[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMrUjSiw7Wx4HMgcgrkFzbzJs3zGF9_VY6AGFJlIxbIE":3},{"slug":4,"name":5,"version":6,"author":4,"author_profile":7,"description":8,"short_description":9,"active_installs":10,"downloaded":11,"rating":12,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":17,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":47,"crawl_stats":36,"alternatives":50,"analysis":142,"fingerprints":216},"metalpriceapi","MetalpriceAPI","1.1.7","https:\u002F\u002Fprofiles.wordpress.org\u002Fmetalpriceapi\u002F","\u003Cp>Display live or historical precious metal prices (Gold, Silver, Platinum, Palladium, …) in over 150+ currencies\u003Cbr \u002F>\nor\u003Cbr \u002F>\nDisplay live or historical foreign exchange (forex) rates in over 150+ currencies\u003C\u002Fp>\n\u003Cp>Use shortcode [metalpriceapi] to display metal rates on your wp website.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fmetalpriceapi.com\u002F\" rel=\"nofollow ugc\">Official Website\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FykpHERqO_gM?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>Shortcode Customization:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>{{symbol}}\u003C\u002Fli>\n\u003Cli>{{base}}\u003C\u002Fli>\n\u003Cli>{{price_round}}\u003C\u002Fli>\n\u003Cli>{{date}}\u003C\u002Fli>\n\u003Cli>{{date_format}}\u003C\u002Fli>\n\u003Cli>{{date_timezone}}\u003C\u002Fli>\n\u003Cli>{{unit}}\u003C\u002Fli>\n\u003Cli>{{purity}}\u003C\u002Fli>\n\u003Cli>{{operation}}\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Display Customization:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>{{base}}\u003C\u002Fli>\n\u003Cli>{{timestamp}}\u003C\u002Fli>\n\u003Cli>{{price}}\u003C\u002Fli>\n\u003Cli>{{symbol}}\u003C\u002Fli>\n\u003Cli>{{date}}\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Detailed instructions included upon plugin installation.\u003C\u002Fp>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>This plugin connects to MetalpriceAPI endpoint to obtain real-time metal & foreign exchange rates. It is needed to show the metal & foreign exchange rates in the included widget.\u003C\u002Fp>\n\u003Cp>This service is provided by “MetalpriceAPI”:\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fmetalpriceapi.com\u002Fterms\" rel=\"nofollow ugc\">Terms of use\u003C\u002Fa>\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fmetalpriceapi.com\u002Fprivacy\" rel=\"nofollow ugc\">Privacy policy\u003C\u002Fa>\u003C\u002Fp>\n","Display live or historical precious metal prices (Gold, Silver, Platinum, Palladium, ...) in over 150+ currencies",600,21754,86,3,"2026-02-17T00:04:00.000Z","6.9.4","5.0","",[19,20,21,22,23],"gold","metals-api","metals-rates","platinum","silver","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmetalpriceapi.1.1.7.zip",98,1,0,"2025-05-22 00:00:00","2026-03-15T15:16:48.613Z",[31],{"id":32,"url_slug":33,"title":34,"description":35,"plugin_slug":4,"theme_slug":36,"affected_versions":37,"patched_in_version":38,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":28,"updated_date":43,"references":44,"days_to_patch":46},"CVE-2025-48140","metalpriceapi-authenticated-contributor-remote-code-execution","MetalpriceAPI \u003C= 1.1.4 - Authenticated (Contributor+) Remote Code Execution","The MetalpriceAPI plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.1.4. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.",null,"\u003C=1.1.4","1.1.5","high",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Improper Control of Generation of Code ('Code Injection')","2025-06-05 17:22:20",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F45eac3e1-db31-4d3d-844f-ae106b9eee7a?source=api-prod",15,{"slug":4,"display_name":4,"profile_url":7,"plugin_count":26,"total_installs":10,"avg_security_score":25,"avg_patch_time_days":46,"trust_score":48,"computed_at":49},93,"2026-04-04T15:19:41.142Z",[51,70,89,106,125],{"slug":52,"name":53,"version":54,"author":55,"author_profile":56,"description":57,"short_description":58,"active_installs":59,"downloaded":60,"rating":27,"num_ratings":27,"last_updated":61,"tested_up_to":62,"requires_at_least":16,"requires_php":17,"tags":63,"homepage":67,"download_link":68,"security_score":69,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":29},"zpt-metals","ZPT Metals","1.2.1","Zactonz Technologies","https:\u002F\u002Fprofiles.wordpress.org\u002Fzactonz\u002F","\u003Cp>A solution provided to display precious Metals(Gold, Silver, Platinum and 36+ metals) rates in the desired currencies (USD,GBP, CAD etc).\u003C\u002Fp>\n\u003Cp>Plugin comes up with a comprehensive controls to display desired date metal rates as well as latest, with the help of short codes with custom WP Editor. Now it support woocommerce, user can enable auto pricing for products by connecting metal from the given metals dropdown.\u003C\u002Fp>\n\u003Cp>Features:\u003Cbr \u002F>\n–   Latest metals rate\u003Cbr \u002F>\n–   Shortcode to display latest\u002Fhistorical rates\u003Cbr \u002F>\n–   Rates in desired currency\u003Cbr \u002F>\n–   Cron job option ( Custom Settings )\u003Cbr \u002F>\n–   Support Woo-commerce\u003Cbr \u002F>\n–   WC Product auto pricing for desired metal\u003C\u002Fp>\n\u003Cp>Supported metals:\u003Cbr \u002F>\n–   Gold\u003Cbr \u002F>\n–   Silver\u003Cbr \u002F>\n–   Platinum\u003Cbr \u002F>\n–   Palladium\u003Cbr \u002F>\n–   Rhodium\u003Cbr \u002F>\n–   Ruthenium\u003Cbr \u002F>\n–   Copper\u003Cbr \u002F>\n–   Aluminum\u003Cbr \u002F>\n–   Nickel\u003Cbr \u002F>\n–   Zinc\u003Cbr \u002F>\n–   Tin\u003Cbr \u002F>\n–   Cobalt\u003Cbr \u002F>\n–   Iridium\u003Cbr \u002F>\n–   Lead\u003Cbr \u002F>\n–   Iron Ore\u003Cbr \u002F>\n–   LBMA GOLD AM\u003Cbr \u002F>\n–   LBMA GOLD PM\u003Cbr \u002F>\n–   LBMA Platinum AM\u003Cbr \u002F>\n–   LBMA Platinum PM\u003Cbr \u002F>\n–   LBMA Palladium AM\u003Cbr \u002F>\n–   LBMA Palladium PM\u003Cbr \u002F>\n–   LME Aluminium\u003Cbr \u002F>\n–   LME Copper\u003Cbr \u002F>\n–   LME Zinc\u003Cbr \u002F>\n–   LME Nickel\u003Cbr \u002F>\n–   LME Lead\u003Cbr \u002F>\n–   LME Tin\u003Cbr \u002F>\n–   Uranium\u003Cbr \u002F>\n–   STEEL-SC\u003Cbr \u002F>\n–   STEEL-RE\u003Cbr \u002F>\n–   STEEL-HR\u003Cbr \u002F>\n–   BRONZE\u003Cbr \u002F>\n–   MG\u003Cbr \u002F>\n–   OSMIUM\u003Cbr \u002F>\n–   RHENIUM\u003Cbr \u002F>\n–   INDIUM\u003Cbr \u002F>\n–   MO\u003Cbr \u002F>\n–   TUNGSTEN\u003C\u002Fp>\n\u003Cp>\u003Cem>Installing and using ZPT Metals Plugin\u003C\u002Fem>\u003Cbr \u002F>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FmxMidL-b-q0?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Cem>How to use ZPT Metals with WooCommerce\u003C\u002Fem>\u003Cbr \u002F>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FBT_pv0Nj9Uc?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Short code details\u003C\u002Fstrong>\u003Cbr \u002F>\nUse shortcode [zpt-metals] to display metal rates on your wp website.\u003C\u002Fp>\n\u003Cp>Following are the params that you can pass to display your desired shortcode output:\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>type\u003Cbr \u002F>\n  Its required to display which metal rates you want to display. Possible value can be any of; gold, silver, platinum, palladium, rhodium, ruthenium\u003Cbr \u002F>\n  Example: [zpt-metals type=”gold”]\u003C\u002Fp>\n\u003Cp>date-format\u003Cbr \u002F>\n  Its optional to display desired date format. Possible value can be any of; Y-m-d, m-d-Y etc.\u003Cbr \u002F>\n  Example: [zpt-metals date-format=”Y-m-d”]\u003C\u002Fp>\n\u003Cp>base\u003Cbr \u002F>\n  Its optional to display rates of metal in a specific currency. Possible value can be any of; USD, GBP etc.\u003Cbr \u002F>\n  Example: [zpt-metals price-round=”USD”]\u003C\u002Fp>\n\u003Cp>price-round\u003Cbr \u002F>\n  Its optional to display desired digits after decimal. Possible value can be any of integer.\u003Cbr \u002F>\n  Example: [zpt-metals price-round=”2″]\u003C\u002Fp>\n\u003Cp>date\u003Cbr \u002F>\n  Its optional to display rates for a specific date. Possible value can be a date(YYYY-MM-DD) format.\u003Cbr \u002F>\n  Example: [zpt-metals date=”2022-03-01″]\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>DISCLAIMER:  This plugin is relying on a 3rd party(metals-api.com) as a service. You will need to get an API key from \u003Ca href=\"https:\u002F\u002Fmetals-api.com\" rel=\"nofollow ugc\">https:\u002F\u002Fmetals-api.com\u003C\u002Fa> and use that key to get metals rate. This plugin is just an interface to fetch latest rates from metals-api.com on the behalf of your API key. \u003Ca href=\"https:\u002F\u002Fmetals-api.com\u002Fprivacy\u002F\" rel=\"nofollow ugc\">Read privacy policies of metals-api\u003C\u002Fa>\u003C\u002Fp>\n","A solution provided to display precious Metals(Gold, Silver, Platinum and 36+ metals) rates in the desired currencies (USD,GBP, CAD etc).",60,3266,"2023-01-09T12:53:00.000Z","6.1.10",[64,20,21,65,66],"gold-rates","silver-rates","zinc","https:\u002F\u002Fdevelopers.zactonz.com\u002Fwp\u002Fplugins\u002Fzpt-metals","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fzpt-metals.1.2.1.zip",85,{"slug":71,"name":72,"version":73,"author":72,"author_profile":74,"description":75,"short_description":76,"active_installs":77,"downloaded":78,"rating":79,"num_ratings":80,"last_updated":81,"tested_up_to":82,"requires_at_least":83,"requires_php":17,"tags":84,"homepage":87,"download_link":88,"security_score":69,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":29},"gold-price-live","Gold Price Live","20.20","https:\u002F\u002Fprofiles.wordpress.org\u002Fgoldpricelive\u002F","\u003Cp>Using only shortcode you can place a gold, silver, platinum and palladium spot price or a chart on your website in pages, posts, widgets. The gold price output is simple plain text allowing you to easily edit the style and look with the WordPress editor. Our FREE Gold Price Live plugin updates 1 time per day in the morning at open. If you need real time pricing or custom branded chart we also have a paid live pricing version on our website that also allows you to integrate real time precious metals pricing into your WooCommerce products. Our paid version also comes with spot price ticker generator. Our paid version also includes the ability to add live precious metals pricing to your Shopify and BigCommerce products! If you have any questions or require assistance email \u003Ca href=\"mailto:info@gold-feed.com\" rel=\"nofollow ugc\">info@gold-feed.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>WANT UP TO THE MINUTE PRICING AND YOUR OWN LOGO ON THE GOLD AND SILVER CHARTS??\u003C\u002Fp>\n\u003Cp>In your WordPress Dashboard go to Settings > Gold_Price_Live and upgrade using the form at the bottom of the page. Your upgrade will include all currencies as well as 30 second updates. It also allows you to price your WooCommerce using live precious metals pricing!\u003C\u002Fp>\n\u003Cp>Advantages over other solutions:\u003C\u002Fp>\n\u003Col>\n\u003Cli>You do not have to hire a developer to place real time precious metals pricing on your WordPress website or blog.\u003C\u002Fli>\n\u003Cli>The prices output are very accurate. Our free plugin updates pricing 1 time per day in the morning when the market opens.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>If you have any questions or need help with the plugin please email us at info@gold-feed.com.\u003C\u002Fp>\n\u003Ch3>Acknowledgments\u003C\u002Fh3>\n\u003Cp>This plugin uses:\u003C\u002Fp>\n\u003Cp>Gold and Silver API from www.gold-feed.com\u003C\u002Fp>\n","Allows you to easily use shortcode to post gold, silver, platinum and palladium spot prices (updated once daily in the morning at 8:20am New York Time …",300,12905,50,8,"2020-02-07T20:14:00.000Z","5.3.21","2.0",[19,85,22,86,23],"palladium","price","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fgold-price-live","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgold-price-live.zip",{"slug":90,"name":91,"version":92,"author":93,"author_profile":94,"description":95,"short_description":96,"active_installs":97,"downloaded":98,"rating":97,"num_ratings":26,"last_updated":99,"tested_up_to":100,"requires_at_least":101,"requires_php":17,"tags":102,"homepage":17,"download_link":105,"security_score":97,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":29},"precious-metals-automated-product-pricing-pro","Precious Metals Automated Product Pricing – Pro","4.0.5","nfusionsolutions","https:\u002F\u002Fprofiles.wordpress.org\u002Fnfusionsolutions\u002F","\u003Cp>As a retailer in the precious metals market it is mission critical for you to have your product pricing as accurate and reliable as possible. We understand that. We also know competition is fierce and margins are thin, which is why you simply can’t afford to compromise when implementing your \u003Ca href=\"https:\u002F\u002Fnfusionsolutions.com\u002Fproducts\u002Fproduct-pricing-catalog\u002F\" title=\"precious metals automated pricing\" rel=\"nofollow ugc\">product pricing\u003C\u002Fa> strategy.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fnfusionsolutions.com\u002F\" title=\"the cloud platform for precious metals\" rel=\"nofollow ugc\">nFusion Solutions\u003C\u002Fa> is the global leader in technology solutions for the Precious Metals market. The nFusion Precious Metals Automated Pricing plugin will solve your mission critical gold, silver, platinum and palladium bullion product pricing needs.\u003C\u002Fp>\n\u003Ch4>Key Benefits\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Automated Real-time precious metals product pricing \u003C\u002Fli>\n\u003Cli>Define and lock in your profit margins \u003C\u002Fli>\n\u003Cli>Mitigate your market risk due to price fluctuations\u003C\u002Fli>\n\u003Cli>Maintain full control of your product prices at all times \u003C\u002Fli>\n\u003Cli>Significantly reduce time, overhead and pricing errors \u003C\u002Fli>\n\u003Cli>Simplify your product pricing processes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Our WooCommerce plugin empowers your organization with much more than just the automated gold price, silver price, platinum price and palladium price for your products, it also provides you with the expertise, support and maintenance from the global technology leader in the Precious Metals market – nFusion Solutions.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>This plugin does require a monthly subscription, and we proudly offer all of the following as part of your monthly costs:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Unlimited live spot Gold, Silver, Platinum and Palladium prices\u003C\u002Fli>\n\u003Cli>Support for volume \u002F tiered product pricing\u003C\u002Fli>\n\u003Cli>Select your weight per product in troy ounces\u003C\u002Fli>\n\u003Cli>Control retail price premiums \u002F markups using fixed dollar amount and or percentages\u003C\u002Fli>\n\u003Cli>Control retail buy back price premiums \u002F markups using fixed dollar amount and or percentages\u003C\u002Fli>\n\u003Cli>Pricing for all major currencies: USD, CAD, EUR, GBP, JPY, AUD, INR, CNY, ZAR, CHF, BRL, ARS, HKD, IDR, MYR, MXN, NZD, NOK, RUB, SAR, SGD, SEK, TWD, THB, AED, VND\u003C\u002Fli>\n\u003Cli>Price coins, bars, numismatics, ingots, jewelry and specialty items\u003C\u002Fli>\n\u003Cli>Ongoing maintenance for subscribed services\u003C\u002Fli>\n\u003Cli>Technical support for subscribed services\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Pricing integration and management is one of the most costly line items in web development company quotes. Most web development companies just don’t have the experience and market knowledge to properly and efficiently implement this critical pricing component – so they generally over bid it. With this plugin, your installation, setup and configuration is simple.\u003C\u002Fp>\n\u003Cp>Avoid overpriced upfront and ongoing one-off custom development costs by leveraging our services, and be up and running today.\u003C\u002Fp>\n\u003Ch4>Precious Metals Automated Product Pricing – Pro services\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Download and install plugin\u003C\u002Fli>\n\u003Cli>Contact us: 1-888-806-3081 option #1 for Sales or sales@nfusionsolutions.com\u003C\u002Fli>\n\u003Cli>Add License Key\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>nFusion Solutions is the technology solutions partner of SIX Financial Information (SFI) in the US. Our solutions are powered with professional grade data feeds through our relationship with SFI. Our live spot prices follow the Globex market which trades from Sunday at 6:00 pm EST through Friday at 4:30 pm EST with daily 45 minute closures from 5:15 to 6:00 pm EST, Monday through Friday.\u003C\u002Fp>\n\u003Cp>Have the peace of mind and ability to easily expand your sales channels while maintaining pricing integrity and reliability.\u003Cbr \u002F>\nVisit: \u003Ca href=\"https:\u002F\u002Fnfusionsolutions.com\u002F\" title=\"the cloud platform for precious metals\" rel=\"nofollow ugc\">nFusionSolutions.com\u003C\u002Fa> | Call: 1-888-806-3081 option #1 for Sales| Email: sales@nfusionsolutions.com\u003C\u002Fp>\n","Automated realtime metals spot and futures data dynamically updates product prices in your store for Gold, Silver, Platinum, and Palladium",100,11097,"2026-01-23T18:08:00.000Z","6.8.5","3.5.0",[19,22,103,23,104],"precious-metal","spot-price","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fprecious-metals-automated-product-pricing-pro.4.0.5.zip",{"slug":107,"name":108,"version":109,"author":110,"author_profile":111,"description":112,"short_description":113,"active_installs":114,"downloaded":115,"rating":27,"num_ratings":27,"last_updated":116,"tested_up_to":15,"requires_at_least":117,"requires_php":118,"tags":119,"homepage":123,"download_link":124,"security_score":97,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":29},"dynamic-metal-price-calculator","Dynamic Metal Price Calculator","3.0.0","Aolo Software","https:\u002F\u002Fprofiles.wordpress.org\u002Faolo\u002F","\u003Cp>Dynamic Metal Price Calculator enables store owners to set gold, silver, and custom metal rates from a simple admin page. Add per-product metadata (metal type, weight, base price, wastage, making charge, markup, GST, shipping) and automatically compute final product prices. Supports variable products with per-variation pricing.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Set gold, silver, and custom metal rates from admin\u003C\u002Fli>\n\u003Cli>Support for 24K, 22K, 20K, and 18K gold\u003C\u002Fli>\n\u003Cli>Per-product weight, base price, wastage, making charge, markup\u003C\u002Fli>\n\u003Cli>Global and per-product GST support\u003C\u002Fli>\n\u003Cli>Global and per-product flat shipping\u003C\u002Fli>\n\u003Cli>Variable product support – set metal pricing for each variation\u003C\u002Fli>\n\u003Cli>Custom metal formulas\u003C\u002Fli>\n\u003Cli>Dynamic price calculation at cart and checkout\u003C\u002Fli>\n\u003C\u002Ful>\n","Dynamic WooCommerce jewellery pricing using live metal rates with support for karat, weight, GST, markup, wastage, shipping, and variable products.",10,594,"2026-02-19T13:21:00.000Z","5.8","7.4",[120,19,121,23,122],"calculator","jewellery","woocommerce","https:\u002F\u002Faolo.software\u002Fdynamic-metal-price-calculator","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdynamic-metal-price-calculator.zip",{"slug":126,"name":127,"version":128,"author":129,"author_profile":130,"description":131,"short_description":132,"active_installs":114,"downloaded":133,"rating":27,"num_ratings":27,"last_updated":134,"tested_up_to":15,"requires_at_least":135,"requires_php":118,"tags":136,"homepage":140,"download_link":141,"security_score":97,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":29},"sound-money-info-quotes-widget","Sound Money Info Quotes Widget","2.1.6","Ideal Managed Solutions","https:\u002F\u002Fprofiles.wordpress.org\u002Fidealmsp\u002F","\u003Cp>Sound Money Info Quotes Widget displays live precious metals and sound money pricing in a clean, customizable ticker for WordPress sites. The plugin retrieves pricing data from trusted third-party sources on a scheduled basis, caches the results locally within WordPress, and renders fast, reliable quote displays without requiring per-page remote API calls.\u003C\u002Fp>\n\u003Cp>Quotes are refreshed automatically in the background and displayed on the front end using a lightweight REST render endpoint. Site owners can choose between a static placement or a scrolling (marquee-style) ticker, customize styling, control refresh behavior, and selectively display specific metals or pricing instruments.\u003C\u002Fp>\n\u003Cp>Pricing data is provided for informational and educational purposes only and is not intended to represent real-time trading or execution prices.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Highlights\u003C\u002Fstrong>\u003Cbr \u002F>\n* Scheduled background pricing updates with local WordPress caching\u003Cbr \u002F>\n* No remote API calls on page load once data is cached\u003Cbr \u002F>\n* Static or scrolling (marquee-style) ticker display\u003Cbr \u002F>\n* Front-end refresh via REST render endpoint\u003Cbr \u002F>\n* Shortcode-based configuration with styling and behavior controls\u003Cbr \u002F>\n* Selective display of specific metals and pricing instruments\u003Cbr \u002F>\n* Compatible with full-page caching, optimization plugins, and CDNs\u003C\u002Fp>\n\u003Cp>This plugin was developed in partnership with \u003Ca href=\"https:\u002F\u002Fsoundmoneyinfo.com\" title=\"Sound Money Info\" rel=\"nofollow ugc\">SoundMoneyInfo.com\u003C\u002Fa> and the \u003Ca href=\"https:\u002F\u002Fcitizens4soundmoney.org\" title=\"Citizen's for Sound Money\" rel=\"nofollow ugc\">Citizens for Sound Money\u003C\u002Fa> as part of an ongoing effort to improve public access to transparent sound money pricing information.\u003C\u002Fp>\n\u003Ch3>Data Sources, Pricing Calculations, and Update Schedule\u003C\u002Fh3>\n\u003Cp>The Sound Money Info Quotes Widget displays precious metals and sound money pricing based on a combination of public market data, published issuer rates, and aggregated dealer pricing. Prices are informational only and are not intended to represent real-time trading or execution quotes.\u003C\u002Fp>\n\u003Cp>Pricing updates generally follow the COMEX trading schedule and do not update during weekends or during the daily COMEX one-hour trading break, except where issuer- or dealer-published pricing is used.\u003C\u002Fp>\n\u003Cp>Update frequency and calculation methods are as follows:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Gold, Silver, Platinum, Palladium, and Copper Spot Prices\u003Cbr \u002F>\nUpdated every 5 minutes using the latest available COMEX market data.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Gold, Silver, Platinum, and Palladium Price per Gram\u003Cbr \u002F>\nCalculated by dividing the respective spot price by 31.1 (grams per troy ounce).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Copper per Ounce\u003Cbr \u002F>\nCalculated by dividing the spot price of copper by 16 (copper is quoted per avoirdupois pound, with 16 ounces per pound).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Aurum Pricing\u003Cbr \u002F>\nCalculated by dividing the gold spot price by 31,103 (milligrams per troy ounce) and multiplying by 2 to reflect the commonly applied milligram gold (MG) market markup.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Gold Eagle, Silver Eagle, and Platinum Eagle Pricing\u003Cbr \u002F>\nCalculated by polling publicly listed prices from major online precious metals dealers and averaging the lowest available prices across the top listings. Dealers may include nationally recognized bullion retailers such as APMEX, SD Bullion, and comparable sources.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Goldback Pricing\u003Cbr \u002F>\nUpdated once daily based on the officially published exchange rate provided by Goldback, Inc.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Kinesis KAU and KAG\u003Cbr \u002F>\nPricing is sourced directly from the Kinesis Monetary System (Kinesis) API.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>All pricing data is cached within WordPress and refreshed on a scheduled basis. Front-end display refresh intervals do not increase external API usage.\u003C\u002Fp>\n\u003Cp>Pricing data is provided for educational and informational purposes only and should not be relied upon for trading or investment decisions.\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin connects to an external API to obtain pricing data that is required to render the ticker.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Service: Sound Money Info Quotes Data API\u003C\u002Fli>\n\u003Cli>What it is used for: Returns the latest precious metals and sound money pricing payload used by this plugin.\u003C\u002Fli>\n\u003Cli>What data is sent and when:\n\u003Cul>\n\u003Cli>The plugin sends an HTTP GET request from your WordPress server to \u003Ccode>https:\u002F\u002Fapi.idealmsp.com\u002Fwebhook\u002Fc4sm\u002F\u003C\u002Fcode>.\u003C\u002Fli>\n\u003Cli>This request is made on a scheduled basis (every 5 minutes via WP-Cron) and may also run on first use if no cached pricing data exists.\u003C\u002Fli>\n\u003Cli>No personal user data is intentionally sent. Like any outbound HTTP request, your server IP address and a standard WordPress user agent string may be transmitted as part of the connection.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>This service is provided by “Ideal Managed Solutions, LLC” \u003Ca href=\"https:\u002F\u002Fidealmanagedsolutions.com\u002Fplugins\u002Fsound-money-info-quotes\u002Fapi-terms\u002F\" title=\"Terms of Use\" rel=\"nofollow ugc\">Terms of Use\u003C\u002Fa> \u002F \u003Ca href=\"https:\u002F\u002Fidealmanagedsolutions.com\u002Fplugins\u002Fsound-money-info-quotes\u002Fprivacy\" title=\"Privacy Policy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The plugin caches the API response locally in WordPress. Front-end refreshes retrieve rendered HTML from your own site via a REST endpoint and do not contact the external API.\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>Use the shortcode:\u003C\u002Fp>\n\u003Cp>[smiqw_ticker]\u003C\u002Fp>\n\u003Cp>The shortcode outputs a live precious metals quotes ticker using cached pricing data.\u003C\u002Fp>\n\u003Ch3>Shortcode Attributes\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>precision\u003Cbr \u002F>\nNumber of decimal places to display for prices.\u003Cbr \u002F>\nDefault: 2\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>bg\u003Cbr \u002F>\nBackground color of the ticker container.\u003Cbr \u002F>\nDefault: #0f172a\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>color\u003Cbr \u002F>\nText color for quote values and labels.\u003Cbr \u002F>\nDefault: #e2e8f0\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>border_color\u003Cbr \u002F>\nBorder color for the ticker container. Set to \u003Ccode>none\u003C\u002Fcode> to disable the border.\u003Cbr \u002F>\nDefault: #e2e8f0\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>font_size\u003Cbr \u002F>\nBase font size (in pixels) for quote text.\u003Cbr \u002F>\nDefault: 16\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>refresh_sec\u003Cbr \u002F>\nFront-end refresh interval in seconds. This controls how often the displayed data is refreshed from cached values and does not increase API usage.\u003Cbr \u002F>\nMinimum: 5\u003Cbr \u002F>\nDefault: 60\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>scroll\u003Cbr \u002F>\nEnable the scrolling (marquee-style) ticker.\u003Cbr \u002F>\nAccepted values: 1, true\u003Cbr \u002F>\nDefault: off (static placement)\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>scroll_speed\u003Cbr \u002F>\nControls the speed of the scrolling ticker. Higher values scroll faster.\u003Cbr \u002F>\nRange: 1–100\u003Cbr \u002F>\nDefault: 70\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>show_metals\u003Cbr \u002F>\nOptional comma-separated list of metal groups to display. If omitted, all available quotes are shown.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Supported values:\u003Cbr \u002F>\n– AU (Gold quotes)\u003Cbr \u002F>\n– AG (Silver quotes)\u003Cbr \u002F>\n– PT (Platinum quotes)\u003Cbr \u002F>\n– PD (Palladium quotes)\u003Cbr \u002F>\n– CU (Copper quotes)\u003Cbr \u002F>\n– GB (Goldback quote)\u003Cbr \u002F>\n– AURUM (Aurum quote)\u003Cbr \u002F>\n– KINESIS (Kinesis KAU and KAG)\u003C\u002Fp>\n\u003Ch3>Examples\u003C\u002Fh3>\n\u003Cp>Static ticker with custom styling:\u003C\u002Fp>\n\u003Cp>[smiqw_ticker precision=”2″ bg=”#0b1220″ color=”#f8fafc” border_color=”none” font_size=”15″]\u003C\u002Fp>\n\u003Cp>Scrolling ticker with slower speed and longer refresh interval:\u003C\u002Fp>\n\u003Cp>[smiqw_ticker scroll=”true” scroll_speed=”40″ refresh_sec=”90″]\u003C\u002Fp>\n\u003Cp>Display only gold, silver, and Goldback quotes:\u003C\u002Fp>\n\u003Cp>[smiqw_ticker show_metals=”AU,AG,GB”]\u003C\u002Fp>\n","A lightweight, cache-friendly ticker widget that displays sound money and precious-metals quotes (gold, silver, Goldback, Kinesis, and more).",163,"2026-02-06T02:58:00.000Z","5.2",[19,137,23,138,139],"precious-metals","sound-money","ticker","https:\u002F\u002Fsoundmoneyinfo.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsound-money-info-quotes-widget.2.1.6.zip",{"attackSurface":143,"codeSignals":165,"taintFlows":173,"riskAssessment":210,"analyzedAt":215},{"hooks":144,"ajaxHandlers":150,"restRoutes":151,"shortcodes":152,"cronEvents":164,"entryPointCount":13,"unprotectedCount":27},[145],{"type":146,"name":147,"callback":146,"file":148,"line":149},"action","admin_menu","index.php",118,[],[],[153,156,160],{"tag":4,"callback":154,"file":148,"line":155},"shortcode",115,{"tag":157,"callback":158,"file":148,"line":159},"metalpriceapi_change","shortcode_change",116,{"tag":161,"callback":162,"file":148,"line":163},"metalpriceapi_carat","shortcode_carat",117,[],{"dangerousFunctions":166,"sqlUsage":167,"outputEscaping":169,"fileOperations":27,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":172},[],{"prepared":27,"raw":27,"locations":168},[],{"escaped":170,"rawEcho":27,"locations":171},53,[],[],[174,192,201],{"entryPoint":175,"graph":176,"unsanitizedCount":27,"severity":191},"saveOption (index.php:123)",{"nodes":177,"edges":188},[178,183],{"id":179,"type":180,"label":181,"file":148,"line":182},"n0","source","$_POST[$name]",135,{"id":184,"type":185,"label":186,"file":148,"line":182,"wp_function":187},"n1","sink","update_option() [Settings Manipulation]","update_option",[189],{"from":179,"to":184,"sanitized":190},true,"low",{"entryPoint":193,"graph":194,"unsanitizedCount":27,"severity":191},"saveHTMLOption (index.php:139)",{"nodes":195,"edges":199},[196,198],{"id":179,"type":180,"label":181,"file":148,"line":197},151,{"id":184,"type":185,"label":186,"file":148,"line":197,"wp_function":187},[200],{"from":179,"to":184,"sanitized":190},{"entryPoint":202,"graph":203,"unsanitizedCount":27,"severity":191},"\u003Cindex> (index.php:0)",{"nodes":204,"edges":208},[205,207],{"id":179,"type":180,"label":206,"file":148,"line":182},"$_POST[$name] (x2)",{"id":184,"type":185,"label":186,"file":148,"line":182,"wp_function":187},[209],{"from":179,"to":184,"sanitized":190},{"summary":211,"deductions":212},"The metalpriceapi plugin v1.1.7 demonstrates a generally good security posture based on the provided static analysis. All identified entry points, including shortcodes, are protected with nonce and capability checks, indicating a commitment to secure development practices. The code adheres to best practices by using prepared statements for all SQL queries and properly escaping all output, eliminating risks associated with SQL injection and Cross-Site Scripting (XSS) originating from the plugin's own code. The absence of dangerous functions, file operations, and critical taint flows further strengthens its security profile.\n\nDespite the strong static analysis, a single historical high-severity vulnerability related to 'Improper Control of Generation of Code' ('Code Injection') is a significant concern. While the vulnerability is listed as currently unpatched for a future date (2025-05-22), the fact that a code injection vulnerability existed in the past suggests a potential weakness in how external or user-supplied data was handled or processed. The plugin also makes three external HTTP requests, which, while not inherently insecure, introduce a dependency on external services that could be compromised or unavailable, potentially impacting functionality and indirectly security if not handled with robust error checking and validation.\n\nIn conclusion, the plugin excels in its current implementation regarding SQL, output escaping, and endpoint protection. However, the past code injection vulnerability, even if patched in newer versions, warrants caution and highlights the importance of ongoing security vigilance. The external HTTP requests represent a minor area for potential improvement in terms of resilience.",[213],{"reason":214,"points":46},"Unpatched high severity CVE (future date)","2026-03-16T19:32:26.303Z",{"wat":217,"direct":226},{"assetPaths":218,"generatorPatterns":220,"scriptPaths":221,"versionParams":223},[219],"\u002Fwp-content\u002Fplugins\u002Fmetalpriceapi\u002Fassets\u002Fcss\u002Ffrontend.css",[],[222],"\u002Fwp-content\u002Fplugins\u002Fmetalpriceapi\u002Fassets\u002Fjs\u002Ffrontend.js",[224,225],"metalpriceapi\u002Fassets\u002Fcss\u002Ffrontend.css?ver=","metalpriceapi\u002Fassets\u002Fjs\u002Ffrontend.js?ver=",{"cssClasses":227,"htmlComments":228,"htmlAttributes":229,"restEndpoints":230,"jsGlobals":231,"shortcodeOutput":232},[],[],[],[],[],[233,234,235],"[metalpriceapi]","[metalpriceapi_change]","[metalpriceapi_carat]"]