[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5f7TuPPvOHhGTsa7hZ8cLig8esDMY6Bth7tX-_DLiEM":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":34,"analysis":126,"fingerprints":198},"ht-call-now","HT CALL ME","1.0.1","htweb","https:\u002F\u002Fprofiles.wordpress.org\u002Fhtweb\u002F","\u003Cp>This plugin places a Call Now button (click-to-call) to the bottom of the screen which is only visible for your mobile visitors. Because your mobile visitors are already holding their phone it will allow them to call you with one simple touch of the button.\u003C\u002Fp>\n","This plugin places a Call Now button (click-to-call) to the bottom of the screen which is only visible for your mobile visitors.",30,1859,0,"2020-05-19T03:27:00.000Z","5.2.24","1.0.2","5.2",[19,20,21,22,23],"call","contact","customers","sale","ssell","https:\u002F\u002Fhtweb.vn\u002Fplugin\u002Fht-call-now.zip","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fht-call-now.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":11,"trust_score":32,"computed_at":33},1,84,"2026-04-04T15:23:33.937Z",[35,55,72,91,108],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":45,"num_ratings":31,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":53,"download_link":54,"security_score":45,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"echbay-phonering-alo","EchBay Phonering Alo","1.3.1","Dao Quoc Dai","https:\u002F\u002Fprofiles.wordpress.org\u002Fitvn9online\u002F","\u003Cp>Add Phonering Alo button to your website. A very simple yet very effective plugin that adds a Call Now button to your website for every device (mobile, table and desktop).\u003C\u002Fp>\n","Add Phonering Alo button to your website. A very simple yet very effective plugin that adds a Call Now button to your website for every device (mobile …",1000,26219,100,"2025-11-28T02:59:00.000Z","6.9.4","4.8","",[19,20,21,51,52],"phonering","sales","https:\u002F\u002Fwww.facebook.com\u002Fgroups\u002Fwordpresseb","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fechbay-phonering-alo.zip",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":13,"num_ratings":13,"last_updated":65,"tested_up_to":66,"requires_at_least":67,"requires_php":49,"tags":68,"homepage":70,"download_link":71,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"lucep-call-now-button","Lucep Call Now Button","1.0.3","lucep","https:\u002F\u002Fprofiles.wordpress.org\u002Flucep\u002F","\u003Cp>Research shows that engaging with prospects in under 5 minutes of requesting a call back, results in 21x higher conversion rates. Lucep’s power packed duo of click-to-call widget and mobile app empowers you to do just this, with time and detailed analytics on your side.\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FFV08pvInFc4?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch3>What does the plugin do?\u003C\u002Fh3>\n\u003Cp>This plugin places a call now widget (click to call) at the bottom of the sceen for all of your visitors. When they click on it, they will be prompted for their name and number, and upon submission, this will be sent to your entire sales team using the Lucep mobile app.\u003C\u002Fp>\n\u003Cp>The plugin uses advanced analytics that lets you monitor visitor flow, usage patterns, and understand what your prospect finds most interesting on your site.\u003C\u002Fp>\n\u003Ch3>Incredibly easy to start!\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Flucep.com\u002Fsignup\u002F?utm_medium=wordpress&utm_campaign=lucep-plugin&utm_source=wordpress-plugin-description\" rel=\"nofollow ugc\">Get your free Lucep account\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Install this plugin, and activate it\u003C\u002Fli>\n\u003Cli>Install the mobile app\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>What makes Lucep the number one choice for businesses?\u003C\u002Fh3>\n\u003Cp>Besides the 42% increase in visitor to lead conversion, Lucep does not have any per minute, or per lead charges. We also offer a pro service for businesses that provides support for integration with CRMs such as SalesForce, Hubspot, Pipedrive and others, along with many other power-packed business features!\u003C\u002Fp>\n","An award winning \"call now\" (or click to call) widget that works on all of your pages! Proven to increase sales by over 72% and it's fr …",10,1564,"2017-08-04T09:02:00.000Z","4.8.28","3.3",[19,20,21,52,69],"sell","https:\u002F\u002Flucep.com\u002Fsignup\u002F?utm_medium=wordpress&utm_campaign=lucep-plugin&utm_source=wordpress-plugin-uri","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flucep-call-now-button.1.0.3.zip",{"slug":73,"name":74,"version":58,"author":75,"author_profile":76,"description":77,"short_description":78,"active_installs":79,"downloaded":80,"rating":81,"num_ratings":31,"last_updated":82,"tested_up_to":83,"requires_at_least":84,"requires_php":49,"tags":85,"homepage":87,"download_link":88,"security_score":89,"vuln_count":31,"unpatched_count":31,"last_vuln_date":90,"fetched_at":28},"atp-call-now","ATP Call Now","Truong Thanh","https:\u002F\u002Fprofiles.wordpress.org\u002Ftruongthanh6365\u002F","\u003Ch3>Custom easy plugin call with ATP Call Now\u003C\u002Fh3>\n\u003Cp>An easy way to edit the call button’s color main and icon, text’s color and background. Setup position left, right, top, bottom. Edit size Call button, change icon for Call button.\u003C\u002Fp>\n\u003Ch3>Optimized for mobile\u003C\u002Fh3>\n\u003Cp>Optimized for responsive websites.\u003C\u002Fp>\n","Show button Call Now on your website (support desktop and mobile).",800,5455,20,"2020-03-11T03:19:00.000Z","5.3.21","4.6",[19,20,21,86,69],"hotline","https:\u002F\u002Fatpsoftware.vn\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fatp-call-now.zip",63,"2025-06-19 00:00:00",{"slug":92,"name":93,"version":6,"author":94,"author_profile":95,"description":96,"short_description":97,"active_installs":63,"downloaded":98,"rating":45,"num_ratings":99,"last_updated":100,"tested_up_to":83,"requires_at_least":84,"requires_php":101,"tags":102,"homepage":106,"download_link":107,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"scarcity-jeet","WP Scarcity Jeet – Powerful scarcity and urgency timer for your landing pages","Teknikforce Ventures","https:\u002F\u002Fprofiles.wordpress.org\u002Fteknikforce\u002F","\u003Cp>Scarcity Jeet is a feature rich timer widget for your landing pages, squeeze pages and articles. You can use it to introduce time-scarcity on any page with your desired call to action.\u003Cbr \u002F>\nLeverage the scarcity element and boost your conversions by up to a whopping 350 percent. Scarcity Jeet is a WordPress compatible, highly customizable plugin that grabs your subscribers’ attention and makes them focus on your offers. It creates a timer for your offers on your webpage creating a sense of urgency which boosts conversions.\u003C\u002Fp>\n\u003Ch3>Demo and Tutorial\u003C\u002Fh3>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F5HKxigO6PqI?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>Here a few features listed:\u003Cbr \u002F>\n* Put in your own image or ecover to attract attention to your product. Lets you hide or highlight the URL image.\u003Cbr \u002F>\n* Modifiable text, color, time settings, and catchline to customize as per your discretion.\u003Cbr \u002F>\n* Lets you dock your bar to the top or bottom of the page.\u003Cbr \u002F>\n* Lets you display your product photo, cartoon or any custom image on the bar or as an overlay.\u003C\u002Fp>\n","Scarcity Jeet is a very flexible and powerful timer and banner widget.  You can choose between many designs and even put in your own images and e-cove …",1153,6,"2020-02-17T13:27:00.000Z","5.2.4",[103,21,104,52,105],"call-to-action","offer-creator","scarcity","https:\u002F\u002Fteknikforce.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fscarcity-jeet.zip",{"slug":109,"name":110,"version":111,"author":112,"author_profile":113,"description":114,"short_description":115,"active_installs":63,"downloaded":116,"rating":13,"num_ratings":13,"last_updated":117,"tested_up_to":118,"requires_at_least":119,"requires_php":120,"tags":121,"homepage":124,"download_link":125,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"webrtc-softphone","WebRTC Softphone","0.1.1","nabeelee","https:\u002F\u002Fprofiles.wordpress.org\u002Fnabeelee\u002F","\u003Ch3>What does the plugin do?\u003C\u002Fh3>\n\u003Cp>This plugin places a WebRTC Softphone showing after clicking Phone Icon to the bottom right corner of the screen or incoming call.\u003C\u002Fp>\n\u003Ch3>Could not be easier!\u003C\u002Fh3>\n\u003Cp>The settings are very easy: enable and enter your sip information. That’s it!\u003C\u002Fp>\n\u003Cp>But if you want more control, you can always open up the Advanced Settings and change the default behavior.\u003C\u002Fp>\n","WebRTC Softphone for Sip Calling  with motion  animate icon at the bottom of your site.",1653,"2017-11-15T16:42:00.000Z","4.9.29","2.7","5.6",[122,19,123,20,21],"button","call-now","http:\u002F\u002Fechobyte.net\u002Fwebrtc-softphone-wordpress-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwebrtc-softphone.zip",{"attackSurface":127,"codeSignals":156,"taintFlows":187,"riskAssessment":188,"analyzedAt":197},{"hooks":128,"ajaxHandlers":152,"restRoutes":153,"shortcodes":154,"cronEvents":155,"entryPointCount":13,"unprotectedCount":13},[129,135,139,143,147,149,150,151],{"type":130,"name":131,"callback":132,"file":133,"line":134},"action","plugins_loaded","init_hooks","ht-call-now\\ht-call-now.php",29,{"type":130,"name":136,"callback":137,"file":133,"line":138},"admin_menu","set_menu_panel",45,{"type":130,"name":140,"callback":141,"file":133,"line":142},"wp_enqueue_scripts","ht_scripts",46,{"type":130,"name":144,"callback":145,"file":133,"line":146},"wp_footer","view_ht_call_now",47,{"type":130,"name":131,"callback":132,"file":148,"line":134},"ht-call-now.php",{"type":130,"name":136,"callback":137,"file":148,"line":138},{"type":130,"name":140,"callback":141,"file":148,"line":142},{"type":130,"name":144,"callback":145,"file":148,"line":146},[],[],[],[],{"dangerousFunctions":157,"sqlUsage":158,"outputEscaping":160,"fileOperations":13,"externalRequests":13,"nonceChecks":185,"capabilityChecks":13,"bundledLibraries":186},[],{"prepared":13,"raw":13,"locations":159},[],{"escaped":81,"rawEcho":161,"locations":162},14,[163,166,168,170,172,173,175,177,178,179,180,181,182,183],{"file":133,"line":164,"context":165},111,"raw output",{"file":133,"line":167,"context":165},128,{"file":133,"line":169,"context":165},130,{"file":133,"line":171,"context":165},131,{"file":133,"line":171,"context":165},{"file":133,"line":174,"context":165},132,{"file":176,"line":161,"context":165},"ht-call-now\\includes\\templatebackend.php",{"file":148,"line":164,"context":165},{"file":148,"line":167,"context":165},{"file":148,"line":169,"context":165},{"file":148,"line":171,"context":165},{"file":148,"line":171,"context":165},{"file":148,"line":174,"context":165},{"file":184,"line":161,"context":165},"includes\\templatebackend.php",2,[],[],{"summary":189,"deductions":190},"The \"ht-call-now\" plugin version 1.0.1 demonstrates a generally good security posture based on the provided static analysis. There are no identified AJAX handlers, REST API routes, shortcodes, or cron events, resulting in a zero attack surface. Furthermore, the code shows no critical or high severity taint flows, no direct SQL queries (all use prepared statements), and no file operations or external HTTP requests, which are positive indicators of secure coding practices. The presence of nonce checks also suggests an attempt to protect against CSRF attacks.\n\nHowever, there are areas for improvement. The fact that only 59% of output is properly escaped is a concern. This means that nearly half of all output points could potentially lead to cross-site scripting (XSS) vulnerabilities if user-supplied data is involved and not handled securely. While the plugin has no recorded vulnerability history, this could be due to a lack of past scrutiny or simply a coincidence. The absence of capability checks for the two identified nonce checks is another potential weakness, as it implies that any authenticated user, regardless of their role or permissions, could potentially trigger the nonce-protected actions.\n\nIn conclusion, \"ht-call-now\" v1.0.1 has a strong foundation with its limited attack surface and use of prepared statements. The primary risk lies in the significant portion of unescaped output, which could open the door to XSS attacks. The lack of capability checks on nonce protected actions is also a notable concern. Addressing these specific issues would significantly bolster the plugin's security.",[191,194],{"reason":192,"points":193},"Unescaped output detected",8,{"reason":195,"points":196},"No capability checks on nonce actions",5,"2026-03-16T22:31:59.792Z",{"wat":199,"direct":208},{"assetPaths":200,"generatorPatterns":203,"scriptPaths":204,"versionParams":205},[201,202],"\u002Fwp-content\u002Fplugins\u002Fht-call-now\u002Fassets\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fht-call-now\u002Fassets\u002Fcss\u002Ffont-awesome.min.css",[],[],[206,207],"ht-call-now\u002Fassets\u002Fcss\u002Fstyle.css?ver=","ht-call-now\u002Fassets\u002Fcss\u002Ffont-awesome.min.css?ver=",{"cssClasses":209,"htmlComments":213,"htmlAttributes":214,"restEndpoints":219,"jsGlobals":220,"shortcodeOutput":221},[4,210,211,212],"ringing_phone","ringing_phone_before","ringing_phone_after",[],[215,216,217,218],"data-ht-call-now-phone","data-ht-call-now-bg-color","data-ht-call-now-color","data-ht-call-now-style",[],[],[]]