[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzW5eiAx2NrcrBcToTU3CL9JAhBmTmKvqGQ6QsbD_apY":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":36,"analysis":121,"fingerprints":275},"digitalpush","DigitalPUSH notifications","1.6.2","Demetrius Tautu","https:\u002F\u002Fprofiles.wordpress.org\u002Fdigitalpush\u002F","\u003Cp>This plugin allows your visitors to subscribe to your push notifications as well as receive push notifications whenever you publish a new post.\u003C\u002Fp>\n\u003Cp>The process of subscription is 100% automated and your subscribers will be saved within your DigitalPUSH account.\u003C\u002Fp>\n\u003Cp>The process of sending notifications on a new post is also 100% automated and it will notify all your previously subscribed users with the following information:\u003Cbr \u002F>\n* Post title ( up to 64 characters )\u003Cbr \u002F>\n* Post content without any HTML tags ( up to 128 characters )\u003Cbr \u002F>\n* Post permalink\u003Cbr \u002F>\n* Post featured image ( If the post has no featured image, a standard bell image will be used instead. The same applies if your featured image is http:\u002F\u002F instead of https:\u002F\u002F )\u003C\u002Fp>\n\u003Cp>The subscription is made by implementing the DigitalPUSH javascript library into your pages ( https:\u002F\u002Fcdn.digitalpush.org\u002Flib.js ), library which handles the entire process.\u003Cbr \u002F>\nThe push notification sending process is handled by making a POST call from the plugin to the DigitalPUSH API ( https:\u002F\u002Fapi.digitalpush.org\u002Fpush\u002F ).\u003C\u002Fp>\n\u003Cp>To make use of the plugin you will need an account with DigitalPUSH which can be created here: https:\u002F\u002Fdigitalpush.org\u002Fregister.php\u003Cbr \u002F>\nThe registration is instant and completely free.\u003C\u002Fp>\n\u003Cp>DigitalPUSH is a free to use push notifications service which can be found here: https:\u002F\u002Fdigitalpush.org\u003Cbr \u002F>\nDigitalPUSH terms of service: https:\u002F\u002Fdigitalpush.org\u002Ftos.php\u003Cbr \u002F>\nDigitalPUSH privacy policy: https:\u002F\u002Fdigitalpush.org\u002Fprivacy.php\u003C\u002Fp>\n","This plugin allows you to to implement push notifications with your WordPress blog.",10,3160,100,1,"2023-10-25T07:03:00.000Z","6.1.10","3.6","5.5",[20,21,22,23,24],"chrome","firefox","push","push-notifications","safari","http:\u002F\u002Fdigitalpush.org\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdigitalpush.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":4,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},30,84,"2026-04-04T14:22:41.987Z",[37,57,72,90,102],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":11,"downloaded":45,"rating":28,"num_ratings":28,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":55,"download_link":56,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"notificare-website-push","Notificare","2.0.0","jjonthemix","https:\u002F\u002Fprofiles.wordpress.org\u002Fjjonthemix\u002F","\u003Cp>Website push notifications for WordPress websites. Send push notifications to your website visitors even when they are not at your website.\u003C\u002Fp>\n\u003Cp>Start today automating how you notify your visitors about changes in your website, new blog posts or articles.\u003C\u002Fp>\n\u003Cp>A complete set of features that your website is missing:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Send or schedule remote notifications in any modern browser\u003C\u002Fli>\n\u003Cli>Easily divide your users in groups with segmentation\u003C\u002Fli>\n\u003Cli>Location based messages for when your users are on the move\u003C\u002Fli>\n\u003Cli>Automation tools for all your marketing efforts\u003C\u002Fli>\n\u003C\u002Ful>\n","Smart push notifications for WordPress websites.",2194,"2019-05-20T22:07:00.000Z","5.2.24","3.0.1","",[51,52,53,23,54],"chrome-push","edge-push","firefox-push","safari-push","https:\u002F\u002Fnotifica.re","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnotificare-website-push.2.0.0.zip",{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":11,"downloaded":65,"rating":13,"num_ratings":14,"last_updated":66,"tested_up_to":67,"requires_at_least":68,"requires_php":49,"tags":69,"homepage":70,"download_link":71,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"push-notification-worldshaking","WorldShaking Web Push Notifications","1.0.5","grizzlygmbh","https:\u002F\u002Fprofiles.wordpress.org\u002Fgrizzlygmbh\u002F","\u003Cp>This is a complete push notification solution for WordPress blogs and websites. Working with Firefox, Chrome and Safari.\u003C\u002Fp>\n","Increase engagement and drive more repeat traffic to your WordPress site with desktop push notifications. Now supporting Chrome, Firefox, and Safari.",1453,"2017-10-24T14:40:00.000Z","4.8.28","3.8",[20,21,22,23,24],"https:\u002F\u002Fworldshaking.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpush-notification-worldshaking.1.0.5.zip",{"slug":73,"name":74,"version":75,"author":73,"author_profile":76,"description":77,"short_description":78,"active_installs":28,"downloaded":79,"rating":28,"num_ratings":28,"last_updated":49,"tested_up_to":80,"requires_at_least":81,"requires_php":49,"tags":82,"homepage":87,"download_link":88,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":89},"popnotifi","PopNotifi","1.0","https:\u002F\u002Fprofiles.wordpress.org\u002Fpopnotifi\u002F","\u003Cp>Installing the PopNotifi plugin will automatically insert the PopNotifi Smart Code on your WordPress website. To get started, you just have to copy the PopNotifi Website Id(Your Website Id can be found in the PopNotifi dashboard) and paste it in this plugins’s settings.\u003C\u002Fp>\n\u003Cp>What is PopNotifi?\u003C\u002Fp>\n\u003Cp>PopNotifi lets you talk to your subscribers in an easy and delightful manner, using push notifications on browser. Push Notifications are clickable messages sent directly to your subscribers’ browsers (even when they are not on your website). These work on all devices — desktops, tablets and even mobile phones — so you don’t even have to invest in building a mobile app for your business. The opt-in and click rates are amazing!.\u003C\u002Fp>\n\u003Cp>Let us help you get amazing returns on your communications. For any questions, please get in touch with us at info@PopNotifi.com\u003C\u002Fp>\n\u003Cp>What is PopNotifi-CDN?\u003C\u002Fp>\n\u003Cp>PopNotifi uses a high end delivery network (popnotifi-cdn.com) to deliver our libraries to clients. This ensures that our users don’t experience any lags. For more details head over to our privacy policy at https:\u002F\u002Fpopnotifi.com\u002Fprivacy\u003C\u002Fp>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Cp>Enter your PopNotifi Website Id in the field marked ‘Your PopNotifi Website ID’\u003C\u002Fp>\n\u003Ch3>Adding to your template\u003C\u002Fh3>\n\u003Cp>header code :\n    \u003C\u002Fp>\n\u003Cp>footer code :\n    \u003C\u002Fp>\n","The Push Notifications Revolution by PopNotifi",983,"4.7.32","2.7",[83,84,23,85,86],"chrome-push-notifications","firefox-push-notifications","safari-push-notifications","website-push-notifications","http:\u002F\u002Fpopnotifi.com\u002Fwordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpopnotifi.1.0.zip","2026-03-15T10:48:56.248Z",{"slug":91,"name":92,"version":93,"author":94,"author_profile":95,"description":96,"short_description":64,"active_installs":28,"downloaded":97,"rating":28,"num_ratings":28,"last_updated":98,"tested_up_to":47,"requires_at_least":68,"requires_php":49,"tags":99,"homepage":100,"download_link":101,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"pushdy-notifications","Pushdy – Web Push Notifications","1.0.0","pushdytech","https:\u002F\u002Fprofiles.wordpress.org\u002Fpushdytech\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.pushdy.vn\" rel=\"nofollow ugc\">Pushdy\u003C\u002Fa> is an easy way to increase user engagement. Use Pushdy to send visitors targeted push notifications so they keep coming back. It takes just a few minutes to install.\u003C\u002Fp>\n\u003Cp>After setup, your visitors opt-in to receive push notifications when you publish a new post. Visitors receive these notifications even after they’ve left your website, thus driving re-engagement.\u003C\u002Fp>\n\u003Cp>You can configure notification delivery at preset intervals, create user segments, and customize the opt-in process for visitors.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Supports Chrome\u003C\u002Fstrong> (Desktop & Android), \u003Cstrong>Safari\u003C\u002Fstrong> (Mac OS X), \u003Cstrong>Microsoft Edge\u003C\u002Fstrong> (Desktop & Android), \u003Cstrong>Opera\u003C\u002Fstrong> (Desktop & Android) and \u003Cstrong>Firefox\u003C\u002Fstrong> (Desktop & Android) on HTTPS sites.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Automatic Notifications\u003C\u002Fstrong> – Send notifications to followers every time you publish a new post. Or set up a reminder that gets automatically sent to them if they haven’t visited for a few days.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Targeting Segments\u003C\u002Fstrong> – Send notifications to specific visitors based on language, number of times they’ve visited your blog, or even set up your own user attributes that you can target.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Opt-In Customization\u003C\u002Fstrong> – Choose when and how to ask your visitors to opt-in to browser notifications. Customize the prompt they first see.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Real Time Analytics\u003C\u002Fstrong> – See your notifications being delivered in real time, and watch them as they convert into visitors.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>A\u002FB Testing\u003C\u002Fstrong> – Try out different messages to a smaller set of your visitors to figure out which messages are more effective and then send the more effective message to the rest of your visitors!\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Scheduled Notifications\u003C\u002Fstrong> – Schedule notifications to be delivered in the future, based on a user’s time zone, or even based on the same time of day they last visited your website.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n",919,"2019-10-24T08:38:00.000Z",[20,21,22,23,24],"https:\u002F\u002Fwww.pushdy.vn\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpushdy-notifications.zip",{"slug":103,"name":104,"version":105,"author":106,"author_profile":107,"description":108,"short_description":109,"active_installs":110,"downloaded":111,"rating":112,"num_ratings":113,"last_updated":114,"tested_up_to":115,"requires_at_least":81,"requires_php":49,"tags":116,"homepage":119,"download_link":120,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"pushalert-web-push-notifications","PushAlert – Web Push Notifications for WordPress and WooCommerce","2.9.0","PushAlert","https:\u002F\u002Fprofiles.wordpress.org\u002Fpushalert\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fpushalert.co\" rel=\"nofollow ugc\">PushAlert\u003C\u002Fa> plugin for WordPress Web Push Notifications automates integration, and allows your users to subscribe to push notifications. It also adds an easy to use interface right next to the editor, which lets you push notifications automatically on publishing a post.\u003C\u002Fp>\n\u003Ch4>Benefits of PushAlert Browser Notifications for WordPress and WooCommerce:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Push Notifications have up to 10 times better click-through rate than traditional marketing methods like emails and very high visibility even without being clicked.\u003C\u002Fli>\n\u003Cli>Engaging visitors at the right time gets more clicks and increases your traffic instantly. It also helps in bringing back visitors to your website.\u003C\u002Fli>\n\u003Cli>Easier to get a lot of subscriptions as Push Notifications don’t require any personal information.\u003C\u002Fli>\n\u003Cli>WooCommerce stores also get (Only on PushAlert!) automated abandoned cart notifications, price-drop and product back in stock alerts to boost sales by as much as 30% as well as shipment notifications with tracking button.\u003C\u002Fli>\n\u003Cli>Works on both Desktop and Mobile devices (without app) even when browser is closed.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Here are some more features to give your website an instant boost:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Broader Reach\u003C\u002Fstrong>: PushAlert Web Push Notifications work on Chrome, Safari, Firefox, Edge and Opera on both desktop and mobile devices. It works across all major OS platforms including Windows, iOS 16.4+, iPadOS 16.4+, MacOS (OSX), Linux, ChromeOS as well as Android.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Audience Creator\u003C\u002Fstrong>: Target specific subscribers based on their interests, location, URL and other custom parameters for more effective re-engagement and higher conversions.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Welcome Drip\u003C\u002Fstrong>: With the welcome drip campaign you can send a series of notifications to new subscribers. With these you can automate customer on-boarding, engagement and direct the way they navigate your website.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Conversion Funnels\u003C\u002Fstrong>: Create a funnel playbook for your subscribers based on which products they visit on your store. With a browse abandoned funnel, you can not only bring more leads but also minimize drop-off from your website.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>RSS Push and NewsLetter\u003C\u002Fstrong>: You can now send automatic notifications whenever a post is published using your RSS feed. A recurring newsletter notification with the top posts of the day, can now also be sent at a scheduled time everyday, right from the PushAlert Dashboard.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Complete Localization with Multi-lingual Support\u003C\u002Fstrong>: PushAlert prompts can now be shown in any language and a single notification can be sent in multiple languages, automatically delivered in the subscriber’s language.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Timezone based scheduling\u003C\u002Fstrong>: Schedule notifications based on the timezone of your subscribers to reach them when they are active, resulting in more engagement and higher revenue.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>A\u002FB Notification\u003C\u002Fstrong>: By creating two variants of the same notification with different title, message and images; PushAlert’s intelligent algorithm determines which version works best and sends it for better conversion.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Segmentation with Advanced Targeting\u003C\u002Fstrong>: With segments, you can personalize notifications for your customers based on their interests. We already have segments based on Location, Device, Browser and OS.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Schedule Notifications\u003C\u002Fstrong>: If you have any deals, announcement that needs to be sent at a particular time, you can easily schedule that beforehand.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Advanced Stats\u003C\u002Fstrong>: With our stats you can clearly see which notifications are fetching better engagement with real-time click-through rate.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>PushAlert’s Fully Automated WooCommerce Marketing Solution:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Abandoned Cart Notifications\u003C\u002Fstrong>: On average, 70% of all carts are abandoned but most of them are recoverable by reaching out to customers at the right time. PushAlert lets you recover lost sales with automated and personalized abandoned cart notifications, when customers forget to checkout.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>In-Stock Notifications\u003C\u002Fstrong>: Now you won’t loose any customer even when a product is out of stock, customers can subscribe to alerts and will get a direct notification (automated) on their phone or PC as soon as the product they wanted is back in stock with a direct Add to Cart button (Only on PushAlert!).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Price Drop Notifications\u003C\u002Fstrong>: You may have already spent a lot on marketing and bringing customers to your store, but many of them leave without making a purchase, sometimes a higher price than what they were willing to pay could be a reason. With PushAlert, your customers will automatically get to know when a product they like is on sale or at a discount with an Add to Cart button (Only on PushAlert!). In essence, no additional spending on marketing for promoting a sale.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shipment Alerts\u003C\u002Fstrong>: Want to let customers know that their order is on the way, PushAlert sends real-time automated notifications with tracking details.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Send Notification to Individual Customers\u003C\u002Fstrong>: Right from the WordPress Dashboard, you can directly target a single user with their email ID or user ID to send personalized notification.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can start with a \u003Ca href=\"https:\u002F\u002Fpushalert.co\u002Fpricing\" rel=\"nofollow ugc\">lifetime free account\u003C\u002Fa> with unlimited notifications and as you grow, move to one of the paid plans for more features. With PushAlert you can convert your visitors into customers and keep them coming back to your website. All online businesses, e-commerce stores and blogs are implementing push notifications, and it’s time you do too.\u003C\u002Fp>\n\u003Cp>If you’ve any query or issue, please get in touch with us at support@pushalert.co\u003C\u002Fp>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Cp>Add the Website ID, Rest API Key, Configuration ID and FCM\u002FGCM Sender ID from the Integrate section of your PushAlert dashboard.\u003C\u002Fp>\n","A plugin by PushAlert to enable automated Push Notifications for your WordPress website and WooCommerce Store to increase traffic and sales.",1000,49146,92,8,"2025-12-01T11:37:00.000Z","6.9.4",[117,20,21,23,118],"browser-notification","pushalert","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpushalert-web-push-notifications\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpushalert-web-push-notifications.2.9.0.zip",{"attackSurface":122,"codeSignals":165,"taintFlows":238,"riskAssessment":266,"analyzedAt":274},{"hooks":123,"ajaxHandlers":160,"restRoutes":161,"shortcodes":162,"cronEvents":163,"entryPointCount":28,"unprotectedCount":28},[124,130,134,138,142,146,151,155],{"type":125,"name":126,"callback":127,"file":128,"line":129},"action","admin_init","registerSettings","dgpntf.php",54,{"type":125,"name":131,"callback":132,"file":128,"line":133},"admin_menu","adminPanelsAndMetaBoxes",55,{"type":125,"name":135,"callback":136,"priority":11,"file":128,"line":137},"wp_feed_options","dashBoardRss",56,{"type":125,"name":139,"callback":140,"file":128,"line":141},"admin_notices","dashboardNotices",57,{"type":125,"name":143,"callback":144,"priority":11,"file":128,"line":145},"transition_post_status","schedule_notification_sending",59,{"type":125,"name":147,"callback":148,"priority":149,"file":128,"line":150},"dgp_ntf_sending","dgp_notify_subscribers",11,60,{"type":125,"name":152,"callback":153,"file":128,"line":154},"wp_footer","implementation_code",63,{"type":156,"name":157,"callback":158,"file":128,"line":159},"filter","dashboard_secondary_items","dashboardSecondaryItems",66,[],[],[],[164],{"hook":147,"callback":147,"file":128,"line":34},{"dangerousFunctions":166,"sqlUsage":167,"outputEscaping":169,"fileOperations":28,"externalRequests":14,"nonceChecks":233,"capabilityChecks":14,"bundledLibraries":234},[],{"prepared":28,"raw":28,"locations":168},[],{"escaped":170,"rawEcho":171,"locations":172},37,31,[173,176,179,181,183,185,187,189,192,194,195,196,198,199,201,203,205,207,209,211,213,214,216,217,219,221,223,225,227,229,231],{"file":128,"line":174,"context":175},222,"raw output",{"file":177,"line":178,"context":175},"views\\dashboard-notices.php",6,{"file":177,"line":180,"context":175},14,{"file":177,"line":182,"context":175},19,{"file":177,"line":184,"context":175},22,{"file":177,"line":186,"context":175},23,{"file":177,"line":188,"context":175},25,{"file":190,"line":191,"context":175},"views\\settings.php",7,{"file":190,"line":193,"context":175},12,{"file":190,"line":184,"context":175},{"file":190,"line":186,"context":175},{"file":190,"line":197,"context":175},24,{"file":190,"line":188,"context":175},{"file":190,"line":200,"context":175},34,{"file":190,"line":202,"context":175},41,{"file":190,"line":204,"context":175},42,{"file":190,"line":206,"context":175},76,{"file":190,"line":208,"context":175},82,{"file":190,"line":210,"context":175},88,{"file":190,"line":212,"context":175},97,{"file":190,"line":212,"context":175},{"file":190,"line":215,"context":175},114,{"file":190,"line":215,"context":175},{"file":190,"line":218,"context":175},125,{"file":190,"line":220,"context":175},136,{"file":190,"line":222,"context":175},146,{"file":190,"line":224,"context":175},155,{"file":190,"line":226,"context":175},164,{"file":190,"line":228,"context":175},187,{"file":190,"line":230,"context":175},189,{"file":232,"line":202,"context":175},"views\\sidebar.php",2,[235],{"name":236,"version":29,"knownCves":237},"jQuery",[],[239,258],{"entryPoint":240,"graph":241,"unsanitizedCount":28,"severity":257},"adminPanel (dgpntf.php:219)",{"nodes":242,"edges":254},[243,248],{"id":244,"type":245,"label":246,"file":128,"line":247},"n0","source","$_REQUEST (x13)",250,{"id":249,"type":250,"label":251,"file":128,"line":252,"wp_function":253},"n1","sink","update_option() [Settings Manipulation]",275,"update_option",[255],{"from":244,"to":249,"sanitized":256},true,"low",{"entryPoint":259,"graph":260,"unsanitizedCount":28,"severity":257},"\u003Cdgpntf> (dgpntf.php:0)",{"nodes":261,"edges":264},[262,263],{"id":244,"type":245,"label":246,"file":128,"line":247},{"id":249,"type":250,"label":251,"file":128,"line":252,"wp_function":253},[265],{"from":244,"to":249,"sanitized":256},{"summary":267,"deductions":268},"The digitalpush plugin v1.6.2 exhibits a generally strong security posture based on the static analysis and vulnerability history provided. The absence of any registered CVEs, critical or high severity vulnerabilities in its history, and the lack of dangerous functions or raw SQL queries in the code are positive indicators. The plugin also demonstrates good practices by utilizing prepared statements for all SQL queries and implementing nonce and capability checks, albeit limited in number.  However, there are areas for improvement. The low percentage of properly escaped output (54%) suggests a potential risk of Cross-Site Scripting (XSS) vulnerabilities, especially given the absence of specific XSS findings in the taint analysis, which may not cover all potential scenarios. The single external HTTP request, while not inherently dangerous, warrants scrutiny to ensure it is handled securely and doesn't introduce a supply chain risk. The limited number of security checks (1 capability check, 2 nonce checks) across the entire codebase might indicate a small attack surface, but also suggests that potentially sensitive operations might not be adequately protected.  Overall, while the plugin is currently free of known critical vulnerabilities and shows good foundational security practices, the unescaped output is the most significant concern requiring attention to mitigate potential XSS risks.",[269,271],{"reason":270,"points":113},"Low percentage of properly escaped output",{"reason":272,"points":273},"Limited nonce and capability checks",4,"2026-03-17T00:50:21.083Z",{"wat":276,"direct":285},{"assetPaths":277,"generatorPatterns":280,"scriptPaths":281,"versionParams":282},[278,279],"\u002Fwp-content\u002Fplugins\u002Fdigitalpush-notifications\u002Fjs\u002Fscript.js","\u002Fwp-content\u002Fplugins\u002Fdigitalpush-notifications\u002Fcss\u002Fstyle.css",[],[278],[283,284],"digitalpush-notifications\u002Fjs\u002Fscript.js?ver=","digitalpush-notifications\u002Fcss\u002Fstyle.css?ver=",{"cssClasses":286,"htmlComments":289,"htmlAttributes":291,"restEndpoints":294,"jsGlobals":295,"shortcodeOutput":297},[287,288],"digitalpush-notifications-content","digitalpush-notifications-subscribe-button",[290],"\u003C!-- DigitalPUSH ->",[292,293],"data-digitalpush-key","data-digitalpush-theme",[],[296],"digitalpush_vars",[298],"[digitalpush_subscribe_button]"]