[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnsbYU3Z7JlBl6h5tA7u3xDVgXtVG4pzbCjsmf_lDeOw":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":18,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":36,"analysis":144,"fingerprints":247},"excitel-click-to-call","Excitel – Click to call","1.5","excitel","https:\u002F\u002Fprofiles.wordpress.org\u002Fexcitel\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fexcitel.net\u002F\" title=\"excitel.net\" rel=\"nofollow ugc\">Excitel\u003C\u002Fa> offers voice communication, which will help you to answer user’s questions in time. As a result, this will increase sales and customer loyalty.\u003Cbr \u002F>\nThe user does not need installation of additional applications every time, adding contacts, going for the phone and dialing long numbers. The user may just click “Call” button and find out all the necessary information.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features\u003C\u002Fstrong>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Setting of the working hours\u003C\u002Fstrong>. Adjust the time for receiving calls, and at the rest of the time users will be able to record voice messages and send them to you.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Several lines for simultaneous calls\u003C\u002Fstrong>. Enables customers to resolve all issues in a few minutes without waiting for their turn to talk to the operator.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Call Forwarding\u003C\u002Fstrong>. Allows you to forward the call to another operator or manager.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Statistics of the calls\u003C\u002Fstrong>. History on each call is available. The system stores the time and duration of the call, additional information about customer (location, IP and etc), record of the conversation.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Call Recording\u003C\u002Fstrong>. An indispensable functional for analysis of customer feedback, control and development of professional skills of operators.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Export of calls data into MS Excel\u003C\u002Fstrong>. If necessary, you can export the data of calls to Microsoft Excel and produce a comprehensive analysis.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom design for online call button\u003C\u002Fstrong>. The service allows you to create an individual button’s appearance according to the site design and corporate style.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cross-platform\u003C\u002Fstrong>. The call from the site works on various operating systems (Windows, MacOS, Linux) in the most popular browsers: Chrome 35+, Mozilla Firefox 24+ and Opera 18+. Excitel uses browser technologies (WebRTC and Flash) during the call.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Additional information about customer\u003C\u002Fstrong>. If user registered on your site, then you can send this information via \u003Ca href=\"https:\u002F\u002Fexcitel.net\u002Fen\u002Fapi-doc#api-Settings-button_code_api\" title=\"Excitel API\" rel=\"nofollow ugc\">Excitel API\u003C\u002Fa>. This information will be available for your operators (during the call).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Send form to customer\u003C\u002Fstrong>. You can send the form to customer during the call.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Chat\u003C\u002Fstrong>. You can chat with customer during the call.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin is designed to simplify the process of adding online call buttons to the website. You can register and try the functionality of the service with Free plan. For more information send the message to \u003Ca href=\"https:\u002F\u002Fexcitel.net\u002Fen\u002Fpage\u002Fcontacts\" title=\"support team\" rel=\"nofollow ugc\">support\u003C\u002Fa>\u003C\u002Fp>\n","Excitel helps your customers make calls from your site over Internet (free) using WebRTC, RTMP and SIP protocols.",20,9935,86,4,"2019-02-22T09:51:00.000Z","4.8.28","3.8","",[20,21,22,23,24],"call","call-from-website","callback","click-to-call","click2call","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fexcitel-click-to-call.1.5.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},1,30,84,"2026-04-04T13:12:04.222Z",[37,56,75,100,124],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":14,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":18,"tags":51,"homepage":54,"download_link":55,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"wp-call-me","WP Call Me","1.7","TaylorHawkes","https:\u002F\u002Fprofiles.wordpress.org\u002Ftaylorhawkes\u002F","\u003Cp>See the \u003Ca href=\"https:\u002F\u002Fwww.ringroost.com\u002Fclick2call.php\" rel=\"nofollow ugc\">Demo Click To Call Button Here.\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>This plugin work on modern browsers, and has fall back if browser does not support WebRTC see support here: \u003Ca href=\"http:\u002F\u002Fiswebrtcreadyyet.com\u002F\" rel=\"nofollow ugc\"> http:\u002F\u002Fiswebrtcreadyyet.com\u002F \u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Note: HTTPS is required for click to call button to work on Chrome.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FpVpl6LF-xxg?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>WP Call Me is the “go to” system for adding a desktop click to call button on your website and managing calls that come into your website.  WP Call Me allows you to setup click to call functionality on your website, call flow systems , call queues , interactive voice response systems and more – all using a simple drag and drop interface. You can set up automated voice response systems, capture and check voicemails, place calls,  setup phone menu system, filter out callers and much more.\u003C\u002Fp>\n\u003Cp>PLEASE NOTE: “Click to call” calls are not free, but billed on a per minute bases find \u003Ca href=\"https:\u002F\u002Fwww.ringroost.com\u002Fpricing.php\" rel=\"nofollow ugc\">pricing here \u003C\u002Fa>.  WP Phone works by leveraging and integrating   \u003Ca href=\"https:\u002F\u002Fwww.ringroost.com\" rel=\"nofollow ugc\"> RingRoost’s \u003C\u002Fa> system which allows users to build out call flow systems. You will need to register an account with ivrdesigner, which can be done within this plugin.\u003C\u002Fp>\n\u003Ch4>Common Use Cases:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Click to call buttons on your website \u003C\u002Fli>\n\u003Cli>Businesses looking to setup an interactive voice response menu, where the caller can choose what number or department they want to be redirected to. \u003C\u002Fli>\n\u003Cli>Businesses who want to capture input from users via phone. \u003C\u002Fli>\n\u003Cli>Many other uses –  just get creative…\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4> Requirements: \u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WordPress 3.3 or greater\u003C\u002Fli>\n\u003C\u002Ful>\n","Take calls from your website with an easy to install click to call button.",10,8917,60,"2016-10-12T21:17:00.000Z","4.4.34","3.3",[20,52,23,24,53],"click-2-call","iphone","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-call-me\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-call-me.zip",{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":27,"downloaded":64,"rating":27,"num_ratings":27,"last_updated":65,"tested_up_to":66,"requires_at_least":67,"requires_php":68,"tags":69,"homepage":73,"download_link":74,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"easy-caller-with-moceanapi","Easy Caller with Mocean","1.1.0","moceanapiplugin","https:\u002F\u002Fprofiles.wordpress.org\u002Fmoceanapiplugin\u002F","\u003Cp>This plugin enables your web visitors or your customers to interact with your website’s contact number just by entering their number which will then connect them to the endpoint number (the number you set in the “call settings” page). This is a highly efficient and effective way for your customers or web visitor to contact you.\u003C\u002Fp>\n\u003Ch3>Key Feature\u003C\u002Fh3>\n\u003Cp>👉 Easily generate a button shortcode for your visitors to click to dial.\u003C\u002Fp>\n\u003Ch3>How does it work ?\u003C\u002Fh3>\n\u003Col>\n\u003Cli>You’ll need to key in your \u003Cstrong>API Key\u003C\u002Fstrong> and \u003Cstrong>API Secret\u003C\u002Fstrong> from MoceanAPI Dashboard into our wordpress plugin setting.\u003C\u002Fli>\n\u003Cli>You’ll then enter your callback number (usually, is your number)\u003C\u002Fli>\n\u003Cli>Generate and Embed shortcode into your WordPress Site.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Adding Easy Caller shortcode is as easy as\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[easycall label='Click To Call' number='enter your endpoint number here']\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Notice that by default the label for the button is \u003Cem>Click to Call\u003C\u002Fem> which you can change to whatever is the best for you. The second part of the shortcode is the endpoint number that you set up in the “Call Settings” page. Make sure the number is valid.\u003C\u002Fp>\n\u003Cp>Now when you have visitors that click on the button, we’ll connect the call between you and your visitor\u003C\u002Fp>\n\u003Cp>Try for FREE. 20 trial SMS credits will be given upon \u003Ca href=\"https:\u002F\u002Fdashboard.moceanapi.com\u002Fregister?fr=wp_voice\" title=\"Registration Link\" rel=\"nofollow ugc\">registration\u003C\u002Fa>. Additional SMS credits can be requested and is subject to approval by MoceanSMS.\u003C\u002Fp>\n\u003Cp>If you don’t have a Mocean account don’t worry, setting up an account is very simple and you can get your trial credentials in a matter of seconds. Just head over to \u003Ca href=\"https:\u002F\u002Fdashboard.moceanapi.com\u002Fregister?fr=wp_voice\" title=\"Registration Link\" rel=\"nofollow ugc\">MoceanAPI\u003C\u002Fa> and register an account now!\u003C\u002Fp>\n\u003Cp>Icons credits\u003Cbr \u002F>\nIcons made by \u003Ca href=\"https:\u002F\u002Fwww.flaticon.com\u002Fauthors\u002Fvectors-market\" title=\"Vectors Market\" rel=\"nofollow ugc\">Vectors Market\u003C\u002Fa> from \u003Ca href=\"https:\u002F\u002Fwww.flaticon.com\u002F\" title=\"Flaticon\" rel=\"nofollow ugc\"> www.flaticon.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>1.1.0\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Added analytics\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.0\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Initial Release\u003C\u002Fli>\n\u003C\u002Ful>\n","Easy Caller uses Mocean Voice API to connect calls with you and your customers both easily and efficiently.",1070,"2023-04-26T08:00:00.000Z","6.0.0","4.0","5.6",[23,24,70,71,72],"clicktocall","mocean","sms","http:\u002F\u002Fmoceanapi.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-caller-with-moceanapi.1.1.0.zip",{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":83,"downloaded":84,"rating":85,"num_ratings":86,"last_updated":87,"tested_up_to":88,"requires_at_least":89,"requires_php":90,"tags":91,"homepage":95,"download_link":96,"security_score":97,"vuln_count":98,"unpatched_count":27,"last_vuln_date":99,"fetched_at":29},"call-now-button","Call Now Button – The #1 Click to Call Button for WordPress","2.0.0","Jerry Rietveld","https:\u002F\u002Fprofiles.wordpress.org\u002Fjgrietveld\u002F","\u003Ch3>What does the plugin do?\u003C\u002Fh3>\n\u003Cp>This plugin places a Call Now Button (click-to-call button) to the bottom of the screen. Because your mobile visitors already have a phone in their hands this plugin will allow them to call you with one simple touch of the button.\u003Cbr \u002F>\nNo more navigating to the contact page and no more complicated copy\u002Fpasting or memorizing the phone number!\u003C\u002Fp>\n\u003Ch4>More actions\u003C\u002Fh4>\n\u003Cp>Connect to our \u003Cstrong>cloud service\u003C\u002Fstrong> to enable more action buttons such as \u003Cstrong>WhatsApp\u003C\u002Fstrong>, \u003Cstrong>Signal\u003C\u002Fstrong>, \u003Cstrong>Telegram\u003C\u002Fstrong>, \u003Cstrong>Messenger\u003C\u002Fstrong>, \u003Cstrong>SMS\u002FText\u003C\u002Fstrong>, \u003Cstrong>Email\u003C\u002Fstrong>, \u003Cstrong>Directions\u003C\u002Fstrong>, \u003Cstrong>Viber\u003C\u002Fstrong>, \u003Cstrong>Zalo\u003C\u002Fstrong>, \u003Cstrong>WeChat\u003C\u002Fstrong>, \u003Cstrong>Line\u003C\u002Fstrong> and more. Find a more complete overview below in the \u003Cem>Account\u003C\u002Fem> section.\u003C\u002Fp>\n\u003Ch3>Could not be easier!\u003C\u002Fh3>\n\u003Cp>The settings are very easy: enable and enter your phone number. That’s it!\u003C\u002Fp>\n\u003Cp>The label allows you to add some text to your button. Leaving the label empty will show a nice circular phone button to your visitors (take a look at the screenshots).\u003C\u002Fp>\n\u003Ch4>Presentation controls\u003C\u002Fh4>\n\u003Cp>Under the \u003Cstrong>Presentation tab\u003C\u002Fstrong> you can change the colors of the button, move it to a different screen position and limit the pages on which the button should be visible.\u003C\u002Fp>\n\u003Ch4>Settings\u003C\u002Fh4>\n\u003Cp>In the \u003Cstrong>Settings menu\u003C\u002Fstrong> you’ll find a bunch of features such as click tracking in Google Analytics, fire a conversion tag so a call is registered as a conversion in Google Ads, adjust the size of the button or move the button further backwards in case you want something else to sit on top of it (e.g. your privacy notice). Here you can also enable the connection to our \u003Cem>Cloud service\u003C\u002Fem>.\u003C\u002Fp>\n\u003Ch3>Connecting to NowButtons.com\u003C\u002Fh3>\n\u003Cp>Connect the plugin to our cloud service NowButtons.com to unlock more features. Here’s an overview:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>⚡ More actions: SMS\u002FText, Email, Maps, URLs, Scroll to point\u003C\u002Fli>\n\u003Cli>🤗 Social actions: WhatsApp, Messenger, Telegram, Signal, Zalo, Viber, Line, WeChat\u003C\u002Fli>\n\u003Cli>🆕 Create 5 different buttons (instead of 1)\u003C\u002Fli>\n\u003Cli>🎯 Create smarter rules to decide where buttons should appear\u003C\u002Fli>\n\u003Cli>👁️️ Live preview\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>NowButtons PRO\u003C\u002Fh3>\n\u003Cp>We also offer a paid version of NowButtons which you can try 14 days for free!\u003C\u002Fp>\n\u003Cp>The PRO plan offers the following extras:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>🧳 Create 100 unique buttons\u003C\u002Fli>\n\u003Cli>🤹🏽 Multiple buttons on a page\u003C\u002Fli>\n\u003Cli>🌼 Button templates\u003C\u002Fli>\n\u003Cli>💬 Live chat (beta)\u003C\u002Fli>\n\u003Cli>💬 WhatsApp chat window\u003C\u002Fli>\n\u003Cli>💬 Live Chat (beta)\u003C\u002Fli>\n\u003Cli>🗓️ Meeting Scheduler (coming soon)\u003C\u002Fli>\n\u003Cli>💬 Messenger Chat Widget\u003C\u002Fli>\n\u003Cli>🗂️ Multi action buttons\u003C\u002Fli>\n\u003Cli>🕘 Scheduler: create a weekly schedule for your buttons\u003C\u002Fli>\n\u003Cli>🎯 Advanced rules to decide where buttons should appear\u003C\u002Fli>\n\u003Cli>👋 Add extra attention grabbing animations\u003C\u002Fli>\n\u003Cli>🎨 Icon picker\u003C\u002Fli>\n\u003Cli>👽 3rd party integrations\u003C\u002Fli>\n\u003Cli>✨ Slide-in Content Windows\u003C\u002Fli>\n\u003Cli>📷 Use custom images on buttons\u003C\u002Fli>\n\u003Cli>🌍 Include and exclude countries\u003C\u002Fli>\n\u003Cli>\u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">↕\u003C\u002Fspan>️ Appear after scrolling\u003C\u002Fli>\n\u003Cli>🔌 Intercom integration\u003C\u002Fli>\n\u003C\u002Ful>\n","The web's #1 click to call button for your website! A simple and powerful plugin that adds a Call Now Button to your website.",200000,6779904,96,101,"2026-02-06T11:44:00.000Z","6.9.4","6.1","7.4",[92,76,23,93,94],"call-button","contact-button","convert","https:\u002F\u002Fcallnowbutton.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcall-now-button.2.0.0.zip",95,5,"2025-10-29 00:01:50",{"slug":101,"name":102,"version":103,"author":104,"author_profile":105,"description":106,"short_description":107,"active_installs":108,"downloaded":109,"rating":110,"num_ratings":111,"last_updated":112,"tested_up_to":88,"requires_at_least":113,"requires_php":68,"tags":114,"homepage":120,"download_link":121,"security_score":122,"vuln_count":32,"unpatched_count":27,"last_vuln_date":123,"fetched_at":29},"api-key-for-google-maps","API KEY for Google Maps","1.2.14","Stiofan","https:\u002F\u002Fprofiles.wordpress.org\u002Fstiofansisland\u002F","\u003Cp>Retroactively add Google Maps API KEY to any theme or plugin.\u003C\u002Fp>\n\u003Cp>Simply activate, go to Settings>Google API KEY and enter your key.\u003Cbr \u002F>\nThe plugin will then attempt to add this key to all the places it is needed on the front of your website.\u003Cbr \u002F>\nNOTE: this will only work if the Google API has been added as per WordPress standards)\u003C\u002Fp>\n\u003Cp>Since January 2023 Google Maps JavaScript API requires callback parameter. This plugin also fixes JavaScript Error: \u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Fmaps\u002Fdocumentation\u002Fjavascript\u002Furl-params#required_parameters\" rel=\"nofollow ugc\">Loading the Google Maps JavaScript API without a callback is not supported\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>The plugin was created by the GeoDirectory team: \u003Ca href=\"https:\u002F\u002Fwpgeodirectory.com\" rel=\"nofollow ugc\">https:\u002F\u002Fwpgeodirectory.com\u003C\u002Fa>\u003C\u002Fp>\n","Retroactively add Google Maps API KEY to any theme or plugin.",40000,808416,98,55,"2025-12-03T14:16:00.000Z","5.0",[115,116,117,118,119],"google-maps","google-maps-api-callback","google-maps-api-key","google-maps-callback","google-maps-key","https:\u002F\u002Fwpgeodirectory.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fapi-key-for-google-maps.1.2.14.zip",100,"2022-06-08 10:50:00",{"slug":125,"name":126,"version":127,"author":128,"author_profile":129,"description":130,"short_description":131,"active_installs":132,"downloaded":133,"rating":134,"num_ratings":135,"last_updated":136,"tested_up_to":137,"requires_at_least":138,"requires_php":18,"tags":139,"homepage":142,"download_link":143,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"really-simple-click-to-call","Really Simple Click To Call Bar","1.0.6","Joe Nickdow","https:\u002F\u002Fprofiles.wordpress.org\u002Fjoe-nickdow\u002F","\u003Cp>This plugin adds a customizable click to call bar\u002Fcall now button to the bottom of the window for mobile users. It will allow users to easily call you from their phone. It automatically adds events if you’re using Google Analytics Universal.\u003C\u002Fp>\n\u003Cp>Perfect for small businesses like restaurants, retail stores or any lead generation that relies on phone calls.\u003C\u002Fp>\n","A simple plugin that adds a click to call bar\u002Fcall now button for mobile visitors.",8000,47592,90,11,"2019-05-31T16:49:00.000Z","5.2.24","4.0.0",[92,140,76,23,141],"call-now","click-to-call-bar","http:\u002F\u002Fjoenickdow.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Freally-simple-click-to-call.zip",{"attackSurface":145,"codeSignals":189,"taintFlows":208,"riskAssessment":235,"analyzedAt":246},{"hooks":146,"ajaxHandlers":185,"restRoutes":186,"shortcodes":187,"cronEvents":188,"entryPointCount":27,"unprotectedCount":27},[147,153,157,161,165,170,174,178,183],{"type":148,"name":149,"callback":150,"file":151,"line":152},"action","admin_enqueue_scripts","enqueue_admin_styles","class-voipApp-admin.php",24,{"type":148,"name":154,"callback":155,"file":151,"line":156},"wp_enqueue_scripts","load_styles",25,{"type":148,"name":158,"callback":159,"file":151,"line":160},"admin_menu","add_plugin_admin_menu",26,{"type":148,"name":162,"callback":163,"file":151,"line":164},"admin_init","init",27,{"type":166,"name":167,"callback":168,"file":151,"line":169},"filter","wp_footer","show_widget",28,{"type":148,"name":171,"callback":172,"file":151,"line":173},"admin_footer","excitel_ajax_action",29,{"type":148,"name":163,"callback":175,"file":176,"line":177},"load_plugin_textdomain","class-voipApp.php",9,{"type":148,"name":179,"callback":180,"file":181,"line":182},"plugins_loaded","get_instance","excitel-click-to-call.php",38,{"type":148,"name":179,"callback":180,"file":181,"line":184},39,[],[],[],[],{"dangerousFunctions":190,"sqlUsage":191,"outputEscaping":196,"fileOperations":27,"externalRequests":32,"nonceChecks":32,"capabilityChecks":32,"bundledLibraries":207},[],{"prepared":98,"raw":32,"locations":192},[193],{"file":176,"line":194,"context":195},44,"$wpdb->get_var() with variable interpolation",{"escaped":27,"rawEcho":98,"locations":197},[198,200,201,203,205],{"file":151,"line":182,"context":199},"raw output",{"file":151,"line":184,"context":199},{"file":151,"line":202,"context":199},46,{"file":151,"line":204,"context":199},47,{"file":151,"line":206,"context":199},181,[],[209,226],{"entryPoint":210,"graph":211,"unsanitizedCount":14,"severity":225},"excitel_ajax_action (class-voipApp-admin.php:32)",{"nodes":212,"edges":222},[213,217],{"id":214,"type":215,"label":216,"file":151,"line":182},"n0","source","$_SERVER['REQUEST_URI'] (x4)",{"id":218,"type":219,"label":220,"file":151,"line":182,"wp_function":221},"n1","sink","echo() [XSS]","echo",[223],{"from":214,"to":218,"sanitized":224},false,"medium",{"entryPoint":227,"graph":228,"unsanitizedCount":14,"severity":234},"\u003Cclass-voipApp-admin> (class-voipApp-admin.php:0)",{"nodes":229,"edges":232},[230,231],{"id":214,"type":215,"label":216,"file":151,"line":182},{"id":218,"type":219,"label":220,"file":151,"line":182,"wp_function":221},[233],{"from":214,"to":218,"sanitized":224},"low",{"summary":236,"deductions":237},"The 'excitel-click-to-call' plugin v1.5 demonstrates a mixed security posture.  While it boasts zero known CVEs and a seemingly small attack surface with no AJAX handlers, REST API routes, shortcodes, or cron events exposed without authentication, there are significant concerns regarding its output sanitization and data handling. The analysis reveals that 100% of its outputs are not properly escaped, which is a critical weakness that could lead to Cross-Site Scripting (XSS) vulnerabilities. Furthermore, the taint analysis shows two flows with unsanitized paths, indicating potential avenues for data manipulation or injection, although currently without a critical or high severity rating. The plugin also makes an external HTTP request, the nature and security of which are not detailed here, but such requests can introduce risks if not handled carefully.  Despite the lack of historical vulnerabilities and a low number of SQL queries, the unescaped output and unsanitized data flows are major red flags that cannot be overlooked. The plugin has strengths in its limited entry points and use of prepared statements for SQL, but these are overshadowed by the critical output sanitization issues.  It is recommended that the plugin undergoes thorough security auditing, particularly focusing on output escaping and input validation to mitigate potential XSS and data injection risks.",[238,241,243],{"reason":239,"points":240},"All output is unescaped",8,{"reason":242,"points":98},"Taint flow with unsanitized paths",{"reason":244,"points":245},"External HTTP request",2,"2026-03-16T22:48:47.480Z",{"wat":248,"direct":257},{"assetPaths":249,"generatorPatterns":251,"scriptPaths":252,"versionParams":253},[250],"\u002Fwp-content\u002Fplugins\u002Fexcitel-click-to-call\u002Fcss\u002FvoipAppWidget.css",[],[],[254,255,256],"voipApp-admin-styles?ver=","excitel-click-to-call-admin-styles?ver=","excitel-click-to-call-main-styles?ver=",{"cssClasses":258,"htmlComments":259,"htmlAttributes":260,"restEndpoints":261,"jsGlobals":262,"shortcodeOutput":265},[],[],[],[],[263,264],"window.location.href","jQuery.post",[]]