[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKEPqPaZWHa-i2K9iIvG1XEh-7O1d9xo8cibahv4-sfk":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":47,"crawl_stats":37,"alternatives":54,"analysis":151,"fingerprints":268},"gdpr-data-request-form","GDPR Data Request Form","1.7","Jb Audras","https:\u002F\u002Fprofiles.wordpress.org\u002Faudrasjb\u002F","\u003Cp>This plugin uses WordPress Core tools for GDPR Compliance.\u003C\u002Fp>\n\u003Cp>Since release 4.9.6, WordPress admin has some tools to handle Privacy User Requests. Administrators are able to create Data Request for every users in order to send or erase users data. This plugin allow website administrators to display Data Request Forms in front-end, for example in your Privacy Policy Page.\u003C\u002Fp>\n\u003Cp>Easily integrate a Personal Data Request Form for your visitors\u002Fusers in front-end, with some options:\u003Cbr \u002F>\n– Personal Data Export\u003Cbr \u002F>\n– Personal Data Erasure\u003Cbr \u002F>\n– Both of them\u003C\u002Fp>\n\u003Cp>It’s easy to integrate:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Widget\u003C\u002Fstrong>\u003Cbr \u002F>\nThe widget allows to integrate Data Request Form in your theme widget areas. It comes with three options: Form Title, Form Description Paragraph and Form Type.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Gutenberg Block\u003C\u002Fstrong> (since 1.4!)\u003Cbr \u002F>\nThe Gutenberg Block makes it even easier to integrate front-end forms in your website. The block allows you to choose the type of form you need.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Shortcode\u003C\u002Fstrong>\u003Cbr \u002F>\n[gpdr-data-request] shortcode allows to integrate Data Request Form where you need. This shortcode has no parameter.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>PHP Function\u003C\u002Fstrong>\u003Cbr \u002F>\necho gdrf_data_request_form( $args ) function allows to integrate Data Request Form where you need. This function has some parameters and filters (see FAQ section below). Don’t forget to \u003Ccode>echo\u003C\u002Fcode> the function.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>GDPR Data Request Form is using AJAX to provide clean and user-friendly forms in front-end. You can integrate them in any page of your website (like your Privacy Policy Page) or in your sidebar\u002Ffooter.\u003C\u002Fp>\n\u003Cp>The email address of the Data Protection Officer (DPO) can be changed in the Privacy Settings screen (Settings > Privacy).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Data Request Workflow:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The user\u002Fvisitor use your Personal Data Request Form to ask for Personal Data Export or Erasure.\u003C\u002Fli>\n\u003Cli>A request is created in WordPress Tools > Export\u002FErase personal data.\u003C\u002Fli>\n\u003Cli>An email is sent to the user\u002Fvisitor to confirm this request.\u003C\u002Fli>\n\u003Cli>The user request is set to Confirmed in Tools > Export\u002FErase personal data.\u003C\u002Fli>\n\u003Cli>An email is sent to the website administrator to validate the request.\u003C\u002Fli>\n\u003Cli>The personal data are sent by email to the user\u002Fvisitor (as a 3-day available download link), or erased, depending on the user request type.\u003C\u002Fli>\n\u003C\u002Ful>\n","Use WordPress Core GDPR tools to build front-end Personal Data export\u002Ferasure forms (includes Widget, Gutenberg Block, shortcode & Hooks).",6000,72955,98,14,"2025-11-27T08:52:00.000Z","6.9.4","4.9.6","5.6",[20,21,22,23],"export","gdpr","personal-data-request","privacy","https:\u002F\u002Fjeanbaptisteaudras.com\u002Fgdpr-data-request-form","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgdpr-data-request-form.1.7.zip",100,1,0,"2024-02-02 00:00:00","2026-03-15T15:16:48.613Z",[32],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":6,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":29,"updated_date":43,"references":44,"days_to_patch":46},"CVE-2024-24836","gdpr-data-request-form-authenticated-contributor-stored-cross-site-scripting","GDPR Data Request Form \u003C= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting","The GDPR Data Request Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form_id  parameter in versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=1.6","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-02-05 20:46:49",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Ff0b8fd44-75af-4fb8-bcc1-94cb5fc9e4eb?source=api-prod",4,{"slug":48,"display_name":7,"profile_url":8,"plugin_count":49,"total_installs":50,"avg_security_score":13,"avg_patch_time_days":51,"trust_score":52,"computed_at":53},"audrasjb",24,63620,661,78,"2026-04-04T01:19:50.031Z",[55,75,86,110,129],{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":28,"num_ratings":28,"last_updated":65,"tested_up_to":66,"requires_at_least":17,"requires_php":67,"tags":68,"homepage":72,"download_link":73,"security_score":26,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":74},"dismiss-privacy-nag","Dismiss Privacy Nag","1.0.2","luciano-croce","https:\u002F\u002Fprofiles.wordpress.org\u002Fluciano-croce\u002F","\u003Cp>Dismiss \u003Cstrong>Privacy Pointer\u003C\u002Fstrong> Nag, (added in version 4.9.6 — partially GDPR OFF) and admin notification, when it is activated, or if it is in mu-plugins directory.\u003C\u002Fp>\n\u003Cp>Development takes place at \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fluciano-croce\u002Fdismiss-privacy-nag\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Ftravis-ci.org\u002Fluciano-croce\u002Fdismiss-privacy-nag\" rel=\"nofollow ugc\">Travis CI\u003C\u002Fa>. Compatible with \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fdismiss-privacy-nag\" rel=\"nofollow ugc\">GlotPress Translations\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Approved in the repository of the plugin directory on 2018-05-09\u003C\u002Fp>\n\u003Cp>\u003Cstrong>If you need to completely disable and remove all Privacy Tools, Privacy Pointers, Privacy Notifications Nag, you can use\u003C\u002Fstrong> “\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdismiss-privacy-tools\" rel=\"ugc\">Dismiss Privacy Tools\u003C\u002Fa>“.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cp>Based to the \u003Ca href=\"https:\u002F\u002Fdeveloper.wordpress.org\u002Fplugins\u002Fwordpress-org\u002Fdetailed-plugin-guidelines\u002F#11-plugins-should-not-hijack-the-admin-dashboard\" rel=\"nofollow ugc\">Detailed Guidelines 11\u003C\u002Fa> principle: should not hijack the admin dashboard.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Users prefer and expect plugins to feel like part of WordPress.\u003C\u002Fli>\n\u003Cli>Constant nags and overwhelming the admin dashboard with unnecessary alerts detract from this experience.\u003C\u002Fli>\n\u003Cli>Upgrade prompts, notices, alerts, and the like must be limited in scope and used sparingly, be that contextually or only on the plugin’s setting page.\u003C\u002Fli>\n\u003Cli>Site wide notices or embedded dashboard widgets must be dismissible or self-dismiss when resolved.\u003C\u002Fli>\n\u003Cli>Error messages and alerts must include information on how to resolve the situation, and remove themselves when completed.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Because I made this?\u003C\u002Fp>\n\u003Cp>Seem that the new privacy pointer is not totally auto dismissible when is clicked one of the any admin menu links, for example:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>If one of the any admin menu links was clicked, the privacy pointer disappear.\u003C\u002Fli>\n\u003Cli>If the dasboard admin menu link was clicked, the privacy pointer not disappear, return visible, and nagging user.\u003C\u002Fli>\n\u003Cli>The \u003Ca href=\"https:\u002F\u002Fcore.trac.wordpress.org\u002Fticket\u002F44136\" rel=\"nofollow ugc\">privacy pointer covers the thing it’s pointing at\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>The \u003Ca href=\"https:\u002F\u002Fcore.trac.wordpress.org\u002Fticket\u002F43961\" rel=\"nofollow ugc\">privacy pointer popup covers collapsed admin menu\u003C\u002Fa>?\u003C\u002Fli>\n\u003Cli>The \u003Ca href=\"https:\u002F\u002Fcore.trac.wordpress.org\u002Fticket\u002F43996\" rel=\"nofollow ugc\">privacy pointer is misaligned to admin menu\u003C\u002Fa> when exist other admin menu items of 3rd party?\u003C\u002Fli>\n\u003Cli>Don’t show privacy feature pointer to new users: \u003Ca href=\"https:\u002F\u002Fcore.trac.wordpress.org\u002Fticket\u002F44062\" rel=\"nofollow ugc\">doesn’t add the new callback to the dismissed_wp_pointers meta\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>The suggested code to auto dismiss it seem to not working well — remove_action( ‘admin_print_footer_scripts’, array( ‘WP_Internal_Pointers’, ‘pointer_wp496_privacy’ ) );\u003C\u002Fli>\n\u003Cli>The remove_action for pointer_wp496_privacy needed to be called from the admin_enqueue_scripts action with a priority of 11.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Add an admin pointer for new privacy features in version 4.9.6:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The new features are very important for some users, because of their GDPR obligations.\u003C\u002Fli>\n\u003Cli>They’re also spread across multiple top-level menus, making them less discoverable.\u003C\u002Fli>\n\u003Cli>An admin pointer will help to ensure that users are aware of the new tools and how to find them.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Props desrosj, andreamiddleton, allendav, xkon. Fixes #43942?\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbuild.trac.wordpress.org\u002Fbrowser\u002Fbranches\u002F4.9?rev=42988\" rel=\"nofollow ugc\">4.9.6-alpha-43159\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcore.trac.wordpress.org\u002Fbrowser\u002Fbranches\u002F4.9?rev=43159\" rel=\"nofollow ugc\">4.9.6-alpha-42959-src\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbuild.trac.wordpress.org\u002Fbrowser\u002Ftrunk?rev=42987\" rel=\"nofollow ugc\">5.0-alpha-43158\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcore.trac.wordpress.org\u002Fbrowser\u002Ftrunk?rev=43158\" rel=\"nofollow ugc\">5.0-alpha-42970-src\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Technical References\u003C\u002Fh3>\n\u003Cp>Translators: leave all technical references in English!\u003C\u002Fp>\n\u003Cp>Dismiss all the new feature pointers.\u003C\u002Fp>\n\u003Cp>@since 3.3.0\u003C\u002Fp>\n\u003Cp>All pointers can be disabled using the following:\u003C\u002Fp>\n\u003Cp>remove_action( ‘admin_enqueue_scripts’, array( ‘WP_Internal_Pointers’, ‘enqueue_scripts’ ) ); # This work but “unfortunately” as alternative solution that remove all pointers!\u003C\u002Fp>\n\u003Cp>@param string $hook_suffix The current admin page.\u003C\u002Fp>\n\u003Cp>Dismiss a pointer for the new privacy tools.\u003C\u002Fp>\n\u003Cp>@since 4.9.6\u003C\u002Fp>\n\u003Cp>Privacy pointer can be disabled using the following:\u003C\u002Fp>\n\u003Cp>remove_action( ‘admin_print_footer_scripts’, array( ‘WP_Internal_Pointers’, ‘pointer_wp496_privacy’ ) ); # This for now not work: due a bug? Investigating… wp496_privacy ???\u003C\u002Fp>\n\u003Cp>@param string $hook_suffix The current admin page.\u003C\u002Fp>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cp>Issue (bug) \u003Cstrong>fixed by my brother Garrett Hyder\u003C\u002Fstrong> and tested from Pascal Birchler (swissspidy): refer to \u003Ca href=\"https:\u002F\u002Fcore.trac.wordpress.org\u002Fticket\u002F45529\u002F\" rel=\"nofollow ugc\">Ticket 45529\u003C\u002Fa> opened by \u003Ca href=\"https:\u002F\u002Fprofile.wordpress.org\u002Fdaleharrison\" rel=\"nofollow ugc\">Dale Harrison\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Thanks to Ross McKay (webaware) and Stephen Edgar (netweb) to support me in New Zealander (English) translations, in some typo errors, and some minor (English) error stuff.\u003C\u002Fp>\n\u003Cp>Thanks to Fernando Tellado (fernandot) and Nilo Velez to support me in Spanish translations.\u003C\u002Fp>\n\u003Cp>Thanks to all!\u003C\u002Fp>\n\u003Ch4>Tips\u003C\u002Fh4>\n\u003Cp>A neat trick, is to put this single file dismiss-privacy-nag.php (not its parent directory) in the \u002Fwp-content\u002Fmu-plugins\u002F directory (create it if not exists) so you won’t even have to enable it, and will be loaded by default, also, since first step installation of WordPress setup!\u003C\u002Fp>\n\u003Cp>Also, for translation functionality, put all files of the single languages (dismiss-privacy-nag-en_US.mo for example) that you need (not its parent directory) in the \u002Fwp-content\u002Fmu-plugins\u002F directory (create it if not exists) and will also be loaded by default, since first step installation of WordPress setup!\u003C\u002Fp>\n\u003Cp>Note that mu-plugins functionality is available since WP 2.8+ or greater and is not present in WP 2.7+ or previous.\u003C\u002Fp>\n\u003Ch4>About it\u003C\u002Fh4>\n\u003Cp>The code of this plugin is not written with a PHP framework, but manually, with a simple PHP editor compatible UTF-8 without BOM, and Unix LF. To avoid code corruption, do not edit it with WordPress embedded editor, or with any specifications incompatible editor. This author is exonerated from any responsibility or damage (directly or indirectly) caused and due to the use of this bad practice.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>super light secure and fast plugin easy on server resources\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>About me\u003C\u002Fh4>\n\u003Cp>Dismiss Privacy Nag is developed by Luciano Croce, 13-years “officially” WordPress Plugins & Themes Developer Senior, Co-Author of plugin Classic Editor, polyglot (based on English, French, Spanish, German, Portuguese, Italian, Ligurian), GTE en_GB & en_CA, PTE for Plugins & Themes in more languages, PTE for Italian WordPress.org & Plugins & Themes Directory, Local Manager of Ligurian Language Community for WP LIJ, Validator English (UK) for WordPress.com, translator for my & other projects, book author of TRUE DOS (the dark side of its history from the dark side of its users) Code Tweaker & Bug Hunter, Security Mechanic & WPMU Lover, Freelancer & Volunteer.\u003C\u002Fp>\n\u003Ch4>Privacy\u003C\u002Fh4>\n\u003Cp>This plugin does not collect or store any user related data or personally identifying information, does not set any cookies, and it does not connect to any third-party websites. It only uses functionality that is available in WordPress. In those terms, it does not affect your website users’ privacy in any way.\u003C\u002Fp>\n\u003Ch4>GDPR\u003C\u002Fh4>\n\u003Cp>This plugin does not collect or store any user related data or personally identifying information, but does not do anything to make your site less GDPR compliant. I have done my best to ensure that is 100% GDPR compliant, but I’m not a lawyer, so can’t guarantee anything. To determine if your site is GDPR compliant, please consult a lawyer.\u003C\u002Fp>\n","dismiss privacy pointer nag and admin notification when it is activated or if it is in mu-plugins directory",10,2027,"","5.1.22","5.2.4",[21,59,69,70,71],"personal-data-erase","personal-data-export","privacy-policy","https:\u002F\u002Fgithub.com\u002Fluciano-croce\u002Fdismiss-privacy-nag\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdismiss-privacy-nag.zip","2026-03-15T14:44:11.924Z",{"slug":76,"name":77,"version":58,"author":59,"author_profile":60,"description":78,"short_description":79,"active_installs":63,"downloaded":80,"rating":28,"num_ratings":28,"last_updated":81,"tested_up_to":66,"requires_at_least":17,"requires_php":67,"tags":82,"homepage":83,"download_link":84,"security_score":85,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"dismiss-privacy-tools","Dismiss Privacy Tools","\u003Cp>Disable and remove \u003Cstrong>Privacy Tools\u003C\u002Fstrong>, (added in version 4.9.6 — completely GDPR OFF) and reset options to default, when it is activated, or if it is in mu-plugins directory.\u003C\u002Fp>\n\u003Cp>Development takes place at \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fluciano-croce\u002Fdismiss-privacy-tools\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Ftravis-ci.org\u002Fluciano-croce\u002Fdismiss-privacy-tools\" rel=\"nofollow ugc\">Travis CI\u003C\u002Fa>. Compatible with \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fdismiss-privacy-tools\" rel=\"nofollow ugc\">GlotPress Translations\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Approved in the repository of the plugin directory on 2018-06-28\u003C\u002Fp>\n\u003Cp>\u003Cstrong>If you need to partially disable only Privacy Pointers, Privacy Notification Nag, without removing Privacy Tools, you can use\u003C\u002Fstrong> “\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdismiss-privacy-nag\" rel=\"ugc\">Dismiss Privacy Nag\u003C\u002Fa>“.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Disable Privacy Tool \u002Fwp-admin\u002Fprivacy.php\u003C\u002Fli>\n\u003Cli>Disable Erase Personal Data \u002Fwp-admin\u002Ftools.php?page=erase_personal_data\u003C\u002Fli>\n\u003Cli>Disable Export Personal Data \u002Fwp-admin\u002Ftools.php?page=export_personal_data\u003C\u002Fli>\n\u003Cli>Remove scheduled action used to delete old export files.\u003C\u002Fli>\n\u003Cli>Remove scheduled event used to delete old export files.\u003C\u002Fli>\n\u003Cli>Remove scheduled hook used to delete old export files.\u003C\u002Fli>\n\u003Cli>Short circuits the option for the privacy policy page to always return 0 to avoid unneeded database query.\u003C\u002Fli>\n\u003Cli>Delete unnecessary database options.\u003C\u002Fli>\n\u003Cli>Reset all options to default.\u003C\u002Fli>\n\u003Cli>Don’t show the privacy feature pointer to new users.\u003C\u002Fli>\n\u003Cli>The suggested code to auto dismiss it seem to not working well — remove_action( ‘admin_print_footer_scripts’, array( ‘WP_Internal_Pointers’, ‘pointer_wp496_privacy’ ) );\u003C\u002Fli>\n\u003Cli>The remove_action for pointer_wp496_privacy needed to be called from the admin_enqueue_scripts action with a priority of 11.\u003C\u002Fli>\n\u003Cli>NEW – Dismiss pointer for the new privacy tools. FIXED!\u003C\u002Fli>\n\u003Cli>NEW – Disable comments cookies opt-in and remove related option.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Because I made this?\u003C\u002Fp>\n\u003Cp>Simply because is different to the other similar plugins.\u003C\u002Fp>\n\u003Ch3>Technical References\u003C\u002Fh3>\n\u003Cp>Translators: leave all technical references in English!\u003C\u002Fp>\n\u003Cp>Dismiss all the new feature pointers.\u003C\u002Fp>\n\u003Cp>@since 3.3.0\u003C\u002Fp>\n\u003Cp>All pointers can be disabled using the following:\u003C\u002Fp>\n\u003Cp>remove_action( ‘admin_enqueue_scripts’, array( ‘WP_Internal_Pointers’, ‘enqueue_scripts’ ) ); # This work but “unfortunately” as alternative solution that remove all pointers!\u003C\u002Fp>\n\u003Cp>@param string $hook_suffix The current admin page.\u003C\u002Fp>\n\u003Cp>Dismiss a pointer for the new privacy tools.\u003C\u002Fp>\n\u003Cp>@since 4.9.6\u003C\u002Fp>\n\u003Cp>Privacy pointer can be disabled using the following:\u003C\u002Fp>\n\u003Cp>remove_action( ‘admin_print_footer_scripts’, array( ‘WP_Internal_Pointers’, ‘pointer_wp496_privacy’ ) ); # This for now not work: due a bug? Investigating… wp496_privacy ???\u003C\u002Fp>\n\u003Cp>@param string $hook_suffix The current admin page.\u003C\u002Fp>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cp>Issue (bug) \u003Cstrong>fixed by my brother Garrett Hyder\u003C\u002Fstrong> and tested from Pascal Birchler (swissspidy): refer to \u003Ca href=\"https:\u002F\u002Fcore.trac.wordpress.org\u002Fticket\u002F45529\u002F\" rel=\"nofollow ugc\">Ticket 45529\u003C\u002Fa> opened by \u003Ca href=\"https:\u002F\u002Fprofile.wordpress.org\u002Fdaleharrison\" rel=\"nofollow ugc\">Dale Harrison\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Thanks to Ross McKay (webaware) and Stephen Edgar (netweb) to support me in New Zealander (English) translations, in some typo errors, and some minor (English) error stuff.\u003C\u002Fp>\n\u003Cp>Thanks to Fernando Tellado (fernandot) and Nilo Velez to support me in Spanish translations.\u003C\u002Fp>\n\u003Cp>Thanks to all!\u003C\u002Fp>\n\u003Ch4>Tips\u003C\u002Fh4>\n\u003Cp>A neat trick, is to put this single file dismiss-privacy-tools.php (not its parent directory) in the \u002Fwp-content\u002Fmu-plugins\u002F directory (create it if not exists) so you won’t even have to enable it, and will be loaded by default, also, since first step installation of WordPress setup!\u003C\u002Fp>\n\u003Cp>Also, for translation functionality, put all files of the single languages (dismiss-privacy-tools-en_US.mo for example) that you need (not its parent directory) in the \u002Fwp-content\u002Fmu-plugins\u002F directory (create it if not exists) and will also be loaded by default, since first step installation of WordPress setup!\u003C\u002Fp>\n\u003Cp>Note that mu-plugins functionality is available since WP 2.8+ or greater and is not present in WP 2.7+ or previous.\u003C\u002Fp>\n\u003Ch4>About it\u003C\u002Fh4>\n\u003Cp>The code of this plugin is not written with a PHP framework, but manually, with a simple PHP editor compatible UTF-8 without BOM, and Unix LF. To avoid code corruption, do not edit it with WordPress embedded editor, or with any specifications incompatible editor. This author is exonerated from any responsibility or damage (directly or indirectly) caused and due to the use of this bad practice.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>super light secure and fast plugin easy on server resources\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>About me\u003C\u002Fh4>\n\u003Cp>Dismiss Privacy Tools is developed by Luciano Croce, 13-years “officially” WordPress Plugins & Themes Developer Senior, Co-Author of plugin Classic Editor, polyglot (based on English, French, Spanish, German, Portuguese, Italian, Ligurian), GTE en_GB & en_CA, PTE for Plugins & Themes in more languages, PTE for Italian WordPress.org & Plugins & Themes Directory, Local Manager of Ligurian Language Community for WP LIJ, Validator English (UK) for WordPress.com, translator for my & other projects, book author of TRUE DOS (the dark side of its history from the dark side of its users) Code Tweaker & Bug Hunter, Security Mechanic & WPMU Lover, Freelancer & Volunteer.\u003C\u002Fp>\n\u003Ch4>Privacy\u003C\u002Fh4>\n\u003Cp>This plugin does not collect or store any user related data or personally identifying information, does not set any cookies, and it does not connect to any third-party websites. It only uses functionality that is available in WordPress. In those terms, it does not affect your website users’ privacy in any way.\u003C\u002Fp>\n\u003Ch4>GDPR\u003C\u002Fh4>\n\u003Cp>This plugin does not collect or store any user related data or personally identifying information, but does not do anything to make your site less GDPR compliant. I have done my best to ensure that is 100% GDPR compliant, but I’m not a lawyer, so can’t guarantee anything. To determine if your site is GDPR compliant, please consult a lawyer.\u003C\u002Fp>\n","disable and remove privacy tools added in 4.9.6 completely GDPR OFF reset options to default when it is activated or if it is in mu-plugins directory",2011,"2019-01-25T02:47:00.000Z",[21,59,69,70,71],"https:\u002F\u002Fgithub.com\u002Fluciano-croce\u002Fdismiss-privacy-tools\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdismiss-privacy-tools.zip",85,{"slug":87,"name":88,"version":89,"author":90,"author_profile":91,"description":92,"short_description":93,"active_installs":94,"downloaded":95,"rating":96,"num_ratings":97,"last_updated":98,"tested_up_to":16,"requires_at_least":99,"requires_php":100,"tags":101,"homepage":105,"download_link":106,"security_score":107,"vuln_count":108,"unpatched_count":28,"last_vuln_date":109,"fetched_at":30},"complianz-gdpr","Complianz – GDPR\u002FCCPA Cookie Consent","7.4.4.2","Complianz","https:\u002F\u002Fprofiles.wordpress.org\u002Fcomplianz\u002F","\u003Cp>Complianz is a GDPR\u002FCCPA Cookie Banner plugin that supports GDPR, ePrivacy, DSGVO, TTDSG, LGPD, POPIA, APA, RGPD, CCPA\u002FCPRA and PIPEDA with a conditional Cookie Consent Banner and customized Cookie Policy based on the results of the built-in Cookie Scan.\u003C\u002Fp>\n\u003Cp>https:\u002F\u002Fvimeo.com\u002Fmanage\u002Fvideos\u002F1138872149\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Ch4>Cookie Consent Notice\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Configure a Cookie Notice for your specific region: European Union, United Kingdom, United States, Australia, South Africa, Brazil or Canada. Or use one Cookie Notice worldwide.\u003C\u002Fli>\n\u003Cli>Configure specific cookie consent per subregion, for example: European Union + TTDSG\u002FDSGVO\u002FCNIL or USA + specific states for CCPA\u002FCPRA\u002FCTDPA etc\u003C\u002Fli>\n\u003Cli>Cookie Consent and Conditional Cookie Notice with Custom CSS and Customizable Templates. WCAG Level AA and ADA Compliant.\u003C\u002Fli>\n\u003Cli>Banner Templates include: GDPR-friendly Cookie Wall – Accept\u002FDismiss – Consent per Category – Consent per Service\u003C\u002Fli>\n\u003Cli>Banner Templates also include; Dismiss on scroll, time on page or both based on legislation\u003C\u002Fli>\n\u003Cli>We aim to follow WCAG 2.1 AA guidelines and ADA best practices in the design of our cookie banners and legal documents to support accessibility.\u003C\u002Fli>\n\u003Cli>No jQuery Dependency\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Consent Management\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Automatically configures your website based on wizard questions, WordPress scans and dedicated service and plugin integrations.\u003C\u002Fli>\n\u003Cli>Blocks 3rd party cookies like Google Maps, Facebook, Instagram, AdSense, Hubspot, Recaptcha, Twitter, ActiveCampaign, and many more.\u003C\u002Fli>\n\u003Cli>Custom integrations for plugins, themes and services are automatically detected.\u003C\u002Fli>\n\u003Cli>Blocks iFrames, like YouTube, Vimeo, Dailymotion embedded videos and Social iFrames e.g. Instagram, Facebook et al.\u003C\u002Fli>\n\u003Cli>Shows placeholders for blocked iFrames. Stills from videos and individual placeholders per (social) service.\u003C\u002Fli>\n\u003Cli>Script Center to control scripts, iFrames and plugins per category or service. With dependency functionality and placeholders.\u003C\u002Fli>\n\u003Cli>Proof of Consent: User consent registration that respects the GDPR data minimization guideline.\u003C\u002Fli>\n\u003Cli>Periodical Cookie Scan for changes in Cookies, Plugins and 3rd Party services.\u003C\u002Fli>\n\u003Cli>Automatically detects if you need a Cookie Notice (also called a Cookie Banner or Pop-Up).\u003C\u002Fli>\n\u003Cli>Automatically anonymizes personal data for integrated statistics tools if needed.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Privacy Laws & Guidelines\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Ready for GDPR, ePrivacy AVG, RGPD, LGPD, DSGVO, CNIL, PECR, UK DPA, UK GDPR, CCPA, COPPA, PIPEDA, CASL, POPIA, Privacy Act 1988, Australian Privacy Principles, The “Marco Civil” and the Brazilian General Data Protection Law.\u003C\u002Fli>\n\u003Cli>Differentiate between GDPR, ePrivacy and DSGVO\u002FCNIL or between CCPA\u002FDNSMPI and NRS 603A, if needed.\u003C\u002Fli>\n\u003Cli>We closely follow the latest developments in the ePrivacy regulation, the proposed Cookie Law for the European Union, and other legislation world-wide.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Legal Documents\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>A Cookie Policy; Generated by you with an easy wizard, drafted by an IT Law Firm.\u003C\u002Fli>\n\u003Cli>Do Not Sell My Personal Information: DNSMPI Page for CCPA\u002FCPRA – if required. (Now called Opt-out Preferences.)\u003C\u002Fli>\n\u003Cli>Terms and Conditions are available in a separate plugin: \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcomplianz-terms-conditions\u002F\" rel=\"ugc\">Complianz – Terms and Conditions\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Integrations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Detected Cookie Data is prefilled from cookiedatabase.org, with clear and transparent cookie descriptions, which are continuously updated.\u003C\u002Fli>\n\u003Cli>Integrated with WordPress Privacy features. Export and erase personal data from our dashboard.\u003C\u002Fli>\n\u003Cli>Implementation of Google Tag Manager, Google Analytics, Matomo, Matomo Tag Manager, Clicky, Yandex, Jetpack and Burst Statistics\u003C\u002Fli>\n\u003Cli>Categorize your Cookies with Tag Manager or our Script Center, if needed.\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Integration with the \u003Ca href=\"https:\u002F\u002Fwpconsentapi.org\u002F\" rel=\"nofollow ugc\">WP Consent API\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Integrates seamlessly with Gutenberg, Elementor, Divi, Forminator, WPBakery, Monsterinsights, GADWP, Beehive, WPForms, Gravity Forms, HappyForms, Contact Form 7 \u003C5.4 (CF7), Woocommerce, Easy Digital Downloads, WP Google Maps, Google Maps Widget, Local Google Fonts, CAOS | Host Google Analytics Locally and other popular plugins.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>Tested with popular themes en page builders.\u003C\u002Fli>\n\u003Cli>Gutenberg Blocks enabled.\u003Cbr \u002F>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>Complianz offers full support on the WordPress.org \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fcomplianz-gdpr\u002F\" rel=\"ugc\">Forum\u003C\u002Fa>. Before starting a new thread, please check available documentation and other support threads. Leave a clear and concise description of your issue, and we will respond as soon as possible.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Useful Links\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fcomplianz-gdpr\u002F\" rel=\"ugc\">Support Forum\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002FReally-Simple-Plugins\u002Fcomplianz-gdpr\u002F\" rel=\"nofollow ugc\">Github\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002FReally-Simple-Plugins\u002Fcomplianz-integrations\" rel=\"nofollow ugc\">MU Plugins\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcomplianz.io\u002Fdocs\u002F\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcomplianz.io\u002Fdevelopers-guide-for-third-party-integrations\u002F\" rel=\"nofollow ugc\">Developer’s Guide\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcomplianz.io\u002Fdefinitions\u002F\" rel=\"nofollow ugc\">Legal Definitions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fcomplianz-gdpr\u002F\" rel=\"nofollow ugc\">Translate Complianz\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Premium Features\u003C\u002Fh3>\n\u003Cp>Complianz offers a Full Privacy Suite for WordPress on \u003Ca href=\"https:\u002F\u002Fcomplianz.io\" rel=\"nofollow ugc\">Complianz.io\u003C\u002Fa> with even more features:\u003C\u002Fp>\n\u003Ch4>Cookie Consent Notice\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Improve conversion with A\u002FB Testing: which cookie banner has the best consent ratio? Run tests and measure what works best for your site.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Consent Management\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Records of Consent: Keep record of your consent management changes and user’s consent registration. Integrates with Proof of Consent\u003C\u002Fli>\n\u003Cli>Respects the Do Not Track settings and Global Privacy Controls in end-users browsers.\u003C\u002Fli>\n\u003Cli>Geo IP Cookie Consent: Cookie Consent is different everywhere. Show the correct Cookie Notice based on IP location, but only if a banner is needed.\u003C\u002Fli>\n\u003Cli>Google Consent Mode – Use Consent Mode by Google with Google Tag Manager or Google Analytics. No further set-up needed.\u003C\u002Fli>\n\u003Cli>Integration with TCF v2.0. An IAB Europe Consent Framework for Publishers. Registered CMP ID: 332\u003C\u002Fli>\n\u003Cli>Data Request Forms and Registration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Privacy Laws & Guidelines\u003C\u002Fh4>\n\u003Cp>Simultaneously select USA, Canada, United Kingdom, Australia, South Africa, Brazil and the EU as targeted regions with conditional Consent and dedicated Cookie Banners.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Support for GDPR \u002F ePrivacy – European Union with Extension for Switzerland.\u003C\u002Fli>\n\u003Cli>Support for USA \u002F CCPA\u002FCPRA\u002FCPA\u002FCTDPA\u002FNRS 603A\u002FUCPA\u002FCDPA\u003C\u002Fli>\n\u003Cli>Support for UK-GDPR \u002F PECR and ICO Guidelines – United Kingdom.\u003C\u002Fli>\n\u003Cli>Support for PIPEDA and CASL – Canada.\u003C\u002Fli>\n\u003Cli>Support for Privacy Act 1988 & Australian Privacy Principles\u003C\u002Fli>\n\u003Cli>Support for POPIA, the South African Protection of Personal Information Act\u003C\u002Fli>\n\u003Cli>Supports The “Marco Civil” and the Brazilian General Data Protection Law (LGPD)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Legal Documents\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Privacy statements (EU, CA, UK, AU, ZA, BR & USA).\u003C\u002Fli>\n\u003Cli>Cookie policy (EU, UK, CA, AU, ZA, BR & USA).\u003C\u002Fli>\n\u003Cli>Impressum (Germany & Austria) & Imprint for world wide use.\u003C\u002Fli>\n\u003Cli>Disclaimer\u003C\u002Fli>\n\u003Cli>Terms & Conditions Integration\u003C\u002Fli>\n\u003Cli>Processing agreements (EU, UK, CA, AU, ZA, BR & USA).\u003C\u002Fli>\n\u003Cli>Dataleak reporting tools (EU, UK, CA, AU, ZA, BR & USA).\u003C\u002Fli>\n\u003Cli>Supports CCPA Consent and Legal documents.\u003C\u002Fli>\n\u003Cli>COPPA ready with Children’s Privacy Policy (USA)\u003C\u002Fli>\n\u003Cli>Children’s Privacy Policy (UK,CA & AU)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Support & Updates\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Premium Support from our amazing team.\u003C\u002Fli>\n\u003Cli>Premium updates, new languages, features, regions and more to create the Ultimate Privacy Suite for WordPress.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>About Complianz\u003C\u002Fh3>\n\u003Cp>Check out other plugins developed by Really Simple Plugins as well: \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Freally-simple-ssl\u002F\" rel=\"ugc\">Really Simple SSL\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Complianz is on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FReally-Simple-Plugins\u002Fcomplianz-gdpr\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa> as well!\u003C\u002Fp>\n\u003Cp>IMPORTANT! Complianz | GDPR\u002FCCPA Cookie Consent can help you meet compliance requirements, but the user must ensure that all requirements are met.\u003C\u002Fp>\n\u003Cp>Complianz provides your Cookie Policy with comprehensive cookie descriptions, supplied by cookiedatabase.org, operated by Complianz B.V. The plugin sends the results of Complianz’ local or advanced website scan to Cookiedatabase.org, for the sole purpose of providing you with accurate descriptions and keeping them up-to-date on a regular basis. The advanced website scan can be initialized after authentication and consent for security purposes.\u003C\u002Fp>\n\u003Cp>We collect for research purposes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Cookie names\u003C\u002Fli>\n\u003Cli>Domain that provides the cookie names\u003C\u002Fli>\n\u003Cli>Plugin list on the domain\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For more information:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Cookiedatabase.org – \u003Ca href=\"https:\u002F\u002Fcookiedatabase.org\u002Fplugin-use-of-cookiedatabase-org-privacy-terms\u002F\" rel=\"nofollow ugc\">Privacy Statement\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Cookiedatabase.org – \u003Ca href=\"https:\u002F\u002Fcookiedatabase.org\u002Fterms-of-use\u002F\" rel=\"nofollow ugc\">Terms and Conditions Database\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Cookiedatabase.org – \u003Ca href=\"https:\u002F\u002Fcookiedatabase.org\u002Fterms-of-use-api\u002F\" rel=\"nofollow ugc\">Terms of Use API\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For security purposes, we authenticate the advanced website scan with:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Email address\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The advanced website scan collects public data from the user’s site, stores it for one hour, and then discards it without analysis.\u003C\u002Fp>\n\u003Cp>For more information:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Advanced website scan Complianz.io – \u003Ca href=\"https:\u002F\u002Fcomplianz.io\u002Flegal\u002Fprivacy-statement\u002F\" rel=\"nofollow ugc\">Privacy Statement\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Advanced website scan Complianz.io – \u003Ca href=\"https:\u002F\u002Fcomplianz.io\u002Flegal\u002Fterms-of-use\u002F\" rel=\"nofollow ugc\">Terms of Use API\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcomplianz.io\u002Fsupport\u002F\" rel=\"nofollow ugc\">Contact\u003C\u002Fa> us if you have any questions, issues, or suggestions. Complianz | GDPR\u002FCCPA Cookie Consent is developed by \u003Ca href=\"https:\u002F\u002Fcomplianz.io\" rel=\"nofollow ugc\">Complianz B.V.\u003C\u002Fa>.\u003C\u002Fp>\n","Configure your Cookie Banner, Cookie Consent and Cookie Policy with our Wizard and Cookies Scan.",1000000,26472953,96,1608,"2025-12-16T13:49:00.000Z","5.9","7.4",[102,103,104,21,23],"consent","cookie","cookie-notice","https:\u002F\u002Fwww.wordpress.org\u002Fplugins\u002Fcomplianz-gdpr","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcomplianz-gdpr.7.4.4.2.zip",92,9,"2026-02-17 21:15:49",{"slug":104,"name":111,"version":112,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":117,"downloaded":118,"rating":96,"num_ratings":119,"last_updated":120,"tested_up_to":16,"requires_at_least":17,"requires_php":100,"tags":121,"homepage":124,"download_link":125,"security_score":126,"vuln_count":127,"unpatched_count":28,"last_vuln_date":128,"fetched_at":30},"Cookie Notice & Compliance for GDPR \u002F CCPA","2.5.14","Humanityco","https:\u002F\u002Fprofiles.wordpress.org\u002Fhumanityco\u002F","\u003Cp>\u003Cstrong>Cookie Notice\u003C\u002Fstrong> provides a simple, customizable website banner that can be used to help your website comply with certain cookie consent requirements under the EU GDPR cookie law and CCPA regulations and includes \u003Cstrong>seamless integration\u003C\u002Fstrong> with Cookie Compliance to help your site comply with the latest updates to existing consent laws.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Cookie Compliance\u003C\u002Fstrong> is a fully featured Consent Management Platform (CMP) that provides automated compliance features and enhanced design controls in a state-of-the-art web application. Cookie Compliance enables websites to \u003Cstrong>take a proactive approach to data protection and consent laws\u003C\u002Fstrong>. It is the first solution to offer Intentional Consent, a new consent framework that incorporates the latest guidelines from over 100+ countries, and emerging standards from leading international organizations like the IEEE and European Center for Digital Rights (noyb.eu). Cookie Compliance provides a beautiful, multi-level experience and includes new choices and controls for site visitors to better understand and engage in data privacy decisions.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>Our Cookie Compliance web application introduces a more ethical, proactive way to capture and manage consent.  This early version of the emerging Intentional Consent framework is a result of Hu-manity.co’s ongoing work with top Fortune 500 companies, governments, and standards organizations, who believe that the imbalanced relationship between consumers and corporations is unsustainable when it comes to data privacy and consent online. We are making it available for all website owners and operators who share this belief and support our mission to eliminate the dark patterns in online consent.\u003Cbr \u002F>\n  Matt Sinderbrand – Chief Platform Officer, Hu-manity.co\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>Cookie Notice (plugin only)\u003C\u002Fh3>\n\u003Cp>Cookie Notice provides a simple, customizable website banner to help your website comply with certain cookie consent requirements.\u003C\u002Fp>\n\u003Ch4>Banner features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Customizable notice message\u003C\u002Fli>\n\u003Cli>Consent on click, scroll or close\u003C\u002Fli>\n\u003Cli>Multiple cookie expiry options\u003C\u002Fli>\n\u003Cli>Link to Privacy Policy page\u003C\u002Fli>\n\u003Cli>WordPress Privacy Policy page synchronization\u003C\u002Fli>\n\u003Cli>WPML and Polylang compatible\u003C\u002Fli>\n\u003Cli>SEO friendly\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Cookie Compliance (plugin + web application)\u003C\u002Fh3>\n\u003Cp>Cookie Compliance gives you access to the most up-to-date formatting guidelines and technical compliance requirements for over 100 countries and legal jurisdictions.\u003C\u002Fp>\n\u003Ch4>Banner features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Intentional Consent\u003C\u002Fstrong> provides 3 equal buttons to give site visitors the ability to accept none, some, or all cookies through packaged choices called Data Access Levels. Data Access Levels improve consent conversion and eliminate the dark pattern of deceptive, non-equal choices in the first layer. \u003Cem>Complies with equal choice principle prescribed under GDPR and other data protection laws.\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Consent duration selector\u003C\u002Fstrong> gives visitor control over how long their consent remains valid for your site.  \u003Cem>Enables your site to align with recent guidelines from EU Data Protection Authorities, which state that cookie consent should be valid for no longer than a period of 6 months.\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cookie purpose categories\u003C\u002Fstrong> make it easy for website visitors to customize their consent by category. \u003Cem>Complies with affirmative, opt-in consent requirements prescribed under GDPR and other data protection laws.\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Consent metrics\u003C\u002Fstrong> displays the visitor’s consent record and a list of blocked \u002F allowed 3rd parties directly in the expanded level of the banner. \u003Cem>Complies with latest guidance from EU Data Protection Authorities like CNIL (France) and ICO (UK). \u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable Privacy Paper\u003C\u002Fstrong> provides helpful information to improve visitor comprehension and understanding of the data sharing risks and benefits. Allows you to summarize core components of your sites privacy notice and \u003Cem>aligns with the informed principle prescribed by GDPR rules for valid consent capture. \u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Configurable Privacy Contact\u003C\u002Fstrong> allows you to provide contact information for a business’ data privacy admin, as well as helpful links to data subject request forms and other data privacy resources. \u003Cem>Aligns with the informed principle prescribed by GDPR rules for valid consent capture.\u003C\u002Fem>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Web Application features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Consent analytics dashboard\u003C\u002Fstrong> shows event data for number of visits and provides a “trust score” to help you track how site visitors are setting their consent. Make adjustments to your banner to improve your cookie acceptance rate and monitor progress via the consent activity graph.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Default configurations\u003C\u002Fstrong> for GDPR, CCPA and more help to remove dark patterns and allow for quick and easy deployment of the consent banner without any guesswork. Customize the design of any default configuration to match the look and feel of your site.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Automatic script blocking\u003C\u002Fstrong> blocks all non-essential cookie scripts and iFrames by default and \u003Cem>complies with valid consent rules under GDPR and other data protection laws\u003C\u002Fem>; in order to be compliant, your site must record visitor consent before setting or sending cookies.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Google Consent Mode\u003C\u002Fstrong> ensures that your website can still gather valuable insights and perform effectively while respecting users’ privacy preferences by \u003Cem>dynamically adjusting the behavior of Google services according to user consent.\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Facebook Consent Mode\u003C\u002Fstrong> allows your website to \u003Cem>measure the impact of your ads on Facebook\u003C\u002Fem>, track website activities and conversions and automatically deliver ads to Facebook if the user has agreed to.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Consent record storage\u003C\u002Fstrong> automatically stores a record of each consent and makes these records available for export. \u003Cem>Complies with proof-of-consent requirements prescribed under GDPR and other data protection laws.\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multilingual support\u003C\u002Fstrong> automatically translates all banner text strings and allows you to provide custom translations for every text field to ensure visitors get a consistent consent experience.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multidomain management\u003C\u002Fstrong> allows you to manage additional Free or Professional domains under a single account and enables you to customize banner configuration and design for each domain independently.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Cookie Compliance proactive approach:\u003C\u002Fh4>\n\u003Cp>For all businesses, the resources required to stay ahead of the latest regulations increases with the passage of each new law. With enforcement of compliance violations increasing daily, we believe it is critical for us as a trusted consent vendor to do everything in our power to help you stay ahead of these laws and remove the risk to your business\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Cookie Compliance covers all current and upcoming regulations:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>GDPR (EU)\u003C\u002Fli>\n\u003Cli>ePrivacy Directive (EU)\u003C\u002Fli>\n\u003Cli>ePrivacy Regulation (EU)\u003C\u002Fli>\n\u003Cli>PECR (UK)\u003C\u002Fli>\n\u003Cli>LGPD (Brazil)\u003C\u002Fli>\n\u003Cli>PIPEDA (Canada)\u003C\u002Fli>\n\u003Cli>PDPB (India)\u003C\u002Fli>\n\u003Cli>CCPA (California, US)\u003C\u002Fli>\n\u003Cli>VCDPA (Virginia, US)\u003C\u002Fli>\n\u003Cli>Colorado Privacy Act (US)\u003C\u002Fli>\n\u003Cli>CPRA (California, US)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Cookie Compliance incorporates all recent formatting guidance:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>European Data Protection Supervisor (EDPS)\u003C\u002Fli>\n\u003Cli>ICO (United Kingdom)\u003C\u002Fli>\n\u003Cli>CNIL (France)\u003C\u002Fli>\n\u003Cli>GPDP (Italy)\u003C\u002Fli>\n\u003Cli>BfDl (Germany)\u003C\u002Fli>\n\u003Cli>AEPD (Spain)\u003C\u002Fli>\n\u003Cli>European Center for Digital Rights (noyb.eu)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Cookie Compliance targets dark patterns\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Dark Patterns are user interface (UI) techniques that push site visitors to make decisions (such as agreeing to the installation of cookies on their devices) that they might not otherwise make. The most common Dark Pattern is the lack of an equal “reject all” button on the first layer of the consent notice. Dark Patterns are explicitly banned under GDPR and other data protection laws.\u003C\u002Fp>\n\u003Cp>As a part of our proactive approach, Cookie Compliance is configured by default to prevent Dark Patterns through our unique Intentional Consent design.\u003C\u002Fp>\n","Cookie Notice allows you to you elegantly inform users that your site uses cookies and helps you comply with GDPR, CCPA and other data privacy laws.",900000,36171663,3020,"2026-03-04T01:02:00.000Z",[122,102,123,21,23],"ccpa","cookies","https:\u002F\u002Fcookie-compliance.co\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcookie-notice.2.5.14.zip",95,6,"2025-11-21 16:28:14",{"slug":130,"name":131,"version":132,"author":133,"author_profile":134,"description":135,"short_description":136,"active_installs":137,"downloaded":138,"rating":13,"num_ratings":139,"last_updated":140,"tested_up_to":16,"requires_at_least":141,"requires_php":142,"tags":143,"homepage":147,"download_link":148,"security_score":96,"vuln_count":149,"unpatched_count":28,"last_vuln_date":150,"fetched_at":30},"burst-statistics","Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative)","3.2.3","Burst Statistics B.V.","https:\u002F\u002Fprofiles.wordpress.org\u002Fburstbv\u002F","\u003Ch4>Finally, analytics that you’ll actually use.\u003C\u002Fh4>\n\u003Cp>Google Analytics is overkill. Other WordPress statistics plugins are cluttered and confusing. You just want to know what’s happening on your site – without a data science degree.\u003C\u002Fp>\n\u003Cp>Burst Statistics gives you a clean, intuitive analytics dashboard focused on the metrics that actually matter. \u003Cstrong>No external accounts. No complex setup. Install, activate, and understand your traffic in seconds.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Trusted by \u003Cstrong>200,000+ WordPress sites\u003C\u002Fstrong>. Built by the experienced team behind UpdraftPlus, WP-Optimize, and All-In-One Security.\u003C\u002Fp>\n\u003Ch4>What our users are saying\u003C\u002Fh4>\n\u003Cblockquote>\n\u003Cp>“Finally, an analytics plugin I can actually explain to clients.”\u003Cbr \u002F>\n  — @anguskeystone on wordpress.org\u003C\u002Fp>\n\u003Cp>“I tried WP Statistics and Independent Analytics, but they’re overloaded and confusing. Burst’s UI is intuitive and focused on what matters to me.”\u003Cbr \u002F>\n  — @vallered on wordpress.org\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Why Burst Statistics?\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Designed to be actionable\u003C\u002Fstrong>\u003Cbr \u002F>\nOther analytics plugins throw everything at you. Burst shows what matters — visitors, pageviews, referrers, top pages — in a dashboard you’ll actually use. No overload of data. No confusing menus.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Privacy-first by design\u003C\u002Fstrong>\u003Cbr \u002F>\nAll statistics stay on your server. No external tracking. Your data is yours – we never see it without your explicit permission.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Zero setup friction\u003C\u002Fstrong>\u003Cbr \u002F>\nInstall, activate, done. No Google accounts, no tracking codes, no configuration headaches. Start seeing live visitors immediately.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Built for WordPress\u003C\u002Fstrong>\u003Cbr \u002F>\nNot a port from another platform. Designed specifically for WordPress with native performance and seamless integration.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Fast and lightweight\u003C\u002Fstrong>\u003Cbr \u002F>\nOptimized database queries, no bloated scripts (\u003C4kb tracking script), no external dependencies slowing down your pages. Designed to track accurately even when using aggressive server-side caching.\u003C\u002Fp>\n\u003Cp>\u003Ch4>Features\u003C\u002Fh4>\n\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Understand your traffic\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>View table of top performing pages and posts\u003C\u002Fli>\n\u003Cli>Track key metrics (Visitors, Sessions, Pageviews, Bounce Rate)\u003C\u002Fli>\n\u003Cli>Breakdown of visitors by device (Desktop, Tablet, Mobile)\u003C\u002Fli>\n\u003Cli>Filter data by custom date ranges\u003C\u002Fli>\n\u003Cli>Compare traffic over time\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Real-time analytics\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Identify the real-time source for live visitors\u003C\u002Fli>\n\u003Cli>View the specific pages users are visiting now\u003C\u002Fli>\n\u003Cli>See a live count of active users on your site\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>See what content performs\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Top pages and posts ranked by views\u003C\u002Fli>\n\u003Cli>Compare any date range\u003C\u002Fli>\n\u003Cli>Track individual page performance\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Custom conversion tracking\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Track views, clicks and hooks\u003C\u002Fli>\n\u003Cli>Track WooCommerce sales\u003C\u002Fli>\n\u003Cli>Track custom events or hooks\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Privacy without compromise\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>100% self-hosted — all statistics stored locally in your WordPress database\u003C\u002Fli>\n\u003Cli>Cookieless tracking option (no consent banner required in some countries)\u003C\u002Fli>\n\u003Cli>Designed to support GDPR, CCPA, DSGVO, AVG, RGPD, and PECR compliance\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Stay informed\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Weekly or monthly email reports delivered to your inbox\u003C\u002Fli>\n\u003Cli>Compare periods to spot trends\u003C\u002Fli>\n\u003Cli>Get notified when tracking does not work\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>From the creators of UpdraftPlus, WP Optimize and All In One Security\u003C\u002Fh4>\n\u003Cp>Burst Statistics was created by experienced developers who also created:\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fupdraftplus\u002F\" rel=\"ugc\">UpdraftPlus: WP Backup & Migration Plugin\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fall-in-one-wp-security-and-firewall\u002F\" rel=\"ugc\">All-In-One Security (AIOS) – Security and Firewall\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-optimize\u002F\" rel=\"ugc\">WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Who is Burst for?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Bloggers & content creators\u003C\u002Fstrong> — See which posts resonate with your audience\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Small business owners\u003C\u002Fstrong> — Understand your traffic without complexity\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WooCommerce stores\u003C\u002Fstrong> — Track visitor behavior and sales (Burst Pro – Business plan)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Agencies & freelancers\u003C\u002Fstrong> — Manage analytics for your clients (Burst Pro – Agency plan)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy-conscious site owners\u003C\u002Fstrong> — GDPR-compliant stats without consent banners\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Anyone tired of Google Analytics\u003C\u002Fstrong> — Get clarity instead of confusion\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Unlock comprehensive insights into your website’s user behaviour with Burst Pro. Benefit from advanced features designed to improve performance, boost engagement, and drive conversions. \u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">Get Burst Pro now.\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Free vs Pro\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Burst Statistics (Free)\u003C\u002Fstrong> includes everything you need to understand your website traffic: visitors, pageviews, referrers, top content, device stats, goal tracking, email reports, and more.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Burst Pro\u003C\u002Fstrong> adds advanced features for businesses and professionals:\u003C\u002Fp>\n\u003Cp>CREATOR PLAN\u003Cbr \u002F>\n* UTM campaign tracking — See which marketing efforts drive results\u003Cbr \u002F>\n* Geographic data — Country and city-level visitor insights\u003Cbr \u002F>\n* Advanced filtering — Segment data by any dimension\u003Cbr \u002F>\n* Data archiving settings — Keep your database lean automatically\u003Cbr \u002F>\n* Priority support — Direct contact with our developers (You’ll speak to actual humans!)\u003C\u002Fp>\n\u003Cp>BUSINESS PLAN\u003Cbr \u002F>\n* Everything in the creator plan +\u003Cbr \u002F>\n* Full sales dashboard — Understand what content brings in the most revenue\u003Cbr \u002F>\n* Revenue attribution — Connect WooCommerce sales to traffic sources\u003C\u002Fp>\n\u003Cp>AGENCY PLAN\u003Cbr \u002F>\n* Everything in the business plan +\u003Cbr \u002F>\n* Reporting — Generate shareable reports\u003C\u002Fp>\n\u003Cp>All Burst Pro plans include \u003Cstrong>priority support\u003C\u002Fstrong>.  You’ll have direct contact with our developers (You’ll speak to actual humans!)\u003C\u002Fp>\n\u003Ch4>Learn More\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fburst-statistics-vs-google-analytics\u002F\" rel=\"nofollow ugc\">Burst Statistics vs Google Analytics\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fwhy-is-burst-privacy-friendly\u002F\" rel=\"nofollow ugc\">Privacy & GDPR Compliance\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">Burst Pro Pricing\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Privacy and Data Sharing\u003C\u002Fh4>\n\u003Cp>Burst Statistics includes an \u003Cstrong>optional\u003C\u002Fstrong> data sharing program. It is disabled by default. You can enable it under Burst Statistics \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Data Sharing, and you can turn it off again at any time from the same location.\u003Cbr \u002F>\nWhen enabled, the plugin sends a small set of aggregated, anonymized metrics to Burst Statistics’ servers once per month. This includes traffic statistics (visitors, pageviews, bounce rate, session duration), database row counts and query performance timings. No personal data, IP addresses, domain names, or visitor information is ever transmitted. All data is aggregated on your server before it leaves, making it impossible to trace back to your website or any individual user.\u003C\u002Fp>\n\u003Cp>We use this data to:\u003Cbr \u002F>\n* build anonymous industry benchmarks so you can compare your site’s performance against peers;\u003Cbr \u002F>\n* understand which features are most used, so we can prioritize development effectively;\u003Cbr \u002F>\n* know which WordPress and PHP versions are in active use, so we can make informed support decisions;\u003Cbr \u002F>\n* identify slow database queries across real-world installs, so we can improve plugin performance for everyone.\u003C\u002Fp>\n\u003Cp>For the complete list of data fields collected and full details on how the data is used, please read our \u003Ca href=\"https:\u002F\u002Fburst-statistics.com\u002Fhow-we-handle-anonymous-usage-data\u002F\" rel=\"nofollow ugc\">Data Sharing Policy\u003C\u002Fa>.\u003Cbr \u002F>\nThis feature connects to: https:\u002F\u002Fapi.burst-statistics.com\u003C\u002Fp>\n\u003Ch4>Installation\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Go to \u003Cstrong>Plugins \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Add New\u003C\u002Fstrong> in your WordPress dashboard\u003C\u002Fli>\n\u003Cli>Search for \u003Cstrong>Burst\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Click \u003Cstrong>Install Now\u003C\u002Fstrong>, then \u003Cstrong>Activate\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Visit \u003Cstrong>Statistics \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Dashboard\u003C\u002Fstrong> to see your analytics\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>That’s it. No external accounts. No tracking codes to paste. Burst starts collecting statistics immediately.\u003C\u002Fp>\n","Analytics you'll actually use. Privacy-friendly, zero config, and designed to be actionable. Get insights, not just raw data.",200000,7013207,173,"2026-03-12T07:52:00.000Z","6.4","8.0",[144,21,23,145,146],"analytics","statistics","stats","https:\u002F\u002Fwww.wordpress.org\u002Fplugins\u002Fburst-statistics","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fburst-statistics.3.2.3.zip",3,"2025-06-27 00:00:00",{"attackSurface":152,"codeSignals":210,"taintFlows":232,"riskAssessment":259,"analyzedAt":267},{"hooks":153,"ajaxHandlers":188,"restRoutes":200,"shortcodes":201,"cronEvents":209,"entryPointCount":127,"unprotectedCount":28},[154,160,165,170,174,176,178,179,183],{"type":155,"name":156,"callback":157,"priority":63,"file":158,"line":159},"filter","user_request_confirmed_email_to","gdrf_filter_dpo_email","includes\\admin-settings.php",19,{"type":161,"name":162,"callback":163,"file":158,"line":164},"action","admin_enqueue_scripts","gdrf_enqueue_admin_script",53,{"type":161,"name":166,"callback":167,"file":168,"line":169},"init","gdrf_block_init","public\\block.php",47,{"type":161,"name":171,"callback":172,"file":173,"line":14},"wp_enqueue_scripts","enqueue_styles_gdrf_public","public\\enqueues.php",{"type":161,"name":171,"callback":175,"file":173,"line":159},"enqueue_scripts_gdrf_public",{"type":161,"name":171,"callback":172,"file":177,"line":14},"public\\public.php",{"type":161,"name":171,"callback":175,"file":177,"line":159},{"type":161,"name":166,"callback":180,"file":181,"line":182},"gdrf_shortcode_init","public\\shortcode.php",20,{"type":161,"name":184,"callback":185,"file":186,"line":187},"widgets_init","closure","public\\widget.php",23,[189,195,197,199],{"action":190,"nopriv":191,"callback":190,"hasNonce":192,"hasCapCheck":191,"file":193,"line":194},"gdrf_data_request",false,true,"data-request.php",61,{"action":190,"nopriv":192,"callback":190,"hasNonce":192,"hasCapCheck":191,"file":193,"line":196},62,{"action":190,"nopriv":191,"callback":190,"hasNonce":192,"hasCapCheck":191,"file":198,"line":194},"includes\\data-request.php",{"action":190,"nopriv":192,"callback":190,"hasNonce":192,"hasCapCheck":191,"file":198,"line":196},[],[202,206],{"tag":203,"callback":204,"file":181,"line":205},"gdpr-data-request","gdrf_data_request_form",16,{"tag":207,"callback":204,"file":181,"line":208},"gpdr-data-request",18,[],{"dangerousFunctions":211,"sqlUsage":212,"outputEscaping":214,"fileOperations":28,"externalRequests":28,"nonceChecks":230,"capabilityChecks":28,"bundledLibraries":231},[],{"prepared":28,"raw":28,"locations":213},[],{"escaped":215,"rawEcho":216,"locations":217},66,5,[218,221,224,226,228],{"file":158,"line":219,"context":220},32,"raw output",{"file":222,"line":223,"context":220},"public\\hook.php",54,{"file":222,"line":225,"context":220},55,{"file":222,"line":227,"context":220},89,{"file":186,"line":229,"context":220},48,2,[],[233,251],{"entryPoint":234,"graph":235,"unsanitizedCount":27,"severity":250},"gdrf_enqueue_admin_script (includes\\admin-settings.php:24)",{"nodes":236,"edges":248},[237,242],{"id":238,"type":239,"label":240,"file":158,"line":241},"n0","source","$_POST",30,{"id":243,"type":244,"label":245,"file":158,"line":246,"wp_function":247},"n1","sink","update_option() [Settings Manipulation]",31,"update_option",[249],{"from":238,"to":243,"sanitized":191},"low",{"entryPoint":252,"graph":253,"unsanitizedCount":27,"severity":250},"\u003Cadmin-settings> (includes\\admin-settings.php:0)",{"nodes":254,"edges":257},[255,256],{"id":238,"type":239,"label":240,"file":158,"line":241},{"id":243,"type":244,"label":245,"file":158,"line":246,"wp_function":247},[258],{"from":238,"to":243,"sanitized":191},{"summary":260,"deductions":261},"The gdpr-data-request-form plugin v1.7 exhibits a generally strong security posture with several good practices evident in the static analysis. Notably, all SQL queries are prepared statements, and a very high percentage of outputs are properly escaped, significantly reducing the risk of common web vulnerabilities like SQL injection and cross-site scripting. The plugin also lacks dangerous functions, file operations, and external HTTP requests, further minimizing its attack surface. The absence of any unpatched vulnerabilities in its history is also a positive sign.\n\nHowever, there are a couple of areas that warrant attention. The presence of two 'flows with unsanitized paths' in the taint analysis, while not classified as critical or high severity, suggests a potential for insecure handling of file paths or user-supplied input that could be used to manipulate file access. Additionally, the complete absence of capability checks on its entry points is a significant concern. While AJAX handlers and shortcodes are present, the lack of explicit permission checks means that any authenticated user, regardless of their role, could potentially trigger these functionalities. This could lead to unintended actions or data exposure if the functionality is sensitive.\n\nOverall, the plugin has a solid foundation in secure coding practices, particularly concerning database interactions and output handling. The historical data also indicates a responsible approach to vulnerability management. The main weaknesses lie in the potential for path-related issues identified in the taint analysis and the critical omission of capability checks on its entry points, which represent a notable risk that could be exploited by authenticated but unauthorized users.",[262,264],{"reason":263,"points":216},"Flows with unsanitized paths",{"reason":265,"points":266},"No capability checks on entry points",15,"2026-03-16T18:05:26.201Z",{"wat":269,"direct":280},{"assetPaths":270,"generatorPatterns":274,"scriptPaths":275,"versionParams":277},[271,272,273],"\u002Fwp-content\u002Fplugins\u002Fgdpr-data-request-form\u002Fpublic\u002Fcss\u002Fpublic.css","\u002Fwp-content\u002Fplugins\u002Fgdpr-data-request-form\u002Fpublic\u002Fjs\u002Fgdrf-public.js","\u002Fwp-content\u002Fplugins\u002Fgdpr-data-request-form\u002Fincludes\u002Fjs\u002Fgdrf-admin.js",[],[276],"js\u002Fgdrf-admin.js",[278,279],"gdpr-data-request-form\u002Fpublic\u002Fcss\u002Fpublic.css?ver=","gdpr-data-request-form\u002Fpublic\u002Fjs\u002Fgdrf-public.js?ver=",{"cssClasses":281,"htmlComments":289,"htmlAttributes":290,"restEndpoints":298,"jsGlobals":300,"shortcodeOutput":303},[282,283,284,285,286,287,288],"gdrf-field","gdrf-field-action","gdrf-data-type-input","gdrf-data-type-label","gdrf-field-email","gdrf-field-human","gdrf-field-submit",[],[291,292,293,294,295,296,297],"gdrf_data_human_key","gdrf_data_nonce","gdrf_data_type","gdrf-data-type-export","gdrf-data-type-remove","gdrf_data_email","gdrf_data_human",[299],"\u002Fwp-json\u002Fwp\u002Fv2\u002Fusers",[301,302],"gdrf_settings","gdrf_localize",[]]