[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feRRl1f5sfQlcLZzuBy4osGLvqvglHdiCbGRY8ladflM":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":37,"analysis":128,"fingerprints":424},"gatelink-manager","GateLink Manager – Secure One‑Click Admin Login & WordPress SSO","1.8.3","NUMAN RASHEED","https:\u002F\u002Fprofiles.wordpress.org\u002Fnumanrki\u002F","\u003Cp>\u003Cstrong>GateLink Manager\u003C\u002Fstrong> pairs with the companion GateLink Client to deliver secure, zero‑config single sign‑on for WordPress. Skip copying credentials across sites: connect your hub to client sites and teleport into their dashboards with a single click. Whether you’re a developer, freelancer or agency managing many installations, GateLink saves time and reduces risk by using cryptographically signed links that expire within minutes.\u003C\u002Fp>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Zero‑config, one‑click login\u003C\u002Fstrong> – Jump straight into any connected site’s wp‑admin without passwords.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Passwordless SSO & HMAC security\u003C\u002Fstrong> – Each login URL is HMAC‑signed and valid for only a short time.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multi‑site management\u003C\u002Fstrong> – Add, edit, delete, verify and log in to client sites from a single dashboard.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Free plan included\u003C\u002Fstrong> – Manage up to 3 sites at no cost; upgrade to Pro (20 sites) or Business (unlimited) when needed.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Built‑in logs & metrics\u003C\u002Fstrong> – View connection history and lightweight stats right from the dashboard.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Modern UI\u003C\u002Fstrong> – Responsive admin interface styled with Tailwind, tuned for accessibility and ease of use.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How It Works\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\u003Cstrong>Add a site\u003C\u002Fstrong> – Enter the client’s base URL on your Manager dashboard.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Share a token\u003C\u002Fstrong> – Create or paste the Shared Token in Manager; paste the same token in the Client’s “Trusted Manager” screen.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Verify & trust\u003C\u002Fstrong> – Click \u003Cstrong>Verify\u003C\u002Fstrong> to perform a health check and establish trust.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Login\u003C\u002Fstrong> – Click \u003Cstrong>Login\u003C\u002Fstrong>; a short‑lived, HMAC‑signed URL opens the client site in a new tab, validates the signature and redirects to \u003Ccode>\u002Fwp-admin\u003C\u002Fcode>.  \u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Security & Privacy\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Cryptographically signed tokens\u003C\u002Fstrong> – All login links use HMAC‑SHA256 signatures with nonce‑based replay protection.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Time‑limited links\u003C\u002Fstrong> – Tokens expire after a few minutes to reduce attack windows.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>No stored credentials\u003C\u002Fstrong> – GateLink never stores your admin passwords; only minimal metadata and logs are kept locally.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>HTTPS required\u003C\u002Fstrong> – Both Manager and Client sites must run over HTTPS; allow‑list the login query parameters (\u003Ccode>gatelink_login\u003C\u002Fcode>, \u003Ccode>cid\u003C\u002Fcode>, \u003Ccode>ts\u003C\u002Fcode>, \u003Ccode>sig\u003C\u002Fcode>) in security\u002FCDN tools if necessary.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Plans & Licensing\u003C\u002Fh3>\n\u003Cp>GateLink is free to use for up to three client sites. Professional and Business plans unlock higher site limits and additional support options. Licensing is handled through Freemius; no license key is required for the free tier.\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>GateLink communicates only with other WordPress sites that have the GateLink Client plugin installed. Data exchanged includes site URLs, shared tokens, and connection timestamps. Licensing and support are provided via the Freemius service; activating a paid license sends your site domain, license key, and environment info to Freemius for validation.\u003C\u002Fp>\n","Secure, passwordless admin access for multiple WordPress sites—one‑click, HMAC‑signed SSO for remote wp‑admin login.",50,541,0,"2025-10-14T13:42:00.000Z","6.8.5","6.3","8.0",[19,20,21,22,23],"admin-access","multi-site","one-click-login","passwordless","single-sign-on","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgatelink-manager.1.8.3.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":34,"avg_patch_time_days":35,"trust_score":34,"computed_at":36},"numanrki",3,550,99,1,"2026-04-04T14:29:09.230Z",[38,49,70,88,105],{"slug":39,"name":40,"version":6,"author":7,"author_profile":8,"description":41,"short_description":42,"active_installs":13,"downloaded":43,"rating":13,"num_ratings":13,"last_updated":44,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":45,"homepage":24,"download_link":48,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"gatelink-client","GateLink Client – Passwordless SSO & One‑Click Admin Access","\u003Cp>\u003Cstrong>GateLink Client\u003C\u002Fstrong> is the receiving end of the GateLink ecosystem. It pairs with \u003Cstrong>GateLink Manager\u003C\u002Fstrong> to deliver instant, passwordless admin access to your WordPress sites. Once installed and trusted, it accepts HMAC‑signed login links from your Manager site, validates them, and redirects the user straight to wp‑admin—no passwords, no hassle. Designed for developers, freelancers and site admins who maintain multiple installations, GateLink Client makes it easy to manage trust relationships and keep your sites secure.\u003C\u002Fp>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Trust Management\u003C\u002Fstrong> – Explicitly approve or revoke which Manager sites can access your admin.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Quick Connect & Manual Pairing\u003C\u002Fstrong> – Choose between instant pairing or manual shared token setup for finer control.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>HMAC‑Signed Security\u003C\u002Fstrong> – Enforces HMAC‑SHA256 signatures with TTL and replay protection for every login URL.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Health Monitoring\u003C\u002Fstrong> – Provides a REST endpoint for status checks, so you know when connections are healthy.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Activity Logs\u003C\u002Fstrong> – Tracks connection attempts and logins for auditing and troubleshooting.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Accessible Admin Interface\u003C\u002Fstrong> – Built with modern design and accessibility support for a seamless user experience.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How It Works\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\u003Cstrong>Establish Trust\u003C\u002Fstrong> – Generate a Shared Token in the Manager and paste it under \u003Cstrong>GateLink Client \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Trusted Manager\u003C\u002Fstrong>.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Validate Links\u003C\u002Fstrong> – When the Manager issues a login link, the Client verifies the HMAC signature and checks the timestamp.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Automatic Login\u003C\u002Fstrong> – Upon successful validation, the user is logged into wp‑admin without needing credentials.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Expire & Revoke\u003C\u002Fstrong> – Links expire after two minutes and can only be used once; you can revoke trust anytime via the admin interface.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Security & Privacy\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Short‑lived Tokens\u003C\u002Fstrong> – Login URLs are valid for only a couple of minutes to minimize exposure.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Server‑Side Signing\u003C\u002Fstrong> – All signatures are generated on the Manager; the Client never stores admin passwords.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>HTTPS Recommended\u003C\u002Fstrong> – Run both Manager and Client over HTTPS and avoid caching login requests.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Peer‑to‑Peer Communication\u003C\u002Fstrong> – The Client only exchanges data (site info, tokens, timestamps) with your Manager sites; no third parties are involved.\u003C\u002Fli>\n\u003C\u002Ful>\n","Secure, zero‑config SSO for WordPress sites—validate HMAC‑signed links and log users into wp‑admin automatically.",159,"2025-10-17T08:15:00.000Z",[46,21,22,47,23],"admin-login","security","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgatelink-client.1.8.3.zip",{"slug":50,"name":51,"version":52,"author":53,"author_profile":54,"description":55,"short_description":56,"active_installs":57,"downloaded":58,"rating":13,"num_ratings":13,"last_updated":24,"tested_up_to":59,"requires_at_least":60,"requires_php":61,"tags":62,"homepage":67,"download_link":68,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":69},"magic-link","Magic Link – Secure one click passwordless login","1.2.3","KaizenCoders","https:\u002F\u002Fprofiles.wordpress.org\u002Fkaizencoders\u002F","\u003Cp>Say goodbye to forgotten passwords. Enable a secure, passwordless login experience for your WordPress site using email, SMS, or QR code magic links.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Magic Link\u003C\u002Fstrong> makes traditional passwords a thing of the past. Instead of logging in with a username and password, users can log in simply by clicking a secure link sent to their email or phone. It’s quick, safe, and incredibly user-friendly.\u003C\u002Fp>\n\u003Cp>Perfect for membership sites, WooCommerce stores, community forums, or any site that wants to simplify user authentication.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Core Benefits\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>👉 \u003Cstrong>Passwordless Login\u003C\u002Fstrong>\u003Cbr \u002F>\n  No more password resets or weak password risks.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Email Magic Links\u003C\u002Fstrong>\u003Cbr \u002F>\n  A unique, expirable login link is emailed to users.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Force Magic Link Login\u003C\u002Fstrong>\u003Cbr \u002F>\n  Option to set Magic Link the default login method.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Auto-login Links\u003C\u002Fstrong>\u003Cbr \u002F>\n  Automatically log in users via links in notification emails for quicker actions.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>User-Friendly UX\u003C\u002Fstrong>\u003Cbr \u002F>\n  Especially helpful for non-technical users or mobile-first visitors.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Redirect After Login\u003C\u002Fstrong>\u003Cbr \u002F>\n  Send users to a specific page after they log in.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Create Magic Link for any user\u003C\u002Fstrong>\u003Cbr \u002F>\n  Admin can create Magic Link for any user.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>List All Magic Links\u003C\u002Fstrong>\u003Cbr \u002F>\n  Admin can view all generated Magic Links.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Bulk Delete Magic Links\u003C\u002Fstrong>\u003Cbr \u002F>\n  Select multiple Magic Links and delete in bulk.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Shortcode Support\u003C\u002Fstrong>\u003Cbr \u002F>\n  Add magic link login forms anywhere on your site with \u003Ccode>[magic-link]\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Customizable Expiry\u003C\u002Fstrong>\u003Cbr \u002F>\n  Set how long magic links remain valid (minutes, hours, days).\u003C\u002Fp>\n\u003Cp>👉\u003Cstrong>CLI Ready\u003C\u002Fstrong>\u003Cbr \u002F>\n  Control plugin settings and features via WP-CLI.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Fully Configurable [Coming Soon]\u003C\u002Fstrong>\u003Cbr \u002F>\n  Export\u002Fimport\u002Freset settings with ease.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>GDPR Compliant\u003C\u002Fstrong>\u003Cbr \u002F>\n  No personal data is stored beyond what WordPress already collects.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>🔐 Pro Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>👉 \u003Cstrong>Login URL Redirection\u003C\u002Fstrong>\u003Cbr \u002F>\n  Redirect users to specific pages after login\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Role based redirection\u003C\u002Fstrong>\u003Cbr \u002F>\n  Redirect users to specific pages after login\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Login Attempt Limits\u003C\u002Fstrong>\u003Cbr \u002F>\n  Set limits on magic link generation\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Custom Email Templates\u003C\u002Fstrong>\u003Cbr \u002F>\n  Customize email design and content.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Improved Security\u003C\u002Fstrong>\u003Cbr \u002F>\n  Avoid brute-force attacks and phishing risks related to password use.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>IP Control\u003C\u002Fstrong>\u003Cbr \u002F>\n  Enhance the security by restricting users to login from the same IP address that requested the link.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Login Request Throttling\u003C\u002Fstrong>\u003Cbr \u002F>\n  Limit login URL generation for the given time span.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Brute Force Protection\u003C\u002Fstrong>\u003Cbr \u002F>\n  Limit rate of login attempts and block IP temporarily.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Domain Restriction\u003C\u002Fstrong>\u003Cbr \u002F>\n  Restrict email domains that can use the magic link login feature.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Bulk Actions: Expire, Used Links\u003C\u002Fstrong>\u003Cbr \u002F>\n  Mark Magic Links as \u003Ccode>Expired\u003C\u002Fcode>, \u003Ccode>Used\u003C\u002Fcode> in bulk.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Support \u003Ccode>{magic-link}\u003C\u002Fcode> merge tag\u003C\u002Fstrong>\u003Cbr \u002F>\n  One can use \u003Ccode>{magic-link}\u003C\u002Fcode> merge tag in outgoing emails to auto generate Magic Link for the recipient. Useful for quick checkout, quick access to courses and other usecases where login is required.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>SMS Magic Links [Coming Soon]\u003C\u002Fstrong>\u003Cbr \u002F>\n  Send login links via SMS text messages.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>QR Code Login [Coming Soon]\u003C\u002Fstrong>\u003Cbr \u002F>\n  Generate QR codes for easy mobile login.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Device Restrictions [Coming Soon]\u003C\u002Fstrong>\u003Cbr \u002F>\n  Limit logins to specific devices\u002Fbrowsers.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Role-Based Access [Coming Soon]\u003C\u002Fstrong>\u003Cbr \u002F>\n  Control which user roles can use magic links.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Analytics & Reporting [Coming Soon]\u003C\u002Fstrong>\u003Cbr \u002F>\n  Track magic link usage and patterns.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Priority Support\u003C\u002Fstrong>\u003Cbr \u002F>\n  Get expert help when you need it.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>Integrations\u003C\u002Fh3>\n\u003Cblockquote>\n\u003Cp>👉 \u003Cstrong>WooCommerce Integration\u003C\u002Fstrong>\u003Cbr \u002F>\n  Seamless checkout experience for returning customers.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>How It Works\u003C\u002Fh3>\n\u003Col>\n\u003Cli>A user enters their email address on the login screen.\u003C\u002Fli>\n\u003Cli>A one-time, time-sensitive login link is emailed to them.\u003C\u002Fli>\n\u003Cli>They click the link and are instantly logged into your site — no password needed!\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cp>Does Magic Link speak your language? If not, \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fmagic-link\u002F\" rel=\"nofollow ugc\">translate “Magic Link” into your language\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>DO YOU HAVE ANY QUESTIONS\u002F FEEDBACK\u002F FEATURE REQUEST\u002F BUG REPORT❓\u003C\u002Fh3>\n\u003Cp>Feel free to create a ticket \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fmagic-link\u002F\" rel=\"ugc\">here\u003C\u002Fa>. We love to communicate with you and reply to all your queries.\u003C\u002Fp>\n\u003Ch3>Spread The Word ❤️\u003C\u002Fh3>\n\u003Cp>If you like Magic Link, please leave us a \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fmagic-link\u002Freviews\u002F#new-post\" rel=\"ugc\">⭐⭐⭐⭐⭐\u003C\u002Fa> review and also spread the word about it via Facebook and Twitter. That helps fellow website owners assess Social Linkz easily and benefit from it!\u003C\u002Fp>\n\u003Ch3>What’s Next\u003C\u002Fh3>\n\u003Cp>If you like this plugin then consider checking out our other solutions:\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Furl-shortify\u002F\" rel=\"ugc\">URL Shortify\u003C\u002Fa> – Simple, Powerful, and Easy URL Shortener Plugin For WordPress.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>URL Shortify helps you beautify, manage, and share any URL on or off of your WordPress website. Create links that look how you want using your domain name! It’s a Simple, Easy & Elegant self hosted alternative to Bitly, TinyURL, Cuttly, Pretty Links, URL Shortener By My Theme Shop, Rebrandly, BL.Link, Short.io, and many other SaaS URL Shortener services.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fupdate-urls\u002F\" rel=\"ugc\">Update URLs\u003C\u002Fa> – Quick and Easy way to search old links and replace them with new links in WordPress.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>If you move your WordPress website to a new domain name, you will find that internal links to pages and references to images are not updated. Instead, these links and references will point to your old domain name. Update URLs fixes that problem by helping you change old urls and links in your website.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Flogify\u002F\" rel=\"ugc\">Logify\u003C\u002Fa>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>Logify is a comprehensive logging and monitoring plugin for WordPress that helps you keep track of various activities and events on your website. It provides detailed logs of user actions, system events, and errors, allowing you to monitor and troubleshoot your site effectively.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsocial-linkz\u002F\" rel=\"ugc\">Social Linkz\u003C\u002Fa> – Lightweight and fast social media sharing plugin\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Futilitify\u002F\" rel=\"ugc\">Utilitify\u003C\u002Fa> – Supercharge Your WordPress Site With Power Pack WordPress Utilities\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>It’s a simple & neat plugin which helps you to customize your WordPress setup in a very elegant way.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n","Secure one click passwordless login",10,2392,"6.9.4","6.7","5.6",[63,64,65,21,66],"email-login","login","magic-login","passwordless-login","https:\u002F\u002Fkaizencoders.com\u002Fmagic-link","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmagic-link.1.2.3.zip","2026-03-15T10:48:56.248Z",{"slug":71,"name":72,"version":73,"author":74,"author_profile":75,"description":76,"short_description":77,"active_installs":13,"downloaded":78,"rating":13,"num_ratings":13,"last_updated":79,"tested_up_to":80,"requires_at_least":61,"requires_php":81,"tags":82,"homepage":24,"download_link":85,"security_score":86,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":87},"1-click-passwordless-login","1-Click PasswordLess Login","1.0.0","xplodman","https:\u002F\u002Fprofiles.wordpress.org\u002Fxplodman\u002F","\u003Cp>\u003Cstrong>1-Click PasswordLess Login\u003C\u002Fstrong> allows users to log in \u003Cstrong>without passwords\u003C\u002Fstrong>, using secure \u003Cstrong>magic links\u003C\u002Fstrong>.\u003Cbr \u002F>\nEnhance security and user experience by eliminating traditional password-based logins.\u003C\u002Fp>\n\u003Ch3>🔥 Features:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Magic Link Authentication\u003C\u002Fstrong> – Users log in via a secure, one-time-use email link.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WooCommerce Compatibility\u003C\u002Fstrong> – Works seamlessly with WooCommerce login forms.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Set Expiry Time\u003C\u002Fstrong> – Magic links expire after a configurable time.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable Email Notifications\u003C\u002Fstrong> – Modify login email subject and message.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Maximum Login Attempts\u003C\u002Fstrong> – Limit failed login attempts before lockout.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Admin Dashboard Widget\u003C\u002Fstrong> – View login statistics inside WordPress admin.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Lockout Protection\u003C\u002Fstrong> – Prevent brute-force attacks with login attempt tracking.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🛠️ Setup:\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Install and activate the plugin.\u003C\u002Fli>\n\u003Cli>Navigate to \u003Cstrong>Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> 1-Click Login\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Configure authentication settings (expiry time, lockout, WooCommerce integration).\u003C\u002Fli>\n\u003Cli>Start using passwordless authentication!\u003C\u002Fli>\n\u003C\u002Fol>\n","A secure and simple 1-click passwordless login system for WordPress. No more passwords – just magic links!",699,"2025-02-23T15:40:00.000Z","6.7.5","7.4",[83,64,21,22,84],"authentication","woocommerce","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002F1-click-passwordless-login.1.0.0.zip",92,"2026-03-15T14:54:45.397Z",{"slug":89,"name":90,"version":91,"author":92,"author_profile":93,"description":94,"short_description":95,"active_installs":13,"downloaded":96,"rating":13,"num_ratings":13,"last_updated":97,"tested_up_to":80,"requires_at_least":98,"requires_php":81,"tags":99,"homepage":24,"download_link":104,"security_score":86,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"share-login","Share Login","1.1.0","Ashish Kakadiya","https:\u002F\u002Fprofiles.wordpress.org\u002Fashishkakadiya0002\u002F","\u003Cp>Share Login enables automatic login synchronization between two WordPress websites. When configured, this plugin allows users who log into your main website to be automatically logged into the secondary (sync) website without requiring a separate login.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Configure one WordPress site as the main site and another as the sync site\u003C\u002Fli>\n\u003Cli>Automatic login on the sync site when users log into the main site\u003C\u002Fli>\n\u003Cli>Secure authentication token handling\u003C\u002Fli>\n\u003Cli>Easy to set up and configure\u003C\u002Fli>\n\u003Cli>Works across different domains\u003C\u002Fli>\n\u003Cli>Compatible with WooCommerce and other popular plugins\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Use Cases:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Multiple WordPress websites that share the same user base\u003C\u002Fli>\n\u003Cli>Member sites that require access to multiple platforms\u003C\u002Fli>\n\u003Cli>Educational institutions with multiple web properties\u003C\u002Fli>\n\u003Cli>Business websites with separate customer portals\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Main Site Setup:\u003C\u002Fstrong>\u003Cbr \u002F>\n1. Enter the sync site URL\u003Cbr \u002F>\n2. Generate and save the authentication key\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Sync Site Setup:\u003C\u002Fstrong>\u003Cbr \u002F>\n1. Enter the main site URL\u003Cbr \u002F>\n2. Enter the authentication key from the main site\u003C\u002Fp>\n\u003Ch3>Third-Party Libraries\u003C\u002Fh3>\n\u003Cp>This plugin includes the following third-party libraries, bundled locally within the plugin:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Cross Storage\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>* Version: 1.0.0\u003Cbr \u002F>\n* License: MIT\u003Cbr \u002F>\n* Source: https:\u002F\u002Fgithub.com\u002Fzendesk\u002Fcross-storage\u003Cbr \u002F>\n* Local Path: public\u002Fjs\u002Fcross-storage\u002F\u003C\u002Fp>\n\u003Col>\n\u003Cli>Semantic UI\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>* Version: 2.5.0\u003Cbr \u002F>\n* License: MIT\u003Cbr \u002F>\n* Source: https:\u002F\u002Fgithub.com\u002FSemantic-Org\u002FSemantic-UI\u003Cbr \u002F>\n* Local Path: admin\u002Fsemantic\u002F\u003C\u002Fp>\n","Automatically synchronize user logins between WordPress websites, enabling seamless single sign-on functionality.",1469,"2025-02-10T14:32:00.000Z","5.0",[100,101,102,23,103],"cross-domain-login","multi-site-login","shared-login","sso","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshare-login.1.1.0.zip",{"slug":106,"name":107,"version":108,"author":109,"author_profile":110,"description":111,"short_description":112,"active_installs":113,"downloaded":114,"rating":115,"num_ratings":116,"last_updated":117,"tested_up_to":59,"requires_at_least":118,"requires_php":24,"tags":119,"homepage":123,"download_link":124,"security_score":125,"vuln_count":126,"unpatched_count":13,"last_vuln_date":127,"fetched_at":28},"iwp-client","InfiniteWP Client","1.13.5","revmakx","https:\u002F\u002Fprofiles.wordpress.org\u002Frevmakx\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Finfinitewp.com\u002F\" title=\"Manage Multiple WordPress\" rel=\"nofollow ugc\">InfiniteWP\u003C\u002Fa> allows users to manage unlimited number of WordPress sites from their own server.\u003C\u002Fp>\n\u003Cp>Main features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Self-hosted system: Resides on your own server and totally under your control\u003C\u002Fli>\n\u003Cli>One-click updates for WordPress, plugins and themes across all your sites\u003C\u002Fli>\n\u003Cli>Instant backup and restore your entire site or just the database\u003C\u002Fli>\n\u003Cli>One-click access to all WP admin panels\u003C\u002Fli>\n\u003Cli>Bulk Manage plugins & themes: Activate & Deactive multiple plugins & themes on multiple sites simultaneously\u003C\u002Fli>\n\u003Cli>Bulk Install plugins & themes in multiple sites at once\u003C\u002Fli>\n\u003Cli>and more..\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Visit us at \u003Ca href=\"https:\u002F\u002Finfinitewp.com\u002F\" title=\"Manage Multiple WordPress\" rel=\"nofollow ugc\">InfiniteWP.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Check out the \u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=s35ZoW95cnU\" rel=\"nofollow ugc\">InfiniteWP Overview Video\u003C\u002Fa> below.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fs35ZoW95cnU?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>Credits: \u003Ca href=\"http:\u002F\u002Fprelovac.com\u002Fvladimir\" rel=\"nofollow ugc\">Vladimir Prelovac\u003C\u002Fa> for his worker plugin on which the client plugin is being developed.\u003C\u002Fp>\n","Install this plugin on unlimited sites and manage them all from a central dashboard. This plugin communicates with your InfiniteWP Admin Panel.",200000,8204351,88,177,"2026-02-26T10:35:00.000Z","3.1",[120,20,121,47,122],"backup","multiple-admin","updates","http:\u002F\u002Finfinitewp.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fiwp-client.1.13.5.zip",90,7,"2025-01-07 00:00:00",{"attackSurface":129,"codeSignals":257,"taintFlows":302,"riskAssessment":413,"analyzedAt":423},{"hooks":130,"ajaxHandlers":192,"restRoutes":253,"shortcodes":254,"cronEvents":255,"entryPointCount":256,"unprotectedCount":256},[131,137,142,146,149,152,155,158,161,166,170,174,178,182,186,190],{"type":132,"name":133,"callback":134,"file":135,"line":136},"action","gate_manager_fs_loaded","closure","gatelink-manager.php",58,{"type":138,"name":139,"callback":140,"priority":57,"file":135,"line":141},"filter","is_submenu_visible","gate_manager_fs_dynamic_menu_visibility",60,{"type":132,"name":143,"callback":144,"file":135,"line":145},"after_uninstall","gate_manager_fs_uninstall_cleanup",67,{"type":132,"name":147,"callback":134,"file":135,"line":148},"after_account_connect",69,{"type":132,"name":150,"callback":134,"file":135,"line":151},"after_plan_change",72,{"type":132,"name":153,"callback":134,"file":135,"line":154},"after_license_change",75,{"type":132,"name":156,"callback":134,"file":135,"line":157},"after_premium_version_activation",78,{"type":132,"name":159,"callback":134,"file":135,"line":160},"plugins_loaded",238,{"type":132,"name":162,"callback":163,"file":164,"line":165},"init","init_hooks","includes\\class-plugin.php",17,{"type":132,"name":167,"callback":168,"file":164,"line":169},"admin_menu","register_menu",18,{"type":132,"name":171,"callback":172,"file":164,"line":173},"admin_enqueue_scripts","enqueue_assets",19,{"type":132,"name":175,"callback":176,"file":164,"line":177},"admin_notices","show_activation_success_notice",20,{"type":132,"name":179,"callback":180,"file":164,"line":181},"admin_post_gate_manager_add_site","handle_add_site",23,{"type":132,"name":183,"callback":184,"file":164,"line":185},"admin_post_gate_manager_delete_site","handle_delete_site",24,{"type":132,"name":187,"callback":188,"file":164,"line":189},"admin_init","check_trial_status",44,{"type":132,"name":175,"callback":134,"file":164,"line":191},73,[193,198,201,205,209,213,217,221,225,229,233,237,241,245,249],{"action":194,"nopriv":195,"callback":196,"hasNonce":195,"hasCapCheck":195,"file":164,"line":197},"gate_manager_health_check",false,"health_check",27,{"action":199,"nopriv":195,"callback":199,"hasNonce":195,"hasCapCheck":195,"file":164,"line":200},"gate_manager_connect",28,{"action":202,"nopriv":195,"callback":203,"hasNonce":195,"hasCapCheck":195,"file":164,"line":204},"gate_manager_verify","verify",29,{"action":206,"nopriv":195,"callback":207,"hasNonce":195,"hasCapCheck":195,"file":164,"line":208},"gate_manager_connect_and_verify","connect_and_verify",30,{"action":210,"nopriv":195,"callback":211,"hasNonce":195,"hasCapCheck":195,"file":164,"line":212},"gate_manager_generate_login_url","generate_login_url",31,{"action":214,"nopriv":195,"callback":215,"hasNonce":195,"hasCapCheck":195,"file":164,"line":216},"gate_manager_edit_site","edit_site",32,{"action":218,"nopriv":195,"callback":219,"hasNonce":195,"hasCapCheck":195,"file":164,"line":220},"gate_manager_add_site","add_site",33,{"action":222,"nopriv":195,"callback":223,"hasNonce":195,"hasCapCheck":195,"file":164,"line":224},"gate_manager_delete_site","delete_site",34,{"action":226,"nopriv":195,"callback":227,"hasNonce":195,"hasCapCheck":195,"file":164,"line":228},"gate_manager_dismiss_trial_notice","dismiss_trial_notice",35,{"action":230,"nopriv":195,"callback":231,"hasNonce":195,"hasCapCheck":195,"file":164,"line":232},"gate_manager_get_logs_data","get_logs_data",36,{"action":234,"nopriv":195,"callback":235,"hasNonce":195,"hasCapCheck":195,"file":164,"line":236},"gate_manager_export_logs","export_logs",37,{"action":238,"nopriv":195,"callback":239,"hasNonce":195,"hasCapCheck":195,"file":164,"line":240},"gate_manager_clear_plan_cache","clear_plan_cache",38,{"action":242,"nopriv":195,"callback":243,"hasNonce":195,"hasCapCheck":195,"file":164,"line":244},"gate_manager_refresh_entitlements","refresh_entitlements",39,{"action":246,"nopriv":195,"callback":247,"hasNonce":195,"hasCapCheck":195,"file":164,"line":248},"gate_manager_search_sites","search_sites",40,{"action":250,"nopriv":195,"callback":251,"hasNonce":195,"hasCapCheck":195,"file":164,"line":252},"gate_manager_test_domain_connectivity","test_domain_connectivity",41,[],[],[],15,{"dangerousFunctions":258,"sqlUsage":259,"outputEscaping":262,"fileOperations":13,"externalRequests":295,"nonceChecks":296,"capabilityChecks":57,"bundledLibraries":297},[],{"prepared":260,"raw":13,"locations":261},8,[],{"escaped":116,"rawEcho":263,"locations":264},14,[265,269,271,273,275,277,279,281,283,285,287,289,291,293],{"file":266,"line":267,"context":268},"includes\\class-admin.php",437,"raw output",{"file":266,"line":270,"context":268},438,{"file":266,"line":272,"context":268},445,{"file":266,"line":274,"context":268},446,{"file":266,"line":276,"context":268},457,{"file":266,"line":278,"context":268},459,{"file":266,"line":280,"context":268},464,{"file":266,"line":282,"context":268},468,{"file":266,"line":284,"context":268},473,{"file":266,"line":286,"context":268},810,{"file":266,"line":288,"context":268},997,{"file":266,"line":290,"context":268},1004,{"file":266,"line":292,"context":268},1016,{"file":266,"line":294,"context":268},1025,11,9,[298],{"name":299,"version":300,"knownCves":301},"Freemius","1.0",[],[303,322,334,344,354,366,380,388,398],{"entryPoint":304,"graph":305,"unsanitizedCount":35,"severity":321},"health_check (includes\\class-ajax.php:43)",{"nodes":306,"edges":319},[307,313],{"id":308,"type":309,"label":310,"file":311,"line":312},"n0","source","$_POST","includes\\class-ajax.php",46,{"id":314,"type":315,"label":316,"file":311,"line":317,"wp_function":318},"n1","sink","wp_remote_get() [SSRF]",66,"wp_remote_get",[320],{"from":308,"to":314,"sanitized":195},"medium",{"entryPoint":323,"graph":324,"unsanitizedCount":35,"severity":321},"connect (includes\\class-ajax.php:295)",{"nodes":325,"edges":332},[326,328],{"id":308,"type":309,"label":310,"file":311,"line":327},298,{"id":314,"type":315,"label":329,"file":311,"line":330,"wp_function":331},"wp_remote_post() [SSRF]",330,"wp_remote_post",[333],{"from":308,"to":314,"sanitized":195},{"entryPoint":335,"graph":336,"unsanitizedCount":35,"severity":321},"verify (includes\\class-ajax.php:683)",{"nodes":337,"edges":342},[338,340],{"id":308,"type":309,"label":310,"file":311,"line":339},686,{"id":314,"type":315,"label":329,"file":311,"line":341,"wp_function":331},717,[343],{"from":308,"to":314,"sanitized":195},{"entryPoint":345,"graph":346,"unsanitizedCount":35,"severity":321},"connect_and_verify (includes\\class-ajax.php:766)",{"nodes":347,"edges":352},[348,350],{"id":308,"type":309,"label":310,"file":311,"line":349},769,{"id":314,"type":315,"label":329,"file":311,"line":351,"wp_function":331},801,[353],{"from":308,"to":314,"sanitized":195},{"entryPoint":355,"graph":356,"unsanitizedCount":365,"severity":321},"test_domain_connectivity (includes\\class-ajax.php:1051)",{"nodes":357,"edges":363},[358,361],{"id":308,"type":309,"label":359,"file":311,"line":360},"$_POST (x2)",1055,{"id":314,"type":315,"label":316,"file":311,"line":362,"wp_function":318},1081,[364],{"from":308,"to":314,"sanitized":195},2,{"entryPoint":367,"graph":368,"unsanitizedCount":13,"severity":379},"render_settings_page (includes\\class-admin.php:975)",{"nodes":369,"edges":376},[370,372],{"id":308,"type":309,"label":310,"file":266,"line":371},989,{"id":314,"type":315,"label":373,"file":266,"line":374,"wp_function":375},"echo() [XSS]",1082,"echo",[377],{"from":308,"to":314,"sanitized":378},true,"low",{"entryPoint":381,"graph":382,"unsanitizedCount":13,"severity":379},"\u003Cclass-admin> (includes\\class-admin.php:0)",{"nodes":383,"edges":386},[384,385],{"id":308,"type":309,"label":310,"file":266,"line":371},{"id":314,"type":315,"label":373,"file":266,"line":374,"wp_function":375},[387],{"from":308,"to":314,"sanitized":378},{"entryPoint":389,"graph":390,"unsanitizedCount":13,"severity":379},"gate_manager_connect (includes\\class-ajax.php:372)",{"nodes":391,"edges":396},[392,394],{"id":308,"type":309,"label":359,"file":311,"line":393},378,{"id":314,"type":315,"label":329,"file":311,"line":395,"wp_function":331},436,[397],{"from":308,"to":314,"sanitized":378},{"entryPoint":399,"graph":400,"unsanitizedCount":13,"severity":379},"\u003Cclass-ajax> (includes\\class-ajax.php:0)",{"nodes":401,"edges":410},[402,404,405,408],{"id":308,"type":309,"label":403,"file":311,"line":312},"$_POST (x3)",{"id":314,"type":315,"label":316,"file":311,"line":317,"wp_function":318},{"id":406,"type":309,"label":407,"file":311,"line":327},"n2","$_POST (x7)",{"id":409,"type":315,"label":329,"file":311,"line":330,"wp_function":331},"n3",[411,412],{"from":308,"to":314,"sanitized":378},{"from":406,"to":409,"sanitized":378},{"summary":414,"deductions":415},"The gatelink-manager plugin version 1.8.3 exhibits a concerning security posture primarily due to its significant number of unprotected AJAX handlers. While the code shows good practices in SQL query handling and output escaping, the presence of 15 AJAX endpoints without authentication checks presents a substantial attack surface. Taint analysis, although limited in scope (9 flows analyzed), did reveal 5 flows with unsanitized paths, indicating potential areas where malicious input could be processed without proper validation, though no critical or high severity issues were flagged in this analysis. The plugin's vulnerability history is clean, with no recorded CVEs, which suggests a potentially stable development but doesn't negate the risks identified in the static analysis. The overall picture is one of a plugin that adheres to some security best practices but suffers from a critical oversight in securing its AJAX endpoints, which could be exploited if those endpoints are susceptible to privilege escalation or data manipulation.",[416,418,421],{"reason":417,"points":57},"Unprotected AJAX handlers",{"reason":419,"points":420},"Flows with unsanitized paths",5,{"reason":422,"points":32},"Bundled Freemius v1.0 library","2026-03-16T22:02:00.228Z",{"wat":425,"direct":438},{"assetPaths":426,"generatorPatterns":431,"scriptPaths":432,"versionParams":433},[427,428,429,430],"\u002Fwp-content\u002Fplugins\u002Fgatelink-manager\u002Fassets\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fgatelink-manager\u002Fassets\u002Fcss\u002Fpublic.css","\u002Fwp-content\u002Fplugins\u002Fgatelink-manager\u002Fassets\u002Fjs\u002Fadmin.js","\u002Fwp-content\u002Fplugins\u002Fgatelink-manager\u002Fassets\u002Fjs\u002Fpublic.js",[],[429,430],[434,435,436,437],"gatelink-manager\u002Fassets\u002Fcss\u002Fadmin.css?ver=","gatelink-manager\u002Fassets\u002Fcss\u002Fpublic.css?ver=","gatelink-manager\u002Fassets\u002Fjs\u002Fadmin.js?ver=","gatelink-manager\u002Fassets\u002Fjs\u002Fpublic.js?ver=",{"cssClasses":439,"htmlComments":442,"htmlAttributes":445,"restEndpoints":448,"jsGlobals":452,"shortcodeOutput":455},[440,441],"gatelink-manager-wrap","gatelink-manager-admin-wrap",[443,444],"\u003C!-- GateLink Manager Settings -->","\u003C!-- GateLink Manager - Free Version -->",[446,447],"data-gl-manager-id","data-gl-manager-site-url",[449,450,451],"\u002Fwp-json\u002Fgatelink-manager\u002Fv1\u002Fsettings","\u002Fwp-json\u002Fgatelink-manager\u002Fv1\u002Fsites","\u002Fwp-json\u002Fgatelink-manager\u002Fv1\u002Flogs",[453,454],"gatelinkManagerAdmin","gatelinkManagerPublic",[456,457],"[gatelink_manager_login_form]","[gatelink_manager_site_list]"]