[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVxAT7o2eqPQOfk9XFeQ7wuKNS5NKchU3j2a3fQYv1xc":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":14,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":34,"analysis":144,"fingerprints":201},"bottom-fixed-window","Bottom suspended window, 底部悬浮窗","1.0","cc2017","https:\u002F\u002Fprofiles.wordpress.org\u002Fcc2017\u002F","\u003Cp>Want to easily display a sticky window bar at the page bottom while being handy at the back end? Then this plugin is for you. It can easy integrate form, ads, images and html content inside the bar, all the content can be set from admin panel.\u003C\u002Fp>\n\u003Cp>Use the Bottom fixed window plugin to create sticky bar that stay in the visible screen area especially at the page bottom when the page is scrolled up or down.\u003C\u002Fp>\n\u003Cp>Bottom fixed window plugin cross the screen with a 100% width and the height can be configured. It’s a simple plugin that only adds a block of html and js code just before the closing body tag.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwp.cancms.com\u002Fcancms-wp-float-bar-188\" rel=\"nofollow ugc\">Manual and demo\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Compatibility\u003C\u002Fh4>\n\u003Cp>The plugin is not working with all themes! Theme requirements:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>jQuery is required, jQuery version 1.8.3 (or later) is recommended.\u003C\u002Fli>\n\u003Cli>No JavaScript errors caused by other plugins and scripts.\u003C\u002Fli>\n\u003Cli>\u003Ccode>wp_head()\u003C\u002Fcode> and \u003Ccode>wp_footer()\u003C\u002Fcode> functions in header.php and footer.php files.\u003C\u002Fli>\n\u003C\u002Ful>\n","A simple sticky\u002Fsuspended\u002Ffixed bar to the page footer. It can display ads and form content inside, which can be defined from back end.",10,1709,0,"","5.2.24","5.0",[18,19,20,21,22],"ads","bottom-bar","fixed-bar","sticky-bar","suspended-window","http:\u002F\u002Fwp.cancms.com\u002Fcancms-wp-float-bar-188","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbottom-fixed-window.zip",100,null,"2026-03-15T10:48:56.248Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},2,30,94,"2026-04-04T11:04:07.693Z",[35,56,74,98,119],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":25,"downloaded":43,"rating":25,"num_ratings":44,"last_updated":45,"tested_up_to":46,"requires_at_least":47,"requires_php":14,"tags":48,"homepage":52,"download_link":53,"security_score":54,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":55},"peanut-butter-bar-smooth-version","Peanut Butter Bar (smooth version)","1.2.1","andrewcouch","https:\u002F\u002Fprofiles.wordpress.org\u002Fandrewcouch\u002F","\u003Cp>A Peanut Butter Bar is all of the good stuff that sticks to the roof of your site.\u003C\u002Fp>\n\u003Cp>The plugin allows you to attach sticky bars to the roof of your site that stays visible no matter how far a user scrolls.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Track clicks using Google Analytics Events using the Analytics you already use in your blog.  \u003C\u002Fli>\n\u003Cli>Plugin runs within your WordPress install. No external servers to deal with.\u003C\u002Fli>\n\u003Cli>Close button state persists through a user’s session without cookies.    \u003C\u002Fli>\n\u003Cli>Responsive and mobile friendly.  \u003C\u002Fli>\n\u003Cli>Choose from a range of tasty colors. \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This is the Smooth version of Peanut Butter Bar. It supports a single site-wide bar. The Crunchy (paid) version has more bits including multiple bars and attaching bars to specific posts\u002Fpages and categories. Learn more at \u003Ca href=\"http:\u002F\u002Fpeanutbutterplugin.com\" rel=\"nofollow ugc\">peanutbutterplugin.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Check out this \u003Ca href=\"http:\u002F\u002Fpeanutbutterplugin.com\u002Fhelp-topics\u002Ffilters-and-hooks-in-pbb-smooth\u002F\" rel=\"nofollow ugc\">blog post\u003C\u002Fa> for the supported filters and actions in PBB Smooth.\u003C\u002Fp>\n\u003Ch3>Readme Generator\u003C\u002Fh3>\n\u003Cp>This Readme file was generated using \u003Ca href='http:\u002F\u002Fsudarmuthu.com\u002Fwordpress\u002Fwp-readme' rel=\"nofollow ugc\">wp-readme\u003C\u002Fa>, which generates readme files for WordPress Plugins.\u003C\u002Fp>\n","Peanut Butter Bar allows you to attach sticky bars to the roof of your site that stays visible no matter how far a user scrolls.",8075,9,"2016-04-04T09:39:00.000Z","4.5.33","3.8",[49,20,50,21,51],"alert-bar","responsive-bar","sticky-bar-bottom","http:\u002F\u002Fpeanutbutterplugin.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpeanut-butter-bar-smooth-version.zip",85,"2026-03-15T15:16:48.613Z",{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":13,"downloaded":64,"rating":13,"num_ratings":13,"last_updated":65,"tested_up_to":66,"requires_at_least":67,"requires_php":68,"tags":69,"homepage":14,"download_link":73,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":55},"convboost-sticky-notification-bar","ConvBoost Sticky Notification Bar","0.0.9","numeriweb","https:\u002F\u002Fprofiles.wordpress.org\u002Fnumeriweb\u002F","\u003Cp>ConvBoost Sticky Notification Bar helps you add a clean \u003Cstrong>sticky bar\u003C\u002Fstrong> to your website (top or bottom of the screen) to highlight promotions, announcements, shipping updates, or any important message.\u003C\u002Fp>\n\u003Cp>It’s built to stay \u003Cstrong>simple\u003C\u002Fstrong>, \u003Cstrong>clear\u003C\u002Fstrong>, and \u003Cstrong>lightweight\u003C\u002Fstrong>: configure your bar in minutes, keep the output minimal, and avoid over-complicated builders. When you do want to fine-tune design, the \u003Cstrong>live admin preview\u003C\u002Fstrong> helps you iterate faster.\u003C\u002Fp>\n\u003Ch3>Why users choose ConvBoost\u003C\u002Fh3>\n\u003Cp>Most sticky bar plugins force a slow loop: edit \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> save \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> open your site \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> refresh \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> repeat.\u003Cbr \u002F>\nConvBoost focuses on a faster, simpler workflow:\u003Cbr \u002F>\n* Clear, beginner-friendly settings\u003Cbr \u002F>\n* Lightweight output and minimal overhead\u003Cbr \u002F>\n* Live preview to speed up styling (without guesswork)\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Lightweight and quick to configure\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Live preview in the admin\u003C\u002Fstrong> (see changes instantly while you edit)\u003C\u002Fli>\n\u003Cli>Show the bar on \u003Cstrong>desktop\u003C\u002Fstrong>, \u003Cstrong>mobile\u003C\u002Fstrong>, or both\u003C\u002Fli>\n\u003Cli>Place the bar at the \u003Cstrong>top or bottom\u003C\u002Fstrong> of your pages\u003C\u002Fli>\n\u003Cli>Optional: \u003Cstrong>push the page down\u003C\u002Fstrong> when using a top bar (so it doesn’t cover your header)\u003C\u002Fli>\n\u003Cli>Choose the inner width: \u003Cstrong>full width\u003C\u002Fstrong> or \u003Cstrong>boxed\u003C\u002Fstrong> (set a custom width like 600px)\u003C\u002Fli>\n\u003Cli>Optional \u003Cstrong>two-line layout on mobile\u003C\u002Fstrong> (message + button can wrap neatly)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Scheduling\u003C\u002Fstrong> (start\u002Fend date & time, minute precision)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Content exclusions\u003C\u002Fstrong> (hide on areas like homepage, archives, search, and 404s)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Message\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Add your message easily\u003C\u002Fli>\n\u003Cli>Standard \u003Cstrong>Links are allowed\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>No custom HTML (keeps it simple and safer)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Design (no coding or CSS needed)\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Choose background and text colors\u003C\u002Fli>\n\u003Cli>Set link color\u003C\u002Fli>\n\u003Cli>Adjust font size\u003C\u002Fli>\n\u003Cli>Optional shadow and border\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Call-to-action button (optional)\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Add a button (example: “Shop now”, “Get the offer”, “Contact us”)\u003C\u002Fli>\n\u003Cli>Set the button link\u003C\u002Fli>\n\u003Cli>Option to open in a new tab\u003C\u002Fli>\n\u003Cli>Choose a button shape (Square \u002F Pill \u002F Rounded \u002F Boxed)\u003C\u002Fli>\n\u003Cli>Adjust button spacing and colors\u003C\u002Fli>\n\u003Cli>Optional button shadow\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Close button (optional)\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Let visitors dismiss the bar\u003C\u002Fli>\n\u003Cli>Dismiss for the \u003Cstrong>current visit\u003C\u002Fstrong> (session) or for \u003Cstrong>X days\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Choose close icon position (left or right)\u003C\u002Fli>\n\u003Cli>Adjust close icon size and color\u003C\u002Fli>\n\u003C\u002Ful>\n","Lightweight sticky top\u002Fbottom bar for promos & announcements. CTA, scheduling, exclusions, and live admin preview.",118,"2026-02-10T12:08:00.000Z","6.9.4","6.0","7.4",[70,19,71,21,72],"announcement-bar","notification-bar","top-bar","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconvboost-sticky-notification-bar.0.0.9.zip",{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":82,"downloaded":83,"rating":84,"num_ratings":85,"last_updated":86,"tested_up_to":66,"requires_at_least":87,"requires_php":68,"tags":88,"homepage":94,"download_link":95,"security_score":25,"vuln_count":96,"unpatched_count":13,"last_vuln_date":97,"fetched_at":55},"google-site-kit","Site Kit by Google – Analytics, Search Console, AdSense, Speed","1.174.0","Google","https:\u002F\u002Fprofiles.wordpress.org\u002Fgoogle\u002F","\u003Cp>Site Kit is the official WordPress plugin from Google for insights about how people find and use your site. Site Kit is the one-stop solution to deploy, manage, and get insights from critical Google tools to make the site successful on the web. It provides authoritative, up-to-date insights from multiple Google products directly on the WordPress dashboard for easy access, all for free.\u003C\u002Fp>\n\u003Ch4>Bringing the best of Google tools to WordPress\u003C\u002Fh4>\n\u003Cp>Site Kit includes powerful features that make using these Google products seamless and flexible:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy-to-understand stats directly on your WordPress dashboard\u003C\u002Fli>\n\u003Cli>Official stats from multiple Google tools, all in one dashboard\u003C\u002Fli>\n\u003Cli>Quick setup for multiple Google tools without having to edit the source code of your site\u003C\u002Fli>\n\u003Cli>Metrics for your entire site and for individual posts\u003C\u002Fli>\n\u003Cli>Easy-to-manage, granular permissions across WordPress and different Google products\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Supported Google tools\u003C\u002Fh4>\n\u003Cp>Site Kit shows key metrics and insights from different Google products:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Search Console:\u003C\u002Fstrong> Understand how Google Search discovers and displays your pages in Google Search. Track how many people saw your site in Search results, and what query they used to search for your site.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Analytics:\u003C\u002Fstrong> Explore how users navigate your site and track goals you’ve set up for your users to complete.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>AdSense:\u003C\u002Fstrong> Keep track of how much your site is earning you.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PageSpeed Insights:\u003C\u002Fstrong> See how your pages perform compared to other real-world sites. Improve performance with actionable tips from PageSpeed Insights.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Tag Manager:\u003C\u002Fstrong> Use Site Kit to easily set up Tag Manager- no code editing required. Then, manage your tags in Tag Manager.\u003C\u002Fli>\n\u003C\u002Ful>\n","Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.",5000000,243881054,84,980,"2026-03-10T15:16:00.000Z","5.2",[89,90,91,92,93],"adsense","analytics","google","pagespeed-insights","search-console","https:\u002F\u002Fsitekit.withgoogle.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgoogle-site-kit.1.174.0.zip",1,"2020-05-21 00:00:00",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":108,"num_ratings":109,"last_updated":110,"tested_up_to":66,"requires_at_least":111,"requires_php":68,"tags":112,"homepage":14,"download_link":116,"security_score":117,"vuln_count":96,"unpatched_count":13,"last_vuln_date":118,"fetched_at":55},"google-listings-and-ads","Google for WooCommerce","3.5.3","WooCommerce","https:\u002F\u002Fprofiles.wordpress.org\u002Fwoocommerce\u002F","\u003Cp>Effortlessly sync your WooCommerce product feed across Google and be seen by millions of engaged shoppers with the Google for WooCommerce extension. Download and setup takes just five minutes.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Grow your business with $500 in Google Ads credit\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>To help you get started running campaigns, you can get $500 in ad credit when you spend your first $500 on Google Ads within 60 days.\u003C\u002Fp>\n\u003Cp>\u003Cem>Terms and conditions apply.\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Sync your WooCommerce product feed to Google Merchant Center\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Seamlessly integrate your WooCommerce store with Google and set yourself up for success.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Sync your WooCommerce product feed to Google Merchant Center\u003C\u002Fstrong> in just a few clicks. With our API-integrated Product Sync feature, all the data and functionalities from your WooCommerce store will be linked to Google with seamless server-to-server connection.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Have your product listings automatically updated in real time\u003C\u002Fstrong> so your prices, promotions, inventories, and other product details stay accurate and synchronized across all your listings.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Access all the tools and features you need\u003C\u002Fstrong> to manage your WooCommerce store and grow your business — centralized in one place.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Find the right audiences and sell to high-intent customers with Google Ads\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Now your WooCommerce store is discoverable on Google – and you’re ready to \u003Cstrong>launch a Google Ads campaign!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Put Google AI to work for you\u003C\u002Fstrong> by launching a Google Ads Performance Max campaign. Combined with your unique business insight, Performance Max can help you reach high-value customers using optimized placements, bidding, and more – all aligned with your budget and specific goals.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Showcase your products across Google Shopping, Search, YouTube, Gmail, Maps, Display, and Discover\u003C\u002Fstrong> – from a single campaign. Manage all your Google Ads campaigns from your WooCommerce dashboard and on the WooCommerce Mobile App.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Save time and effort\u003C\u002Fstrong> by using Google AI to help scale your asset creation. Performance Max will not only create additional copy and images based on the creative you upload, but also mix and match them for the best performing ad combinations.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Get custom insights and improve your conversions using Google tag\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Once you’re running Google Ads campaigns, the Google tag feature in the extension enables conversion tracking to give you insights — so you can test and learn what works, and fine-tune your strategy.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Easily adjust your product listings in real time\u003C\u002Fstrong> to reflect your learnings and business expertise. While the extension maps product attributes by default, it’s simple to modify if you’d like more control.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Leverage automatic Google tagging and conversion tracking to measure what’s working and what’s not.\u003C\u002Fstrong> With insight into your customers’ purchase journey, you’ll be able to pinpoint how effectively your ads translate into valuable customer activity.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Take your conversion tracking further with enhanced conversions\u003C\u002Fstrong> — a feature designed to improve your measurement accuracy by collecting privacy-conscious data without the need for third-party cookies. So you have the right data to help make your campaign more effective.\u003C\u002Fli>\n\u003C\u002Ful>\n","Native integration with Google that allows merchants to easily display their products across Google’s network.",900000,39664091,54,257,"2026-03-04T21:01:00.000Z","6.6",[18,91,113,114,115],"listings","product-feed","woocommerce","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgoogle-listings-and-ads.3.5.3.zip",99,"2024-11-18 09:24:48",{"slug":120,"name":121,"version":122,"author":123,"author_profile":124,"description":125,"short_description":126,"active_installs":127,"downloaded":128,"rating":129,"num_ratings":130,"last_updated":131,"tested_up_to":66,"requires_at_least":132,"requires_php":68,"tags":133,"homepage":139,"download_link":140,"security_score":141,"vuln_count":142,"unpatched_count":13,"last_vuln_date":143,"fetched_at":55},"duracelltomi-google-tag-manager","GTM4WP – A Google Tag Manager (GTM) plugin for WordPress","1.22.3","Thomas Geiger","https:\u002F\u002Fprofiles.wordpress.org\u002Fduracelltomi\u002F","\u003Cp>Google Tag Manager (GTM) is Google’s free tool for everyone to manage and deploy analytics and marketing tags as well as other code snippets\u003Cbr \u002F>\nusing an intuitive web UI. To learn more about this tool, visit the \u003Ca href=\"https:\u002F\u002Fmarketingplatform.google.com\u002Fabout\u002Ftag-manager\u002F\" rel=\"nofollow ugc\">official website\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>This plugin places the GTM container code snippets onto your WordPress website so that you do not need to add it manually.\u003Cbr \u002F>\nMultiple containers are also supported!\u003C\u002Fp>\n\u003Cp>The plugin complements your GTM setup by pushing page meta data and user information into the so called data layer.\u003Cbr \u002F>\nGoogle’s official help pages includes \u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Ftag-platform\u002Ftag-manager\u002Fdatalayer#datalayer\" rel=\"nofollow ugc\">more details about the data layer\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>PHP 7.4 is required to use this plugin.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>GTM container code placement\u003C\u002Fh4>\n\u003Cp>The original GTM container code is divided into two parts:\u003C\u002Fp>\n\u003Cp>The first part is a javascript code snippet that is added to the \u003Ccode>\u003Chead>\u003C\u002Fcode> section of every page of the website.\u003Cbr \u002F>\nThis part is critical to enable all features of GTM, and this plugin helps to place this part\u003Cbr \u002F>\ncorrectly on your site.\u003C\u002Fp>\n\u003Cp>The second part is an iframe snippet that acts as a failsafe\u002Ffallback should users’ JavaScript be disabled.\u003Cbr \u002F>\nGoogle recommends – for best performance – to place this code snippet directly after the opening \u003Ccode>\u003Cbody>\u003C\u002Fcode> tag on each page.\u003C\u002Fp>\n\u003Cp>Albeit not ideal, it will work when placed lower in the code. This plugin provides a code placement option for the second code snippet.\u003C\u002Fp>\n\u003Cp>If your WordPress theme is compatible with the additions of WordPress 5.2 then this plugin will place this second code to the right place.\u003Cbr \u002F>\nUsers of the Genisis theme, GeneratePress theme, Elementor, Oxygen Builder and Beaver Builder Theme will also have this placed correctly.\u003Cbr \u002F>\nTo utilize this, set the compatibility mode in plugin options to off.\u003C\u002Fp>\n\u003Cp>All other users can place this second code snippet using a custom PHP code (“Manually coded” option) or select the so called “Footer” option to\u003Cbr \u002F>\nadd the code lower in the code (it is not the recommended way but will work)\u003C\u002Fp>\n\u003Ch4>Basic data included\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>post\u002Fpage titles\u003C\u002Fli>\n\u003Cli>post\u002Fpage dates\u003C\u002Fli>\n\u003Cli>post\u002Fpage category names\u003C\u002Fli>\n\u003Cli>post\u002Fpage tag names\u003C\u002Fli>\n\u003Cli>post\u002Fpage author ID and name\u003C\u002Fli>\n\u003Cli>post\u002Fpage ID\u003C\u002Fli>\n\u003Cli>post types\u003C\u002Fli>\n\u003Cli>post format\u003C\u002Fli>\n\u003Cli>post count on the current page + in the current category\u002Ftag\u002Ftaxonomy\u003C\u002Fli>\n\u003Cli>custom terms associated with any post type\u003C\u002Fli>\n\u003Cli>logged in status\u003C\u002Fli>\n\u003Cli>logged in user role\u003C\u002Fli>\n\u003Cli>logged in user ID (to track cross device behaviour in Google Analytics)\u003C\u002Fli>\n\u003Cli>logged in user email address (both unhashed and SHA256 hased values to be used with tracking)\u003C\u002Fli>\n\u003Cli>logger in user creation date\u003C\u002Fli>\n\u003Cli>site search data\u003C\u002Fli>\n\u003Cli>site name and id (for WordPress multisite instances)\u003C\u002Fli>\n\u003Cli>IP address of the visitor (please use the explicit consent of the visitor to utilize this)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Browser \u002F OS \u002F Device data\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>browser data (name, version, engine)\u003C\u002Fli>\n\u003Cli>OS data (name, version)\u003C\u002Fli>\n\u003Cli>device data (type, manufacturer, model)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Data is provided using the WhichBrowser library: http:\u002F\u002Fwhichbrowser.net\u002F\u003C\u002Fp>\n\u003Ch4>Weather data\u003C\u002Fh4>\n\u003Cp>(beta)\u003C\u002Fp>\n\u003Cp>Push data about users’ current weather conditions into the dataLayer. This can be used to generate weather-related\u003Cbr \u002F>\naudience\u002Fremarketing lists on ad platforms and allows for user segmentation in your web analytics solutions:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>weather category (clouds, rain, snow, etc.)\u003C\u002Fli>\n\u003Cli>weather description: more detailed data\u003C\u002Fli>\n\u003Cli>temperature in Celsius or Fahrenheit\u003C\u002Fli>\n\u003Cli>air pressure\u003C\u002Fli>\n\u003Cli>wind speed and degrees\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Weather data is queried from Open Weather Map. Depending on your websites traffic, additional fees may apply:\u003Cbr \u002F>\nhttp:\u002F\u002Fopenweathermap.org\u002Fprice\u003C\u002Fp>\n\u003Cp>An (free) API key from OpenWeatherMap is required for this feature to work.\u003C\u002Fp>\n\u003Cp>ipstack.com is used to determine the site visitor’s location. A (free) API key from IPStack.com is required for this feature to work:\u003Cbr \u002F>\nhttps:\u002F\u002Fipstack.com\u002Fproduct\u003C\u002Fp>\n\u003Ch4>Media player events\u003C\u002Fh4>\n\u003Cp>(experimental)\u003C\u002Fp>\n\u003Cp>Track users’ interaction with any embedded media:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>YouTube\u003C\u002Fli>\n\u003Cli>Vimeo\u003C\u002Fli>\n\u003Cli>Soundcloud\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>DataLayer events can be chosen to fire upon media player load, media is being played, paused\u002Fstopped and optionally when\u003Cbr \u002F>\nthe user reaches 10, 20, 30, …, 90, 100% of the media duration.\u003C\u002Fp>\n\u003Cp>Tracking is supported for embedded media using the built-in oEmbed feature of WordPress as well as most other media plugins\u003Cbr \u002F>\nand copy\u002Fpasted codes. Players injected into the website after page load are not currently supported.\u003C\u002Fp>\n\u003Ch4>Scroll tracking\u003C\u002Fh4>\n\u003Cp>Fire tags based on how the visitor scrolls from the top to the bottom of a page.\u003Cbr \u002F>\nAn example would be to separate “readers” (who spend a specified amount of time on a page) from “scrollers”\u003Cbr \u002F>\n(who only scroll through within seconds). You can use these events to fire Analytics tags and\u002For remarketing\u002Fconversion tags\u003Cbr \u002F>\n(for micro conversions).\u003C\u002Fp>\n\u003Cp>Scroll tracking is based on the solution originally created by\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Nick Mihailovski\u003C\u002Fli>\n\u003Cli>Thomas Baekdal\u003C\u002Fli>\n\u003Cli>Avinash Kaushik\u003C\u002Fli>\n\u003Cli>Joost de Valk\u003C\u002Fli>\n\u003Cli>Eivind Savio\u003C\u002Fli>\n\u003Cli>Justin Cutroni\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Original script:\u003Cbr \u002F>\nhttp:\u002F\u002Fcutroni.com\u002Fblog\u002F2012\u002F02\u002F21\u002Fadvanced-content-tracking-with-google-analytics-part-1\u002F\u003C\u002Fp>\n\u003Ch4>Blacklist & Whitelist Tag Manager tags, triggers and variables\u003C\u002Fh4>\n\u003Cp>To increase website security, you have the option to white- and blacklist tags\u002Ftriggers\u002Fvariables.\u003Cbr \u002F>\nYou can prevent specific tags from firing or the use of certain variable types regardless of your GTM setup.\u003C\u002Fp>\n\u003Cp>If the Google account associated with your GTM account is being hacked, an attacker could easily\u003Cbr \u002F>\nexecute malware on your website without accessing its code on your hosting server. By blacklisting custom HTML tags\u003Cbr \u002F>\nand\u002For custom JavaScript variables you can secure the Tag Manager container.\u003C\u002Fp>\n\u003Ch4>Integration\u003C\u002Fh4>\n\u003Cp>Google Tag Manager for WordPress integrates with several popular plugins. More integration to come!\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Contact Form 7: fire an event when a Contact Form 7 form was submitted with any result (mail sent, mail failed, spam detected, invalid input)\u003C\u002Fli>\n\u003Cli>WooCommerce:\n\u003Cul>\n\u003Cli>Implementation of \u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Ftag-manager\u002Fecommerce-ga4\" rel=\"nofollow ugc\">GA4 E-commerce\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Does not support promotions since WooCommerce does not have such a feature (yet)\u003C\u002Fli>\n\u003Cli>Does not support refunds\u003C\u002Fli>\n\u003Cli>Compatibility with High Performance Order Storage (HPOS)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>AMP: load your AMP container on the AMP version of your pages\u003C\u002Fli>\n\u003Cli>Cookiebot: use automatic cookie blocking mode if needed\u003C\u002Fli>\n\u003Cli>Google Consent Mode v2: fire the “default” command with specific consent flags to integrat with non-certified Consent Management Platforms (CMPs) and plugins.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Server side containers\u003C\u002Fh4>\n\u003Cp>If you are using a \u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Ftag-manager\u002Fserverside\u002Fsend-data#update_the_gtmjs_source_domain\" rel=\"nofollow ugc\">server side container\u003C\u002Fa>\u003Cbr \u002F>\nyou can enter your custom domain name and custom path to load gtm.js from your there.\u003C\u002Fp>\n\u003Ch4>Exclude specific user roles from being tracked\u003C\u002Fh4>\n\u003Cp>You can set which user roles needs to be excluded from tracking when a user with that role visits the frontend. This will completely disable the container code for that user.\u003C\u002Fp>\n","Advanced tag management for WordPress with Google Tag Manager",700000,13906369,90,154,"2025-12-15T14:45:00.000Z","3.4.0",[134,135,136,137,138],"google-ads","google-analytics","google-tag-manager","gtm","tag-manager","https:\u002F\u002Fgtm4wp.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fduracelltomi-google-tag-manager.1.22.3.zip",98,3,"2022-05-31 00:00:00",{"attackSurface":145,"codeSignals":175,"taintFlows":188,"riskAssessment":189,"analyzedAt":200},{"hooks":146,"ajaxHandlers":171,"restRoutes":172,"shortcodes":173,"cronEvents":174,"entryPointCount":13,"unprotectedCount":13},[147,152,156,162,166],{"type":148,"name":149,"callback":149,"file":150,"line":151},"action","init","cancms-float-bar.php",67,{"type":148,"name":153,"callback":154,"file":150,"line":155},"plugins_loaded","closure",73,{"type":148,"name":157,"callback":158,"priority":159,"file":160,"line":161},"admin_menu","addAdminMenu",12,"src\\Admin\\BottomBar.php",22,{"type":148,"name":163,"callback":164,"file":160,"line":165},"admin_init","registerOptionSettings",25,{"type":148,"name":167,"callback":168,"file":169,"line":170},"wp_footer","registerWpFooter","src\\Front\\Hooks.php",15,[],[],[],[],{"dangerousFunctions":176,"sqlUsage":177,"outputEscaping":179,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":187},[],{"prepared":13,"raw":13,"locations":178},[],{"escaped":13,"rawEcho":30,"locations":180},[181,184],{"file":160,"line":182,"context":183},44,"raw output",{"file":185,"line":186,"context":183},"src\\Front\\FloatBar.php",21,[],[],{"summary":190,"deductions":191},"The plugin 'bottom-fixed-window' v1.0 exhibits a strong adherence to secure coding practices in its static analysis. The absence of AJAX handlers, REST API routes, shortcodes, and cron events significantly limits its attack surface. Furthermore, the code doesn't utilize dangerous functions, all SQL queries are prepared, and there are no file operations or external HTTP requests, all of which are positive indicators of a secure development approach.  The lack of any recorded vulnerabilities, including CVEs, also suggests a history of good security, or at least a lack of discovery.  \n\nDespite these strengths, a critical concern arises from the complete lack of output escaping. This indicates that any data processed and displayed by the plugin, if not inherently safe, could be exposed to cross-site scripting (XSS) vulnerabilities. The absence of nonce and capability checks, while seemingly less critical given the limited attack surface, means that any potential entry points, however small, are not protected against unauthorized access or manipulation.  \n\nIn conclusion, while the plugin benefits from a minimal attack surface and the proper use of prepared statements, the severe deficiency in output escaping presents a notable risk. The vulnerability history is a positive sign, but the identified code signals do not fully mitigate the potential for injection attacks via unescaped output. Developers should prioritize implementing proper output sanitization to address this significant weakness.",[192,195,198],{"reason":193,"points":194},"0% output escaping",8,{"reason":196,"points":197},"0 nonce checks",5,{"reason":199,"points":197},"0 capability checks","2026-03-16T23:25:33.507Z",{"wat":202,"direct":211},{"assetPaths":203,"generatorPatterns":206,"scriptPaths":207,"versionParams":208},[204,205],"\u002Fwp-content\u002Fplugins\u002Fcancms-float-bar\u002Fcss\u002Ffront.css","\u002Fwp-content\u002Fplugins\u002Fcancms-float-bar\u002Fjs\u002Ffront.js",[],[205],[209,210],"cancms-float-bar\u002Fcss\u002Ffront.css?ver=","cancms-float-bar\u002Fjs\u002Ffront.js?ver=",{"cssClasses":212,"htmlComments":213,"htmlAttributes":214,"restEndpoints":215,"jsGlobals":216,"shortcodeOutput":217},[],[],[],[],[],[]]