[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fICKWmocEuVwVAy3VZCtuB8JlcDDxMsJgMYrToucclng":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":23,"download_link":24,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":33,"analysis":126,"fingerprints":166},"invox-call-tracking","INVOX Call Tracking","1.1","invox","https:\u002F\u002Fprofiles.wordpress.org\u002Finvox\u002F","\u003Cp>INVOX is a powerful call tracking software designed to help businesses track and analyze phone call conversions from each marketing channel. With this easy-to-integrate plugin, you can gain valuable insights into your marketing campaigns, measure the effectiveness of your advertising efforts, and optimize your customer acquisition strategy.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Advanced Call Analytics:\u003C\u002Fstrong> Track call data such as duration, source, campaigns, ads, and PPC keywords to better understand customer behavior.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Dynamic Number Insertion:\u003C\u002Fstrong> Automatically display unique phone numbers on your website, based on the visitor’s source (e.g., paid ads, organic search, social media).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Real-time Reporting:\u003C\u002Fstrong> View live call data and detailed reports to evaluate your marketing efforts in real time.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Integration with CRM:\u003C\u002Fstrong> Easily sync call data with your CRM system to enhance lead management and follow-up strategies.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User-Friendly Setup:\u003C\u002Fstrong> Simple installation and configuration process, with no technical knowledge required.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>INVOX also offers a Call Transcript feature that automatically generates transcriptions of your phone conversations. This powerful tool provides a text-based record of each call, making it easier to analyze customer interactions, improve customer service, and optimize marketing strategies.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why Choose INVOX Call Tracking?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Measure ROI:\u003C\u002Fstrong> Understand the real ROI of your marketing channels by directly linking phone calls to specific campaigns, ads, or keywords.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Improve Campaigns:\u003C\u002Fstrong> Use data to fine-tune your ads and campaigns, ensuring you focus your budget on high-performing channels.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enhance Customer Experience:\u003C\u002Fstrong> With a clear view of customer interactions, you can improve your communication and overall service quality.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Whether you’re running online ads, email campaigns, or organic SEO efforts, INVOX Call Tracking provides the tools you need to make data-driven decisions and boost your marketing performance.\u003C\u002Fp>\n\u003Cp>For more information about INVOX, visit our \u003Ca href=\"https:\u002F\u002Finvox.eu\" rel=\"nofollow ugc\">plugin homepage\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Cp>To configure the plugin, go to ‘Settings’ > ‘INVOX Call Tracking’ in the WordPress admin panel. Enter your custom CID and Version (v) values and save the settings.\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>Once configured, the INVOX Call Tracking JavaScript tag will be automatically added to your website.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support or questions, please contact us at \u003Ca href=\"mailto:contact@invox.eu\" rel=\"nofollow ugc\">contact@invox.eu\u003C\u002Fa>.\u003C\u002Fp>\n","The INVOX Call Tracking plugin lets WordPress users easily add Dynamic Number Insertion (DNI) to their site without technical or coding skills.",40,1027,100,1,"","6.7.5","4.9","7.0",[20,21,22],"call-tracking","dynamic-number-insertion","marketing-analytics","https:\u002F\u002Finvox.eu","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finvox-call-tracking.1.1.zip",0,null,"2026-03-15T10:48:56.248Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":13,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},30,94,"2026-04-04T13:44:47.762Z",[34,55,73,89,102],{"slug":35,"name":36,"version":37,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":25,"num_ratings":25,"last_updated":44,"tested_up_to":45,"requires_at_least":46,"requires_php":47,"tags":48,"homepage":52,"download_link":53,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":54},"clixtell-tracking-dynamic-phones","Clixtell","2.4","clixtell","https:\u002F\u002Fprofiles.wordpress.org\u002Fclixtell\u002F","\u003Cp>\u003Cstrong>Clixtell Tracking & Dynamic Phones\u003C\u002Fstrong> helps businesses protect their advertising budget and improve conversion tracking by integrating Clixtell’s advanced click fraud detection and dynamic call tracking technology into WordPress.\u003C\u002Fp>\n\u003Cp>With this plugin you can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Detect and block fraudulent clicks\u003C\u002Fli>\n\u003Cli>Track phone calls accurately from paid traffic\u003C\u002Fli>\n\u003Cli>Enable Dynamic Phone Insertion (DNI)\u003C\u002Fli>\n\u003Cli>Integrate seamlessly with your existing Clixtell account\u003C\u002Fli>\n\u003Cli>Avoid complex code changes or manual script insertion\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>An active \u003Cstrong>Clixtell account\u003C\u002Fstrong> is required to use this plugin.\u003C\u002Fp>\n\u003Cp>Learn more at \u003Ca href=\"https:\u002F\u002Fwww.clixtell.com\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.clixtell.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Easy WordPress integration\u003C\u002Fli>\n\u003Cli>Dynamic Phone Insertion (optional toggle)\u003C\u002Fli>\n\u003Cli>Automatic script loading\u003C\u002Fli>\n\u003Cli>Clean and secure WordPress Settings API usage\u003C\u002Fli>\n\u003Cli>Lightweight and performance-friendly\u003C\u002Fli>\n\u003Cli>No theme modification required\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Go to \u003Cstrong>Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Clixtell\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Check \u003Cstrong>Activate Dynamic Call Tracking\u003C\u002Fstrong> to enable Dynamic Phone Insertion\u003C\u002Fli>\n\u003Cli>Save changes\u003C\u002Fli>\n\u003Cli>Ensure your Clixtell account is properly configured\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Tracking scripts are automatically injected on the frontend once enabled.\u003C\u002Fp>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>Clixtell Tracking & Dynamic Phones does not store or process personal data locally.\u003Cbr \u002F>\nAll tracking, analytics, and data processing are handled by Clixtell services.\u003Cbr \u002F>\nPlease review Clixtell’s Privacy Policy at:\u003Cbr \u002F>\nhttps:\u002F\u002Fwww.clixtell.com\u002Fprivacy-policy\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For documentation and support:\u003Cbr \u002F>\n* https:\u002F\u002Fsupport.clixtell.com\u003Cbr \u002F>\n* https:\u002F\u002Fwww.clixtell.com\u003C\u002Fp>\n","Clixtell Tracking & Dynamic Phones integrates Clixtell click fraud detection and dynamic phone number insertion into your WordPress site.",1000,8147,"2026-02-07T05:14:00.000Z","6.9.4","5.5","7.2",[20,49,50,22,51],"click-fraud","dynamic-phone","tracking","https:\u002F\u002Fwww.clixtell.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fclixtell-tracking-dynamic-phones.zip","2026-03-15T15:16:48.613Z",{"slug":56,"name":57,"version":6,"author":56,"author_profile":58,"description":59,"short_description":60,"active_installs":61,"downloaded":62,"rating":25,"num_ratings":25,"last_updated":63,"tested_up_to":64,"requires_at_least":17,"requires_php":65,"tags":66,"homepage":70,"download_link":71,"security_score":72,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":54},"callroot","CallRoot","https:\u002F\u002Fprofiles.wordpress.org\u002Fcallroot\u002F","\u003Cp>CallRoot is a call tracking software for marketing teams and agencies. Track & record incoming phone calls, dynamically insert phone numbers & map referrer source with every incoming call. This wordpress plugin automatically inserts the javascript code for swapping phone numbers in your wordpress website. Using our plugin, you no longer have to manually insert the JavaScript for dynamic number insertion on every page. To know more about CallRoot, go to \u003Ca href=\"https:\u002F\u002Fcallroot.com\" rel=\"nofollow ugc\">https:\u002F\u002Fcallroot.com\u003C\u002Fa>\u003C\u002Fp>\n","CallRoot wordpress plugin facilitates Dynamic Number Insertion (DNI), i.e., it automatically inserts the javascript code for swapping phone numbers in …",10,6135,"2018-03-26T07:31:00.000Z","4.9.29","5.5.9",[20,67,68,21,69],"campaign-tracking","dni","marketing","https:\u002F\u002Fcallroot.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcallroot.1.2.zip",85,{"slug":74,"name":75,"version":76,"author":77,"author_profile":78,"description":79,"short_description":80,"active_installs":25,"downloaded":81,"rating":25,"num_ratings":25,"last_updated":15,"tested_up_to":82,"requires_at_least":83,"requires_php":47,"tags":84,"homepage":87,"download_link":88,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"800-com-call-tracking","800.com Call Tracking","1.0.2","800.com","https:\u002F\u002Fprofiles.wordpress.org\u002F800noc\u002F","\u003Cp>\u003Cstrong>800.com Call Tracking\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Easily add dynamic number swapping to your WordPress site with the 800.com Call Tracking plugin. This lightweight plugin seamlessly integrates with your 800.com account to display unique phone numbers based on visitor sources, enhancing call tracking and marketing attribution for businesses.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Cstrong>Dynamic Number Swapping\u003C\u002Fstrong>: Automatically display trackable phone numbers on your website, powered by 800.com’s call tracking technology.\u003Cbr \u002F>\n– \u003Cstrong>Simple Setup\u003C\u002Fstrong>: Configure your 800.com API credentials in the WordPress admin panel and start tracking in minutes.\u003Cbr \u002F>\n– \u003Cstrong>Non-Intrusive Integration\u003C\u002Fstrong>: Injects a small, optimized JavaScript snippet into the \u003Ccode>\u003Chead>\u003C\u002Fcode> tag of your site for reliable performance.\u003Cbr \u002F>\n– \u003Cstrong>Secure and Compliant\u003C\u002Fstrong>: Safely handles API credentials and ensures no sensitive data is exposed, adhering to WordPress security standards.\u003Cbr \u002F>\n– \u003Cstrong>Marketing Insights\u003C\u002Fstrong>: Pair with 800.com’s analytics to track call sources, optimize campaigns, and boost ROI.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>How It Works:\u003C\u002Fstrong>\u003Cbr \u002F>\n1. Sign up for an \u003Ca href=\"https:\u002F\u002Fwww.800.com\u002F\" rel=\"nofollow ugc\">800.com account\u003C\u002Fa> to access dynamic number insertion features.\u003Cbr \u002F>\n2. Enter your 800.com API key in the plugin’s settings.\u003Cbr \u002F>\n3. The plugin injects the 800.com JavaScript into your site’s \u003Ccode>\u003Chead>\u003C\u002Fcode>, enabling dynamic phone number swapping based on visitor data (e.g., referral source, campaign, or location).\u003Cbr \u002F>\n4. Monitor call performance directly in your 800.com dashboard.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why Choose This Plugin?\u003C\u002Fstrong>\u003Cbr \u002F>\n– Perfect for businesses, marketers, and agencies using 800.com to track phone leads.\u003Cbr \u002F>\n– No coding required—works out of the box with any WordPress theme.\u003Cbr \u002F>\n– Lightweight and performance-optimized, ensuring fast page loads.\u003Cbr \u002F>\n– Built with security in mind, protecting your 800.com credentials and user data.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Requirements:\u003C\u002Fstrong>\u003Cbr \u002F>\n– An active 800.com account with API access.\u003Cbr \u002F>\n– WordPress 5.0 or higher.\u003Cbr \u002F>\n– Basic familiarity with 800.com’s call tracking setup.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note\u003C\u002Fstrong>: This plugin relies on 800.com’s services and does not store or process call data locally. All tracking and analytics are managed via your 800.com account.\u003C\u002Fp>\n\u003Cp>Get started today and supercharge your call tracking with dynamic number insertion!\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin connects to 800.com’s external services to provide call tracking functionality. The following information details what data is transmitted and how it is used:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>API Endpoints Used:\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Ccode>https:\u002F\u002Fapi.800.com\u002Fcompanies\u002Fslim\u003C\u002Fcode> – Retrieves a list of companies associated with your 800.com account for configuration purposes.\u003Cbr \u002F>\n– \u003Ccode>https:\u002F\u002Fapi.800.com\u002Fcompanies\u002F{id}\u002FtrackingNumbers\u002Fscript\u003C\u002Fcode> – Fetches the JavaScript snippet required for dynamic number insertion on your website.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Data Transmission:\u003C\u002Fstrong>\u003Cbr \u002F>\nDuring plugin configuration, your 800.com API key is used to authenticate requests to the above endpoints. Once configured, the injected script communicates with 800.com servers on each page view to determine which phone numbers to display.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Information Sent to 800.com:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Page location (URL)\u003Cbr \u002F>\n– Referrer information\u003Cbr \u002F>\n– 800.com session identifiers\u003Cbr \u002F>\n– Browser information\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Data Usage:\u003C\u002Fstrong>\u003Cbr \u002F>\nThe transmitted data is used exclusively to determine which of your configured phone numbers to serve to website visitors based on your 800.com account settings. This enables accurate call tracking and marketing attribution.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Transparency:\u003C\u002Fstrong>\u003Cbr \u002F>\n800.com maintains transparency by keeping requests and variables human-readable. Additionally, source maps are published for DNI scripts, allowing users to understand exactly how the scripts interact with their websites.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Service Links:\u003C\u002Fstrong>\u003Cbr \u002F>\n– 800.com Terms of Service: https:\u002F\u002Fwww.800.com\u002Fterms\u003Cbr \u002F>\n– 800.com Privacy Policy: https:\u002F\u002Fwww.800.com\u002Fprivacy\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note:\u003C\u002Fstrong> This plugin requires an active 800.com account and relies on their external services for all call tracking functionality. No call data is processed or stored locally by this plugin.\u003C\u002Fp>\n","Seamlessly add 800.com dynamic number insertion to your WordPress site for enhanced call tracking and marketing attribution.",367,"6.8.5","5.2",[85,20,21,69,86],"800-com","phone-tracking","https:\u002F\u002Fwww.800.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002F800-com-call-tracking.1.0.2.zip",{"slug":21,"name":90,"version":76,"author":91,"author_profile":92,"description":93,"short_description":94,"active_installs":25,"downloaded":95,"rating":25,"num_ratings":25,"last_updated":96,"tested_up_to":82,"requires_at_least":97,"requires_php":47,"tags":98,"homepage":15,"download_link":101,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":54},"Dynamic Number Insertion","Ryan Howard","https:\u002F\u002Fprofiles.wordpress.org\u002Fryhowa\u002F","\u003Cp>Dynamic Number Insertion (DNI) allows you to automatically replace phone numbers across your WordPress site based on the page URL. Perfect for businesses with multiple locations, marketing campaigns with unique tracking numbers, or any situation where you need different phone numbers on different pages.\u003C\u002Fp>\n\u003Cp>The plugin intelligently detects various phone number formats and replaces them consistently throughout the entire page – including headers, footers, widgets, and content areas. It works seamlessly with your existing theme and plugins, requiring no code modifications.\u003C\u002Fp>\n\u003Cp>Phone numbers are replaced before the page loads, ensuring compatibility with call tracking services like CallRail and other JavaScript-based tracking solutions.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>✅ Automatic phone number format detection (handles parentheses, dashes, dots, spaces)\u003Cbr \u002F>\n✅ URL-based replacement rules for precise targeting\u003Cbr \u002F>\n✅ Works everywhere – headers, footers, widgets, menus, and content\u003Cbr \u002F>\n✅ Compatible with page builders and themes\u003Cbr \u002F>\n✅ No coding required – simple dashboard interface\u003Cbr \u002F>\n✅ Preserves SEO and tracking scripts\u003Cbr \u002F>\n✅ Lightweight and performance-optimized\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Use Cases:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Multi-location businesses\u003C\u002Fstrong> – Show local phone numbers on location-specific pages\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Landing pages\u003C\u002Fstrong> – Use unique tracking numbers for different marketing campaigns\u003C\u002Fli>\n\u003Cli>\u003Cstrong>A\u002FB testing\u003C\u002Fstrong> – Test different phone numbers to measure conversion rates\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Franchises\u003C\u002Fstrong> – Let each franchise location have their own contact number\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Service area pages\u003C\u002Fstrong> – Display area-specific phone numbers automatically\u003C\u002Fli>\n\u003C\u002Ful>\n","Dynamically replace phone numbers on specific pages for location-based businesses, landing pages, and call tracking campaigns.",199,"2025-09-21T18:38:00.000Z","5.8",[20,68,21,99,100],"phone-number-swap","phone-numbers","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdynamic-number-insertion.1.0.2.zip",{"slug":103,"name":104,"version":105,"author":106,"author_profile":107,"description":108,"short_description":109,"active_installs":110,"downloaded":111,"rating":112,"num_ratings":113,"last_updated":114,"tested_up_to":45,"requires_at_least":115,"requires_php":15,"tags":116,"homepage":121,"download_link":122,"security_score":123,"vuln_count":124,"unpatched_count":25,"last_vuln_date":125,"fetched_at":54},"callrail-phone-call-tracking","CallRail Phone Call Tracking","0.5.3","CallRail","https:\u002F\u002Fprofiles.wordpress.org\u002Fcallrail\u002F","\u003Cp>CallRail is here to bring complete visibility to the marketers who rely on quality inbound leads to measure success. Our customers live in a results-driven world, and giving them a clear view into their digital marketing efforts is a first priority for CallRail. We see the opportunities in surfacing and connecting data from calls, forms, chat and beyond — helping our customers get to better outcomes.\u003C\u002Fp>\n\u003Cp>Our WordPress plugin allows you to learn detailed information about the source and web session of every caller from your website using a process called \u003Ca href=\"https:\u002F\u002Fwww.callrail.com\u002Fleads\u002Fdynamic-number-insertion-2\u002F\" rel=\"nofollow ugc\">Dynamic Number Insertion\u003C\u002Fa>. It also powers our form tracking tool, which gives you the power to attribute form submissions back to their source and learn about what the user did on your site before submitting the form.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Learn more about \u003Ca href=\"https:\u002F\u002Fwww.callrail.com\u002F\" rel=\"nofollow ugc\">CallRail\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Check out our WP plugin \u003Ca href=\"https:\u002F\u002Fsupport.callrail.com\u002Fhc\u002Fen-us\u002Farticles\u002F201011537\" rel=\"nofollow ugc\">support documentation.\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Dynamically swap CallRail tracking phone numbers based on the visitor's referring source.",10000,358191,74,6,"2026-02-11T19:30:00.000Z","3.0",[117,118,20,119,120],"adwords","analytics","conversion-tracking","seo","http:\u002F\u002Fwww.callrail.com\u002Fdocs\u002Fweb-integration\u002Fwordpress-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcallrail-phone-call-tracking.0.5.3.zip",99,2,"2023-10-24 00:00:00",{"attackSurface":127,"codeSignals":147,"taintFlows":154,"riskAssessment":155,"analyzedAt":165},{"hooks":128,"ajaxHandlers":143,"restRoutes":144,"shortcodes":145,"cronEvents":146,"entryPointCount":25,"unprotectedCount":25},[129,135,139],{"type":130,"name":131,"callback":132,"file":133,"line":134},"action","admin_menu","invox_tracking_plugin_menu","invox-call-tracking.php",26,{"type":130,"name":136,"callback":137,"file":133,"line":138},"admin_init","invox_tracking_register_settings",67,{"type":130,"name":140,"callback":141,"file":133,"line":142},"wp_enqueue_scripts","invox_enqueue_tracking_script",80,[],[],[],[],{"dangerousFunctions":148,"sqlUsage":149,"outputEscaping":151,"fileOperations":25,"externalRequests":25,"nonceChecks":25,"capabilityChecks":25,"bundledLibraries":153},[],{"prepared":25,"raw":25,"locations":150},[],{"escaped":124,"rawEcho":25,"locations":152},[],[],[],{"summary":156,"deductions":157},"The invox-call-tracking plugin version 1.1 exhibits a strong security posture based on the provided static analysis. The absence of any identified dangerous functions, raw SQL queries, unescaped output, file operations, external HTTP requests, or critical taint flows is commendable. Furthermore, the lack of recorded vulnerabilities in its history suggests a history of secure development and maintenance.\n\nHowever, the analysis does reveal potential areas of concern. The complete absence of nonce checks and capability checks across all entry points, including the entirely unprotected attack surface of AJAX handlers, REST API routes, shortcodes, and cron events, represents a significant weakness. While the current version might not be exploited due to its limited attack surface and potentially clean code, this lack of authorization checks on all potential entry points leaves the plugin vulnerable to privilege escalation or unauthorized actions if new entry points are added or if external data is processed without proper validation.\n\nIn conclusion, the plugin scores well on code hygiene and a clean vulnerability history. Its strength lies in its clean code and lack of known exploits. The primary weakness is the comprehensive lack of authentication and authorization mechanisms on its entry points, which poses a future risk should the attack surface grow or if it's integrated into more complex environments. A balanced assessment points to a plugin that is currently safe but could benefit from robust access control implementation.",[158,161,163],{"reason":159,"points":160},"No capability checks on entry points",15,{"reason":162,"points":160},"No nonce checks on entry points",{"reason":164,"points":61},"Unprotected attack surface (AJAX, REST, shortcodes, cron)","2026-03-16T22:03:52.358Z",{"wat":167,"direct":174},{"assetPaths":168,"generatorPatterns":169,"scriptPaths":170,"versionParams":172},[],[],[171],"\u002F\u002Fapp.invox.eu\u002Finvox_tracking.js",[173],"?v=",{"cssClasses":175,"htmlComments":177,"htmlAttributes":178,"restEndpoints":179,"jsGlobals":180,"shortcodeOutput":181},[176],"wrap",[],[],[],[],[]]