[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fElRPP0wYi92rg9ENL5NRzdyZkbuAvO0crn21ssqALKE":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":64,"crawl_stats":38,"alternatives":72,"analysis":169,"fingerprints":422},"manage-notification-emails","Manage Notification E-mails","1.8.6","3D Virge","https:\u002F\u002Fprofiles.wordpress.org\u002Fvirgial\u002F","\u003Cp>With this plugin you can switch the different WordPress notification e-mails on and off, like options as the new user and password change notifications send by WordPress to the administrator and user. Works perfectly in combination with a lot of other plugins!\u003C\u002Fp>\n\u003Cp>Watch this nice tut made by Robert Orzanna:\u003Cbr \u002F>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F66UkQKgSFio?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>The options you can manage are:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>New user notification to admin\u003C\u002Fli>\n\u003Cli>New user notification to user\u003C\u002Fli>\n\u003Cli>Notify post author\u003C\u002Fli>\n\u003Cli>Notify moderator\u003C\u002Fli>\n\u003Cli>Password change notification to admin\u003C\u002Fli>\n\u003Cli>Password change notification to user\u003C\u002Fli>\n\u003Cli>E-mail address change notification to user\u003C\u002Fli>\n\u003Cli>Forgotten password e-mail to user\u003C\u002Fli>\n\u003Cli>Forgotten password e-mail to administrator\u003C\u002Fli>\n\u003Cli>Automatic WordPress core update e-mail\u003C\u002Fli>\n\u003Cli>Automatic WordPress plugin update e-mail\u003C\u002Fli>\n\u003Cli>Automatic WordPress theme update e-mail\u003C\u002Fli>\n\u003Cli>Send admin notifications to extra admin e-mail addresses \u003Cem>(1.7.0)\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>Send an e-mail to administrators after a user requested to update his or her e-mail address \u003Cem>(1.7.0)\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>Send an e-mail to administrators after a user successfully updated his or her e-mail address \u003Cem>(1.7.0)\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>Multi-site support! Now you can manage your notification settings in one single environment \u003Cem>(1.8.0)\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>Export and import settings \u003Cem>(1.8.0)\u003C\u002Fem>\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>The automatic core, plugin, and theme updates have a special built-in feature. When one of these options is disabled, successful e-mails don’t get send out, but failed updates still will send an e-mail to the admin.\u003C\u002Fp>\n\u003Cp>This version contains some nice new stuff. If you find any issues, let me know. If you like the new features, please be so kind to give this plugin a good rating! It will help me to keep up the good work for you 🙂\u003C\u002Fp>\n\u003Cp>Want regular updates? Feel free to support me with a small donation 🙂\u003C\u002Fp>\n","Enable and disable email notifications that WordPress sends to the admin and user. Works perfectly with many other plugins!",100000,838951,96,53,"2025-12-09T18:31:00.000Z","6.9.0","4.0.0","7.4",[20,21,22,23,24],"e-mail","notification","notify","switch","user","https:\u002F\u002Fwww.freeamigos.nl\u002Fwp-plugins\u002Fmanage-notification-emails\u002F1.8.6","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmanage-notification-emails.1.8.6.zip",99,2,0,"2023-12-08 00:00:00","2026-03-15T15:16:48.613Z",[33,48],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":6,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":30,"updated_date":44,"references":45,"days_to_patch":47},"CVE-2023-6496","manage-notification-e-mails-missing-authorization","Manage Notification E-mails \u003C= 1.8.5 - Missing Authorization","The Manage Notification E-mails plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.8.5 via the card_famne_export_settings function. This makes it possible for unauthenticated attackers to obtain plugin settings.",null,"\u003C=1.8.5","medium",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N","Improper Authorization","2024-07-29 21:35:48",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F048bc117-88df-44b3-a30c-692bad23050f?source=api-prod",235,{"id":49,"url_slug":50,"title":51,"description":52,"plugin_slug":4,"theme_slug":38,"affected_versions":53,"patched_in_version":54,"severity":55,"cvss_score":56,"cvss_vector":57,"vuln_type":58,"published_date":59,"updated_date":60,"references":61,"days_to_patch":63},"CVE-2022-34654","manage-notification-e-mails-cross-site-request-forgery-to-plugin-options-update","Manage Notification E-mails \u003C= 1.8.2 - Cross-Site Request Forgery to Plugin Options Update","The Manage Notification E-mails plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.2. This is due to missing or incorrect nonce validation on the reset_settings function. This makes it possible for unauthenticated attackers to reset the plugin's settings, via forged request granted they can trick a site administrator into performing an action such as clicking on a link.","\u003C=1.8.2","1.8.3","high",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Cross-Site Request Forgery (CSRF)","2022-09-27 00:00:00","2024-01-22 19:56:02",[62],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F5ab0d9a2-ca77-439b-bced-8ab5d7b0518a?source=api-prod",483,{"slug":65,"display_name":7,"profile_url":8,"plugin_count":66,"total_installs":67,"avg_security_score":68,"avg_patch_time_days":69,"trust_score":70,"computed_at":71},"virgial",3,100330,92,240,73,"2026-04-04T13:51:39.737Z",[73,96,110,132,151],{"slug":74,"name":75,"version":76,"author":77,"author_profile":78,"description":79,"short_description":75,"active_installs":80,"downloaded":81,"rating":82,"num_ratings":83,"last_updated":84,"tested_up_to":85,"requires_at_least":86,"requires_php":87,"tags":88,"homepage":94,"download_link":95,"security_score":68,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"custom-new-user-email-template","Custom New User Email Template","1.0","LogicRays Technologies","https:\u002F\u002Fprofiles.wordpress.org\u002Flogicrays\u002F","\u003Cp>This plugin allows you to customize the email sent on a new user registration.\u003C\u002Fp>\n",200,2755,100,1,"2024-04-09T10:27:00.000Z","6.5.8","4.6","",[89,90,91,92,93],"new-user","new-user-notification","registration-email","user-registration","welcome-mail","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcustom-new-user-email-template\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-new-user-email-template.zip",{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":79,"short_description":98,"active_installs":102,"downloaded":103,"rating":82,"num_ratings":83,"last_updated":104,"tested_up_to":105,"requires_at_least":86,"requires_php":87,"tags":106,"homepage":107,"download_link":108,"security_score":109,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"custom-new-user-notification","Custom New User Notification","1.2.0","rafasashi","https:\u002F\u002Fprofiles.wordpress.org\u002Frafasashi\u002F",80,5214,"2023-06-29T06:13:00.000Z","6.2.9",[89,90,91,92,93],"https:\u002F\u002Fgithub.com\u002Frafasashi\u002Fcustom-new-user-notification","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-new-user-notification.1.2.0.zip",85,{"slug":111,"name":112,"version":113,"author":114,"author_profile":115,"description":116,"short_description":117,"active_installs":118,"downloaded":119,"rating":120,"num_ratings":66,"last_updated":121,"tested_up_to":122,"requires_at_least":123,"requires_php":87,"tags":124,"homepage":130,"download_link":131,"security_score":109,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"mail2users","Mail to Users","1.2","WordPress website Design and Development - Miracle Websoft","https:\u002F\u002Fprofiles.wordpress.org\u002Fmiraclewebssoft\u002F","\u003Cp>Email to users about new posts and pages.Send custom email. Well formatted email with nice email template. Email to user groups like subscribers, authors, administrator etc. Woocommerce products email notification to users. There are user can see own email only.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Take a look at this video to see the plugin in action:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.miraclewebsoft.com\u002Femail-to-users-wordpress-plugin\u002F\" rel=\"nofollow ugc\">Check Video Tutorial\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Plugin features:-\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Post notification to users\u003C\u002Fli>\n\u003Cli>Page notification to users\u003C\u002Fli>\n\u003Cli>Woocommerce products notification to users\u003C\u002Fli>\n\u003Cli>Custom Email to users groups\u003C\u002Fli>\n\u003Cli>Custom Email to individual users\u003C\u002Fli>\n\u003Cli>Users can unsubscribe emails\u003C\u002Fli>\n\u003Cli>List of unsubscribed users\u003C\u002Fli>\n\u003Cli>Emails privacy\u003C\u002Fli>\n\u003Cli>Re-subscriber users – (pro feature)\u003C\u002Fli>\n\u003Cli>Mail2users meta box for all type of posts\u003C\u002Fli>\n\u003Cli>Nice Email template\u003C\u002Fli>\n\u003Cli>Multiple Email template – (pro feature)\u003C\u002Fli>\n\u003Cli>Easy to use\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>How to install:-\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Download the plugin .zip file\u003C\u002Fli>\n\u003Cli>Click Plugins -> Add New -> Upload\u003C\u002Fli>\n\u003Cli>Find Mail to users WordPress Plugin in plugin list and activate it\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>How it works:-\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Notify users about post and page\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Goto add new post\u002Fpage\u003C\u002Fli>\n\u003Cli>Create your post\u002Fpage\u003C\u002Fli>\n\u003Cli>Before publishing select user groups from right sidebar\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Custom email to users\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Goto Mail to users in menu\u003C\u002Fli>\n\u003Cli>select users or user roles from right sidebar\u003C\u002Fli>\n\u003Cli>compose email and send\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Check our other plugins\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsave-to-facebook\u002F\" rel=\"ugc\">Save to Facebook\u002F\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ffb-conversion-pixel\u002F\" rel=\"ugc\">Fb Conversion Pixel\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Email to users about new posts and pages. Send custom emails. Email to users about latest woocommerce products. Emails privacy.",20,2802,74,"2017-03-27T07:40:00.000Z","4.7.32","3.6",[125,126,127,128,129],"email-users","notify-users","post-email-notification","role-email","user-group-email","http:\u002F\u002Fwww.miraclewebsoft.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmail2users.1.2.zip",{"slug":133,"name":134,"version":135,"author":136,"author_profile":137,"description":138,"short_description":139,"active_installs":118,"downloaded":140,"rating":141,"num_ratings":142,"last_updated":143,"tested_up_to":144,"requires_at_least":145,"requires_php":87,"tags":146,"homepage":149,"download_link":150,"security_score":109,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"wp-subscribe-author","Wp Subcribe Author","1.8","gchokeen","https:\u002F\u002Fprofiles.wordpress.org\u002Fgchokeen\u002F","\u003Cp>Wp Subscribe Author plugin is help subscriber to follow his\u002Fher favorite author. Once subscriber starts follow the author, he will get notified all new post of author by email.\u003C\u002Fp>\n\u003Cp>How it works ?\u003C\u002Fp>\n\u003Cp>Please check the FAQ section.\u003C\u002Fp>\n\u003Col>\n\u003Cli>Display subscriber favourite author posts using this shortcode \u003Cstrong>[favourite-author-posts]\u003C\u002Fstrong> – It will work only for logged in subscribers!\u003C\u002Fli>\n\u003Cli>Use this shortcode to display the subscribe author button on pages\u002Fpost \u003Cstrong>[subscribe-author-button]\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Fol>\n","Wp Subscribe Author plugin is help subscriber to follow his\u002Fher favorite author.",14752,76,4,"2016-01-08T09:47:00.000Z","4.3.34","2.8",[147,148,21,22,24],"author","email","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwp-subscribe-author\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-subscribe-author.zip",{"slug":152,"name":153,"version":76,"author":154,"author_profile":155,"description":156,"short_description":157,"active_installs":29,"downloaded":158,"rating":29,"num_ratings":29,"last_updated":159,"tested_up_to":160,"requires_at_least":161,"requires_php":162,"tags":163,"homepage":87,"download_link":168,"security_score":68,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"user-wise-email-disable","User Wise Email Disable","Efflux Perceive","https:\u002F\u002Fprofiles.wordpress.org\u002Fdivyeshsapariya35\u002F","\u003Cp>This plugin is useful for \u003Cstrong>disable user wise emails\u003C\u002Fstrong>. You need to \u003Cstrong>drag and drop the user\u003C\u002Fstrong> and save it then this will work automatically.\u003C\u002Fp>\n","This plugin is useful for disabling user-wise mail. You need to drag and drop the user and save it then this will work automatically.",829,"2024-10-05T07:52:00.000Z","6.6.5","6.0","7.2",[164,165,148,166,167],"disable-email","disable-user-wise-email","switch-off-user-wise-mail","user-email-disable","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuser-wise-email-disable.zip",{"attackSurface":170,"codeSignals":317,"taintFlows":354,"riskAssessment":410,"analyzedAt":421},{"hooks":171,"ajaxHandlers":313,"restRoutes":314,"shortcodes":315,"cronEvents":316,"entryPointCount":29,"unprotectedCount":29},[172,178,182,189,194,199,203,208,211,216,220,224,227,229,231,235,237,238,240,242,246,250,253,256,258,261,264,266,268,270,272,276,279,283,287,290,293,295,296,300,303,307,311],{"type":173,"name":174,"callback":175,"file":176,"line":177},"action","init","do_modules","core\\class.FAMNE.php",34,{"type":173,"name":179,"callback":180,"file":176,"line":181},"admin_footer","admin_notices",35,{"type":183,"name":184,"callback":185,"priority":186,"file":187,"line":188},"filter","plugin_row_meta","famne_meta_links",10,"core\\functions.setup.php",32,{"type":173,"name":190,"callback":191,"file":192,"line":193},"plugins_loaded","FAMNE::update_check","manage-notification-emails.php",87,{"type":183,"name":195,"callback":196,"file":197,"line":198},"wp_mail","famne_custom_to_admin_mailaddresses","modules\\custom-recipients.php",54,{"type":173,"name":200,"callback":201,"file":197,"line":202},"fa_mne_modules","load_mod_famne_custom_recipients",113,{"type":183,"name":204,"callback":205,"priority":27,"file":206,"line":207},"famne_sanitize_settings_page","card_famne_export_settings_sanitize","modules\\export-settings.php",91,{"type":173,"name":200,"callback":209,"file":206,"line":210},"load_mod_famne_export_settings",165,{"type":183,"name":212,"callback":213,"priority":83,"file":214,"line":215},"send_password_change_email","dont_send_password_change_email","modules\\pluggable\\pluggable-functions-1.2.php",45,{"type":183,"name":217,"callback":218,"priority":83,"file":214,"line":219},"send_email_change_email","dont_send_email_change_email",59,{"type":183,"name":221,"callback":222,"priority":83,"file":214,"line":223},"allow_password_reset","dont_send_password_forgotten_email",142,{"type":183,"name":212,"callback":213,"priority":83,"file":225,"line":226},"modules\\pluggable\\pluggable-functions-1.3.php",49,{"type":183,"name":217,"callback":218,"priority":83,"file":225,"line":228},63,{"type":183,"name":221,"callback":222,"priority":83,"file":225,"line":230},146,{"type":183,"name":232,"callback":233,"priority":186,"file":225,"line":234},"auto_core_update_send_email","fa_dont_sent_auto_core_update_emails",166,{"type":183,"name":212,"callback":213,"priority":83,"file":236,"line":219},"modules\\pluggable\\pluggable-functions-1.5.php",{"type":183,"name":217,"callback":218,"priority":83,"file":236,"line":70},{"type":183,"name":221,"callback":222,"priority":83,"file":236,"line":239},155,{"type":183,"name":232,"callback":233,"priority":186,"file":236,"line":241},175,{"type":183,"name":243,"callback":244,"priority":186,"file":236,"line":245},"auto_plugin_update_send_email","fa_auto_plugin_update_send_email",359,{"type":183,"name":247,"callback":248,"priority":186,"file":236,"line":249},"auto_theme_update_send_email","fa_auto_theme_update_send_email",380,{"type":183,"name":212,"callback":213,"priority":27,"file":251,"line":252},"modules\\pluggable\\pluggable-functions-1.6.php",55,{"type":183,"name":217,"callback":254,"priority":27,"file":251,"line":255},"__return_false",64,{"type":183,"name":257,"callback":254,"priority":27,"file":251,"line":120},"wp_send_new_user_notification_to_admin",{"type":183,"name":259,"callback":254,"priority":27,"file":251,"line":260},"wp_send_new_user_notification_to_user",83,{"type":183,"name":262,"callback":254,"priority":27,"file":251,"line":263},"wpmu_welcome_user_notification",84,{"type":183,"name":221,"callback":222,"priority":27,"file":251,"line":265},140,{"type":183,"name":232,"callback":233,"priority":27,"file":251,"line":267},159,{"type":183,"name":243,"callback":244,"priority":27,"file":251,"line":269},192,{"type":183,"name":247,"callback":248,"priority":27,"file":251,"line":271},213,{"type":173,"name":273,"callback":274,"file":275,"line":181},"admin_init","page_init","modules\\settings-page\\class.FAMNESettingsPage.php",{"type":173,"name":277,"callback":277,"file":275,"line":278},"network_admin_menu",37,{"type":173,"name":280,"callback":281,"file":275,"line":282},"network_admin_edit_famnesavenetwork","save_networksettings",38,{"type":173,"name":284,"callback":285,"file":275,"line":286},"network_admin_notices","custom_notices",39,{"type":173,"name":288,"callback":288,"file":275,"line":289},"admin_menu",41,{"type":173,"name":174,"callback":291,"file":275,"line":292},"famne_load_textdomain",44,{"type":173,"name":273,"callback":294,"file":275,"line":228},"load_scripts",{"type":173,"name":273,"callback":294,"file":275,"line":102},{"type":173,"name":297,"callback":298,"file":275,"line":299},"admin_enqueue_scripts","enqueue_scripts",188,{"type":173,"name":200,"callback":301,"file":302,"line":289},"load_mod_famne_settings_page","modules\\settings-page\\settings-page.php",{"type":173,"name":304,"callback":305,"file":306,"line":13},"personal_options_update","famne_user_email_change_request_to_admin","modules\\user-email-changed.php",{"type":183,"name":308,"callback":309,"priority":186,"file":306,"line":310},"email_change_email","famne_user_email_changed_email_to_admin",135,{"type":173,"name":200,"callback":312,"file":306,"line":265},"load_mod_famne_user_email_changed",[],[],[],[],{"dangerousFunctions":318,"sqlUsage":319,"outputEscaping":321,"fileOperations":83,"externalRequests":29,"nonceChecks":66,"capabilityChecks":142,"bundledLibraries":353},[],{"prepared":28,"raw":29,"locations":320},[],{"escaped":322,"rawEcho":323,"locations":324},25,15,[325,327,328,330,332,334,337,338,340,342,344,345,346,348,351],{"file":206,"line":263,"context":326},"raw output",{"file":275,"line":193,"context":326},{"file":275,"line":329,"context":326},282,{"file":275,"line":331,"context":326},287,{"file":275,"line":333,"context":326},340,{"file":335,"line":336,"context":326},"modules\\settings-page\\formfields.php",58,{"file":335,"line":219,"context":326},{"file":335,"line":339,"context":326},61,{"file":335,"line":341,"context":326},81,{"file":335,"line":343,"context":326},82,{"file":335,"line":260,"context":326},{"file":335,"line":109,"context":326},{"file":347,"line":188,"context":326},"modules\\settings-page\\views\\extra.php",{"file":349,"line":350,"context":326},"modules\\settings-page\\views\\settings.php",47,{"file":349,"line":352,"context":326},77,[],[355,372,391,399],{"entryPoint":356,"graph":357,"unsanitizedCount":83,"severity":40},"card_famne_export_settings_sanitize (modules\\export-settings.php:93)",{"nodes":358,"edges":369},[359,363],{"id":360,"type":361,"label":362,"file":206,"line":13},"n0","source","$_FILES",{"id":364,"type":365,"label":366,"file":206,"line":367,"wp_function":368},"n1","sink","file_get_contents() [SSRF\u002FLFI]",123,"file_get_contents",[370],{"from":360,"to":364,"sanitized":371},false,{"entryPoint":373,"graph":374,"unsanitizedCount":29,"severity":390},"load_mod_famne_export_settings (modules\\export-settings.php:26)",{"nodes":375,"edges":386},[376,378,382,384],{"id":360,"type":361,"label":377,"file":206,"line":226},"$_GET",{"id":364,"type":365,"label":379,"file":206,"line":380,"wp_function":381},"echo() [XSS]",56,"echo",{"id":383,"type":361,"label":362,"file":206,"line":13},"n2",{"id":385,"type":365,"label":366,"file":206,"line":367,"wp_function":368},"n3",[387,389],{"from":360,"to":364,"sanitized":388},true,{"from":383,"to":385,"sanitized":388},"low",{"entryPoint":392,"graph":393,"unsanitizedCount":29,"severity":390},"card_famne_export_settings (modules\\export-settings.php:43)",{"nodes":394,"edges":397},[395,396],{"id":360,"type":361,"label":377,"file":206,"line":226},{"id":364,"type":365,"label":379,"file":206,"line":380,"wp_function":381},[398],{"from":360,"to":364,"sanitized":388},{"entryPoint":400,"graph":401,"unsanitizedCount":29,"severity":390},"\u003Cexport-settings> (modules\\export-settings.php:0)",{"nodes":402,"edges":407},[403,404,405,406],{"id":360,"type":361,"label":377,"file":206,"line":226},{"id":364,"type":365,"label":379,"file":206,"line":380,"wp_function":381},{"id":383,"type":361,"label":362,"file":206,"line":13},{"id":385,"type":365,"label":366,"file":206,"line":367,"wp_function":368},[408,409],{"from":360,"to":364,"sanitized":388},{"from":383,"to":385,"sanitized":388},{"summary":411,"deductions":412},"The 'manage-notification-emails' plugin v1.8.6 exhibits a mixed security posture. On the positive side, it demonstrates good practices by utilizing prepared statements for all SQL queries and implementing nonce and capability checks, indicating an effort to secure its functionalities. The absence of external HTTP requests and bundled libraries also reduces potential attack vectors.\n\nHowever, several concerns warrant attention. The static analysis reveals a critical weakness in output escaping, with a significant portion (37%) of outputs not being properly escaped, posing a risk of Cross-Site Scripting (XSS) vulnerabilities. Furthermore, the taint analysis indicates at least one flow with an unsanitized path, which could potentially lead to path traversal or similar file system-related vulnerabilities, despite the reported absence of critical or high severity taint flows.\n\nThe plugin's vulnerability history, with two known CVEs, including a high and a medium severity vulnerability, is a significant red flag. The pattern of Improper Authorization and Cross-Site Request Forgery (CSRF) suggests recurring issues in how the plugin handles user permissions and session integrity. While there are currently no unpatched CVEs, the past history indicates a tendency for vulnerabilities to emerge, necessitating vigilant monitoring and prompt updates. The overall security is adequate but requires improvement in output escaping and attention to past vulnerability types.",[413,415,417,419],{"reason":414,"points":323},"Significant unescaped output detected",{"reason":416,"points":186},"Taint analysis indicates unsanitized paths",{"reason":418,"points":323},"History of high severity vulnerabilities",{"reason":420,"points":186},"History of medium severity vulnerabilities","2026-03-17T05:35:29.817Z",{"wat":423,"direct":458},{"assetPaths":424,"generatorPatterns":445,"scriptPaths":446,"versionParams":447},[425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444],"\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fcore\u002Fcss\u002Ffamne.css","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fcore\u002Fcss\u002Ffamne.min.css","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fcore\u002Fjs\u002Ffamne.js","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fcore\u002Fjs\u002Ffamne.min.js","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fmodules\u002Fsettings-page\u002Fcss\u002Fsettings-page.css","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fmodules\u002Fsettings-page\u002Fcss\u002Fsettings-page.min.css","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fmodules\u002Fsettings-page\u002Fjs\u002Fsettings-page.js","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fmodules\u002Fsettings-page\u002Fjs\u002Fsettings-page.min.js","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fmodules\u002Fpluggable\u002Fcss\u002Fpluggable.css","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fmodules\u002Fpluggable\u002Fcss\u002Fpluggable.min.css","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fmodules\u002Fpluggable\u002Fjs\u002Fpluggable.js","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fmodules\u002Fpluggable\u002Fjs\u002Fpluggable.min.js","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fmodules\u002Fcustom-recipients\u002Fcss\u002Fcustom-recipients.css","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fmodules\u002Fcustom-recipients\u002Fcss\u002Fcustom-recipients.min.css","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fmodules\u002Fcustom-recipients\u002Fjs\u002Fcustom-recipients.js","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fmodules\u002Fcustom-recipients\u002Fjs\u002Fcustom-recipients.min.js","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fmodules\u002Fexport-settings\u002Fcss\u002Fexport-settings.css","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fmodules\u002Fexport-settings\u002Fcss\u002Fexport-settings.min.css","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fmodules\u002Fexport-settings\u002Fjs\u002Fexport-settings.js","\u002Fwp-content\u002Fplugins\u002Fmanage-notification-emails\u002Fmodules\u002Fexport-settings\u002Fjs\u002Fexport-settings.min.js",[],[427,428,431,432,435,436,439,440,443,444],[448,449,450,451,452,453,454,455,456,457],"manage-notification-emails\u002Fcore\u002Fcss\u002Ffamne.css?ver=","manage-notification-emails\u002Fcore\u002Fjs\u002Ffamne.js?ver=","manage-notification-emails\u002Fmodules\u002Fsettings-page\u002Fcss\u002Fsettings-page.css?ver=","manage-notification-emails\u002Fmodules\u002Fsettings-page\u002Fjs\u002Fsettings-page.js?ver=","manage-notification-emails\u002Fmodules\u002Fpluggable\u002Fcss\u002Fpluggable.css?ver=","manage-notification-emails\u002Fmodules\u002Fpluggable\u002Fjs\u002Fpluggable.js?ver=","manage-notification-emails\u002Fmodules\u002Fcustom-recipients\u002Fcss\u002Fcustom-recipients.css?ver=","manage-notification-emails\u002Fmodules\u002Fcustom-recipients\u002Fjs\u002Fcustom-recipients.js?ver=","manage-notification-emails\u002Fmodules\u002Fexport-settings\u002Fcss\u002Fexport-settings.css?ver=","manage-notification-emails\u002Fmodules\u002Fexport-settings\u002Fjs\u002Fexport-settings.js?ver=",{"cssClasses":459,"htmlComments":462,"htmlAttributes":494,"restEndpoints":497,"jsGlobals":498,"shortcodeOutput":500},[460,461],"famne-settings-page","famne-tab-content",[463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,476,477,482,488,489,482,478,488,490,491,492,493],"\u003C!-- Manage notification emails settings page class -->","\u003C!-- This file is part of the Manage Notification Emails plugin -->","\u003C!-- FAMNESettingsPage -->","\u003C!-- Start up -->","\u003C!-- Add options page -->","\u003C!-- Add Tabs -->","\u003C!-- Register and add settings -->","\u003C!-- Check if is_famne_settings_page -->","\u003C!-- This page will be under \"Settings\". -->","\u003C!-- Network options -->","\u003C!-- Core options -->","\u003C!-- Modules -->","\u003C!-- Information -->","\u003C!-- Sanitizes the options -->","\u003C!-- Saves the network settings -->","\u003C!-- Reset settings -->","\u003C!-- Network settings page -->","\u003C!-- General settings page -->","\u003C!-- If the options array is not set, load the default options -->","\u003C!-- Load script and styles -->","\u003C!-- Print the admin page -->","\u003C!-- Add action links -->","\u003C!-- Load textdomain -->","\u003C!-- Default options -->","\u003C!-- Network Managed -->","\u003C!-- Display all settings -->","\u003C!-- Settings sections -->","\u003C!-- Network settings -->","\u003C!-- General settings -->","\u003C!-- Module settings -->","\u003C!-- Extra settings -->",[495,496],"data-tab-slug","data-section-slug",[],[499],"famne_data",[]]