[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftl9CIo_RG3OD0FveshiYATF0HN6mghzzY49seoquaoE":3},{"slug":4,"name":5,"version":6,"author":4,"author_profile":7,"description":8,"short_description":9,"active_installs":10,"downloaded":11,"rating":12,"num_ratings":12,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":12,"unpatched_count":12,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":34,"analysis":124,"fingerprints":173},"callroot","CallRoot","1.1","https:\u002F\u002Fprofiles.wordpress.org\u002Fcallroot\u002F","\u003Cp>CallRoot is a call tracking software for marketing teams and agencies. Track & record incoming phone calls, dynamically insert phone numbers & map referrer source with every incoming call. This wordpress plugin automatically inserts the javascript code for swapping phone numbers in your wordpress website. Using our plugin, you no longer have to manually insert the JavaScript for dynamic number insertion on every page. To know more about CallRoot, go to \u003Ca href=\"https:\u002F\u002Fcallroot.com\" rel=\"nofollow ugc\">https:\u002F\u002Fcallroot.com\u003C\u002Fa>\u003C\u002Fp>\n","CallRoot wordpress plugin facilitates Dynamic Number Insertion (DNI), i.e., it automatically inserts the javascript code for swapping phone numbers in …",10,6135,0,"2018-03-26T07:31:00.000Z","4.9.29","4.9","5.5.9",[18,19,20,21,22],"call-tracking","campaign-tracking","dni","dynamic-number-insertion","marketing","https:\u002F\u002Fcallroot.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcallroot.1.2.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":4,"display_name":4,"profile_url":7,"plugin_count":30,"total_installs":10,"avg_security_score":25,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},1,30,84,"2026-04-04T11:51:33.371Z",[35,53,70,83,106],{"slug":36,"name":37,"version":6,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":44,"num_ratings":30,"last_updated":45,"tested_up_to":46,"requires_at_least":15,"requires_php":47,"tags":48,"homepage":50,"download_link":51,"security_score":44,"vuln_count":12,"unpatched_count":12,"last_vuln_date":26,"fetched_at":52},"invox-call-tracking","INVOX Call Tracking","invox","https:\u002F\u002Fprofiles.wordpress.org\u002Finvox\u002F","\u003Cp>INVOX is a powerful call tracking software designed to help businesses track and analyze phone call conversions from each marketing channel. With this easy-to-integrate plugin, you can gain valuable insights into your marketing campaigns, measure the effectiveness of your advertising efforts, and optimize your customer acquisition strategy.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Advanced Call Analytics:\u003C\u002Fstrong> Track call data such as duration, source, campaigns, ads, and PPC keywords to better understand customer behavior.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Dynamic Number Insertion:\u003C\u002Fstrong> Automatically display unique phone numbers on your website, based on the visitor’s source (e.g., paid ads, organic search, social media).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Real-time Reporting:\u003C\u002Fstrong> View live call data and detailed reports to evaluate your marketing efforts in real time.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Integration with CRM:\u003C\u002Fstrong> Easily sync call data with your CRM system to enhance lead management and follow-up strategies.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User-Friendly Setup:\u003C\u002Fstrong> Simple installation and configuration process, with no technical knowledge required.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>INVOX also offers a Call Transcript feature that automatically generates transcriptions of your phone conversations. This powerful tool provides a text-based record of each call, making it easier to analyze customer interactions, improve customer service, and optimize marketing strategies.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why Choose INVOX Call Tracking?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Measure ROI:\u003C\u002Fstrong> Understand the real ROI of your marketing channels by directly linking phone calls to specific campaigns, ads, or keywords.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Improve Campaigns:\u003C\u002Fstrong> Use data to fine-tune your ads and campaigns, ensuring you focus your budget on high-performing channels.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enhance Customer Experience:\u003C\u002Fstrong> With a clear view of customer interactions, you can improve your communication and overall service quality.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Whether you’re running online ads, email campaigns, or organic SEO efforts, INVOX Call Tracking provides the tools you need to make data-driven decisions and boost your marketing performance.\u003C\u002Fp>\n\u003Cp>For more information about INVOX, visit our \u003Ca href=\"https:\u002F\u002Finvox.eu\" rel=\"nofollow ugc\">plugin homepage\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Cp>To configure the plugin, go to ‘Settings’ > ‘INVOX Call Tracking’ in the WordPress admin panel. Enter your custom CID and Version (v) values and save the settings.\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>Once configured, the INVOX Call Tracking JavaScript tag will be automatically added to your website.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support or questions, please contact us at \u003Ca href=\"mailto:contact@invox.eu\" rel=\"nofollow ugc\">contact@invox.eu\u003C\u002Fa>.\u003C\u002Fp>\n","The INVOX Call Tracking plugin lets WordPress users easily add Dynamic Number Insertion (DNI) to their site without technical or coding skills.",40,1027,100,"","6.7.5","7.0",[18,21,49],"marketing-analytics","https:\u002F\u002Finvox.eu","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finvox-call-tracking.1.1.zip","2026-03-15T10:48:56.248Z",{"slug":54,"name":55,"version":56,"author":57,"author_profile":58,"description":59,"short_description":60,"active_installs":12,"downloaded":61,"rating":12,"num_ratings":12,"last_updated":45,"tested_up_to":62,"requires_at_least":63,"requires_php":64,"tags":65,"homepage":68,"download_link":69,"security_score":44,"vuln_count":12,"unpatched_count":12,"last_vuln_date":26,"fetched_at":52},"800-com-call-tracking","800.com Call Tracking","1.0.2","800.com","https:\u002F\u002Fprofiles.wordpress.org\u002F800noc\u002F","\u003Cp>\u003Cstrong>800.com Call Tracking\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Easily add dynamic number swapping to your WordPress site with the 800.com Call Tracking plugin. This lightweight plugin seamlessly integrates with your 800.com account to display unique phone numbers based on visitor sources, enhancing call tracking and marketing attribution for businesses.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Cstrong>Dynamic Number Swapping\u003C\u002Fstrong>: Automatically display trackable phone numbers on your website, powered by 800.com’s call tracking technology.\u003Cbr \u002F>\n– \u003Cstrong>Simple Setup\u003C\u002Fstrong>: Configure your 800.com API credentials in the WordPress admin panel and start tracking in minutes.\u003Cbr \u002F>\n– \u003Cstrong>Non-Intrusive Integration\u003C\u002Fstrong>: Injects a small, optimized JavaScript snippet into the \u003Ccode>\u003Chead>\u003C\u002Fcode> tag of your site for reliable performance.\u003Cbr \u002F>\n– \u003Cstrong>Secure and Compliant\u003C\u002Fstrong>: Safely handles API credentials and ensures no sensitive data is exposed, adhering to WordPress security standards.\u003Cbr \u002F>\n– \u003Cstrong>Marketing Insights\u003C\u002Fstrong>: Pair with 800.com’s analytics to track call sources, optimize campaigns, and boost ROI.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>How It Works:\u003C\u002Fstrong>\u003Cbr \u002F>\n1. Sign up for an \u003Ca href=\"https:\u002F\u002Fwww.800.com\u002F\" rel=\"nofollow ugc\">800.com account\u003C\u002Fa> to access dynamic number insertion features.\u003Cbr \u002F>\n2. Enter your 800.com API key in the plugin’s settings.\u003Cbr \u002F>\n3. The plugin injects the 800.com JavaScript into your site’s \u003Ccode>\u003Chead>\u003C\u002Fcode>, enabling dynamic phone number swapping based on visitor data (e.g., referral source, campaign, or location).\u003Cbr \u002F>\n4. Monitor call performance directly in your 800.com dashboard.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why Choose This Plugin?\u003C\u002Fstrong>\u003Cbr \u002F>\n– Perfect for businesses, marketers, and agencies using 800.com to track phone leads.\u003Cbr \u002F>\n– No coding required—works out of the box with any WordPress theme.\u003Cbr \u002F>\n– Lightweight and performance-optimized, ensuring fast page loads.\u003Cbr \u002F>\n– Built with security in mind, protecting your 800.com credentials and user data.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Requirements:\u003C\u002Fstrong>\u003Cbr \u002F>\n– An active 800.com account with API access.\u003Cbr \u002F>\n– WordPress 5.0 or higher.\u003Cbr \u002F>\n– Basic familiarity with 800.com’s call tracking setup.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note\u003C\u002Fstrong>: This plugin relies on 800.com’s services and does not store or process call data locally. All tracking and analytics are managed via your 800.com account.\u003C\u002Fp>\n\u003Cp>Get started today and supercharge your call tracking with dynamic number insertion!\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin connects to 800.com’s external services to provide call tracking functionality. The following information details what data is transmitted and how it is used:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>API Endpoints Used:\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Ccode>https:\u002F\u002Fapi.800.com\u002Fcompanies\u002Fslim\u003C\u002Fcode> – Retrieves a list of companies associated with your 800.com account for configuration purposes.\u003Cbr \u002F>\n– \u003Ccode>https:\u002F\u002Fapi.800.com\u002Fcompanies\u002F{id}\u002FtrackingNumbers\u002Fscript\u003C\u002Fcode> – Fetches the JavaScript snippet required for dynamic number insertion on your website.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Data Transmission:\u003C\u002Fstrong>\u003Cbr \u002F>\nDuring plugin configuration, your 800.com API key is used to authenticate requests to the above endpoints. Once configured, the injected script communicates with 800.com servers on each page view to determine which phone numbers to display.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Information Sent to 800.com:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Page location (URL)\u003Cbr \u002F>\n– Referrer information\u003Cbr \u002F>\n– 800.com session identifiers\u003Cbr \u002F>\n– Browser information\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Data Usage:\u003C\u002Fstrong>\u003Cbr \u002F>\nThe transmitted data is used exclusively to determine which of your configured phone numbers to serve to website visitors based on your 800.com account settings. This enables accurate call tracking and marketing attribution.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Transparency:\u003C\u002Fstrong>\u003Cbr \u002F>\n800.com maintains transparency by keeping requests and variables human-readable. Additionally, source maps are published for DNI scripts, allowing users to understand exactly how the scripts interact with their websites.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Service Links:\u003C\u002Fstrong>\u003Cbr \u002F>\n– 800.com Terms of Service: https:\u002F\u002Fwww.800.com\u002Fterms\u003Cbr \u002F>\n– 800.com Privacy Policy: https:\u002F\u002Fwww.800.com\u002Fprivacy\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note:\u003C\u002Fstrong> This plugin requires an active 800.com account and relies on their external services for all call tracking functionality. No call data is processed or stored locally by this plugin.\u003C\u002Fp>\n","Seamlessly add 800.com dynamic number insertion to your WordPress site for enhanced call tracking and marketing attribution.",367,"6.8.5","5.2","7.2",[66,18,21,22,67],"800-com","phone-tracking","https:\u002F\u002Fwww.800.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002F800-com-call-tracking.1.0.2.zip",{"slug":21,"name":71,"version":56,"author":72,"author_profile":73,"description":74,"short_description":75,"active_installs":12,"downloaded":76,"rating":12,"num_ratings":12,"last_updated":77,"tested_up_to":62,"requires_at_least":78,"requires_php":64,"tags":79,"homepage":45,"download_link":82,"security_score":44,"vuln_count":12,"unpatched_count":12,"last_vuln_date":26,"fetched_at":27},"Dynamic Number Insertion","Ryan Howard","https:\u002F\u002Fprofiles.wordpress.org\u002Fryhowa\u002F","\u003Cp>Dynamic Number Insertion (DNI) allows you to automatically replace phone numbers across your WordPress site based on the page URL. Perfect for businesses with multiple locations, marketing campaigns with unique tracking numbers, or any situation where you need different phone numbers on different pages.\u003C\u002Fp>\n\u003Cp>The plugin intelligently detects various phone number formats and replaces them consistently throughout the entire page – including headers, footers, widgets, and content areas. It works seamlessly with your existing theme and plugins, requiring no code modifications.\u003C\u002Fp>\n\u003Cp>Phone numbers are replaced before the page loads, ensuring compatibility with call tracking services like CallRail and other JavaScript-based tracking solutions.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>✅ Automatic phone number format detection (handles parentheses, dashes, dots, spaces)\u003Cbr \u002F>\n✅ URL-based replacement rules for precise targeting\u003Cbr \u002F>\n✅ Works everywhere – headers, footers, widgets, menus, and content\u003Cbr \u002F>\n✅ Compatible with page builders and themes\u003Cbr \u002F>\n✅ No coding required – simple dashboard interface\u003Cbr \u002F>\n✅ Preserves SEO and tracking scripts\u003Cbr \u002F>\n✅ Lightweight and performance-optimized\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Use Cases:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Multi-location businesses\u003C\u002Fstrong> – Show local phone numbers on location-specific pages\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Landing pages\u003C\u002Fstrong> – Use unique tracking numbers for different marketing campaigns\u003C\u002Fli>\n\u003Cli>\u003Cstrong>A\u002FB testing\u003C\u002Fstrong> – Test different phone numbers to measure conversion rates\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Franchises\u003C\u002Fstrong> – Let each franchise location have their own contact number\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Service area pages\u003C\u002Fstrong> – Display area-specific phone numbers automatically\u003C\u002Fli>\n\u003C\u002Ful>\n","Dynamically replace phone numbers on specific pages for location-based businesses, landing pages, and call tracking campaigns.",199,"2025-09-21T18:38:00.000Z","5.8",[18,20,21,80,81],"phone-number-swap","phone-numbers","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdynamic-number-insertion.1.0.2.zip",{"slug":84,"name":85,"version":86,"author":87,"author_profile":88,"description":89,"short_description":90,"active_installs":91,"downloaded":92,"rating":93,"num_ratings":94,"last_updated":95,"tested_up_to":96,"requires_at_least":97,"requires_php":98,"tags":99,"homepage":104,"download_link":105,"security_score":44,"vuln_count":12,"unpatched_count":12,"last_vuln_date":26,"fetched_at":27},"call-tracking-metrics","CallTrackingMetrics","2.1.8","taf2","https:\u002F\u002Fprofiles.wordpress.org\u002Ftaf2\u002F","\u003Cp>CallTrackingMetrics integrates with your WordPress site to provide powerful call tracking and attribution.\u003C\u002Fp>\n","CallTrackingMetrics integrates with your WordPress site to provide powerful call tracking and attribution.",3000,125043,74,3,"2026-02-16T14:22:00.000Z","6.9.4","6.5","8.2",[100,18,101,102,103],"advertising","conversation-analytics","google-ads","marketing-attribution","https:\u002F\u002Fcalltrackingmetrics.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcall-tracking-metrics.2.1.8.zip",{"slug":107,"name":108,"version":109,"author":110,"author_profile":111,"description":112,"short_description":113,"active_installs":114,"downloaded":115,"rating":12,"num_ratings":12,"last_updated":116,"tested_up_to":96,"requires_at_least":117,"requires_php":64,"tags":118,"homepage":122,"download_link":123,"security_score":44,"vuln_count":12,"unpatched_count":12,"last_vuln_date":26,"fetched_at":27},"clixtell-tracking-dynamic-phones","Clixtell","2.4","clixtell","https:\u002F\u002Fprofiles.wordpress.org\u002Fclixtell\u002F","\u003Cp>\u003Cstrong>Clixtell Tracking & Dynamic Phones\u003C\u002Fstrong> helps businesses protect their advertising budget and improve conversion tracking by integrating Clixtell’s advanced click fraud detection and dynamic call tracking technology into WordPress.\u003C\u002Fp>\n\u003Cp>With this plugin you can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Detect and block fraudulent clicks\u003C\u002Fli>\n\u003Cli>Track phone calls accurately from paid traffic\u003C\u002Fli>\n\u003Cli>Enable Dynamic Phone Insertion (DNI)\u003C\u002Fli>\n\u003Cli>Integrate seamlessly with your existing Clixtell account\u003C\u002Fli>\n\u003Cli>Avoid complex code changes or manual script insertion\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>An active \u003Cstrong>Clixtell account\u003C\u002Fstrong> is required to use this plugin.\u003C\u002Fp>\n\u003Cp>Learn more at \u003Ca href=\"https:\u002F\u002Fwww.clixtell.com\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.clixtell.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Easy WordPress integration\u003C\u002Fli>\n\u003Cli>Dynamic Phone Insertion (optional toggle)\u003C\u002Fli>\n\u003Cli>Automatic script loading\u003C\u002Fli>\n\u003Cli>Clean and secure WordPress Settings API usage\u003C\u002Fli>\n\u003Cli>Lightweight and performance-friendly\u003C\u002Fli>\n\u003Cli>No theme modification required\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Go to \u003Cstrong>Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Clixtell\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Check \u003Cstrong>Activate Dynamic Call Tracking\u003C\u002Fstrong> to enable Dynamic Phone Insertion\u003C\u002Fli>\n\u003Cli>Save changes\u003C\u002Fli>\n\u003Cli>Ensure your Clixtell account is properly configured\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Tracking scripts are automatically injected on the frontend once enabled.\u003C\u002Fp>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>Clixtell Tracking & Dynamic Phones does not store or process personal data locally.\u003Cbr \u002F>\nAll tracking, analytics, and data processing are handled by Clixtell services.\u003Cbr \u002F>\nPlease review Clixtell’s Privacy Policy at:\u003Cbr \u002F>\nhttps:\u002F\u002Fwww.clixtell.com\u002Fprivacy-policy\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For documentation and support:\u003Cbr \u002F>\n* https:\u002F\u002Fsupport.clixtell.com\u003Cbr \u002F>\n* https:\u002F\u002Fwww.clixtell.com\u003C\u002Fp>\n","Clixtell Tracking & Dynamic Phones integrates Clixtell click fraud detection and dynamic phone number insertion into your WordPress site.",1000,8147,"2026-02-07T05:14:00.000Z","5.5",[18,119,120,49,121],"click-fraud","dynamic-phone","tracking","https:\u002F\u002Fwww.clixtell.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fclixtell-tracking-dynamic-phones.zip",{"attackSurface":125,"codeSignals":147,"taintFlows":163,"riskAssessment":164,"analyzedAt":172},{"hooks":126,"ajaxHandlers":143,"restRoutes":144,"shortcodes":145,"cronEvents":146,"entryPointCount":12,"unprotectedCount":12},[127,133,137,140],{"type":128,"name":129,"callback":130,"file":131,"line":132},"action","admin_init","callroot_register_settings","callroot.php",82,{"type":128,"name":134,"callback":135,"file":131,"line":136},"admin_menu","callroot_register_options_page",83,{"type":128,"name":138,"callback":139,"file":131,"line":32},"wp_print_footer_scripts","callroot_swap_nums",{"type":128,"name":141,"callback":142,"file":131,"line":25},"activated_plugin","callroot_activation_redirect",[],[],[],[],{"dangerousFunctions":148,"sqlUsage":149,"outputEscaping":151,"fileOperations":12,"externalRequests":30,"nonceChecks":30,"capabilityChecks":30,"bundledLibraries":162},[],{"prepared":12,"raw":12,"locations":150},[],{"escaped":152,"rawEcho":94,"locations":153},2,[154,158,160],{"file":155,"line":156,"context":157},"api_key.php",51,"raw output",{"file":155,"line":159,"context":157},53,{"file":131,"line":161,"context":157},49,[],[],{"summary":165,"deductions":166},"The 'callroot' plugin version 1.1 exhibits a generally strong security posture based on the provided static analysis. The complete absence of known vulnerabilities in its history is a positive indicator, suggesting a history of responsible development and maintenance. Furthermore, the plugin demonstrates good practices by utilizing prepared statements for all SQL queries, avoiding dangerous function calls, and not performing file operations. The presence of nonce and capability checks, along with the limited external HTTP request, further contributes to a favorable security profile.\n\nHowever, there are areas that warrant attention. The output escaping is only 40% properly implemented, meaning a significant portion of dynamic output might be vulnerable to cross-site scripting (XSS) attacks if the data originates from user input or untrusted sources. While the attack surface appears minimal with 0 entry points, the single external HTTP request is an area where vulnerabilities could potentially be introduced if the external service is compromised or if the request itself is not handled securely. The lack of taint analysis data could also mean that potential vulnerabilities in this area were not explored or are not present in this specific analysis run.\n\nIn conclusion, 'callroot' v1.1 is a relatively secure plugin with excellent historical vulnerability data and strong SQL query handling. The primary concern lies with the partial output escaping, which could lead to XSS vulnerabilities. The single external HTTP request should be monitored for secure implementation. Overall, the plugin presents a low to moderate risk, with the potential for improvement in output sanitization.",[167,170],{"reason":168,"points":169},"Output escaping is only 40% properly implemented",7,{"reason":171,"points":94},"One external HTTP request without further context","2026-03-17T00:54:06.006Z",{"wat":174,"direct":180},{"assetPaths":175,"generatorPatterns":176,"scriptPaths":177,"versionParams":179},[],[],[178],"https:\u002F\u002Fcallroot.com\u002Fjcm.js",[],{"cssClasses":181,"htmlComments":182,"htmlAttributes":183,"restEndpoints":184,"jsGlobals":185,"shortcodeOutput":187},[],[],[],[],[186],"jcmjs",[]]