[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWtAXmr83h8W-7tHQ0sOaOklWxCwaFwst56tcX87hO1s":3,"$f1zahO3UDeNqKnHeTd_sIFTmI6_9Qq9FmnRdcjYi6oYw":630,"$faO7gtNdeV9MyMTbshsVveUatOARphemBCODxXEUNBPY":634},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"discovery_status":31,"vulnerabilities":32,"developer":57,"crawl_stats":38,"alternatives":62,"analysis":151,"fingerprints":587},"farazsms","افزونه پیامک حرفه ای فراز اس ام اس","2.7.3","faraz sms","https:\u002F\u002Fprofiles.wordpress.org\u002Ffarazsmsdeveloper\u002F","\u003Cp>\u003Cstrong>#1 بهترین افزونه پیامکی برای ادغام با افزونه های Woocommerce، EDD، Bookly، Gravity Forms، Affiliate و Membership.\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003C\u002Fp>\n\u003Cp>افزونه فراز اس ام اس بر اساس جدیدترین متدهای بازاریابی پیامکی با راهنمایی اساتید بازاریابی در ایران و جهان برنامه ریزی شده است. این افزونه باشگاه مشتریان را به سایت شما اضافه می کند و پیامک های ویژه ای را در زمان های مختلف برای کاربران سایت شما ارسال می کند.\u003Cbr \u002F>\nشما این امکان را دارید که شماره موبایل کاربران سایت را با افزونه فراز اس ام اس در دفترچه تلفن سامانه پیامکی خود ذخیره کنید.\u003C\u002Fp>\n\u003Cp>افزونه فراز اس ام اس این قابلیت را دارد که تمامی افرادی که در سایت شما فعال بوده اند را ذخیره و در اختیار شما قرار دهد.\u003C\u002Fp>\n\u003Ch3>قابلیت های عمومی فراز اس ام اس\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>برای جمع آوری شماره تلفن کاربر و ذخیره آن در دفترچه تلفن، یک فیلد به بخش کامنت گذاری وردپرس اضافه کنید.\u003C\u002Fli>\n\u003Cli>ارسال اس ام اس برای کاربران پس از تایید کامنت.\u003C\u002Fli>\n\u003Cli>ارسال پیامک به مدیر در کامنت جدید ارسال شده.\u003C\u002Fli>\n\u003Cli>ارسال اس ام اس به کاربران زمانی که نظر توسط دیگران پاسخ داده می شود.\u003C\u002Fli>\n\u003Cli>فرمی برای جمع آوری شماره تلفن کاربران برای ساختن خبرنامه پیامکی خود اضافه کنید.\u003C\u002Fli>\n\u003Cli>ارسال کد تایید برای عضویت در خبرنامه پیامکی.\u003C\u002Fli>\n\u003Cli>تعداد تلفن همراه مشترکین در خبرنامه را در دفترچه تلفن ذخیره کنید.\u003C\u002Fli>\n\u003Cli>ارسال پیامک خودکار برای مشترکین در پست جدید یا محصول منتشر شده.\u003C\u002Fli>\n\u003Cli>ارسال پیامک بازاریابی یا خدمات برای مشترکین خبرنامه یا شماره های دفترچه تلفن یا شماره های دستی.\u003C\u002Fli>\n\u003Cli>برای مشترکین پیامک خوشامدگویی ارسال کنید.\u003C\u002Fli>\n\u003Cli>ارسال اس ام اس خوش آمدگویی به کاربر هنگام ورود.\u003C\u002Fli>\n\u003Cli>ارسال اعلان ورود به مدیر بر اساس نقش های کاربر.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>افزونه فراز اس ام اس و ادغا با سائر افزونه ها\u003C\u002Fh3>\n\u003Cp>افزونه Farazsms می تواند با چندین افزونه برای خودکارسازی ارسال پیامک ادغام شود. آنها در زیر لیست کردند:\u003Cbr \u002F>\n* ووکامرس\u003Cbr \u002F>\n* Edd\u003Cbr \u002F>\n* Digits\u003Cbr \u002F>\n* Elementor Free و Pro\u003Cbr \u002F>\n* Gravity Forms\u003Cbr \u002F>\n* Bookly\u003Cbr \u002F>\n* WP Affiliate\u003Cbr \u002F>\n* Affiliate Yith WooCommerce\u003Cbr \u002F>\n* Ultimate Affiliate Pro\u003Cbr \u002F>\n* Paid Membership Pro\u003Cbr \u002F>\n* Ultimate Membership Pro\u003C\u002Fp>\n\u003Ch3>ویژگی های WooCommerce\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>پس از هر سفارش تکمیل شده، یک پیامک با لینک صفحه نظرسنجی برای مشتری ارسال کنید.\u003C\u002Fli>\n\u003Cli>ارسال پیامک با جزئیات مربوط به کد رهگیری برای مشتریان در صفحه سفارش.\u003C\u002Fli>\n\u003Cli>شماره موبایل مشتریان را در صفحه پرداخت تأیید کنید.\u003C\u002Fli>\n\u003Cli>شماره تلفن همراه مشتریان را با دفترچه تلفن همگام کنید.\u003C\u002Fli>\n\u003Cli>ارسال پیامک خودکار به مدیر یا کاربر پس از تغییر وضعیت سفارش.\u003C\u002Fli>\n\u003Cli>پس از تغییر وضعیت سفارش بر اساس هر محصول، پیامک های زماندار ارسال کنید.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>ویژگی های EDD\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>شماره تلفن همراه مشتریان را با دفترچه تلفن همگام کنید.\u003C\u002Fli>\n\u003Cli>شماره موبایل مشتریان را در صفحه پرداخت تأیید کنید.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>ویژگی های Digits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>شماره موبایل همه کاربران را در دفترچه تلفن ذخیره کنید.\u003C\u002Fli>\n\u003Cli>تلفن همراه های ثبت شده با افزونه Digits را با دفترچه تلفن همگام سازی کنید.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>ویژگی های Elementor Free و Pro\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>برای مدیر یا کاربر پیامک ارسال کنید یا شماره تلفن را در دفترچه تلفن با افزودن یک اقدام پس از ارسال فرم در فرم های پیش فرض Elementor Pro ذخیره کنید.\u003C\u002Fli>\n\u003Cli>ویجت سفارشی برای استفاده به عنوان فرم خبرنامه برای ذخیره شماره کاربران در دفترچه تلفن.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>ویژگی های Gravity Forms\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>پس از ارسال هر فرم، برای مدیر یا کاربر پیامک ارسال کنید یا شماره تلفن را در دفترچه تلفن ذخیره کنید.\u003C\u002Fli>\n\u003Cli>به زودی: ارسال پیامک زماندار پس از تغییر وضعیت بر اساس هر فرم.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>ویژگی های Bookly\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>همگام سازی تمام شماره های موبایل کاربران افزونه Bookly با دفترچه تلفن.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>ویژگی های افزونه های Affiliate\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>ثبت نام کاربر را به عنوان یک بازاریاب تأیید کنید\u003C\u002Fli>\n\u003Cli>ارسال پیامک به کاربر یا مدیر در ارجاع جدید.\u003C\u002Fli>\n\u003Cli>ارسال پیامک در مورد ثبت نام کاربر جدید به کاربر یا مدیر.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>ویژگی های افزونه های Membership\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>ارسال سه پیامک برای کاربران در مورد انقضای زمان عضویت وجود دارد.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>شما می توانید با تمامی این افرادی که در حال حاضر یا در گذشته به نوعی در سایت فعال هستند از طریق پیامک ارتباط برقرار کرده و در زمان های مختلف به آنها اطلاع دهید.\u003Cbr \u002F>\nایجاد حس صمیمیت و برقراری ارتباط مستمر با کاربران سایت\u003Cbr \u002F>\nبا خرید پنل پیامک تبلیغاتی و استفاده از افزونه فراز اس ام اس می توانید ارتباط مستمری با مشتریان سایت خود برقرار کرده و حس صمیمیت را در آنها ایجاد کنید.\u003Cbr \u002F>\nافزونه Farazsms به برقراری ارتباط با مشتریان و تبدیل آنها به مشتریان عادی کمک می کند.\u003Cbr \u002F>\nهمچنین اگر به قابلیت خاصی نیاز دارید که در افزونه پیاده سازی نشده و بتواند نیاز بسیاری از سایت ها را برطرف کند به ما اطلاع دهید تا در آپدیت های بعدی افزونه به درخواست شما رسیدگی کنیم.\u003Cbr \u002F>\nبا خرید پنل اس ام اس و استفاده از افزونه فرازمس همیشه با مشتریان خود در ارتباط باشید\u003C\u002Fp>\n\u003Ch3>درباره فراز اس ام اس\u003C\u002Fh3>\n\u003Cp>می توانید پیامک های تبلیغاتی ارسال کنید و وب سایت یا نرم افزار خود را به ابزار قدرتمند پیامک در فراز اس ام اس مجهز کنید.\u003Cbr \u002F>\n* پنل پیامکی با خط خدماتی بدون نیاز به سفته برای عبور از لیست سیاه مخابرات.\u003Cbr \u002F>\n* بانک شماره موبایل بر اساس استان، شهر، منطقه، شغل، سن و جنسیت و BTS.\u003Cbr \u002F>\n* سامانه پیامک با اپلیکیشن ارسال پیامک اندروید.\u003Cbr \u002F>\n* پنل پیام کوتاه سرویس سازگار با افزونه های SMS معتبر.\u003Cbr \u002F>\n* سامانه پیامکی بدون تمدید سالانه (مادام العمر).\u003Cbr \u002F>\n* پشتیبانی ویژه از افزونه فراز اس ام اس.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Ffarazsms.com\u002F\" rel=\"nofollow ugc\">در مورد فراز اس ام اس بیشتر بدانید.\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>نصب و راه اندازی\u003C\u002Fh3>\n\u003Cp>1- farazsms.zip را در پوشه \u002Fwp-content\u002Fplugins\u002F آپلود کنید.\u003Cbr \u002F>\n2- افزونه را از طریق منوی \\’Plugins\\’ در وردپرس فعال کنید\u003C\u002Fp>\n\u003Ch3>سوالات متداول\u003C\u002Fh3>\n\u003Cp>= چرا این افزونه عالی رایگان است؟ =\u003Cbr \u002F>\nاین روشی است که از جامعه وردپرس تشکر می کنیم و به صاحبان کسب و کار ها کمک می کنیم تا سود خود را افزایش دهند. و کاملا صادقانه، ما از شما می خواهیم یکی از محصولات ما را به صورت رایگان امتحان کنید. و وقتی می بینید که چقدر مفید است، باید در آینده شما را برای خرید محصولات دیگر از ما هیجان زده کند\u003C\u002Fp>\n\u003Ch4>آیا این افزونه با این همه ویژگی باعث کندی سایت من می شود؟\u003C\u002Fh4>\n\u003Cp>اصلا. شما به سادگی می توانید هر ویژگی را که می خواهید یا نمی خواهید استفاده کنید، فعال یا غیرفعال کنید.\u003C\u002Fp>\n\u003Ch4>چگونه می توانم اشکالات را گزارش کنم؟\u003C\u002Fh4>\n\u003Cp>فقط می توانید از بخش پشتیبانی در تنظیمات افزونه Farazsms استفاده کنید و جزئیات مربوط به باگی را که پیدا کردید برای ما ارسال کنید.\u003C\u002Fp>\n","شما می توانید با استفاده از افزونه فراز اس ام اس، سایت خود را با ابزاری خودکار برای ارسال پیامک و ذخیره شماره در دفترچه تلفن، تقویت کنید.",2000,15771,70,2,"2023-06-11T10:45:00.000Z","6.2.9","5.8","7.4",[20,21,22,23,24],"mobile-verification","order-notification","order-sms","sms-plugin","woocommerce-sms-integration","https:\u002F\u002Ffarazsms.com\u002Ffarazsms-wordpress-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffarazsms.2.7.3.zip",63,1,"2026-01-27 00:00:00","2026-04-16T10:56:18.058Z","no_bundle",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":38,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":29,"updated_date":44,"references":45,"days_to_patch":38,"patch_diff_files":47,"patch_trac_url":38,"research_status":48,"research_verified":49,"research_rounds_completed":50,"research_plan":51,"research_summary":52,"research_vulnerable_code":38,"research_fix_diff":38,"research_exploit_outline":53,"research_model_used":54,"research_started_at":55,"research_completed_at":56,"research_error":38,"poc_status":38,"poc_video_id":38,"poc_summary":38,"poc_steps":38,"poc_tested_at":38,"poc_wp_version":38,"poc_php_version":38,"poc_playwright_script":38,"poc_exploit_code":38,"poc_has_trace":49,"poc_model_used":38,"poc_verification_depth":38},"CVE-2025-68031","reflected-cross-site-scripting-2","افزونه پیامک حرفه ای فراز اس ام اس \u003C= 2.7.3 - Reflected Cross-Site Scripting","The افزونه پیامک حرفه ای فراز اس ام اس plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.7.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",null,"\u003C=2.7.3","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2026-02-02 16:22:08",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fab573de3-e05a-4946-8734-8cb18d05ad69?source=api-prod",[],"researched",false,3,"This research plan targets **CVE-2025-68031**, a Reflected Cross-Site Scripting (XSS) vulnerability in the **افزونه پیامک حرفه ای فراز اس ام اس (farazsms)** plugin. Since the source code is not provided, this plan relies on common patterns in this plugin's architecture and standard WordPress XSS sinks.\n\n---\n\n### 1. Vulnerability Summary\nThe \"Faraz SMS\" plugin for WordPress fails to sufficiently sanitize and escape user-supplied input before reflecting it back into the web page. This allows an unauthenticated attacker to craft a malicious URL containing a JavaScript payload. When a victim (especially an authenticated administrator) clicks the link, the script executes in their browser context.\n\n### 2. Attack Vector Analysis\n*   **Endpoint**: Likely a frontend page where the plugin processes SMS subscription results, or a specific admin-ajax handler that returns HTML.\n*   **Vulnerable Parameter**: Likely a feedback or status parameter such as `message`, `msg`, `fsms_status`, or `phone` (inferred).\n*   **Authentication**: None (Unauthenticated).\n*   **Preconditions**: The victim must be tricked into clicking a specially crafted link. If the reflection occurs on an admin page, the victim must be logged in as an administrator.\n\n### 3. Code Flow (Inferred)\n1.  **Entry Point**: A request is made to a URL containing a specific query parameter (e.g., `wp-admin\u002Fadmin.php?page=farazsms_settings&message=...` or a frontend page like `?fsms_result=...`).\n2.  **Processing**: The plugin's initialization logic (hooked to `init` or `admin_init`) or a specific page callback retrieves the parameter using `$_GET` or `$_REQUEST`.\n3.  **Sink**: The code calls `echo` or `printf` on the raw parameter without applying `esc_html()`, `esc_attr()`, or `wp_kses()`.\n    *   *Example Vulnerable Pattern:* `echo '\u003Cdiv class=\"updated\">\u003Cp>' . $_GET['message'] . '\u003C\u002Fp>\u003C\u002Fdiv>';`\n\n### 4. Nonce Acquisition Strategy\nReflected XSS via `GET` parameters typically occurs before or independently of nonce checks. However, if the reflection occurs within an AJAX response or a form submission that *does* require a nonce, use the following strategy:\n\n1.  **Identify Shortcodes**: Search for plugin shortcodes:\n    `grep -r \"add_shortcode\" \u002Fvar\u002Fwww\u002Fhtml\u002Fwp-content\u002Fplugins\u002Ffarazsms\u002F`\n    *(Commonly `[farazsms_newsletter]` or `[farazsms_verification]`)*.\n2.  **Create Setup Page**: Create a page containing the found shortcode:\n    `wp post create --post_type=page --post_status=publish --post_content='[SHORTCODE_NAME]'`\n3.  **Extract Nonce**:\n    *   Navigate to the newly created page.\n    *   Use `browser_eval` to find the localization object.\n    *   Look for variables like `window.farazsms_ajax?.nonce` or `window.fsms_obj?.ajax_nonce`.\n\n### 5. Exploitation Strategy\nThe goal is to find a reflected parameter and execute `alert(document.domain)`.\n\n#### Step 1: Discovery (Grep for Sinks)\nRun these commands in the plugin directory to find the exact vulnerable line:\n```bash\n# Search for raw echoes of GET\u002FREQUEST parameters\ngrep -rP \"echo\\s+\\\\\\$_(GET|REQUEST)\" \u002Fvar\u002Fwww\u002Fhtml\u002Fwp-content\u002Fplugins\u002Ffarazsms\u002F\ngrep -rP \"printf\\(.*\\\\\\$_(GET|REQUEST)\" \u002Fvar\u002Fwww\u002Fhtml\u002Fwp-content\u002Fplugins\u002Ffarazsms\u002F\n```\n\n#### Step 2: Payload Construction\nBased on the discovery, construct a URL. If the sink is inside an HTML tag attribute, use:\n`\">\u003Cscript>alert(document.domain)\u003C\u002Fscript>`\nIf the sink is inside a `\u003Cdiv>` or `\u003Cp>`, use:\n`\u003Cscript>alert(document.domain)\u003C\u002Fscript>`\n\n#### Step 3: Request Execution\nUse the `http_request` tool to simulate a victim clicking the link.\n*   **Method**: `GET`\n*   **URL**: `http:\u002F\u002Flocalhost:8080\u002F[VULNERABLE_PAGE]?[VULNERABLE_PARAM]=%3Cscript%3Ealert(document.domain)%3C\u002Fscript%3E`\n\n### 6. Test Data Setup\n1.  **Install Plugin**: Ensure `farazsms` version \u003C= 2.7.3 is installed and active.\n2.  **Configuration**: Some XSS reflections only occur if certain settings are enabled (e.g., \"Show success message after subscription\").\n3.  **Create Victim User**:\n    `wp user create victim victim@example.com --role=administrator --user_pass=password`\n\n### 7. Expected Results\n*   The HTTP response body must contain the literal, unescaped string `\u003Cscript>alert(document.domain)\u003C\u002Fscript>`.\n*   If using `browser_navigate`, the browser should trigger an alert dialog (observable via console logs or screenshots).\n\n### 8. Verification Steps\n1.  **Source Verification**:\n    `curl -s \"http:\u002F\u002Flocalhost:8080\u002F?vulnerable_param=\u003Cscript>alert(1)\u003C\u002Fscript>\" | grep \"\u003Cscript>alert(1)\u003C\u002Fscript>\"`\n2.  **Context Check**: Verify if the script is reflected inside a sensitive area (like the WordPress Admin Dashboard) which would allow for session hijacking or unauthorized administrative actions.\n\n### 9. Alternative Approaches\n*   **Attribute Injection**: If the input is reflected inside an attribute (e.g., `\u003Cinput value=\"[INPUT]\">`), try:\n    `\" onmouseover=\"alert(1)\"` or `\" autofocus onfocus=\"alert(1)\"`\n*   **Admin-Ajax Reflection**: Check if `admin-ajax.php` actions reflect input in their error\u002Fsuccess responses:\n    ```bash\n    # Example (inferred)\n    http_request(\n        method=\"POST\",\n        url=\"http:\u002F\u002Flocalhost:8080\u002Fwp-admin\u002Fadmin-ajax.php\",\n        body=\"action=farazsms_test&msg=\u003Cscript>alert(1)\u003C\u002Fscript>\",\n        headers={\"Content-Type\": \"application\u002Fx-www-form-urlencoded\"}\n    )\n    ```\n*   **Double Encoding**: If a simple payload is blocked, try URL-encoding the payload twice to bypass basic security filters.","The افزونه پیامک حرفه ای فراز اس ام اس (Faraz SMS) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in versions up to 2.7.3. This occurs because the plugin fails to sanitize and escape user-supplied input from URL parameters before reflecting it in the page, allowing unauthenticated attackers to execute arbitrary JavaScript in a victim's browser.","The exploit involves identifying a plugin-generated page (either in the WordPress admin dashboard or a frontend form) that reflects query parameters back into the HTML. An attacker crafts a malicious URL containing a JavaScript payload—such as `\u003Cscript>alert(document.domain)\u003C\u002Fscript>`—within a parameter like 'message', 'msg', or 'fsms_status'. The attacker then tricks an authenticated user (typically an administrator) into clicking the link, causing the script to execute in the context of the victim's session, which could lead to unauthorized actions or cookie theft.","gemini-3-flash-preview","2026-05-04 23:24:57","2026-05-04 23:25:19",{"slug":58,"display_name":7,"profile_url":8,"plugin_count":28,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":59,"trust_score":60,"computed_at":61},"farazsmsdeveloper",30,68,"2026-05-19T20:59:46.389Z",[63,84,105,120,137],{"slug":64,"name":65,"version":66,"author":67,"author_profile":68,"description":69,"short_description":70,"active_installs":71,"downloaded":72,"rating":71,"num_ratings":14,"last_updated":73,"tested_up_to":74,"requires_at_least":75,"requires_php":76,"tags":77,"homepage":81,"download_link":82,"security_score":71,"vuln_count":83,"unpatched_count":83,"last_vuln_date":38,"fetched_at":30},"alpha-sms","Alpha SMS","1.0.17","alphanetbd","https:\u002F\u002Fprofiles.wordpress.org\u002Falphanetbd\u002F","\u003Ch4>Overview\u003C\u002Fh4>\n\u003Cp>Alpha SMS makes it easy to add SMS-based two-factor authentication and transactional notifications to your WordPress site. Replace unreliable email-based logins with one-time passwords, confirm customer phone numbers during registration, and keep shoppers updated with automated WooCommerce order status messages that are verified in order notes.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>OTP verification for WordPress and WooCommerce registration and login forms.\u003C\u002Fli>\n\u003Cli>WooCommerce order status notifications for customers and administrators.\u003C\u002Fli>\n\u003Cli>Bulk SMS campaign tool for WordPress and WooCommerce users or custom phone lists.\u003C\u002Fli>\n\u003Cli>Message templates that can be tailored directly from the WordPress admin.\u003C\u002Fli>\n\u003Cli>Built specifically for Bangladeshi mobile operators using the Alpha SMS gateway.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How It Works\u003C\u002Fh4>\n\u003Col>\n\u003Cli>A user submits a supported form (registration, login, or checkout).\u003C\u002Fli>\n\u003Cli>Alpha SMS sends a one-time password (OTP) to the provided Bangladeshi mobile number.\u003C\u002Fli>\n\u003Cli>The OTP is validated before the registration, login, or checkout process is completed.\u003C\u002Fli>\n\u003Cli>WooCommerce stores can optionally send transactional order notifications to customers and administrators.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>An active Alpha SMS account and API key from https:\u002F\u002Fsms.net.bd\u002F.\u003C\u002Fli>\n\u003Cli>WooCommerce 3.0+ for eCommerce-specific features (optional for OTP-only usage).\u003C\u002Fli>\n\u003C\u002Ful>\n","Connect your WordPress and WooCommerce store to Alpha SMS for OTP verification and order notifications in Bangladesh.",100,5161,"2026-02-18T03:39:00.000Z","6.9.4","3.5","5.6",[21,78,79,80,24],"otp-verification","sms-gateway","two-step-verification","https:\u002F\u002Fsms.net.bd\u002Fplugins\u002Fwordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Falpha-sms.1.0.17.zip",0,{"slug":85,"name":86,"version":87,"author":88,"author_profile":89,"description":90,"short_description":91,"active_installs":92,"downloaded":93,"rating":60,"num_ratings":94,"last_updated":95,"tested_up_to":96,"requires_at_least":75,"requires_php":97,"tags":98,"homepage":102,"download_link":103,"security_score":104,"vuln_count":83,"unpatched_count":83,"last_vuln_date":38,"fetched_at":30},"order-sms-notification-woocommerce","Order SMS Notification – WooCommerce","2.0","Sabbir Ahmed","https:\u002F\u002Fprofiles.wordpress.org\u002Fsabbir1991\u002F","\u003Cp>This is a WooCommerce add-on. By Using this plugin admin and buyer can get notification about their order via sms using different SMS gateways.\u003C\u002Fp>\n\u003Cp>The WooCommerce Order SMS Notification plugin for WordPress is very useful, when you want to get notified via SMS after placing an order. Buyer and seller both can get SMS notification after an order is placed. SMS notification options can be customized in the admin panel very easily.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Very easy to install\u003C\u002Fli>\n\u003Cli>Very easy to customize\u003C\u002Fli>\n\u003Cli>Integrate \u003Ca href=\"http:\u002F\u002Ftalkwithtext.com.au\u002Fpricing\u002F\" rel=\"nofollow ugc\">TalkwithText\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwww.clickatell.com\u002F\" rel=\"nofollow ugc\">Clikcatell\u003C\u002Fa> SMS Gateways\u003C\u002Fli>\n\u003Cli>Admin can get Order SMS notifications\u003C\u002Fli>\n\u003Cli>Buyer can get order sms notifications\u003C\u002Fli>\n\u003Cli>Available settings for Admin to control SMS settings and gateways\u003C\u002Fli>\n\u003Cli>Customizable SMS text\u003C\u002Fli>\n\u003Cli>Send Order details ( order no, order status ) in SMS text\u003C\u002Fli>\n\u003Cli>Extended Settings Option\u003C\u002Fli>\n\u003Cli>Works with WooCommerce 2.0+\u003C\u002Fli>\n\u003Cli>All version of WordPress 4.0+ supported\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin also have a premium version named \u003Ca href=\"http:\u002F\u002Fcodecanyon.net\u002Fitem\u002Fwoocommerce-order-sms-notification\u002F8339735\" rel=\"nofollow ugc\">WooCommerce Order SMS Notifications\u003C\u002Fa> in codecanyon. In premium version there are lots of extended features like\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Integrated 3 more most popular gateways ( \u003Ca href=\"http:\u002F\u002Ftwilio.com\u002F\" rel=\"nofollow ugc\">Twillio\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fnexmo.com\u002F\" rel=\"nofollow ugc\">Nexmo\u003C\u002Fa>, \u003Ca href=\"http:\u002F\u002Fsmsglobal.com\u002F\" rel=\"nofollow ugc\">SMS Global\u003C\u002Fa>, \u003Ca href=\"http:\u002F\u002Fhoiio.com\u002F\" rel=\"nofollow ugc\">Hoiio\u003C\u002Fa>, \u003Ca href=\"http:\u002F\u002Fintellisms.co.uk\u002F\" rel=\"nofollow ugc\">Intelli SMS\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>Sending SMS to any number.\u003C\u002Fli>\n\u003Cli>Sending Order Details ( order no, order status, order items and order amount ) in SMS text\u003C\u002Fli>\n\u003Cli>Different SMS send corresponding to different Order Status\u003C\u002Fli>\n\u003Cli>Directly contact with buyer via SMS.\u003C\u002Fli>\n\u003Cli>Admin can force  buyer to get sms notifications.\u003C\u002Fli>\n\u003Cli>All order status supported.\u003C\u002Fli>\n\u003C\u002Ful>\n","A plugin for sending SMS notification after placing orders using WooCommerce",20,12951,5,"2015-09-09T15:45:00.000Z","4.0.38","",[99,100,21,22,101],"notification","order","sms-order","http:\u002F\u002Fsabbirahmed.me\u002Fplugins\u002Fwoocommerce-order-sms-notification\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Forder-sms-notification-woocommerce.zip",85,{"slug":106,"name":107,"version":108,"author":109,"author_profile":110,"description":111,"short_description":112,"active_installs":113,"downloaded":114,"rating":71,"num_ratings":14,"last_updated":115,"tested_up_to":97,"requires_at_least":116,"requires_php":97,"tags":117,"homepage":118,"download_link":119,"security_score":104,"vuln_count":83,"unpatched_count":83,"last_vuln_date":38,"fetched_at":30},"branded-sms","Branded SMS","4.4.3","Naqi","https:\u002F\u002Fprofiles.wordpress.org\u002Fnaqirizvi\u002F","\u003Cp>\u003Cstrong>IMPORTANT: \u003Cem>Branded SMS\u003C\u002Fem> require WooCommerce 2.1.0 or higher.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>NOTE: WooCommerce – Host & Soft Branded SMS is now called \u003Cem>Branded SMS\u003C\u002Fem>.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Branded SMS\u003C\u002Fstrong> add to your WooCommerce store the possibility of send SMS notifications to customer every time the order status changed. Also notifies the owner, if you desired, when the store have a new order.\u003C\u002Fp>\n\u003Cp>This is a WooCommerce add-on. By Using this plugin admin and buyer can get notification about their order via sms using different SMS gateways.\u003C\u002Fp>\n\u003Cp>The WooCommerce Order SMS Notification plugin for WordPress is very useful, when you want to get notified via SMS after placing an order. Buyer and seller both can get SMS notification after an order is placed. SMS notification options can be customized in the admin panel very easily.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Support multiple SMS gateways:\u003C\u002Fli>\n\u003Cli>Integrate \u003Ca href=\"https:\u002F\u002Fhostandsoft.com\u002Fbranded-sms-pakistan\" rel=\"nofollow ugc\">Host & Soft\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbrandedsms.io\" rel=\"nofollow ugc\">BrandedSMS.io\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fadlinks.websmsc.com\u002F\" rel=\"nofollow ugc\">Adlinks Labs\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.bulkgate.com\u002F\" rel=\"nofollow ugc\">BulkGate\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.bulksms.com\u002F\" rel=\"nofollow ugc\">BulkSMS\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.clickatell.com\u002F\" rel=\"nofollow ugc\">Clickatell\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.clockworksms.com\u002F\" rel=\"nofollow ugc\">Clockwork\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.bz.esebun.com\u002F\" rel=\"nofollow ugc\">Esebun Business (Enterprise & Developers only)\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.isms.com.my\u002F\" rel=\"nofollow ugc\">iSMS Malaysia\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.labsmobile.com\u002Fes\" rel=\"nofollow ugc\">LabsMobile Spain\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.mobtexting.com\" rel=\"nofollow ugc\">MobTexting\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmoplet.com\" rel=\"nofollow ugc\">Moplet\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.moreify.com\u002F\" rel=\"nofollow ugc\">Moreify\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmsg91.com\u002F\" rel=\"nofollow ugc\">MSG91\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fmsgwow.com\" rel=\"nofollow ugc\">MSGWOW\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.mvaayoo.com\u002F\" rel=\"nofollow ugc\">mVaayoo\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.nexmo.com\" rel=\"nofollow ugc\">Nexmo\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.plivo.com\u002F\" rel=\"nofollow ugc\">Plivo\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.routee.net\" rel=\"nofollow ugc\">Routee\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.sipdiscount.com\u002Fdashboard\" rel=\"nofollow ugc\">SIP Discount\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.smsdiscount.com\u002Fdashboard\" rel=\"nofollow ugc\">SMS Discount\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.smscountry.com\u002F\" rel=\"nofollow ugc\">SMS Country\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.smslane.com\" rel=\"nofollow ugc\">SMS Lane (Transactional SMS only)\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.solutionsinfini.com\u002F\" rel=\"nofollow ugc\">Solutions Infini\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fspringedge.com\u002F\" rel=\"nofollow ugc\">Spring Edge\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.twilio.com\u002F\" rel=\"nofollow ugc\">Twilio\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.twizo.com\" rel=\"nofollow ugc\">Twizo\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.voipbuster.com\u002Fdashboard\" rel=\"nofollow ugc\">VoipBuster\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.voipbusterpro.com\u002Fdashboard\" rel=\"nofollow ugc\">VoipBusterPro\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.voipstunt.com\u002Fdashboard\" rel=\"nofollow ugc\">VoipStunt\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Available settings for Admin to control SMS settings and gateways\u003C\u002Fli>\n\u003Cli>Customizable SMS text\u003C\u002Fli>\n\u003Cli>Send Order details ( order no, order status ) in SMS text\u003C\u002Fli>\n\u003Cli>Extended Settings Option\u003C\u002Fli>\n\u003Cli>Works with WooCommerce 2.0+\u003C\u002Fli>\n\u003Cli>All version of WordPress 4.0+ supported\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fhostandsoft.com\u002Fbranded-sms-pakistan\" rel=\"follow nofollow ugc\">Branded SMS\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Possibility to inform the owner or owners the store about new orders.\u003C\u002Fli>\n\u003Cli>Possibility to send, or not, international SMS.\u003C\u002Fli>\n\u003Cli>Possibility to notify to shipping phone number, if it’s different from the billing phone number.\u003C\u002Fli>\n\u003Cli>100% compatible with [WPML](https:\u002F\u002Fwpml.org\u002F.\u003C\u002Fli>\n\u003Cli>Support for custom order statuses.\u003C\u002Fli>\n\u003Cli>Automatically inset the international prefix number, if it’s necessary, to the customer’s phone number.\u003C\u002Fli>\n\u003Cli>Also notified by SMS the customer notes.\u003C\u002Fli>\n\u003Cli>All messages are customizable.\u003C\u002Fli>\n\u003Cli>Support for custom order numbers from \u003Ca href=\"http:\u002F\u002Fwww.woothemes.com\u002Fproducts\u002Fsequential-order-numbers-pro\u002F\" rel=\"nofollow ugc\">WooCommerce Sequential Order Numbers Pro\u003C\u002Fa> plugin.\u003C\u002Fli>\n\u003Cli>You can choose which messages to send.\u003C\u002Fli>\n\u003Cli>You can timer every X hours the message for on-hold orders.\u003C\u002Fli>\n\u003Cli>Supports a large number of variables to personalize our messages: %id%, %order_key%, %billing_first_name%, %billing_last_name%, %billing_company%, %billing_address_1%, %billing_address_2%, %billing_city%, %billing_postcode%, %billing_country%, %billing_state%, %billing_email%, %billing_phone%, %shipping_first_name%, %shipping_last_name%, %shipping_company%, %shipping_address_1%, %shipping_address_2%, %shipping_city%, %shipping_postcode%, %shipping_country%, %shipping_state%, %shipping_method%, %shipping_method_title%, %payment_method%, %payment_method_title%, %order_discount%, %cart_discount%, %order_tax%, %order_shipping%, %order_shipping_tax%, %order_total%, %status%, %prices_include_tax%, %tax_display_cart%, %display_totals_ex_tax%, %display_cart_ex_tax%, %order_date%, %modified_date%, %customer_message%, %customer_note%, %post_status%, %shop_name%, %order_product% and %note%.\u003C\u002Fli>\n\u003Cli>You can add your own custom variables.\u003C\u002Fli>\n\u003Cli>Has \u003Cem>apg_sms_message\u003C\u002Fem> filter to facilitate the customization of SMS messages from third-party plugins.\u003C\u002Fli>\n\u003Cli>Has \u003Cem>apg_sms_send_message\u003C\u002Fem> filter to prevent sending the SMS messages from third-party plugins.\u003C\u002Fli>\n\u003Cli>Has \u003Cem>apg_sms_phone_process\u003C\u002Fem> and \u003Cem>apg_sms_phone_return\u003C\u002Fem> filters to facilitate the phone number process from third-party plugins.\u003C\u002Fli>\n\u003Cli>Once setup is fully automated.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>Since \u003Cstrong>Branded SMS\u003C\u002Fstrong> is totally free, \u003Cstrong>Host & Soft\u003C\u002Fstrong> only provides payment \u003Ca href=\"https:\u002F\u002Fhostandsoft.com\u002Fcontact-us\" rel=\"nofollow ugc\">\u003Cstrong>Technical Support\u003C\u002Fstrong>\u003C\u002Fa> service. In any case \u003Cstrong>Host & Soft\u003C\u002Fstrong> provide any kind of free technical support.\u003C\u002Fp>\n\u003Ch3>Purchase Credits\u003C\u002Fh3>\n\u003Cp>Did you liked and you have proved useful \u003Cstrong>Branded SMS\u003C\u002Fstrong> on your website? We can order SMS Credits \u003Ca href=\"https:\u002F\u002Fportal.hostandsoft.com\u002Fcart.php?gid=37\" rel=\"nofollow ugc\">HERE\u003C\u002Fa> that will help us to continue improving this plugin and create more plugins totally free for the entire WordPress community.\u003C\u002Fp>\n\u003Ch3>Thanks\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>To all that use it.\u003C\u002Fli>\n\u003Cli>All that you help to improve it.\u003C\u002Fli>\n\u003Cli>All you made donations.\u003C\u002Fli>\n\u003Cli>All that you encourage us with your comments.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Thank you very much to all!\u003C\u002Fp>\n","Add to your WooCommerce store SMS notifications to your customers when order status changed.",10,2363,"2020-03-18T19:15:00.000Z","3.8",[99,100,21,22,101],"https:\u002F\u002Fhostandsoft.com\u002Fbranded-sms-pakistan\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbranded-sms.zip",{"slug":121,"name":122,"version":123,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":83,"downloaded":128,"rating":83,"num_ratings":83,"last_updated":129,"tested_up_to":130,"requires_at_least":131,"requires_php":76,"tags":132,"homepage":135,"download_link":136,"security_score":71,"vuln_count":83,"unpatched_count":83,"last_vuln_date":38,"fetched_at":30},"chat-on-desk","Chat On Desk Order Notifications – WooCommerce","1.0.8","Cozy Vision","https:\u002F\u002Fprofiles.wordpress.org\u002Fcozyvision1\u002F","\u003Cp>This is a WooCommerce add-on. By Using this plugin admin and buyer can get notification about their order via whatsapp using Chat On Desk.\u003C\u002Fp>\n\u003Cp>The WooCommerce Order Whatsapp Notification plugin for WordPress is very useful, when you want to get notified via whatsapp after placing an order. Buyer and seller both can get whatsapp notification after an order is placed. whatsapp notification options can be customized in the admin panel very easily.\u003C\u002Fp>\n\u003Cp>PS: This plugin requires an account(paid\u002Fdemo) with \u003Ca href=\"https:\u002F\u002Fwww.chatondesk.com\" rel=\"nofollow ugc\">www.chatondesk.com\u003C\u002Fa> service to send notifications. Demo account comes with some free credits to let you test it out.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>Since this plugin requires an account on www.chatondesk.com, we provide 24X7 email support for this plugin via support@cozyvision.com. For new feature requests please use wordpress \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fchat-on-desk\" rel=\"ugc\">support forum\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Translation Plugins Support\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpml.org\u002F\" rel=\"nofollow ugc\">WPML\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Floco-translate\u002F\" rel=\"ugc\">Loco Translate\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","A plugin for sending whatsapp notification after placing orders using WooCommerce",1665,"2026-04-15T02:30:00.000Z","6.7.5","4.6",[20,21,133,134],"whatsapp-plugin","woocommerce-whatsapp-integration","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fchat-on-desk\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fchat-on-desk.1.0.8.zip",{"slug":138,"name":139,"version":140,"author":141,"author_profile":142,"description":143,"short_description":144,"active_installs":83,"downloaded":145,"rating":83,"num_ratings":83,"last_updated":146,"tested_up_to":147,"requires_at_least":116,"requires_php":76,"tags":148,"homepage":149,"download_link":150,"security_score":104,"vuln_count":83,"unpatched_count":83,"last_vuln_date":38,"fetched_at":30},"citrasms-woocommerce-sms-notification","Citrasms Woocommerce SMS Notification","1.9","Citrahost","https:\u002F\u002Fprofiles.wordpress.org\u002Fcitrahost\u002F","\u003Cp>SMS notifications for the WooCommerce plugin allow you to send SMS notifications automatically for orders received at WooCommerce. Buyers and Admin can receive SMS notifications after the WooCommerce order is received. All SMS Notification texts can be customized from the wordpress admin panel.\u003C\u002Fp>\n\u003Cp>This plugin can only use SMs gateway from Citrasms.com to send SMS\u003C\u002Fp>\n\u003Cp>** Features. **\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Smsgateway using citrasms.com\u003C\u002Fli>\n\u003Cli>SMS notification when status order changes\u003C\u002Fli>\n\u003Cli>SMS notification to admin when a new order is received.\u003C\u002Fli>\n\u003Cli>SMS notification to buyers when order\u003C\u002Fli>\n\u003Cli>Facility to send Manual SMS\u003C\u002Fli>\n\u003C\u002Ful>\n","Citrasms Woocommerce SMS Notification send SMS notifications automatically for orders received at WooCommerce",3210,"2018-09-04T09:56:00.000Z","4.9.29",[99,100,21,22,101],"https:\u002F\u002Fcitrasms.com\u002Fcitrasms-woocommerce-sms-notification.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcitrasms-woocommerce-sms-notification.1.0.zip",{"attackSurface":152,"codeSignals":440,"taintFlows":539,"riskAssessment":572,"analyzedAt":586},{"hooks":153,"ajaxHandlers":414,"restRoutes":429,"shortcodes":430,"cronEvents":438,"entryPointCount":113,"unprotectedCount":439},[154,160,165,167,170,173,176,179,182,185,188,191,194,199,204,207,210,212,216,218,221,223,228,233,237,241,245,249,253,257,261,265,269,273,277,281,285,289,293,298,301,305,308,312,316,319,325,329,333,336,340,344,348,351,356,358,361,365,369,373,376,380,383,385,386,389,391,395,397,400,403,406,408,409,411],{"type":155,"name":156,"callback":157,"file":158,"line":159},"action","plugins_loaded","load_plugin_textdomain","classes\\class-farazsms-i18n.php",51,{"type":155,"name":161,"callback":162,"file":163,"line":164},"init","register_settings_options","classes\\class-farazsms-options.php",50,{"type":155,"name":161,"callback":166,"file":163,"line":159},"register_login_notify_options",{"type":155,"name":161,"callback":168,"file":163,"line":169},"register_phonebook_options",52,{"type":155,"name":161,"callback":171,"file":163,"line":172},"register_comments_options",53,{"type":155,"name":161,"callback":174,"file":163,"line":175},"register_newsletter_options",54,{"type":155,"name":161,"callback":177,"file":163,"line":178},"register_woocommerce_options",55,{"type":155,"name":161,"callback":180,"file":163,"line":181},"register_elementor_options",56,{"type":155,"name":161,"callback":183,"file":163,"line":184},"register_edd_options",57,{"type":155,"name":161,"callback":186,"file":163,"line":187},"register_aff_options",58,{"type":155,"name":161,"callback":189,"file":163,"line":190},"register_membership_options",59,{"type":155,"name":161,"callback":192,"file":163,"line":193},"register_integrations_options",60,{"type":155,"name":195,"callback":196,"file":197,"line":198},"rest_api_init","register_routes","classes\\class-farazsms-routes.php",47,{"type":155,"name":200,"callback":201,"file":202,"line":203},"wp_enqueue_scripts","enqueue_styles","classes\\class-farazsms-settings.php",44,{"type":155,"name":200,"callback":205,"file":202,"line":206},"enqueue_scripts",45,{"type":155,"name":208,"callback":208,"file":202,"line":209},"admin_enqueue_scripts",46,{"type":155,"name":208,"callback":211,"file":202,"line":198},"admin_enqueue_styles",{"type":155,"name":213,"callback":214,"file":202,"line":215},"admin_menu","init_menu",48,{"type":155,"name":217,"callback":217,"priority":193,"file":202,"line":164},"admin_bar_menu",{"type":155,"name":219,"callback":220,"file":202,"line":172},"wp_dashboard_setup","rss_meta_box",{"type":155,"name":161,"callback":222,"file":202,"line":175},"check_remaining_days",{"type":155,"name":224,"callback":225,"file":226,"line":227},"activated_plugin","farazsms_activation_redirect","farazsms.php",65,{"type":155,"name":229,"callback":230,"priority":113,"file":231,"line":232},"affwp_register_user","fsms_affwp_register_user","modules\\aff\\class-farazsms-aff.php",79,{"type":155,"name":234,"callback":235,"priority":113,"file":231,"line":236},"affwp_set_affiliate_status","fsms_affwp_set_affiliate_status",80,{"type":155,"name":238,"callback":239,"priority":113,"file":231,"line":240},"affwp_referral_accepted","fsms_affwp_referral_accepted",81,{"type":155,"name":242,"callback":243,"file":231,"line":244},"affwp_register_fields_before_tos","fsms_affwp_register_fields_before_tos",82,{"type":155,"name":246,"callback":247,"file":231,"line":248},"affwp_new_affiliate_end","fsms_affwp_new_affiliate_end",83,{"type":155,"name":250,"callback":251,"file":231,"line":252},"affwp_edit_affiliate_end","fsms_affwp_edit_affiliate_end",84,{"type":155,"name":254,"callback":255,"file":231,"line":256},"yith_wcaf_new_affiliate","fsms_yith_wcaf_register_mobile_field",87,{"type":155,"name":258,"callback":259,"file":231,"line":260},"yith_wcaf_affiliate_enabled","fsms_yith_wcaf_set_affiliate_status",88,{"type":155,"name":262,"callback":263,"priority":113,"file":231,"line":264},"yith_wcaf_commission_status_pending-payment","fsms_yith_wcaf_send_new_commission_sms",89,{"type":155,"name":266,"callback":267,"file":231,"line":268},"yith_wcaf_register_form","fsms_yith_wcaf_add_mobile_field",94,{"type":155,"name":270,"callback":271,"file":231,"line":272},"yith_wcaf_settings_form_after_payment_email","fsms_yith_wcaf_add_mobile_field_on_settings",95,{"type":155,"name":274,"callback":275,"priority":113,"file":231,"line":276},"yith_wcaf_save_affiliate_settings","fsms_yith_wcaf_register_mobile_field_settings",99,{"type":155,"name":278,"callback":279,"file":231,"line":280},"uap_register_form_before_submit_button","farazsms_uap_add_phone_field",106,{"type":155,"name":282,"callback":283,"priority":113,"file":231,"line":284},"uap_save_affiliate_action","farazsms_uap_save_phone_metadata",107,{"type":155,"name":286,"callback":287,"priority":113,"file":231,"line":288},"uap_public_action_save_referral","farazsms_uap_send_sms_on_new_referral",108,{"type":155,"name":290,"callback":291,"priority":276,"file":292,"line":209},"profile_update","fsms_user_profile_updated","modules\\digits\\class-farazsms-digits.php",{"type":155,"name":294,"callback":295,"priority":113,"file":296,"line":297},"edd_payment_view_details","fsms_edd_view_order_details","modules\\edd\\class-farazsms-edd.php",62,{"type":155,"name":299,"callback":300,"file":296,"line":27},"edd_purchase_form_user_info_fields","fsms_show_mobile_field_checkout_field",{"type":155,"name":302,"callback":303,"priority":113,"file":296,"line":304},"edd_built_order","fsms_store_mobile_meta",64,{"type":155,"name":306,"callback":307,"priority":113,"file":296,"line":227},"edd_checkout_error_checks","fsms_validate_mobile_field",{"type":155,"name":309,"callback":310,"priority":113,"file":296,"line":311},"edd_complete_purchase","fsms_edd_complete_purchase_action",66,{"type":155,"name":313,"callback":314,"file":315,"line":159},"elementor_pro\u002Fforms\u002Factions\u002Fregister","add_new_farazsms_newsletter_form_action","modules\\elementor\\class-farazsms-elementor.php",{"type":155,"name":317,"callback":318,"file":315,"line":175},"elementor\u002Fwidgets\u002Fregister","register_newsletter_widget",{"type":320,"name":321,"callback":322,"file":323,"line":324},"filter","manage_edit-comments_columns","comments_fsms_table_columns","modules\\farazsms\\core\\class-farazsms-comments.php",71,{"type":155,"name":326,"callback":327,"priority":113,"file":323,"line":328},"manage_comments_custom_column","comments_fsms_table_columns_content",72,{"type":155,"name":330,"callback":331,"file":323,"line":332},"comment_form_logged_in_after","add_mobile_field_to_comment_form",73,{"type":155,"name":334,"callback":331,"file":323,"line":335},"comment_form_after_fields",74,{"type":155,"name":337,"callback":338,"file":323,"line":339},"preprocess_comment","verify_comment_input",75,{"type":155,"name":341,"callback":342,"file":323,"line":343},"comment_post","save_mobile_field",76,{"type":320,"name":345,"callback":346,"priority":276,"file":323,"line":347},"comment_form_default_fields","disable_comment_fields",77,{"type":155,"name":349,"callback":350,"file":323,"line":236},"comment_unapproved_to_approved","send_author_sms_on_comment_approved",{"type":155,"name":352,"callback":353,"priority":354,"file":355,"line":184},"wp_login","fsms_admin_login_action",98,"modules\\farazsms\\core\\class-farazsms-login-notify.php",{"type":155,"name":352,"callback":357,"priority":276,"file":355,"line":187},"fsms_admin_roles_login_action",{"type":320,"name":359,"callback":360,"priority":276,"file":355,"line":190},"update_user_metadata","monitor_update_user_metadata",{"type":155,"name":362,"callback":363,"priority":113,"file":364,"line":198},"gform_after_submission","process_submissions","modules\\gravity-forms\\class-farazsms-gravity-forms.php",{"type":320,"name":366,"callback":367,"priority":113,"file":368,"line":311},"ihc_filter_notification_before_expire","fsms_first_notification_before_expire","modules\\membership\\class-farazsms-membership.php",{"type":155,"name":370,"callback":371,"priority":113,"file":368,"line":372},"pmpro_membership_post_membership_expiry","fsms_pmp_membership_membership_expiry",67,{"type":155,"name":161,"callback":374,"file":375,"line":209},"adminAssets","modules\\newsletter\\class-farazsms-newsletter-block.php",{"type":155,"name":377,"callback":378,"priority":113,"file":379,"line":232},"wp_insert_post","fsms_publish_post_notification","modules\\newsletter\\class-farazsms-newsletter.php",{"type":155,"name":381,"callback":382,"priority":113,"file":379,"line":236},"transition_post_status","fsms_product_published",{"type":155,"name":200,"callback":201,"file":384,"line":27},"modules\\woocommerce\\class-farazsms-woocommerce.php",{"type":155,"name":200,"callback":205,"file":384,"line":304},{"type":155,"name":387,"callback":388,"file":384,"line":227},"add_meta_boxes","add_tracking_code_meta_box",{"type":155,"name":387,"callback":390,"file":384,"line":311},"tracking_code_order_postbox",{"type":155,"name":392,"callback":393,"file":384,"line":394},"woocommerce_thankyou","woo_payment_finished",69,{"type":155,"name":161,"callback":396,"file":384,"line":13},"fsms_woo_retention_action",{"type":155,"name":398,"callback":399,"priority":113,"file":384,"line":324},"woocommerce_checkout_get_value","fsms_pre_populate_checkout_fields",{"type":320,"name":401,"callback":402,"file":384,"line":328},"woocommerce_billing_fields","fsms_woocommerce_checkout_fields",{"type":155,"name":404,"callback":405,"file":384,"line":332},"woocommerce_checkout_process","fsms_woocommerce_checkout_process",{"type":155,"name":200,"callback":201,"file":407,"line":190},"modules\\woocommerce\\order-review\\farazsms-order-review.php",{"type":155,"name":200,"callback":205,"file":407,"line":193},{"type":155,"name":161,"callback":410,"priority":276,"file":407,"line":297},"create_order_review_landing_page",{"type":155,"name":412,"callback":413,"file":407,"line":227},"woocommerce_order_status_completed","schedule_review_reminder_sms",[415,417,419,422,423,425,426,428],{"action":416,"nopriv":49,"callback":416,"hasNonce":49,"hasCapCheck":49,"file":379,"line":13},"fsms_newsletter_send_verification_code",{"action":416,"nopriv":418,"callback":416,"hasNonce":49,"hasCapCheck":49,"file":379,"line":335},true,{"action":420,"nopriv":49,"callback":421,"hasNonce":49,"hasCapCheck":49,"file":384,"line":372},"fsms_send_tracking_code_sms","send_tracking_code_sms",{"action":420,"nopriv":418,"callback":421,"hasNonce":49,"hasCapCheck":49,"file":384,"line":60},{"action":424,"nopriv":49,"callback":424,"hasNonce":49,"hasCapCheck":49,"file":384,"line":335},"fsms_send_otp_code",{"action":424,"nopriv":418,"callback":424,"hasNonce":49,"hasCapCheck":49,"file":384,"line":339},{"action":427,"nopriv":49,"callback":427,"hasNonce":49,"hasCapCheck":49,"file":407,"line":27},"farazsms_submit_order_review",{"action":427,"nopriv":418,"callback":427,"hasNonce":49,"hasCapCheck":49,"file":407,"line":304},[],[431,434],{"tag":432,"callback":433,"file":379,"line":181},"farazsms-newsletter","farazsms_newsletter",{"tag":435,"callback":436,"file":407,"line":437},"farazsms_order_review_landing_page","order_review_page",61,[],8,{"dangerousFunctions":441,"sqlUsage":442,"outputEscaping":475,"fileOperations":83,"externalRequests":531,"nonceChecks":83,"capabilityChecks":28,"bundledLibraries":535},[],{"prepared":443,"raw":444,"locations":445},9,13,[446,449,453,455,457,459,461,463,464,466,469,471,473],{"file":447,"line":244,"context":448},"classes\\class-farazsms-activator.php","$wpdb->query() with variable interpolation",{"file":450,"line":451,"context":452},"classes\\class-farazsms-base.php",229,"$wpdb->get_results() with variable interpolation",{"file":197,"line":454,"context":452},519,{"file":197,"line":456,"context":452},817,{"file":197,"line":458,"context":452},912,{"file":197,"line":460,"context":452},974,{"file":197,"line":462,"context":452},1232,{"file":364,"line":227,"context":452},{"file":379,"line":465,"context":452},291,{"file":379,"line":467,"context":468},318,"$wpdb->get_col() with variable interpolation",{"file":379,"line":470,"context":468},332,{"file":384,"line":472,"context":468},403,{"file":384,"line":474,"context":468},459,{"escaped":476,"rawEcho":477,"locations":478},135,27,[479,482,484,486,488,491,493,495,497,499,501,503,505,507,509,511,513,515,517,519,521,523,525,527,529,532,533],{"file":231,"line":480,"context":481},432,"raw output",{"file":231,"line":483,"context":481},452,{"file":231,"line":485,"context":481},494,{"file":231,"line":487,"context":481},499,{"file":489,"line":490,"context":481},"modules\\elementor\\widgets\\class-farazsms-newsletter-widget.php",687,{"file":489,"line":492,"context":481},757,{"file":489,"line":494,"context":481},819,{"file":384,"line":496,"context":481},123,{"file":384,"line":498,"context":481},130,{"file":384,"line":500,"context":481},136,{"file":384,"line":502,"context":481},137,{"file":384,"line":504,"context":481},138,{"file":384,"line":506,"context":481},143,{"file":384,"line":508,"context":481},149,{"file":384,"line":510,"context":481},152,{"file":384,"line":512,"context":481},155,{"file":384,"line":514,"context":481},208,{"file":384,"line":516,"context":481},209,{"file":384,"line":518,"context":481},213,{"file":384,"line":520,"context":481},217,{"file":384,"line":522,"context":481},218,{"file":384,"line":524,"context":481},221,{"file":384,"line":526,"context":481},228,{"file":384,"line":528,"context":481},233,{"file":530,"line":531,"context":481},"modules\\woocommerce\\order-review\\farazsms-order-review-page.php",16,{"file":530,"line":92,"context":481},{"file":530,"line":534,"context":481},31,[536],{"name":537,"version":38,"knownCves":538},"Select2",[],[540,562],{"entryPoint":541,"graph":542,"unsanitizedCount":28,"severity":561},"fsms_woocommerce_checkout_process (modules\\woocommerce\\class-farazsms-woocommerce.php:539)",{"nodes":543,"edges":558},[544,549,553],{"id":545,"type":546,"label":547,"file":384,"line":548},"n0","source","$_POST",549,{"id":550,"type":551,"label":552,"file":384,"line":548},"n1","transform","→ check_if_code_is_valid_for_woo()",{"id":554,"type":555,"label":556,"file":384,"line":472,"wp_function":557},"n2","sink","get_col() [SQLi]","get_col",[559,560],{"from":545,"to":550,"sanitized":49},{"from":550,"to":554,"sanitized":49},"high",{"entryPoint":563,"graph":564,"unsanitizedCount":28,"severity":561},"\u003Cclass-farazsms-woocommerce> (modules\\woocommerce\\class-farazsms-woocommerce.php:0)",{"nodes":565,"edges":569},[566,567,568],{"id":545,"type":546,"label":547,"file":384,"line":548},{"id":550,"type":551,"label":552,"file":384,"line":548},{"id":554,"type":555,"label":556,"file":384,"line":472,"wp_function":557},[570,571],{"from":545,"to":550,"sanitized":49},{"from":550,"to":554,"sanitized":49},{"summary":573,"deductions":574},"The \"farazsms\" v2.7.3 plugin presents a concerning security posture due to a significant number of unprotected entry points.  With 8 out of 10 identified entry points lacking proper authentication checks, an attacker could potentially leverage these to execute unauthorized actions.  Furthermore, the taint analysis revealing two flows with unsanitized paths indicates a risk of vulnerabilities, particularly given the plugin's history of Cross-Site Scripting (XSS) vulnerabilities.  While the plugin shows some strengths like a high percentage of properly escaped output and a reasonable rate of prepared SQL statements, these are overshadowed by the critical issues of unprotected AJAX handlers and unsanitized data flows.\n\nThe vulnerability history, specifically the single medium severity CVE and the reported XSS type, reinforces the concern about input sanitization. The future date of the last vulnerability (2026-01-27) is likely a data entry error, but the pattern of past issues still warrants caution.  The presence of bundled libraries like Select2, while not inherently a risk, could become one if not properly maintained and updated, though no specific vulnerability related to it is highlighted here.  In conclusion, the plugin has areas of good practice, but the high number of unprotected entry points and identified unsanitized data flows, coupled with past XSS issues, make it a moderate to high risk without further security hardening.",[575,577,579,581,584],{"reason":576,"points":92},"Unprotected AJAX handlers",{"reason":578,"points":92},"Taint analysis: Unsanitized paths",{"reason":580,"points":113},"Missing nonce checks on AJAX",{"reason":582,"points":583},"Unpatched CVE (medium severity)",15,{"reason":585,"points":94},"Large attack surface without auth","2026-03-16T18:27:10.432Z",{"wat":588,"direct":610},{"assetPaths":589,"generatorPatterns":599,"scriptPaths":600,"versionParams":601},[590,591,592,593,594,595,596,597,598],"\u002Fwp-content\u002Fplugins\u002Ffarazsms\u002Fassets\u002Fcss\u002Ffarazsms-newsletter.css","\u002Fwp-content\u002Fplugins\u002Ffarazsms\u002Fassets\u002Fjs\u002Ffarazsms-newsletter.js","\u002Fwp-content\u002Fplugins\u002Ffarazsms\u002Fbuild\u002Findex.css","\u002Fwp-content\u002Fplugins\u002Ffarazsms\u002Fassets\u002Fjs\u002Freact-multi-date-picker.js","\u002Fwp-content\u002Fplugins\u002Ffarazsms\u002Fbuild\u002Findex.js","\u002Fwp-content\u002Fplugins\u002Ffarazsms\u002Fassets\u002Fjs\u002Fjquery.validate.min.js","\u002Fwp-content\u002Fplugins\u002Ffarazsms\u002Fassets\u002Fjs\u002Fselect2.min.js","\u002Fwp-content\u002Fplugins\u002Ffarazsms\u002Fassets\u002Fcss\u002Ffarazsms-tracking-code.css","\u002Fwp-content\u002Fplugins\u002Ffarazsms\u002Fassets\u002Fjs\u002Ffarazsms-tracking-code.js",[],[591,593,594,595,596,598],[602,603,604,605,606,607,608,609],"?ver=2.7.3","react-multi-date-picker.js?ver=2.7.3","index.css?ver=2.7.3","index.js?ver=2.7.3","jquery.validate.min.js?ver=2.7.3","select2.min.js?ver=2.7.3","farazsms-tracking-code.css?ver=2.7.3","farazsms-tracking-code.js?ver=2.7.3",{"cssClasses":611,"htmlComments":613,"htmlAttributes":614,"restEndpoints":616,"jsGlobals":626,"shortcodeOutput":629},[612],"farazsms-tracking-code-wrapper",[],[615],"id=\"farazsms-wrap\"",[617,618,619,620,621,622,623,624,625],"\u002Fwp-json\u002Ffarazsms\u002Fv1\u002Fsettings","\u002Fwp-json\u002Ffarazsms\u002Fv1\u002Fget-all-shortcodes","\u002Fwp-json\u002Ffarazsms\u002Fv1\u002Fget-sms-templates","\u002Fwp-json\u002Ffarazsms\u002Fv1\u002Fget-phonebooks","\u002Fwp-json\u002Ffarazsms\u002Fv1\u002Fget-credit","\u002Fwp-json\u002Ffarazsms\u002Fv1\u002Fget-sms-settings","\u002Fwp-json\u002Ffarazsms\u002Fv1\u002Fget-emails","\u002Fwp-json\u002Ffarazsms\u002Fv1\u002Fget-webhooks","\u002Fwp-json\u002Ffarazsms\u002Fv1\u002Fget-shortcode-by-id",[627,628],"fsms_ajax_object","farazsmsJsObject",[],{"error":418,"url":631,"statusCode":632,"statusMessage":633,"message":633},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Ffarazsms\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":635,"versions":636},6,[637,643,651,659,667,675],{"version":6,"download_url":26,"svn_tag_url":638,"released_at":38,"has_diff":49,"diff_files_changed":639,"diff_lines":38,"trac_diff_url":640,"vulnerabilities":641,"is_current":418},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Ffarazsms\u002Ftags\u002F2.7.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ffarazsms%2Ftags%2F2.7.2&new_path=%2Ffarazsms%2Ftags%2F2.7.3",[642],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":644,"download_url":645,"svn_tag_url":646,"released_at":38,"has_diff":49,"diff_files_changed":647,"diff_lines":38,"trac_diff_url":648,"vulnerabilities":649,"is_current":49},"2.7.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffarazsms.2.7.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ffarazsms\u002Ftags\u002F2.7.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ffarazsms%2Ftags%2F2.7.1&new_path=%2Ffarazsms%2Ftags%2F2.7.2",[650],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":652,"download_url":653,"svn_tag_url":654,"released_at":38,"has_diff":49,"diff_files_changed":655,"diff_lines":38,"trac_diff_url":656,"vulnerabilities":657,"is_current":49},"2.7.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffarazsms.2.7.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ffarazsms\u002Ftags\u002F2.7.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ffarazsms%2Ftags%2F2.7.0&new_path=%2Ffarazsms%2Ftags%2F2.7.1",[658],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":660,"download_url":661,"svn_tag_url":662,"released_at":38,"has_diff":49,"diff_files_changed":663,"diff_lines":38,"trac_diff_url":664,"vulnerabilities":665,"is_current":49},"2.7.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffarazsms.2.7.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ffarazsms\u002Ftags\u002F2.7.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ffarazsms%2Ftags%2F2.6.0&new_path=%2Ffarazsms%2Ftags%2F2.7.0",[666],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":668,"download_url":669,"svn_tag_url":670,"released_at":38,"has_diff":49,"diff_files_changed":671,"diff_lines":38,"trac_diff_url":672,"vulnerabilities":673,"is_current":49},"2.6.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffarazsms.2.6.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ffarazsms\u002Ftags\u002F2.6.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ffarazsms%2Ftags%2F2.5.2&new_path=%2Ffarazsms%2Ftags%2F2.6.0",[674],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":676,"download_url":677,"svn_tag_url":678,"released_at":38,"has_diff":49,"diff_files_changed":679,"diff_lines":38,"trac_diff_url":38,"vulnerabilities":680,"is_current":49},"2.5.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffarazsms.2.5.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ffarazsms\u002Ftags\u002F2.5.2\u002F",[],[681],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38}]