[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAwL5N6fmmWsjEw8WlIYfllcZ98VYk_eHz0O2MFg64dQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":39,"analysis":111,"fingerprints":219},"gamipress-transfers-notes","GamiPress – Transfers Notes","1.0.0","Ruben Garcia","https:\u002F\u002Fprofiles.wordpress.org\u002Frubengc\u002F","\u003Cp>GamiPress – Transfers Notes adds the ability to your users to leave notes about their transfer on the \u003Ca href=\"https:\u002F\u002Fgamipress.com\u002Fadd-ons\u002Fgamipress-transfers\u002F\" title=\"GamiPress - Transfers\" rel=\"nofollow ugc\">GamiPress – Transfers\u003C\u002Fa> add-on!\u003C\u002Fp>\n\u003Ch4>New Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>“notes” attribute on transfer shortcodes (Accepts yes or no, by default no).\u003C\u002Fli>\n\u003Cli>“Notes” field on transfers blocks and widgets (By default the field is unchecked).\u003C\u002Fli>\n\u003Cli>“Notes” section on transfer details (on the [gamipress_transfer_history] shortcode).\u003C\u002Fli>\n\u003Cli>“User Notes” field on the tarnsfer edit screen.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Note: By default the notes option is deactivated on all shortcodes, blocks and widgets. You need to update the shortcodes by adding the required attribute (for example: [gamipress_points_transfer notes=”yes”]) and on blocks and widgets checking the “Notes” field.\u003C\u002Fp>\n\u003Cp>Important: This plugin requires \u003Ca href=\"https:\u002F\u002Fgamipress.com\u002Fadd-ons\u002Fgamipress-transfers\u002F\" title=\"GamiPress - Transfers\" rel=\"nofollow ugc\">GamiPress – Transfers\u003C\u002Fa> add-on.\u003C\u002Fp>\n","Add a textarea on Transfers add-on forms where users can leave notes about their transfer.",70,4332,100,1,"2025-12-01T16:01:00.000Z","5.7.15","4.4","",[20,21,22,23,24],"gamification","gamipress","notes","transfer","transfers","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgamipress-transfers-notes","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgamipress-transfers-notes.1.0.0.zip",0,null,"2026-03-15T15:16:48.613Z",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":35,"avg_patch_time_days":36,"trust_score":37,"computed_at":38},"rubengc",30,24720,99,139,78,"2026-04-04T15:38:23.257Z",[40,59,73,87,98],{"slug":41,"name":42,"version":43,"author":7,"author_profile":8,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":17,"requires_php":18,"tags":52,"homepage":56,"download_link":57,"security_score":35,"vuln_count":49,"unpatched_count":27,"last_vuln_date":58,"fetched_at":29},"gamipress-button","GamiPress – Button","1.0.9","\u003Cp>GamiPress – Button let’s you add activity triggers filtered by button clicks adding new activity events on \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgamipress\u002F\" title=\"GamiPress\" rel=\"ugc\">GamiPress\u003C\u002Fa>!\u003C\u002Fp>\n\u003Cp>Note: This add-on is designed to award users for button clicks, if you want to award them for link clicks, then you should check the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgamipress-link\u002F\" title=\"GamiPress - Link\" rel=\"ugc\">GamiPress – Link\u003C\u002Fa> add-on.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FIW9ZcGaWDBM?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch4>New Events\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Click any button: When a user clicks on any button.\u003C\u002Fli>\n\u003Cli>Click a button with a specific ID: When a user clicks on any button with a specific identifier (button id attribute).\u003C\u002Fli>\n\u003Cli>Click a button with a specific Class: When a user clicks on any button with a specific class (button class attribute).\u003C\u002Fli>\n\u003Cli>Get a click on any button: When the post\u002Fcomment author gets clicks on any button.\u003C\u002Fli>\n\u003Cli>Get a click on a button with a specific ID: When the post\u002Fcomment author gets clicks on any button with a specific identifier (button id attribute).\u003C\u002Fli>\n\u003Cli>Get a click on a button with a specific Class: When the post\u002Fcomment author gets clicks on any button with a specific class (button class attribute).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Important: The unique buttons that trigger this activities are the buttons generated by [gamipress_button] shortcode.\u003C\u002Fp>\n","Add activity events based on button clicks generated by [gamipress_button]",1000,20300,60,2,"2025-12-01T15:58:00.000Z","6.9.4",[53,54,20,55,21],"button","click","gamify","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgamipress-button\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgamipress-button.1.0.9.zip","2024-03-19 00:00:00",{"slug":60,"name":61,"version":62,"author":7,"author_profile":8,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":13,"num_ratings":49,"last_updated":67,"tested_up_to":51,"requires_at_least":17,"requires_php":18,"tags":68,"homepage":70,"download_link":71,"security_score":35,"vuln_count":14,"unpatched_count":27,"last_vuln_date":72,"fetched_at":29},"gamipress-link","GamiPress – Link","1.1.5","\u003Cp>GamiPress – Link let’s you add activity triggers filtered by link clicks adding new activity events on \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgamipress\u002F\" title=\"GamiPress\" rel=\"ugc\">GamiPress\u003C\u002Fa>!\u003C\u002Fp>\n\u003Cp>Note: This add-on is designed to award users for link clicks, if you want to award them for button clicks, then you should check the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgamipress-button\u002F\" title=\"GamiPress - Button\" rel=\"ugc\">GamiPress – Button\u003C\u002Fa> add-on.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fram4nUN9bHs?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch4>New Events\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Click any link: When an user clicks on any link.\u003C\u002Fli>\n\u003Cli>Click a link with a specific URL: When an user clicks on any link with a specific URL.\u003C\u002Fli>\n\u003Cli>Click a link with a specific ID: When an user clicks on any link with a specific identifier (link id attribute).\u003C\u002Fli>\n\u003Cli>Click a link with a specific Class: When an user clicks on any link with a specific class (link class attribute).\u003C\u002Fli>\n\u003Cli>Get a click on any link: When the post\u002Fcomment author gets clicks on any link.\u003C\u002Fli>\n\u003Cli>Get a click on a link with a specific URL: When the post\u002Fcomment author gets clicks on any link with a specific URL.\u003C\u002Fli>\n\u003Cli>Get a click on a link with a specific ID: When the post\u002Fcomment author gets clicks on any link with a specific identifier (link id attribute).\u003C\u002Fli>\n\u003Cli>Get a click on a link with a specific Class: When the post\u002Fcomment author gets clicks on any link with a specific class (link class attribute).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Important: The unique links that trigger this activities are the links generated by [gamipress_link] shortcode.\u003C\u002Fp>\n","Add activity events based on link clicks generated by [gamipress_link]",900,22584,"2025-12-01T16:00:00.000Z",[54,20,55,21,69],"link","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgamipress-link\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgamipress-link.1.1.5.zip","2024-06-04 20:43:51",{"slug":74,"name":75,"version":43,"author":7,"author_profile":8,"description":76,"short_description":77,"active_installs":78,"downloaded":79,"rating":27,"num_ratings":27,"last_updated":80,"tested_up_to":81,"requires_at_least":17,"requires_php":18,"tags":82,"homepage":85,"download_link":86,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"gamipress-leaderboards-include-exclude-users","GamiPress – Leaderboards Include\u002FExclude Users","\u003Cp>GamiPress – Leaderboards Include\u002FExclude Users let’s you include and\u002For exclude users that will be ranked on a \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgamipress\u002F\" title=\"GamiPress\" rel=\"ugc\">GamiPress\u003C\u002Fa> leaderboard!\u003C\u002Fp>\n\u003Cp>In addition, plugin includes settings to include and\u002For exclude users by role.\u003C\u002Fp>\n\u003Cp>Important: This plugin requires \u003Ca href=\"https:\u002F\u002Fgamipress.com\u002Fadd-ons\u002Fgamipress-leaderboards\u002F\" title=\"GamiPress - Leaderboards\" rel=\"nofollow ugc\">GamiPress – Leaderboards\u003C\u002Fa> add-on.\u003C\u002Fp>\n","Include or exclude specific users or roles on any leaderboard.",500,14838,"2025-12-01T15:59:00.000Z","6.1.10",[83,20,55,21,84],"achievement","point","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgamipress-leaderboards-include-exclude-users","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgamipress-leaderboards-include-exclude-users.1.0.9.zip",{"slug":88,"name":89,"version":90,"author":7,"author_profile":8,"description":91,"short_description":92,"active_installs":93,"downloaded":94,"rating":13,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":17,"requires_php":18,"tags":95,"homepage":96,"download_link":97,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"gamipress-block-users","GamiPress – Block Users","1.0.2","\u003Cp>GamiPress – Block Users let’s you block users and roles from getting awarded through the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgamipress\u002F\" title=\"GamiPress\" rel=\"ugc\">GamiPress\u003C\u002Fa> awards engine!\u003C\u002Fp>\n\u003Cp>In addition, blocked users activity won’t be registered on logs what makes it ideal for stop registering and awarding undesired user roles like site administrators.\u003C\u002Fp>\n","Block users and roles from getting awarded through the GamiPress awards engine",400,10544,[83,20,55,21,84],"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgamipress-block-users\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgamipress-block-users.1.0.2.zip",{"slug":99,"name":100,"version":43,"author":7,"author_profile":8,"description":101,"short_description":102,"active_installs":103,"downloaded":104,"rating":13,"num_ratings":14,"last_updated":50,"tested_up_to":51,"requires_at_least":17,"requires_php":18,"tags":105,"homepage":109,"download_link":110,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"gamipress-activity-by-category","GamiPress – Activity by Category","\u003Cp>GamiPress – Activity by Category let’s you add activity events filtered by post category adding new activity events on \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgamipress\u002F\" title=\"GamiPress\" rel=\"ugc\">GamiPress\u003C\u002Fa>!\u003C\u002Fp>\n\u003Ch4>New Events\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Publish a post on a specific category: When an user publish a post on a specific category.\u003C\u002Fli>\n\u003Cli>Comment on a post of a specific category: When an user comments on a post of a specific category.\u003C\u002Fli>\n\u003Cli>Daily visit a post of a specific category: When an user daily visits a post of a specific category.\u003C\u002Fli>\n\u003Cli>Get visits on any post of a specific category: When a content author gets visits on a post of a specific category.\u003C\u002Fli>\n\u003C\u002Ful>\n","Setup activity triggers by post categories on GamiPress",300,11797,[106,20,21,107,108],"category","taxonomy","term","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgamipress-activity-by-category\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgamipress-activity-by-category.1.0.9.zip",{"attackSurface":112,"codeSignals":185,"taintFlows":207,"riskAssessment":208,"analyzedAt":218},{"hooks":113,"ajaxHandlers":181,"restRoutes":182,"shortcodes":183,"cronEvents":184,"entryPointCount":27,"unprotectedCount":27},[114,119,123,129,133,139,144,147,150,154,157,160,164,166,169,173,177],{"type":115,"name":116,"callback":116,"file":117,"line":118},"action","admin_notices","gamipress-transfers-notes.php",102,{"type":115,"name":120,"callback":121,"file":117,"line":122},"plugins_loaded","GamiPress_Transfers_Notes",218,{"type":124,"name":125,"callback":126,"file":127,"line":128},"filter","gamipress_automatic_updates_plugins","gamipress_transfers_notes_automatic_updates","includes\\admin.php",26,{"type":115,"name":130,"callback":131,"file":127,"line":132},"cmb2_admin_init","gamipress_transfers_notes_transfers_meta_boxes",53,{"type":115,"name":134,"callback":135,"priority":136,"file":137,"line":138},"gamipress_transfers_after_transfer_details_items","gamipress_transfer_notes_transfer_details",10,"includes\\transfer-details.php",52,{"type":124,"name":140,"callback":141,"file":142,"line":143},"gamipress_gamipress_points_transfer_shortcode_fields","gamipress_transfers_notes_transfer_shortcode_fields","includes\\transfer.php",32,{"type":124,"name":145,"callback":141,"file":142,"line":146},"gamipress_gamipress_achievement_transfer_shortcode_fields",34,{"type":124,"name":148,"callback":141,"file":142,"line":149},"gamipress_gamipress_rank_transfer_shortcode_fields",36,{"type":124,"name":151,"callback":152,"file":142,"line":153},"gamipress_gamipress_points_transfer_shortcode_tabs","gamipress_transfers_notes_transfer_shortcode_tabs",54,{"type":124,"name":155,"callback":152,"file":142,"line":156},"gamipress_gamipress_achievement_transfer_shortcode_tabs",56,{"type":124,"name":158,"callback":152,"file":142,"line":159},"gamipress_gamipress_rank_transfer_shortcode_tabs",58,{"type":124,"name":161,"callback":162,"file":142,"line":163},"gamipress_points_transfer_shortcode_defaults","gamipress_transfers_notes_transfer_shortcode_defaults",76,{"type":124,"name":165,"callback":162,"file":142,"line":37},"gamipress_achievement_transfer_shortcode_defaults",{"type":124,"name":167,"callback":162,"file":142,"line":168},"gamipress_rank_transfer_shortcode_defaults",80,{"type":115,"name":170,"callback":171,"priority":136,"file":142,"line":172},"gamipress_transfers_before_points_transfer_form_total","gamipress_transfers_notes_points_transfer_template",147,{"type":115,"name":174,"callback":175,"priority":136,"file":142,"line":176},"gamipress_transfers_before_rank_transfer_form_submit","gamipress_transfers_notes_achievement_rank_transfer_template",162,{"type":124,"name":178,"callback":179,"priority":136,"file":142,"line":180},"gamipress_transfers_process_transfer_response","gamipress_transfers_notes_process_transfer_response",199,[],[],[],[],{"dangerousFunctions":186,"sqlUsage":187,"outputEscaping":189,"fileOperations":27,"externalRequests":27,"nonceChecks":27,"capabilityChecks":27,"bundledLibraries":206},[],{"prepared":27,"raw":27,"locations":188},[],{"escaped":27,"rawEcho":190,"locations":191},7,[192,195,197,199,201,202,204],{"file":137,"line":193,"context":194},44,"raw output",{"file":137,"line":196,"context":194},47,{"file":142,"line":198,"context":194},112,{"file":142,"line":200,"context":194},114,{"file":142,"line":200,"context":194},{"file":142,"line":203,"context":194},117,{"file":142,"line":205,"context":194},119,[],[],{"summary":209,"deductions":210},"The gamipress-transfers-notes v1.0.0 plugin exhibits a seemingly secure static analysis profile, with no identified AJAX handlers, REST API routes, shortcodes, or cron events exposed, and no dangerous functions or file operations detected. The absence of external HTTP requests and the exclusive use of prepared statements for SQL queries are positive indicators. However, a significant concern arises from the complete lack of output escaping, with 0% of the 7 detected outputs being properly escaped. This leaves the plugin vulnerable to Cross-Site Scripting (XSS) attacks, as user-supplied data or data processed by the plugin could be injected and executed in a user's browser. Furthermore, the complete absence of nonce and capability checks across all entry points (even though there are none identified) is a methodological weakness that, if the attack surface were to grow, would represent a critical security gap. The vulnerability history is clean, with no known CVEs, which is a positive sign, but it does not mitigate the current risks identified in the code analysis.  The plugin's strengths lie in its minimal attack surface and its SQL handling, but the severe lack of output escaping and the absence of crucial security checks present clear and actionable risks.",[211,213,216],{"reason":212,"points":190},"Output escaping is missing",{"reason":214,"points":215},"No nonce checks",5,{"reason":217,"points":215},"No capability checks","2026-03-16T21:38:39.712Z",{"wat":220,"direct":229},{"assetPaths":221,"generatorPatterns":224,"scriptPaths":225,"versionParams":226},[222,223],"\u002Fwp-content\u002Fplugins\u002Fgamipress-transfers-notes\u002Fassets\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fgamipress-transfers-notes\u002Fassets\u002Fjs\u002Fadmin.js",[],[223],[227,228],"\u002Fwp-content\u002Fplugins\u002Fgamipress-transfers-notes\u002Fassets\u002Fcss\u002Fadmin.css?ver=","\u002Fwp-content\u002Fplugins\u002Fgamipress-transfers-notes\u002Fassets\u002Fjs\u002Fadmin.js?ver=",{"cssClasses":230,"htmlComments":233,"htmlAttributes":234,"restEndpoints":238,"jsGlobals":239,"shortcodeOutput":240},[231,232],"gamipress-transfer-notes-notes","gamipress-transfer-notes",[],[235,236,237],"data-fieldtype=\"textarea\"","id=\"_gamipress_transfers_notes_notes\"","name=\"_gamipress_transfers_notes_notes\"",[],[],[]]