[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fv1XDjsbuP3u4K_BvGyXnAAZeTo6o5rHlwSl4pcuSpjg":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":21,"download_link":22,"security_score":23,"vuln_count":24,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":43,"crawl_stats":34,"alternatives":49,"analysis":164,"fingerprints":250},"integrate-firebase","Integrate Firebase","0.10.0","Dale Nguyen","https:\u002F\u002Fprofiles.wordpress.org\u002Fhanthuy\u002F","\u003Cp>The Firebase for WordPress Plugin will help a Firebase user to login to your WordPress interface – not to WordPress dashboard – from Firebase authentication. You can show user info and display data that is only available to your Firebase users.\u003C\u002Fp>\n\u003Cp>If you want a secured implementation, with much more features, check the \u003Ca href=\"https:\u002F\u002Ffirebase.dalenguyen.me\u002F\" rel=\"nofollow ugc\">Interate Firebase PRO\u003C\u002Fa> version.\u003C\u002Fp>\n\u003Ch4>Links\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fdalenguyen\u002Ffirebase-wordpress-plugin\" rel=\"nofollow ugc\">Github project page\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fdalenguyen\u002Ffirebase-wordpress-plugin\u002Fblob\u002Fmaster\u002FCHANGELOG.md\" rel=\"nofollow ugc\">View CHANGELOG\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Integrate Firebase is a plugin that helps to integrate Firebase features to WordPress",600,27641,100,20,"2024-12-04T22:22:00.000Z","6.7.5","4.0.0","5.2.4",[20],"firebase","https:\u002F\u002Fgithub.com\u002Fdalenguyen\u002Ffirebase-wordpress-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fintegrate-firebase.0.10.0.zip",91,1,0,"2024-12-11 00:00:00","2026-03-15T15:16:48.613Z",[29],{"id":30,"url_slug":31,"title":32,"description":33,"plugin_slug":4,"theme_slug":34,"affected_versions":35,"patched_in_version":6,"severity":36,"cvss_score":37,"cvss_vector":38,"vuln_type":39,"published_date":26,"updated_date":40,"references":41,"days_to_patch":24},"CVE-2024-11785","integrate-firebase-authenticated-contributor-stored-cross-site-scripting","Integrate Firebase \u003C= 0.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting","The Integrate Firebase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'firebase_show' shortcode in all versions up to, and including, 0.9.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=0.9.3","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-12-12 05:24:24",[42],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F9788e450-4e79-43ce-ae78-466eef458c29?source=api-prod",{"slug":44,"display_name":7,"profile_url":8,"plugin_count":45,"total_installs":11,"avg_security_score":46,"avg_patch_time_days":24,"trust_score":47,"computed_at":48},"hanthuy",2,92,94,"2026-04-05T02:35:37.179Z",[50,72,94,117,141],{"slug":51,"name":52,"version":53,"author":54,"author_profile":55,"description":56,"short_description":57,"active_installs":11,"downloaded":58,"rating":59,"num_ratings":60,"last_updated":61,"tested_up_to":62,"requires_at_least":63,"requires_php":64,"tags":65,"homepage":70,"download_link":71,"security_score":46,"vuln_count":25,"unpatched_count":25,"last_vuln_date":34,"fetched_at":27},"fcm-push-notification-from-wp","FCM Push Notification from WP","1.9.1","Paulo Miranda","https:\u002F\u002Fprofiles.wordpress.org\u002Fdprogrammer\u002F","\u003Cp>Notifications for posts, pages and custom post types.\u003C\u002Fp>\n\u003Cp>Works with scheduled posts.\u003C\u002Fp>\n\u003Cp>Send notifications to users of your app from your website using Google’s service, Firebase Push Notification.\u003C\u002Fp>\n\u003Cp>The notification sent includes the block with the data message to be handled by the application, even when it is in the background.\u003C\u002Fp>\n\u003Cp>Configure the plugin to start sending notifications.\u003C\u002Fp>\n\u003Cp>Send custom field values ​​in the notification, in the data option.\u003C\u002Fp>\n\u003Cp>Send a notification when you post news or update your content. When editing, the option is deselected to send you to accidentally send a new notification. Check if you want to send a new notification when editing.\u003C\u002Fp>\n\u003Cp>Compatible with apps developed with the SDK Flutter.\u003C\u002Fp>\n\u003Cp>You need to register users on the same topic (fcm) that was informed in the plugin configuration. This plugin is not intended for sending notifications to websites.\u003C\u002Fp>\n\u003Cp>Support my work\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.buymeacoffee.com\u002Fdprogrammer\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.buymeacoffee.com\u002Fdprogrammer\u003C\u002Fa>\u003C\u002Fp>\n","Notify your users using Firebase Cloud Messaging (FCM) when content is published or updated.",14357,86,6,"2024-06-23T18:34:00.000Z","6.5.8","4.6","5.6.20",[66,67,20,68,69],"android","fcm","notification","push","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffcm-push-notification-from-wp.zip",{"slug":73,"name":74,"version":75,"author":76,"author_profile":77,"description":78,"short_description":79,"active_installs":80,"downloaded":81,"rating":82,"num_ratings":14,"last_updated":83,"tested_up_to":84,"requires_at_least":85,"requires_php":86,"tags":87,"homepage":92,"download_link":93,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":34,"fetched_at":27},"firebase-authentication","Firebase Authentication","1.6.8","miniOrange","https:\u002F\u002Fprofiles.wordpress.org\u002Fcyberlord92\u002F","\u003Cp>\u003Cstrong>WordPress Firebase Authentication Plugin\u003C\u002Fstrong> allows you to login to WordPress sites using your Firebase user login credentials or via Social Login.\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fwordpress-firebase-authentication\u002F\" rel=\"nofollow ugc\">WordPress Firebase Authentication\u003C\u002Fa> works using the default WordPress login page. We support \u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Ffirebase-woocommerce-integration\u002F\" rel=\"nofollow ugc\">Firebase WooCommerce Integration\u003C\u002Fa> and other third-party login pages along with custom login forms.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Flogin-into-wordpress-using-firebase-authentication\u002F\" rel=\"nofollow ugc\">WordPress Firebase Authentication\u003C\u002Fa>\u003C\u002Fstrong> : WordPress login using Firebase authentication user login credentials\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Auto Create Users\u003C\u002Fstrong> : After login using Firebase login credentials, new user automatically gets created in WordPress\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Ffirebase-premium-and-enterprise-plugin-features\u002F\" rel=\"nofollow ugc\">Configurable login options\u003C\u002Fa>\u003C\u002Fstrong> :\u003Cbr \u002F>\nProvide option to login with,\u003Cbr \u002F>\na) Only Firebase credentials\u003Cbr \u002F>\nb) Only WordPress credentials\u003Cbr \u002F>\nc) Both Firebase and WordPress credentials\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Auto Register WooCommerce Users to Firebase\u003C\u002Fstrong> : Provide an option to sync a WordPress user to Firebase whenever an end-user registers into the WordPress site via the WooCommerce registration form. User is created in Firebase with only an email address and password.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Support for Firebase Phone Authentication method\u003C\u002Fstrong> : Users will be asked to enter OTP provided via Firebase to login into WordPress (Passwordless login). This works for WooCommerce as well.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Ffirebase-social-login-integration-for-wordpress\" rel=\"nofollow ugc\">Support for Firebase Social Login\u003C\u002Fa>\u003C\u002Fstrong> : With Firebase authentication, users will be provided an option to login in to WordPress using selected social login providers\u003Cbr \u002F>\nProviders supported are:\u003C\u002Fp>\n\u003Col>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Flogin-with-google-using-firebase-authentication\" rel=\"nofollow ugc\">Google\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Flogin-with-facebook-using-firebase-authentication\" rel=\"nofollow ugc\">Facebook\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Flogin-with-apple-using-firebase-authentication\" rel=\"nofollow ugc\">Apple\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Twitter\u003C\u002Fli>\n\u003Cli>Github\u003C\u002Fli>\n\u003Cli>Yahoo\u003C\u002Fli>\n\u003Cli>Microsoft\u003C\u002Fli>\n\u003C\u002Fol>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Firebase WooCommerce Integration\u003C\u002Fstrong> : Integrate WooCommerce with the WordPress Firebase Authentication plugin and allow users to log in to your WooCommerce site using firebase login credentials on WooCommerce Checkout and My account page.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fwoocommerce-cloud-firestore-integration\" rel=\"nofollow ugc\">WordPress Firestore Integration\u003C\u002Fa>\u003C\u002Fstrong>: Sync WordPress User Meta to Cloud Firestore Collections, WooCommerce products, orders, subscription sync to Firebase database.\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Support for Social Login buttons Shortcode\u003C\u002Fstrong> : Use a shortcode to place Firebase social login buttons anywhere in your Theme or Plugin\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Sync Firebase UID to WordPress\u003C\u002Fstrong> : Users can map email, Firebase user-id to their WordPress user profile using this WordPress Firebase Authentication feature.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Custom Redirect Login and Logout URL\u003C\u002Fstrong> : Automatically Redirect users after successful login\u002Flogout. This works for WooCommerce as well.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Support for Firebase Login and Registration form Shortcode\u003C\u002Fstrong> : Using login form shortcode, users can enter their Firebase credentials to login into the WP site, and using the registration form shortcode, users can register into the WordPress site, and that user is also auto created in Firebase with an email address and password.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>WP Hooks for Different Events\u003C\u002Fstrong> : WordPress Firebase authentication provides support for different hooks for user defined functions.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>  \u003Cstrong>WordPress login with Firebase JWT\u003C\u002Fstrong>: WordPress login with Firebase JWT allows you to create a user login session on a WordPress site using their Firebase JWT token, eliminating the need to enter their login credentials again. This is highly recommended when there are multiple websites\u002Fapplications and the user is already logged in to any of them.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin allows login into WordPress using Firebase user credentials and maps Firebase user data to WordPress user profile.",500,26163,80,"2025-05-20T17:48:00.000Z","6.8.5","3.0.1","7.0",[88,20,89,90,91],"authentication","jwt","login","woocommerce-integration","http:\u002F\u002Ffirebase-authentication","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffirebase-authentication.1.6.8.zip",{"slug":95,"name":96,"version":97,"author":98,"author_profile":99,"description":100,"short_description":101,"active_installs":80,"downloaded":102,"rating":25,"num_ratings":25,"last_updated":103,"tested_up_to":104,"requires_at_least":105,"requires_php":106,"tags":107,"homepage":113,"download_link":114,"security_score":115,"vuln_count":24,"unpatched_count":25,"last_vuln_date":116,"fetched_at":27},"push-notification-mobile-and-web-app","Push notification for Mobile and Web app","2.0.4","App Cheap","https:\u002F\u002Fprofiles.wordpress.org\u002Fappcheap\u002F","\u003Cp>Support push notification for mobile and the web app.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcodecanyon.net\u002Fitem\u002Fcirilla-multipurpose-flutter-wordpress-app\u002F31940668\" rel=\"nofollow ugc\">Demo app\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Push services support\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Firebase HTTP V1\u003C\u002Fli>\n\u003Cli>Firebase HTTP legacy\u003C\u002Fli>\n\u003Cli>OneSignal\u003C\u002Fli>\n\u003Cli>Debug\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How does it work\u003C\u002Fh3>\n\u003Cp>The Push Notification plugin is built with five part:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Trigger: When WordPress action execution (Post saved, Order status changed …)\u003C\u002Fli>\n\u003Cli>Recipients: One\u002F More recipients get the notification ( topic, registration ID, role, user, merge tag …)\u003C\u002Fli>\n\u003Cli>Conditionals: Determine whether notification send\u003C\u002Fli>\n\u003Cli>Action: The action when the user click to notification on device\u003C\u002Fli>\n\u003Cli>Merge Tag: That is dynamic information in that context\u003C\u002Fli>\n\u003Cli>String translation: Replace part of string on title and message\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Plugin Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Comment Post: Fires immediately after a comment is inserted into the database.\u003C\u002Fli>\n\u003Cli>Post Type: Fires when a post is transitioned from one status to another.\u003C\u002Fli>\n\u003Cli>Save Post: Fires once a post has been saved.\u003C\u002Fli>\n\u003Cli>Order Status Changed: Fires when an order is transitioned from one status to another.\u003C\u002Fli>\n\u003Cli>Product Status Changed: Fires when a product is transitioned from one status to another.\u003C\u002Fli>\n\u003Cli>WCFM – Direct Messaging: Fires when vendor receive a message.\u003C\u002Fli>\n\u003Cli>BuddyPress: Fires Messages message sent, Activity Posted Update, Friends Friendship Accepted, Friends Friendship Requested, Groups Posted Update, Groups Send Invites\u003C\u002Fli>\n\u003C\u002Ful>\n","Push notification for Android, iOS and the Web",15918,"2025-12-06T07:06:00.000Z","6.6.5","5.8","7.4",[108,109,110,111,112],"android-notifications","app-builder","firebase-messages","ios-notifications","push-notification","https:\u002F\u002Fappcheap.io\u002Fpush-notification-mobile-and-web-app","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpush-notification-mobile-and-web-app.2.0.4.zip",99,"2025-05-16 00:00:00",{"slug":118,"name":119,"version":120,"author":121,"author_profile":122,"description":123,"short_description":124,"active_installs":125,"downloaded":126,"rating":13,"num_ratings":127,"last_updated":128,"tested_up_to":129,"requires_at_least":130,"requires_php":131,"tags":132,"homepage":138,"download_link":139,"security_score":140,"vuln_count":25,"unpatched_count":25,"last_vuln_date":34,"fetched_at":27},"free-sms-verification-for-gravity-forms","Free SMS OTP Verification for Gravity Forms By Firebase","1.0.8","WiserSteps","https:\u002F\u002Fprofiles.wordpress.org\u002Fwisersteps\u002F","\u003Cp>The best free SMS verification plugin for Gravity Forms, Verify users numbers before submitting the forms, Use Google firebase to edit the sent message to phone numbers by adding your website name.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FGwHVKauTSuU?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>Features:\u003Cbr \u002F>\n– Verify 20,000 numbers each month for free\u003Cbr \u002F>\n– The Most stable SMS Verification service by Google\u003Cbr \u002F>\n– Supports 246 countries and 84 languages\u003Cbr \u002F>\n– Supports RTL (Right to left) style\u003Cbr \u002F>\n– Show selected countries to the user\u003C\u002Fp>\n\u003Cp>Important:\u003Cbr \u002F>\n– This is an integration with Firebase\u003Cbr \u002F>\n– https:\u002F\u002Ffirebase.google.com\u002Fdocs\u002Fauth\u002Fweb\u002Fphone-auth\u003Cbr \u002F>\n– Terms of service for Firebase https:\u002F\u002Ffirebase.google.com\u002Fterms\u002F\u003C\u002Fp>\n","The best free SMS verification plugin for Gravity Forms, Verify users numbers before submitting the forms.",200,9460,8,"2021-03-10T01:14:00.000Z","5.5.18","4.7","5.6",[133,134,135,136,137],"form-sms-otp","graivty-forms-otp","gravity-forms-firebase","gravity-forms-sms","gravity-forms-verification","https:\u002F\u002Fwww.wisersteps.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffree-sms-verification-for-gravity-forms.1.0.8.zip",85,{"slug":142,"name":143,"version":144,"author":145,"author_profile":146,"description":147,"short_description":148,"active_installs":125,"downloaded":149,"rating":47,"num_ratings":150,"last_updated":151,"tested_up_to":152,"requires_at_least":153,"requires_php":154,"tags":155,"homepage":159,"download_link":160,"security_score":161,"vuln_count":162,"unpatched_count":25,"last_vuln_date":163,"fetched_at":27},"push-notification-for-post-and-buddypress","Push Notification for Post and BuddyPress","3.13","Murali","https:\u002F\u002Fprofiles.wordpress.org\u002Fmurali-indiacitys\u002F","\u003Cp>It sends push notifications to desktop, android\u002Fios mobile apps using Firebase Cloud Messaging (FCM) Firebase API http v1 or Onesignal or Progressier as notification provider. It has REST API facility to integrate with native\u002Fhybrid Android\u002FiOS mobile apps for push notifications. It sends notification whenever new WordPress post, custom post types, new BuddyPress activities, comments published. It has facility to generate PWA – Progressive Web App.\u003C\u002Fp>\n\u003Ch4>Plugin features:\u003C\u002Fh4>\n\u003Cp>** Plugin allows to choose different push notification providers **\u003Cbr \u002F>\n1. Firebase – FCM (Free push notifications for desktop, PWA and mobile apps)\u003Cbr \u002F>\n2. Self-hosted push notification using web-push\u003Cbr \u002F>\n3. Onesignal (Free push notification for desktop, PWA and mobile apps)\u003Cbr \u002F>\n4. Progressier (Push notifications for PWA)\u003Cbr \u002F>\n5. webtoapp.design (Push notifications for Mobile apps)\u003Cbr \u002F>\n(Plugin allows to send push notifications to both Firebase\u002FOnesignal and webtoapp.design users simultaneously)\u003C\u002Fp>\n\u003Cp>** Plugin sends Push notifications for following **\u003C\u002Fp>\n\u003Col>\n\u003Cli>New post\u002Fcustom post type published (including bbpress).\u003C\u002Fli>\n\u003Cli>New BuddyPress activities published.\u003C\u002Fli>\n\u003Cli>New BuddyPress group activity published (only to members of group).\u003C\u002Fli>\n\u003Cli>Notifications for BuddyPress mentions in activities.(only to recipient).\u003C\u002Fli>\n\u003Cli>BuddyPress group invite sent (only to recipient).\u003C\u002Fli>\n\u003Cli>BuddyPress group details updated.\u003C\u002Fli>\n\u003Cli>New Buddypress comments published.\u003C\u002Fli>\n\u003Cli>New BuddyPress message or private messages (only to recipient).\u003Cbr \u002F>\n(It is also compatible with Bettermessages plugin).\u003C\u002Fli>\n\u003Cli>New BuddyPress member joined.\u003C\u002Fli>\n\u003Cli>For Friend request in BuddyPress (only to recipient).\u003C\u002Fli>\n\u003Cli>Friendship accepted in BuddyPress (only to requestor).\u003C\u002Fli>\n\u003Cli>User avatar change in BuddyPress.\u003C\u002Fli>\n\u003Cli>Cover image change in BuddyPress.\u003C\u002Fli>\n\u003Cli>Mark as favourites or Likes on BuddyPress activities.\u003C\u002Fli>\n\u003Cli>Supports Push notifications for BuddyBoss and Better Messages plugins\u003C\u002Fli>\n\u003Cli>Woocommerce custom post type push notifications.\u003C\u002Fli>\n\u003Cli>Ability to process more than 200,000 subscribers unlimited push notifications using background action scheduler.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>** Admin only push notifications (only to administrators) **\u003Cbr \u002F>\n1. When contact form(contactform7 plugin) submitted.\u003Cbr \u002F>\n2. When new user registered in site.\u003C\u002Fp>\n\u003Ch4>Reports\u003C\u002Fh4>\n\u003Cp>It supports Firebase analytics reports in Firebase console for notification_open, notification_read, page_view events.\u003C\u002Fp>\n\u003Ch4>Notifications only for loggedin users\u003C\u002Fh4>\n\u003Cp>Enable\u002FDisable option in admin settings to send push notifications using Firebase httpv1 or Onesignal only for loggedin users.\u003C\u002Fp>\n\u003Ch4>Custom popup and Bell prompt to subscribe push notifications with subscription options\u003C\u002Fh4>\n\u003Cp>Enable\u002FDisable custom notification subscription prompt to subscribe\u002Funsubscribe push notifications in front end in admin settings.\u003Cbr \u002F>\nEnable\u002FDisable Bell prompt icon to subscribe\u002Funsubscribe notifications. Front end users will be able to subscribe to particular category like post, activity, comments, friendship request\u002Faccept, other options while subscribing for first time or if user wants to update subscribe options from bell prompt at any time it is needed.\u003C\u002Fp>\n\u003Ch4>Shortcodes\u003C\u002Fh4>\n\u003Cp>[subscribe_PNFPB_push_notification] is available to Subscribe\u002FUnsubscribe push notifications for frontend users.\u003Cbr \u002F>\n[PNFPB_PWA_PROMPT] to install PWA.\u003Cbr \u002F>\n[member name] and [group name] are avilable to display user name in push notifications, For BuddyPress group activities [group name] shortcode to display group name in push notifications.\u003C\u002Fp>\n\u003Ch4>Subscribe\u002FUnsubscribe various push notifications in front end\u003C\u002Fh4>\n\u003Cp>Front end push notification menu is available for BuddyPress Front end users to subscribe\u002Funsubscribe various push notifications according to their choices. This menu is available in user profile – settings area. For other users, shortcode is available to display subscription menu for Front end users to subscribe\u002Funsubscribe various push notifications according to their choices.\u003C\u002Fp>\n\u003Ch4>Scheduling Push notification\u003C\u002Fh4>\n\u003Cp>It allows Scheduled Push notifications to send push notifications hourly(every hour), twice daily(2 times per day), daily, weekly as per WordPress CRON. It also provides option to schedule push notification in background using action scheduler, this will be useful to send notification more than 100000 subscribers simultaneously in background mode.\u003Cbr \u002F>\nPush notification scheduling is available for On demand\u002FOne time, WordPress Post, BuddyPress activities, BuddyPress group activities and for BuddyPress comments.\u003C\u002Fp>\n\u003Ch4>REST API\u003C\u002Fh4>\n\u003Cp>REST API to connect mobile native\u002Fhybrid apps to send push notification from WordPress site to both mobile apps and WordPress sites.\u003Cbr \u002F>\nUsing this REST API WordPress site gets Firebase Push Notification subscription token from Mobile app(Android\u002FIos).\u003Cbr \u002F>\nThis allows to send push notifications to WordPress site users as well as to Native mobile app Android\u002Fios users.\u003Cbr \u002F>\nREST API url is https:\u002F\u002Fwp-json\u002FPNFPBpush\u002Fv1\u002Fsubscriptiontoken\u003C\u002Fp>\n\u003Ch4>HOW TO USE PLUGIN API TO INTEGRATE MOBILE APP PUSH NOTIFICATION\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmuraliwebworld\u002Fandroid-app-to-integrate-push-notification-wordpress-plugin\u002F\" rel=\"nofollow ugc\">Android app code to integrate with this plugin\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmuraliwebworld\u002Fios-swift-app-to-integrate-push-notification-wordpress-plugin\u002F\" rel=\"nofollow ugc\">IOS app code to integrate with this plugin\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Refer video tutorial under “How to use this plugin” section to configure Firebase options in plugin admin area.\u003C\u002Fp>\n\u003Ch4>PWA\u003C\u002Fh4>\n\u003Cp>This plugin has facility to generate Progressive Web App (PWA). It also supports Progressier PWA.\u003Cbr \u002F>\nGo to plugin settings page to enable\u002Fdisable PWA app and to customize PWA app with app name, app icon, app theme color, background color for PWA and list of pages to be included in offline cache for web app offline mode.\u003C\u002Fp>\n\u003Ch4>Extra settings for NGINX server\u003C\u002Fh4>\n\u003Cp>If server is NGINX and not able to create dynamic service worker file https:\u002F\u002Fpnfpb_icpush_pwa_sw.js & PWA manifest json file https:\u002F\u002Fpnfpbmanifest.json then go to plugin settings->nginx tab, enable static file creation option, it will create required static service worker file, PWA manifest json files in root folder. This option is applicable only if hosting\u002Fserver is based on NGINX and not creating dynamic service worker file, manifest json files. By default, this plugin creates dynamic service worker file and PWA manifest json file.\u003C\u002Fp>\n\u003Cp>This plugin uses Firebase Cloud Messaging to send push notification using Firebase registration credentials which is free of cost.\u003C\u002Fp>\n\u003Ch4>Plugin Demo site\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.muraliwebworld.com\u002F\" rel=\"nofollow ugc\">Test PNFPB plugin here\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Video tutorial showing how to configure Firebase for this plugin\u003C\u002Fh4>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F02oymYLt3qo?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch3>Frequently Asked Questions (FAQ)\u003C\u002Fh3>\n\u003Ch4>Do you have any questions?\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.muraliwebworld.com\u002Fgroups\u002Fwordpress-plugins-by-muralidharan-indiacitys-com-technologies\u002Fforum\u002Ftopic\u002Fpush-notification-for-post-and-buddypress\u002F\" rel=\"nofollow ugc\">Submit or contact us with your question here\u003C\u002Fa> (or) \u003Ca href=\"https:\u002F\u002Findiacitys.com\u002F#contact\" rel=\"nofollow ugc\">Please contact us here with your query.\u003C\u002Fa> (or) Submit your question in plugin forum\u003C\u002Fp>\n\u003Cp>How can I report security bugs?\u003C\u002Fp>\n\u003Cp>You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. \u003Ca href=\"https:\u002F\u002Fpatchstack.com\u002Fdatabase\u002Fwordpress\u002Fplugin\u002Fpush-notification-for-post-and-buddypress\u002Fvdp\" rel=\"nofollow ugc\">Report a security vulnerability.\u003C\u002Fa>\u003C\u002Fp>\n","Send free push notifications for post\u002Fcustom post, BuddyPress from WordPress sites or using mobile app webview and to generate PWA.",31104,24,"2025-12-14T13:59:00.000Z","6.9.4","6.2","8.1",[156,20,157,158,112],"buddypress","mobile-app","progressive-web-app","https:\u002F\u002Fwww.muraliwebworld.com\u002Fgroups\u002Fwordpress-plugins-by-muralidharan-indiacitys-com-technologies\u002Fforum\u002Ftopic\u002Fpush-notification-for-post-and-buddypress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpush-notification-for-post-and-buddypress.3.13.zip",95,4,"2025-01-16 00:00:00",{"attackSurface":165,"codeSignals":223,"taintFlows":238,"riskAssessment":239,"analyzedAt":249},{"hooks":166,"ajaxHandlers":192,"restRoutes":193,"shortcodes":194,"cronEvents":221,"entryPointCount":222,"unprotectedCount":25},[167,172,175,179,184,188,190],{"type":168,"name":169,"callback":169,"file":170,"line":171},"action","admin_menu","includes\\class.firebase-admin.php",23,{"type":168,"name":173,"callback":174,"file":170,"line":150},"admin_init","register_settings",{"type":168,"name":176,"callback":177,"file":170,"line":178},"admin_enqueue_scripts","load_firebase_admin_js",25,{"type":168,"name":180,"callback":181,"file":182,"line":183},"wp_enqueue_scripts","load_firebase_js","includes\\class.firebase.php",16,{"type":168,"name":185,"callback":185,"file":186,"line":187},"init","init.php",62,{"type":168,"name":185,"callback":185,"file":186,"line":189},65,{"type":168,"name":185,"callback":185,"file":186,"line":191},70,[],[],[195,200,204,207,211,214,218],{"tag":196,"callback":197,"file":198,"line":199},"firebase_login","firebase_login_func","includes\\class.shortcodes.php",14,{"tag":201,"callback":202,"file":198,"line":203},"firebase_logout","firebase_logout_func",15,{"tag":205,"callback":206,"file":198,"line":183},"firebase_greetings","firebase_greetings_func",{"tag":208,"callback":209,"file":198,"line":210},"firebase_login_error","firebase_login_error_func",17,{"tag":212,"callback":213,"file":198,"line":14},"firebase_show","firebase_show_func",{"tag":215,"callback":216,"file":198,"line":217},"firebase_show_not_login","firebase_show_not_login_func",21,{"tag":219,"callback":220,"file":198,"line":150},"realtime","realtime_func",[],7,{"dangerousFunctions":224,"sqlUsage":225,"outputEscaping":227,"fileOperations":25,"externalRequests":25,"nonceChecks":25,"capabilityChecks":25,"bundledLibraries":237},[],{"prepared":25,"raw":25,"locations":226},[],{"escaped":183,"rawEcho":228,"locations":229},3,[230,233,235],{"file":170,"line":231,"context":232},303,"raw output",{"file":170,"line":234,"context":232},304,{"file":170,"line":236,"context":232},305,[],[],{"summary":240,"deductions":241},"The 'integrate-firebase' plugin v0.10.0 presents a mixed security posture.  On the positive side, the static analysis shows no dangerous functions, all SQL queries use prepared statements, and there are no file operations or external HTTP requests.  The absence of critical or high severity taint flows is also encouraging. However, there are notable areas of concern. The presence of 7 shortcodes, while not directly exploitable without additional flaws, represents an attack surface that could potentially be leveraged if vulnerabilities are introduced in the future.  The lack of any nonce checks or capability checks across all entry points, including shortcodes, is a significant weakness, as it implies that any input processed by these shortcodes is not adequately protected against unauthorized access or manipulation. The vulnerability history shows one past medium severity vulnerability related to Cross-site Scripting, which, although patched, highlights a historical tendency for input sanitization issues.  While the current version appears to have addressed past issues and maintains good practices in several areas, the lack of fundamental security checks on its entry points warrants careful consideration.",[242,244,246],{"reason":243,"points":203},"No nonce checks on entry points",{"reason":245,"points":203},"No capability checks on entry points",{"reason":247,"points":248},"Past medium severity XSS vulnerability",10,"2026-03-16T19:27:23.878Z",{"wat":251,"direct":264},{"assetPaths":252,"generatorPatterns":255,"scriptPaths":256,"versionParams":261},[253,254],"\u002Fwp-content\u002Fplugins\u002Fintegrate-firebase\u002Fcss\u002Ffirebase-admin.css","\u002Fwp-content\u002Fplugins\u002Fintegrate-firebase\u002Fjs\u002Ffirebase-admin.js",[],[257,258,259,260],"https:\u002F\u002Fwww.gstatic.com\u002Ffirebasejs\u002F8.2.5\u002Ffirebase-app.js","https:\u002F\u002Fwww.gstatic.com\u002Ffirebasejs\u002F8.2.5\u002Ffirebase-auth.js","https:\u002F\u002Fwww.gstatic.com\u002Ffirebasejs\u002F8.2.5\u002Ffirebase-database.js","https:\u002F\u002Fwww.gstatic.com\u002Ffirebasejs\u002F8.2.5\u002Ffirebase-firestore.js",[262,263],"integrate-firebase\u002Fcss\u002Ffirebase-admin.css?ver=","integrate-firebase\u002Fjs\u002Ffirebase-admin.js?ver=",{"cssClasses":265,"htmlComments":266,"htmlAttributes":267,"restEndpoints":268,"jsGlobals":269,"shortcodeOutput":272},[],[],[],[],[270,271],"window.firebaseDatabaseOptions","window.firebaseOptions",[]]