[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBgtAkfVk5NDMX4YAtvbG0Bg14AHoXfXbMqX4qqHfHaI":3},{"slug":4,"name":5,"version":6,"author":4,"author_profile":7,"description":8,"short_description":9,"active_installs":10,"downloaded":11,"rating":12,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":48,"crawl_stats":37,"alternatives":51,"analysis":152,"fingerprints":323},"leadsnap","LeadSnap","1.25","https:\u002F\u002Fprofiles.wordpress.org\u002Fleadsnap\u002F","\u003Cp>This is the official plugin for LeadSnap. This plugin creates the connection between WordPress and your LeadSnap account. Form submissions are instantly available and ready to  leverage all the powerful features of our lead management system within the LeadSnap system. For more information on features, plans and more check out \u003Ca href=\"https:\u002F\u002Fwww.leadsnap.com\u002F\" rel=\"nofollow ugc\">leadsnap.com\u003C\u002Fa>.\u003C\u002Fp>\n","Save the leads to our lead management system CRM generated by Contact Form 7",1000,6418,100,4,"2023-03-09T09:56:00.000Z","6.1.10","5.0","5.2.4",[19,20,21,22,23],"cf7","contact-form","crm","leads","management","https:\u002F\u002Fwww.leadsnap.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fleadsnap.1.25.zip",83,1,0,"2023-03-10 00:00:00","2026-03-15T15:16:48.613Z",[32],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":39,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":29,"updated_date":44,"references":45,"days_to_patch":47},"WF-aefbebce-9433-455d-b27c-93088b0c8494-leadsnap","leadsnap-unauthenticated-php-object-injection-via-ajax","LeadSnap \u003C= 1.23 - Unauthenticated PHP Object Injection via AJAX","The LeadSnap plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.23 via deserialization of untrusted input in the nopriv_tve_api_form_submit AJAX action. This allows unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.",null,"\u003C=1.23","1.24","critical",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Deserialization of Untrusted Data","2024-01-22 19:56:02",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Faefbebce-9433-455d-b27c-93088b0c8494?source=api-prod",319,{"slug":4,"display_name":4,"profile_url":7,"plugin_count":27,"total_installs":10,"avg_security_score":26,"avg_patch_time_days":47,"trust_score":49,"computed_at":50},67,"2026-04-04T15:31:40.416Z",[52,71,88,110,132],{"slug":53,"name":54,"version":55,"author":56,"author_profile":57,"description":58,"short_description":59,"active_installs":28,"downloaded":60,"rating":28,"num_ratings":28,"last_updated":61,"tested_up_to":62,"requires_at_least":16,"requires_php":63,"tags":64,"homepage":68,"download_link":69,"security_score":70,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"juridic-os-connector","Juridic-OS Connector","1.0.3","Inbux Web","https:\u002F\u002Fprofiles.wordpress.org\u002Finbuxweb\u002F","\u003Cp>Juridic-OS Connector permite conectar los formularios de contacto de tu sitio web directamente con tu sistema de gestión legal, automatizando la captura y procesamiento de leads.\u003C\u002Fp>\n\u003Cp>La integración es \u003Cstrong>simple y no requiere conocimientos técnicos avanzados\u003C\u002Fstrong>, permitiéndote comenzar a gestionar tus contactos de inmediato.\u003C\u002Fp>\n\u003Ch3>Características de Integración\u003C\u002Fh3>\n\u003Cp>Juridic-OS Connector soporta:\u003Cbr \u002F>\n* Contact Form 7\u003Cbr \u002F>\n* Otros formularios populares de WordPress\u003Cbr \u002F>\n* Sincronización automática de datos\u003Cbr \u002F>\n* Configuración rápida desde el panel de administración\u003C\u002Fp>\n\u003Ch3>¿Por qué elegir Juridic-OS Connector?\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Sin tarifas de configuración\u003C\u002Fli>\n\u003Cli>Sincronización instantánea de formularios\u003C\u002Fli>\n\u003Cli>Gestión centralizada de leads\u003C\u002Fli>\n\u003Cli>Integración directa con tu sistema legal Juridic-OS\u003C\u002Fli>\n\u003Cli>Seguridad en la transferencia de datos\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Instalación\u003C\u002Fh3>\n\u003Ch4>Instalación Automática\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Ingresa al panel de WordPress\u003C\u002Fli>\n\u003Cli>Ve a Plugins > Añadir Nuevo\u003C\u002Fli>\n\u003Cli>Busca “Juridic-OS Connector”\u003C\u002Fli>\n\u003Cli>Haz clic en Instalar y luego Activar\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Instalación Manual\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Descarga el archivo ZIP del plugin\u003C\u002Fli>\n\u003Cli>En WordPress, ve a Plugins > Cargar\u003C\u002Fli>\n\u003Cli>Selecciona el archivo ZIP\u003C\u002Fli>\n\u003Cli>Instala y activa el plugin\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Configuración\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Ingresa a tu cuenta de Juridic-OS\u003C\u002Fli>\n\u003Cli>Obtén tus credenciales de API\u003C\u002Fli>\n\u003Cli>Configura el plugin con tus claves\u003C\u002Fli>\n\u003Cli>Selecciona los formularios a conectar\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Preguntas Frecuentes\u003C\u002Fh3>\n\u003Ch4>¿Funciona con Contact Form 7?\u003C\u002Fh4>\n\u003Cp>Sí, es totalmente compatible con Contact Form 7.\u003C\u002Fp>\n\u003Ch4>¿Necesito una cuenta de Juridic-OS?\u003C\u002Fh4>\n\u003Cp>Sí, necesitas una cuenta activa para usar este plugin.\u003C\u002Fp>\n\u003Ch4>¿Dónde almacena los datos?\u003C\u002Fh4>\n\u003Cp>Los datos se envían directamente a Juridic-OS, sin almacenarse en WordPress.\u003C\u002Fp>\n\u003Ch3>Soporte\u003C\u002Fh3>\n\u003Cp>Desarrollado y mantenido por Inbux Web (https:\u002F\u002Finbuxweb.com)\u003C\u002Fp>\n","El plugin oficial de Juridic-OS para integración de formularios de contacto con sistemas de gestión legal.",535,"2025-02-02T14:28:00.000Z","6.7.5","7.4",[65,66,21,22,67],"contact-form-7","contact-forms","legal-management","https:\u002F\u002Faddasoft.co\u002Fplataforma-de-gestion-legal\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjuridic-os-connector.1.0.3.zip",92,{"slug":72,"name":73,"version":74,"author":72,"author_profile":75,"description":76,"short_description":77,"active_installs":28,"downloaded":78,"rating":28,"num_ratings":28,"last_updated":79,"tested_up_to":80,"requires_at_least":16,"requires_php":63,"tags":81,"homepage":86,"download_link":87,"security_score":12,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"quarkleads","QuarkLeads","1.0.0","https:\u002F\u002Fprofiles.wordpress.org\u002Fquarkleads\u002F","\u003Cp>Seamlessly connect your WordPress website to the QuarkLeads – World’s Most Advanced Lead Management Platform with this lightweight integration plugin. QuarkLeads helps businesses automate lead capture, follow-ups, and sales workflows — and this plugin bridges your WordPress contact forms directly to your QuarkLeads account in just a few clicks.\u003C\u002Fp>\n\u003Ch3>Key Features:\u003C\u002Fh3>\n\u003Cp>• Effortless Integration – Connect popular WordPress form builders like Contact Form 7, Elementor Forms, Ninja Forms, WPForms, Gravity Forms, and others to your QuarkLeads account.\u003Cbr \u002F>\n• Admin Panel Integration – Simple and intuitive settings panel within your WordPress dashboard for managing API keys, mappings, and logs.\u003Cbr \u002F>\n• Real-Time Data Sync – Automatically send form submissions (name, email, phone, etc.) from your website to your QuarkLeads CRM for instant follow-up.\u003Cbr \u002F>\n• Lightweight & Secure – Built with performance in mind, ensuring minimal load on your site and secure API communication using SSL.\u003Cbr \u002F>\n• WP-Cron Based Cleanup System – Automatic maintenance and log cleanup for optimal database performance.\u003Cbr \u002F>\n• Detailed Logs – View complete logs of API requests, responses, and any errors for transparency and troubleshooting.\u003Cbr \u002F>\n• Data Privacy & Compliance – Only mapped forms send data; nothing else is transmitted without explicit configuration.\u003C\u002Fp>\n\u003Ch3>Integration Points\u003C\u002Fh3>\n\u003Cp>The QuarkLeads plugin supports seamless integration with the following WordPress form plugins:\u003C\u002Fp>\n\u003Cp>• Contact Form 7\u003Cbr \u002F>\n• Elementor Forms\u003Cbr \u002F>\n• Ninja Forms\u003Cbr \u002F>\n• WPForms\u003Cbr \u002F>\n• Gravity Forms\u003Cbr \u002F>\n• Formidable Forms\u003Cbr \u002F>\n• Fluent Forms\u003C\u002Fp>\n\u003Cp>Each form can be mapped individually within the QuarkLeads plugin settings, ensuring precise control over what data is sent and when.\u003C\u002Fp>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>This plugin connects to an external service provided by QuarkLeads to send and synchronize form submissions with your QuarkLeads CRM account.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service\u003C\u002Fstrong>: QuarkLeads API (https:\u002F\u002Fserver.quarkleads.in)  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>What data is sent\u003C\u002Fstrong>: When a mapped form is submitted, the plugin transmits user-provided data such as name, email, phone number, and related metadata required for synchronization.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>When data is sent\u003C\u002Fstrong>: Data is sent only when a mapped form is submitted by a site visitor.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Purpose\u003C\u002Fstrong>: To forward and manage leads efficiently in your QuarkLeads CRM for automation, sales tracking, and follow-ups.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy & Terms\u003C\u002Fstrong>: By using this plugin, you agree to the external API connection for the sole purpose of form data synchronization. No additional domains are contacted.\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fquarkleads.com\u002Fterms-and-conditions\u002F\" rel=\"nofollow ugc\">QuarkLeads Terms of Service\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fquarkleads.com\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">QuarkLeads Privacy Policy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>No other external domains are contacted by this plugin.\u003C\u002Fp>\n\u003Ch3>Developer-Friendly:\u003C\u002Fh3>\n\u003Cp>Built with extendable hooks and filters, allowing developers to customize data flow, API requests, and logging for advanced use cases.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later.\u003C\u002Fp>\n","Connect your WordPress contact forms directly to QuarkLeads CRM — and turn every website inquiry into an actionable lead instantly.",172,"2025-10-15T21:16:00.000Z","6.8.5",[82,83,84,72,85],"contact-form-integration","form-automation","lead-management","wordpress-crm","https:\u002F\u002Fquarkleads.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fquarkleads.1.0.0.zip",{"slug":89,"name":90,"version":91,"author":92,"author_profile":93,"description":94,"short_description":95,"active_installs":96,"downloaded":97,"rating":98,"num_ratings":99,"last_updated":100,"tested_up_to":80,"requires_at_least":16,"requires_php":101,"tags":102,"homepage":106,"download_link":107,"security_score":108,"vuln_count":27,"unpatched_count":28,"last_vuln_date":109,"fetched_at":30},"lenix-elementor-leads-addon","Lenix Leads Collector","2.0.0","yonifre","https:\u002F\u002Fprofiles.wordpress.org\u002Fyonifre\u002F","\u003Cp>Lenix Leads Collector is a powerful plugin that stores and manages leads from your Elementor,Cf7,WPForms and more with export to CSV.\u003C\u002Fp>\n\u003Cp>Key Features:\u003Cbr \u002F>\n* Automatic capture of all Elementor form submissions\u003Cbr \u002F>\n* Automatic capture of all Hello Plus form submissions\u003Cbr \u002F>\n* Automatic capture of all Cf7 form submissions\u003Cbr \u002F>\n* Automatic capture of all WPForms form submissions\u003Cbr \u002F>\n* Centralized management interface in WordPress admin panel\u003Cbr \u002F>\n* Quick and easy export of leads to CSV format\u003Cbr \u002F>\n* Support for global forms\u003Cbr \u002F>\n* Multi-language support (including English, Hebrew, French and more)\u003Cbr \u002F>\n* User-friendly and intuitive interface\u003Cbr \u002F>\n* Date-based filtering for exports\u003Cbr \u002F>\n* Secure data handling\u003Cbr \u002F>\n* Each lead is a post in WordPress, so you can use all the features of WordPress to manage them\u003C\u002Fp>\n\u003Cp>No need to install any other plugin, just install and use, no configuration needed.\u003C\u002Fp>\n\u003Cp>The plugin provides a seamless way to track, manage, and export all leads received through your forms, organizing them similarly to WordPress posts for easy access and management.\u003C\u002Fp>\n\u003Cp>Perfect for Websites and organizations looking to efficiently manage their form submissions and lead data in one central location.\u003C\u002Fp>\n\u003Ch4>Maspik – Spam Protection\u003C\u002Fh4>\n\u003Cp>For improved spam protection, check out our sister plugin \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcontact-forms-anti-spam\u002F\" rel=\"ugc\">Maspik\u003C\u002Fa>\u003Cbr \u002F>\nWe provide built-in spam protection and filtering. For enhanced spam prevention, we recommend using Maspik – an advanced anti-spam solution specifically designed for WordPress forms.\u003C\u002Fp>\n\u003Cp>With a 95%+ success rate, Maspik uses smart technology to block spam submissions while ensuring legitimate leads get through.\u003Cbr \u002F>\nThe plugin works instantly with no CAPTCHA required and includes features like smart blacklist system, IP blocking, and phone number validation.\u003C\u002Fp>\n\u003Cp>Compatible with all major form plugins including Elementor forms, you can set it up in just 2 minutes. \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcontact-forms-anti-spam\u002F\" rel=\"ugc\">Learn more about Maspik\u003C\u002Fa>\u003C\u002Fp>\n","Leads Collector, Collects forms entries from Elementor,Cf7,WPForms and more with export to CSV.",10000,182611,88,25,"2025-06-12T06:39:00.000Z","7.0",[103,21,104,105,22],"contact-form-db","form-collector","hello-plus","https:\u002F\u002Flenix.co.il\u002Fplugin\u002Flenix-elementor-leads-addon\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flenix-elementor-leads-addon.2.0.0.zip",98,"2025-02-19 00:00:00",{"slug":111,"name":112,"version":113,"author":114,"author_profile":115,"description":116,"short_description":117,"active_installs":118,"downloaded":119,"rating":28,"num_ratings":28,"last_updated":120,"tested_up_to":121,"requires_at_least":16,"requires_php":101,"tags":122,"homepage":127,"download_link":128,"security_score":129,"vuln_count":130,"unpatched_count":27,"last_vuln_date":131,"fetched_at":30},"cubewp-forms","CubeWP Forms","1.1.10","Imran Tauqeer","https:\u002F\u002Fprofiles.wordpress.org\u002Fcubewp1211\u002F","\u003Cp>CubeWP Forms is a 100% free extension for the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcubewp-framework\" rel=\"ugc\">CubeWP Framework\u003C\u002Fa> (also available for FREE on WordPress.org) that lets you easily build simple to very advanced forms including contact forms, lead forms, feedback forms, appointment request forms, and newsletter subscription forms (MailChimp integration) for your website using a drag-and-drop form builder and manage all the leads from WordPress backend.\u003C\u002Fp>\n\u003Ch3>🎁 NEW BONUS! 10+ KICKSTARTER FORM TEMPLATES IN DOZEN STYLES FOR FREE!\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Simple Contact Form\u003C\u002Fli>\n\u003Cli>Extended Contact Form\u003C\u002Fli>\n\u003Cli>Creative Contact Form\u003C\u002Fli>\n\u003Cli>Corporate Contact Form\u003C\u002Fli>\n\u003Cli>Contact Form with Subject Field\u003C\u002Fli>\n\u003Cli>Contact Form with Subject Drop-Down\u003C\u002Fli>\n\u003Cli>Contact Form with Newsletter subscription\u003C\u002Fli>\n\u003Cli>Contact Form with How Did You Learn About Us\u003C\u002Fli>\n\u003Cli>Contact Form with Accept Terms\u003C\u002Fli>\n\u003Cli>Contact Form with Full Address\u003C\u002Fli>\n\u003Cli>Appointment Request Form\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>⭐ To Try Form Templates & Styles ➡️\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fextensions\u002Fcubewp-forms-templates\" rel=\"nofollow ugc\">CLICK HERE\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>In addition to serving as a simple contact or lead form, CubeWP Forms can also be used for more advanced purposes.\u003C\u002Fp>\n\u003Cp>To create a powerful form you need access to advanced custom fields. CubeWP Forms includes 25 custom fields out-of-the box.\u003C\u002Fp>\n\u003Cp>Many of the custom fields included are only available in paid add-ons otherwise. See the list of all custom fields below.\u003C\u002Fp>\n\u003Cp>Some of the key features that make it a powerful form builder include the ability for administrators to view and manage lead messages from the backend, as well as the option to configure forms to send instant notification to specific email addresses.\u003C\u002Fp>\n\u003Cp>With CubeWP Forms, you can quickly and easily create forms that meet your specific needs and help you capture valuable lead information or feedback from your visitors.\u003C\u002Fp>\n\u003Cp>With our premium add-on, \u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fcubewp-frontend-pro\u002F\" rel=\"nofollow ugc\">CubeWP Frontend Pro\u003C\u002Fa>, you can also allow users (post authors, listing owners, etc.) to view and manage leads from the frontend user dashboard. This feature provides an easy and convenient way for users to access and interact with leads on your site.\u003C\u002Fp>\n\u003Cp>If you want to enable this functionality, be sure to check out \u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fcubewp-frontend-pro\u002F\" rel=\"nofollow ugc\">CubeWP Frontend Pro\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Core Features Includes\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Unlimited Forms\u003C\u002Fli>\n\u003Cli>Unlimited form submissions\u003C\u002Fli>\n\u003Cli>Drag and Drop Form Builder\u003C\u002Fli>\n\u003Cli>Drop anywhere with shortcode\u003C\u002Fli>\n\u003Cli>Leads Management (Backend) – aka Entry Management\u003C\u002Fli>\n\u003Cli>Leads Management (Frontend User-dashboard) – requires \u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fcubewp-frontend-pro\u002F\" rel=\"nofollow ugc\">CubeWP Frontend Pro\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>File Uploads\u003C\u002Fli>\n\u003Cli>Instant Notifications (multiple emails)\u003C\u002Fli>\n\u003Cli>Restrict form submission only for logged-in users\u003C\u002Fli>\n\u003Cli>Spam Protection – reCAPTCHA (Google)\u003C\u002Fli>\n\u003Cli>Field Validation \u003C\u002Fli>\n\u003Cli>Set Character Limit\u003C\u002Fli>\n\u003Cli>Smart Conditional Logic\u003C\u002Fli>\n\u003Cli>Mobile Friendly – 100% Responsive\u003C\u002Fli>\n\u003Cli>25 Advanced Custom Fields\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>List of all 25 Custom Fields Types Available\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>Text\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Numbers\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>URL\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Email\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Textarea\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>WYSIWYG editor\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Image\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Gallery\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>File\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>oEmbed\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Drop-down\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Checkboxes\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Radio buttons\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Switch\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Range\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Color Picker\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Date\u002Ftime picker\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Date picker\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Time picker\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Post\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Taxonomy\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>User\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Repeatable Field Set\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Password\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Google Address\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>How to add the form anywhere?\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Copy paste the unique shortcode generated for each form.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Can I add this to any page or post type?\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Yes you can.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How to view and manage leads from frontend?\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>You will need to purchase \u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fcubewp-frontend-pro\u002F\" rel=\"nofollow ugc\">CubeWP Frontend Pro\u003C\u002Fa> and create a user-dashboard.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Can I use it to capture email subscriptions for newsletter?\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Yes CubeWP Forms is integrated with Mailchimp. We plan to add alternative integrations in the future.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>⭐ OTHER FREE EXTENSION FOR CUBEWP FRAMEWORK ⭐\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcubewp-wallet\" rel=\"ugc\">CubeWP Wallet\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>CubeWP Wallet is a feature-rich plugin designed primarily to integrate a wallet system into a WordPress themes or websites. Easily enable transactions to be added to a user’s wallet, provide withdrawal functionality, and even implement commission charges.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fdownloads\u002Fcubewp-addon-social-login\" rel=\"nofollow ugc\">CubeWP Social Login\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>CubeWP Social Login is a powerful add-on for the CubeWP Framework that allows users to sign in and sign up using their Facebook and Google accounts. It also provides the option to connect existing accounts with these two popular social media platforms.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fdownloads\u002Fcubewp-addon-bulk-import\" rel=\"nofollow ugc\">CubeWP Bulk Import\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>CubeWP Bulk Import Plugin is a user-friendly tool that simplifies content import in WordPress. It seamlessly handles large-scale imports of posts, pages, custom post types, taxonomies, and media files.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fdownloads\u002Fcubewp-addon-post-claim\" rel=\"nofollow ugc\">CubeWP Post Claim\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>CubeWP Claim is a versatile plugin designed to add a post claim feature to your dynamic WordPress website. You can offer users the ability to claim ownership of posts, ensuring content integrity.\u003C\u002Fp>\n\u003Ch3>⭐ PREMIUM EXTENSIONS FOR CUBEWP FRAMEWORK ⭐\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Do you want admin access to try our premium extensions?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fdemowp.io\u002Fget-demo.php?demo=CubeWP\" rel=\"nofollow ugc\">Click-here to create an instant sandbox\u003C\u002Fa> – Powered by DemoWP.io\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fcubewp-frontend-pro\" rel=\"nofollow ugc\">CubeWP Frontend Pro\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>With CubeWP Frontend Pro, streamline your workflow by replacing multiple plugins and manual coding. This robust extension empowers you to create custom frontend forms, layouts, and dynamic content effortlessly.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Advanced Search Builder: Enhance your search capabilities by adding various custom fields.\u003C\u002Fli>\n\u003Cli>Advanced Filter Builder: Expand filtering options with all available custom fields.\u003C\u002Fli>\n\u003Cli>User Signup Form Builder: Craft tailored registration forms for different user roles.\u003C\u002Fli>\n\u003Cli>User Profile Form Builder: Create personalized profile forms for diverse user roles.\u003C\u002Fli>\n\u003Cli>Post Types Form Builder: Develop front-end submission forms for any post type.\u003C\u002Fli>\n\u003Cli>Single-post Template Editor: Customize post details with a drag-and-drop layout builder.\u003C\u002Fli>\n\u003Cli>User Dashboard Builder: Easily construct custom user dashboards based on roles.\u003C\u002Fli>\n\u003Cli>Post Loop Generator: Gain full control over post grids for unique content presentation (HTML\u002FCSS skills required).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fcubewp-payments\" rel=\"nofollow ugc\">CubeWP Payments\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Enable monetization via different revenue channels with WooCommerce once you have built your website.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fcubewp-inbox\" rel=\"nofollow ugc\">CubeWP Inbox\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>The CubeWP Inbox Pro add-on lets vendors respond to messages from their website without having to leave the site.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fdownloads\u002Fcubewp-addon-reviews\" rel=\"nofollow ugc\">CubeWP Reviews\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>This extension enables users to share their thoughts, opinions, and experiences by posting reviews and multi-criteria ratings.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fdownloads\u002Fcubewp-addon-booster\" rel=\"nofollow ugc\">CubeWP Booster\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>The Ads Booster feature within CubeWP Booster allows users to run targeted ad campaigns to boost their posts on a Pay-per-Click (ppc) or Pay-per-Day (PPD) basis.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fdownloads\u002Fcubewp-addon-booking\" rel=\"nofollow ugc\">CubeWP Booking\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>CubeWP Booking is a 3-in-1 Booking plugin, providing all necessary booking features including free or paid booking needs or build more advanced marketplaces.\u003C\u002Fp>\n\u003Ch3>⭐ CUBEWP PREMIUM THEMES ⭐\u003C\u002Fh3>\n\u003Cp>To kickstart an advanced website or web-app you can get all access to our premium themes library.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fdownloads\u002Fstreetwise\" rel=\"nofollow ugc\">Streetwise\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Streetwise is a WordPress Real Estate theme developed with the CubeWP Framework. It draws inspiration from top real-world real-estate websites.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fdownloads\u002Fyellowbooks\" rel=\"nofollow ugc\">YellowBooks\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>YellowBooks is a WordPress directory theme developed with the CubeWP Framework. It draws inspiration from top real-world directory websites.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fdownloads\u002Fclx\" rel=\"nofollow ugc\">CLX\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>CLX is a WordPress Classified Ads theme developed with the CubeWP Framework. It draws inspiration from top real-world classified ads websites.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcubewp.com\u002Fdownloads\u002Fdubified\" rel=\"nofollow ugc\">Dubified\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Dubified is a WordPress Classified Ads theme developed with the CubeWP Framework. It draws inspiration from top real-world classified ads websites.\u003C\u002Fp>\n","CubeWP Forms is a 100% free drag-and-drop builder for creating contact forms, lead gen forms, appointment request forms, and newsletter signup forms.",4000,70686,"2026-01-08T07:05:00.000Z","6.9.4",[123,20,124,125,126],"conditional-fields","custom-fields","lead-form","leads-management","https:\u002F\u002Fcubewp.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcubewp-forms.1.1.10.zip",73,3,"2025-06-12 00:00:00",{"slug":133,"name":134,"version":135,"author":136,"author_profile":137,"description":138,"short_description":139,"active_installs":140,"downloaded":141,"rating":142,"num_ratings":143,"last_updated":144,"tested_up_to":145,"requires_at_least":146,"requires_php":147,"tags":148,"homepage":150,"download_link":151,"security_score":12,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"contact-form-7-civicrm-integration","Contact Form 7 CiviCRM integration","1.10","Jaap Jansma","https:\u002F\u002Fprofiles.wordpress.org\u002Fjaapjansma\u002F","\u003Cp>This plugin adds integration for CiviCRM to Contact Form 7. With this plugin it is possible to submit a contact to a local or remote CiviCRM system.\u003C\u002Fp>\n\u003Cp>This adds a \u003Cstrong>CiviCRM\u003C\u002Fstrong> tab to Contact Form confgurations.  If you enable CiviCRM processing the form will be submitted to the CiviCRM API v3.  For information about using CiviCRM’s API see https:\u002F\u002Fdocs.civicrm.org\u002Fdev\u002Fen\u002Flatest\u002Fapi\u002F\u003C\u002Fp>\n\u003Cp>The API requires an \u003Cstrong>Entity\u003C\u002Fstrong> and an \u003Cstrong>Action\u003C\u002Fstrong>.  You may need to add additional parameters depending for the Entity\u002FAction you specify.  Use the API Explorer on your CiviCRM system to determine what additional parameters are required.  The form parameters will automatically be included in the API call and the form variables need to match those expected by the API.\u003Cbr \u002F>\nFor example, if the API call needs a field called \u003Cem>first_name\u003C\u002Fem> then your form template should have a field called \u003Cem>first_name\u003C\u002Fem>  (not \u003Cem>first-name\u003C\u002Fem> or \u003Cem>firstName\u003C\u002Fem> etc)\u003C\u002Fp>\n","Contact Form 7 CiviCRM integration.",200,6076,50,2,"2025-06-26T03:49:00.000Z","5.8.13","4.3","7.2",[19,149,65],"civicrm","https:\u002F\u002Fwww.civicoop.org","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcontact-form-7-civicrm-integration.1.10.zip",{"attackSurface":153,"codeSignals":259,"taintFlows":287,"riskAssessment":307,"analyzedAt":322},{"hooks":154,"ajaxHandlers":217,"restRoutes":255,"shortcodes":256,"cronEvents":257,"entryPointCount":258,"unprotectedCount":258},[155,161,165,170,175,180,183,187,191,195,199,203,208,212],{"type":156,"name":157,"callback":158,"file":159,"line":160},"action","admin_init","page_init","admin\\class-wsl-admin.php",10,{"type":156,"name":162,"callback":163,"file":159,"line":164},"admin_menu","add_page",11,{"type":156,"name":166,"callback":167,"file":168,"line":169},"wp_enqueue_scripts","wncrm_typeform_script","includes\\helpers.php",77,{"type":156,"name":171,"callback":172,"priority":160,"file":173,"line":174},"wpcf7_submit","wncrm_wpcf7_submit","leadsnap.php",81,{"type":176,"name":177,"callback":178,"file":173,"line":179},"filter","wpcf7_editor_panels","wncrm_add_panel",86,{"type":156,"name":181,"callback":182,"file":173,"line":12},"wpcf7_after_save","wncrm_cf7_success_page_save_contact_form",{"type":156,"name":184,"callback":185,"file":173,"line":186},"ninja_forms_after_submission","wncrm_ninja_forms_after_submission",127,{"type":176,"name":188,"callback":189,"priority":160,"file":173,"line":190},"wpforms_process_entry_save","wncrm_wpf_process_entry_save",138,{"type":156,"name":192,"callback":193,"priority":160,"file":173,"line":194},"gform_after_submission","wncrm_gravityform_submission",150,{"type":156,"name":196,"callback":197,"priority":160,"file":173,"line":198},"elementor_pro\u002Fforms\u002Fnew_record","wncrm_elementor_pro",152,{"type":156,"name":200,"callback":201,"file":173,"line":202},"et_pb_contact_form_submit","wncrm_divi",166,{"type":156,"name":204,"callback":205,"priority":206,"file":173,"line":207},"fluentform_submission_inserted","wncrm_fluentforms",20,181,{"type":156,"name":209,"callback":210,"priority":142,"file":173,"line":211},"caldera_forms_submit_complete","wncrm_caldera_forms",249,{"type":156,"name":213,"callback":214,"priority":215,"file":173,"line":216},"frm_after_create_entry","wncrm_fomidable",30,278,[218,223,225,229,231,235,237,241,243,247,249,253],{"action":219,"nopriv":220,"callback":219,"hasNonce":221,"hasCapCheck":221,"file":173,"line":222},"wncrm_typeform",true,false,193,{"action":219,"nopriv":221,"callback":219,"hasNonce":221,"hasCapCheck":221,"file":173,"line":224},194,{"action":226,"nopriv":221,"callback":227,"hasNonce":221,"hasCapCheck":221,"file":173,"line":228},"fl_builder_email","wncrm_beaver",207,{"action":226,"nopriv":220,"callback":227,"hasNonce":221,"hasCapCheck":221,"file":173,"line":230},208,{"action":232,"nopriv":221,"callback":233,"hasNonce":221,"hasCapCheck":221,"file":173,"line":234},"brizy_submit_form","wncrm_brizy",220,{"action":232,"nopriv":220,"callback":233,"hasNonce":221,"hasCapCheck":221,"file":173,"line":236},221,{"action":238,"nopriv":221,"callback":239,"hasNonce":221,"hasCapCheck":221,"file":173,"line":240},"rednao_smart_forms_save_form_values","wncrm_smart_forms",235,{"action":238,"nopriv":220,"callback":239,"hasNonce":221,"hasCapCheck":221,"file":173,"line":242},236,{"action":244,"nopriv":221,"callback":245,"hasNonce":221,"hasCapCheck":221,"file":173,"line":246},"tve_api_form_submit","wncrm_thrive_form",264,{"action":244,"nopriv":220,"callback":245,"hasNonce":221,"hasCapCheck":221,"file":173,"line":248},265,{"action":250,"nopriv":221,"callback":251,"hasNonce":221,"hasCapCheck":221,"file":173,"line":252},"uagb_process_forms","wncrm_gutenberg_forms",286,{"action":250,"nopriv":220,"callback":251,"hasNonce":221,"hasCapCheck":221,"file":173,"line":254},287,[],[],[],12,{"dangerousFunctions":260,"sqlUsage":267,"outputEscaping":274,"fileOperations":28,"externalRequests":285,"nonceChecks":27,"capabilityChecks":28,"bundledLibraries":286},[261,266],{"fn":262,"file":263,"line":264,"context":265},"unserialize","includes\\class-wsl-formidable-api.php",120,"$ser_address = unserialize( $val->meta_value );",{"fn":262,"file":263,"line":252,"context":265},{"prepared":13,"raw":143,"locations":268},[269,272],{"file":263,"line":270,"context":271},115,"$wpdb->get_results() with variable interpolation",{"file":263,"line":273,"context":271},280,{"escaped":275,"rawEcho":130,"locations":276},7,[277,280,282],{"file":159,"line":278,"context":279},31,"raw output",{"file":159,"line":281,"context":279},114,{"file":283,"line":284,"context":279},"admin\\partials\\send_to_company_field.php",16,6,[],[288],{"entryPoint":289,"graph":290,"unsanitizedCount":27,"severity":306},"\u003Cclass-wsl-cf7-api> (includes\\class-wsl-cf7-api.php:0)",{"nodes":291,"edges":304},[292,298],{"id":293,"type":294,"label":295,"file":296,"line":297},"n0","source","$_SERVER","includes\\class-wsl-cf7-api.php",63,{"id":299,"type":300,"label":301,"file":296,"line":302,"wp_function":303},"n1","sink","update_option() [Settings Manipulation]",306,"update_option",[305],{"from":293,"to":299,"sanitized":221},"low",{"summary":308,"deductions":309},"The leadsnap v1.25 plugin presents a significant security risk primarily due to its unprotected attack surface and historical vulnerability.  The plugin exposes 12 AJAX handlers with no authentication or permission checks, meaning any user, including unauthenticated ones, can trigger these actions. This is a critical oversight. Furthermore, the presence of the `unserialize` function without apparent sanitization is a major concern, especially when combined with the fact that the plugin has a history of a critical deserialization vulnerability. While the plugin does utilize prepared statements for most of its SQL queries and has a decent output escaping rate, these strengths are overshadowed by the severe lack of input validation and authorization.",[310,312,315,318,320],{"reason":311,"points":160},"12 unprotected AJAX handlers",{"reason":313,"points":314},"Presence of unserialize function",8,{"reason":316,"points":317},"One critical unpatched CVE historically",15,{"reason":319,"points":314},"One flow with unsanitized paths",{"reason":321,"points":160},"No capability checks on AJAX","2026-03-16T18:59:32.852Z",{"wat":324,"direct":331},{"assetPaths":325,"generatorPatterns":328,"scriptPaths":329,"versionParams":330},[326,327],"\u002Fwp-content\u002Fplugins\u002Fleadsnap\u002Fassets\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fleadsnap\u002Fassets\u002Fjs\u002Fscripts.js",[],[327],[],{"cssClasses":332,"htmlComments":333,"htmlAttributes":336,"restEndpoints":341,"jsGlobals":345,"shortcodeOutput":347},[],[334,335],"\u003C!-- LeadSnap Settings Panel -->","\u003C!-- LeadSnap Settings -->",[337,338,339,340],"data-nonce","data-action","data-plugin","data-slug",[342,343,344],"\u002Fwp-json\u002Fleadsnap\u002Fv1\u002Fsubmit","\u002Fwp-json\u002Fleadsnap\u002Fv1\u002Fform-data","\u002Fwp-json\u002Fleadsnap\u002Fv1\u002Fsettings",[346],"leadsnap_ajax_object",[]]