[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmXkIrBR64Li9t2Feh1Gzn4OLe18P1zYqKwnBRVrrTjw":3,"$f7HAJqFIx7C-YxUDrPSfk_i8Y_tbmFqAKXsAiIfKkjTY":326,"$fI_FwwusQi0h_dmq_CceQiiAOpMLig86-VYmYEboi1VI":330},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":30,"crawl_stats":26,"alternatives":37,"analysis":130,"fingerprints":302},"core-web-vitals-real-user-monitoring-rum","Core Web Vitals – Real User Monitoring (RUM)","1.0.2","Prakhar Bhatia","https:\u002F\u002Fprofiles.wordpress.org\u002Fprakharb88\u002F","\u003Cp>\u003Cstrong>Core Web Vitals RUM\u003C\u002Fstrong> is a comprehensive WordPress plugin that monitors your website’s Core Web Vitals metrics from real users, not just lab tests. Get actionable insights to improve your site’s performance and SEO rankings.\u003C\u002Fp>\n\u003Ch4>Why Real User Monitoring (RUM)?\u003C\u002Fh4>\n\u003Cp>While tools like Google PageSpeed Insights provide valuable lab data, they don’t reflect the actual experience of your visitors. Core Web Vitals RUM collects data from real users across different devices, browsers, and network conditions, giving you the most accurate picture of your site’s performance.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cp>🚀 \u003Cstrong>Real User Monitoring\u003C\u002Fstrong>\u003Cbr \u002F>\n* Collects LCP, INP, CLS, FCP, and TTFB from actual visitors\u003Cbr \u002F>\n* Tracks performance across different devices and browsers\u003Cbr \u002F>\n* Provides accurate, real-world performance data\u003C\u002Fp>\n\u003Cp>📊 \u003Cstrong>Comprehensive Analytics\u003C\u002Fstrong>\u003Cbr \u002F>\n* Beautiful dashboard with real-time performance scores\u003Cbr \u002F>\n* Detailed reports with trends and insights\u003Cbr \u002F>\n* Page-specific performance analysis\u003Cbr \u002F>\n* Device and browser breakdown\u003C\u002Fp>\n\u003Cp>🔔 \u003Cstrong>Smart Alerts\u003C\u002Fstrong>\u003Cbr \u002F>\n* Email notifications when performance drops\u003Cbr \u002F>\n* Configurable thresholds for each metric\u003Cbr \u002F>\n* Daily, weekly, or immediate alerts\u003Cbr \u002F>\n* Beautiful HTML email templates\u003C\u002Fp>\n\u003Cp>📈 \u003Cstrong>Google Analytics 4 Integration\u003C\u002Fstrong>\u003Cbr \u002F>\n* Send Core Web Vitals data to GA4\u003Cbr \u002F>\n* Custom events for each metric\u003Cbr \u002F>\n* Enhanced GA4 reporting capabilities\u003Cbr \u002F>\n* Measurement Protocol API integration\u003C\u002Fp>\n\u003Cp>⚙️ \u003Cstrong>Flexible Configuration\u003C\u002Fstrong>\u003Cbr \u002F>\n* Adjustable sample rates (1-100%)\u003Cbr \u002F>\n* Customizable performance thresholds\u003Cbr \u002F>\n* Data retention settings\u003Cbr \u002F>\n* Privacy-compliant data collection\u003C\u002Fp>\n\u003Cp>🔒 \u003Cstrong>Privacy & Security\u003C\u002Fstrong>\u003Cbr \u002F>\n* GDPR-compliant data collection\u003Cbr \u002F>\n* IP address anonymization\u003Cbr \u002F>\n* No personal data collection\u003Cbr \u002F>\n* Secure REST API endpoints with proper permission callbacks\u003Cbr \u002F>\n* Input validation and sanitization on all data\u003C\u002Fp>\n\u003Ch4>Core Web Vitals Explained\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>LCP (Largest Contentful Paint)\u003C\u002Fstrong>: Measures loading performance. Shows when the largest content element becomes visible.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>INP (Interaction to Next Paint)\u003C\u002Fstrong>: Measures interactivity. Shows how quickly the page responds to user interactions.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>CLS (Cumulative Layout Shift)\u003C\u002Fstrong>: Measures visual stability. Shows how much content shifts during page load.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>FCP (First Contentful Paint)\u003C\u002Fstrong>: Measures loading performance. Shows when the first content becomes visible.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>TTFB (Time to First Byte)\u003C\u002Fstrong>: Measures server response time. Shows how quickly the server responds to requests.\u003C\u002Fp>\n\u003Ch4>How It Works\u003C\u002Fh4>\n\u003Col>\n\u003Cli>\u003Cstrong>Data Collection\u003C\u002Fstrong>: The plugin automatically collects Core Web Vitals data from your visitors\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Analysis\u003C\u002Fstrong>: Data is processed and analyzed to provide meaningful insights\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Reporting\u003C\u002Fstrong>: View comprehensive reports in your WordPress admin dashboard\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Alerts\u003C\u002Fstrong>: Get notified when performance issues are detected\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Integration\u003C\u002Fstrong>: Send data to Google Analytics 4 for enhanced reporting\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Use Cases\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>SEO Optimization\u003C\u002Fstrong>: Improve your Core Web Vitals scores for better search rankings\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Performance Monitoring\u003C\u002Fstrong>: Track performance trends over time\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Issue Detection\u003C\u002Fstrong>: Identify performance problems before they impact users\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Competitive Analysis\u003C\u002Fstrong>: Compare your performance against industry standards\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User Experience\u003C\u002Fstrong>: Ensure your site provides a great experience for all visitors\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Privacy Compliance\u003C\u002Fh4>\n\u003Cp>The plugin is designed with privacy in mind:\u003Cbr \u002F>\n* No personal data is collected\u003Cbr \u002F>\n* IP addresses are anonymized\u003Cbr \u002F>\n* GDPR-compliant data collection\u003Cbr \u002F>\n* Users can opt-out of data collection\u003Cbr \u002F>\n* Data is stored securely on your server\u003C\u002Fp>\n\u003Ch4>Data Collection & Third-Party Services\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>What Data is Collected:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin collects anonymous performance metrics from your website visitors to help you monitor and improve your site’s Core Web Vitals scores. The following data is collected:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Performance Metrics\u003C\u002Fstrong>: LCP (Largest Contentful Paint), INP (Interaction to Next Paint), CLS (Cumulative Layout Shift), FCP (First Contentful Paint), and TTFB (Time to First Byte) values\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Page Information\u003C\u002Fstrong>: Page URL and page title where metrics were collected\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Technical Information\u003C\u002Fstrong>: Device type (mobile\u002Ftablet\u002Fdesktop), connection type, user agent string\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Anonymized Location\u003C\u002Fstrong>: IP addresses are anonymized by removing the last octet (IPv4) or last 80 bits (IPv6)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Session ID\u003C\u002Fstrong>: A randomly generated session identifier (not linked to any personal information)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>When Data is Collected:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Data collection can be enabled or disabled at any time in the plugin settings\u003C\u002Fli>\n\u003Cli>You can configure a sample rate (1-100%) to control what percentage of visitors have their metrics collected\u003C\u002Fli>\n\u003Cli>Data is collected only when visitors load pages on your website\u003C\u002Fli>\n\u003Cli>Collection is disabled by default until you enable monitoring in settings\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Where Data is Stored:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>All performance data is stored locally in your WordPress database on your own server\u003C\u002Fli>\n\u003Cli>No data is sent to external servers or third-party services by default\u003C\u002Fli>\n\u003Cli>You have full control over data retention periods (configurable from 1-365 days)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Optional Third-Party Service – Google Analytics 4:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>If you choose to enable the optional Google Analytics 4 (GA4) integration:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Core Web Vitals data will be sent to Google Analytics using the Measurement Protocol API\u003C\u002Fli>\n\u003Cli>You must provide your own GA4 Measurement ID and API Secret\u003C\u002Fli>\n\u003Cli>Data sent to GA4 is subject to Google’s privacy policy and terms of service\u003C\u002Fli>\n\u003Cli>Google Analytics 4 Privacy Policy: https:\u002F\u002Fpolicies.google.com\u002Fprivacy\u003C\u002Fli>\n\u003Cli>Google Analytics 4 Terms of Service: https:\u002F\u002Fmarketingplatform.google.com\u002Fabout\u002Fanalytics\u002Fterms\u002Fus\u002F\u003C\u002Fli>\n\u003Cli>This integration is completely optional and disabled by default\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>User Consent:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Site administrators have full control over enabling\u002Fdisabling data collection\u003C\u002Fli>\n\u003Cli>Monitoring can be turned off at any time from the plugin settings\u003C\u002Fli>\n\u003Cli>The plugin does not track individual users or collect personal information\u003C\u002Fli>\n\u003Cli>All collected data is aggregated and anonymized for performance analysis only\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Data Security:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>All REST API endpoints use proper authentication and validation\u003C\u002Fli>\n\u003Cli>Input data is sanitized and validated before storage\u003C\u002Fli>\n\u003Cli>Database queries use prepared statements to prevent SQL injection\u003C\u002Fli>\n\u003Cli>The plugin follows WordPress security best practices\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support, feature requests, or bug reports, please visit our \u003Ca href=\"https:\u002F\u002Fnandann.com\u002Fcontact\" rel=\"nofollow ugc\">support page\u003C\u002Fa> or create an issue on our GitHub repository.\u003C\u002Fp>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>This plugin collects anonymous performance data to help you improve your website’s Core Web Vitals scores. No personal information is collected, and all data is stored securely on your server. For more information, please review our privacy policy.\u003C\u002Fp>\n\u003Ch3>About the Developer\u003C\u002Fh3>\n\u003Cp>Prakhar Bhatia is a professional WordPress developer and troubleshooter with extensive experience in:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>WordPress Troubleshooting\u003C\u002Fstrong>: Expert diagnosis and resolution of complex WordPress issues, performance optimization, and security hardening\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Development\u003C\u002Fstrong>: Bespoke WordPress plugins, themes, and custom functionality tailored to specific business needs\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Site Migration & Hosting\u003C\u002Fstrong>: Seamless website migrations, hosting optimization, and server configuration for peak performance\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Security & Maintenance\u003C\u002Fstrong>: Comprehensive security audits, malware removal, and ongoing maintenance to keep sites secure\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Nandann Creative Agency specializes in WordPress development solutions for businesses of all sizes.\u003C\u002Fp>\n\u003Cp>Contact: prakhar@nandann.com | Website: https:\u002F\u002Fnandann.com\u003C\u002Fp>\n","Track Core Web Vitals (LCP, INP, CLS, FCP, TTFB) from real users with comprehensive analytics, GA4 integration, and performance insights.",0,213,"2025-11-14T02:26:00.000Z","6.8.5","6.2","7.2",[18,19,20,21,22],"core-web-vitals","lcp","monitoring","performance","rum","https:\u002F\u002Fnandann.com\u002Fcontact","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcore-web-vitals-real-user-monitoring-rum.1.0.2.zip",100,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":25,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"prakharb88",7,210,30,94,"2026-05-19T17:29:31.235Z",[38,54,78,99,115],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":11,"downloaded":46,"rating":11,"num_ratings":11,"last_updated":47,"tested_up_to":48,"requires_at_least":15,"requires_php":49,"tags":50,"homepage":52,"download_link":53,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"mudrava-rum","MUDRAVA RUM","0.2.0","MUDRAVA","https:\u002F\u002Fprofiles.wordpress.org\u002Fmudrava\u002F","\u003Cp>MUDRAVA RUM captures real user performance data from your WordPress site visitors. Unlike synthetic testing tools, this plugin measures actual user experience including Time to First Byte (TTFB), Largest Contentful Paint (LCP), server generation time, total page load time, and more.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Collects TTFB, LCP, server generation time, total load, memory peak, device type, network type, country, and session ID\u003C\u002Fli>\n\u003Cli>Live Monitor dashboard with real-time log viewing\u003C\u002Fli>\n\u003Cli>Filterable by session ID, URL, device type, and network type\u003C\u002Fli>\n\u003Cli>On-demand performance reports with averages and P75 LCP\u003C\u002Fli>\n\u003Cli>Scheduled email summaries (daily or weekly via WP-Cron)\u003C\u002Fli>\n\u003Cli>Critical TTFB alerts with configurable thresholds\u003C\u002Fli>\n\u003Cli>Configurable sampling rate and URL blacklist\u003C\u002Fli>\n\u003Cli>Role-based exclusion (skip tracking for specific user roles)\u003C\u002Fli>\n\u003Cli>Automatic data retention management (max records and days)\u003C\u002Fli>\n\u003Cli>Color-coded performance indicators (good\u002Fwarning\u002Fpoor)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>How It Works:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>A lightweight JavaScript collector runs on your site’s frontend, gathering Core Web Vitals and performance metrics from each page view. Data is sent via the WordPress REST API and stored in a custom database table. The admin dashboard provides a Live Monitor view, filterable reports, and email summaries.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Links:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmudrava.com\u002Fen\u002Fprojects\u002Fmudrava-rum-wordpress-plugin\u002F\" rel=\"nofollow ugc\">Plugin page\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002FMudrava\u002FMudrava-RUM\" rel=\"nofollow ugc\">GitHub repository\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Data Collection:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin collects anonymized performance metrics (TTFB, LCP, load times, device type, network type) from site visitors. No personally identifiable information (PII) is collected or stored. Session IDs are randomly generated and not linked to user accounts.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>External Requests:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin does not send data to external third-party services. All collected data is stored locally in your WordPress database.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Cookies:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin does not use cookies. Session IDs are stored in the browser’s sessionStorage.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Data Retention:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Collected data is automatically purged based on your configured retention settings (maximum records and retention days).\u003C\u002Fp>\n","Real User Monitoring (RUM) plugin for WordPress that tracks TTFB, LCP, server generation time, and other performance metrics from real visitors.",71,"2026-04-01T11:05:00.000Z","6.9.4","7.4",[19,20,21,22,51],"web-vitals","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmudrava-rum\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmudrava-rum.0.2.0.zip",{"slug":55,"name":56,"version":57,"author":58,"author_profile":59,"description":60,"short_description":61,"active_installs":62,"downloaded":63,"rating":25,"num_ratings":64,"last_updated":65,"tested_up_to":66,"requires_at_least":67,"requires_php":68,"tags":69,"homepage":73,"download_link":74,"security_score":75,"vuln_count":76,"unpatched_count":11,"last_vuln_date":77,"fetched_at":27},"vibes","Vibes","2.4.0","Pierre Lannoy","https:\u002F\u002Fprofiles.wordpress.org\u002Fpierrelannoy\u002F","\u003Cp>\u003Cstrong>Truthful user experience and browsing performances monitoring.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Vibes\u003C\u002Fstrong> is a robust user experience and browsing performances monitoring solution that analyzes perceived performances from users’ viewpoint.\u003C\u002Fp>\n\u003Cp>It is fully autonomous – does not rely on external services and does not require any API keys, works on any type of hosting and in any type of environment – including staging, intranets or password protected sites.\u003C\u002Fp>\n\u003Cp>By continuously monitoring user experience, \u003Cstrong>Vibes\u003C\u002Fstrong> can report:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>navigation performance KPIs per pages – like latency, redirections, browser caching hit rates, etc.;\u003C\u002Fli>\n\u003Cli>network timelines as if you were in the dev tools of your users’ browsers;\u003C\u002Fli>\n\u003Cli>resources details – like initiators, protocols, mime types, average sizes, etc.;\u003C\u002Fli>\n\u003Cli>Web Vitals: LCP, FID, CLS, FCP and TTFB.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>It can segment all this data per:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>user type (anonymous vs. authenticated);\u003C\u002Fli>\n\u003Cli>channel (frontend vs. backend);\u003C\u002Fli>\n\u003Cli>country (requires the free \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fip-locator\u002F\" rel=\"ugc\">IP Locator\u003C\u002Fa> plugin);\u003C\u002Fli>\n\u003Cli>device classes and types (requires the free \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdevice-detector\u002F\" rel=\"ugc\">Device Detector\u003C\u002Fa> plugin).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Vibes\u003C\u002Fstrong> supports multisite report delegation (see FAQ).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Vibes\u003C\u002Fstrong> supports WP-CLI commands to:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>display (past or current) performances signals in console – see \u003Ccode>wp help vibes tail\u003C\u002Fcode> for details;\u003C\u002Fli>\n\u003Cli>toggle on\u002Foff main settings – see \u003Ccode>wp help vibes settings\u003C\u002Fcode> for details.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For a full help on WP-CLI commands in Vibes, please \u003Ca href=\"https:\u002F\u002Fperfops.one\u002Fvibes-wpcli\" rel=\"nofollow ugc\">read this guide\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Vibes\u003C\u002Fstrong> is part of \u003Ca href=\"https:\u002F\u002Fperfops.one\u002F\" rel=\"nofollow ugc\">PerfOps One\u003C\u002Fa>, a suite of free and open source WordPress plugins dedicated to observability and operations performance.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>Vibes\u003C\u002Fstrong> is a free and open source plugin for WordPress. It integrates many other free and open source works (as-is or modified). Please, see ‘about’ tab in the plugin settings to see the details.\u003C\u002Fp>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>This plugin is free and provided without warranty of any kind. Use it at your own risk, I’m not responsible for any improper use of this plugin, nor for any damage it might cause to your site. Always backup all your data before installing a new plugin.\u003C\u002Fp>\n\u003Cp>Anyway, I’ll be glad to help you if you encounter issues when using this plugin. Please read carefully the FAQ at the bottom of this page before requesting support.\u003C\u002Fp>\n\u003Ch4>Donation\u003C\u002Fh4>\n\u003Cp>If you like this plugin or find it useful and want to thank me for the work done, please consider making a donation to \u003Ca href=\"https:\u002F\u002Fwww.laquadrature.net\u002Fen\" rel=\"nofollow ugc\">La Quadrature Du Net\u003C\u002Fa> or the \u003Ca href=\"https:\u002F\u002Fwww.eff.org\u002F\" rel=\"nofollow ugc\">Electronic Frontier Foundation\u003C\u002Fa> which are advocacy groups defending the rights and freedoms of citizens on the Internet. By supporting them, you help the daily actions they perform to defend our fundamental freedoms!\u003C\u002Fp>\n","Truthful user experience and browsing performances monitoring.",400,17904,2,"2026-03-20T09:08:00.000Z","7.0","6.4","8.2",[70,22,71,72,51],"real-user-monitoring","ux","web-performance","https:\u002F\u002Fperfops.one\u002Fvibes","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvibes.2.4.0.zip",98,1,"2025-08-25 14:10:31",{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":25,"downloaded":86,"rating":87,"num_ratings":76,"last_updated":88,"tested_up_to":89,"requires_at_least":90,"requires_php":91,"tags":92,"homepage":96,"download_link":97,"security_score":98,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"site24x7-rum","Site24x7 Real User Monitoring","1.3","Site24x7","https:\u002F\u002Fprofiles.wordpress.org\u002Fsite24x7integrations\u002F","\u003Cp>Real User Monitoring by Site24x7 gives accurate insight into real users application experience and helps visualise web app interaction patterns. Real User Monitoring provides deep insight into key performance metrics right from the initiation of the URL until the request is served back to the browser.\u003C\u002Fp>\n\u003Cp>The RUM plugin helps you add your Site24x7 RUM code snippet to the Head tag of your WordPress blog. Once added, Site24x7 immediately starts collecting data from your WordPress blog’s visitors. You can view all that collected data in \u003Ca href=\"https:\u002F\u002Fwww.site24x7.com\u002Fapp\u002Fapm#\u002Fapm\u002Frum\u002Flist\u002F\" rel=\"nofollow ugc\">Site24x7 console\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Site24x7 Real User Monitoring provides better understanding of performance issues by providing actionable data like showing real user performance by region, browser type, device used to access the application and more, these metric assist in pinpointing issues faster to make applications more fluid and user friendly. The back-end response time provides metrics from a server perspective calculating the time taken by the server to serve the request and statistics such as the page rendering time, document processing time and document downloading time, all of which help developers tailor applications to be more fluid to end users.please refer the help document for more information \u003Ca href=\"https:\u002F\u002Fwww.site24x7.com\u002Fhelp\u002Fapm\u002Frum.html\" rel=\"nofollow ugc\">site24x7-rum\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>P.S: You will need a Site24x7 account for this plugin. If you don’t have one, grab one at \u003Ca href=\"https:\u002F\u002Fwww.site24x7.com\u002Fsignup.html?pack=4&l=en\" rel=\"nofollow ugc\">site24x7.com\u003C\u002Fa> – its super-easy!\u003C\u002Fp>\n","Real User Monitoring (RUM) by Site24x7 provides deep and accurate insight into real users’experience on your WordPress setup.",3742,80,"2025-01-22T12:28:00.000Z","6.7.5","2.8","5.2.4",[93,70,22,94,95],"application-performance","user-experience-monitoring","website-monitoring","https:\u002F\u002Fwww.site24x7.com\u002Freal-user-monitoring.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsite24x7-rum.1.3.zip",92,{"slug":100,"name":101,"version":6,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":25,"num_ratings":76,"last_updated":108,"tested_up_to":14,"requires_at_least":109,"requires_php":66,"tags":110,"homepage":112,"download_link":113,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":114},"speedvitals-rum","SpeedVitals RUM","SpeedVitals","https:\u002F\u002Fprofiles.wordpress.org\u002Fspeedvitals\u002F","\u003Cp>SpeedVitals RUM WordPress plugin provides seamless integration of SpeedVitals Real-User Monitoring into your WordPress site. Monitor and analyze your website’s performance metrics in real-time with SpeedVitals RUM.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy integration with SpeedVitals RUM\u003C\u002Fli>\n\u003Cli>Configurable script placement (header\u002Ffooter)\u003C\u002Fli>\n\u003Cli>Flexible script loading options (defer\u002Fasync)\u003C\u002Fli>\n\u003Cli>Simple setup with minimal configuration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>Site ID (Required)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Enter your SpeedVitals RUM Site ID\u003C\u002Fli>\n\u003Cli>This is required for the plugin to function\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Script Position (Optional)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Header (default): Places the script in the  section\u003C\u002Fli>\n\u003Cli>Footer: Places the script at the end of the  section\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Script Loading (Optional)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Defer (default): Loads the script after HTML parsing\u003C\u002Fli>\n\u003Cli>Async: Loads the script asynchronously with HTML parsing\u003C\u002Fli>\n\u003Cli>None: Loads the script normally without any loading attribute\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>Once configured with a valid Site ID, the plugin will automatically insert the SpeedVitals RUM tracking script into your website. The script will collect performance metrics and send them to your SpeedVitals dashboard.\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin sends data to the SpeedVitals API to monitor website performance metrics via Real User Monitoring (RUM). The library we are using to send the data is based built upon the Google Chrome’s Web Vitals Library (https:\u002F\u002Fgithub.com\u002FGoogleChrome\u002Fweb-vitals).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Data Sent: Performance metrics like page load time, resource timings, user-agent info, and other web vitals are sent to SpeedVitals servers.\u003C\u002Fli>\n\u003Cli>When: Data is sent automatically whenever users visit any page of your website\u003C\u002Fli>\n\u003Cli>Data storage: Data is stored in the EU servers for GDPR Compliance\u003C\u002Fli>\n\u003Cli>Service Provider: SpeedVitals (SpeedVitals Private Limited)\u003C\u002Fli>\n\u003Cli>Terms of Service: https:\u002F\u002Fapp.speedvitals.com\u002Fterms-of-use\u003C\u002Fli>\n\u003Cli>Privacy Policy: https:\u002F\u002Fspeedvitals.com\u002Fprivacy-policy\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support and documentation, please visit https:\u002F\u002Fspeedvitals.com\u002Fcontact-us\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPL v2 or later.\u003C\u002Fp>\n\u003Cp>For the full license text, please see the GNU General Public License v2.0 at https:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-2.0.html.\u003C\u002Fp>\n","Integrates SpeedVitals RUM Script in your WordPress Website",40,1002,"2025-06-25T06:15:00.000Z","5.0",[111,20,21,70,22],"analytics","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fspeedvitals-rum.1.0.2.zip","2026-03-15T15:16:48.613Z",{"slug":116,"name":117,"version":118,"author":119,"author_profile":120,"description":121,"short_description":122,"active_installs":34,"downloaded":123,"rating":11,"num_ratings":11,"last_updated":124,"tested_up_to":48,"requires_at_least":125,"requires_php":112,"tags":126,"homepage":112,"download_link":129,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"lumeo-vitals","Lumeo Vitals","1.0.0","lumeosoft","https:\u002F\u002Fprofiles.wordpress.org\u002Flumeosoft\u002F","\u003Cp>Is your site failing the \u003Cstrong>Core Web Vitals\u003C\u002Fstrong> assessment? \u003Cstrong>Lumeo Vitals\u003C\u002Fstrong> helps you fix LCP, INP, and CLS issues without complex configurations.\u003C\u002Fp>\n\u003Ch4>Lite Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>LCP Fix:\u003C\u002Fstrong> Automatically adds high fetch priority to your featured images.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>INP Fix:\u003C\u002Fstrong> Defers non-critical JavaScript to keep the main thread free for user interactions.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Bloat Remover:\u003C\u002Fstrong> Strips away Emojis and unnecessary Dashicons.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Block Library Cleaner:\u003C\u002Fstrong> Option to remove heavy Gutenberg CSS (perfect for Elementor\u002FDivi users).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Pro Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Predictive Page Loading:\u003C\u002Fstrong> Preloads links on hover for near-instant navigation.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>GDPR Google Fonts Shield:\u003C\u002Fstrong> Locally host or block external Google Fonts for privacy and speed.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>DNS Prefetching:\u003C\u002Fstrong> Pre-connect to third-party domains like Analytics and CDN.\u003C\u002Fli>\n\u003C\u002Ful>\n","Optimize your Core Web Vitals (LCP, INP, CLS) with a single click. Lumeo Vitals is a lightweight performance engine designed for modern WordPress site …",122,"2026-03-21T12:47:00.000Z","6.0",[18,127,19,21,128],"inp","speed","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flumeo-vitals.1.0.0.zip",{"attackSurface":131,"codeSignals":216,"taintFlows":242,"riskAssessment":290,"analyzedAt":301},{"hooks":132,"ajaxHandlers":174,"restRoutes":190,"shortcodes":205,"cronEvents":206,"entryPointCount":214,"unprotectedCount":215},[133,139,143,147,151,155,159,164,168,171],{"type":134,"name":135,"callback":136,"file":137,"line":138},"action","init","nandcwvrum_init","core-web-vitals-real-user-monitoring-rum.php",83,{"type":134,"name":140,"callback":141,"file":137,"line":142},"admin_menu","nandcwvrum_add_admin_menu",90,{"type":134,"name":144,"callback":145,"file":137,"line":146},"wp_dashboard_setup","nandcwvrum_add_dashboard_widget",93,{"type":134,"name":148,"callback":149,"file":137,"line":150},"admin_enqueue_scripts","nandcwvrum_admin_enqueue_scripts",96,{"type":134,"name":152,"callback":153,"file":137,"line":154},"wp_enqueue_scripts","nandcwvrum_frontend_enqueue_scripts",104,{"type":134,"name":156,"callback":157,"file":137,"line":158},"rest_api_init","nandcwvrum_register_rest_routes",107,{"type":134,"name":160,"callback":161,"file":162,"line":163},"admin_notices","closure","includes\\admin-page.php",540,{"type":134,"name":165,"callback":165,"file":166,"line":167},"nandcwvrum_daily_aggregation","includes\\analytics.php",401,{"type":134,"name":169,"callback":169,"file":166,"line":170},"nandcwvrum_cleanup_old_data",402,{"type":134,"name":172,"callback":172,"file":166,"line":173},"nandcwvrum_send_email_report",403,[175,180,184],{"action":176,"nopriv":177,"callback":178,"hasNonce":177,"hasCapCheck":177,"file":137,"line":179},"nandcwvrum_export_csv",false,"nandcwvrum_ajax_export_csv",111,{"action":181,"nopriv":177,"callback":182,"hasNonce":177,"hasCapCheck":177,"file":137,"line":183},"nandcwvrum_refresh_dashboard","nandcwvrum_ajax_refresh_dashboard",112,{"action":185,"nopriv":177,"callback":186,"hasNonce":187,"hasCapCheck":187,"file":188,"line":189},"nandcwvrum_test_ga4","nandcwvrum_ajax_test_ga4",true,"includes\\ga4-integration.php",315,[191,199],{"namespace":192,"route":193,"methods":194,"callback":196,"permissionCallback":197,"file":137,"line":198},"nandcwvrum\u002Fv1","\u002Fcollect",[195],"POST","nandcwvrum_collect_metrics","__return_true",362,{"namespace":192,"route":200,"methods":201,"callback":203,"permissionCallback":161,"file":137,"line":204},"\u002Fstats",[202],"GET","nandcwvrum_get_stats",391,[],[207,210,212],{"hook":165,"callback":165,"file":208,"line":209},"includes\\functions.php",190,{"hook":169,"callback":169,"file":208,"line":211},195,{"hook":172,"callback":172,"file":208,"line":213},200,5,3,{"dangerousFunctions":217,"sqlUsage":218,"outputEscaping":225,"fileOperations":76,"externalRequests":64,"nonceChecks":227,"capabilityChecks":227,"bundledLibraries":241},[],{"prepared":219,"raw":76,"locations":220},36,[221],{"file":222,"line":223,"context":224},"uninstall.php",31,"$wpdb->query() with variable interpolation",{"escaped":226,"rawEcho":227,"locations":228},102,6,[229,232,234,235,237,239],{"file":137,"line":230,"context":231},320,"raw output",{"file":137,"line":233,"context":231},339,{"file":162,"line":106,"context":231},{"file":162,"line":236,"context":231},44,{"file":162,"line":238,"context":231},48,{"file":162,"line":240,"context":231},541,[],[243,261,269,282],{"entryPoint":244,"graph":245,"unsanitizedCount":11,"severity":260},"nandcwvrum_save_settings (includes\\admin-page.php:504)",{"nodes":246,"edges":258},[247,252],{"id":248,"type":249,"label":250,"file":162,"line":251},"n0","source","$_POST",535,{"id":253,"type":254,"label":255,"file":162,"line":256,"wp_function":257},"n1","sink","update_option() [Settings Manipulation]",538,"update_option",[259],{"from":248,"to":253,"sanitized":187},"low",{"entryPoint":262,"graph":263,"unsanitizedCount":11,"severity":260},"\u003Cadmin-page> (includes\\admin-page.php:0)",{"nodes":264,"edges":267},[265,266],{"id":248,"type":249,"label":250,"file":162,"line":251},{"id":253,"type":254,"label":255,"file":162,"line":256,"wp_function":257},[268],{"from":248,"to":253,"sanitized":187},{"entryPoint":270,"graph":271,"unsanitizedCount":11,"severity":260},"nandcwvrum_ajax_export_csv (includes\\functions.php:420)",{"nodes":272,"edges":280},[273,276],{"id":248,"type":249,"label":274,"file":208,"line":275},"$_GET (x2)",431,{"id":253,"type":254,"label":277,"file":208,"line":278,"wp_function":279},"get_results() [SQLi]",447,"get_results",[281],{"from":248,"to":253,"sanitized":187},{"entryPoint":283,"graph":284,"unsanitizedCount":11,"severity":260},"\u003Cfunctions> (includes\\functions.php:0)",{"nodes":285,"edges":288},[286,287],{"id":248,"type":249,"label":274,"file":208,"line":275},{"id":253,"type":254,"label":277,"file":208,"line":278,"wp_function":279},[289],{"from":248,"to":253,"sanitized":187},{"summary":291,"deductions":292},"This plugin, \"core-web-vitals-real-user-monitoring-rum\" v1.0.2, exhibits a generally good security posture with strong adherence to best practices in several key areas. The extensive use of prepared statements for SQL queries and a high percentage of properly escaped output demonstrate a solid foundation for preventing common web vulnerabilities. The absence of dangerous functions and critical or high severity taint flows further contributes to its positive security profile.  However, there are notable areas of concern that elevate its risk.  The presence of multiple unprotected AJAX handlers and a REST API route without permission callbacks represent significant attack vectors that could be exploited by unauthenticated users. While the plugin has no recorded vulnerability history, this lack of historical issues should not be mistaken for guaranteed future security, especially given the identified weaknesses in access control for its entry points.  Overall, the plugin has strengths in code hygiene but requires immediate attention to its access control mechanisms to mitigate potential security risks.",[293,296,299],{"reason":294,"points":295},"Unprotected AJAX handlers",10,{"reason":297,"points":298},"REST API route without permission callbacks",8,{"reason":300,"points":64},"Cron events (potential for unintended execution)","2026-03-17T06:45:01.684Z",{"wat":303,"direct":315},{"assetPaths":304,"generatorPatterns":309,"scriptPaths":310,"versionParams":311},[305,306,307,308],"\u002Fwp-content\u002Fplugins\u002Fcore-web-vitals-real-user-monitoring-rum\u002Fassets\u002Fjs\u002Fchart.umd.min.js","\u002Fwp-content\u002Fplugins\u002Fcore-web-vitals-real-user-monitoring-rum\u002Fassets\u002Fjs\u002Fadmin-dashboard.js","\u002Fwp-content\u002Fplugins\u002Fcore-web-vitals-real-user-monitoring-rum\u002Fassets\u002Fcss\u002Fadmin-styles.css","\u002Fwp-content\u002Fplugins\u002Fcore-web-vitals-real-user-monitoring-rum\u002Fassets\u002Fjs\u002Fweb-vitals.min.js",[],[305,306,308],[312,313,314],"core-web-vitals-real-user-monitoring-rum\u002Fassets\u002Fjs\u002Fadmin-dashboard.js?ver=","core-web-vitals-real-user-monitoring-rum\u002Fassets\u002Fcss\u002Fadmin-styles.css?ver=","core-web-vitals-real-user-monitoring-rum\u002Fassets\u002Fjs\u002Fweb-vitals.min.js?ver=",{"cssClasses":316,"htmlComments":318,"htmlAttributes":319,"restEndpoints":321,"jsGlobals":323,"shortcodeOutput":325},[317],"nandcwvrum-orange-icon",[],[320],"toplevel_page_core-web-vitals",[322],"\u002Fwp-json\u002Fnandcwvrum\u002Fv1\u002F",[324],"nandcwvrum_admin",[],{"error":187,"url":327,"statusCode":328,"statusMessage":329,"message":329},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fcore-web-vitals-real-user-monitoring-rum\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":76,"versions":331},[332],{"version":6,"download_url":24,"svn_tag_url":333,"released_at":26,"has_diff":177,"diff_files_changed":334,"diff_lines":26,"trac_diff_url":26,"vulnerabilities":335,"is_current":187},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcore-web-vitals-real-user-monitoring-rum\u002Ftags\u002F1.0.2\u002F",[],[]]