[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkyWxmImI2cNreT4sPa0JdWn8C45MKYbIxk_nc00zHrA":3,"$fPLzRnRVs506dKzNDu4jLirve9pWu0TwICIniQTSLgOo":266,"$fqEsLarGUohg1unmMKqDPcAUeRyZg3O3IPaynu2-f8r8":270},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"discovery_status":30,"vulnerabilities":31,"developer":32,"crawl_stats":28,"alternatives":38,"analysis":131,"fingerprints":238},"naimur-email-otp-for-woocommerce","Naimur Email OTP Verification for WooCommerce","1.1.6","Naimur Rahman Nahid","https:\u002F\u002Fprofiles.wordpress.org\u002Fnaimurrahmannahid\u002F","\u003Cp>\u003Cstrong>Naimur Email OTP Verification for WooCommerce\u003C\u002Fstrong> verifies customer email ownership using a One Time Password (OTP) before account creation. Optional Google reCAPTCHA, email logs, activity tracking, and a responsive OTP modal are included.\u003C\u002Fp>\n\u003Cp>This plugin verifies users through a unique OTP sent to their email during:\u003Cbr \u002F>\n– Login\u003Cbr \u002F>\n– Registration\u003C\u002Fp>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cp>Full documentation for setup, usage, and customization is available here:\u003Cbr \u002F>\n👉 \u003Cstrong>https:\u002F\u002Fnaimurrahmannahid.com\u002Fnaimur-otp-plugin\u002F\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Video Tutorial\u003C\u002Fh3>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FAehMWNLxkVk?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch3>🔥 Key Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Email-Based OTP Verification  \u003C\u002Fli>\n\u003Cli>Instant OTP Delivery  \u003C\u002Fli>\n\u003Cli>OTP for Login, Register & Checkout  \u003C\u002Fli>\n\u003Cli>Smart OTP Input UI  \u003C\u002Fli>\n\u003Cli>Custom Email Templates  \u003C\u002Fli>\n\u003Cli>Secure & Anti-Spam Protection  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Additional Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>OTP expiry control  \u003C\u002Fli>\n\u003Cli>Resend button with countdown  \u003C\u002Fli>\n\u003Cli>AJAX-based OTP submit  \u003C\u002Fli>\n\u003Cli>Google reCAPTCHA v2  \u003C\u002Fli>\n\u003Cli>Custom error\u002Fsuccess messages  \u003C\u002Fli>\n\u003Cli>Translation-ready  \u003C\u002Fli>\n\u003Cli>Developer-friendly hooks\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>This plugin can optionally integrate with Google reCAPTCHA to protect the WooCommerce login and registration forms from automated abuse and spam.\u003C\u002Fp>\n\u003Cp>When reCAPTCHA is enabled in the plugin settings and you configure a site key and secret key, the following data is sent to Google:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The reCAPTCHA response token generated in the browser\u003C\u002Fli>\n\u003Cli>The IP address of the user\u003C\u002Fli>\n\u003Cli>Additional browser and usage information collected by the reCAPTCHA widget\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This data is sent when the WooCommerce login or registration form is submitted in order to verify that the request is made by a human user.\u003C\u002Fp>\n\u003Cp>Service provider:\u003Cbr \u002F>\n* Google reCAPTCHA – provided by Google LLC\u003Cbr \u002F>\n* Terms of Service: https:\u002F\u002Fwww.google.com\u002Frecaptcha\u002Fterms\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fpolicies.google.com\u002Fprivacy\u003C\u002Fp>\n\u003Ch3>Source code\u003C\u002Fh3>\n\u003Cp>The JavaScript file \u003Ccode>assets\u002Fjs\u002Fmain.js\u003C\u002Fcode> is a compiled\u002Foptimized build used in production.\u003C\u002Fp>\n\u003Cp>A human-readable source version of this script is bundled with the plugin under:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>assets\u002Fsrc\u002Fjs\u002Fmain.js\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This file contains the original source code that can be viewed, studied and modified by developers.\u003C\u002Fp>\n","Short Description: Verify WooCommerce customer email addresses with a 6-digit OTP before account creation for secure and spam-free registrations.",10,345,100,3,"2025-12-02T10:06:00.000Z","6.9.4","6.0","7.4",[20,21,22,23,24],"customer","email-verification","otp","security","woocommerce","https:\u002F\u002Fnaimurrahmannahid.com\u002Fnaimur-otp-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnaimur-email-otp-for-woocommerce.1.1.6.zip",0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":11,"avg_security_score":13,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"naimurrahmannahid",2,30,94,"2026-05-19T22:54:50.138Z",[39,56,76,92,110],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":27,"downloaded":47,"rating":27,"num_ratings":27,"last_updated":48,"tested_up_to":16,"requires_at_least":49,"requires_php":18,"tags":50,"homepage":53,"download_link":54,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":55},"verifypro-email-otp-for-woocommerce","VerifyPro Email OTP for WooCommerce","1.0.6","haroondev","https:\u002F\u002Fprofiles.wordpress.org\u002Fharoondev\u002F","\u003Cp>\u003Cstrong>VerifyPro Email OTP for WooCommerce\u003C\u002Fstrong> adds professional-grade email verification to your WooCommerce checkout, protecting your store from bot orders and ensuring genuine customer email addresses.\u003C\u002Fp>\n\u003Ch4>🚀 Why VerifyPro?\u003C\u002Fh4>\n\u003Cp>Stop losing revenue to fake orders and bot attacks. VerifyPro adds a simple yet powerful verification layer that ensures every customer has a valid, accessible email address before completing their purchase.\u003C\u002Fp>\n\u003Ch4>✨ Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>6-Digit OTP Codes\u003C\u002Fstrong> – Secure one-time passwords sent instantly via email\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Bot Prevention\u003C\u002Fstrong> – Automatically blocks automated and spam orders\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Zero Configuration\u003C\u002Fstrong> – Works immediately after activation\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Professional UI\u003C\u002Fstrong> – Beautiful, branded interface with purple gradient theme\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Lightning Fast\u003C\u002Fstrong> – AJAX-powered, no page reloads\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Mobile Optimized\u003C\u002Fstrong> – Perfect experience on all devices\u003C\u002Fli>\n\u003Cli>\u003Cstrong>10-Minute Expiry\u003C\u002Fstrong> – OTP codes expire automatically for security\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Session-Based\u003C\u002Fstrong> – Secure verification using WooCommerce sessions\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Translation Ready\u003C\u002Fstrong> – Full internationalization support\u003C\u002Fli>\n\u003Cli>\u003Cstrong>HPOS Compatible\u003C\u002Fstrong> – Supports WooCommerce High-Performance Order Storage\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>🎯 Perfect For\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Online stores experiencing bot\u002Fspam orders\u003C\u002Fli>\n\u003Cli>High-value product sellers\u003C\u002Fli>\n\u003Cli>Subscription-based businesses\u003C\u002Fli>\n\u003Cli>Digital product stores\u003C\u002Fli>\n\u003Cli>Any WooCommerce store wanting verified customer emails\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>💼 How It Works\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Customer fills in billing details and enters email\u003C\u002Fli>\n\u003Cli>VerifyPro verification section appears automatically\u003C\u002Fli>\n\u003Cli>Customer clicks “Send Verification Code”\u003C\u002Fli>\n\u003Cli>6-digit code arrives in their email inbox\u003C\u002Fli>\n\u003Cli>Customer enters code and clicks “Verify”\u003C\u002Fli>\n\u003Cli>Email verified ✓ – Order can be placed\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>🔒 Security Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WordPress nonce verification on all AJAX calls\u003C\u002Fli>\n\u003Cli>Sanitized and escaped data throughout\u003C\u002Fli>\n\u003Cli>Secure transient storage (auto-deleted after 10 minutes)\u003C\u002Fli>\n\u003Cli>Session-based verification status\u003C\u002Fli>\n\u003Cli>No permanent data storage\u003C\u002Fli>\n\u003Cli>CSRF protection\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>🎨 Professional Design\u003C\u002Fh4>\n\u003Cp>VerifyPro features a modern, professional interface with:\u003Cbr \u002F>\n* Purple gradient theme\u003Cbr \u002F>\n* Smooth animations\u003Cbr \u002F>\n* Responsive design\u003Cbr \u002F>\n* Clear status messages\u003Cbr \u002F>\n* Countdown timer\u003Cbr \u002F>\n* Success indicators\u003C\u002Fp>\n\u003Ch4>🌐 Developer Friendly\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Clean, well-documented code\u003C\u002Fli>\n\u003Cli>WordPress Coding Standards compliant\u003C\u002Fli>\n\u003Cli>Properly prefixed functions (verifypro_eotp_)\u003C\u002Fli>\n\u003Cli>Translation ready with .pot file\u003C\u002Fli>\n\u003Cli>Hooks and filters available\u003C\u002Fli>\n\u003Cli>Easy to customize\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy & Data\u003C\u002Fh3>\n\u003Cp>VerifyPro respects user privacy:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>No Personal Data Collection\u003C\u002Fstrong>: The plugin does not collect or store any personal data\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Temporary Storage Only\u003C\u002Fstrong>: OTP codes are stored in WordPress transients for 10 minutes only\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Auto-Deletion\u003C\u002Fstrong>: All verification data is automatically deleted after verification or expiry\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Session-Based\u003C\u002Fstrong>: Verification status uses WooCommerce sessions (temporary)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>No Third-Party Services\u003C\u002Fstrong>: All processing happens on your server\u003C\u002Fli>\n\u003Cli>\u003Cstrong>GDPR Friendly\u003C\u002Fstrong>: No cookies set, no tracking, no external requests\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support, please use the WordPress.org support forums. We monitor and respond to all questions.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Developed by haroondev\u003C\u002Fli>\n\u003Cli>Built with WordPress and WooCommerce best practices\u003C\u002Fli>\n\u003Cli>Uses jQuery for AJAX functionality\u003C\u002Fli>\n\u003Cli>Professional UI design with CSS3 gradients and animations\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Links\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fverifypro-email-otp-for-woocommerce\u002F\" rel=\"ugc\">Plugin Homepage\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fverifypro-email-otp-for-woocommerce\u002F\" rel=\"ugc\">Documentation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fverifypro-email-otp-for-woocommerce\u002F\" rel=\"ugc\">Support Forum\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fharoondev\u002F\" rel=\"nofollow ugc\">Developer\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Professional email verification for WooCommerce. Secure your checkout with OTP codes and prevent bot orders.",224,"2026-03-13T03:52:00.000Z","5.8",[51,21,22,52,24],"checkout-security","spam-prevention","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fverifypro-email-otp-for-woocommerce\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fverifypro-email-otp-for-woocommerce.1.0.0.zip","2026-04-06T09:54:40.288Z",{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":64,"downloaded":65,"rating":13,"num_ratings":66,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":70,"tags":71,"homepage":74,"download_link":75,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"email-otp-login-with-default-login-form","Email OTP Login with default login form","1.0.3","Lalit Yadav","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebnotics\u002F","\u003Cp>This plugin enhances the default WordPress login security by adding a One-Time Password (OTP) verification step via email:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Users log in with their regular email\u002Fusername and password.\u003C\u002Fli>\n\u003Cli>If credentials are valid, an OTP is generated and emailed to the user.\u003C\u002Fli>\n\u003Cli>A popup is shown on the same login page (\u003Ccode>wp-login.php\u003C\u002Fcode>) to enter the OTP.\u003C\u002Fli>\n\u003Cli>Once the correct OTP is entered, the user is logged in.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>To help you get started, there’s a comprehensive video tutorial available that guides you through the process of setting.\u003Cbr \u002F>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FAZ6w1lkltOI?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Secure login via OTP sent to user’s email.\u003C\u002Fli>\n\u003Cli>Role-based OTP enforcement.\u003C\u002Fli>\n\u003Cli>Uses native wp-login.php form — no custom forms required.\u003C\u002Fli>\n\u003Cli>Session-based OTP handling for security.\u003C\u002Fli>\n\u003Cli>Expiring OTP (default: 40 seconds).\u003C\u002Fli>\n\u003Cli>No third-party dependencies.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Donate\u003C\u002Fh3>\n\u003Cp>If you find this plugin useful and want to support its development, you can make a donation via the following link:\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fdonate.stripe.com\u002F3cI5kE7sv6ex30s5LB5kk2x\" rel=\"nofollow ugc\">Donate Here\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Your donation helps to ensure that this plugin remains free and receives regular updates!\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>The plugin development was supported by [webnotics], [sumitkamboj53]. Contributions and feedback are always welcome.\u003C\u002Fp>\n\u003Ch3>Documentation and Support\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwebnotics.org\u002Femail-otp-login-with-default-login-form\u002F\" title=\"documentation\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nFor detailed documentation, visit https:\u002F\u002Fwebnotics.org\u002Femail-otp-login-with-default-login-form\u002F\u003Cbr \u002F>\nFor support, please contact us at \u003Ca href=\"mailto:support@webnotics.solutions\" rel=\"nofollow ugc\">support@webnotics.solutions\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later.\u003C\u002Fp>\n","Adds email OTP (One-Time Password) verification after valid login credentials on the default wp-login.php form for added security.",40,761,6,"2025-08-05T04:08:00.000Z","6.8.5","5.0","7.2",[21,72,22,23,73],"login","two-factor","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Femail-otp-login-with-default-login-form.1.0.3.zip",{"slug":77,"name":78,"version":79,"author":80,"author_profile":81,"description":82,"short_description":83,"active_installs":35,"downloaded":84,"rating":85,"num_ratings":86,"last_updated":87,"tested_up_to":68,"requires_at_least":88,"requires_php":18,"tags":89,"homepage":74,"download_link":91,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"email-otp-login","Email OTP Login","1.0.0","Tushar Sharma","https:\u002F\u002Fprofiles.wordpress.org\u002Fricheal\u002F","\u003Cp>Email OTP Login adds an additional layer of security to your WordPress site by requiring users to verify an OTP sent to their email after entering their username and password. This ensures that only users with access to the registered email can log in.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Email OTP verification during \u003Cstrong>login\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>OTP expires in 5 minutes (configurable).\u003C\u002Fli>\n\u003Cli>OTP stored securely using WordPress password hashing.\u003C\u002Fli>\n\u003Cli>Works with the default WordPress login form.\u003C\u002Fli>\n\u003Cli>Uses WordPress built-in \u003Ccode>wp_mail()\u003C\u002Fcode> function (works with SMTP plugins).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin does \u003Cstrong>not modify WordPress core files\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is free software: you can redistribute it and\u002For modify it under the terms of the GNU General Public License as published by the Free Software Foundation, version 2 or later.\u003C\u002Fp>\n\u003Cp>This plugin is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\u003C\u002Fp>\n","Adds OTP (One-Time Password) verification after login for enhanced security in WordPress. OTP is sent to the user's email.",469,60,1,"2025-08-29T18:30:00.000Z","6.3",[21,72,22,23,90],"two-factor-authentication","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Femail-otp-login.1.0.0.zip",{"slug":93,"name":94,"version":95,"author":96,"author_profile":97,"description":98,"short_description":99,"active_installs":11,"downloaded":100,"rating":13,"num_ratings":86,"last_updated":101,"tested_up_to":16,"requires_at_least":102,"requires_php":18,"tags":103,"homepage":108,"download_link":109,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":55},"authyo-otp-for-contact-form-7","Authyo OTP for Contact Form 7","1.0.23","Konceptwise Digital Media Pvt Ltd","https:\u002F\u002Fprofiles.wordpress.org\u002Fkonceptwise\u002F","\u003Cp>\u003Cstrong>Authyo OTP for Contact Form 7\u003C\u002Fstrong> adds one-time password (OTP) verification to Contact Form 7 forms, ensuring that only verified users can submit entries.\u003C\u002Fp>\n\u003Cp>The plugin supports OTP delivery via \u003Cstrong>Email, SMS, WhatsApp, and Voice Call\u003C\u002Fstrong>, helping reduce spam, prevent fake submissions, and improve overall form security.\u003C\u002Fp>\n\u003Cp>It also includes a \u003Cstrong>per-form redirect option\u003C\u002Fstrong>, allowing site owners to redirect users to a thank-you page or any custom URL after a successful and verified form submission.\u003C\u002Fp>\n\u003Cp>This plugin is an \u003Cstrong>independent add-on for Contact Form 7\u003C\u002Fstrong>, developed and maintained by \u003Cstrong>Konceptwise Digital Media Pvt. Ltd.\u003C\u002Fstrong>, and integrates securely with the Authyo OTP service.\u003C\u002Fp>\n\u003Cp>“This plugin is an add-on for Contact Form 7 and is not developed by or affiliated with the Contact Form 7 authors.”\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n– OTP verification field for Contact Form 7\u003Cbr \u002F>\n– Secure one-time password handling\u003Cbr \u002F>\n– Customizable messages for sent, verified, and failed OTP states\u003Cbr \u002F>\n– Seamless integration with the Authyo OTP service\u003Cbr \u002F>\n– Email, SMS, WhatsApp, and Voice Call OTP support\u003Cbr \u002F>\n– Per-form redirect option after successful submission\u003Cbr \u002F>\n– Google Sheets Integration: Sync form data to Google Sheets automatically\u003Cbr \u002F>\n– Multi-Sheet Support: Route different forms to separate tabs within the same Google Sheet\u003Cbr \u002F>\n– Custom Column Mapping: Map form fields to specific Google Sheet column headers\u003Cbr \u002F>\n– Improved spam protection and form security\u003C\u002Fp>\n\u003Ch4>Live Demo\u003C\u002Fh4>\n\u003Cp>Check the live demo here:\u003Cbr \u002F>\nhttps:\u002F\u002Fwpplugins.authyo.io\u002Fauthyo-otp-for-contact-form-7\u002F\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Video Tutorial How to Use Authyo OTP for Contact Form 7\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FhhBnj1WWDdI?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin connects to the Authyo API to send and verify one-time passwords (OTPs).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Service used:\u003C\u002Fstrong> Authyo (https:\u002F\u002Fapp.authyo.io)\u003Cbr \u002F>\n\u003Cstrong>Purpose:\u003C\u002Fstrong> To send and verify OTPs for Contact Form 7 submissions.\u003Cbr \u002F>\n\u003Cstrong>Data sent:\u003C\u002Fstrong> User email address or phone number and OTP-related data, solely for verification purposes.\u003Cbr \u002F>\n\u003Cstrong>When:\u003C\u002Fstrong> Data is sent when an OTP is requested and when it is verified.\u003Cbr \u002F>\n\u003Cstrong>Provider:\u003C\u002Fstrong> Authyo Inc.\u003Cbr \u002F>\n\u003Cstrong>Terms of Service:\u003C\u002Fstrong> https:\u002F\u002Fauthyo.io\u002Fterms-service\u003Cbr \u002F>\n\u003Cstrong>Privacy Policy:\u003C\u002Fstrong> https:\u002F\u002Fauthyo.io\u002Fprivacy-policy\u003C\u002Fp>\n\u003Ch3>Dependencies\u003C\u002Fh3>\n\u003Cp>This plugin requires the \u003Cstrong>Contact Form 7\u003C\u002Fstrong> plugin to be installed and activated.\u003C\u002Fp>\n\u003Cp>Contact Form 7 is developed by Takayuki Miyoshi and is available for free on WordPress.org:\u003Cbr \u002F>\nhttps:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcontact-form-7\u002F\u003C\u002Fp>\n","Adds OTP verification (Email, SMS, WhatsApp, Voice Call) and Google Sheets Integration (with Multi-Sheet support) to Contact Form 7.",1645,"2026-03-31T05:23:00.000Z","5.5",[104,21,105,106,107],"contact-form-7","form-security","otp-verification","spam-protection","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fauthyo-otp-for-contact-form-7\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fauthyo-otp-for-contact-form-7.1.0.23.zip",{"slug":111,"name":112,"version":113,"author":114,"author_profile":115,"description":116,"short_description":117,"active_installs":118,"downloaded":119,"rating":120,"num_ratings":121,"last_updated":122,"tested_up_to":16,"requires_at_least":123,"requires_php":74,"tags":124,"homepage":74,"download_link":128,"security_score":120,"vuln_count":129,"unpatched_count":27,"last_vuln_date":130,"fetched_at":29},"limit-login-attempts-reloaded","Limit Login Attempts Reloaded – Login Security, 2FA, Brute Force Protection & Firewall","3.1.0","WPChef","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpchefgadget\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.limitloginattempts.com\" rel=\"nofollow ugc\">Limit Login Attempts Reloaded\u003C\u002Fa> functions as a robust deterrent against \u003Ca href=\"https:\u002F\u002Fwww.limitloginattempts.com\u002Fcracking-the-code-unveiling-the-mechanics-behind-brute-force-attacks\u002F\" rel=\"nofollow ugc\">brute force attacks\u003C\u002Fa>, bolstering your website’s security measures and optimizing its performance. It achieves this by \u003Cstrong>restricting the number of login attempts allowed\u003C\u002Fstrong>. This applies not only to the standard login method, but also to XMLRPC, Woocommerce, and custom login pages. With more than 2.5 million active users, this plugin fulfills all your login security requirements.\u003C\u002Fp>\n\u003Cp>The plugin functions by automatically preventing further attempts from a particular Internet Protocol (IP) address and\u002For username once a predetermined limit of retries has been surpassed. This significantly weakens the effectiveness of brute force attacks on your website.\u003C\u002Fp>\n\u003Cp>By default, WordPress permits an unlimited number of login attempts, posing a vulnerability where passwords can be easily deciphered through brute force methods.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Limit Login Attempts Reloaded Premium (Try Free with \u003Ca href=\"https:\u002F\u002Fwww.limitloginattempts.com\u002Fpremium-security-zero-cost-discover-the-benefits-of-micro-cloud\u002F\" rel=\"nofollow ugc\">Micro Cloud\u003C\u002Fa>)\u003C\u002Fstrong>\u003Cbr \u002F>\nUpgrade to \u003Ca href=\"https:\u002F\u002Fwww.limitloginattempts.com\u002Fplans\u002F\" rel=\"nofollow ugc\">Limit Login Attempts Reloaded Premium\u003C\u002Fa> to extend cloud-based protection to the Limit Login Attempts Reloaded plugin, thereby enhancing your login security. The premium version includes a range of highly beneficial features, including \u003Ca href=\"https:\u002F\u002Fwww.limitloginattempts.com\u002Ffeatures\u002Fip-intelligence\u002F\" rel=\"nofollow ugc\">IP intelligence\u003C\u002Fa> to \u003Cstrong>detect, counter and deny malicious login attempts\u003C\u002Fstrong>. Your \u003Ca href=\"https:\u002F\u002Fwww.limitloginattempts.com\u002Ffailed-login-attempts-in-wordpress\u002F\" rel=\"nofollow ugc\">failed login attempts\u003C\u002Fa> will be safely neutralized in the cloud so your website can function at its optimal performance during an attack.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FJfkvIiQft14?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch4>Features (Free Version):\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>2FA\u003C\u002Fstrong> – Enable two-factor authentication for extra login security.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Limit Logins\u003C\u002Fstrong> – Limit the number of retry attempts when logging in (per each IP).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Configurable Lockout Timings\u003C\u002Fstrong> – Modify the amount of time a user or IP must wait after a lockout.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Remaining Tries\u003C\u002Fstrong> – Informs the user about the remaining retries or lockout time on the login page.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Lockout Email Notifications\u003C\u002Fstrong> – Informs the admin via email of lockouts.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Denied Attempt Logs\u003C\u002Fstrong> – View a log of all denied attempts and lockouts.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>IP & Username Safelist\u002FDenylist\u003C\u002Fstrong> – Control access to usernames and IPs.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>New User Registration Protection (Micro Cloud Accounts)\u003C\u002Fstrong> – Protects default WP registration.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Sucuri\u003C\u002Fstrong> compatibility.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Wordfence\u003C\u002Fstrong> compatibility.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ultimate Member\u003C\u002Fstrong> compatibility.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WPS Hide Login\u003C\u002Fstrong> compatibility.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>MemberPress\u003C\u002Fstrong> compatibility.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>XMLRPC\u003C\u002Fstrong> gateway protection.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Woocommerce\u003C\u002Fstrong> login page protection.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multi-site compatibility\u003C\u002Fstrong> with extra MU settings.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>GDPR\u003C\u002Fstrong> compliant.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom IP origins support\u003C\u002Fstrong> (Cloudflare, Sucuri, etc.).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>llar_admin\u003C\u002Fstrong> own capability.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Features (Premium Version):\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Performance Optimizer\u003C\u002Fstrong> – Offload the burden of excessive failed logins from your server to protect your server resources, resulting in improved speed and efficiency of your website.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enhanced IP Intelligence\u003C\u002Fstrong> – Identify repetitive and suspicious login attempts to detect potential brute force attacks. IPs with known malicious activity are stored and used to help prevent and counter future attacks.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enhanced Throttling\u003C\u002Fstrong> – Longer lockout intervals each time a malicious IP or username tries to login unsuccessfully.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Deny By Country\u003C\u002Fstrong> – \u003Ca href=\"https:\u002F\u002Fwww.limitloginattempts.com\u002Fblock-logins-by-country-in-wordpress\u002F\" rel=\"nofollow ugc\">Block logins by country\u003C\u002Fa> by simply selecting the countries you want to deny.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Auto IP Denylist\u003C\u002Fstrong> – Automatically add IP addresses to your active cloud deny list that repeatedly fail login attempts.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>New User Registration Protection\u003C\u002Fstrong> – Protects default WP registration.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Global Denylist Protection\u003C\u002Fstrong> – Utilize our active cloud IP data from thousands of websites in the LLAR network.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Synchronized Lockouts\u003C\u002Fstrong> –  Lockout IP data can be shared between multiple domains for enhanced protection in your network.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Synchronized Safelist\u002FDenylist\u003C\u002Fstrong> – Safelist\u002FDenylist IP and username data can be shared between multiple domains.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Premium Support\u003C\u002Fstrong> – Email support with a security tech.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Auto Backups of All IP Data\u003C\u002Fstrong> – Store your active IP data in the cloud.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Successful Logins Log\u003C\u002Fstrong> – Store successful logins in the cloud including IP info, city, state and lat\u002Flong.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enhanced lockout logs\u003C\u002Fstrong> – Gain valuable insights into the origins of IPs that are attempting logins.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CSV Download of IP Data\u003C\u002Fstrong> – Download IP data direclty from the cloud.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Supports IPV6 Ranges For Safelist\u002FDenylist\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Unlock The Locked Admin\u003C\u002Fstrong> – Easily \u003Ca href=\"https:\u002F\u002Fwww.limitloginattempts.com\u002Fhow-to-unlock-your-site-if-you-are-locked-out-by-limit-login-attempts-reloaded\u002F\" rel=\"nofollow ugc\">unlock the locked admin\u003C\u002Fa> through the cloud.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>*Some features require higher level plans.\u003C\u002Fp>\n\u003Ch4>Upgrading from the old Limit Login Attempts plugin?\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Go to the Plugins section in your site’s backend.\u003C\u002Fli>\n\u003Cli>Remove the Limit Login Attempts plugin.\u003C\u002Fli>\n\u003Cli>Install the Limit Login Attempts Reloaded plugin.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>All your settings will be kept intact!\u003C\u002Fp>\n\u003Cp>Many languages are currently supported in the Limit Login Attempts Reloaded plugin but we welcome any additional ones.\u003C\u002Fp>\n\u003Cp>Help us bring Limit Login Attempts Reloaded to even more countries.\u003C\u002Fp>\n\u003Cp>Translations: Bulgarian, Brazilian Portuguese, Catalan, Chinese (Traditional), Czech, Dutch, Finnish, French, German, Hungarian, Norwegian, Persian, Romanian, Russian, Spanish, Swedish, Turkish\u003C\u002Fp>\n\u003Cp>Plugin uses standard actions and filters only.\u003C\u002Fp>\n\u003Cp>Based on the original code from Limit Login Attempts plugin by Johan Eenfeldt.\u003C\u002Fp>\n\u003Ch4>Branding Guidelines\u003C\u002Fh4>\n\u003Cp>Limit Login Attempts Reloaded™ is a trademark of Atlantic Silicon Inc. When writing about the plugin, please make sure to use Reloaded after Limit Login Attempts. Limit Login Attempts is the old plugin.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Limit Login Attempts Reloaded (correct)\u003C\u002Fli>\n\u003Cli>Limit Login Attempts (incorrect)\u003C\u002Fli>\n\u003C\u002Ful>\n","Stop password guessing attacks, secure WooCommerce, block bad IPs, block by countries (Pro), and add email 2FA. Lightweight with better performance.",2000000,83296786,98,1447,"2026-04-09T18:49:00.000Z","3.0",[125,126,127,23,24],"2fa","brute-force","firewall","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flimit-login-attempts-reloaded.3.1.0.zip",4,"2023-12-20 00:00:00",{"attackSurface":132,"codeSignals":203,"taintFlows":229,"riskAssessment":230,"analyzedAt":237},{"hooks":133,"ajaxHandlers":184,"restRoutes":197,"shortcodes":198,"cronEvents":202,"entryPointCount":129,"unprotectedCount":27},[134,140,146,150,154,158,160,163,167,170,174,178,181],{"type":135,"name":136,"callback":137,"file":138,"line":139},"filter","wp_mail_content_type","anonymous","includes\\class-emails.php",34,{"type":141,"name":142,"callback":143,"file":144,"line":145},"action","admin_menu","menu","includes\\class-logs.php",9,{"type":135,"name":147,"callback":148,"priority":11,"file":149,"line":66},"woocommerce_locate_template","locate","includes\\class-override.php",{"type":141,"name":151,"callback":152,"file":149,"line":153},"wp_enqueue_scripts","enqueue_override_css",7,{"type":135,"name":155,"callback":156,"priority":11,"file":157,"line":66},"woocommerce_process_login_errors","validate_login_recaptcha","includes\\class-security.php",{"type":141,"name":142,"callback":143,"file":159,"line":66},"includes\\class-settings.php",{"type":141,"name":161,"callback":162,"file":159,"line":153},"admin_init","register",{"type":135,"name":164,"callback":165,"file":166,"line":66},"manage_users_columns","col","includes\\class-users.php",{"type":135,"name":168,"callback":169,"priority":11,"file":166,"line":153},"manage_users_custom_column","col_content",{"type":135,"name":171,"callback":172,"file":166,"line":173},"manage_users_sortable_columns","sortable",8,{"type":141,"name":151,"callback":175,"file":176,"line":177},"closure","naimur-email-otp-for-woocommerce.php",35,{"type":141,"name":179,"callback":175,"file":176,"line":180},"woocommerce_register_form",67,{"type":141,"name":182,"callback":175,"file":176,"line":183},"wp_footer",75,[185,191,194],{"action":186,"nopriv":187,"callback":188,"hasNonce":187,"hasCapCheck":189,"file":190,"line":66},"ceovw_send_code",true,"send_code",false,"includes\\class-ajax.php",{"action":192,"nopriv":187,"callback":193,"hasNonce":187,"hasCapCheck":189,"file":190,"line":153},"ceovw_verify_code","verify_code",{"action":195,"nopriv":189,"callback":196,"hasNonce":187,"hasCapCheck":187,"file":159,"line":145},"ceovw_preview_template","preview_template",[],[199],{"tag":200,"callback":201,"file":159,"line":173},"naimur_email_otp_code","shortcode_code",[],{"dangerousFunctions":204,"sqlUsage":205,"outputEscaping":207,"fileOperations":27,"externalRequests":86,"nonceChecks":227,"capabilityChecks":86,"bundledLibraries":228},[],{"prepared":27,"raw":27,"locations":206},[],{"escaped":208,"rawEcho":145,"locations":209},72,[210,213,214,216,217,219,221,223,225],{"file":144,"line":211,"context":212},31,"raw output",{"file":159,"line":177,"context":212},{"file":159,"line":215,"context":212},36,{"file":159,"line":215,"context":212},{"file":159,"line":218,"context":212},139,{"file":176,"line":220,"context":212},68,{"file":222,"line":129,"context":212},"templates\\modal.php",{"file":224,"line":35,"context":212},"templates\\woocommerce\\myaccount\\form-login.php",{"file":224,"line":226,"context":212},56,5,[],[],{"summary":231,"deductions":232},"The plugin 'naimur-email-otp-for-woocommerce' v1.1.6 exhibits a generally strong security posture based on the provided static analysis. The absence of any known CVEs and a clean vulnerability history suggest a commitment to security or a lack of discovered issues, which is a positive indicator. The code analysis reveals a well-protected attack surface, with all identified entry points (AJAX handlers, REST API routes, shortcodes) appearing to have proper authorization checks. The plugin also demonstrates good practices by utilizing prepared statements for all SQL queries and a high percentage of properly escaped output. Furthermore, the presence of nonce and capability checks on critical functions bolsters its security.  However, a slight concern arises from the single external HTTP request, as the nature and sanitization of this request are not detailed. While the current analysis indicates no critical or high-severity issues in taint flows, the absence of any taint analysis flows analyzed (0 total flows analyzed) means we cannot be entirely certain about potential vulnerabilities in data handling.  Overall, the plugin appears to be secure and well-developed, with the primary area for further scrutiny being the details of the external HTTP request and the potential for unseen vulnerabilities due to limited taint analysis.",[233,235],{"reason":234,"points":227},"External HTTP requests present potential risks.",{"reason":236,"points":227},"No taint analysis performed limits certainty on data handling.","2026-03-16T23:51:42.681Z",{"wat":239,"direct":251},{"assetPaths":240,"generatorPatterns":244,"scriptPaths":245,"versionParams":247},[241,242,243],"\u002Fwp-content\u002Fplugins\u002Fnaimur-email-otp-for-woocommerce\u002Fassets\u002Fcss\u002Fmodal.css","\u002Fwp-content\u002Fplugins\u002Fnaimur-email-otp-for-woocommerce\u002Fassets\u002Fjs\u002Fboot.js","\u002Fwp-content\u002Fplugins\u002Fnaimur-email-otp-for-woocommerce\u002Fassets\u002Fjs\u002Fmain.js",[],[246],"https:\u002F\u002Fwww.google.com\u002Frecaptcha\u002Fapi.js",[248,249,250],"naimur-email-otp-for-woocommerce\u002Fassets\u002Fcss\u002Fmodal.css?ver=","naimur-email-otp-for-woocommerce\u002Fassets\u002Fjs\u002Fboot.js?ver=","naimur-email-otp-for-woocommerce\u002Fassets\u002Fjs\u002Fmain.js?ver=",{"cssClasses":252,"htmlComments":257,"htmlAttributes":258,"restEndpoints":260,"jsGlobals":262,"shortcodeOutput":264},[253,254,255,256],"naimur-email-otp-for-woocommerce-modal-backdrop","naimur-email-otp-for-woocommerce-modal","ceovw-otp-input","ceovw-full-name-field",[],[259],"data-modal-id",[261],"\u002Fwp-json\u002Fnaimur-email-otp-for-woocommerce\u002Fv1\u002Fverify_otp",[263],"CEOVW",[265],"[naimur_email_otp_code]",{"error":187,"url":267,"statusCode":268,"statusMessage":269,"message":269},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fnaimur-email-otp-for-woocommerce\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":86,"versions":271},[272],{"version":6,"download_url":26,"svn_tag_url":273,"released_at":28,"has_diff":189,"diff_files_changed":274,"diff_lines":28,"trac_diff_url":28,"vulnerabilities":275,"is_current":187},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fnaimur-email-otp-for-woocommerce\u002Ftags\u002F1.1.6\u002F",[],[]]