[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fK0VyoUStPgCkKbiCVWODw4bo4IyMA0ZQeuj1LUbt5Ac":3,"$fqPSbumgtfCTYA-sfEo8LcUHzLXAMZ-q4gLatW-ohsZk":464,"$fk6gMv3Ey9oWfe4kpLhxIyPm2azAOjvUa9wV5x3nZCy0":468},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"discovery_status":31,"vulnerabilities":32,"developer":33,"crawl_stats":29,"alternatives":38,"analysis":39,"fingerprints":444},"crystal-ball-insight","Crystal Ball Insights","1.1.1","crystalballinsight","https:\u002F\u002Fprofiles.wordpress.org\u002Fcrystalballinsight\u002F","\u003Cp>\u003Cstrong>Track your website changes and display them on Crystal Ball Insight\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Once you activate your WordPress Web Changes on Crystal Ball, you can track all the site changes automatically. Changes of products and designs and securing your site by following all user activities.\u003C\u002Fp>\n\u003Cp>The plugin is lightning fast and works behind the scenes, so it doesn’t affect site and admin performance.\u003C\u002Fp>\n\u003Cp>This plugin solves the “know who did what and how affect your goals” by tracking who in your team makes a change and what changes, displaying it in an easy view on the Crystal Ball account or the Dashboard of your WordPress site.\u003C\u002Fp>\n\u003Ch3>With the Crystal Ball plugin, you can record:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>WordPress\u003C\u002Fstrong> – Core Updates\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Plugins\u003C\u002Fstrong> – Installed, Updated, Activated, Deactivated, Changed\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Pages\u003C\u002Fstrong> – Created, Updated, Deleted\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Posts\u003C\u002Fstrong> – Created, Updated, Deleted\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Post Type\u003C\u002Fstrong> – Created, Updated, Deleted\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Categories\u003C\u002Fstrong> – Created, Edited, Deleted\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Tags\u003C\u002Fstrong> – Created, Edited, Deleted\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Taxonomies\u003C\u002Fstrong> – Created, Edited, Deleted\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Comments\u003C\u002Fstrong> – Created, Approved, Unproved, Trashed, Untrashed, Spammed, Unspammed, Deleted\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Media\u003C\u002Fstrong> – Uploaded, Edited, Deleted\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Users\u003C\u002Fstrong> – Login, Logout, Login has failed, Update profile, Registered and Deleted\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Themes\u003C\u002Fstrong> – Installed, Updated, Deleted, Activated, Changed (Editor and Customizer)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Widgets\u003C\u002Fstrong> – Added to a sidebar \u002F Deleted from a sidebar, Order widgets\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Menus\u003C\u002Fstrong> – A menu is being Created, Updated, Deleted\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Setting\u003C\u002Fstrong> – General, Writing, Reading, Discussion, Media, Permalinks\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Options\u003C\u002Fstrong> – Can be extend by east filter\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WooCommerce\u003C\u002Fstrong> – Monitor all shop settings and options\u003C\u002Fli>\n\u003Cli>\u003Cstrong>bbPress\u003C\u002Fstrong> – Forums, Topics, Replies, Taxonomies, and other actions\u003C\u002Fli>\n\u003Cli>And more…\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Crystal Ball Plugin is entirely FREE, and you can see all those changes in your WordPress Dashboard Settings. To get the User Website Changes in your Crystal Ball Dashboard and over Google Analytics Charts, you must insert your account’s Crystal Ball API Key.\u003C\u002Fp>\n\u003Ch3>Change-log\u003C\u002Fh3>\n\u003Ch4>1.0\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WP Web Changes Plugin for Crystal Ball Automation\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>1.1\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bug Fixed\u003C\u002Fli>\n\u003C\u002Ful>\n","The Crystal Ball plugin helps you monitor & log all changes and activities on your WordPress site. It will send log data to the Crystal Ball Insig …",10,983,100,7,"2024-10-09T07:32:00.000Z","6.7.5","4.4","",[20,21,22,23,24],"crystal-ball","crystal-ball-insights","google-ads-annotations","google-analytics-annotations","google-data-studio-annotations","https:\u002F\u002Fwww.crystalballinsight.com\u002Fwordpress-web-log-changes","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcrystal-ball-insight.zip",92,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},1,30,88,"2026-07-15T04:23:54.094Z",[],{"attackSurface":40,"codeSignals":328,"taintFlows":352,"riskAssessment":435,"analyzedAt":443},{"hooks":41,"ajaxHandlers":308,"restRoutes":323,"shortcodes":324,"cronEvents":325,"entryPointCount":327,"unprotectedCount":34},[42,48,53,57,60,65,70,73,78,82,86,91,94,99,104,108,112,116,120,124,127,129,131,133,134,135,140,145,149,153,158,161,164,167,170,173,176,180,185,189,193,195,198,203,207,212,216,220,224,229,233,238,241,244,248,252,256,259,263,268,272,276,279,283,287,292,296,299,303],{"type":43,"name":44,"callback":45,"file":46,"line":47},"action","admin_footer","print_js","classes\u002Fclass-cbi-admin-ui.php",134,{"type":43,"name":49,"callback":50,"priority":51,"file":46,"line":52},"admin_menu","create_admin_menu",20,279,{"type":43,"name":54,"callback":55,"file":46,"line":56},"admin_head","admin_header",280,{"type":43,"name":58,"callback":58,"file":46,"line":59},"admin_notices",281,{"type":43,"name":61,"callback":62,"file":63,"line":64},"cbi\u002Fmaintenance\u002Fclear_old_items","delete_old_items","classes\u002Fclass-cbi-api.php",11,{"type":43,"name":66,"callback":67,"priority":11,"file":68,"line":69},"cbi_admin_page_load","admin_register_exporters","classes\u002Fclass-cbi-export.php",12,{"type":43,"name":66,"callback":71,"priority":51,"file":68,"line":72},"admin_capture_action",13,{"type":74,"name":75,"callback":76,"file":68,"line":77},"filter","cbi_record_actions","filter_register_actions",15,{"type":74,"name":79,"callback":80,"file":68,"line":81},"edit_cbi_logs_per_page","increase_throughput",52,{"type":74,"name":83,"callback":84,"file":85,"line":72},"cbi_whitelist_options","wc_cbi_whitelist_options","classes\u002Fclass-cbi-integration-woocommerce.php",{"type":74,"name":87,"callback":88,"priority":89,"file":85,"line":90},"woocommerce_get_settings_pages","wc_get_settings_pages",9999,14,{"type":43,"name":92,"callback":92,"file":85,"line":93},"init",53,{"type":74,"name":95,"callback":96,"priority":11,"file":97,"line":98},"set-screen-option","set_screen_option","classes\u002Fclass-cbi-log-list-table.php",164,{"type":43,"name":100,"callback":101,"priority":11,"file":102,"line":103},"wpmu_new_blog","mu_new_blog_installer","classes\u002Fclass-cbi-maintenance.php",98,{"type":43,"name":105,"callback":106,"priority":11,"file":102,"line":107},"delete_blog","mu_delete_blog",99,{"type":43,"name":92,"callback":109,"priority":51,"file":110,"line":111},"load_handlers","classes\u002Fclass-cbi-notifications.php",16,{"type":43,"name":113,"callback":114,"file":110,"line":115},"cbi_load_notification_handlers","load_default_handlers",17,{"type":43,"name":117,"callback":118,"priority":51,"file":110,"line":119},"cbi_insert_log","process_notifications",18,{"type":74,"name":121,"callback":122,"file":123,"line":72},"wp_privacy_personal_data_exporters","register_exporter","classes\u002Fclass-cbi-privacy.php",{"type":43,"name":125,"callback":126,"file":123,"line":90},"admin_init","add_privacy_policy_content",{"type":43,"name":92,"callback":92,"file":128,"line":90},"classes\u002Fclass-cbi-settings.php",{"type":43,"name":49,"callback":130,"priority":35,"file":128,"line":77},"action_admin_menu",{"type":43,"name":125,"callback":132,"file":128,"line":111},"register_settings",{"type":43,"name":58,"callback":58,"file":128,"line":115},{"type":43,"name":44,"callback":44,"file":128,"line":119},{"type":43,"name":136,"callback":137,"file":138,"line":139},"plugins_loaded","load_textdomain","crystal-ball-insight.php",108,{"type":43,"name":141,"callback":142,"file":143,"line":144},"add_attachment","hooks_add_attachment","hooks\u002Fclass-cbi-hook-attachments.php",31,{"type":43,"name":146,"callback":147,"file":143,"line":148},"edit_attachment","hooks_edit_attachment",32,{"type":43,"name":150,"callback":151,"file":143,"line":152},"delete_attachment","hooks_delete_attachment",33,{"type":43,"name":154,"callback":155,"priority":11,"file":156,"line":157},"wp_insert_comment","handle_comment_log","hooks\u002Fclass-cbi-hook-comments.php",62,{"type":43,"name":159,"callback":155,"file":156,"line":160},"edit_comment",63,{"type":43,"name":162,"callback":155,"file":156,"line":163},"trash_comment",64,{"type":43,"name":165,"callback":155,"file":156,"line":166},"untrash_comment",65,{"type":43,"name":168,"callback":155,"file":156,"line":169},"spam_comment",66,{"type":43,"name":171,"callback":155,"file":156,"line":172},"unspam_comment",67,{"type":43,"name":174,"callback":155,"file":156,"line":175},"delete_comment",68,{"type":43,"name":177,"callback":178,"priority":11,"file":156,"line":179},"transition_comment_status","hooks_transition_comment_status",69,{"type":43,"name":181,"callback":182,"file":183,"line":184},"_core_updated_successfully","core_updated_successfully","hooks\u002Fclass-cbi-hook-core.php",25,{"type":43,"name":186,"callback":187,"file":188,"line":119},"export_wp","hooks_export_wp","hooks\u002Fclass-cbi-hook-export.php",{"type":43,"name":190,"callback":191,"file":192,"line":144},"wp_update_nav_menu","hooks_menu_created_or_updated","hooks\u002Fclass-cbi-hook-menus.php",{"type":43,"name":194,"callback":191,"file":192,"line":148},"wp_create_nav_menu",{"type":43,"name":196,"callback":197,"priority":11,"file":192,"line":152},"delete_nav_menu","hooks_menu_deleted",{"type":43,"name":199,"callback":200,"priority":11,"file":201,"line":202},"updated_option","hooks_updated_option","hooks\u002Fclass-cbi-hook-options.php",112,{"type":43,"name":204,"callback":205,"priority":11,"file":201,"line":206},"update_option_log_settings","hooks_cbi_options",113,{"type":43,"name":208,"callback":209,"file":210,"line":211},"activated_plugin","hooks_activated_plugin","hooks\u002Fclass-cbi-hook-plugins.php",123,{"type":43,"name":213,"callback":214,"file":210,"line":215},"deactivated_plugin","hooks_deactivated_plugin",124,{"type":74,"name":217,"callback":218,"priority":11,"file":210,"line":219},"wp_redirect","hooks_plugin_modify",125,{"type":43,"name":221,"callback":222,"priority":11,"file":210,"line":223},"upgrader_process_complete","hooks_plugin_install_or_update",127,{"type":43,"name":225,"callback":226,"priority":11,"file":227,"line":228},"transition_post_status","hooks_transition_post_status","hooks\u002Fclass-cbi-hook-posts.php",73,{"type":43,"name":230,"callback":231,"file":227,"line":232},"delete_post","hooks_delete_post",74,{"type":43,"name":234,"callback":235,"priority":11,"file":236,"line":237},"created_term","hooks_created_edited_deleted_term","hooks\u002Fclass-cbi-hook-taxonomies.php",36,{"type":43,"name":239,"callback":235,"priority":11,"file":236,"line":240},"edited_term",37,{"type":43,"name":242,"callback":235,"priority":11,"file":236,"line":243},"delete_term",38,{"type":74,"name":217,"callback":245,"priority":11,"file":246,"line":247},"hooks_theme_modify","hooks\u002Fclass-cbi-hook-themes.php",153,{"type":43,"name":249,"callback":250,"priority":11,"file":246,"line":251},"switch_theme","hooks_switch_theme",154,{"type":43,"name":253,"callback":254,"file":246,"line":255},"delete_site_transient_update_themes","hooks_theme_deleted",155,{"type":43,"name":221,"callback":257,"priority":11,"file":246,"line":258},"hooks_theme_install_or_update",156,{"type":43,"name":260,"callback":261,"file":246,"line":262},"customize_save","hooks_theme_customizer_modified",158,{"type":43,"name":264,"callback":265,"priority":11,"file":266,"line":267},"wp_login","hooks_wp_login","hooks\u002Fclass-cbi-hook-users.php",85,{"type":43,"name":269,"callback":270,"file":266,"line":271},"clear_auth_cookie","hooks_clear_auth_cookie",86,{"type":43,"name":273,"callback":274,"file":266,"line":275},"delete_user","hooks_delete_user",87,{"type":43,"name":277,"callback":278,"file":266,"line":36},"user_register","hooks_user_register",{"type":43,"name":280,"callback":281,"file":266,"line":282},"profile_update","hooks_profile_update",89,{"type":74,"name":284,"callback":285,"file":266,"line":286},"wp_login_failed","hooks_wrong_password",90,{"type":74,"name":288,"callback":289,"priority":89,"file":290,"line":291},"widget_update_callback","hooks_widget_update_callback","hooks\u002Fclass-cbi-hook-widgets.php",45,{"type":74,"name":293,"callback":294,"file":290,"line":295},"sidebar_admin_setup","hooks_widget_delete",46,{"type":43,"name":92,"callback":92,"priority":35,"file":297,"line":298},"notifications\u002Fabstract-class-cbi-notification-base.php",26,{"type":43,"name":300,"callback":301,"priority":11,"file":297,"line":302},"cbi_validate_options","_validate_options",27,{"type":74,"name":304,"callback":305,"file":306,"line":307},"wp_mail_content_type","email_content_type","notifications\u002Fclass-cbi-notification-email.php",42,[309,314,319],{"action":310,"nopriv":311,"callback":312,"hasNonce":311,"hasCapCheck":311,"file":46,"line":313},"cbi_install_elementor_set_admin_notice_viewed",false,"ajax_cbi_install_elementor_set_admin_notice_viewed",282,{"action":315,"nopriv":311,"callback":316,"hasNonce":317,"hasCapCheck":317,"file":128,"line":318},"cbi_reset_items","ajax_cbi_reset_items",true,21,{"action":320,"nopriv":311,"callback":321,"hasNonce":311,"hasCapCheck":317,"file":128,"line":322},"cbi_get_properties","ajax_cbi_get_properties",22,[],[],[326],{"hook":61,"callback":61,"file":102,"line":318},3,{"dangerousFunctions":329,"sqlUsage":330,"outputEscaping":333,"fileOperations":34,"externalRequests":34,"nonceChecks":350,"capabilityChecks":14,"bundledLibraries":351},[],{"prepared":331,"raw":28,"locations":332},24,[],{"escaped":334,"rawEcho":335,"locations":336},193,6,[337,340,342,344,346,348],{"file":46,"line":338,"context":339},58,"raw output",{"file":46,"line":341,"context":339},105,{"file":97,"line":343,"context":339},397,{"file":97,"line":345,"context":339},399,{"file":97,"line":347,"context":339},561,{"file":128,"line":349,"context":339},253,2,[],[353,369,377,388,420],{"entryPoint":354,"graph":355,"unsanitizedCount":28,"severity":368},"log_page_func (classes\u002Fclass-cbi-admin-ui.php:25)",{"nodes":356,"edges":366},[357,361],{"id":358,"type":359,"label":360,"file":46,"line":152},"n0","source","$_REQUEST['page']",{"id":362,"type":363,"label":364,"file":46,"line":152,"wp_function":365},"n1","sink","echo() [XSS]","echo",[367],{"from":358,"to":362,"sanitized":317},"low",{"entryPoint":370,"graph":371,"unsanitizedCount":28,"severity":368},"\u003Cclass-cbi-admin-ui> (classes\u002Fclass-cbi-admin-ui.php:0)",{"nodes":372,"edges":375},[373,374],{"id":358,"type":359,"label":360,"file":46,"line":152},{"id":362,"type":363,"label":364,"file":46,"line":152,"wp_function":365},[376],{"from":358,"to":362,"sanitized":317},{"entryPoint":378,"graph":379,"unsanitizedCount":28,"severity":368},"search_box (classes\u002Fclass-cbi-log-list-table.php:684)",{"nodes":380,"edges":386},[381,384],{"id":358,"type":359,"label":382,"file":97,"line":383},"$_REQUEST",686,{"id":362,"type":363,"label":364,"file":97,"line":385,"wp_function":365},692,[387],{"from":358,"to":362,"sanitized":317},{"entryPoint":389,"graph":390,"unsanitizedCount":28,"severity":368},"\u003Cclass-cbi-log-list-table> (classes\u002Fclass-cbi-log-list-table.php:0)",{"nodes":391,"edges":415},[392,394,398,400,405,407,411,413],{"id":358,"type":359,"label":382,"file":97,"line":393},634,{"id":362,"type":363,"label":395,"file":97,"line":396,"wp_function":397},"get_var() [SQLi]",639,"get_var",{"id":399,"type":359,"label":382,"file":97,"line":393},"n2",{"id":401,"type":363,"label":402,"file":97,"line":403,"wp_function":404},"n3","get_results() [SQLi]",658,"get_results",{"id":406,"type":359,"label":382,"file":97,"line":393},"n4",{"id":408,"type":363,"label":409,"file":97,"line":403,"wp_function":410},"n5","prepare (format string)() [SQLi]","prepare (format string)",{"id":412,"type":359,"label":382,"file":97,"line":383},"n6",{"id":414,"type":363,"label":364,"file":97,"line":385,"wp_function":365},"n7",[416,417,418,419],{"from":358,"to":362,"sanitized":317},{"from":399,"to":401,"sanitized":317},{"from":406,"to":408,"sanitized":317},{"from":412,"to":414,"sanitized":317},{"entryPoint":421,"graph":422,"unsanitizedCount":327,"severity":434},"prepare_items (classes\u002Fclass-cbi-log-list-table.php:569)",{"nodes":423,"edges":430},[424,425,426,427,428,429],{"id":358,"type":359,"label":382,"file":97,"line":393},{"id":362,"type":363,"label":395,"file":97,"line":396,"wp_function":397},{"id":399,"type":359,"label":382,"file":97,"line":393},{"id":401,"type":363,"label":402,"file":97,"line":403,"wp_function":404},{"id":406,"type":359,"label":382,"file":97,"line":393},{"id":408,"type":363,"label":409,"file":97,"line":403,"wp_function":410},[431,432,433],{"from":358,"to":362,"sanitized":311},{"from":399,"to":401,"sanitized":311},{"from":406,"to":408,"sanitized":311},"high",{"summary":436,"deductions":437},"The crystal-ball-insight v1.1.1 plugin exhibits a generally strong security posture with several good practices evident, such as the exclusive use of prepared statements for all SQL queries and a high percentage of properly escaped output. The lack of known vulnerabilities in its history is a positive indicator. However, the static analysis reveals a notable concern: one AJAX handler operates without proper authentication checks, representing a direct entry point that could be exploited if it handles user-supplied data insecurely. Additionally, a taint analysis flow with unsanitized paths, even if rated as high severity and not critical, warrants careful attention as it suggests a potential weakness in data sanitization that could be leveraged for various attacks if the specific flow is exploitable.",[438,441],{"reason":439,"points":440},"AJAX handler without authentication",8,{"reason":442,"points":69},"Taint flow with unsanitized paths (high severity)","2026-04-16T12:05:08.757Z",{"wat":445,"direct":454},{"assetPaths":446,"generatorPatterns":449,"scriptPaths":450,"versionParams":451},[447,448],"\u002Fwp-content\u002Fplugins\u002Fcrystal-ball-insight\u002Fassets\u002Fcss\u002Fsettings.css","\u002Fwp-content\u002Fplugins\u002Fcrystal-ball-insight\u002Fassets\u002Fjs\u002Fsettings.js",[],[448],[452,453],"crystal-ball-insight\u002Fassets\u002Fcss\u002Fsettings.css?ver=","crystal-ball-insight\u002Fassets\u002Fjs\u002Fsettings.js?ver=",{"cssClasses":455,"htmlComments":457,"htmlAttributes":458,"restEndpoints":460,"jsGlobals":461,"shortcodeOutput":463},[456],"cbi-settings-field",[],[459],"data-page=\"crystal-ball-settings\"",[],[462],"cbi_settings",[],{"error":317,"url":465,"statusCode":466,"statusMessage":467,"message":467},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fcrystal-ball-insight\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":28,"versions":469},[]]