[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLw1wH9ofEuEqB8Oby40OYpq3NEXljlyh1NMbRCF7_Vk":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":35,"analysis":138,"fingerprints":187},"clixtell-tracking-dynamic-phones","Clixtell","2.4","clixtell","https:\u002F\u002Fprofiles.wordpress.org\u002Fclixtell\u002F","\u003Cp>\u003Cstrong>Clixtell Tracking & Dynamic Phones\u003C\u002Fstrong> helps businesses protect their advertising budget and improve conversion tracking by integrating Clixtell’s advanced click fraud detection and dynamic call tracking technology into WordPress.\u003C\u002Fp>\n\u003Cp>With this plugin you can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Detect and block fraudulent clicks\u003C\u002Fli>\n\u003Cli>Track phone calls accurately from paid traffic\u003C\u002Fli>\n\u003Cli>Enable Dynamic Phone Insertion (DNI)\u003C\u002Fli>\n\u003Cli>Integrate seamlessly with your existing Clixtell account\u003C\u002Fli>\n\u003Cli>Avoid complex code changes or manual script insertion\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>An active \u003Cstrong>Clixtell account\u003C\u002Fstrong> is required to use this plugin.\u003C\u002Fp>\n\u003Cp>Learn more at \u003Ca href=\"https:\u002F\u002Fwww.clixtell.com\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.clixtell.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Easy WordPress integration\u003C\u002Fli>\n\u003Cli>Dynamic Phone Insertion (optional toggle)\u003C\u002Fli>\n\u003Cli>Automatic script loading\u003C\u002Fli>\n\u003Cli>Clean and secure WordPress Settings API usage\u003C\u002Fli>\n\u003Cli>Lightweight and performance-friendly\u003C\u002Fli>\n\u003Cli>No theme modification required\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Go to \u003Cstrong>Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Clixtell\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Check \u003Cstrong>Activate Dynamic Call Tracking\u003C\u002Fstrong> to enable Dynamic Phone Insertion\u003C\u002Fli>\n\u003Cli>Save changes\u003C\u002Fli>\n\u003Cli>Ensure your Clixtell account is properly configured\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Tracking scripts are automatically injected on the frontend once enabled.\u003C\u002Fp>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>Clixtell Tracking & Dynamic Phones does not store or process personal data locally.\u003Cbr \u002F>\nAll tracking, analytics, and data processing are handled by Clixtell services.\u003Cbr \u002F>\nPlease review Clixtell’s Privacy Policy at:\u003Cbr \u002F>\nhttps:\u002F\u002Fwww.clixtell.com\u002Fprivacy-policy\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For documentation and support:\u003Cbr \u002F>\n* https:\u002F\u002Fsupport.clixtell.com\u003Cbr \u002F>\n* https:\u002F\u002Fwww.clixtell.com\u003C\u002Fp>\n","Clixtell Tracking & Dynamic Phones integrates Clixtell click fraud detection and dynamic phone number insertion into your WordPress site.",1000,8147,0,"2026-02-07T05:14:00.000Z","6.9.4","5.5","7.2",[19,20,21,22,23],"call-tracking","click-fraud","dynamic-phone","marketing-analytics","tracking","https:\u002F\u002Fwww.clixtell.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fclixtell-tracking-dynamic-phones.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},1,30,94,"2026-04-04T11:13:13.590Z",[36,55,79,97,117],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":26,"num_ratings":31,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":52,"download_link":53,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":54},"invox-call-tracking","INVOX Call Tracking","1.1","invox","https:\u002F\u002Fprofiles.wordpress.org\u002Finvox\u002F","\u003Cp>INVOX is a powerful call tracking software designed to help businesses track and analyze phone call conversions from each marketing channel. With this easy-to-integrate plugin, you can gain valuable insights into your marketing campaigns, measure the effectiveness of your advertising efforts, and optimize your customer acquisition strategy.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Advanced Call Analytics:\u003C\u002Fstrong> Track call data such as duration, source, campaigns, ads, and PPC keywords to better understand customer behavior.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Dynamic Number Insertion:\u003C\u002Fstrong> Automatically display unique phone numbers on your website, based on the visitor’s source (e.g., paid ads, organic search, social media).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Real-time Reporting:\u003C\u002Fstrong> View live call data and detailed reports to evaluate your marketing efforts in real time.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Integration with CRM:\u003C\u002Fstrong> Easily sync call data with your CRM system to enhance lead management and follow-up strategies.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User-Friendly Setup:\u003C\u002Fstrong> Simple installation and configuration process, with no technical knowledge required.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>INVOX also offers a Call Transcript feature that automatically generates transcriptions of your phone conversations. This powerful tool provides a text-based record of each call, making it easier to analyze customer interactions, improve customer service, and optimize marketing strategies.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why Choose INVOX Call Tracking?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Measure ROI:\u003C\u002Fstrong> Understand the real ROI of your marketing channels by directly linking phone calls to specific campaigns, ads, or keywords.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Improve Campaigns:\u003C\u002Fstrong> Use data to fine-tune your ads and campaigns, ensuring you focus your budget on high-performing channels.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enhance Customer Experience:\u003C\u002Fstrong> With a clear view of customer interactions, you can improve your communication and overall service quality.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Whether you’re running online ads, email campaigns, or organic SEO efforts, INVOX Call Tracking provides the tools you need to make data-driven decisions and boost your marketing performance.\u003C\u002Fp>\n\u003Cp>For more information about INVOX, visit our \u003Ca href=\"https:\u002F\u002Finvox.eu\" rel=\"nofollow ugc\">plugin homepage\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Cp>To configure the plugin, go to ‘Settings’ > ‘INVOX Call Tracking’ in the WordPress admin panel. Enter your custom CID and Version (v) values and save the settings.\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>Once configured, the INVOX Call Tracking JavaScript tag will be automatically added to your website.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support or questions, please contact us at \u003Ca href=\"mailto:contact@invox.eu\" rel=\"nofollow ugc\">contact@invox.eu\u003C\u002Fa>.\u003C\u002Fp>\n","The INVOX Call Tracking plugin lets WordPress users easily add Dynamic Number Insertion (DNI) to their site without technical or coding skills.",40,1027,"","6.7.5","4.9","7.0",[19,51,22],"dynamic-number-insertion","https:\u002F\u002Finvox.eu","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finvox-call-tracking.1.1.zip","2026-03-15T10:48:56.248Z",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":65,"num_ratings":66,"last_updated":67,"tested_up_to":15,"requires_at_least":68,"requires_php":46,"tags":69,"homepage":74,"download_link":75,"security_score":76,"vuln_count":77,"unpatched_count":13,"last_vuln_date":78,"fetched_at":28},"callrail-phone-call-tracking","CallRail Phone Call Tracking","0.5.3","CallRail","https:\u002F\u002Fprofiles.wordpress.org\u002Fcallrail\u002F","\u003Cp>CallRail is here to bring complete visibility to the marketers who rely on quality inbound leads to measure success. Our customers live in a results-driven world, and giving them a clear view into their digital marketing efforts is a first priority for CallRail. We see the opportunities in surfacing and connecting data from calls, forms, chat and beyond — helping our customers get to better outcomes.\u003C\u002Fp>\n\u003Cp>Our WordPress plugin allows you to learn detailed information about the source and web session of every caller from your website using a process called \u003Ca href=\"https:\u002F\u002Fwww.callrail.com\u002Fleads\u002Fdynamic-number-insertion-2\u002F\" rel=\"nofollow ugc\">Dynamic Number Insertion\u003C\u002Fa>. It also powers our form tracking tool, which gives you the power to attribute form submissions back to their source and learn about what the user did on your site before submitting the form.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Learn more about \u003Ca href=\"https:\u002F\u002Fwww.callrail.com\u002F\" rel=\"nofollow ugc\">CallRail\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Check out our WP plugin \u003Ca href=\"https:\u002F\u002Fsupport.callrail.com\u002Fhc\u002Fen-us\u002Farticles\u002F201011537\" rel=\"nofollow ugc\">support documentation.\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Dynamically swap CallRail tracking phone numbers based on the visitor's referring source.",10000,358191,74,6,"2026-02-11T19:30:00.000Z","3.0",[70,71,19,72,73],"adwords","analytics","conversion-tracking","seo","http:\u002F\u002Fwww.callrail.com\u002Fdocs\u002Fweb-integration\u002Fwordpress-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcallrail-phone-call-tracking.0.5.3.zip",99,2,"2023-10-24 00:00:00",{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":87,"downloaded":88,"rating":26,"num_ratings":89,"last_updated":90,"tested_up_to":15,"requires_at_least":68,"requires_php":46,"tags":91,"homepage":95,"download_link":96,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"whatconverts","WhatConverts","1.0.7","whatconverts call tracking and reporting","https:\u002F\u002Fprofiles.wordpress.org\u002Fwhatconverts\u002F","\u003Cp>This plugin adds the required tracking code for WhatConverts.\u003C\u002Fp>\n\u003Cp>For more information visit, \u003Ca href=\"https:\u002F\u002Fwww.whatconverts.com\u002F\" rel=\"nofollow ugc\">WhatConverts\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>WhatConverts plugin uses s.ksrndkehqnwntyxlhgto.com as the path to deliver the script.  The script is included on your site to allow WhatConverts to capture leads from your website.  s.ksrndkehqnwntyxlhgto.com is owned and operated by \u003Ca href=\"https:\u002F\u002Fwww.whatconverts.com\u002F\" rel=\"nofollow ugc\">WhatConverts\u003C\u002Fa>.  For more information visit our \u003Ca href=\"https:\u002F\u002Fwww.whatconverts.com\u002Fterms-of-use\" rel=\"nofollow ugc\">Terms of Use\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwww.whatconverts.com\u002Fprivacy-policy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa> for more information on WhatConverts.\u003C\u002Fp>\n","Enables WhatConverts on all pages.",7000,31411,3,"2025-12-01T13:06:00.000Z",[92,19,93,94,80],"analytics-call-tracking","form-tracking","goal-tracking","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwhatconverts\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwhatconverts.zip",{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":105,"downloaded":106,"rating":65,"num_ratings":89,"last_updated":107,"tested_up_to":15,"requires_at_least":108,"requires_php":109,"tags":110,"homepage":115,"download_link":116,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"call-tracking-metrics","CallTrackingMetrics","2.1.8","taf2","https:\u002F\u002Fprofiles.wordpress.org\u002Ftaf2\u002F","\u003Cp>CallTrackingMetrics integrates with your WordPress site to provide powerful call tracking and attribution.\u003C\u002Fp>\n","CallTrackingMetrics integrates with your WordPress site to provide powerful call tracking and attribution.",3000,125043,"2026-02-16T14:22:00.000Z","6.5","8.2",[111,19,112,113,114],"advertising","conversation-analytics","google-ads","marketing-attribution","https:\u002F\u002Fcalltrackingmetrics.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcall-tracking-metrics.2.1.8.zip",{"slug":118,"name":119,"version":120,"author":121,"author_profile":122,"description":123,"short_description":124,"active_installs":125,"downloaded":126,"rating":127,"num_ratings":77,"last_updated":128,"tested_up_to":129,"requires_at_least":130,"requires_php":46,"tags":131,"homepage":135,"download_link":136,"security_score":137,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"reachedge","LocaliQ – Tracking Code","1.9.1","REWordPressPlugin","https:\u002F\u002Fprofiles.wordpress.org\u002Frewordpressplugin\u002F","\u003Cp>The LocaliQ WordPress plugin adds the tracking code to the WordPress site.  This plugin adds the required javascript code on all pages in order to track analytics and enable other features for the \u003Ca href=\"https:\u002F\u002Flocaliq.com\" rel=\"nofollow ugc\">LocaliQ\u003C\u002Fa> products and other digital marketing solutions.\u003C\u002Fp>\n\u003Cp>The required javascript is loaded from a CDN at cdn.rlets.com\u002Fcapture_static\u002Fmms\u002Fmms.js. This file is under continuing development to provide the best performance and stability across all browser and OS combinations.\u003C\u002Fp>\n\u003Cp>As new features and functionality are added to LocaliQ Tracking, those updates will be rolled out through the mms.js file, and no updates of this plugin will be required.\u003C\u002Fp>\n\u003Cp>For more information, visit https:\u002F\u002Flocaliq.com.\u003C\u002Fp>\n\u003Ch3>API Interaction provided by capture_configs js from the CDN\u003C\u002Fh3>\n\u003Col>\n\u003Cli>The capture_configs js loads the customer’s configuration data from LocaliQ\u003C\u002Fli>\n\u003Cli>Sends analytics data back to LocaliQ for performance metrics.\u003C\u002Fli>\n\u003Cli>Sends visit & referrer attribution back to LocaliQ for analytics\u003C\u002Fli>\n\u003Cli>Sends visit, email, and form post data back to LocaliQ to provide lead management.\u003C\u002Fli>\n\u003Cli>Email links are replaced with contact forms and the form data and sending of email is offloaded to LocaliQ’s servers.\u003C\u002Fli>\n\u003C\u002Fol>\n","Adds LocaliQ's tracking code on all pages.",2000,27704,60,"2024-05-20T17:09:00.000Z","6.4.8","2.7",[19,132,93,133,134],"email-tracking","lead-conversion","localiq","https:\u002F\u002Fgithub.com\u002Freachlocal\u002Flocaliq-wordpress-4x-tracking-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Freachedge.1.9.1.zip",92,{"attackSurface":139,"codeSignals":162,"taintFlows":177,"riskAssessment":178,"analyzedAt":186},{"hooks":140,"ajaxHandlers":158,"restRoutes":159,"shortcodes":160,"cronEvents":161,"entryPointCount":13,"unprotectedCount":13},[141,147,151,154],{"type":142,"name":143,"callback":144,"file":145,"line":146},"action","admin_init","clixtell_migrate_legacy_data","clixtell-wp.php",21,{"type":142,"name":148,"callback":149,"file":145,"line":150},"admin_menu","clixtell_admin_add_page",57,{"type":142,"name":143,"callback":152,"file":145,"line":153},"clixtell_admin_init",108,{"type":142,"name":155,"callback":156,"file":145,"line":157},"wp_enqueue_scripts","clixtell_inject_scripts",171,[],[],[],[],{"dangerousFunctions":163,"sqlUsage":164,"outputEscaping":166,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":31,"bundledLibraries":176},[],{"prepared":13,"raw":13,"locations":165},[],{"escaped":167,"rawEcho":89,"locations":168},9,[169,172,174],{"file":145,"line":170,"context":171},80,"raw output",{"file":145,"line":173,"context":171},160,{"file":145,"line":175,"context":171},162,[],[],{"summary":179,"deductions":180},"The static analysis of the \"clixtell-tracking-dynamic-phones\" v2.4 plugin reveals a generally positive security posture. The plugin has a minimal attack surface, with no discovered AJAX handlers, REST API routes, shortcodes, or cron events that are exposed. Furthermore, the code signals indicate a lack of dangerous functions, no raw SQL queries (all use prepared statements), no file operations, and no external HTTP requests. The presence of capability checks is also a good sign. However, there are a couple of areas for improvement. Notably, 25% of output operations are not properly escaped, which could lead to cross-site scripting (XSS) vulnerabilities if the data being output is user-controlled or originates from an untrusted source. Additionally, the lack of nonce checks, while not directly flagged as a risk given the zero entry points, could become a concern if any entry points were to be introduced in future versions without proper sanitization.\n\nThe vulnerability history for this plugin is exceptionally clean, with no recorded CVEs of any severity. This pattern of no past vulnerabilities, combined with the current code analysis, suggests a development team that is either very security-conscious or the plugin is relatively new and has not yet been extensively targeted or analyzed. The strength of this plugin lies in its limited attack surface and secure handling of database operations. The primary weakness identified is the imperfect output escaping, which presents a potential XSS risk. Despite this, the overall risk is assessed as low given the absence of critical vulnerabilities in the code analysis and a clean historical record.",[181,183],{"reason":182,"points":66},"Unescaped output found",{"reason":184,"points":185},"No nonce checks present",4,"2026-03-16T19:05:24.479Z",{"wat":188,"direct":199},{"assetPaths":189,"generatorPatterns":192,"scriptPaths":193,"versionParams":196},[190,191],"\u002Fwp-content\u002Fplugins\u002Fclixtell-tracking-dynamic-phones\u002Fdynamicphones.js","\u002Fwp-content\u002Fplugins\u002Fclixtell-tracking-dynamic-phones\u002Ftrack.js",[],[194,195],"https:\u002F\u002Fapp.clixtell.com\u002Fscripts\u002Fdynamicphones.js","https:\u002F\u002Fscripts.clixtell.com\u002Ftrack.js",[197,198],"clixtell-dynamic-phones\u002Fdynamicphones.js?ver=2.4","clixtell-tracking\u002Ftrack.js?ver=2.4",{"cssClasses":200,"htmlComments":201,"htmlAttributes":202,"restEndpoints":203,"jsGlobals":204,"shortcodeOutput":206},[],[],[],[],[205],"clixtell_plugin_version",[]]