[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNmnLnv1XB2U8K9yuNTX6SeOMXE2_ze84XaHPuSajTO0":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":39,"analysis":146,"fingerprints":533},"cp-referrer-and-conversions-tracking","CP Referrer and Conversion Tracking","1.01.28","codepeople","https:\u002F\u002Fprofiles.wordpress.org\u002Fcodepeople\u002F","\u003Cp>CP Referrer and Conversion Tracking is a useful tool for evaluating the result of marketing campaigns. It records the referral website of each visitor and it can also be used to identify the referral of the conversions (purchases, contact form submissions, appointments, bookings).\u003C\u002Fp>\n\u003Cp>The main features are:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Records the referrer (HTTP referer) of each website visitor (tracking logs)\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Provides graphics \u002F stats of referral websites and visitors (tracking stats)\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Allow to create different referral links for different marketing campaigns (referral sources)\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Records the original referrer and the latest referrer of the conversions\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Includes integration with multiple plugins for tracking its conversions\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Recording the referrer\u003C\u002Fh4>\n\u003Cp>The CP Referrer and Conversion Tracking plugin implements an efficient way to detect and store the referral website when the HTTP referer header is present(when the user clicks on a link pointing to a webpage). This automatically identify for example when the user comes from Google, Facebook or from other external website.\u003C\u002Fp>\n\u003Cp>The visitors with identified referrers are listed under the “Tracking Logs” menu. The referrer, IP address and time of the first visit is recorded as part of the logs.\u003C\u002Fp>\n\u003Cp>To avoid storing a large number of referrer logs, the old logs are deleted as default every 90 days. This number of days to delete old logs can be edited from the plugin settings.\u003C\u002Fp>\n\u003Ch4>Graphics \u002F stats of referral websites\u003C\u002Fh4>\n\u003Cp>The recorded logs are used to render graphics indicating the evolution of logs received per day, the logs received per hour and the referral websites identified.\u003C\u002Fp>\n\u003Cp>Stats are provided also for logs received per year, during the latest 12 months, during the latest 12 weeks and during the latest 30 days. This helps to evaluate evolution of referrers and visitors during different periods of time. Note: These stats may be impacted by the automatic deletion of old logs.\u003C\u002Fp>\n\u003Cp>This section is located under the plugin menu “Tracking Stats”.\u003C\u002Fp>\n\u003Ch4>Creating different referral links for different marketing campaigns\u003C\u002Fh4>\n\u003Cp>The purpose of this section is to create links for different marketing platforms, making easier to identify the referral.\u003C\u002Fp>\n\u003Cp>For example you can setup a different entry point for a Google Adwords campaign and for a Facebook Ads, this way the exact referrer source will be reported even if the automatic HTTP referer info is not sent.\u003C\u002Fp>\n\u003Cp>This section is located under the plugin menu “Referral Sources”.\u003C\u002Fp>\n\u003Ch4>Tracking Conversions\u003C\u002Fh4>\n\u003Cp>The CP Referrer and Conversion Tracking plugin can identify the referral of conversions, for example contact form submissions, purchases, bookings, appointment requests, etc…\u003C\u002Fp>\n\u003Cp>The conversions are listed with the referrer of the initial visit and also with the referrer of the latest user session in the case the visitor used a different referrer for the latest sessions when the conversion happened.\u003C\u002Fp>\n\u003Cp>To register the conversions the related add-on must be activated (add-ons are included in the plugin). Currently the plugin support several conversion add-ons for different plugins (contact forms, appointment requests, bookings, paypal payments) and we will be continuously working adding new integrations to identify conversions of third party plugins.\u003C\u002Fp>\n\u003Cp>This section is located under the menu “Tracking Conversions”.\u003C\u002Fp>\n\u003Ch4>Tracking conversions originated in other plugins\u003C\u002Fh4>\n\u003Cp>The “Add Ons” menu already includes several conversion add-ons for different plugins, for example to track conversions like the following:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Contact forms\u003C\u002Fli>\n\u003Cli>Quote request forms\u003C\u002Fli>\n\u003Cli>Appointment bookings\u003C\u002Fli>\n\u003Cli>General bookings\u003C\u002Fli>\n\u003Cli>Polls\u003C\u002Fli>\n\u003Cli>Payment forms \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Includes conversion tracking for the following plugins:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoocommerce\u002F\" rel=\"ugc\">WooCommerce\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcontact-form-7\u002F\" rel=\"ugc\">Contact Form 7\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcontact-form-to-email\u002F\" rel=\"ugc\">Contact Form to Email\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fappointment-hour-booking\u002F\" rel=\"ugc\">Appointment Hour Booking\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fappointment-booking-calendar\u002F\" rel=\"ugc\">Appointment Booking Calendar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbooking-calendar-contact-form\u002F\" rel=\"ugc\">Booking Calendar Contact Form\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcalculated-fields-form\u002F\" rel=\"ugc\">Calculated Fields Form\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcp-contact-form-with-paypal\u002F\" rel=\"ugc\">Contact Form with PayPal\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcp-polls\u002F\" rel=\"ugc\">CP Polls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-time-slots-booking-form\u002F\" rel=\"ugc\">WP Time Slots Booking Form\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>New add-ons will be added soon.\u003C\u002Fp>\n\u003Cp>For developers: If you need to track a custom conversion writing the please see in the FAQ the supported hooks.\u003C\u002Fp>\n","CP Referrer and Conversion Tracking registers how the website visitors reached the website, identifying the referral website. Also track conversions.",400,13602,94,12,"2026-01-26T15:21:00.000Z","6.9.4","4.0","",[20,21,22,23,24],"conversion","logs","referer","referrer","stats","http:\u002F\u002Fwordpress.dwbooster.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcp-referrer-and-conversions-tracking.1.01.28.zip",100,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":35,"avg_patch_time_days":36,"trust_score":37,"computed_at":38},34,88650,95,964,76,"2026-04-03T18:42:42.330Z",[40,64,82,103,120],{"slug":41,"name":42,"version":43,"author":44,"author_profile":45,"description":46,"short_description":47,"active_installs":48,"downloaded":49,"rating":50,"num_ratings":51,"last_updated":52,"tested_up_to":53,"requires_at_least":54,"requires_php":18,"tags":55,"homepage":61,"download_link":62,"security_score":63,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-block-referral-spam","Block Referral Spam","1.2.1","WPDeveloper","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpdevteam\u002F","\u003Cp>\u003Ca href=\"http:\u002F\u002Fwpdeveloper.net\u002F\" rel=\"nofollow ugc\">WPDeveloper.net\u003C\u002Fa> brings ‘Block Referral Spam’ for all WordPress user for free.\u003C\u002Fp>\n\u003Cp>This plugins blocks the most number of Referral Spams. Now no more notice from Google and no more weird report in Google Analytics.\u003C\u002Fp>\n\u003Cp>Its super simple to use, nothing to setup, just install and activate the plugin, we will protect from 375+ separate domain (thanks to the user contribution) that spam your Google Analytics. This domain list is always increasing and biggest list available online.\u003C\u002Fp>\n\u003Cp>You could give feedback to us directly, and suggest new spam domain, \u003Ca href=\"https:\u002F\u002Fwpdeveloper.net\u002Fgo\u002FBRS-UO\" rel=\"nofollow ugc\">click here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Here is our \u003Ca href=\"https:\u002F\u002Fwpdeveloper.net\u002Fgo\u002FBlog-BRS-A1\" rel=\"nofollow ugc\">blog post\u003C\u002Fa>, on how to get Top Referrer right from your WordPress Dashboard.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Check Our Other Plugins:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-analytify\u002F\" rel=\"ugc\">Analytify – Ultimate Google Analytics Dashboard\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftwitter-cards-meta\u002F\" rel=\"ugc\">Twitter Cards Meta\u003C\u002Fa>\u003C\u002Fstrong> \u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwpdeveloper.net\u002Ffree-plugin\u002Fwp-scheduled-posts\u002F\" rel=\"nofollow ugc\">WP Scheduled Posts\u003C\u002Fa>\u003C\u002Fstrong> \u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ffacebook-secret-meta\u002F\" rel=\"ugc\">Facebook Secret Meta\u003C\u002Fa>\u003C\u002Fstrong> \u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-author-report-free\u002F\" rel=\"ugc\">WP Author Report Free\u003C\u002Fa>\u003C\u002Fstrong> \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Contribute in GitHub!!\u003C\u002Fstrong>\u003Cbr \u002F>\n  Contribute in GitHub. \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FARCommunications\u002FBlock-Referral-Spam\" rel=\"nofollow ugc\">Click here\u003C\u002Fa>!\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>This plugin is a great example of OpenSource community. Pull request are very welcome and usually accepted within 24hr. Together we fight with evil spam bot.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Don’t get confused with the term \u003Cem>Referrer Spam\u003C\u002Fem> or \u003Cem>Referral Spam\u003C\u002Fem> or \u003Cem>Referer Spam\u003C\u002Fem>. Google basically calls it \u003Cem>Referral Traffic\u003C\u002Fem>. It’s all mean the same thing.\u003C\u002Fp>\n\u003Ch3>Donation\u003C\u002Fh3>\n\u003Cp>You could use our free & pro plugins fro link below.\u003C\u002Fp>\n\u003Cp>https:\u002F\u002Fwpdeveloper.net\u002F\u003C\u002Fp>\n","This plugins blocks maximum Referral Spams. Now no more notice from Google and no more weird report in Google Analytics.",300,9296,82,9,"2017-06-08T21:58:00.000Z","4.8.28","2.5.0",[56,57,58,59,60],"google-analytics-referral-spam","referer-spam","referral-spam","referral-traffic","referrer-spam","https:\u002F\u002Fwpdeveloper.net\u002Ffree-plugin\u002Fblock-referral-spam\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-block-referral-spam.1.2.1.zip",85,{"slug":65,"name":66,"version":67,"author":68,"author_profile":69,"description":70,"short_description":71,"active_installs":72,"downloaded":73,"rating":28,"num_ratings":28,"last_updated":74,"tested_up_to":75,"requires_at_least":76,"requires_php":18,"tags":77,"homepage":80,"download_link":81,"security_score":63,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"popstats","PopStats","3.0","oxig3n","https:\u002F\u002Fprofiles.wordpress.org\u002Foxig3n\u002F","\u003Cp>Popstats is a powerfull realtime stats tool for your wordpress, it makes you get to know more about your visitors.\u003C\u002Fp>\n\u003Cp>With PopStats now you can know:\u003Cbr \u002F>\n* where are your visitors coming from?\u003Cbr \u002F>\n* How many users are on line.\u003Cbr \u002F>\n* What browser are they using?\u003Cbr \u002F>\n* What OS are they using?\u003Cbr \u002F>\n* What’s the max number of users conected at same time.\u003Cbr \u002F>\n* If a user is on line, you can see what is he\u002Fshe watching.\u003C\u002Fp>\n\u003Cp>Popstats is a wordpress Plugin who was forgoten in the past, but i recover it and make it better. The project was started by Luis Sancho with the first version,\u003Cbr \u002F>\nand sometime before Andres Nieto made the second version, but now popstats is enhaced and updated by me, Victor Martinez(Oxigen).\u003C\u002Fp>\n\u003Cp>This version, can recognize all the new navigators like Chrome of Safari for Windows, and that’s why i updated the code, because before safari just ran over MacOS\u003Cbr \u002F>\nbut now is available a version for Windows. And the Style was updated to look like the gray dashboard of wordpress.\u003C\u002Fp>\n\u003Ch3>About the Autor\u003C\u002Fh3>\n\u003Cp>Go get more information visit \u003Ca href=\"http:\u002F\u002Fhyanetworks.com\u002F\" title=\"Your favorite software\" rel=\"nofollow ugc\">hyanetworks\u003C\u002Fa>\u003C\u002Fp>\n","Popstats is a plugin to enhace statics of your blog, now you'll know more about your visitors.",30,12113,"2010-12-30T17:28:00.000Z","2.9.2","2.1",[78,21,79,24],"avg","statistics","http:\u002F\u002Fhyanetworks.com\u002Fwordpress\u002F2010\u002F03\u002F03\u002Fmi-version-del-popstats\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpopstats.zip",{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":90,"downloaded":91,"rating":27,"num_ratings":92,"last_updated":93,"tested_up_to":94,"requires_at_least":95,"requires_php":18,"tags":96,"homepage":100,"download_link":101,"security_score":63,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":102},"advanced-wp-hide-referer","Advanced WP Hide Referer","1.1","wplabs","https:\u002F\u002Fprofiles.wordpress.org\u002Fwplabs\u002F","\u003Cp>Hide Referer for WordPress removes the referer (referrer) from all external links on your blog. It does this by converting all outgoing\u003Cbr \u002F>\nlinks on your blog using the href.li service and effectively hides your site as origin of the referred link.\u003C\u002Fp>\n\u003Cp>For example, Hide Referer for WordPress will convert an external link to wordpress.org, to \u003Ca href=\"https:\u002F\u002Fhref.li\u002F?http:\u002F\u002Fwordpress.org\" rel=\"nofollow ugc\">https:\u002F\u002Fhref.li\u002F?http:\u002F\u002Fwordpress.org\u003C\u002Fa>.\u003C\u002Fp>\n","Hide Referer for WordPress removes the referer (referrer) from all external links on your blog. It does this by converting all outgoing",10,2422,1,"2015-05-04T09:32:00.000Z","4.2.39","3.3",[97,98,99,22,23],"hide","hide-refer","refer","http:\u002F\u002Fwww.gamesax.com\u002Fwpp\u002FAdvanced-WP-Hide-Referer_1-0.zip","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadvanced-wp-hide-referer.zip","2026-03-15T14:54:45.397Z",{"slug":104,"name":105,"version":106,"author":107,"author_profile":108,"description":109,"short_description":110,"active_installs":28,"downloaded":111,"rating":28,"num_ratings":28,"last_updated":112,"tested_up_to":113,"requires_at_least":114,"requires_php":115,"tags":116,"homepage":118,"download_link":119,"security_score":63,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"stats-for-wp","Stats for WP","1.0.3","statsforwp","https:\u002F\u002Fprofiles.wordpress.org\u002Fstatsforwp\u002F","\u003Cp>Stats for WP can help admin understand better about how users use your site, you will know each users view logs \u002F view history in backend, it is helpful to know why users stay on your site and why users go away, which page is user interesting on your site. When users logged in your site, we will log user ID, view pages, referrers URL, user IP, user agent, … and so on, if user did not logged in your site, we will show user ID as 0.\u003C\u002Fp>\n\u003Cp>stats for WP  plugin will not trace bots, spiders, crawlers.\u003C\u002Fp>\n\u003Cp>We are still add more features for help you use the stats plugin more easier and get more informations in backend. Any feature request is very welcome.\u003C\u002Fp>\n","When users view your site, we will log user ID, view pages, referrers URL, user IP, user agent, ... and so on, to admin you understand how users worki …",971,"2018-07-18T13:29:00.000Z","4.9.29","3.2","5.2.4",[21,24,117],"user-stats","https:\u002F\u002Fgithub.com\u002Fstatsforwp\u002FStats-for-WP","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstats-for-wp.zip",{"slug":121,"name":122,"version":123,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":128,"downloaded":129,"rating":130,"num_ratings":131,"last_updated":132,"tested_up_to":16,"requires_at_least":133,"requires_php":134,"tags":135,"homepage":141,"download_link":142,"security_score":143,"vuln_count":144,"unpatched_count":28,"last_vuln_date":145,"fetched_at":30},"wp-mail-smtp","WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin","4.7.1","Syed Balkhi","https:\u002F\u002Fprofiles.wordpress.org\u002Fsmub\u002F","\u003Ch3>WordPress Mail SMTP Plugin\u003C\u002Fh3>\n\u003Cp>Is your WordPress site not sending emails? You’re not alone. 3+ million websites use WP Mail SMTP to send emails reliably.\u003C\u002Fp>\n\u003Cp>Our goal is to make email deliverability easy so that your emails always reach the inbox.\u003C\u002Fp>\n\u003Cp>WP Mail SMTP fixes your email deliverability issues by reconfiguring WordPress to use a proper SMTP provider when sending emails.\u003C\u002Fp>\n\u003Cp>Best of all, our easy-to-use Setup Wizard and detailed documentation guide you through the process.\u003C\u002Fp>\n\u003Cp>WP Mail SMTP is free and has everything you need to reliably send your WordPress emails!\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">\u003Cstrong>WP Mail SMTP Pro\u003C\u002Fstrong>\u003C\u002Fa> unlocks even more powerful features like email logging, advanced email reporting and stats, backup connections, email alerts, smart conditional routing, and much more.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FQYJuPyiKKZc?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch4>What is SMTP?\u003C\u002Fh4>\n\u003Cp>SMTP (Simple Mail Transfer Protocol) is an industry-standard for sending emails. Proper SMTP configuration helps increase email deliverability by adding authentication to the emails sent from your site.\u003C\u002Fp>\n\u003Cp>Popular email clients like Gmail, Yahoo, Office 365, and Zoho are in a constant battle with email spammers, so they check whether emails are originating from a genuine sender. If the proper authentication isn’t there, emails either go in the SPAM folder or, worse, disappear.\u003C\u002Fp>\n\u003Cp>This is a problem for a lot of WordPress sites. By default, WordPress uses the PHP mail function to send emails generated by WordPress or any contact form plugin like \u003Ca href=\"https:\u002F\u002Fwpforms.com\u002F?utm_source=wprepo-wpmailsmtp&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">WPForms\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>But most \u003Ca href=\"https:\u002F\u002Fwww.wpbeginner.com\u002Fwordpress-hosting\u002F\" rel=\"nofollow ugc\">WordPress hosting companies\u003C\u002Fa> don’t have their servers properly configured for sending PHP emails.\u003C\u002Fp>\n\u003Cp>This is why WordPress emails aren’t delivered.\u003C\u002Fp>\n\u003Ch4>How does WP Mail SMTP work?\u003C\u002Fh4>\n\u003Cp>WP Mail SMTP plugin easily resolves email delivery problems by changing the way your WordPress site sends email. We reconfigure the \u003Ccode>wp_mail()\u003C\u002Fcode> function to use proper SMTP host credentials or an SMTP mail provider.\u003C\u002Fp>\n\u003Cp>With our built-in SMTP mail provider integrations (recommended), emails are sent using the provider’s direct API. Even if your web host is blocking SMTP ports, your emails will still be sent successfully.\u003C\u002Fp>\n\u003Cp>This helps you fix all \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002Fwordpress-not-sending-email\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">WordPress not sending email\u003C\u002Fa> issues.\u003C\u002Fp>\n\u003Cp>WP Mail SMTP plugin includes many different SMTP mailers:\u003C\u002Fp>\n\u003Col>\n\u003Cli>SendLayer \u003Cstrong>(#1 Recommended)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>SMTP.com \u003Cstrong>(Recommended)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Brevo (formerly Sendinblue) SMTP \u003Cstrong>(Recommended)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Gmail SMTP (Gmail, Google Workspace, G Suite)\u003C\u002Fli>\n\u003Cli>Elastic Email\u003C\u002Fli>\n\u003Cli>Mailgun SMTP\u003C\u002Fli>\n\u003Cli>Mailjet SMTP\u003C\u002Fli>\n\u003Cli>SendGrid SMTP\u003C\u002Fli>\n\u003Cli>Postmark SMTP\u003C\u002Fli>\n\u003Cli>SparkPost SMTP\u003C\u002Fli>\n\u003Cli>SMTP2GO\u003C\u002Fli>\n\u003Cli>Microsoft SMTP One-Click Setup (Outlook.com and Office 365) \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">[Pro]\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Amazon SES SMTP \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">[Pro]\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Zoho Mail SMTP \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">[Pro]\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Other SMTP\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>For most options, you can specify the “from name” and “email address” for outgoing emails too.\u003C\u002Fp>\n\u003Cp>All of these powerful features make WP Mail SMTP the best SMTP solution for WordPress.\u003C\u002Fp>\n\u003Cp>If you don’t know which mailer to choose, see our \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002Fdocs\u002Fa-complete-guide-to-wp-mail-smtp-mailers\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">Complete Guide to WP Mail SMTP Mailers\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>SendLayer\u003C\u002Fh4>\n\u003Cp>SendLayer is our #1 recommended transactional email service.\u003C\u002Fp>\n\u003Cp>Its affordable pricing and simple setup make it the perfect choice for sending emails from WordPress. It also has open and click tracking and email logs.\u003C\u002Fp>\n\u003Cp>SendLayer is reliable, fast, and easy to set up. You can send hundreds of emails for free when you sign up for a trial.\u003C\u002Fp>\n\u003Cp>Read our \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002Fdocs\u002Fhow-to-set-up-the-sendlayer-mailer-in-wp-mail-smtp\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">SendLayer documentation\u003C\u002Fa> for more details.\u003C\u002Fp>\n\u003Ch4>SMTP.COM\u003C\u002Fh4>\n\u003Cp>SMTP.com is a recommended transactional email service.\u003C\u002Fp>\n\u003Cp>With over 22 years of email delivery expertise, SMTP.com has a reputation for being one of the most reliable senders on the internet.\u003C\u002Fp>\n\u003Cp>You can start sending emails in minutes and benefit from 50,000 free emails in your first 30 days.\u003C\u002Fp>\n\u003Cp>Read our \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002Fdocs\u002Fhow-to-set-up-the-smtp-com-mailer-in-wp-mail-smtp\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">SMTP.com documentation\u003C\u002Fa> for more details.\u003C\u002Fp>\n\u003Ch4>Brevo (formerly Sendinblue) SMTP\u003C\u002Fh4>\n\u003Cp>Brevo is a recommended transactional email service. It serves 80,000+ companies worldwide.\u003C\u002Fp>\n\u003Cp>Brevo is reliable, fast, and gives you 300 free emails per day.\u003C\u002Fp>\n\u003Cp>Read our \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002Fdocs\u002Fhow-to-set-up-the-sendinblue-mailer-in-wp-mail-smtp\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">Brevo documentation\u003C\u002Fa> for more details.\u003C\u002Fp>\n\u003Ch3>WP Mail SMTP PRO\u003C\u002Fh3>\n\u003Cp>In addition to native Microsoft, Amazon SES, and Zoho Mail integrations, WP Mail SMTP Pro provides access to many other powerful features.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">Click here to purchase WP Mail SMTP Pro now!\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Email Log\u003C\u002Fh3>\n\u003Cp>Email logging is a powerful feature that keeps a record of all sent emails in WordPress. Email logging helps you to archive, audit, resend, or test email delivery and formatting.\u003C\u002Fp>\n\u003Cp>Our \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002Flog-emails-wordpress\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">WordPress email logs\u003C\u002Fa> also include:\u003C\u002Fp>\n\u003Ch4>Email Log Details\u003C\u002Fh4>\n\u003Cp>Our email logs provide a complete history of all emails sent from WordPress. View the subject, sender, recipients, content, headers, open and click rates, delivery status, source plugin, and more!\u003C\u002Fp>\n\u003Ch4>Resend Emails\u003C\u002Fh4>\n\u003Cp>Resend emails individually or in bulk, whether they failed or were delivered successfully. You can also forward important emails to an alternative email address.\u003C\u002Fp>\n\u003Ch4>And many more Email Log Features\u003C\u002Fh4>\n\u003Cp>Store all email attachments, export email logs, print emails, see delivery status, and more.\u003C\u002Fp>\n\u003Ch3>Email Reports\u003C\u002Fh3>\n\u003Cp>Review weekly sent and failed emails in a dashboard chart.\u003C\u002Fp>\n\u003Cp>Email reports make it easy to track deliverability and engagement. Open rates and click-through rates are grouped by subject line, making it easy to see the performance of your campaigns or notifications.\u003C\u002Fp>\n\u003Ch4>Weekly Email Summary\u003C\u002Fh4>\n\u003Cp>Get statistics about WordPress emails, including how many emails are being sent and which ones are being opened and clicked. The Summary also shows you deliverability statistics without the need to log in to WordPress to check them.\u003C\u002Fp>\n\u003Ch4>Track Email Opens and Clicks\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002Fenable-wordpress-email-tracking\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">View open and click stats for WordPress emails\u003C\u002Fa>, grouped by subject line in your Email Report.\u003C\u002Fp>\n\u003Ch3>Email Alerts\u003C\u002Fh3>\n\u003Cp>If your emails stop sending, get notified instantly via Slack, Microsoft Teams, Discord, SMS\u002F Twilio, webhooks, or email (via secure API).\u003C\u002Fp>\n\u003Cp>In combination with our email logging and resending features, Email Alerts ensure that no important email will ever be lost.\u003C\u002Fp>\n\u003Ch3>Backup Connection\u003C\u002Fh3>\n\u003Cp>Configure an extra connection that kicks in if your primary connection fails. WP Mail SMTP automatically detects connection issues and automatically switches to the backup mailer. It will also automatically retry emails that failed.\u003C\u002Fp>\n\u003Ch3>Smart Conditional Routing\u003C\u002Fh3>\n\u003Cp>Create criteria to send different types of emails using different mailers. Filter by the contents of the email Subject or Message, From or To addresses, the plugin that generated the email, and more.\u003C\u002Fp>\n\u003Cp>This allows you to mix transactional and marketing providers to improve deliverability.\u003C\u002Fp>\n\u003Ch3>Rate Limiting\u003C\u002Fh3>\n\u003Cp>Control the number of emails your WordPress site sends in a specific amount of time so you stay within your SMTP provider’s rate limits.\u003C\u002Fp>\n\u003Cp>WP Mail SMTP allows you to specify the maximum number of emails that will be sent every minute, hour, day, week, or month and automatically queues emails to stay within those limits.\u003C\u002Fp>\n\u003Ch3>Optimized Email Sending\u003C\u002Fh3>\n\u003Cp>Are emails slowing down your site? Let WP Mail SMTP queue your emails for better performance.\u003C\u002Fp>\n\u003Cp>With optimized sending, emails are queued in the background and sent when your server has sufficient resources, avoiding bottlenecks that can slow down your site.\u003C\u002Fp>\n\u003Ch3>Manage WordPress Emails and Notifications\u003C\u002Fh3>\n\u003Cp>Control the default notifications WordPress sends. Use a simple switch to disable specific types of notifications if you don’t want to receive them.\u003C\u002Fp>\n\u003Ch3>WordPress Multisite\u003C\u002Fh3>\n\u003Ch4>WordPress Multisite Network Settings\u003C\u002Fh4>\n\u003Cp>For users running a multisite network, save time with a centralized location to easily configure your SMTP settings for all sites.\u003C\u002Fp>\n\u003Ch4>Manage Multisite Email Logs Easily\u003C\u002Fh4>\n\u003Cp>Network Admins can view and manage email logs for subsites with easy switching and dashboard views.\u003C\u002Fp>\n\u003Ch3>Expert Support\u003C\u002Fh3>\n\u003Cp>We provide \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Fwp-mail-smtp-support-policy\u002F\" rel=\"ugc\">limited support\u003C\u002Fa> on the WordPress.org forums. World-class one-on-one email support is available to \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">WP Mail SMTP Pro\u003C\u002Fa> users.\u003C\u002Fp>\n\u003Ch4>White Glove Setup\u003C\u002Fh4>\n\u003Cp>If you’re not sure how to fix your emails, sit back and relax. We’ll set up WP Mail SMTP for you!\u003C\u002Fp>\n\u003Cp>White Glove Setup includes installation, configuration in WordPress, DNS configuration, full mailer setup, and testing. White Glove Setup is available for our recommended mailers: SendLayer, Brevo, and SMTP.com.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>WP Mail SMTP plugin was originally created by Callum Macdonald. It is now owned and maintained by the team behind \u003Ca href=\"https:\u002F\u002Fwpforms.com\u002F?utm_source=wprepo-wpmailsmtp&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">WPForms\u003C\u002Fa> – the best drag & drop form builder for WordPress.\u003C\u002Fp>\n\u003Cp>You can try the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwpforms-lite\u002F\" rel=\"ugc\">free version of WPForms plugin\u003C\u002Fa> to see why it’s the best in the market.\u003C\u002Fp>\n","Make email delivery easy for WordPress. Connect with SMTP, Gmail, Outlook, SendGrid, Mailgun, SES, Zoho, + more. Rated #1 WordPress SMTP Email plugin.",4000000,76682108,96,5071,"2025-11-26T15:18:00.000Z","5.5","7.4",[136,137,138,139,140],"email","email-logs","gmail","outlook","smtp","https:\u002F\u002Fwpmailsmtp.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-mail-smtp.4.7.1.zip",99,2,"2024-07-19 00:00:00",{"attackSurface":147,"codeSignals":257,"taintFlows":344,"riskAssessment":522,"analyzedAt":532},{"hooks":148,"ajaxHandlers":251,"restRoutes":252,"shortcodes":253,"cronEvents":254,"entryPointCount":28,"unprotectedCount":28},[149,155,159,163,165,167,169,171,173,175,179,182,184,186,188,190,192,194,196,198,200,202,204,206,208,211,213,215,217,219,224,228,232,237,241,245,249],{"type":150,"name":151,"callback":152,"priority":90,"file":153,"line":154},"action","init","check_active","addons\\abc.addon.php",33,{"type":150,"name":156,"callback":157,"priority":90,"file":153,"line":158},"cpabc_process_data_before_insert","register_referrer",37,{"type":150,"name":160,"callback":161,"priority":90,"file":153,"line":162},"cpabc_process_data","track_conversion_submission",39,{"type":150,"name":151,"callback":152,"priority":90,"file":164,"line":154},"addons\\ahb.addon.php",{"type":150,"name":166,"callback":157,"priority":90,"file":164,"line":158},"cpappb_process_data_before_insert",{"type":150,"name":168,"callback":161,"priority":90,"file":164,"line":162},"cpappb_process_data",{"type":150,"name":151,"callback":152,"priority":90,"file":170,"line":154},"addons\\bccf.addon.php",{"type":150,"name":172,"callback":157,"priority":90,"file":170,"line":158},"dexbccf_process_data_before_insert",{"type":150,"name":174,"callback":161,"priority":90,"file":170,"line":162},"dexbccf_process_data",{"type":150,"name":176,"callback":161,"priority":90,"file":177,"line":178},"wpcf7_before_send_mail","addons\\cf7.addon.php",35,{"type":150,"name":180,"callback":157,"priority":90,"file":181,"line":158},"cpcff_process_data_before_insert","addons\\cff.addon.php",{"type":150,"name":183,"callback":161,"priority":90,"file":181,"line":162},"cpcff_process_data",{"type":150,"name":151,"callback":152,"priority":90,"file":185,"line":154},"addons\\cfte.addon.php",{"type":150,"name":187,"callback":157,"priority":90,"file":185,"line":158},"cfte_process_data_before_insert",{"type":150,"name":189,"callback":161,"priority":90,"file":185,"line":162},"cfte_process_data",{"type":150,"name":151,"callback":152,"priority":90,"file":191,"line":154},"addons\\cfwpp.addon.php",{"type":150,"name":193,"callback":157,"priority":90,"file":191,"line":158},"cpcfwpp_process_data_before_insert",{"type":150,"name":195,"callback":161,"priority":90,"file":191,"line":162},"cpcfwpp_process_data",{"type":150,"name":151,"callback":152,"priority":90,"file":197,"line":154},"addons\\cppolls.addon.php",{"type":150,"name":199,"callback":157,"priority":90,"file":197,"line":158},"cppolls_process_data_before_insert",{"type":150,"name":201,"callback":161,"priority":90,"file":197,"line":162},"cppolls_process_data",{"type":150,"name":151,"callback":152,"priority":90,"file":203,"line":154},"addons\\userregistration.addon.php",{"type":150,"name":205,"callback":161,"priority":90,"file":203,"line":158},"user_register",{"type":150,"name":166,"callback":157,"priority":90,"file":207,"line":178},"addons\\woocommerce.addon.php",{"type":150,"name":209,"callback":210,"priority":90,"file":207,"line":158},"woocommerce_admin_order_data_after_billing_address","my_custom_checkout_field_display_admin_order_meta",{"type":150,"name":212,"callback":161,"priority":90,"file":207,"line":162},"woocommerce_new_order",{"type":150,"name":151,"callback":152,"priority":90,"file":214,"line":154},"addons\\wptsbk.addon.php",{"type":150,"name":216,"callback":157,"priority":90,"file":214,"line":158},"cptslotsb_process_data_before_insert",{"type":150,"name":218,"callback":161,"priority":90,"file":214,"line":162},"cptslotsb_process_data",{"type":150,"name":220,"callback":221,"file":222,"line":223},"admin_bar_menu","codepeople_add_promote_banner_cpreferrer","banner.php",104,{"type":150,"name":151,"callback":225,"file":226,"line":227},"data_management","cp-referrer-tracking-plugin.php",60,{"type":150,"name":229,"callback":230,"priority":90,"file":226,"line":231},"cpreftrack_register_conversion","register_conversion",61,{"type":233,"name":234,"callback":235,"priority":90,"file":226,"line":236},"filter","cpreftrack_referrer","referrer_filter",62,{"type":233,"name":238,"callback":239,"file":226,"line":240},"cron_schedules","isa_add_cron_recurrence_interval",65,{"type":150,"name":242,"callback":243,"file":226,"line":244},"cpreftrack_del_old_hook_fmin","delete_old_logs",69,{"type":150,"name":246,"callback":247,"priority":92,"file":226,"line":248},"admin_enqueue_scripts","insert_adminScripts",74,{"type":150,"name":250,"callback":250,"file":226,"line":37},"admin_menu",[],[],[],[255],{"hook":242,"callback":242,"file":226,"line":256},67,{"dangerousFunctions":258,"sqlUsage":277,"outputEscaping":304,"fileOperations":28,"externalRequests":28,"nonceChecks":144,"capabilityChecks":51,"bundledLibraries":343},[259,264,267,271,274],{"fn":260,"file":261,"line":262,"context":263},"unserialize","cp-admin-int-message-list.inc.php",185,"$data = unserialize($events[$i]->data);",{"fn":260,"file":265,"line":248,"context":266},"cp-admin-int-report.inc.php","$params = unserialize($item->posted_data);",{"fn":260,"file":268,"line":269,"context":270},"cp-main-class.inc.php",271,"$data = unserialize($logs[0]->data);",{"fn":260,"file":268,"line":272,"context":273},375,"$data = unserialize($item->data);",{"fn":260,"file":268,"line":275,"context":276},516,"$data = unserialize($item->posted_data);",{"prepared":278,"raw":51,"locations":279},50,[280,284,288,290,293,296,299,301,302],{"file":281,"line":282,"context":283},"classes\\cp-base-class.inc.php",19,"$wpdb->get_col() with variable interpolation",{"file":285,"line":286,"context":287},"cp-admin-int-conversions-list.inc.php",32,"$wpdb->query() with variable interpolation",{"file":261,"line":289,"context":287},38,{"file":291,"line":292,"context":287},"cp-admin-int-parameters-list.inc.php",46,{"file":265,"line":294,"context":295},52,"$wpdb->get_results() with variable interpolation",{"file":297,"line":298,"context":295},"cp-full-stats.inc.php",18,{"file":268,"line":300,"context":295},21,{"file":268,"line":33,"context":295},{"file":268,"line":303,"context":295},49,{"escaped":305,"rawEcho":298,"locations":306},370,[307,310,311,313,315,318,320,322,324,326,328,331,333,334,335,337,339,341],{"file":207,"line":308,"context":309},75,"raw output",{"file":222,"line":37,"context":309},{"file":222,"line":312,"context":309},83,{"file":222,"line":314,"context":309},89,{"file":316,"line":317,"context":309},"cp-addons.inc.php",154,{"file":316,"line":319,"context":309},158,{"file":285,"line":321,"context":309},122,{"file":285,"line":323,"context":309},164,{"file":285,"line":325,"context":309},178,{"file":285,"line":327,"context":309},183,{"file":329,"line":330,"context":309},"cp-admin-int-list.inc.php",121,{"file":261,"line":332,"context":309},143,{"file":291,"line":319,"context":309},{"file":265,"line":317,"context":309},{"file":265,"line":336,"context":309},214,{"file":297,"line":338,"context":309},87,{"file":268,"line":340,"context":309},398,{"file":268,"line":342,"context":309},410,[],[345,388,417,437,451,462,480,499,510],{"entryPoint":346,"graph":347,"unsanitizedCount":28,"severity":387},"\u003Ccp-admin-int-conversions-list.inc> (cp-admin-int-conversions-list.inc.php:0)",{"nodes":348,"edges":381},[349,354,359,362,364,368,373,376],{"id":350,"type":351,"label":352,"file":285,"line":353},"n0","source","$_GET[?]",26,{"id":355,"type":356,"label":357,"file":285,"line":353,"wp_function":358},"n1","sink","query() [SQLi]","query",{"id":360,"type":351,"label":361,"file":285,"line":289},"n2","$_GET['ld']",{"id":363,"type":356,"label":357,"file":285,"line":289,"wp_function":358},"n3",{"id":365,"type":351,"label":366,"file":285,"line":367},"n4","$_GET",43,{"id":369,"type":356,"label":370,"file":285,"line":371,"wp_function":372},"n5","get_results() [SQLi]",58,"get_results",{"id":374,"type":351,"label":375,"file":285,"line":51},"n6","$_GET (x15)",{"id":377,"type":356,"label":378,"file":285,"line":379,"wp_function":380},"n7","echo() [XSS]",90,"echo",[382,384,385,386],{"from":350,"to":355,"sanitized":383},true,{"from":360,"to":363,"sanitized":383},{"from":365,"to":369,"sanitized":383},{"from":374,"to":377,"sanitized":383},"low",{"entryPoint":389,"graph":390,"unsanitizedCount":28,"severity":387},"\u003Ccp-admin-int-message-list.inc> (cp-admin-int-message-list.inc.php:0)",{"nodes":391,"edges":411},[392,393,395,397,399,400,402,404,406,408],{"id":350,"type":351,"label":352,"file":261,"line":72},{"id":355,"type":356,"label":357,"file":261,"line":394,"wp_function":358},29,{"id":360,"type":351,"label":361,"file":261,"line":396},45,{"id":363,"type":356,"label":357,"file":261,"line":398,"wp_function":358},44,{"id":365,"type":351,"label":366,"file":261,"line":294},{"id":369,"type":356,"label":370,"file":261,"line":401,"wp_function":372},77,{"id":374,"type":351,"label":403,"file":261,"line":51},"$_GET (x11)",{"id":377,"type":356,"label":378,"file":261,"line":405,"wp_function":380},110,{"id":407,"type":351,"label":366,"file":261,"line":294},"n8",{"id":409,"type":356,"label":410,"file":261,"line":262,"wp_function":260},"n9","unserialize() [Object Injection]",[412,413,414,415,416],{"from":350,"to":355,"sanitized":383},{"from":360,"to":363,"sanitized":383},{"from":365,"to":369,"sanitized":383},{"from":374,"to":377,"sanitized":383},{"from":407,"to":409,"sanitized":383},{"entryPoint":418,"graph":419,"unsanitizedCount":28,"severity":387},"\u003Ccp-admin-int-parameters-list.inc> (cp-admin-int-parameters-list.inc.php:0)",{"nodes":420,"edges":432},[421,423,424,425,426,427,428,430],{"id":350,"type":351,"label":352,"file":291,"line":422},40,{"id":355,"type":356,"label":357,"file":291,"line":422,"wp_function":358},{"id":360,"type":351,"label":361,"file":291,"line":294},{"id":363,"type":356,"label":357,"file":291,"line":294,"wp_function":358},{"id":365,"type":351,"label":366,"file":291,"line":236},{"id":369,"type":356,"label":370,"file":291,"line":308,"wp_function":372},{"id":374,"type":351,"label":429,"file":291,"line":51},"$_GET (x13)",{"id":377,"type":356,"label":378,"file":291,"line":431,"wp_function":380},108,[433,434,435,436],{"from":350,"to":355,"sanitized":383},{"from":360,"to":363,"sanitized":383},{"from":365,"to":369,"sanitized":383},{"from":374,"to":377,"sanitized":383},{"entryPoint":438,"graph":439,"unsanitizedCount":28,"severity":387},"\u003Ccp-admin-int-report.inc> (cp-admin-int-report.inc.php:0)",{"nodes":440,"edges":448},[441,443,444,446],{"id":350,"type":351,"label":366,"file":265,"line":442},48,{"id":355,"type":356,"label":370,"file":265,"line":294,"wp_function":372},{"id":360,"type":351,"label":445,"file":265,"line":405},"$_GET (x12)",{"id":363,"type":356,"label":378,"file":265,"line":447,"wp_function":380},132,[449,450],{"from":350,"to":355,"sanitized":383},{"from":360,"to":363,"sanitized":383},{"entryPoint":452,"graph":453,"unsanitizedCount":28,"severity":387},"data_management (cp-main-class.inc.php:145)",{"nodes":454,"edges":460},[455,458],{"id":350,"type":351,"label":456,"file":268,"line":457},"$_SERVER",223,{"id":355,"type":356,"label":370,"file":268,"line":459,"wp_function":372},225,[461],{"from":350,"to":355,"sanitized":383},{"entryPoint":463,"graph":464,"unsanitizedCount":144,"severity":387},"save_edition (cp-main-class.inc.php:302)",{"nodes":465,"edges":476},[466,469,472,475],{"id":350,"type":351,"label":467,"file":268,"line":468},"$_POST['cp_cpreftrack_rep_enable']",310,{"id":355,"type":356,"label":470,"file":268,"line":468,"wp_function":471},"update_option() [Settings Manipulation]","update_option",{"id":360,"type":351,"label":473,"file":268,"line":474},"$_POST['cp_cpreftrack_rep_days']",311,{"id":363,"type":356,"label":470,"file":268,"line":474,"wp_function":471},[477,479],{"from":350,"to":355,"sanitized":478},false,{"from":360,"to":363,"sanitized":478},{"entryPoint":481,"graph":482,"unsanitizedCount":28,"severity":387},"\u003Ccp-main-class.inc> (cp-main-class.inc.php:0)",{"nodes":483,"edges":494},[484,486,487,489,490,491,492,493],{"id":350,"type":351,"label":485,"file":268,"line":457},"$_SERVER (x3)",{"id":355,"type":356,"label":370,"file":268,"line":459,"wp_function":372},{"id":360,"type":351,"label":456,"file":268,"line":488},266,{"id":363,"type":356,"label":410,"file":268,"line":269,"wp_function":260},{"id":365,"type":351,"label":467,"file":268,"line":468},{"id":369,"type":356,"label":470,"file":268,"line":468,"wp_function":471},{"id":374,"type":351,"label":473,"file":268,"line":474},{"id":377,"type":356,"label":470,"file":268,"line":474,"wp_function":471},[495,496,497,498],{"from":350,"to":355,"sanitized":383},{"from":360,"to":363,"sanitized":383},{"from":365,"to":369,"sanitized":383},{"from":374,"to":377,"sanitized":383},{"entryPoint":500,"graph":501,"unsanitizedCount":92,"severity":509},"get_referrer (cp-main-class.inc.php:248)",{"nodes":502,"edges":507},[503,505],{"id":350,"type":351,"label":456,"file":268,"line":504},252,{"id":355,"type":356,"label":370,"file":268,"line":506,"wp_function":372},254,[508],{"from":350,"to":355,"sanitized":478},"high",{"entryPoint":511,"graph":512,"unsanitizedCount":144,"severity":509},"get_entry (cp-main-class.inc.php:262)",{"nodes":513,"edges":519},[514,515,517,518],{"id":350,"type":351,"label":456,"file":268,"line":488},{"id":355,"type":356,"label":370,"file":268,"line":516,"wp_function":372},268,{"id":360,"type":351,"label":456,"file":268,"line":488},{"id":363,"type":356,"label":410,"file":268,"line":269,"wp_function":260},[520,521],{"from":350,"to":355,"sanitized":478},{"from":360,"to":363,"sanitized":478},{"summary":523,"deductions":524},"The \"cp-referrer-and-conversions-tracking\" plugin version 1.01.28 exhibits a generally strong security posture with several good practices observed. The absence of external HTTP requests, file operations, and a low proportion of SQL queries not using prepared statements are positive indicators. Furthermore, the plugin demonstrates robust output escaping and a significant number of capability checks, suggesting a thoughtful approach to sanitization and access control.\n\nHowever, the static analysis reveals potential areas of concern. The presence of five instances of the `unserialize` function is a notable risk, as it can lead to object injection vulnerabilities if not handled with extreme care and input validation. Additionally, the taint analysis indicates two high-severity flows with unsanitized paths, which could be exploited for various attacks. While the plugin has no recorded vulnerability history, the presence of these code signals warrants caution.\n\nIn conclusion, while the plugin has a clean vulnerability record and implements many security best practices, the identified `unserialize` usage and high-severity taint flows represent specific risks that should be thoroughly investigated and mitigated. The lack of direct entry points with missing authentication is a strength, but the internal code risks remain.",[525,527,529],{"reason":526,"points":90},"Dangerous function 'unserialize' used 5 times",{"reason":528,"points":14},"Taint analysis: 2 high severity flows",{"reason":530,"points":531},"Taint analysis: 3 unsanitized paths",7,"2026-03-16T19:49:16.725Z",{"wat":534,"direct":547},{"assetPaths":535,"generatorPatterns":540,"scriptPaths":541,"versionParams":542},[536,537,538,539],"\u002Fwp-content\u002Fplugins\u002Fcp-referrer-and-conversions-tracking\u002Faddons\u002Fcp-referrer-tracking-admin.js","\u002Fwp-content\u002Fplugins\u002Fcp-referrer-and-conversions-tracking\u002Faddons\u002Fcp-referrer-tracking-admin.css","\u002Fwp-content\u002Fplugins\u002Fcp-referrer-and-conversions-tracking\u002Fcp-referrer-tracking-public.js","\u002Fwp-content\u002Fplugins\u002Fcp-referrer-and-conversions-tracking\u002Fcp-referrer-tracking-public.css",[],[536,538],[543,544,545,546],"cp-referrer-and-conversions-tracking\u002Faddons\u002Fcp-referrer-tracking-admin.js?ver=","cp-referrer-and-conversions-tracking\u002Faddons\u002Fcp-referrer-tracking-admin.css?ver=","cp-referrer-and-conversions-tracking\u002Fcp-referrer-tracking-public.js?ver=","cp-referrer-and-conversions-tracking\u002Fcp-referrer-tracking-public.css?ver=",{"cssClasses":548,"htmlComments":549,"htmlAttributes":551,"restEndpoints":552,"jsGlobals":553,"shortcodeOutput":555},[],[550],"\u003C!-- BEGIN CP_REFERRER_TRACKING -->",[],[],[554],"window.cp_reftrack_prefix",[]]