[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhm2Mw4BhkjeUzIui1n1rfC4vGHzAkKuBVX41b3aw9kQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":49,"crawl_stats":38,"alternatives":55,"analysis":119,"fingerprints":298},"edd-favorites","EDD Favorites","1.0.8","Andrew Munro \u002F AffiliateWP","https:\u002F\u002Fprofiles.wordpress.org\u002Fsumobi\u002F","\u003Cp>This plugin requires both \u003Ca href=\"https:\u002F\u002Feasydigitaldownloads.com\u002Fextensions\u002Fedd-wish-lists\u002F?ref=166\" title=\"EDD Wish Lists\" rel=\"nofollow ugc\">EDD Wish Lists\u003C\u002Fa> & \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Feasy-digital-downloads\u002F\" title=\"Easy Digital Downloads\" rel=\"ugc\">Easy Digital Downloads\u003C\u002Fa>. \u003Cstrong>It will NOT function without them.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>EDD Favorites is a plugin for EDD Wish Lists that allows your customers to “favorite” downloads. With 1 click (and another click to remove) the download is instantly added to the user’s favorites.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>What’s the difference between EDD Wish Lists and EDD Favorites?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>With EDD Wish lists, you click the “add to wish list” link and choose a list (or create a new one) from the modal window. It also works with variable pricing. EDD favorites is for quickly adding\u002Fremoving downloads to a single list with 1 click. It doesn’t support variable pricing, meaning you cannot add a specific price to the favorites list, instead it adds the entire download.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>More plugins for Easy Digital Downloads\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can find more EDD plugins (both free and commercial) on the \u003Ca href=\"https:\u002F\u002Feasydigitaldownloads.com\" rel=\"nofollow ugc\">Easy Digital Downloads’\u003C\u002Fa> website.\u003C\u002Fp>\n","Favorite\u002FUnfavorite downloads in Easy Digital Downloads with just 1 click.",100,9772,60,4,"2017-08-01T21:22:00.000Z","4.8.28","3.3","",[20,21,22,23,24],"digital-downloads","e-downloads","easy-digital-downloads","edd","sumobi","https:\u002F\u002Feasydigitaldownloads.com\u002Fdownloads\u002Fedd-favorites","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fedd-favorites.1.0.8.zip",85,1,0,"2015-04-20 00:00:00","2026-03-15T15:16:48.613Z",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2015-9513","easy-digital-downloads-favorites-cross-site-scripting","Easy Digital Downloads – Favorites \u003C= 1.0.6 - Cross-Site Scripting","The Easy Digital Downloads (EDD) Favorites extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.",null,"\u003C=1.0.6","1.0.7","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-01-22 19:56:02",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F33836cee-c3f6-4c49-9acb-7c8f00839fdd?source=api-prod",3200,{"slug":24,"display_name":7,"profile_url":8,"plugin_count":50,"total_installs":51,"avg_security_score":52,"avg_patch_time_days":48,"trust_score":53,"computed_at":54},17,2660,88,71,"2026-04-04T05:39:54.560Z",[56,69,81,95,108],{"slug":57,"name":58,"version":59,"author":7,"author_profile":8,"description":60,"short_description":61,"active_installs":13,"downloaded":62,"rating":11,"num_ratings":14,"last_updated":63,"tested_up_to":64,"requires_at_least":65,"requires_php":18,"tags":66,"homepage":67,"download_link":68,"security_score":27,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"edd-purchase-rewards","EDD Purchase Rewards","1.1","\u003Cp>This plugin requires \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Feasy-digital-downloads\u002F\" title=\"Easy Digital Downloads\" rel=\"ugc\">Easy Digital Downloads\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>EDD Purchase Rewards allows a site owner to reward customers who purchase with a discount code. This will not only lead to repeat sales by the customer, but build customer loyalty.\u003C\u002Fp>\n\u003Cp>The discount code can either be a preselected discount code that you create, or you can choose to automatically generate a unique, one-time use discount code (percentage or flat rate).\u003C\u002Fp>\n\u003Cp>A minimum purchase amount can be set, and you can also force the customer to share to at least 1 social network before the discount is given to them. The discount code is shown on the purchase confirmation page but can be optionally emailed to the customer.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features\u003C\u002Fstrong>:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Offer a discount code to your customer for purchasing\u003C\u002Fli>\n\u003Cli>Force the customer to share to at least 1 social network before receiving their reward\u003C\u002Fli>\n\u003Cli>Set a minimum purchase amount before the customer receives the discount\u003C\u002Fli>\n\u003Cli>Select between an existing discount code, or auto generate one, flat or percentage\u003C\u002Fli>\n\u003Cli>Choose to send the discount to the customer via email\u003C\u002Fli>\n\u003Cli>Show the customer their available discount codes via the [edd_purchase_rewards_discounts] shortcode\u003C\u002Fli>\n\u003Cli>Customize the reward email\u003C\u002Fli>\n\u003Cli>Customize the twitter message\u003C\u002Fli>\n\u003Cli>Customize the default sharing title\u003C\u002Fli>\n\u003Cli>Customize the default sharing message\u003C\u002Fli>\n\u003Cli>Customize the reward title\u003C\u002Fli>\n\u003Cli>Customize the reward message\u003C\u002Fli>\n\u003Cli>Customize the reward sharing title\u003C\u002Fli>\n\u003Cli>Customize the reward sharing message\u003C\u002Fli>\n\u003Cli>Customize the reward sharing thanks title\u003C\u002Fli>\n\u003Cli>Customize the reward sharing thanks message\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>Want more free EDD plugins?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>To fund ongoing development of more \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fsumobi#content-plugins\" rel=\"nofollow ugc\">free EDD plugins\u003C\u002Fa>, I would greatly appreciate any of the below:\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Feasydigitaldownloads.com\u002Fblog\u002Fauthor\u002Fandrewmunro\u002F?ref=166\" title=\"Buy one of my commercial EDD plugins\" rel=\"nofollow ugc\">Buy one of my commercial EDD plugins\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Feasydigitaldownloads.com\u002Fextensions\u002F?ref=166\" title=\"Use my referral code when you purchase your next EDD plugin\" rel=\"nofollow ugc\">Use my referral code when you purchase your next EDD plugin\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.paypal.com\u002Fcgi-bin\u002Fwebscr?cmd=_s-xclick&hosted_button_id=EFUPMPEZPGW7L\" title=\"Donate via PayPal\" rel=\"nofollow ugc\">Donate via PayPal\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>Plugins for Easy Digital Downloads\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Feasydigitaldownloads.com\u002Fextensions\u002F?ref=166\" title=\"Plugins for Easy Digital Downloads\" rel=\"nofollow ugc\">https:\u002F\u002Feasydigitaldownloads.com\u002Fextensions\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Tips for Easy Digital Downloads\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fsumobi.com\u002Fblog\" title=\"Tips for Easy Digital Downloads\" rel=\"nofollow ugc\">http:\u002F\u002Fsumobi.com\u002Fblog\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Stay up to date\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cem>Follow me on Twitter\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Ftwitter.com\u002Fsumobi_\" title=\"Twitter\" rel=\"nofollow ugc\">http:\u002F\u002Ftwitter.com\u002Fsumobi_\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cem>Become a fan on Facebook\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.facebook.com\u002Fsumobicom\" title=\"Facebook\" rel=\"nofollow ugc\">http:\u002F\u002Fwww.facebook.com\u002Fsumobicom\u003C\u002Fa>\u003C\u002Fp>\n","Increase sales and build customer loyalty by rewarding customers",7489,"2015-04-13T18:41:00.000Z","4.1.42","3.8",[20,21,22,23,24],"http:\u002F\u002Fsumobi.com\u002Fshop\u002Fedd-purchase-rewards\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fedd-purchase-rewards.1.1.zip",{"slug":70,"name":71,"version":72,"author":7,"author_profile":8,"description":73,"short_description":74,"active_installs":75,"downloaded":76,"rating":29,"num_ratings":29,"last_updated":77,"tested_up_to":16,"requires_at_least":65,"requires_php":18,"tags":78,"homepage":79,"download_link":80,"security_score":27,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"edd-free-download-text","EDD Free Download Text","1.0.2","\u003Cp>This plugin requires \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Feasy-digital-downloads\u002F\" title=\"Easy Digital Downloads\" rel=\"ugc\">Easy Digital Downloads\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>It adds a new option under Downloads &rarr; Settings &rarr; Misc &rarr; Button Text where you can change the text that is shown for free downloads. The default is “Free – Purchase” which is not always ideal.\u003C\u002Fp>\n","Change the button text of a free download",30,3434,"2017-08-08T06:27:00.000Z",[20,21,22,23,24],"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fedd-free-download-text\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fedd-free-download-text.1.0.2.zip",{"slug":82,"name":83,"version":84,"author":7,"author_profile":8,"description":85,"short_description":86,"active_installs":87,"downloaded":88,"rating":11,"num_ratings":28,"last_updated":89,"tested_up_to":90,"requires_at_least":91,"requires_php":18,"tags":92,"homepage":93,"download_link":94,"security_score":27,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"edd-purchase-gravatars","EDD Purchase Gravatars","1.0.5","\u003Cp>This plugin requires \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Feasy-digital-downloads\u002F\" title=\"Easy Digital Downloads\" rel=\"ugc\">Easy Digital Downloads\u003C\u002Fa>. It outputs gravatars of all the customers who have purchased your product.\u003C\u002Fp>\n\u003Cp>It works by using the customer’s email that they used to purchase your product, and checking it against Gravatar.com. Only unique email addresses are used, so if a customer purchases your product more than once, it will only show their Gravatar once.\u003C\u002Fp>\n\u003Cp>To show the Gravatars of customers who have purchased your product, use the [edd_purchase_gravatars] shortcode, or drag the provided widget into the sidebar of your single download page. You can also show the gravatars of a particular product anywhere on your website using the template tag or shortcode, by passing in the download’s ID.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>Set a heading to display above the Gravatars.\u003C\u002Fli>\n\u003Cli>Set the size of each Gravatar (512px maximum)\u003C\u002Fli>\n\u003Cli>Set the minimum number of unique purchases a download must have before the Gravatars are shown. Leave blank for no minimum.\u003C\u002Fli>\n\u003Cli>Set the maximum number of gravatars to show. Leave blank for no limit.\u003C\u002Fli>\n\u003Cli>Only show customers with a Gravatar account\u003C\u002Fli>\n\u003Cli>Randomize the Gravatars\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>Shortcode usage\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>To show the purchase gravatars on a single download, add this shortcode into the WP editor:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[edd_purchase_gravatars]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To show the purchase gravatars of a particular download on another page or download, add the id parameter. This example will show the download with an ID of 942.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[edd_purchase_gravatars id=\"942\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To show the purchase gravatars with a custom title, use the title parameter. This will override the heading in the main plugin options\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[edd_purchase_gravatars title=\"This is my custom title\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Template Tag usage\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This example will show the purchase gravatars of whichever single download it is placed on.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>$gravatars = new EDD_Purchase_Gravatars();\necho $gravatars->gravatars( get_the_ID() );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>If you’d like to show purchase gravatars of a specific download from somewhere else on your site, pass in the ID of the download like so:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>$gravatars = new EDD_Purchase_Gravatars();\necho $gravatars->gravatars( '942' );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To show a custom title, pass in your title as the 2nd parameter\u003C\u002Fp>\n\u003Cpre>\u003Ccode>$gravatars = new EDD_Purchase_Gravatars();\necho $gravatars->gravatars( get_the_ID(), 'This is my custom title' );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Widget usage\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Drag the widget into your sidebar. If the widget is shown on a single download page, and that download has purchases, the purchase gravatars will be shown.\u003C\u002Fp>\n","Displays Gravatars of customers who have purchased your product",20,7398,"2021-09-21T10:24:00.000Z","5.8.13","4.2",[20,21,22,23,24],"https:\u002F\u002Feasydigitaldownloads.com\u002Fdownloads\u002Fedd-purchase-gravatars\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fedd-purchase-gravatars.1.0.5.zip",{"slug":96,"name":97,"version":98,"author":7,"author_profile":8,"description":99,"short_description":100,"active_installs":101,"downloaded":102,"rating":29,"num_ratings":29,"last_updated":103,"tested_up_to":104,"requires_at_least":65,"requires_php":18,"tags":105,"homepage":106,"download_link":107,"security_score":27,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"edd-add-to-cart-redirect","EDD Add To Cart Redirect","1.0.1","\u003Cp>This plugin requires \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Feasy-digital-downloads\u002F\" title=\"Easy Digital Downloads\" rel=\"ugc\">Easy Digital Downloads\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>EDD Add To Cart Redirect allows you to redirect to any post, page, or download after the download has been added to the cart. It also allows you to set invidual downloads to redirect directly to the checkout, rather than all or none. It add’s 2 new options to a download’s edit\u002Fpublish screen, in the “Download Settings” metabox that EDD adds.\u003C\u002Fp>\n\u003Cp>It works with and without ajax enabled from downloads &rarr; settings &rarr; misc, on download grids, and on single download pages. When EDD v2.1 is released there will be a “redirect” parameter that will work with the [purchase_link] shortcode.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Want more free EDD plugins?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>To fund ongoing development of more \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fsumobi#content-plugins\" rel=\"nofollow ugc\">free EDD plugins\u003C\u002Fa>, I would greatly appreciate any of the below:\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Feasydigitaldownloads.com\u002Fblog\u002Fauthor\u002Fandrewmunro\u002F?ref=166\" title=\"Buy one of my commercial EDD plugins\" rel=\"nofollow ugc\">Buy one of my commercial EDD plugins\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Feasydigitaldownloads.com\u002Fextensions\u002F?ref=166\" title=\"Use my referral code when you purchase your next EDD plugin\" rel=\"nofollow ugc\">Use my referral code when you purchase your next EDD plugin\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.paypal.com\u002Fcgi-bin\u002Fwebscr?cmd=_s-xclick&hosted_button_id=EFUPMPEZPGW7L\" title=\"Donate via PayPal\" rel=\"nofollow ugc\">Donate via PayPal\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>Plugins for Easy Digital Downloads\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Feasydigitaldownloads.com\u002Fextensions\u002F?ref=166\" title=\"Plugins for Easy Digital Downloads\" rel=\"nofollow ugc\">https:\u002F\u002Feasydigitaldownloads.com\u002Fextensions\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Tips for Easy Digital Downloads\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fsumobi.com\u002Fblog\" title=\"Tips for Easy Digital Downloads\" rel=\"nofollow ugc\">http:\u002F\u002Fsumobi.com\u002Fblog\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Stay up to date\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cem>Follow me on Twitter\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Ftwitter.com\u002Fsumobi_\" title=\"Twitter\" rel=\"nofollow ugc\">http:\u002F\u002Ftwitter.com\u002Fsumobi_\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cem>Become a fan on Facebook\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.facebook.com\u002Fsumobicom\" title=\"Facebook\" rel=\"nofollow ugc\">http:\u002F\u002Fwww.facebook.com\u002Fsumobicom\u003C\u002Fa>\u003C\u002Fp>\n","Redirect to any post\u002Fpage\u002Fdownload when a download has been added the cart.",10,1958,"2014-07-27T04:05:00.000Z","3.9.40",[20,21,22,23,24],"http:\u002F\u002Fsumobi.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fedd-add-to-cart-redirect.1.0.1.zip",{"slug":109,"name":110,"version":98,"author":7,"author_profile":8,"description":111,"short_description":112,"active_installs":101,"downloaded":113,"rating":29,"num_ratings":29,"last_updated":114,"tested_up_to":115,"requires_at_least":17,"requires_php":18,"tags":116,"homepage":117,"download_link":118,"security_score":27,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"edd-prevent-checkout","EDD Prevent Checkout","\u003Cp>This plugin requires \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Feasy-digital-downloads\u002F\" title=\"Easy Digital Downloads\" rel=\"ugc\">Easy Digital Downloads\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>This plugin does one simple thing. It will prevent a customer from being able to checkout until the minimum cart total is reached.\u003C\u002Fp>\n","Prevents customer from being able to checkout until a minimum cart total is reached",2508,"2017-03-27T01:27:00.000Z","4.7.32",[20,21,22,23,24],"https:\u002F\u002Feasydigitaldownloads.com\u002Fdownloads\u002Fedd-prevent-checkout\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fedd-prevent-checkout.1.0.1.zip",{"attackSurface":120,"codeSignals":261,"taintFlows":281,"riskAssessment":282,"analyzedAt":297},{"hooks":121,"ajaxHandlers":241,"restRoutes":250,"shortcodes":251,"cronEvents":259,"entryPointCount":14,"unprotectedCount":260},[122,127,131,136,139,145,149,154,157,160,164,168,171,175,179,183,187,191,196,200,203,208,211,215,220,226,229,233,235,238],{"type":123,"name":124,"callback":124,"file":125,"line":126},"action","init","edd-favorites.php",66,{"type":123,"name":128,"callback":129,"file":125,"line":130},"plugins_loaded","edd_favorites_load",235,{"type":123,"name":132,"callback":133,"file":134,"line":135},"admin_notices","missing_edd_notice","includes\\class-activation.php",69,{"type":123,"name":132,"callback":137,"file":134,"line":138},"missing_wish_lists_notice",144,{"type":140,"name":141,"callback":142,"priority":101,"file":143,"line":144},"filter","edd_wl_share_via_email_subject","edd_favorites_share_via_email_subject","includes\\emails.php",22,{"type":140,"name":146,"callback":147,"priority":101,"file":143,"line":148},"edd_wl_share_via_email_message","edd_favorites_share_via_email_message",49,{"type":140,"name":150,"callback":151,"file":152,"line":153},"edd_wl_display_sharing","__return_false","includes\\filters.php",13,{"type":140,"name":155,"callback":151,"file":152,"line":156},"edd_wl_show_add_all_to_cart_link",18,{"type":140,"name":158,"callback":151,"file":152,"line":159},"edd_wl_item_title_options",23,{"type":140,"name":161,"callback":162,"priority":101,"file":152,"line":163},"edd_wl_item_purchase_default_css_classes","edd_favorites_edd_wl_item_purchase",39,{"type":140,"name":165,"callback":166,"priority":101,"file":152,"line":167},"edd_wl_item_price","edd_favorites_edd_wl_item_price",56,{"type":140,"name":169,"callback":170,"file":152,"line":135},"edd_wl_delete_list_link_defaults","edd_favorites_delete_list_text",{"type":140,"name":172,"callback":173,"file":152,"line":174},"edd_wl_messages","edd_favorites_messages",113,{"type":140,"name":176,"callback":177,"priority":101,"file":152,"line":178},"edd_wl_add_to_cart_defaults","edd_favorites_edd_wl_add_to_cart_defaults",137,{"type":140,"name":180,"callback":181,"priority":11,"file":152,"line":182},"edd_settings_extensions","edd_favorites_settings",170,{"type":140,"name":184,"callback":185,"file":152,"line":186},"edd_wl_is_view_page","edd_favorites_edd_wl_is_view_page",181,{"type":140,"name":188,"callback":189,"priority":101,"file":152,"line":190},"edd_wl_edit_settings_link_uri","edd_favorites_edd_wl_edit_settings_link_uri",195,{"type":140,"name":192,"callback":193,"priority":194,"file":152,"line":195},"post_type_link","edd_favorites_post_type_link",11,210,{"type":140,"name":197,"callback":198,"priority":101,"file":152,"line":199},"edd_wl_edit_settings_link_return","edd_favorites_edd_wl_edit_settings_link_return",238,{"type":140,"name":172,"callback":173,"file":201,"line":202},"includes\\labels.php",40,{"type":123,"name":204,"callback":205,"priority":206,"file":207,"line":144},"wp_enqueue_scripts","edd_favorites_scripts",101,"includes\\scripts.php",{"type":123,"name":209,"callback":210,"file":207,"line":202},"wp_head","edd_favorites_css",{"type":123,"name":212,"callback":213,"priority":11,"file":207,"line":214},"wp_footer","edd_favorites_js",123,{"type":140,"name":216,"callback":217,"priority":101,"file":218,"line":219},"edd_wl_add_to_list_shortcode","edd_favorites_modify_shortcode","includes\\shortcodes.php",74,{"type":123,"name":221,"callback":222,"priority":223,"file":224,"line":225},"template_redirect","edd_favorites_set_query_var",9,"includes\\template-functions.php",24,{"type":123,"name":221,"callback":227,"file":224,"line":228},"edd_favorites_set_messages",53,{"type":123,"name":230,"callback":231,"priority":101,"file":224,"line":232},"user_register","edd_favorites_new_user_registration",68,{"type":123,"name":234,"callback":231,"priority":101,"file":224,"line":135},"wpmu_new_user",{"type":123,"name":236,"callback":237,"file":224,"line":178},"edd_purchase_link_top","edd_favorites_load_link",{"type":123,"name":221,"callback":239,"file":224,"line":240},"edd_favorites_link",139,[242,247],{"action":243,"nopriv":244,"callback":243,"hasNonce":244,"hasCapCheck":244,"file":245,"line":246},"edd_favorites_favorite",false,"includes\\ajax-functions.php",83,{"action":243,"nopriv":248,"callback":243,"hasNonce":244,"hasCapCheck":244,"file":245,"line":249},true,84,[],[252,256],{"tag":253,"callback":254,"file":218,"line":255},"edd_favorites_edit","edd_favorites_edit_shortcode",28,{"tag":257,"callback":258,"file":218,"line":148},"edd_favorites","edd_favorites_shortcode",[],2,{"dangerousFunctions":262,"sqlUsage":263,"outputEscaping":265,"fileOperations":29,"externalRequests":29,"nonceChecks":29,"capabilityChecks":29,"bundledLibraries":280},[],{"prepared":29,"raw":29,"locations":264},[],{"escaped":260,"rawEcho":266,"locations":267},6,[268,271,273,274,276,278],{"file":245,"line":269,"context":270},79,"raw output",{"file":134,"line":272,"context":270},81,{"file":134,"line":246,"context":270},{"file":134,"line":275,"context":270},156,{"file":134,"line":277,"context":270},158,{"file":207,"line":279,"context":270},96,[],[],{"summary":283,"deductions":284},"The EDD Favorites v1.0.8 plugin exhibits a mixed security posture. On the positive side, it demonstrates strong practices regarding SQL queries, utilizing prepared statements exclusively and having no known unpatched vulnerabilities.  The absence of dangerous functions, file operations, and external HTTP requests is also commendable. However, significant concerns arise from the static analysis. The plugin exposes two AJAX endpoints that lack authentication checks, presenting a substantial risk. Furthermore, only 25% of its output is properly escaped, indicating a potential for Cross-Site Scripting (XSS) vulnerabilities, especially given its history of XSS CVEs.  While the taint analysis shows no current issues, the lack of comprehensive checks on entry points and output sanitization, coupled with past XSS trends, suggests a heightened risk profile that requires attention. The plugin's vulnerability history, though lacking recent critical or high severity issues, shows a past pattern of XSS, implying that the development team may have struggled with proper input validation and output escaping.  In conclusion, while the plugin has some strengths in secure database interaction, the unprotected entry points and insufficient output escaping are critical weaknesses that could be exploited.",[285,287,289,292,295],{"reason":286,"points":101},"AJAX handlers without auth checks",{"reason":288,"points":266},"Low percentage of properly escaped output",{"reason":290,"points":291},"Past XSS vulnerabilities indicate potential ongoing risk",5,{"reason":293,"points":294},"No nonce checks on AJAX handlers",7,{"reason":296,"points":294},"No capability checks on AJAX handlers","2026-03-16T21:11:00.235Z",{"wat":299,"direct":308},{"assetPaths":300,"generatorPatterns":303,"scriptPaths":304,"versionParams":305},[301,302],"\u002Fwp-content\u002Fplugins\u002Fedd-favorites\u002Fassets\u002Fcss\u002Fedd-favorites.css","\u002Fwp-content\u002Fplugins\u002Fedd-favorites\u002Fassets\u002Fjs\u002Fedd-favorites.js",[],[302],[306,307],"edd-favorites\u002Fassets\u002Fcss\u002Fedd-favorites.css?ver=","edd-favorites\u002Fassets\u002Fjs\u002Fedd-favorites.js?ver=",{"cssClasses":309,"htmlComments":313,"htmlAttributes":314,"restEndpoints":316,"jsGlobals":317,"shortcodeOutput":319},[310,311,312],"edd-wl-favorite","favorited","edd-loading",[],[315],"data-edd-loading",[],[318],"edd_favorites_ajax",[]]