[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcOoqoVTiwnxR3-eq625arG6eBXCyBTSTvddcncKLUtc":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":59,"crawl_stats":38,"alternatives":66,"analysis":176,"fingerprints":353},"campaign-url-builder","Campaign URL Builder","1.8.2","Alex Zappa","https:\u002F\u002Fprofiles.wordpress.org\u002Freatlat\u002F","\u003Cp>Generates links for Analytics tools and short link.\u003Cbr \u002F>\nEnter your Campaign Name, Source, Medium (UTM link) etc.\u003Cbr \u002F>\nto generate a full link and a short link (through the Google\u003Cbr \u002F>\nURL Shortener API) all in once.\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fga-dev-tools.appspot.com\u002Fcampaign-url-builder\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fga-dev-tools.appspot.com\u002Fcampaign-url-builder\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Available languages :\u003Cbr \u002F>\n* English\u003Cbr \u002F>\n* Russian\u003C\u002Fp>\n","Generate link for Analytics tools like Google Analytics and a short link.",200,11661,100,8,"2023-02-15T15:27:00.000Z","6.1.10","3.0.1","",[20,21,22,23,24],"analytics","google-analytics","link-generator","tracking-link","utm","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcampaign-url-builder","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcampaign-url-builder.1.8.2.zip",84,2,0,"2023-02-16 00:00:00","2026-03-15T15:16:48.613Z",[33,48],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":6,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":30,"updated_date":44,"references":45,"days_to_patch":47},"CVE-2023-0538","campaign-url-builder-authenticated-contributor-stored-cross-site-scripting-via-shortcode","Campaign URL Builder \u003C= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode","The Campaign URL Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including, 1.8.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=1.8.1","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-01-22 19:56:02",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fb2839fdc-5904-4c3b-894f-7bf7e8b2986a?source=api-prod",341,{"id":49,"url_slug":50,"title":51,"description":52,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":6,"severity":40,"cvss_score":53,"cvss_vector":54,"vuln_type":43,"published_date":55,"updated_date":44,"references":56,"days_to_patch":58},"WF-06294c35-6d58-4270-b143-757831fc5da6-campaign-url-builder","campaign-url-builder-authenticated-admin-stored-cross-site-scripting-via-create-link","Campaign URL Builder \u003C= 1.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting via Create Link","The Campaign URL Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form fields within the Create Link tab of the settings page in versions up to, and including, 1.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrative-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.",4.4,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","2023-02-15 00:00:00",[57],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F06294c35-6d58-4270-b143-757831fc5da6?source=api-prod",342,{"slug":60,"display_name":7,"profile_url":8,"plugin_count":61,"total_installs":62,"avg_security_score":63,"avg_patch_time_days":58,"trust_score":64,"computed_at":65},"reatlat",3,600,85,69,"2026-04-04T03:51:49.353Z",[67,86,109,127,151],{"slug":68,"name":69,"version":70,"author":71,"author_profile":72,"description":73,"short_description":74,"active_installs":75,"downloaded":76,"rating":13,"num_ratings":28,"last_updated":77,"tested_up_to":78,"requires_at_least":79,"requires_php":80,"tags":81,"homepage":84,"download_link":85,"security_score":13,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"utm-dot-codes","utm.codes","1.9.1","Chris Carlevato","https:\u002F\u002Fprofiles.wordpress.org\u002Fchrislarrycarl\u002F","\u003Cp>It’s time to ditch the spreadsheets for a better way to create and manage your campaign marketing links.\u003C\u002Fp>\n\u003Cp>utm.codes turns your WordPress admin into a link building powerhouse by making it easier to create, organize, and use your links.\u003C\u002Fp>\n\u003Cp>For more information, videos, and helpful tips \u003Ca href=\"https:\u002F\u002Futm.codes\" rel=\"nofollow ugc\">visit the utm.codes website\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Easily create campaign marketing links with UTM codes for better campaign analytics\u003C\u002Fli>\n\u003Cli>Automatically format links in lowercase, remove spaces, and remove non alphanumeric characters for more consistent reporting\u003C\u002Fli>\n\u003Cli>Batch create links for all your social networks with just a click\u003C\u002Fli>\n\u003Cli>Search, filter, and easily find existing links using familiar WordPress admin controls\u003C\u002Fli>\n\u003Cli>Automatically detect url error responses to prevent creating bad links\u003C\u002Fli>\n\u003Cli>One click link shortening with Bitly or Rebrandly for easier link sharing\u003C\u002Fli>\n\u003Cli>Save notes with link for team communication, usage context, future reference, and more\u003C\u002Fli>\n\u003Cli>Link element API filter for custom utm code formatting\u003C\u002Fli>\n\u003Cli>Social network options API filter for custom batch link options\u003C\u002Fli>\n\u003Cli>Shortener API filter for custom link shortening\u003C\u002Fli>\n\u003Cli>Supports adding additional custom parameters to links for improved versatility\u003C\u002Fli>\n\u003Cli>Multi-user access within WordPress to share creation and management responsibilities\u003C\u002Fli>\n\u003Cli>See your current link count in the admin dashboard “At a Glance”\u003C\u002Fli>\n\u003Cli>Tested with WordPress 5.1, 5.2, 5.3, 5.4, 5.5, 5.6, 5.7, 5.8, 5.9, 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 6.8\u003C\u002Fli>\n\u003Cli>Tested with PHP 7.1, 7.2, 7.3, 7.4, 8.0, 8.1, 8.2, 8.3\u003C\u002Fli>\n\u003Cli>Tested with MySQL 5.6, 5.7, 8.0, 8.4\u003C\u002Fli>\n\u003Cli>100% Free and Open Source\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Installation\u003C\u002Fh4>\n\u003Cp>Upload the utm.codes plugin to your WordPress site, activate it, and start creating your links.\u003C\u002Fp>\n\u003Ch4>Settings\u003C\u002Fh4>\n\u003Cp>Configure your formatting preferences, targeted social networks, link notes, and shortening preferences, under Settings \u002F utm.codes to enable batch creation and shorten when saving links.\u003C\u002Fp>\n\u003Ch4>Documentation\u003C\u002Fh4>\n\u003Cp>For additional details about installing, configuring, customizing, and using utm.codes \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fasdfdotdev\u002Futm.codes\u002Fwiki\" rel=\"nofollow ugc\">visit our GitHub wiki\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Development Resources\u003C\u002Fh4>\n\u003Cp>utm.codes is built using development code not included in the WordPress.org download because it isn’t required for use. This code includes the webpack build used to create our minified CSS and JavaScript as well as PHPUnit tests to ensure support of new WordPress releases.\u003C\u002Fp>\n\u003Cp>All source code associated with utm.codes is open source, free to use for any purpose, and released under the GPL v2.0 license. Development code, including instructions for running both the build and tests, is available at the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fasdfdotdev\u002Futm.codes\" rel=\"nofollow ugc\">utm.codes GitHub repository\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>You can also \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fasdfdotdev\u002Futm.codes\u002Factions\" rel=\"nofollow ugc\">browse our build history at GitHub\u003C\u002Fa>.\u003C\u002Fp>\n","A WordPress plugin that makes building analytics friendly links quick and easy.",400,11088,"2025-06-17T10:48:00.000Z","6.8.5","5.1.0","7.1.0",[20,82,21,83],"campaign-marketing","utm-codes","https:\u002F\u002Futm.codes","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Futm-dot-codes.zip",{"slug":87,"name":88,"version":89,"author":90,"author_profile":91,"description":92,"short_description":93,"active_installs":94,"downloaded":95,"rating":96,"num_ratings":97,"last_updated":98,"tested_up_to":99,"requires_at_least":100,"requires_php":18,"tags":101,"homepage":107,"download_link":108,"security_score":63,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"utm-generator","UTM Code Generator for Google Analytics Tracking URL","1.0","Technoyer","https:\u002F\u002Fprofiles.wordpress.org\u002Ftechnoyer\u002F","\u003Cp>In order to make the visitors tracking easy, Google analytics created the UTM tracker, for this reason\u003Cbr \u002F>\nyou should take a look on the UTM Code Generator plugin for WordPress, It helps you to build UTM links to track your visiots\u002Fcampaigns easy.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FH-yL297iZKg?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>Video was recorded with all features, So you you will see some locked features in the free version, If you want to unlock it, Please check out the premium version  \u003Ca href=\"https:\u002F\u002Fcodecanyon.net\u002Fitem\u002Futm-code-generator-for-google-analytics-tracking-url-wordpress-plugin\u002F19808242?ref=Technoyer\" rel=\"nofollow ugc\">https:\u002F\u002Fcodecanyon.net\u002Fitem\u002Futm-code-generator-for-google-analytics-tracking-url-wordpress-plugin\u002F19808242?ref=Technoyer\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>UTM Code Generator WordPress Plugin Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>The plugin requires only your Google Analytics Tracking ID if you want to install tracking code (if tracking code not exists).\u003C\u002Fli>\n\u003Cli>Easy form to build a free UTM link from your existing WordPress or other website link.\u003C\u002Fli>\n\u003Cli>Good help included to explain the building form.\u003C\u002Fli>\n\u003Cli>The plugin adds menu in the admin bar for fast building.\u003C\u002Fli>\n\u003Cli>The plugin helps you to store default UTM (post meta) values for every post or page in the add\u002Fedit page for posts or pages.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Full control\u003C\u002Fstrong>: enable\u002Fdisable admin bar option.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Full control\u003C\u002Fstrong>: enable\u002Fdisable plugin for posts, pages or both.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Full control\u003C\u002Fstrong>: enable\u002Fdisable installing Google Analytics Tracking code.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Full control\u003C\u002Fstrong>: the position of the Google Analytics Tracking code (header or footer).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Full control\u003C\u002Fstrong>: set default UTM values for builder wizard.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Pro Version\u003C\u002Fh3>\n\u003Cp>To unlock the Pro features please get the premium version \u003Ca href=\"https:\u002F\u002Fcodecanyon.net\u002Fitem\u002Futm-code-generator-for-google-analytics-tracking-url-wordpress-plugin\u002F19808242?ref=Technoyer\" rel=\"nofollow ugc\">click here\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Why UTM Code Generator WordPress Plugin?\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Technoyer UTM Generator\u003C\u002Fstrong> is a WordPress plugin, It is easy to install and use.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Technoyer UTM Generator\u003C\u002Fstrong> built on stable versions of PHP and WordPress.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Technoyer UTM Generator\u003C\u002Fstrong> built to help you to build\u002Fgenerate google analytics UTM URLs.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Technoyer UTM Generator\u003C\u002Fstrong> built to help you to install google analytics tracking code if it isn’t existing.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cp>Full documentation is available \u003Ca href=\"http:\u002F\u002Ftch-utm-generator.technoyer.com\u002Fdocumentationt\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n","In order to make the visitors tracking easy, Google analytics created the UTM tracker, for this reason",10,1474,20,1,"2017-04-26T20:50:00.000Z","4.7.32","4.3",[102,103,104,105,106],"google-analytics-url-builder","google-url-builder","url-tracker","utm-builder","utm-url-builder","http:\u002F\u002Ftch-utm-generator.technoyer.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Futm-generator.1.0.zip",{"slug":110,"name":111,"version":112,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":29,"downloaded":117,"rating":29,"num_ratings":29,"last_updated":118,"tested_up_to":119,"requires_at_least":120,"requires_php":18,"tags":121,"homepage":125,"download_link":126,"security_score":63,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"utm-url-builder-ga4","UTM – URL Builder for GA4","1.0.0","Steve Lamar","https:\u002F\u002Fprofiles.wordpress.org\u002Freallygooddata\u002F","\u003Cp>Provide your visitors with an easy way to build perfect UTM based URLs for their marketing and landing pages for GA4 (Google Analytics 4).\u003C\u002Fp>\n","Add a UTM & URL builder to your site for GA4.",1138,"2022-10-03T02:29:00.000Z","6.0.11","5.0.0",[122,123,102,124],"ga4-url-builder","ga4-utm-builder","google-analytics-utm-builder","https:\u002F\u002FReallyGoodData.com\u002Ftool\u002Fplugins\u002Fga4-url-builder","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Futm-url-builder-ga4.1.0.0.zip",{"slug":128,"name":129,"version":130,"author":131,"author_profile":132,"description":133,"short_description":134,"active_installs":135,"downloaded":136,"rating":137,"num_ratings":138,"last_updated":139,"tested_up_to":140,"requires_at_least":141,"requires_php":142,"tags":143,"homepage":147,"download_link":148,"security_score":149,"vuln_count":94,"unpatched_count":29,"last_vuln_date":150,"fetched_at":31},"google-analytics-for-wordpress","MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)","10.0.3","chriscct7","https:\u002F\u002Fprofiles.wordpress.org\u002Fchriscct7\u002F","\u003Ch4>Google Analytics Plugin for WordPress\u003C\u002Fh4>\n\u003Cp>With over 3 million active installs, MonsterInsights is the most popular Google Analytics plugin for WordPress.\u003C\u002Fp>\n\u003Cp>We believe that it’s easy to double your traffic and sales when you know exactly how people find and use your website. \u003Ca href=\"https:\u002F\u002Fwww.monsterinsights.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">MonsterInsights\u003C\u002Fa> shows you the analytics and stats that matter, so you can grow your business with confidence.\u003C\u002Fp>\n\u003Cp>At MonsterInsights, we make it “effortless” to properly connect your WordPress site with Google Analytics, so you can start making data-driven decisions to grow your business.\u003C\u002Fp>\n\u003Cp>Unlike other Google Analytics plugins, MonsterInsights allows you to enable all advanced Google Analytics tracking features with just a few clicks (no need to hire a developer).\u003C\u002Fp>\n\u003Cp>The best part is that MonsterInsights comes with an analytics dashboard for WordPress that shows you actionable analytics reports right inside your WordPress dashboard. We have created customized reports that eliminate the fluff and only show you the stats that matter, so you can see exactly what’s working and what’s not!\u003C\u002Fp>\n\u003Cp>Simply put, MonsterInsights is the most complete Google Analytics plugin for WordPress that’s both EASY and POWERFUL.\u003C\u002Fp>\n\u003Cp>That’s why millions of small businesses and top companies like Microsoft, Bloomberg, FedEx, Yelp, Subway, etc. use MonsterInsights to setup Google Analytics on their WordPress sites.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>MonsterInsights Pro\u003C\u002Fstrong>\u003Cbr \u002F>\n  This plugin is the lite version of MonsterInsights Pro plugin that comes with all the tracking features you will ever need including events tracking, ecommerce tracking, custom dimensions tracking, page speed reports, popular post tracking, custom dimensions, affiliate link tracking, video tracking and tons more. \u003Ca href=\"https:\u002F\u002Fwww.monsterinsights.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Click here to purchase the best premium Google Analytics plugin for WordPress now!\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>We took the pain out of installing Google Analytics in WordPress and made it easy. Here’s why over 3 million smart business owners, designers, and developers love MonsterInsights, and you will too!\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F4Y8TGGkdcGY?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch4>Quick & Easy Google Analytics Setup\u003C\u002Fh4>\n\u003Cp>Properly setting up Google Analytics is complicated. You have to either hire a developer or learn how to add advanced code snippets to your website in many different areas. This process can take days or weeks…and can even break your website!\u003C\u002Fp>\n\u003Cp>With MonsterInsights, we made it “effortless” to properly setup Google Analytics in WordPress. Yes, you can enable all advanced Google Analytics features with just a few clicks.\u003C\u002Fp>\n\u003Cp>If you can point-and-click, then you can set up Google Analytics inside WordPress and start seeing insights in under 15 minutes (no code necessary).\u003C\u002Fp>\n\u003Cp>See what one business owner is saying about MonsterInsights:\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>It just works. Really easy way to insert Google Analytics tracking code and keep it there when switching themes. No need to copy\u002Fpaste code anywhere. This is the best way to handle Google Analytics in WordPress.\u003Cbr \u002F>\n  Steven Gliebe\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Google Analytics Dashboard\u003C\u002Fh4>\n\u003Cp>Our goal at MonsterInsights is to make Google Analytics easy and accessible for everyone.\u003C\u002Fp>\n\u003Cp>We understand that Google Analytics has a steep learning curve. That’s why MonsterInsights comes with a built-in Google Analytics Dashboard for your WordPress site, so you can see all the useful information about your visitors right inside your WordPress dashboard.\u003C\u002Fp>\n\u003Cp>We have even created customized reports to help you filter through the noise and see the stats that really matter!\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Audience Report\u003C\u002Fstrong> shows you detailed insights like which country your visitors are coming from, what are they most interested in, which device are they using, their age, gender, and more.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Publishers Report\u003C\u002Fstrong> helps you understand which pages your visitors are arriving, and which pages they are leaving from. Designed specifically for blogs and other resource sites, this powerful report will show you which outbound links are getting clicked so you can easily optimize for higher conversions.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Content Report\u003C\u002Fstrong> shows you stats on exactly which content gets the most visits, so you can stop guessing and start creating content that gets more traffic and conversion.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Ecommerce Report\u003C\u002Fstrong> shows you important store stats like total revenue, conversion rate, average order value, top referral sources, and more (all in one place).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Forms Report\u003C\u002Fstrong> shows you conversion stats for various contact forms and lead forms on your website, so you can improve the conversions to grow your business.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Search Console Report\u003C\u002Fstrong> shows you exactly how well your website is ranking in Google, so you can further optimize your SEO to grow your organic traffic.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Custom Dimensions Report\u003C\u002Fstrong> helps you dig deeper by showing you useful stats like who are your most popular authors, what are the best publication times, which are your most popular categories or tags, how well are your Yoast focus keywords and SEO score performing, and more.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Site Speed Report\u003C\u002Fstrong> makes it easy to track pagespeed insights and loading times for your website and get the information you need to improve user experience and your SEO rankings.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Landing Page Report\u003C\u002Fstrong> instantly shows you which pages need to be optimized to increase engagement and help you make more money without needing to log into Google Analytics.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Source and Medium Report\u003C\u002Fstrong> gives you an easy view of Google Analytics UTM tracking to see where you traffic comes from.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Technology Report\u003C\u002Fstrong> shows you which devices and browsers visit your website, so you can optimize for each visitor.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Campaign Report\u003C\u002Fstrong> easily unlocks all of your Google Analytics UTM tracking to show you how effective your marketing efforts have been.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Pages Report\u003C\u002Fstrong> shows you which pages are most poplular on your website, and shows impressive metrics like bounce rate, engaged sessions to help you optimize.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Coupon Report\u003C\u002Fstrong> showcases your coupon usage, and shows important metrics like average order value and revenue.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Cart Abandon Report\u003C\u002Fstrong> shows you which products and the amount of revenue your customer’s are leaving in their carts.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Funnel Report\u003C\u002Fstrong> visually shows you how many people view items in your store, add to cart, and make a purchase. You can easily breakdown the funnel and conversion report into channel, and customize your dates for in depth analysis. Works automatically with WooCommerce analytics, and Easy Digital Downloads.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Our custom Google Analytics Dashboard reports are based on over 12+ years of online business experience. We built MonsterInsights to be the Google Analytics plugin that we wish we had.\u003C\u002Fp>\n\u003Cp>We currently use MonsterInsights on all our portfolio companies which include both media sites generating tens of millions of pageviews and eCommerce sites generating millions in sales.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>I love being able to drill down into the analytics via the reporting feature. I have the PRO version and it makes a big difference what you can analyze. I’m glad that I can integrate with Pretty Links too!\u003Cbr \u002F>\n  Kim Beasley – MonsterInsights user\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>Simply put, MonsterInsights allow you to take full advantage of all the powerful Google Analytics features.\u003C\u002Fp>\n\u003Cp>After reading this exhaustive feature list, you can probably imagine why MonsterInsights is the best Google Analytics plugin for WordPress.\u003C\u002Fp>\n\u003Cp>Give MonsterInsights a try.\u003C\u002Fp>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cp>This plugin is created by \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fchriscct7\" rel=\"nofollow ugc\">Chris Christoff\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fsyedbalkhi.com\" rel=\"nofollow ugc\">Syed Balkhi\u003C\u002Fa> with sponsorship from \u003Ca href=\"http:\u002F\u002Fwww.wpbeginner.com\" rel=\"nofollow ugc\">WPBeginner\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Branding Guidelines\u003C\u002Fh4>\n\u003Cp>MonsterInsights® is a registered trademark of MonsterInsights LLC. When writing about the Google Analytics for WordPress plugin by MonsterInsights, please make sure to uppercase the first letters of both word.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>MonsterInsights (correct)\u003C\u002Fli>\n\u003Cli>Monster Insights (incorrect)\u003C\u002Fli>\n\u003Cli>monsterinsights (incorrect)\u003C\u002Fli>\n\u003Cli>monsterinsight (incorrect)\u003C\u002Fli>\n\u003C\u002Ful>\n","The best free Google Analytics plugin for WordPress. See how visitors find and use your website so you can grow your business with powerful analytics.",2000000,256116903,92,3121,"2026-03-03T15:53:00.000Z","6.9.0","5.6.0","7.2",[20,21,144,145,146],"google-analytics-dashboard","website-analytics","wordpress-analytics","https:\u002F\u002Fwww.monsterinsights.com\u002F?utm_source=liteplugin&utm_medium=pluginheader&utm_campaign=pluginurl&utm_content=7%2E0%2E0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgoogle-analytics-for-wordpress.10.0.3.zip",96,"2024-01-05 00:00:00",{"slug":152,"name":153,"version":154,"author":155,"author_profile":156,"description":157,"short_description":158,"active_installs":159,"downloaded":160,"rating":161,"num_ratings":162,"last_updated":163,"tested_up_to":164,"requires_at_least":165,"requires_php":166,"tags":167,"homepage":172,"download_link":173,"security_score":174,"vuln_count":61,"unpatched_count":29,"last_vuln_date":175,"fetched_at":31},"duracelltomi-google-tag-manager","GTM4WP – A Google Tag Manager (GTM) plugin for WordPress","1.22.3","Thomas Geiger","https:\u002F\u002Fprofiles.wordpress.org\u002Fduracelltomi\u002F","\u003Cp>Google Tag Manager (GTM) is Google’s free tool for everyone to manage and deploy analytics and marketing tags as well as other code snippets\u003Cbr \u002F>\nusing an intuitive web UI. To learn more about this tool, visit the \u003Ca href=\"https:\u002F\u002Fmarketingplatform.google.com\u002Fabout\u002Ftag-manager\u002F\" rel=\"nofollow ugc\">official website\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>This plugin places the GTM container code snippets onto your WordPress website so that you do not need to add it manually.\u003Cbr \u002F>\nMultiple containers are also supported!\u003C\u002Fp>\n\u003Cp>The plugin complements your GTM setup by pushing page meta data and user information into the so called data layer.\u003Cbr \u002F>\nGoogle’s official help pages includes \u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Ftag-platform\u002Ftag-manager\u002Fdatalayer#datalayer\" rel=\"nofollow ugc\">more details about the data layer\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>PHP 7.4 is required to use this plugin.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>GTM container code placement\u003C\u002Fh4>\n\u003Cp>The original GTM container code is divided into two parts:\u003C\u002Fp>\n\u003Cp>The first part is a javascript code snippet that is added to the \u003Ccode>\u003Chead>\u003C\u002Fcode> section of every page of the website.\u003Cbr \u002F>\nThis part is critical to enable all features of GTM, and this plugin helps to place this part\u003Cbr \u002F>\ncorrectly on your site.\u003C\u002Fp>\n\u003Cp>The second part is an iframe snippet that acts as a failsafe\u002Ffallback should users’ JavaScript be disabled.\u003Cbr \u002F>\nGoogle recommends – for best performance – to place this code snippet directly after the opening \u003Ccode>\u003Cbody>\u003C\u002Fcode> tag on each page.\u003C\u002Fp>\n\u003Cp>Albeit not ideal, it will work when placed lower in the code. This plugin provides a code placement option for the second code snippet.\u003C\u002Fp>\n\u003Cp>If your WordPress theme is compatible with the additions of WordPress 5.2 then this plugin will place this second code to the right place.\u003Cbr \u002F>\nUsers of the Genisis theme, GeneratePress theme, Elementor, Oxygen Builder and Beaver Builder Theme will also have this placed correctly.\u003Cbr \u002F>\nTo utilize this, set the compatibility mode in plugin options to off.\u003C\u002Fp>\n\u003Cp>All other users can place this second code snippet using a custom PHP code (“Manually coded” option) or select the so called “Footer” option to\u003Cbr \u002F>\nadd the code lower in the code (it is not the recommended way but will work)\u003C\u002Fp>\n\u003Ch4>Basic data included\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>post\u002Fpage titles\u003C\u002Fli>\n\u003Cli>post\u002Fpage dates\u003C\u002Fli>\n\u003Cli>post\u002Fpage category names\u003C\u002Fli>\n\u003Cli>post\u002Fpage tag names\u003C\u002Fli>\n\u003Cli>post\u002Fpage author ID and name\u003C\u002Fli>\n\u003Cli>post\u002Fpage ID\u003C\u002Fli>\n\u003Cli>post types\u003C\u002Fli>\n\u003Cli>post format\u003C\u002Fli>\n\u003Cli>post count on the current page + in the current category\u002Ftag\u002Ftaxonomy\u003C\u002Fli>\n\u003Cli>custom terms associated with any post type\u003C\u002Fli>\n\u003Cli>logged in status\u003C\u002Fli>\n\u003Cli>logged in user role\u003C\u002Fli>\n\u003Cli>logged in user ID (to track cross device behaviour in Google Analytics)\u003C\u002Fli>\n\u003Cli>logged in user email address (both unhashed and SHA256 hased values to be used with tracking)\u003C\u002Fli>\n\u003Cli>logger in user creation date\u003C\u002Fli>\n\u003Cli>site search data\u003C\u002Fli>\n\u003Cli>site name and id (for WordPress multisite instances)\u003C\u002Fli>\n\u003Cli>IP address of the visitor (please use the explicit consent of the visitor to utilize this)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Browser \u002F OS \u002F Device data\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>browser data (name, version, engine)\u003C\u002Fli>\n\u003Cli>OS data (name, version)\u003C\u002Fli>\n\u003Cli>device data (type, manufacturer, model)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Data is provided using the WhichBrowser library: http:\u002F\u002Fwhichbrowser.net\u002F\u003C\u002Fp>\n\u003Ch4>Weather data\u003C\u002Fh4>\n\u003Cp>(beta)\u003C\u002Fp>\n\u003Cp>Push data about users’ current weather conditions into the dataLayer. This can be used to generate weather-related\u003Cbr \u002F>\naudience\u002Fremarketing lists on ad platforms and allows for user segmentation in your web analytics solutions:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>weather category (clouds, rain, snow, etc.)\u003C\u002Fli>\n\u003Cli>weather description: more detailed data\u003C\u002Fli>\n\u003Cli>temperature in Celsius or Fahrenheit\u003C\u002Fli>\n\u003Cli>air pressure\u003C\u002Fli>\n\u003Cli>wind speed and degrees\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Weather data is queried from Open Weather Map. Depending on your websites traffic, additional fees may apply:\u003Cbr \u002F>\nhttp:\u002F\u002Fopenweathermap.org\u002Fprice\u003C\u002Fp>\n\u003Cp>An (free) API key from OpenWeatherMap is required for this feature to work.\u003C\u002Fp>\n\u003Cp>ipstack.com is used to determine the site visitor’s location. A (free) API key from IPStack.com is required for this feature to work:\u003Cbr \u002F>\nhttps:\u002F\u002Fipstack.com\u002Fproduct\u003C\u002Fp>\n\u003Ch4>Media player events\u003C\u002Fh4>\n\u003Cp>(experimental)\u003C\u002Fp>\n\u003Cp>Track users’ interaction with any embedded media:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>YouTube\u003C\u002Fli>\n\u003Cli>Vimeo\u003C\u002Fli>\n\u003Cli>Soundcloud\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>DataLayer events can be chosen to fire upon media player load, media is being played, paused\u002Fstopped and optionally when\u003Cbr \u002F>\nthe user reaches 10, 20, 30, …, 90, 100% of the media duration.\u003C\u002Fp>\n\u003Cp>Tracking is supported for embedded media using the built-in oEmbed feature of WordPress as well as most other media plugins\u003Cbr \u002F>\nand copy\u002Fpasted codes. Players injected into the website after page load are not currently supported.\u003C\u002Fp>\n\u003Ch4>Scroll tracking\u003C\u002Fh4>\n\u003Cp>Fire tags based on how the visitor scrolls from the top to the bottom of a page.\u003Cbr \u002F>\nAn example would be to separate “readers” (who spend a specified amount of time on a page) from “scrollers”\u003Cbr \u002F>\n(who only scroll through within seconds). You can use these events to fire Analytics tags and\u002For remarketing\u002Fconversion tags\u003Cbr \u002F>\n(for micro conversions).\u003C\u002Fp>\n\u003Cp>Scroll tracking is based on the solution originally created by\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Nick Mihailovski\u003C\u002Fli>\n\u003Cli>Thomas Baekdal\u003C\u002Fli>\n\u003Cli>Avinash Kaushik\u003C\u002Fli>\n\u003Cli>Joost de Valk\u003C\u002Fli>\n\u003Cli>Eivind Savio\u003C\u002Fli>\n\u003Cli>Justin Cutroni\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Original script:\u003Cbr \u002F>\nhttp:\u002F\u002Fcutroni.com\u002Fblog\u002F2012\u002F02\u002F21\u002Fadvanced-content-tracking-with-google-analytics-part-1\u002F\u003C\u002Fp>\n\u003Ch4>Blacklist & Whitelist Tag Manager tags, triggers and variables\u003C\u002Fh4>\n\u003Cp>To increase website security, you have the option to white- and blacklist tags\u002Ftriggers\u002Fvariables.\u003Cbr \u002F>\nYou can prevent specific tags from firing or the use of certain variable types regardless of your GTM setup.\u003C\u002Fp>\n\u003Cp>If the Google account associated with your GTM account is being hacked, an attacker could easily\u003Cbr \u002F>\nexecute malware on your website without accessing its code on your hosting server. By blacklisting custom HTML tags\u003Cbr \u002F>\nand\u002For custom JavaScript variables you can secure the Tag Manager container.\u003C\u002Fp>\n\u003Ch4>Integration\u003C\u002Fh4>\n\u003Cp>Google Tag Manager for WordPress integrates with several popular plugins. More integration to come!\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Contact Form 7: fire an event when a Contact Form 7 form was submitted with any result (mail sent, mail failed, spam detected, invalid input)\u003C\u002Fli>\n\u003Cli>WooCommerce:\n\u003Cul>\n\u003Cli>Implementation of \u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Ftag-manager\u002Fecommerce-ga4\" rel=\"nofollow ugc\">GA4 E-commerce\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Does not support promotions since WooCommerce does not have such a feature (yet)\u003C\u002Fli>\n\u003Cli>Does not support refunds\u003C\u002Fli>\n\u003Cli>Compatibility with High Performance Order Storage (HPOS)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>AMP: load your AMP container on the AMP version of your pages\u003C\u002Fli>\n\u003Cli>Cookiebot: use automatic cookie blocking mode if needed\u003C\u002Fli>\n\u003Cli>Google Consent Mode v2: fire the “default” command with specific consent flags to integrat with non-certified Consent Management Platforms (CMPs) and plugins.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Server side containers\u003C\u002Fh4>\n\u003Cp>If you are using a \u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Ftag-manager\u002Fserverside\u002Fsend-data#update_the_gtmjs_source_domain\" rel=\"nofollow ugc\">server side container\u003C\u002Fa>\u003Cbr \u002F>\nyou can enter your custom domain name and custom path to load gtm.js from your there.\u003C\u002Fp>\n\u003Ch4>Exclude specific user roles from being tracked\u003C\u002Fh4>\n\u003Cp>You can set which user roles needs to be excluded from tracking when a user with that role visits the frontend. This will completely disable the container code for that user.\u003C\u002Fp>\n","Advanced tag management for WordPress with Google Tag Manager",700000,13906369,90,154,"2025-12-15T14:45:00.000Z","6.9.4","3.4.0","7.4",[168,21,169,170,171],"google-ads","google-tag-manager","gtm","tag-manager","https:\u002F\u002Fgtm4wp.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fduracelltomi-google-tag-manager.1.22.3.zip",98,"2022-05-31 00:00:00",{"attackSurface":177,"codeSignals":227,"taintFlows":341,"riskAssessment":342,"analyzedAt":352},{"hooks":178,"ajaxHandlers":218,"restRoutes":219,"shortcodes":220,"cronEvents":226,"entryPointCount":97,"unprotectedCount":29},[179,184,190,193,196,198,199,202,204,207,210,213,216],{"type":180,"name":181,"callback":182,"priority":94,"file":183,"line":58},"filter","plugin_row_meta","closure","admin\\class-reatlat_cub-admin.php",{"type":185,"name":186,"callback":187,"file":188,"line":189},"action","plugins_loaded","anonymous","includes\\class-reatlat_cub.php",50,{"type":185,"name":191,"callback":187,"file":188,"line":192},"admin_menu",60,{"type":185,"name":194,"callback":187,"file":188,"line":195},"add_meta_boxes",63,{"type":185,"name":194,"callback":187,"file":188,"line":197},64,{"type":185,"name":186,"callback":187,"file":188,"line":64},{"type":185,"name":200,"callback":187,"file":188,"line":201},"admin_enqueue_scripts",70,{"type":185,"name":200,"callback":187,"file":188,"line":203},71,{"type":185,"name":205,"callback":187,"file":188,"line":206},"admin_notices",72,{"type":185,"name":208,"callback":187,"file":188,"line":209},"admin_footer",73,{"type":185,"name":211,"callback":187,"file":188,"line":212},"init",86,{"type":185,"name":214,"callback":187,"file":188,"line":215},"wp_enqueue_scripts",93,{"type":185,"name":214,"callback":187,"file":188,"line":217},94,[],[],[221],{"tag":222,"callback":223,"file":224,"line":225},"Campaign-URL-Builder","shortcode_frontend_link_generator_form","public\\class-reatlat_cub-public.php",201,[],{"dangerousFunctions":228,"sqlUsage":229,"outputEscaping":262,"fileOperations":97,"externalRequests":61,"nonceChecks":338,"capabilityChecks":339,"bundledLibraries":340},[],{"prepared":29,"raw":230,"locations":231},13,[232,235,237,239,241,245,246,247,251,253,255,258,260],{"file":183,"line":233,"context":234},632,"$wpdb->get_results() with variable interpolation",{"file":183,"line":236,"context":234},634,{"file":183,"line":238,"context":234},639,{"file":183,"line":240,"context":234},644,{"file":242,"line":243,"context":244},"includes\\class-reatlat_cub-activator.php",41,"$wpdb->get_var() with variable interpolation",{"file":242,"line":192,"context":244},{"file":242,"line":161,"context":244},{"file":248,"line":249,"context":250},"includes\\class-reatlat_cub-reset.php",18,"$wpdb->query() with variable interpolation",{"file":248,"line":252,"context":250},23,{"file":248,"line":254,"context":250},28,{"file":256,"line":257,"context":250},"uninstall.php",15,{"file":256,"line":259,"context":250},16,{"file":256,"line":261,"context":250},17,{"escaped":263,"rawEcho":264,"locations":265},88,38,[266,268,270,272,274,276,278,281,282,284,286,288,290,292,294,296,299,300,301,303,304,306,309,311,312,313,314,315,317,319,321,324,326,329,331,333,335,336],{"file":183,"line":162,"context":267},"raw output",{"file":183,"line":269,"context":267},170,{"file":183,"line":271,"context":267},202,{"file":183,"line":273,"context":267},243,{"file":183,"line":275,"context":267},322,{"file":183,"line":277,"context":267},608,{"file":279,"line":280,"context":267},"admin\\views\\partial\\reatlat_cub-admin-about.php",191,{"file":279,"line":280,"context":267},{"file":279,"line":283,"context":267},194,{"file":279,"line":285,"context":267},215,{"file":279,"line":287,"context":267},216,{"file":279,"line":289,"context":267},220,{"file":279,"line":291,"context":267},229,{"file":279,"line":293,"context":267},232,{"file":279,"line":295,"context":267},235,{"file":297,"line":298,"context":267},"admin\\views\\partial\\reatlat_cub-admin-create-form.php",12,{"file":297,"line":174,"context":267},{"file":297,"line":174,"context":267},{"file":297,"line":302,"context":267},99,{"file":297,"line":302,"context":267},{"file":305,"line":243,"context":267},"admin\\views\\partial\\reatlat_cub-admin-kb.php",{"file":307,"line":308,"context":267},"admin\\views\\partial\\reatlat_cub-admin-links-list.php",46,{"file":307,"line":310,"context":267},59,{"file":307,"line":310,"context":267},{"file":307,"line":197,"context":267},{"file":307,"line":197,"context":267},{"file":307,"line":201,"context":267},{"file":307,"line":316,"context":267},81,{"file":318,"line":94,"context":267},"admin\\views\\partial\\reatlat_cub-admin-shortcode.php",{"file":318,"line":320,"context":267},130,{"file":322,"line":323,"context":267},"admin\\views\\partial\\reatlat_cub-admin-sidebar.php",51,{"file":322,"line":325,"context":267},53,{"file":327,"line":328,"context":267},"admin\\views\\reatlat_cub-admin-settings-page.php",19,{"file":224,"line":330,"context":267},103,{"file":224,"line":332,"context":267},148,{"file":224,"line":334,"context":267},150,{"file":224,"line":162,"context":267},{"file":224,"line":337,"context":267},156,6,7,[],[],{"summary":343,"deductions":344},"The \"campaign-url-builder\" plugin v1.8.2 presents a mixed security posture. While the static analysis reveals a limited attack surface with no exposed AJAX handlers or REST API routes without authentication, and a moderate percentage of properly escaped output, there are significant concerns regarding its database interaction and historical vulnerability patterns.  The plugin performs a substantial number of SQL queries without using prepared statements, which is a major risk for SQL injection vulnerabilities. Additionally, the presence of historical medium severity Cross-Site Scripting (XSS) vulnerabilities, even though currently unpatched, suggests a pattern of input sanitization weaknesses that warrant caution.\n\nDespite the absence of critical or high severity taint flows in the static analysis and the fact that all known CVEs are currently patched, the reliance on raw SQL and the history of XSS issues indicate potential areas for future exploitation if not addressed proactively. The plugin demonstrates good practices in controlling its attack surface, but the fundamental insecure handling of database queries is a critical weakness that cannot be overlooked. Therefore, while the immediate threat may be mitigated by current patching, the underlying code quality concerning SQL security and past XSS issues suggests a moderate to high risk for ongoing vigilance.",[345,347,349],{"reason":346,"points":257},"SQL queries without prepared statements",{"reason":348,"points":94},"History of medium severity XSS vulnerabilities",{"reason":350,"points":351},"Moderate output unescaped (30%)",5,"2026-03-16T20:26:53.152Z",{"wat":354,"direct":363},{"assetPaths":355,"generatorPatterns":358,"scriptPaths":359,"versionParams":360},[356,357],"\u002Fwp-content\u002Fplugins\u002Fcampaign-url-builder\u002Fcss\u002Fcub.css","\u002Fwp-content\u002Fplugins\u002Fcampaign-url-builder\u002Fjs\u002Fcub.js",[],[357],[361,362],"campaign-url-builder\u002Fcss\u002Fcub.css?ver=","campaign-url-builder\u002Fjs\u002Fcub.js?ver=",{"cssClasses":364,"htmlComments":366,"htmlAttributes":367,"restEndpoints":369,"jsGlobals":370,"shortcodeOutput":372},[365],"cub-shortcode-output",[],[368],"data-cub-form-id",[],[371],"cub_ajax_url",[373],"\u003Cdiv class=\"cub-shortcode-output\">"]