[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4cB13OhOmfc3JHVFkmC--0uAMq38KZr9l928IvEWUcc":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":18,"download_link":19,"security_score":20,"vuln_count":11,"unpatched_count":11,"last_vuln_date":21,"fetched_at":22,"vulnerabilities":23,"developer":24,"crawl_stats":21,"alternatives":29,"analysis":30,"fingerprints":197},"idevelop-floating-circle-button","Floating Circle Button","1.5.1","idevelopit","https:\u002F\u002Fprofiles.wordpress.org\u002Fidevelopit\u002F","\u003Cp>Elevate your website’s contact experience with the Floating Circle Button. This is a comprehensive social hub that connects your visitors directly to WhatsApp, Email, Phone, or Telegram.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n*   \u003Cstrong>Multi-Channel Hub\u003C\u002Fstrong>: Add multiple contact methods in one elegant floating menu.\u003Cbr \u002F>\n*   \u003Cstrong>WhatsApp Personalization\u003C\u002Fstrong>: Pre-fill messages with dynamic tags like {{url}} and {{title}}.\u003Cbr \u002F>\n*   \u003Cstrong>Office Hours\u003C\u002Fstrong>: Show or hide the button based on your business hours.\u003Cbr \u002F>\n*   \u003Cstrong>Smart Nudge\u003C\u002Fstrong>: Grab attention with a non-intrusive speech bubble.\u003Cbr \u002F>\n*   \u003Cstrong>GDPR Compliant Analytics\u003C\u002Fstrong>: Track clicks without storing any personal data.\u003Cbr \u002F>\n*   \u003Cstrong>Highly Customizable\u003C\u002Fstrong>: Change positions, colors, icons, and entrance animations.\u003Cbr \u002F>\n*   \u003Cstrong>Fast & Lightweight\u003C\u002Fstrong>: Zero external dependencies (Vanilla JS\u002FCSS).\u003C\u002Fp>\n","Elevate your website's contact experience with the Floating Circle Button. This is a comprehensive social hub that connects your visitors directl …",0,190,"2026-01-25T21:13:00.000Z","7.0","5.0","7.2",[],"https:\u002F\u002Fidevelop.vip\u002Fplugins\u002Fplugin\u002Fidevelop-floating-circle-button\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fidevelop-floating-circle-button.1.5.1.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":25,"total_installs":11,"avg_security_score":20,"avg_patch_time_days":26,"trust_score":27,"computed_at":28},2,30,94,"2026-04-05T14:56:03.217Z",[],{"attackSurface":31,"codeSignals":74,"taintFlows":163,"riskAssessment":190,"analyzedAt":196},{"hooks":32,"ajaxHandlers":57,"restRoutes":70,"shortcodes":71,"cronEvents":72,"entryPointCount":73,"unprotectedCount":11},[33,39,43,45,49,53],{"type":34,"name":35,"callback":36,"file":37,"line":38},"action","admin_menu","add_admin_menu","idevelop-floating-circle-button.php",28,{"type":34,"name":40,"callback":41,"file":37,"line":42},"admin_init","settings_init",29,{"type":34,"name":40,"callback":44,"file":37,"line":26},"reset_stats_check",{"type":34,"name":46,"callback":47,"file":37,"line":48},"wp_footer","display_floating_button",31,{"type":34,"name":50,"callback":51,"file":37,"line":52},"wp_enqueue_scripts","enqueue_styles",32,{"type":34,"name":54,"callback":55,"file":37,"line":56},"admin_footer","admin_scripts",33,[58,64,66],{"action":59,"nopriv":60,"callback":61,"hasNonce":62,"hasCapCheck":60,"file":37,"line":63},"idevelop_track_click",false,"handle_click_tracking",true,36,{"action":59,"nopriv":62,"callback":61,"hasNonce":62,"hasCapCheck":60,"file":37,"line":65},37,{"action":67,"nopriv":60,"callback":68,"hasNonce":62,"hasCapCheck":62,"file":37,"line":69},"idevelop_ajax_save","ajax_save_settings",40,[],[],[],3,{"dangerousFunctions":75,"sqlUsage":76,"outputEscaping":78,"fileOperations":11,"externalRequests":11,"nonceChecks":73,"capabilityChecks":161,"bundledLibraries":162},[],{"prepared":11,"raw":11,"locations":77},[],{"escaped":79,"rawEcho":80,"locations":81},81,39,[82,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,159],{"file":37,"line":83,"context":84},234,"raw output",{"file":37,"line":86,"context":84},242,{"file":37,"line":88,"context":84},257,{"file":37,"line":90,"context":84},260,{"file":37,"line":92,"context":84},264,{"file":37,"line":94,"context":84},268,{"file":37,"line":96,"context":84},272,{"file":37,"line":98,"context":84},283,{"file":37,"line":100,"context":84},284,{"file":37,"line":102,"context":84},294,{"file":37,"line":104,"context":84},295,{"file":37,"line":106,"context":84},312,{"file":37,"line":108,"context":84},336,{"file":37,"line":110,"context":84},349,{"file":37,"line":112,"context":84},358,{"file":37,"line":114,"context":84},359,{"file":37,"line":116,"context":84},364,{"file":37,"line":118,"context":84},367,{"file":37,"line":120,"context":84},378,{"file":37,"line":122,"context":84},379,{"file":37,"line":124,"context":84},380,{"file":37,"line":126,"context":84},392,{"file":37,"line":128,"context":84},393,{"file":37,"line":130,"context":84},397,{"file":37,"line":132,"context":84},398,{"file":37,"line":134,"context":84},402,{"file":37,"line":136,"context":84},403,{"file":37,"line":138,"context":84},414,{"file":37,"line":140,"context":84},424,{"file":37,"line":142,"context":84},432,{"file":37,"line":144,"context":84},433,{"file":37,"line":146,"context":84},446,{"file":37,"line":148,"context":84},447,{"file":37,"line":150,"context":84},448,{"file":37,"line":152,"context":84},449,{"file":37,"line":154,"context":84},461,{"file":37,"line":156,"context":84},465,{"file":37,"line":158,"context":84},823,{"file":37,"line":160,"context":84},879,1,[],[164,182],{"entryPoint":165,"graph":166,"unsanitizedCount":11,"severity":181},"ajax_save_settings (idevelop-floating-circle-button.php:607)",{"nodes":167,"edges":179},[168,173],{"id":169,"type":170,"label":171,"file":37,"line":172},"n0","source","$_POST",621,{"id":174,"type":175,"label":176,"file":37,"line":177,"wp_function":178},"n1","sink","update_option() [Settings Manipulation]",624,"update_option",[180],{"from":169,"to":174,"sanitized":62},"low",{"entryPoint":183,"graph":184,"unsanitizedCount":11,"severity":181},"\u003Cidevelop-floating-circle-button> (idevelop-floating-circle-button.php:0)",{"nodes":185,"edges":188},[186,187],{"id":169,"type":170,"label":171,"file":37,"line":172},{"id":174,"type":175,"label":176,"file":37,"line":177,"wp_function":178},[189],{"from":169,"to":174,"sanitized":62},{"summary":191,"deductions":192},"The idevelop-floating-circle-button plugin version 1.5.1 exhibits a generally good security posture based on the static analysis.  A notable strength is the complete absence of unpatched vulnerabilities in its history and the fact that all identified AJAX handlers have nonce checks, and SQL queries are properly prepared.  The limited attack surface, with all entry points appearing to be protected, is also a positive indicator. The taint analysis shows no high or critical severity flows, further bolstering confidence in its current security.  However, a significant concern is the output escaping, with 68% properly escaped, leaving a substantial portion (32%) unescaped. This could potentially lead to cross-site scripting (XSS) vulnerabilities if user-supplied data is outputted without proper sanitization.  While the plugin has no known historical vulnerabilities, the lack of comprehensive output escaping remains a key area for improvement and a potential risk.",[193],{"reason":194,"points":195},"Insufficient output escaping",7,"2026-03-17T07:14:23.614Z",{"wat":198,"direct":209},{"assetPaths":199,"generatorPatterns":203,"scriptPaths":204,"versionParams":205},[200,201,202],"\u002Fwp-content\u002Fplugins\u002Fidevelop-floating-circle-button\u002Fassets\u002Fcss\u002Ffrontend.css","\u002Fwp-content\u002Fplugins\u002Fidevelop-floating-circle-button\u002Fassets\u002Fjs\u002Ffrontend.js","\u002Fwp-content\u002Fplugins\u002Fidevelop-floating-circle-button\u002Fassets\u002Fcss\u002Fadmin.css",[],[201],[206,207,208],"idevelop-floating-circle-button\u002Fassets\u002Fcss\u002Ffrontend.css?ver=","idevelop-floating-circle-button\u002Fassets\u002Fjs\u002Ffrontend.js?ver=","idevelop-floating-circle-button\u002Fassets\u002Fcss\u002Fadmin.css?ver=",{"cssClasses":210,"htmlComments":215,"htmlAttributes":217,"restEndpoints":239,"jsGlobals":241,"shortcodeOutput":243},[211,212,213,214],"idevelop-floating-circle-button-wrapper","idevelop-fbc-close-btn","idevelop-fbc-channel-icon","idevelop-fbc-hub-mode",[216],"\u003C!-- iDevelop Floating Circle Button -->",[218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238],"data-fbc-enabled","data-fbc-vertical","data-fbc-horizontal","data-fbc-delay","data-fbc-scroll-percentage","data-fbc-main-color","data-fbc-nudge-enabled","data-fbc-nudge-text","data-fbc-nudge-delay","data-fbc-nudge-position","data-fbc-nudge-color","data-fbc-nudge-background-color","data-fbc-hours-enabled","data-fbc-hours-schedule","data-fbc-hours-timezone","data-fbc-hours-text-open","data-fbc-hours-text-closed","data-fbc-hours-color-open","data-fbc-hours-color-closed","data-fbc-hours-background-color-open","data-fbc-hours-background-color-closed",[240],"\u002Fwp-json\u002Fidevelop-floating-circle-button\u002Fv1\u002Ftrack",[242],"idevelop_fbc_settings",[]]