[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4SUKlkQbb0od8CVbXFDKgubxCgediptcCXAIBXMs_Lo":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":35,"analysis":134,"fingerprints":268},"callcap-webmatch","Callcap Webmatch","1.6.5","sethduncan","https:\u002F\u002Fprofiles.wordpress.org\u002Fsethduncan\u002F","\u003Cp>“Webmatch” is a call-tracking feature provided by Callcap that associates phone calls with specific pageviews to bridge the gap between advertising campaigns and incoming phone calls.\u003C\u002Fp>\n\u003Cp>Webmatch allows a company to bridge the gap between basic web analytics and direct sales via phone calls. If a call leads to a sale, Webmatch can help you see where the initial visit came from, what ad campaign it may have run under, and what page the user was on when they called you.\u003C\u002Fp>\n\u003Cp>At it’s most basic, Webmatch will simply associate recent calls to recent pageviews, but with Dynamic Rotator enabled, Webmatch can show unique phone numbers to visitors to more accurately track their statistics.\u003C\u002Fp>\n","Works with Webmatch by Callcap to associate pageviews with phone calls and dynamically change phone numbers on your Wordpress page using your Webmatch …",10,1780,74,3,"2017-08-01T20:18:00.000Z","4.9.6.2","4.0","",[20,21,22],"call-tracking","phone-numbers","phone-tracking","http:\u002F\u002Fwww.callcap.com\u002Fhelp\u002Fwebmatch-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcallcap-webmatch.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},1,30,84,"2026-04-06T09:28:37.247Z",[36,56,69,93,117],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":26,"downloaded":44,"rating":26,"num_ratings":26,"last_updated":18,"tested_up_to":45,"requires_at_least":46,"requires_php":47,"tags":48,"homepage":52,"download_link":53,"security_score":54,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":55},"800-com-call-tracking","800.com Call Tracking","1.0.2","800.com","https:\u002F\u002Fprofiles.wordpress.org\u002F800noc\u002F","\u003Cp>\u003Cstrong>800.com Call Tracking\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Easily add dynamic number swapping to your WordPress site with the 800.com Call Tracking plugin. This lightweight plugin seamlessly integrates with your 800.com account to display unique phone numbers based on visitor sources, enhancing call tracking and marketing attribution for businesses.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Cstrong>Dynamic Number Swapping\u003C\u002Fstrong>: Automatically display trackable phone numbers on your website, powered by 800.com’s call tracking technology.\u003Cbr \u002F>\n– \u003Cstrong>Simple Setup\u003C\u002Fstrong>: Configure your 800.com API credentials in the WordPress admin panel and start tracking in minutes.\u003Cbr \u002F>\n– \u003Cstrong>Non-Intrusive Integration\u003C\u002Fstrong>: Injects a small, optimized JavaScript snippet into the \u003Ccode>\u003Chead>\u003C\u002Fcode> tag of your site for reliable performance.\u003Cbr \u002F>\n– \u003Cstrong>Secure and Compliant\u003C\u002Fstrong>: Safely handles API credentials and ensures no sensitive data is exposed, adhering to WordPress security standards.\u003Cbr \u002F>\n– \u003Cstrong>Marketing Insights\u003C\u002Fstrong>: Pair with 800.com’s analytics to track call sources, optimize campaigns, and boost ROI.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>How It Works:\u003C\u002Fstrong>\u003Cbr \u002F>\n1. Sign up for an \u003Ca href=\"https:\u002F\u002Fwww.800.com\u002F\" rel=\"nofollow ugc\">800.com account\u003C\u002Fa> to access dynamic number insertion features.\u003Cbr \u002F>\n2. Enter your 800.com API key in the plugin’s settings.\u003Cbr \u002F>\n3. The plugin injects the 800.com JavaScript into your site’s \u003Ccode>\u003Chead>\u003C\u002Fcode>, enabling dynamic phone number swapping based on visitor data (e.g., referral source, campaign, or location).\u003Cbr \u002F>\n4. Monitor call performance directly in your 800.com dashboard.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why Choose This Plugin?\u003C\u002Fstrong>\u003Cbr \u002F>\n– Perfect for businesses, marketers, and agencies using 800.com to track phone leads.\u003Cbr \u002F>\n– No coding required—works out of the box with any WordPress theme.\u003Cbr \u002F>\n– Lightweight and performance-optimized, ensuring fast page loads.\u003Cbr \u002F>\n– Built with security in mind, protecting your 800.com credentials and user data.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Requirements:\u003C\u002Fstrong>\u003Cbr \u002F>\n– An active 800.com account with API access.\u003Cbr \u002F>\n– WordPress 5.0 or higher.\u003Cbr \u002F>\n– Basic familiarity with 800.com’s call tracking setup.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note\u003C\u002Fstrong>: This plugin relies on 800.com’s services and does not store or process call data locally. All tracking and analytics are managed via your 800.com account.\u003C\u002Fp>\n\u003Cp>Get started today and supercharge your call tracking with dynamic number insertion!\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin connects to 800.com’s external services to provide call tracking functionality. The following information details what data is transmitted and how it is used:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>API Endpoints Used:\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Ccode>https:\u002F\u002Fapi.800.com\u002Fcompanies\u002Fslim\u003C\u002Fcode> – Retrieves a list of companies associated with your 800.com account for configuration purposes.\u003Cbr \u002F>\n– \u003Ccode>https:\u002F\u002Fapi.800.com\u002Fcompanies\u002F{id}\u002FtrackingNumbers\u002Fscript\u003C\u002Fcode> – Fetches the JavaScript snippet required for dynamic number insertion on your website.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Data Transmission:\u003C\u002Fstrong>\u003Cbr \u002F>\nDuring plugin configuration, your 800.com API key is used to authenticate requests to the above endpoints. Once configured, the injected script communicates with 800.com servers on each page view to determine which phone numbers to display.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Information Sent to 800.com:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Page location (URL)\u003Cbr \u002F>\n– Referrer information\u003Cbr \u002F>\n– 800.com session identifiers\u003Cbr \u002F>\n– Browser information\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Data Usage:\u003C\u002Fstrong>\u003Cbr \u002F>\nThe transmitted data is used exclusively to determine which of your configured phone numbers to serve to website visitors based on your 800.com account settings. This enables accurate call tracking and marketing attribution.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Transparency:\u003C\u002Fstrong>\u003Cbr \u002F>\n800.com maintains transparency by keeping requests and variables human-readable. Additionally, source maps are published for DNI scripts, allowing users to understand exactly how the scripts interact with their websites.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Service Links:\u003C\u002Fstrong>\u003Cbr \u002F>\n– 800.com Terms of Service: https:\u002F\u002Fwww.800.com\u002Fterms\u003Cbr \u002F>\n– 800.com Privacy Policy: https:\u002F\u002Fwww.800.com\u002Fprivacy\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note:\u003C\u002Fstrong> This plugin requires an active 800.com account and relies on their external services for all call tracking functionality. No call data is processed or stored locally by this plugin.\u003C\u002Fp>\n","Seamlessly add 800.com dynamic number insertion to your WordPress site for enhanced call tracking and marketing attribution.",367,"6.8.5","5.2","7.2",[49,20,50,51,22],"800-com","dynamic-number-insertion","marketing","https:\u002F\u002Fwww.800.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002F800-com-call-tracking.1.0.2.zip",100,"2026-03-15T10:48:56.248Z",{"slug":50,"name":57,"version":39,"author":58,"author_profile":59,"description":60,"short_description":61,"active_installs":26,"downloaded":62,"rating":26,"num_ratings":26,"last_updated":63,"tested_up_to":45,"requires_at_least":64,"requires_php":47,"tags":65,"homepage":18,"download_link":68,"security_score":54,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"Dynamic Number Insertion","Ryan Howard","https:\u002F\u002Fprofiles.wordpress.org\u002Fryhowa\u002F","\u003Cp>Dynamic Number Insertion (DNI) allows you to automatically replace phone numbers across your WordPress site based on the page URL. Perfect for businesses with multiple locations, marketing campaigns with unique tracking numbers, or any situation where you need different phone numbers on different pages.\u003C\u002Fp>\n\u003Cp>The plugin intelligently detects various phone number formats and replaces them consistently throughout the entire page – including headers, footers, widgets, and content areas. It works seamlessly with your existing theme and plugins, requiring no code modifications.\u003C\u002Fp>\n\u003Cp>Phone numbers are replaced before the page loads, ensuring compatibility with call tracking services like CallRail and other JavaScript-based tracking solutions.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>✅ Automatic phone number format detection (handles parentheses, dashes, dots, spaces)\u003Cbr \u002F>\n✅ URL-based replacement rules for precise targeting\u003Cbr \u002F>\n✅ Works everywhere – headers, footers, widgets, menus, and content\u003Cbr \u002F>\n✅ Compatible with page builders and themes\u003Cbr \u002F>\n✅ No coding required – simple dashboard interface\u003Cbr \u002F>\n✅ Preserves SEO and tracking scripts\u003Cbr \u002F>\n✅ Lightweight and performance-optimized\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Use Cases:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Multi-location businesses\u003C\u002Fstrong> – Show local phone numbers on location-specific pages\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Landing pages\u003C\u002Fstrong> – Use unique tracking numbers for different marketing campaigns\u003C\u002Fli>\n\u003Cli>\u003Cstrong>A\u002FB testing\u003C\u002Fstrong> – Test different phone numbers to measure conversion rates\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Franchises\u003C\u002Fstrong> – Let each franchise location have their own contact number\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Service area pages\u003C\u002Fstrong> – Display area-specific phone numbers automatically\u003C\u002Fli>\n\u003C\u002Ful>\n","Dynamically replace phone numbers on specific pages for location-based businesses, landing pages, and call tracking campaigns.",199,"2025-09-21T18:38:00.000Z","5.8",[20,66,50,67,21],"dni","phone-number-swap","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdynamic-number-insertion.1.0.2.zip",{"slug":70,"name":71,"version":72,"author":73,"author_profile":74,"description":75,"short_description":76,"active_installs":77,"downloaded":78,"rating":79,"num_ratings":80,"last_updated":81,"tested_up_to":82,"requires_at_least":83,"requires_php":84,"tags":85,"homepage":91,"download_link":92,"security_score":79,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"wp-call-button","WP Call Button – Easy Click to Call Button for WordPress","1.4.3","Syed Balkhi","https:\u002F\u002Fprofiles.wordpress.org\u002Fsmub\u002F","\u003Ch4>WordPress Click to Call Now Button Plugin\u003C\u002Fh4>\n\u003Cp>We believe that you shouldn’t have to hire a developer to create a click to call button in WordPress. That’s why we built WP Call Button, a click to call button plugin for WordPress that’s EASY and POWERFUL.\u003C\u002Fp>\n\u003Cp>WP Call Button allows you to add a beautiful call now (click-to-call) button on your website with just a few clicks, no coding skills needed.\u003C\u002Fp>\n\u003Cp>User experience is our #1 priority with WP Call Button. That’s why we have added plenty of customization options to make it easy for beginners and non-techy users to personalize their click to call buttons to match their website brand and color schemes.\u003C\u002Fp>\n\u003Cp>WP Call button is a 100% mobile responsive which means that it will always look great on all devices (mobile, tablet, laptop, and desktop). You also have the option to only show the call button on mobile devices only!\u003C\u002Fp>\n\u003Cp>WP Call button plugin is also highly optimized for web and server performance because we understand the importance of speed when it comes to SEO, marketing, and conversion. We can honestly say that WP Call Button plugin is one of the most lightweight and fastest WordPress call button plugins in the world.\u003C\u002Fp>\n\u003Ch4>Beginner Friendly Call Button – Easy for Non-techies\u003C\u002Fh4>\n\u003Cp>We took the pain out of creating click to call buttons and made it easy. Simply enable the plugin, enter your phone number, and that’s it!\u003C\u002Fp>\n\u003Cp>To make sure there are no typos and the call now button works globally, we have even added an easy country picker, so you always have the right country code in the click to call link.\u003C\u002Fp>\n\u003Cp>You have the option to customize the call button text, choose where you want to display it (inside page content, sidebar widgets, or sticky floating button everywhere on the site), and you can even show the call button only to mobile users.\u003C\u002Fp>\n\u003Ch4>Click to Call Button that’s Optimized for Conversions\u003C\u002Fh4>\n\u003Cp>As business owners, we know it’s extremely important to book as many phone calls and close as many leads possible to grow the business.\u003C\u002Fp>\n\u003Cp>That’s why we made WP Call button optimized for high conversions.\u003C\u002Fp>\n\u003Cp>By default, you have the option to add a smart floating call button that scrolls with the user as they browse your website. You can choose from our four high-converting sticky call button layouts.\u003C\u002Fp>\n\u003Cp>These layout makes sure that your click to call button is highly visible to users which leads to more phone calls for your sales team!\u003C\u002Fp>\n\u003Cp>Best part is that we have built-in event tracking that works seamlessly with Google Analytics, so you know which pages are generating you the most calls, so you can focus on what’s working to grow your business even faster!\u003C\u002Fp>\n\u003Ch4>Call Now Button Generator, Integrations, and More\u003C\u002Fh4>\n\u003Cp>Aside from the smart flotaing call button, we also have a click to call button generator that lets you add quick call buttons anywhere on your website including individual posts, pages, and sidebar widgets.\u003C\u002Fp>\n\u003Cp>With our call now button widget, you can easily add a call to request a quote area on your sidebar with a prominent click to call button, so you can make the phone ring!\u003C\u002Fp>\n\u003Cp>Our static call button generator shortcode works seamlessly with the \u003Ca href=\"https:\u002F\u002Fwww.wpbeginner.com\u002Fplugins\u002Fhow-to-disable-gutenberg-and-keep-the-classic-editor-in-wordpress\u002F\" rel=\"nofollow ugc\">Classic Editor\u003C\u002Fa>. If you’re using \u003Ca href=\"https:\u002F\u002Fwww.wpbeginner.com\u002Fbeginners-guide\u002Fhow-to-use-the-new-wordpress-block-editor\u002F\" rel=\"nofollow ugc\">Gutenberg\u003C\u002Fa>, then you can use our built-in WP Call Button Block to easily create and customize beautiful click to call buttons within minutes.\u003C\u002Fp>\n\u003Cp>WP Call button seamlessly integrates with all \u003Ca href=\"https:\u002F\u002Fwww.wpbeginner.com\u002Fshowcase\u002Fbest-business-phone-services\u002F\" rel=\"nofollow ugc\">top business phone services\u003C\u002Fa> across the world.\u003C\u002Fp>\n\u003Cp>We also made sure that WP Call button works seamlessly with other popular WordPress plugins such as WPForms, Elementor, WooCommerce etc.\u003C\u002Fp>\n\u003Cp>Whether you want to add a call button to Elementor, click to call button with WooCommerce, or a simple call button on your WPForms contact page, this plugin makes it easy!\u003C\u002Fp>\n\u003Ch4>Full WP Call Button Feature List\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Easily Add a Quick Call Button in WordPress\u003C\u002Fli>\n\u003Cli>Avoid Phone Number typos with Smart Phone Field\u003C\u002Fli>\n\u003Cli>Smart Floating Call Buttons that Scrolls with User\u003C\u002Fli>\n\u003Cli>Static Phone Call Button Generator (Shortcode and Call Button Gutenberg Block)\u003C\u002Fli>\n\u003Cli>Show Call Button to Mobile Users Only\u003C\u002Fli>\n\u003Cli>Call Now Button Sidebar Widget for WordPress\u003C\u002Fli>\n\u003Cli>Customize Call Now Button Color, Text, and Styles\u003C\u002Fli>\n\u003Cli>Highly optimized Call Button placement options\u003C\u002Fli>\n\u003Cli>Show or Hide Phone Icon on Call Button\u003C\u002Fli>\n\u003Cli>Click Tracking with Google Analytics Event Tracking\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>After reading this feature list, you can probably imagine why WP Call Button is the best WordPress click to call button plugin in the market.\u003C\u002Fp>\n\u003Cp>Give WP Call Button a try.\u003C\u002Fp>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cp>This plugin is created by \u003Ca href=\"https:\u002F\u002Fsyedbalkhi.com\u002F\" title=\"Syed Balkhi\" rel=\"friend nofollow ugc\">Syed Balkhi\u003C\u002Fa> from WPBeginner, and Yaniv Masjedi from Nextiva, one of top rated \u003Ca href=\"https:\u002F\u002Fwww.wpbeginner.com\u002Fbeginners-guide\u002Fhow-to-choose-the-best-business-voip-platform-compared\u002F\" rel=\"nofollow ugc\">business VOIP service\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>What’s Next\u003C\u002Fh4>\n\u003Cp>If you like this plugin, then consider checking out our other projects:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Foptinmonster.com\u002F\" title=\"OptinMonster\" rel=\"friend nofollow ugc\">OptinMonster\u003C\u002Fa> – Get More Email Subscribers with the most popular conversion optimization plugin for WordPress.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.monsterinsights.com\u002F\" title=\"MonsterInsights\" rel=\"friend nofollow ugc\">MonsterInsights\u003C\u002Fa> – See the Stats that Matter and Grow Your Business with Confidence. Best Google Analytics Plugin for WordPress.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.seedprod.com\u002F\" title=\"SeedProd\" rel=\"friend nofollow ugc\">SeedProd\u003C\u002Fa> – Jumpstart your website with the #1 Coming Soon & Maintenance Mode Plugin for WordPress.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002F\" rel=\"nofollow ugc\">WP Mail SMTP\u003C\u002Fa> – Improve email deliverability for your contact form with the most popular SMTP plugin for WordPress.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Frafflepress.com\u002F\" rel=\"nofollow ugc\">RafflePress\u003C\u002Fa> – the best WordPress giveaway and contest plugin to grow your traffic, subscribers, and social media followers.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftrustpulse.com\u002F\" rel=\"nofollow ugc\">TrustPulse\u003C\u002Fa> – the best WordPress social proof notification app for online businesses. Grow your business with social proof!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Visit \u003Ca href=\"http:\u002F\u002Fwww.wpbeginner.com\u002F\" title=\"WPBeginner\" rel=\"friend nofollow ugc\">WPBeginner\u003C\u002Fa> to learn from our \u003Ca href=\"http:\u002F\u002Fwww.wpbeginner.com\u002Fcategory\u002Fwp-tutorials\u002F\" title=\"WordPress Tutorials\" rel=\"friend nofollow ugc\">WordPress Tutorials\u003C\u002Fa> and find out about other \u003Ca href=\"http:\u002F\u002Fwww.wpbeginner.com\u002Fcategory\u002Fplugins\u002F\" title=\"Best WordPress Plugins\" rel=\"friend nofollow ugc\">best WordPress plugins\u003C\u002Fa>.\u003C\u002Fp>\n","The best WordPress call now button plugin. We help you add a clickable phone link (quick call button), so people can easily call your business phone.",40000,342257,92,62,"2024-10-11T17:33:00.000Z","6.7.5","4.9","5.6",[86,87,88,89,90],"call","call-button","call-now-button","clickable-phone-numbers","phone","https:\u002F\u002Fwww.wpbeginner.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-call-button.1.4.3.zip",{"slug":94,"name":95,"version":96,"author":97,"author_profile":98,"description":99,"short_description":100,"active_installs":101,"downloaded":102,"rating":13,"num_ratings":103,"last_updated":104,"tested_up_to":105,"requires_at_least":106,"requires_php":18,"tags":107,"homepage":112,"download_link":113,"security_score":114,"vuln_count":115,"unpatched_count":26,"last_vuln_date":116,"fetched_at":28},"callrail-phone-call-tracking","CallRail Phone Call Tracking","0.5.3","CallRail","https:\u002F\u002Fprofiles.wordpress.org\u002Fcallrail\u002F","\u003Cp>CallRail is here to bring complete visibility to the marketers who rely on quality inbound leads to measure success. Our customers live in a results-driven world, and giving them a clear view into their digital marketing efforts is a first priority for CallRail. We see the opportunities in surfacing and connecting data from calls, forms, chat and beyond — helping our customers get to better outcomes.\u003C\u002Fp>\n\u003Cp>Our WordPress plugin allows you to learn detailed information about the source and web session of every caller from your website using a process called \u003Ca href=\"https:\u002F\u002Fwww.callrail.com\u002Fleads\u002Fdynamic-number-insertion-2\u002F\" rel=\"nofollow ugc\">Dynamic Number Insertion\u003C\u002Fa>. It also powers our form tracking tool, which gives you the power to attribute form submissions back to their source and learn about what the user did on your site before submitting the form.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Learn more about \u003Ca href=\"https:\u002F\u002Fwww.callrail.com\u002F\" rel=\"nofollow ugc\">CallRail\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Check out our WP plugin \u003Ca href=\"https:\u002F\u002Fsupport.callrail.com\u002Fhc\u002Fen-us\u002Farticles\u002F201011537\" rel=\"nofollow ugc\">support documentation.\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Dynamically swap CallRail tracking phone numbers based on the visitor's referring source.",10000,358191,6,"2026-02-11T19:30:00.000Z","6.9.4","3.0",[108,109,20,110,111],"adwords","analytics","conversion-tracking","seo","http:\u002F\u002Fwww.callrail.com\u002Fdocs\u002Fweb-integration\u002Fwordpress-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcallrail-phone-call-tracking.0.5.3.zip",99,2,"2023-10-24 00:00:00",{"slug":118,"name":119,"version":120,"author":121,"author_profile":122,"description":123,"short_description":124,"active_installs":125,"downloaded":126,"rating":54,"num_ratings":14,"last_updated":127,"tested_up_to":105,"requires_at_least":106,"requires_php":18,"tags":128,"homepage":132,"download_link":133,"security_score":54,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"whatconverts","WhatConverts","1.0.7","whatconverts call tracking and reporting","https:\u002F\u002Fprofiles.wordpress.org\u002Fwhatconverts\u002F","\u003Cp>This plugin adds the required tracking code for WhatConverts.\u003C\u002Fp>\n\u003Cp>For more information visit, \u003Ca href=\"https:\u002F\u002Fwww.whatconverts.com\u002F\" rel=\"nofollow ugc\">WhatConverts\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>WhatConverts plugin uses s.ksrndkehqnwntyxlhgto.com as the path to deliver the script.  The script is included on your site to allow WhatConverts to capture leads from your website.  s.ksrndkehqnwntyxlhgto.com is owned and operated by \u003Ca href=\"https:\u002F\u002Fwww.whatconverts.com\u002F\" rel=\"nofollow ugc\">WhatConverts\u003C\u002Fa>.  For more information visit our \u003Ca href=\"https:\u002F\u002Fwww.whatconverts.com\u002Fterms-of-use\" rel=\"nofollow ugc\">Terms of Use\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwww.whatconverts.com\u002Fprivacy-policy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa> for more information on WhatConverts.\u003C\u002Fp>\n","Enables WhatConverts on all pages.",7000,31411,"2025-12-01T13:06:00.000Z",[129,20,130,131,118],"analytics-call-tracking","form-tracking","goal-tracking","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwhatconverts\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwhatconverts.zip",{"attackSurface":135,"codeSignals":160,"taintFlows":236,"riskAssessment":255,"analyzedAt":267},{"hooks":136,"ajaxHandlers":156,"restRoutes":157,"shortcodes":158,"cronEvents":159,"entryPointCount":26,"unprotectedCount":26},[137,143,147,152],{"type":138,"name":139,"callback":140,"file":141,"line":142},"action","wp_enqueue_scripts","init_webmatch","webmatch.php",18,{"type":138,"name":144,"callback":145,"file":141,"line":146},"admin_menu","init_webmatch_menu",21,{"type":138,"name":148,"callback":149,"priority":150,"file":141,"line":151},"wp_head","place_webmatch",9,24,{"type":138,"name":153,"callback":154,"file":141,"line":155},"admin_init","webmatch_menu_settings",38,[],[],[],[],{"dangerousFunctions":161,"sqlUsage":162,"outputEscaping":164,"fileOperations":26,"externalRequests":26,"nonceChecks":26,"capabilityChecks":26,"bundledLibraries":235},[],{"prepared":31,"raw":26,"locations":163},[],{"escaped":26,"rawEcho":165,"locations":166},40,[167,171,173,174,176,177,178,180,181,183,185,187,189,191,193,195,197,199,201,203,204,206,207,209,210,212,214,215,217,218,220,221,223,224,226,227,229,230,232,234],{"file":168,"line":169,"context":170},"webmatch-form.php",15,"raw output",{"file":168,"line":172,"context":170},78,{"file":168,"line":172,"context":170},{"file":168,"line":175,"context":170},79,{"file":168,"line":175,"context":170},{"file":168,"line":175,"context":170},{"file":168,"line":179,"context":170},82,{"file":168,"line":179,"context":170},{"file":168,"line":182,"context":170},83,{"file":168,"line":184,"context":170},87,{"file":168,"line":186,"context":170},96,{"file":168,"line":188,"context":170},105,{"file":168,"line":190,"context":170},111,{"file":168,"line":192,"context":170},118,{"file":168,"line":194,"context":170},125,{"file":168,"line":196,"context":170},126,{"file":168,"line":198,"context":170},127,{"file":168,"line":200,"context":170},128,{"file":168,"line":202,"context":170},131,{"file":168,"line":202,"context":170},{"file":168,"line":205,"context":170},132,{"file":168,"line":205,"context":170},{"file":168,"line":208,"context":170},133,{"file":168,"line":208,"context":170},{"file":168,"line":211,"context":170},142,{"file":168,"line":213,"context":170},143,{"file":168,"line":213,"context":170},{"file":168,"line":216,"context":170},144,{"file":168,"line":216,"context":170},{"file":168,"line":219,"context":170},145,{"file":168,"line":219,"context":170},{"file":168,"line":222,"context":170},146,{"file":168,"line":222,"context":170},{"file":168,"line":225,"context":170},147,{"file":168,"line":225,"context":170},{"file":168,"line":228,"context":170},148,{"file":168,"line":228,"context":170},{"file":168,"line":231,"context":170},189,{"file":141,"line":233,"context":170},101,{"file":141,"line":194,"context":170},[],[237],{"entryPoint":238,"graph":239,"unsanitizedCount":115,"severity":254},"\u003Cwebmatch-form> (webmatch-form.php:0)",{"nodes":240,"edges":251},[241,246],{"id":242,"type":243,"label":244,"file":168,"line":245},"n0","source","$_SERVER (x2)",4,{"id":247,"type":248,"label":249,"file":168,"line":169,"wp_function":250},"n1","sink","echo() [XSS]","echo",[252],{"from":242,"to":247,"sanitized":253},false,"low",{"summary":256,"deductions":257},"The security posture of the callcap-webmatch plugin v1.6.5 shows a mixed bag of good practices and significant concerns. On the positive side, the plugin has no recorded vulnerabilities (CVEs) and appears to have a small attack surface with no direct AJAX handlers, REST API routes, shortcodes, or cron events exposed without authorization checks. It also avoids file operations and external HTTP requests, which are common vectors for compromise.\n\nHowever, the static analysis reveals critical weaknesses. The complete absence of capability checks and nonce checks, combined with 100% of output not being properly escaped, creates substantial risks. The taint analysis indicates one flow with an unsanitized path, and while it's not classified as critical or high, it's still a concerning sign. The lack of output escaping is particularly worrying, as it opens the door to cross-site scripting (XSS) vulnerabilities if any user-supplied data is ever displayed on the frontend. The plugin also utilizes a single SQL query that is properly prepared, which is a positive, but the overall lack of security controls in other areas outweighs this single strength.\n\nGiven the lack of historical vulnerabilities, it might suggest that the plugin has not been a target or that its limited functionality has not exposed exploitable weaknesses to date. However, relying on this lack of history is a dangerous assumption. The current code analysis points to significant potential for immediate exploitation due to unescaped output and missing authorization checks, which are foundational security practices. A balanced conclusion is that while the plugin appears to have a small attack surface and no historical issues, its current implementation contains fundamental security flaws that require immediate attention.",[258,260,262,265],{"reason":259,"points":169},"Missing capability checks",{"reason":261,"points":11},"Missing nonce checks",{"reason":263,"points":264},"Unescaped output detected",16,{"reason":266,"points":11},"Flows with unsanitized paths","2026-03-17T00:43:10.742Z",{"wat":269,"direct":276},{"assetPaths":270,"generatorPatterns":272,"scriptPaths":273,"versionParams":275},[271],"\u002Fwp-content\u002Fplugins\u002Fcallcap-webmatch\u002Fstyle.css",[],[274],"\u002F\u002Fwebmatch.callcap.com\u002Ftrack\u002Fwebmatch.js",[],{"cssClasses":277,"htmlComments":278,"htmlAttributes":281,"restEndpoints":282,"jsGlobals":283,"shortcodeOutput":285},[],[279,280],"\u003C!-- Callcap Webmatch for Wordpress-->","\u003C!-- No Webmatch campaigns are currently set up. -->",[],[],[284],"var webmatch_",[]]