[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fn0wMWOhW32xs2zUMM-8rNE7_z4Y-EV21vsg18XO6eD8":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":37,"analysis":138,"fingerprints":496},"lh-web-application","LH Web Application","1.28","shawfactor","https:\u002F\u002Fprofiles.wordpress.org\u002Fshawfactor\u002F","\u003Cp>This plugin transform your WordPress website into a fully configurable progressive web application.\u003C\u002Fp>\n\u003Cp>Features Include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Upload a home screen icon into the WordPress media library, this plugin will resize the image appropriately (for different device viewports).\u003C\u002Fli>\n\u003Cli>Customise the short_name of your application.\u003C\u002Fli>\n\u003Cli>Set the display mode of your application.\u003C\u002Fli>\n\u003Cli>Works offline!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Check out \u003Ca href=\"https:\u002F\u002Flhero.org\u002Fportfolio\u002Flh-web-application\u002F\" rel=\"nofollow ugc\">our documentation\u003C\u002Fa> for more information.\u003C\u002Fp>\n","Makes your WordPress website into a fully configurable web app.",10,2389,0,"2020-09-16T09:19:00.000Z","5.5.18","4.0","",[19,20,21,22,23],"android","chrome","pwa","service-worker","web-app","https:\u002F\u002Flhero.org\u002Fportfolio\u002Flh-web-application\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flh-web-application.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},77,14650,87,7,91,"2026-04-04T00:37:31.585Z",[38,64,85,104,122],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":53,"tags":54,"homepage":59,"download_link":60,"security_score":61,"vuln_count":62,"unpatched_count":13,"last_vuln_date":63,"fetched_at":28},"super-progressive-web-apps","Super Progressive Web Apps","2.2.42","SuperPWA","https:\u002F\u002Fprofiles.wordpress.org\u002Fsuperpwa\u002F","\u003Cp>Progressive Web Apps (PWA) is a new technology that combines the best of mobile web and the best of mobile apps to create a superior mobile web experience. They are installed on the phone like a normal app (web app) and can be accessed from the home screen.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fsuperpwa.com\u002F\" rel=\"nofollow ugc\">Home\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fsuperpwa.com\u002Fdocs\u002F\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fsuperpwa.com\u002Fcontact\u002F\" rel=\"nofollow ugc\">Help\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fsuperpwa.com\u002Fdocs\u002F#pro-doc\" rel=\"nofollow ugc\">Premium version Features\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Users can come back to your website by launching the app from their home screen and interact with your website through an app-like interface. Your return visitors will experience almost-instant loading times and enjoy the great performance benefits of your PWA!\u003C\u002Fp>\n\u003Cp>Super Progressive Web Apps makes it easy for you to convert your WordPress website into a Progressive Web App instantly!\u003C\u002Fp>\n\u003Cp>Once SuperPWA is installed, users browsing your website from a supported mobile device will see a “Add To Home Screen” notice (from the bottom of the screen) and will be able to ‘install your website’ on the home screen of their device. Every page visited is stored locally on their device and will be available to read even when they are offline!\u003C\u002Fp>\n\u003Cp>SuperPWA is easy to configure, it takes less than a minute to set-up your Progressive Web App! SuperPWA does a clean uninstall, by removing every database entry and file that it creates. In fact, none of the default settings are saved to the database until you manually save it the first time. Go ahead and give it a try.\u003C\u002Fp>\n\u003Cp>And the best part? If you ever get stuck, we are here to watch your back! \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fsuper-progressive-web-apps\" rel=\"ugc\">Open a support\u003C\u002Fa> ticket if you have a question or need a feature. We are super excited to hear your feedback and we want to genuinely help you build the best Progressive Web App for your WordPress website!\u003C\u002Fp>\n\u003Ch4>Quick Demo?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Open up \u003Ca href=\"https:\u002F\u002Fsuperpwa.com\u002F?utm_source=wordpress.org&utm_medium=description-demo\" rel=\"nofollow ugc\">SuperPWA.com\u003C\u002Fa> in a supported device. \u003C\u002Fli>\n\u003Cli>Add the website to your home screen either from the Add to Home Screen prompt (Chrome for Android) or from the browser menu. \u003C\u002Fli>\n\u003Cli>Open the app from your home screen and you will see the splash screen. \u003C\u002Fli>\n\u003Cli>Turn off your data and wifi to go offline and open up the app. You will still be able to see the app and browse the pages you have already visited. \u003C\u002Fli>\n\u003Cli>Browse to a page that you haven’t visited before. The offline page will be displayed. \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Thank You PWA Enthusiasts!\u003C\u002Fh4>\n\u003Cp>We are humbled by the feedback from the community. Thanks to everyone who believed in us and tried our plugin. Your feedback has been invaluable and we have learned a lot from your experience. Thank you for your love and support and we hope to return the love by striving to bring you the best ever Progressive Web Apps plugin for WordPress!\u003C\u002Fp>\n\u003Ch3>What’s in the box\u003C\u002Fh3>\n\u003Cp>Here are the current features of Super Progressive Web Apps:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Generate a manifest for your website and add it to the head of your website.\u003C\u002Fli>\n\u003Cli>Set the application icon for your Progressive Web App. \u003C\u002Fli>\n\u003Cli>Set the background color for the splash screen of your Progressive Web App. \u003C\u002Fli>\n\u003Cli>Your website will show the “Add to home screen” notice when accessed in a supported browser.\u003C\u002Fli>\n\u003Cli>Aggressive caching of pages using CacheStorage API.\u003C\u002Fli>\n\u003Cli>Pages once cached are served even if the user is offline. \u003C\u002Fli>\n\u003Cli>Set custom offline page: Select the page you want the user to see when a page that isn’t in the cache is accessed and the user is offline.\u003C\u002Fli>\n\u003Cli>New in version 1.2: Support for theme-color meta property. Change the color of browser address bar of Chrome, Firefox OS and Opera to match your website colors. \u003C\u002Fli>\n\u003Cli>New in version 1.2: Now you can edit the Application Name and Application Short name.\u003C\u002Fli>\n\u003Cli>New in version 1.2: Set the start page of your PWA.\u003C\u002Fli>\n\u003Cli>New in version 1.2: Set Accelerated Mobile Pages (AMP) version of the start page. Supported plugins: AMP for WordPress, AMP for WP, Better AMP, AMP Supremacy, WP AMP.\u003C\u002Fli>\n\u003Cli>New in version 1.3: Added support for high-quality splash screen. You can now set the 512×512 icon for the splash screen of your Progressive Web App.\u003C\u002Fli>\n\u003Cli>New in version 1.3: Super Progressive Web Apps now accounts for content updates and will update the cache as you update the website. \u003C\u002Fli>\n\u003Cli>New in version 1.3: Improved in-browser service worker update handling.\u003C\u002Fli>\n\u003Cli>New in version 1.4: You can now set the default orientation of your PWA. Choose from “any” (Follow Device Orientation), “Portrait” and “Landscape”.\u003C\u002Fli>\n\u003Cli>New in version 1.4: You can now set the theme_color property in the manifest.\u003C\u002Fli>\n\u003Cli>New in version 1.5: OneSignal integration for Push notifications.\u003C\u002Fli>\n\u003Cli>New in version 1.6: WordPress Multisite Network compatibility. \u003C\u002Fli>\n\u003Cli>New in version 1.7: Add-Ons for SuperPWA is here! Ships with \u003Ca href=\"https:\u002F\u002Fsuperpwa.com\u002Faddons\u002Futm-tracking\u002F?utm_source=wordpress.org&utm_medium=description\" rel=\"nofollow ugc\">UTM Tracking Add-On\u003C\u002Fa> to track visits coming from your PWA.\u003C\u002Fli>\n\u003Cli>New in version 1.8: Compatibility issues with OneSignal are now resolved! \u003C\u002Fli>\n\u003Cli>New in version 1.8: New Add-On: \u003Ca href=\"https:\u002F\u002Fsuperpwa.com\u002Faddons\u002Fapple-touch-icons\u002F?utm_source=wordpress.org&utm_medium=description\" rel=\"nofollow ugc\">Apple Touch Icons\u003C\u002Fa> that sets your app icons as Apple Touch Icons. \u003C\u002Fli>\n\u003Cli>New in version 2.0: SuperPWA is now compatible with WordPress installed in a sub-folder. \u003C\u002Fli>\n\u003Cli>New in version 2.0: You can now set \u003Ca href=\"https:\u002F\u002Fsuperpwa.com\u002Fdoc\u002Fweb-app-manifest-display-modes\u002F?utm_source=wordpress.org&utm_medium=description\" rel=\"nofollow ugc\">display property\u003C\u002Fa> from SuperPWA settings.\u003C\u002Fli>\n\u003Cli>New in version 2.1.1: SuperPWA now supports Maskable Icons.\u003C\u002Fli>\n\u003Cli>New in version 2.1.15: SuperPWA now supports Monochrome Icon.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsuperpwa.com\u002Fchangelog\u002F\" rel=\"nofollow ugc\">Full changelog\u003C\u002Fa> \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Upcoming features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Offline Indicator Notice.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>PRO Version\u003C\u002Fstrong> support additional \u003Ca href=\"https:\u002F\u002Fsuperpwa.com\u002Fdocs\u002F\" rel=\"nofollow ugc\">advance feature\u003C\u002Fa>\u003Cbr \u002F>\n* Call To Action (CTA) \u003Ca href=\"https:\u002F\u002Fsuperpwa.com\u002Fdoc\u002Fcall-to-action-cta-add-on-for-superpwa\u002F\" rel=\"nofollow ugc\">More Info\u003C\u002Fa>\u003Cbr \u002F>\n* Android APK APP Generator \u003Ca href=\"https:\u002F\u002Fsuperpwa.com\u002Fdoc\u002Fandroid-apk-app-generator-add-on-for-superpwa\u002F\" rel=\"nofollow ugc\">More Info\u003C\u002Fa>\u003Cbr \u002F>\n* Data Analytics \u003Ca href=\"https:\u002F\u002Fsuperpwa.com\u002Fdoc\u002Fdata-analytics-add-on-for-superpwa\u002F\" rel=\"nofollow ugc\">More Info\u003C\u002Fa>\u003Cbr \u002F>\n* Pre-Loader \u003Ca href=\"https:\u002F\u002Fsuperpwa.com\u002Fdocs\u002Farticle\u002Fpreloader-add-on-for-superpwa\u002F\" rel=\"nofollow ugc\">More Info\u003C\u002Fa>\u003Cbr \u002F>\n* App Shortcuts \u003Ca href=\"https:\u002F\u002Fsuperpwa.com\u002Fdocs\u002Farticle\u002Fapp-shortcuts-add-on-for-superpwa\u002F\" rel=\"nofollow ugc\">More Info\u003C\u002Fa>\u003Cbr \u002F>\n* QR Code Generator \u003Ca href=\"https:\u002F\u002Fsuperpwa.com\u002Fdocs\u002Farticle\u002Fqr-code-generator-add-on-for-superpwa\u002F\" rel=\"nofollow ugc\">More Info\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Progressive Web App Minimum Requirements\u003C\u002Fh3>\n\u003Cp>Progressive Web Apps require that your WordPress website is served from a secure origin i.e. your website should be HTTPS and not HTTP. If your website isn’t HTTPS, please contact your host about it. You can also \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fsuper-progressive-web-apps\" rel=\"ugc\">ask us\u003C\u002Fa> if you need help.\u003C\u002Fp>\n\u003Ch3>Device and Browser Support For PWA\u003C\u002Fh3>\n\u003Cp>Progressive web apps need browsers that support manifests and service workers. Currently Google Chrome (version 57+), Chrome for Android (62), Mozilla Firefox (57), Firefox for Android (58) are the major browsers that support PWA.\u003C\u002Fp>\n\u003Cp>The list is fast growing and is likely to be supported in most major browsers by the end of this year.\u003C\u002Fp>\n\u003Ch3>How To Convert Your WordPress Website Into A Progressive Web App\u003C\u002Fh3>\n\u003Ch4>WordPress Installation\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Visit WordPress Admin > Plugins > Add New\u003C\u002Fli>\n\u003Cli>Search for ‘Super Progressive Web Apps’\u003C\u002Fli>\n\u003Cli>Click “Install Now” and then “Activate” Super Progressive Web Apps\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>To install manually:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Upload super-progressive-web-apps folder to the \u002Fwp-content\u002Fplugins\u002F directory on your server\u003C\u002Fli>\n\u003Cli>Go to WordPress Admin > Plugins\u003C\u002Fli>\n\u003Cli>Activate Super Progressive Web Apps plugin from the list.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Customizing Your Progressive Web App\u003C\u002Fh4>\n\u003Cp>Your Progressive Web App should be ready to test with the default settings on activation. You can customize it further and make it truly your own.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Go to WordPress Admin > SuperPWA\u003C\u002Fli>\n\u003Cli>Set a Background Color for the splash screen to be shown when your PWA is opened on a mobile device.\u003C\u002Fli>\n\u003Cli>Set the Application Icon. This will be the icon of your PWA when it is added to the homescreen in a mobile device. The icon must be a PNG image and exactly 192 x 192 pixels in size.\u003C\u002Fli>\n\u003Cli>Set the Offline Page. This page will be displayed if the user is offline and the page he requested is not cached already. Ideally you should create a dedicated WordPress page and set it here. Within the page you create, you could add a note that reads, “It looks like you are offline and the page you requested is not available right now. Please check back again once you are online.”. \u003C\u002Fli>\n\u003Cli>Click “Save Settings”.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Testing Your Progressive Web App\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Open a supported browser in a supported device (for eg: Chrome for Android (62 or higher) in an Android Phone)\u003C\u002Fli>\n\u003Cli>Enter your website and wait till it fully loads\u003C\u002Fli>\n\u003Cli>You should see a pop-up that has your Application Icon and a button that reads “ADD TO HOME SCREEN”.\u003C\u002Fli>\n\u003Cli>Click on it and your PWA will be added to your home screen. Wait for the install to complete. \u003C\u002Fli>\n\u003Cli>Go to your home screen and open your PWA. Browse into a few pages if you like. Close the App.\u003C\u002Fli>\n\u003Cli>Disconnect from the internet and now open your PWA again. You should be able to see all the pages that you previously browsed. \u003C\u002Fli>\n\u003Cli>Try visiting a page that you did not visit before. You should see the page you set as your “Offline Page” in the settings of SuperPWA. \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Troubleshooting Your Progressive Web App\u003C\u002Fh4>\n\u003Cp>Uh, oh. Your PWA did not work as expected? You do not see the “Add to Home Screen” notice?\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Make sure your website has a SSL certificate installed. i.e. your website should be https instead of http (as in https:\u002F\u002Fyour-domain.com).\u003C\u002Fli>\n\u003Cli>Make sure you are using a supported device and a supported browser. Refer to the “Device and Browser Support For PWA” list above.\u003C\u002Fli>\n\u003Cli>Make sure your Application Icon and Splash Screen Icon’s are of PNG format and 192px X 192px and 512px X 512px in size respectively. \u003C\u002Fli>\n\u003Cli>Clear the browser cache and try again. In Chrome for Android, go to Settings > Privacy > “Clear browsing data”.\u003C\u002Fli>\n\u003Cli>If the application icon does not update after first install, delete the PWA from your phone, clear browser cache and install again. (We are working on making it better.) \u003C\u002Fli>\n\u003Cli>Create a \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fsuper-progressive-web-apps\" rel=\"ugc\">new support ticket\u003C\u002Fa> and share a link to your website. We will take a look and figure it out for you.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Feature Requests, Issues, Pull Requests\u003C\u002Fh3>\n\u003Cp>Here is our repository on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FSuperPWA\u002FSuper-Progressive-Web-Apps\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>. Send us your pull requests, feature requests or issues, if any.\u003C\u002Fp>\n\u003Ch3>About us\u003C\u002Fh3>\n\u003Cp>We are a duo who got excited about the idea. Our mission is simple: Help you build an awesome PWA that your users would want to have on their home screen.\u003C\u002Fp>\n\u003Cp>When we first heard about PWA we wanted to learn everything about it. We have spent countless hours learning and wants to share it with the world.\u003C\u002Fp>\n\u003Cp>Please give us your constructive feedback and support.\u003C\u002Fp>\n","SuperPWA helps you convert your WordPress website into a Progressive Web App instantly.",50000,2278059,92,224,"2026-02-09T14:37:00.000Z","6.9.4","3.6.0","5.3",[55,56,57,58,21],"add-to-homescreen","android-app","chrome-app","progressive-web-apps","https:\u002F\u002Fsuperpwa.com\u002F?utm_source=superpwa-plugin&utm_medium=plugin-uri","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsuper-progressive-web-apps.2.2.42.zip",99,2,"2023-11-22 00:00:00",{"slug":21,"name":65,"version":66,"author":67,"author_profile":68,"description":69,"short_description":70,"active_installs":71,"downloaded":72,"rating":73,"num_ratings":74,"last_updated":75,"tested_up_to":76,"requires_at_least":77,"requires_php":78,"tags":79,"homepage":82,"download_link":83,"security_score":84,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"PWA","0.8.2","Weston Ruter","https:\u002F\u002Fprofiles.wordpress.org\u002Fwestonruter\u002F","\u003Cblockquote cite=\"https:\u002F\u002Fdevelopers.google.com\u002Fweb\u002Fprogressive-web-apps\u002F\">\u003Cp>\nProgressive Web Apps are user experiences that have the reach of the web, and are:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Fweb\u002Fprogressive-web-apps\u002F#reliable\" rel=\"nofollow ugc\">Reliable\u003C\u002Fa> – Load instantly and never show the downasaur, even in uncertain network conditions.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Fweb\u002Fprogressive-web-apps\u002F#fast\" rel=\"nofollow ugc\">Fast\u003C\u002Fa> – Respond quickly to user interactions with silky smooth animations and no janky scrolling.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Fweb\u002Fprogressive-web-apps\u002F#engaging\" rel=\"nofollow ugc\">Engaging\u003C\u002Fa> – Feel like a natural app on the device, with an immersive user experience.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This new level of quality allows Progressive Web Apps to earn a place on the user’s home screen.\n\u003C\u002Fp>\u003C\u002Fblockquote>\n\u003Cp>Continue reading more about \u003Ca href=\"https:\u002F\u002Fweb.dev\u002Fprogressive-web-apps\u002F\" rel=\"nofollow ugc\">Progressive Web Apps\u003C\u002Fa> (PWA) from Google.\u003C\u002Fp>\n\u003Cp>In general a PWA depends on the following technologies to be available:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdeveloper.mozilla.org\u002Fen-US\u002Fdocs\u002FWeb\u002FAPI\u002FService_Worker_API\" rel=\"nofollow ugc\">Service Workers\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdeveloper.mozilla.org\u002Fen-US\u002Fdocs\u002FWeb\u002FManifest\" rel=\"nofollow ugc\">Web App Manifest\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FHTTPS\" rel=\"nofollow ugc\">HTTPS\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin serves as a place to implement support for these in WordPress with the intention of being proposed for core merge, piece by piece. Case in point, the HTTPS functionality from this plugin has largely been made part of Core: \u003Ca href=\"https:\u002F\u002Fmake.wordpress.org\u002Fcore\u002F2021\u002F02\u002F22\u002Fimproved-https-detection-and-migration-in-wordpress-5-7\u002F\" rel=\"nofollow ugc\">Improved HTTPS detection and migration in WordPress 5.7\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>This feature plugin is \u003Cem>not\u003C\u002Fem> intended to obsolete the other plugins and themes which turn WordPress sites into PWAs. Rather, this plugin is intended to provide the PWA building blocks and coordination mechanism for these themes and plugins to not reinvent the wheel and also to not conflict with each other. For example, a theme that implements the app shell model should be able to extend the core service worker while a plugin that provides push notifications should be able to do the same. Themes and plugins no longer should have to each create a service worker on their own, something which is inherently problematic because only one service worker can be active at a time: only one service worker can win. If you are developing a plugin or theme that includes a service worker, consider relying on this PWA plugin, or at least only use the built-in implementation as a fallback for when the PWA plugin is not available.\u003C\u002Fp>\n\u003Cp>In versions prior to 0.6, no caching strategies were added by default. The only service worker behavior was to serve an offline template when the client’s connection is down or the site is down, and also to serve an error page when the server returns with 500 Internal Server Error. As of 0.6, there is a new “Offline browsing” toggle on the Reading Settings screen in the admin. It is disabled by default, but when enabled a \u003Ca href=\"https:\u002F\u002Fweb.dev\u002Foffline-cookbook\u002F#network-falling-back-to-cache\" rel=\"nofollow ugc\">network-first\u003C\u002Fa> caching strategy is registered for navigations so that the offline page won’t be shown when accessing previously-accessed pages. The network-first strategy is also used for assets from themes, plugins, and WordPress core. In addition, uploaded images get served with a \u003Ca href=\"https:\u002F\u002Fweb.dev\u002Foffline-cookbook\u002F#stale-while-revalidate\" rel=\"nofollow ugc\">stale-while-revalidate\u003C\u002Fa> strategy. For all the details on these changes, see the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FGoogleChromeLabs\u002Fpwa-wp\u002Fpull\u002F338\" rel=\"nofollow ugc\">pull request\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Documentation for the plugin can be found on the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FGoogleChromeLabs\u002Fpwa-wp\u002Fwiki\" rel=\"nofollow ugc\">GitHub project Wiki\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Development of this plugin is done \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FGoogleChromeLabs\u002Fpwa-wp\" rel=\"nofollow ugc\">on GitHub\u003C\u002Fa>. Pull requests welcome. Please see \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FGoogleChromeLabs\u002Fpwa-wp\u002Fissues\" rel=\"nofollow ugc\">issues\u003C\u002Fa> reported there before going to the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fpwa\" rel=\"ugc\">plugin forum\u003C\u002Fa>.\u003C\u002Fstrong>\u003C\u002Fp>\n","WordPress feature plugin to bring Progressive Web App (PWA) capabilities to Core",20000,594997,86,27,"2025-04-10T16:55:00.000Z","6.8.5","6.6","7.2",[58,21,80,81],"service-workers","web-app-manifest","https:\u002F\u002Fgithub.com\u002FGoogleChromeLabs\u002Fpwa-wp","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpwa.0.8.2.zip",100,{"slug":86,"name":87,"version":88,"author":89,"author_profile":90,"description":91,"short_description":92,"active_installs":93,"downloaded":94,"rating":95,"num_ratings":96,"last_updated":97,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":98,"homepage":102,"download_link":103,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"wp-appkit","WP-AppKit – Mobile apps and PWA for WordPress","1.6.0","Uncategorized Creations","https:\u002F\u002Fprofiles.wordpress.org\u002Funcategorized-creations\u002F","\u003Cp>\u003Cstrong>Important ✋\u003C\u002Fstrong>: beginning with version 1.5.3, we don’t support anymore native iOS app. This is a tough choice \u003Ca href=\"https:\u002F\u002Funcategorized-creations.com\u002F4550\u002Fdropping-ios-support-%F0%9F%98%B1\u002F\" rel=\"nofollow ugc\">we explain here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Progressive web apps\u003C\u002Fstrong>: support for progressive web applications (PWA) has been added to 1.5x release. PWA are a new way to deliver fast, reliable and great experience on the web notably for mobiles. They allow to create apps accessible as websites that you can install and access as traditionnal mobile apps.\u003C\u002Fp>\n\u003Cp>A great way to build progressive web apps (PWA) and mobile apps for your WordPress site using your favorite technologies: JavaScript, HTML and CSS.\u003C\u002Fp>\n\u003Cp>Progressive web apps (PWA) and mobile applications are a great way to offer an outstanding mobile experience for your users. Using push notifications, letting users read offline, using saved accounts to share content are among many wonderful things you can do with mobile applications.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Build with Cordova or VoltBuilder\u003C\u002Fstrong>: Since October 2020, Adobe has discontinued PhoneGap Build and ended investment in PhoneGap, so PhoneGap Build cannot be used to build WP-AppKit apps anymore. But as of version 1.6.0, WP-AppKit allows to build apps with raw Cordova tools or VoltBuilder online service.\u003C\u002Fp>\n\u003Ch4>The Toolkit You Need to Build Your App\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Native support of WordPress\u003C\u002Fstrong>: custom post types, custom fields, custom taxonomies, comments, secured authentication\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Full support of progressive web apps (PWA)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Android support\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cordova\u003C\u002Fstrong>: use JavaScript, HTML and CSS to build apps\u003C\u002Fli>\n\u003Cli>\u003Cstrong>VoltBuilder\u003C\u002Fstrong>: Easy online compilation\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Themes\u003C\u002Fstrong>: create app themes\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable\u003C\u002Fstrong>: hook into our API to add the features you need\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Get a look at all \u003Ca href=\"https:\u002F\u002Funcategorized-creations.com\u002Ffeatures\u002F?utm_source=wordpress.org&utm_medium=referral&utm_campaign=plugin_readme\" rel=\"nofollow ugc\">available features\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Getting Started\u003C\u002Fh4>\n\u003Cp>Even if you are familiar with development, building your first PWA or mobile app can be intimidating. We know that, we’ve been there before 🙂\u003C\u002Fp>\n\u003Cp>For that, we have tutorials and documentation that will guide you through the process:\u003Cbr \u002F>\n* to create your first PWA\u003Cbr \u002F>\n* to have your first app connected to your WordPress site installed on your phone.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgoo.gl\u002F3yed8t\" rel=\"nofollow ugc\">WP-AppKit Documentation\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>You can also check this video that shows in 5 minutes what you will achieve thanks to the \u003Cem>Getting Started\u003C\u002Fem> tutorial.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Ft6KwLxuoZ2g?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch4>App Themes: a Flexible Way To Build Apps\u003C\u002Fh4>\n\u003Cp>WP-AppKit supports JavaScript based PWA and app themes. We provide 2 default sister themes named \u003Cem>Q for iOS\u003C\u002Fem> and \u003Cem>Q for Android\u003C\u002Fem>. These themes are installed with the plugin. You can  also develop your own themes.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=fSQVx8-rqCY\" rel=\"nofollow ugc\">Q for Android\u003C\u002Fa> (video)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Documentation and Tutorials\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgoo.gl\u002F6EW93W\" rel=\"nofollow ugc\">Complete documentation\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgoo.gl\u002FvKxBFD\" rel=\"nofollow ugc\">Tutorials\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Funcatcrea\u002Fwp-appkit\" rel=\"nofollow ugc\">GitHub repository\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Pro Support and add-ons for WP-AppKit\u003C\u002Fstrong> If you need to get further with WP-AppKit, we offer a \u003Ca href=\"https:\u002F\u002Fgoo.gl\u002FpqfNjm\" rel=\"nofollow ugc\">paid support\u003C\u002Fa> for advanced topics and convenient \u003Ca href=\"https:\u002F\u002Fgoo.gl\u002F5oisKB\" rel=\"nofollow ugc\">add-ons\u003C\u002Fa> to integrate specific features (eg. push notifications).\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>More information at \u003Ca href=\"https:\u002F\u002Fgoo.gl\u002FpEYAE4\" rel=\"nofollow ugc\">getwpappkit.com\u003C\u002Fa>.\u003C\u002Fstrong>\u003C\u002Fp>\n","Important ✋: beginning with version 1.5.3, we don't support anymore native iOS app. This is a tough choice we explain here.",200,37683,88,9,"2020-10-27T13:03:00.000Z",[19,99,100,101,21],"ios","mobile-app","progressive-web-app","https:\u002F\u002Fgithub.com\u002Funcatcrea\u002Fwp-appkit","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-appkit.1.6.0.zip",{"slug":105,"name":106,"version":107,"author":108,"author_profile":109,"description":110,"short_description":111,"active_installs":112,"downloaded":113,"rating":13,"num_ratings":13,"last_updated":114,"tested_up_to":51,"requires_at_least":115,"requires_php":116,"tags":117,"homepage":120,"download_link":121,"security_score":84,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"iflair-pwa-app","SiteEase Progressive Web App","1.1.5","iflairwebtechnologies","https:\u002F\u002Fprofiles.wordpress.org\u002Fiflairwebtechnologies\u002F","\u003Cp>\u003Cstrong>SiteEase Progressive Web App\u003C\u002Fstrong> allows you to transform your WordPress website into a fully functional Progressive Web App (PWA). It provides app-like capabilities such as offline access, faster loading through caching strategies, and the ability for users to install your site on their device’s home screen.\u003C\u002Fp>\n\u003Cp>The plugin offers an intuitive admin interface where you can configure application details, appearance, caching behavior, and advanced PWA options without writing code.\u003C\u002Fp>\n\u003Cp>This plugin does \u003Cstrong>not collect personal data\u003C\u002Fstrong> and focuses entirely on performance, usability, and offline availability.\u003C\u002Fp>\n\u003Ch3>Core Features\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>1) App Name\u003C\u002Fstrong>\u003Cbr \u002F>\nDefines the name displayed on the home screen, app launcher, and task switcher.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>2) App Short Name\u003C\u002Fstrong>\u003Cbr \u002F>\nA shortened version of the app name used where space is limited.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>3) App Icon\u003C\u002Fstrong>\u003Cbr \u002F>\nIcon displayed when the PWA is installed on mobile devices.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>4) Splash Screen Icon\u003C\u002Fstrong>\u003Cbr \u002F>\nIcon shown on the splash screen during app launch, primarily on desktop devices.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>5) Background Color\u003C\u002Fstrong>\u003Cbr \u002F>\nSets the background color used while the application loads.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>6) Theme Color\u003C\u002Fstrong>\u003Cbr \u002F>\nDefines the primary UI color for browser and OS elements.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>7) Start Page\u003C\u002Fstrong>\u003Cbr \u002F>\nSelect the page users land on when opening the installed PWA.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>8) Offline Page\u003C\u002Fstrong>\u003Cbr \u002F>\nSpecify a custom page shown when users are offline and content is unavailable.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>9) Orientation\u003C\u002Fstrong>\u003Cbr \u002F>\nControl whether the app displays in portrait, landscape, or auto mode.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>10) Display Mode\u003C\u002Fstrong>\u003Cbr \u002F>\nChoose how the PWA appears (standalone, fullscreen, minimal UI, or browser).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>11) Text Direction\u003C\u002Fstrong>\u003Cbr \u002F>\nSupports both LTR and RTL languages.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>12) Caching Strategy Type\u003C\u002Fstrong>\u003Cbr \u002F>\nConfigure caching strategies for assets, pages, and requests using service workers.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>13) Manual Pre-Caching\u003C\u002Fstrong>\u003Cbr \u002F>\nDefine URLs that should be cached in advance for faster load times and offline use.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>14) Cache External Origin URLs\u003C\u002Fstrong>\u003Cbr \u002F>\nEnable caching of external resources such as fonts, scripts, or images.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>15) Exclude URLs from Cache\u003C\u002Fstrong>\u003Cbr \u002F>\nExclude specific URLs from caching (comma-separated).\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin uses \u003Cstrong>Google Workbox\u003C\u002Fstrong> via CDN for service worker and caching functionality.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Service:\u003C\u002Fstrong> Google Workbox\u003Cbr \u002F>\n\u003Cstrong>Purpose:\u003C\u002Fstrong> Enables service workers and caching strategies\u003Cbr \u002F>\n\u003Cstrong>Data Sent:\u003C\u002Fstrong> None\u003Cbr \u002F>\n\u003Cstrong>Privacy Policy:\u003C\u002Fstrong> https:\u002F\u002Fpolicies.google.com\u002Fprivacy\u003C\u002Fp>\n","SiteEase Progressive Web App converts your WordPress website into a Progressive Web App (PWA) with offline support, caching strategies, and installabl &hellip;",70,2111,"2026-01-13T09:17:00.000Z","4.7","5.6",[118,119,101,21,22],"cache","offline","https:\u002F\u002Fprofiles.wordpress.org\u002Fiflairwebtechnologies","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fiflair-pwa-app.1.1.5.zip",{"slug":123,"name":124,"version":125,"author":126,"author_profile":127,"description":128,"short_description":129,"active_installs":13,"downloaded":130,"rating":84,"num_ratings":131,"last_updated":17,"tested_up_to":51,"requires_at_least":132,"requires_php":17,"tags":133,"homepage":135,"download_link":136,"security_score":84,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":137},"mitt-pwa","miTT PWA FREE WP","1.1.0","Robert Mittl","https:\u002F\u002Fprofiles.wordpress.org\u002Fmittlmedien\u002F","\u003Cp>miTT PWA FREE WP transforms your WordPress Website into a Progressive Web App (PWA) and makes it offline ready using Service Workers.miTT PWA FREE WP is a WordPress plugin that transforms your WordPress website into a Progressive Web App (PWA). A PWA is a web application that can be installed on a mobile device’s home screen like a native app. PWAs are faster, more reliable, and more engaging than traditional websites, and they can even work offline.\u003C\u002Fp>\n\u003Cp>miTT PWA FREE WP is a free plugin, but there is also miTT PWA FIRE PUSH available that includes additional features, such as push notifications.\u003C\u002Fp>\n\u003Ch3>Key Characteristic Features of the miTT PWA Free WP \u003C\u002Fh3>\n\u003Cp>miTT PWA Free WP has the following features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Static Cache\u003C\u002Fli>\n\u003Cli>Cache exceptions\u003C\u002Fli>\n\u003Cli>Manifest\u003C\u002Fli>\n\u003Cli>Install Prompt\u003C\u002Fli>\n\u003Cli>Cache Strategie as Cache First depends on Network Connection\u003C\u002Fli>\n\u003Cli>App Screenshot\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fmittl-medien.de\u002Fproduct-wordpress-pwa\" title=\"PWA for WP\" rel=\"nofollow ugc\">miTT PWA FIRE PUSH for WP\u003C\u002Fa> (Paid Version)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Push Notifications over Firebase\u003C\u002Fli>\n\u003Cli>App Shortcuts\u003C\u002Fli>\n\u003Cli>Protocol Handler\u003C\u002Fli>\n\u003Cli>iOS Banner\u003C\u002Fli>\n\u003Cli>Custom Installation Button\u003C\u002Fli>\n\u003Cli>Page and Image Sync\u003C\u002Fli>\n\u003Cli>PWA Installation Statistic\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Installation and Setting up \u003C\u002Fh3>\n\u003Cp>Install the plugin and activate it.\u003Cbr \u002F>\nSet up the manifest and the service worker.\u003C\u002Fp>\n\u003Ch3>Manifest\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>App ID\u003C\u002Fli>\n\u003Cli>App Name\u003C\u002Fli>\n\u003Cli>App Short Name\u003C\u002Fli>\n\u003Cli>Start Url\u003C\u002Fli>\n\u003Cli>PWA App Icons\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The full documentation can be found at \u003Ca href=\"https:\u002F\u002Fmittl-medien.de\u002Fmitt-pwa-progressive-web-app-joomla-documentation\" title=\"miTT PWA documentation\" rel=\"nofollow ugc\">miTT PWA documentation\u003C\u002Fa>\u003C\u002Fp>\n","miTT PWA FREE WP transforms your WordPress Website into a Progressive Web App (PWA) and makes it offline ready using Service Workers.",2445,1,"6.0.0",[56,134,100,101,21],"ios-app","https:\u002F\u002Fmittl-medien.de\u002Fproduct-pwa","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmitt-pwa.1.1.0.zip","2026-03-15T10:48:56.248Z",{"attackSurface":139,"codeSignals":263,"taintFlows":435,"riskAssessment":485,"analyzedAt":495},{"hooks":140,"ajaxHandlers":251,"restRoutes":252,"shortcodes":253,"cronEvents":258,"entryPointCount":131,"unprotectedCount":13},[141,147,150,155,159,164,168,173,176,180,183,187,191,195,199,202,205,209,213,217,220,224,227,231,235,239,243,247],{"type":142,"name":143,"callback":144,"file":145,"line":146},"action","wp_footer","maybe_prefetch","includes\\lh-register-file-class.php",127,{"type":142,"name":148,"callback":144,"file":145,"line":149},"embed_footer",128,{"type":151,"name":152,"callback":153,"file":145,"line":154},"filter","lh_web_application_precache_static_urls_filter","closure",136,{"type":151,"name":156,"callback":157,"priority":11,"file":145,"line":158},"script_loader_tag","add_attributes",182,{"type":142,"name":160,"callback":161,"file":162,"line":163},"admin_enqueue_scripts","enqueue_admin_scripts","includes\\lh-web-application-menu-class.php",36,{"type":142,"name":165,"callback":166,"file":162,"line":167},"admin_menu","plugin_menu",243,{"type":151,"name":169,"callback":170,"file":171,"line":172},"wp_cache_eof_tags","cache_request","lh-web-application.php",1398,{"type":142,"name":160,"callback":174,"file":171,"line":175},"enqueue_nav_scripts",1749,{"type":142,"name":177,"callback":178,"priority":131,"file":171,"line":179},"wp_head","add_meta_to_head",1809,{"type":142,"name":181,"callback":178,"priority":131,"file":171,"line":182},"embed_head",1810,{"type":142,"name":184,"callback":185,"file":171,"line":186},"init","register_menu",1813,{"type":151,"name":188,"callback":189,"priority":11,"file":171,"line":190},"intermediate_image_sizes_advanced","add_subsizes",1817,{"type":151,"name":192,"callback":193,"priority":13,"file":171,"line":194},"query_vars","add_query_vars",1823,{"type":142,"name":196,"callback":197,"file":171,"line":198},"wp","sniff_requests",1824,{"type":142,"name":184,"callback":200,"priority":13,"file":171,"line":201},"add_endpoint",1825,{"type":142,"name":184,"callback":203,"file":171,"line":204},"init_hook",1829,{"type":142,"name":206,"callback":207,"file":171,"line":208},"lh_web_application_initial_run","run_initial_processes",1833,{"type":151,"name":210,"callback":211,"priority":11,"file":171,"line":212},"plugin_action_links","add_settings_link",1836,{"type":142,"name":214,"callback":215,"priority":96,"file":171,"line":216},"template_redirect","redirect_to_login",1842,{"type":142,"name":218,"callback":218,"file":171,"line":219},"plugins_loaded",1846,{"type":151,"name":221,"callback":222,"file":171,"line":223},"site_icon_meta_tags","theme_metatags",1849,{"type":142,"name":184,"callback":225,"file":171,"line":226},"register_shortcodes",1852,{"type":142,"name":228,"callback":229,"file":171,"line":230},"get_header","add_get_header_hooks",1855,{"type":142,"name":232,"callback":233,"priority":11,"file":171,"line":234},"wp_loaded","register_core_scripts",1858,{"type":142,"name":236,"callback":237,"file":171,"line":238},"wp_body_open","add_wp_body_open_hooks",1861,{"type":142,"name":240,"callback":241,"priority":11,"file":171,"line":242},"wp_nav_menu_item_custom_fields","add_menu_icon_uploader",1866,{"type":142,"name":244,"callback":245,"priority":11,"file":171,"line":246},"wp_update_nav_menu_item","add_menu_icon_meta",1867,{"type":142,"name":248,"callback":249,"file":171,"line":250},"load-nav-menus.php","load_nav_scripts",1869,[],[],[254],{"tag":255,"callback":256,"file":171,"line":257},"lh_web_application_has_prompt","has_prompt_output",1625,[259,261],{"hook":206,"callback":206,"file":171,"line":260},1269,{"hook":206,"callback":206,"file":171,"line":262},1275,{"dangerousFunctions":264,"sqlUsage":265,"outputEscaping":270,"fileOperations":62,"externalRequests":13,"nonceChecks":62,"capabilityChecks":131,"bundledLibraries":434},[],{"prepared":13,"raw":131,"locations":266},[267],{"file":171,"line":268,"context":269},228,"$wpdb->get_var() with variable interpolation",{"escaped":271,"rawEcho":272,"locations":273},13,101,[274,278,279,280,281,282,283,284,285,287,288,289,291,293,294,295,297,299,300,301,303,304,306,308,309,311,313,314,315,317,318,320,322,323,324,326,327,329,331,332,334,336,337,339,341,342,344,345,347,348,350,352,353,354,355,357,358,359,361,363,365,367,369,371,373,375,377,378,379,380,381,383,384,385,386,387,389,390,391,393,395,397,399,401,403,405,407,409,410,412,414,417,418,420,422,424,426,428,430,431,432],{"file":275,"line":276,"context":277},"includes\\partials\\option-settings.php",3,"raw output",{"file":275,"line":276,"context":277},{"file":275,"line":96,"context":277},{"file":275,"line":96,"context":277},{"file":275,"line":96,"context":277},{"file":275,"line":11,"context":277},{"file":275,"line":11,"context":277},{"file":275,"line":11,"context":277},{"file":275,"line":286,"context":277},11,{"file":275,"line":286,"context":277},{"file":275,"line":286,"context":277},{"file":275,"line":290,"context":277},15,{"file":275,"line":292,"context":277},16,{"file":275,"line":292,"context":277},{"file":275,"line":292,"context":277},{"file":275,"line":296,"context":277},22,{"file":275,"line":298,"context":277},23,{"file":275,"line":298,"context":277},{"file":275,"line":298,"context":277},{"file":275,"line":302,"context":277},24,{"file":275,"line":302,"context":277},{"file":275,"line":305,"context":277},29,{"file":275,"line":307,"context":277},31,{"file":275,"line":307,"context":277},{"file":275,"line":310,"context":277},39,{"file":275,"line":312,"context":277},40,{"file":275,"line":312,"context":277},{"file":275,"line":312,"context":277},{"file":275,"line":316,"context":277},41,{"file":275,"line":316,"context":277},{"file":275,"line":319,"context":277},47,{"file":275,"line":321,"context":277},48,{"file":275,"line":321,"context":277},{"file":275,"line":321,"context":277},{"file":275,"line":325,"context":277},49,{"file":275,"line":325,"context":277},{"file":275,"line":328,"context":277},55,{"file":275,"line":330,"context":277},57,{"file":275,"line":330,"context":277},{"file":275,"line":333,"context":277},67,{"file":275,"line":335,"context":277},69,{"file":275,"line":335,"context":277},{"file":275,"line":338,"context":277},78,{"file":275,"line":340,"context":277},93,{"file":275,"line":272,"context":277},{"file":275,"line":343,"context":277},104,{"file":275,"line":343,"context":277},{"file":275,"line":346,"context":277},110,{"file":275,"line":346,"context":277},{"file":275,"line":349,"context":277},119,{"file":275,"line":351,"context":277},121,{"file":275,"line":351,"context":277},{"file":275,"line":351,"context":277},{"file":275,"line":146,"context":277},{"file":275,"line":356,"context":277},129,{"file":275,"line":356,"context":277},{"file":275,"line":356,"context":277},{"file":171,"line":360,"context":277},1199,{"file":171,"line":362,"context":277},1218,{"file":171,"line":364,"context":277},1228,{"file":171,"line":366,"context":277},1243,{"file":171,"line":368,"context":277},1389,{"file":171,"line":370,"context":277},1403,{"file":171,"line":372,"context":277},1524,{"file":171,"line":374,"context":277},1712,{"file":171,"line":376,"context":277},1713,{"file":171,"line":376,"context":277},{"file":171,"line":376,"context":277},{"file":171,"line":376,"context":277},{"file":171,"line":376,"context":277},{"file":171,"line":382,"context":277},1714,{"file":171,"line":382,"context":277},{"file":171,"line":382,"context":277},{"file":171,"line":382,"context":277},{"file":171,"line":382,"context":277},{"file":171,"line":388,"context":277},1715,{"file":171,"line":388,"context":277},{"file":171,"line":388,"context":277},{"file":392,"line":163,"context":277},"partials\\sw.php",{"file":392,"line":394,"context":277},45,{"file":392,"line":396,"context":277},56,{"file":392,"line":398,"context":277},68,{"file":392,"line":400,"context":277},71,{"file":392,"line":402,"context":277},72,{"file":392,"line":404,"context":277},206,{"file":406,"line":34,"context":277},"partials\\sw2.php",{"file":406,"line":408,"context":277},8,{"file":406,"line":96,"context":277},{"file":406,"line":411,"context":277},26,{"file":406,"line":413,"context":277},163,{"file":415,"line":416,"context":277},"partials\\sw3.php",14,{"file":415,"line":292,"context":277},{"file":415,"line":419,"context":277},17,{"file":415,"line":421,"context":277},65,{"file":415,"line":423,"context":277},81,{"file":415,"line":425,"context":277},188,{"file":427,"line":419,"context":277},"partials\\sw4.php",{"file":427,"line":429,"context":277},18,{"file":427,"line":298,"context":277},{"file":427,"line":74,"context":277},{"file":427,"line":433,"context":277},74,[],[436,455,469,477],{"entryPoint":437,"graph":438,"unsanitizedCount":131,"severity":454},"handle_start_url_requests (lh-web-application.php:616)",{"nodes":439,"edges":451},[440,445],{"id":441,"type":442,"label":443,"file":171,"line":444},"n0","source","$_COOKIE",634,{"id":446,"type":447,"label":448,"file":171,"line":449,"wp_function":450},"n1","sink","wp_redirect() [Open Redirect]",636,"wp_redirect",[452],{"from":441,"to":446,"sanitized":453},false,"medium",{"entryPoint":456,"graph":457,"unsanitizedCount":13,"severity":468},"plugin_options (includes\\lh-web-application-menu-class.php:57)",{"nodes":458,"edges":465},[459,462],{"id":441,"type":442,"label":460,"file":162,"line":461},"$_POST[?] (x5)",76,{"id":446,"type":447,"label":463,"file":162,"line":461,"wp_function":464},"update_option() [Settings Manipulation]","update_option",[466],{"from":441,"to":446,"sanitized":467},true,"low",{"entryPoint":470,"graph":471,"unsanitizedCount":13,"severity":468},"\u003Clh-web-application-menu-class> (includes\\lh-web-application-menu-class.php:0)",{"nodes":472,"edges":475},[473,474],{"id":441,"type":442,"label":460,"file":162,"line":461},{"id":446,"type":447,"label":463,"file":162,"line":461,"wp_function":464},[476],{"from":441,"to":446,"sanitized":467},{"entryPoint":478,"graph":479,"unsanitizedCount":13,"severity":468},"\u003Clh-web-application> (lh-web-application.php:0)",{"nodes":480,"edges":483},[481,482],{"id":441,"type":442,"label":443,"file":171,"line":444},{"id":446,"type":447,"label":448,"file":171,"line":449,"wp_function":450},[484],{"from":441,"to":446,"sanitized":467},{"summary":486,"deductions":487},"The lh-web-application plugin v1.28 exhibits a generally good security posture based on the provided static analysis and vulnerability history. The absence of any known CVEs and a clean vulnerability history are positive indicators. The code analysis reveals a small attack surface with no unprotected entry points, which is commendable. The presence of nonce and capability checks, along with a limited number of file operations and no external HTTP requests, further contribute to a secure foundation.\n\nHowever, there are notable areas of concern that warrant attention. The most significant risk stems from the SQL queries; 100% of them are not using prepared statements. This could lead to SQL injection vulnerabilities if user-supplied data is not rigorously sanitized before being used in queries. Additionally, the low percentage of properly escaped output (11%) suggests a high risk of Cross-Site Scripting (XSS) vulnerabilities across numerous output points. While the taint analysis did not reveal critical or high severity flows, the presence of one unsanitized path is a potential precursor to issues, especially when combined with the unescaped output.\n\nIn conclusion, the plugin benefits from a minimal attack surface and a clean vulnerability track record. Nevertheless, the critical findings regarding raw SQL queries and widespread unescaped output present substantial security risks that could be exploited. Addressing these specific code-level weaknesses is paramount to improving the plugin's overall security.",[488,490,492],{"reason":489,"points":11},"SQL queries not using prepared statements",{"reason":491,"points":408},"Low percentage of properly escaped output",{"reason":493,"points":494},"Flows with unsanitized paths",5,"2026-03-16T23:42:28.816Z",{"wat":497,"direct":508},{"assetPaths":498,"generatorPatterns":502,"scriptPaths":503,"versionParams":504},[499,500,501],"\u002Fwp-content\u002Fplugins\u002Flh-web-application\u002Finc\u002Fpwafunctional.css","\u002Fwp-content\u002Fplugins\u002Flh-web-application\u002Finc\u002Fpwafunctional.js","\u002Fwp-content\u002Fplugins\u002Flh-web-application\u002Finc\u002Flh_web_application.css",[],[500],[505,506,507],"lh-web-application\u002Finc\u002Fpwafunctional.css?ver=","lh-web-application\u002Finc\u002Fpwafunctional.js?ver=","lh-web-application\u002Finc\u002Flh_web_application.css?ver=",{"cssClasses":509,"htmlComments":510,"htmlAttributes":511,"restEndpoints":512,"jsGlobals":513,"shortcodeOutput":514},[],[],[],[],[],[]]