[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqa6YlUtjV7ZUXLkr1L_IOmecaUE-tWbTo1MFR33L6Zw":3,"$fhOTjV-2R_ow9xFsjZkbTOxyfDoTQW_L-Nl8xZ6m9WI0":123,"$fh0uGnQ73F_DrrXh0ZE3mFbx-SQXDk-u2lXoc6_nrh3s":128},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":30,"crawl_stats":26,"alternatives":35,"analysis":36,"fingerprints":95},"learntalk-signup","Learntalk Signup","1.0.0","learntalk","https:\u002F\u002Fprofiles.wordpress.org\u002Flearntalk\u002F","\u003Cp>This plugin allows customers to signup and signin in \u003Ca href=\"https:\u002F\u002Flearntalk.org\u002F\" title=\"learntalk.org\" rel=\"nofollow ugc\">learntalk.org\u003C\u002Fa> using the API.\u003Cbr \u002F>\nLearntalk is an on-demand language school. their aim is to democratize access to high quality English teachers through video-call lessons. and this plugin gives functionality to signup and sign in using learntalk API\u003C\u002Fp>\n\u003Cp>In order for you to gain access to the APIs, you and your organisation must meet the following pre-requisites:\u003C\u002Fp>\n\u003Cp>1.Your organisation must have an active API of Signup and Sign in.\u003Cbr \u002F>\n2.You must have Authentication Tokan for API.\u003Cbr \u002F>\n3.You must have reviewed and accepted the \u003Ca href=\"https:\u002F\u002Flearntalk.org\u002Fen\u002Fterms-of-service\" rel=\"nofollow ugc\">Terms and Conditions \u003C\u002Fa>for use of APIs.\u003C\u002Fp>\n\u003Ch4>Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Auto login after signup\u003C\u002Fli>\n\u003Cli>Can be add dynamic API of Learntalk organisation in setting api page \u003C\u002Fli>\n\u003Cli>For signup form use this short-code – [lrnts_signup]\u003C\u002Fli>\n\u003Cli>For Sign in form use this short-code – [lrnts_signin] \u003C\u002Fli>\n\u003Cli>Forgot password form \u003C\u002Fli>\n\u003Cli>Supports the latest version of WordPress\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin allows customers to signup and signin in learntalk.org using the API.",0,967,"2020-12-02T05:47:00.000Z","5.5.18","5.0.0","7.2",[18,19,20,21,22],"learntalk-login-wp-plugin","learntalk-registration-wp-plugin","learntalk-signin-wp-plugin","learntalk-signup-plugin","learntalk-wp-plugin","https:\u002F\u002Flearntalk.org\u002Fen\u002Fcorporate-solution","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flearntalk-signup.zip",85,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},1,30,84,"2026-05-20T09:02:54.968Z",[],{"attackSurface":37,"codeSignals":65,"taintFlows":83,"riskAssessment":84,"analyzedAt":94},{"hooks":38,"ajaxHandlers":54,"restRoutes":55,"shortcodes":56,"cronEvents":64,"entryPointCount":44,"unprotectedCount":11},[39,45,49],{"type":40,"name":41,"callback":42,"file":43,"line":44},"action","admin_menu","lrnts_api_add_admin_menu","functions\u002Fsettings-api.php",2,{"type":40,"name":46,"callback":47,"file":43,"line":48},"admin_init","lrnts_api_settings_init",3,{"type":40,"name":50,"callback":51,"file":52,"line":53},"wp_enqueue_scripts","lrnts_add_script_style_enqueue_scripts","learntalk-signup.php",72,[],[],[57,60],{"tag":58,"callback":59,"file":52,"line":25},"lrnts_signup","lrnts_create_signup_form",{"tag":61,"callback":62,"file":52,"line":63},"lrnts_signin","lrnts_create_signin_form",86,[],{"dangerousFunctions":66,"sqlUsage":67,"outputEscaping":69,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":82},[],{"prepared":11,"raw":11,"locations":68},[],{"escaped":11,"rawEcho":70,"locations":71},5,[72,75,77,79,81],{"file":43,"line":73,"context":74},41,"raw output",{"file":43,"line":76,"context":74},54,{"file":43,"line":78,"context":74},66,{"file":43,"line":80,"context":74},78,{"file":43,"line":33,"context":74},[],[],{"summary":85,"deductions":86},"The learntalk-signup v1.0.0 plugin presents a mixed security posture. On the positive side, there are no recorded historical vulnerabilities, indicating a potentially well-maintained codebase. The static analysis also shows no dangerous functions, no file operations, no external HTTP requests, and all SQL queries are properly prepared, which are excellent security practices.  Furthermore, the attack surface is minimal with only two shortcodes and no AJAX or REST API endpoints, and crucially, no unprotected entry points were identified in the static analysis.\n\nHowever, a significant concern arises from the complete lack of output escaping. With 5 total outputs and 0% properly escaped, this exposes the plugin to a high risk of Cross-Site Scripting (XSS) vulnerabilities. Any data displayed to users that originates from user input or is otherwise untrusted is a potential vector for malicious script injection. Additionally, the absence of nonce checks and capability checks on the identified entry points (shortcodes), while not explicitly flagged as unprotected, is a weakness. If these shortcodes handle sensitive data or perform actions, the lack of these fundamental security controls could lead to unauthorized actions or data leakage.\n\nTaint analysis did not reveal any flows, which is positive, but this could also be due to the limited scope of the analysis or the absence of specific input sources being tracked. Given the identified output escaping issues, the lack of explicit vulnerability history does not negate the inherent risks present in the code. The plugin demonstrates strengths in avoiding common dangerous practices but suffers from critical omissions in output sanitization and access control for its entry points.",[87,90,92],{"reason":88,"points":89},"0% of outputs properly escaped",15,{"reason":91,"points":70},"0 Nonce checks on entry points",{"reason":93,"points":70},"0 Capability checks on entry points","2026-04-16T14:26:26.297Z",{"wat":96,"direct":105},{"assetPaths":97,"generatorPatterns":100,"scriptPaths":101,"versionParams":102},[98,99],"\u002Fwp-content\u002Fplugins\u002Flearntalk-signup\u002Fcss\u002Flrnts_style.css","\u002Fwp-content\u002Fplugins\u002Flearntalk-signup\u002Fjs\u002Flrnts-ajax.js",[],[99],[103,104],"learntalk-signup\u002Fcss\u002Flrnts_style.css?ver=","learntalk-signup\u002Fjs\u002Flrnts-ajax.js?ver=",{"cssClasses":106,"htmlComments":111,"htmlAttributes":112,"restEndpoints":117,"jsGlobals":118,"shortcodeOutput":120},[107,108,109,110],"lrnts_signup_form_container","lrnts-signup-wrapper","lrnts_signin_form_container","lrnts-signin-wrapper",[],[113,114,115,116],"data-lrnts-registration-url","data-lrnts-signin-url","data-lrnts-forgot-password-url","data-lrnts-auth-token",[],[119],"gatJsVars",[121,122],"[lrnts_signup]","[lrnts_signin]",{"error":124,"url":125,"statusCode":126,"statusMessage":127,"message":127},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Flearntalk-signup\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":31,"versions":129},[130],{"version":131,"download_url":132,"svn_tag_url":133,"released_at":26,"has_diff":134,"diff_files_changed":135,"diff_lines":26,"trac_diff_url":26,"vulnerabilities":136,"is_current":134},"1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flearntalk-signup.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Flearntalk-signup\u002Ftags\u002F1.0\u002F",false,[],[]]