[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5yOkfMUnlZZRh_EE-wxXrUqpjzy0lCVBB84Gs7rqNdI":3,"$fJ1oKJAvNlHVZ1nV3586KdPFmTh7_07LVP1Ta2YrarBM":338},{"slug":4,"name":5,"version":6,"author":4,"author_profile":7,"description":8,"short_description":9,"active_installs":10,"downloaded":11,"rating":12,"num_ratings":12,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":22,"download_link":23,"security_score":24,"vuln_count":12,"unpatched_count":12,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":34,"analysis":134,"fingerprints":310},"merchium","Merchium Shopping Cart","1.0.4","https:\u002F\u002Fprofiles.wordpress.org\u002Fmerchium\u002F","\u003Cp>\u003Ca href=\"http:\u002F\u002Fmerchium.com\" rel=\"nofollow ugc\">Merchium\u003C\u002Fa> is the most powerful shopping cart for your WordPress website.\u003C\u002Fp>\n\u003Cp>Start your online store in seconds: just install the Merchium WordPress plugin and complete the short setup. In a moment, your store will be set up and ready to sell.\u003C\u002Fp>\n\u003Ch4>Portable Power\u003C\u002Fh4>\n\u003Cp>Merchium is unbeatable in respect of feature richness. Your customers will enjoy seamless shopping experience with fast cloud search and one-page checkout, and you, as a storeowner, will have the access to tons of advanced eCommerce features, like flexible promotion system, built-in CMS, visual design editor, etc.\u003C\u002Fp>\n\u003Cp>Merchium supports \u003Cstrong>45+ payment gateways\u003C\u002Fstrong> right off the bat and lets you accept payments with credit cards, PayPal, and other popular options.\u003C\u002Fp>\n\u003Cp>Thanks to integration with major shipping services like \u003Cstrong>FedEx\u003C\u002Fstrong> and \u003Cstrong>USPS\u003C\u002Fstrong>, Merchium calculates shipping rates on the fly.\u003C\u002Fp>\n\u003Cp>Merchium is localized into \u003Cstrong>over a dozen languages\u003C\u002Fstrong> and lets your customers change between currencies; all prices are converted in real time.\u003C\u002Fp>\n\u003Ch4>Easy to Customize\u003C\u002Fh4>\n\u003Cp>Merchium has an on-site \u003Cstrong>visual editor\u003C\u002Fstrong> that lets you change your storefront’s color scheme, fonts, backgrounds, and more. No HTML or CSS knowledge required!\u003C\u002Fp>\n\u003Cp>You can create a specific layout and choose a style for every location you have a storefront at, e.g. WordPress, Facebook, company’s website, and so on.\u003C\u002Fp>\n\u003Ch4>Mobile-Friendly\u003C\u002Fh4>\n\u003Cp>Merchium looks great on all screen sizes thanks to its responsive design and the specially crafted \u003Cstrong>mobile storefront\u003C\u002Fstrong> by Twigmo.\u003C\u002Fp>\n\u003Cp>The mobile storefront was created from scratch with touch interface in mind. It utilizes familiar touch gestures to deliver the best shopping experience to mobile users.\u003C\u002Fp>\n\u003Ch4>Facebook Store\u003C\u002Fh4>\n\u003Cp>You can embed your Merchium store right in your \u003Cstrong>Facebook page\u003C\u002Fstrong>. Your catalog and orders will be synced across all your storefronts.\u003C\u002Fp>\n\u003Cp>Actually, you can embed a storefront in any website that allows custom JavaScript code: \u003Cstrong>Joomla\u003C\u002Fstrong>, \u003Cstrong>Wix\u003C\u002Fstrong>, \u003Cstrong>WordPress\u003C\u002Fstrong>, and so on.\u003C\u002Fp>\n\u003Cp>Learn more about Merchium at \u003Ca href=\"http:\u002F\u002Fmerchium.com\" rel=\"nofollow ugc\">merchium.com\u003C\u002Fa>.\u003C\u002Fp>\n","Merchium is a powerful online store right in your WordPress blog. Get started in seconds!",10,2488,0,"2015-05-20T09:50:00.000Z","4.1.42","3.6","",[18,4,19,20,21],"ecommerce","shop","store","storefront","http:\u002F\u002Fmerchium.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmerchium.1.0.4.zip",85,null,"2026-04-06T09:54:40.288Z",[],{"slug":4,"display_name":4,"profile_url":7,"plugin_count":29,"total_installs":30,"avg_security_score":24,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},2,20,30,84,"2026-04-07T09:39:18.132Z",[35,51,74,94,115],{"slug":36,"name":37,"version":38,"author":4,"author_profile":7,"description":16,"short_description":39,"active_installs":10,"downloaded":40,"rating":41,"num_ratings":29,"last_updated":42,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":43,"homepage":49,"download_link":50,"security_score":24,"vuln_count":12,"unpatched_count":12,"last_vuln_date":25,"fetched_at":26},"merchiumru","Онлайн-магазин Мерчиум","1.0.1","Полноценный интернет-магазин для вашего блога.",4257,60,"2015-12-29T12:33:00.000Z",[44,45,18,46,4,47,48,19,20,21],"cscart","%d0%bc%d0%b0%d0%b3%d0%b0%d0%b7%d0%b8%d0%bd","facebook","%d1%8d%d0%bb%d0%b5%d0%ba%d1%82%d1%80%d0%be%d0%bd%d0%bd%d0%b0%d1%8f-%d0%ba%d0%be%d0%bc%d0%bc%d0%b5%d1%80%d1%86%d0%b8%d1%8f","%d1%8f%d0%bd%d0%b4%d0%b5%d0%ba%d1%81-%d0%b4%d0%b5%d0%bd%d1%8c%d0%b3%d0%b8","http:\u002F\u002Fmerchium.ru","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmerchiumru.1.0.1.zip",{"slug":52,"name":53,"version":54,"author":53,"author_profile":55,"description":56,"short_description":57,"active_installs":58,"downloaded":59,"rating":60,"num_ratings":61,"last_updated":62,"tested_up_to":63,"requires_at_least":64,"requires_php":16,"tags":65,"homepage":69,"download_link":70,"security_score":71,"vuln_count":72,"unpatched_count":12,"last_vuln_date":73,"fetched_at":26},"ecwid-shopping-cart","Ecwid by Lightspeed Ecommerce Shopping Cart","7.0.8","https:\u002F\u002Fprofiles.wordpress.org\u002Fecwid\u002F","\u003Cp>Ecwid Ecommerce Shopping Cart is everything you need to add an online store to your WordPress site. Powerful, easy-to-use and Gutenberg-friendly. Hundreds of thousands of sellers in 175 countries, 45 languages supported. PayPal, Stripe and 70+ more payment options. Real-time shipping integrations. Selling on Instagram and Facebook.\u003C\u002Fp>\n\u003Ch3>Automatic Shipping and Taxes\u003C\u002Fh3>\n\u003Cp>The Ecwid ecommerce plugin integrates with major carriers including USPS, UPS, FedEx, Canada Post, Australia Post, and others to automatically calculate shipping rates. Taxes are also automated and can be set-up in a few clicks.  Automated tax rate calculations are available for the U.S., Canada, and EU VAT.  Additionally, integration with TaxJar provides automatic sales tax reporting and filing in the U.S.\u003C\u002Fp>\n\u003Ch3>Sell on Facebook and Instagram\u003C\u002Fh3>\n\u003Cp>Add your online store to Facebook and sell to millions of Facebook and Instagram users. No addons needed. Ecwid will automatically synchronize your products, customers, orders and inventory between your WordPress and Facebook storefronts. Join!\u003C\u002Fp>\n\u003Ch3>eCommerce Mobile Apps\u003C\u002Fh3>\n\u003Cp>Ecwid Shopping Cart provides mobile applications for iOS and Android to manage your store and sell on the go. Scan products, track inventory, manage sales and accept payments using your mobile device as a POS station. Your ecommerce data is automatically synchronized with your WordPress shopping cart, Facebook store and other online storefronts.\u003C\u002Fp>\n\u003Ch3>Unlimited Storage, Automatic Backups and Seamless Upgrades\u003C\u002Fh3>\n\u003Cp>With the Ecwid Shopping Cart, your online store data is fully hosted on our secure servers. Regardless of the WordPress hosting service you use, your Ecwid online store includes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>unlimited storage\u003C\u002Fli>\n\u003Cli>regular backups\u003C\u002Fli>\n\u003Cli>seamless upgrades and security updates\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>So you don’t need to worry about software updates, security patches and server maintenance – we do that for you. Your online store gets all the new ecommerce features and bug fixes automatically.\u003C\u002Fp>\n\u003Ch3>PCI DSS validated Level 1 Service Provider\u003C\u002Fh3>\n\u003Cp>Ecwid Shopping Cart is PCI DSS Level 1 certified, which is the gold standard for e-commerce solutions worldwide. This means that Ecwid helps your online store meet the security requirements of the bank you do business with.\u003C\u002Fp>\n\u003Ch3>Superb Support\u003C\u002Fh3>\n\u003Cp>Friendly and knowledgeable support experts available 24\u002F5 so you can get immediate help when you need it. Support options include email, e-commerce community forums, chat and phone support.\u003C\u002Fp>\n\u003Ch3>Sell Everywhere\u003C\u002Fh3>\n\u003Cp>With Ecwid, you can include your ecommerce shop on multiple websites, blogs, social sites and ecommerce marketplaces like \u003Cem>Amazon\u003C\u002Fem>, \u003Cem>eBay\u003C\u002Fem> and \u003Cem>Google Shopping\u003C\u002Fem> and sell simultaneously everywhere. Add your online store to as many sites as you want, manage it from one place.\u003C\u002Fp>\n\u003Ch3>Mobile Responsive Design\u003C\u002Fh3>\n\u003Cp>Ecwid works great on any WordPress site, especially those running on mobile-optimized themes. Your online store looks perfect on smartphones and automatically adapts to your customer’s screen size: laptops, tablets, smart TVs or smart watches.\u003C\u002Fp>\n\u003Ch3>Hundreds of extensions and powerful API\u003C\u002Fh3>\n\u003Cp>There is a lot of in-house and third party extensions built on the Ecwid Ecommerce APIs. You can find a ready made plugin extending features of your online storefront the way you want or build a custom addon yourself. The existing family of third party plugins include tax automation apps like TaxJar, fulfilment services like ShipStation, customer support tools like LiveChat and many others.\u003C\u002Fp>\n\u003Ch3>Plans start at just $5\u002Fmo\u003C\u002Fh3>\n\u003Cp>Start selling ealisy with no big investment. As your online shop grows, Ecwid grows with you. When the time is right, consider upgrading your store to one of our premium plans to get more robust features and preferred support. See also: \u003Ca href=\"https:\u002F\u002Fgo.lightspeedhq.com\u002Fecwid-pricing\" rel=\"nofollow ugc\">Ecwid plan and pricing\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>See Ecwid In Action\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgo.lightspeedhq.com\u002Fecwid-store-control-panel\" title=\"Ecwid Control Panel\" rel=\"nofollow ugc\">Ecwid Ecommerce Control panel\u003C\u002Fa> (you will be able to create an Ecwid account)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgo.lightspeedhq.com\u002Fecwid-wp-site\" rel=\"nofollow ugc\">Showcase\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Ecwid Site\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgo.lightspeedhq.com\u002Fecwid-wp-site\" title=\"Ecwid site\" rel=\"nofollow ugc\">www.ecwid.com\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Terms of usage\u003C\u002Fh3>\n\u003Cp>The plugin uses the Ecwid ecommerce cloud services (www.ecwid.com). Your store data is securely hosted with Ecwid under the terms and conditions listed here:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.ecwid.com\u002Fterms-of-service\" rel=\"nofollow ugc\">Terms of Service\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.ecwid.com\u002Fprivacy-policy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The plugin uses CDN services by AWS Cloudfront to speed up user stores. It is managed by the Ecwid Terms of Service and Privacy Policy and \u003Ca href=\"https:\u002F\u002Faws.amazon.com\u002Fagreement\u002F\" rel=\"nofollow ugc\">AWS Customer Agreement\u003C\u002Fa>.\u003C\u002Fp>\n","Powerful, easy to use ecommerce shopping cart for WordPress. Sell on Facebook and Instagram. iPhone & Android apps. Superb support.",20000,2979935,90,228,"2026-02-13T11:42:00.000Z","6.9.4","4.4",[66,18,67,68,21],"e-commerce","online-store","shopping-cart","http:\u002F\u002Fwww.ecwid.com?partner=wporg","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fecwid-shopping-cart.7.0.8.zip",83,13,"2026-02-14 14:30:00",{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":82,"downloaded":83,"rating":32,"num_ratings":84,"last_updated":85,"tested_up_to":86,"requires_at_least":87,"requires_php":88,"tags":89,"homepage":91,"download_link":92,"security_score":93,"vuln_count":12,"unpatched_count":12,"last_vuln_date":25,"fetched_at":26},"wc-booster","WC Booster","2.9","Eagle Vision IT","https:\u002F\u002Fprofiles.wordpress.org\u002Feaglethemes\u002F","\u003Cp>WC Booster is a minimalist product addon for WooCommerce plugin that enhances your WooCommerce store by adding extra features. It helps you to manage your products efficiently and boost conversions effortlessly. You can customize the cart and product display, enable quick product previews. With WC Booster, you have complete control and can offer a seamless shopping experience to your customers. WC Booster unlocks the true potential of your online store, making it easier than ever to succeed in the world of eCommerce.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FfzgU9foUeOY?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwcbooster.com\u002Fthemes\" rel=\"nofollow ugc\">Explore WC Booster Plugin’s Live Demo and Dynamic Features with Premium Theme Integration\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Core features\u003C\u002Fh3>\n\u003Col>\n\u003Cli>A lightweight addon for WooCommerce\u003C\u002Fli>\n\u003Cli>Enhances customer’s shopping experience\u003C\u002Fli>\n\u003Cli>Provides complete control over the product and cart\u003C\u002Fli>\n\u003Cli>Take a glimpse of an item without visiting the product page\u003C\u002Fli>\n\u003Cli>Easily import full demo sites to get started instantly.\u003C\u002Fli>\n\u003Cli>Users can add products to their wishlist and view all saved items in one place.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>WC Booster detailed Features\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Search\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Instant Search results Get instant search results with our awesome live search feature on your WordPress website. This feature provides you the relevant suggestions right on the search box saving your customer’s precious time and effort.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Custom Quantity Input\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Changing the quantity is way too easy with this feature. Custom Quantity Input helps your customers to change the order quantity right through various carts – Mini Cart, Shopping Cart, and during the checkout as well.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Sticky Add to Cart\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>A convenient way to add the product to the shopping cart. With this feature, your customers can quickly add the product to the cart while viewing product information. It ensures an effortless shopping experience that’s accessible and visible all the time on the product page.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Quick View\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Instant Product Information without leaving the webpage. Quick View display product information through a pop-up right on the product listing page. You can add the product to the shopping cart through this pop-up view shortening the buying journey.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Demo Importer\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>With just a few clicks, you can effortlessly import fully-designed demo sites to instantly transform your website. Whether you’re a beginner or a seasoned professional, getting started has never been easier. Simply choose from a variety of beautifully crafted demo templates, and import them into your site with no hassle.\u003C\u002Fp>\n\u003Cp>This plugin Supports all Themes but the following themes are highly recommended\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fwc-booster\u002F\" rel=\"ugc\">WC Booster\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fwoo-booster\u002F\" rel=\"ugc\">Woo Booster\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fcraftify\u002F\" rel=\"ugc\">Craftify\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Ffashion-vista\u002F\" rel=\"ugc\">Fashion Vista\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fonline-shopping\u002F\" rel=\"ugc\">Online Fashion\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fmulti-store\u002F\" rel=\"ugc\">Multi-Store\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fvision-fse\u002F\" rel=\"ugc\">Vision FSE\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fclean-vision\u002F\" rel=\"ugc\">Clean Vision\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fgutenbiz\u002F\" rel=\"ugc\">Gutenbiz\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fdarkbiz\u002F\" rel=\"ugc\">DarkBiz\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fevit-fse\u002F\" rel=\"ugc\">Evit FSE\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwcbooster.com\u002Fthemes\" rel=\"nofollow ugc\">View More\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Upgrade to Pro for unlock features\u003C\u002Fh3>\n\u003Cp>Paid WC Boosters have all of these additional features and dedicated support. Discover what this plugin has to offer now:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwcbooster.com\u002Fpricing\" rel=\"nofollow ugc\">Compare Free and paid pricing features\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Support and request for customization\u003C\u002Fh3>\n\u003Cp>Do you have any queries? Please send us a message through the \u003Ca href=\"https:\u002F\u002Fwcbooster.com\u002Fcontact-us\" rel=\"nofollow ugc\">Offical Contact Page\u003C\u002Fa>. We will get back to you.\u003C\u002Fp>\n\u003Cp>We are open to your suggestions and feedback. If you have any ideas on how to upgrade the plugin to make it better, or if you have ideas about the features that are missing from our plugin, let us know. For support please visit the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fwc-booster\" rel=\"ugc\">Plugin Support Forum\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Resources\u003C\u002Fh3>\n\u003Cp>Font Icons:\u003Cbr \u002F>\nAuthor:  Font Awsesome,\u003Cbr \u002F>\nSource:  http:\u002F\u002Ffontawesome.io,\u003Cbr \u002F>\nLicense: https:\u002F\u002Ffontawesome.com\u002Flicense (Fonts: SIL OFL 1.1, Code: MIT License)\u003C\u002Fp>\n\u003Cp>Select2:\u003Cbr \u002F>\nAuthor:  Select2,\u003Cbr \u002F>\nSource:  https:\u002F\u002Fselect2.org\u002Fgetting-started\u002Finstallation,\u003Cbr \u002F>\nLicense: https:\u002F\u002Fgithub.com\u002Fselect2\u002Fselect2\u002Fblob\u002Fdevelop\u002FLICENSE.md (MIT License)\u003C\u002Fp>\n\u003Cp>Sweet Alert:\u003Cbr \u002F>\nAuthor:  Sweet Alert,\u003Cbr \u002F>\nSource: https:\u002F\u002Fsweetalert2.github.io\u002F,\u003Cbr \u002F>\nLicense: https:\u002F\u002Fgithub.com\u002Ft4t5\u002Fsweetalert\u002Fblob\u002Fmaster\u002FLICENSE.md (MIT License)\u003C\u002Fp>\n","WC Booster adds custom carts, quick previews, and streamlined checkout to enhance WooCommerce. Boost your eCommerce now!",900,28221,5,"2025-02-28T11:49:00.000Z","6.7.5","6.1","7.3",[18,90,19,20,21],"online","https:\u002F\u002Fwww.eaglevisionit.com\u002Fdownloads\u002Fwc-booster\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwc-booster.2.9.zip",92,{"slug":95,"name":96,"version":97,"author":98,"author_profile":99,"description":100,"short_description":101,"active_installs":102,"downloaded":103,"rating":60,"num_ratings":104,"last_updated":105,"tested_up_to":63,"requires_at_least":106,"requires_php":107,"tags":108,"homepage":110,"download_link":111,"security_score":112,"vuln_count":113,"unpatched_count":12,"last_vuln_date":114,"fetched_at":26},"woocommerce","WooCommerce","10.6.2","Automattic","https:\u002F\u002Fprofiles.wordpress.org\u002Fautomattic\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fwoocommerce\u002F\" rel=\"nofollow ugc\">WooCommerce\u003C\u002Fa> is the open-source ecommerce platform for WordPress.\u003C\u002Fp>\n\u003Cp>Our core platform is free, flexible, and amplified by a global community. The freedom of open-source means you retain full ownership of your store’s content and data forever.\u003C\u002Fp>\n\u003Cp>Whether you’re launching a business, taking brick-and-mortar retail online, or developing sites for clients, use WooCommerce for a store that powerfully blends content and commerce.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Create beautiful, enticing storefronts\u003C\u002Fstrong> with \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproduct-category\u002Fthemes\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">themes\u003C\u002Fa> suited to your brand and industry.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Increase revenue\u003C\u002Fstrong> with an optimized \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fcheckout-blocks\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">shopping cart experience\u003C\u002Fa> that converts.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customize product pages in minutes\u003C\u002Fstrong> using modular \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fdocument\u002Fwoocommerce-blocks\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">product blocks\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Showcase physical and digital goods, product variations, custom configurations, instant downloads, and affiliate items.\u003C\u002Fli>\n\u003Cli>Sell \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fwoocommerce-subscriptions\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">subscriptions\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fwoocommerce-bookings\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">bookings\u003C\u002Fa>, or \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fwoocommerce-memberships\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">memberships\u003C\u002Fa>, with our developer-vetted extensions.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Rise to the top of search results\u003C\u002Fstrong> by leveraging \u003Ca href=\"https:\u002F\u002Fwww.searchenginejournal.com\u002Fwordpress-best-cms-seo\u002F\" rel=\"nofollow ugc\">WordPress’ SEO advantage\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Build on a platform that scales.\u003C\u002Fstrong> Get flexible ecommerce for \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fhigh-volume-stores\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">high-volume stores\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>ALL THE TOOLS YOU NEED TO SELL\u003C\u002Fh4>\n\u003Cp>Built-in tools and popular integrations help you efficiently manage your business operations. Many services are free to add with a single click via the optional \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fdocument\u002Fwoocommerce-setup-wizard\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">Setup Wizard\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Choose how you want to get paid\u003C\u002Fstrong>. Conveniently manage payments from the comfort of your store with \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fpayments\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">WooPayments\u003C\u002Fa> (Available in the U.S., U.K., Ireland, Australia, New Zealand, Canada, Spain, France, Germany, and Italy). Securely accept credit cards, mobile wallets, bank transfers, and cash thanks to \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproduct-category\u002Fwoocommerce-extensions\u002Fpayment-gateways\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">100+ payment gateways\u003C\u002Fa> – including \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fstripe\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">Stripe\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fwoocommerce-gateway-paypal-checkout\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">PayPal\u003C\u002Fa>, and \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fsquare\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">Square\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Configure your shipping options\u003C\u002Fstrong>. Print USPS labels right from your dashboard and even schedule a pickup with \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fshipping\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">WooCommerce Shipping\u003C\u002Fa> (U.S.-only). Connect with \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproduct-category\u002Fwoocommerce-extensions\u002Fshipping-methods\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">well-known carriers\u003C\u002Fa> such as UPS and FedEx – plus a wide variety of delivery, inventory, and fulfillment solutions for your locale.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Simplify sales tax\u003C\u002Fstrong>. Add \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Ftax\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">WooCommerce Tax\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproduct-category\u002Fwoocommerce-extensions\u002Ftax?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">similar integrated services\u003C\u002Fa> to make automated calculations a reality.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Grow your business, add features, and monitor your store on the go\u003C\u002Fh4>\n\u003Cp>WooCommerce means business. Keep tabs on the performance metrics most important to you with a powerful and flexible central dashboard built into WooCommerce.\u003C\u002Fp>\n\u003Cp>Expand your audience across marketing and social channels with \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fgoogle-ads\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">Google Ads\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fhubspot-for-woocommerce\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">HubSpot\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fmailchimp-for-woocommerce\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">Mailchimp\u003C\u002Fa>, and \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Ffacebook\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">Facebook\u003C\u002Fa> integrations. You can always check out the in-dashboard \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fdocument\u002Fmarketing-hub\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">Marketing Hub\u003C\u002Fa> for fresh ideas and tips to help you succeed.\u003C\u002Fp>\n\u003Cp>Enhance store functionality with hundreds of free and paid extensions from the \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">WooCommerce Marketplace\u003C\u002Fa>. Our developers \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fdocument\u002Fmarketplace-overview\u002F#section-6?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">vet each new extension\u003C\u002Fa> and regularly review existing extensions to maintain Marketplace quality standards. We are actively \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fdocument\u002Fmarketplace-overview\u002F#section-2?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">looking for products that help store builders create successful stores\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Manage your store from anywhere with the free WooCommerce \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fmobile\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">mobile app\u003C\u002Fa> (Android and iOS). Spoiler alert: Keep an ear out for the slightly addictive “cha-ching” notification sound each time you make a new sale!\u003C\u002Fp>\n\u003Ch4>Own and control your store data – forever\u003C\u002Fh4>\n\u003Cp>With \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fwoocommerce\u002F\" rel=\"nofollow ugc\">WooCommerce\u003C\u002Fa>, your data belongs to you. Always.\u003C\u002Fp>\n\u003Cp>If you opt to share \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fusage-tracking\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">usage data\u003C\u002Fa> with us, you can feel confident knowing that it’s anonymized and kept secure. Choose to opt-out at any time without impacting your store.\u003C\u002Fp>\n\u003Cp>Unlike hosted ecommerce solutions, WooCommerce store data is future-proof; you’re free to export all your content and take your site to any platform you choose. No restrictions.\u003C\u002Fp>\n\u003Ch4>Why developers choose (and love) WooCommerce\u003C\u002Fh4>\n\u003Cp>Developers can use \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fwoocommerce\u002F\" rel=\"nofollow ugc\">WooCommerce\u003C\u002Fa> to create, customize, and scale a store to meet a client’s exact specifications, making enhancements through extensions or custom solutions.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Leverage \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fdocument\u002Fintroduction-to-hooks-actions-and-filters\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">hooks and filters\u003C\u002Fa> to modify or create functionality.\u003C\u002Fli>\n\u003Cli>Integrate virtually any service using a robust \u003Ca href=\"https:\u002F\u002Fdeveloper.woocommerce.com\u002Fdocs\u002Fgetting-started-with-the-woocommerce-rest-api\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">REST API\u003C\u002Fa> and webhooks.\u003C\u002Fli>\n\u003Cli>Design and build custom content blocks with React.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdeveloper.woocommerce.com\u002Fdocs\u002Fcategory\u002Fextension-development\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">Inspect and modify\u003C\u002Fa> any aspect of the core plugin code.\u003C\u002Fli>\n\u003Cli>Speed up development with a lightning-fast \u003Ca href=\"https:\u002F\u002Fdeveloper.woocommerce.com\u002Fdocs\u002Fcategory\u002Fwc-cli\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">CLI\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The core platform is tested rigorously and often, supported by a dedicated development team working across time zones. Comprehensive documentation is updated with each release, empowering you to build exactly the store required.\u003C\u002Fp>\n\u003Ch4>Be part of our growing international community\u003C\u002Fh4>\n\u003Cp>WooCommerce has a large, passionate community dedicated to helping merchants succeed – and it’s growing fast.\u003C\u002Fp>\n\u003Cp>There are \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fmeetups\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">WooCommerce Meetups\u003C\u002Fa> in locations around the world that you can attend for free and even get involved in running. These events are a great way to learn from others, share your expertise, and connect with like-minded folks.\u003C\u002Fp>\n\u003Cp>WooCommerce also has a regular presence at WordCamps across the globe – we’d love to meet you.\u003C\u002Fp>\n\u003Ch4>Contribute and translate\u003C\u002Fh4>\n\u003Cp>WooCommerce is developed and supported by Automattic, the creators of WordPress.com and Jetpack. We also have hundreds of independent contributors, and there’s always room for more. Head to the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwoocommerce\u002Fwoocommerce?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">WooCommerce GitHub Repository\u003C\u002Fa> to find out how you can pitch in.\u003C\u002Fp>\n\u003Cp>WooCommerce is translated into multiple languages, including Danish, Ukrainian, and Persian. Help localize WooCommerce even further by adding your locale – visit \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fwoocommerce\u002F?utm_medium=referral&utm_source=wordpress.org&utm_campaign=wp_org_repo_listing\" rel=\"nofollow ugc\">translate.wordpress.org\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Connection to WooCommerce.com\u003C\u002Fh4>\n\u003Cp>You can connect your store to \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002F\" rel=\"nofollow ugc\">WooCommerce.com\u003C\u002Fa> to manage your subscriptions on WooCommerce Marketplace and receive product updates without leaving WordPress admin. Connection also enables installation of purchased products right from WooCommerce.com and streamlines access to technical support. If you’d like to learn about what data is gathered and how it is used, please refer to our \u003Ca href=\"https:\u002F\u002Fautomattic.com\u002Fprivacy\u002F\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>.\u003C\u002Fp>\n","Everything you need to launch an online store in days and keep it growing for years. From your first sale to millions in revenue, Woo is with you.",7000000,439386953,4760,"2026-03-31T10:28:00.000Z","6.8","7.4",[18,67,109,19,68],"sell-online","https:\u002F\u002Fwoocommerce.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwoocommerce.10.6.2.zip",87,43,"2026-03-10 00:00:00",{"slug":116,"name":117,"version":118,"author":96,"author_profile":119,"description":120,"short_description":121,"active_installs":122,"downloaded":123,"rating":124,"num_ratings":125,"last_updated":126,"tested_up_to":127,"requires_at_least":128,"requires_php":16,"tags":129,"homepage":132,"download_link":133,"security_score":24,"vuln_count":12,"unpatched_count":12,"last_vuln_date":25,"fetched_at":26},"storefront-product-sharing","Storefront Product Sharing","1.0.6","https:\u002F\u002Fprofiles.wordpress.org\u002Fwoocommerce\u002F","\u003Cp>A simple plugin that adds an attractive sharing component to product pages. Prompt visitors to share your products on Facebook, Twitter, Pinterest or via Email.\u003C\u002Fp>\n\u003Cp>This plugin requires the Storefront theme and WooCommerce plugin to be installed.\u003C\u002Fp>\n","Add attractive social sharing icons for Facebook, Twitter, Pinterest and Email to your product pages.",5000,274455,78,14,"2020-08-27T15:37:00.000Z","5.2.24","4.0",[18,130,131,21,95],"sharing","social","https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fstorefront-product-sharing\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstorefront-product-sharing.1.0.6.zip",{"attackSurface":135,"codeSignals":223,"taintFlows":265,"riskAssessment":292,"analyzedAt":309},{"hooks":136,"ajaxHandlers":203,"restRoutes":215,"shortcodes":216,"cronEvents":220,"entryPointCount":221,"unprotectedCount":222},[137,143,147,151,155,160,163,167,171,175,179,183,187,190,194,197,201],{"type":138,"name":139,"callback":140,"file":141,"line":142},"action","admin_menu","merchium_admin_menu","merchium.php",37,{"type":138,"name":144,"callback":145,"file":141,"line":146},"admin_init","merchium_admin_init",38,{"type":138,"name":148,"callback":149,"file":141,"line":150},"admin_enqueue_scripts","merchium_register_admin_scripts",39,{"type":138,"name":152,"callback":153,"file":141,"line":154},"admin_notices","merchium_show_admin_messages",40,{"type":156,"name":157,"callback":158,"file":141,"line":159},"filter","plugin_action_links_merchium_wp\u002Fmerchium.php","merchium_plugin_actions",42,{"type":138,"name":161,"callback":162,"priority":10,"file":141,"line":113},"pre_update_option_merchium_widget_code","merchium_update_option_merchium_widget_code",{"type":138,"name":164,"callback":165,"file":141,"line":166},"sm_buildmap","merchium_build_sitemap",44,{"type":138,"name":168,"callback":169,"file":141,"line":170},"wp_title","merchium_wp_title",51,{"type":138,"name":172,"callback":173,"file":141,"line":174},"wp_head","merchium_wp_head",52,{"type":138,"name":176,"callback":177,"priority":30,"file":141,"line":178},"wp_enqueue_scripts","merchium_register_frontend_scripts",53,{"type":138,"name":180,"callback":181,"priority":12,"file":141,"line":182},"wp","merchium_seo_ultimate_compatibility",56,{"type":138,"name":184,"callback":185,"priority":12,"file":141,"line":186},"plugins_loaded","merchium_minify_compatibility",57,{"type":138,"name":168,"callback":188,"priority":12,"file":141,"line":189},"merchium_seo_compatibility",58,{"type":138,"name":172,"callback":191,"priority":192,"file":141,"line":193},"merchium_seo_compatibility_restore",1000,59,{"type":138,"name":184,"callback":195,"file":141,"line":196},"merchium_load_textdomain",64,{"type":156,"name":198,"callback":199,"file":200,"line":174},"aioseop_title","__return_null","php\\fn.compatibility.php",{"type":156,"name":202,"callback":199,"file":200,"line":178},"aioseop_description",[204,208,212],{"action":205,"nopriv":206,"callback":205,"hasNonce":206,"hasCapCheck":206,"file":141,"line":207},"merchium_hide_vote_message",false,41,{"action":209,"nopriv":206,"callback":210,"hasNonce":206,"hasCapCheck":206,"file":141,"line":211},"merchium_form","merchium_ajax_request",45,{"action":209,"nopriv":213,"callback":210,"hasNonce":206,"hasCapCheck":206,"file":141,"line":214},true,46,[],[217],{"tag":218,"callback":218,"file":141,"line":219},"merchium_store",50,[],4,3,{"dangerousFunctions":224,"sqlUsage":225,"outputEscaping":227,"fileOperations":12,"externalRequests":12,"nonceChecks":12,"capabilityChecks":12,"bundledLibraries":264},[],{"prepared":12,"raw":12,"locations":226},[],{"escaped":29,"rawEcho":228,"locations":229},18,[230,234,236,238,240,243,244,245,246,247,248,250,252,254,256,258,260,262],{"file":231,"line":232,"context":233},"php\\content.admin_merchium.php",31,"raw output",{"file":231,"line":235,"context":233},33,{"file":231,"line":237,"context":233},105,{"file":231,"line":239,"context":233},114,{"file":241,"line":242,"context":233},"php\\content.admin_merchium_popup.php",1,{"file":241,"line":242,"context":233},{"file":241,"line":222,"context":233},{"file":241,"line":30,"context":233},{"file":241,"line":31,"context":233},{"file":241,"line":214,"context":233},{"file":249,"line":219,"context":233},"php\\fn.common.php",{"file":251,"line":239,"context":233},"php\\fn.core.php",{"file":251,"line":253,"context":233},168,{"file":251,"line":255,"context":233},176,{"file":251,"line":257,"context":233},219,{"file":251,"line":259,"context":233},227,{"file":251,"line":261,"context":233},283,{"file":251,"line":263,"context":233},298,[],[266,283],{"entryPoint":267,"graph":268,"unsanitizedCount":242,"severity":282},"merchium_ajax_request (php\\fn.core.php:293)",{"nodes":269,"edges":280},[270,275],{"id":271,"type":272,"label":273,"file":251,"line":274},"n0","source","$_POST",295,{"id":276,"type":277,"label":278,"file":251,"line":263,"wp_function":279},"n1","sink","echo() [XSS]","echo",[281],{"from":271,"to":276,"sanitized":206},"medium",{"entryPoint":284,"graph":285,"unsanitizedCount":242,"severity":291},"\u003Cfn.core> (php\\fn.core.php:0)",{"nodes":286,"edges":289},[287,288],{"id":271,"type":272,"label":273,"file":251,"line":274},{"id":276,"type":277,"label":278,"file":251,"line":263,"wp_function":279},[290],{"from":271,"to":276,"sanitized":206},"low",{"summary":293,"deductions":294},"The Merchium v1.0.4 plugin exhibits a mixed security posture. While it demonstrates good practices by not utilizing dangerous functions, avoiding raw SQL queries, and having no recorded vulnerabilities, significant concerns arise from its attack surface and output escaping.  The presence of three unprotected AJAX handlers represents a considerable risk, as these entry points are susceptible to unauthorized access and manipulation if not properly secured.  Furthermore, the very low percentage of properly escaped output (10%) is a critical weakness, suggesting a high probability of cross-site scripting (XSS) vulnerabilities being present. The taint analysis, while indicating no critical or high severity flows, did identify two flows with unsanitized paths, which could potentially be exploited in conjunction with the output escaping issues.\n\nDespite the lack of historical CVEs and a seemingly clean vulnerability record, the static analysis reveals fundamental security shortcomings that could be actively exploited. The combination of easily accessible AJAX endpoints and widespread unescaped output creates a fertile ground for attackers. The absence of nonce checks and capability checks on these AJAX handlers exacerbates this risk.  In conclusion, while the plugin avoids certain common pitfalls, the identified vulnerabilities in its attack surface and output sanitization necessitate immediate attention to mitigate the risk of XSS and unauthorized access.",[295,298,301,304,307],{"reason":296,"points":297},"Unprotected AJAX handlers",15,{"reason":299,"points":300},"Low output escaping rate",12,{"reason":302,"points":303},"Unsanitized paths in taint flows",8,{"reason":305,"points":306},"Missing nonce checks",7,{"reason":308,"points":306},"Missing capability checks","2026-03-17T01:33:06.823Z",{"wat":311,"direct":326},{"assetPaths":312,"generatorPatterns":318,"scriptPaths":319,"versionParams":320},[313,314,315,316,317],"\u002Fwp-content\u002Fplugins\u002Fmerchium\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fmerchium\u002Fcss\u002Fadmin-3.8.css","\u002Fwp-content\u002Fplugins\u002Fmerchium\u002Fcss\u002Ffrontend.css","\u002Fwp-content\u002Fplugins\u002Fmerchium\u002Fjs\u002Fadmin.js","\u002Fwp-content\u002Fplugins\u002Fmerchium\u002Fjs\u002Ffrontend-fragment.js",[],[316,317],[321,322,323,324,325],"merchium\u002Fcss\u002Fadmin.css?ver=","merchium\u002Fcss\u002Fadmin-3.8.css?ver=","merchium\u002Fcss\u002Ffrontend.css?ver=","merchium\u002Fjs\u002Fadmin.js?ver=","merchium\u002Fjs\u002Ffrontend-fragment.js?ver=",{"cssClasses":327,"htmlComments":329,"htmlAttributes":332,"restEndpoints":333,"jsGlobals":334,"shortcodeOutput":336},[328],"merchium-store-page",[330,331],"Merchium code. Please do not remove this line or your Merchium shopping cart will not work properly.","Merchium code end",[218],[],[335],"merchium_opts",[337],"[merchium_store]",{"slug":4,"current_version":6,"total_versions":242,"versions":339},[340],{"version":6,"download_url":23,"svn_tag_url":341,"released_at":25,"has_diff":206,"diff_files_changed":342,"diff_lines":25,"trac_diff_url":25,"vulnerabilities":343,"is_current":213},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fmerchium\u002Ftags\u002F1.0.4\u002F",[],[]]