[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKTbkcSFs5p62NpuyVMYKzKHKDDx-Soi8gk_rjln2AJQ":3,"$fEKCM-RQhUjAaZClcgmEVdKuIJmupg4Eb_xb_KKLyKLo":384,"$fmwaOZ8IaT-0LXImnZS9sICd-sUHCwsRglBDnJ_K6RQU":388},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":20,"download_link":21,"security_score":22,"vuln_count":11,"unpatched_count":11,"last_vuln_date":23,"fetched_at":24,"discovery_status":25,"vulnerabilities":26,"developer":27,"crawl_stats":23,"alternatives":34,"analysis":147,"fingerprints":344},"ccc-site-guard","CCC Site Guard","1.0.0","Caronima Inc.","https:\u002F\u002Fprofiles.wordpress.org\u002Fcaronima\u002F","\u003Cp>CCC Site Guard helps you maintain a secure WordPress site by providing daily update reports and implementing essential security measures.\u003C\u002Fp>\n\u003Cp>This plugin monitors your WordPress core, themes, and plugins for available updates, and sends you regular email notifications with detailed reports. It also includes security features to help protect your site from common vulnerabilities and unauthorized access attempts.\u003C\u002Fp>\n\u003Cp>Key Features:\u003Cbr \u002F>\n* Daily email reports of available updates\u003Cbr \u002F>\n* WordPress core, theme, and plugin update monitoring\u003Cbr \u002F>\n* Security enhancement measures\u003Cbr \u002F>\n* Easy-to-use admin interface\u003Cbr \u002F>\n* Lightweight and performance-optimized\u003C\u002Fp>\n\u003Ch3>Discover More\u003C\u002Fh3>\n\u003Cp>This plugin is \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcaronima\u002Fccc-site-guard\" rel=\"nofollow ugc\">developed on GitHub\u003C\u002Fa>\u003C\u002Fp>\n","Daily Update Report Notifications and Security Measures.",0,155,"2025-12-28T13:32:00.000Z","6.9.4","6.0","7.0",[18,19],"maintenance","security","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fccc-site-guard.1.0.0.zip",100,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":28,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":11,"avg_security_score":30,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},"caronima",3,92,30,88,"2026-08-29T16:30:59.635Z",[35,60,80,104,123],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":45,"num_ratings":46,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":50,"tags":51,"homepage":54,"download_link":55,"security_score":56,"vuln_count":57,"unpatched_count":11,"last_vuln_date":58,"fetched_at":59},"hostinger","Hostinger Tools","3.0.72","Hostinger","https:\u002F\u002Fprofiles.wordpress.org\u002Fhostinger\u002F","\u003Cp>Hostinger Tools is an all-in-one plugin designed to streamline essential tasks for WordPress site administrators. This plugin offers a range of features to help you manage your site’s information, maintenance mode, security, and redirects effectively.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cem>Basic Info\u003C\u002Fem>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Displays the current WordPress version with automatic update checks.\u003C\u002Fli>\n\u003Cli>Shows the current PHP version with automatic update checks.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>Maintenance Mode\u003C\u002Fem>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easily enable or disable maintenance mode for your site.\u003C\u002Fli>\n\u003Cli>Provide a URL to bypass maintenance mode for selected users.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>Security\u003C\u002Fem>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Enable or disable XML-RPC requests to enhance your site’s security.\u003C\u002Fli>\n\u003Cli>Enable or disable Authorize application page to enhance your site’s security.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>Redirects\u003C\u002Fem>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Force all URLs to use HTTPS for secure browsing.\u003C\u002Fli>\n\u003Cli>Force all URLs to use WWW to ensure consistency in site access.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>LLMs.txt Generation\u003C\u002Fem>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Automatically generate a structured LLMs.txt file in Markdown format.\u003C\u002Fli>\n\u003Cli>Include website title, description, posts, pages, and products (if WooCommerce is active).\u003C\u002Fli>\n\u003Cli>Keep the file updated when content changes or new content is published.\u003C\u002Fli>\n\u003Cli>Help AI-powered tools better understand and interact with your website content.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Hostinger Tools is the new version of the previous Hostinger plugin, offering an updated and enhanced experience.\u003Cbr \u002F>\nThe Onboarding assistant and the Learning section previously included in this plugin were moved to the separate plugin Hostinger Easy Onboarding.\u003C\u002Fp>\n","Simplified WordPress management. Manage site info, maintenance, security, & redirects.",3000000,17985779,70,39,"2026-07-07T08:31:00.000Z","7.0.2","5.5","8.1",[36,52,18,19,53],"https","tools","https:\u002F\u002Fhostinger.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhostinger.3.0.72.zip",99,1,"2024-01-05 00:00:00","2026-07-22T17:31:50.256Z",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":68,"downloaded":69,"rating":22,"num_ratings":70,"last_updated":71,"tested_up_to":48,"requires_at_least":15,"requires_php":72,"tags":73,"homepage":77,"download_link":78,"security_score":22,"vuln_count":57,"unpatched_count":11,"last_vuln_date":79,"fetched_at":59},"xo-security","XO Security","3.11.0","ishitaka","https:\u002F\u002Fprofiles.wordpress.org\u002Fishitaka\u002F","\u003Cp>XO Security is a plugin to enhance login related security.\u003Cbr \u002F>\nThis plugin does not write to .htaccess file. Besides Apache, LiteSpeed, Nginx and IIS also work.\u003C\u002Fp>\n\u003Ch4>Functions\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Record login log.\u003C\u002Fli>\n\u003Cli>Limit login attempts.\u003C\u002Fli>\n\u003Cli>Add Captcha to the login form and comment form.\u003C\u002Fli>\n\u003Cli>Change the URL of the login page.\u003C\u002Fli>\n\u003Cli>Enable two-factor authentication (2FA) for login.\u003C\u002Fli>\n\u003Cli>Login Alert.\u003C\u002Fli>\n\u003Cli>Disable login by mail address.\u003C\u002Fli>\n\u003Cli>Disable login by user name.\u003C\u002Fli>\n\u003Cli>Change login error message.\u003C\u002Fli>\n\u003Cli>Disable XML-RPC and XML-RPC Pingback.\u003C\u002Fli>\n\u003Cli>Disable REST API.\u003C\u002Fli>\n\u003Cli>Disable author archive page.\u003C\u002Fli>\n\u003Cli>Remove comment author class of comments list.\u003C\u002Fli>\n\u003Cli>Remove the username from the oEmbed response data.\u003C\u002Fli>\n\u003Cli>WooCommerce login page protection.\u003C\u002Fli>\n\u003Cli>Anti-spam comment.\u003C\u002Fli>\n\u003Cli>Hide WordPress version information.\u003C\u002Fli>\n\u003Cli>Edit the author slug.\u003C\u002Fli>\n\u003Cli>Disable RSS and Atom feeds.\u003C\u002Fli>\n\u003Cli>Activate maintenance mode.\u003C\u002Fli>\n\u003Cli>Delete the readme.html file.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WordPress multisite considerations\u003C\u002Fh4>\n\u003Cp>If you set the login page separately for the main site and the subsite, you will not be able to use the password loss function of the subsite. We recommend that you set the login page to be common to all sites.\u003C\u002Fp>\n","XO Security is a plugin to enhance login related security.",30000,397056,11,"2026-07-19T10:16:00.000Z","7.2",[74,75,18,19,76],"brute-force","login","two-factor","https:\u002F\u002Fxakuro.com\u002Fwordpress\u002Fxo-security\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fxo-security.3.11.0.zip","2017-02-07 00:00:00",{"slug":81,"name":82,"version":83,"author":81,"author_profile":84,"description":85,"short_description":86,"active_installs":87,"downloaded":88,"rating":89,"num_ratings":90,"last_updated":91,"tested_up_to":48,"requires_at_least":92,"requires_php":93,"tags":94,"homepage":99,"download_link":100,"security_score":101,"vuln_count":102,"unpatched_count":11,"last_vuln_date":103,"fetched_at":59},"mainwp","MainWP Dashboard: Self-hosted WordPress Management for Agencies","6.1.4","https:\u002F\u002Fprofiles.wordpress.org\u002Fmainwp\u002F","\u003Cp>Managing multiple WordPress sites can be a time-consuming and frustrating task. The \u003Ca href=\"https:\u002F\u002Fmainwp.com\u002F\" rel=\"nofollow ugc\">MainWP Dashboard\u003C\u002Fa> empowers you to take back your time by allowing you to efficiently manage and secure all your WordPress sites from your own centralized Dashboard.\u003C\u002Fp>\n\u003Cp>Designed for agencies, freelancers, and web professionals, MainWP offers comprehensive control with a privacy-first approach. Harness the power of MainWP for updates, backups, and more, ensuring your sites are always running smoothly and securely.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features for Advanced WordPress Management:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Centralized Updates: Keep all your WordPress sites up-to-date with single-click updates.\u003C\u002Fli>\n\u003Cli>Secure Backups: Implement scheduled or on-demand backups for complete site security.\u003C\u002Fli>\n\u003Cli>Manage both your sites and your clients with the Client Management module\u003C\u002Fli>\n\u003Cli>The built-in Cost Tracker allows you to easily keep track of client costs\u003C\u002Fli>\n\u003Cli>Private and Self-hosted: Your data stays yours, with full privacy and control.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Stop the Software as a Service (SaaS) Treadmill:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Built on WordPress’s core principles, the MainWP Dashboard plugin is uniquely positioned as the go-to solution for WordPress management. It combines ease of use with robust features and unmatched privacy.\u003C\u002Fp>\n\u003Cp>The MainWP plugins are open-source and privacy-focused and come with their own privacy policies to ensure that the plugins do not collect any personally identifiable information (PII).\u003C\u002Fp>\n\u003Cp>The MainWP Dashboard is extendable, allowing third-party developers to hook into it. It also provides support for CLI and has its own REST API, so anything you need or want to run your business your way can be developed for your MainWP Dashboard.\u003C\u002Fp>\n\u003Cp>All of this makes MainWP the best non-SaaS alternative to ManageWP, InfiniteWP, WPRemote, and WP Umbrella.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Getting Started with MainWP:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>MainWP is designed to be user-friendly and intuitive, even for those new to WordPress management plugins. With a straightforward setup process and a clean, organized dashboard, you’ll be able to start managing your WordPress sites efficiently in no time.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Setting up MainWP is straightforward, install the dashboard on a private WordPress site, add the MainWP Child plugin to your other WordPress sites, and take control.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Your Guarantee of Privacy\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The MainWP plugins come with their own \u003Ca href=\"https:\u002F\u002Fmainwp.com\u002Fmainwp-plugin-privacy-policy\u002F\" rel=\"nofollow ugc\">privacy policies\u003C\u002Fa> to ensure that the plugins do not collect any personally identifiable information (PII).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>How Is MainWP Free? What’s the Catch? How Will You Continue to Pay Development Costs?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>MainWP Dashboard is \u003Ca href=\"https:\u002F\u002Fmainwp.com\u002Fmainwp-free-features\u002F\" rel=\"nofollow ugc\">100% FREE\u003C\u002Fa> and always will be. Whether you manage 5 sites or 5,000, the core dashboard remains free.\u003C\u002Fp>\n\u003Cp>We make money by offering \u003Ca href=\"https:\u002F\u002Fmainwp.com\u002Fsignup\u002F\" rel=\"nofollow ugc\">MainWP Pro\u003C\u002Fa>, which provides access to a wide range of premium add-ons. These premium add-ons are organized into two clear categories:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Integrations:\u003C\u002Fstrong>\u003Cbr \u002F>\nAdd-ons in this category enable seamless connections with popular third-party services and plugins, allowing you to integrate the tools you already use directly into your MainWP Dashboard.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Extensions:\u003C\u002Fstrong>\u003Cbr \u002F>\nThese are custom-built, standalone add-ons developed exclusively for the MainWP Dashboard, designed to add unique and specialized functionality to enhance your WordPress management experience.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For more details, visit our \u003Ca href=\"https:\u002F\u002Fmainwp.com\u002Fmainwp-add-ons\u002F\" rel=\"nofollow ugc\">Premium Add-ons\u003C\u002Fa> page and see how our free and pro features compare at \u003Ca href=\"https:\u002F\u002Fmainwp.com\u002Ffree-vs-pro\u002F\" rel=\"nofollow ugc\">Free vs. Pro: Know the Difference\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Experience the MainWP Difference\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Are you ready to take the hassle out of managing your WordPress sites? MainWP makes it easy to keep everything updated, secure, and running just the way you need it. With over 20k site owners trusting MainWP with over 700k WordPress sites, every day, you’ll quickly see how much simpler website management can be. Try it today and feel the difference for yourself!\u003C\u002Fp>\n","Run updates, backups, security and reporting across all client sites from your own server. Keep data private and prove your value with branded reports …",20000,1801756,98,2344,"2026-07-21T15:28:00.000Z","6.2","7.4",[95,96,19,97,98],"backups","manage-multiple-wordpress-sites","update","wordpress-maintenance","https:\u002F\u002Fmainwp.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmainwp.6.1.4.zip",89,7,"2026-06-29 00:00:00",{"slug":105,"name":106,"version":107,"author":108,"author_profile":109,"description":110,"short_description":111,"active_installs":112,"downloaded":113,"rating":11,"num_ratings":11,"last_updated":114,"tested_up_to":115,"requires_at_least":116,"requires_php":93,"tags":117,"homepage":121,"download_link":122,"security_score":30,"vuln_count":11,"unpatched_count":11,"last_vuln_date":23,"fetched_at":59},"milesweb-tools","MilesWeb Tools","1.0.2","MilesWeb","https:\u002F\u002Fprofiles.wordpress.org\u002Fmilesweb\u002F","\u003Cp>\u003Cstrong>MilesWeb Tools\u003C\u002Fstrong> is a powerful WordPress plugin designed to enhance your site’s functionality and security. It helps you manage security settings, maintenance mode, enforce HTTPS, disable file editing, log user activity, track storage usage, and provides detailed insights into active and inactive themes and plugins.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Enable\u002Fdisable maintenance mode.\u003C\u002Fli>\n\u003Cli>Force HTTPS redirection.\u003C\u002Fli>\n\u003Cli>Disable file editing in the WordPress admin panel.\u003C\u002Fli>\n\u003Cli>Disable XML-RPC to prevent security vulnerabilities.\u003C\u002Fli>\n\u003Cli>Track user logins.\u003C\u002Fli>\n\u003Cli>Display active theme details and inactive theme storage usage.\u003C\u002Fli>\n\u003Cli>Show active\u002Finactive plugins, including their size, and memory usage.\u003C\u002Fli>\n\u003Cli>Identify outdated plugins and themes.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Short Description\u003C\u002Fh3>\n\u003Cp>Manage security, maintenance, and user logging while monitoring storage usage in one plugin.\u003C\u002Fp>\n\u003Ch3>License & Credits\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under GPLv2 or later. Contributions from the WordPress community are appreciated.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support, visit MilesWeb Support or the WordPress support forums.\u003C\u002Fp>\n","MilesWeb Tools is a powerful WordPress plugin designed to enhance your site's functionality and security. It helps you manage security settings,  …",10000,25075,"2025-07-25T11:31:00.000Z","6.8.6","5.6",[18,118,19,119,120],"plugin-info","storage-usage","user-logging","https:\u002F\u002Fmilesweb.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmilesweb-tools.1.0.2.zip",{"slug":124,"name":125,"version":126,"author":127,"author_profile":128,"description":129,"short_description":130,"active_installs":131,"downloaded":132,"rating":133,"num_ratings":134,"last_updated":135,"tested_up_to":115,"requires_at_least":136,"requires_php":93,"tags":137,"homepage":142,"download_link":143,"security_score":144,"vuln_count":145,"unpatched_count":11,"last_vuln_date":146,"fetched_at":59},"wp-helper-lite","WP Helper Premium","4.7.5","Mat Bao Corporation","https:\u002F\u002Fprofiles.wordpress.org\u002Fmatbao\u002F","\u003Cp>\u003Cstrong>WP Helper Premium\u003C\u002Fstrong> is an all-in-one WordPress toolkit that consolidates 8 essential site management modules into a single plugin. Every module is independent — activate only what you need from a unified dashboard.\u003C\u002Fp>\n\u003Ch4>Contact Channels\u003C\u002Fh4>\n\u003Cp>Add a floating contact widget so visitors can reach you instantly.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Greeting card — title, short description, and online\u002Foffline status\u003C\u002Fli>\n\u003Cli>Floating trigger button — custom color and left\u002Fright position\u003C\u002Fli>\n\u003Cli>Hotline card — separate info for online and offline hours\u003C\u002Fli>\n\u003Cli>Staff list — multiple agents with names and contact info\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Header & Footer\u003C\u002Fh4>\n\u003Cp>Inject tracking, analytics, or custom code without editing theme files.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Three code areas — \u003Ccode>\u003Chead>\u003C\u002Fcode>, body-open (\u003Ccode>\u003Cbody>\u003C\u002Fcode>), and footer (\u003Ccode>\u003C\u002Fbody>\u003C\u002Fcode>)\u003C\u002Fli>\n\u003Cli>Supports any HTML, JavaScript, or CSS snippet\u003C\u002Fli>\n\u003Cli>Applies site-wide and survives theme updates\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Pop-up\u003C\u002Fh4>\n\u003Cp>Promotional and newsletter pop-ups with full scheduling and display control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Form pop-up — collects leads, integrates with Contact Form 7, WPForms, Gravity Forms, Ninja Forms\u003C\u002Fli>\n\u003Cli>Banner pop-up — image, title, subtitle, and CTA button\u003C\u002Fli>\n\u003Cli>Display rules — delay, cookie duration, and max display count\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Maintenance Mode\u003C\u002Fh4>\n\u003Cp>Put your site under a professional maintenance page while you work.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>6 templates — Dark, Light, Gradient, Construction, Corporate, Cyberpunk (Neon)\u003C\u002Fli>\n\u003Cli>AI content generation — auto-writes heading, sub-heading, and description (requires AI Hub)\u003C\u002Fli>\n\u003Cli>Countdown timer — shows visitors when the site returns\u003C\u002Fli>\n\u003Cli>Visitor stats — page views, unique visitors, and bounce rate while active\u003C\u002Fli>\n\u003Cli>Admin bypass — logged-in administrators see the site normally\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Email & Contact\u003C\u002Fh4>\n\u003Cp>Manage every inbound form and outbound email from one place.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Form Manager — collect, view, and export contact form submissions\u003C\u002Fli>\n\u003Cli>SMTP Config — reliable delivery via Gmail, Outlook, Zoho Mail, Yahoo Mail, or any custom SMTP server\u003C\u002Fli>\n\u003Cli>Spam Filter — honeypot, rate limiting, IP\u002Fcountry\u002Fkeyword blocking, DNSBL check\u003C\u002Fli>\n\u003Cli>CAPTCHA — Math Quiz, Google reCAPTCHA, Cloudflare Turnstile, or hCaptcha\u003C\u002Fli>\n\u003Cli>Email Log — status, headers, and body of every email sent, with resend and CSV export\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WooCommerce Toolkit\u003C\u002Fh4>\n\u003Cp>Extend WooCommerce with sales and operations tools — no extra plugins needed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Wallet Payment — Momo, ZaloPay, VNPay, ShopeePay\u003C\u002Fli>\n\u003Cli>Payment Templates — reusable info blocks for order\u002FCRM management\u003C\u002Fli>\n\u003Cli>E-commerce Links — connect product listings to Shopee, Lazada, TikTok Shop\u003C\u002Fli>\n\u003Cli>Buy Now (CTA) button — custom placement and text on product pages\u003C\u002Fli>\n\u003Cli>Thank You page — customize post-purchase content\u003C\u002Fli>\n\u003Cli>AI Payment Verification — scan bank transfer receipts via OCR to auto-verify payments and flag fraud (requires AI Hub)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>AI Hub\u003C\u002Fh4>\n\u003Cp>Connect Google Gemini, Anthropic Claude, or OpenAI GPT to power AI features site-wide.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>AI Writer — drafts blog posts and product descriptions\u003C\u002Fli>\n\u003Cli>AI Security — scans the site for vulnerabilities and misconfigurations\u003C\u002Fli>\n\u003Cli>AI SEO — audits pages and suggests on-page SEO improvements\u003C\u002Fli>\n\u003Cli>AI Payment — verifies bank transfer receipts via OCR and flags fraud risk\u003C\u002Fli>\n\u003Cli>Token stats & fallback — tracks usage per provider with automatic 3-tier fallback\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Protection & Optimization\u003C\u002Fh4>\n\u003Cp>Harden and speed up your site with individual toggles — enable only what you need.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Security — disable XML-RPC, hide WP version, custom login URL, disable copy\u002Fright-click\u003C\u002Fli>\n\u003Cli>Performance — remove query strings, disable embeds, Google Fonts, or Dashicons\u003C\u002Fli>\n\u003Cli>Productivity — duplicate pages\u002Fposts\u002Fmenus, redirect 404s to the homepage, enable SVG uploads\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>This plugin does not track users, store personal data, or use cookies by default. Certain optional features transmit data to third-party services — see \u003Cstrong>External Services\u003C\u002Fstrong> below. All external calls are initiated server-side and occur only when the relevant feature is enabled and configured by a site administrator.\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin optionally connects to the following third-party services when the corresponding features are enabled by the site administrator. No data is sent unless the feature is explicitly activated and configured.\u003C\u002Fp>\n\u003Ch4>Google Gemini API\u003C\u002Fh4>\n\u003Cp>Used for AI-powered content generation (maintenance page content, product descriptions, image captions). Data sent: text prompts provided by the administrator.\u003Cbr \u002F>\n* Service: https:\u002F\u002Fai.google.dev\u002F\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fai.google.dev\u002Fterms\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fpolicies.google.com\u002Fprivacy\u003C\u002Fp>\n\u003Ch4>Anthropic Claude API\u003C\u002Fh4>\n\u003Cp>Used as a fallback AI provider for content generation when configured by the administrator.\u003Cbr \u002F>\n* Service: https:\u002F\u002Fwww.anthropic.com\u002F\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fwww.anthropic.com\u002Flegal\u002Fconsumer-terms\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fwww.anthropic.com\u002Flegal\u002Fprivacy\u003C\u002Fp>\n\u003Ch4>OpenAI API\u003C\u002Fh4>\n\u003Cp>Used as an optional AI provider for content generation when configured by the administrator.\u003Cbr \u002F>\n* Service: https:\u002F\u002Fopenai.com\u002F\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fopenai.com\u002Fterms\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fopenai.com\u002Fprivacy\u003C\u002Fp>\n\u003Ch4>ip-api.com\u003C\u002Fh4>\n\u003Cp>Used by the Spam Filter feature to look up the country\u002FISP of a visitor’s IP address when country-based blocking is enabled. Only the visitor’s IP address is transmitted.\u003Cbr \u002F>\n* Service: https:\u002F\u002Fip-api.com\u002F\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fip-api.com\u002Fdocs\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fip-api.com\u002F\u003C\u002Fp>\n\u003Ch4>Google reCAPTCHA\u003C\u002Fh4>\n\u003Cp>Used by the Captcha module when the administrator selects Google reCAPTCHA. Visitor IP and browser information are sent to Google for spam scoring.\u003Cbr \u002F>\n* Service: https:\u002F\u002Fwww.google.com\u002Frecaptcha\u002F\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fpolicies.google.com\u002Fterms\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fpolicies.google.com\u002Fprivacy\u003C\u002Fp>\n\u003Ch4>Cloudflare Turnstile\u003C\u002Fh4>\n\u003Cp>Used by the Captcha module when the administrator selects Cloudflare Turnstile. Challenge tokens are verified server-side with Cloudflare.\u003Cbr \u002F>\n* Service: https:\u002F\u002Fwww.cloudflare.com\u002Fproducts\u002Fturnstile\u002F\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fwww.cloudflare.com\u002Fterms\u002F\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fwww.cloudflare.com\u002Fprivacypolicy\u002F\u003C\u002Fp>\n\u003Ch4>hCaptcha\u003C\u002Fh4>\n\u003Cp>Used by the Captcha module when the administrator selects hCaptcha. Challenge responses are verified server-side with hCaptcha.\u003Cbr \u002F>\n* Service: https:\u002F\u002Fwww.hcaptcha.com\u002F\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fwww.hcaptcha.com\u002Fterms\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fwww.hcaptcha.com\u002Fprivacy\u003C\u002Fp>\n\u003Ch4>Pexels API\u003C\u002Fh4>\n\u003Cp>Used to search and import free stock photos for AI-generated pages when the administrator has configured a Pexels API key.\u003Cbr \u002F>\n* Service: https:\u002F\u002Fwww.pexels.com\u002F\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fwww.pexels.com\u002Fterms-of-service\u002F\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fwww.pexels.com\u002Fprivacy-policy\u002F\u003C\u002Fp>\n\u003Ch4>Pixabay API\u003C\u002Fh4>\n\u003Cp>Used to search and import free stock photos as an alternative image source when configured by the administrator.\u003Cbr \u002F>\n* Service: https:\u002F\u002Fpixabay.com\u002F\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fpixabay.com\u002Fservice\u002Fterms\u002F\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fpixabay.com\u002Fservice\u002Fprivacy\u002F\u003C\u002Fp>\n","All-in-one WordPress toolkit: contact channels, SMTP, maintenance, AI, spam filter, WooCommerce — one plugin.",1000,34332,72,8,"2026-07-20T19:23:00.000Z","6.7",[138,139,19,140,141],"contact-button","maintenance-mode","smtp","woocommerce","https:\u002F\u002Fwww.matbao.net\u002Fhosting\u002Fwp-helper-plugin.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-helper-lite.4.7.5.zip",96,5,"2024-10-09 13:29:15",{"attackSurface":148,"codeSignals":200,"taintFlows":309,"riskAssessment":337,"analyzedAt":343},{"hooks":149,"ajaxHandlers":196,"restRoutes":197,"shortcodes":198,"cronEvents":199,"entryPointCount":11,"unprotectedCount":11},[150,156,160,164,167,171,175,179,182,186,192],{"type":151,"name":152,"callback":153,"file":154,"line":155},"action","admin_menu","cccsig_add_settings_page","ccc-site-guard.php",121,{"type":151,"name":157,"callback":158,"file":154,"line":159},"admin_enqueue_scripts","cccsig_admin_assets",148,{"type":151,"name":161,"callback":162,"file":154,"line":163},"plugins_loaded","cccsig_ensure_daily_event_scheduled",694,{"type":151,"name":161,"callback":165,"priority":11,"file":154,"line":166},"cccsig_register_basic_auth_hooks",857,{"type":151,"name":168,"callback":169,"priority":11,"file":154,"line":170},"login_init","cccsig_basic_auth_on_login",861,{"type":151,"name":172,"callback":173,"priority":11,"file":154,"line":174},"admin_init","cccsig_basic_auth_on_admin",864,{"type":151,"name":176,"callback":177,"priority":11,"file":154,"line":178},"init","cccsig_basic_auth_on_site",867,{"type":151,"name":176,"callback":180,"priority":11,"file":154,"line":181},"cccsig_boot_security",871,{"type":151,"name":183,"callback":184,"priority":11,"file":154,"line":185},"template_redirect","cccsig_custom_author_redirect",877,{"type":187,"name":188,"callback":189,"priority":190,"file":154,"line":191},"filter","rest_endpoints","cccsig_custom_rest_endpoints",10,881,{"type":187,"name":193,"callback":194,"file":154,"line":195},"the_generator","__return_empty_string",885,[],[],[],[],{"dangerousFunctions":201,"sqlUsage":202,"outputEscaping":204,"fileOperations":57,"externalRequests":11,"nonceChecks":57,"capabilityChecks":57,"bundledLibraries":308},[],{"prepared":11,"raw":11,"locations":203},[],{"escaped":205,"rawEcho":205,"locations":206},50,[207,210,212,214,216,218,220,222,224,226,228,230,232,234,236,238,240,242,244,246,248,250,252,254,256,258,260,262,264,266,268,270,272,274,276,278,280,282,284,286,288,290,292,294,296,298,300,302,304,306],{"file":154,"line":208,"context":209},379,"raw output",{"file":154,"line":211,"context":209},382,{"file":154,"line":213,"context":209},385,{"file":154,"line":215,"context":209},388,{"file":154,"line":217,"context":209},396,{"file":154,"line":219,"context":209},400,{"file":154,"line":221,"context":209},401,{"file":154,"line":223,"context":209},407,{"file":154,"line":225,"context":209},412,{"file":154,"line":227,"context":209},417,{"file":154,"line":229,"context":209},420,{"file":154,"line":231,"context":209},427,{"file":154,"line":233,"context":209},430,{"file":154,"line":235,"context":209},433,{"file":154,"line":237,"context":209},438,{"file":154,"line":239,"context":209},441,{"file":154,"line":241,"context":209},446,{"file":154,"line":243,"context":209},450,{"file":154,"line":245,"context":209},453,{"file":154,"line":247,"context":209},456,{"file":154,"line":249,"context":209},466,{"file":154,"line":251,"context":209},469,{"file":154,"line":253,"context":209},472,{"file":154,"line":255,"context":209},475,{"file":154,"line":257,"context":209},477,{"file":154,"line":259,"context":209},479,{"file":154,"line":261,"context":209},482,{"file":154,"line":263,"context":209},486,{"file":154,"line":265,"context":209},495,{"file":154,"line":267,"context":209},497,{"file":154,"line":269,"context":209},498,{"file":154,"line":271,"context":209},499,{"file":154,"line":273,"context":209},504,{"file":154,"line":275,"context":209},509,{"file":154,"line":277,"context":209},512,{"file":154,"line":279,"context":209},514,{"file":154,"line":281,"context":209},534,{"file":154,"line":283,"context":209},542,{"file":154,"line":285,"context":209},547,{"file":154,"line":287,"context":209},552,{"file":154,"line":289,"context":209},556,{"file":154,"line":291,"context":209},564,{"file":154,"line":293,"context":209},567,{"file":154,"line":295,"context":209},571,{"file":154,"line":297,"context":209},573,{"file":154,"line":299,"context":209},577,{"file":154,"line":301,"context":209},581,{"file":154,"line":303,"context":209},583,{"file":154,"line":305,"context":209},584,{"file":154,"line":307,"context":209},955,[],[310,329],{"entryPoint":311,"graph":312,"unsanitizedCount":11,"severity":328},"cccsig_render_settings_page (ccc-site-guard.php:256)",{"nodes":313,"edges":325},[314,319],{"id":315,"type":316,"label":317,"file":154,"line":318},"n0","source","$_POST",289,{"id":320,"type":321,"label":322,"file":154,"line":323,"wp_function":324},"n1","sink","update_option() [Settings Manipulation]",313,"update_option",[326],{"from":315,"to":320,"sanitized":327},true,"low",{"entryPoint":330,"graph":331,"unsanitizedCount":11,"severity":328},"\u003Cccc-site-guard> (ccc-site-guard.php:0)",{"nodes":332,"edges":335},[333,334],{"id":315,"type":316,"label":317,"file":154,"line":318},{"id":320,"type":321,"label":322,"file":154,"line":323,"wp_function":324},[336],{"from":315,"to":320,"sanitized":327},{"summary":338,"deductions":339},"The \"ccc-site-guard\" v1.0.0 plugin exhibits a generally strong security posture based on the provided static analysis. The absence of any AJAX handlers, REST API routes, shortcodes, or cron events significantly limits its attack surface. Furthermore, the code signals indicate good practices with 100% of SQL queries using prepared statements and the presence of both nonce and capability checks. Taint analysis also reveals no critical or high severity flows with unsanitized paths.\n\nHowever, a notable concern lies in the output escaping, where only 50% of outputs are properly escaped. This presents a potential cross-site scripting (XSS) risk if user-supplied data is displayed without adequate sanitization. The single file operation also warrants a closer look to ensure it's being handled securely, although the lack of other identified risks suggests it might be benign. The plugin's clean vulnerability history is a positive indicator, suggesting a commitment to security or simply a lack of previous exposure.\n\nIn conclusion, \"ccc-site-guard\" v1.0.0 demonstrates a solid foundation with its minimal attack surface and secure data handling for SQL. The primary area requiring immediate attention is the 50% of improperly escaped outputs, which could lead to XSS vulnerabilities. Addressing this, along with a review of the file operation, would significantly bolster its security.",[340],{"reason":341,"points":342},"Half of outputs are not properly escaped",6,"2026-03-17T06:04:50.180Z",{"wat":345,"direct":352},{"assetPaths":346,"generatorPatterns":348,"scriptPaths":349,"versionParams":350},[347],"\u002Fwp-content\u002Fplugins\u002Fccc-site-guard\u002Fccc-site-guard.php",[],[],[351],"ccc-site-guard\u002Fccc-site-guard.php?ver=",{"cssClasses":353,"htmlComments":361,"htmlAttributes":362,"restEndpoints":373,"jsGlobals":374,"shortcodeOutput":383},[354,355,356,357,358,359,360],"ccc-sg-badge","ccc-sg-badge ok","ccc-sg-badge ng","ccc-sg-subnote","ccc-sg-warning","ccc-sg-dep-daily","ccc-sg-dep-basic",[],[363,364,365,366,367,368,369,370,371,372],"id=\"ccc-sg-pass-change-btn\"","id=\"ccc-sg-pass-change-box\"","id=\"ccc-sg-pass-change-cancel\"","id=\"ccc-sg-pass-clear\"","id=\"ccc-sg-enable-daily-report\"","id=\"ccc-sg-daily-disabled-note\"","id=\"ccc-sg-enable-basic-auth\"","id=\"ccc-sg-basic-disabled-note\"","id=\"ccc-sg-pass1\"","id=\"ccc-sg-pass2\"",[],[375,376,377,378,379,380,381,382],"window.addEventListener","document.addEventListener","document.getElementById","document.querySelectorAll","document.addEventListener('DOMContentLoaded","setPassBoxVisible","syncDaily","syncBasic",[],{"error":327,"url":385,"statusCode":386,"statusMessage":387,"message":387},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fccc-site-guard\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":57,"versions":389},[390],{"version":6,"download_url":21,"svn_tag_url":391,"released_at":23,"has_diff":392,"diff_files_changed":393,"diff_lines":23,"trac_diff_url":23,"vulnerabilities":394,"is_current":327},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fccc-site-guard\u002Ftags\u002F1.0.0\u002F",false,[],[]]