[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZ8KAHNo-27NBluUGXJF7wu3cfskBhPkxMKpXBtVKNg8":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":11,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":39,"analysis":150,"fingerprints":486},"ecards-lite","eCards Lite","4.3.2","Ciprian Popescu","https:\u002F\u002Fprofiles.wordpress.org\u002Fbutterflymedia\u002F","\u003Cp>eCards is a WordPress plugin used to send electronic cards to friends. It can be implemented in a page, a post, or the sidebar.\u003C\u002Fp>\n\u003Cp>There are two ways you can use this plugin:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Add the \u003Ccode>[ecard]\u003C\u002Fcode> shortcode to a post or a page.\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Call the function from a template file:\u003C\u002Fp>\n\u003Cp>\u003Ccode>if ( function_exists( 'display_ecardMe' ) ) {\u003Cbr \u002F>\necho display_ecardMe();\u003Cbr \u002F>\n}\u003C\u002Fcode>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>If your images are already uploaded, and they are present in your \u003Cstrong>Media Library\u003C\u002Fstrong>, use their IDs to display them:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[ecard id=\"1, 2, 3, 4, 78\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>The IDs correspond to images in your \u003Cstrong>Media Library\u003C\u002Fstrong>. This feature eliminates the need to manually attach images and also eliminates the need to upload the same image multiple times, just to have it attached to different posts or pages.\u003C\u002Fp>\n\u003Ch4>Documentation\u003C\u002Fh4>\n\u003Cp>Check out the \u003Ca href=\"https:\u002F\u002Fgetbutterfly.com\u002Fsupport\u002Fdocumentation\u002Fecards\u002F\" title=\"eCards Documentation\" rel=\"nofollow ugc\">eCards Documentation\u003C\u002Fa> for advanced installation, usage, and setup instructions.\u003C\u002Fp>\n\u003Ch4>Premium Features\u003C\u002Fh4>\n\u003Cp>Just in case you want some advanced features, you can \u003Ca href=\"https:\u002F\u002Fgetbutterfly.com\u002Fwordpress-plugins\u002Fwordpress-ecards-plugin\u002F\" title=\"eCards PRO version\" rel=\"nofollow ugc\">purchase the \u003Cstrong>PRO\u003C\u002Fstrong> version\u003C\u002Fa> to get access to additional features for your eCards.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>1 year support\u003C\u002Fli>\n\u003Cli>User uploads\u003C\u002Fli>\n\u003Cli>eCard designer\u003C\u002Fli>\n\u003Cli>Redirection (send users to a special “Thank You” page after sending an eCard)\u003C\u002Fli>\n\u003Cli>eCard Collections (design and organize your eCards and re-order your images)\u003C\u002Fli>\n\u003Cli>Include post\u002Fpage content (useful if you have a certain eCard “story” or message you want to convey)\u003C\u002Fli>\n\u003Cli>Allow the sender to CC self\u003C\u002Fli>\n\u003Cli>eCard scheduling\u003C\u002Fli>\n\u003Cli>eCard CPT (developers only)\u003C\u002Fli>\n\u003C\u002Ful>\n","eCards is a WordPress plugin used to send electronic cards (eCards) to friends.",100,10645,86,6,"2025-12-17T12:56:00.000Z","6.9.4","5.3","7.1",[20,21,22,23,24],"ecard","ecards","electronic-card","greeting-card","postcard","https:\u002F\u002Fgetbutterfly.com\u002Fwordpress-plugins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fecards-lite.zip",0,null,"2026-03-15T15:16:48.613Z",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":35,"avg_patch_time_days":36,"trust_score":37,"computed_at":38},"butterflymedia",8,3570,99,47,87,"2026-04-05T18:58:44.084Z",[40,64,88,109,131],{"slug":41,"name":42,"version":43,"author":44,"author_profile":45,"description":46,"short_description":47,"active_installs":48,"downloaded":49,"rating":50,"num_ratings":51,"last_updated":52,"tested_up_to":16,"requires_at_least":53,"requires_php":54,"tags":55,"homepage":60,"download_link":61,"security_score":35,"vuln_count":62,"unpatched_count":27,"last_vuln_date":63,"fetched_at":29},"wp-ecards-invites","WP eCards – Branded Digital Greeting Cards","1.4.12","Tim from eCardWidget","https:\u002F\u002Fprofiles.wordpress.org\u002Ftimsayshey\u002F","\u003Cp>Add a branded eCard form or eCard gallery directly to your WordPress site with just a few clicks. Visitors can browse your collection of digital greeting cards, personalize a message, and send it instantly via email or social media — no coding required.\u003C\u002Fp>\n\u003Cp>Perfect for organizations, nonprofits, churches, and businesses looking to engage their community, show appreciation, or run creative campaigns with custom-designed cards.\u003C\u002Fp>\n\u003Cp>This plugin is powered by \u003Ca href=\"https:\u002F\u002Fecardwidget.com\u002F\" rel=\"nofollow ugc\">eCardWidget\u003C\u002Fa> — the leading platform for customizable digital greeting card forms used by top brands and mission-driven organizations.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why Add Digital Greeting Cards?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Boost engagement. Encourage sharing. Celebrate people. Whether it’s for volunteer appreciation, donor thank-yous, team recognition, or holiday outreach — eCards help you connect in a meaningful way.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Popular Use Cases\u003C\u002Fstrong>\u003Cbr \u002F>\nExplore how businesses, nonprofits, and churches are using eCards to boost engagement and grow impact: \u003Ca href=\"https:\u002F\u002Fecardwidget.com\u002Fexamples\u002F\" rel=\"nofollow ugc\">See real examples\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🚀 New: Built-in WooCommerce Integration!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Easily sell digital eCards as WooCommerce products and let customers send cards right after checkout. No extra plugin required—it’s all built-in! Perfect for organizations, nonprofits, churches, and businesses who want to offer eCards with full e-commerce power.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Embed branded eCard galleries or individual cards anywhere using a simple shortcode\u003C\u002Fli>\n\u003Cli>Fully customizable card designs, branding, and messaging\u003C\u002Fli>\n\u003Cli>Add your logo, links, and custom background\u003C\u002Fli>\n\u003Cli>Choose from a professional template library or upload your own artwork\u003C\u002Fli>\n\u003Cli>Track sent cards and export sender\u002Frecipient emails (CSV)\u003C\u002Fli>\n\u003Cli>Reliable email delivery with spam protection\u003C\u002Fli>\n\u003Cli>Emoji and animated GIF support\u003C\u002Fli>\n\u003Cli>Responsive design, mobile-friendly\u003C\u002Fli>\n\u003Cli>BCC all outgoing eCards for recordkeeping\u003C\u002Fli>\n\u003Cli>Change layouts, fonts, and colors to match your site\u003C\u002Fli>\n\u003Cli>Custom CSS support\u003C\u002Fli>\n\u003Cli>Send eCards to Facebook friends\u003C\u002Fli>\n\u003Cli>Built-in analytics to track card engagement\u003C\u002Fli>\n\u003Cli>Multilingual support (French, German, Dutch, Spanish, Hebrew, Polish, and more)\u003C\u002Fli>\n\u003Cli>And many more features!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Live Examples\u003C\u002Fh3>\n\u003Cp>See how others are using WP eCards:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Business \u002F Marketing\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fecardwidget.com\u002Fex\u002Fraising_canes.html\" rel=\"nofollow ugc\">Raising Cane’s\u003C\u002Fa>\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fecardwidget.com\u002Fex\u002Fmanagrams.html\" rel=\"nofollow ugc\">Teremana Tequila\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Nonprofits & Fundraising\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fecardwidget.com\u002Fex\u002Fhabitforhumanity.html\" rel=\"nofollow ugc\">Habitat for Humanity\u003C\u002Fa>\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fecardwidget.com\u002Fex\u002Fmdfoodbank.html\" rel=\"nofollow ugc\">Maryland Food Bank\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Churches\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fecardwidget.com\u002Fex\u002Fvineyardnorthphoenix.html\" rel=\"nofollow ugc\">Vineyard North Phoenix\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Employee Recognition\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fapp.ecardwidget.com\u002Fwidget\u002F5095\" rel=\"nofollow ugc\">Modivcare\u003C\u002Fa>\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fecardwidget.com\u002Fex\u002Fcircalogica.html\" rel=\"nofollow ugc\">Circalogica\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>View more at \u003Ca href=\"https:\u002F\u002Fecardwidget.com\u002Fexamples\u002F\" rel=\"nofollow ugc\">ecardwidget.com\u002Fexamples\u003C\u002Fa>\u003C\u002Fp>\n","Add interactive digital greeting cards to your WordPress site — fully branded, customizable, and shareable by visitors through email or social media.",400,11882,88,26,"2025-12-06T14:57:00.000Z","3.0.1","",[21,56,57,58,59],"evites","invitations","invites","recognition","http:\u002F\u002Fecardwidget.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-ecards-invites.zip",1,"2024-12-03 00:00:00",{"slug":65,"name":66,"version":67,"author":68,"author_profile":69,"description":70,"short_description":71,"active_installs":72,"downloaded":73,"rating":74,"num_ratings":33,"last_updated":75,"tested_up_to":76,"requires_at_least":77,"requires_php":78,"tags":79,"homepage":85,"download_link":86,"security_score":11,"vuln_count":62,"unpatched_count":27,"last_vuln_date":87,"fetched_at":29},"wp-qrcode-me-v-card","QR code MeCard\u002FvCard generator","1.7.1","stasionok","https:\u002F\u002Fprofiles.wordpress.org\u002Fstasionok\u002F","\u003Cp>Plugin Generate QR code in vCard or MeCard format with your contact information.\u003C\u002Fp>\n\u003Cp>Share your contact information such as emails and phone numbers and much more through QR code with WordPress using shortcode, widget or everywhere else by direct link.\u003C\u002Fp>\n\u003Cp>That plugin use MeCard format and vCard version 3 format as most compatible and frequently used.\u003C\u002Fp>\n\u003Cp>You can read detailed information about vCard \u003Ca href=\"https:\u002F\u002Fwikipedia.org\u002Fwiki\u002FVCard\" title=\"Wikipedia about vCard\" rel=\"nofollow ugc\">here\u003C\u002Fa>, and about MeCard \u003Ca href=\"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FMeCard_(QR_code)\" title=\"Wikipedia about MeCard\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>How to increase photo size in QR code vcf file\u003C\u002Fh3>\n\u003Cp>You can override qr-code thumbnail with following code in your theme functions.php file\u003Cbr \u002F>\n    `add_action( ‘after_setup_theme’, ‘change_qr_code_photo_size’ );\u003Cbr \u002F>\nfunction change_qr_code_photo_size() {\u003Cbr \u002F>\n    \u002F\u002F Override the image size\u003Cbr \u002F>\n    add_image_size( ‘qr-code-photo’, 600, 600 );\u003Cbr \u002F>\n}“`\u003C\u002Fp>\n","Share your contact information such as emails, phone number and much more through QR code with WordPress using shortcode, widget or by direct link.",3000,44885,90,"2025-11-09T10:31:00.000Z","6.8.5","5.0","7.3",[80,81,82,83,84],"mecard","qrcode","shortcode","vcard","widget","https:\u002F\u002Fweb-marshal.ru\u002Fqr-code-mecard-vcard-generator\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-qrcode-me-v-card.1.7.1.zip","2023-07-24 00:00:00",{"slug":89,"name":90,"version":91,"author":92,"author_profile":93,"description":94,"short_description":95,"active_installs":96,"downloaded":97,"rating":11,"num_ratings":98,"last_updated":99,"tested_up_to":16,"requires_at_least":100,"requires_php":101,"tags":102,"homepage":54,"download_link":108,"security_score":11,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"woo-pelecard-gateway","Pelecard Gateway","1.5.2","Pelecard","https:\u002F\u002Fprofiles.wordpress.org\u002Fpelecard\u002F","\u003Cp>\u003Cstrong>Pelecard payment gateway for WooCommerce.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>About Pelecard\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.pelecard.com\" rel=\"nofollow ugc\">Pelecard\u003C\u002Fa> has been providing clearing solutions for over 30 years, and provides a secure and advanced solution for organizations large and small, including websites.\u003Cbr \u002F>\nPelecard is one of the largest software houses in Israel, combining a professional, fast and reliable development and service department.\u003Cbr \u002F>\nPlacard operates behind the scenes, which allows the business to work automatically, and perform ongoing and fast-paced business activities.\u003Cbr \u002F>\nPelecard achieves this by investing in the development of easy-to-manage and implement solutions, strong information security, tight interfaces to all management software, and the exploitation of new technologies.\u003C\u002Fp>\n\u003Ch4>About the plugin\u003C\u002Fh4>\n\u003Cp>The plugin allows you to use Pelecard payment gateway with the WooCommerce plugin.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Accept all major credit cards\u003C\u002Fli>\n\u003Cli>WooCommerce Checkout Blocks support\u003C\u002Fli>\n\u003Cli>Responsive payment form\u003C\u002Fli>\n\u003Cli>Display card logos at checkout\u003C\u002Fli>\n\u003Cli>Invoices & Receipts\u003C\u002Fli>\n\u003Cli>Subscriptions\u003C\u002Fli>\n\u003Cli>Saved payment methods (tokenization)\u003C\u002Fli>\n\u003Cli>On demand Development\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Third Party Services\u003C\u002Fh4>\n\u003Cp>This plugin connects to Pelecard payment gateway servers to process payments:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Pelecard Payment API\u003C\u002Fstrong> (gateway21.pelecard.biz)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Purpose: Process credit card payments, tokenization, and refunds\u003C\u002Fli>\n\u003Cli>Data sent: Order details, customer billing information, payment data\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.pelecard.com\u002F\" rel=\"nofollow ugc\">Pelecard Website\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.pelecard.com\u002Fterms\u002F\" rel=\"nofollow ugc\">Pelecard Terms\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Apple Pay Support\u003C\u002Fstrong> (optional, disabled by default)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>When enabled, loads ClientSecure.js from Pelecard servers to enable Apple Pay on supported devices\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","Extends WooCommerce with Pelecard payment gateway.",500,20680,3,"2026-02-24T10:40:00.000Z","5.5","7.0",[103,104,105,106,107],"checkout","credit-card","payments","pelecard","woocommerce","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwoo-pelecard-gateway.1.5.2.zip",{"slug":110,"name":111,"version":112,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":117,"downloaded":118,"rating":119,"num_ratings":120,"last_updated":121,"tested_up_to":76,"requires_at_least":122,"requires_php":54,"tags":123,"homepage":129,"download_link":130,"security_score":11,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"dynamic-time","Dynamic Time","5.4.23","RLDD","https:\u002F\u002Fprofiles.wordpress.org\u002Frermis\u002F","\u003Cp>A simple calendar-based timesheet and timecard plugin for your WordPress website. This WordPress timesheet can record hours & notes on weekly, bi-weekly, monthly or bi-monthly schedules, including automatic overtime calculations. Dynamic Time is mobile compatible and integrates with existing WordPress users.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cp>☑ \u003Cstrong>Automatic Overtime\u003C\u002Fstrong> calculations, configurable by user, even across pay periods\u003C\u002Fp>\n\u003Cp>☑ \u003Cstrong>Multiple Time Punches\u003C\u002Fstrong> per day with Predictive entry\u003C\u002Fp>\n\u003Cp>☑ \u003Cstrong>Fully Configurable Pay Periods\u003C\u002Fstrong>, including notes & bonus amount field\u003C\u002Fp>\n\u003Cp>☑ \u003Cstrong>Approval Process\u003C\u002Fstrong> between user, supervisor and payroll\u003C\u002Fp>\n\u003Cp>☑ \u003Cstrong>Automatic User Integration\u003C\u002Fstrong> with existing WordPress users\u003C\u002Fp>\n\u003Cp>☑ \u003Cstrong>Reminder Emails\u003C\u002Fstrong> for employees and supervisors\u003C\u002Fp>\n\u003Ch3>PRO Features\u003C\u002Fh3>\n\u003Cp>✅ \u003Cstrong>Custom Categories\u003C\u002Fstrong> – Supports custom PTO and Regular Categories\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>PTO Banks\u003C\u002Fstrong> – With Automatic Annual Accruals\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Signature Pad\u003C\u002Fstrong> – Mobile and desktop compatible\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Reporting Tools\u003C\u002Fstrong> – Filter and total time entries\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>CSV export\u003C\u002Fstrong> – Compatible with Excel\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Geolocation\u003C\u002Fstrong> – Pinpoint employee punches on a map\u003C\u002Fp>\n\u003Ch3>Translation\u003C\u002Fh3>\n\u003Cp>This plugin is available in the following languages:\u003Cbr \u002F>\n– English\u003Cbr \u002F>\n– Spanish\u003Cbr \u002F>\n– Romanian\u003Cbr \u002F>\n– Italian\u003Cbr \u002F>\n– French\u003Cbr \u002F>\n– German\u003Cbr \u002F>\n– Portuguese\u003Cbr \u002F>\n– Dutch\u003C\u002Fp>\n","The number one timesheet plugin for WordPress. A simple calendar-based timecard and time management solution.",200,59715,94,21,"2025-10-28T16:28:00.000Z","6.0",[124,125,126,127,128],"time-management","time-punch","time-track","timecard","timesheet","https:\u002F\u002Frichardlerma.com\u002Fplugins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdynamic-time.5.4.23.zip",{"slug":132,"name":133,"version":134,"author":135,"author_profile":136,"description":137,"short_description":138,"active_installs":11,"downloaded":139,"rating":11,"num_ratings":62,"last_updated":140,"tested_up_to":141,"requires_at_least":54,"requires_php":54,"tags":142,"homepage":147,"download_link":148,"security_score":149,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"block-profile-card","Profile Card Block","1.0.0","Chintesh Prajapati","https:\u002F\u002Fprofiles.wordpress.org\u002Fchinteshprajapati\u002F","\u003Cp>display profile in card formate in your wordpress-site with custom block.\u003C\u002Fp>\n","display profile in card formate in your wordpress-site with custom block.",4719,"2018-12-28T10:51:00.000Z","5.0.25",[143,144,145,146],"card","profile","profile-card","profilecard","http:\u002F\u002F''","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fblock-profile-card.zip",85,{"attackSurface":151,"codeSignals":195,"taintFlows":249,"riskAssessment":472,"analyzedAt":485},{"hooks":152,"ajaxHandlers":183,"restRoutes":184,"shortcodes":185,"cronEvents":193,"entryPointCount":194,"unprotectedCount":27},[153,160,165,169,173,177],{"type":154,"name":155,"callback":156,"priority":157,"file":158,"line":159},"action","init","ecards_shortcode_fix",12,"ecards-lite.php",42,{"type":161,"name":162,"callback":163,"file":158,"line":164},"filter","wp_mail_content_type","ecards_set_content_type",45,{"type":154,"name":166,"callback":167,"file":158,"line":168},"wp_enqueue_scripts","ecard_enqueue_scripts",327,{"type":154,"name":170,"callback":171,"file":158,"line":172},"admin_enqueue_scripts","ecard_enqueue_admin_scripts",335,{"type":154,"name":174,"callback":175,"file":158,"line":176},"admin_menu","ecard_add_option_page",343,{"type":161,"name":178,"callback":179,"priority":180,"file":181,"line":182},"the_content","do_shortcode",9,"includes\\functions.php",31,[],[],[186,189],{"tag":20,"callback":187,"file":158,"line":188},"display_ecardMe",321,{"tag":190,"callback":191,"file":158,"line":192},"ecard_counter","display_ecardCounter",322,[],2,{"dangerousFunctions":196,"sqlUsage":197,"outputEscaping":199,"fileOperations":27,"externalRequests":27,"nonceChecks":27,"capabilityChecks":27,"bundledLibraries":248},[],{"prepared":27,"raw":27,"locations":198},[],{"escaped":200,"rawEcho":201,"locations":202},32,24,[203,206,208,211,213,214,216,218,219,221,222,224,226,227,229,230,232,234,236,238,240,242,244,246],{"file":158,"line":204,"context":205},205,"raw output",{"file":158,"line":207,"context":205},211,{"file":209,"line":210,"context":205},"includes\\page-options.php",20,{"file":209,"line":212,"context":205},27,{"file":209,"line":164,"context":205},{"file":209,"line":215,"context":205},56,{"file":209,"line":217,"context":205},110,{"file":209,"line":217,"context":205},{"file":209,"line":220,"context":205},133,{"file":209,"line":220,"context":205},{"file":209,"line":223,"context":205},186,{"file":209,"line":225,"context":205},203,{"file":209,"line":225,"context":205},{"file":209,"line":228,"context":205},209,{"file":209,"line":228,"context":205},{"file":209,"line":231,"context":205},288,{"file":209,"line":233,"context":205},295,{"file":209,"line":235,"context":205},331,{"file":209,"line":237,"context":205},338,{"file":209,"line":239,"context":205},345,{"file":209,"line":241,"context":205},352,{"file":209,"line":243,"context":205},359,{"file":209,"line":245,"context":205},366,{"file":209,"line":247,"context":205},384,[],[250,404],{"entryPoint":251,"graph":252,"unsanitizedCount":120,"severity":403},"ecard_options_page (includes\\page-options.php:6)",{"nodes":253,"edges":380},[254,258,263,267,269,273,275,279,281,285,287,290,292,296,298,301,303,306,308,312,314,318,320,324,326,330,332,336,338,342,344,348,350,354,356,360,362,366,368,372,374,378],{"id":255,"type":256,"label":257,"file":209,"line":157},"n0","source","$_POST['ecard_label']",{"id":259,"type":260,"label":261,"file":209,"line":157,"wp_function":262},"n1","sink","update_option() [Settings Manipulation]","update_option",{"id":264,"type":256,"label":265,"file":209,"line":266},"n2","$_POST['ecard_image_size']",14,{"id":268,"type":260,"label":261,"file":209,"line":266,"wp_function":262},"n3",{"id":270,"type":256,"label":271,"file":209,"line":272},"n4","$_POST['ecard_shortcode_fix']",15,{"id":274,"type":260,"label":261,"file":209,"line":272,"wp_function":262},"n5",{"id":276,"type":256,"label":277,"file":209,"line":278},"n6","$_POST['ecard_html_fix']",16,{"id":280,"type":260,"label":261,"file":209,"line":278,"wp_function":262},"n7",{"id":282,"type":256,"label":283,"file":209,"line":284},"n8","$_POST['ecard_use_akismet']",18,{"id":286,"type":260,"label":261,"file":209,"line":284,"wp_function":262},"n9",{"id":288,"type":256,"label":289,"file":209,"line":201},"n10","$_POST['ecard_restrictions']",{"id":291,"type":260,"label":261,"file":209,"line":201,"wp_function":262},"n11",{"id":293,"type":256,"label":294,"file":209,"line":295},"n12","$_POST['ecard_restrictions_message']",25,{"id":297,"type":260,"label":261,"file":209,"line":295,"wp_function":262},"n13",{"id":299,"type":256,"label":300,"file":209,"line":182},"n14","$_POST['ecard_behaviour']",{"id":302,"type":260,"label":261,"file":209,"line":182,"wp_function":262},"n15",{"id":304,"type":256,"label":305,"file":209,"line":200},"n16","$_POST['ecard_link_anchor']",{"id":307,"type":260,"label":261,"file":209,"line":200,"wp_function":262},"n17",{"id":309,"type":256,"label":310,"file":209,"line":311},"n18","$_POST['ecard_title']",34,{"id":313,"type":260,"label":261,"file":209,"line":311,"wp_function":262},"n19",{"id":315,"type":256,"label":316,"file":209,"line":317},"n20","$_POST['ecard_body_additional']",35,{"id":319,"type":260,"label":261,"file":209,"line":317,"wp_function":262},"n21",{"id":321,"type":256,"label":322,"file":209,"line":323},"n22","$_POST['ecard_body_footer']",36,{"id":325,"type":260,"label":261,"file":209,"line":323,"wp_function":262},"n23",{"id":327,"type":256,"label":328,"file":209,"line":329},"n24","$_POST['ecard_body_toggle']",38,{"id":331,"type":260,"label":261,"file":209,"line":329,"wp_function":262},"n25",{"id":333,"type":256,"label":334,"file":209,"line":335},"n26","$_POST['ecard_send_behaviour']",40,{"id":337,"type":260,"label":261,"file":209,"line":335,"wp_function":262},"n27",{"id":339,"type":256,"label":340,"file":209,"line":341},"n28","$_POST['ecard_hardcoded_email']",41,{"id":343,"type":260,"label":261,"file":209,"line":341,"wp_function":262},"n29",{"id":345,"type":256,"label":346,"file":209,"line":347},"n30","$_POST['ecard_label_name_own']",49,{"id":349,"type":260,"label":261,"file":209,"line":347,"wp_function":262},"n31",{"id":351,"type":256,"label":352,"file":209,"line":353},"n32","$_POST['ecard_label_email_own']",50,{"id":355,"type":260,"label":261,"file":209,"line":353,"wp_function":262},"n33",{"id":357,"type":256,"label":358,"file":209,"line":359},"n34","$_POST['ecard_label_email_friend']",51,{"id":361,"type":260,"label":261,"file":209,"line":359,"wp_function":262},"n35",{"id":363,"type":256,"label":364,"file":209,"line":365},"n36","$_POST['ecard_label_message']",52,{"id":367,"type":260,"label":261,"file":209,"line":365,"wp_function":262},"n37",{"id":369,"type":256,"label":370,"file":209,"line":371},"n38","$_POST['ecard_label_success']",53,{"id":373,"type":260,"label":261,"file":209,"line":371,"wp_function":262},"n39",{"id":375,"type":256,"label":376,"file":209,"line":377},"n40","$_POST['ecard_submit']",54,{"id":379,"type":260,"label":261,"file":209,"line":377,"wp_function":262},"n41",[381,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402],{"from":255,"to":259,"sanitized":382},false,{"from":264,"to":268,"sanitized":382},{"from":270,"to":274,"sanitized":382},{"from":276,"to":280,"sanitized":382},{"from":282,"to":286,"sanitized":382},{"from":288,"to":291,"sanitized":382},{"from":293,"to":297,"sanitized":382},{"from":299,"to":302,"sanitized":382},{"from":304,"to":307,"sanitized":382},{"from":309,"to":313,"sanitized":382},{"from":315,"to":319,"sanitized":382},{"from":321,"to":325,"sanitized":382},{"from":327,"to":331,"sanitized":382},{"from":333,"to":337,"sanitized":382},{"from":339,"to":343,"sanitized":382},{"from":345,"to":349,"sanitized":382},{"from":351,"to":355,"sanitized":382},{"from":357,"to":361,"sanitized":382},{"from":363,"to":367,"sanitized":382},{"from":369,"to":373,"sanitized":382},{"from":375,"to":379,"sanitized":382},"low",{"entryPoint":405,"graph":406,"unsanitizedCount":120,"severity":403},"\u003Cpage-options> (includes\\page-options.php:0)",{"nodes":407,"edges":450},[408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449],{"id":255,"type":256,"label":257,"file":209,"line":157},{"id":259,"type":260,"label":261,"file":209,"line":157,"wp_function":262},{"id":264,"type":256,"label":265,"file":209,"line":266},{"id":268,"type":260,"label":261,"file":209,"line":266,"wp_function":262},{"id":270,"type":256,"label":271,"file":209,"line":272},{"id":274,"type":260,"label":261,"file":209,"line":272,"wp_function":262},{"id":276,"type":256,"label":277,"file":209,"line":278},{"id":280,"type":260,"label":261,"file":209,"line":278,"wp_function":262},{"id":282,"type":256,"label":283,"file":209,"line":284},{"id":286,"type":260,"label":261,"file":209,"line":284,"wp_function":262},{"id":288,"type":256,"label":289,"file":209,"line":201},{"id":291,"type":260,"label":261,"file":209,"line":201,"wp_function":262},{"id":293,"type":256,"label":294,"file":209,"line":295},{"id":297,"type":260,"label":261,"file":209,"line":295,"wp_function":262},{"id":299,"type":256,"label":300,"file":209,"line":182},{"id":302,"type":260,"label":261,"file":209,"line":182,"wp_function":262},{"id":304,"type":256,"label":305,"file":209,"line":200},{"id":307,"type":260,"label":261,"file":209,"line":200,"wp_function":262},{"id":309,"type":256,"label":310,"file":209,"line":311},{"id":313,"type":260,"label":261,"file":209,"line":311,"wp_function":262},{"id":315,"type":256,"label":316,"file":209,"line":317},{"id":319,"type":260,"label":261,"file":209,"line":317,"wp_function":262},{"id":321,"type":256,"label":322,"file":209,"line":323},{"id":325,"type":260,"label":261,"file":209,"line":323,"wp_function":262},{"id":327,"type":256,"label":328,"file":209,"line":329},{"id":331,"type":260,"label":261,"file":209,"line":329,"wp_function":262},{"id":333,"type":256,"label":334,"file":209,"line":335},{"id":337,"type":260,"label":261,"file":209,"line":335,"wp_function":262},{"id":339,"type":256,"label":340,"file":209,"line":341},{"id":343,"type":260,"label":261,"file":209,"line":341,"wp_function":262},{"id":345,"type":256,"label":346,"file":209,"line":347},{"id":349,"type":260,"label":261,"file":209,"line":347,"wp_function":262},{"id":351,"type":256,"label":352,"file":209,"line":353},{"id":355,"type":260,"label":261,"file":209,"line":353,"wp_function":262},{"id":357,"type":256,"label":358,"file":209,"line":359},{"id":361,"type":260,"label":261,"file":209,"line":359,"wp_function":262},{"id":363,"type":256,"label":364,"file":209,"line":365},{"id":367,"type":260,"label":261,"file":209,"line":365,"wp_function":262},{"id":369,"type":256,"label":370,"file":209,"line":371},{"id":373,"type":260,"label":261,"file":209,"line":371,"wp_function":262},{"id":375,"type":256,"label":376,"file":209,"line":377},{"id":379,"type":260,"label":261,"file":209,"line":377,"wp_function":262},[451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471],{"from":255,"to":259,"sanitized":382},{"from":264,"to":268,"sanitized":382},{"from":270,"to":274,"sanitized":382},{"from":276,"to":280,"sanitized":382},{"from":282,"to":286,"sanitized":382},{"from":288,"to":291,"sanitized":382},{"from":293,"to":297,"sanitized":382},{"from":299,"to":302,"sanitized":382},{"from":304,"to":307,"sanitized":382},{"from":309,"to":313,"sanitized":382},{"from":315,"to":319,"sanitized":382},{"from":321,"to":325,"sanitized":382},{"from":327,"to":331,"sanitized":382},{"from":333,"to":337,"sanitized":382},{"from":339,"to":343,"sanitized":382},{"from":345,"to":349,"sanitized":382},{"from":351,"to":355,"sanitized":382},{"from":357,"to":361,"sanitized":382},{"from":363,"to":367,"sanitized":382},{"from":369,"to":373,"sanitized":382},{"from":375,"to":379,"sanitized":382},{"summary":473,"deductions":474},"The ecard-lite plugin version 4.3.2 exhibits a generally positive security posture, primarily due to the absence of known vulnerabilities and the use of prepared statements for SQL queries. The static analysis reveals a small attack surface with no unprotected entry points, and no dangerous functions or file operations were identified.  However, there are notable areas for improvement, particularly concerning output escaping. A significant portion of outputs are not properly escaped, which could lead to cross-site scripting (XSS) vulnerabilities if user-supplied data is not handled securely before being displayed. Additionally, the taint analysis indicates two flows with unsanitized paths, which, while not classified as critical or high severity in this analysis, represent potential avenues for exploitation if not addressed. The lack of any recorded vulnerability history is a strong positive, suggesting diligent security practices in the past, but it does not negate the risks identified in the current code.",[475,477,480,483],{"reason":476,"points":33},"Unsanitized paths in taint flows",{"reason":478,"points":479},"Low percentage of properly escaped output",7,{"reason":481,"points":482},"No capability checks",5,{"reason":484,"points":482},"No nonce checks","2026-03-16T21:05:55.699Z",{"wat":487,"direct":496},{"assetPaths":488,"generatorPatterns":491,"scriptPaths":492,"versionParams":493},[489,490],"\u002Fwp-content\u002Fplugins\u002Fecards-lite\u002Fecards-lite.css","\u002Fwp-content\u002Fplugins\u002Fecards-lite\u002Fecards-lite.js",[],[490],[494,495],"ecards-lite\u002Fecards-lite.css?ver=","ecards-lite\u002Fecards-lite.js?ver=",{"cssClasses":497,"htmlComments":502,"htmlAttributes":503,"restEndpoints":505,"jsGlobals":506,"shortcodeOutput":508},[498,499,500,501],"ecard-item-image","ecard-item-title","ecard-message","ecard-form",[],[504],"data-ecardid",[],[507],"ecard_lite_ajax_object",[509,510,511,512],"\u003Cform class=\"ecard-form\" method=\"post\">","\u003Cinput type=\"hidden\" name=\"ecard_send\" value=\"1\">","\u003Cinput type=\"hidden\" name=\"ecard_pick_me\" value=\"\">","\u003Cinput type=\"hidden\" name=\"ecard_referer\" value=\""]