[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fgmOtRdHSV8HSCdO7NmT33CfvxOHOPmZpReYa9VQZdFw":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":13,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":34,"analysis":140,"fingerprints":186},"echbay-for-coccoc","EchBay For CocCoc","1.0.4","Dao Quoc Dai","https:\u002F\u002Fprofiles.wordpress.org\u002Fitvn9online\u002F","\u003Cp>This plugin for user in Vietnam!\u003C\u002Fp>\n\u003Cp>Đưa ra thông báo không bảo mật khi người dùng sử dụng trình duyệt Cốc Cốc để truy cập website.\u003C\u002Fp>\n\u003Cp>Như các bạn đã biết! Đợt gần đây đang dấy lên các thông tin về việc trình duyệt Cốc Cốc thu thập các thông tin của người dùng một cách không minh bạch. Các thông tin đó có thể là thông tin thanh toán, thông tin mua bán của người dùng. Trong đó có cả việc lấy cookie liên quan đến việc mua bán thông qua các trang Affililate rồi biến thành của họ, việc này chính xác là một kiểu ăn cắp sức lao động của người khác, ăn cắp một cách trắng trợn. Vì thế, cần sự chung tay của cộng đồng, đưa ra phản hồi mạnh mẽ nhất tới đội ngũ CC.\u003C\u002Fp>\n","This plugin for user in Vietnam!",0,3200,100,1,"2025-10-21T04:17:00.000Z","6.8.5","4.8","",[20,21,22,23],"chrome","firefox","safafi","trinh-duyet-coc-coc","https:\u002F\u002Fwww.facebook.com\u002Fgroups\u002Fwordpresseb","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fechbay-for-coccoc.zip",null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":13,"avg_patch_time_days":14,"trust_score":13,"computed_at":33},"itvn9online",8,1560,"2026-04-04T15:23:50.604Z",[35,55,78,100,122],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":45,"num_ratings":31,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":18,"tags":49,"homepage":53,"download_link":54,"security_score":13,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"pushalert-web-push-notifications","PushAlert – Web Push Notifications for WordPress and WooCommerce","2.9.0","PushAlert","https:\u002F\u002Fprofiles.wordpress.org\u002Fpushalert\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fpushalert.co\" rel=\"nofollow ugc\">PushAlert\u003C\u002Fa> plugin for WordPress Web Push Notifications automates integration, and allows your users to subscribe to push notifications. It also adds an easy to use interface right next to the editor, which lets you push notifications automatically on publishing a post.\u003C\u002Fp>\n\u003Ch4>Benefits of PushAlert Browser Notifications for WordPress and WooCommerce:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Push Notifications have up to 10 times better click-through rate than traditional marketing methods like emails and very high visibility even without being clicked.\u003C\u002Fli>\n\u003Cli>Engaging visitors at the right time gets more clicks and increases your traffic instantly. It also helps in bringing back visitors to your website.\u003C\u002Fli>\n\u003Cli>Easier to get a lot of subscriptions as Push Notifications don’t require any personal information.\u003C\u002Fli>\n\u003Cli>WooCommerce stores also get (Only on PushAlert!) automated abandoned cart notifications, price-drop and product back in stock alerts to boost sales by as much as 30% as well as shipment notifications with tracking button.\u003C\u002Fli>\n\u003Cli>Works on both Desktop and Mobile devices (without app) even when browser is closed.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Here are some more features to give your website an instant boost:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Broader Reach\u003C\u002Fstrong>: PushAlert Web Push Notifications work on Chrome, Safari, Firefox, Edge and Opera on both desktop and mobile devices. It works across all major OS platforms including Windows, iOS 16.4+, iPadOS 16.4+, MacOS (OSX), Linux, ChromeOS as well as Android.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Audience Creator\u003C\u002Fstrong>: Target specific subscribers based on their interests, location, URL and other custom parameters for more effective re-engagement and higher conversions.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Welcome Drip\u003C\u002Fstrong>: With the welcome drip campaign you can send a series of notifications to new subscribers. With these you can automate customer on-boarding, engagement and direct the way they navigate your website.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Conversion Funnels\u003C\u002Fstrong>: Create a funnel playbook for your subscribers based on which products they visit on your store. With a browse abandoned funnel, you can not only bring more leads but also minimize drop-off from your website.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>RSS Push and NewsLetter\u003C\u002Fstrong>: You can now send automatic notifications whenever a post is published using your RSS feed. A recurring newsletter notification with the top posts of the day, can now also be sent at a scheduled time everyday, right from the PushAlert Dashboard.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Complete Localization with Multi-lingual Support\u003C\u002Fstrong>: PushAlert prompts can now be shown in any language and a single notification can be sent in multiple languages, automatically delivered in the subscriber’s language.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Timezone based scheduling\u003C\u002Fstrong>: Schedule notifications based on the timezone of your subscribers to reach them when they are active, resulting in more engagement and higher revenue.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>A\u002FB Notification\u003C\u002Fstrong>: By creating two variants of the same notification with different title, message and images; PushAlert’s intelligent algorithm determines which version works best and sends it for better conversion.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Segmentation with Advanced Targeting\u003C\u002Fstrong>: With segments, you can personalize notifications for your customers based on their interests. We already have segments based on Location, Device, Browser and OS.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Schedule Notifications\u003C\u002Fstrong>: If you have any deals, announcement that needs to be sent at a particular time, you can easily schedule that beforehand.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Advanced Stats\u003C\u002Fstrong>: With our stats you can clearly see which notifications are fetching better engagement with real-time click-through rate.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>PushAlert’s Fully Automated WooCommerce Marketing Solution:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Abandoned Cart Notifications\u003C\u002Fstrong>: On average, 70% of all carts are abandoned but most of them are recoverable by reaching out to customers at the right time. PushAlert lets you recover lost sales with automated and personalized abandoned cart notifications, when customers forget to checkout.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>In-Stock Notifications\u003C\u002Fstrong>: Now you won’t loose any customer even when a product is out of stock, customers can subscribe to alerts and will get a direct notification (automated) on their phone or PC as soon as the product they wanted is back in stock with a direct Add to Cart button (Only on PushAlert!).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Price Drop Notifications\u003C\u002Fstrong>: You may have already spent a lot on marketing and bringing customers to your store, but many of them leave without making a purchase, sometimes a higher price than what they were willing to pay could be a reason. With PushAlert, your customers will automatically get to know when a product they like is on sale or at a discount with an Add to Cart button (Only on PushAlert!). In essence, no additional spending on marketing for promoting a sale.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shipment Alerts\u003C\u002Fstrong>: Want to let customers know that their order is on the way, PushAlert sends real-time automated notifications with tracking details.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Send Notification to Individual Customers\u003C\u002Fstrong>: Right from the WordPress Dashboard, you can directly target a single user with their email ID or user ID to send personalized notification.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can start with a \u003Ca href=\"https:\u002F\u002Fpushalert.co\u002Fpricing\" rel=\"nofollow ugc\">lifetime free account\u003C\u002Fa> with unlimited notifications and as you grow, move to one of the paid plans for more features. With PushAlert you can convert your visitors into customers and keep them coming back to your website. All online businesses, e-commerce stores and blogs are implementing push notifications, and it’s time you do too.\u003C\u002Fp>\n\u003Cp>If you’ve any query or issue, please get in touch with us at support@pushalert.co\u003C\u002Fp>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Cp>Add the Website ID, Rest API Key, Configuration ID and FCM\u002FGCM Sender ID from the Integrate section of your PushAlert dashboard.\u003C\u002Fp>\n","A plugin by PushAlert to enable automated Push Notifications for your WordPress website and WooCommerce Store to increase traffic and sales.",1000,49146,92,"2025-12-01T11:37:00.000Z","6.9.4","2.7",[50,20,21,51,52],"browser-notification","push-notifications","pushalert","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpushalert-web-push-notifications\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpushalert-web-push-notifications.2.9.0.zip",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":13,"num_ratings":65,"last_updated":66,"tested_up_to":67,"requires_at_least":68,"requires_php":18,"tags":69,"homepage":18,"download_link":75,"security_score":76,"vuln_count":14,"unpatched_count":14,"last_vuln_date":77,"fetched_at":27},"scrolling-anchors","Easy Smooth Scroll Links","1.0","andrewmatt","https:\u002F\u002Fprofiles.wordpress.org\u002Fandrewmatt\u002F","\u003Cp>Create anchors and add up to to 30 scrolling animation effects to links that link to page anchors. You can set scroll speed and offset value.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>You can set \u003Cstrong>scroll speed\u003C\u002Fstrong> and \u003Cstrong>offset value\u003C\u002Fstrong>. \u003C\u002Fli>\n\u003Cli>Choose from \u003Cstrong>30 Scrolling Animation Effects\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>You can \u003Cstrong>exclude certain anchors from scrolling\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Works on \u003Cstrong>all major browsers\u003C\u002Fstrong>: IE, Firefox, Chrome, Safari…\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Visual Editor\u003C\u002Fstrong> Anchor Button\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcode\u003C\u002Fstrong> Supported [anchor]anchorname[\u002Fanchor]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Video Tutorial\u003C\u002Fh4>\n","Create anchors and add up to to 30 scrolling animation effects to links that link to page anchors. You can set scroll speed and offset value.",600,6920,2,"2017-04-26T06:12:00.000Z","4.5.33","2.6.5",[70,71,72,73,74],"jquery-smooth-scroll-div","smooth-scroll","smooth-scroll-chrome","smooth-scroll-firefox","smooth-scroll-jquery","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fscrolling-anchors.zip",64,"2022-04-22 00:00:00",{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":13,"downloaded":86,"rating":13,"num_ratings":87,"last_updated":88,"tested_up_to":16,"requires_at_least":89,"requires_php":18,"tags":90,"homepage":95,"download_link":96,"security_score":97,"vuln_count":98,"unpatched_count":11,"last_vuln_date":99,"fetched_at":27},"push-notification-by-feedify","Feedify – Web Push Notifications","2.4.17","feedify","https:\u002F\u002Fprofiles.wordpress.org\u002Ffeedify\u002F","\u003Cp>Having a hard time engaging visitors on your WordPress blog or website? Are traditional acquisition channels costing an arm and leg?\u003C\u002Fp>\n\u003Cp>Welcome to \u003Ca href=\"https:\u002F\u002Fapp.feedify.net\" rel=\"nofollow ugc\">Feedify\u003C\u002Fa>! A one stop solution to all your customer engagement needs. We offer you tools that make visitors stick way longer than ever. And even if they leave, the marketing string never breaks!\u003C\u002Fp>\n\u003Cp>Engage your visitors even when they are not on your website with Feedify’s powerful Push Notifications plugin. Integrating seamlessly with WordPress,Feedify allows you to convert every visitor into a potential subscriber. What else? It comes loaded with smart analytics that help you target each user- when you want, where you want!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Works on all Devices\u003C\u002Fstrong> \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Stop fretting over what device your subscribers use. Our Push Notifications know no biases. They smoothly reach all devices- be it a PC, a Mobile , a Laptop, or a Tablet.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Supports most popular browsers\u003C\u002Fstrong> \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Our Push Notifications work on all the three giants in browsing industry-  Chrome, Firefox, Safari. So with Feedify, be assured that you won’t have to compromise on reach ever again!\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Banner Notifications\u003C\u002Fstrong> \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Text not enough to convey what you wanna say? No problems. Enjoy the impact of a thousand words with an image of your choice. Pack a punch with our Banner Notifications that come with an image of your choice, along with the brief message you wanna give.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Opt-in Customization\u003C\u002Fstrong> \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Opt ins are the first and the most important prompts that you send to a user. Feedify understands this and therefore gives you the option to customize your opt-in prompt the way you see fit to ensure high conversion rates.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Smart Profiling, Sharp Targeting\u003C\u002Fstrong> \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>No two visitors on your site are exactly the same. Therefore, Feedify helps you target a unique message to the desired group- a move that can exceptionally improve your sales conversions.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Scheduled Notifications\u003C\u002Fstrong> \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>What good is a limited hours sale notification when one is sleeping? To increase effectivity, we enable you to schedule your notification to times that generate the highest productivity.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Geo-Location\u003C\u002Fstrong> \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Holding an event in Manchester? Why bother a subscriber in St. Petersburg! Target your Push Notifications based on the location of the subscriber to give a personalized, effective touch.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Easy interface\u003C\u002Fstrong> \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Unlike others, we focus more on sophistication than complication. Our clean interface doesn’t require an IT degree. Even a kid of this techno age can flawlessly use Feedify and improve the website’s marketing funnel. We also provide ready to use templates that make the process a whole lot easier!\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>FURTHER READING:\u003C\u002Fstrong> \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For more info, check out the following links:\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ffeedify.net\u002Fresources\u002Fdocumentation-segments\u002Fwordpress\" rel=\"nofollow ugc\">Our Documentation\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Reach out to us! \u003Ca href=\"https:\u002F\u002Ffeedify.net\u002Fcontact-us\" rel=\"nofollow ugc\"> Contact Us\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Learn more with us! Visit our \u003Ca href=\"https:\u002F\u002Ffeedify.net\u002Fblog\" rel=\"nofollow ugc\">Blog\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Free Plan Available\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>No Credit Card Required*\u003C\u002Fp>\n","Engage your customer with Web Push Notifications. Send them personalised messages even when they aren't on your website.",12290,5,"2025-11-06T14:01:00.000Z","3.3",[91,92,93,94,51],"chrome-push","desktop-notification","firefox-push","mobile-notifications","https:\u002F\u002Fapp.feedify.net\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpush-notification-by-feedify.zip",97,3,"2025-04-15 00:00:00",{"slug":101,"name":102,"version":103,"author":104,"author_profile":105,"description":106,"short_description":107,"active_installs":108,"downloaded":109,"rating":110,"num_ratings":111,"last_updated":112,"tested_up_to":113,"requires_at_least":114,"requires_php":18,"tags":115,"homepage":119,"download_link":120,"security_score":121,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"browser-blocker","Browser Blocker","0.5.6","bdoga","https:\u002F\u002Fprofiles.wordpress.org\u002Fbdoga\u002F","\u003Cp>The Browser Blocker Plugin puts the power in your hands to control what browsers(versions) can access your website content and which ones cannot. For the browsers(versions) that you block, the user has control over the splash screen that their clients receive. There is a “simple” mode for those who just want to block some browsers with the default settings, and there is an “advanced” mode for those who want to have a little more control over what is displayed to their clients.\u003C\u002Fp>\n\u003Cp>If you would like to see more of our plugins feel free to drop by the \u003Ca href=\"http:\u002F\u002Fwww.macnative.com\u002Fdevelopment\u002Fbrowser-blocker\u002F\" rel=\"nofollow ugc\">Browser Blocker plugin page\u003C\u002Fa> or the \u003Ca href=\"http:\u002F\u002Fwww.macnative.com\u002F\" rel=\"nofollow ugc\">Macnative.com Homepage\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>This plugin utilizes the \u003Ca href=\"http:\u002F\u002Fchrisschuld.com\u002Fprojects\u002Fbrowser-php-detecting-a-users-browser-from-php\u002F\" rel=\"nofollow ugc\">Browser detection library\u003C\u002Fa> that was built by \u003Ca href=\"http:\u002F\u002Fchrisschuld.com\u002F\" rel=\"nofollow ugc\">Chris Schuld\u003C\u002Fa> A big thanks to him for his major contribution.\u003Cbr \u002F>\nA big thanks to Vistaicons.com for creating the Web Browsers Icon Set that is used with the plugin. \u003Ca href=\"http:\u002F\u002Fwww.vistaicons.com\u002F\" rel=\"nofollow ugc\">Follow the link to see more of their icons\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Another big thanks to Yusuke Kamiyamane for the use of many of his Fugue Icon set icons throughout the Plugins Administrator, \u003Ca href=\"http:\u002F\u002Fp.yusukekamiyamane.com\u002F\" rel=\"nofollow ugc\">please visit their homepage\u003C\u002Fa>.\u003C\u002Fp>\n","Browser Blocker allows you to pick and choose which browsers(versions) can access your web page and which ones are given a blocked splash screen.",60,11764,88,7,"2012-10-11T03:29:00.000Z","3.4.2","3.0",[116,20,21,117,118],"browser","ie","internet-explorer","http:\u002F\u002Fwww.macnative.com\u002Fdevelopment\u002Fbrowser-blocker","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbrowser-blocker.0.5.6.zip",85,{"slug":123,"name":124,"version":125,"author":126,"author_profile":127,"description":18,"short_description":128,"active_installs":129,"downloaded":130,"rating":11,"num_ratings":11,"last_updated":131,"tested_up_to":132,"requires_at_least":133,"requires_php":18,"tags":134,"homepage":138,"download_link":139,"security_score":121,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"cache-manifest-for-wordpress-themes","Cache Manifest for WordPress Themes","1.6","Patrick Chia","https:\u002F\u002Fprofiles.wordpress.org\u002Fmypatricks\u002F","Use cache manifest in wordpress themes",10,3213,"2011-07-07T16:02:00.000Z","3.2.1","3.1.3",[135,20,21,136,137],"cache-manifest","google","html5","http:\u002F\u002Fpatrick.bloggles.info\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcache-manifest-for-wordpress-themes.1.6.zip",{"attackSurface":141,"codeSignals":157,"taintFlows":177,"riskAssessment":178,"analyzedAt":185},{"hooks":142,"ajaxHandlers":153,"restRoutes":154,"shortcodes":155,"cronEvents":156,"entryPointCount":11,"unprotectedCount":11},[143,149],{"type":144,"name":145,"callback":146,"file":147,"line":148},"action","admin_menu","EFC_add_menu_setting_to_admin_menu","eb.php",222,{"type":144,"name":150,"callback":151,"file":147,"line":152},"wp_footer","EFC_show_facebook_messenger_box_in_site",228,[],[],[],[],{"dangerousFunctions":158,"sqlUsage":159,"outputEscaping":164,"fileOperations":165,"externalRequests":11,"nonceChecks":14,"capabilityChecks":14,"bundledLibraries":176},[],{"prepared":11,"raw":14,"locations":160},[161],{"file":147,"line":162,"context":163},57,"$wpdb->get_results() with variable interpolation",{"escaped":87,"rawEcho":165,"locations":166},4,[167,170,172,174],{"file":147,"line":168,"context":169},150,"raw output",{"file":147,"line":171,"context":169},151,{"file":147,"line":173,"context":169},187,{"file":147,"line":175,"context":169},192,[],[],{"summary":179,"deductions":180},"The \"echbay-for-coccoc\" plugin version 1.0.4 exhibits a generally strong security posture based on the provided static analysis.  The absence of direct entry points like AJAX handlers, REST API routes, shortcodes, and cron events significantly limits the attack surface.  Furthermore, the presence of nonce and capability checks, even if limited in scope, demonstrates an awareness of basic WordPress security best practices.  The plugin also avoids the use of bundled libraries, which can often be a source of outdated and vulnerable code.\n\nHowever, there are a couple of areas that warrant attention. The single SQL query observed is not using prepared statements, which represents a potential SQL injection risk. While the attack surface is small and the vulnerability history is clean, this single instance of non-prepared SQL introduces a tangible, albeit contained, risk. The percentage of properly escaped output is also moderate, suggesting a potential for cross-site scripting (XSS) vulnerabilities if user-controlled data is involved in the unescaped outputs.\n\nGiven the lack of known vulnerabilities and the limited scope of the identified code issues, the overall risk is currently low. The plugin appears to be well-developed from a security perspective, with the exception of the SQL query and the output escaping. Continued vigilance and addressing these minor points would further enhance its security.",[181,183],{"reason":182,"points":111},"SQL query not using prepared statements",{"reason":184,"points":165},"Moderate output escaping","2026-03-17T06:52:23.753Z",{"wat":187,"direct":197},{"assetPaths":188,"generatorPatterns":193,"scriptPaths":194,"versionParams":195},[189,190,191,192],"\u002Fwp-content\u002Fplugins\u002Fechbay-for-coccoc\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fechbay-for-coccoc\u002Fguest.html","\u002Fwp-content\u002Fplugins\u002Fechbay-for-coccoc\u002Fjs.js","\u002Fwp-content\u002Fplugins\u002Fechbay-for-coccoc\u002Fadmin.html",[],[],[196],"echbay-for-coccoc\u002Fstyle.css?ver=",{"cssClasses":198,"htmlComments":200,"htmlAttributes":208,"restEndpoints":214,"jsGlobals":215,"shortcodeOutput":217},[199],"coccoc-waring-user",[201,202,203,204,205,206,207],"\u002F* Custom CSS *\u002F","\u002F*","body.coccoc-waring-user {","padding-top: 0;","padding-bottom: 35px;","}","*\u002F",[209,210,211,212,213],"efc_plugin_url","efc_plugin_version","efc_custom_css","_ebnonce","str_position",[],[216],"window.a_lert",[]]