[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0UysfGOMsevaPRkf_tU-536al9HsnBBv76ugrQV_Q1s":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":34,"analysis":126,"fingerprints":159},"appifire-for-mobile-apps","AppiFire for Mobile Apps","1.0","Zain","https:\u002F\u002Fprofiles.wordpress.org\u002Fappifire\u002F","\u003Cp>This plugin is developed for AppiFire app users. AppiFire product convert your WordPress website into Android & iOS app. An app that is easy to use, has a blazingly fast performance and design that you will fall in love with.\u003C\u002Fp>\n\u003Cp>You can watch AppiFire product overview on YouTube or visit website https:\u002F\u002FAppiFire.com\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FouNthL_88NQ?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>This plugin provides an extension of “OneSignal – Free Web Push Notifications” plugin and its url is https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fonesignal-free-web-push-notifications\u002F\u003C\u002Fp>\n\u003Cp>How does our plugin work?\u003Cbr \u002F>\nOur plugin code sends an additional push notification to OneSignal via API call https:\u002F\u002Fonesignal.com\u002Fapi\u002Fv1\u002Fnotifications OneSignal then sends the message to Android & iOS users.\u003C\u002Fp>\n\u003Cp>This plugin won’t work without installing “OneSignal – Free Web Push Notifications” plugin. You need to install the plugin first. We are only providing an extension of their code and not collecting any data. You can read their privacy policy on https:\u002F\u002Fonesignal.com\u002Fprivacy_policy and own how they would be using your information.\u003C\u002Fp>\n\u003Cp>More features will be added soon in this plugin which will include AppiFire custom API and other supporting features which are used in AppiFire app.\u003C\u002Fp>\n","This plugin is developed for AppiFire app users. AppiFire product convert your WordPress website into Android & iOS app.",0,1377,"2018-11-28T07:29:00.000Z","5.0.25","","5.2.4",[18,19,20,21,22],"api","appifire","mobile-app","onesignal","push-notifications","https:\u002F\u002Fappifire.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fappifire-for-mobile-apps.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":19,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},1,30,84,"2026-04-04T15:39:39.489Z",[35,56,77,97,115],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":45,"num_ratings":30,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":15,"tags":49,"homepage":54,"download_link":55,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"rest-api-helper","REST API Helper","2.2.8","JasmanXcrew","https:\u002F\u002Fprofiles.wordpress.org\u002Fjasmanxcrew\u002F","\u003Cp>This plugin help REST API for display featured media source, author, categories, and custom fields.\u003Cbr \u002F>\nThis plugin is made for \u003Ca href=\"https:\u002F\u002Fgoo.gl\u002FqznlXo\" rel=\"nofollow ugc\">Ionic Mobile App Builder\u003C\u002Fa>, suitable used for ionic framework.\u003Cbr \u002F>\nThis plugin also support for display custom field in metabox and also make it allow crossorigin only for json files. Compatible with wp-restapi2 and json-api.\u003C\u002Fp>\n\u003Cp>Features:\u003Cbr \u002F>\n* Product listing without Woo API\u003Cbr \u002F>\n* REST-API Auth Basic\u003Cbr \u002F>\n* Fix CORS and Preflight CORS (Example Issue: Request header field ……. is not allowed by Access-Control-Allow-Headers in preflight response.)\u003Cbr \u002F>\n* Woo ACF Gallery\u003Cbr \u002F>\n* Gallery JSON Array or Object\u003Cbr \u002F>\n* One Signal Push\u003Cbr \u002F>\n* Custom Field Support\u003Cbr \u002F>\n* Fix issue render VisualComposer ([vc_row]Hello World . . .[\u002Fvc_row])\u003C\u002Fp>\n\u003Ch3>Woocommerce\u003C\u002Fh3>\n\u003Cp>for enable Woo product and categories without authorization, add this code in wp-config.php\u003C\u002Fp>\n\u003Cpre>\u003Ccode>define(\"IMH_WOO\", true);\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>You can changing custom field for gallery (default woo using _product_image_gallery metakey), add this line\u003C\u002Fp>\n\u003Cpre>\u003Ccode>define(\"IMH_WOO_ACF_GALLERY\", 'images'); \n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>and for type data object or string (default string, separator with coma)\u003C\u002Fp>\n\u003Cpre>\u003Ccode>define(\"IMH_WOO_ACF_GALLERY_OBJECT\", false);\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch3>OneSignal Sender\u003C\u002Fh3>\n\u003Cp>for enable oneSignal Sender add this code in wp-config.php\u003C\u002Fp>\n\u003Cpre>\u003Ccode>define(\"IMH_ONESIGNAL_PUSH\", true);\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>then fix your app_id and app_key\u003C\u002Fp>\n\u003Cpre>\u003Ccode>define(\"IMH_ONESIGNAL_PUSH\", false);\ndefine(\"IMH_ONESIGNAL_PAGE_IN_APP\", 'post_singles'); \u002F\u002Fthis additional data (key: page and value: post_singles\u002Fpost_id)\ndefine(\"IMH_ONESIGNAL_APP_ID\", '31ee45e2-c63d-4048-903a-89ca43f3afa2');\ndefine(\"IMH_ONESIGNAL_APP_KEY\", 'YzUzNmZkOTAtMmVlMC00OWIzLThlNGQtMzQyYzzyNmFhZjcw');\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch3>Anonymous Comments\u003C\u002Fh3>\n\u003Cp>You can allow anonymous comments using configuration:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>define(\"IMH_ALLOW_PREFLIGHT_CORS\",true); \u002F\u002Frequired for method post\ndefine(\"IMH_ANONYMOUS_COMMENTS\",true);\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>send comment using url like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>http:\u002F\u002Fwordpress.co.id\u002Fwp-json\u002Fwp\u002Fv2\u002Fcomments?author_name=Your Name Here&author_email=your-email-address@website-address-here.com&author_name=Your Name Here&content=Your Comment Here&post=20\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch3>Register REST-API\u003C\u002Fh3>\n\u003Cp>You can allow register new user using configuration:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>define(\"IMH_RESTAPI_REGISTER\",true); \n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>End Point:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>https:\u002F\u002Fwordpress.co.id\u002Fwp-json\u002Fwp\u002Fv2\u002Fusers\u002Fregister\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch3>Visual Composer\u003C\u002Fh3>\n\u003Cp>Fix issue render VisualComposer Content\u003C\u002Fp>\n\u003Cp>Response is:\u003Cbr \u002F>\n[vc_row]Hello World . . .[\u002Fvc_row]\u003Cbr \u002F>\nResponse should be:\u003C\u002Fp>\n\u003Cp>Hello World . . .\u003C\u002Fp>\n\u003Cp>add this code in wp-config.php\u003C\u002Fp>\n\u003Cpre>\u003Ccode>define(\"IMH_VC_SHORTCODE\",true);\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fihsana.com\" rel=\"nofollow ugc\">Ihsana Global Solusindo\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"ihsana.com\u002Fi\u002F?u=imabuilder\" rel=\"nofollow ugc\">IMA BuildeRz – Ionic Mobile App Builder + Code Generator \u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fihsana.com\u002Fi\u002F?u=iwpdev\" rel=\"nofollow ugc\">iWP-DevToolz – WordPress Plugin Maker + Code Generator \u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin help REST API for display featured media source, author, categories, and custom fields.",600,22471,100,"2022-01-02T16:25:00.000Z","5.3.21","4.0",[50,51,52,20,53],"ionic","json","json-api","rest-api","http:\u002F\u002Fihsana.net\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frest-api-helper.zip",{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":64,"downloaded":65,"rating":66,"num_ratings":67,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":15,"tags":71,"homepage":75,"download_link":76,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"onesignal-sender","OneSignal Sender","1.4","marcbousleiman","https:\u002F\u002Fprofiles.wordpress.org\u002Fmarcbousleiman\u002F","\u003Cp>This plugin is an addon to OneSignal – Free Web Push Notifications that gives the user the ability to control (Send, Schedule, Check, Cancel) Notifications from the WP dashboard.\u003Cbr \u002F>\nAs well as check App’s info, users info, and users overview.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Copyrights: \u003Ca href=\"http:\u002F\u002Ftrianglemena.com\" rel=\"nofollow ugc\">Triangle Mena\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>Overview page\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>APP’s info\u003C\u002Fli>\n\u003Cli>Users info\u003C\u002Fli>\n\u003Cli>Latest 50 subscribed Users overview (with details)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Send Notifications page\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Send immediate notifications to all subscribed users\u003C\u002Fli>\n\u003Cli>Schedule notifications on a specific date and time\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Scheduled Notifications page\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Check out your scheduled notifications\u003C\u002Fli>\n\u003Cli>Cancel any of the scheduled notifications\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Sent Notifications page\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Check out your sent notifications (with details)\u003C\u002Fli>\n\u003Cli>Check out the statistics for every single notification (Delivery Statistics – Conversion Statistics)\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin is an addon to OneSignal - Free Web Push Notifications that gives the user the ability to control (Send, Schedule, Check, Cancel) Notifica …",400,14307,60,6,"2019-05-27T13:12:00.000Z","5.2.24","3.8.0",[72,73,21,74],"backend","dashboard","web-push-notifications","http:\u002F\u002Fmarcbousleiman.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fonesignal-sender.1.4.zip",{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":45,"downloaded":85,"rating":45,"num_ratings":86,"last_updated":87,"tested_up_to":88,"requires_at_least":89,"requires_php":90,"tags":91,"homepage":95,"download_link":96,"security_score":45,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"progressify","Progressify – All-in-One Progressive Web App (PWA) on Autopilot","1.1.1","DaftPlug","https:\u002F\u002Fprofiles.wordpress.org\u002Fdaftplug\u002F","\u003Cp>Progressify is an all-in-one plugin that empowers your website with Progressive Web App (PWA) features, to make it faster, smoother, and feel like a real app. Let users install your site on their home screens and increase engagement, repeat visits, and sales.\u003C\u002Fp>\n\u003Ch3>🚀 Turn your site into Progressive Web App\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Add to Home Screen\u003C\u002Fstrong> – Let users install your site on their home screens in seconds, giving it a true app-like experience.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Installation Prompts\u003C\u002Fstrong> – Prompt users to install with banners, popups, overlays, buttons, or QR codes.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>App-like UI Components\u003C\u002Fstrong> – Seamlessly integrate features such as loaders, pull-to-refresh, dark mode, navigation tabs, and more.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Push Notifications\u003C\u002Fstrong> – Send push notifications manually or automatically to users’ devices to drive them back to your site.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Offline Usage\u003C\u002Fstrong> – Keep your site available and accessible for users, even without an internet connection.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Advanced Web Capabilities\u003C\u002Fstrong> – Easily enable advanced Web API features such as periodic background sync, content indexing, and more.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Usage Tracking & Analytics\u003C\u002Fstrong> – Gain complete analytics on your web app, including how many users install and use it, which devices they’re using, and more.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Easy Configuration\u003C\u002Fstrong> – Easily configure and customize every aspect of your PWA features directly from the user-friendly settings.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Generate Mobile Apps (Pro)\u003C\u002Fstrong> – Optionally create real-time Android and iOS apps that mirror your website and publish them to app stores.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>🗝️ Countless More Features\u003C\u002Fh4>\n\u003Cp>Progressify offers a wide range of state-of-the-art features and seamlessly integrates them into your website, delivering a smooth, app-like user experience:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Display Settings\u003C\u002Fstrong>: Display and startup behavior\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Offline Settings\u003C\u002Fstrong>: Offline cache and capabilities\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Navigation Tab Bar\u003C\u002Fstrong>: Bottom navigation tab bar\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Dark Mode\u003C\u002Fstrong>: Dark theme mode toggle\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Pull Down Refresh\u003C\u002Fstrong>: Pull-down to refresh gesture\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Skeleton Loader\u003C\u002Fstrong>: Page skeleton loading animation\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Smooth Page Transitions\u003C\u002Fstrong>: No-reload page changes\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Toast Messages\u003C\u002Fstrong>: Popup toast notifications\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Share Button\u003C\u002Fstrong>: Device native share button\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Background Sync\u003C\u002Fstrong>: Fetch data in background\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Vibrations\u003C\u002Fstrong>: Haptic feedback on tap\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Screen Wake Lock\u003C\u002Fstrong>: Prevent screen dimming and locking\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Idle Detection\u003C\u002Fstrong>: Detect inactivity and prompt updates\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shake Refresh\u003C\u002Fstrong>: Shake to refresh gesture\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Autosave Forms\u003C\u002Fstrong>: Persist values to prevent data loss\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Countless more features and options…\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🎉 PWA Success Stories\u003C\u002Fh3>\n\u003Cp>PWA is actively implemented by big companies and they see amazing improvements regarding the performance and conversions\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>+150% User Traffic\u003C\u002Fstrong>: Trivago saw a 150% rise in engagement from home screen users, leading to a 97% increase in hotel offer click-outs.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>+76% Total Conversions\u003C\u002Fstrong>: AliExpress upgraded to a PWA and saw a 76% boost in conversions and a 30% rise in monthly active Android users.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>+44% Ad Revenue\u003C\u002Fstrong>: Pinterest new PWA boosted user-generated ad revenue by 44% and core engagement by 60%.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>+90% Storage Efficient\u003C\u002Fstrong>: Tinder native application was a whopping 30MB, but after transitioning to a PWA, they reduced the file size to just 2.8MB.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>⚡ Smart Features, No Hassle\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>No Coding Required\u003C\u002Fstrong>: The plugin offers ready-made, fully configurable features, enabling advanced web APIs without any technical expertise.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Live Updates\u003C\u002Fstrong>: Updates with fixes, new features and improvements are automatically pushed to your WordPress website.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>High Quality\u003C\u002Fstrong>: The plugin is built with a modular design, ensuring fast, reliable performance without frequent bugs and failures.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Support\u003C\u002Fstrong>: Get support in the support forum from friendly professionals ready to answer your questions.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>🌐 Fully Translatable\u003C\u002Fh4>\n\u003Cp>Progressify supports multiple languages, typography options, and RTL layouts. It’s fully translatable via POT files using tools like Poedit and Loco Translate and is compatible with WPML, Polylang, TranslatePress, Weglot, and more.\u003C\u002Fp>\n\u003Ch4>🔌 Compatible with All Themes &  Plugins\u003C\u002Fh4>\n\u003Cp>Progressify works out-of-the-box with any WordPress setup, theme, or plugin. Whether you’re running a blog, e-commerce store, forum, portfolio, membership site, or news portal, it integrates seamlessly without requiring extra configuration.\u003C\u002Fp>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>This plugin connects to external services to provide specific functionality. Below is a complete list of the services, what they do, when they are used, and what data may be transmitted.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Workbox CDN (storage.googleapis.com)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Purpose: Loads Google’s Workbox service worker library so the offline cache and routing strategies can function.\u003C\u002Fli>\n\u003Cli>What is sent and when: The browser downloads a static JavaScript file (workbox-sw.js) when the service worker is installed\u002Fupdated. No user data is sent by this plugin as part of that request.\u003C\u002Fli>\n\u003Cli>Provider: Google. Terms: https:\u002F\u002Fpolicies.google.com\u002Fterms — Privacy: https:\u002F\u002Fpolicies.google.com\u002Fprivacy — Workbox: https:\u002F\u002Fdeveloper.chrome.com\u002Fdocs\u002Fworkbox\u002F\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>WordPress.com MShots (s0.wp.com)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Purpose: Generates a screenshot (thumbnail) of your site’s start page used by the plugin for the offline fallback page background and for certain preview\u002Ficon generation cases.\u003C\u002Fli>\n\u003Cli>What is sent and when: The browser requests a static image from https:\u002F\u002Fs0.wp.com\u002Fmshots\u002Fv1\u002F with your site URL included in the query string plus viewport parameters. As with any HTTP request, the visitor’s IP address and user agent are sent by the browser to the CDN. No additional user-specific data is sent by this plugin.\u003C\u002Fli>\n\u003Cli>Provider: Automattic (WordPress.com). Terms: https:\u002F\u002Fwordpress.com\u002Ftos — Privacy: https:\u002F\u002Fautomattic.com\u002Fprivacy\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>GeoJS (get.geojs.io)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Purpose: Resolves a visitor’s IP address to a country name\u002Fcode for anonymous PWA analytics (Dashboard) and push subscriber metadata.\u003C\u002Fli>\n\u003Cli>What is sent and when: The visitor’s IP address is looked up server‑side on first PWA open and when a user subscribes to push notifications. The response is used to store country information only.\u003C\u002Fli>\n\u003Cli>Provider: GeoJS. Website\u002FDocs: https:\u002F\u002Fwww.geojs.io\u002F — Privacy: https:\u002F\u002Fwww.geojs.io\u002Fprivacy\u002F\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>OneSignal SDK Worker (cdn.onesignal.com)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Purpose: If the OneSignal plugin is active, the service worker imports OneSignal’s web push SDK worker to enable that plugin’s push features.\u003C\u002Fli>\n\u003Cli>What is sent and when: Requests the OneSignal SDK worker file. Any subsequent data flows are governed by the OneSignal plugin\u002Faccount configuration.\u003C\u002Fli>\n\u003Cli>Provider: OneSignal. Terms: https:\u002F\u002Fonesignal.com\u002Fterms-of-service — Privacy: https:\u002F\u002Fonesignal.com\u002Fprivacy\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Webpushr Service Worker (cdn.webpushr.com)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Purpose: If the Webpushr plugin is active, the service worker imports Webpushr’s worker to enable that plugin’s push features.\u003C\u002Fli>\n\u003Cli>What is sent and when: Requests the Webpushr worker file. Any subsequent data flows are governed by the Webpushr plugin\u002Faccount configuration.\u003C\u002Fli>\n\u003Cli>Provider: Webpushr. Terms: https:\u002F\u002Fwww.webpushr.com\u002Fterms-of-service — Privacy: https:\u002F\u002Fwww.webpushr.com\u002Fprivacy-policy\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Notes:\u003Cbr \u002F>\n– OneSignal and Webpushr integrations are conditional and only load if those plugins are active on your site.\u003Cbr \u002F>\n– Web push delivery uses the standard browser push endpoints associated with each subscription (e.g., services operated by browser vendors). The specific endpoint domain varies per browser and is not controlled by this plugin.\u003C\u002Fp>\n\u003Ch3>Source Code and Build Instructions\u003C\u002Fh3>\n\u003Cp>This plugin uses modern tooling (Tailwind CSS and esbuild) to produce minified assets for distribution. The human‑readable source code is included in the plugin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Admin JS and CSS source: \u003Ccode>includes\u002Fadmin\u002F_src\u002F\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Build prerequisites: Node.js and npm.\u003C\u002Fp>\n\u003Cp>Basic development build:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Install dev dependencies.\u003C\u002Fli>\n\u003Cli>Build assets in development mode.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Third‑party libraries used in compiled assets include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>esbuild – https:\u002F\u002Fesbuild.github.io\u002F\u003C\u002Fli>\n\u003Cli>Tailwind CSS – https:\u002F\u002Ftailwindcss.com\u002F\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The full, human‑readable sources for all minified files are present within the plugin as listed above. If you have any trouble locating sources, please open an issue in the WordPress.org support forum for this plugin.\u003C\u002Fp>\n","Turn your site into an app-like PWA with install prompts, offline use, push notifications, and more to boost engagement, repeat visits, and sales.",1169,2,"2026-03-09T11:20:00.000Z","6.9.4","5.0","7.4",[20,92,93,22,94],"native-app","progressive-web-app","pwa","https:\u002F\u002Fdaftplug.com\u002Fprogressify\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fprogressify.1.1.1.zip",{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":45,"downloaded":105,"rating":11,"num_ratings":11,"last_updated":15,"tested_up_to":106,"requires_at_least":107,"requires_php":16,"tags":108,"homepage":112,"download_link":113,"security_score":45,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":114},"stionic-core","Stionic Core – Create Mobile app for WordPress news","1.0.28","Noncheat","https:\u002F\u002Fprofiles.wordpress.org\u002Fnoncheat\u002F","\u003Cp>Stionic Core has expanded the WordPress REST API for the purpose of matching the functionality contained in a WordPress mobile application.\u003Cbr \u002F>\nAllows you create \u003Ca href=\"https:\u002F\u002Fnoncheat.com\u002F\" rel=\"nofollow ugc\">mobile app for WordPress\u003C\u002Fa> news website.\u003C\u002Fp>\n\u003Ch4>Demo\u003C\u002Fh4>\n\u003Cp>We have built the demo mobile app with this plugin, you can see \u003Ca href=\"https:\u002F\u002Fnoncheat.com\u002Fproduct-category\u002Fitems\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003Cbr \u002F>\nAnd you don’t need programming skills, because we did everything.\u003Cbr \u002F>\nMost notably, in addition to working perfectly with WordPress website. We have optimized it!\u003Cbr \u002F>\nAs a result you will have a mobile application WordPress website very fast with extremely interesting functions.\u003C\u002Fp>\n\u003Cp>You can install this plugin and ask us to \u003Ca href=\"https:\u002F\u002Fnoncheat.com\u002Frequest-demo\u002F\" rel=\"nofollow ugc\">create a free demo application\u003C\u002Fa> for your website.\u003Cbr \u002F>\nAny questions please mail us \u003Ca href=\"mailto:contact@noncheat.com\" rel=\"nofollow ugc\">contact@noncheat.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>This plugin support config informations for WordPress mobile application.\u003C\u002Fli>\n\u003Cli>Sort categories, config featured image size.\u003C\u002Fli>\n\u003Cli>Insert Native ads on posts content.\u003C\u002Fli>\n\u003Cli>Show Deeplinks button when viewing on mobile, OneSignal push notifcation.\u003C\u002Fli>\n\u003Cli>Extending endpoints of posts, categories, comments, pages.\u003C\u002Fli>\n\u003Cli>Include featured image url, featured image square url, categories of post, next & previous posts.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Docs & Support\u003C\u002Fh4>\n\u003Cp>You can find \u003Ca href=\"https:\u002F\u002Fnoncheat.com\u002Fcategory\u002Fplugins\u002Fstionic-core\u002F\" rel=\"nofollow ugc\">docs\u003C\u002Fa>.\u003Cbr \u002F>\nIf you were unable to find the answer to your question on the documentation, you should check the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fstionic-core\u002F\" rel=\"ugc\">support forum\u003C\u002Fa> on WordPress.org.\u003Cbr \u002F>\nIf you can’t locate any topics that pertain to your particular issue, post a new topic for it.\u003C\u002Fp>\n\u003Ch4>Recommended Plugins\u003C\u002Fh4>\n\u003Cp>The following plugins are recommended for Stionic Core users:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcategories-images\u002F\" rel=\"ugc\">Category Image\u003C\u002Fa> by Muhammad Said El Zahlan. You can set categories image.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Finsert-post-ads\u002F\" rel=\"ugc\">Insert Post Ads\u003C\u002Fa> by InsertPostAds. You can set ads native.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcontact-form-7\u002F\" rel=\"ugc\">Contact Form 7\u003C\u002Fa> by Takayuki Miyoshi. You can set contact form.\u003C\u002Fli>\n\u003C\u002Ful>\n","Create mobile app for WordPress",5444,"5.9.13","4.7",[18,109,110,111],"create-app","mobile-app-wordpress","wordpress-news-app","https:\u002F\u002Fnoncheat.com\u002Fcategory\u002Fplugins\u002Fstionic-core\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstionic-core.1.0.28.zip","2026-03-15T10:48:56.248Z",{"slug":116,"name":117,"version":118,"author":101,"author_profile":102,"description":119,"short_description":120,"active_installs":31,"downloaded":121,"rating":45,"num_ratings":30,"last_updated":15,"tested_up_to":106,"requires_at_least":107,"requires_php":16,"tags":122,"homepage":124,"download_link":125,"security_score":45,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":114},"stionic-users","Stionic Users – WordPress Users API","1.0.2","\u003Cp>Stionic Users has expanded the WordPress REST API for manager Users.\u003Cbr \u002F>\nAllows you create \u003Ca href=\"https:\u002F\u002Fnoncheat.com\u002F\" rel=\"nofollow ugc\">mobile app for WordPress\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Register users\u003C\u002Fli>\n\u003Cli>Reset password by username\u003C\u002Fli>\n\u003Cli>Change users avatar\u003C\u002Fli>\n\u003Cli>Logout everywhere else\u003C\u002Fli>\n\u003Cli>This plugin support API login with Facebook by access token\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Docs & Support\u003C\u002Fh4>\n\u003Cp>Register users\u003Cbr \u002F>\nSend ‘POST’ request to ‘\u002Fwp-json\u002Fwp\u002Fv2\u002Fm_users\u002Fregister’ with params ‘username’ and ’email’.\u003C\u002Fp>\n\u003Cp>Reset password\u003Cbr \u002F>\nSend ‘POST’ request to ‘\u002Fwp-json\u002Fwp\u002Fv2\u002Fm_users\u002Fpassword’ with params ‘username’.\u003C\u002Fp>\n\u003Cp>Change users avatar (login required)\u003Cbr \u002F>\nSend ‘POST’ request to ‘\u002Fwp-json\u002Fwp\u002Fv2\u002Fm_users\u002Favatar’ with params ‘base64’ (base64 of image).\u003C\u002Fp>\n\u003Cp>Delete users avatar (login required)\u003Cbr \u002F>\nSend ‘DELETE’ request to ‘\u002Fwp-json\u002Fwp\u002Fv2\u002Fm_users\u002Favatar’.\u003C\u002Fp>\n\u003Cp>Logout everywhere else (login required)\u003Cbr \u002F>\nSend ‘POST’ request to ‘\u002Fwp-json\u002Fwp\u002Fv2\u002Fm_users\u002Fkeep’.\u003C\u002Fp>\n\u003Cp>Login Facebook\u003Cbr \u002F>\nSend ‘POST’ request to ‘\u002Fwp-json\u002Fwp\u002Fv2\u002Fm_facebook\u002Flogin’ with params ‘token’ is access token of Facebook.\u003Cbr \u002F>\nReturn: JWT Authentication data include token, use it in Header of \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjwt-authentication-for-wp-rest-api\u002F\" rel=\"ugc\">JWT authentication\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>You can find \u003Ca href=\"https:\u002F\u002Fnoncheat.com\u002Fcategory\u002Fplugins\u002Fstionic-users\u002F\" rel=\"nofollow ugc\">docs\u003C\u002Fa>.\u003Cbr \u002F>\nIf you were unable to find the answer to your question on the documentation, you should check the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fstionic-users\u002F\" rel=\"ugc\">support forum\u003C\u002Fa> on WordPress.org.\u003Cbr \u002F>\nIf you can’t locate any topics that pertain to your particular issue, post a new topic for it.\u003C\u002Fp>\n\u003Ch4>Recommend Plugins\u003C\u002Fh4>\n\u003Cp>The following plugins are recommend for Stionic Users:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjwt-authentication-for-wp-rest-api\u002F\" rel=\"ugc\">JWT Authentication for WP REST API\u003C\u002Fa> by Enrique Chavez.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-user-avatar\u002F\" rel=\"ugc\">WP User Avatar\u003C\u002Fa> by flippercode.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fnextend-facebook-connect\u002F\" rel=\"ugc\">Nextend Social Login and Register\u003C\u002Fa> by Nextendweb.\u003C\u002Fli>\n\u003C\u002Ful>\n","Expanded the WordPress REST API for manager Users",2934,[18,109,110,123],"wordpress-users","https:\u002F\u002Fnoncheat.com\u002Fcategory\u002Fplugins\u002Fstionic-users\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstionic-users.1.0.2.zip",{"attackSurface":127,"codeSignals":140,"taintFlows":147,"riskAssessment":148,"analyzedAt":158},{"hooks":128,"ajaxHandlers":136,"restRoutes":137,"shortcodes":138,"cronEvents":139,"entryPointCount":11,"unprotectedCount":11},[129],{"type":130,"name":131,"callback":132,"priority":133,"file":134,"line":135},"filter","onesignal_send_notification","appifire_onesignal_send_notification_filter",10,"appifire.php",81,[],[],[],[],{"dangerousFunctions":141,"sqlUsage":142,"outputEscaping":144,"fileOperations":11,"externalRequests":30,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":146},[],{"prepared":11,"raw":11,"locations":143},[],{"escaped":11,"rawEcho":11,"locations":145},[],[],[],{"summary":149,"deductions":150},"Based on the static analysis, the \"appifire-for-mobile-apps\" v1.0 plugin exhibits a remarkably clean security posture. There are no identified entry points such as AJAX handlers, REST API routes, shortcodes, or cron events that are exposed without authentication or proper permission checks. The code also demonstrates strong security practices by avoiding dangerous functions, executing all SQL queries using prepared statements, and ensuring all output is properly escaped.  There are no file operations or identified taint flows, further indicating a low risk of common vulnerabilities. The single external HTTP request warrants minor scrutiny, but without further context, it's difficult to assess its specific risk. The complete absence of past vulnerabilities and CVEs suggests a history of secure development or perhaps limited exposure. However, the lack of any capability checks or nonce checks, combined with zero identified entry points, raises a slight concern. While the current analysis shows no exploitable paths, it suggests a lack of defensive programming patterns that would typically be present to protect against unforeseen issues or future vulnerabilities. The plugin appears robust in its current state, but the absence of these common security mechanisms could be a weakness if new attack vectors are discovered.",[151,154,156],{"reason":152,"points":153},"No capability checks found",5,{"reason":155,"points":153},"No nonce checks found",{"reason":157,"points":30},"External HTTP request exists","2026-03-17T06:49:28.034Z",{"wat":160,"direct":165},{"assetPaths":161,"generatorPatterns":162,"scriptPaths":163,"versionParams":164},[],[],[],[],{"cssClasses":166,"htmlComments":167,"htmlAttributes":168,"restEndpoints":169,"jsGlobals":170,"shortcodeOutput":171},[],[],[],[],[],[]]