[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-lOEyHoAXmGWOtxA6fNVihS8d1gPGKxpugruA9kk7K4":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":35,"analysis":99,"fingerprints":170},"leadsource-tracker","LeadSource Tracker – Free Edition","1.0","cchui","https:\u002F\u002Fprofiles.wordpress.org\u002Fcchui\u002F","\u003Cp>Finally, marketing attribution that won’t break the bank!\u003C\u002Fp>\n\u003Cp>LeadSource Tracker is a plugin for WordPress websites which allows you to tag your inbound links (emails, advertisements, newsletters, press releases, even\u003Cbr \u002F>\noffline venues) so that you can find out where your leads and opportunities are coming from and calculate real ROI.\u003C\u002Fp>\n\u003Cp>LeadSource Tracker can attribute MULTIPLE lead sources to a visitor when they register.  When the user registers or places an order on your website, all the\u003Cbr \u002F>\npast campaigns that the user has clicked on can be populated into your forms, where they can be stored in your CRM for reports that consist of marketing attribution to multiple campaigns.  You can even retrieve the lead sources and use the campaign information to customize your web pages.\u003C\u002Fp>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n","LeadSource Tracker is a simple campaign and marketing attribution that tracks multiple lead sources per visitor.",10,1481,0,"2015-05-25T03:20:00.000Z","4.2.39","3.7","",[19,20,21,22,23],"campaign-attribution","lead-source","leadsource","marketing-attribution","multiple-lead-source","http:\u002F\u002Fwww.leadsourcetracker.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fleadsource-tracker.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},1,30,84,"2026-04-04T15:07:33.590Z",[36,60,80],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":57,"download_link":58,"security_score":59,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"call-tracking-metrics","CallTrackingMetrics","2.1.8","taf2","https:\u002F\u002Fprofiles.wordpress.org\u002Ftaf2\u002F","\u003Cp>CallTrackingMetrics integrates with your WordPress site to provide powerful call tracking and attribution.\u003C\u002Fp>\n","CallTrackingMetrics integrates with your WordPress site to provide powerful call tracking and attribution.",3000,125043,74,3,"2026-02-16T14:22:00.000Z","6.9.4","6.5","8.2",[53,54,55,56,22],"advertising","call-tracking","conversation-analytics","google-ads","https:\u002F\u002Fcalltrackingmetrics.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcall-tracking-metrics.2.1.8.zip",100,{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":68,"downloaded":69,"rating":13,"num_ratings":13,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":17,"tags":73,"homepage":78,"download_link":79,"security_score":59,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"thoughtmetric-for-woocommerce","ThoughtMetric for WooCommerce","1.27.0","msignorella","https:\u002F\u002Fprofiles.wordpress.org\u002Fmsignorella\u002F","\u003Cp>ThoughtMetric is a marketing attribution solution for e-commerce stores. This plugin makes it easy to install ThoughtMetric on your WooCommerce store.\u003C\u002Fp>\n\u003Cp>ThoughtMetric integrates with all of your marketing platforms so you can easily identify which marketing channels are working and which ones aren’t. Don’t settle for a world where all of your marketing data is siloed and every channel takes credit for the same conversion. With ThoughtMetric, you can see your true marketing ROI across all your digital channels. ThoughtMetric detects the true source of a conversion using a combination of pixel tracking data and customer surveys.\u003C\u002Fp>\n","ThoughtMetric is a marketing attribution solution for e-commerce stores.",200,2697,"2025-06-29T18:03:00.000Z","6.8.5","5.2",[74,75,22,76,77],"attribution","marketing-analytics","thought-metric","thoughtmetric","https:\u002F\u002Fthoughtmetric.io","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fthoughtmetric-for-woocommerce.1.27.0.zip",{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":68,"downloaded":88,"rating":59,"num_ratings":89,"last_updated":90,"tested_up_to":49,"requires_at_least":91,"requires_php":92,"tags":93,"homepage":17,"download_link":98,"security_score":59,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"utm-tracker-for-contact-form-7","UTM Tracker for Contact Form 7","1.5","Adnan Buksh","https:\u002F\u002Fprofiles.wordpress.org\u002Fadnanbuksh\u002F","\u003Cp>\u003Cstrong>UTM Tracker for Contact Form 7\u003C\u002Fstrong> automatically captures UTM parameters from incoming URLs and attaches them to Contact Form 7 submissions.\u003C\u002Fp>\n\u003Cp>This allows website owners, marketers, and agencies to see \u003Cstrong>exactly where their leads come from\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>If you run marketing campaigns using UTM parameters, the plugin detects them when visitors arrive and stores them in cookies so they can be attached to the form submission later.\u003C\u002Fp>\n\u003Cp>Works perfectly even if visitors browse multiple pages before submitting the form.\u003C\u002Fp>\n\u003Cp>Perfect for:\u003C\u002Fp>\n\u003Cp>• Marketers running Google Ads or Meta Ads campaigns\u003Cbr \u002F>\n• Agencies proving campaign ROI to clients\u003Cbr \u002F>\n• Businesses tracking lead sources from paid traffic\u003Cbr \u002F>\n• Developers implementing attribution tracking in Contact Form 7\u003C\u002Fp>\n\u003Cp>Example campaign URL:\u003C\u002Fp>\n\u003Cp>https:\u002F\u002Fwebfreelancer.in\u002F?utm_source=google&utm_medium=cpc&utm_campaign=spring_sale&utm_id=12345\u003C\u002Fp>\n\u003Cp>When a visitor lands on your site with UTM parameters:\u003C\u002Fp>\n\u003Col>\n\u003Cli>The plugin detects and stores the UTM values in cookies\u003C\u002Fli>\n\u003Cli>Visitors can navigate your website normally\u003C\u002Fli>\n\u003Cli>When they submit a Contact Form 7 form, the UTM data is automatically included in the email notification\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>This helps you understand \u003Cstrong>which campaigns generate real leads\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>The plugin is lightweight, privacy-friendly, and optimized for performance.\u003C\u002Fp>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Cp>• Automatically captures UTM parameters in Contact Form 7 submissions\u003Cbr \u002F>\n• Supports utm_source, utm_medium, utm_campaign, utm_term, utm_content and utm_id\u003Cbr \u002F>\n• First-touch attribution using cookies (stored for 30 days)\u003Cbr \u002F>\n• Works even if visitors browse multiple pages before submitting the form\u003Cbr \u002F>\n• Compatible with HTML and plain text Contact Form 7 emails\u003Cbr \u002F>\n• Works with cached pages and performance plugins\u003Cbr \u002F>\n• Lightweight and optimized for high-performance WordPress sites\u003Cbr \u002F>\n• No manual field setup required\u003C\u002Fp>\n\u003Ch3>Supported UTM Parameters\u003C\u002Fh3>\n\u003Cp>This plugin captures the following campaign parameters automatically:\u003C\u002Fp>\n\u003Cp>• utm_source – Traffic source (google, facebook, newsletter)\u003Cbr \u002F>\n• utm_medium – Marketing medium (cpc, email, display)\u003Cbr \u002F>\n• utm_campaign – Campaign name\u003Cbr \u002F>\n• utm_term – Paid keyword tracking\u003Cbr \u002F>\n• utm_content – Ad variation or content label\u003Cbr \u002F>\n• utm_id – Campaign ID used in platforms like Google Ads\u003C\u002Fp>\n\u003Cp>All captured values are attached to Contact Form 7 submissions.\u003C\u002Fp>\n\u003Ch3>Privacy\u003C\u002Fh3>\n\u003Cp>This plugin stores UTM parameters in browser cookies for up to 30 days in order to track marketing campaign attribution.\u003C\u002Fp>\n\u003Cp>No personal data is collected, stored, or transmitted by the plugin itself.\u003C\u002Fp>\n\u003Cp>Website owners should ensure their privacy policy mentions the use of marketing attribution cookies if required by local regulations such as GDPR.\u003C\u002Fp>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cp>For a complete setup tutorial and implementation guide:\u003C\u002Fp>\n\u003Cp>https:\u002F\u002Fwebfreelancer.in\u002Futm-tracker-for-contact-form-7\u002F?utm_source=wordpress-plugin&utm_medium=documentation&utm_campaign=utm-tracker-cf7\u003C\u002Fp>\n\u003Ch3>About the Developer\u003C\u002Fh3>\n\u003Cp>This plugin is developed and maintained by \u003Cstrong>Adnan Buksh\u003C\u002Fstrong>, a freelance WordPress developer specializing in custom development, plugin engineering, and performance optimization.\u003C\u002Fp>\n\u003Cp>If you need help with WordPress development, custom plugins, or technical SEO improvements, you can learn more here:\u003C\u002Fp>\n\u003Cp>https:\u002F\u002Fwebfreelancer.in\u002F?utm_source=wordpress-plugin&utm_medium=developer-section&utm_campaign=utm-tracker-cf7\u003C\u002Fp>\n","Track UTM parameters in Contact Form 7 submissions automatically and identify which campaigns generate real leads from your marketing traffic.",813,2,"2026-03-13T18:18:00.000Z","5.6","7.2",[94,95,22,96,97],"cf7-utm-tracking","contact-form-7","utm-parameters","utm-tracking","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Futm-tracker-for-contact-form-7.1.5.zip",{"attackSurface":100,"codeSignals":124,"taintFlows":131,"riskAssessment":159,"analyzedAt":169},{"hooks":101,"ajaxHandlers":120,"restRoutes":121,"shortcodes":122,"cronEvents":123,"entryPointCount":13,"unprotectedCount":13},[102,108,112,116],{"type":103,"name":104,"callback":105,"file":106,"line":107},"action","admin_menu","ldsrctrckr_settings_menu","leadsourcetracker.free.php",16,{"type":103,"name":109,"callback":110,"file":106,"line":111},"admin_init","ldsrctrckr_register_option",97,{"type":103,"name":113,"callback":114,"file":106,"line":115},"template_redirect","ldsrctrckr_refresh_page",164,{"type":103,"name":117,"callback":118,"file":106,"line":119},"init","ldsrctrckr_store_leadsource",165,[],[],[],[],{"dangerousFunctions":125,"sqlUsage":126,"outputEscaping":128,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":130},[],{"prepared":13,"raw":13,"locations":127},[],{"escaped":13,"rawEcho":13,"locations":129},[],[],[132,151],{"entryPoint":133,"graph":134,"unsanitizedCount":31,"severity":150},"ldsrctrckr_refresh_page (leadsourcetracker.free.php:128)",{"nodes":135,"edges":147},[136,141],{"id":137,"type":138,"label":139,"file":106,"line":140},"n0","source","$_SERVER",156,{"id":142,"type":143,"label":144,"file":106,"line":145,"wp_function":146},"n1","sink","wp_redirect() [Open Redirect]",160,"wp_redirect",[148],{"from":137,"to":142,"sanitized":149},false,"medium",{"entryPoint":152,"graph":153,"unsanitizedCount":31,"severity":150},"\u003Cleadsourcetracker.free> (leadsourcetracker.free.php:0)",{"nodes":154,"edges":157},[155,156],{"id":137,"type":138,"label":139,"file":106,"line":140},{"id":142,"type":143,"label":144,"file":106,"line":145,"wp_function":146},[158],{"from":137,"to":142,"sanitized":149},{"summary":160,"deductions":161},"The \"leadsource-tracker\" v1.0 plugin exhibits a generally strong security posture based on the provided static analysis.  A notable strength is the complete absence of dangerous functions, file operations, external HTTP requests, and the consistent use of prepared statements for SQL queries. All identified output is also properly escaped, indicating good development practices in these critical areas.  The lack of any recorded vulnerabilities, including CVEs of any severity, further contributes to a positive security outlook.\n\nHowever, the analysis does raise some concerns. The 'Taint Analysis' section indicates two flows with unsanitized paths. While these are not classified as critical or high severity, they represent potential avenues for injection vulnerabilities if user-supplied data is not handled meticulously within these flows. Furthermore, the complete absence of nonce checks and capability checks across all entry points is a significant weakness. This lack of authentication and authorization controls on potential entry points, even if currently limited, opens the door for privilege escalation or unauthorized data manipulation if any new entry points are introduced or if the existing ones are discovered and exploited.\n\nIn conclusion, the plugin demonstrates solid coding hygiene in areas like SQL and output handling, and its vulnerability history is clean. Nevertheless, the unsanitized taint flows and the complete lack of authorization mechanisms on entry points are significant security gaps that require attention. Addressing these would elevate the plugin's security to a more robust level.",[162,164,167],{"reason":163,"points":11},"Unsanitized paths in taint flows",{"reason":165,"points":166},"Missing nonce checks on entry points",5,{"reason":168,"points":166},"Missing capability checks on entry points","2026-03-17T00:21:14.930Z",{"wat":171,"direct":176},{"assetPaths":172,"generatorPatterns":173,"scriptPaths":174,"versionParams":175},[],[],[],[],{"cssClasses":177,"htmlComments":179,"htmlAttributes":180,"restEndpoints":182,"jsGlobals":183,"shortcodeOutput":184},[178],"wrap",[],[181],"name=\"ldsrctrckr_store_leadsource_pg_1\"",[],[],[]]