[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fah_DQfDPr-9GHXgLoUWhemBEEE_MdLB6hPtoO_kYxPA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":39,"analysis":146,"fingerprints":482},"oganro-travel-online-booking-system","Oganro: Hotels, Flights, Transfers, Car Hire, Excursion Search Box","1.0","Oganro","https:\u002F\u002Fprofiles.wordpress.org\u002Foganro\u002F","\u003Ch4>Official Travel Portal Search Box and Widget for Multi Service WordPress Travel Agency Website Developments\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Visit Our Demo\u003C\u002Fstrong> – http:\u002F\u002Ftravelportal.oganro.com\u003C\u002Fp>\n\u003Cp>Oganro Travel Portal Widget is useful to create WordPress based B2C or B2B travel agency websites, which can be integrated to any travel industry wholesale supplier. Service are Hotels, Flights, Airlines, Excursions, Car Hire, Taxi, Transfers, Railway and Cruse.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Important\u003C\u002Fstrong> – We do not make commercial agreements with wholesale suppliers. It is always clients should make sure to complete commercials with respective suppliers.\u003C\u002Fp>\n\u003Ch4>Main Features of travel portal system\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Can be integrated to multiple suppliers or GDS providers via XML\u002FAPI connection.\u003C\u002Fli>\n\u003Cli>Display Real-time rates and availabilities from suppliers.\u003C\u002Fli>\n\u003Cli>Can work with one or more suppliers simultaneously and receive data from all suppliers with one search.\u003C\u002Fli>\n\u003Cli>Dynamic holiday package booking option ready (Multiple product feature)\u003C\u002Fli>\n\u003Cli>PayPal or Custom payment gateway ready\u003C\u002Fli>\n\u003Cli>Secure checkout and real-time booking confirmation.\u003C\u002Fli>\n\u003Cli>All dynamic pages will load under your own SEO friendly URL\u003C\u002Fli>\n\u003Cli>Auto email vouchers\u002FInvoices. Once payment is successful client will receive automated email booking confirmations, hotel vouchers, e-ticket, invoices etc…\u003C\u002Fli>\n\u003Cli>Fully responsive dynamic pages\u003C\u002Fli>\n\u003Cli>Customisable search widget with own branded dynamic pages\u003C\u002Fli>\n\u003Cli>Multi currency & Multi lingual ready\u003C\u002Fli>\n\u003Cli>Turnover report and booking report can be generated through dedicated admin portal. \u003C\u002Fli>\n\u003Cli>Custom report modules ready\u003C\u002Fli>\n\u003Cli>Travel agency can manage their own profit mark-up through dedicated admin portal \u003C\u002Fli>\n\u003Cli>many more features…\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>XML\u002FAPI Suppliers\u002F consolidators for hotels\u003C\u002Fh4>\n\u003Cp>RoomxXML, HotelsPro, TravelPort Universal API,  HotelBeds, Tourico, Travco Holidays, , DOTW, Expedia, TravelPort (Galileo), White Sands, Bonotel Travel, Jac Travel, Miki Travel, Bonotel, Booking.com, Expedia, Go Global Travel\u003C\u002Fp>\n\u003Ch4>Flights xml\u002F flight providers\u003C\u002Fh4>\n\u003Cp>Amadeus, Galileo, Travel Port Universal API , Sabre, Worldspan, Travel Boutique Online (TBO), Travel Fusion\u003C\u002Fp>\n\u003Ch4>Lcc (low cost carriers)\u003C\u002Fh4>\n\u003Cp>Spice Jet, Indigo, Go Air, Air India Express, Air Arabia, Travel Fusion, Mystfly, MyFareBox\u003C\u002Fp>\n\u003Ch4>Transfers\u002FCar Hire Suppliers\u003C\u002Fh4>\n\u003Cp>Auto Europe, Wheelz India, Affordable Car Hire, Holiday Taxis, Resort Hoppa, Hotelbeds\u003C\u002Fp>\n\u003Ch4>Excursions Suppliers\u003C\u002Fh4>\n\u003Cp>Beds Online, Miki, GTA, Tourico Holidays, Hotelbeds\u003C\u002Fp>\n\u003Ch4>Transfers\u003C\u002Fh4>\n\u003Cp>GTA, Miki, HotelBeds\u003C\u002Fp>\n\u003Ch4>Insurance\u003C\u002Fh4>\n\u003Cp>Karvat, Axa, Others:\u003C\u002Fp>\n\u003Ch4>Payment gateway\u002F Merchant Providers\u003C\u002Fh4>\n\u003Cp>Realex, Wirecard, Elavon, Commedia, ePDQ, SagePay, Wirecard, First Data, Amex NTB, HDFC, ICICI, Bean Stream, Bill Desk, Commedia, Done Cash Card, Etisalat, ITZ Cash, Interswitch, OSS Cash Card,TPSL (Tech Process), KNet, Bank of Scotland, Axis Bank, ePDQ, Clear Commerce, NIBL, QNB, Cielo, Veritrans, Fidelity, Mundipagg, Cobrebem, IDBI, HSBC, Mashreq Bank, Benefit, PayU, ATOM, CrediMax, NBE (National Bank of Egypt), Others\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Cem>This plugin is brought to you by http:\u002F\u002Fwww.Oganro.com . Oganro is an experienced travel technology software development company with over 10 years of experience in travel and technology industry\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cp>Quick set-up plug and play\u003Cbr \u002F>\nFully customize front widget\u003Cbr \u002F>\nDirect connect with booking system\u003Cbr \u002F>\nUser-friendly admin interface\u003Cbr \u002F>\nFree and fast support service\u003Cbr \u002F>\nSupport mobile devices\u003Cbr \u002F>\nSupport major browsers FF Chrome IE-10\u003C\u002Fp>\n\u003Ch3>Requirements\u003C\u002Fh3>\n\u003Cp>WordPress Site\u003C\u002Fp>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Cp>Provided below are the facets to be done for configuration of Oganro reservation system plugin\u003C\u002Fp>\n\u003Cp>Visit Settings > Oganro-Reservation\u003C\u002Fp>\n\u003Cp>Edit each section by selecting colours and values\u003C\u002Fp>\n\u003Cp>Click Save\u003C\u002Fp>\n","Travel portal search box, customisable plugin to create search and book travel website with Hotels, Flights, Car Hire, Transfer and Excursions.",70,8936,40,1,"2017-08-16T03:51:00.000Z","4.8.28","4.5","",[20,21,22,23,24],"api","b2b-travel-portal-widget","b2c-travel-search-box","car-hire","flight","https:\u002F\u002Fwww.oganro.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foganro-travel-online-booking-system.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":35,"avg_security_score":36,"avg_patch_time_days":37,"trust_score":36,"computed_at":38},"oganro",8,190,81,30,"2026-04-04T00:44:36.697Z",[40,60,72,99,124],{"slug":41,"name":42,"version":43,"author":7,"author_profile":8,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":16,"requires_at_least":51,"requires_php":18,"tags":52,"homepage":56,"download_link":57,"security_score":58,"vuln_count":14,"unpatched_count":14,"last_vuln_date":59,"fetched_at":30},"oganro-reservation-widget","XML Travel Portal Widget","2.0","\u003Ch4>Travel Portal Widget for WordPress Travel Agency Website Development\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Visit Our Demo\u003C\u002Fstrong> – https:\u002F\u002Ftravelportal.oganro.com\u003C\u002Fp>\n\u003Cp>Oganro Travel Portal Widget is useful to create WordPress based B2C or B2B travel agency website, which can be integrated to any travel industry wholesale supplier who is offering XML\u002F API connections. Travel portal can be work with any travel services such as Hotels, Flights, Airlines, Excursions, Car Hire, Taxi, Transfers, Railway and Cruse.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Important\u003C\u002Fstrong> – We do not make commercial agreements with wholesale suppliers. It is always clients should make sure to complete commercials with respective suppliers.\u003C\u002Fp>\n\u003Ch4>Below is a brief how this plug-in work\u003C\u002Fh4>\n\u003Cp>User need to input search criteria such as Location, Check In, Check Out, No. of nights, No. of rooms, no of adults and children, once they search travel portal widget connected to Oganro central travel portal system to speak to Hotelbeds API and bring down results accordingly. (Search input criteria can be varied depending on the travel supplier or product\u002Fs or service\u002Fs they offered)\u003C\u002Fp>\n\u003Cp>Integrate & create search and book reservation engine which will be connected to Hotel, Reservation engine can work with one or more wholesale suppliers simultaneously through XML API. Once customer find suitable hotel, flight or transfers (or combination as a package) they can add their selected items to shopping cart and check out through online payment gateway and confirm their reservation real-time. Once payment is successful client will receive automated email booking confirmations, hotel vouchers, e-ticket, invoices etc…\u003C\u002Fp>\n\u003Ch4>How WordPress Travel Agency website and Travel Suppliers integrated & communicate to each other?\u003C\u002Fh4>\n\u003Cp>Travel portal widget connected to a centralised travel portal system which is built in Java EE. Your preferred travel supplier\u002Fs and corresponding products\u002Fservices will be integrated to centralised travel portal via corresponding XML\u002FAPI connection.\u003C\u002Fp>\n\u003Cp>Please refer to our \u003Ca href=\"https:\u002F\u002Fen-gb.wordpress.org\u002Fplugins\u002Foganro-reservation-widget\u002Fscreenshots\u002F\" rel=\"nofollow ugc\">plug-in screenshot\u003C\u002Fa> area to see full flow of this plug-in\u003C\u002Fp>\n\u003Cp>You can go through fully functioning demo on below url.\u003Cbr \u002F>\nOur Demo – https:\u002F\u002Ftravelportal.oganro.com\u002F\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Cem>To get this plug-in to work, need three points covered.\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>1) WordPress based travel website (optional)\u003C\u002Fh4>\n\u003Cp>Our plug-in should simply work with latest WordPress versions. If there are any issues, our dedicated development team can make sure to fix them once we complete the set up process. Please note solutions also available for CMS platforms other than WordPress or for any other programming languages \u002F frameworks. Simply contact us to receive further details.\u003C\u002Fp>\n\u003Ch4>2) Account with travel supplier\u002Fs who can provide XML\u002FAPI access ( e.g. HotelsPro, HotelBeds, Roomsxml, TravelPort Universal API etc…)\u003C\u002Fh4>\n\u003Cp>You must have registered with minimum of one XML wholesale supplier with one product\u002Fservice as some suppliers provide more than one travel product\u002Fservice.  (e.g RoomsXml only provide Hotels , on the other hand HotelBeds provide Hotels, Excursions & Transfers ) Oganro travel portal is capable of working with any types of travel wholesale suppliers (Hotels, Flights, Car Hire, Transfers, Excursions etc…). We have listed down few of suppliers XML\u002FAPI providers below.\u003C\u002Fp>\n\u003Ch4>3) Payment Gateway\u002FMerchant Facility (Optional)\u003C\u002Fh4>\n\u003Cp>By default Oganro travel portal is integrated with PayPal, But it also flexible enough to integrate with any payment gateways out there in the market. Just get in touch with us your requirement. Also please note some suppliers\u002Fproducts may not require payment gateway. E.g.  Payment deducted via floating deposit or collect payment once client arrived to the hotel.\u003C\u002Fp>\n\u003Ch4>Main features of travel portal system\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Can be integrated to multiple suppliers or GDS providers via XML\u002FAPI connection.\u003C\u002Fli>\n\u003Cli>Display Real-time rates and availabilities from suppliers.\u003C\u002Fli>\n\u003Cli>Can work with one or more suppliers simultaneously and receive data from all suppliers with one search.\u003C\u002Fli>\n\u003Cli>Dynamic holiday package booking option ready (Multiple product feature)\u003C\u002Fli>\n\u003Cli>PayPal or Custom payment gateway ready\u003C\u002Fli>\n\u003Cli>Secure checkout and real-time booking confirmation.\u003C\u002Fli>\n\u003Cli>All dynamic pages will load under your own SEO friendly URL\u003C\u002Fli>\n\u003Cli>Auto email vouchers\u002FInvoices. Once payment is successful client will receive automated email booking confirmations, hotel vouchers, e-ticket, invoices etc…\u003C\u002Fli>\n\u003Cli>Fully responsive dynamic pages\u003C\u002Fli>\n\u003Cli>Customisable search widget with own branded dynamic pages\u003C\u002Fli>\n\u003Cli>Multi currency & Multi lingual ready\u003C\u002Fli>\n\u003Cli>Turnover report and booking report can be generated through dedicated admin portal. \u003C\u002Fli>\n\u003Cli>Custom report modules ready\u003C\u002Fli>\n\u003Cli>Travel agency can manage their own profit mark-up through dedicated admin portal \u003C\u002Fli>\n\u003Cli>many more features…\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>XML\u002FAPI Suppliers\u002F consolidators for hotels\u003C\u002Fh4>\n\u003Cp>RoomxXML, HotelsPro, TravelPort Universal API,  HotelBeds, Tourico, Travco Holidays, , DOTW, Expedia, TravelPort (Galileo), White Sands, Bonotel Travel, Jac Travel, Miki Travel, Bonotel, Booking.com, Expedia, Go Global Travel\u003C\u002Fp>\n\u003Ch4>Flights xml\u002F flight providers\u003C\u002Fh4>\n\u003Cp>Amadeus, Galileo, Travel Port Universal API , Sabre, Worldspan, Travel Boutique Online (TBO), Travel Fusion\u003C\u002Fp>\n\u003Ch4>Lcc (low cost carriers)\u003C\u002Fh4>\n\u003Cp>Spice Jet, Indigo, Go Air, Air India Express, Air Arabia, Travel Fusion, Mystfly, MyFareBox\u003C\u002Fp>\n\u003Ch4>Transfers\u002FCar Hire Suppliers\u003C\u002Fh4>\n\u003Cp>Auto Europe, Wheelz India, Affordable Car Hire, Holiday Taxis, Resort Hoppa, Hotelbeds\u003C\u002Fp>\n\u003Ch4>Excursions Suppliers\u003C\u002Fh4>\n\u003Cp>Beds Online, Miki, GTA, Tourico Holidays, Hotelbeds\u003C\u002Fp>\n\u003Ch4>Transfers\u003C\u002Fh4>\n\u003Cp>GTA, Miki, HotelBeds\u003C\u002Fp>\n\u003Ch4>Insurance\u003C\u002Fh4>\n\u003Cp>Karvat, Axa, Others:\u003C\u002Fp>\n\u003Ch4>Payment gateway\u002F Merchant Providers\u003C\u002Fh4>\n\u003Cp>Realex, Wirecard, Elavon, Commedia, ePDQ, SagePay, Wirecard, First Data, Amex NTB, HDFC, ICICI, Bean Stream, Bill Desk, Commedia, Done Cash Card, Etisalat, ITZ Cash, Interswitch, OSS Cash Card,TPSL (Tech Process), KNet, Bank of Scotland, Axis Bank, ePDQ, Clear Commerce, NIBL, QNB, Cielo, Veritrans, Fidelity, Mundipagg, Cobrebem, IDBI, HSBC, Mashreq Bank, Benefit, PayU, ATOM, CrediMax, NBE (National Bank of Egypt), Others\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Cem>This plugin is brought to you by http:\u002F\u002Fwww.Oganro.com . Oganro is an experienced travel technology software development company with over 10 years of experience in travel and technology industry\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cp>Quick set-up plug and play\u003Cbr \u002F>\nFully customize front widget\u003Cbr \u002F>\nDirect connect with booking system\u003Cbr \u002F>\nUser-friendly admin interface\u003Cbr \u002F>\nFree and fast support service\u003Cbr \u002F>\nSupport mobile devices\u003Cbr \u002F>\nSupport major browsers FF Chrome IE-10\u003C\u002Fp>\n\u003Ch3>Requirements\u003C\u002Fh3>\n\u003Cp>WordPress Site\u003C\u002Fp>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Cp>Provided below are the facets to be done for configuration of Oganro reservation system plugin\u003C\u002Fp>\n\u003Cp>Visit Settings > Oganro-Reservation\u003C\u002Fp>\n\u003Cp>Edit each section by selecting colours and values\u003C\u002Fp>\n\u003Cp>Click Save\u003C\u002Fp>\n","WordPress Widget which connect to wholesalers\u002Fsuppliers or GDS through XML APIs to power B2B or B2C travel websites.",50,13767,96,4,"2016-08-16T10:57:00.000Z","3.9",[20,21,53,54,55],"b2c-travel-portal-widget","dynamic","gds","http:\u002F\u002Fwww.oganro.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foganro-reservation-widget.2.0.zip",63,"2025-06-19 00:00:00",{"slug":61,"name":62,"version":6,"author":7,"author_profile":8,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":28,"num_ratings":28,"last_updated":67,"tested_up_to":16,"requires_at_least":51,"requires_php":18,"tags":68,"homepage":70,"download_link":71,"security_score":58,"vuln_count":14,"unpatched_count":14,"last_vuln_date":59,"fetched_at":30},"oganro-travel-portal-search-widget-for-hotelbeds-apitude-api","Oganro Travel Portal Search Widget for HotelBeds APITUDE API","\u003Cp>Oganro developed this plugin purely for our clients who wish integrate their WP travel website with HotelBeds XML api for hotels. HotelBeds APIs helps to create and develop travel websites with access to over 75,000 hotel rates & inventories instantly. Also they provide over 10,000 activities and executions. \u003Cstrong>\u003Ca href=\"http:\u002F\u002Ftravelportal.oganro.net\u002Fhotelbeds-apitude-api-wordpress-travel-portal-widget-plug-demo\u002F\" rel=\"nofollow ugc\">Click here for the demo\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Benefit of having our Oganro Travel Portal Search Widget for HotelBeds (Apitude API)\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This widget can be placed on any part of your pages in WordPress site – Hence you will have full control over how you need to layout your web page add rest of the web content related to your travel website.\u003Cbr \u002F>\nOnce it is placed, search widget UI and orientation can be customisable through the dedicated plug-in admin area\u003Cbr \u002F>\nSince you have full control over your WordPress page, you can optimise these landing pages for search engines.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Points to note.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You must register with Hotelbeds directly to obtain their Hotelbeds API Key and Hotelbeds Shared Secret which then you can enter them through your back end of the plugin admin section on your WordPress. You must need these credentials to get your own rates and availabilities provided by Hotelbeds.\u003Cbr \u002F>\nTest API key and test Shared Secret for Test HotelBeds API can be created through below link\u003Cbr \u002F>\nhttps:\u002F\u002Fdeveloper.hotelbeds.com\u002Fmember\u002Fregister\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Below is a brief how this plug-in work\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>User need to input search criteria such as Location, Check In, Check Out, No. of nights, No. of rooms, no of adults and children, once they search travel portal widget connected to Oganro central travel portal system to speak to Hotelbeds API and bring down results accordingly (hence no API development needs) Please refer to our screenshot area to see full flow of this plugin and to see how wordpress system and oganro travel portal system communicate to each other.\u003Cbr \u002F>\nIf you have any further clarification or question feel free to get in touch with us.\u003Cbr \u002F>\nThis plugin is brought to you by http:\u002F\u002Fwww.Oganro.com.\u003C\u002Fp>\n\u003Cp>Our general terms service of this plug-in can be found on our terms and condition section on our website. http:\u002F\u002Fwww.oganro.com\u002Foganro-terms-conditions\u003C\u002Fp>\n\u003Cp>If you are planning to integrate Excursions and Transfers, unfortunately Hotelbeds APITUDE API do not support this facility still, as per our knowledge they are planning to update this in near future. Until then you can use our \u003Ca href=\"https:\u002F\u002Fen-gb.wordpress.org\u002Fplugins\u002Foganro-reservation-widget\u002F\" rel=\"nofollow ugc\">“XML Travel Portal Widget”\u003C\u002Fa> which can be integrated to older version of (Version 2013\u002F12) of API which has all three services (Hotels + Transfers + Excursions)\u003C\u002Fp>\n\u003Cp>You are welcome to \u003Ca href=\"http:\u002F\u002Fwww.oganro.com\u002Fcontact-us\" rel=\"nofollow ugc\">CONTACT US\u003C\u002Fa> if you have any further clarifications.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cp>Quick set-up plug and play\u003Cbr \u002F>\nFully customize front widget\u003Cbr \u002F>\nDirect connect with hotelbeds api to receive your own rates and availabilities.\u003Cbr \u002F>\nUser-friendly admin interface\u003Cbr \u002F>\nFree and fast support service\u003Cbr \u002F>\nResponsive & Support Smart mobile Devices\u003Cbr \u002F>\nSupport major browsers FF Chrome IE-10\u003C\u002Fp>\n\u003Ch3>Requirements\u003C\u002Fh3>\n\u003Cp>WordPress Site\u003C\u002Fp>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Cp>Provided below are the facets to be done for configuration of Oganro reservation system plugin\u003C\u002Fp>\n\u003Cp>Visit Dashboard->Oganro-search-box add required details and customize searchbox\u003C\u002Fp>\n\u003Cp>Edit each section by selecting colours and values\u003C\u002Fp>\n\u003Cp>Click Save Changes\u003C\u002Fp>\n","Oganro HotelBeds search widget will enable for you to build a Wordpress based travel portal website or OTA website without having to worry about all X …",10,2397,"2016-08-04T11:18:00.000Z",[20,21,53,54,69],"hotelbeds","http:\u002F\u002Fwww.oganro.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foganro-travel-portal-search-widget-for-hotelbeds-apitude-api.zip",{"slug":73,"name":74,"version":75,"author":76,"author_profile":77,"description":78,"short_description":79,"active_installs":80,"downloaded":81,"rating":82,"num_ratings":83,"last_updated":84,"tested_up_to":85,"requires_at_least":86,"requires_php":87,"tags":88,"homepage":94,"download_link":95,"security_score":96,"vuln_count":97,"unpatched_count":28,"last_vuln_date":98,"fetched_at":30},"facebook-for-woocommerce","Meta for WooCommerce","3.6.0","Facebook","https:\u002F\u002Fprofiles.wordpress.org\u002Ffacebook\u002F","\u003Cp>This is the official Meta for WooCommerce plugin that connects your WooCommerce website to Facebook, Instagram and WhatsApp. With this plugin, you can install the Facebook pixel, upload your online store catalog, enabling you to easily run dynamic ads and connect your WhatsApp Business account to automatically update customers about their orders.\u003C\u002Fp>\n\u003Cp>Marketing on Meta platforms helps your business build lasting relationships with people, find new customers, and increase sales for your online store. With this Facebook ad extension, reaching the people who matter most to your business is simple. This extension will track the results of your advertising across devices. It will also help you:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Maximize your campaign performance. By setting up the Facebook pixel and building your audience, you will optimize your ads for people likely to buy your products, and reach people with relevant ads on Facebook after they’ve visited your website.\u003C\u002Fli>\n\u003Cli>Find more customers. Connecting your product catalog automatically creates carousel ads that showcase the products you sell and attract more shoppers to your website.\u003C\u002Fli>\n\u003Cli>Generate sales among your website visitors. When you set up the Facebook pixel and connect your product catalog, you can use dynamic ads to reach shoppers when they’re on Facebook with ads for the products they viewed on your website. This will be included in a future release of Meta for WooCommerce.\u003C\u002Fli>\n\u003Cli>Engage with customers on WhatsApp by updating your customers about their orders at every step, freeing up more time for you to focus on your business.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>Before raising a question with Meta Support, please first take a look at the Meta \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fbusiness\u002Fhelp\" rel=\"nofollow ugc\">helpcenter docs\u003C\u002Fa>, by searching for keywords like ‘WooCommerce’ here. If you didn’t find what you were looking for, you can go to \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fbusiness-support-home\" rel=\"nofollow ugc\">Meta Direct Support\u003C\u002Fa> and ask your question.\u003C\u002Fp>\n\u003Cp>When reporting an issue on Meta Direct Support, please give us as many details as possible.\u003Cbr \u002F>\n* Symptoms of your problem\u003Cbr \u002F>\n* Screenshot, if possible\u003Cbr \u002F>\n* Your Facebook page URL\u003Cbr \u002F>\n* Your website URL\u003Cbr \u002F>\n* Current version of Facebook-for-WooCommerce, WooCommerce, WordPress, PHP\u003C\u002Fp>\n\u003Cp>To suggest technical improvements, you can raise an issue on our \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffacebook\u002Ffacebook-for-woocommerce\u002Fissues\" rel=\"nofollow ugc\">Github repository\u003C\u002Fa>.\u003C\u002Fp>\n","Get the Official Meta for WooCommerce plugin for powerful ways to help grow your business.",500000,48379215,44,474,"2026-03-12T09:56:00.000Z","6.9.4","5.6","7.4",[89,90,91,92,93],"catalog-sync","conversions-api","facebook","meta","whatsapp","https:\u002F\u002Fgithub.com\u002Fwoocommerce\u002Ffacebook-for-woocommerce\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffacebook-for-woocommerce.3.6.0.zip",93,3,"2025-10-29 00:00:00",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":80,"downloaded":107,"rating":108,"num_ratings":109,"last_updated":110,"tested_up_to":85,"requires_at_least":111,"requires_php":112,"tags":113,"homepage":119,"download_link":120,"security_score":121,"vuln_count":122,"unpatched_count":28,"last_vuln_date":123,"fetched_at":30},"pixelyoursite","PixelYourSite – Your smart PIXEL (TAG) & API Manager","11.2.0.3","PixelYourSite","https:\u002F\u002Fprofiles.wordpress.org\u002Fpixelyoursite\u002F","\u003Cp>\u003Cstrong>PixelYourSite Free Version: Complete Tracking Solution for the Meta Pixel, Google Analytics 4, and Google Tag Manager.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Easily integrate Meta Pixel with full Conversion API support, Google Analytics 4, and Google Tag Manager into your WordPress site. Plus, use our simple Head and Footer script option to add any custom script you need for advanced tracking and optimization. The Pinterest Tag can be implemented via this \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Fpinterest-tag\" rel=\"nofollow ugc\">paid add-on\u003C\u002Fa>. Similar paid add-ons for the \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Fplugins\u002Fpixelyoursite-professional\u002Fbing-tag-add-on\" rel=\"nofollow ugc\">Bing tag\u003C\u002Fa> and for the \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Fplugins\u002Fpixelyoursite-professional\u002Freddit-wordpress-plugin\" rel=\"nofollow ugc\">Reddit Pixel\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Free training:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>We have a YouTube channel called \u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fchannel\u002FUCnie2zvwAjTLz9B4rqvAlFQ\" rel=\"nofollow ugc\">PixelYourSite\u003C\u002Fa> where we explain a lot of stuff about the plugin, Meta API, Google Analytics, Google Ads, TikTok and so on. Check this one to lean how to setup Meta Conversion API and a few tips to improve your EMQ score:\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FiIbk23Hy_6A?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>\u003Cstrong>PixelYourSite will help you:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Install the Meta Pixel with Conversion API support.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Install Google Analytics 4 (GA4).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Install Google Tag Manager and push events into the data layer with ZERO coding (NEW).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Configure Google Consent Mode: \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Fgoogle-consent-mode-v2-wordpress\" rel=\"nofollow ugc\">check this dedicated page for more details\u003C\u002Fa>.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Configure Google Tag Manager Server-Side Tagging for our native GA4 script: \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Fgoogle-server-side-tagging-with-pixelyoursite\" rel=\"nofollow ugc\">more details here\u003C\u002Fa>.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Install any other scripts with our Head & Footer option.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>PixelYourSite & WooCommerce:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>All e-commerce speciffic events are automatically  fired.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>All parameters required for dynamic ads (Meta or Google) are present.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Flexible options for product IDs (default IDs, or SKU).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>The plugin can also use Facebook for WooCommerce product ID logic. You can use our advanced tracking and Facebook for WooCommerce catalogs.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Client data is used to improve Meta EMQ score for the API events.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>PixelYourSite & Easy Digital Downloads:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>All e-commerce speciffic events are automatically  fired.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>All parameters required for dynamic ads (Meta or Google) are present.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Client data is used to improve Meta EMQ score for the API events.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Track key actions with our automated events:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Searches (search keywords are tracked as parameters).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Form submissions.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>User signups.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>User login.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Downloads (file names and type are tracked as parameters).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Comments.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Page scroll.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Time on page.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Track other actions with your own events:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Configure any standard or custom event for Meta, GA4, or GTM.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Head & Footer functionality. Add your own scripts:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>On all pages.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>On speciffic pages.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>On the WooCommerce order received page.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>For all devices, for desktop, or mobile only.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Consent & GDPR\u003C\u002Fstrong>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>The plugin integrates with some of the most popular consent solutions.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>It has consent filters allowing other consent plugins to control our scripts and cookies.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>It can fire GA4 tags with Google Consent Mode granted.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Dedicated filter that enables Meta Limited Data Use.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>It’s fully integrated with \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Fplugins\u002Fconsentmagic\" rel=\"nofollow ugc\">ConsentMagic\u003C\u002Fa>.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Google Tag Manager\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>PixelYourSite is known for its easy integration of the Meta Pixel, Google Analytics, TikTok (paid), Pinterest (paid add-on), and Bing (paid add-on). What makes it special is its new Google Tag Manager integration, pushing all events into the GTM data layer with no coding required.\u003C\u002Fp>\n\u003Cp>GTM Container Import: to simplify GTM setup we offer you a GTM Container Import file that will configure triggers for all our events and variables for all our parameters. Version 1.0 of this file comes with Google Analytics 4 tags pre-configured: \u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=qKJ3mmCgT3M\" rel=\"nofollow ugc\">Watch this video to learn more\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key resources:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Learn how to \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Fverify-domain-facebook\" rel=\"nofollow ugc\">verify your domain on Facebook\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Learn how to handle \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Fgoogle-consent-mode-v2-wordpress\" rel=\"nofollow ugc\">Google Consent Mode V2\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Learn how to improve \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Ffacebook-event-match-quality-score\" rel=\"nofollow ugc\">Meta EMQ Score\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Learn how tot track \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Ftrack-wordpress-forms\" rel=\"nofollow ugc\">WordPress Forms\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Learn more about \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Fglobal-events\" rel=\"nofollow ugc\">Automated Events\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Learn more about \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Fwoocommerce-first-party-reports\" rel=\"nofollow ugc\">Native WooCommerce Reports\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Learn how to \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Fpixelyoursite-and-chatgpt\" rel=\"nofollow ugc\">analyse PixelYourSite data with ChatGPT\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Learn how to \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Fgoogle-server-side-tagging-with-pixelyoursite\" rel=\"nofollow ugc\">setup GTM server side tagging with the native GA4 integration\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Even more features with our paid plugins:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>PixelYourSite development is supported by our paying customers. We’ve turned \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Fplugins\u002Fpixelyoursite-professional\" rel=\"nofollow ugc\">PixelYourSite Professional\u003C\u002Fa> into a powerful tracking tool. Alongside it, we offer a range of plugins, like the \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Fplugins\u002Fproduct-catalog-feed-for-woocommerce\" rel=\"nofollow ugc\">WooCommerce Feed Plugin\u003C\u002Fa> and our consent management solution, \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Fplugins\u002Fconsentmagic\" rel=\"nofollow ugc\">ConsentMagic\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>The list of paid feature is long and growing:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Support for Google Ads tags.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Support for TikTok tags.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Pinterest and Bing support via paid add-ons.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>More automated events, tracking even more key actions.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>More parameters for our events, including landing page, traffic source, or UTMs tracking.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>More triggers for your own events: Clicks on links and CSS Selectors, Number of Page Views, Mouse over CSS Selectors, Embedded video views, Email link click, Page scroll, Post type, and direct integrations with various Form plugins plus Elementor forms.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>More events triggers on top of the ones available in the free version (URL filters, Device, User role): URL parameters, Landing page, Source.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Better tracking of user data for an improved EMQ score, including the ability to get user data from forms, or URLs.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Improved tracking of WooCommerce and EDD purchases.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Support for multiple tags.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>The possibility to configure where to fire or hide a particular tag based on flexible conditions.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Native WooCommerce and EDD reporting.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>… and many more!\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>DON’T MISS:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Documentation\u003C\u002Fstrong>: learn how to use PixelYourSite free plugin. \u003Ca href=\"https:\u002F\u002Fwww.pixelyoursite.com\u002Fpixelyoursite-free-version\" rel=\"nofollow ugc\">Click here for the HELP articles\u003C\u002Fa>\u003C\u002Fp>\n","Add Meta Pixel with Conversion API, Google Analytics (GA4) + Consent Mode, Google Tag Manager, and Head & Footer scripts.",18938821,86,261,"2026-02-23T11:17:00.000Z","4.4","5.4",[114,115,116,117,118],"google-analytics-4","google-consent-mode-v2","google-tag-manager","meta-conversion-api","meta-pixel","http:\u002F\u002Fwww.pixelyoursite.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpixelyoursite.11.2.0.3.zip",89,11,"2026-02-13 08:43:23",{"slug":125,"name":126,"version":127,"author":76,"author_profile":77,"description":128,"short_description":129,"active_installs":130,"downloaded":131,"rating":132,"num_ratings":133,"last_updated":134,"tested_up_to":135,"requires_at_least":136,"requires_php":137,"tags":138,"homepage":141,"download_link":142,"security_score":143,"vuln_count":144,"unpatched_count":28,"last_vuln_date":145,"fetched_at":30},"official-facebook-pixel","Meta pixel for WordPress","4.1.5","\u003Cp>This plugin will install a Meta Pixel for your page so you can capture the actions people take when they interact with your page, such as Lead, ViewContent, AddToCart, InitiateCheckout and Purchase events. It also includes support for the Conversions API.\u003C\u002Fp>\n\u003Cp>You’ll be able to see when customers took an action after seeing your ad on Facebook and Instagram, which can help you with retargeting. And when you use the Conversions API alongside the Pixel, it creates a more reliable connection that helps the delivery system decrease your costs. \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fbusiness\u002Flearn\u002Ffacebook-ads-pixel\" rel=\"nofollow ugc\">Learn More\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>The Conversions API is designed to create a direct connection between your marketing data and the Meta systems, which help optimise ad targeting, decrease cost per action and measure results across Meta technologies. \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fbusiness\u002Fhelp\u002F2041148702652965?id=818859032317965\" rel=\"nofollow ugc\">Learn More\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>You can find more information about our Privacy Policy \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fprivacy\u002Fpolicy\u002F?entry_point=data_policy_redirect&entry=0\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n","Grow your business with Meta for WordPress!",400000,9980510,54,164,"2025-08-14T12:04:00.000Z","6.8.5","5.7","8.1",[90,91,92,139,140],"meta-ads","pixel","https:\u002F\u002Fwww.facebook.com\u002Fbusiness\u002Fhelp\u002F881403525362441","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fofficial-facebook-pixel.4.1.5.zip",98,2,"2021-03-25 00:00:00",{"attackSurface":147,"codeSignals":163,"taintFlows":432,"riskAssessment":466,"analyzedAt":481},{"hooks":148,"ajaxHandlers":154,"restRoutes":155,"shortcodes":156,"cronEvents":162,"entryPointCount":14,"unprotectedCount":28},[149],{"type":150,"name":151,"callback":151,"priority":65,"file":152,"line":153},"action","admin_menu","classes\\admin\\og-admin-menus.php",36,[],[],[157],{"tag":158,"callback":159,"file":160,"line":161},"og_travel_widget","get_og_travel_widget","og-travel-widget.php",38,[],{"dangerousFunctions":164,"sqlUsage":173,"outputEscaping":175,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":431},[165,170],{"fn":166,"file":167,"line":168,"context":169},"unserialize","classes\\admin\\og-admin-page.php",92,"return unserialize(get_option( 'og_travel_options',''));",{"fn":166,"file":160,"line":171,"context":172},84,"$data = unserialize(get_option('og_travel_options', ''));",{"prepared":28,"raw":28,"locations":174},[],{"escaped":28,"rawEcho":176,"locations":177},132,[178,182,184,186,187,189,190,192,193,195,196,198,201,202,204,205,207,209,211,213,215,217,219,221,223,225,227,229,231,233,234,236,237,239,240,242,244,246,248,250,252,254,256,258,260,262,263,265,267,269,271,273,275,277,279,281,283,285,287,289,291,293,295,297,299,301,303,305,307,309,311,313,315,316,318,320,321,323,325,327,329,331,333,335,337,339,341,343,345,347,349,351,353,355,357,359,361,363,365,367,369,371,373,375,377,379,381,383,385,387,389,391,393,395,396,398,400,402,404,405,407,409,411,413,415,417,419,421,423,425,427,429],{"file":179,"line":180,"context":181},"templates\\og-admin-html-form.php",20,"raw output",{"file":179,"line":183,"context":181},31,{"file":179,"line":185,"context":181},369,{"file":179,"line":185,"context":181},{"file":179,"line":188,"context":181},560,{"file":179,"line":188,"context":181},{"file":179,"line":191,"context":181},574,{"file":179,"line":191,"context":181},{"file":179,"line":194,"context":181},588,{"file":179,"line":194,"context":181},{"file":179,"line":197,"context":181},925,{"file":199,"line":200,"context":181},"templates\\og_travel_widget.php",66,{"file":199,"line":27,"context":181},{"file":199,"line":203,"context":181},88,{"file":199,"line":96,"context":181},{"file":199,"line":206,"context":181},106,{"file":199,"line":208,"context":181},119,{"file":199,"line":210,"context":181},129,{"file":199,"line":212,"context":181},130,{"file":199,"line":214,"context":181},236,{"file":199,"line":216,"context":181},240,{"file":199,"line":218,"context":181},257,{"file":199,"line":220,"context":181},258,{"file":199,"line":222,"context":181},268,{"file":199,"line":224,"context":181},288,{"file":199,"line":226,"context":181},289,{"file":199,"line":228,"context":181},300,{"file":199,"line":230,"context":181},307,{"file":199,"line":232,"context":181},309,{"file":199,"line":232,"context":181},{"file":199,"line":235,"context":181},313,{"file":199,"line":235,"context":181},{"file":199,"line":238,"context":181},323,{"file":199,"line":238,"context":181},{"file":199,"line":241,"context":181},328,{"file":199,"line":243,"context":181},358,{"file":199,"line":245,"context":181},414,{"file":199,"line":247,"context":181},417,{"file":199,"line":249,"context":181},421,{"file":199,"line":251,"context":181},424,{"file":199,"line":253,"context":181},446,{"file":199,"line":255,"context":181},447,{"file":199,"line":257,"context":181},496,{"file":199,"line":259,"context":181},500,{"file":199,"line":261,"context":181},511,{"file":199,"line":261,"context":181},{"file":199,"line":264,"context":181},525,{"file":199,"line":266,"context":181},535,{"file":199,"line":268,"context":181},547,{"file":199,"line":270,"context":181},721,{"file":199,"line":272,"context":181},1149,{"file":199,"line":274,"context":181},1168,{"file":199,"line":276,"context":181},1171,{"file":199,"line":278,"context":181},1191,{"file":199,"line":280,"context":181},1192,{"file":199,"line":282,"context":181},1218,{"file":199,"line":284,"context":181},1219,{"file":199,"line":286,"context":181},1237,{"file":199,"line":288,"context":181},1252,{"file":199,"line":290,"context":181},1253,{"file":199,"line":292,"context":181},1272,{"file":199,"line":294,"context":181},1285,{"file":199,"line":296,"context":181},1315,{"file":199,"line":298,"context":181},1354,{"file":199,"line":300,"context":181},1363,{"file":199,"line":302,"context":181},1386,{"file":199,"line":304,"context":181},1388,{"file":199,"line":306,"context":181},1394,{"file":199,"line":308,"context":181},1398,{"file":199,"line":310,"context":181},1410,{"file":199,"line":312,"context":181},1429,{"file":199,"line":314,"context":181},1446,{"file":199,"line":314,"context":181},{"file":199,"line":317,"context":181},1494,{"file":199,"line":319,"context":181},1510,{"file":199,"line":319,"context":181},{"file":199,"line":322,"context":181},1559,{"file":199,"line":324,"context":181},1574,{"file":199,"line":326,"context":181},1600,{"file":199,"line":328,"context":181},1602,{"file":199,"line":330,"context":181},1606,{"file":199,"line":332,"context":181},1671,{"file":199,"line":334,"context":181},1690,{"file":199,"line":336,"context":181},1693,{"file":199,"line":338,"context":181},1697,{"file":199,"line":340,"context":181},1700,{"file":199,"line":342,"context":181},1704,{"file":199,"line":344,"context":181},1715,{"file":199,"line":346,"context":181},1729,{"file":199,"line":348,"context":181},1778,{"file":199,"line":350,"context":181},1803,{"file":199,"line":352,"context":181},1869,{"file":199,"line":354,"context":181},1873,{"file":199,"line":356,"context":181},1876,{"file":199,"line":358,"context":181},1877,{"file":199,"line":360,"context":181},1886,{"file":199,"line":362,"context":181},1887,{"file":199,"line":364,"context":181},1891,{"file":199,"line":366,"context":181},1892,{"file":199,"line":368,"context":181},1898,{"file":199,"line":370,"context":181},1899,{"file":199,"line":372,"context":181},1904,{"file":199,"line":374,"context":181},1905,{"file":199,"line":376,"context":181},1906,{"file":199,"line":378,"context":181},1911,{"file":199,"line":380,"context":181},1922,{"file":199,"line":382,"context":181},1923,{"file":199,"line":384,"context":181},1924,{"file":199,"line":386,"context":181},1929,{"file":199,"line":388,"context":181},1933,{"file":199,"line":390,"context":181},1937,{"file":199,"line":392,"context":181},1938,{"file":199,"line":394,"context":181},1939,{"file":199,"line":394,"context":181},{"file":199,"line":397,"context":181},1945,{"file":199,"line":399,"context":181},1946,{"file":199,"line":401,"context":181},1947,{"file":199,"line":403,"context":181},1951,{"file":199,"line":403,"context":181},{"file":199,"line":406,"context":181},1957,{"file":199,"line":408,"context":181},1958,{"file":199,"line":410,"context":181},1959,{"file":199,"line":412,"context":181},1964,{"file":199,"line":414,"context":181},1968,{"file":199,"line":416,"context":181},1969,{"file":199,"line":418,"context":181},1973,{"file":199,"line":420,"context":181},1974,{"file":199,"line":422,"context":181},1994,{"file":199,"line":424,"context":181},1995,{"file":199,"line":426,"context":181},1996,{"file":199,"line":428,"context":181},2001,{"file":199,"line":430,"context":181},2005,[],[433,456],{"entryPoint":434,"graph":435,"unsanitizedCount":14,"severity":455},"__construct (classes\\admin\\og-admin-page.php:26)",{"nodes":436,"edges":451},[437,441,445],{"id":438,"type":439,"label":440,"file":167,"line":37},"n0","source","$_POST",{"id":442,"type":443,"label":444,"file":167,"line":37},"n1","transform","→ setOptions()",{"id":446,"type":447,"label":448,"file":167,"line":449,"wp_function":450},"n2","sink","update_option() [Settings Manipulation]",83,"update_option",[452,454],{"from":438,"to":442,"sanitized":453},false,{"from":442,"to":446,"sanitized":453},"low",{"entryPoint":457,"graph":458,"unsanitizedCount":14,"severity":455},"\u003Cog-admin-page> (classes\\admin\\og-admin-page.php:0)",{"nodes":459,"edges":463},[460,461,462],{"id":438,"type":439,"label":440,"file":167,"line":37},{"id":442,"type":443,"label":444,"file":167,"line":37},{"id":446,"type":447,"label":448,"file":167,"line":449,"wp_function":450},[464,465],{"from":438,"to":442,"sanitized":453},{"from":442,"to":446,"sanitized":453},{"summary":467,"deductions":468},"The oganro-travel-online-booking-system plugin v1.0 exhibits a mixed security posture.  On the positive side, it has a very small attack surface with no direct AJAX or REST API entry points requiring authentication. Furthermore, all detected SQL queries are properly prepared, indicating good practice in database interaction.  There are no known CVEs associated with this plugin, suggesting a history of stability or limited public scrutiny.\n\nHowever, significant concerns arise from the static code analysis. The presence of the `unserialize` function, especially without accompanying nonce or capability checks, represents a critical vulnerability. The fact that 100% of outputs are not properly escaped is another major red flag, opening the door to Cross-Site Scripting (XSS) attacks. The taint analysis revealing two flows with unsanitized paths further exacerbates these risks, suggesting that data entering the plugin might not be adequately validated before being processed or outputted. The lack of nonce checks and capability checks on the identified shortcode entry point is also a significant weakness.\n\nIn conclusion, while the plugin benefits from a limited attack surface and secure SQL practices, the high percentage of unescaped output, the dangerous use of `unserialize` without proper checks, and the identified unsanitized taint flows represent substantial security risks that could lead to XSS and potentially Remote Code Execution (RCE) vulnerabilities. The absence of any recorded vulnerabilities could be due to its limited functionality, obscurity, or simply that these vulnerabilities have not yet been discovered or exploited.",[469,472,474,476,479],{"reason":470,"points":471},"Dangerous function unserialize without checks",15,{"reason":473,"points":34},"0% of outputs properly escaped",{"reason":475,"points":65},"Taint analysis shows unsanitized paths",{"reason":477,"points":478},"No nonce checks",5,{"reason":480,"points":478},"No capability checks","2026-03-16T21:39:02.722Z",{"wat":483,"direct":499},{"assetPaths":484,"generatorPatterns":496,"scriptPaths":497,"versionParams":498},[485,486,487,488,489,490,491,492,493,494,495],"\u002Fwp-content\u002Fplugins\u002Foganro-travel-online-booking-system\u002Fcss\u002Fbootstrap.css","\u002Fwp-content\u002Fplugins\u002Foganro-travel-online-booking-system\u002Fcss\u002Fog-travel-widget.css","\u002Fwp-content\u002Fplugins\u002Foganro-travel-online-booking-system\u002Fcss\u002Fbootstrap-datepicker\u002Fbootstrap-datepicker.min.css","\u002Fwp-content\u002Fplugins\u002Foganro-travel-online-booking-system\u002Fcss\u002Ffont-awesome\u002Fcss\u002Ffont-awesome.min.css","\u002Fwp-content\u002Fplugins\u002Foganro-travel-online-booking-system\u002Fjs\u002Fjq-validation\u002Fjquery.validate.min.js","\u002Fwp-content\u002Fplugins\u002Foganro-travel-online-booking-system\u002Fjs\u002Fbootstrap.js","\u002Fwp-content\u002Fplugins\u002Foganro-travel-online-booking-system\u002Fjs\u002Fbootstrap-datepicker.min.js","\u002Fwp-content\u002Fplugins\u002Foganro-travel-online-booking-system\u002Fjs\u002Fog-travel-widget.js","\u002Fwp-content\u002Fplugins\u002Foganro-travel-online-booking-system\u002Fcss\u002Fog-travel.css","\u002Fwp-content\u002Fplugins\u002Foganro-travel-online-booking-system\u002Fjs\u002FjqColorPicker\u002FjqColorPicker.min.js","\u002Fwp-content\u002Fplugins\u002Foganro-travel-online-booking-system\u002Fjs\u002Fog-travel.js",[],[489,490,491,492,494,495],[],{"cssClasses":500,"htmlComments":502,"htmlAttributes":503,"restEndpoints":509,"jsGlobals":510,"shortcodeOutput":512},[501],"og-travel-widget-wrap",[],[504,505,506,507,508],"data-toggle","data-target","data-keyboard","data-backdrop","data-controls-modal",[],[511],"og_travel_data",[513],"[og_travel_widget]"]