[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffDmfhaFKHU9uzWTm4IG0422-BGwxGSAW9Cc9mzg1dOc":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":13,"tags":16,"homepage":19,"download_link":20,"security_score":21,"vuln_count":11,"unpatched_count":11,"last_vuln_date":22,"fetched_at":23,"vulnerabilities":24,"developer":25,"crawl_stats":22,"alternatives":33,"analysis":90,"fingerprints":168},"link-converter-for-orangelabel","Link Converter for Orangelabel","1.0.1","Arjan Pronk","https:\u002F\u002Fprofiles.wordpress.org\u002Farjan-pronk\u002F","\u003Ch4>What is the  Link Converter for Orangelabel?\u003C\u002Fh4>\n\u003Cp>The link converter changes any (not disabled) outgoing links to Orangelabel links, automatically adding the affiliate tracking parameters where possible.\u003C\u002Fp>\n","Automatically change your links to Orangelabel Links",0,1163,"","4.7.32","3.0.1",[17,18],"orange-label","zanox","http:\u002F\u002Forangelabel.zanox.com\u002Fhome\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flink-converter-for-orangelabel.1.0.1.zip",100,null,"2026-03-15T10:48:56.248Z",[],{"slug":26,"display_name":7,"profile_url":8,"plugin_count":27,"total_installs":28,"avg_security_score":29,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},"arjan-pronk",2,700,96,30,91,"2026-04-05T15:15:08.800Z",[34,61,76],{"slug":35,"name":36,"version":37,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":44,"num_ratings":45,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":55,"download_link":56,"security_score":57,"vuln_count":58,"unpatched_count":11,"last_vuln_date":59,"fetched_at":60},"awin-advertiser-tracking","Awin – Advertiser Tracking for WooCommerce","2.0.5","Awin","https:\u002F\u002Fprofiles.wordpress.org\u002Fawinglobal\u002F","\u003Cp>Awin is a global affiliate network with over 200,000 contributing publishers and 29,500 advertisers, connecting customers with brands in over 180 countries around the globe. The Awin Tracking extension allows for seamless integration of our core Advertiser Tracking Suite within WooCommerce.\u003C\u002Fp>\n\u003Ch4>About\u003C\u002Fh4>\n\u003Cp>The extension works by appending our sale attribution technology onto your shop website and populating the relevant dynamic variables required to record conversions for your affiliate programme. Use of the Awin extension will not change the appearance of your e-commerce site.\u003C\u002Fp>\n\u003Cp>To use this extension you must have an Awin advertiser account, please contact our sales department for further information if you wish to join as an advertiser. Additional fees apply.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cp>\u003Cli>\n\u003Cstrong>Enhanced Sale Attribution\u003C\u002Fstrong> Available within the extension is our core tracking technology, which directly feeds into our reporting suite at Awin. These transactions are transparently displayed in the Awin interface. Within this package, we provide accessibility to our MasterTag and Server-to-Server solution which allows for enhanced and accurate conversion tracking.\n\u003C\u002Fli>\n\u003Cli>\n\u003Cstrong>Voucher Code Tracking\u003C\u002Fstrong> Voucher\u002FCoupon code tracking is an effective way for advertisers to monitor the vouchers used in a transaction. The data is clearly highlighted to advertisers through the Awin interface and you can choose to accept\u002Fdecline commission based on the usage of non-compliant voucher codes.\n\u003C\u002Fli>\n\u003Cli>\n\u003Cstrong>MultiCurrency Support\u003C\u002Fstrong> The currency used by your customer at checkout will be automatically handled and converted to your invoicing currency on the Awin platform.\n\u003C\u002Fli>\n\u003Cli>\n\u003Cstrong>Product Level Tracking (PLT)\u003C\u002Fstrong> PLT enables an advertiser to produce more in-depth reporting where the performance of individual products can easily be measured. Monitor the effectiveness of different product promotions and their impact on consumers’ buying behaviour in the affiliate channel.\n\u003C\u002Fli>\n\u003C\u002Fp>\n\u003Ch4>Privacy\u003C\u002Fh4>\n\u003Cp>For the purpose of attributing sales and commissions to publishers, Awin will process checkout information including the order reference. This data will be sent and processed on the dwin1.com and awin1.com domains. Any queries regarding the processing of this data can be directed to your dedicated integration contact. Please also see our \u003Ca href=\"https:\u002F\u002Fwww.awin.com\u002Fgb\u002Flegal\u002Fprivacy-policy-gb\" rel=\"nofollow ugc\">privacy policy.\u003C\u002Fa>\u003C\u002Fp>\n","Awin is a global affiliate network with over 200,000 contributing publishers and 29,500 advertisers, connecting customers with brands in over 180 coun …",1000,34072,60,3,"2026-03-03T16:11:00.000Z","6.8.5","3.5","7.3",[51,52,53,54,18],"advertiser","affiliate","affiliate-window","awin","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fawin-advertiser-tracking","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fawin-advertiser-tracking.2.0.6.zip",99,1,"2025-05-07 00:00:00","2026-03-15T15:16:48.613Z",{"slug":62,"name":63,"version":64,"author":38,"author_profile":39,"description":65,"short_description":66,"active_installs":42,"downloaded":67,"rating":68,"num_ratings":58,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":13,"tags":72,"homepage":74,"download_link":75,"security_score":21,"vuln_count":11,"unpatched_count":11,"last_vuln_date":22,"fetched_at":60},"convert-a-link","Awin Publisher MasterTag","1.8.4","\u003Ch4>What is the Publisher MasterTag ?\u003C\u002Fh4>\n\u003Cp>The Publisher MasterTag is Awin’s proprietary JavaScript tag that connects you to the latest tracking and a variety of both first and third party technologies designed to boost your conversion rates and help you earn more commission.\u003C\u002Fp>\n\u003Cp>Awin tools, free to use through the Publisher MasterTag:\u003C\u002Fp>\n\u003Cp>Tracking Optimisation – stay up to date, always using the latest version of our tracking technology. The plugin includes Bounceless Tracking which removes the network redirect typically seen in most affiliate journeys. This makes user journeys quicker, conversion rates higher and  futureproofs tracking as it remains unaffected by current browser privacy and security trends.\u003C\u002Fp>\n\u003Cp>Convert-a-link – created for publishers to make the process of creating tracked affiliate links as easy as possible. This means that you can just add a standard link to your site and if this is going to one of the advertisers on the Awin network then it will ensure that this is tracked, allowing you to earn commission should the user end up making a purchase. Convert-a-Link also facilitates relationships and as soon as you send traffic to an Awin advertiser a program membership request is created. This makes it even easier as you no longer have to search and apply for advertisers to promote.\u003C\u002Fp>\n\u003Cp>adMission – the first open, affiliate disclosure tool. adMission can be setup to work with any network or monetised link, offering page level and link level disclosure. This helps publishers comply to their relevant regulatory guidelines and ensure commercial relationships are being disclosed as required.\u003C\u002Fp>\n\u003Cp>Depending on your region, Awin has multiple third party technologies available to use. Some of these third party tools may require a fee or a commission split to use. Full details can be found in the Awin interface or wiki.\u003C\u002Fp>\n\u003Ch4>How do I use it?\u003C\u002Fh4>\n\u003Cp>Once the plugin is installed you will need to add your publisher ID in the settings page. Once done you will also need to visit the Publisher MasterTag page on the Awin interface to turn on the plugins you wish to use, no further installation is necessary.\u003C\u002Fp>\n\u003Ch4>What pre-requisites are there for using this service?\u003C\u002Fh4>\n\u003Cp>You have to be registered as a publisher on the Awin platform so that we can track sales generated from your site and attribute them to your publisher account. Sign up is a simple process which you can do here – https:\u002F\u002Fui.awin.com\u002Faffiliate-signup\u002Faccount-details\u003C\u002Fp>\n\u003Cp>All sign-ups are vetted by our compliance team and as such, after signup, there is a small delay before you are accepted as an Awin publisher.\u003C\u002Fp>\n\u003Ch4>Who are Awin?\u003C\u002Fh4>\n\u003Cp>With twenty years of experience, our network offers a global community of people, technology and business intelligence insights. No matter what type of partner, level of service, or tools your business needs, Awin provides solutions to drive sustainable growth.\u003C\u002Fp>\n\u003Cp>Part of the Axel Springer and United Internet Groups, with ShareASale and Commission Factory, Awin’s global affiliate network is powered by 15 offices worldwide, over 1,000 employees, 211,000 contributing publishers and 15,200 advertisers.\u003C\u002Fp>\n\u003Cp>Connecting businesses with customers around the world across the retail, telecommunications, travel and finance verticals, Awin generated €11.1 billion in revenue for its advertisers and €818 million for its publishers in the last financial year.\u003C\u002Fp>\n\u003Ch4>Further Information\u003C\u002Fh4>\n\u003Cp>For more information on the Publisher MasterTag the following may be useful:\u003C\u002Fp>\n\u003Cli> Wiki link – https:\u002F\u002Fwiki.awin.com\u002Findex.php\u002FPublisher-MasterTag \u003C\u002Fli>\n\u003Cli> Company website – http:\u002F\u002Fwww.awin.com  \u003C\u002Fli>\n","The Awin Publisher MasterTag allows you to access and enable technology from Awin and our partners.",33112,20,"2025-05-13T11:59:00.000Z","6.7.5","4.0",[73,53,54,62,18],"affiliate-marketing","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fconvert-a-link","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconvert-a-link.1.8.4.zip",{"slug":77,"name":78,"version":79,"author":38,"author_profile":39,"description":80,"short_description":81,"active_installs":82,"downloaded":83,"rating":11,"num_ratings":11,"last_updated":84,"tested_up_to":47,"requires_at_least":48,"requires_php":85,"tags":86,"homepage":87,"download_link":88,"security_score":57,"vuln_count":27,"unpatched_count":11,"last_vuln_date":89,"fetched_at":60},"awin-data-feed","Awin Data Feed","1.8.7","\u003Cp>If you are an Awin publisher who doesn’t have the resources, time or technical know-how to import our datafeeds in to your site then this is the tool for you. All you need is to import the plugin from the setting page and you will have nice widgets and shortcodes ready for your visitors. This is the easy way to promote affiliate products through great looking widgets.\u003C\u002Fp>\n\u003Ch4>What is Datafeed ?\u003C\u002Fh4>\n\u003Cp>Our wiki has a whole host of information regarding our datafeeds http:\u002F\u002Fwiki.awin.com\u002Findex.php\u002FDownloading_A_Feed\u003C\u002Fp>\n\u003Cp>You will need to be an Awin publisher to download our datafeeds. This is done through our create-a-feed tool which allows you to create a download based on three criteria Category, Advertiser and Brand.\u003C\u002Fp>\n\u003Cp>\u003Cli>\nCategory – Advertisers map the categories in their feeds to our category tree. The category tree can be expanded and you can drill down to the lower levels of our tree. Besides each category you will see the count of products available to download.\n\u003C\u002Fli>\n\u003Cli>\nAdvertiser – When you select Advertiser you can chose from a selection of your joined advertisers (as well as open advertisers).\n\u003C\u002Fli>\n\u003Cli>\nBrand – Filtering by Brand allows you to search for a particular brand and only download products that have that brand associated with them.\n\u003C\u002Fli>\n\u003C\u002Fp>\n\u003Cp>Once you have defined the products the next stage is to determine how you would like to download the datafeed. Certain fields are mandatory and the remainder can be toggled to select. Please note that not all fields may be in use by the advertiser.\u003C\u002Fp>\n\u003Ch4>How do I use it?\u003C\u002Fh4>\n\u003Cp>When you have chosen the columns you are downloading and are happy with the order then you can choose your file format, delimiter and compression type. There is also the option to include adult content, if unchecked then certain adult categories will be removed from the feed. To access the feed you can download it directly from the interface or you can use the generated URL to access that feed in that specified structure at any time. You can create as many of these URLs as you like.\u003C\u002Fp>\n\u003Cp>For this plugin you need to download the feed directly as a csv format and then import it.\u003C\u002Fp>\n\u003Ch4>What pre-requisites are there for using this service?\u003C\u002Fh4>\n\u003Cp>You have to be registered as a publisher on the Awin platform. Sign up is a simple process which you can do here – https:\u002F\u002Fui.awin.com\u002Faffiliate-signup\u002Faccount-details\u003C\u002Fp>\n\u003Cp>All sign ups are vetted by our compliance team and as such, after signup, there is a small delay before you are accepted as an Awin publisher.\u003C\u002Fp>\n\u003Ch4>Who are Awin?\u003C\u002Fh4>\n\u003Cp>Awin exists to provide its clients with the best service and technology available in performance marketing. With offices in the UK and US and over 280 employees, our aim is to exceed expectations in everything we do.\u003C\u002Fp>\n\u003Cp>Our technology is developed in-house using the latest methodologies, offering custom proprietary solutions for our partners. Our service has led to us receiving numerous awards including the UK’s coveted Industry Choice of Network Partner award eight times.\u003C\u002Fp>\n\u003Cp>Our platform features comprehensive dashboards and a social style partner directory allowing users to discover and connect with a whole host of high quality advertisers and publishers.\u003C\u002Fp>\n\u003Cp>We recognise the importance of generating incremental revenue for our clients and pride ourselves on our suite of compliance and protection tools which monitor all the search engines, seek and remove surreptitious adware and spyware and protect against fraud.\u003C\u002Fp>\n\u003Cp>For a fresh, innovative and ethical approach to performance marketing, Awin has all the right ingredients.\u003C\u002Fp>\n\u003Ch4>Further Information\u003C\u002Fh4>\n\u003Cp>For more information on Datafeed the following may be useful:\u003C\u002Fp>\n\u003Cli> http:\u002F\u002Fwiki.awin.com\u002Findex.php\u002FDownloading_A_Feed \u003C\u002Fli>\n\u003Ch3>1.8.7\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Upgrade for WP 6.8\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.8.6\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Upgrade for WP 6.6\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.8.5\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Upgrade for WP 6.2\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.8.2\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Fix shortcode attributes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.8.1\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Removed unused files \u003C\u002Fli>\n\u003Cli>fix horizontal display\u003C\u002Fli>\n\u003Cli>tested with latest PHP 8 and WP version 6\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>1.8\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Sanitizing all inputs and outputs \u003C\u002Fli>\n\u003Cli>Reformatting code \u003C\u002Fli>\n\u003Cli>Security upgrade \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>1.7\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Fix XSS vulnerability\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>1.6\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Properly escaped prefix\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.8.7\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Upgrade for up to WP 6.8\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.8.6\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Upgrade for WP 6.5\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.8.5\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Upgrade for WP 6.2\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.8.2\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Fix shortcode attributes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.8.1\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Removed unused files \u003C\u002Fli>\n\u003Cli>fix horizontal display\u003C\u002Fli>\n\u003Cli>tested with latest PHP 8 and WP version 6\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>1.8\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Sanitizing all inputs and outputs \u003C\u002Fli>\n\u003Cli>Reformatting code \u003C\u002Fli>\n\u003Cli>Security upgrade \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>1.7\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Fix XSS vulnerability\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>1.6\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Properly escaped prefix\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin allows you to import your Awin Datafeed and sell the products from any widget area.",200,14139,"2025-08-27T12:39:00.000Z","8.1",[52,53,54,77,18],"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fawin-data-feed","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fawin-data-feed.1.8.7.zip","2022-06-16 00:00:00",{"attackSurface":91,"codeSignals":124,"taintFlows":160,"riskAssessment":161,"analyzedAt":167},{"hooks":92,"ajaxHandlers":120,"restRoutes":121,"shortcodes":122,"cronEvents":123,"entryPointCount":11,"unprotectedCount":11},[93,99,102,104,107,110,114,117],{"type":94,"name":95,"callback":96,"file":97,"line":98},"action","plugins_loaded","anonymous","includes\\class-Orangelabel-Link-Converter.php",143,{"type":94,"name":100,"callback":96,"file":97,"line":101},"admin_menu",158,{"type":94,"name":100,"callback":96,"file":97,"line":103},159,{"type":94,"name":105,"callback":96,"file":97,"line":106},"add_meta_boxes",161,{"type":94,"name":108,"callback":96,"file":97,"line":109},"save_post",162,{"type":111,"name":112,"callback":96,"file":97,"line":113},"filter","hidden_meta_boxes",163,{"type":111,"name":115,"callback":96,"file":97,"line":116},"plugin_row_meta",164,{"type":94,"name":118,"callback":96,"file":97,"line":119},"wp_head",178,[],[],[],[],{"dangerousFunctions":125,"sqlUsage":126,"outputEscaping":128,"fileOperations":11,"externalRequests":11,"nonceChecks":58,"capabilityChecks":27,"bundledLibraries":159},[],{"prepared":11,"raw":11,"locations":127},[],{"escaped":11,"rawEcho":129,"locations":130},13,[131,135,137,139,141,143,145,147,149,151,153,156,158],{"file":132,"line":133,"context":134},"admin\\class-Orangelabel-Link-Converter-admin.php",80,"raw output",{"file":132,"line":136,"context":134},209,{"file":132,"line":138,"context":134},225,{"file":132,"line":140,"context":134},245,{"file":132,"line":142,"context":134},246,{"file":132,"line":144,"context":134},257,{"file":132,"line":146,"context":134},363,{"file":132,"line":148,"context":134},378,{"file":132,"line":150,"context":134},383,{"file":132,"line":152,"context":134},387,{"file":154,"line":155,"context":134},"public\\class-Orangelabel-Link-Converter-public.php",84,{"file":154,"line":157,"context":134},118,{"file":154,"line":157,"context":134},[],[],{"summary":162,"deductions":163},"The 'link-converter-for-orangelabel' plugin exhibits a strong security posture based on the provided static analysis and vulnerability history.  The absence of any identified CVEs, coupled with the strict use of prepared statements for SQL queries and the presence of nonce and capability checks, suggests a conscientiously developed plugin.  The attack surface is minimal, with no exposed AJAX handlers, REST API routes, shortcodes, or cron events without authentication checks.\n\nHowever, a significant concern arises from the lack of output escaping for all 13 identified output points. This indicates a potential for Cross-Site Scripting (XSS) vulnerabilities if any of the data being output originates from user input or external sources without proper sanitization. While taint analysis showed no unsanitized paths, this could be due to the limited scope of the analysis or the absence of complex data flows.  The complete lack of vulnerability history is a positive indicator, but the unescaped output remains the primary risk area requiring attention.\n\nIn conclusion, the plugin's strengths lie in its secure handling of database interactions and limited attack surface. Nevertheless, the critical flaw of universally unescaped output presents a tangible security risk that could be exploited. Addressing this single issue would significantly improve the plugin's overall security.",[164],{"reason":165,"points":166},"All output is unescaped",16,"2026-03-17T05:45:27.899Z",{"wat":169,"direct":178},{"assetPaths":170,"generatorPatterns":173,"scriptPaths":174,"versionParams":175},[171,172],"\u002Fwp-content\u002Fplugins\u002Flink-converter-for-orangelabel\u002Fpublic\u002Fcss\u002Flink-converter-for-orangelabel-public.css","\u002Fwp-content\u002Fplugins\u002Flink-converter-for-orangelabel\u002Fpublic\u002Fjs\u002Flink-converter-for-orangelabel-public.js",[],[172],[176,177],"link-converter-for-orangelabel\u002Fpublic\u002Fcss\u002Flink-converter-for-orangelabel-public.css?ver=","link-converter-for-orangelabel\u002Fpublic\u002Fjs\u002Flink-converter-for-orangelabel-public.js?ver=",{"cssClasses":179,"htmlComments":180,"htmlAttributes":181,"restEndpoints":182,"jsGlobals":183,"shortcodeOutput":184},[],[],[],[],[],[]]