpS[QzE[30B7GCwdiJ%D3lQDlarR^HarR^HazCBgc#0:zwPPsCuR\u003cJ%r9H.UAc2w{wmP4*wPRo%z/f5@cTwnCbWTwzq=D%Gvq{o{x\u003e870uVP!2uVQv0ze18tt}3)yclNIKuV{13x\u003ezS$zF%A5wHF*hp!$1?tpi\u0026#B6\u0026u^wm6y?Bye{7zEWl9t}v9Cvq{o{vpS[QzE[30B7GCvdjDx^4gjj2arR^HarR^HarR^HarUxov@co#wNxv[v}v5ox(mAlvQS+ZwO#3iB76l6ePUGBe]UGycN?a^3lQDlarR^HarR^HaBLwzyY", "ln": 12424, "col": 38, "line": 209 }, { "b": "Ab]Ijw]zZbvrq}=arR^HarR^Hw{503BzkVhaAhvnzGGk]A=LPlc)SkwA::kxaBsL8arR^HarR^HarR^HwN/y(ar\u0026{!A+dAUi$hJtarR^HarR^HarR!CA+PAkuVELuvrcx%C{$/:3lQDlarR^HarR^Haz24@zY*k^fk$@yj%A5$3lQDlarR^HaBKXa4gjj2arR^HarSr\u003cnN(WRaAIaoay]51wPRGaB7F\u003c6x(v\u003e#3lQDlarR^Hazb+lv@#B6zxJwbB6\u0026D?y?mZ1uTWC^x(v(qdiJ%D3lQDlarR^HarR^HazCBgc#0:zwPPsCuQ)K:tpi\u0026?BzkVhcTwnCbWT5gr9H.SCw}CrzEWl9t}3)yclNIKuV{13x\u003ezS$zF%A5wHF*hm[3xYcTR7pzF%A5wHy+masyPpB1H{ly?mZ1ePbGAv}v2pdiJ%D3lQDlarR^HarR^HarR^HazC.6y\u0026%o1uVf*(wHF{uzEUtevpK7:zE+zhwO+}1wI4Raz/ddFwPPLzxMbs", "ln": 12808, "col": 31, "line": 218 }, { "b": "ayPkguVQc}x\u003c\u003e*+B7/GjByPl1wHF*jBAzNMaBsL8arR^HarR^HarR^HarR^Hz^)6{Byxiic[dj!3lQDlarR^HarR^HarR^HazC.6y\u0026%o1c)@.Dv\u003eRCmz/fVdzE+zwxM4{kv@C)?e]UGycN?a^3lQDlarR^HarR^HarR^Has7SxzepsTaA7Z@xjVf(v@DmbwO#Qhc[dj!3lQDlarR^HarR^HarR^HaA7Z@xjVf(v@bZ+zyu}}4gjj2arR^HarR^HarR^HarUYoBAIRwas7Sxzeqoy3lQDlarR^HaBKXa4gjj2arR^HarSr\u003cy?W%jB0bNrwGUA8vqfK^vR/P#x\u003e870A$5E0arR^HarR!sBP", "ln": 14103, "col": 17, "line": 252 }, { "b": "arR^HarR^HarR^HarR^HauTgGB%7phvrlGMb4kCiePUGBeQ8kzAbYxea%pPgjTarNB1IDABs/QtAa\u003chkwN/y(az2R7uTX4#AWShEdlwUpj%Af13lQDlarR^HarR^HarR^HarR^HarR^HauTr[k2V3mauR(cxMb89v}Y^6wPIu*vruQic)SHQj0l:Kjtgw7j}d\u0026warR^HarR^HarR^HarR^HarR^HarR^?wncifv@bN{B3gZQAc0QKz*9x?4gjj2arR^HarR^HarR^HarR^HarR^HarR^HarS^hAa\u003ch13lQDlarR^HarR^HarR^HarR^HarR^HarR^Has7SezE^M{auZ\u0026=AaJ]$x(URjx(X91zdLbowNPy]vrufhuTDn]oHSq}djDw(asw*Rv@DlpB7GDmfk$/wflpYDcM\u003e2:bXXX?4gjj2arR^HarR^HarR^HarR^HarR^HarR^HarU(wx(4u6c)Szsy?j.LaAz44wmPy{c)SFmzE^M{djDx^4gjj2arR^HarR^HarR^HarR^HarR^HarR^HarR^HarR}wx(4u#vqPN.vrcx%C{2l)wQ5fgz!9AccOu+$as7Mky?k4S4gjj2arR^HarR^HarR^HarR^HarR^HarR^HarR^HarR}wx(4u#vqPM#jP", "ln": 14683, "col": 4, "line": 267 }, { "b": "arR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HjzwUBaAINkjT90MAa\u003chkwN/y(az2R7uTX4#AWS4@p/yZ)lR*DQuQNE-asOA=asw*YzF7RzwPPpxe*8ANata=:fdd\u003e{as7Mky?kWJkrZnlvqH3Gb0n8exMb89v}Y^6wPIu*vruQic)Szsy?mG)zdLdTau@4laARsty?k:Nju)^#A3e.4xM228B7nM=BAzKKbXy+bwO${[wHPX-krZnAj}d\u0026warR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^?B8UM9ay/j@B8%F*vq{otB7GCBx(do\u003ewI51r", "ln": 16174, "col": 1, "line": 290 }, { "b": "C{=(XjTUI^B0\u0026yC3lQDlarR^HarR^HarR^HarR^HaBsL8arR^HarR^HarR^HarR^HarR^HarR^HwnbQ6yiarhuUaa+z!9AcbX.a7xjUB)A+]8\u003eA=LPldjEs/3lQDlarR^HarR^HarR^HarR^HaBKXaarR^HarR^HarR^HarR^HEglJaarR^HarR^HarR!Paz2wgwGVse3lQDlarR^HarR^HarR^Hay]g$c)}=daAI4kx(FepyIvr\u0026x\u003equdAbo7", "ln": 18941, "col": 39, "line": 349 }, { "b": "rz(HsdiJ%D3lQDlarR^HarR^Has7]mxjU7voDVFvcUNQzA3)ZR3lQDlarR^HarR^HazCBgc#0:zwPPsCuSfx\u003erZ/[\u003ccRdiop/w-EdiG@:as7q)mn^ePqD\u003eItr8=W)cTv\u0026TjS(a\u003czyl\u003eQDKQr8arR^HarR^HarR^HarR^LAa9x\u003crz(Hke\u003cgs3B0rWP3lQDlarR^HarR^HaBKXaarR^HarR^HarR^HbYEg8wMqS4atb/1b04wgb0ckvarR^", "ln": 19403, "col": 25, "line": 366 }, { "b": "bWTFsqDuj:toW0mqDuj:uR\u003cJ@r3CP\u003caW3}(i4#K9aBsL8arR^HarR^HarR^HarR^HbYEg8wMqS4atb/1bWTFsqDuj:toW0mqDuj:uRS)YmiV1We*8u0a%nGXbWTFsqDuj:toW0mqDuj:uR\u003cJ@r3CP\u003ce*8ADq:\u003cO+mn^tlqBKC.mn)e)rz(yjt@@G5arR^HarR^HarR^HEir9qB7DFv4gjj2arR^HarR^HarR^HarR}Gvp%dKqCnh=jS(1Sq:\u003cO+mn^tlq:\u003cO+mn^F/k$%=(t{7:xbWTFsqDuj:toV%lqb{4-r9@T6nG}C44gjj2arR^HarR^HarV7w3lQDlarR^Hao", "ln": 19615, "col": 17, "line": 372 }, { "b": "3lQDlatkxlp/yZ*y*?yaaARgnze0(@BzkVh4gjj2arR}rAc2x8vRPE:BrAZ?zE[2mk#pG!lU{gLB0@F04gmIpfcB+vvrlGjwQ4{gBAnNmz/f91BzkVhay/7@v}#IX", "ln": 21340, "col": 7, "line": 432 } ], "depth": 1, "facts": { "imp": [ [ "", "defined" ], [ "", "die" ], [ "", "class_exists" ], [ "", "register_activation_hook" ], [ "", "add_action" ], [ "", "add_action" ], [ "", "add_action" ], [ "", "add_action" ], [ "", "add_action" ], [ "", "add_action" ], [ "", "add_action" ], [ "", "add_action" ], [ "", "add_shortcode" ], [ "", "add_action" ], [ "", "add_action" ], [ "", "add_action" ], [ "", "add_action" ], [ "", "add_action" ], [ "", "add_filter" ], [ "", "add_action" ], [ "", "add_filter" ], [ "", "add_filter" ], [ "", "isset" ], [ "", "isset" ], [ "", "wp_redirect" ], [ "", "isset" ], [ "", "wp_redirect" ], [ "", "strpos" ], [ "", "array_merge" ], [ "", "defined" ], [ "", "define" ], [ "", "plugin_dir_url" ], [ "", "defined" ], [ "", "define" ], [ "", "plugin_dir_url" ], [ "", "defined" ], [ "", "define" ], [ "", "plugin_dir_url" ], [ "", "defined" ], [ "", "define" ], [ "", "plugin_dir_url" ], [ "", "defined" ], [ "", "define" ], [ "", "apply_filters" ], [ "", "plugin_dir_url" ], [ "", "defined" ], [ "", "define" ], [ "", "basename" ], [ "", "dirname" ], [ "", "defined" ], [ "", "define" ], [ "", "load_plugin_textdomain" ], [ "", "add_menu_page" ], [ "", "add_submenu_page" ], [ "", "add_submenu_page" ], [ "", "add_submenu_page" ], [ "", "add_submenu_page" ], [ "", "add_submenu_page" ], [ "", "add_submenu_page" ], [ "", "wp_enqueue_media" ], [ "", "isset" ], [ "", "admin_url" ], [ "", "wp_create_nonce" ], [ "", "wp_enqueue_style" ], [ "", "wp_enqueue_style" ], [ "", "wp_enqueue_style" ], [ "", "wp_enqueue_style" ], [ "", "wp_enqueue_script" ], [ "", "wp_enqueue_script" ], [ "", "wp_enqueue_script" ], [ "", "wp_localize_script" ], [ "", "wp_enqueue_style" ], [ "", "wp_enqueue_style" ], [ "", "wp_enqueue_script" ], [ "", "isset" ], [ "", "wp_verify_nonce" ], [ "", "die" ], [ "", "print_r" ], [ "", "isset" ], [ "", "wp_verify_nonce" ], [ "", "die" ], [ "", "isset" ], [ "", "wp_verify_nonce" ], [ "", "die" ], [ "", "isset" ], [ "", "wp_verify_nonce" ], [ "", "die" ], [ "", "ob_start" ], [ "", "ob_get_contents" ], [ "", "ob_get_clean" ], [ "", "wp_verify_nonce" ], [ "", "plugin_dir_path" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "opendir" ], [ "", "dirname" ], [ "", "realpath" ], [ "", "readdir" ], [ "", "explode" ], [ "", "ucfirst" ], [ "", "end" ], [ "", "count" ], [ "", "natsort" ], [ "", "explode" ], [ "", "ucfirst" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "die" ], [ "", "die" ], [ "", "wp_verify_nonce" ], [ "", "plugin_dir_path" ], [ "", "sanitize_text_field" ], [ "", "sanitize_text_field" ], [ "", "opendir" ], [ "", "dirname" ], [ "", "realpath" ], [ "", "readdir" ], [ "", "explode" ], [ "", "ucfirst" ], [ "", "end" ], [ "", "count" ], [ "", "natsort" ], [ "", "explode" ], [ "", "ucfirst" ], [ "", "die" ], [ "", "json_encode" ], [ "", "die" ], [ "", "die" ], [ "", "die" ], [ "", "isset" ], [ "", "register_widget" ], [ "", "strpos" ], [ "", "explode" ] ], "mbr": [ "$_GET._wpnonce", "$_GET.action", "$_GET.page", "$_POST._wpnonce", "$_POST.aps_add_set_nonce", "$_POST.aps_edit_set_nonce", "$_POST.aps_icon_set_submit", "$_POST.folder", "$_POST.sub_folder", "$_POST.url_only", "$_SERVER.HTTPS", "$icon.link" ], "tgt": [ "$this", "__", "add_action", "add_filter", "add_menu_page", "add_shortcode", "add_submenu_page", "admin_url", "apply_filters", "array_merge", "basename", "class_exists", "count", "define", "defined", "die", "dirname", "end", "esc_attr", "explode", "isset", "json_encode", "load_plugin_textdomain", "natsort", "ob_get_clean", "ob_get_contents", "ob_start", "opendir", "plugin_dir_path", "plugin_dir_url", "print_r", "readdir", "realpath", "register_activation_hook", "register_widget", "sanitize_text_field", "strpos", "ucfirst", "wp_create_nonce", "wp_enqueue_media", "wp_enqueue_script", "wp_enqueue_style", "wp_localize_script", "wp_redirect", "wp_verify_nonce" ], "funcs": [ [ "__construct", 756 ], [ "admin_footer_text", 2947 ], [ "redirect_to_site", 3865 ], [ "plugin_row_meta", 4379 ], [ "define_constants", 5662 ], [ "plugin_activation", 7043 ], [ "plugin_text_domain", 7197 ], [ "add_aps_menu", 7377 ], [ "main_page", 8850 ], [ "add_new_set", 8990 ], [ "register_admin_assets", 9145 ], [ "register_frontend_assets", 11818 ], [ "aps_add_new_set", 12435 ], [ "print_array", 12828 ], [ "aps_delete_action", 13001 ], [ "aps_copy_action", 13359 ], [ "aps_edit_action", 13712 ], [ "aps_social_shortcode", 14095 ], [ "aps_icon_list_action", 14386 ], [ "get_theme_icons", 17124 ], [ "no_permission", 19251 ], [ "curPageURL", 19387 ], [ "register_aps_widget", 19967 ], [ "get_total_display_icons", 20118 ], [ "about", 20452 ], [ "how_to_use", 20579 ], [ "check_url", 20838 ] ], "metrics": { "ast": { "op.eq": 17, "op.gt": 2, "op.le": 1, "op.ne": 9, "op.lor": 10, "op.land": 12, "op.lnot": 7, "max_depth": 24, "op.concat": 43, "call_count": 157, "node_count": 4742, "member_count": 12, "max_array_len": 11, "op_density.eq": 0, "op_density.gt": 0, "op_density.le": 0, "op_density.ne": 0, "op_density.lor": 0, "op_density.land": 0, "op_density.lnot": 0, "member_depth_max": 2, "op_density.concat": 0.01 }, "file": { "size": 21440, "entropy": 4.54 }, "text": { "lines": 435, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0, "space_count": 6681, "char_entropy": 4.54, "unique_chars": 89, "top_char_null": 0, "lines_over_200": 8, "string_density": 0.69, "top_char_ratio": 0.05, "avg_line_length": 47.29, "max_line_length": 310, "non_ascii_ratio": 0, "empty_line_ratio": 0.09, "last_line_length": 32, "whitespace_ratio": 0.35, "identifier_density": 1.35, "line_length_stddev": 46, "normalized_string_count": 14.34, "repeated_char_sequences": 276, "suspicious_string_ratio": 0, "suspicious_comment_ratio": 0.03, "suspicious_identifier_ratio": 0.01, "normalized_unique_identifiers": 16.77 }, "binds": { "count": 36 }, "binary": { "peak_region_bytes": 11264, "peak_region_entropy": 4.92 }, "source": { "class_count": 1, "function_count": 27 }, "strings": { "sql": 1, "bytes": 5159, "count": 299, "url_count": 4, "avg_length": 17.25, "max_length": 175, "path_count": 13, "avg_entropy": 2.92, "empty_count": 1, "entropy_stddev": 0.93 }, "comments": { "chars": 2933, "count": 64, "lines": 108, "base64": 1, "high_entropy": 1, "to_code_ratio": 0.33, "url_in_comments": 1 }, "functions": { "count": 28, "density": 6.21, "avg_params": 0.26, "code_ratio": 0.8, "max_params": 2, "length_stddev": 12.92, "avg_name_length": 14.96, "no_params_count": 21, "avg_length_lines": 12.89, "max_length_lines": 49, "min_length_lines": 3, "high_entropy_names": 4, "avg_param_name_length": 6.14 }, "identifiers": { "count": 586, "unique": 147, "avg_length": 10.65, "max_length": 24, "min_length": 1, "avg_entropy": 2.83, "reuse_ratio": 0.25, "length_stddev": 5.25, "sequential_names": 1, "single_char_count": 1, "single_char_ratio": 0.01, "high_entropy_count": 12, "high_entropy_ratio": 0.08, "all_lowercase_ratio": 0.68, "all_uppercase_ratio": 0.07, "double_underscore_count": 1, "underscore_prefix_count": 6 } } }, "id": 1, "ident": { "name": { "value": "accesspress-social-icons", "source": "source.wordpress.text_domain", "verified": false }, "title": { "value": "AccessPress Social Icons", "source": "source.wordpress.plugin_name", "verified": false }, "trust": "unsigned", "version": { "value": "1.8.2", "source": "source.wordpress.version", "verified": false } }, "mol": "H₄(Cm₄DbF₂Os₃)", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/accesspress-social-icons.php", "pid": 0, "risk": 7, "sha": "43a5a97af9bff91a9c35325267ae74642fa9dab5b417f8fbf62e764f882402e2", "size": 21440, "traits": [ { "id": "metadata/library/web-frameworks::wordpress-core-api-symbols--lowercase", "conf": 0.9, "crit": 1, "desc": "WordPress lowercase API symbol prefix", "spans": [ [ 11604, 0 ] ] }, { "id": "metadata/library/web-frameworks::wordpress-plugin-dir-constants--abspath", "conf": 0.9, "crit": 2, "desc": "WordPress plugin directory constants (ABSPATH)", "spans": [ [ 15, 0 ] ] }, { "id": "metadata/package/files/ecosystem::wordpress-plugin-header-name", "conf": 0.95, "crit": 2, "desc": "WordPress plugin header name", "spans": [ [ 68, 0 ] ] }, { "id": "metadata/package/files/ecosystem::wordpress-plugin-text-domain", "conf": 0.95, "crit": 2, "desc": "WordPress plugin text domain", "spans": [ [ 422, 0 ] ] }, { "id": "micro-behaviors/communications/http/request/params::get-dup", "conf": 0.85, "crit": 3, "desc": "Reads PHP query parameters via $_GET", "spans": [ [ 3220, 4 ] ] }, { "id": "micro-behaviors/communications/http/request/params::http-request-server-variable", "conf": 0.8, "crit": 3, "desc": "Reads PHP HTTP request server variable", "spans": [ [ 19737, 23 ] ] }, { "id": "micro-behaviors/communications/http/request/params::post-dup", "conf": 0.85, "crit": 3, "desc": "Reads PHP form parameters via $_POST", "spans": [ [ 12488, 5 ] ] }, { "id": "micro-behaviors/communications/http/request/params::server-name", "conf": 0.8, "crit": 3, "desc": "Reads PHP SERVER_NAME request variable", "spans": [ [ 19679, 23 ] ] }, { "id": "micro-behaviors/communications/http/request/params::wordpress-nonce-parameter", "conf": 0.94, "crit": 3, "desc": "Handles a WordPress nonce parameter", "spans": [ [ 13079, 8 ] ] }, { "id": "micro-behaviors/communications/http/response::wordpress-redirect", "mbc": "C0002", "conf": 0.92, "crit": 3, "desc": "Sends a WordPress HTTP redirect", "spans": [ [ 3995, 11 ] ] }, { "id": "micro-behaviors/data/serialize/json::php-json-encode", "conf": 0.86, "crit": 3, "desc": "PHP JSON serialization", "spans": [ [ 19005, 11 ] ] }, { "id": "micro-behaviors/fs/directory/readdir::php-opendir", "conf": 1.0, "crit": 3, "desc": "Opens directory with PHP opendir", "spans": [ [ 14958, 7 ] ] }, { "id": "micro-behaviors/fs/directory/traverse::php-dir-traverse-fn", "atk": "T1083", "conf": 1.0, "crit": 2, "desc": "Enumerates directories with PHP functions", "spans": [ [ 15068, 0 ] ] }, { "id": "micro-behaviors/fs/path/construct::realpath-call", "conf": 0.9, "crit": 3, "desc": "Resolves canonical filesystem path", "spans": [ [ 14974, 8 ] ] }, { "id": "micro-behaviors/os/env/access::php-server-superglobal", "conf": 0.85, "crit": 3, "desc": "Reads PHP $_SERVER execution environment data", "spans": [ [ 19467, 7 ] ] }, { "id": "micro-behaviors/os/security/runtime::wordpress-nonce-verification", "conf": 0.9, "crit": 3, "desc": "Verifies a WordPress request nonce", "spans": [ [ 12550, 15 ] ] }, { "id": "micro-behaviors/os/stdio::php-echo-statement", "conf": 0.95, "crit": 3, "desc": "Emits data with a PHP echo statement", "spans": [ [ 12872, 13 ], [ 12929, 14 ], [ 14747, 18 ], [ 16238, 63 ], [ 16317, 25 ] ] }, { "id": "micro-behaviors/process/io/buffer::ob-get-clean", "conf": 0.6, "crit": 2, "desc": "Gets and cleans output buffer", "spans": [ [ 14280, 0 ] ] }, { "id": "micro-behaviors/process/io/buffer::ob-get-contents", "conf": 0.6, "crit": 2, "desc": "Gets output buffer contents", "spans": [ [ 14244, 0 ] ] }, { "id": "micro-behaviors/process/io/buffer::ob-start", "conf": 0.7, "crit": 2, "desc": "Starts output buffering", "spans": [ [ 14151, 0 ] ] }, { "id": "micro-behaviors/communications/http/request/cgi::request-uri-server-var", "conf": 0.85, "crit": 3, "desc": "Names the CGI REQUEST_URI variable", "spans": [ [ 19747, 11 ] ] }, { "id": "micro-behaviors/communications/http/request/cgi::server-name-server-var", "conf": 0.85, "crit": 3, "desc": "Names the CGI SERVER_NAME variable", "spans": [ [ 19679, 23 ] ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Code embeds cleartext HTTP URL literal", "spans": [ [ 4580, 76 ], [ 4996, 36 ] ] }, { "id": "metadata/library/web-frameworks::wordpress-plugin-dir-constants", "conf": 0.9, "crit": 2, "desc": "WordPress plugin directory constants", "uses": [ 1 ], "spans": [ [ 15, 0 ] ] } ], "type": "php" }, { "ctx": [ { "b": "4gjNcl1szoB8$e#wPI]nq/ueWvqE5}vpK7:zE:(hBA}XlaAzQvwPFp/dLzkre[5ZueOe%yz/Qgl3lQDlazbLfBs?MFDsYbWf/9=[i$hJtarR!sz/fUGB98XzwJy@FByx01v(\u003ebbarR^HzddD$x(k%Ogh}EXfD-k(CSMuwarR^Hv@Dg4AYLBSw?U[[gck{LEglI", "ln": 2, "col": 3, "line": 1 }, { "b": "3lQDlaAg+1wnb{]iYp@4at[a.i$hKB4gj:rvq{ogy?WJ}ByGfkdLzkre[5ZueO]clxMNZ4CZx(barR^HAbP/iBzkVhi+A8JwN)\u003ei3lQDlaARKviXSS83lQDlaz+R3Buh9q4gjj2arUc4v@2Z$z/]@di^2EVc[Wb9x(do\u003ewPGIyC4CYgvr\u003cFAzF7yvA+fi3vrt:mi$hJtarR!ovpK7=A=l8rwia:zvQQVseheReeheXndlv$CarR^HCwgPfxGv\u003e4fEn^\u00263lQDlaztt2xj#xFf!+pci$hJtarR!MeOP9kwQ3l@ixo8Wi$hKB4gjZ@Ac0QEx\u003eIa3vScGyx(m*1AXhGQvq{M53lQDlaA}KgBz9Y)fEn^\u00263lQDlaz\u003eLieQ7]tBz9Y[h85#]i$hJtarR!ywOc3Bh83sr4gjj2arUSwB7]-gz/dQAvSME7B-.gR", "ln": 4001, "col": 28, "line": 175 }, { "b": "C4D1f3lQDlayX+?yIdWaB-7.wx(do\u003ewJy@Kz/fa}3vJu\u003c4gj:rB98Xzx(mMaw]zYjAb](lz^)c}dLzkre[5ZueN-g2ePUGBeQ8kzAbYxeedz}svq{otAb](lz^)c}DKQr8arR^UCv+l0x(\u003e}oz*i\u003cPx)KGhxf4eAz/Px1AXg:sCSMuwarR^HeP2z", "ln": 10157, "col": 22, "line": 449 }, { "b": "xK#3(ePt-wC4\u003eJivScGlx(dHf4gjj2arUJfCRabNwoqGCf!+pci$hKB4gj:rBzbkdxl4Y%eokryAbPSnx)a5gv@(Yvfawmvvq{otvpS[2B7GCBCxdbhAaK6p4gjj2arUJfCRabNwoqGCauqznAcKCN3vJu\u003ce[5ZueN@QdvrazrwOb\u003e3wH[n$e[5Y", "ln": 11478, "col": 7, "line": 521 }, { "b": "x\u003e870ePt-wC4\u003eJiefDMNAc0QBzdd6*eOOZkzy]*FwP?^0Cy6=aarR^HarR^Hwnca7y*?PIzF%A7i$hJtarR!P4gjj2arSpBAc0QtwmNokwPPIFA:-{awPw]czG6-utxCdfwJ.kTvpT7\u003cb3=-e3lQDlatd8wB1H*hwg.\u003elBs?YSvq{f%AV/7lAclnbBA}?pjTaxH", "ln": 13157, "col": 15, "line": 598 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 14429, "entropy": 4.9 }, "binary": { "peak_region_bytes": 14336, "peak_region_entropy": 4.89 } } }, "id": 3, "mol": "H(U)", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/css/backend.css", "pid": 0, "risk": 1, "sha": "7a378bcd39fa7a7b49b8cd48303a540fc788324cf8f902c302f67255a33a1461", "size": 14429, "traits": [ { "id": "micro-behaviors/ui/window/manage/style::fixed-viewport-style", "conf": 0.9, "crit": 3, "desc": "Fixed CSS element spans viewport", "spans": [ [ 4065, 160 ] ] } ], "type": "text" }, { "ctx": [ { "b": "ju)^#A3eX5w[=c]wge/\u003elq{YDr7Fw=aA8oywnbQ6b2i50B7ol8Ac9jrx\u003eg:*wPF#ky?m3@wG-lDj3L[r3oR\u003ckB%7phvrlGMb6O6oA3eOdB1H)rwNPQ6j}d\u0026warR^?wncifv@bN{B3gZQAc0QtwmL", "ln": 0, "col": 1, "line": 1 }, { "b": "arR^HarR^?kx7pPazC.6y\u0026%o1c)@$xzE)SoxK$Q.e]UGycN?bwj}d\u0026warR^HarR^HarR^?wncifv@bN{B3gZQAc0QIvqYT)eN\u0026TeC{kAY3lQDlarR^HarR^HarR^Hao", "ln": 172, "col": 6, "line": 5 }, { "b": "j}d\u0026warR^HarR^HarR^HarR^?wncifv@bN{B3gZVz/PXDCxdbhb0DCyarR^HarR^HarR^HarR^HarR^Hjz5ILz6iXbBzbP6jTa\u0026-B95PGvpKy[z/dYZju)^#A3e.4xM224wnM3#uV*y9c[cn\u003easyPdze0(tAbP/te]UGycM\u003eSqb0DCyarR^HarR^HarR^HarR^HarR^HarR^HjzwXLB-X:FD2NsTb4$X3wmYT5az$R8wJ.kCv@#B6zxZiDvqH6$jTarNB6\u0026u^wm6j=CvbA5BrSw44gjj2arR^HarR^HarR^HarR^HarR^HarS^Sx)7Rey*?yajP", "ln": 349, "col": 93, "line": 7 }, { "b": "arR^HarR^HarR^HarR^HarR^HarS^=k0h5GxMb83wHF{5y?m3@wGUM4By/FnBzbkdzGP/9wPw]iw/#bjCxj)vzxJ?tzdm6%e\u003c%n.vrDydazC)tf!K?8asyPcv}x.5Ab]JhB1IDKv}/v/eOOZkzGvfOj0l:KjtgUq4gjj2arR^HarR^HarR^HarR^", "ln": 4399, "col": 27, "line": 57 }, { "b": "arR^HarR^HarR^?A6uxGAa\u003chkuU7Skp\u00266YKB7DF9zGGDgaARpdaz\u003eLcxk8law]zYjwNP7ZazCt7zxJUhaAhMTcOcw/vpJ!UB8#qvwPI]AB8LM5vqEJfv@DmacN?b1kr.g.A6sZrarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^", "ln": 6183, "col": 38, "line": 79 }, { "b": "w[+*)wg-1Cvq{f%AXe\u003eb4gjj2arR^HarR^HarR^HarR^HarR^HarS^hAa\u003chkCw{]bz/f5@uUj1-y?a}wvq{o{vpS[QzE[30B7GCvefDrGAc2w{wmP4*wPRo%z/f5@cN?b1krYI-arR^HarR^HarR^HarR^HarR^Hjtgq+A=0#H3lQDlarR^HarR^HarR^HauRq/x)6", "ln": 16975, "col": 39, "line": 212 } ], "depth": 1, "facts": { "imp": [ [ "", "defined" ], [ "", "die" ], [ "", "admin_url" ], [ "", "wp_nonce_field" ] ], "tgt": [ "_e", "admin_url", "defined", "die", "wp_nonce_field" ], "metrics": { "ast": { "op.lor": 1, "max_depth": 7, "op.concat": 1, "call_count": 37, "node_count": 853, "op_density.lor": 0, "op_density.concat": 0 }, "file": { "size": 17340, "entropy": 3.36 }, "text": { "lines": 223, "top_char": 115, "max_ws_run": 1, "digit_ratio": 0.01, "space_count": 9077, "char_entropy": 3.36, "unique_chars": 72, "top_char_null": 0, "lines_over_200": 5, "string_density": 0.34, "top_char_ratio": 0.03, "avg_line_length": 75.76, "max_line_length": 213, "empty_line_ratio": 0.02, "last_line_length": 6, "whitespace_ratio": 0.55, "identifier_density": 0.17, "line_length_stddev": 39.94, "normalized_string_count": 5.02, "repeated_char_sequences": 210, "normalized_unique_identifiers": 0.64 }, "binary": { "peak_region_bytes": 1980, "peak_region_entropy": 4.26 }, "strings": { "bytes": 1534, "count": 75, "avg_length": 20.45, "max_length": 69, "avg_entropy": 3.19, "entropy_stddev": 0.44 }, "identifiers": { "count": 37, "unique": 5, "avg_length": 7, "max_length": 14, "min_length": 2, "avg_entropy": 2.27, "reuse_ratio": 0.14, "length_stddev": 4.34, "all_lowercase_ratio": 1, "underscore_prefix_count": 1 } } }, "id": 289, "mol": "H₂(CmOs)", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/inc/backend/add-new-set.php", "pid": 0, "risk": 3, "sha": "f99ac02a99e5d5eb56e0dde5269d41179cf416554708495383114bfd3570ad36", "size": 17340, "traits": [ { "id": "metadata/library/web-frameworks::wordpress-core-api-symbols--lowercase", "conf": 0.9, "crit": 1, "desc": "WordPress lowercase API symbol prefix", "spans": [ [ 17023, 0 ] ] }, { "id": "metadata/library/web-frameworks::wordpress-plugin-dir-constants--abspath", "conf": 0.9, "crit": 2, "desc": "WordPress plugin directory constants (ABSPATH)", "spans": [ [ 15, 0 ] ] }, { "id": "micro-behaviors/communications/http/post::html-form-post-method", "atk": "T1071.001", "mbc": "C0002", "conf": 0.96, "crit": 3, "desc": "HTML form declares the POST method", "spans": [ [ 413, 18 ] ] }, { "id": "micro-behaviors/os/stdio::php-echo-statement", "conf": 0.95, "crit": 3, "desc": "Emits data with a PHP echo statement", "spans": [ [ 447, 35 ] ] }, { "id": "metadata/library/web-frameworks::wordpress-plugin-dir-constants", "conf": 0.9, "crit": 2, "desc": "WordPress plugin directory constants", "uses": [ 1 ], "spans": [ [ 15, 0 ] ] } ], "type": "php" }, { "ctx": [ { "b": "ju)^#A19d+wObT]wN)hpk%!HDk#Zx5diJLHay]g$c)zA8aAI4kx(FepyIvr\u0026x\u003equdAbo8]B7DHsdlv$CxkzG}vqE5iCw}84i$hJxB7[#}wfs2Tx(n3ovqEukvqY!3x)Kt$By/YsuUj1-y?a}tuQ)K:tpjGauUK3#t}4i:4gjw5vpB4:uV6p?wGTbUbY)E7y?l%\u003evqPM#jS(1]AaAAfk5+KNw[=Gje*8uDAc2xcz!0G\u0026y*Q)^z/fRui$hJxx\u003e870uVP!2B09Q*bZjirvL6=RwPRp1wPJ0gBAn\u0026QCw}84eK1b]wPh6#wHF:3", "ln": 0, "col": 1, "line": 1 }, { "b": "arR^Oc37B+4gjj2arR^HarS3TB0\u0026HF3lQDlarR^HaswERcObYlarR^HarR^HcNA*Y4giy\u003c4gjjbi$hJtCw{]fwN]H}wN/*gvpTj?zEmKby:Z.+cT*L5x(kLxxMcgPvp%dmvq{otB8LM5vqEocwPI{3xjTjYcN?a^3lS]8x((AC3lT+dy\u0026:fm4gjj2ay]g$c%{sfcR!O5x\u003e870B0b7kB-7.jw]zYjBzbxfazCt7zxJU7cOcSNv}f7\u003eB8VehB8@{Oz!0G\u0026y+ovhz/fRzdjEs/3lT:a3i", "ln": 1054, "col": 6, "line": 36 } ], "depth": 1, "facts": { "imp": [ [ "", "defined" ], [ "", "die" ], [ "", "intval" ], [ "", "sanitize_text_field" ], [ "", "empty" ], [ "", "wp_redirect" ], [ "", "admin_url" ], [ "", "die" ] ], "mbr": [ "$_GET.si_id", "$wpdb.prefix" ], "tgt": [ "$wpdb", "__", "admin_url", "defined", "die", "empty", "intval", "sanitize_text_field", "wp_redirect" ], "metrics": { "ast": { "op.lor": 1, "op.lnot": 1, "max_depth": 12, "op.concat": 3, "call_count": 12, "node_count": 457, "member_count": 2, "max_array_len": 11, "op_density.lor": 0, "op_density.lnot": 0, "member_depth_max": 2, "op_density.concat": 0.01 }, "file": { "size": 1279, "entropy": 4.94 }, "text": { "lines": 46, "top_char": 105, "tab_count": 9, "max_ws_run": 1, "digit_ratio": 0, "space_count": 207, "char_entropy": 4.94, "mixed_indent": 1, "unique_chars": 68, "top_char_null": 0, "string_density": 0.7, "top_char_ratio": 0.06, "avg_line_length": 25.8, "max_line_length": 109, "last_line_length": 2, "whitespace_ratio": 0.24, "identifier_density": 1.72, "line_length_stddev": 22.63, "normalized_string_count": 4.72, "suspicious_string_ratio": 0.03, "trailing_whitespace_lines": 1, "normalized_unique_identifiers": 9.05 }, "binds": { "count": 5 }, "binary": { "peak_region_bytes": 1279, "peak_region_entropy": 4.96 }, "strings": { "sql": 1, "bytes": 341, "count": 32, "avg_length": 10.66, "max_length": 35, "avg_entropy": 2.43, "entropy_stddev": 1.1 }, "identifiers": { "count": 79, "unique": 50, "avg_length": 9.7, "max_length": 19, "min_length": 2, "avg_entropy": 2.79, "reuse_ratio": 0.63, "length_stddev": 4.59, "high_entropy_count": 6, "high_entropy_ratio": 0.12, "all_lowercase_ratio": 0.6, "all_uppercase_ratio": 0.04, "underscore_prefix_count": 2 } } }, "id": 290, "mol": "H(Cm₂)", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/inc/backend/copy-icon-set.php", "pid": 0, "risk": 2, "sha": "bbfb553373cdfec62afa2212c699540e96b2d6780c5bcfd32430d984520b4a31", "size": 1279, "traits": [ { "id": "metadata/library/web-frameworks::wordpress-core-api-symbols--lowercase", "conf": 0.9, "crit": 1, "desc": "WordPress lowercase API symbol prefix", "spans": [ [ 1118, 0 ] ] }, { "id": "metadata/library/web-frameworks::wordpress-plugin-dir-constants--abspath", "conf": 0.9, "crit": 2, "desc": "WordPress plugin directory constants (ABSPATH)", "spans": [ [ 16, 0 ] ] }, { "id": "micro-behaviors/communications/http/request/params::get-dup", "conf": 0.85, "crit": 3, "desc": "Reads PHP query parameters via $_GET", "spans": [ [ 116, 4 ] ] }, { "id": "micro-behaviors/communications/http/response::wordpress-admin-redirect", "mbc": "C0002", "conf": 0.92, "crit": 3, "desc": "Redirects to WordPress admin URL", "spans": [ [ 1118, 22 ] ] }, { "id": "micro-behaviors/communications/http/response::wordpress-redirect", "mbc": "C0002", "conf": 0.92, "crit": 3, "desc": "Sends a WordPress HTTP redirect", "spans": [ [ 1118, 11 ] ] }, { "id": "metadata/library/web-frameworks::wordpress-plugin-dir-constants", "conf": 0.9, "crit": 2, "desc": "WordPress plugin directory constants", "uses": [ 1 ], "spans": [ [ 16, 0 ] ] } ], "type": "php" }, { "id": 291, "mol": "H(Cm₂)", "sha": "e683cff4a03a28f4e75786f6a860aa9cc551ccc0e91f381b3d25cf92f91059bf", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/inc/backend/delete-icon-set.php", "risk": 2, "size": 345, "type": "php", "depth": 1 }, { "ctx": [ { "b": "ju)^#A19d+wObT]wN)hpk%!HDk#Zx5diJLHay]g$c)zA8aAI4kx(FepyIvr\u0026x\u003equdAbo8]B7DHsdlv$CxkzG}vqE5iCw}84i$hJxB7[#}wfs2Tx(n3ovqEukvqY!3x)Kt$By/YsuUj1-y?a}tuQ)K:tpjGauUK3#t}4i:4gjw5vpB4:uV6p?wGTbUbY)E7y?l%\u003evqPM#jS(1]AaAAfk5+KNw[=Gje*8uDAc2xcz!0G\u0026y*Q)^z/fRui$hJxx\u003e870uVP!2B09Q*bZjirvL6=RwPRp1wPJ0gBAn\u0026QCw}84eK1b]wPh6#wHF:3", "ln": 0, "col": 1, "line": 1 }, { "b": "a.tIfBA]nWx\u003e870uVP!2B15L+4gjv{v@Dl(B7GCojS(1:v@Dl(B7GDmtqftA4gjv{v@Dl(wQ5rqvivYQB-8niA+O@#x)KtsbXZ+bzEmD@Bs/W\u003cv@Dl(wQ5rqvjsnE3nj4TBzbxfeK1b]x(n31vrcx%C{\u003c}Lv@Dl(wQ5rqvjsnE3o{Y-3oR\u003ckB%7phvrlGMb4kCieN-g2ePUGBeQ8kzAbYxeb0DCyju)^#A3e\u003ebasH@BB7GCwbWT5gr9H.!wPI{3", "ln": 313, "col": 4, "line": 7 }, { "b": "vpQ@wj}d\u0026Ykx7pPazC.6y\u0026%o1c)@$xzE)SoxK$Q.e]UGycN?bwj}d\u0026YaUtoxvqYT)av{6LwgYw%4gkjdx)7Rey*?yajTarNB1IutzE)SovSb!5b0DCyarR^HjzlGljo", "ln": 773, "col": 13, "line": 24 }, { "b": "B8LM5vqEJfv@DmacN?b1kr.g.xFI:X3jNs+arR^?wncifv@bN{B3gZVz/PXDCxdbhb0DCyarR^HarR^Hjz5ILz6iXbBzbP6jTa\u0026-B95PGvpKy[z/dYZju)^#A3e.4xM224wnM3#uV*y9c[cn\u003easyPdze0(tAbP/te]UGycM\u003eSqb0DCyarR^HarR^HarR^HjzwXLB-X:FD2NsTb4$X3wmYT5az$R8wJ.kCv@#B6zxZiDvqH6$jTarNB6\u0026G?x()Y\u003cv@#B6zxZ.$4gjj2arR^HarR^HarS^Sx)7Rey*?yajTarNB1IAJCoPiW3lQDlarR^HarR^Hao", "ln": 920, "col": 56, "line": 28 }, { "b": "arR^HarR^HarR^HarR^HjzwXLB-X:FD2NsTb6myvBrR\u0026BvqPNsb6dsquV6p?wG\u0026muvqH6$jT90MAa\u003chkwN/y(az2R7uTX4#AWShEv@Dl(B7GCBk51IBzEmD@Bye]]zdLdTau@4lffP*LarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HjtgkVC0luxarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^Hjy\u0026eHay/j@B8%F*vq{otwPz*fAW0XffjX^uj}d\u0026warR^HarR^HarR^HarR^H", "ln": 1561, "col": 21, "line": 40 }, { "b": "arR^HarR^HarR^HarS^XzG6-uaAR)FwJ.kPB.$P0AV#SzvqPNsb5RKuuVH7eB0q-IvqH6$jT90MAa\u003chkwN/y(az2R7uTX4#AWShEv@Dl(B7GCBk5LHWuVH7eB16f[krZnlze0(Ja#7n{j}d\u0026warR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^?fjX^uj}d\u0026warR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^?wncifv@bN{B3gZQAc0QHAcb/jzy]:ABy=TW4gjj2arR^HarR^", "ln": 4646, "col": 23, "line": 76 }, { "b": "arR^HarR^HarR^HarR^HarR^HarS^=k0h5GxMb83wHF{5y?m3@wGUM4By/FnBzbkdzGP/9wPw]iw/#bjCxj)vzxJ?tzdm6%e\u003c%n.vrDydazC)tf!K?8asyPcv}x.5Ab]JhB1IDKv}/v/eOOZkzGvfOj0l:KjtgUq4gjj2arR^HarR^HarR^HarR^", "ln": 4878, "col": 15, "line": 79 }, { "b": "BAg!]cVj6zuT[1\u003cB.#2qcTweIaBsL8arR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HwN/y(az2R7uTX4#AWShEv@Dl(wQ5rqvoU9%B.$F}z!%MkzGvghdlv$CarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HEglJaarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^\u003ej%}E\u0026x(l6Tf^nnm4gjj2arR^HarR^HarR^HarR^HarR^HarR^HarR^HarS^1wn8", "ln": 5688, "col": 55, "line": 88 }, { "b": "arR^HarR^HarR^HarR^?x(m)jBrCWJAaIfRzGP/9wPw$qzEEx[jTa-KA+x97B0q-IvqH6$jT90MAa\u003chkwN/y(az2R7uTX4#AWShEv@Dl(B7GCBk51IBzEml?A+x97dlwUpj%zTz4gjj2arR^HarR^HarR^HarR^HarR^HarR^HarR^HarS^1wnciJ4gjj2arR^HarR^HarR^HarR^HarR^HarR^HarR^HarS^Sx)7Rey*?yajTarNB1I0rwO+)ezF%Sdb0DCyarR^HarR^HarR^HarR^HarQ", "ln": 6563, "col": 22, "line": 102 }, { "b": "arR^HarR^HarR^HarS^hAa\u003chkuU7Skp\u00266YKB7DF9zGGDgaARpdaz\u003eLcxk8law]zYjwNP7ZazCt7zxJUhaAhMTcOcw/vpJ!UB8#qvwPI]AB8LM5vqEJfv@DmacN?b1krYI-arR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HjtgUq4gji", "ln": 6842, "col": 27, "line": 106 }, { "b": "jTa#VCYUbLzEEx[jTa#^z!%JfA9)6!a%pxivrlGMb4kCieN@Znz/NBGx\u003e7{\u0026AV#SHvqH6$jT90MAa\u003chkwN/y(az2R7uTX4#AWShEv@Dl(B7GCBk6gZYy\u0026\u003cxguT^CNyIdWaB-7.sj0l:Ka$(a?3lQDlarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HauRq/x)8VH3lQDlarR^HarR^HarR^HarR^HarR^HarR^HarR^HauRq/x)8W5aUtoOAc0Qyx\u003eq9\u003eeQ8kzAbYxeazbLjz7PvlwO+)eeJ%QJao", "ln": 8588, "col": 52, "line": 127 }, { "b": "zEEx[jTa#^z!%JfA9)Y#CYWq5z!%uja%pxivrlGMb4kCieN@Znz/NBGx\u003e7{\u0026AV#SHvqH6$jT90MAa\u003chkwN/y(az2R7uTX4#AWShEv@Dl(B7GCBk6gZYy\u0026\u003cxguVY\u003e7ByeJ@y\u0026styj0l:Ka$(a?3lQDlarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HauRq/x)8VH3lQDlarR^HarR^HarR^HarR^HarR^HarR^HarR^HauRq/x)8W5aUtoOAc0Qyx\u003eq9\u003eeQ8kzAbYxeazbLjz7PvlwO+)eeJ%QJao", "ln": 9254, "col": 60, "line": 135 }, { "b": "arR^HarR^HarR^HarR^HarR^HarR^HarR^HarS^/Aa9Sbv@bN{B3gZQAc0QBv@DlpzEEx[b0FaNAa\u003chkwN/y(az2R7uTX4#AWShPx([f5dlwUpk0gGtAa9SF4gjj2arR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarS^/Aa9Sbv@bN{B3gZQAc0QBv@Dlpy?W%jeN@ZpBAhqoB0r^S3lQDlarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarQ", "ln": 18326, "col": 11, "line": 240 }, { "b": "arR^HarR^HarR^HbW$XjwmY^*Bzbw#yI)Z8B09Q*B98CfA+fiavpJ\u003c%cVBqTefDq/efDiLv@Dl(wmY\u003c\u003ex(403vSco$wPzd1xLy%(zE))gcTwe.4gjj2arR^HarR^HarR^HarR^HarR^HarR^HarR^", "ln": 27836, "col": 25, "line": 329 }, { "b": "au@4lffP*L4gjj2arR^HarR^HarS^1wnciJ4gjj2arR^HarR^HarS^hAa\u003chkCw{]bz/f5@uUj1-y?a}wvq{o{wN]H%uTWC^x(v(pefDrGAc2w$wncc)B7GD2zF%A5wHw]*au@403lQDlarR^HauRq?z/PXU4gjj2arS^1wnciJ4gjj2arS^Sx)7Rey*?yajTarNB1E", "ln": 31777, "col": 135, "line": 379 } ], "depth": 1, "facts": { "imp": [ [ "", "defined" ], [ "", "die" ], [ "", "intval" ], [ "", "sanitize_text_field" ], [ "", "empty" ], [ "", "unserialize" ], [ "", "isset" ], [ "", "admin_url" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "isset" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "isset" ], [ "", "isset" ], [ "", "isset" ], [ "", "isset" ], [ "", "do_action" ], [ "", "selected" ], [ "", "selected" ], [ "", "selected" ], [ "", "selected" ], [ "", "unserialize" ], [ "", "intval" ], [ "", "sanitize_text_field" ], [ "", "empty" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_url_raw" ], [ "", "isset" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_url_raw" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "isset" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "isset" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "isset" ], [ "", "str_replace" ], [ "", "str_replace" ], [ "", "str_replace" ], [ "", "str_replace" ], [ "", "isset" ], [ "", "str_replace" ], [ "", "str_replace" ], [ "", "str_replace" ], [ "", "count" ], [ "", "wp_nonce_field" ] ], "mbr": [ "$_GET.message", "$_GET.si_id", "$icon_detail.border_color", "$icon_detail.border_thickness", "$icon_detail.border_type", "$icon_detail.icon_height", "$icon_detail.icon_width", "$icon_detail.image", "$icon_detail.image_name", "$icon_detail.link", "$icon_detail.padding", "$icon_detail.shadow", "$icon_detail.shadow_blur", "$icon_detail.shadow_color", "$icon_detail.shadow_offset_x", "$icon_detail.shadow_offset_y", "$icon_detail.title", "$icon_detail.tooltip_text", "$icon_extra.icon_set_type", "$icon_extra.icon_theme_id", "$icon_extra.num_columns", "$icon_extra.tooltip_position", "$icon_set.icon_animation", "$icon_set.icon_details", "$icon_set.icon_display", "$icon_set.icon_extra", "$icon_set.icon_margin", "$icon_set.icon_set_name", "$icon_set.icon_tooltip", "$icon_set.num_rows", "$icon_set.opacity_hover", "$icon_set.tooltip_background", "$icon_set.tooltip_text_color", "$wpdb.prefix" ], "tgt": [ "$this", "$wpdb", "_e", "admin_url", "count", "defined", "die", "do_action", "empty", "esc_attr", "esc_url_raw", "intval", "isset", "sanitize_text_field", "selected", "str_replace", "unserialize", "wp_nonce_field" ], "metrics": { "ast": { "op.eq": 33, "op.ne": 2, "op.lor": 1, "op.land": 4, "op.lnot": 2, "max_depth": 24, "op.concat": 37, "call_count": 135, "node_count": 4314, "member_count": 34, "max_array_len": 1, "op_density.eq": 0.01, "op_density.ne": 0, "op_density.lor": 0, "op_density.land": 0, "op_density.lnot": 0, "member_depth_max": 2, "op_density.concat": 0.01 }, "file": { "size": 32278, "entropy": 3.97 }, "text": { "lines": 398, "top_char": 101, "max_ws_run": 2, "digit_ratio": 0, "space_count": 13358, "char_entropy": 3.97, "unique_chars": 84, "top_char_null": 0, "lines_over_200": 16, "string_density": 0.61, "top_char_ratio": 0.04, "avg_line_length": 79.1, "max_line_length": 315, "empty_line_ratio": 0.02, "last_line_length": 5, "whitespace_ratio": 0.44, "identifier_density": 1.39, "line_length_stddev": 57.08, "normalized_string_count": 12.13, "repeated_char_sequences": 343, "suspicious_string_ratio": 0, "trailing_whitespace_lines": 1, "normalized_unique_identifiers": 9.61 }, "binds": { "count": 30 }, "binary": { "peak_region_bytes": 1558, "peak_region_entropy": 5.21 }, "strings": { "sql": 1, "bytes": 3010, "count": 242, "avg_length": 12.44, "max_length": 69, "avg_entropy": 2.63, "empty_count": 16, "entropy_stddev": 1.01 }, "comments": { "chars": 111, "count": 3, "lines": 3, "to_code_ratio": 0.01 }, "identifiers": { "count": 553, "unique": 83, "avg_length": 9.58, "max_length": 19, "min_length": 2, "avg_entropy": 2.86, "reuse_ratio": 0.15, "length_stddev": 3.7, "high_entropy_count": 6, "high_entropy_ratio": 0.07, "all_lowercase_ratio": 0.65, "all_uppercase_ratio": 0.01, "underscore_prefix_count": 2 } } }, "id": 292, "mol": "H₃(Cm₂DbOs)", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/inc/backend/edit-icon-set.php", "pid": 0, "risk": 3, "sha": "67b07dbe2a6d8d36198338f67ff3b42ee94d7bb6994d4a4dccc5e0efb405c71d", "size": 32278, "traits": [ { "id": "metadata/library/web-frameworks::wordpress-core-api-symbols--lowercase", "conf": 0.9, "crit": 1, "desc": "WordPress lowercase API symbol prefix", "spans": [ [ 31825, 0 ] ] }, { "id": "metadata/library/web-frameworks::wordpress-plugin-dir-constants--abspath", "conf": 0.9, "crit": 2, "desc": "WordPress plugin directory constants (ABSPATH)", "spans": [ [ 16, 0 ] ] }, { "id": "micro-behaviors/communications/http/post::html-form-post-method", "atk": "T1071.001", "mbc": "C0002", "conf": 0.96, "crit": 3, "desc": "HTML form declares the POST method", "spans": [ [ 984, 18 ] ] }, { "id": "micro-behaviors/communications/http/request/params::get-dup", "conf": 0.85, "crit": 3, "desc": "Reads PHP query parameters via $_GET", "spans": [ [ 116, 4 ] ] }, { "id": "micro-behaviors/data/serialize/object::unserialize", "atk": "T1059", "mbc": "E1059", "conf": 0.65, "crit": 3, "desc": "PHP object deserialization call", "spans": [ [ 377, 11 ] ] }, { "id": "micro-behaviors/os/stdio::php-echo-statement", "conf": 0.95, "crit": 3, "desc": "Emits data with a PHP echo statement", "spans": [ [ 1018, 35 ], [ 1625, 40 ], [ 4710, 35 ], [ 5752, 42 ], [ 6627, 38 ], [ 8652, 45 ], [ 9318, 45 ], [ 18390, 22 ] ] }, { "id": "metadata/library/web-frameworks::wordpress-plugin-dir-constants", "conf": 0.9, "crit": 2, "desc": "WordPress plugin directory constants", "uses": [ 1 ], "spans": [ [ 16, 0 ] ] } ], "type": "php" }, { "id": 294, "mol": "H(Os)", "sha": "a5fc7e04dc0f74eeb0bb4a7fc5ee4059e276205b98730bf2dec697e68dd179a8", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/inc/backend/icon-adder.php", "risk": 2, "size": 10112, "type": "php", "depth": 1 }, { "id": 295, "mol": "H₂(CmOs)", "sha": "3efd1e1bbdcc4b78a73ff992a827ef776712741f7eb2d235ede0d5705852b9b9", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/inc/backend/icon-themes.php", "risk": 2, "size": 1290, "type": "php", "depth": 1 }, { "id": 296, "mol": "H(Os)", "sha": "e53e8fb6509091ea07aa06cecf434801b5636f5850550957ba76ded8b2b4aeba", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/inc/backend/list-icon-sets.php", "risk": 2, "size": 411, "type": "php", "depth": 1 }, { "ctx": [ { "b": "ju)^#A3eX5w[=c]wge/\u003elq{YDr7Fw=aA8oywnbQ6b2i50B7ol8Ac9jrx\u003eg:*wPF#ky?m3@wG-lDj3L[r3oR\u003ckB%7phvrlGMb6O6oA3vEP3lQDlauR(cxMay/arR^Hx\u003ewFox(!ubBsnzwm[3xYcT*Ibx(v(pt}v9zuQ)K:tpi^4AbGPiv}v2[efDiBm[3xYcV:0ex\u003eeO%diG@:aA}^iC4CYdw{E:3z/f5@c)Sd\u0026mo0FsuW3Ebz/f5@cTwnCcT*$neOeEbBs?xGzEWl9djDx^4gjj2arR^HarUxov@co#wHF{qwnccqx\u003e870ePUGBe]UGycN?a^3lQDlaBLwzy\u0026:egDKQr8arR^HarR^\u003ej}d\u0026warR^HarR^?kx7pP4gjj2arR^HarUxgasH@BB7GCwbM", "ln": 0, "col": 1, "line": 1 }, { "b": "arR^HarR^HarR^Hx\u003ew+suQ)K:tpjo0B8$=5wHy+ajV%]xdshHharR^HarR^HarR^HarR^HarR^HarR^HwN/y(aywF7cRm/^zxI\u003e?BrA\u003eWwmYo]q/#OWwPI{8B.\u003e(tcOcSNv}f7\u003eB8VehB8@{Oz!0G\u0026y+ovhz/fRzdlxQlarR^o3lQDlarR^HarR^HarR^HarR^HaBN*qB7DFdw*!{im[3xYcV9BoB75Y)cTv\u0026TjS(HeDKQr8arR^HarR^HarR^HarR^HarR^HarR!rv}Y^6uTCienN(WRax8\u0026[avy6^x\u003ep/$q/#OWwPI{8B.\u003e(tcOcSNv}f7\u003eB8VehB8@{Oz!0G\u0026y+ovhz/fRzdlv$CarR^HarR^HarR^HarR^HarR^HEpWkowGUY0c)Sd\u0026mo0FszdN^fvp%d0t{8o[atUD[4gjj2arR^HarR^HarR^HarR^HarR^HarUl9xM222uNNo[v@DlcB7GCowmYN*By!#9B9g#5wPI{8B.\u003e(te*\u0026g$vpJ!UB8#qvwPI]AB8LM5vqEJfv@DmacN?a^3lQDlarR^HarR^HarR^HarR^HaBKXaarR^HarR^H4gjj2arR^HarR^HarR^HarR^HarS)j4gjj2arR^HarR^HarR^HarS^1A6sZrarR^HarR^HarR^HjtgkVC0luxarR^HarR^HarR^Hju)^#A19c%arR^HarR^", "ln": 481, "col": 9, "line": 14 }, { "b": "b0DCyarR^HarR^HarR^HarR^HjzlGll1szoB8$e#wPI]nq/ueWvqE5Tv@DmaauT6PxMvV@jT90MAa\u003chkwN/y(ayO!$x(mp2A+)cMata=:vpTj?zz2)wA6FqIxjTkmAc0QLz!0G\u0026y+o7awg5G:j%zaVy*?yajTarBwg.XgCp^F-b0Fq6wfsSUCrvJ!k0gGigcMcOarR^HarR^HarR^HarR^HjAL1vy?j-0y*?yajTb8?eO]cxBs?PyvR/P#CwgP0w)]^7w[=H3wft\u0026fB98EEj}d\u0026warR^HarR^HarR^HarR^HarQ", "ln": 1234, "col": 39, "line": 31 }, { "b": "mP92Ras85qvR/Q.zEEx[a$kO.3lQDlarR^HarR^HarR^HarR^HarR^Hatkw[BzbxfeK1b]x(n31vrcx%C{\u003c}Lv@Dl(B7GDmdlv$CarR^HarR^HarR^HarR^HarR^HkrYI-arR^HarR^HarR^HarR^HarR^HjAL4Jwo/qiwizbUxK@=ix(!wuay[]5vj=XxeO]cxBAoO?y?W%ji=G1UBrS)T3lQDlarR^HarR^HarR^HarR^HarR^HauR(cxMay/arR^HarR^HarR^HarR^HarR^HarR^Hx\u003ewFov@z", "ln": 3270, "col": 63, "line": 59 }, { "b": "4gjj2arR^HarR^HarR^HarR^HarR^HarR^HarR^HarR}vwncc)zF%A5wGTbUCw{]0A+eW3wNxs[zEWlacT*$neOeEbBs?xGzEWl9dlv$CarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HbXgF5wPRG\u003czF%A5wGTbUCw{]0A+eW3wNxs[zEWlacT*$neO5BewPRF", "ln": 3643, "col": 64, "line": 66 }, { "b": "arR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^?vix5@vrlGMb64QCeP+YGy?j!kxMvV@jT90MAa\u003chkwN/y(ayO!$x(mp2A+)cMata=:vpTj?zz2)wA6FqIxjTkmAc0QLz!0G\u0026y:JO2BzkVhj.nerByf96cuA)dx\u003efvOata^FB7nM=BAzKKbXZ+bzEmD@Bs/W$x\u003cUN+diHk=cNJhAAbGPiv}v!Jata=ZwN]H%uV6!1v}v.AkrZnlBzk\u0026kwJ.kawnccfj}d\u0026warR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^?kx7pPaz24@zY\u0026Rjv{-U^BAe=Px\u003e870uVP!2eK0(Uz/e{6wPRo%vqPN8j0l:K4gjj2arR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarS^1vlLbcarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^Hjtg+$A=k\u0026dj}d\u0026warR^HarR^HarR^HarR^HarR^Hao", "ln": 4171, "col": 14, "line": 74 }, { "b": "arR^HarR^HarR^HarR^HarR^HarR^HarR^HarS^/Aa9Sbv@bN{B3gZSz/x$Ck0il@xMvV@jT90MAa\u003chkwN/y(ayO!$x(mp2A+)cMata=:vpTj?zy]*CB963NxMcgAv@#B6zARAEB6\u0026A}AcU/0v@#B6zyfBsuUK4lcM\u003e2:wPIu*vruQic)SIpz/e{6wPPH/B7[#}wgnSNaswHyCw}CrzEWlvcM\u003e2:bX7+iD0+DczEWltau@4laA8dcy?Wx{jTa]TBAIRway/tcw[=p5c)}bwAa\u003chkuU7Skl2{JVD2E*FB9hImaBd)FaA}miBrCWzay/teC{4ixx(+zhv@DlcB7GCTcOcw/vpJ!UB8#qvwPI]AB8LM5vqEH", "ln": 4893, "col": 15, "line": 80 }, { "b": "arR^HarR^HarR^HarR^HarR^HarR^HarR^HjACEIzxJC9vrlGMb4Ln3wPRGck0il@xMvV@jT90MAa\u003chkwN/y(ayO!$x(mp2A+)cMata=:vpTj?zy]*CB963NxMcgAv@#B6zARAEB6\u0026D?y?mZ1uTWC^x(v(oB7[#}wizp.e*a.Dv{-U^BAe=Px\u003e870uVP!2eK1k\u0026uUK41ata=:csp$ozF%A5wJ.y-e*8AIwO+}1wNxs[zEWltau@4laA8dcy?Wx{jTa]TBAIRway/tcw[=p5c)}bwAa\u003chkuU7Skl2{JVD2E*FB9hImaBd)FaA}miBrCWzay]51wPRGaBzbxfazCt7zxK1iBu.c7asyPcv}x.5Ab]JhB1IC", "ln": 5239, "col": 17, "line": 81 } ], "depth": 1, "facts": { "imp": [ [ "", "defined" ], [ "", "die" ], [ "", "isset" ], [ "", "wp_verify_nonce" ], [ "", "isset" ], [ "", "admin_url" ], [ "", "count" ], [ "", "wp_create_nonce" ], [ "", "wp_create_nonce" ], [ "", "wp_create_nonce" ], [ "", "admin_url" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "admin_url" ], [ "", "esc_attr" ], [ "", "admin_url" ], [ "", "esc_attr" ], [ "", "admin_url" ], [ "", "esc_attr" ], [ "", "esc_attr" ], [ "", "esc_attr" ] ], "mbr": [ "$_GET._wpnonce", "$_GET.action", "$_GET.message", "$_GET.si_id", "$icon_set.icon_set_name", "$icon_set.si_id", "$wpdb.prefix" ], "tgt": [ "$wpdb", "__", "_e", "admin_url", "count", "defined", "die", "esc_attr", "isset", "wp_create_nonce", "wp_verify_nonce" ], "metrics": { "ast": { "op.eq": 3, "op.gt": 1, "op.ne": 1, "op.lor": 1, "op.mod": 1, "op.land": 1, "max_depth": 17, "op.concat": 18, "call_count": 34, "node_count": 960, "member_count": 7, "op_density.eq": 0, "op_density.gt": 0, "op_density.ne": 0, "op_density.lor": 0, "op_density.mod": 0, "op_density.land": 0, "member_depth_max": 2, "op_density.concat": 0.02 }, "file": { "size": 6914, "entropy": 4.13 }, "text": { "lines": 105, "top_char": 115, "max_ws_run": 1, "digit_ratio": 0, "space_count": 2626, "char_entropy": 4.13, "unique_chars": 75, "top_char_null": 0, "lines_over_200": 7, "string_density": 0.5, "top_char_ratio": 0.04, "avg_line_length": 63.87, "max_line_length": 349, "empty_line_ratio": 0.01, "last_line_length": 6, "whitespace_ratio": 0.41, "identifier_density": 1.07, "line_length_stddev": 68.15, "normalized_string_count": 5.07, "repeated_char_sequences": 85, "suspicious_string_ratio": 0.02, "trailing_whitespace_lines": 2, "normalized_unique_identifiers": 4.77 }, "binds": { "count": 7 }, "binary": { "peak_region_bytes": 3072, "peak_region_entropy": 4.49 }, "strings": { "sql": 1, "bytes": 1021, "count": 52, "avg_length": 19.63, "max_length": 47, "avg_entropy": 3.17, "entropy_stddev": 0.52 }, "comments": { "chars": 32, "count": 1, "lines": 1, "to_code_ratio": 0.01 }, "identifiers": { "count": 112, "unique": 32, "avg_length": 8.78, "max_length": 17, "min_length": 2, "avg_entropy": 2.6, "reuse_ratio": 0.29, "length_stddev": 4.04, "high_entropy_count": 1, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.69, "all_uppercase_ratio": 0.06, "underscore_prefix_count": 3 } } }, "id": 297, "mol": "H₂(CmOs₂)", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/inc/backend/main-page.php", "pid": 0, "risk": 3, "sha": "83a38d48eb7dc77b053fc7ce631da0bd2ae877245b877da6b06e27f71467b811", "size": 6914, "traits": [ { "id": "metadata/library/web-frameworks::wordpress-core-api-symbols--lowercase", "conf": 0.9, "crit": 1, "desc": "WordPress lowercase API symbol prefix", "spans": [ [ 3691, 0 ] ] }, { "id": "metadata/library/web-frameworks::wordpress-plugin-dir-constants--abspath", "conf": 0.9, "crit": 2, "desc": "WordPress plugin directory constants (ABSPATH)", "spans": [ [ 15, 0 ] ] }, { "id": "micro-behaviors/communications/http/request/params::get-dup", "conf": 0.85, "crit": 3, "desc": "Reads PHP query parameters via $_GET", "spans": [ [ 111, 4 ] ] }, { "id": "micro-behaviors/communications/http/request/params::wordpress-nonce-parameter", "conf": 0.94, "crit": 3, "desc": "Handles a WordPress nonce parameter", "spans": [ [ 134, 8 ] ] }, { "id": "micro-behaviors/os/security/runtime::wordpress-nonce-verification", "conf": 0.9, "crit": 3, "desc": "Verifies a WordPress request nonce", "spans": [ [ 165, 15 ] ] }, { "id": "micro-behaviors/os/stdio::php-echo-statement", "conf": 0.95, "crit": 3, "desc": "Emits data with a PHP echo statement", "spans": [ [ 545, 66 ], [ 696, 67 ], [ 843, 69 ], [ 1298, 50 ], [ 4235, 103 ], [ 4436, 40 ], [ 4957, 103 ], [ 5303, 103 ] ] }, { "id": "metadata/library/web-frameworks::wordpress-plugin-dir-constants", "conf": 0.9, "crit": 2, "desc": "WordPress plugin directory constants", "uses": [ 1 ], "spans": [ [ 15, 0 ] ] } ], "type": "php" }, { "ctx": [ { "b": "ju)^#A3eX5w[=c]wge/\u003elq{YDr7Fw=aA8oywnbQ6b2i50B7ol8Ac9jrx\u003eg:*wPF#ky?m3@wG-lDj0l:K4gkjdx)7Rey*?yajTarNB1IutzE)SoxK$Q.b0DCyarR^Hjy\u0026eHay/j@B8%F*vq{otA=g", "ln": 0, "col": 1, "line": 1 }, { "b": "arR^HarR^Hjy\u0026eHay/j@B8%F*vq{oty\u0026r%8b0DCyarR^HarR^HarR^HarR^HjzwUBaAINkjT90MAa\u003chkwN/y(az2R7uTX4#AWTjIq^S9\u003ck$svJl}Ho9e*\u0026q*z!A#uB8LM5vqEMnzF7sYj%zaTy\u0026?/:ju)^#A3eI0c)}q\u003cv}x.5p\u0026Zb*B0az1v}/v/aw36YzGvfRcT*H{wPI{iA+frkePU\u0026ux\u003c\u003e*fx\u003e870B0\u0026z3j%zTz4gjj2arR^HarR^HarS^1wnciJ4gjj2arR^HarS^1wnciJ4gjj2arR^HarS^Sx)7Q", "ln": 163, "col": 5, "line": 5 }, { "b": "B8%F*vq{otB8LM5vqH0ej}d\u0026warR^HarR^HarR^HarR^?A6u:fy\u002613laA.-Fw]zYjzE[2mB-p(1By/IQfk%8:3lQDlarR^HarR^HarR^HauTgGB%7phvrlGMb4kBxB8LM5vqEJ8BAzzwb0DCyarR^HarR^HarR^HarR^HarR^HjzwzFvqPM#B8\u003e+Na$\u003eP[CxUVKvpJ\u003eTz/ozzv@DiqAboVfx(m#By?WV@e]UGykwk7Gw\u003c6*HBz#pEgEirxmKo/VCxXl-w)]gXvScg2e[n*pb@d@evp%d)b@d}Qv}f7\u003eB5l)*B8@{jxK#3(B0SOhf/7*Fh90JOfGg:Ch-S=P", "ln": 448, "col": 21, "line": 10 }, { "b": "fkk3svqPNt4gjj2arR^HarR^HarR^HarR^HarS1GvSMGIct)plA61HoarR^HarR^HarR^HarR^HarR^HjzwzFvqPM#x\u003efvJBA.CvBy/FACwgP2wPPHTa%p@pA=k=gx(mMDb5RryazbU5zdNf{A+5:4jT8N7ayP85z*cqzvqZd9vrb{%v%HiYBAhIna%p@Ev)82HBAzFyiXJd9y*?A$z/PXEBA.CvBy/FBv@DiqCwgP2wPR#Dw]zH4z*bL$B-..zzz0X0w\u0026Bmevl3e7gbZ{#gCyTwvQS.8i5rxIgH\u0026i$h-ij0zz2QAzepC7jUX=Fh8^DMh-9rAi5-f)ze.NJwiC3Ux([DdAXhGHwm]E}eIFIWze.M", "ln": 960, "col": 397, "line": 13 } ], "depth": 1, "facts": { "imp": [ [ "", "defined" ], [ "", "die" ], [ "", "esc_attr" ] ], "tgt": [ "_e", "defined", "die", "esc_attr" ], "metrics": { "ast": { "op.lor": 1, "max_depth": 7, "op.concat": 1, "call_count": 4, "node_count": 69, "op_density.lor": 0.01, "op_density.concat": 0.01 }, "file": { "size": 2084, "entropy": 4.9 }, "text": { "lines": 29, "top_char": 115, "max_ws_run": 1, "digit_ratio": 0.08, "space_count": 502, "char_entropy": 4.9, "unique_chars": 75, "top_char_null": 0, "lines_over_200": 2, "string_density": 0.17, "top_char_ratio": 0.05, "avg_line_length": 69.86, "max_line_length": 493, "last_line_length": 6, "long_token_count": 2, "whitespace_ratio": 0.27, "identifier_density": 0.17, "line_length_stddev": 107.48, "normalized_string_count": 0.93, "repeated_char_sequences": 20, "normalized_unique_identifiers": 1.03 }, "binary": { "peak_region_bytes": 2048, "peak_region_entropy": 5 }, "strings": { "bytes": 96, "count": 5, "avg_length": 19.2, "max_length": 25, "path_count": 1, "avg_entropy": 3.28, "entropy_stddev": 0.42 }, "identifiers": { "count": 5, "unique": 5, "avg_length": 6.6, "max_length": 13, "min_length": 2, "avg_entropy": 2.16, "reuse_ratio": 1, "length_stddev": 3.93, "all_lowercase_ratio": 0.8, "all_uppercase_ratio": 0.2, "underscore_prefix_count": 1 } } }, "id": 298, "mol": "H₂(CmOs)", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/inc/backend/panel-head.php", "pid": 0, "risk": 3, "sha": "dfbd5632251bec589d4f7a3d8ea8bd281c2da73964f48d86ed3f23a59e6c20a7", "size": 2084, "traits": [ { "id": "metadata/library/web-frameworks::wordpress-plugin-dir-constants--abspath", "conf": 0.9, "crit": 2, "desc": "WordPress plugin directory constants (ABSPATH)", "spans": [ [ 15, 0 ] ] }, { "id": "micro-behaviors/communications/http/client/resource::external-iframe-element-load", "conf": 0.92, "crit": 3, "desc": "Loads external iframe content", "spans": [ [ 1024, 99 ] ] }, { "id": "micro-behaviors/os/stdio::php-echo-statement", "conf": 0.95, "crit": 3, "desc": "Emits data with a PHP echo statement", "spans": [ [ 227, 47 ] ] }, { "id": "metadata/library/web-frameworks::wordpress-plugin-dir-constants", "conf": 0.9, "crit": 2, "desc": "WordPress plugin directory constants", "uses": [ 0 ], "spans": [ [ 15, 0 ] ] } ], "type": "php" }, { "id": 299, "mol": "H(Os)", "sha": "c383114d9e846b6f92d51623e0c404328b49783477151fc788def11cf3ea66f2", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/inc/backend/promobar.php", "risk": 1, "size": 1745, "type": "php", "depth": 1 }, { "ctx": [ { "b": "ju)^#A3eX5w[=c]wge/\u003elq{YDr7Fw=aA8oywnbQ6b2i50B7ol8Ac9jrx\u003eg:*wPF#ky?m3@wG-lDi$hKez/Pz$v}WnouR\u003cJ%r3kQ\u003cas7-lC%atpC42ho4gmB\u003e3lQDlazCBobX{$pjV$fbv@DmacN/GiarR^HDKQr8arR^HarR^LbX{$pauZ?)C42hG4gjj2arV7w3lQDlaz2wgwEO$?arR!N4gjj2arR^HarR{PyH}=ljS[/OzFsibDsZD9wQ5r7w[+*)wgeZDvqEwO4giKKarR^HEglKi4glY=A+eV?xECcuv@Dmaao", "ln": 0, "col": 1, "line": 1 }, { "b": "arR^HarR^HasznHz!%JfA9)N5B7]-gz/c{=j%Uk*z!%JfA9)N5B7]-gz/d0=4gjv{v@Dl(wQ5rqvivYQB7GxavqGU7wHF*rv@Dl(wQ5rqvjsnE3tjf[vQT6}bZjirvML2abXZ+bzGu{-aAIamx\u003c\u003e*(DsXGIx\u003e870B16fW3m6.4vR/Q.zEEx[auZ?)Cw}84eK1b]wObU3ata=Xvq{o{B8LM5vqGp+v@Dmab0ckvx\u003ew=cB8$]mc)S\u003eFuUK41df", "ln": 765, "col": 12, "line": 33 }, { "b": "arR^HarS3TB0?z72}lq\u003cdlv$CEglJ$w*?wmB7GCwbWTwzq=D%Gv%8*jwO#P%Aa9x\u003ccTweI4gmB\u003e3lQDlaA}^iA+e=}A+e:5d05*mx([6nwNxK\u003cCYWq8x\u003eq9\u003ec)Sd@pG7j%cU4ptA+fcguVoB^wHy+je*?#.wPI{3xjTjXcN?a^3vJu\u003cwO=B04gmB\u003e3lQEnA9)S%wnc6}v@%bcwnM3#uV*y9c[c+@vpTj?zz2)wA6FqIxjTkmAc0QLz!0G\u0026y:K1gB8$=5wJ.:}dlv$CEglJ{CXImY4gi", "ln": 2298, "col": 3, "line": 100 } ], "depth": 1, "facts": { "imp": [ [ "", "defined" ], [ "", "die" ], [ "", "sanitize_text_field" ], [ "", "esc_url_raw" ], [ "", "sanitize_text_field" ], [ "", "serialize" ], [ "", "serialize" ], [ "", "isset" ], [ "", "intval" ], [ "", "isset" ], [ "", "wp_redirect" ], [ "", "sanitize_text_field" ], [ "", "wp_redirect" ], [ "", "admin_url" ] ], "mbr": [ "$_POST.current_page", "$wpdb.prefix" ], "tgt": [ "$wpdb", "admin_url", "defined", "die", "esc_url_raw", "intval", "isset", "sanitize_text_field", "serialize", "wp_redirect" ], "metrics": { "ast": { "op.eq": 3, "op.lor": 2, "max_depth": 14, "op.concat": 3, "call_count": 16, "node_count": 883, "member_count": 2, "max_array_len": 11, "op_density.eq": 0, "op_density.lor": 0, "member_depth_max": 2, "op_density.concat": 0 }, "file": { "size": 2524, "entropy": 4.67 }, "text": { "lines": 112, "top_char": 105, "tab_count": 21, "max_ws_run": 1, "digit_ratio": 0, "space_count": 562, "char_entropy": 4.67, "mixed_indent": 1, "unique_chars": 59, "top_char_null": 0, "string_density": 0.54, "top_char_ratio": 0.05, "avg_line_length": 20.54, "max_line_length": 74, "empty_line_ratio": 0.01, "last_line_length": 5, "whitespace_ratio": 0.32, "identifier_density": 1.37, "line_length_stddev": 17.73, "normalized_string_count": 5.67, "repeated_char_sequences": 5, "suspicious_identifier_ratio": 0.03, "normalized_unique_identifiers": 8.81 }, "binds": { "count": 5 }, "binary": { "peak_region_bytes": 2524, "peak_region_entropy": 4.69 }, "strings": { "bytes": 517, "count": 60, "avg_length": 8.62, "max_length": 35, "avg_entropy": 2.29, "entropy_stddev": 1.08 }, "identifiers": { "count": 153, "unique": 60, "avg_length": 9, "max_length": 19, "min_length": 1, "avg_entropy": 2.62, "reuse_ratio": 0.39, "length_stddev": 4.71, "sequential_names": 2, "single_char_count": 2, "single_char_ratio": 0.03, "high_entropy_count": 3, "high_entropy_ratio": 0.05, "all_lowercase_ratio": 0.58, "all_uppercase_ratio": 0.02, "underscore_prefix_count": 1 } } }, "id": 300, "mol": "H₃(Cm₂DbOs)", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/inc/backend/save-set.php", "pid": 0, "risk": 3, "sha": "cf19814f3d4cd76300c0afcb336eee96c6aad81a2e08502c0caf6178167788ea", "size": 2524, "traits": [ { "id": "metadata/library/web-frameworks::wordpress-core-api-symbols--lowercase", "conf": 0.9, "crit": 1, "desc": "WordPress lowercase API symbol prefix", "spans": [ [ 2363, 0 ] ] }, { "id": "metadata/library/web-frameworks::wordpress-plugin-dir-constants--abspath", "conf": 0.9, "crit": 2, "desc": "WordPress plugin directory constants (ABSPATH)", "spans": [ [ 15, 0 ] ] }, { "id": "micro-behaviors/communications/http/request/params::post-dup", "conf": 0.85, "crit": 3, "desc": "Reads PHP form parameters via $_POST", "spans": [ [ 72, 5 ] ] }, { "id": "micro-behaviors/communications/http/response::wordpress-admin-redirect", "mbc": "C0002", "conf": 0.92, "crit": 3, "desc": "Redirects to WordPress admin URL", "spans": [ [ 2449, 22 ] ] }, { "id": "micro-behaviors/communications/http/response::wordpress-redirect", "mbc": "C0002", "conf": 0.92, "crit": 3, "desc": "Sends a WordPress HTTP redirect", "spans": [ [ 2363, 11 ] ] }, { "id": "micro-behaviors/data/serialize/object::serialize-symbol", "conf": 0.7, "crit": 3, "desc": "References PHP serialize() or a serialize method", "spans": [ [ 829, 9 ] ] }, { "id": "micro-behaviors/os/security/auth/password::php-secret-literal-comparison", "conf": 0.94, "crit": 3, "desc": "PHP secret variable compared to literal", "spans": [ [ 104, 13 ] ] }, { "id": "metadata/library/web-frameworks::wordpress-plugin-dir-constants", "conf": 0.9, "crit": 2, "desc": "WordPress plugin directory constants", "uses": [ 1 ], "spans": [ [ 15, 0 ] ] } ], "type": "php" }, { "id": 301, "mol": "H(Os)", "sha": "e3a77291d09f0c45a3362718eb62c531acef1e9533e098b796af16fa68cc5ccb", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/inc/backend/theme-icon-set.php", "risk": 2, "size": 6183, "type": "php", "depth": 1 }, { "id": 302, "mol": "H(Os)", "sha": "cdedb98477eb59c10841eeaa66defdc0bb72f7ec795016db2298de17bb775956", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/inc/backend/widgets.php", "risk": 2, "size": 3415, "type": "php", "depth": 1 }, { "id": 303, "mol": "H(Os)", "sha": "fa9e85cdbaaa678f7c8fd4528484ec7daa788eae4b818ac253f5f461aaea3b8c", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/inc/frontend/icon-group-list.php", "risk": 2, "size": 6399, "type": "php", "depth": 1 }, { "id": 304, "mol": "H(Db)", "sha": "875a6ce35a8a741805199d6623feeefcc464bbb85c361ce2afc4c12238b34de4", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/inc/frontend/shortcode.php", "risk": 1, "size": 764, "type": "php", "depth": 1 }, { "ctx": [ { "b": "c$WQtv@#B6zxHtMdiJ%D3lQDlas5vEB-7Yhx(v(ic[co=4gjj2arR^HarSr\u003cvqG:5vQS+ZwO#33yi7Igz!i#jxK#i}4giKKarR^HarR^Hfe2!kAV/Hzy\u0026r-)x(mMax\u003e870azCX3xjRIVarR^HarR^HbQ+3Hz!abvdk2KRc)@Ivx\u003e7{aefDq+vq)/jv@DlpB-qenvpQ%0B-..zzyl$Tw{503BzkVhc$K\u0026O4gj:wao", "ln": 0, "col": 1, "line": 1 }, { "b": "z/c{Ke]klBwHF{oy?Wx{cOcxLB-7Yhx(v(qwHO:G4gjj2arR^HarR^HarR{TBzbxfdk2aDz/YGhBsnH?vq{otw[+*)wg-1Cvq{f%AWJp*w[=c[c){SQAc0QxA=M8scN*VYBzU?xcNQu84gjj2arR^HarR^HarUkFAb]JkwO#PTwObv[y\u0026?6Oi$hJtarR^HarR^HarR!Ivr9G1Bz:DZx\u003e7{\u0026wfs2TbQ^+Fx(+Z+4gjj2arR^HarR^HarU\u0026oAV/7kvp%c]jS[@/e]tfgx\u003c\u0026Ap4gjj2arR^HarR^HarR^HarU+", "ln": 215, "col": 34, "line": 7 }, { "b": "az(mqBzkYgwJy@CvqH0@4gjj2arR^HarR^HarV7Ye]LYuzyu}y3lQDlarR^HarR^HarR^HarR^HatdOIc)%7Ey?m9#cOcxLB-7Yhx(v(qwHO:G4gjj2arR^HarR^HarQ", "ln": 584, "col": 16, "line": 15 }, { "b": "wN]dZzdd6*e{827q+{dpdk2:-y=-7karR^HarR^HarR^HarR^HarR^HarR^Hv@Dmaz!@#qy\u0026r@mx(do\u003ewNxO2y:?BP3lQDlarR^HarR^HarR^HarR^HarR^HazK+@wPA5AcNi5sB1I9oz/ddvzdd6*cN*V\u003evqEuazdd6*uV*y9dlv$CarR^HarR^HarR^HarR^", "ln": 806, "col": 47, "line": 19 }, { "b": "arR^HarR!Pdlv$CarR^HarR^HEjmk!3lQDlarR^HatkxlwmPy(xcp[#z/cXtzY\u0026\u003egB94\u0026#arR^HarR^HbQ+2+vq{otx\u003e870eN-g2eP=2Exj\u003e^@cN*VTy?Wx{c$WQtv@#B6zxHtRaBsL8arR^HarR^HarR^HwPz*fA:JA{vp{YCatt\u003e^3lQDlarR^HarR^HazCBgc)Qh*bvLLjeOOZkzy]%ABzLIodk2^Ly:Z.PjV%]ncN/GiarR^HarR^Hao", "ln": 1058, "col": 14, "line": 23 }, { "b": "arUxgasFG-cNi5sB1I9oz/ddGD2Nsxdk2^Ly:Z.PjV%]nx(do\u003ewI4Raz/fRzasnATbQ+2+vq{otx\u003e870eOP6gxjSCte{pVtc[co4jS(a1dgDRbarR^HarR^HarR!N4gjj2arR^HarR^H", "ln": 1802, "col": 11, "line": 40 }, { "b": "arR^HarR^HarR^HarR^HC42zlB7!#)z*9r!as5u.x(m)jBx-S\u003ezdL\u003cOvq{otx\u003e870ePUPlwn=Vot{?6NC42hndlv$CarR^HarR^HarR^HarR^HC42zlB7!#)z*bMbw=", "ln": 3378, "col": 1, "line": 72 }, { "b": "x)7Rey*?yajTarNB1I9oz/ddoz!abqaAITIy?k:Nwnca7y*?PIaz#anwJI81cM\u003c]G3lQDlarR^HarR^HarR^HarR^HarR^HasxoZx)7Rey*?yajTarNB1I9oz/ddCA+fAdwP]sZcJ", "ln": 4388, "col": 28, "line": 82 }, { "b": "arR^HarR^HarR^Hasxo=zG6-uaAR)FwJ.kJx\u003eg:=zxZivvqPNsb57L9zGx2fas!NGv@Dl(Bzk\u0026kwGSGCcTx}#x([f5t{pzmvqH6$jT8l@d\u003ceLoz/e{7x([f5as!MZa$(bcas^)darR^HarR^HarR^HarR^HarR^HarR^HcP(9XAclmBBA}?pjTaMNwmPm?a%p=izdL\u003cOx\u003e870B6y1md\u003ceLoz/e{7x([f5as!MZu0z2Wvp%dSa%q5qy\u0026%qLa$1G-azCt7zEm9{vp%c]d\u003cch-ffQ:ad?8?darR^HarR^HarR^HarR^HarR^HarR^OjzwXLB-X:FD2NsTb4$X3wmYT5az$R8wJ.kKv@DmatpgKzazCt7zEmH1BzLIhd\u003cciBtwmO=zEmQ4woqG\u003ca%q5qy\u0026%qLa$1G-azCt7zEmQ4woqGcd\u003cch-ffQ:ad?8*", "ln": 5435, "col": 12, "line": 98 }, { "b": "arR!vw/@GEc){SQAc0QLz/P@dvR/Qcx\u003e870B0\u0026y?y?mG%Bz8^VatCqO3lQDlarR^HarR^HaBsL8arR^HarR^HarR^HarR^HwPz*fA:JA{vp{YCatC}!3lQDlarR^HarQ", "ln": 10046, "col": 10, "line": 177 }, { "b": "3lQDlarR^HarR^HarR^Has5u.bvLLjeN-y5CR9-IvpS}\u0026cN*V?xM58ydlv$CarR^HarR^HarR^HarR^HbRAIuvr:hE4gjj2arR^HarR^HarR^HarR^HarU/Ey=SXEAc2xcv@=p5Byfi1A+O@\u003ey?kkcyghu]B-IpH4gjj2arR^HarR^HarR^HarR^HarU=KAaI6McVB0BBseQG3lQDlarR^HarR^HarR^HarR^Hay[]5vlbIUvpKy[z/dZDAc2x2v@Dl(y?W%juTWC^x(v(ouW3Ebz/f5@jTRv5ayPkguVPZ$x(Ff3C42A9vpB4:e[5H6CWCubzEWle4gjj2arR^HarR^HarR^HarR^HarU-Fv}f7\u003eB2\u003eBQB-7Yhx(v(ic#@)udgDRbarR^HarR^HarR^HarR^HarR!N4gjj2arR^HarR^HarR^HarR^HarR^HarU\u0026oAV/BmByeS]y\u0026\u003clejT910x)7Rey*?yajTTVSB1H)rwNPQ4vq{otw[=76wPxwDA:-]mk0i[9vqWh$y*?yajTTVSB1I0ry\u0026\u003cleeO[\u003c8wO-.TmRMWXwPw[WC%0:3Aa9SFb0ckvarR^HarR^HarR^HarR^HarR^HarR^HB7GD2w[=76wPw[zjS(amB7Gf0v@@\u0026cwizbBAc0QLwPPIox-", "ln": 11153, "col": 24, "line": 212 }, { "b": "B.9YWvqG:7k0:13jtgR(BzkVhj%@A33lQDlarR^HarR^HarR^HarR^HarR^HazbLjasH}DjS(Evazz@XjS(Emj0nk/d\u003e7]marR^HarR^HarR^HarR^HarR^HarR^HDKQr8arR^HarR^HarR^HarR^HarR^HarR^HarR!FwPRo\u003ex(4)5AV=\u003e}asxo\u0026Ac8", "ln": 11720, "col": 104, "line": 221 }, { "b": "zF\u003c3aeN@ZpBy/uib0Glv3lQDlarR^HarR^HauT6PxMvV@jTaSHC42D4A+PGmi^bBQwgfbXa%pxivrlGMb4kCieN@QnB7D}nz/fUtvq{otv@c78wI4\u003ewwG\u0026m9A+O@ly**^:y=@$Oz/fUtv@c78wGUD8BAzCsb0FbgAa9Sbv@bN{B3gZTvrl9@v@Dmaao", "ln": 12146, "col": 35, "line": 229 }, { "b": "B8\u003e+kjS(0#Bzbxfdk2jDzE+dyx(dGgdk24JBAe=SB8\u003e+rdlv$CarR^HarR^HarR^HbQ+2+vq{otx\u003e870eOP6gxjSCte{pVtd06Asdlv$CarR^HarR^HarR^HbQ+2", "ln": 13020, "col": 17, "line": 249 }, { "b": "yH}Jmdlv$C4giKK4gjj2arR^HarSr\u003cBz(8lBzkXpA+e\u0026]A+fb#wGUP0wO+)#aAIjmCoyNkwmVhSarR^HarR^HbQ+3OzG6-utw^\u003e^wJ.kVz/oDlx(Cn4cN*VTy?Wx{c$WQtv/", "ln": 13614, "col": 42, "line": 267 }, { "b": "arV7Yi$hJtarR^HarR!Ivr9GfA+fA3Bzbl5wGTbUcNQ$+3lQDlarR^Has5u.e[5ZueP+VqzdL7ze[nZiv@0G8B-7Yhx(v(ic[co=4gjj2arR^HarR^HarU\u0026oAV+", "ln": 17215, "col": 7, "line": 373 }, { "b": "D1z4AiWX/-cP.+AarR^HarR^HarR^HarR^HarR^HAb]JkuVY%)zdK?May/k4v@2T^uVY%)zdL^r3lQDlarR^HarR^HarR^HarR^Has5u.e[5ZueOOZkzy]WsB95JSvq{otx\u003e870ePbGGwHw]VA+f9aC4A6", "ln": 17954, "col": 57, "line": 394 }, { "b": "arR^HarR^HarR^HarR!Ivr9GiBZ!Y\u0026z!@@}AV^H/cVA%ocP.+AarR^HarR^HarR^HarR^HarR^HC42zlw]zG@wPw[Ras5vSxLzJpe{pVtc[dj!3lQDlarR^HarR^Hao", "ln": 18086, "col": 6, "line": 397 }, { "b": "arR^HarR^HarR^HarR^HarR^HarR{TcUWBgtv.e:vj=hgvp%d6zEEx[jT8m7x(do\u003ewNxs-zdLjBb3=MBe[5\u003czAWSqRA:{EFx(do\u003ewNw\u003e^A::k$x(do\u003ewNxs-zdN04i$hJtarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^Lc)@.DAclnbwmoN*eOP6gxjSVjvqPNsa$1)Pzdd6*uV6p?wH/bLt{?6NvruQic)%gDy\u0026%qpenn%fx8", "ln": 18997, "col": 19, "line": 413 }, { "b": "arR^HarV7w3jNs+arR^HarR!P4giKK4giKKarR^HarR^Hfe4cQB98ECvqG:5Bzbkdx\u003eeudxKM09zE)x\u0026aARJAx(mB3wO(0@BrCHtazULlaAhvjB8@EDA3eObwftz]v@=c$wO#Pjz/cXkwQbzqA+frkay]zmzvD{}arR^HarR!Ivr8!:arR^HarR^HarR^HarR^Hx(mB3wO(0@Bz(g\u003ewi\u003elRvr\u0026$Uar\u00264sAc0QBv@DlpB7]@ib0dChw]zNeeN-\u003cmB8L]bazCt7zxK1mDsWJ)arR^HarR^Hx(mB3wO(0@Bz(g\u003ewi\u003elRvr\u0026$CjS\u003e}1bvLLjeD", "ln": 20937, "col": 7, "line": 461 }, { "b": "x(+zoA+frkwN(](zE:(2wN/:(zdNQbazCBgyH}3{CwXKqB0bBxwPI{7wdn\u003e*arR^HarR^Lc)@Fxwo/KKe]LRQcU)psB-nYVx(mB3wO(0@Bz(g\u003ewi\u003elRvr\u003czoB-7Yhx(v(ic$K?IDKQr8arR^HarR^HarR!Ivr9GawQcTYwmV(Daz0fvwQcTYwmWqmBy/rdi$hJtarR^HarR^HarR!vw/@HqwQcTYwmV(DjV%]zi4k$%4gjj2arR^HarR^HarR^HarU=qzeZQXas5vSxLzJpe{pVtc[c=?wPhD]v}v5oAcJ-YaswJ=i$hJtarR^HarR^HarR^HarR^Sd%butA61HoarR^HarR^HarR^HarR^Hfe3:MB4G\u003eWzC$m}wJ+cDze.0HAcJM*4gjj2arR^HarR^HarR^HarR{", "ln": 21702, "col": 55, "line": 475 }, { "b": "arR^HaA?glayYnfwmY^*v@Dg4AV^H/B.JErz!%uje{82gBAh8kxdbh\u003c4gjj2arR^HarR^HarR^HarR^HarU\u0026oAV!?fA+5:4uT[d#auZ\u0026Rz/Px1A:J{4x\u003e7{@wPI]nd\u003cchZcM\u003c]", "ln": 24363, "col": 16, "line": 539 }, { "b": "cM\u003c=Vd\u003ce+xw]?K9uWi+AaswoVas!Nzy\u0026%+vd\u003cchZcM\u003c]ZcOM[\u003cd\u003cchZcM\u003c]Zv@Dg4AX4UbarR^HarR^HarR^HarR^HcOoKNvRYX1eN\u0026TyePUPlwn=VtiV@uMw]?K9uW9Xzao", "ln": 26538, "col": 47, "line": 592 } ], "depth": 1, "facts": { "imp": [ [ "", ".on" ], [ "", ".closest.find.html" ], [ "", ".closest.find" ], [ "", ".closest" ], [ "", "e.preventDefault" ], [ "", "btnClicked" ], [ "", "image" ], [ "", "wp.media.open.on" ], [ "", "wp.media.open" ], [ "", "wp.media" ], [ "", "uploaded_image" ], [ "", "image.state.get.first" ], [ "", "image.state.get" ], [ "", "image.state" ], [ "", "image_url" ], [ "", "uploaded_image.toJSON" ], [ "", "console.log" ], [ "", "jQuery.val" ], [ "", "jQuery" ], [ "", "jQuery.html" ], [ "", "jQuery" ], [ "", ".click" ], [ "", "error_flag" ], [ "", ".val" ], [ "", "error_flag" ], [ "", "error_html" ], [ "", ".attr" ], [ "", ".closest.find.html" ], [ "", ".closest.find" ], [ "", ".closest" ], [ "", ".val" ], [ "", "error_flag" ], [ "", "error_html" ], [ "", ".attr" ], [ "", ".closest.find.html" ], [ "", ".closest.find" ], [ "", ".closest" ], [ "", ".val" ], [ "", ".val" ], [ "", "error_flag" ], [ "", "error_html" ], [ "", ".attr" ], [ "", ".closest.find.html" ], [ "", ".closest.find" ], [ "", ".closest" ], [ "", ".val" ], [ "", ".val" ], [ "", "error_flag" ], [ "", "error_html" ], [ "", ".attr" ], [ "", ".closest.find.html" ], [ "", ".closest.find" ], [ "", ".closest" ], [ "", "icon_counter" ], [ "", ".val" ], [ "", ".val" ], [ "", "icon_title" ], [ "", ".val" ], [ "", "icon_image" ], [ "", ".val" ], [ "", "icon_width" ], [ "", ".val" ], [ "", "icon_height" ], [ "", ".val" ], [ "", "icon_link" ], [ "", ".val" ], [ "", "icon_link_target" ], [ "", ".val" ], [ "", "icon_tooltip_text" ], [ "", ".val" ], [ "", "border_type" ], [ "", ".val" ], [ "", "border_thickness" ], [ "", ".val" ], [ "", "border_color" ], [ "", ".val" ], [ "", "shadow" ], [ "", ".val" ], [ "", "shadow_offset_x" ], [ "", ".val" ], [ "", "shadow_offset_y" ], [ "", ".val" ], [ "", "shadow_blur" ], [ "", ".val" ], [ "", "shadow_color" ], [ "", ".val" ], [ "", "padding" ], [ "", ".val" ], [ "", "append_html" ], [ "", ".html" ], [ "", ".append" ], [ "", ".is" ], [ "", ".show" ], [ "", ".is" ], [ "", ".hide" ], [ "", ".each" ], [ "", ".val" ], [ "", ".html" ], [ "", "reset_styles" ], [ "", ".keyup" ], [ "", ".closest.find.html" ], [ "", ".closest.find" ], [ "", ".closest" ], [ "", ".on" ], [ "", ".parent.find.hasClass" ], [ "", ".parent.find" ], [ "", ".parent" ], [ "", ".parent.find.removeClass.addClass" ], [ "", ".parent.find.removeClass" ], [ "", ".parent.find" ], [ "", ".parent" ], [ "", ".parent.find.removeClass.addClass" ], [ "", ".parent.find.removeClass" ], [ "", ".parent.find" ], [ "", ".parent" ], [ "", ".closest.find.slideToggle" ], [ "", ".closest.find" ], [ "", ".closest" ], [ "", ".on" ], [ "", "confirm" ], [ "", "icon_counter" ], [ "", ".val" ], [ "", ".val" ], [ "", "selector" ], [ "", ".closest.fadeOut" ], [ "", ".closest" ], [ "", "selector.closest.remove" ], [ "", "selector.closest" ], [ "", ".sortable" ], [ "", ".click" ], [ "", "error_flag" ], [ "", ".val" ], [ "", "error_flag" ], [ "", ".closest.find.html" ], [ "", ".closest.find" ], [ "", ".closest" ], [ "", "error_flag" ], [ "", ".parent.find.html" ], [ "", ".parent.find" ], [ "", ".parent" ], [ "", ".change" ], [ "", ".val" ], [ "", ".show" ], [ "", ".hide" ], [ "", ".hide" ], [ "", ".show" ], [ "", ".click" ], [ "", "inner_html" ], [ "", ".html" ], [ "", "inner_html" ], [ "", ".trim" ], [ "", ".show" ], [ "", ".ajax" ], [ "", "set_filter" ], [ "", "html" ], [ "", ".show.html" ], [ "", ".show" ], [ "", ".hide" ], [ "", ".show" ], [ "", ".on" ], [ "", ".fadeOut" ], [ "", ".on" ], [ "", "src" ], [ "", ".find.attr" ], [ "", ".find" ], [ "", ".val" ], [ "", ".html" ], [ "", ".fadeOut" ], [ "", ".click" ], [ "", ".show" ], [ "", ".click" ], [ "", ".hide" ], [ "", ".wpColorPicker" ], [ "", ".click" ], [ "", ".val" ], [ "", ".hide" ], [ "", ".show" ], [ "", ".val" ], [ "", ".hide" ], [ "", ".show" ], [ "", ".click" ], [ "", ".show" ], [ "", ".hide" ], [ "", ".hide" ], [ "", ".show" ], [ "", ".show" ], [ "", ".hide" ], [ "", ".click" ], [ "", "pre_set_type" ], [ "", "confirm" ], [ "", ".html" ], [ "", ".html" ], [ "", ".hide" ], [ "", ".show" ], [ "", ".show" ], [ "", ".removeAttr" ], [ "", ".show" ], [ "", ".hide" ], [ "", ".hide" ], [ "", ".hide" ], [ "", ".show" ], [ "", ".show" ], [ "", ".removeAttr" ], [ "", ".show" ], [ "", ".hide" ], [ "", ".hide" ], [ "", "prev_theme" ], [ "", ".click" ], [ "", "already_icons" ], [ "", "clicked_theme" ], [ "", "check" ], [ "", "check" ], [ "", "confirm" ], [ "", "check" ], [ "", ".show" ], [ "", "url_only" ], [ "", "prev_theme" ], [ "", ".remove" ], [ "", "sub_folder" ], [ "", "folder" ], [ "", ".ajax" ], [ "", "image_array" ], [ "", ".parseJSON" ], [ "", "image_name" ], [ "", ".attr" ], [ "", ".attr" ], [ "", ".html" ], [ "", ".show" ], [ "", "total_icons" ], [ "", ".wpColorPicker" ], [ "", ".hide" ], [ "", ".is" ], [ "", ".show" ], [ "", ".hide" ], [ "", ".hide" ], [ "", ".show" ], [ "", ".show" ], [ "", ".show" ], [ "", ".hide" ], [ "", ".hide" ], [ "", "incrementorIdArray" ], [ "", ".on" ], [ "", "keyCode" ], [ "", "temp" ], [ "", "temp" ], [ "", ".val.replace" ], [ "", "temp" ], [ "", ".val.replace" ], [ "", ".change" ], [ "", "border_type" ], [ "", ".show" ], [ "", "border_thickness" ], [ "", "border_color" ], [ "", "border_css" ], [ "", ".css" ], [ "", ".hide" ], [ "", ".css" ], [ "", ".click" ], [ "", ".show" ], [ "", ".hide" ], [ "", ".closest.find.css" ], [ "", ".closest.find" ], [ "", ".closest" ], [ "", ".css" ], [ "", ".wpColorPicker" ], [ "", "border_type" ], [ "", "border_thickness" ], [ "", "border_color" ], [ "", "ui.color.toString" ], [ "", "border_css" ], [ "", ".css" ], [ "", ".keyup" ], [ "", ".css" ], [ "", ".keyup" ], [ "", ".css" ], [ "", ".keyup" ], [ "", "border_type" ], [ "", "border_thickness" ], [ "", "border_color" ], [ "", "border_css" ], [ "", ".css" ], [ "", ".keyup" ], [ "", "padding" ], [ "", ".css" ], [ "", ".keyup" ], [ "", "offset_x" ], [ "", "offset_y" ], [ "", "blur" ], [ "", "color" ], [ "", ".css" ], [ "", ".wpColorPicker" ], [ "", "offset_x" ], [ "", "offset_y" ], [ "", "blur" ], [ "", "color" ], [ "", "ui.color.toString" ], [ "", ".css" ], [ "", ".on" ], [ "", ".closest.find.css" ], [ "", ".closest.find" ], [ "", ".closest" ], [ "", ".on" ], [ "", ".closest.find.css" ], [ "", ".closest.find" ], [ "", ".closest" ], [ "", ".on" ], [ "", "animationType" ], [ "", ".find.hasClass" ], [ "", ".find" ], [ "", ".find.addClass" ], [ "", ".find" ], [ "", ".find.toggleClass" ], [ "", ".find" ], [ "", "e.stopPropagation" ], [ "", "e.preventDefault" ], [ "", ".change" ], [ "", "display_type" ], [ "", ".show" ], [ "", ".hide" ], [ "", ".on" ], [ "", "set_id" ], [ "", ".hide" ], [ "", ".show" ], [ "", ".show" ], [ "", ".click" ], [ "", ".html" ], [ "", ".slideDown" ], [ "", ".html" ], [ "", ".removeClass.addClass" ], [ "", ".removeClass" ], [ "", ".slideUp" ], [ "", ".removeClass.addClass" ], [ "", ".removeClass" ], [ "", ".html" ], [ "", ".attr" ], [ "", ".css" ] ], "mbr": [ "$().append", "$().attr", "$().change", "$().click", "$().closest", "$().closest().fadeOut", "$().closest().find", "$().closest().find().css", "$().closest().find().html", "$().closest().find().slideToggle", "$().css", "$().each", "$().fadeOut", "$().find", "$().find().addClass", "$().find().attr", "$().find().hasClass", "$().find().toggleClass", "$().hide", "$().html", "$().is", "$().keyup", "$().length", "$().on", "$().parent", "$().parent().find", "$().parent().find().hasClass", "$().parent().find().html", "$().parent().find().removeClass", "$().parent().find().removeClass().addClass", "$().remove", "$().removeAttr", "$().removeClass", "$().removeClass().addClass", "$().show", "$().show().html", "$().slideDown", "$().slideUp", "$().sortable", "$().val", "$().val().replace", "$().wpColorPicker", "$.ajax", "$.parseJSON", "$.trim", "aps_script_variable.ajax_nonce", "aps_script_variable.ajax_url", "aps_script_variable.icon_collapse", "aps_script_variable.icon_delete_confirm", "aps_script_variable.icon_expand", "aps_script_variable.icon_link", "aps_script_variable.icon_link_target", "aps_script_variable.icon_preview", "aps_script_variable.icon_warning", "aps_script_variable.min_icon_required_message", "aps_script_variable.set_name_required_message", "console.log", "e.keyCode", "e.preventDefault", "e.stopPropagation", "image.state", "image.state().get", "image.state().get().first", "jQuery().html", "jQuery().val", "selector.closest", "selector.closest().remove", "ui.color", "ui.color.toString", "uploaded_image.toJSON", "uploaded_image.toJSON().url", "wp.media", "wp.media().open", "wp.media().open().on" ], "tgt": [ "$", "$().append", "$().attr", "$().change", "$().click", "$().closest", "$().closest().fadeOut", "$().closest().find", "$().closest().find().css", "$().closest().find().html", "$().closest().find().slideToggle", "$().css", "$().each", "$().fadeOut", "$().find", "$().find().addClass", "$().find().attr", "$().find().hasClass", "$().find().toggleClass", "$().hide", "$().html", "$().is", "$().keyup", "$().on", "$().parent", "$().parent().find", "$().parent().find().hasClass", "$().parent().find().html", "$().parent().find().removeClass", "$().parent().find().removeClass().addClass", "$().remove", "$().removeAttr", "$().removeClass", "$().removeClass().addClass", "$().show", "$().show().html", "$().slideDown", "$().slideUp", "$().sortable", "$().val", "$().val().replace", "$().wpColorPicker", "$.ajax", "$.parseJSON", "$.trim", "confirm", "console.log", "e.preventDefault", "e.stopPropagation", "image.state", "image.state().get", "image.state().get().first", "jQuery", "jQuery().html", "jQuery().val", "reset_styles", "selector.closest", "selector.closest().remove", "ui.color.toString", "uploaded_image.toJSON", "wp.media", "wp.media().open", "wp.media().open().on" ], "funcs": [ [ "anonymous", 1 ], [ "anonymous", 23 ], [ "anonymous", 168 ], [ "anonymous", 659 ], [ "anonymous", 1155 ], [ "anonymous", 7956 ], [ "anonymous", 8202 ], [ "anonymous", 8370 ], [ "anonymous", 9023 ], [ "anonymous", 9387 ], [ "anonymous", 9721 ], [ "anonymous", 10519 ], [ "anonymous", 10951 ], [ "anonymous", 11448 ], [ "anonymous", 12828 ], [ "anonymous", 12989 ], [ "anonymous", 13336 ], [ "anonymous", 13493 ], [ "anonymous", 13715 ], [ "anonymous", 14410 ], [ "anonymous", 15194 ], [ "anonymous", 17282 ], [ "anonymous", 18630 ], [ "anonymous", 21797 ], [ "anonymous", 22374 ], [ "anonymous", 23314 ], [ "anonymous", 24122 ], [ "anonymous", 24751 ], [ "anonymous", 24958 ], [ "anonymous", 25139 ], [ "anonymous", 25719 ], [ "anonymous", 26050 ], [ "anonymous", 26897 ], [ "anonymous", 27873 ], [ "anonymous", 28070 ], [ "anonymous", 28358 ], [ "anonymous", 28900 ], [ "anonymous", 29336 ], [ "anonymous", 29753 ], [ "reset_styles", 30393 ] ], "metrics": { "ast": { "op.eq": 36, "op.gt": 5, "op.le": 1, "op.lt": 1, "op.ne": 8, "op.add": 204, "op.land": 3, "op.lnot": 3, "max_depth": 121, "call_count": 554, "node_count": 8202, "member_count": 74, "op_density.eq": 0, "op_density.gt": 0, "op_density.le": 0, "op_density.lt": 0, "op_density.ne": 0, "op_density.add": 0.02, "op_density.land": 0, "op_density.lnot": 0, "max_concat_chain": 101, "member_depth_max": 5 }, "file": { "size": 30650, "entropy": 4.28 }, "text": { "lines": 689, "top_char": 101, "max_ws_run": 8, "digit_ratio": 0.01, "space_count": 10789, "char_entropy": 4.28, "unique_chars": 77, "top_char_null": 0, "lines_over_200": 2, "string_density": 0.73, "top_char_ratio": 0.04, "avg_line_length": 42.48, "max_line_length": 413, "empty_line_ratio": 0.09, "last_line_length": 11, "long_token_count": 6, "whitespace_ratio": 0.4, "identifier_density": 1.26, "line_length_stddev": 36.32, "normalized_string_count": 19.09, "repeated_char_sequences": 507, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 13.15 }, "binds": { "count": 83 }, "binary": { "peak_region_bytes": 21434, "peak_region_entropy": 4.59 }, "source": { "function_count": 1 }, "strings": { "bytes": 8317, "count": 501, "avg_length": 16.6, "max_length": 320, "avg_entropy": 2.98, "empty_count": 31, "entropy_stddev": 1.18 }, "comments": { "chars": 1178, "count": 38, "lines": 38, "to_code_ratio": 0.06 }, "functions": { "count": 1, "nested": 7, "density": 5.81, "anonymous": 39, "avg_params": 0.3, "code_ratio": 2.9, "max_params": 2, "length_stddev": 147.71, "over_100_lines": 3, "over_500_lines": 2, "avg_name_length": 12, "no_params_count": 30, "avg_length_lines": 50, "max_length_lines": 689, "min_length_lines": 3, "avg_nesting_depth": 2.05, "max_nesting_depth": 3, "single_char_params": 6, "avg_param_name_length": 2.17 }, "identifiers": { "count": 871, "unique": 124, "avg_length": 8.39, "max_length": 25, "min_length": 1, "avg_entropy": 2.53, "reuse_ratio": 0.14, "length_stddev": 4.56, "sequential_names": 2, "single_char_count": 3, "single_char_ratio": 0.02, "high_entropy_count": 4, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.83 } } }, "id": 306, "mol": "H₄(Cm₃DbHfU)", "path": "/data/samples/incoming/forager/wordpress/wordpress.org/compendium/accesspress-social-icons/accesspress-social-icons-1.8.2.zip!!accesspress-social-icons/js/backend.js", "pid": 0, "risk": 4, "sha": "e96ca09082346fc470dfcd07bf86d65eef46bafdd090ff8096604e04e4d457c1", "size": 30650, "traits": [ { "id": "micro-behaviors/communications/http/request/client::jquery-ajax-call", "atk": "T1071.001", "mbc": "C0002", "conf": 0.82, "crit": 3, "desc": "Calls jQuery.ajax() to send an HTTP request", "spans": [ [ 11217, 6 ] ] }, { "id": "micro-behaviors/communications/http/request/json::dynamic-link-attribute-assignment", "conf": 0.9, "crit": 3, "desc": "Assigns a URL into a link attribute", "spans": [ [ 19061, 13 ] ] }, { "id": "micro-behaviors/communications/http/request/params::wordpress-nonce-parameter", "conf": 0.94, "crit": 3, "desc": "Handles a WordPress nonce parameter", "spans": [ [ 11373, 8 ] ] }, { "id": "micro-behaviors/ui/window/manage/dom::dom-click-call", "conf": 0.82, "crit": 3, "desc": "Calls click() on a DOM element", "spans": [ [ 1122, 9 ] ] }, { "id": "micro-behaviors/data/string/concat::dense-string-fragment-concatenation", "conf": 0.9, "crit": 3, "desc": "Dense concatenated string fragments", "spans": [ [ 5499, 159 ] ] }, { "id": "micro-behaviors/hardware/input/event::on-keyboard-event-handler", "conf": 0.92, "crit": 3, "desc": "Registers keyboard event handler with on()", "spans": [ [ 21766, 11 ] ] } ], "type": "javascript" } ], "omitted_files": 9, "rev": "479f3", "v": "8" } }