[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fD7pvts9c8S5yKX91clgy9Ll9gc9dOFTQdJKFbUDvLfM":3,"$f1PCVpfHDcKr-dFRVWOk8IMb16wb-FBcBK0sLquVjhYw":247,"$fBD4OapLUeMCT3ToecvYB96ZqtpMAlPxM91KYyHGvMm0":252},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":21,"download_link":22,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25,"discovery_status":26,"vulnerabilities":27,"developer":28,"crawl_stats":24,"alternatives":36,"analysis":134,"fingerprints":233},"admin-msg-board","Admin Msg Board","1.05","Julian Yanover","https:\u002F\u002Fprofiles.wordpress.org\u002Fjulianyanover\u002F","\u003Cp>Admin Msg Board is a plugin for WordPress that will add a messaging system in your WordPress admin area. This works for weblogs that are written by more than one blogger, so they can communicate with each other, without leaving the WP system.\u003Cbr \u002F>\nMessages can have up to 140 words like in twitter, and you can choose whether to write to all users or select recipients\u003C\u002Fp>\n","Adds a messaging system in your Wordpress admin area for bloggers to communicate.",10,5787,0,"2009-03-08T21:03:00.000Z","2.7.1","2.3.1","",[19,20],"communication","messaging","http:\u002F\u002Fbitsignals.com\u002F2008\u002F01\u002F14\u002Fadmin-msg-board\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadmin-msg-board.zip",85,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":32,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"julianyanover",5,90,91,30,88,"2026-07-15T08:30:36.922Z",[37,62,82,99,117],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":52,"tags":53,"homepage":59,"download_link":60,"security_score":31,"vuln_count":30,"unpatched_count":13,"last_vuln_date":61,"fetched_at":25},"admin-and-client-message-after-order-for-woocommerce","Admin and Customer Messages After Order for WooCommerce: OrderConvo","15.0","N-Media","https:\u002F\u002Fprofiles.wordpress.org\u002Fnmedia\u002F","\u003Cp>OrderConvo is a lightweight and efficient WooCommerce plugin that allows vendors and customers to exchange messages after an order is placed. Both admin\u002Fvendors and customers can send messages or files related to the order. Customers can access the OrderConvo message box from \u003Ccode>My Account -> Orders\u003C\u002Fcode>, where each order has its own messaging area. The plugin adds a responsive, AJAX-powered message box on the order details page, ensuring compatibility with all WooCommerce themes.\u003C\u002Fp>\n\u003Ch3>How It Works\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fvimeo.com\u002F288485898\" rel=\"nofollow ugc\">Watch the Demo\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Live Demo Instructions\u003C\u002Fstrong>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fnajeebmedia.com\u002Fwooconvo-demo\" rel=\"nofollow ugc\">Click here\u003C\u002Fa> to launch the demo.\u003Cbr \u002F>\n* Once the demo is live, navigate to \u003Cstrong>Settings > NM Demo\u003C\u002Fstrong>.\u003Cbr \u002F>\n* Click \u003Cstrong>Initialize Demo: OrderConvo\u003C\u002Fstrong> to create demo orders and products.\u003Cbr \u002F>\n* Explore the plugin’s features and functionalities.\u003Cbr \u002F>\n* \u003Cstrong>Note\u003C\u002Fstrong>: If the Messages tab (My Account > Messages) does not work, re-save the permalink settings to resolve the issue.\u003C\u002Fp>\n\u003Ch3>Free Version Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Enable communication between customers and vendors\u002Fadmins for each order.\u003C\u002Fli>\n\u003Cli>Unlimited messages per order.\u003C\u002Fli>\n\u003Cli>Customize message button labels.\u003C\u002Fli>\n\u003Cli>Customize message placeholder text.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>OrderConvo Supports Single Store and Marketplace Setups\u003C\u002Fstrong>\u003Cbr \u002F>\n* Fully compatible with single WooCommerce stores.\u003C\u002Fp>\n\u003Ch3>Marketplaces Supported\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Dokan Marketplace\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WC Product Vendors\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>MultiVendorX\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>YITH Multi-Vendor\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WCFM Marketplace\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>PRO Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Send and receive file attachments.\u003C\u002Fli>\n\u003Cli>Control file types and file size limits.\u003C\u002Fli>\n\u003Cli>Attach images with automatic thumbnail previews.\u003C\u002Fli>\n\u003Cli>Email notifications for new messages.\u003C\u002Fli>\n\u003Cli>Customize email templates using the WooCommerce Email Template Manager.\u003C\u002Fli>\n\u003Cli>New message alerts on the order page.\u003C\u002Fli>\n\u003Cli>Rich text editor for enhanced message formatting.\u003C\u002Fli>\n\u003Cli>Access to a dedicated support forum.\u003C\u002Fli>\n\u003Cli>New message notifications in the WordPress dashboard.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fnajeebmedia.com\u002Fwordpress-plugin\u002Fwooconvo-woocommerce\u002F\" rel=\"nofollow ugc\">\u003Cstrong>Learn More About PRO\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why Use OrderConvo for Vendor-Customer Communication?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>With over 12 years of experience in WordPress and WooCommerce development, N-Media has received many requests for improved post-order communication. \u003Cstrong>OrderConvo\u003C\u002Fstrong> addresses this need, allowing for smooth communication between customers and vendors. Here’s why \u003Cstrong>OrderConvo\u003C\u002Fstrong> is a must-have for your store:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>For Customers:\u003C\u002Fstrong>\u003Cbr \u002F>\n* Customers can request changes to the delivery address or date after placing the order.\u003Cbr \u002F>\n* They can also modify order quantities or request revisions or replacements, helping avoid negative feedback.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>For WooCommerce Vendors:\u003C\u002Fstrong>\u003Cbr \u002F>\n* Vendors can provide order updates, share prototypes, or get feedback before final shipment, especially useful for digital goods or custom orders.\u003C\u002Fp>\n\u003Ch3>OrderConvo Add-ons\u003C\u002Fh3>\n\u003Cp>If the free or PRO version doesn’t fully meet your needs, check out our range of \u003Cstrong>OrderConvo Add-ons\u003C\u002Fstrong>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>OrderConvo AWS S3 Add-on\u003C\u002Fstrong>\u003Cbr \u002F>\nUpload all attachments to AWS S3 for faster and more efficient file management. Simply add your S3 credentials to get started, ideal for large file uploads.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>OrderConvo Quick Message Add-on\u003C\u002Fstrong>\u003Cbr \u002F>\nCreate pre-saved message templates for quick replies, saving time and streamlining communication with customers.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>OrderConvo Revisions Add-on\u003C\u002Fstrong>\u003Cbr \u002F>\nAllow customers to request revisions before finalizing their orders, perfect for businesses like printing companies that need client approval on designs.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>OrderConvo Live Chat Add-on\u003C\u002Fstrong>\u003Cbr \u002F>\nEnable real-time communication between vendors and customers with an AJAX-powered live chat. Chat can be disabled when not needed to save server resources.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>OrderConvo Marketplace Add-on\u003C\u002Fstrong>\u003Cbr \u002F>\nSupports major marketplace plugins like Dokan, MultiVendorX, WCFM, YITH, and WC Product Vendors.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fnajeebmedia.com\u002Fwordpress-plugin\u002Fwooconvo-woocommerce\u002F\" rel=\"nofollow ugc\">Explore All Add-ons\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Our Top Plugins:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fnajeebmedia.com\u002Fbps\" rel=\"nofollow ugc\">WooCommerce Bulk Product Sync\u003C\u002Fa> – Manage WooCommerce products using Google Sheets™.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fnajeebmedia.com\u002Fwoohero\" rel=\"nofollow ugc\">WooHero\u003C\u002Fa> – Customize WooCommerce buttons, tabs, and more without writing code.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fnajeebmedia.com\u002Fwordpress-plugins\" rel=\"nofollow ugc\">See All Plugins\u003C\u002Fa>\u003C\u002Fp>\n","OrderConvo: Enable seamless post-order communication between vendors\u002Fadmins and customers in WooCommerce.",200,40327,92,22,"2026-01-15T04:53:00.000Z","6.9.4","4.0","7.2",[54,55,56,57,58],"woocommerce-customer-vendor-chat","woocommerce-order-communication","woocommerce-order-file-attachments","woocommerce-order-messaging","woocommerce-order-notes","http:\u002F\u002Fwww.najeebmedia.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadmin-and-client-message-after-order-for-woocommerce.zip","2025-11-24 19:18:04",{"slug":63,"name":64,"version":65,"author":66,"author_profile":67,"description":68,"short_description":69,"active_installs":11,"downloaded":70,"rating":13,"num_ratings":13,"last_updated":71,"tested_up_to":50,"requires_at_least":72,"requires_php":73,"tags":74,"homepage":79,"download_link":80,"security_score":81,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25},"wabaapi-alerts-for-woocommerce","Messaging Alerts Integration for WooCommerce","1.0.1","smsgatewaycenter","https:\u002F\u002Fprofiles.wordpress.org\u002Fsmsgatewaycenter\u002F","\u003Cp>Boost customer engagement on your WooCommerce store using automated messaging alerts for order-related events. This plugin integrates with a third-party messaging API (WabaAPI.com) to deliver real-time notifications to both store administrators and customers.\u003C\u002Fp>\n\u003Cp>Customize your message templates, manage delivery logs, and send bulk updates to user groups – all from within your WordPress dashboard.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features\u003C\u002Fstrong>:\u003Cbr \u002F>\n– Supports both national and international messaging via third-party API.\u003Cbr \u002F>\n– Automated alerts for WooCommerce order status changes.\u003Cbr \u002F>\n– Customizable message templates per status.\u003Cbr \u002F>\n– Keyword-based auto-responses via third-party service.\u003Cbr \u002F>\n– View and manage delivery logs (DLR).\u003Cbr \u002F>\n– Send bulk messages to predefined user segments.\u003Cbr \u002F>\n– Compatible with WooCommerce Version 8.2.2 and above.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Supported Events\u003C\u002Fstrong>:\u003Cbr \u002F>\n– Order statuses: Completed, Processing, Pending Payment, On Hold, Cancelled, Refunded, Failed.\u003Cbr \u002F>\n– Customer actions: New registration, password reset, product review, profile updates.\u003Cbr \u002F>\n– Admin alerts for customer events.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>3rd Party Service Integration\u003C\u002Fstrong>\u003Cbr \u002F>\nThis plugin utilizes a third-party service provided by WabaAPI for sending messages via API.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service Provider:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwabaapi.com\u002F\" rel=\"nofollow ugc\">WabaAPI\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of Use:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwabaapi.com\u002Fterms\u002F\" rel=\"nofollow ugc\">WabaAPI Terms\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy Policy:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwabaapi.com\u002Fprivacy\u002F\" rel=\"nofollow ugc\">WabaAPI Privacy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Enhance your WooCommerce store with real-time order alerts and customer engagement via messaging API integration from WabaAPI.com.",918,"2025-12-08T14:12:00.000Z","3.8","7.4",[75,76,20,77,78],"alerts","customer-communication","notifications","woocommerce","https:\u002F\u002Fwabaapi.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwabaapi-alerts-for-woocommerce.zip",100,{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":11,"downloaded":90,"rating":13,"num_ratings":13,"last_updated":91,"tested_up_to":92,"requires_at_least":93,"requires_php":17,"tags":94,"homepage":97,"download_link":98,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25},"wpsms","wpSMS","1.0.0a","Casey Bisson","https:\u002F\u002Fprofiles.wordpress.org\u002Fmisterbisson\u002F","\u003Cp>An easy to use PHP class to send SMS messages. Does nothing on its own, but an implementation of it can be seen at \u003Ca href=\"http:\u002F\u002Flibrary.plymouth.edu\u002Fread\u002F222334\" rel=\"nofollow ugc\">my University’s library\u003C\u002Fa>, where they’ve used both \u003Ca href=\"http:\u002F\u002Fabout.scriblio.net\u002F\" rel=\"nofollow ugc\">Scriblio\u003C\u002Fa> and wpSMS to \u003Ca href=\"http:\u002F\u002Fmaisonbisson.com\u002Fblog\u002Fpost\u002F12094\u002Fscriblio-feature-text-this-to-me\u002F\" rel=\"nofollow ugc\">allow visitors to text information about a book to their cellies\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>The plugin is aimed at developers, so the best documentation is in the code, though there is \u003Ca href=\"http:\u002F\u002Fmaisonbisson.com\u002Fprojects\u002Fwpsms\u002F\" rel=\"nofollow ugc\">a quick introduction and some screenshts of it in action available here\u003C\u002Fa>.\u003C\u002Fp>\n","A plugin to send SMS messages from other plugins. As easy to use as wp_mail().",3141,"2009-01-28T22:02:00.000Z","2.6.3","2.3.0",[95,20,96],"communications","sms","http:\u002F\u002Fmaisonbisson.com\u002Fprojects\u002Fwpsms\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpsms.zip",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":13,"downloaded":107,"rating":13,"num_ratings":13,"last_updated":108,"tested_up_to":109,"requires_at_least":110,"requires_php":17,"tags":111,"homepage":17,"download_link":115,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":116},"easy-chat-button","Easy Chat Button","1.1","MXideas","https:\u002F\u002Fprofiles.wordpress.org\u002Fmxideas\u002F","\u003Cp>Easy Chat Button is a simple and lightweight plugin that allows you to add a WhatsApp button to your website. It enables visitors to contact you directly via WhatsApp for quick and easy communication.\u003C\u002Fp>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Go to the WordPress dashboard.\u003C\u002Fli>\n\u003Cli>Click on “Settings” and select “Easy Chat Button”.\u003C\u002Fli>\n\u003Cli>Enter your WhatsApp phone number in the designated field.\u003C\u002Fli>\n\u003Cli>Optionally, set a default message for the WhatsApp conversation.\u003C\u002Fli>\n\u003Cli>Adjust the button size using the provided option.\u003C\u002Fli>\n\u003Cli>Save your changes.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>The WhatsApp button will be displayed automatically on your website once you activate the “Easy Chat Button” plugin. No additional shortcode is required.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>If you need assistance or have any questions or suggestions, please visit our support forum at [https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Feasy-chat-button\u002F.\u003C\u002Fp>\n\u003Ch3>Contributions\u003C\u002Fh3>\n\u003Cp>We welcome contributions to improve Easy Chat Button. If you would like to contribute, please visit our GitHub repository at https:\u002F\u002Fgithub.com\u002Fmxideas\u002FEasy-Chat-Button-Wordpress.git\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Author: Fontawesome\u003C\u002Fli>\n\u003Cli>Icon made by Fontawesome from https:\u002F\u002Ffontawesome.com\u002F\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Notes\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Easy Chat Button requires WordPress 5.0 or higher.\u003C\u002Fli>\n\u003Cli>This plugin is compatible up to WordPress 5.8.\u003C\u002Fli>\n\u003C\u002Ful>\n","Easy Chat Button is a simple and lightweight plugin that allows you to add a WhatsApp button to your website. It enables visitors to contact you direc …",718,"2023-05-31T06:14:00.000Z","6.2.9","5.0",[112,113,19,20,114],"chat-bbutton","click-to-chat","whatsapp","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-chat-button.zip","2026-03-15T15:16:48.613Z",{"slug":118,"name":119,"version":120,"author":121,"author_profile":122,"description":123,"short_description":124,"active_installs":13,"downloaded":125,"rating":81,"num_ratings":126,"last_updated":127,"tested_up_to":128,"requires_at_least":110,"requires_php":17,"tags":129,"homepage":132,"download_link":133,"security_score":47,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25},"stames-floating-widget","Stames Floating Widget","1.0.0","Stames","https:\u002F\u002Fprofiles.wordpress.org\u002Fstamesdev\u002F","\u003Cp>In today’s digital world, businesses are overwhelmed with messages from multiple platforms—WhatsApp, Instagram, Facebook, Emails, Contact Forms, and more. The challenge? Messages get lost, customer data is scattered, and sales opportunities slip through the cracks. That’s where Stames comes in.\u003C\u002Fp>\n\u003Cp>Stames is a cutting-edge 360° SaaS communication and automation platform designed to help businesses centralize, track, and streamline their customer interactions. Unlike traditional CRM systems that focus only on contact storage, Stames provides a real-time, multi-platform communication hub that helps businesses close sales faster, provide better customer support, and enhance team collaboration.\u003C\u002Fp>\n\u003Cp>To further enhance customer engagement, Stames offers the Floating Widget—an easy-to-install web widget that allows visitors to instantly call, chat, or submit inquiries without leaving the website.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Two Widget Options:\u003C\u002Fstrong>\u003Cbr \u002F>\n🔘 Call-to-Action Widget – A floating button for instant communication via chat, call, or support requests.\u003Cbr \u002F>\n🔘 One-Click Widget – A simple contact form that collects leads effortlessly.\u003C\u002Fp>\n\u003Cp>By integrating the Stames Floating Widget, businesses can capture leads, provide better customer support, and increase conversions. Whether you’re in real estate, e-commerce, banking, hospitality, or customer service, Stames is designed to improve your customer engagement and sales processes.\u003C\u002Fp>\n\u003Ch3>Short Description\u003C\u002Fh3>\n\u003Cp>A floating widget for seamless customer interactions, powered by Stames. Supports call-to-action and one-click messaging.\u003C\u002Fp>\n\u003Ch3>Settings\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Go to \u003Cstrong>Tools > Stames Widget\u003C\u002Fstrong>.  \u003C\u002Fli>\n\u003Cli>Enter your \u003Cstrong>Stames Data Key\u003C\u002Fstrong> (provided in your Stames subscription account, under Integration Settings).   \u003C\u002Fli>\n\u003Cli>Select widget type (either \u003Cstrong>One Click\u003C\u002Fstrong> or \u003Cstrong>Call To Action\u003C\u002Fstrong>).  \u003C\u002Fli>\n\u003Cli>Click \u003Cstrong>Save Changes\u003C\u002Fstrong>.  \u003C\u002Fli>\n\u003Cli>The widget will now appear on your website, displaying the buttons.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Instructions\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Follow the steps in the plugin settings page to configure the widget.  \u003C\u002Fli>\n\u003Cli>If you experience issues, ensure your \u003Cstrong>Stames subscription account\u003C\u002Fstrong> is active and the \u003Cstrong>Data Key\u003C\u002Fstrong> is correct.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Source Code\u003C\u002Fh3>\n\u003Cp>Unminified JavaScript and CSS files are available in the “\u002Fsrc” folder.\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin connects to external services provided by Stames Software (https:\u002F\u002Fwww.stamesoft.com) to enhance its functionality. Below are the details:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>What it does:\u003C\u002Fstrong> The plugin loads scripts from Stames to enable key features like form handling, pop-up modals, and real-time communication.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>What data is sent:\u003C\u002Fstrong> No personal data is sent. The scripts are only loaded for functionality.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Where the data is sent:\u003C\u002Fstrong> Scripts are fetched from \u003Ccode>https:\u002F\u002Fwww.stamesoft.com\u003C\u002Fcode> but do not transmit user data back.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>List of external scripts used:\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>\u003Ccode>https:\u002F\u002Fwww.stamesoft.com\u002Fassets\u002Fplugins\u002Fpopper\u002Fumd\u002Fpopper.min.js\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>https:\u002F\u002Fwww.stamesoft.com\u002Fvendor\u002Fjquery\u002Fjquery.min.js\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>https:\u002F\u002Fwww.stamesoft.com\u002Fassets\u002Fplugins\u002Fbootstrap\u002Fjs\u002Fbootstrap.min.js\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>https:\u002F\u002Fwww.stamesoft.com\u002Fjs\u002Fiframe_form.min.js\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms and Privacy Policy:\u003C\u002Fstrong> You can review Stames privacy policy here: \u003Ca href=\"https:\u002F\u002Fwww.stamesoft.com\u002Fsupport\u002Fdocumentation\u002F?article=privacy-policy\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.stamesoft.com\u002Fsupport\u002Fdocumentation\u002F?article=privacy-policy\u003C\u002Fa> and Terms and Conditions here: \u003Ca href=\"https:\u002F\u002Fwww.stamesoft.com\u002Fsupport\u002Fdocumentation\u002F?article=terms\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.stamesoft.com\u002Fsupport\u002Fdocumentation\u002F?article=terms\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n","In today’s digital world, businesses are overwhelmed with messages from multiple platforms—WhatsApp, Instagram, Facebook, Emails, Contact Forms, and m …",653,1,"2025-03-05T10:40:00.000Z","6.7.5",[19,130,131,20],"crm","floating-widget","https:\u002F\u002Fwww.stamesoft.com\u002Fresources","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstames-floating-widget.1.0.0.zip",{"attackSurface":135,"codeSignals":155,"taintFlows":201,"riskAssessment":220,"analyzedAt":232},{"hooks":136,"ajaxHandlers":151,"restRoutes":152,"shortcodes":153,"cronEvents":154,"entryPointCount":13,"unprotectedCount":13},[137,143,147],{"type":138,"name":139,"callback":140,"file":141,"line":142},"action","init","amsgboard_textdomain","admin-msg-board.php",40,{"type":138,"name":144,"callback":145,"file":141,"line":146},"admin_menu","amsgboard_actions",96,{"type":138,"name":148,"callback":149,"file":141,"line":150},"admin_notices","amsgboard_newmsg",101,[],[],[],[],{"dangerousFunctions":156,"sqlUsage":157,"outputEscaping":174,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":200},[],{"prepared":158,"raw":30,"locations":159},8,[160,164,167,169,171],{"file":161,"line":162,"context":163},"amsgboard-menu.php",20,"$wpdb->query() with variable interpolation",{"file":161,"line":165,"context":166},133,"$wpdb->get_results() with variable interpolation",{"file":161,"line":168,"context":163},137,{"file":161,"line":170,"context":163},139,{"file":161,"line":172,"context":173},240,"$wpdb->get_col() with variable interpolation",{"escaped":13,"rawEcho":175,"locations":176},11,[177,180,182,184,186,188,190,192,194,196,198],{"file":161,"line":178,"context":179},122,"raw output",{"file":161,"line":181,"context":179},187,{"file":161,"line":183,"context":179},189,{"file":161,"line":185,"context":179},202,{"file":161,"line":187,"context":179},218,{"file":161,"line":189,"context":179},248,{"file":161,"line":191,"context":179},252,{"file":161,"line":193,"context":179},263,{"file":161,"line":195,"context":179},270,{"file":161,"line":197,"context":179},277,{"file":161,"line":199,"context":179},285,[],[202],{"entryPoint":203,"graph":204,"unsanitizedCount":218,"severity":219},"\u003Camsgboard-menu> (amsgboard-menu.php:0)",{"nodes":205,"edges":215},[206,210],{"id":207,"type":208,"label":209,"file":161,"line":187},"n0","source","$_SERVER['REQUEST_URI'] (x4)",{"id":211,"type":212,"label":213,"file":161,"line":187,"wp_function":214},"n1","sink","echo() [XSS]","echo",[216],{"from":207,"to":211,"sanitized":217},false,4,"low",{"summary":221,"deductions":222},"The security posture of the admin-msg-board plugin v1.05 presents a mixed bag of good practices and concerning omissions. On the positive side, the plugin has a minimal attack surface with no identified AJAX handlers, REST API routes, shortcodes, or cron events that are directly exposed. Furthermore, there are no known vulnerabilities (CVEs) associated with this plugin, suggesting a history of security robustness or limited prior scrutiny. The static analysis also indicates a lack of file operations and external HTTP requests, which are common vectors for exploitation.\n\nHowever, significant concerns arise from the code analysis, particularly the complete absence of output escaping for all identified output points. This represents a critical security weakness, as it leaves the plugin highly susceptible to Cross-Site Scripting (XSS) attacks. While a large percentage of SQL queries utilize prepared statements, the presence of unsanitized paths in the taint analysis is a red flag, even if no critical or high severity flows were detected. The lack of any nonce or capability checks across the board is also a notable weakness, potentially allowing unauthorized actions or access if any future entry points are discovered or if existing ones are somehow bypassed.\n\nIn conclusion, while the plugin benefits from a small attack surface and a clean vulnerability history, the critical flaw of unescaped output combined with the absence of essential security checks like nonces and capability checks introduces a significant risk. The taint analysis, despite its current low severity findings, highlights a potential for vulnerabilities if data flows are not meticulously handled. Users should exercise caution until these output escaping and authorization issues are addressed.",[223,225,227,229],{"reason":224,"points":158},"Unescaped output for all identified outputs",{"reason":226,"points":30},"No nonce checks",{"reason":228,"points":30},"No capability checks",{"reason":230,"points":231},"Flow with unsanitized paths (taint analysis)",3,"2026-03-16T23:29:04.138Z",{"wat":234,"direct":239},{"assetPaths":235,"generatorPatterns":236,"scriptPaths":237,"versionParams":238},[],[],[],[],{"cssClasses":240,"htmlComments":241,"htmlAttributes":242,"restEndpoints":243,"jsGlobals":244,"shortcodeOutput":245},[],[],[],[],[],[246],"\u003Cdiv id='update-nag'>\n\t\tThere is a new message in the Admin Msg Board. \u003Ca href='edit.php?page=amsgboard-menu.php'>\n\t\tRead it\n\t\t\u003C\u002Fa>.\u003C\u002Fdiv>",{"error":248,"url":249,"statusCode":250,"statusMessage":251,"message":251},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fadmin-msg-board\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":13,"versions":253},[]]