[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZJ26PNI9GSK6-mHNnQqW4MbYTMm-iOFs02oCMKDcaPg":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":34,"analysis":122,"fingerprints":602},"madnesschat-button","Floating Contact Button","1.1.1","madnesscode1","https:\u002F\u002Fprofiles.wordpress.org\u002Fmadnesscode1\u002F","\u003Cp>Floating Contact Button adds a customizable \u003Cstrong>WhatsApp chat button\u003C\u002Fstrong> to your WordPress site. Visitors can click the floating button and start a conversation in WhatsApp (click-to-chat) using your predefined message.\u003C\u002Fp>\n\u003Ch4>Main features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WhatsApp click-to-chat link (wa.me)\u003C\u002Fli>\n\u003Cli>4 button styles (circle, square, pill, with text)\u003C\u002Fli>\n\u003Cli>Animations and hover effects\u003C\u002Fli>\n\u003Cli>Responsive options (different sizes per device)\u003C\u002Fli>\n\u003Cli>Display rules (mobile\u002Fdesktop, home\u002Fposts\u002Fpages)\u003C\u002Fli>\n\u003Cli>Triggers (delay, scroll, time on page)\u003C\u002Fli>\n\u003Cli>Optional GDPR consent modal before opening WhatsApp\u003C\u002Fli>\n\u003Cli>Optional basic click tracking (date\u002Ftime + page URL)\u003C\u002Fli>\n\u003Cli>Optional UTM parameters for marketing attribution\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Performance\u003C\u002Fh4>\n\u003Cp>The plugin only loads its assets on pages where the button is displayed, and it is designed to be lightweight.\u003C\u002Fp>\n\u003Ch4>Compatibility\u003C\u002Fh4>\n\u003Cp>Works with any WordPress theme and most page builders. Compatible with WooCommerce sites (use it as a support and pre-sales contact button).\u003C\u002Fp>\n\u003Ch4>Privacy\u003C\u002Fh4>\n\u003Cp>You can enable a GDPR consent prompt before opening WhatsApp. If click tracking is enabled, the free version stores only minimal data for counting clicks.\u003C\u002Fp>\n\u003Ch4>Pro version\u003C\u002Fh4>\n\u003Cp>If you need advanced features like multiple agents, contextual messages, A\u002FB testing, and advanced analytics, contact us at madnesscode1@gmail.com.\u003C\u002Fp>\n\u003Ch3>Additional Info\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Developed by\u003C\u002Fstrong>: madnesscode1\u003Cbr \u002F>\n\u003Cstrong>Support\u003C\u002Fstrong>: madnesscode1@gmail.com\u003C\u002Fp>\n\u003Ch3>System Requirements\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>WordPress 5.6 or higher\u003C\u002Fli>\n\u003Cli>PHP 7.3 or higher\u003C\u002Fli>\n\u003Cli>PHP Memory: minimum 64MB\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Compatibility\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>✅ All WordPress themes\u003C\u002Fli>\n\u003Cli>✅ Page builders (Elementor, Divi, etc.)\u003C\u002Fli>\n\u003Cli>✅ Cache plugins\u003C\u002Fli>\n\u003Cli>✅ WPML and translation plugins\u003C\u002Fli>\n\u003Cli>✅ WooCommerce and e-commerce plugins\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>License and Support\u003C\u002Fh3>\n\u003Cp>This plugin is available under GPL v2 license and is completely free.\u003C\u002Fp>\n\u003Cp>For basic support, please review the included documentation. For advanced features and priority support, consider the Pro version.\u003C\u002Fp>\n\u003Ch3>Pro Version\u003C\u002Fh3>\n\u003Cp>Need more features? The Pro version includes:\u003Cbr \u002F>\n* Multiple agents with automatic rotation\u003Cbr \u002F>\n* A\u002FB Testing to optimize conversions\u003Cbr \u002F>\n* Advanced analytics with complete dashboard\u003Cbr \u002F>\n* Contextual messages per page\u003Cbr \u002F>\n* Smart template system\u003Cbr \u002F>\n* Priority email support\u003C\u002Fp>\n\u003Cp>Contact us: madnesscode1@gmail.com\u003C\u002Fp>\n","Add a lightweight floating WhatsApp chat button (click to chat) with styles, triggers, responsive options, and optional GDPR consent.",0,572,"2026-01-25T23:21:00.000Z","6.9.4","5.6","7.3",[18,19,20,21,22],"chat-widget","click-to-chat","contact-button","floating-button","whatsapp","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmadnesschat-button.1.0.2.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},1,30,94,"2026-04-03T23:12:07.011Z",[35,51,67,86,107],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":11,"downloaded":43,"rating":11,"num_ratings":11,"last_updated":44,"tested_up_to":14,"requires_at_least":45,"requires_php":46,"tags":47,"homepage":49,"download_link":50,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"mametech-chat-button","MameTech Chat Button","2.1.3","Mario Merola","https:\u002F\u002Fprofiles.wordpress.org\u002Fmonant\u002F","\u003Cp>\u003Cstrong>MameTech Chat Button\u003C\u002Fstrong> is a professional WordPress plugin that adds a customizable floating contact button to your website for instant messaging services like WhatsApp, Telegram and others.\u003C\u002Fp>\n\u003Ch4>Main Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Customizable Floating Button\u003C\u002Fstrong> – Position, size, colors fully configurable\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Sidebar Widget\u003C\u002Fstrong> – Insert buttons in any widget area\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Flexible Shortcode\u003C\u002Fstrong> – Use \u003Ccode>[mametech_chat_button]\u003C\u002Fcode> anywhere\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Schedule Hours\u003C\u002Fstrong> – Show buttons only during working hours\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multiple Numbers\u003C\u002Fstrong> – Manage multiple contacts with interactive menu\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Statistics Dashboard\u003C\u002Fstrong> – Track clicks with detailed tables\u003C\u002Fli>\n\u003Cli>\u003Cstrong>5 Preset Themes\u003C\u002Fstrong> – Default, Minimal, Gradient, Pulse, Dark\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable Tooltip\u003C\u002Fstrong> – Configurable hover message\u003C\u002Fli>\n\u003Cli>\u003Cstrong>100% Responsive\u003C\u002Fstrong> – Perfect on all devices\u003C\u002Fli>\n\u003Cli>\u003Cstrong>GDPR Compliant\u003C\u002Fstrong> – Privacy-friendly with tracking disable option\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Perfect For\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>E-commerce stores – Customer support and sales\u003C\u002Fli>\n\u003Cli>Professional services – Consultations and appointments\u003C\u002Fli>\n\u003Cli>Technical support – Multi-department helpdesk\u003C\u002Fli>\n\u003Cli>Agencies – Multiple contact points\u003C\u002Fli>\n\u003Cli>Hotels & Tourism – Bookings and information\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Widget & Shortcode\u003C\u002Fh4>\n\u003Cp>Insert chat buttons in sidebars using the widget or anywhere in posts\u002Fpages using the shortcode:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[mametech_chat_button phone=\"+1234567890\" message=\"Hello!\" text=\"Chat with us\" size=\"large\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Multiple Numbers\u003C\u002Fh4>\n\u003Cp>Perfect for teams! Add multiple WhatsApp numbers for different departments (Sales, Support, Administration) and let users choose who to contact via an interactive menu.\u003C\u002Fp>\n\u003Ch4>Schedule Hours\u003C\u002Fh4>\n\u003Cp>Configure working hours for each day of the week. The button automatically shows\u002Fhides based on your schedule.\u003C\u002Fp>\n\u003Ch4>Statistics\u003C\u002Fh4>\n\u003Cp>Track button clicks with detailed statistics including:\u003Cbr \u002F>\n* Total clicks\u003Cbr \u002F>\n* Clicks per day (table view)\u003Cbr \u002F>\n* Top 10 pages\u003Cbr \u002F>\n* Privacy-friendly anonymous tracking\u003C\u002Fp>\n\u003Ch3>Additional Info\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Developed by:\u003C\u002Fstrong> Mario Merola – MameTech\u003Cbr \u002F>\n\u003Cstrong>Website:\u003C\u002Fstrong> https:\u002F\u002Fwww.mametech.com\u003Cbr \u002F>\n\u003Cstrong>Support:\u003C\u002Fstrong> For support, please visit the plugin support forum\u003C\u002Fp>\n\u003Ch4>Privacy Policy\u003C\u002Fh4>\n\u003Cp>This plugin tracks anonymous clicks only if statistics are enabled. No personally identifiable data is collected. IP addresses are anonymized. Fully GDPR compliant.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cp>Currently available in:\u003Cbr \u002F>\n* English (default)\u003Cbr \u002F>\n* Italian (coming soon via translate.wordpress.org)\u003C\u002Fp>\n\u003Cp>Help translate this plugin into your language!\u003C\u002Fp>\n","Add a professional floating chat button to your website for WhatsApp and other messaging services with advanced features.",124,"2026-01-22T14:42:00.000Z","5.0","7.0",[48,19,20,21,22],"chat","https:\u002F\u002Fwww.mametech.com\u002Fmametech-chat-button","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmametech-chat-button.2.1.3.zip",{"slug":52,"name":53,"version":6,"author":54,"author_profile":55,"description":56,"short_description":57,"active_installs":58,"downloaded":59,"rating":25,"num_ratings":60,"last_updated":61,"tested_up_to":14,"requires_at_least":45,"requires_php":46,"tags":62,"homepage":65,"download_link":66,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"floating-contact-button-for-max-and-telegram","Floating Contact Button for MAX and Telegram","Alexander Alekseenko","https:\u002F\u002Fprofiles.wordpress.org\u002Falexwp12\u002F","\u003Cp>Floating Contact Button for MAX and Telegram adds a clean, modern floating contact button to your WordPress site.\u003C\u002Fp>\n\u003Cp>The plugin allows visitors to quickly contact you via popular messengers using a compact floating menu that opens smoothly on click.\u003C\u002Fp>\n\u003Cp>⚠️ Disclaimer:\u003Cbr \u002F>\nThis plugin is an independent project developed by the author and is not affiliated with, endorsed by, or officially connected to MAX Messenger, Telegram, WhatsApp, Facebook Messenger, or their respective owners.\u003C\u002Fp>\n\u003Ch3>Live Demo\u003C\u002Fh3>\n\u003Cp>https:\u002F\u002Fcryptolamer.ru\u002Fsupport_wp_plugin-floating-contact-button-for-max-and-telegram\u002F\u003C\u002Fp>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Floating contact menu with smooth open animation\u003C\u002Fli>\n\u003Cli>Supported messengers:\n\u003Cul>\n\u003Cli>Telegram\u003C\u002Fli>\n\u003Cli>WhatsApp\u003C\u002Fli>\n\u003Cli>Facebook Messenger\u003C\u002Fli>\n\u003Cli>MAX Messenger\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Modern glass-style design (Apple-like UI)\u003C\u002Fli>\n\u003Cli>One main button with expandable contacts\u003C\u002Fli>\n\u003Cli>Individual enable\u002Fdisable for each messenger\u003C\u002Fli>\n\u003Cli>Drag & drop button reordering (order is saved automatically)\u003C\u002Fli>\n\u003Cli>Manual button positioning (Top \u002F Right \u002F Bottom in pixels)\u003C\u002Fli>\n\u003Cli>Lightweight and fast (no external libraries)\u003C\u002Fli>\n\u003Cli>Privacy-friendly (no tracking, no external servers)\u003C\u002Fli>\n\u003Cli>Easy configuration via WordPress admin panel\u003C\u002Fli>\n\u003Cli>Fully tested with the free AirTheme WordPress theme\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Support the project:\u003Cbr \u002F>\nIf the plugin was helpful, you can support its development with a cup of coffee.\u003C\u002Fp>\n","A lightweight floating contact button for WordPress with support for Telegram, WhatsApp, Facebook Messenger and MAX.",600,2382,3,"2026-03-03T09:27:00.000Z",[20,63,21,64,22],"facebook-messenger","telegram","https:\u002F\u002Fcryptolamer.ru\u002Fsupport_wp_plugin-floating-contact-button-for-max-telegram\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffloating-contact-button-for-max-and-telegram.1.1.1.zip",{"slug":68,"name":69,"version":70,"author":71,"author_profile":72,"description":73,"short_description":74,"active_installs":75,"downloaded":76,"rating":25,"num_ratings":30,"last_updated":77,"tested_up_to":78,"requires_at_least":45,"requires_php":23,"tags":79,"homepage":84,"download_link":85,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"degx-floating-buttons","Floating Contact Buttons","1.0.1","Mohamed Amjad","https:\u002F\u002Fprofiles.wordpress.org\u002Fdevmohamedamjad1\u002F","\u003Cp>Floating Contact Buttons Advanced is a simple and lightweight WordPress plugin that allows you to add customizable floating WhatsApp and Phone buttons to your website. These buttons can be positioned on the left or right side of the screen and can be customized in terms of size, color, and tooltip text.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Add floating WhatsApp and Phone buttons.\u003C\u002Fli>\n\u003Cli>Customize button position (right stack, left stack, or split).\u003C\u002Fli>\n\u003Cli>Customize button size (small, medium, large).\u003C\u002Fli>\n\u003Cli>Customize button colors (WhatsApp and Phone buttons).\u003C\u002Fli>\n\u003Cli>Customize tooltip text and color.\u003C\u002Fli>\n\u003Cli>Supports international phone numbers.\u003C\u002Fli>\n\u003Cli>Responsive design.\u003C\u002Fli>\n\u003Cli>Easy to use and configure.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Customization\u003C\u002Fh3>\n\u003Cp>You can customize the appearance of the buttons by modifying the CSS in the plugin’s \u003Ccode>style.css\u003C\u002Fcode> file or by adding custom CSS to your theme.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support, please contact the plugin author at [your email address] or visit the \u003Ca href=\"https:\u002F\u002Fexample.com\u002Fsupport\" rel=\"nofollow ugc\">support forum\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later.\u003C\u002Fp>\n","Add customizable WhatsApp and Phone floating buttons to your WordPress website.",50,291,"2025-10-19T10:54:00.000Z","6.8.5",[80,81,82,83,22],"call-button","contact-buttons","floating-buttons","phone","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdegx-floating-buttons\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdegx-floating-buttons.1.0.1.zip",{"slug":87,"name":88,"version":89,"author":90,"author_profile":91,"description":92,"short_description":93,"active_installs":94,"downloaded":95,"rating":96,"num_ratings":97,"last_updated":98,"tested_up_to":99,"requires_at_least":100,"requires_php":101,"tags":102,"homepage":23,"download_link":105,"security_score":106,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"chatflow-chat-widget","ChatFlow – Click To Chat Widget for Website","1.0.2","chatflow","https:\u002F\u002Fprofiles.wordpress.org\u002Fchatflow\u002F","\u003Cp>ChatFlow.io Click To Chat Widget allows your visitors to start chat with you on multiple Messaging Apps easily so you can still keep in touch with them even when they left your website.\u003C\u002Fp>\n\u003Cp>Boost your website conversion today!\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fchatflow.io\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Automated Message Triggering\u003C\u002Fli>\n\u003Cli>Call to Action\u003C\u002Fli>\n\u003Cli>Multiple Messaging Apps Support (Facebook Messenger, WhatsApp, Email & Phone Call)\u003C\u002Fli>\n\u003Cli>Customisable Widget Appearance\u003C\u002Fli>\n\u003C\u002Ful>\n","Add the ability for your visitor to start chat with you on Facebook Messenger and WhatsApp directly from your website.",10,4482,80,2,"2020-04-28T05:43:00.000Z","5.4.19","3.0.1","5.2.4",[18,19,103,104,22],"facebook","messenger","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fchatflow-chat-widget.1.0.3.zip",85,{"slug":108,"name":109,"version":89,"author":110,"author_profile":111,"description":112,"short_description":113,"active_installs":11,"downloaded":114,"rating":11,"num_ratings":11,"last_updated":23,"tested_up_to":78,"requires_at_least":115,"requires_php":116,"tags":117,"homepage":23,"download_link":120,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":121},"advanced-contact-button","Advanced Contact Button","WPEnjoy","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpenjoy\u002F","\u003Cp>Advanced Contact Button is a powerful WordPress plugin that adds beautiful floating contact buttons to your website. It includes Call, Email, WhatsApp, and WeChat buttons that can be customized to match your needs.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Four contact buttons: Call, Email, WhatsApp, and WeChat\u003C\u002Fli>\n\u003Cli>Customizable button positions (Right Bottom, Right Middle)\u003C\u002Fli>\n\u003Cli>Two display styles: Icon Only or Icon with Text\u003C\u002Fli>\n\u003Cli>Individual enable\u002Fdisable options for each button\u003C\u002Fli>\n\u003Cli>Mobile-friendly and responsive design\u003C\u002Fli>\n\u003Cli>WeChat QR code display on hover\u003C\u002Fli>\n\u003Cli>Easy to configure through WordPress dashboard\u003C\u002Fli>\n\u003Cli>Clean and modern design\u003C\u002Fli>\n\u003Cli>Lightweight and fast\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Install and activate the plugin\u003C\u002Fli>\n\u003Cli>Go to Settings > Advanced Contact Button\u003C\u002Fli>\n\u003Cli>Configure your contact information and preferences\u003C\u002Fli>\n\u003Cli>Save changes and view your website\u003C\u002Fli>\n\u003C\u002Fol>\n","Add beautiful floating contact buttons (Call, Email, WhatsApp, WeChat) to your WordPress website with customizable settings.",323,"5.8","7.4",[118,81,82,119,22],"contact","wechat","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadvanced-contact-button.1.0.2.zip","2026-03-15T10:48:56.248Z",{"attackSurface":123,"codeSignals":218,"taintFlows":489,"riskAssessment":594,"analyzedAt":601},{"hooks":124,"ajaxHandlers":195,"restRoutes":215,"shortcodes":216,"cronEvents":217,"entryPointCount":183,"unprotectedCount":11},[125,131,135,138,142,146,149,152,154,157,160,164,168,171,176,181,185,190,193],{"type":126,"name":127,"callback":128,"file":129,"line":130},"action","admin_menu","register_menu","admin\\class-mcnb-admin.php",8,{"type":126,"name":132,"callback":133,"file":129,"line":134},"admin_init","register_settings",9,{"type":126,"name":136,"callback":137,"file":129,"line":94},"admin_enqueue_scripts","enqueue_admin_assets",{"type":126,"name":136,"callback":139,"priority":140,"file":129,"line":141},"add_menu_icon_styles",20,13,{"type":126,"name":143,"callback":144,"file":129,"line":145},"admin_notices","show_professional_branding",16,{"type":126,"name":143,"callback":147,"file":129,"line":148},"show_review_notice",19,{"type":126,"name":127,"callback":150,"priority":140,"file":151,"line":134},"add_dashboard_menu","admin\\class-mcnb-simple-dashboard.php",{"type":126,"name":136,"callback":153,"file":151,"line":94},"enqueue_assets",{"type":126,"name":155,"callback":153,"file":156,"line":130},"wp_enqueue_scripts","frontend\\class-mcnb-frontend.php",{"type":126,"name":158,"callback":159,"file":156,"line":134},"wp_footer","render_markup",{"type":126,"name":132,"callback":161,"file":162,"line":163},"maybe_create_tables","includes\\class-mcnb-analytics.php",12,{"type":126,"name":165,"callback":166,"file":167,"line":134},"init","security_headers","includes\\class-mcnb-security.php",{"type":126,"name":169,"callback":170,"priority":94,"file":167,"line":94},"wp_login","log_admin_access",{"type":172,"name":173,"callback":174,"priority":94,"file":167,"line":175},"filter","wp_kses_allowed_html","limit_allowed_html",11,{"type":126,"name":177,"callback":178,"priority":179,"file":180,"line":145},"wp_head","add_schema_markup",5,"includes\\class-mcnb-seo.php",{"type":126,"name":177,"callback":182,"priority":183,"file":180,"line":184},"add_open_graph_tags",6,17,{"type":126,"name":186,"callback":187,"priority":179,"file":188,"line":189},"plugins_loaded","closure","madnesschat-button.php",150,{"type":126,"name":191,"callback":187,"priority":94,"file":188,"line":192},"updated_option",174,{"type":126,"name":186,"callback":187,"file":188,"line":194},181,[196,201,204,208,211,212],{"action":197,"nopriv":198,"callback":199,"hasNonce":200,"hasCapCheck":200,"file":129,"line":175},"mcnb_save_settings",false,"ajax_save_settings",true,{"action":202,"nopriv":198,"callback":203,"hasNonce":200,"hasCapCheck":200,"file":129,"line":163},"mcnb_get_current_options","ajax_get_current_options",{"action":205,"nopriv":198,"callback":206,"hasNonce":200,"hasCapCheck":200,"file":129,"line":207},"mcnb_dismiss_review_notice","dismiss_review_notice",22,{"action":209,"nopriv":198,"callback":210,"hasNonce":200,"hasCapCheck":198,"file":162,"line":134},"mcnb_track_click","track_click",{"action":209,"nopriv":200,"callback":210,"hasNonce":200,"hasCapCheck":198,"file":162,"line":94},{"action":213,"nopriv":198,"callback":214,"hasNonce":198,"hasCapCheck":200,"file":162,"line":175},"mcnb_get_analytics","get_analytics_data",[],[],[],{"dangerousFunctions":219,"sqlUsage":220,"outputEscaping":222,"fileOperations":11,"externalRequests":11,"nonceChecks":179,"capabilityChecks":487,"bundledLibraries":488},[],{"prepared":140,"raw":11,"locations":221},[],{"escaped":223,"rawEcho":224,"locations":225},263,130,[226,229,231,234,236,237,239,241,243,245,247,249,251,253,255,257,259,261,263,265,267,269,271,273,275,277,279,281,283,285,287,289,291,293,295,297,299,301,303,305,307,309,311,313,315,317,319,321,323,325,327,329,331,333,335,337,339,341,343,345,347,349,351,353,355,357,359,361,363,365,367,369,371,373,375,377,379,381,383,385,387,389,391,393,395,397,399,401,403,405,407,409,411,413,415,417,419,421,423,425,427,429,431,433,435,437,439,441,443,445,447,449,451,453,455,457,459,461,463,465,467,469,471,473,475,477,479,481,483,485],{"file":129,"line":227,"context":228},186,"raw output",{"file":180,"line":230,"context":228},72,{"file":232,"line":233,"context":228},"includes\\class-mcnb-settings.php",303,{"file":232,"line":235,"context":228},310,{"file":232,"line":114,"context":228},{"file":232,"line":238,"context":228},326,{"file":232,"line":240,"context":228},328,{"file":232,"line":242,"context":228},335,{"file":232,"line":244,"context":228},344,{"file":232,"line":246,"context":228},345,{"file":232,"line":248,"context":228},353,{"file":232,"line":250,"context":228},374,{"file":232,"line":252,"context":228},377,{"file":232,"line":254,"context":228},379,{"file":232,"line":256,"context":228},386,{"file":232,"line":258,"context":228},399,{"file":232,"line":260,"context":228},417,{"file":232,"line":262,"context":228},419,{"file":232,"line":264,"context":228},422,{"file":232,"line":266,"context":228},424,{"file":232,"line":268,"context":228},431,{"file":232,"line":270,"context":228},462,{"file":232,"line":272,"context":228},475,{"file":232,"line":274,"context":228},477,{"file":232,"line":276,"context":228},484,{"file":232,"line":278,"context":228},506,{"file":232,"line":280,"context":228},518,{"file":232,"line":282,"context":228},530,{"file":232,"line":284,"context":228},536,{"file":232,"line":286,"context":228},547,{"file":232,"line":288,"context":228},563,{"file":232,"line":290,"context":228},566,{"file":232,"line":292,"context":228},570,{"file":232,"line":294,"context":228},585,{"file":232,"line":296,"context":228},588,{"file":232,"line":298,"context":228},594,{"file":232,"line":300,"context":228},598,{"file":232,"line":302,"context":228},625,{"file":232,"line":304,"context":228},628,{"file":232,"line":306,"context":228},630,{"file":232,"line":308,"context":228},635,{"file":232,"line":310,"context":228},638,{"file":232,"line":312,"context":228},640,{"file":232,"line":314,"context":228},647,{"file":232,"line":316,"context":228},651,{"file":232,"line":318,"context":228},659,{"file":232,"line":320,"context":228},673,{"file":232,"line":322,"context":228},676,{"file":232,"line":324,"context":228},678,{"file":232,"line":326,"context":228},685,{"file":232,"line":328,"context":228},698,{"file":232,"line":330,"context":228},709,{"file":232,"line":332,"context":228},720,{"file":232,"line":334,"context":228},726,{"file":232,"line":336,"context":228},731,{"file":232,"line":338,"context":228},737,{"file":232,"line":340,"context":228},751,{"file":232,"line":342,"context":228},756,{"file":232,"line":344,"context":228},761,{"file":232,"line":346,"context":228},766,{"file":232,"line":348,"context":228},773,{"file":232,"line":350,"context":228},778,{"file":232,"line":352,"context":228},786,{"file":232,"line":354,"context":228},787,{"file":232,"line":356,"context":228},789,{"file":232,"line":358,"context":228},790,{"file":232,"line":360,"context":228},791,{"file":232,"line":362,"context":228},792,{"file":232,"line":364,"context":228},794,{"file":232,"line":366,"context":228},811,{"file":232,"line":368,"context":228},814,{"file":232,"line":370,"context":228},816,{"file":232,"line":372,"context":228},823,{"file":232,"line":374,"context":228},827,{"file":232,"line":376,"context":228},838,{"file":232,"line":378,"context":228},850,{"file":232,"line":380,"context":228},853,{"file":232,"line":382,"context":228},855,{"file":232,"line":384,"context":228},859,{"file":232,"line":386,"context":228},860,{"file":232,"line":388,"context":228},861,{"file":232,"line":390,"context":228},877,{"file":232,"line":392,"context":228},880,{"file":232,"line":394,"context":228},887,{"file":232,"line":396,"context":228},888,{"file":232,"line":398,"context":228},894,{"file":232,"line":400,"context":228},895,{"file":232,"line":402,"context":228},902,{"file":232,"line":404,"context":228},909,{"file":232,"line":406,"context":228},911,{"file":232,"line":408,"context":228},915,{"file":232,"line":410,"context":228},917,{"file":232,"line":412,"context":228},924,{"file":232,"line":414,"context":228},928,{"file":232,"line":416,"context":228},936,{"file":232,"line":418,"context":228},941,{"file":232,"line":420,"context":228},943,{"file":232,"line":422,"context":228},946,{"file":232,"line":424,"context":228},950,{"file":232,"line":426,"context":228},958,{"file":232,"line":428,"context":228},963,{"file":232,"line":430,"context":228},967,{"file":232,"line":432,"context":228},971,{"file":232,"line":434,"context":228},979,{"file":232,"line":436,"context":228},989,{"file":232,"line":438,"context":228},999,{"file":232,"line":440,"context":228},1009,{"file":232,"line":442,"context":228},1010,{"file":232,"line":444,"context":228},1012,{"file":232,"line":446,"context":228},1013,{"file":232,"line":448,"context":228},1014,{"file":232,"line":450,"context":228},1015,{"file":232,"line":452,"context":228},1019,{"file":232,"line":454,"context":228},1021,{"file":232,"line":456,"context":228},1033,{"file":232,"line":458,"context":228},1034,{"file":232,"line":460,"context":228},1036,{"file":232,"line":462,"context":228},1037,{"file":232,"line":464,"context":228},1038,{"file":232,"line":466,"context":228},1039,{"file":232,"line":468,"context":228},1043,{"file":232,"line":470,"context":228},1045,{"file":232,"line":472,"context":228},1057,{"file":232,"line":474,"context":228},1058,{"file":232,"line":476,"context":228},1060,{"file":232,"line":478,"context":228},1061,{"file":232,"line":480,"context":228},1062,{"file":232,"line":482,"context":228},1063,{"file":232,"line":484,"context":228},1067,{"file":232,"line":486,"context":228},1069,7,[],[490,508,521,534,554,576],{"entryPoint":491,"graph":492,"unsanitizedCount":11,"severity":507},"render_page (admin\\class-mcnb-admin.php:61)",{"nodes":493,"edges":505},[494,499],{"id":495,"type":496,"label":497,"file":129,"line":498},"n0","source","$_GET",78,{"id":500,"type":501,"label":502,"file":129,"line":503,"wp_function":504},"n1","sink","echo() [XSS]",107,"echo",[506],{"from":495,"to":500,"sanitized":200},"low",{"entryPoint":509,"graph":510,"unsanitizedCount":11,"severity":507},"ajax_save_settings (admin\\class-mcnb-admin.php:223)",{"nodes":511,"edges":519},[512,515],{"id":495,"type":496,"label":513,"file":129,"line":514},"$_POST",244,{"id":500,"type":501,"label":516,"file":129,"line":517,"wp_function":518},"update_option() [Settings Manipulation]",247,"update_option",[520],{"from":495,"to":500,"sanitized":200},{"entryPoint":522,"graph":523,"unsanitizedCount":11,"severity":507},"\u003Cclass-mcnb-admin> (admin\\class-mcnb-admin.php:0)",{"nodes":524,"edges":531},[525,526,527,529],{"id":495,"type":496,"label":497,"file":129,"line":498},{"id":500,"type":501,"label":502,"file":129,"line":503,"wp_function":504},{"id":528,"type":496,"label":513,"file":129,"line":514},"n2",{"id":530,"type":501,"label":516,"file":129,"line":517,"wp_function":518},"n3",[532,533],{"from":495,"to":500,"sanitized":200},{"from":528,"to":530,"sanitized":200},{"entryPoint":535,"graph":536,"unsanitizedCount":11,"severity":507},"\u003Cclass-mcnb-analytics> (includes\\class-mcnb-analytics.php:0)",{"nodes":537,"edges":551},[538,541,545,547],{"id":495,"type":496,"label":539,"file":162,"line":540},"$_GET (x2)",162,{"id":500,"type":501,"label":542,"file":162,"line":543,"wp_function":544},"get_var() [SQLi]",223,"get_var",{"id":528,"type":496,"label":546,"file":162,"line":540},"$_GET (x5)",{"id":530,"type":501,"label":548,"file":162,"line":549,"wp_function":550},"get_results() [SQLi]",239,"get_results",[552,553],{"from":495,"to":500,"sanitized":200},{"from":528,"to":530,"sanitized":200},{"entryPoint":555,"graph":556,"unsanitizedCount":30,"severity":575},"render_simple_dashboard (admin\\class-mcnb-simple-dashboard.php:89)",{"nodes":557,"edges":571},[558,561,563,565,568],{"id":495,"type":496,"label":559,"file":151,"line":560},"$_GET (x4)",98,{"id":500,"type":501,"label":502,"file":151,"line":562,"wp_function":504},139,{"id":528,"type":496,"label":497,"file":151,"line":564},101,{"id":530,"type":566,"label":567,"file":151,"line":564},"transform","→ get_real_stats()",{"id":569,"type":501,"label":542,"file":151,"line":570,"wp_function":544},"n4",608,[572,573,574],{"from":495,"to":500,"sanitized":200},{"from":528,"to":530,"sanitized":198},{"from":530,"to":569,"sanitized":198},"high",{"entryPoint":577,"graph":578,"unsanitizedCount":30,"severity":575},"\u003Cclass-mcnb-simple-dashboard> (admin\\class-mcnb-simple-dashboard.php:0)",{"nodes":579,"edges":589},[580,581,582,583,584,585,587],{"id":495,"type":496,"label":559,"file":151,"line":560},{"id":500,"type":501,"label":502,"file":151,"line":562,"wp_function":504},{"id":528,"type":496,"label":497,"file":151,"line":560},{"id":530,"type":501,"label":542,"file":151,"line":570,"wp_function":544},{"id":569,"type":496,"label":497,"file":151,"line":564},{"id":586,"type":566,"label":567,"file":151,"line":564},"n5",{"id":588,"type":501,"label":542,"file":151,"line":570,"wp_function":544},"n6",[590,591,592,593],{"from":495,"to":500,"sanitized":200},{"from":528,"to":530,"sanitized":200},{"from":569,"to":586,"sanitized":198},{"from":586,"to":588,"sanitized":198},{"summary":595,"deductions":596},"The madnesschat-button plugin v1.1.1 demonstrates a generally strong security posture with a significant emphasis on secure coding practices.  The complete absence of known CVEs, both historical and current, is a very positive indicator of the plugin's maintainer's diligence. Furthermore, the code analysis reveals that all SQL queries are properly prepared, and there are no direct file operations or external HTTP requests, which significantly reduces the attack surface for common web vulnerabilities. The presence of both nonce and capability checks on its AJAX handlers further bolsters its defenses against unauthorized actions.\n\nHowever, the static analysis does highlight a couple of areas for concern. Specifically, the taint analysis identified two flows with unsanitized paths, flagged with a high severity. While the absence of critical severity taint flows is encouraging, these high-severity flows represent a potential risk for attackers to manipulate application behavior or gain unauthorized access if exploited. Additionally, a notable portion (33%) of the plugin's output is not properly escaped. This could lead to Cross-Site Scripting (XSS) vulnerabilities if user-supplied data is directly rendered in the front-end without adequate sanitization. The plugin has a moderate attack surface with six AJAX handlers, but importantly, all are protected by authentication checks, mitigating the risk associated with direct entry points.",[597,599],{"reason":598,"points":163},"High severity unsanitized taint flows",{"reason":600,"points":130},"Significant amount of unescaped output","2026-03-17T06:56:49.765Z",{"wat":603,"direct":624},{"assetPaths":604,"generatorPatterns":613,"scriptPaths":614,"versionParams":615},[605,606,607,608,609,610,611,612],"\u002Fwp-content\u002Fplugins\u002Fmadnesschat-button\u002Fassets\u002Fcss\u002Ffrontend.css","\u002Fwp-content\u002Fplugins\u002Fmadnesschat-button\u002Fassets\u002Fjs\u002Ffrontend.js","\u002Fwp-content\u002Fplugins\u002Fmadnesschat-button\u002Fassets\u002Fcss\u002Fgdpr.css","\u002Fwp-content\u002Fplugins\u002Fmadnesschat-button\u002Fassets\u002Fjs\u002Fgdpr.js","\u002Fwp-content\u002Fplugins\u002Fmadnesschat-button\u002Fassets\u002Fcss\u002Fanimate.min.css","\u002Fwp-content\u002Fplugins\u002Fmadnesschat-button\u002Fassets\u002Fcss\u002Ftooltip.css","\u002Fwp-content\u002Fplugins\u002Fmadnesschat-button\u002Fassets\u002Fjs\u002Ftooltip.js","\u002Fwp-content\u002Fplugins\u002Fmadnesschat-button\u002Fassets\u002Fjs\u002Fcustom-icon.js",[],[606],[616,617,618,619,620,621,622,623],"\u002Fwp-content\u002Fplugins\u002Fmadnesschat-button\u002Fassets\u002Fcss\u002Ffrontend.css?ver=","\u002Fwp-content\u002Fplugins\u002Fmadnesschat-button\u002Fassets\u002Fjs\u002Ffrontend.js?ver=","\u002Fwp-content\u002Fplugins\u002Fmadnesschat-button\u002Fassets\u002Fcss\u002Fgdpr.css?ver=","\u002Fwp-content\u002Fplugins\u002Fmadnesschat-button\u002Fassets\u002Fjs\u002Fgdpr.js?ver=","\u002Fwp-content\u002Fplugins\u002Fmadnesschat-button\u002Fassets\u002Fcss\u002Fanimate.min.css?ver=","\u002Fwp-content\u002Fplugins\u002Fmadnesschat-button\u002Fassets\u002Fcss\u002Ftooltip.css?ver=","\u002Fwp-content\u002Fplugins\u002Fmadnesschat-button\u002Fassets\u002Fjs\u002Ftooltip.js?ver=","\u002Fwp-content\u002Fplugins\u002Fmadnesschat-button\u002Fassets\u002Fjs\u002Fcustom-icon.js?ver=",{"cssClasses":625,"htmlComments":631,"htmlAttributes":632,"restEndpoints":634,"jsGlobals":635,"shortcodeOutput":637},[626,627,628,629,630],"mcnb-whatsapp-button","mcnb-gdpr-modal","mcnb-gdpr-accept-btn","mcnb-gdpr-decline-btn","mcnb-tooltip",[],[633],"data-mcnb-options",[],[636],"mcnb_frontend_options",[]]