[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0mGgmQ4-eogZlnoppAnbh-zlbZMVEMOOdPByPiVre_8":3,"$fJD1qqCrxlrjUJ2YOefaFj37uum19YSOwx3qoDEB-lB4":776,"$fDXGDG2hN3txpjSRggYadFXLVfdzh8rM2Z4Vtg8t-t6A":780},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"discovery_status":30,"vulnerabilities":31,"developer":32,"crawl_stats":28,"alternatives":37,"analysis":119,"fingerprints":712},"employee-verification-document-authentication","Employee Verification & Document Authentication","1.3.4","Saqib K.","https:\u002F\u002Fprofiles.wordpress.org\u002Fsaqibabbasi\u002F","\u003Cp>\u003Cstrong>Employee Verification & Document Authentication\u003C\u002Fstrong> is a complete HR document management system for WordPress. Issue tamper-proof internship completion letters and experience letters with unique verification IDs and QR codes, then let anyone verify authenticity through a simple public-facing page.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Employee Management\u003C\u002Fstrong>\u003Cbr \u002F>\n* Add, edit, and delete employee profiles with photos\u003Cbr \u002F>\n* Track Active, Intern, and Former Employee statuses\u003Cbr \u002F>\n* Store joining date, leaving date, internship period, CNIC, father name, and tasks completed\u003Cbr \u002F>\n* Bulk import employees via CSV\u003Cbr \u002F>\n* Custom fields system — define global fields and fill per employee\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Document Generation\u003C\u002Fstrong>\u003Cbr \u002F>\n* Issue Internship Completion Letters and Experience Letters\u003Cbr \u002F>\n* One letter per type per employee — enforced at database level\u003Cbr \u002F>\n* Letters render live on every view, always reflecting your current settings\u003Cbr \u002F>\n* Print \u002F Save as PDF from the browser (A4 size, printer-ready)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Verification System\u003C\u002Fstrong>\u003Cbr \u002F>\n* Every letter gets a unique 16-character cryptographically random Verification ID\u003Cbr \u002F>\n* QR code on each letter links directly to the document verification page\u003Cbr \u002F>\n* Public shortcodes for employee and document verification\u003Cbr \u002F>\n* \u003Ccode>[evda_employee_verification]\u003C\u002Fcode> — search employees by ID, Name, or CNIC\u003Cbr \u002F>\n* \u003Ccode>[evda_document_verification]\u003C\u002Fcode> — verify letters by ID or QR scan\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Letter Customization (Settings)\u003C\u002Fstrong>\u003Cbr \u002F>\n* Company logo on all letters\u003Cbr \u002F>\n* Full typography control: font, size, line height, colors\u003Cbr \u002F>\n* Editable letter body templates with placeholders\u003Cbr \u002F>\n* Optional signature block: name, title, and uploaded signature image\u003Cbr \u002F>\n* Custom footer message (office address, phone, website)\u003Cbr \u002F>\n* Toggle: QR code, border\u002Fshadow, title underline\u003Cbr \u002F>\n* All styling changes apply instantly to existing letters — no regeneration needed\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Email Notifications\u003C\u002Fstrong>\u003Cbr \u002F>\n* Auto-email employees when a letter is issued\u003Cbr \u002F>\n* Configurable subject and body templates with placeholders\u003Cbr \u002F>\n* Email logs with last 100 send attempts\u003Cbr \u002F>\n* Test email button\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Admin Search Flexibility\u003C\u002Fstrong>\u003Cbr \u002F>\n* Choose which fields visitors can search on: Employee ID, Full Name, and\u002For CNIC\u003C\u002Fp>\n\u003Ch4>Shortcodes\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>[evda_employee_verification] — Public employee lookup form.\n[evda_document_verification] — Public document verification form. Also works via URL: `?id=VERIFICATION_ID`\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Privacy\u003C\u002Fh4>\n\u003Cp>This plugin stores employee data entered by the site administrator. No data is sent to external services except for QR code generation (uses a public QR API or falls back to a local generator). No tracking or analytics are included.\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin optionally connects to two external QR code generation APIs when generating QR codes for employee letters. These APIs are only called \u003Cstrong>server-side\u003C\u002Fstrong> (never from the visitor’s browser) when WordPress is generating a letter or verification page.\u003C\u002Fp>\n\u003Ch4>1. goQR.me API\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>What it does:\u003C\u002Fstrong> Generates a QR code PNG image for a verification URL.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>When it is called:\u003C\u002Fstrong> When a new letter is generated and the PHP GD extension is unavailable.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data sent:\u003C\u002Fstrong> The public verification URL (e.g. \u003Ccode>https:\u002F\u002Fyoursite.com\u002F?evda_verify_doc=XXXX\u003C\u002Fcode>). No personal data is transmitted.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Service provider:\u003C\u002Fstrong> goQR.me — https:\u002F\u002Fgoqr.me\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of use:\u003C\u002Fstrong> https:\u002F\u002Fgoqr.me\u002Fterms-of-use\u002F\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy policy:\u003C\u002Fstrong> https:\u002F\u002Fgoqr.me\u002Fprivacy-policy\u002F\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>2. Google Charts API\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>What it does:\u003C\u002Fstrong> Fallback QR code PNG generation if the goQR.me API is unavailable.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>When it is called:\u003C\u002Fstrong> Only if the goQR.me API call fails and the PHP GD extension is unavailable.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data sent:\u003C\u002Fstrong> The public verification URL only. No personal data is transmitted.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Service provider:\u003C\u002Fstrong> Google LLC — https:\u002F\u002Fdevelopers.google.com\u002Fchart\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of use:\u003C\u002Fstrong> https:\u002F\u002Fdevelopers.google.com\u002Fterms\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy policy:\u003C\u002Fstrong> https:\u002F\u002Fpolicies.google.com\u002Fprivacy\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If both external APIs are unavailable (e.g. the server has no outbound internet access), the plugin automatically falls back to a locally-generated QR code using the PHP GD library — no external request is made.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is free software: you can redistribute it and\u002For modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or any later version.\u003C\u002Fp>\n","Manage employees, issue QR-verified internship and experience letters, and let visitors verify staff and documents using simple shortcodes.",10,307,100,2,"2026-05-28T22:59:00.000Z","7.0.2","5.8","7.4",[20,21,22,23,24],"document-authentication","employee-verification","experience-letter","hr-management","internship-letter","https:\u002F\u002Fskfreelancers.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Femployee-verification-document-authentication.1.3.4.zip",0,null,"2026-07-22T17:31:50.256Z","no_bundle",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":13,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"saqibabbasi",30,94,"2026-08-29T07:02:46.389Z",[38,60,81,101],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":14,"last_updated":49,"tested_up_to":16,"requires_at_least":50,"requires_php":50,"tags":51,"homepage":56,"download_link":57,"security_score":58,"vuln_count":14,"unpatched_count":27,"last_vuln_date":59,"fetched_at":29},"hr-management-lite","HR Management Lite","3.8","Weblizar - WordPress Themes & Plugin","https:\u002F\u002Fprofiles.wordpress.org\u002Fweblizar\u002F","\u003Cp>HR Management is the wordPress Plugin for hrm, crm, erp and also manage the Projects,  Departments, Employees Attendance, Salary, Real Time Working Hours, Monthly Report Generation, Leaves, Notices, Holidays. HR Management is a HRM plugin for WordPress sites. That can manage staff\u002F employee related activities  in any organization and small type of business, corporation, companies. You can create unlimited staff, designations, shifts, events, holidays, notification, projects and  much more  option are available.\u003C\u002Fp>\n\u003Ch3>HR Management Lite Features You Will Get\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Admin dashboard\u003C\u002Fstrong> – HR Management dashboard attractive and responsive design. It can contain the all element in simple pattern.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shift Management\u003C\u002Fstrong> – You can create unlimited shifts and manage the according to your requirements.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Staff Management\u003C\u002Fstrong> – Create unlimited Staff and manage the Staff related activities and details.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Designation\u003C\u002Fstrong> – Create unlimited Designation and manage the Designation according to requirements.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Logged-In IP info\u003C\u002Fstrong> –   Logged-In IP info you can set and restricted according your requirement.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Role Management\u003C\u002Fstrong> –  Create unlimited roles according to requirements.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Attendance and Salary Reports\u003C\u002Fstrong> – Manage the staff\u002Femployee Attendance and Salary Reports.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hourly & Monthly Basis Salary\u003C\u002Fstrong> –  Manage salaries according to Hourly & Monthly Basis. Its powerful feature in this plugins.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>unlimited Events\u003C\u002Fstrong> –  Create unlimited events and manage the events.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Unlimited Notices\u003C\u002Fstrong> – Create unlimited Notices and manage the Notices for the employees.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Unlimited Holiday Management\u003C\u002Fstrong> – Create unlimited Holiday and manage the Holiday according to your staffs.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Project & Tasks Management (Limited Options)\u003C\u002Fstrong> –  Crate the project and manage related activities.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Email Template Customization(Limited Options)\u003C\u002Fstrong> – Email Template  option is available to design and send to your employee.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Login Portal Shortcode\u003C\u002Fstrong> – We Provide the shortcode to login and manage the activity.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Translation Ready\u003C\u002Fstrong> –  plugin is completely translation ready.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Employee And HR Management WordPress Plugin  Pro Demos\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdemo.weblizar.com\u002Femployee-and-hr-management\" rel=\"nofollow ugc\">Employee And HR Management Demo\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdemo.weblizar.com\u002Femployee-and-hr-management\" rel=\"nofollow ugc\">Admin Login \u003C\u002Fa> : username \u002F Password  => employeeadmin \u002F 123456\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdemo.weblizar.com\u002Femployee-and-hr-management\" rel=\"nofollow ugc\">staff Login \u003C\u002Fa> :  username \u002F Password  => demostaff\u002F 1234567\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Employee And HR Management Features & Upgrade\u003C\u002Fh4>\n\u003Cp>We offer the Employee And HR Management Pro version for business owners who need manage the his business with that features.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Centralized Admin dashboard\u003C\u002Fstrong> – You have a centralized view so you can easly manage all option from one place easily you can view and check all update and control options.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Departments Management\u003C\u002Fstrong> – You can create unlimited Departments.It will help you to manage their activities.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Designation\u003C\u002Fstrong> – Create unlimited Designation and manage the Designation according to requirements.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Staff Management\u003C\u002Fstrong> – Create unlimited Staff, edit.deletes or manage all your staff personal data, assign their shift, salary, leaves,permissions.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Leave request Management\u003C\u002Fstrong> – A Leave Management system automcates the leave request process, making it hassle-free for both the management and employees.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shift Management\u003C\u002Fstrong> – You can create unlimited shifts and manage the shifts according to your time of staff and significant role in the  organization resources and teams.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Role Management\u003C\u002Fstrong> –  Create unlimited roles according to requirements.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Generate Attendance Reports\u003C\u002Fstrong>– Manage full attendance of your staff. take action according to them. daily basis attendance.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Payroll Management\u003C\u002Fstrong> – You can Manage or get monthly basis payroll, list of and company’s employee and the amount of money they are to be paid.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Staff Working Hours Management\u003C\u002Fstrong> – It calculate the total working hours on daily basis and monthly basis also calculate salaries according to it.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hourly & Monthly Basis Salary\u003C\u002Fstrong> –  Manage salaries according to Hourly & Monthly Basis. Its powerful feature in this plugins.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Events Management\u003C\u002Fstrong> –  Create unlimited events and manage the events.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Notices Management\u003C\u002Fstrong> – Create unlimited Notices and manage the Notices for the employees.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Holiday Management\u003C\u002Fstrong> – Create unlimited Holiday and manage the Holiday according to your staffs.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Logged-In IP info\u003C\u002Fstrong> –   Logged-In IP info also check with staff login time. Staff which IP to login.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>IP Restriction\u003C\u002Fstrong> – You can restrict your staff\u002Femployee to login from an authorized location. They are not able to login outside.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>GEO Location\u003C\u002Fstrong> – You can set your GEO location. Staff can be login according to GEO location.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Project & Tasks Management\u003C\u002Fstrong> –  Crate the project and manage related activities.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Email Template Customization\u003C\u002Fstrong> – Email Template  option is available to design and send to your employee.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Login Portal Shortcode\u003C\u002Fstrong> – we Provide the shortcode to login and manage the activity.\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Translation Ready\u003C\u002Fstrong> –  plugin is completely translation ready.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fweblizar.com\u002Fplugins\u002Femployee-and-hr-management-wordpress-plugin\u002F\" rel=\"nofollow ugc\">You can learn more about Employee And HR Management Pro Plugin  here\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Docs & Support\u003C\u002Fh4>\n\u003Cp>You can find \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhr-management-lite\u002F\" rel=\"ugc\">docs\u003C\u002Fa>, \u003Ca href=\"http:\u002F\u002Fwww.weblizar.com\u002Ffaq\u002F\" rel=\"nofollow ugc\">FAQ\u003C\u002Fa> and more detailed information about HR Management Lite on \u003Ca href=\"http:\u002F\u002Fwww.weblizar.com\" rel=\"nofollow ugc\">Weblizar\u003C\u002Fa>. If you were unable to find the answer to your question on the FAQ or in any of the documentation, you should check the support forum on WordPress.org.\u003C\u002Fp>\n\u003Ch4>We Need Your Support\u003C\u002Fh4>\n\u003Cp>It is really hard to continue development and support for this free plugin without contributions from users like you. If you are enjoying using our Clock In Portal plugin and find it useful, then please consider \u003Ca href=\"http:\u002F\u002Fwww.weblizar.com\" rel=\"nofollow ugc\">\u003Cstrong>Making a Donation\u003C\u002Fstrong>\u003C\u002Fa>. Your donation will help us to encourage and support the plugin’s continued development and better user support.\u003C\u002Fp>\n\u003Ch4>Translators\u003C\u002Fh4>\n\u003Cp>Please contribute to translate our plugin.  Contact at \u003Ccode>lizarweb (at) gmail (dot) com\u003C\u002Fcode>.\u003C\u002Fp>\n","HR Plugin for WordPress to Manage the HR works and the Projects.",200,18673,70,"2026-06-26T12:24:00.000Z","",[52,23,53,54,55],"attendance","leave-management","project-management","shift-management","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhr-management-lite\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhr-management-lite.3.8.zip",98,"2025-12-28 00:00:00",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":13,"downloaded":68,"rating":13,"num_ratings":14,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":72,"tags":73,"homepage":76,"download_link":77,"security_score":78,"vuln_count":79,"unpatched_count":79,"last_vuln_date":80,"fetched_at":29},"clockify-lite","Clockinator Lite","1.0.9","BeastThemes","https:\u002F\u002Fprofiles.wordpress.org\u002Fbeastthemes\u002F","\u003Cp>Clockinator Lite is a powerful and easy-to-use \u003Cstrong>employee and attendance management plugin\u003C\u002Fstrong> for WordPress.\u003Cbr \u002F>\nIt helps you manage attendance, employee records, shifts, and holidays from your WordPress dashboard.\u003C\u002Fp>\n\u003Ch4>Core Lite Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Employee management for administrator and employee roles\u003C\u002Fli>\n\u003Cli>Clock in\u002Fout with attendance history\u003C\u002Fli>\n\u003Cli>Shift and holiday management\u003C\u002Fli>\n\u003Cli>Department and designation management\u003C\u002Fli>\n\u003Cli>Monthly and past attendance reports\u003C\u002Fli>\n\u003Cli>Frontend employee dashboard\u003C\u002Fli>\n\u003Cli>Translation-ready interface\u003C\u002Fli>\n\u003Cli>And many other features\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Clockinator Lite is suitable for small and medium teams that need a practical attendance workflow in WordPress.\u003C\u002Fp>\n\u003Ch3>🔑 Key Features (Lite Version)\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>User Management (Admin \u002F Employee)\u003C\u002Fli>\n\u003Cli>Attendance & Holiday Management\u003C\u002Fli>\n\u003Cli>Real-time employee tracking\u003C\u002Fli>\n\u003Cli>Monthly & past attendance reports\u003C\u002Fli>\n\u003Cli>Admin notifications on clock in\u002Fout ( Email & SMS notifications )\u003C\u002Fli>\n\u003Cli>Employee self-service frontend dashboard\u003C\u002Fli>\n\u003Cli>Centralized admin dashboard\u003C\u002Fli>\n\u003Cli>Clean UI & translation ready\u003C\u002Fli>\n\u003Cli>And many other features\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🚀 Upgrade to Pro\u003C\u002Fh3>\n\u003Cp>Unlock advanced HR features with \u003Cstrong>Clockinator Pro\u003C\u002Fstrong>, including:\u003Cbr \u002F>\n– Shift, leave, payroll & reimbursement management\u003Cbr \u002F>\n– Project & task management\u003Cbr \u002F>\n– Payslip & Payroll generation( partial & monthly wise )\u003Cbr \u002F>\n– Exportable reports (CSV)\u003Cbr \u002F>\n– Customizable email\u002FSMS notifications\u003Cbr \u002F>\n– Department & role-based access control\u003Cbr \u002F>\n– Frontend Dashboard for “Administrator” with all backend functionalities \u003Ca href=\"https:\u002F\u002Fbeastthemes.com\u002Four-plugins\u002Fclockinator-frontend-dashboard-addon\u002F\" rel=\"nofollow ugc\">Addon\u003C\u002Fa>\u003Cbr \u002F>\n– More robust dashboards for HR Managers & Department Heads\u003C\u002Fp>\n\u003Cp>👉 \u003Ca href=\"https:\u002F\u002Fbeastthemes.com\u002Fplugins\u002Fclockify-pro\u002F\" rel=\"nofollow ugc\">Learn More\u003C\u002Fa>\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fdemo.beastthemes.com\u002Fclockify-pro-wordpress-plugin\u002F\" rel=\"nofollow ugc\">View Demo\u003C\u002Fa>\u003Cbr \u002F>\n👉 \u003Ca href=\"https:\u002F\u002Fbeastthemes.com\u002Faccount\u002Fsignup\u002Fclockify-pro-plugin\" rel=\"nofollow ugc\">Buy Now\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Short Description\u003C\u002Fh3>\n\u003Cp>A complete HR and attendance management plugin for WordPress with clock in\u002Fout, shift tracking, leave management, and employee dashboards.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>Clockinator Lite WordPress plugin, Copyright (C) 2021 Beastthemes\u003Cbr \u002F>\nLicensed under the GPL3 (https:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-3.0.en.html).\u003C\u002Fp>\n","Clockinator Lite is a powerful and easy-to-use employee and attendance management plugin for WordPress.",7663,"2026-03-28T09:23:00.000Z","6.9.5","5.0","7.0",[74,75,23,53,55],"attendance-management","employee-management","https:\u002F\u002Fbeastthemes.com\u002Fplugins\u002Fclockify-pro","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fclockify-lite.1.0.9.zip",79,1,"2025-04-01 00:00:00",{"slug":82,"name":83,"version":84,"author":85,"author_profile":86,"description":87,"short_description":88,"active_installs":89,"downloaded":90,"rating":27,"num_ratings":27,"last_updated":91,"tested_up_to":70,"requires_at_least":92,"requires_php":18,"tags":93,"homepage":97,"download_link":98,"security_score":99,"vuln_count":79,"unpatched_count":79,"last_vuln_date":100,"fetched_at":29},"hr-press-lite","HR Press Lite","1.0.4","CODECLOVE","https:\u002F\u002Fprofiles.wordpress.org\u002Fcodeclove\u002F","\u003Cp>\u003Cstrong>HR Press Lite\u003C\u002Fstrong> is a lightweight, modern \u003Cstrong>HR Management plugin\u003C\u002Fstrong> built for WordPress. It gives small and medium businesses a simple, clean way to manage employees, track daily attendance, log breaks, handle departments and designations, and send announcements — without leaving WordPress.\u003C\u002Fp>\n\u003Cp>No complicated setup. No monthly SaaS fees. Just install and start managing your team.\u003C\u002Fp>\n\u003Ch3>⚡ Free Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Employee Check-in \u002F Check-out\u003C\u002Fstrong> — Track daily working hours automatically\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Break Logs\u003C\u002Fstrong> — Record and review employee break times\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Departments & Designations\u003C\u002Fstrong> — Organise your company structure\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Attendance Management\u003C\u002Fstrong> — View and manage attendance records\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Announcements\u003C\u002Fstrong> — Broadcast messages to all employees instantly\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Email Notifications\u003C\u002Fstrong> — Send emails directly to employees\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🔒 Built With Security in Mind\u003C\u002Fh3>\n\u003Cp>HR Press Lite is developed following WordPress security best practices — all AJAX endpoints are protected with nonces and capability checks, so your employee data stays safe.\u003C\u002Fp>\n\u003Ch3>👉 \u003Ca href=\"https:\u002F\u002Fcodeclove.com\u002Fplugins\u002Fhr-press\" rel=\"nofollow ugc\">Upgrade to HR Press PRO\u003C\u002Fa>\u003C\u002Fh3>\n\u003Cp>Take your HR operations to the next level with \u003Cstrong>HR Press PRO\u003C\u002Fstrong>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>✅ \u003Cstrong>Leave Management\u003C\u002Fstrong> — Employees submit leave requests; managers approve or reject\u003C\u002Fli>\n\u003Cli>✅ \u003Cstrong>Holiday Email Notifications\u003C\u002Fstrong> — Auto-notify staff of upcoming holidays\u003C\u002Fli>\n\u003Cli>✅ \u003Cstrong>IP Restriction\u003C\u002Fstrong> — Restrict check-ins to your office network only\u003C\u002Fli>\n\u003Cli>✅ \u003Cstrong>IP Whitelisting\u003C\u002Fstrong> — Approve trusted IPs for remote work flexibility\u003C\u002Fli>\n\u003Cli>✅ \u003Cstrong>Priority Support\u003C\u002Fstrong> — Get direct help from the development team\u003C\u002Fli>\n\u003Cli>✅ \u003Cstrong>Early Access to New Features\u003C\u002Fstrong> — Shape the product roadmap\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcodeclove.com\u002Fplugins\u002Fhr-press\" rel=\"nofollow ugc\">👉 View PRO Plans \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan>\u003C\u002Fa>\u003C\u002Fp>\n","Track employee check-ins, breaks, attendance, and manage your entire team — all from your WordPress dashboard. Free forever.",60,2889,"2026-05-23T08:14:00.000Z","6.0",[94,75,23,95,96],"employee-attendance","hr-plugin","time-tracking","https:\u002F\u002FCodeClove.com\u002Fhr-press","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhr-press-lite.1.0.4.zip",78,"2026-03-20 15:15:10",{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":11,"downloaded":109,"rating":27,"num_ratings":27,"last_updated":110,"tested_up_to":111,"requires_at_least":92,"requires_php":18,"tags":112,"homepage":116,"download_link":117,"security_score":118,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"employee-management-system","Employee Management System","1.0.3","Md. Maruf Khan","https:\u002F\u002Fprofiles.wordpress.org\u002Fmarufmks\u002F","\u003Cp>Employee Management System is a powerful WordPress plugin designed to help businesses manage their employees and track sales performance efficiently. It provides both administrative and employee-facing features in a user-friendly interface.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Employee Management\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Add and manage employee profiles\u003C\u002Fli>\n\u003Cli>Track employee status (active, inactive, blocked)`\u003C\u002Fli>\n\u003Cli>Store comprehensive employee information\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Manage employment details and history\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Dashboard & Analytics\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>Real-time employee statistics\u003C\u002Fli>\n\u003Cli>Interactive sales charts\u003C\u002Fli>\n\u003Cli>Performance metrics\u003C\u002Fli>\n\u003Cli>Monthly sales trends\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Employee status distribution\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Employee Portal\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>Secure employee login\u003C\u002Fli>\n\u003Cli>Personal sales statistics\u003C\u002Fli>\n\u003Cli>Monthly performance tracking\u003C\u002Fli>\n\u003Cli>Sales submission form\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Individual performance metrics\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Administrative Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>Comprehensive admin dashboard\u003C\u002Fli>\n\u003Cli>Employee status management\u003C\u002Fli>\n\u003Cli>Sales performance tracking\u003C\u002Fli>\n\u003Cli>Data export capabilities\u003C\u002Fli>\n\u003Cli>\n\u003Cp>User-friendly interface\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Security & Access Control\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>Role-based access control\u003C\u002Fli>\n\u003Cli>Secure data handling\u003C\u002Fli>\n\u003Cli>WordPress user integration\u003C\u002Fli>\n\u003Cli>Protected employee data\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>This plugin stores the following data:\u003Cbr \u002F>\n* Employee information (name, contact details, employment details)\u003Cbr \u002F>\n* Sales records and performance metrics\u003Cbr \u002F>\n* User access logs and activity data\u003C\u002Fp>\n\u003Cp>All data is stored securely in your WordPress database and can be exported or deleted through the plugin interface.\u003C\u002Fp>\n\u003Cp>The plugin does not:\u003Cbr \u002F>\n* Share data with third parties\u003Cbr \u002F>\n* Track users across websites\u003Cbr \u002F>\n* Store sensitive payment information\u003C\u002Fp>\n\u003Cp>Source Code:\u003Cbr \u002F>\nThe source code for minified JavaScript and CSS files is available in the GitHub repository:\u003Cbr \u002F>\nhttps:\u002F\u002Fgithub.com\u002Fmarufmks\u002Femployee-management-system\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support queries, please visit our GitHub repository at https:\u002F\u002Fgithub.com\u002Fmarufmks\u002Femployee-management-system\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Developed by Maruf (https:\u002F\u002Fgithub.com\u002Fmarufmks)\u003C\u002Fp>\n","A comprehensive employee management system with sales tracking, reporting, and dashboard features for WordPress.",1000,"2025-02-12T16:45:00.000Z","6.7.5",[113,75,23,114,115],"employee-dashboard","sales-tracking","staff-management","https:\u002F\u002Fgithub.com\u002Fmarufmks\u002Femployee-management-system","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Femployee-management-system.1.0.3.zip",92,{"attackSurface":120,"codeSignals":227,"taintFlows":247,"riskAssessment":704,"analyzedAt":711},{"hooks":121,"ajaxHandlers":151,"restRoutes":218,"shortcodes":219,"cronEvents":226,"entryPointCount":195,"unprotectedCount":131},[122,128,132,136,141,146],{"type":123,"name":124,"callback":125,"file":126,"line":127},"action","admin_menu","register_menus","admin\u002Fclass-ev-admin.php",7,{"type":123,"name":129,"callback":130,"file":126,"line":131},"admin_enqueue_scripts","enqueue_assets",8,{"type":123,"name":133,"callback":134,"file":126,"line":135},"admin_notices","db_admin_notice",16,{"type":123,"name":137,"callback":138,"file":139,"line":140},"plugins_loaded","evda_init","employee-verification.php",156,{"type":123,"name":142,"callback":143,"file":144,"line":145},"template_redirect","maybe_render_letter","includes\u002Fclass-ev-pdf.php",88,{"type":123,"name":147,"callback":148,"file":149,"line":150},"wp_enqueue_scripts","enqueue","includes\u002Fclass-ev-shortcodes.php",9,[152,156,159,163,167,171,175,180,184,188,192,196,200,203,205,208,212,216],{"action":153,"nopriv":154,"callback":155,"hasNonce":154,"hasCapCheck":154,"file":126,"line":150},"evda_save_employee",false,"ajax_save_employee",{"action":157,"nopriv":154,"callback":158,"hasNonce":154,"hasCapCheck":154,"file":126,"line":11},"evda_delete_employee","ajax_delete_employee",{"action":160,"nopriv":154,"callback":161,"hasNonce":154,"hasCapCheck":154,"file":126,"line":162},"evda_generate_document","ajax_generate_document",11,{"action":164,"nopriv":154,"callback":165,"hasNonce":154,"hasCapCheck":154,"file":126,"line":166},"evda_revoke_document","ajax_revoke_document",12,{"action":168,"nopriv":154,"callback":169,"hasNonce":154,"hasCapCheck":154,"file":126,"line":170},"evda_delete_document","ajax_delete_document",13,{"action":172,"nopriv":154,"callback":173,"hasNonce":154,"hasCapCheck":154,"file":126,"line":174},"evda_import_csv","ajax_import_csv",14,{"action":176,"nopriv":154,"callback":177,"hasNonce":178,"hasCapCheck":178,"file":126,"line":179},"evda_send_test_email","ajax_send_test_email",true,15,{"action":181,"nopriv":154,"callback":182,"hasNonce":178,"hasCapCheck":178,"file":126,"line":183},"evda_repair_tables","ajax_repair_tables",17,{"action":185,"nopriv":154,"callback":186,"hasNonce":178,"hasCapCheck":178,"file":126,"line":187},"evda_run_migration","ajax_run_migration",18,{"action":189,"nopriv":154,"callback":190,"hasNonce":178,"hasCapCheck":178,"file":126,"line":191},"evda_patch_old_letters","ajax_patch_old_letters",19,{"action":193,"nopriv":154,"callback":194,"hasNonce":178,"hasCapCheck":178,"file":126,"line":195},"evda_export_employees","ajax_export_employees",20,{"action":197,"nopriv":154,"callback":198,"hasNonce":178,"hasCapCheck":178,"file":199,"line":166},"evda_import_manual","ajax_import_manual","admin\u002Fclass-ev-import.php",{"action":201,"nopriv":154,"callback":202,"hasNonce":178,"hasCapCheck":178,"file":199,"line":170},"evda_import_manual_csv","ajax_import_manual_csv",{"action":189,"nopriv":154,"callback":189,"hasNonce":178,"hasCapCheck":178,"file":139,"line":204},43,{"action":206,"nopriv":154,"callback":206,"hasNonce":178,"hasCapCheck":178,"file":139,"line":207},"evda_preview_letter",84,{"action":209,"nopriv":154,"callback":210,"hasNonce":178,"hasCapCheck":154,"file":139,"line":211},"evda_dl_import_template","evda_download_import_template",121,{"action":213,"nopriv":154,"callback":214,"hasNonce":154,"hasCapCheck":154,"file":139,"line":215},"evda_qr_image","evda_serve_qr_image",159,{"action":213,"nopriv":178,"callback":214,"hasNonce":154,"hasCapCheck":154,"file":139,"line":217},160,[],[220,223],{"tag":221,"callback":222,"file":149,"line":127},"evda_employee_verification","sc_employee",{"tag":224,"callback":225,"file":149,"line":131},"evda_document_verification","sc_document",[],{"dangerousFunctions":228,"sqlUsage":229,"outputEscaping":232,"fileOperations":245,"externalRequests":14,"nonceChecks":183,"capabilityChecks":162,"bundledLibraries":246},[],{"prepared":230,"raw":27,"locations":231},68,[],{"escaped":233,"rawEcho":234,"locations":235},642,4,[236,239,241,243],{"file":126,"line":237,"context":238},778,"raw output",{"file":126,"line":240,"context":238},1010,{"file":139,"line":242,"context":238},207,{"file":139,"line":244,"context":238},246,6,[],[248,271,474,484,555,567,583,597,637,677,687,695],{"entryPoint":249,"graph":250,"unsanitizedCount":79,"severity":270},"page_employees (admin\u002Fclass-ev-admin.php:121)",{"nodes":251,"edges":267},[252,257,261],{"id":253,"type":254,"label":255,"file":126,"line":256},"n0","source","$_GET",147,{"id":258,"type":259,"label":260,"file":126,"line":256},"n1","transform","→ render_employee_form()",{"id":262,"type":263,"label":264,"file":126,"line":265,"wp_function":266},"n2","sink","echo() [XSS]",435,"echo",[268,269],{"from":253,"to":258,"sanitized":154},{"from":258,"to":262,"sanitized":154},"medium",{"entryPoint":272,"graph":273,"unsanitizedCount":79,"severity":270},"\u003Cclass-ev-admin> (admin\u002Fclass-ev-admin.php:0)",{"nodes":274,"edges":445},[275,278,280,283,287,291,293,297,299,303,305,309,311,315,317,321,323,327,329,333,335,339,341,345,347,351,353,357,359,363,365,369,371,375,377,381,383,387,389,393,395,399,401,405,407,411,413,417,422,426,431,434,439,441,443],{"id":253,"type":254,"label":276,"file":126,"line":277},"$_GET (x10)",155,{"id":258,"type":263,"label":264,"file":126,"line":279,"wp_function":266},187,{"id":262,"type":254,"label":281,"file":126,"line":282},"$_POST['evda_company_logo']",657,{"id":284,"type":263,"label":285,"file":126,"line":282,"wp_function":286},"n3","update_option() [Settings Manipulation]","update_option",{"id":288,"type":254,"label":289,"file":126,"line":290},"n4","$_POST['evda_doc_verify_page']",658,{"id":292,"type":263,"label":285,"file":126,"line":290,"wp_function":286},"n5",{"id":294,"type":254,"label":295,"file":126,"line":296},"n6","$_POST['evda_emp_verify_page']",659,{"id":298,"type":263,"label":285,"file":126,"line":296,"wp_function":286},"n7",{"id":300,"type":254,"label":301,"file":126,"line":302},"n8","$_POST['evda_email_subject_internship']",663,{"id":304,"type":263,"label":285,"file":126,"line":302,"wp_function":286},"n9",{"id":306,"type":254,"label":307,"file":126,"line":308},"n10","$_POST['evda_email_subject_experience']",664,{"id":310,"type":263,"label":285,"file":126,"line":308,"wp_function":286},"n11",{"id":312,"type":254,"label":313,"file":126,"line":314},"n12","$_POST['evda_email_body_internship']",665,{"id":316,"type":263,"label":285,"file":126,"line":314,"wp_function":286},"n13",{"id":318,"type":254,"label":319,"file":126,"line":320},"n14","$_POST['evda_email_body_experience']",666,{"id":322,"type":263,"label":285,"file":126,"line":320,"wp_function":286},"n15",{"id":324,"type":254,"label":325,"file":126,"line":326},"n16","$_POST['evda_email_color_header']",668,{"id":328,"type":263,"label":285,"file":126,"line":326,"wp_function":286},"n17",{"id":330,"type":254,"label":331,"file":126,"line":332},"n18","$_POST['evda_email_color_accent']",669,{"id":334,"type":263,"label":285,"file":126,"line":332,"wp_function":286},"n19",{"id":336,"type":254,"label":337,"file":126,"line":338},"n20","$_POST['evda_email_color_button']",670,{"id":340,"type":263,"label":285,"file":126,"line":338,"wp_function":286},"n21",{"id":342,"type":254,"label":343,"file":126,"line":344},"n22","$_POST['evda_email_color_bg']",671,{"id":346,"type":263,"label":285,"file":126,"line":344,"wp_function":286},"n23",{"id":348,"type":254,"label":349,"file":126,"line":350},"n24","$_POST['evda_email_color_text']",672,{"id":352,"type":263,"label":285,"file":126,"line":350,"wp_function":286},"n25",{"id":354,"type":254,"label":355,"file":126,"line":356},"n26","$_POST['evda_email_color_title_bg']",673,{"id":358,"type":263,"label":285,"file":126,"line":356,"wp_function":286},"n27",{"id":360,"type":254,"label":361,"file":126,"line":362},"n28","$_POST['evda_email_color_title_tx']",674,{"id":364,"type":263,"label":285,"file":126,"line":362,"wp_function":286},"n29",{"id":366,"type":254,"label":367,"file":126,"line":368},"n30","$_POST['evda_letter_template_internship']",676,{"id":370,"type":263,"label":285,"file":126,"line":368,"wp_function":286},"n31",{"id":372,"type":254,"label":373,"file":126,"line":374},"n32","$_POST['evda_letter_template_experience']",677,{"id":376,"type":263,"label":285,"file":126,"line":374,"wp_function":286},"n33",{"id":378,"type":254,"label":379,"file":126,"line":380},"n34","$_POST[?]",683,{"id":382,"type":263,"label":285,"file":126,"line":380,"wp_function":286},"n35",{"id":384,"type":254,"label":385,"file":126,"line":386},"n36","$_POST['evda_signature_name']",687,{"id":388,"type":263,"label":285,"file":126,"line":386,"wp_function":286},"n37",{"id":390,"type":254,"label":391,"file":126,"line":392},"n38","$_POST['evda_signature_title']",688,{"id":394,"type":263,"label":285,"file":126,"line":392,"wp_function":286},"n39",{"id":396,"type":254,"label":397,"file":126,"line":398},"n40","$_POST['evda_signature_image']",689,{"id":400,"type":263,"label":285,"file":126,"line":398,"wp_function":286},"n41",{"id":402,"type":254,"label":403,"file":126,"line":404},"n42","$_POST['evda_letter_footer_message']",691,{"id":406,"type":263,"label":285,"file":126,"line":404,"wp_function":286},"n43",{"id":408,"type":254,"label":409,"file":126,"line":410},"n44","$_POST['evda_letter_header_info']",692,{"id":412,"type":263,"label":285,"file":126,"line":410,"wp_function":286},"n45",{"id":414,"type":254,"label":415,"file":126,"line":416},"n46","$_POST",1373,{"id":418,"type":263,"label":419,"file":126,"line":420,"wp_function":421},"n47","get_row() [SQLi]",1380,"get_row",{"id":423,"type":254,"label":424,"file":126,"line":425},"n48","$_FILES",1406,{"id":427,"type":263,"label":428,"file":126,"line":429,"wp_function":430},"n49","file_get_contents() [SSRF\u002FLFI]",1443,"file_get_contents",{"id":432,"type":254,"label":433,"file":126,"line":425},"n50","$_FILES (x2)",{"id":435,"type":263,"label":436,"file":126,"line":437,"wp_function":438},"n51","file_put_contents() [File Write]",1469,"file_put_contents",{"id":440,"type":254,"label":255,"file":126,"line":256},"n52",{"id":442,"type":259,"label":260,"file":126,"line":256},"n53",{"id":444,"type":263,"label":264,"file":126,"line":265,"wp_function":266},"n54",[446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473],{"from":253,"to":258,"sanitized":178},{"from":262,"to":284,"sanitized":178},{"from":288,"to":292,"sanitized":178},{"from":294,"to":298,"sanitized":178},{"from":300,"to":304,"sanitized":178},{"from":306,"to":310,"sanitized":178},{"from":312,"to":316,"sanitized":178},{"from":318,"to":322,"sanitized":178},{"from":324,"to":328,"sanitized":178},{"from":330,"to":334,"sanitized":178},{"from":336,"to":340,"sanitized":178},{"from":342,"to":346,"sanitized":178},{"from":348,"to":352,"sanitized":178},{"from":354,"to":358,"sanitized":178},{"from":360,"to":364,"sanitized":178},{"from":366,"to":370,"sanitized":178},{"from":372,"to":376,"sanitized":178},{"from":378,"to":382,"sanitized":178},{"from":384,"to":388,"sanitized":178},{"from":390,"to":394,"sanitized":178},{"from":396,"to":400,"sanitized":178},{"from":402,"to":406,"sanitized":178},{"from":408,"to":412,"sanitized":178},{"from":414,"to":418,"sanitized":178},{"from":423,"to":427,"sanitized":178},{"from":432,"to":435,"sanitized":178},{"from":440,"to":442,"sanitized":154},{"from":442,"to":444,"sanitized":154},{"entryPoint":475,"graph":476,"unsanitizedCount":27,"severity":483},"render_employee_list (admin\u002Fclass-ev-admin.php:153)",{"nodes":477,"edges":481},[478,480],{"id":253,"type":254,"label":479,"file":126,"line":277},"$_GET (x8)",{"id":258,"type":263,"label":264,"file":126,"line":279,"wp_function":266},[482],{"from":253,"to":258,"sanitized":178},"low",{"entryPoint":485,"graph":486,"unsanitizedCount":27,"severity":483},"page_settings (admin\u002Fclass-ev-admin.php:654)",{"nodes":487,"edges":532},[488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531],{"id":253,"type":254,"label":281,"file":126,"line":282},{"id":258,"type":263,"label":285,"file":126,"line":282,"wp_function":286},{"id":262,"type":254,"label":289,"file":126,"line":290},{"id":284,"type":263,"label":285,"file":126,"line":290,"wp_function":286},{"id":288,"type":254,"label":295,"file":126,"line":296},{"id":292,"type":263,"label":285,"file":126,"line":296,"wp_function":286},{"id":294,"type":254,"label":301,"file":126,"line":302},{"id":298,"type":263,"label":285,"file":126,"line":302,"wp_function":286},{"id":300,"type":254,"label":307,"file":126,"line":308},{"id":304,"type":263,"label":285,"file":126,"line":308,"wp_function":286},{"id":306,"type":254,"label":313,"file":126,"line":314},{"id":310,"type":263,"label":285,"file":126,"line":314,"wp_function":286},{"id":312,"type":254,"label":319,"file":126,"line":320},{"id":316,"type":263,"label":285,"file":126,"line":320,"wp_function":286},{"id":318,"type":254,"label":325,"file":126,"line":326},{"id":322,"type":263,"label":285,"file":126,"line":326,"wp_function":286},{"id":324,"type":254,"label":331,"file":126,"line":332},{"id":328,"type":263,"label":285,"file":126,"line":332,"wp_function":286},{"id":330,"type":254,"label":337,"file":126,"line":338},{"id":334,"type":263,"label":285,"file":126,"line":338,"wp_function":286},{"id":336,"type":254,"label":343,"file":126,"line":344},{"id":340,"type":263,"label":285,"file":126,"line":344,"wp_function":286},{"id":342,"type":254,"label":349,"file":126,"line":350},{"id":346,"type":263,"label":285,"file":126,"line":350,"wp_function":286},{"id":348,"type":254,"label":355,"file":126,"line":356},{"id":352,"type":263,"label":285,"file":126,"line":356,"wp_function":286},{"id":354,"type":254,"label":361,"file":126,"line":362},{"id":358,"type":263,"label":285,"file":126,"line":362,"wp_function":286},{"id":360,"type":254,"label":367,"file":126,"line":368},{"id":364,"type":263,"label":285,"file":126,"line":368,"wp_function":286},{"id":366,"type":254,"label":373,"file":126,"line":374},{"id":370,"type":263,"label":285,"file":126,"line":374,"wp_function":286},{"id":372,"type":254,"label":379,"file":126,"line":380},{"id":376,"type":263,"label":285,"file":126,"line":380,"wp_function":286},{"id":378,"type":254,"label":385,"file":126,"line":386},{"id":382,"type":263,"label":285,"file":126,"line":386,"wp_function":286},{"id":384,"type":254,"label":391,"file":126,"line":392},{"id":388,"type":263,"label":285,"file":126,"line":392,"wp_function":286},{"id":390,"type":254,"label":397,"file":126,"line":398},{"id":394,"type":263,"label":285,"file":126,"line":398,"wp_function":286},{"id":396,"type":254,"label":403,"file":126,"line":404},{"id":400,"type":263,"label":285,"file":126,"line":404,"wp_function":286},{"id":402,"type":254,"label":409,"file":126,"line":410},{"id":406,"type":263,"label":285,"file":126,"line":410,"wp_function":286},[533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554],{"from":253,"to":258,"sanitized":178},{"from":262,"to":284,"sanitized":178},{"from":288,"to":292,"sanitized":178},{"from":294,"to":298,"sanitized":178},{"from":300,"to":304,"sanitized":178},{"from":306,"to":310,"sanitized":178},{"from":312,"to":316,"sanitized":178},{"from":318,"to":322,"sanitized":178},{"from":324,"to":328,"sanitized":178},{"from":330,"to":334,"sanitized":178},{"from":336,"to":340,"sanitized":178},{"from":342,"to":346,"sanitized":178},{"from":348,"to":352,"sanitized":178},{"from":354,"to":358,"sanitized":178},{"from":360,"to":364,"sanitized":178},{"from":366,"to":370,"sanitized":178},{"from":372,"to":376,"sanitized":178},{"from":378,"to":382,"sanitized":178},{"from":384,"to":388,"sanitized":178},{"from":390,"to":394,"sanitized":178},{"from":396,"to":400,"sanitized":178},{"from":402,"to":406,"sanitized":178},{"entryPoint":556,"graph":557,"unsanitizedCount":27,"severity":483},"ajax_import_manual (admin\u002Fclass-ev-import.php:157)",{"nodes":558,"edges":565},[559,561],{"id":253,"type":254,"label":415,"file":199,"line":560},163,{"id":258,"type":263,"label":562,"file":199,"line":563,"wp_function":564},"get_var() [SQLi]",189,"get_var",[566],{"from":253,"to":258,"sanitized":178},{"entryPoint":568,"graph":569,"unsanitizedCount":27,"severity":483},"ajax_import_manual_csv (admin\u002Fclass-ev-import.php:224)",{"nodes":570,"edges":580},[571,573,577,578],{"id":253,"type":254,"label":424,"file":199,"line":572},234,{"id":258,"type":263,"label":574,"file":199,"line":575,"wp_function":576},"fopen() [File Access]",236,"fopen",{"id":262,"type":254,"label":424,"file":199,"line":572},{"id":284,"type":263,"label":562,"file":199,"line":579,"wp_function":564},264,[581,582],{"from":253,"to":258,"sanitized":178},{"from":262,"to":284,"sanitized":178},{"entryPoint":584,"graph":585,"unsanitizedCount":27,"severity":483},"\u003Cclass-ev-import> (admin\u002Fclass-ev-import.php:0)",{"nodes":586,"edges":593},[587,588,589,590,591,592],{"id":253,"type":254,"label":415,"file":199,"line":560},{"id":258,"type":263,"label":562,"file":199,"line":563,"wp_function":564},{"id":262,"type":254,"label":424,"file":199,"line":572},{"id":284,"type":263,"label":574,"file":199,"line":575,"wp_function":576},{"id":288,"type":254,"label":424,"file":199,"line":572},{"id":292,"type":263,"label":562,"file":199,"line":579,"wp_function":564},[594,595,596],{"from":253,"to":258,"sanitized":178},{"from":262,"to":284,"sanitized":178},{"from":288,"to":292,"sanitized":178},{"entryPoint":598,"graph":599,"unsanitizedCount":27,"severity":483},"save (admin\u002Fclass-ev-settings.php:6)",{"nodes":600,"edges":626},[601,603,604,605,606,607,608,609,610,611,612,613,614,615,616,618,619,621,622,624],{"id":253,"type":254,"label":281,"file":602,"line":11},"admin\u002Fclass-ev-settings.php",{"id":258,"type":263,"label":285,"file":602,"line":11,"wp_function":286},{"id":262,"type":254,"label":289,"file":602,"line":162},{"id":284,"type":263,"label":285,"file":602,"line":162,"wp_function":286},{"id":288,"type":254,"label":295,"file":602,"line":166},{"id":292,"type":263,"label":285,"file":602,"line":166,"wp_function":286},{"id":294,"type":254,"label":301,"file":602,"line":135},{"id":298,"type":263,"label":285,"file":602,"line":135,"wp_function":286},{"id":300,"type":254,"label":307,"file":602,"line":183},{"id":304,"type":263,"label":285,"file":602,"line":183,"wp_function":286},{"id":306,"type":254,"label":313,"file":602,"line":187},{"id":310,"type":263,"label":285,"file":602,"line":187,"wp_function":286},{"id":312,"type":254,"label":319,"file":602,"line":191},{"id":316,"type":263,"label":285,"file":602,"line":191,"wp_function":286},{"id":318,"type":254,"label":367,"file":602,"line":617},22,{"id":322,"type":263,"label":285,"file":602,"line":617,"wp_function":286},{"id":324,"type":254,"label":373,"file":602,"line":620},23,{"id":328,"type":263,"label":285,"file":602,"line":620,"wp_function":286},{"id":330,"type":254,"label":415,"file":602,"line":623},32,{"id":334,"type":263,"label":285,"file":602,"line":625,"wp_function":286},33,[627,628,629,630,631,632,633,634,635,636],{"from":253,"to":258,"sanitized":178},{"from":262,"to":284,"sanitized":178},{"from":288,"to":292,"sanitized":178},{"from":294,"to":298,"sanitized":178},{"from":300,"to":304,"sanitized":178},{"from":306,"to":310,"sanitized":178},{"from":312,"to":316,"sanitized":178},{"from":318,"to":322,"sanitized":178},{"from":324,"to":328,"sanitized":178},{"from":330,"to":334,"sanitized":178},{"entryPoint":638,"graph":639,"unsanitizedCount":27,"severity":483},"\u003Cclass-ev-settings> (admin\u002Fclass-ev-settings.php:0)",{"nodes":640,"edges":665},[641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,664],{"id":253,"type":254,"label":281,"file":602,"line":11},{"id":258,"type":263,"label":285,"file":602,"line":11,"wp_function":286},{"id":262,"type":254,"label":289,"file":602,"line":162},{"id":284,"type":263,"label":285,"file":602,"line":162,"wp_function":286},{"id":288,"type":254,"label":295,"file":602,"line":166},{"id":292,"type":263,"label":285,"file":602,"line":166,"wp_function":286},{"id":294,"type":254,"label":301,"file":602,"line":135},{"id":298,"type":263,"label":285,"file":602,"line":135,"wp_function":286},{"id":300,"type":254,"label":307,"file":602,"line":183},{"id":304,"type":263,"label":285,"file":602,"line":183,"wp_function":286},{"id":306,"type":254,"label":313,"file":602,"line":187},{"id":310,"type":263,"label":285,"file":602,"line":187,"wp_function":286},{"id":312,"type":254,"label":319,"file":602,"line":191},{"id":316,"type":263,"label":285,"file":602,"line":191,"wp_function":286},{"id":318,"type":254,"label":367,"file":602,"line":617},{"id":322,"type":263,"label":285,"file":602,"line":617,"wp_function":286},{"id":324,"type":254,"label":373,"file":602,"line":620},{"id":328,"type":263,"label":285,"file":602,"line":620,"wp_function":286},{"id":330,"type":254,"label":415,"file":602,"line":623},{"id":334,"type":263,"label":285,"file":602,"line":625,"wp_function":286},{"id":336,"type":254,"label":662,"file":602,"line":663},"$_POST (x5)",40,{"id":340,"type":263,"label":264,"file":602,"line":215,"wp_function":266},[666,667,668,669,670,671,672,673,674,675,676],{"from":253,"to":258,"sanitized":178},{"from":262,"to":284,"sanitized":178},{"from":288,"to":292,"sanitized":178},{"from":294,"to":298,"sanitized":178},{"from":300,"to":304,"sanitized":178},{"from":306,"to":310,"sanitized":178},{"from":312,"to":316,"sanitized":178},{"from":318,"to":322,"sanitized":178},{"from":324,"to":328,"sanitized":178},{"from":330,"to":334,"sanitized":178},{"from":336,"to":340,"sanitized":178},{"entryPoint":678,"graph":679,"unsanitizedCount":27,"severity":483},"sc_document (includes\u002Fclass-ev-shortcodes.php:221)",{"nodes":680,"edges":685},[681,684],{"id":253,"type":254,"label":682,"file":149,"line":683},"$_POST (x11)",230,{"id":258,"type":263,"label":264,"file":149,"line":244,"wp_function":266},[686],{"from":253,"to":258,"sanitized":178},{"entryPoint":688,"graph":689,"unsanitizedCount":27,"severity":483},"\u003Cclass-ev-shortcodes> (includes\u002Fclass-ev-shortcodes.php:0)",{"nodes":690,"edges":693},[691,692],{"id":253,"type":254,"label":682,"file":149,"line":683},{"id":258,"type":263,"label":264,"file":149,"line":244,"wp_function":266},[694],{"from":253,"to":258,"sanitized":178},{"entryPoint":696,"graph":697,"unsanitizedCount":79,"severity":703},"ajax_delete_document (admin\u002Fclass-ev-admin.php:1370)",{"nodes":698,"edges":701},[699,700],{"id":253,"type":254,"label":415,"file":126,"line":416},{"id":258,"type":263,"label":419,"file":126,"line":420,"wp_function":421},[702],{"from":253,"to":258,"sanitized":154},"high",{"summary":705,"deductions":706},"The \"employee-verification-document-authentication\" plugin v1.3.4 demonstrates a generally good security posture due to its strong adherence to prepared statements for SQL queries and high percentage of properly escaped output. The absence of known CVEs and critical severity taint flows are positive indicators.  However, the presence of 8 AJAX handlers without authentication checks represents a significant attack surface that could be exploited if these handlers are susceptible to unauthorized execution of sensitive operations. While the plugin has a substantial number of AJAX endpoints, the lack of proper authorization on a portion of them is a notable weakness.  The taint analysis, while not critical, did identify one high-severity flow with unsanitized paths, which warrants further investigation to understand its potential impact.  Overall, the plugin benefits from secure coding practices in many areas but has a clear vulnerability in its handling of AJAX endpoints that needs immediate attention.",[707,709],{"reason":708,"points":131},"AJAX handlers without auth checks",{"reason":710,"points":166},"High severity unsanitized path flow","2026-04-16T14:06:48.735Z",{"wat":713,"direct":726},{"assetPaths":714,"generatorPatterns":719,"scriptPaths":720,"versionParams":721},[715,716,717,718],"\u002Fwp-content\u002Fplugins\u002Femployee-verification-document-authentication\u002Fassets\u002Fcss\u002Fbackend.css","\u002Fwp-content\u002Fplugins\u002Femployee-verification-document-authentication\u002Fassets\u002Fcss\u002Ffrontend.css","\u002Fwp-content\u002Fplugins\u002Femployee-verification-document-authentication\u002Fassets\u002Fjs\u002Fbackend.js","\u002Fwp-content\u002Fplugins\u002Femployee-verification-document-authentication\u002Fassets\u002Fjs\u002Ffrontend.js",[],[717,718],[722,723,724,725],"\u002Fwp-content\u002Fplugins\u002Femployee-verification-document-authentication\u002Fassets\u002Fcss\u002Fbackend.css?ver=","\u002Fwp-content\u002Fplugins\u002Femployee-verification-document-authentication\u002Fassets\u002Fcss\u002Ffrontend.css?ver=","\u002Fwp-content\u002Fplugins\u002Femployee-verification-document-authentication\u002Fassets\u002Fjs\u002Fbackend.js?ver=","\u002Fwp-content\u002Fplugins\u002Femployee-verification-document-authentication\u002Fassets\u002Fjs\u002Ffrontend.js?ver=",{"cssClasses":727,"htmlComments":735,"htmlAttributes":761,"restEndpoints":765,"jsGlobals":768,"shortcodeOutput":771},[728,729,730,731,732,733,734],"evda-admin-settings","evda-employee-form","evda-document-form","evda-employee-list","evda-document-list","evda-letter-preview","evda-qr-scanner",[736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760],"\u003C!-- Intentionally left blank. -->","\u003C!-- Data (employees, documents, settings) is preserved on deactivation. -->","\u003C!-- It is only removed when the plugin is fully deleted (uninstall.php). -->","\u003C!-- Already dynamic — nothing to do -->","\u003C!-- It's an old static file — delete it from disk and update the record -->","\u003C!-- Convert to dynamic reference -->","\u003C!-- Build a dummy employee for preview -->","\u003C!-- build_letter() builds a complete standalone HTML document. Every dynamic value -->","\u003C!-- inside it is escaped at the point of output using esc_html(), esc_attr(), esc_url(). -->","\u003C!-- The content is sent via EVDA_PDF::output_letter() which sets correct headers and -->","\u003C!-- outputs the pre-escaped HTML through a dedicated output function. -->","\u003C!-- hardcoded CSV headers -->","\u003C!-- hardcoded CSV example row -->","\u003C!-- Core includes -->","\u003C!-- After migration, evda_db_version may now be set from the old ev_db_version. -->","\u003C!-- Fall back to old key as well so upgrades without reactivation are handled. -->","\u003C!-- Run install\u002Fupgrade if: -->","\u003C!-- 1. Tables are physically missing (fresh install or manual upload without activation) -->","\u003C!-- 2. Stored version is older than current (upgrade — adds new columns safely) -->","\u003C!-- always uses CREATE TABLE IF NOT EXISTS — never drops data -->","\u003C!-- QR image AJAX endpoint — serves a QR image for any URL, used in PDF letters -->","\u003C!-- PUBLIC ENDPOINT — No nonce used intentionally. -->","\u003C!-- This endpoint serves QR code images embedded in letter documents viewed by -->","\u003C!-- unauthenticated visitors. wp_verify_nonce() requires a logged-in session and -->","\u003C!-- cannot be used for nopriv endpoints. Security is -->",[762,763,764],"data-evda-action","data-evda-nonce","data-evda-type",[766,767],"\u002Fwp-json\u002Fevda\u002Fv1\u002Fscan","\u002Fwp-json\u002Fevda\u002Fv1\u002Fverify",[769,770],"evda_ajax_object","evda_frontend_object",[772,773,774,775],"[evda_employee_list]","[evda_document_list]","[evda_verification_scanner]","[evda_verification_form]",{"error":178,"url":777,"statusCode":778,"statusMessage":779,"message":779},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Femployee-verification-document-authentication\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":14,"versions":781},[782,787],{"version":6,"download_url":26,"svn_tag_url":783,"released_at":28,"has_diff":154,"diff_files_changed":784,"diff_lines":28,"trac_diff_url":785,"vulnerabilities":786,"is_current":178},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Femployee-verification-document-authentication\u002Ftags\u002F1.3.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Femployee-verification-document-authentication%2Ftags%2F1.3.2&new_path=%2Femployee-verification-document-authentication%2Ftags%2F1.3.4",[],{"version":788,"download_url":789,"svn_tag_url":790,"released_at":28,"has_diff":154,"diff_files_changed":791,"diff_lines":28,"trac_diff_url":28,"vulnerabilities":792,"is_current":154},"1.3.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Femployee-verification-document-authentication.1.3.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Femployee-verification-document-authentication\u002Ftags\u002F1.3.2\u002F",[],[]]