[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frDRhxzAumUnaefWZR9jtqT-dgn3N44sg9w_pXj_XEek":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":20,"download_link":21,"security_score":22,"vuln_count":11,"unpatched_count":11,"last_vuln_date":23,"fetched_at":24,"vulnerabilities":25,"developer":26,"crawl_stats":23,"alternatives":32,"analysis":93,"fingerprints":189},"key-vault","License Key Vault","1.0.0","PalmsTrack","https:\u002F\u002Fprofiles.wordpress.org\u002Fpalmstrack\u002F","\u003Cp>License Key Vault is a secure admin dashboard solution for managing your software license keys.\u003Cbr \u002F>\nIt encrypts all stored keys in your database and allows on‑the‑fly decryption copying without exposing sensitive data.\u003Cbr \u002F>\nThe plugin supports CSV export and tagging for categorization, giving you complete control over your license information.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Encrypted Storage:\u003C\u002Fstrong> All license keys are stored encrypted in your WordPress database, ensuring that sensitive data remains secure.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>On‑the‑Fly Decryption:\u003C\u002Fstrong> Retrieve and copy your license keys securely without exposing plaintext keys in the interface.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CSV Export:\u003C\u002Fstrong> Easily back up your license keys using CSV export functionality.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Categorization:\u003C\u002Fstrong> Organize your license keys by product or category for easy management.\u003C\u002Fli>\n\u003C\u002Ful>\n","Securely store and manage your software license keys directly from your WordPress dashboard.",0,344,"2025-04-26T00:31:00.000Z","6.7.5","5.9","7.2",[18,4,19],"key-manager","license-management","https:\u002F\u002Fpalmstrack.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkey-vault.1.0.0.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":27,"display_name":7,"profile_url":8,"plugin_count":28,"total_installs":11,"avg_security_score":22,"avg_patch_time_days":29,"trust_score":30,"computed_at":31},"palmstrack",1,30,94,"2026-04-04T06:05:10.071Z",[33,55,76],{"slug":34,"name":35,"version":36,"author":37,"author_profile":38,"description":39,"short_description":40,"active_installs":41,"downloaded":42,"rating":22,"num_ratings":43,"last_updated":44,"tested_up_to":45,"requires_at_least":46,"requires_php":47,"tags":48,"homepage":53,"download_link":54,"security_score":22,"vuln_count":11,"unpatched_count":11,"last_vuln_date":23,"fetched_at":24},"wc-key-manager","Key Manager – Effortlessly sell license keys, game keys, pin codes, gift cards, and more with WooCommerce","1.3.5","PluginEver","https:\u002F\u002Fprofiles.wordpress.org\u002Fpluginever\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fwckeymanager.com\u002F\" rel=\"nofollow ugc\">Key Manager\u003C\u002Fa> is the complete License Manager for WooCommerce. It lets you sell and manage software license keys, game keys, gift cards, PIN codes, serial numbers, and other secret codes.\u003C\u002Fp>\n\u003Cp>The plugin provides a secure and automated license key delivery system with options for custom key generation, bulk import\u002Fexport, expiry control, and key activation tracking.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwckeymanager.com\" rel=\"nofollow ugc\">\u003Cstrong>🚀 Upgrade to Pro\u003C\u002Fstrong>\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fdemo.pluginever.com\u002Fwc-key-manager\" rel=\"nofollow ugc\">\u003Cstrong>💻 Live Demo Site\u003C\u002Fstrong>\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwckeymanager.com\u002Fdocs\" rel=\"nofollow ugc\">\u003Cstrong>📄 Plugin Documentation\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>💵 WHAT YOU CAN SELL USING KEY MANAGER:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Software licenses, WordPress themes\u002Fplugins\u003C\u002Fli>\n\u003Cli>Game keys, digital gift cards, serial numbers, activation codes\u003C\u002Fli>\n\u003Cli>Login credentials, membership keys, access codes\u003C\u002Fli>\n\u003Cli>Online courses, eBooks, coaching sessions\u003C\u002Fli>\n\u003Cli>Any physical or digital product that requires a license or secret key\u003C\u002Fli>\n\u003Cli>API keys for SaaS products\u003C\u002Fli>\n\u003Cli>Custom PIN codes for promotions or giveaways\u003C\u002Fli>\n\u003Cli>And many more.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🛠️ HOW IT WORKS:\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Create a product in WooCommerce and configure it as a key product.\u003C\u002Fli>\n\u003Cli>Add keys for the product or let the plugin generate them automatically.\u003C\u002Fli>\n\u003Cli>When a customer places an order and completes the payment, the plugin automatically sends the key for that product.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>🎯 Free Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Add and manage license keys manually or generate them in bulk\u003C\u002Fli>\n\u003Cli>Import keys from CSV or TXT files\u003C\u002Fli>\n\u003Cli>Define key patterns: alphanumeric, numeric, or fully custom\u003C\u002Fli>\n\u003Cli>Set license expiry: fixed date, relative date, or never expire\u003C\u002Fli>\n\u003Cli>Limit or allow unlimited activations per key\u003C\u002Fli>\n\u003Cli>View activation history: user, date, order ID, and activation count\u003C\u002Fli>\n\u003Cli>Reuse keys from canceled or refunded orders\u003C\u002Fli>\n\u003Cli>Auto-deliver keys on order completion or payment confirmation\u003C\u002Fli>\n\u003Cli>Display keys on the customer’s My Account and Order Details pages\u003C\u002Fli>\n\u003Cli>REST API access for external license validation and automation\u003C\u002Fli>\n\u003Cli>Manage stock levels based on available keys\u003C\u002Fli>\n\u003Cli>Enable or disable duplicate key selling per product\u003C\u002Fli>\n\u003Cli>Built-in software license manager for WooCommerce\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🚀 Pro Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Sell license keys with variable products and variations\u003C\u002Fli>\n\u003Cli>Generate detailed license usage reports with filters\u003C\u002Fli>\n\u003Cli>Integrate with WooCommerce Subscriptions for recurring licensing\u003C\u002Fli>\n\u003Cli>Sync license key expiry with subscription expiration\u003C\u002Fli>\n\u003Cli>Encrypt license keys for secure storage and delivery\u003C\u002Fli>\n\u003Cli>Add custom metadata fields to each key (public or private)\u003C\u002Fli>\n\u003Cli>Create and assign custom product attributes to keys\u003C\u002Fli>\n\u003Cli>Upload unlimited keys per variation or product\u003C\u002Fli>\n\u003Cli>Generate QR codes and barcodes for each license key\u003C\u002Fli>\n\u003Cli>Send SMS notifications via Twilio with customizable templates\u003C\u002Fli>\n\u003Cli>Use webhooks to trigger external services on key events\u003C\u002Fli>\n\u003Cli>Bulk export license keys with advanced field filtering\u003C\u002Fli>\n\u003Cli>Priority customer support and regular feature updates\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Key Integrations\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>WooCommerce Subscriptions\u003C\u002Fstrong> – Link license key expiry with subscription status\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Dokan Multivendor\u003C\u002Fstrong> – Vendors can sell license-based products\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PDF Invoices & Packing Slips\u003C\u002Fstrong> – Attach keys inside invoices\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Twilio SMS Gateway\u003C\u002Fstrong> – Send license keys via SMS to customers\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WhatsApp Notification\u003C\u002Fstrong> – Notify customers via WhatsApp\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>REST API Support\u003C\u002Fh3>\n\u003Cp>Manage licenses through REST API for integration with external systems:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Generate, activate, deactivate, and validate license keys\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwckeymanager.com\u002Fdocs\u002Frest-api\u002F\" rel=\"nofollow ugc\">API documentation\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Sell and manage license keys, serial numbers, gift cards, PIN codes, activation codes, and digital access credentials effortlessly with Key Manager.",200,7825,2,"2026-02-05T09:04:00.000Z","6.9.4","5.2","7.4",[49,50,18,51,52],"gift-cards","key","license","software-license","https:\u002F\u002Fwckeymanager.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwc-key-manager.1.3.5.zip",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":29,"downloaded":63,"rating":64,"num_ratings":65,"last_updated":66,"tested_up_to":67,"requires_at_least":68,"requires_php":69,"tags":70,"homepage":73,"download_link":74,"security_score":75,"vuln_count":11,"unpatched_count":11,"last_vuln_date":23,"fetched_at":24},"wp-license-manager","WP License Manager","0.5.5","Jarkko Laine","https:\u002F\u002Fprofiles.wordpress.org\u002Fjarkkolaine\u002F","\u003Cp>WP License Manager is an easy to use plugin that will turn your WordPress site into a license manager that can be used for WordPress themes, plugins and other downloadable products.\u003C\u002Fp>\n\u003Cp>Downloadable files are stored in Amazon Simple Storage Service (S3) to keep them safe from people without a license.\u003C\u002Fp>\n\u003Cp>Possible uses for WP License Manager:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Hosting your own premium plugins and themes and serving updates to them.\u003C\u002Fli>\n\u003Cli>Hosting private plugins that you don’t want to share in the open.\u003C\u002Fli>\n\u003Cli>If you get more creative, the license manager plugin can be extended to be used for all kinds of digital goods; downloadable games, for example.\u003C\u002Fli>\n\u003C\u002Ful>\n","Turn your WordPress site into a software license manager for WordPress plugins, themes, and other downloadable products.",4386,80,3,"2015-04-27T17:37:00.000Z","4.2.39","3.1","",[71,51,19,72],"licence","updates","http:\u002F\u002Ffourbean.com\u002Fwp-license-manager\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-license-manager.0.5.5.zip",85,{"slug":77,"name":78,"version":6,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":11,"downloaded":83,"rating":11,"num_ratings":11,"last_updated":84,"tested_up_to":14,"requires_at_least":46,"requires_php":85,"tags":86,"homepage":90,"download_link":91,"security_score":92,"vuln_count":11,"unpatched_count":11,"last_vuln_date":23,"fetched_at":24},"license-mxt","License MXT – License Management System","Raju Ahmed","https:\u002F\u002Fprofiles.wordpress.org\u002Ffxraju\u002F","\u003Cp>License MXT provides a complete solution for managing software licenses within WordPress. Generate, validate and track license keys for your plugins and themes through an intuitive dashboard and RESTful API.\u003C\u002Fp>\n\u003Cp>Key Features:\u003Cbr \u002F>\n* License key generation and management\u003Cbr \u002F>\n* Real-time license validation via REST API\u003Cbr \u002F>\n* Site URL tracking and validation\u003Cbr \u002F>\n* Comprehensive dashboard with usage statistics\u003Cbr \u002F>\n* Multi-site license management\u003Cbr \u002F>\n* Search and filter capabilities\u003Cbr \u002F>\n* Easy integration with existing plugins\u002Fthemes\u003C\u002Fp>\n\u003Ch3>Description: License key generation\u003C\u002Fh3>\n\u003Ch3>Description: License key generation\u003C\u002Fh3>\n\u003Ch3>Integration Example\u003C\u002Fh3>\n\u003Cp>Basic license validation:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>$response = wp_remote_post('https:\u002F\u002Fyour-site.com\u002Fwp-json\u002Flicense-mxt\u002Fv1\u002Fvalidate', [\n    'body' => [\n        'license_key' => 'YOUR-LICENSE-KEY',\n        'site_url'    => home_url()\n    ]\n]);\n\u003C\u002Fcode>\u003C\u002Fpre>\n","A powerful license management system for WordPress plugin and theme developers.",632,"2025-03-19T16:37:00.000Z","7.0",[51,87,19,88,89],"license-key","plugin-licensing","theme-licensing","https:\u002F\u002Fwww.webmxt.com\u002Fproduct\u002Flicense-mxt","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flicense-mxt.1.0.0.zip",92,{"attackSurface":94,"codeSignals":131,"taintFlows":144,"riskAssessment":182,"analyzedAt":188},{"hooks":95,"ajaxHandlers":106,"restRoutes":127,"shortcodes":128,"cronEvents":129,"entryPointCount":130,"unprotectedCount":11},[96,102],{"type":97,"name":98,"callback":99,"file":100,"line":101},"action","admin_enqueue_scripts","palmskv_admin_enqueue_scripts","key-vault.php",19,{"type":97,"name":103,"callback":104,"file":100,"line":105},"admin_menu","palmskv_add_admin_menu",90,[107,112,115,118,121,124],{"action":108,"nopriv":109,"callback":108,"hasNonce":110,"hasCapCheck":109,"file":100,"line":111},"palmskv_get_key",false,true,104,{"action":113,"nopriv":109,"callback":113,"hasNonce":110,"hasCapCheck":109,"file":100,"line":114},"palmskv_get_notes",121,{"action":116,"nopriv":109,"callback":116,"hasNonce":110,"hasCapCheck":109,"file":100,"line":117},"palmskv_save_notes",138,{"action":119,"nopriv":109,"callback":119,"hasNonce":110,"hasCapCheck":109,"file":100,"line":120},"palmskv_save_license",422,{"action":122,"nopriv":109,"callback":122,"hasNonce":110,"hasCapCheck":109,"file":100,"line":123},"palmskv_delete_license",470,{"action":125,"nopriv":109,"callback":125,"hasNonce":110,"hasCapCheck":109,"file":100,"line":126},"palmskv_export",493,[],[],[],6,{"dangerousFunctions":132,"sqlUsage":133,"outputEscaping":140,"fileOperations":11,"externalRequests":11,"nonceChecks":130,"capabilityChecks":11,"bundledLibraries":143},[],{"prepared":134,"raw":28,"locations":135},9,[136],{"file":137,"line":138,"context":139},"uninstall.php",18,"$wpdb->query() with variable interpolation",{"escaped":141,"rawEcho":11,"locations":142},25,[],[],[145,163,173],{"entryPoint":146,"graph":147,"unsanitizedCount":11,"severity":162},"palmskv_get_key (key-vault.php:105)",{"nodes":148,"edges":160},[149,154],{"id":150,"type":151,"label":152,"file":100,"line":153},"n0","source","$_POST",108,{"id":155,"type":156,"label":157,"file":100,"line":158,"wp_function":159},"n1","sink","get_row() [SQLi]",113,"get_row",[161],{"from":150,"to":155,"sanitized":110},"low",{"entryPoint":164,"graph":165,"unsanitizedCount":11,"severity":162},"palmskv_get_notes (key-vault.php:122)",{"nodes":166,"edges":171},[167,169],{"id":150,"type":151,"label":152,"file":100,"line":168},125,{"id":155,"type":156,"label":157,"file":100,"line":170,"wp_function":159},130,[172],{"from":150,"to":155,"sanitized":110},{"entryPoint":174,"graph":175,"unsanitizedCount":11,"severity":162},"\u003Ckey-vault> (key-vault.php:0)",{"nodes":176,"edges":180},[177,179],{"id":150,"type":151,"label":178,"file":100,"line":153},"$_POST (x2)",{"id":155,"type":156,"label":157,"file":100,"line":158,"wp_function":159},[181],{"from":150,"to":155,"sanitized":110},{"summary":183,"deductions":184},"The 'key-vault' v1.0.0 plugin demonstrates a strong security posture with several good practices in place. The static analysis reveals no identified critical or high-severity issues in the code, with all identified outputs being properly escaped and no dangerous functions or file operations being used. The plugin also employs nonce checks for all its AJAX handlers, preventing common cross-site request forgery vulnerabilities. Furthermore, the absence of known CVEs and a clean vulnerability history suggest that the developers have maintained a secure codebase over time.\n\nHowever, a notable concern is the complete lack of capability checks for its six AJAX handlers. While nonce checks protect against CSRF, they do not prevent authenticated users from accessing functionality they shouldn't have. This means any logged-in user, regardless of their role or permissions, could potentially interact with these AJAX endpoints. Given the absence of any recorded vulnerabilities, it's possible the functionality exposed by these AJAX handlers is not sensitive, but this is an assumption. A more robust security model would involve capability checks to ensure proper authorization.\n\nIn conclusion, 'key-vault' v1.0.0 is generally well-secured with robust input validation and output sanitization. The absence of known vulnerabilities and the use of prepared statements for the vast majority of its SQL queries are significant strengths. The primary weakness lies in the lack of capability checks on its AJAX endpoints, which could be a potential avenue for privilege escalation if the exposed functionality is sensitive. Addressing this would significantly improve the plugin's overall security.",[185],{"reason":186,"points":187},"AJAX handlers lack capability checks",10,"2026-03-17T06:40:56.685Z",{"wat":190,"direct":199},{"assetPaths":191,"generatorPatterns":194,"scriptPaths":195,"versionParams":196},[192,193],"\u002Fwp-content\u002Fplugins\u002Fkey-vault\u002Fcss\u002Fpalmskv-style.css","\u002Fwp-content\u002Fplugins\u002Fkey-vault\u002Fjs\u002Fpalmskv-script.js",[],[193],[197,198],"key-vault\u002Fcss\u002Fpalmskv-style.css?ver=","key-vault\u002Fjs\u002Fpalmskv-script.js?ver=",{"cssClasses":200,"htmlComments":219,"htmlAttributes":220,"restEndpoints":222,"jsGlobals":224,"shortcodeOutput":226},[201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218],"palmskv-header","palmskv-manager","palmskv-main-area","palmskv-controls-row","palmskv-view-toggle","palmskv-controls-right","palmskv-table","cards-grid","palmskv-card","palmskv-card-header","palmskv-card-body","palmskv-card-footer","palmskv-input-group","palmskv-modal-overlay","palmskv-modal","palmskv-modal-header","palmskv-modal-body","palmskv-modal-footer",[],[221],"data-id",[223],"\u002Fwp-json\u002Fpalmskv\u002Fv1\u002Fsettings",[225],"palmskv_ajax",[]]