[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTgUqDXjV31FifIi5_3Y7eaSYSoHNCKtvIAMotuqVBkE":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":13,"vuln_count":11,"unpatched_count":11,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":35,"analysis":131,"fingerprints":441},"one-time-email-access-guard","One Time Email Access Guard","1.1.0","Marco Gargano","https:\u002F\u002Fprofiles.wordpress.org\u002Fmarcogargano\u002F","\u003Cp>Protect pages and posts with email-delivered verification codes. Secure, passwordless access control with user management and customization.\u003C\u002Fp>\n\u003Ch3>✅ Features\u003C\u002Fh3>\n\u003Cp>One Time Email Access Guard \u003Cstrong>protects your WordPress pages and posts\u003C\u002Fstrong> using email-delivered verification codes. Each authorized user receives a time-limited code, allowing secure access without traditional passwords.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Email-Based Verification\u003C\u002Fstrong>: Send secure verification codes via email\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User Management\u003C\u002Fstrong>: Create and manage authorized users with contact details\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Content Protection\u003C\u002Fstrong>: Enable protection per page\u002Fpost with user assignment\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable Access\u003C\u002Fstrong>: Set custom access duration and expiration dates\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Modal Customization\u003C\u002Fstrong>: Customize colors, opacity, and appearance\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Protected Content Tracking\u003C\u002Fstrong>: Monitor all protected pages and authorized users\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Secure Cookies\u003C\u002Fstrong>: Maintain login sessions with secure access tokens\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Faccess-guard.github.io\u002F\" rel=\"nofollow ugc\">👉👉👉 Visit the official page 👈👈👈\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>😌 Easy to use\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\u003Cstrong>Create user\u003C\u002Fstrong> under Access Guard\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Activate user\u003C\u002Fstrong> in the page\u002Fpost page\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FXE4d496uPUc?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch3>🛡️ Secure\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>🪜 Up to 3 security levels available\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Configurable in settings:\u003Cbr \u002F>\n1️⃣ \u003Cstrong>Phone number\u003C\u002Fstrong> – Required ✦✧✧\u003Cbr \u002F>\nTwo-factor authentication: enter your phone number to receive a code by email\u003Cbr \u002F>\n2️⃣ \u003Cstrong>First name\u003C\u002Fstrong> – Optional ✦✦✧\u003Cbr \u002F>\nThree-factor authentication: phone number + first namenome\u003Cbr \u002F>\n3️⃣ \u003Cstrong>Last name\u003C\u002Fstrong> – Optional ✦✦✦\u003Cbr \u002F>\nMulti-factor authentication: phone number + first name + last name\u003C\u002Fp>\n\u003Ch3>🧰 All Features\u003C\u002Fh3>\n\u003Ch4>🔐 Advanced Security\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Passwordless access via email verification codes\u003C\u002Fli>\n\u003Cli>Email based One Time Password (OTP) access\u003C\u002Fli>\n\u003Cli>User verification with name and phone number\u003C\u002Fli>\n\u003Cli>Verification codes expire after 15 minutes\u003C\u002Fli>\n\u003Cli>Secure access tokens via cookies\u003C\u002Fli>\n\u003Cli>International phone support (195+ countries)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>🎨 Fully Customizable\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Custom modal colors (overlay, background, text)\u003C\u002Fli>\n\u003Cli>Adjustable opacity and shadow\u003C\u002Fli>\n\u003Cli>Custom titles and messages\u003C\u002Fli>\n\u003Cli>Professional HTML email templates\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>👥 User Management\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Create users with name, email, and phone\u003C\u002Fli>\n\u003Cli>Enable\u002Fdisable users instantly with toggle switch\u003C\u002Fli>\n\u003Cli>Custom access duration (15 min to unlimited)\u003C\u002Fli>\n\u003Cli>Optional expiration date and time\u003C\u002Fli>\n\u003Cli>User status indicator with visual feedback\u003C\u002Fli>\n\u003Cli>Bulk operations (activate\u002Fdeactivate all users)\u003C\u002Fli>\n\u003Cli>Bulk expiry date setting\u003C\u002Fli>\n\u003Cli>CSV import\u002Fexport for user data\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>🔒 Content Protection\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Enable protection per page\u002Fpost\u003C\u002Fli>\n\u003Cli>Assign authorized users with multi-select\u003C\u002Fli>\n\u003Cli>Protection status column in admin\u003C\u002Fli>\n\u003Cli>Real-time user status display (active\u002Fexpired)\u003C\u002Fli>\n\u003Cli>Quick edit access from protected pages list\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>📊 Monitoring\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>View all protected pages\u002Fposts\u003C\u002Fli>\n\u003Cli>See authorized users\u003C\u002Fli>\n\u003Cli>Direct quick-edit access\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>⚙️ Flexible Configuration\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Optional first name and last name fields\u003C\u002Fli>\n\u003Cli>Custom blocked-content messages\u003C\u002Fli>\n\u003Cli>Modal color customization (overlay, background, text)\u003C\u002Fli>\n\u003Cli>Adjustable overlay opacity\u003C\u002Fli>\n\u003Cli>Toggle modal shadow effects\u003C\u002Fli>\n\u003Cli>Reset all settings to default\u003C\u002Fli>\n\u003C\u002Ful>\n","Protect pages and posts with email-delivered verification codes. Secure, passwordless access control with user management and customization.",0,172,100,1,"2026-02-25T22:19:00.000Z","6.9.4","5.0","7.2",[20,21,22,23,24],"access-control","authentication","otp","passwordless","security","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-time-email-access-guard.1.1.0.zip",null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":13,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"marcogargano",30,94,"2026-04-04T03:55:41.490Z",[36,56,78,94,113],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":16,"requires_at_least":49,"requires_php":18,"tags":50,"homepage":54,"download_link":55,"security_score":13,"vuln_count":11,"unpatched_count":11,"last_vuln_date":27,"fetched_at":28},"two-factor","Two Factor","0.15.0","WordPress.org","https:\u002F\u002Fprofiles.wordpress.org\u002Fwordpressdotorg\u002F","\u003Cp>The Two-Factor plugin adds an extra layer of security to your WordPress login by requiring users to provide a second form of authentication in addition to their password.  This helps protect against unauthorized access even if passwords are compromised.\u003C\u002Fp>\n\u003Ch3>Setup Instructions\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Important\u003C\u002Fstrong>: Each user must individually configure their two-factor authentication settings.  There are no site-wide settings for this plugin.\u003C\u002Fp>\n\u003Ch3>For Individual Users\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\u003Cstrong>Navigate to your profile\u003C\u002Fstrong>: Go to “Users” \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> “Your Profile” in the WordPress admin\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Find Two-Factor Options\u003C\u002Fstrong>: Scroll down to the “Two-Factor Options” section\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Choose your methods\u003C\u002Fstrong>: Enable one or more authentication providers (noting a site admin may have hidden one or more so what is available could vary):\n\u003Cul>\n\u003Cli>\u003Cstrong>Authenticator App (TOTP)\u003C\u002Fstrong> – Use apps like Google Authenticator, Authy, or 1Password\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Email Codes\u003C\u002Fstrong> – Receive one-time codes via email\u003C\u002Fli>\n\u003Cli>\u003Cstrong>FIDO U2F Security Keys\u003C\u002Fstrong> – Use physical security keys (requires HTTPS)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Backup Codes\u003C\u002Fstrong> – Generate one-time backup codes for emergencies\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Dummy Method\u003C\u002Fstrong> – For testing purposes only (requires WP_DEBUG)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Configure each method\u003C\u002Fstrong>: Follow the setup instructions for each enabled provider\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Set primary method\u003C\u002Fstrong>: Choose which method to use as your default authentication\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Save changes\u003C\u002Fstrong>: Click “Update Profile” to save your settings\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>For Site Administrators\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>No global settings\u003C\u002Fstrong>: This plugin operates on a per-user basis only. For more, see \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FWordPress\u002Ftwo-factor\u002Fissues\u002F249\" rel=\"nofollow ugc\">GH#249\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User management\u003C\u002Fstrong>: Administrators can configure 2FA for other users by editing their profiles\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Security recommendations\u003C\u002Fstrong>: Encourage users to enable backup methods to prevent account lockouts\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Available Authentication Methods\u003C\u002Fh3>\n\u003Ch3>Authenticator App (TOTP) – Recommended\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Security\u003C\u002Fstrong>: High – Time-based one-time passwords\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Setup\u003C\u002Fstrong>: Scan QR code with authenticator app\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Compatibility\u003C\u002Fstrong>: Works with Google Authenticator, Authy, 1Password, and other TOTP apps\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Best for\u003C\u002Fstrong>: Most users, provides excellent security with good usability\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Backup Codes – Recommended\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Security\u003C\u002Fstrong>: Medium – One-time use codes\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Setup\u003C\u002Fstrong>: Generate 10 backup codes for emergency access\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Compatibility\u003C\u002Fstrong>: Works everywhere, no special hardware needed\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Best for\u003C\u002Fstrong>: Emergency access when other methods are unavailable\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Email Codes\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Security\u003C\u002Fstrong>: Medium – One-time codes sent via email\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Setup\u003C\u002Fstrong>: Automatic – uses your WordPress email address\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Compatibility\u003C\u002Fstrong>: Works with any email-capable device\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Best for\u003C\u002Fstrong>: Users who prefer email-based authentication\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>FIDO U2F Security Keys\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Security\u003C\u002Fstrong>: High – Hardware-based authentication\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Setup\u003C\u002Fstrong>: Register physical security keys (USB, NFC, or Bluetooth)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Requirements\u003C\u002Fstrong>: HTTPS connection required, compatible browser needed\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Browser Support\u003C\u002Fstrong>: Chrome, Firefox, Edge (varies by key type)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Best for\u003C\u002Fstrong>: Users with security keys who want maximum security\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Dummy Method\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Security\u003C\u002Fstrong>: None – Always succeeds\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Setup\u003C\u002Fstrong>: Only available when WP_DEBUG is enabled\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Purpose\u003C\u002Fstrong>: Testing and development only\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Best for\u003C\u002Fstrong>: Developers testing the plugin\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Important Notes\u003C\u002Fh3>\n\u003Ch3>HTTPS Requirement\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>FIDO U2F Security Keys require an HTTPS connection to function\u003C\u002Fli>\n\u003Cli>Other methods work on both HTTP and HTTPS sites\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Browser Compatibility\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>FIDO U2F requires a compatible browser and may not work on all devices\u003C\u002Fli>\n\u003Cli>TOTP and email methods work on all devices and browsers\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Account Recovery\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Always enable backup codes to prevent being locked out of your account\u003C\u002Fli>\n\u003Cli>If you lose access to all authentication methods, contact your site administrator\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Security Best Practices\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Use multiple authentication methods when possible\u003C\u002Fli>\n\u003Cli>Keep backup codes in a secure location\u003C\u002Fli>\n\u003Cli>Regularly review and update your authentication settings\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For more information about two-factor authentication in WordPress, see the \u003Ca href=\"https:\u002F\u002Fdeveloper.wordpress.org\u002Fadvanced-administration\u002Fsecurity\u002Fmfa\u002F\" rel=\"nofollow ugc\">WordPress Advanced Administration Security Guide\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For more history, see \u003Ca href=\"https:\u002F\u002Fgeorgestephanis.wordpress.com\u002F2013\u002F08\u002F14\u002Ftwo-cents-on-two-factor\u002F\" rel=\"nofollow ugc\">this post\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Actions & Filters\u003C\u002Fh4>\n\u003Cp>Here is a list of action and filter hooks provided by the plugin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>two_factor_providers\u003C\u002Fcode> filter overrides the available two-factor providers such as email and time-based one-time passwords. Array values are PHP classnames of the two-factor providers.\u003C\u002Fli>\n\u003Cli>\u003Ccode>two_factor_providers_for_user\u003C\u002Fcode> filter overrides the available two-factor providers for a specific user. Array values are instances of provider classes and the user object \u003Ccode>WP_User\u003C\u002Fcode> is available as the second argument.\u003C\u002Fli>\n\u003Cli>\u003Ccode>two_factor_enabled_providers_for_user\u003C\u002Fcode> filter overrides the list of two-factor providers enabled for a user. First argument is an array of enabled provider classnames as values, the second argument is the user ID.\u003C\u002Fli>\n\u003Cli>\u003Ccode>two_factor_user_authenticated\u003C\u002Fcode> action which receives the logged in \u003Ccode>WP_User\u003C\u002Fcode> object as the first argument for determining the logged in user right after the authentication workflow.\u003C\u002Fli>\n\u003Cli>\u003Ccode>two_factor_user_api_login_enable\u003C\u002Fcode> filter restricts authentication for REST API and XML-RPC to application passwords only. Provides the user ID as the second argument.\u003C\u002Fli>\n\u003Cli>\u003Ccode>two_factor_email_token_ttl\u003C\u002Fcode> filter overrides the time interval in seconds that an email token is considered after generation. Accepts the time in seconds as the first argument and the ID of the \u003Ccode>WP_User\u003C\u002Fcode> object being authenticated.\u003C\u002Fli>\n\u003Cli>\u003Ccode>two_factor_email_token_length\u003C\u002Fcode> filter overrides the default 8 character count for email tokens.\u003C\u002Fli>\n\u003Cli>\u003Ccode>two_factor_backup_code_length\u003C\u002Fcode> filter overrides the default 8 character count for backup codes. Provides the \u003Ccode>WP_User\u003C\u002Fcode> of the associated user as the second argument.\u003C\u002Fli>\n\u003Cli>\u003Ccode>two_factor_rest_api_can_edit_user\u003C\u002Fcode> filter overrides whether a user’s Two-Factor settings can be edited via the REST API. First argument is the current \u003Ccode>$can_edit\u003C\u002Fcode> boolean, the second argument is the user ID.\u003C\u002Fli>\n\u003Cli>\u003Ccode>two_factor_before_authentication_prompt\u003C\u002Fcode> action which receives the provider object and fires prior to the prompt shown on the authentication input form.\u003C\u002Fli>\n\u003Cli>\u003Ccode>two_factor_after_authentication_prompt\u003C\u002Fcode> action which receives the provider object and fires after the prompt shown on the authentication input form.\u003C\u002Fli>\n\u003Cli>\u003Ccode>two_factor_after_authentication_input\u003C\u002Fcode>action which receives the provider object and fires after the input shown on the authentication input form (if form contains no input, action fires immediately after \u003Ccode>two_factor_after_authentication_prompt\u003C\u002Fcode>).\u003C\u002Fli>\n\u003C\u002Ful>\n","Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), Universal 2nd Factor (U2F), email, and backup verification codes.",100000,1526344,96,199,"2026-02-17T13:21:00.000Z","6.8",[51,21,52,24,53],"2fa","mfa","totp","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftwo-factor\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftwo-factor.0.15.0.zip",{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":64,"downloaded":65,"rating":66,"num_ratings":67,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":25,"tags":71,"homepage":74,"download_link":75,"security_score":76,"vuln_count":14,"unpatched_count":11,"last_vuln_date":77,"fetched_at":28},"google-authenticator","Google Authenticator","0.54","Ivan","https:\u002F\u002Fprofiles.wordpress.org\u002Fivankk\u002F","\u003Cp>The Google Authenticator plugin for WordPress gives you two-factor authentication using the Google Authenticator app for Android\u002FiPhone\u002FBlackberry.\u003C\u002Fp>\n\u003Cp>If you are security aware, you may already have the Google Authenticator app installed on your smartphone, using it for two-factor authentication on Gmail\u002FDropbox\u002FLastpass\u002FAmazon etc.\u003C\u002Fp>\n\u003Cp>The two-factor authentication requirement can be enabled on a per-user basis. You could enable it for your administrator account, but log in as usual with less privileged accounts.\u003C\u002Fp>\n\u003Cp>If You need to maintain your blog using an Android\u002FiPhone app, or any other software using the XMLRPC interface, you can enable the App password feature in this plugin,\u003Cbr \u002F>\nbut please note that enabling the App password feature will make your blog less secure.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Thanks to:\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fevinak\u002F\" rel=\"nofollow ugc\">Oleksiy\u003C\u002Fa> for a bugfix in multisite.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fpancek\" rel=\"nofollow ugc\">Paweł Nowacki\u003C\u002Fa> for the Polish translation\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002FFabioZumbi12\" rel=\"nofollow ugc\">Fabio Zumbi\u003C\u002Fa> for the Portuguese translation\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.guidoschalkx.com\u002F\" rel=\"nofollow ugc\">Guido Schalkx\u003C\u002Fa> for the Dutch translation.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.paypal.com\u002Fcgi-bin\u002Fwebscr?cmd=_donations&business=henrik%40schack%2edk&lc=US&item_name=Google%20Authenticator&item_number=Google%20Authenticator&no_shipping=0&no_note=1&tax=0&bn=PP%2dDonationsBF&charset=UTF%2d8\" rel=\"nofollow ugc\">Henrik.Schack\u003C\u002Fa> for writing\u002Fmaintaining versions 0.20 through 0.48\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Ftobias.baethge.com\u002F\" rel=\"nofollow ugc\">Tobias Bäthge\u003C\u002Fa> for his code rewrite and German translation.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fblog.pcode.nl\u002F\" rel=\"nofollow ugc\">Pascal de Bruijn\u003C\u002Fa> for his “relaxed mode” idea.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Ftechnobabbl.es\u002F\" rel=\"nofollow ugc\">Daniel Werl\u003C\u002Fa> for his usability tips.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fdd32.id.au\u002F\" rel=\"nofollow ugc\">Dion Hulse\u003C\u002Fa> for his bugfixes.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fusers\u002Faldolat\u002F\" rel=\"nofollow ugc\">Aldo Latino\u003C\u002Fa> for his Italian translation.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.kaijia.me\u002F\" rel=\"nofollow ugc\">Kaijia Feng\u003C\u002Fa> for his Simplified Chinese translation.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.buayacorp.com\u002F\" rel=\"nofollow ugc\">Alex Concha\u003C\u002Fa> for his security tips.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fjetienne.com\u002F\" rel=\"nofollow ugc\">Jerome Etienne\u003C\u002Fa> for his jquery-qrcode plugin.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Forizhial.com\u002F\" rel=\"nofollow ugc\">Sébastien Prunier\u003C\u002Fa> for his Spanish and French translation.\u003C\u002Fp>\n","Google Authenticator for your WordPress blog.",20000,687508,86,134,"2022-07-04T04:55:00.000Z","6.0.11","4.5",[21,72,22,73,24],"login","password","https:\u002F\u002Fgithub.com\u002Fivankruchkoff\u002Fgoogle-authenticator","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgoogle-authenticator.0.54.zip",85,"2016-04-28 00:00:00",{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":86,"downloaded":87,"rating":13,"num_ratings":88,"last_updated":89,"tested_up_to":16,"requires_at_least":17,"requires_php":90,"tags":91,"homepage":25,"download_link":93,"security_score":13,"vuln_count":11,"unpatched_count":11,"last_vuln_date":27,"fetched_at":28},"easy-basic-authentication","Easy Basic Authentication – Add basic auth to site or admin area","3.9.1","Matteo Enna","https:\u002F\u002Fprofiles.wordpress.org\u002Fmatteoenna\u002F","\u003Cp>The Easy Basic Authentication plugin provides a simple method to add basic authentication to your WordPress site. You can enable basic authentication for the entire site or only for the admin area by setting a custom username and password. Secure your site by restricting access only to authorized users.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Try it on a free mock site: \u003Ca href=\"https:\u002F\u002Ftastewp.org\u002Fplugins\u002Feasy-basic-authentication\u002F\" rel=\"nofollow ugc\">click here\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Simple Configuration:\u003C\u002Fstrong> With Easy Basic Authentication, you can easily set up basic authentication for your entire website or specifically for the admin area. Set a custom username and password to ensure secure access.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Admin Area Protection:\u003C\u002Fstrong> If you wish to restrict access to your WordPress admin area, Easy Basic Authentication allows you to do so quickly and effectively. Only users with the correct credentials will be able to access this critical part of your site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Entire site protection:\u003C\u002Fstrong> If you wish, there is an option to extend the access limitation to the entire site and not just for your WordPress admin area, Easy Basic authentication allows you to do this quickly and effectively. Only users with the correct credentials will be able to access this critical part of your site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Failed Access Logging:\u003C\u002Fstrong> The plugin keeps track of failed login attempts, helping you identify unauthorized access attempts. This is particularly useful for monitoring your site’s security.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Access Log:\u003C\u002Fstrong> If you choose to enable this feature, Easy Basic Authentication allows you to log successful logins, providing a comprehensive overview of login activities on your site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Easy Management:\u003C\u002Fstrong> The plugin’s intuitive interface makes it simple to manage basic authentication settings. You can easily enable or disable basic authentication and adjust credentials to suit your needs.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Email Alert Functionality:\u003C\u002Fstrong> Easy Basic Authentication includes an email alert feature to notify you of unauthorized access attempts. You can receive email alerts when someone tries to access your site without proper credentials.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>White List Functionality:\u003C\u002Fstrong> Easy Basic Authentication now includes a White List feature, allowing you to specify trusted IP addresses exempt from basic authentication. Configure this list to grant immediate access to known users or systems without requiring credentials, enhancing convenience while maintaining security.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Protect your WordPress site with basic authentication quickly and reliably. Easy Basic Authentication gives you control to ensure that only authorized users can access your online resources. Maintain your site’s security and prevent unwanted access today with Easy Basic Authentication.\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Visit the plugin settings page to configure your desired basic authentication options.\u003C\u002Fli>\n\u003Cli>Choose whether to enable basic authentication for the entire site or just the admin area.\u003C\u002Fli>\n\u003Cli>Set a custom username and password for secure access.\u003C\u002Fli>\n\u003Cli>Monitor failed access attempts and access logs for added security.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Troubleshooting: Resetting Basic Authentication\u003C\u002Fh3>\n\u003Cp>If you’re having trouble logging in due to the basic authentication, you can reset it and regain access by following these steps:\u003C\u002Fp>\n\u003Cp>1 \u003Cstrong>Connect to your website via FTP.\u003C\u002Fstrong>\u003Cbr \u002F>\n2 \u003Cstrong>Navigate to the plugin directory:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>wp-content\u002Fplugins\u002Feasy-basic-authentication\u002Fclass\u002F\u003C\u002Fpre>\n\u003Cp>3 \u003Cstrong>Locate the file:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>easy-basic-authentication-class.php\u003C\u002Fpre>\n\u003Cp>4 \u003Cstrong>Find the following line:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>add_action( 'init', array($this,'basic_auth_admin') );\u003C\u002Fpre>\n\u003Cp>5 \u003Cstrong>Comment out that line\u003C\u002Fstrong> by adding a \u003Ccode>#\u003C\u002Fcode> at the beginning:\u003C\u002Fp>\n\u003Cpre>#add_action( 'init', array($this,'basic_auth_admin') );\u003C\u002Fpre>\n\u003Cp>6 \u003Cstrong>Save the file\u003C\u002Fstrong> and re-upload it to your server.\u003C\u002Fp>\n\u003Cp>This will disable the basic authentication temporarily, allowing you to log in. Once logged in, you can adjust the plugin settings as needed.\u003C\u002Fp>\n\u003Cp>If you need further assistance, feel free to reach out.\u003C\u002Fp>\n\u003Ch3>GitHub Repository\u003C\u002Fh3>\n\u003Cp>You can find the source code and contribute to the project on GitHub: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FEllusu\u002Feasy-basic-authentication\" rel=\"nofollow ugc\">Easy Basic Authentication on GitHub\u003C\u002Fa>\u003C\u002Fp>\n","Secure your WordPress site with easy and effective basic authentication. Restrict access, monitor attempts, and enhance security.",600,11185,3,"2025-12-03T06:03:00.000Z","7.2.5",[20,21,72,24,92],"wordpress-security","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-basic-authentication.3.9.1.zip",{"slug":95,"name":96,"version":97,"author":98,"author_profile":99,"description":100,"short_description":101,"active_installs":13,"downloaded":102,"rating":33,"num_ratings":88,"last_updated":103,"tested_up_to":104,"requires_at_least":105,"requires_php":106,"tags":107,"homepage":110,"download_link":111,"security_score":112,"vuln_count":11,"unpatched_count":11,"last_vuln_date":27,"fetched_at":28},"biometric-authentication","Biometric Authentication","0.3.8","Ivan Kristianto","https:\u002F\u002Fprofiles.wordpress.org\u002Fivankristianto\u002F","\u003Cp>This innovative plugin introduces passkey login to your WordPress experience. No more struggling to remember complex passwords.\u003Cbr \u002F>\nSimply use your fingerprint, face ID, or a secure PIN to log in with ease. You can still use your username and password to login to your site as fallback.\u003C\u002Fp>\n\u003Ch3>Enhanced Security, Frictionless Access:\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Effortless Login: Unlock the power of passkeys for a smooth and secure login experience.\u003C\u002Fli>\n\u003Cli>Superior Security: Passkeys offer enhanced protection against breaches compared to traditional passwords.\u003C\u002Fli>\n\u003Cli>Convenience at Your Fingertips: Enjoy the freedom of logging in with your biometrics or a secure PIN.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>GitHub Repository\u003C\u002Fh3>\n\u003Cp>You can find the source code of this plugin on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fivankristianto\u002Fwp-passkey\u002F\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>\u003C\u002Fp>\n","Passkeys are a safer and easier alternative to passwords. Simply use your fingerprint or face ID to log in with ease.",2889,"2024-05-01T04:23:00.000Z","6.5.8","6.1","8.1",[21,108,109,23,24],"biometric","passkey","https:\u002F\u002Fgithub.com\u002Fivankristianto\u002Fwp-passkey\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbiometric-authentication.0.3.8.zip",92,{"slug":114,"name":115,"version":116,"author":117,"author_profile":118,"description":119,"short_description":120,"active_installs":32,"downloaded":121,"rating":122,"num_ratings":14,"last_updated":123,"tested_up_to":124,"requires_at_least":125,"requires_php":126,"tags":127,"homepage":25,"download_link":130,"security_score":13,"vuln_count":11,"unpatched_count":11,"last_vuln_date":27,"fetched_at":28},"email-otp-login","Email OTP Login","1.0.0","Tushar Sharma","https:\u002F\u002Fprofiles.wordpress.org\u002Fricheal\u002F","\u003Cp>Email OTP Login adds an additional layer of security to your WordPress site by requiring users to verify an OTP sent to their email after entering their username and password. This ensures that only users with access to the registered email can log in.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Email OTP verification during \u003Cstrong>login\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>OTP expires in 5 minutes (configurable).\u003C\u002Fli>\n\u003Cli>OTP stored securely using WordPress password hashing.\u003C\u002Fli>\n\u003Cli>Works with the default WordPress login form.\u003C\u002Fli>\n\u003Cli>Uses WordPress built-in \u003Ccode>wp_mail()\u003C\u002Fcode> function (works with SMTP plugins).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin does \u003Cstrong>not modify WordPress core files\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is free software: you can redistribute it and\u002For modify it under the terms of the GNU General Public License as published by the Free Software Foundation, version 2 or later.\u003C\u002Fp>\n\u003Cp>This plugin is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\u003C\u002Fp>\n","Adds OTP (One-Time Password) verification after login for enhanced security in WordPress. OTP is sent to the user's email.",403,60,"2025-08-29T18:30:00.000Z","6.8.5","6.3","7.4",[128,72,22,24,129],"email-verification","two-factor-authentication","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Femail-otp-login.1.0.0.zip",{"attackSurface":132,"codeSignals":241,"taintFlows":397,"riskAssessment":434,"analyzedAt":440},{"hooks":133,"ajaxHandlers":224,"restRoutes":234,"shortcodes":235,"cronEvents":240,"entryPointCount":88,"unprotectedCount":11},[134,140,144,148,152,157,162,165,169,172,176,179,182,185,189,192,196,200,203,207,209,213,216,219],{"type":135,"name":136,"callback":137,"file":138,"line":139},"action","init","register_post_types","includes\\class-oteag-access-plugin.php",71,{"type":135,"name":141,"callback":142,"file":138,"line":143},"admin_menu","register_admin_menu",72,{"type":135,"name":145,"callback":146,"file":138,"line":147},"add_meta_boxes","register_meta_boxes",73,{"type":135,"name":149,"callback":150,"file":138,"line":151},"manage_posts_extra_tablenav","render_bulk_expiry_form",77,{"type":135,"name":153,"callback":154,"priority":155,"file":138,"line":156},"save_post","save_content_meta",10,78,{"type":158,"name":159,"callback":160,"file":138,"line":161},"filter","manage_post_posts_columns","add_content_columns",79,{"type":158,"name":163,"callback":160,"file":138,"line":164},"manage_page_posts_columns",80,{"type":135,"name":166,"callback":167,"priority":155,"file":138,"line":168},"manage_post_posts_custom_column","render_content_columns",81,{"type":135,"name":170,"callback":167,"priority":155,"file":138,"line":171},"manage_page_posts_custom_column",82,{"type":135,"name":173,"callback":174,"file":138,"line":175},"pre_get_posts","handle_user_sorting",84,{"type":158,"name":177,"callback":178,"priority":155,"file":138,"line":76},"enter_title_here","filter_enter_title_here",{"type":158,"name":180,"callback":181,"file":138,"line":66},"single_template","filter_single_template",{"type":158,"name":183,"callback":181,"file":138,"line":184},"page_template",87,{"type":135,"name":186,"callback":187,"file":138,"line":188},"template_redirect","handle_frontend_submission",88,{"type":135,"name":136,"callback":190,"file":138,"line":191},"register_shortcodes",89,{"type":135,"name":193,"callback":194,"file":138,"line":195},"wp_enqueue_scripts","enqueue_frontend_styles",90,{"type":135,"name":197,"callback":198,"file":138,"line":199},"wp_head","output_custom_modal_styles",91,{"type":158,"name":201,"callback":202,"priority":155,"file":138,"line":112},"default_title","set_default_user_title",{"type":135,"name":204,"callback":205,"file":138,"line":206},"admin_init","register_settings",93,{"type":135,"name":204,"callback":208,"file":138,"line":33},"handle_plugin_data_reset",{"type":135,"name":210,"callback":211,"file":138,"line":212},"admin_notices","show_bulk_update_notice",97,{"type":135,"name":204,"callback":214,"file":138,"line":215},"handle_csv_export",98,{"type":135,"name":204,"callback":217,"file":138,"line":218},"handle_csv_import",99,{"type":135,"name":220,"callback":221,"file":222,"line":223},"plugins_loaded","oteag_access_manager_bootstrap","one-time-email-access-guard.php",28,[225,231],{"action":226,"nopriv":227,"callback":228,"hasNonce":229,"hasCapCheck":227,"file":138,"line":230},"oteag_bulk_expiry_update",false,"handle_bulk_expiry_update",true,95,{"action":232,"nopriv":227,"callback":233,"hasNonce":229,"hasCapCheck":227,"file":138,"line":46},"oteag_bulk_status_update","handle_bulk_status_update",[],[236],{"tag":237,"callback":238,"file":138,"line":239},"oteag_access_form","render_shortcode_form",773,[],{"dangerousFunctions":242,"sqlUsage":243,"outputEscaping":246,"fileOperations":394,"externalRequests":11,"nonceChecks":395,"capabilityChecks":244,"bundledLibraries":396},[],{"prepared":244,"raw":11,"locations":245},4,[],{"escaped":247,"rawEcho":143,"locations":248},174,[249,252,254,256,258,260,262,264,266,268,270,272,274,276,278,280,282,284,286,288,290,292,294,296,298,300,302,304,306,308,310,312,314,316,318,320,322,324,326,328,330,332,334,336,338,340,342,344,346,348,350,352,354,356,358,360,362,364,366,368,370,372,374,376,378,380,382,384,386,388,390,392],{"file":138,"line":250,"context":251},185,"raw output",{"file":138,"line":253,"context":251},186,{"file":138,"line":255,"context":251},216,{"file":138,"line":257,"context":251},219,{"file":138,"line":259,"context":251},223,{"file":138,"line":261,"context":251},224,{"file":138,"line":263,"context":251},225,{"file":138,"line":265,"context":251},226,{"file":138,"line":267,"context":251},240,{"file":138,"line":269,"context":251},298,{"file":138,"line":271,"context":251},302,{"file":138,"line":273,"context":251},388,{"file":138,"line":275,"context":251},433,{"file":138,"line":277,"context":251},447,{"file":138,"line":279,"context":251},452,{"file":138,"line":281,"context":251},685,{"file":138,"line":283,"context":251},687,{"file":138,"line":285,"context":251},707,{"file":138,"line":287,"context":251},1152,{"file":138,"line":289,"context":251},1158,{"file":138,"line":291,"context":251},1163,{"file":138,"line":293,"context":251},1176,{"file":138,"line":295,"context":251},1212,{"file":138,"line":297,"context":251},1215,{"file":138,"line":299,"context":251},1482,{"file":138,"line":301,"context":251},1486,{"file":138,"line":303,"context":251},1487,{"file":138,"line":305,"context":251},1488,{"file":138,"line":307,"context":251},1489,{"file":138,"line":309,"context":251},1490,{"file":138,"line":311,"context":251},1491,{"file":138,"line":313,"context":251},1492,{"file":138,"line":315,"context":251},1494,{"file":138,"line":317,"context":251},1495,{"file":138,"line":319,"context":251},1497,{"file":138,"line":321,"context":251},1498,{"file":138,"line":323,"context":251},1499,{"file":138,"line":325,"context":251},1500,{"file":138,"line":327,"context":251},1501,{"file":138,"line":329,"context":251},1502,{"file":138,"line":331,"context":251},1503,{"file":138,"line":333,"context":251},1504,{"file":138,"line":335,"context":251},1505,{"file":138,"line":337,"context":251},1506,{"file":138,"line":339,"context":251},1507,{"file":138,"line":341,"context":251},1508,{"file":138,"line":343,"context":251},1509,{"file":138,"line":345,"context":251},1510,{"file":138,"line":347,"context":251},1511,{"file":138,"line":349,"context":251},1512,{"file":138,"line":351,"context":251},1516,{"file":138,"line":353,"context":251},1517,{"file":138,"line":355,"context":251},1519,{"file":138,"line":357,"context":251},1520,{"file":138,"line":359,"context":251},1521,{"file":138,"line":361,"context":251},1522,{"file":138,"line":363,"context":251},1524,{"file":138,"line":365,"context":251},1525,{"file":138,"line":367,"context":251},1535,{"file":138,"line":369,"context":251},1536,{"file":138,"line":371,"context":251},1538,{"file":138,"line":373,"context":251},1539,{"file":138,"line":375,"context":251},1540,{"file":138,"line":377,"context":251},1541,{"file":138,"line":379,"context":251},1543,{"file":138,"line":381,"context":251},1614,{"file":138,"line":383,"context":251},1616,{"file":138,"line":385,"context":251},1617,{"file":138,"line":387,"context":251},1619,{"file":138,"line":389,"context":251},1621,{"file":138,"line":391,"context":251},1624,{"file":138,"line":393,"context":251},1625,2,9,[],[398,416],{"entryPoint":399,"graph":400,"unsanitizedCount":11,"severity":415},"handle_csv_import (includes\\class-oteag-access-plugin.php:1804)",{"nodes":401,"edges":413},[402,407],{"id":403,"type":404,"label":405,"file":138,"line":406},"n0","source","$_FILES",1819,{"id":408,"type":409,"label":410,"file":138,"line":411,"wp_function":412},"n1","sink","fopen() [File Access]",1821,"fopen",[414],{"from":403,"to":408,"sanitized":229},"low",{"entryPoint":417,"graph":418,"unsanitizedCount":11,"severity":415},"\u003Cclass-oteag-access-plugin> (includes\\class-oteag-access-plugin.php:0)",{"nodes":419,"edges":431},[420,423,427,429],{"id":403,"type":404,"label":421,"file":138,"line":422},"$_GET",1117,{"id":408,"type":409,"label":424,"file":138,"line":425,"wp_function":426},"echo() [XSS]",1171,"echo",{"id":428,"type":404,"label":405,"file":138,"line":406},"n2",{"id":430,"type":409,"label":410,"file":138,"line":411,"wp_function":412},"n3",[432,433],{"from":403,"to":408,"sanitized":229},{"from":428,"to":430,"sanitized":229},{"summary":435,"deductions":436},"The \"one-time-email-access-guard\" plugin v1.1.0 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The plugin demonstrates good practices by utilizing prepared statements for all SQL queries and implementing nonce and capability checks for its entry points.  Furthermore, the absence of any recorded vulnerabilities, critical taint flows, or unsanitized paths is highly encouraging.  \n\nHowever, a notable area for concern is the output escaping. With 71% of outputs properly escaped, there is still a significant portion (29%) that may be vulnerable to cross-site scripting (XSS) attacks if user-supplied data is directly reflected in the output without sufficient sanitization. While the attack surface is small and appears protected, this percentage of unescaped output represents a potential weakness. The plugin's clean vulnerability history and lack of dangerous functions suggest a mature and well-maintained codebase, but the output escaping issue warrants attention to achieve a more robust security profile.",[437],{"reason":438,"points":439},"Unescaped output detected (29%)",8,"2026-03-17T06:33:47.425Z",{"wat":442,"direct":451},{"assetPaths":443,"generatorPatterns":446,"scriptPaths":447,"versionParams":448},[444,445],"\u002Fwp-content\u002Fplugins\u002Fone-time-email-access-guard\u002Fassets\u002Fcss\u002Ffrontend.css","\u002Fwp-content\u002Fplugins\u002Fone-time-email-access-guard\u002Fassets\u002Fjs\u002Ffrontend.js",[],[445],[449,450],"one-time-email-access-guard\u002Fassets\u002Fcss\u002Ffrontend.css?ver=","one-time-email-access-guard\u002Fassets\u002Fjs\u002Ffrontend.js?ver=",{"cssClasses":452,"htmlComments":453,"htmlAttributes":454,"restEndpoints":461,"jsGlobals":462,"shortcodeOutput":464},[],[],[455,456,457,458,459,460],"data-oteag-modal-title","data-oteag-modal-bg-color","data-oteag-modal-text-color","data-oteag-overlay-color","data-oteag-overlay-opacity","data-oteag-modal-shadow",[],[463],"oteag_frontend_params",[]]