[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0mABvOlofWc0wcCwiL65ZAZOPc5Zh0nZgP7kcNZ64k0":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":13,"tags":16,"homepage":13,"download_link":18,"security_score":19,"vuln_count":11,"unpatched_count":11,"last_vuln_date":20,"fetched_at":21,"vulnerabilities":22,"developer":23,"crawl_stats":20,"alternatives":28,"analysis":29,"fingerprints":109},"lineone-one","LineOne","1.0.0","happyconnect","https:\u002F\u002Fprofiles.wordpress.org\u002Fhappyconnect\u002F","\u003Cp>LineOne.one\u003C\u002Fp>\n\u003Cp>LineOne – your websites greatest agent. LineOne connects you to your customers straight away on the phone so you can talk and help your users decide what to buy or learn about next.\u003C\u002Fp>\n\u003Cp>LineOne increases conversions and gives your website the WOW factor.\u003C\u002Fp>\n\u003Cp>Free to install and you only pay for calls you receive, calls cost from 20 cents. Cheaper than any cpc or buying a lead elsewhere.\u003C\u002Fp>\n\u003Ch3>Authors\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.lineone.one\u002F\" rel=\"nofollow ugc\">@lineone.one\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Installation\u003C\u002Fp>\n\u003Cp>Upload the plugin, activate it, and then enter your lineone.com LineOne Customer Id.\u003C\u002Fp>\n\u003Cp>You’re done!\u003C\u002Fp>\n","LineOne.one LineOne - your websites greatest agent. LineOne connects you to your customers straight away on the phone so you can talk and help your u …",0,628,"","5.9.13","4.6",[17],"lineone","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flineone-one.zip",100,null,"2026-03-15T10:48:56.248Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":24,"total_installs":11,"avg_security_score":19,"avg_patch_time_days":25,"trust_score":26,"computed_at":27},1,30,94,"2026-04-05T17:57:13.369Z",[],{"attackSurface":30,"codeSignals":62,"taintFlows":72,"riskAssessment":100,"analyzedAt":108},{"hooks":31,"ajaxHandlers":58,"restRoutes":59,"shortcodes":60,"cronEvents":61,"entryPointCount":11,"unprotectedCount":11},[32,38,42,44,48,52],{"type":33,"name":34,"callback":35,"file":36,"line":37},"action","admin_menu","wplo_create_plugin_settings_page","lineone-widget.php",24,{"type":33,"name":39,"callback":40,"priority":19,"file":36,"line":41},"wp_print_scripts","wpdocs_dequeue_script",68,{"type":33,"name":39,"callback":40,"priority":19,"file":36,"line":43},78,{"type":33,"name":45,"callback":46,"file":36,"line":47},"plugins_loaded","wplo_update_db_check",91,{"type":33,"name":49,"callback":50,"file":36,"line":51},"wp_enqueue_scripts","wplo_widget_scripts",119,{"type":53,"name":54,"callback":55,"priority":56,"file":36,"line":57},"filter","script_loader_tag","add_data_attribute",10,130,[],[],[],[],{"dangerousFunctions":63,"sqlUsage":64,"outputEscaping":66,"fileOperations":11,"externalRequests":11,"nonceChecks":24,"capabilityChecks":11,"bundledLibraries":71},[],{"prepared":11,"raw":11,"locations":65},[],{"escaped":24,"rawEcho":24,"locations":67},[68],{"file":36,"line":69,"context":70},38,"raw output",[],[73,92],{"entryPoint":74,"graph":75,"unsanitizedCount":11,"severity":91},"wplo_handle_form (lineone-widget.php:96)",{"nodes":76,"edges":88},[77,82],{"id":78,"type":79,"label":80,"file":36,"line":81},"n0","source","$_POST",102,{"id":83,"type":84,"label":85,"file":36,"line":86,"wp_function":87},"n1","sink","update_option() [Settings Manipulation]",105,"update_option",[89],{"from":78,"to":83,"sanitized":90},true,"low",{"entryPoint":93,"graph":94,"unsanitizedCount":11,"severity":91},"\u003Clineone-widget> (lineone-widget.php:0)",{"nodes":95,"edges":98},[96,97],{"id":78,"type":79,"label":80,"file":36,"line":81},{"id":83,"type":84,"label":85,"file":36,"line":86,"wp_function":87},[99],{"from":78,"to":83,"sanitized":90},{"summary":101,"deductions":102},"The 'lineone-one' plugin v1.0.0 exhibits a generally good security posture based on the provided static analysis. The absence of any recorded vulnerabilities in its history and the lack of critical signals like dangerous functions or unhandled taint flows are positive indicators.  The code also demonstrates good practices by using prepared statements for all SQL queries and including a nonce check.\n\nHowever, there are areas for concern. The plugin has an \"attack surface\" of 0 entry points without protection, which is excellent. Nevertheless, only 50% of its output is properly escaped, indicating a potential risk of Cross-Site Scripting (XSS) vulnerabilities if the unescaped outputs handle user-supplied data. Furthermore, the absence of capability checks on any entry points means that if any were to be introduced in future versions without proper authorization checks, they could be exploited by unauthenticated users. The lack of documented vulnerabilities might also be a reflection of the plugin's age or lack of widespread use, rather than a guarantee of perfect security.\n\nIn conclusion, while the plugin's current state and history suggest a low immediate risk, the unescaped output and the lack of capability checks represent potential weaknesses that should be addressed to further strengthen its security. The absence of a larger attack surface and the use of prepared statements are significant strengths. It's crucial to ensure that any future development maintains these standards and addresses the identified output escaping and authorization concerns.",[103,106],{"reason":104,"points":105},"Output escaping is only 50% proper",5,{"reason":107,"points":105},"No capability checks on entry points","2026-03-17T06:05:48.404Z",{"wat":110,"direct":117},{"assetPaths":111,"generatorPatterns":113,"scriptPaths":114,"versionParams":116},[112],"\u002Fwp-content\u002Fplugins\u002Flineone-one\u002Fwidget-pop-up.js",[],[115],"https:\u002F\u002Flineone.one\u002Fwidget-pop-up\u002Fwidget-pop-up.js",[],{"cssClasses":118,"htmlComments":120,"htmlAttributes":121,"restEndpoints":125,"jsGlobals":126,"shortcodeOutput":127},[119],"lineone_widget_settings",[],[122,123,124],"data-widgetbaseurl","data-widgetcustomerid","id=\"lineone_widget_script\"",[],[],[]]