[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faM-0JB9ZLqjFQrP1Bnniz7Vnr93_TIyi-Ss921TjIKw":3,"$fYroBxbfs-GZssdAZKbXYclIWc9vXmV1HDX9r3dUII8w":274,"$fzfLRWjcNwZbZTldLJ-g4jx2iPtZTw6iv3s0YELtpy-M":278},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":17,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":30,"crawl_stats":26,"alternatives":38,"analysis":128,"fingerprints":232},"connectsphere","ConnectSphere","1.2.0","Thomas Lloancy","https:\u002F\u002Fprofiles.wordpress.org\u002Ftlloancy\u002F","\u003Cp>ConnectSphere transforms your online courses with video, audio, chat, and screen-sharing sessions via WebRTC. It features a modern, secure, and optimized interface for up to 100 participants. Configure your STUN\u002FTURN servers for optimal connectivity. Upgrade to Premium for advanced features!\u003C\u002Fp>\n","ConnectSphere transforms your online courses with video, audio, chat, and screen-sharing sessions via WebRTC. With proper configured Janus server.",10,364,0,"2026-04-13T23:59:00.000Z","6.9.4","5.0","",[19,20,21,22,23],"chat","live-streaming","online-courses","video","webrtc","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconnectsphere.1.2.0.zip",100,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":34,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"tlloancy",11,150,98,30,93,"2026-05-20T01:33:56.984Z",[39,58,78,94,111],{"slug":40,"name":41,"version":6,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":35,"downloaded":46,"rating":25,"num_ratings":47,"last_updated":48,"tested_up_to":15,"requires_at_least":49,"requires_php":50,"tags":51,"homepage":56,"download_link":57,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"castio-live","Castio.live – Live Streaming Plugin for WordPress (HLS) + Real-Time Chat","proxymis","https:\u002F\u002Fprofiles.wordpress.org\u002Fproxymis\u002F","\u003Cp>Castio.live is a \u003Cstrong>live streaming plugin for WordPress\u003C\u002Fstrong> that lets you go live directly from your admin — no OBS, no RTMP, no external platforms.\u003C\u002Fp>\n\u003Cp>Stream video, chat with your audience in real time, and monetize your content with Stripe or PayPal — all from your own WordPress site.\u003C\u002Fp>\n\u003Cp>Perfect for creators, educators, events, and premium content platforms.\u003C\u002Fp>\n\u003Cp>Castio.live is one of the few WordPress plugins that enables browser-based live streaming without OBS or RTMP.\u003C\u002Fp>\n\u003Ch3>At a Glance\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Live streaming plugin for WordPress (HLS)\u003C\u002Fli>\n\u003Cli>Go live directly from WordPress Admin\u003C\u002Fli>\n\u003Cli>Built-in real-time chat\u003C\u002Fli>\n\u003Cli>No OBS, no RTMP, no external platform\u003C\u002Fli>\n\u003Cli>Paywall: Stripe & PayPal\u003C\u002Fli>\n\u003Cli>Gutenberg blocks for easy embedding\u003C\u002Fli>\n\u003Cli>Auto-generated viewer pages\u003C\u002Fli>\n\u003Cli>Works on shared hosting and VPS\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Ffgw2u0fmAME?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>\u003Cstrong>Start streaming in minutes\u003C\u002Fstrong>\u003Cbr \u002F>\nInstall the plugin, click “Start Streaming” in WordPress Admin, and instantly share your live viewer page with your audience.\u003C\u002Fp>\n\u003Cp>No streaming SaaS. No vendor lock-in. Full control over your content.\u003C\u002Fp>\n\u003Ch3>Live Streaming from WordPress Admin\u003C\u002Fh3>\n\u003Cp>Castio.live adds a dedicated streaming interface directly inside the WordPress Admin area.\u003C\u002Fp>\n\u003Cp>You can:\u003Cbr \u002F>\n– Select your camera and microphone\u003Cbr \u002F>\n– Preview your stream before going live\u003Cbr \u002F>\n– Start and stop streaming with a single click\u003C\u002Fp>\n\u003Cp>Supported capture technologies:\u003Cbr \u002F>\n– MediaDevices API\u003Cbr \u002F>\n– MediaRecorder\u003Cbr \u002F>\n– WebCodecs (when available, for lower latency)\u003C\u002Fp>\n\u003Cp>Supported streaming browsers:\u003Cbr \u002F>\n– Chrome or Edge (desktop)\u003Cbr \u002F>\n– Chrome (Android)\u003C\u002Fp>\n\u003Cp>Viewer playback works on all modern browsers, including mobile devices.\u003C\u002Fp>\n\u003Ch3>Viewer Page (Auto-Generated)\u003C\u002Fh3>\n\u003Cp>For each live stream, Castio.live can automatically generate a viewer page.\u003C\u002Fp>\n\u003Cp>Viewer page features:\u003Cbr \u002F>\n– HLS video playback (native HLS on Safari, hls.js on other browsers)\u003Cbr \u002F>\n– Clean and lightweight interface\u003Cbr \u002F>\n– Mobile-friendly layout\u003Cbr \u002F>\n– Optional live chat panel\u003C\u002Fp>\n\u003Cp>The viewer page URL can be:\u003Cbr \u002F>\n– Public\u003Cbr \u002F>\n– Shared privately\u003Cbr \u002F>\n– Embedded into other pages\u003Cbr \u002F>\n– Protected via access control options\u003C\u002Fp>\n\u003Ch3>Monetize Your Live Streams\u003C\u002Fh3>\n\u003Cp>Castio.live includes built-in monetization features so you can generate revenue from your content:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Pay-per-view access\u003C\u002Fli>\n\u003Cli>Subscriptions via Stripe\u003C\u002Fli>\n\u003Cli>PayPal payments (no webhooks required)\u003C\u002Fli>\n\u003Cli>Secure access via signed cookies\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Perfect for:\u003Cbr \u002F>\n– Premium live events\u003Cbr \u002F>\n– Online courses\u003Cbr \u002F>\n– Private communities\u003Cbr \u002F>\n– Exclusive content\u003C\u002Fp>\n\u003Cp>No external SaaS required — you keep full control over your revenue.\u003C\u002Fp>\n\u003Ch3>Built-in Real-Time Chat\u003C\u002Fh3>\n\u003Cp>Each live stream includes a built-in real-time chat system.\u003C\u002Fp>\n\u003Cp>Chat features:\u003Cbr \u002F>\n– AJAX-based live message polling\u003Cbr \u002F>\n– Username display\u003Cbr \u002F>\n– Automatic refresh\u003Cbr \u002F>\n– Message history stored in the WordPress database\u003C\u002Fp>\n\u003Cp>Moderation tools:\u003Cbr \u002F>\n– View all messages\u003Cbr \u002F>\n– Delete individual messages\u003Cbr \u002F>\n– Ban users by username\u003Cbr \u002F>\n– Ban users by IP address\u003C\u002Fp>\n\u003Cp>No external chat service is required.\u003C\u002Fp>\n\u003Ch3>Privacy, Ownership, and Compliance\u003C\u002Fh3>\n\u003Cp>Castio.live is designed with privacy and data ownership as a core principle.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>No third-party streaming services\u003C\u002Fli>\n\u003Cli>No external chat providers\u003C\u002Fli>\n\u003Cli>No analytics or tracking scripts included by default\u003C\u002Fli>\n\u003Cli>No cloud-based video or message processing\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>All streaming and chat data remains on your own server:\u003Cbr \u002F>\n– HLS video segments\u003Cbr \u002F>\n– Chat messages\u003Cbr \u002F>\n– Stream metadata\u003Cbr \u002F>\n– Viewer page configuration\u003C\u002Fp>\n\u003Cp>This design helps simplify compliance with GDPR and similar data protection regulations.\u003C\u002Fp>\n\u003Ch3>Technical Architecture\u003C\u002Fh3>\n\u003Cp>Castio.live is a fully WordPress-native plugin.\u003C\u002Fp>\n\u003Cp>No dependencies on:\u003Cbr \u002F>\n– FFmpeg\u003Cbr \u002F>\n– Node.js\u003Cbr \u002F>\n– RTMP servers\u003Cbr \u002F>\n– External streaming APIs\u003C\u002Fp>\n\u003Cp>Core components:\u003Cbr \u002F>\n– Browser-based HLS generation\u003Cbr \u002F>\n– PHP for stream lifecycle and data storage\u003Cbr \u002F>\n– JavaScript for capture, playback, and chat\u003Cbr \u002F>\n– WordPress custom post types and options\u003C\u002Fp>\n\u003Cp>The plugin works on shared hosting, VPS, and dedicated servers.\u003C\u002Fp>\n\u003Ch3>Key Features Summary\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Live stream directly from WordPress Admin\u003C\u002Fli>\n\u003Cli>No OBS, no RTMP, no external streaming platform\u003C\u002Fli>\n\u003Cli>Browser-generated HLS (.m3u8 + .ts)\u003C\u002Fli>\n\u003Cli>Automatic viewer page creation\u003C\u002Fli>\n\u003Cli>Built-in live chat\u003C\u002Fli>\n\u003Cli>Chat moderation tools\u003C\u002Fli>\n\u003Cli>Mobile-friendly viewer experience\u003C\u002Fli>\n\u003Cli>All streaming and chat data stored locally\u003C\u002Fli>\n\u003Cli>Lightweight and efficient\u003C\u002Fli>\n\u003Cli>Compatible with most CDNs, including Cloudflare\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Who Is This Plugin For?\u003C\u002Fh3>\n\u003Cp>Castio.live is ideal for:\u003Cbr \u002F>\n– Educators and online trainers\u003Cbr \u002F>\n– Content creators\u003Cbr \u002F>\n– Community websites\u003Cbr \u002F>\n– Event organizers\u003Cbr \u002F>\n– Developers and agencies\u003Cbr \u002F>\n– Anyone who wants full control over live streaming without SaaS platforms\u003C\u002Fp>\n\u003Ch3>Source Code and Third-Party Libraries\u003C\u002Fh3>\n\u003Cp>This plugin includes both original source code and third-party JavaScript libraries.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Original plugin code\u003C\u002Fstrong>\u003Cbr \u002F>\n– Unminified, human-readable JavaScript files are included directly in the plugin.\u003Cbr \u002F>\n– No obfuscated or encrypted code is used.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Third-party libraries (vendored, unmodified)\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>MediaBunny\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>File: \u003Ccode>assets\u002Fjs\u002Fvendor\u002Fmediabunny\u002Fmediabunny.esm.js\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Source: https:\u002F\u002Fgithub.com\u002FVanilagy\u002Fmediabunny\u003C\u002Fli>\n\u003Cli>License: MIT\u003C\u002Fli>\n\u003Cli>Used for browser-based media processing.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>hls.js\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>File: \u003Ccode>assets\u002Fjs\u002Fvendor\u002Fhls\u002Fhls.min.js\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Source: https:\u002F\u002Fgithub.com\u002Fvideo-dev\u002Fhls.js\u003C\u002Fli>\n\u003Cli>License: Apache License 2.0\u003C\u002Fli>\n\u003Cli>Used for HLS playback on non-Safari browsers.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>These libraries are included for performance and compatibility reasons.\u003Cbr \u002F>\nAll libraries retain their original licenses and copyright notices.\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin connects to external third-party services to provide optional monetization and licensing features.\u003C\u002Fp>\n\u003Ch3>Stripe Payments\u003C\u002Fh3>\n\u003Cp>Castio.live can integrate with Stripe to allow site owners to sell access to live or recorded streams, including pay-per-view content and subscriptions.\u003C\u002Fp>\n\u003Cp>What the service is used for:\u003Cbr \u002F>\nStripe is used to create checkout sessions, process payments, manage subscriptions, and retrieve payment reports related to paid video access.\u003C\u002Fp>\n\u003Cp>What data is sent and when:\u003Cbr \u002F>\nWhen a visitor purchases paid content or when the site owner views payment reports, the plugin sends the following data to Stripe:\u003Cbr \u002F>\n– Email address provided during checkout\u003Cbr \u002F>\n– Payment and checkout session identifiers\u003Cbr \u002F>\n– Purchased content or pricing identifiers\u003Cbr \u002F>\n– Subscription and payment status metadata\u003C\u002Fp>\n\u003Cp>No video streams, chat messages, or media content are transmitted to Stripe.\u003C\u002Fp>\n\u003Cp>Service provider:\u003Cbr \u002F>\nStripe, Inc.\u003C\u002Fp>\n\u003Cp>Terms of Service:\u003Cbr \u002F>\nhttps:\u002F\u002Fstripe.com\u002Flegal\u003C\u002Fp>\n\u003Cp>Privacy Policy:\u003Cbr \u002F>\nhttps:\u002F\u002Fstripe.com\u002Fprivacy\u003C\u002Fp>\n\u003Ch3>PayPal Payments\u003C\u002Fh3>\n\u003Cp>Castio.live can integrate with PayPal to allow site owners to sell access to live or recorded streams via pay-per-view.\u003C\u002Fp>\n\u003Cp>What the service is used for:\u003Cbr \u002F>\nPayPal is used to create and capture payment orders for paid video access using the PayPal Orders API v2.\u003C\u002Fp>\n\u003Cp>What data is sent and when:\u003Cbr \u002F>\nWhen a visitor purchases paid content, the plugin sends the following data to PayPal:\u003Cbr \u002F>\n– Order amount and currency\u003Cbr \u002F>\n– Return and cancel URLs\u003Cbr \u002F>\n– Stream identifier (used as order description)\u003C\u002Fp>\n\u003Cp>No video streams, chat messages, or personal user data beyond the above are transmitted to PayPal.\u003C\u002Fp>\n\u003Cp>Service provider:\u003Cbr \u002F>\nPayPal Holdings, Inc.\u003C\u002Fp>\n\u003Cp>Terms of Service:\u003Cbr \u002F>\nhttps:\u002F\u002Fwww.paypal.com\u002Fus\u002Flegalhub\u002Fuseragreement-full\u003C\u002Fp>\n\u003Cp>Privacy Policy:\u003Cbr \u002F>\nhttps:\u002F\u002Fwww.paypal.com\u002Fus\u002Flegalhub\u002Fprivacy-full\u003C\u002Fp>\n\u003Ch3>Castio.live Licensing Server\u003C\u002Fh3>\n\u003Cp>This plugin connects to the Castio.live licensing server to validate premium licenses and enable optional premium features.\u003C\u002Fp>\n\u003Cp>What the service is used for:\u003Cbr \u002F>\nThe licensing server is used to verify license validity and determine which premium features are available.\u003C\u002Fp>\n\u003Cp>What data is sent and when:\u003Cbr \u002F>\nDuring license validation (for example on activation, admin access, or periodic checks), the plugin sends:\u003Cbr \u002F>\n– License key\u003Cbr \u002F>\n– Site domain name\u003Cbr \u002F>\n– Plugin version\u003Cbr \u002F>\n– WordPress version\u003C\u002Fp>\n\u003Cp>No user-generated content, video streams, or personal data are transmitted.\u003C\u002Fp>\n\u003Cp>Service provider:\u003Cbr \u002F>\nCastio.live\u003C\u002Fp>\n\u003Cp>Terms of Service:\u003Cbr \u002F>\nhttps:\u002F\u002Fcastio.live\u002Fterms\u003C\u002Fp>\n\u003Cp>Privacy Policy:\u003Cbr \u002F>\nhttps:\u002F\u002Fcastio.live\u002Fprivacy\u003C\u002Fp>\n\u003Ch3>Demo and Additional Features\u003C\u002Fh3>\n\u003Cp>A public demo, documentation, and optional commercial features are available at:\u003Cbr \u002F>\nhttps:\u002F\u002Fcastio.live\u003C\u002Fp>\n\u003Cp>Commercial offerings may include:\u003Cbr \u002F>\n– Advanced access control\u003Cbr \u002F>\n– Enhanced chat moderation\u003Cbr \u002F>\n– Extended streaming options\u003Cbr \u002F>\n– Priority support\u003C\u002Fp>\n\u003Cp>The core live streaming and chat functionality works without requiring any external service.\u003C\u002Fp>\n\u003Ch3>Author and Support\u003C\u002Fh3>\n\u003Cp>Developed by proxymis\u003Cbr \u002F>\nWebsite: https:\u002F\u002Fproxymis.com\u003Cbr \u002F>\nContact: contact@proxymis.com\u003C\u002Fp>\n","Live streaming plugin for WordPress with HLS, real-time chat, PayPal & Stripe paywall, and Gutenberg blocks. No OBS, no RTMP.",422,2,"2026-03-30T13:00:00.000Z","6.2","7.3",[52,53,20,54,55],"hls-streaming","live-chat","video-streaming","wordpress-live-streaming","https:\u002F\u002Fcastio.live","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcastio-live.zip",{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":35,"downloaded":66,"rating":25,"num_ratings":67,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":17,"tags":71,"homepage":75,"download_link":76,"security_score":77,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"new-dev-livesmart-video-chat","LiveSmart Video Chat Live Video Chat","1.1","nhadjidimitrov","https:\u002F\u002Fprofiles.wordpress.org\u002Fnhadjidimitrov\u002F","\u003Cp>The plugin is developed by LiveSmart Video Chat Inc., whose mission is to bring face-to-face communication online. Host your own live video\u002Fchat sessions, interact with your visitors and boost your sales.\u003C\u002Fp>\n\u003Cp>LiveSmart Video Chat plugin lets you embed ‘Video Chat’ button, online and offline forms on your website to let your website visitors click to start a video or regular chat with you directly. Visitors can also make an audio or video call directly from their web browser.\u003C\u002Fp>\n\u003Cp>Before installing this plugin make sure you have installed LiveSmart Video Chat on your server. You can acquire it from CodeCanyon.\u003C\u002Fp>\n\u003Cp>You can use LiveSmart Video Chat to:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Live video and\u002For audio chat;\u003C\u002Fli>\n\u003Cli>Own notification server, no third party software or accounts needed;\u003C\u002Fli>\n\u003Cli>File transfer;\u003C\u002Fli>\n\u003Cli>Pure HTML5 Web chat;\u003C\u002Fli>\n\u003Cli>Screen sharing. Supported on Chrome with additional plugin (Your will be guided in the installation process), Firefox 52+ and MS Edge 17+ browsers;\u003C\u002Fli>\n\u003Cli>Switch between front and back camera of your mobile;\u003C\u002Fli>\n\u003Cli>Notification system;\u003C\u002Fli>\n\u003Cli>Mobile friendly;\u003C\u002Fli>\n\u003Cli>Button for establishing a direct connection and a facility to track the presence of your visitors;\u003C\u002Fli>\n\u003Cli>Predefined buttons styling;\u003C\u002Fli>\n\u003Cli>Internationalization;\u003C\u002Fli>\n\u003Cli>Ability to set own video chat room;\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Integrate With Your Theme\u003C\u002Fp>\n\u003Cp>The LiveSmart Video Chat Plugin gives you the option to customize your button with a text of your own choice. Get exactly the look and feel you want.\u003C\u002Fp>\n\u003Ch4>Options\u003C\u002Fh4>\n\u003Cp>The following options are customizable:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>message on the LiveSmart Video Chat button\u003C\u002Fli>\n\u003Cli>CSS for the look and feel of the button\u003C\u002Fli>\n\u003Cli>Room ID\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Reference\u003C\u002Fh4>\n\u003Cp>Overview, user guide and installation instructions:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.new-dev.com\u002Fpage\u002Fident\u002Flive_smart_video_chat\" title=\"https:\u002F\u002Fwww.new-dev.com\u002Fpage\u002Fident\u002Flive_smart_video_chat\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.new-dev.com\u002Fpage\u002Fident\u002Flive_smart_video_chat\u003C\u002Fa>\u003Cbr \u002F>\nLive Smart in CodeCanyon:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fcodecanyon.net\u002Fitem\u002Flivesmart-video-chat\u002F23122332\" title=\"https:\u002F\u002Fcodecanyon.net\u002Fitem\u002Flivesmart-video-chat\u002F23122332\" rel=\"nofollow ugc\">https:\u002F\u002Fcodecanyon.net\u002Fitem\u002Flivesmart-video-chat\u002F23122332\u003C\u002Fa>\u003C\u002Fp>\n","LiveSmart Video Chat Live Video chat plugin for WordPress that allows visitors to establish live video chat in the browser without download.",5172,1,"2019-06-02T16:06:00.000Z","4.2.39","2.9",[72,73,19,74,23],"audio","call","video-conference","https:\u002F\u002Fwww.new-dev.com\u002Fpage\u002Fident\u002Flive_smart_video_chat","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnew-dev-livesmart-video-chat.zip",85,{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":86,"downloaded":87,"rating":13,"num_ratings":13,"last_updated":88,"tested_up_to":15,"requires_at_least":17,"requires_php":89,"tags":90,"homepage":92,"download_link":93,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"wp-webrtc2","WP-WebRTC2","1.7.4","adminkov","https:\u002F\u002Fprofiles.wordpress.org\u002Fadminkov\u002F","\u003Cp>WP-WebRTC2 is a WordPress CMS plugin that provides video chat between registered visitors to the site where the plugin is installed. The number of pairs of interlocutors is not limited. Within the framework of this video chat, it is possible to: exchange text messages, files, video recording of the conversation, providing the interlocutor with an overview of your computer screen during communication. A registered visitor can leave a message to an interlocutor who is not currently on the video chat page. When the interlocutor appears on the video chat page, he will read all the messages addressed to him from various registered site visitors. These messages will then be automatically deleted. The WP-WebRTC2 plugin is focused on the use of browsers: Google Chrome, Fire Fox, Edge, Opera, Yandex.\u003C\u002Fp>\n\u003Cp>Instructions for using the video-chat plugin in: \u003Ca href=\"https:\u002F\u002Fadminkov.bcr.by\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fdoc\u002Fdoc_cn\u002Fwebrtc2_cn.html\" title=\"中国人\" rel=\"nofollow ugc\">[CN]\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fadminkov.bcr.by\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fdoc\u002Fdoc_de\u002Fwebrtc2_de.html\" title=\"Deutsch\" rel=\"nofollow ugc\">[DE]\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fadminkov.bcr.by\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fdoc\u002Fdoc_en\u002Fwebrtc2_en.html\" title=\"English\" rel=\"nofollow ugc\">[EN]\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fadminkov.bcr.by\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fdoc\u002Fdoc_fr\u002Fwebrtc2_fr.html\" title=\"Français\" rel=\"nofollow ugc\">[FR]\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fadminkov.bcr.by\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fdoc\u002Fdoc_it\u002Fwebrtc2_it.html\" title=\"Italiano\" rel=\"nofollow ugc\">[IT]\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fadminkov.bcr.by\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fdoc\u002Fdoc_ru\u002Fwebrtc2_ru.html\" title=\"Русский\" rel=\"nofollow ugc\">[RU]\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>You can test this plugin on its \u003Ca href=\"https:\u002F\u002Fadminkov.bcr.by\u002Fcontact\u002F\" rel=\"nofollow ugc\">\u003Cstrong> home page\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>You can send a letter to the developer at: klenitskiy.oleg@mail.ru\u003C\u002Fp>\n\u003Ch3>Additionally:\u003C\u002Fh3>\n\u003Cp>Client WP-WebRTC2 (executable jar) application has been developed for a client workstation (personal computer or laptop) on the Windows platform, which provides video communication for two registered visitors to the site, on which the WP-WebRTC2 plugin is installed.After launch, the application is located in the system tray of Windows OS in the form of an icon waiting for a call to video communication.\u003Cbr \u002F>\n \u003Ca href=\"https:\u002F\u002Fadminkov.bcr.by\u002Fsupport\u002F\" title=\"Support\" rel=\"nofollow ugc\">Client WP-WebRTC2 (executable jar)\u003C\u002Fa>\u003C\u002Fp>\n","Free video chat for registered site users.",20,6439,"2025-12-31T09:22:00.000Z","7.4",[19,91,23],"videochat","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-webrtc2\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-webrtc2.1.7.4.zip",{"slug":95,"name":96,"version":97,"author":98,"author_profile":99,"description":100,"short_description":101,"active_installs":11,"downloaded":102,"rating":25,"num_ratings":67,"last_updated":103,"tested_up_to":104,"requires_at_least":105,"requires_php":17,"tags":106,"homepage":109,"download_link":110,"security_score":77,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"agilityfeats-click-to-call","AgilityFeat's Click To Call","0.5.0","webrtcventures","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebrtcventures\u002F","\u003Cp>This plugin adds the functionality of video chat between users of your blog by using\u003Cbr \u002F>\nTokbox (Experimental).\u003C\u002Fp>\n","This plugin adds the functionality of video chat between users of your blog by using Tokbox (Experimental).",2854,"2017-07-27T21:51:00.000Z","4.8.28","3.4.1",[19,107,22,108,23],"tokbox","webcam","http:\u002F\u002Fwordpress.com\u002Fplugins\u002Fagilityfeats-click-to-call","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fagilityfeats-click-to-call.0.5.zip",{"slug":112,"name":113,"version":114,"author":115,"author_profile":116,"description":117,"short_description":118,"active_installs":11,"downloaded":119,"rating":25,"num_ratings":47,"last_updated":120,"tested_up_to":121,"requires_at_least":122,"requires_php":123,"tags":124,"homepage":17,"download_link":126,"security_score":77,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":127},"fullcall","FullCall VideoChat","2.0.7","FullCall","https:\u002F\u002Fprofiles.wordpress.org\u002Ffullcall\u002F","\u003Cp>This is a one-click installation plugin for FullCall. It is audio and video chat for your website. Easy to use compatible with all modern browsers. This plugin integrates your website with external services. To run it on your website, you must create an account on FullCall system. More about features and account you read on \u003Ca href=\"https:\u002F\u002Ffullcall.com\" rel=\"nofollow ugc\">FullCall.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Manual installation\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Upload “FullCall.zip” to the “\u002Fwp-content\u002Fplugins\u002F” directory and install.\u003C\u002Fli>\n\u003Cli>Activate the plugin through the “Plugins” menu in WordPress.\u003C\u002Fli>\n\u003Cli>Enjoy!\u003C\u002Fli>\n\u003C\u002Fol>\n","This is a one-click installation plugin for FullCall. It is audio and video chat for your website. Easy to use compatible with all modern browsers.",2644,"2023-04-17T05:39:00.000Z","6.2.9","5.7","7.0",[125,73,19,91,23],"audiochat","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffullcall.2.0.7.zip","2026-04-06T09:54:40.288Z",{"attackSurface":129,"codeSignals":162,"taintFlows":170,"riskAssessment":228,"analyzedAt":231},{"hooks":130,"ajaxHandlers":148,"restRoutes":155,"shortcodes":156,"cronEvents":161,"entryPointCount":47,"unprotectedCount":13},[131,137,141,145],{"type":132,"name":133,"callback":134,"file":135,"line":136},"action","wp_enqueue_scripts","enqueue_scripts","connectsphere.php",15,{"type":132,"name":138,"callback":139,"file":135,"line":140},"admin_enqueue_scripts","enqueue_admin_scripts",16,{"type":132,"name":142,"callback":143,"file":135,"line":144},"admin_menu","add_admin_menu",18,{"type":132,"name":146,"callback":147,"file":135,"line":86},"wp_footer","add_marketing_banner",[149],{"action":150,"nopriv":151,"callback":152,"hasNonce":153,"hasCapCheck":151,"file":135,"line":154},"connectsphere_join_room",false,"ajax_join_room",true,19,[],[157],{"tag":158,"callback":159,"file":135,"line":160},"connectsphere_room","render_room",17,[],{"dangerousFunctions":163,"sqlUsage":164,"outputEscaping":166,"fileOperations":13,"externalRequests":13,"nonceChecks":47,"capabilityChecks":67,"bundledLibraries":169},[],{"prepared":13,"raw":13,"locations":165},[],{"escaped":167,"rawEcho":13,"locations":168},22,[],[],[171,211],{"entryPoint":172,"graph":173,"unsanitizedCount":13,"severity":210},"admin_page (connectsphere.php:51)",{"nodes":174,"edges":205},[175,180,186,190,192,196,198,200],{"id":176,"type":177,"label":178,"file":135,"line":179},"n0","source","$_POST (x3)",57,{"id":181,"type":182,"label":183,"file":135,"line":184,"wp_function":185},"n1","sink","update_option() [Settings Manipulation]",59,"update_option",{"id":187,"type":177,"label":188,"file":135,"line":189},"n2","$_POST['connectsphere_turn_username']",81,{"id":191,"type":182,"label":183,"file":135,"line":189,"wp_function":185},"n3",{"id":193,"type":177,"label":194,"file":135,"line":195},"n4","$_POST['connectsphere_turn_credential']",84,{"id":197,"type":182,"label":183,"file":135,"line":195,"wp_function":185},"n5",{"id":199,"type":177,"label":178,"file":135,"line":179},"n6",{"id":201,"type":182,"label":202,"file":135,"line":203,"wp_function":204},"n7","echo() [XSS]",102,"echo",[206,207,208,209],{"from":176,"to":181,"sanitized":153},{"from":187,"to":191,"sanitized":153},{"from":193,"to":197,"sanitized":153},{"from":199,"to":201,"sanitized":153},"low",{"entryPoint":212,"graph":213,"unsanitizedCount":13,"severity":210},"\u003Cconnectsphere> (connectsphere.php:0)",{"nodes":214,"edges":223},[215,216,217,218,219,220,221,222],{"id":176,"type":177,"label":178,"file":135,"line":179},{"id":181,"type":182,"label":183,"file":135,"line":184,"wp_function":185},{"id":187,"type":177,"label":188,"file":135,"line":189},{"id":191,"type":182,"label":183,"file":135,"line":189,"wp_function":185},{"id":193,"type":177,"label":194,"file":135,"line":195},{"id":197,"type":182,"label":183,"file":135,"line":195,"wp_function":185},{"id":199,"type":177,"label":178,"file":135,"line":179},{"id":201,"type":182,"label":202,"file":135,"line":203,"wp_function":204},[224,225,226,227],{"from":176,"to":181,"sanitized":153},{"from":187,"to":191,"sanitized":153},{"from":193,"to":197,"sanitized":153},{"from":199,"to":201,"sanitized":153},{"summary":229,"deductions":230},"The ConnectSphere plugin version 1.2.0 exhibits a strong security posture based on the provided static analysis. All identified entry points, including AJAX handlers and shortcodes, appear to be protected with appropriate checks (nonce and capability checks). The code also demonstrates excellent practices with 100% of SQL queries using prepared statements and all outputs being properly escaped, indicating a low risk of common vulnerabilities like SQL injection and cross-site scripting (XSS). The absence of file operations, external HTTP requests, and dangerous functions further strengthens its security profile. The plugin also has no recorded vulnerability history, which is a positive indicator of its past security performance and developer diligence.\n\nWhile the static analysis reveals no immediate critical or high-severity flaws, and the vulnerability history is clean, a few minor points of consideration remain. The presence of two entry points (AJAX handler and shortcode) suggests a minimal attack surface, but even unprotected entry points (though none were found here) would warrant attention. The fact that there are only two nonce checks and one capability check for the identified entry points, while positive, could potentially leave room for future oversight if new functionalities are added without commensurate security controls. Overall, ConnectSphere v1.2.0 appears to be a securely developed plugin, but ongoing vigilance and adherence to security best practices during future development are always recommended.",[],"2026-04-16T12:58:50.478Z",{"wat":233,"direct":252},{"assetPaths":234,"generatorPatterns":241,"scriptPaths":242,"versionParams":247},[235,236,237,238,239,240],"\u002Fwp-content\u002Fplugins\u002Fconnectsphere\u002Fassets\u002Fcss\u002Fconnectsphere.css","\u002Fwp-content\u002Fplugins\u002Fconnectsphere\u002Fassets\u002Flib\u002Fadapter.js","\u002Fwp-content\u002Fplugins\u002Fconnectsphere\u002Fassets\u002Flib\u002Fjanus.js","\u002Fwp-content\u002Fplugins\u002Fconnectsphere\u002Fassets\u002Fjs\u002Fconnectsphere.js","\u002Fwp-content\u002Fplugins\u002Fconnectsphere\u002Fassets\u002Fcss\u002Fconnectsphere-admin.css","\u002Fwp-content\u002Fplugins\u002Fconnectsphere\u002Fassets\u002Fjs\u002Fconnectsphere-admin.js",[],[243,244,245,246],"connectsphere\u002Fassets\u002Flib\u002Fadapter.js","connectsphere\u002Fassets\u002Flib\u002Fjanus.js","connectsphere\u002Fassets\u002Fjs\u002Fconnectsphere.js","connectsphere\u002Fassets\u002Fjs\u002Fconnectsphere-admin.js",[248,249,250,251],"connectsphere\u002Fassets\u002Fcss\u002Fconnectsphere.css?ver=","connectsphere\u002Fassets\u002Fjs\u002Fconnectsphere.js?ver=","connectsphere\u002Fassets\u002Fcss\u002Fconnectsphere-admin.css?ver=","connectsphere\u002Fassets\u002Fjs\u002Fconnectsphere-admin.js?ver=",{"cssClasses":253,"htmlComments":261,"htmlAttributes":262,"restEndpoints":268,"jsGlobals":270,"shortcodeOutput":272},[254,255,256,257,258,259,260],"connectsphere-settings","connectsphere-title","connectsphere-subtitle","connectsphere-form","connectsphere-section-title","connectsphere-section-desc","connectsphere-button",[],[263,264,265,266,267],"connectsphere_janus_url","connectsphere_stun_server","connectsphere_turn_server","connectsphere_turn_username","connectsphere_turn_credential",[269],"\u002Fwp-json\u002Fconnectsphere\u002Fv1\u002Fjoin_room",[271],"connectSphere",[273],"\u003Cdiv class='connectsphere-room-wrapper'>",{"error":153,"url":275,"statusCode":276,"statusMessage":277,"message":277},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fconnectsphere\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":279,"versions":280},3,[281,286,293],{"version":6,"download_url":24,"svn_tag_url":282,"released_at":26,"has_diff":151,"diff_files_changed":283,"diff_lines":26,"trac_diff_url":284,"vulnerabilities":285,"is_current":153},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fconnectsphere\u002Ftags\u002F1.2.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fconnectsphere%2Ftags%2F1.1.0&new_path=%2Fconnectsphere%2Ftags%2F1.2.0",[],{"version":287,"download_url":288,"svn_tag_url":289,"released_at":26,"has_diff":151,"diff_files_changed":290,"diff_lines":26,"trac_diff_url":291,"vulnerabilities":292,"is_current":151},"1.1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconnectsphere.1.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fconnectsphere\u002Ftags\u002F1.1.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fconnectsphere%2Ftags%2F1.0.9&new_path=%2Fconnectsphere%2Ftags%2F1.1.0",[],{"version":294,"download_url":295,"svn_tag_url":296,"released_at":26,"has_diff":151,"diff_files_changed":297,"diff_lines":26,"trac_diff_url":26,"vulnerabilities":298,"is_current":151},"1.0.9","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconnectsphere.1.0.9.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fconnectsphere\u002Ftags\u002F1.0.9\u002F",[],[]]