[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffoXNUAZIOlv1TZvtaGyKUaVTJiymcBQoVGDLh8yuNc8":3,"$fiP22fmAdwDEYuofvE7Bd0YDtLbKKlL0BGN92SqE1DdY":410,"$fYavmsfLpq-w3j06_tRq1JOV7xK8XEhkDZRhk1tWa-hw":414},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":11,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":30,"crawl_stats":26,"alternatives":38,"analysis":150,"fingerprints":390},"connect-wpform-to-any-api","Connect WPForm to Any API","1.0.1","IT Path Solutions","https:\u002F\u002Fprofiles.wordpress.org\u002Fitpathsolutions\u002F","\u003Cp>WPForm to Any API is most powerful plugin to send WPForm data to any third party services. It can be use to send data to CRM or any REST API. Easy to use and User friendly settings.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Send WPForm Leads to Remote API’s such as CRM and other Extrenal API using POST\u002FGET\u003C\u002Fli>\n\u003Cli>Create unlimited connection with any API\u003C\u002Fli>\n\u003Cli>Supports Simple & Fixed Format of JSON\u003C\u002Fli>\n\u003Cli>Supports Basic Auth\u003C\u002Fli>\n\u003Cli>Supports Bearer Auth\u003C\u002Fli>\n\u003Cli>API Logs Management with submitted data and API response \u003C\u002Fli>\n\u003Cli>Paid plugin customization Support Multi Level or Any Format of JSON   \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.contactformtoapi.com\u002F#contact_us\" rel=\"nofollow ugc\">(Contact us)\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Paid plugin customization support for JWT Token Integration with Any API \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.contactformtoapi.com\u002F#contact_us\" rel=\"nofollow ugc\">(Contact us)\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Paid plugin customization support for oauth 2.0 API Integration \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.contactformtoapi.com\u002F#contact_us\" rel=\"nofollow ugc\">(Contact us)\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Set your own Header Request Parameter\u003C\u002Fh4>\n\u003Cp>Authorization: MY_API_KEY\u003Cbr \u002F>\nAuthorization : Bearer xxxxxxx\u003Cbr \u002F>\nAuthorization : Basic xxxxxx\u003Cbr \u002F>\nContent-Type: application\u002Fjson\u003C\u002Fp>\n\u003Ch3>Our Other Plugins\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcontact-form-to-any-api\u002F\" rel=\"ugc\">\u003Cstrong>Contact Form 7 to Any API : \u003C\u002Fstrong>\u003C\u002Fa>Contact form 7 to Any API is most powerful plugin to send cf7 data to any third party services. It can be use to send data to CRM Or any REST API. Easy to use and User friendly settings\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>WPForm to Any API is developed and supported by \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fitpathsolutions\u002F\" rel=\"nofollow ugc\">IT Path Solutions\u003C\u002Fa>. If you don’t find an answer of your Query\u002FDoubt\u002FProblem in \u003Ca href=\"#faq\" rel=\"nofollow ugc\">FAQs\u003C\u002Fa> or Support forum, feel free to get in touch with us.  \u003Ca href=\"https:\u002F\u002Fwww.contactformtoapi.com\u002F#contact_us\" rel=\"nofollow ugc\">Click here\u003C\u002Fa>\u003C\u002Fp>\n","WPForm to Any API is most powerful plugin to send WPForm data to any third party services. It can be use to send data to CRM or any REST API.",100,2065,0,"2026-01-01T09:48:00.000Z","6.9.4","6.0","7.4",[19,20,21,22,23],"contact-form","crm","lead","wpform-to-api","wpform-api","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fconnect-wpform-to-any-api","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconnect-wpform-to-any-api.1.0.1.zip",null,"2026-04-06T09:54:40.288Z","no_bundle",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":34,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"itpathsolutions",13,10670,89,77,80,"2026-05-19T20:42:39.370Z",[39,66,90,110,130],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":49,"num_ratings":50,"last_updated":51,"tested_up_to":52,"requires_at_least":53,"requires_php":54,"tags":55,"homepage":60,"download_link":61,"security_score":62,"vuln_count":63,"unpatched_count":13,"last_vuln_date":64,"fetched_at":65},"lenix-elementor-leads-addon","Lenix Leads Collector","2.0.0","yonifre","https:\u002F\u002Fprofiles.wordpress.org\u002Fyonifre\u002F","\u003Cp>Lenix Leads Collector is a powerful plugin that stores and manages leads from your Elementor,Cf7,WPForms and more with export to CSV.\u003C\u002Fp>\n\u003Cp>Key Features:\u003Cbr \u002F>\n* Automatic capture of all Elementor form submissions\u003Cbr \u002F>\n* Automatic capture of all Hello Plus form submissions\u003Cbr \u002F>\n* Automatic capture of all Cf7 form submissions\u003Cbr \u002F>\n* Automatic capture of all WPForms form submissions\u003Cbr \u002F>\n* Centralized management interface in WordPress admin panel\u003Cbr \u002F>\n* Quick and easy export of leads to CSV format\u003Cbr \u002F>\n* Support for global forms\u003Cbr \u002F>\n* Multi-language support (including English, Hebrew, French and more)\u003Cbr \u002F>\n* User-friendly and intuitive interface\u003Cbr \u002F>\n* Date-based filtering for exports\u003Cbr \u002F>\n* Secure data handling\u003Cbr \u002F>\n* Each lead is a post in WordPress, so you can use all the features of WordPress to manage them\u003C\u002Fp>\n\u003Cp>No need to install any other plugin, just install and use, no configuration needed.\u003C\u002Fp>\n\u003Cp>The plugin provides a seamless way to track, manage, and export all leads received through your forms, organizing them similarly to WordPress posts for easy access and management.\u003C\u002Fp>\n\u003Cp>Perfect for Websites and organizations looking to efficiently manage their form submissions and lead data in one central location.\u003C\u002Fp>\n\u003Ch4>Maspik – Spam Protection\u003C\u002Fh4>\n\u003Cp>For improved spam protection, check out our sister plugin \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcontact-forms-anti-spam\u002F\" rel=\"ugc\">Maspik\u003C\u002Fa>\u003Cbr \u002F>\nWe provide built-in spam protection and filtering. For enhanced spam prevention, we recommend using Maspik – an advanced anti-spam solution specifically designed for WordPress forms.\u003C\u002Fp>\n\u003Cp>With a 95%+ success rate, Maspik uses smart technology to block spam submissions while ensuring legitimate leads get through.\u003Cbr \u002F>\nThe plugin works instantly with no CAPTCHA required and includes features like smart blacklist system, IP blocking, and phone number validation.\u003C\u002Fp>\n\u003Cp>Compatible with all major form plugins including Elementor forms, you can set it up in just 2 minutes. \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcontact-forms-anti-spam\u002F\" rel=\"ugc\">Learn more about Maspik\u003C\u002Fa>\u003C\u002Fp>\n","Leads Collector, Collects forms entries from Elementor,Cf7,WPForms and more with export to CSV.",10000,183632,88,25,"2025-06-12T06:39:00.000Z","6.8.5","5.0","7.0",[56,20,57,58,59],"contact-form-db","form-collector","hello-plus","leads","https:\u002F\u002Flenix.co.il\u002Fplugin\u002Flenix-elementor-leads-addon\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flenix-elementor-leads-addon.2.0.0.zip",98,1,"2025-02-19 00:00:00","2026-04-16T10:56:18.058Z",{"slug":67,"name":68,"version":69,"author":70,"author_profile":71,"description":72,"short_description":73,"active_installs":74,"downloaded":75,"rating":76,"num_ratings":50,"last_updated":77,"tested_up_to":78,"requires_at_least":16,"requires_php":79,"tags":80,"homepage":79,"download_link":86,"security_score":87,"vuln_count":88,"unpatched_count":63,"last_vuln_date":89,"fetched_at":65},"zoho-crm-forms","Zoho CRM Lead Magnet","1.8.1.9","zohocrm","https:\u002F\u002Fprofiles.wordpress.org\u002Fzohocrm\u002F","\u003Cp>Websites are one of the most important sources of leads for your business. That means your CRM system should be well integrated with your website to contextually capture each and every visitor to turn them into a lead.\u003C\u002Fp>\n\u003Cp>Introducing the Zoho CRM Lead Magnet plugin for WordPress. This lets you create webforms, embed them in your website, and automatically capture leads directly into your CRM with zero attenuation.\u003C\u002Fp>\n\u003Cp>Not only is the integration easy to set-up but it’s also easy on your wallet.\u003C\u002Fp>\n\u003Ch3>Overall usage flow\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Install the Zoho CRM forms plugin from the WordPress plugin Marketplace.\u003C\u002Fli>\n\u003Cli>Create a form using Zoho CRM webforms or Contact form 7 plugin.\u003C\u002Fli>\n\u003Cli>Configure the settings for your form.\u003C\u002Fli>\n\u003Cli>Use the short code to embed the form.\u003C\u002Fli>\n\u003Cli>A prospect’s information is automatically captured upon entering your site. All that’s left is lead nurturing.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>For businesses that want to maximize their websites, the Zoho CRM Lead Capture plugin for WordPress CMS is an ideal solution.\u003C\u002Fp>\n\u003Ch3>Key features\u003C\u002Fh3>\n\u003Cp>Two forms, one solution\u003C\u002Fp>\n\u003Cp>This plugin works well with forms created using Zoho CRM and Contact 7 Form plugin.\u003C\u002Fp>\n\u003Cp>Light on code\u003C\u002Fp>\n\u003Cp>Creating a form is incredibly simple and the entire process of establishing an integration involves a few drag-drops and copy-pastes. Simply create, embed, and capture.\u003C\u002Fp>\n\u003Cp>Capture leads and more\u003C\u002Fp>\n\u003Cp>Using this plugin not only lets you capture leads but also additional custom modules you create for unique business needs.\u003C\u002Fp>\n\u003Cp>Capture. nurture. win.\u003C\u002Fp>\n\u003Cp>The Information entered in a website’s form is automatically pushed into Zoho CRM with zero attenuation. Now you never miss out on another lead.\u003C\u002Fp>\n\u003Cp>Light on your purse\u003C\u002Fp>\n\u003Cp>The plugin is absolutely free of cost. No hidden fees, no additional costs. All you need is a website hosted with WordPress and a Zoho CRM account.\u003C\u002Fp>\n\u003Cp>Special mail-tags support\u003C\u002Fp>\n\u003Col>\n\u003Cli>[_url]\u003C\u002Fli>\n\u003Cli>[_site_title]\u003C\u002Fli>\n\u003Cli>[_site_description]\u003C\u002Fli>\n\u003Cli>[_site_url]\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>For examples\u003Cbr \u002F>\n[hidden get-url default:_url]\u003Cbr \u002F>\n[hidden site_title default:_site_title]\u003Cbr \u002F>\n[hidden site-description default:_site_description]\u003Cbr \u002F>\n[hidden site-url default:_site_url]\u003C\u002Fp>\n\u003Cp>Please feel free to contact us for any further assistance: \u003Cstrong>support@zohoextensions.com\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>A vulnerability reporting program in “Bug Bounty”, to reach the community of researchers, is in place, which recognizes and rewards the work of security researchers. We are committed to working with the community to verify, reproduce, respond and implement appropriate solutions for the reported vulnerabilities.\u003Cbr \u002F>\nIf you happen to find any, please submit the issues at https:\u002F\u002Fbugbounty.zohocorp.com\u002F. If you want to directly report vulnerabilities to us, mail us at \u003Cstrong>security@zohocorp.com\u003C\u002Fstrong>.\u003C\u002Fp>\n","Websites are one of the most important sources of leads for your business.",3000,220483,62,"2026-01-28T07:18:00.000Z","6.9.0","",[81,82,83,84,85],"contact-form-7","lead-capture","lead-magnet","web-to-lead","zoho-crm-wordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fzoho-crm-forms.zip",67,6,"2026-01-15 00:00:00",{"slug":91,"name":92,"version":93,"author":94,"author_profile":95,"description":96,"short_description":97,"active_installs":98,"downloaded":99,"rating":49,"num_ratings":100,"last_updated":101,"tested_up_to":102,"requires_at_least":53,"requires_php":17,"tags":103,"homepage":106,"download_link":107,"security_score":108,"vuln_count":63,"unpatched_count":63,"last_vuln_date":109,"fetched_at":65},"salesforce-wordpress-to-lead","Brilliant Web-to-Lead for Salesforce","2.7.3.9","Nick Ciske","https:\u002F\u002Fprofiles.wordpress.org\u002Fnickciske\u002F","\u003Cp>Brilliant Web-to-Lead for Salesforce creates a solid integration between your WordPress install(s) and your \u003Ca href=\"http:\u002F\u002Fwww.salesforce.com\" rel=\"nofollow ugc\">Salesforce CRM\u003C\u002Fa> account! People can enter a contact form on your site, and the lead (or case) goes straight into Salesforce CRM: no more copy pasting lead info, no more missing leads: each and every one of them is in Salesforce.com for you to follow up.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cp>You can fully configure all the different settings for the form, and then use a shortcode to insert the form into your posts or pages, or you can use the widget that comes with the plugin and insert the form into your sidebar!\u003C\u002Fp>\n\u003Ch4>Previous contributors:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fjoostdevalk\u002F\" rel=\"nofollow ugc\">Joost de Valk\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fmoderntribe\u002F\" rel=\"nofollow ugc\">ModernTribe\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fdaddyanalytics.com\u002F\" rel=\"nofollow ugc\">Daddy Donkey Labs\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Filters and Hooks\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Note:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>These should be placed in your active theme functions.php or a functionality plugin.\u003C\u002Fli>\n\u003Cli>Never edit a plugin directly (unless you understand the implications of doing so).\u003C\u002Fli>\n\u003Cli>You can use Pluginception to create a custom plugin for these to make them independent of your theme: https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpluginception\u002F\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Filters\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>salesforce_w2l_api_url\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Change the API url the plugin posts data to. Passes the form type (lead or case)\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter( 'salesforce_w2l_api_url', 'my_w2l_api_url', 10, 2 );\n\nfunction my_w2l_api_url( $url, $form_type ){\n    return 'https:\u002F\u002Fmy.custom-api-url.com\u002Fsomething\u002F';\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>sfwp2l_validate_field\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Provide your own validation logic for each field.\u003C\u002Fp>\n\u003Cp>\u003Cem>An error array is passed in, along with the field name, submitted value, and field configuration (type, default value, required, etc).\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Here’s an example of blocking common free email providers:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter('sfwp2l_validate_field','block_non_biz_emails', 10, 4);\n\nfunction block_non_biz_emails( $error, $name, $val, $field ){\n\n    if( $name == 'email' ){\n\n        $non_biz_domains = array( 'gmail.com', 'yahoo.com', 'hotmail.com', 'aol.com' );\n\n        $domain = array_pop(explode('@', $val));\n\n        if( in_array( $domain, $non_biz_domains ) ){\n            $error['valid'] = false;\n            $error['message'] = 'Please enter a business email addresss.';\n        }\n\n    }\n\n    return $error;\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>You can add to the $non_biz_domains to block other providers as well.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>salesforce_w2l_form_html\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>HTML of the form before it’s returned to WordPress for display\u003C\u002Fp>\n\u003Cp>\u003Cstrong>salesforce_w2l_cc_user_from_name\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Change from name (user confirmation)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>salesforce_w2l_cc_user_from_email\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Change from email (user confirmation)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>salesforce_w2l_cc_admin_from_name\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Change from name (admin notification)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>salesforce_w2l_cc_admin_from_email\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Change from email (admin notification)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>salesforce_w2l_cc_admin_email_list\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Adding this code to your functions.php file will add 3 emails to the list. You can add as many as you want and each will get an admin notification email.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter('salesforce_w2l_cc_admin_email_list','salesforce_add_emails');\n\nfunction salesforce_add_emails( $emails ){\n\n\u002F\u002Funcomment line below to remove site admin\n\u002F\u002Funset($emails[0]);\n\n$emails[]='email@domain.com';\n$emails[]='email2@domain.com';\n$emails[]='email3@domain.com';\n\nreturn $emails;\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>salesforce_w2l_cc_user_email_content\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>salesforce_w2l_cc_admin_email_content\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Allows you to filter (append, prepend, modify) the email message content sent to the user or admin(s).\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter('salesforce_w2l_cc_user_email_content','salesforce_filter_user_message', 10, 1);\n\nfunction salesforce_filter_user_message( $message ){\n\n    $message = 'Before the user message' . \"\\r\\n\\r\\n\" . $message . \"\\r\\n\\r\\n\" . 'After the user message';\n\n    return $message;\n\n}\n\nadd_filter('salesforce_w2l_cc_admin_email_content','salesforce_filter_admin_message', 10, 1);\n\nfunction salesforce_filter_admin_message( $message ){\n\n    $message = 'Before the admin message' . \"\\r\\n\\r\\n\" . $message . \"\\r\\n\\r\\n\" . 'After the admin message';\n\n    return $message;\n\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>salesforce_w2l_cc_admin_replyto_email\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Filter the Reply-To email header (e.g. to allow replies to go to the form submitter)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>salesforce_w2l_returl\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>salesforce_w2l_returl_{Form ID}\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Allows you to filter the value of a field before it is output to dynamically populate it with a value, auto set it based on another value, etc.\u003C\u002Fp>\n\u003Cp>Examples:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002F\u002F Filter Return\u002FSuccess URL on a specific form\n\u002F\u002F salesforce_w2l_returl_{Form ID}\nadd_filter( 'salesforce_w2l_returl_1_tester', 'salesforce_w2l_returl_1_tester_example', 10, 1 );\nfunction salesforce_w2l_returl_1_tester_example(  $returl ){\n\n    return 'http:\u002F\u002F123.com';\n\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>salesforce_w2l_success_message\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>salesforce_w2l_success_message_{Form ID}\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Allows you to filter the contents of the success message before it is output to dynamically populate it with a value, auto set it based on another value, etc.\u003C\u002Fp>\n\u003Cp>Examples:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002F\u002F Filter Success Message on a specific form\n\u002F\u002F salesforce_w2l_success_message_{Form ID}\nadd_filter( 'salesforce_w2l_success_message_1_tester', 'salesforce_w2l_success_message_1_tester_example', 10, 1 );\nfunction salesforce_w2l_success_message_1_tester_example(  $success ){\n\n    return 'Testing 123';\n\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>salesforce_w2l_field_value\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>salesforce_w2l_field_value_{Form ID}_{Field Name}\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Allows you to filter the value of a field before it is output to dynamically populate it with a value, auto set it based on another value, etc.\u003C\u002Fp>\n\u003Cp>Note that the second filter requires you to replace {Form ID} and {Field Name} to be replaced with the relevant form id and field name.\u003C\u002Fp>\n\u003Cp>If you need access to the field or form settings in your filter you can use:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>$field = salesforce_get_field( $field_name, $form_id );\n\n$form = salesforce_get_form( $form_id );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Examples:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002F\u002F Pre-check a checkbox\n\nadd_filter( 'salesforce_w2l_field_value', 'salesforce_w2l_field_value_precheck_example', 10, 3 );\n\nfunction salesforce_w2l_field_value_precheck_example( $val, $field, $form ){\n\n    $form_id = 1; \u002F\u002F form id to act upon\n    $field_name = 'checkboxfield__c'; \u002F\u002F API Name of the field you want to auto check\n\n    if( $form == $form_id && $field_name == $field && ! $_POST )\n        return 1; \u002F\u002F or whatever the value of your checkbox is\n\n    return $val;\n\n}\n\n\n\n\u002F\u002F Store HTTP referrer in a field (this is not 100% reliable as the browser sends this value to the server)\n\nadd_filter( 'salesforce_w2l_field_value', 'salesforce_w2l_field_value_referrer_example', 10, 3 );\n\nfunction salesforce_w2l_field_value_referrer_example( $val, $field, $form ){\n\n    $form_id = 1; \u002F\u002F form id to act upon\n    $field_name = 'referrer__c'; \u002F\u002F API Name of the field you want to autofill\n\n    if( $form == $form_id && $field_name == $field ){\n        if( isset( $_SERVER['HTTP_REFERER'] ) ){\n            return $_SERVER['HTTP_REFERER'];\n        }\n    }\n\n    return $val;\n\n}\n\n\n\n\u002F\u002F Autofill fields based on thew query string (using Google Analytics tracking variables in this example)\n\nadd_filter( 'salesforce_w2l_field_value', 'salesforce_w2l_field_value_querystring_example', 10, 3 );\n\nfunction salesforce_w2l_field_value_querystring_example( $val, $field, $form ){\n\n    $form_id = 1; \u002F\u002F form id to act upon\n    $field_name = 'source__c'; \u002F\u002F API Name of the field you want to autofill\n    $qs_var = 'source'; \u002F\u002F e.g. ?source=foo\n\n    if( $form == $form_id && $field_name == $field ){\n        if( isset( $_GET[ $qs_var ] ) ){\n            return $_GET[ $qs_var ];\n        }\n    }\n\n    return $val;\n\n}\n\n\n\n\u002F\u002F Autofill a user's country based on IP\n\nadd_filter( 'salesforce_w2l_field_value', 'salesforce_w2l_field_value_geoip_example', 10, 3 );\n\nfunction salesforce_w2l_field_value_geoip_example( $val, $field, $form ){\n\n    \u002F\u002F Based on this plugin: https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgeoip-detect\u002F\n    \u002F\u002F Adjust this code to the one used by your geo detection plugin\n\n    if( !function_exists( 'geoip_detect2_get_info_from_current_ip' ) ) return;\n\n    $form_id = 1; \u002F\u002F form id to act upon\n    $field_name = 'country__c'; \u002F\u002F API Name of the field you want to autofill\n\n    if( $form == $form_id && $field_name == $field ){\n\n        $userInfo = geoip_detect2_get_info_from_current_ip();\n        \u002F\u002F$val = $userInfo->country->isoCode; \u002F\u002F e.g. US\n        $val = $userInfo->country->name; \u002F\u002F e.g. United States\n\n    }\n\n    return $val;\n\n}\n\n\n\n\u002F\u002F Autofill a date\n\u002F\u002F https:\u002F\u002Fcodex.wordpress.org\u002FFunction_Reference\u002Fcurrent_time\n\u002F\u002F http:\u002F\u002Fphp.net\u002Fmanual\u002Fen\u002Ffunction.date.php\n\nadd_filter( 'salesforce_w2l_field_value', 'salesforce_w2l_field_value_date_example', 10, 3 );\n\nfunction salesforce_w2l_field_value_date_example( $val, $field, $form ){\n\n    $form_id = 1; \u002F\u002F form id to act upon\n    $field_name = 'mydatefield__c'; \u002F\u002F API Name of the field you want to auto check\n\n    if( $form == $form_id && $field_name == $field && ! $_POST )\n        return current_time('Y-m-d'); \u002F\u002F or whatever date format you want\n\n    return $val;\n\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>salesforce_w2l_form_action\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Allows you to remove the form action.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002F\u002F Remove Form Action\nadd_filter( 'salesforce_w2l_form_action', 'salesforce_w2l_form_action_example', 10, 1 );\nfunction salesforce_w2l_form_action_example(  $action ){\n\n    return '';\n\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>salesforce_w2l_lead_source\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Allows you to alter the lead source (per form or globally).\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002F\u002F Alter Lead Source\nadd_filter( 'salesforce_w2l_lead_source', 'salesforce_w2l_lead_source_example', 10, 2 );\nfunction salesforce_w2l_lead_source_example(  $lead_source, $form_id ){\n\n    if( $form_id == 1 )\n        return 'Example Lead Source for Form #1 on page id #'.get_the_id();\n\n    return $lead_source;\n\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>salesforce_w2l_post_args\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Allows filtering of the \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FFunction_Reference\u002Fwp_remote_post\" rel=\"nofollow ugc\">wp_remote_post\u003C\u002Fa> arguments (e.g. extend the timeout, increase redirect limit, etc).\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter( 'salesforce_w2l_post_args', 'salesforce_w2l_post_args_example' );\n\nfunction salesforce_w2l_post_args_example( $args ){\n\n    $args['timeout'] = 10; \u002F\u002F http timeout in seconds\n    return $args;\n\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>salesforce_w2l_post_data\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Allows filtering of the post data before it is sent to SalesForce.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter( 'salesforce_w2l_post_data', 'salesforce_w2l_post_data_example', 10, 3 );\n\nfunction salesforce_w2l_post_data_example( $post, $form_id, $form_type ){\n    error_log( 'POST ARGS = '.print_r( $post, 1 ) );\n    $post['test'] = 'test';\n    return $post;\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>salesforce_w2l_show_admin_nag_message\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Suppress the organization id missing nag message (return false).\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter( 'salesforce_w2l_show_admin_nag_message', '__return_false', 10, 1 );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Actions\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>salesforce_w2l_before_submit\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Allows you to do something (read only) with the post data before it’s submitted to SalesForce.\u003C\u002Fp>\n\u003Cp>e.g. Send it to another API, log it to a database, etc.\u003C\u002Fp>\n\u003Cp>If you need to change the data, use the \u003Cem>salesforce_w2l_post_data\u003C\u002Fem> filter.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_action('salesforce_w2l_before_submit', 'salesforce_w2l_before_submit_example', 10, 3 );\n\nfunction salesforce_w2l_before_submit_example( $post, $form_id, $form_type ){\n    error_log( 'BEFORE SUBMIT '.print_r($post,1) );\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>salesforce_w2l_error_submit\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Allows you to do something (read only) with the post data when there is an error submitting to SalesForce.\u003C\u002Fp>\n\u003Cp>e.g. Notify someone via email, log it somewhere, etc.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_action('salesforce_w2l_error_submit', 'salesforce_w2l_error_submit_example', 10, 4 );\n\nfunction salesforce_w2l_error_submit_example( $result, $post, $form_id, $form_type ){\n    error_log( 'ERROR SUBMIT ' . print_r($result,1) );\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>salesforce_w2l_after_submit\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Allows you to do something (read only) with the post data after it’s submitted to SalesForce.\u003C\u002Fp>\n\u003Cp>e.g. Send it to another API, log it to a database, etc.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_action('salesforce_w2l_after_submit', 'salesforce_w2l_after_submit_example', 10, 3 );\n\nfunction salesforce_w2l_after_submit_example( $post, $form_id, $form_type ){\n    error_log( 'AFTER SUBMIT '.print_r($post,1) );\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>salesforce_w2l_get_prefixed_inputs\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Allows you to add to or change the list of fields that are auto prefixed by the plugin to avoid collisions with WP Query reserved request parameters\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter('salesforce_w2l_get_prefixed_inputs', 'salesforce_w2l_get_prefixed_inputs_example', 10, 1 );\n\nfunction salesforce_w2l_get_prefixed_inputs_example( $fields ){\n    $fields[] = 'new_field_name';\n    return $fields;\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>salesforce_w2l_input_name_prefix\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Allows you to change the default field name prefix (\u003Ccode>_sf\u003C\u002Fcode>) used to avoid collisions with WP Query reserved request parameters.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter('salesforce_w2l_input_name_prefix', 'salesforce_w2l_input_name_prefix_example', 10, 1 );\n\nfunction salesforce_w2l_input_name_prefix_example( $prefix ){\n    return 'sfwp2lprefix_';\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Brilliant Web-to-Lead for Salesforce creates a solid integration between your WordPress install(s) and your Salesforce.com account!",2000,137844,38,"2022-02-24T19:37:00.000Z","5.9.13",[104,19,105,20,84],"case-to-lead","contactform","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsalesforce-wordpress-to-lead\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsalesforce-wordpress-to-lead.2.7.3.9.zip",63,"2025-09-05 00:00:00",{"slug":111,"name":112,"version":113,"author":111,"author_profile":114,"description":115,"short_description":116,"active_installs":117,"downloaded":118,"rating":11,"num_ratings":119,"last_updated":120,"tested_up_to":121,"requires_at_least":53,"requires_php":122,"tags":123,"homepage":126,"download_link":127,"security_score":128,"vuln_count":63,"unpatched_count":13,"last_vuln_date":129,"fetched_at":65},"leadsnap","LeadSnap","1.25","https:\u002F\u002Fprofiles.wordpress.org\u002Fleadsnap\u002F","\u003Cp>This is the official plugin for LeadSnap. This plugin creates the connection between WordPress and your LeadSnap account. Form submissions are instantly available and ready to  leverage all the powerful features of our lead management system within the LeadSnap system. For more information on features, plans and more check out \u003Ca href=\"https:\u002F\u002Fwww.leadsnap.com\u002F\" rel=\"nofollow ugc\">leadsnap.com\u003C\u002Fa>.\u003C\u002Fp>\n","Save the leads to our lead management system CRM generated by Contact Form 7",1000,6541,4,"2023-03-09T09:56:00.000Z","6.1.10","5.2.4",[124,19,20,59,125],"cf7","management","https:\u002F\u002Fwww.leadsnap.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fleadsnap.1.25.zip",83,"2023-03-10 00:00:00",{"slug":131,"name":132,"version":133,"author":134,"author_profile":135,"description":136,"short_description":137,"active_installs":138,"downloaded":139,"rating":140,"num_ratings":141,"last_updated":142,"tested_up_to":143,"requires_at_least":53,"requires_php":122,"tags":144,"homepage":147,"download_link":148,"security_score":149,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":65},"wp-zoho-crm","Zoho Integration for WordPress","2.2","Smackcoders Inc.,","https:\u002F\u002Fprofiles.wordpress.org\u002Fsmackcoders\u002F","\u003Cp>Unlock the power of Zoho Integration for WordPress, your ultimate solution for capturing leads and streamlining user registration seamlessly. This advanced plugin connects your WordPress website with Zoho CRM, ensuring effortless lead generation and contact management.\u003C\u002Fp>\n\u003Ch3>Key Features:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Effortless Integration:\u003C\u002Fstrong> Say goodbye to manual work and coding. Zoho Integration for WordPress simplifies the integration process.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User-Friendly Interface:\u003C\u002Fstrong> Our intuitive interface makes setup a breeze, no HTML knowledge required.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Endless Customization:\u003C\u002Fstrong> Create, add, and edit fields at any time to tailor your forms to your exact needs.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Dynamic Form Generation:\u003C\u002Fstrong> Generate web forms on the fly, capturing your website’s visitors as high-potential leads in Zoho CRM.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcode Integration:\u003C\u002Fstrong> Seamlessly embed forms with a shortcode, enhancing user engagement.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Fetch Zoho CRM Fields:\u003C\u002Fstrong> Fetch CRM Zoho lead fields directly into WordPress to create a customized form.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Field Customization:\u003C\u002Fstrong> Enable\u002Fdisable fields to include in the form or not, ensuring complete control.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Widget Integration:\u003C\u002Fstrong> Use a separate shortcode to integrate forms as widgets site-wide, expanding your reach.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Sync WP Members:\u003C\u002Fstrong> Capture and sync newly registered WP members to Zoho CRM contacts, ensuring a centralized database for your leads.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Part of WP Leads Builder for Any CRM:\u003C\u002Fstrong> Zoho Integration is now part of the powerful \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-leads-builder-any-crm\" rel=\"ugc\">WP Leads Builder For Any CRM\u003C\u002Fa>, offering even more features and CRM integrations.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Elevate your lead generation game with Zoho Integration for WordPress – the all-in-one solution for capturing, managing, and nurturing leads effortlessly. Unleash the true potential of your WordPress website today.\u003C\u002Fp>\n\u003Cp>To upgrade for \u003Ca href=\"https:\u002F\u002Fwww.smackcoders.com\u002Fwp-leads-builder-any-crm-pro.html\" rel=\"nofollow ugc\">Leads Builder For CRM Pro\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Other Useful Plugins & Addons By Smackcoders\u003C\u002Fh4>\n\u003Cp>To \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-ultimate-csv-importer\u002F\" rel=\"ugc\">Import and Export WordPress Data as CSV or XML\u003C\u002Fa>\u003Cbr \u002F>\nand \u003Ca href=\"https:\u002F\u002Fwww.smackcoders.com\u002Fwp-ultimate-csv-importer-pro.html\" rel=\"nofollow ugc\">for premium version of the plugin, you can get it here\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>The Leads Builder for WordPress to capture your webforms as leads to one of the top ranking open source CRM, install the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-leads-builder-any-crm\u002F\" rel=\"ugc\">WordPress Lead Form Data Collection to CRM\u003C\u002Fa> Plugin. Install one of the CRM of your choice with the additional add-ons listed below and keep both parent plugin and CRM addon activated.\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-salesforce\u002F\" rel=\"ugc\">Salesforce\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-freshsales\u002F\" rel=\"ugc\">Freshsales\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-tiger\u002F\" rel=\"ugc\">Vtiger CRM\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>To know more about the premium bundled version, visit \u003Ca href=\"https:\u002F\u002Fwww.smackcoders.com\u002Fwp-leads-builder-any-crm-pro.html\" rel=\"nofollow ugc\">WordPress Lead Form Data Collection to CRM with unlimited features\u003C\u002Fa>\u003C\u002Fp>\n","Elevate Your Leads: Automate with Smackcoders' Zoho WordPress Integration. An easy, automated and advanced Zoho Wordpress web form generator to c …",200,27779,58,9,"2025-03-06T06:12:00.000Z","6.7.5",[19,20,82,145,146],"zoho-crm","zoho-wordpress","https:\u002F\u002Fwww.smackcoders.com\u002Fwp-leads-builder-any-crm-pro.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-zoho-crm.2.2.zip",92,{"attackSurface":151,"codeSignals":227,"taintFlows":322,"riskAssessment":380,"analyzedAt":389},{"hooks":152,"ajaxHandlers":212,"restRoutes":223,"shortcodes":224,"cronEvents":225,"entryPointCount":226,"unprotectedCount":226},[153,159,164,167,169,172,175,179,181,184,187,190,193,196,199,202,205,207,210],{"type":154,"name":155,"callback":156,"file":157,"line":158},"action","admin_init","closure","admin\\class-wpform-to-any-api-admin.php",213,{"type":154,"name":160,"callback":161,"file":162,"line":163},"plugins_loaded","anonymous","includes\\class-wpform-to-any-api.php",148,{"type":154,"name":165,"callback":161,"file":162,"line":166},"admin_enqueue_scripts",163,{"type":154,"name":165,"callback":161,"file":162,"line":168},164,{"type":154,"name":170,"callback":161,"file":162,"line":171},"admin_notices",166,{"type":154,"name":173,"callback":161,"file":162,"line":174},"admin_menu",167,{"type":176,"name":177,"callback":161,"file":162,"line":178},"filter","plugin_action_links",168,{"type":154,"name":173,"callback":161,"file":162,"line":180},169,{"type":154,"name":182,"callback":161,"file":162,"line":183},"init",170,{"type":154,"name":185,"callback":161,"file":162,"line":186},"add_meta_boxes",171,{"type":154,"name":188,"callback":161,"file":162,"line":189},"save_post",172,{"type":176,"name":191,"callback":161,"file":162,"line":192},"manage_wpform_api_posts_columns",175,{"type":154,"name":194,"callback":161,"file":162,"line":195},"manage_wpform_api_posts_custom_column",176,{"type":176,"name":197,"callback":161,"file":162,"line":198},"manage_edit-wpform_api_sortable_columns",177,{"type":154,"name":200,"callback":161,"file":162,"line":201},"wpforms_process_complete",178,{"type":176,"name":203,"callback":161,"file":162,"line":204},"plugin_row_meta",180,{"type":154,"name":160,"callback":161,"file":162,"line":206},181,{"type":176,"name":208,"callback":161,"file":162,"line":209},"manage_edit-wpform_api_columns",182,{"type":154,"name":194,"callback":161,"file":162,"line":211},183,[213,217,220],{"action":214,"nopriv":215,"callback":161,"hasNonce":215,"hasCapCheck":215,"file":162,"line":216},"wpformapi_get_form_field",false,173,{"action":218,"nopriv":215,"callback":161,"hasNonce":215,"hasCapCheck":215,"file":162,"line":219},"wpformapi_bulk_log_delete",174,{"action":221,"nopriv":215,"callback":161,"hasNonce":215,"hasCapCheck":215,"file":162,"line":222},"wpformstoanyapi_toggle_status",184,[],[],[],3,{"dangerousFunctions":228,"sqlUsage":229,"outputEscaping":239,"fileOperations":13,"externalRequests":320,"nonceChecks":119,"capabilityChecks":320,"bundledLibraries":321},[],{"prepared":119,"raw":226,"locations":230},[231,234,237],{"file":157,"line":232,"context":233},419,"$wpdb->query() with variable interpolation",{"file":157,"line":235,"context":236},730,"$wpdb->get_var() with variable interpolation",{"file":157,"line":238,"context":233},731,{"escaped":240,"rawEcho":241,"locations":242},106,39,[243,246,248,250,252,254,256,259,261,263,265,267,269,271,273,275,277,279,281,283,285,287,289,291,293,295,297,299,301,303,305,307,309,311,313,314,315,317,318],{"file":157,"line":244,"context":245},118,"raw output",{"file":157,"line":247,"context":245},126,{"file":157,"line":249,"context":245},342,{"file":157,"line":251,"context":245},377,{"file":157,"line":253,"context":245},392,{"file":157,"line":255,"context":245},754,{"file":257,"line":258,"context":245},"admin\\partials\\wpform-to-any-api-admin-display-docs.php",220,{"file":257,"line":260,"context":245},223,{"file":257,"line":262,"context":245},225,{"file":257,"line":264,"context":245},226,{"file":257,"line":266,"context":245},227,{"file":257,"line":268,"context":245},228,{"file":257,"line":270,"context":245},230,{"file":257,"line":272,"context":245},232,{"file":257,"line":274,"context":245},238,{"file":257,"line":276,"context":245},241,{"file":257,"line":278,"context":245},243,{"file":257,"line":280,"context":245},244,{"file":257,"line":282,"context":245},245,{"file":257,"line":284,"context":245},246,{"file":257,"line":286,"context":245},248,{"file":257,"line":288,"context":245},250,{"file":257,"line":290,"context":245},257,{"file":257,"line":292,"context":245},260,{"file":257,"line":294,"context":245},262,{"file":257,"line":296,"context":245},263,{"file":257,"line":298,"context":245},264,{"file":257,"line":300,"context":245},265,{"file":257,"line":302,"context":245},267,{"file":257,"line":304,"context":245},269,{"file":306,"line":206,"context":245},"admin\\partials\\wpform-to-any-api-admin-display.php",{"file":306,"line":308,"context":245},188,{"file":306,"line":310,"context":245},198,{"file":306,"line":312,"context":245},205,{"file":306,"line":158,"context":245},{"file":306,"line":258,"context":245},{"file":306,"line":316,"context":245},221,{"file":306,"line":270,"context":245},{"file":319,"line":288,"context":245},"includes\\class-wpform-to-any-api-log-table.php",2,[],[323,341,350,362,371],{"entryPoint":324,"graph":325,"unsanitizedCount":13,"severity":340},"wpformapi_get_form_field (admin\\class-wpform-to-any-api-admin.php:336)",{"nodes":326,"edges":337},[327,332],{"id":328,"type":329,"label":330,"file":157,"line":331},"n0","source","$_POST",349,{"id":333,"type":334,"label":335,"file":157,"line":251,"wp_function":336},"n1","sink","echo() [XSS]","echo",[338],{"from":328,"to":333,"sanitized":339},true,"low",{"entryPoint":342,"graph":343,"unsanitizedCount":13,"severity":340},"\u003Cclass-wpform-to-any-api-admin> (admin\\class-wpform-to-any-api-admin.php:0)",{"nodes":344,"edges":348},[345,347],{"id":328,"type":329,"label":346,"file":157,"line":331},"$_POST (x3)",{"id":333,"type":334,"label":335,"file":157,"line":251,"wp_function":336},[349],{"from":328,"to":333,"sanitized":339},{"entryPoint":351,"graph":352,"unsanitizedCount":13,"severity":340},"default_logs_data (includes\\class-wpform-to-any-api-log-table.php:100)",{"nodes":353,"edges":360},[354,356],{"id":328,"type":329,"label":355,"file":319,"line":244},"$_GET",{"id":333,"type":334,"label":357,"file":319,"line":358,"wp_function":359},"get_results() [SQLi]",142,"get_results",[361],{"from":328,"to":333,"sanitized":339},{"entryPoint":363,"graph":364,"unsanitizedCount":13,"severity":340},"get_logs_data (includes\\class-wpform-to-any-api-log-table.php:155)",{"nodes":365,"edges":369},[366,368],{"id":328,"type":329,"label":355,"file":319,"line":367},159,{"id":333,"type":334,"label":357,"file":319,"line":195,"wp_function":359},[370],{"from":328,"to":333,"sanitized":339},{"entryPoint":372,"graph":373,"unsanitizedCount":13,"severity":340},"\u003Cclass-wpform-to-any-api-log-table> (includes\\class-wpform-to-any-api-log-table.php:0)",{"nodes":374,"edges":378},[375,377],{"id":328,"type":329,"label":376,"file":319,"line":244},"$_GET (x2)",{"id":333,"type":334,"label":357,"file":319,"line":358,"wp_function":359},[379],{"from":328,"to":333,"sanitized":339},{"summary":381,"deductions":382},"The \"connect-wpform-to-any-api\" plugin v1.0.1 exhibits a concerning security posture primarily due to its unprotected AJAX endpoints. While the absence of known CVEs and a clean taint analysis are positive indicators, the presence of three AJAX handlers without any authentication checks creates a significant attack surface. This means any user, regardless of their logged-in status or capabilities, can trigger these actions, potentially leading to unauthorized operations or information disclosure if the underlying logic is not robust.\n\nDespite a good percentage of SQL queries using prepared statements and a reasonable rate of output escaping, the critical flaw lies in the accessibility of the AJAX endpoints. The plugin does implement nonce and capability checks elsewhere, which is a positive sign of some security awareness. However, the direct vulnerability in the AJAX handlers outweighs these strengths. The lack of a vulnerability history is good, but it doesn't negate the immediate risks identified in the static analysis. The plugin needs immediate attention to secure its entry points.\n\nIn conclusion, while the plugin doesn't suffer from known historical vulnerabilities or severe taint issues, the unprotected AJAX handlers represent a substantial security weakness. The attacker surface is small but entirely exposed. Addressing these unprotected endpoints is paramount to improving the plugin's overall security. The current state suggests a lack of thorough security review for exposed functionalities.",[383,386],{"reason":384,"points":385},"AJAX handlers without authentication checks",15,{"reason":387,"points":388},"High percentage of unprotected entry points",5,"2026-03-16T21:18:59.870Z",{"wat":391,"direct":401},{"assetPaths":392,"generatorPatterns":395,"scriptPaths":396,"versionParams":398},[393,394],"\u002Fwp-content\u002Fplugins\u002Fconnect-wpform-to-any-api\u002Fadmin\u002Fcss\u002Fwpform-to-any-api-admin.css","\u002Fwp-content\u002Fplugins\u002Fconnect-wpform-to-any-api\u002Fadmin\u002Fjs\u002Fwpform-to-any-api-admin.js",[],[397],"admin\u002Fjs\u002Fwpform-to-any-api-admin.js",[399,400],"connect-wpform-to-any-api\u002Fadmin\u002Fcss\u002Fwpform-to-any-api-admin.css?ver=","connect-wpform-to-any-api\u002Fadmin\u002Fjs\u002Fwpform-to-any-api-admin.js?ver=",{"cssClasses":402,"htmlComments":404,"htmlAttributes":405,"restEndpoints":406,"jsGlobals":407,"shortcodeOutput":409},[403],"wpform_api",[],[],[],[408],"ajax_object",[],{"error":339,"url":411,"statusCode":412,"statusMessage":413,"message":413},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fconnect-wpform-to-any-api\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":415,"versions":416},8,[417,422,429,436,443,450,457,464],{"version":6,"download_url":25,"svn_tag_url":418,"released_at":26,"has_diff":215,"diff_files_changed":419,"diff_lines":26,"trac_diff_url":420,"vulnerabilities":421,"is_current":339},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fconnect-wpform-to-any-api\u002Ftags\u002F1.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fconnect-wpform-to-any-api%2Ftags%2F1.0.0&new_path=%2Fconnect-wpform-to-any-api%2Ftags%2F1.0.1",[],{"version":423,"download_url":424,"svn_tag_url":425,"released_at":26,"has_diff":215,"diff_files_changed":426,"diff_lines":26,"trac_diff_url":427,"vulnerabilities":428,"is_current":215},"1.0.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconnect-wpform-to-any-api.1.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fconnect-wpform-to-any-api\u002Ftags\u002F1.0.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fconnect-wpform-to-any-api%2Ftags%2F0.0.7&new_path=%2Fconnect-wpform-to-any-api%2Ftags%2F1.0.0",[],{"version":430,"download_url":431,"svn_tag_url":432,"released_at":26,"has_diff":215,"diff_files_changed":433,"diff_lines":26,"trac_diff_url":434,"vulnerabilities":435,"is_current":215},"0.0.7","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconnect-wpform-to-any-api.0.0.7.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fconnect-wpform-to-any-api\u002Ftags\u002F0.0.7\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fconnect-wpform-to-any-api%2Ftags%2F0.0.6&new_path=%2Fconnect-wpform-to-any-api%2Ftags%2F0.0.7",[],{"version":437,"download_url":438,"svn_tag_url":439,"released_at":26,"has_diff":215,"diff_files_changed":440,"diff_lines":26,"trac_diff_url":441,"vulnerabilities":442,"is_current":215},"0.0.6","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconnect-wpform-to-any-api.0.0.6.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fconnect-wpform-to-any-api\u002Ftags\u002F0.0.6\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fconnect-wpform-to-any-api%2Ftags%2F0.0.5&new_path=%2Fconnect-wpform-to-any-api%2Ftags%2F0.0.6",[],{"version":444,"download_url":445,"svn_tag_url":446,"released_at":26,"has_diff":215,"diff_files_changed":447,"diff_lines":26,"trac_diff_url":448,"vulnerabilities":449,"is_current":215},"0.0.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconnect-wpform-to-any-api.0.0.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fconnect-wpform-to-any-api\u002Ftags\u002F0.0.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fconnect-wpform-to-any-api%2Ftags%2F0.0.4&new_path=%2Fconnect-wpform-to-any-api%2Ftags%2F0.0.5",[],{"version":451,"download_url":452,"svn_tag_url":453,"released_at":26,"has_diff":215,"diff_files_changed":454,"diff_lines":26,"trac_diff_url":455,"vulnerabilities":456,"is_current":215},"0.0.4","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconnect-wpform-to-any-api.0.0.4.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fconnect-wpform-to-any-api\u002Ftags\u002F0.0.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fconnect-wpform-to-any-api%2Ftags%2F0.0.3&new_path=%2Fconnect-wpform-to-any-api%2Ftags%2F0.0.4",[],{"version":458,"download_url":459,"svn_tag_url":460,"released_at":26,"has_diff":215,"diff_files_changed":461,"diff_lines":26,"trac_diff_url":462,"vulnerabilities":463,"is_current":215},"0.0.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconnect-wpform-to-any-api.0.0.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fconnect-wpform-to-any-api\u002Ftags\u002F0.0.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fconnect-wpform-to-any-api%2Ftags%2F0.0.1&new_path=%2Fconnect-wpform-to-any-api%2Ftags%2F0.0.3",[],{"version":465,"download_url":466,"svn_tag_url":467,"released_at":26,"has_diff":215,"diff_files_changed":468,"diff_lines":26,"trac_diff_url":26,"vulnerabilities":469,"is_current":215},"0.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconnect-wpform-to-any-api.0.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fconnect-wpform-to-any-api\u002Ftags\u002F0.0.1\u002F",[],[]]