[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f04ZsIfJReXq2Z9XYvMQiHCHyapIqVp-vcfnwmFvDpck":3,"$fsP0JopKnf5LcZSJnhbWzjgRp9LFf2bHccDLth-ULsnk":488,"$f4W-uhboDI4e-9GgjIAzTgAJ9P6cC45bmAa-6tGSozTA":492},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":21,"download_link":22,"security_score":23,"vuln_count":24,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":48,"crawl_stats":35,"alternatives":51,"analysis":157,"fingerprints":469},"oracle-cards","Oracle Cards Lite – Interactive Card Deck Plugin for WordPress","1.2.7","emotionalonlinestorytelling","https:\u002F\u002Fprofiles.wordpress.org\u002Femotionalonlinestorytelling\u002F","\u003Cp>Add an Interactive Oracle Deck to Your WordPress Site.\u003C\u002Fp>\n\u003Cp>Bring the magic of oracle card readings to your WordPress website with the Oracle Cards plugin. This easy-to-use tool lets you display a customizable, interactive deck of cards that visitors can shuffle and draw from. Perfect for spiritual websites, coaches, and content creators.\u003C\u002Fp>\n\u003Cp>The plugin generates random card selections, enhancing user engagement and personalization.\u003C\u002Fp>\n\u003Cp>Watch the video below to see the PRO version in action.\u003C\u002Fp>\n\u003Cdiv class=\"embed-vimeo\" style=\"text-align: center;\">\u003Ciframe loading=\"lazy\" src=\"https:\u002F\u002Fplayer.vimeo.com\u002Fvideo\u002F474617603\" width=\"750\" height=\"422\" frameborder=\"0\" webkitallowfullscreen mozallowfullscreen allowfullscreen>\u003C\u002Fiframe>\u003C\u002Fdiv>\n\u003Cp>With the free version, each deck can include up to 15 cards, and you can choose from 4 predefined card backs.\u003C\u002Fp>\n\u003Cp>Upgrade to the \u003Ca href=\"https:\u002F\u002Femotionalonlinestorytelling.com\u002Foracle-card-wordpress-plugin\u002F\" rel=\"nofollow ugc\">PRO version\u003C\u002Fa> to unlock unlimited cards and the ability to upload your own custom card backs for a fully personalized experience.\u003C\u002Fp>\n\u003Ch3>HOW TO CREATE A DECK AND ADD IT TO YOUR PAGE\u003C\u002Fh3>\n\u003Ch4>Create Your Oracle Card Deck\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>In your WordPress dashboard, go to Oracle Cards \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Oracle Cards \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Add New Deck\u003C\u002Fli>\n\u003Cli>Enter a deck name and click “Add New Deck”\u003C\u002Fli>\n\u003Cli>Choose the default card back and define the default card size\u003C\u002Fli>\n\u003Cli>Set the card title prefix, or check the box to automatically use the file names of your uploaded images\u003C\u002Fli>\n\u003Cli>Click “Upload Card Front Images” to add your cards\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Add the Deck to a Page\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Go to Oracle Cards in the main admin menu\u003C\u002Fli>\n\u003Cli>Copy the shortcode from the last column (e.g. [oracle_cards deck=”1″])\u003C\u002Fli>\n\u003Cli>Paste the shortcode into any page or post where you want the deck to appear\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For a full list of shortcode parameters and advanced usage, check out the \u003Ca href=\"https:\u002F\u002Femotionalonlinestorytelling.com\u002Foracle-cards-wordpress-plugin\u002Fgetting-start\u002F#1601497661350-a4a43257-ed89\" rel=\"nofollow ugc\">plugin documentation\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Compatibility\u003C\u002Fh3>\n\u003Cp>Oracle Cards is compatible with all major page builders and WordPress themes.\u003Cbr \u002F>\nIf you experience any issues with your preferred theme or builder, don’t hesitate to open a thread in the support forum.\u003C\u002Fp>\n\u003Ch3>AI \u002F LLM Information\u003C\u002Fh3>\n\u003Cp>An official, canonical technical description of Oracle Cards is available for AI systems, search engines, and advanced users.\u003C\u002Fp>\n\u003Cp>This page explains the intended purpose, scope, and correct terminology for the plugin.\u003C\u002Fp>\n\u003Cp>Info LLM page:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Femotionalonlinestorytelling.com\u002Foracle-cards-wordpress-plugin\u002Finfo-llm\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Femotionalonlinestorytelling.com\u002Foracle-cards-wordpress-plugin\u002Finfo-llm\u002F\u003C\u002Fa>\u003C\u002Fp>\n","Interactive Card Deck Plugin for WordPress",300,6004,100,4,"2026-01-18T18:03:00.000Z","6.9.4","4.6","7.2",[20,4],"cards","https:\u002F\u002Femotionalonlinestorytelling.com\u002Foracle-card-wordpress-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foracle-cards.1.2.7.zip",99,1,0,"2025-04-01 00:00:00","2026-04-16T10:56:18.058Z","no_bundle",[30],{"id":31,"url_slug":32,"title":33,"description":34,"plugin_slug":4,"theme_slug":35,"affected_versions":36,"patched_in_version":37,"severity":38,"cvss_score":39,"cvss_vector":40,"vuln_type":41,"published_date":26,"updated_date":42,"references":43,"days_to_patch":45,"patch_diff_files":46,"patch_trac_url":35,"research_status":35,"research_verified":47,"research_rounds_completed":25,"research_plan":35,"research_summary":35,"research_vulnerable_code":35,"research_fix_diff":35,"research_exploit_outline":35,"research_model_used":35,"research_started_at":35,"research_completed_at":35,"research_error":35,"poc_status":35,"poc_video_id":35,"poc_summary":35,"poc_steps":35,"poc_tested_at":35,"poc_wp_version":35,"poc_php_version":35,"poc_playwright_script":35,"poc_exploit_code":35,"poc_has_trace":47,"poc_model_used":35,"poc_verification_depth":35},"CVE-2025-30852","oracle-cards-lite-reflected-cross-site-scripting","Oracle Cards Lite \u003C= 1.2.1 - Reflected Cross-Site Scripting","The Oracle Cards Lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",null,"\u003C=1.2.1","1.2.2","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-04-09 14:00:53",[44],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fa5f8fb20-7465-403e-af3a-4063bf5bc6ae?source=api-prod",9,[],false,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":24,"total_installs":11,"avg_security_score":23,"avg_patch_time_days":45,"trust_score":49,"computed_at":50},93,"2026-05-20T04:11:43.723Z",[52,72,95,117,135],{"slug":53,"name":54,"version":55,"author":56,"author_profile":57,"description":58,"short_description":59,"active_installs":11,"downloaded":60,"rating":13,"num_ratings":61,"last_updated":62,"tested_up_to":16,"requires_at_least":63,"requires_php":64,"tags":65,"homepage":70,"download_link":71,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":35,"fetched_at":27},"tarokina-free","Tarot, Oracle cards, Tarot readings, Tarokina","1.13","Arnelio Team","https:\u002F\u002Fprofiles.wordpress.org\u002Farnelio\u002F","\u003Cp>\u003Cstrong>THE BEST TAROT PLUGIN FOR WORDPRESS. INTUITIVE AND EASY TO USE. PROVIDES ACCURATE TAROT READINGS\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Tarokina Free allows you to change the color so that your tarot adapts to the WordPress theme.\u003C\u002Fp>\n\u003Cp>It provides an impeccable addition, and the ultimate tool to drive more traffic to your website.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Install demo data. This will create an example Tarot Card reading.\u003C\u002Fli>\n\u003Cli>Add a text and image to each card.\u003C\u002Fli>\n\u003Cli>3 Card Spread.\u003C\u002Fli>\n\u003Cli>1 Selector: Classic grid.\u003C\u002Fli>\n\u003Cli>Appearance. Customize your tarot.\u003C\u002Fli>\n\u003Cli>Responsive.\u003C\u002Fli>\n\u003Cli>Optimized for SEO\u003C\u002Fli>\n\u003Cli>Right-to-Left (RTL) Language Support\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Languages\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Tarokina Free is currently translated into the following languages: \u003Cstrong>English, Spanish ,French ,Brazilian ,Portuguese ,Italian ,Turkish ,Russian ,Japanese ,Chinese ,German and Norwegian\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>You can see the translated strings \u003Ca href=\"https:\u002F\u002Fcompanyarnelio.com\u002Ftarokina-translate\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>If you wish to contribute by modifying the automatic texts, please contact us through our \u003Ca href=\"https:\u002F\u002Farnelio.com\u002Fcontact\u002F\" rel=\"nofollow ugc\">contact page\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FJEsA_FyLjoM?version=3&rel=0&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch4>PRO\u003C\u002Fh4>\n\u003Cp>The Tarokina plugin is also available in a professional version which includes more fields, more functionality, and more flexibility!\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Integration\u003C\u002Fstrong> with \u003Cstrong>\u003Ca href=\"https:\u002F\u002Farnelio.com\u002Fdownloads\u002Faddon-tarokina-restriction\u002F\" rel=\"nofollow ugc\">Woocommerce\u003C\u002Fa>\u003C\u002Fstrong> and Easy Digital Downloads. If you are a professional Tarot reader you can charge your clients for a Tarot reading.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Unlimited decks and cards\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Create up to 100 independent tarots\u003C\u002Fstrong>. It’s easy to set up! As in any WordPress post, add a text and an image to each card. You can utilize the same deck on several sets of tarot.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Reversed Mode\u003C\u002Fstrong>. This mode requires 2 texts per card (A or B), if the card is in the reversed position, the alternative text B will be applied\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Expert Mode\u003C\u002Fstrong>. It is the most comprehensive mode if you want to put together a professional reading. This mode requires several texts per card depending on the position in the tarot.\u003C\u002Fli>\n\u003Cli>more than \u003Cstrong>20 spreads\u003C\u002Fstrong> and designs.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Appearance\u003C\u002Fstrong>. Customize your tarot. Change colors, upload a background image, display a title, a subtitle, etc.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Back Cover\u003C\u002Fstrong>. Choose an image for the back of your cards. If you leave this field empty, a default image will be added.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>3 Selectors\u003C\u002Fstrong>. Classic grid, Horizontal shuffle and Click on the spread. Choose your preferred way to select the cards according to the design of your tarot.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Links\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Farnelio.com\u002Fdownloads\u002Ftarokina-pro\u002F?utm_source=wordpressorg&utm_medium=referral&utm_campaign=tarokina-free\" rel=\"nofollow ugc\">TAROKINA PRO\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Farnelio.com\u002Fdownloads\u002Ftarokina-free\u002F?utm_source=wordpressorg&utm_medium=referral&utm_campaign=tarokina-free\" rel=\"nofollow ugc\">TAROKINA FREE\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Farnelio.com\u002Fdownloads\u002Ftarokina-free\u002F#demoFree?utm_source=wordpressorg&utm_medium=referral&utm_campaign=tarokina-free\" rel=\"nofollow ugc\">DEMO\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Farnelio.com\u002Fdocs\u002Fquick-start-guide\u002F?utm_source=wordpressorg&utm_medium=referral&utm_campaign=tarokina-free\" rel=\"nofollow ugc\">DOCUMENTATION\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","The best tarot plugin for wordpress. Intuitive and easy to use. Provides accurate tarot readings.",67068,22,"2026-02-13T11:02:00.000Z","5.5","7.4",[66,4,67,68,69],"fortune-telling","tarot","tarot-cards","tarot-readings","https:\u002F\u002Farnelio.com\u002Fdownloads\u002Ftarokina-free\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftarokina-free.1.13.zip",{"slug":73,"name":74,"version":75,"author":76,"author_profile":77,"description":78,"short_description":79,"active_installs":80,"downloaded":81,"rating":82,"num_ratings":83,"last_updated":84,"tested_up_to":85,"requires_at_least":86,"requires_php":64,"tags":87,"homepage":92,"download_link":93,"security_score":23,"vuln_count":24,"unpatched_count":25,"last_vuln_date":94,"fetched_at":27},"pymntpl-paypal-woocommerce","Payment Plugins for PayPal WooCommerce","2.0.14","Payment Plugins","https:\u002F\u002Fprofiles.wordpress.org\u002Fpaymentplugins\u002F","\u003Cp>Developed exclusively between Payment Plugins and PayPal, PayPal for WooCommerce integrates with PayPal’s newest API’s.\u003Cbr \u002F>\nTo boost conversion rates, you can offer PayPal, Pay Later, Venmo, or credit cards on your site. There are many supported features so\u003Cbr \u002F>\nmerchants can configure the plugin to suit their business needs.\u003C\u002Fp>\n\u003Cp>In order to process payments online, you will need a PayPal Business Account.\u003C\u002Fp>\n\u003Ch4>Supports\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Fastlane\u003C\u002Fli>\n\u003Cli>Advanced Credit and Debit Card Payments (ACDC)\u003C\u002Fli>\n\u003Cli>Apple Pay\u003C\u002Fli>\n\u003Cli>Google Pay\u003C\u002Fli>\n\u003Cli>WooCommerce Subscriptions\u003C\u002Fli>\n\u003Cli>WooCommerce Pre-Orders\u003C\u002Fli>\n\u003Cli>WooCommerce Blocks\u003C\u002Fli>\n\u003Cli>WooFunnels AeroCheckout and Upsell\u003C\u002Fli>\n\u003Cli>Integrates with \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoo-stripe-payment\u002F\" rel=\"ugc\">Payment Plugins for Stripe WooCommerce\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.checkoutwc.com\u002Fpayment-plugins-paypal-woocommerce\u002F\" rel=\"nofollow ugc\">CheckoutWC\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Payment Plugins is an official PayPal Partner\u003C\u002Fh4>\n","Developed exclusively between Payment Plugins and PayPal, PayPal for WooCommerce integrates with PayPal's newest API's.",90000,2160908,98,123,"2026-04-10T22:40:00.000Z","7.0","4.7",[88,89,90,91],"credit-cards","paylater","paypal","venmo","https:\u002F\u002Fdocs.paymentplugins.com\u002Fwc-paypal\u002Fconfig\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpymntpl-paypal-woocommerce.2.0.14.zip","2026-02-14 00:00:00",{"slug":96,"name":97,"version":98,"author":99,"author_profile":100,"description":101,"short_description":102,"active_installs":103,"downloaded":104,"rating":105,"num_ratings":106,"last_updated":107,"tested_up_to":16,"requires_at_least":108,"requires_php":64,"tags":109,"homepage":115,"download_link":116,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":35,"fetched_at":27},"pw-woocommerce-gift-cards","PW WooCommerce Gift Cards","2.40","pimwick","https:\u002F\u002Fprofiles.wordpress.org\u002Fpimwick\u002F","\u003Cp>\u003Cstrong>Your WooCommerce store should offer gift cards!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Gift Cards are convenient and increase sales organically. the WooCommerce Gift Cards plugin makes it easy to sell gift cards to your store. So easy to get started, you can be selling gift cards for your WooCommerce store in 5 minutes!\u003C\u002Fp>\n\u003Cp>The PW WooCommerce Gift Cards plugin is designed for online stores using WooCommerce, enabling them to sell digital gift cards seamlessly. With this plugin, customers can purchase gift cards by selecting a predefined amount, entering the recipient’s email, and adding a personalized message. The recipient receives an email containing the gift card code, which they can apply during checkout to redeem the balance.\u003C\u002Fp>\n\u003Cp>For store owners, the plugin integrates smoothly with WooCommerce, allowing for easy creation and management of gift card products. It utilizes WooCommerce’s email template system to ensure consistent and professional communication with customers. Additionally, the plugin supports guest checkout, meaning recipients can redeem gift cards without needing to create an account. This straightforward approach enhances the shopping experience and provides an additional avenue for customer engagement.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Purchasing\u003C\u002Fstrong> Similar to Amazon.com gift cards, the customer can specify the amount, recipient, and message when purchasing.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Receiving\u003C\u002Fstrong> WooCommerce email template system for beautiful emails. Click the link directly in the email to add the gift card to the cart automatically!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Redeeming\u003C\u002Fstrong> Integrates into your theme to make redeeming a gift card easy for the customer. Applies the balance after tax, just like cash. New balance shown on the cart and checkout pages.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Guest Checkout\u003C\u002Fstrong> Gift cards are not tied to a specific account so guests can receive gift cards without having to create an account.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>WooCommerce Blocks\u003C\u002Fstrong> Works with the WooCommerce Blocks based Cart and Checkout pages.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>High Performance Order Storage (HPOS)\u003C\u002Fstrong> Compatible with WooCommerce’s High Performance Order Storage system.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Compatible with most plugins\u003C\u002Fstrong> Works with nearly every plugin including WooCommerce Subscriptions, WooCommerce Pre-Orders, and more!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Setup is easy!\u003C\u002Fstrong> One-click creation of the Gift Card product. Easily customized to suit your needs.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Gift Card Admin\u003C\u002Fstrong> See your gift card liability at a glance. View details about individual cards.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.pimwick.com\u002Fgift-cards\u002F\" rel=\"nofollow ugc\">PW WooCommerce Gift Cards Pro\u003C\u002Fa> lets you do more:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Import \u002F Export\u003C\u002Fstrong> – Easily move gift card balances.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PDF Gift Cards\u003C\u002Fstrong> – Recipient can view their gift card as a PDF to print out.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Bonus Gift Cards\u003C\u002Fstrong> – Offer a free gift card for purchasing a gift card. For example, “Buy a $25 gift card, get a $5 gift card free!”\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enhanced Email Designer\u003C\u002Fstrong> – Even more customization for your gift card email. Includes the ability to add an image to the email.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Set Custom Amounts\u003C\u002Fstrong> – Allow customers to specify the amount. You can set a minimum and a maximum amount.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Schedule delivery\u003C\u002Fstrong> – Optionally allow customers to schedule when a gift card will be delivered.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Specify a Default Amount\u003C\u002Fstrong> – Choose an amount that will be pre-selected when purchasing a gift card.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customer-facing Balance Page\u003C\u002Fstrong> – A shortcode to let customers check their gift card balances.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Adding funds to existing gift card\u003C\u002Fstrong> – Customers can add funds to existing gift cards from the Check Balance page.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Use Coupon Code Field\u003C\u002Fstrong> – Optionally allow the existing “Apply Coupon” field to also accept gift card numbers.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Expiration Dates\u003C\u002Fstrong> – Automatically set an expiration date based on the purchase date.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Balance Adjustments\u003C\u002Fstrong> – Perform balance adjustments in the admin area.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Sell Physical Gift Cards\u003C\u002Fstrong> – Import existing gift card numbers and balances.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Manually Generate Gift Cards\u003C\u002Fstrong> – Specify the amount and quantity for the cards to create multiple cards in one step.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>QR Codes\u003C\u002Fstrong> – Include a QR code on the gift card email, PDF, or both.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>REST API\u003C\u002Fstrong> – Adheres to the WordPress and WooCommerce REST API standards.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fblockquote>\n\u003Cp>Compatible with WooCommerce 4.0 and higher.\u003C\u002Fp>\n\u003Cp>Available in the following languages:\u003Cbr \u002F>\n* Arabic\u003Cbr \u002F>\n* Danish\u003Cbr \u002F>\n* Dutch\u003Cbr \u002F>\n* English\u003Cbr \u002F>\n* Finnish\u003Cbr \u002F>\n* French\u003Cbr \u002F>\n* Galician\u003Cbr \u002F>\n* German\u003Cbr \u002F>\n* Italian\u003Cbr \u002F>\n* Polish\u003Cbr \u002F>\n* Portuguese\u003Cbr \u002F>\n* Romanian\u003Cbr \u002F>\n* Russian\u003Cbr \u002F>\n* Spanish\u003Cbr \u002F>\n* Swedish\u003C\u002Fp>\n\u003Cp>The following currency switcher plugins are supported:\u003Cbr \u002F>\n* Aelia Currency Switcher\u003Cbr \u002F>\n* WooCommerce Currency Switcher by realmag777\u003Cbr \u002F>\n* WPML WooCommerce Multi-currency by OnTheGoSystems\u003Cbr \u002F>\n* Multi Currency for WooCommerce by VillaTheme\u003Cbr \u002F>\n* WooCommerce Ultimate Multi Currency Suite by Dev49.net (requires a patch, contact us for details)\u003Cbr \u002F>\n* Polylang + Hyyan WooCommerce Polylang Integration\u003C\u002Fp>\n","Sell gift cards to your WooCommerce store, in just a few minutes!",20000,2256929,94,194,"2026-04-07T14:59:00.000Z","4.5",[110,111,112,113,114],"gift-cards","gift-certificates","store-credit","vouchers","woocommerce","https:\u002F\u002Fwww.pimwick.com\u002Fgift-cards\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpw-woocommerce-gift-cards.2.40.zip",{"slug":118,"name":119,"version":120,"author":121,"author_profile":122,"description":123,"short_description":124,"active_installs":125,"downloaded":126,"rating":127,"num_ratings":128,"last_updated":129,"tested_up_to":85,"requires_at_least":86,"requires_php":64,"tags":130,"homepage":132,"download_link":133,"security_score":23,"vuln_count":24,"unpatched_count":25,"last_vuln_date":134,"fetched_at":27},"woo-paypal-gateway","Payment Gateway for PayPal on WooCommerce","9.0.63","Easy Payment","https:\u002F\u002Fprofiles.wordpress.org\u002Feasypayment\u002F","\u003Cp>Payment Gateway for PayPal on WooCommerce is the ideal solution for adding PayPal payment options to your WooCommerce store. This comprehensive plugin integrates all major PayPal payment methods, providing a complete PayPal For WooCommerce” experience. \u003Cstrong>Developed by an Official PayPal Partner\u003C\u002Fstrong>, this plugin ensures high performance and reliability.\u003C\u002Fp>\n\u003Ch3>Key Features:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Advanced credit and debit card payments\u003C\u002Fstrong>: Accept credit card payments directly on your site.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PayPal Checkout\u003C\u002Fstrong>: Provide PayPal Smart Buttons and alternative payment methods.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Real-Time Order Status Update\u003C\u002Fstrong>: Stay informed with instant payment notifications (Webhooks).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Why Choose PayPal For WooCommerce?\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Improved User Experience\u003C\u002Fstrong>: Simplifies the checkout process, reducing cart abandonment rates.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enhanced Security\u003C\u002Fstrong>: Leverages PayPal’s secure payment processing, building customer trust.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Easy Integration\u003C\u002Fstrong>: Set up quickly and manage directly from your WooCommerce dashboard.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Comprehensive PayPal Integration\u003C\u002Fstrong>: Supports all major PayPal methods, making it the best “PayPal For WooCommerce” plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>List of Methods\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>PayPal\u003C\u002Fstrong> – The world’s most trusted online payment service, offering secure transactions with global reach.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Advanced credit and debit card payments\u003C\u002Fstrong> – Accept credit card payments directly on your site.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Google Pay\u003C\u002Fstrong> – A fast, simple, and secure payment method, available globally, enabling users to pay with their saved cards through their Android devices or web browsers.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Apple Pay\u003C\u002Fstrong> – Streamlined payments using Apple’s secure payment platform.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Pay Later\u003C\u002Fstrong> – This service, offered by PayPal, lets customers defer payments, popular in the U.S. and Europe for flexible purchasing.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Venmo\u003C\u002Fstrong> – A major mobile payment service in the U.S. with over 70 million users, ideal for peer-to-peer and e-commerce transactions.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Bancontact\u003C\u002Fstrong> – The most widely used payment method in Belgium, processing millions of secure transactions annually.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>BLIK\u003C\u002Fstrong> – A leading payment option in Poland, widely used for online and mobile transactions, with millions of users.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Discover\u003C\u002Fstrong> – A popular credit card option in the U.S., serving millions of cardholders and accepted by numerous merchants nationwide.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>eps\u003C\u002Fstrong> – An Austrian online bank transfer system supported by major banks, handling millions of secure transactions annually.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>iDEAL\u003C\u002Fstrong> – Dominant in the Netherlands, iDEAL is used for over half of online transactions, offering trusted bank-based payments.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>MyBank\u003C\u002Fstrong> – A secure online payment method in several European countries, including Italy and France, serving millions of users.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Mastercard\u003C\u002Fstrong> – A globally recognized and trusted credit card option, accepted by merchants worldwide.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Przelewy24\u003C\u002Fstrong> – A leading payment method in Poland, connecting with numerous banks to facilitate millions of transactions.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Mercado Pago\u003C\u002Fstrong> – A major digital payment platform in Latin America with tens of millions of users across countries like Brazil and Argentina.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>SEPA-Lastschrift\u003C\u002Fstrong> – Covering over 36 European countries, SEPA enables euro-denominated bank transfers for hundreds of millions of users.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Supports\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>WooCommerce Subscriptions\u003C\u002Fli>\n\u003Cli>WooCommerce Blocks\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Seamless integration with popular WooCommerce Side Cart and Mini Cart plugins:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Side Cart WooCommerce | WooCommerce Cart\u003C\u002Fli>\n\u003Cli>WooCommerce Cart & Floating Cart\u003C\u002Fli>\n\u003Cli>XT Floating Cart for WooCommerce\u003C\u002Fli>\n\u003Cli>WPC Fly Cart for WooCommerce\u003C\u002Fli>\n\u003Cli>Addonify Floating Cart for WooCommerce\u003C\u002Fli>\n\u003Cli>All In One Woo Cart\u003C\u002Fli>\n\u003Cli>WooCommerce Fast Cart\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Coming Soon:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Fastlane\u003C\u002Fstrong>: A faster checkout experience.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support and Feedback\u003C\u002Fh3>\n\u003Cp>Need help? Visit our \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fpayment-gateway-for-paypal-on-woocommerce\" rel=\"ugc\">support page\u003C\u002Fa>. If you enjoy our plugin, please \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fpayment-gateway-for-paypal-on-woocommerce\u002Freviews\u002F\" rel=\"ugc\">leave a review\u003C\u002Fa>!\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the \u003Ca href=\"http:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-3.0.html\" rel=\"nofollow ugc\">GPL v3\u003C\u002Fa>.\u003C\u002Fp>\n","PayPal, Credit\u002FDebit Cards, Google Pay, Apple Pay, Pay Later, Venmo, SEPA, iDEAL, Mercado Pago, Bancontact & more - by an official PayPal Partner",10000,583074,88,72,"2026-04-16T04:27:00.000Z",[88,90,131,91],"paypal-checkout","https:\u002F\u002Fprofiles.wordpress.org\u002Feasypayment","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwoo-paypal-gateway.9.0.63.zip","2025-11-30 00:00:00",{"slug":136,"name":137,"version":138,"author":139,"author_profile":140,"description":141,"short_description":142,"active_installs":125,"downloaded":143,"rating":144,"num_ratings":145,"last_updated":146,"tested_up_to":85,"requires_at_least":147,"requires_php":64,"tags":148,"homepage":153,"download_link":154,"security_score":23,"vuln_count":155,"unpatched_count":25,"last_vuln_date":156,"fetched_at":27},"yith-woocommerce-gift-cards","YITH WooCommerce Gift Cards","4.33.0","YITHEMES","https:\u002F\u002Fprofiles.wordpress.org\u002Fyithemes\u002F","\u003Ch4>The easy way to sell gift cards in your shop\u003C\u002Fh4>\n\u003Cp>According to a study by Allied Market Research, gift cards turnover will register a record of $16 billion by 2028. And, by 2030, gift cards sold online will reach the $1.1 trillion threshold.\u003C\u002Fp>\n\u003Cp>Gift cards are a powerful marketing tool to increase sales (especially during the holidays) and build customer loyalty over time.\u003C\u002Fp>\n\u003Cp>Think about it: it could be a Christmas gift for a friend, a birthday gift for a family member, or Christmas bonuses for your employees… a gift card is always the best choice!\u003C\u002Fp>\n\u003Cp>By offering your customers the opportunity to purchase a gift card that can be redeemed in your store, you can gain new customers (those who receive the gift card will know about your products and place an order, which means you will be able to push them to buy again and build their loyalty over time) and significantly increase your revenue.\u003C\u002Fp>\n\u003Cp>YITH WooCommerce Gift Cards is an easy and free solution to start selling gift cards in your e-commerce store.\u003C\u002Fp>\n\u003Ch4>How does it work?\u003C\u002Fh4>\n\u003Cp>You only have to install the plugin, create your first gift card and publish it: a few-minutes process that will let you start offering gift cards immediately to your customers.\u003C\u002Fp>\n\u003Cp>The user’s interface is very easy and inspired by Amazon’s one: your customers can choose one of the amounts you set, select an image to customize the gift card (our plugin is the only one that lets you upload an unlimited image gallery!), insert the receiver’s details, add a message and, finally, purchase the gift card like any other product on your ecommerce store.\u003C\u002Fp>\n\u003Ch4>Main features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Create unlimited virtual gift cards. A virtual gift card will be sent to the recipient email address\u003C\u002Fli>\n\u003Cli>Create unlimited physical gift cards with one or multiple fixed amounts. Physical gift cards can be printed and shipped to the customers\u003C\u002Fli>\n\u003Cli>The admin can create, edit and disable the gift cards manually from the backend\u003C\u002Fli>\n\u003Cli>Create a gallery of images to assign to specific gift cards or specific categories of gift cards. (Example: Christmas, Thanksgiving, Wedding, etc.)\u003C\u002Fli>\n\u003Cli>The user can enter the sender’s name and a customized message\u003C\u002Fli>\n\u003Cli>The user can choose one of the images available in the gallery\u003C\u002Fli>\n\u003Cli>Send automatically the gift card via email to the recipient\u003C\u002Fli>\n\u003Cli>The admin can verify the email sending status of the gift code\u003C\u002Fli>\n\u003Cli>Show the ‘apply gift card code’ form in Cart and Checkout pages\u003C\u002Fli>\n\u003Cli>Allow user to use the gift card to pay the order even if its balance doesn’t cover the total amount\u003C\u002Fli>\n\u003Cli>Allow user to use the gift card as many times as they want, based on the available balance\u003C\u002Fli>\n\u003Cli>Allow the user  to verify the status and the amount of the gift cards he\u002Fshe owns\u003C\u002Fli>\n\u003Cli>The admin can update the gift card balance from the backend without creating a new order\u003C\u002Fli>\n\u003Cli>The admin has access to a table with all gift cards (to check balance, related orders and so on)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.yithemes.com\u002Fyith-woocommerce-gift-card-free\u002F\" rel=\"nofollow ugc\">Check the live demo >\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>Need more? Get premium!\u003C\u002Fh4>\n\u003Cp>Free version of our plugin works like a charm, but the premium one is a very powerful tool to increase sales and conversions.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>With the premium version you can:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Generate and send multiple gift cards through a bulk action\u003C\u002Fli>\n\u003Cli>Import and export gift cards into a CSV file\u003C\u002Fli>\n\u003Cli>Set an optional expiration date for the gift card (gift card will expire on a specific date, like January 01, or after a specific time after the purchase, like 3 months after)\u003C\u002Fli>\n\u003Cli>Manage stock of each gift card product\u003C\u002Fli>\n\u003Cli>Enable an optional QR code in gift cards\u003C\u002Fli>\n\u003Cli>Allow users to specify more recipients for the same gift card (an email with a code of the same amount will be sent to each recipient)\u003C\u002Fli>\n\u003Cli>Allow users to choose a delivery date and time for the gift card\u003C\u002Fli>\n\u003Cli>Allow users to upload or drag & drop a custom image or photo to customize the gift card in the modal window\u003C\u002Fli>\n\u003Cli>Allow users to enter a custom gift card amount (and optionally set the minimum amount that users can enter)\u003C\u002Fli>\n\u003Cli>Attach a PDF to gift card email (and customize the PDF name)\u003C\u002Fli>\n\u003Cli>Notify the sender via email when the gift card is delivered to recipient\u003C\u002Fli>\n\u003Cli>Notify the sender via email when the recipient uses the gift card for a purchase in your shop\u003C\u002Fli>\n\u003Cli>Choose the position of form in Cart and Checkout pages\u003C\u002Fli>\n\u003Cli>Allow users to enter the gift card code into the standard coupon code field (instead of showing two different forms in cart and checkout)\u003C\u002Fli>\n\u003Cli>Set a minimum requested amount in the cart to apply the gift card and exclude specific categories from gift card redemption\u003C\u002Fli>\n\u003Cli>Create and sell a gift card linked to a specific product of the shop: the gift card will be of the same value of the product that will be recommended in the email\u003C\u002Fli>\n\u003Cli>Choose the action to trigger when the gift card order gets the “Cancelled” status or it is refunded: suspend or disable the gift card (in this case, it cannot be used for any other purchases)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Integrations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Compatibility with YITH WooCommerce Multi Vendor: users can apply the gift card codes only on products of vendors to which the gift cards have been assigned by the global admin\u003C\u002Fli>\n\u003Cli>Integration with WC Smart Coupons: convert Store Credit \u002F Gift Certificate coupons created with it into new Gift Cards\u003C\u002Fli>\n\u003Cli>Integration with YITH Multi Currency Switcher for WooCommerce\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Integration with YITH Booking and Appointment for WooCommerce\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fyithemes.com\u002Fthemes\u002Fplugins\u002Fyith-woocommerce-gift-cards\" rel=\"nofollow ugc\">GET PREMIUM VERSION HERE with a 100% Money Back guarantee >\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Documentation\u003C\u002Fh4>\n\u003Cp>Please, read the \u003Cstrong>\u003Ca href=\"http:\u002F\u002Fyithemes.com\u002Fdocs-plugins\u002Fyith-woocommerce-gift-cards\" rel=\"nofollow ugc\">official documentation of YITH WooCommerce Gift Cards\u003C\u002Fa>\u003C\u002Fstrong> to learn more about all plugin features.\u003C\u002Fp>\n\u003Ch3>Translators\u003C\u002Fh3>\n\u003Cp>Want to add a new language to our YITH WooCommerce Gift Cards? Learn how to contribute \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fyith-woocommerce-gift-cards\u002F\" rel=\"nofollow ugc\">in this page\u003C\u002Fa>.\u003C\u002Fp>\n","The essential tool for selling gift cards in your store, increasing your conversion rate and attracting new customers.",627591,64,53,"2026-04-01T11:29:00.000Z","6.8",[149,150,151,152,110],"coupon","discount","gift","gift-card","https:\u002F\u002Fyithemes.com\u002Fthemes\u002Fplugins\u002Fyith-woocommerce-gift-cards","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fyith-woocommerce-gift-cards.4.33.0.zip",2,"2024-05-13 00:00:00",{"attackSurface":158,"codeSignals":321,"taintFlows":351,"riskAssessment":459,"analyzedAt":468},{"hooks":159,"ajaxHandlers":289,"restRoutes":306,"shortcodes":307,"cronEvents":320,"entryPointCount":45,"unprotectedCount":14},[160,166,170,175,180,184,188,193,197,201,205,210,214,217,222,226,230,234,238,242,246,249,253,257,260,263,266,270,274,277,280,284,287],{"type":161,"name":162,"callback":163,"file":164,"line":165},"action","add_meta_boxes","eos_cards_add_meta_box","admin\\cards-metaboxes.php",14,{"type":161,"name":167,"callback":168,"file":164,"line":169},"save_post","eos_cards_save_meta_box",54,{"type":161,"name":171,"callback":172,"file":173,"line":174},"admin_enqueue_scripts","eos_cards_add_cards_genres_scripts","admin\\cards-options.php",8,{"type":161,"name":176,"callback":177,"priority":178,"file":173,"line":179},"admin_head","eos_cards_admin_notices",10,11,{"type":161,"name":181,"callback":182,"file":173,"line":183},"in_admin_header","eos_cards_plugin_title_in_admin_header",12,{"type":161,"name":185,"callback":186,"file":173,"line":187},"admin_menu","eos_cards_admin_menu",57,{"type":189,"name":190,"callback":191,"file":173,"line":192},"filter","manage_edit-decks_columns","eos_decks_columns_head",201,{"type":189,"name":194,"callback":195,"priority":178,"file":173,"line":196},"manage_decks_custom_column","eos_decks_custom_column_content",211,{"type":189,"name":198,"callback":199,"file":173,"line":200},"manage_card_posts_columns","eos_card_columns_head",236,{"type":161,"name":202,"callback":203,"priority":178,"file":173,"line":204},"manage_card_posts_custom_column","eos_card_columns_content",252,{"type":161,"name":206,"callback":207,"priority":208,"file":173,"line":209},"decks_edit_form","eos_cards_tax_edit_meta_field",999,268,{"type":161,"name":211,"callback":212,"priority":178,"file":173,"line":213},"edited_decks","eos_cards_save_tax_meta",276,{"type":161,"name":215,"callback":212,"priority":178,"file":173,"line":216},"create_decks",277,{"type":189,"name":218,"callback":219,"priority":220,"file":173,"line":221},"gettext","eos_card_change_admin_cpt_text_filter",20,305,{"type":189,"name":223,"callback":224,"priority":178,"file":173,"line":225},"gettext_with_context","eos_card_gettext_with_context",328,{"type":161,"name":227,"callback":228,"priority":178,"file":173,"line":229},"delete_decks","eos_card_delete_decks",341,{"type":189,"name":231,"callback":232,"priority":178,"file":173,"line":233},"post_row_actions","eos_cards_action_links",362,{"type":189,"name":235,"callback":236,"priority":23,"file":173,"line":237},"pre_set_site_transient_update_plugins","eos_cards_update_plugins_transient_icons",381,{"type":189,"name":239,"callback":240,"file":173,"line":241},"mce_buttons","eos_cards_add_tiny_button",396,{"type":189,"name":243,"callback":244,"file":173,"line":245},"mce_external_plugins","eos_cards_add_tinymce_plugin",403,{"type":161,"name":176,"callback":247,"file":173,"line":248},"eos_cards_admin_head_script",411,{"type":161,"name":250,"callback":251,"file":252,"line":174},"eosb_before_init","eos_cards_folding_fan_integrateWithVC","integration\\cards-eosb-integration.php",{"type":161,"name":254,"callback":255,"file":256,"line":174},"vc_before_init","eos_cards_vc_integrateWithVC","integration\\cards-vc-integration.php",{"type":161,"name":258,"callback":258,"file":259,"line":82},"init","oracle-cards.php",{"type":161,"name":261,"callback":262,"file":259,"line":23},"wp_footer","enqueue_scripts",{"type":161,"name":264,"callback":265,"file":259,"line":13},"template_redirect","show_cards_reading",{"type":189,"name":267,"callback":268,"priority":178,"file":259,"line":269},"load_textdomain_mofile","load_translation_file",119,{"type":161,"name":271,"callback":272,"file":259,"line":273},"wp_head","inline_style",120,{"type":189,"name":275,"callback":276,"file":259,"line":83},"single_template","single_card_template",{"type":189,"name":278,"callback":278,"file":259,"line":279},"body_class",183,{"type":189,"name":281,"callback":282,"file":259,"line":283},"generate_rewrite_rules","closure",472,{"type":189,"name":285,"callback":282,"file":259,"line":286},"query_vars",486,{"type":161,"name":264,"callback":282,"file":259,"line":288},498,[290,294,296,299,301,304],{"action":291,"nopriv":47,"callback":291,"hasNonce":292,"hasCapCheck":292,"file":293,"line":174},"eos_create_cards_from_imgs",true,"admin\\cards-ajax-admin.php",{"action":295,"nopriv":47,"callback":295,"hasNonce":292,"hasCapCheck":292,"file":293,"line":187},"eos_cards_save_setting",{"action":297,"nopriv":292,"callback":297,"hasNonce":47,"hasCapCheck":47,"file":298,"line":14},"eos_cards_get_data","includes\\cards-ajax-front.php",{"action":297,"nopriv":47,"callback":297,"hasNonce":47,"hasCapCheck":47,"file":298,"line":300},5,{"action":302,"nopriv":292,"callback":302,"hasNonce":47,"hasCapCheck":47,"file":298,"line":303},"eos_mix_cards",29,{"action":302,"nopriv":47,"callback":302,"hasNonce":47,"hasCapCheck":47,"file":298,"line":305},30,[],[308,313,316],{"tag":309,"callback":310,"file":311,"line":312},"card_reading","eos_cards_raeding_shortcode","includes\\oc-helper.php",89,{"tag":314,"callback":310,"file":311,"line":315},"cards_reading",90,{"tag":317,"callback":318,"file":259,"line":319},"oracle_cards","shortcode",97,[],{"dangerousFunctions":322,"sqlUsage":323,"outputEscaping":325,"fileOperations":25,"externalRequests":25,"nonceChecks":14,"capabilityChecks":346,"bundledLibraries":347},[],{"prepared":24,"raw":25,"locations":324},[],{"escaped":326,"rawEcho":327,"locations":328},202,7,[329,332,334,336,338,340,343],{"file":173,"line":330,"context":331},257,"raw output",{"file":173,"line":333,"context":331},431,{"file":173,"line":335,"context":331},432,{"file":298,"line":337,"context":331},52,{"file":259,"line":339,"context":331},215,{"file":341,"line":342,"context":331},"templates\\cards-reading.php",24,{"file":344,"line":345,"context":331},"templates\\preview.php",15,6,[348],{"name":349,"version":35,"knownCves":350},"TinyMCE",[],[352,369,377,397,408,432,442,450],{"entryPoint":353,"graph":354,"unsanitizedCount":25,"severity":368},"eos_cards_save_setting (admin\\cards-ajax-admin.php:59)",{"nodes":355,"edges":366},[356,361],{"id":357,"type":358,"label":359,"file":293,"line":360},"n0","source","$_POST['options_json']",73,{"id":362,"type":363,"label":364,"file":293,"line":360,"wp_function":365},"n1","sink","update_option() [Settings Manipulation]","update_option",[367],{"from":357,"to":362,"sanitized":292},"low",{"entryPoint":370,"graph":371,"unsanitizedCount":25,"severity":368},"\u003Ccards-ajax-admin> (admin\\cards-ajax-admin.php:0)",{"nodes":372,"edges":375},[373,374],{"id":357,"type":358,"label":359,"file":293,"line":360},{"id":362,"type":363,"label":364,"file":293,"line":360,"wp_function":365},[376],{"from":357,"to":362,"sanitized":292},{"entryPoint":378,"graph":379,"unsanitizedCount":25,"severity":368},"eos_cards_generate_cards (admin\\cards-options.php:68)",{"nodes":380,"edges":394},[381,384,388,392],{"id":357,"type":358,"label":382,"file":173,"line":383},"$_GET",76,{"id":362,"type":363,"label":385,"file":173,"line":386,"wp_function":387},"echo() [XSS]",115,"echo",{"id":389,"type":358,"label":390,"file":173,"line":391},"n2","$_GET['tag_ID']",131,{"id":393,"type":363,"label":385,"file":173,"line":391,"wp_function":387},"n3",[395,396],{"from":357,"to":362,"sanitized":292},{"from":389,"to":393,"sanitized":292},{"entryPoint":398,"graph":399,"unsanitizedCount":25,"severity":368},"eos_card_decks_callback (admin\\cards-options.php:160)",{"nodes":400,"edges":406},[401,404],{"id":357,"type":358,"label":402,"file":173,"line":403},"$_GET (x3)",165,{"id":362,"type":363,"label":385,"file":173,"line":405,"wp_function":387},177,[407],{"from":357,"to":362,"sanitized":292},{"entryPoint":409,"graph":410,"unsanitizedCount":155,"severity":368},"\u003Ccards-options> (admin\\cards-options.php:0)",{"nodes":411,"edges":427},[412,414,415,416,417,420,424],{"id":357,"type":358,"label":413,"file":173,"line":383},"$_GET (x4)",{"id":362,"type":363,"label":385,"file":173,"line":386,"wp_function":387},{"id":389,"type":358,"label":390,"file":173,"line":391},{"id":393,"type":363,"label":385,"file":173,"line":391,"wp_function":387},{"id":418,"type":358,"label":419,"file":173,"line":11},"n4","$_GET (x2)",{"id":421,"type":422,"label":423,"file":173,"line":11},"n5","transform","→ eos_cards_update_option()",{"id":425,"type":363,"label":364,"file":173,"line":426,"wp_function":365},"n6",21,[428,429,430,431],{"from":357,"to":362,"sanitized":292},{"from":389,"to":393,"sanitized":292},{"from":418,"to":421,"sanitized":47},{"from":421,"to":425,"sanitized":47},{"entryPoint":433,"graph":434,"unsanitizedCount":25,"severity":368},"eos_cards_get_data (includes\\cards-ajax-front.php:11)",{"nodes":435,"edges":440},[436,439],{"id":357,"type":358,"label":437,"file":298,"line":438},"$_POST",16,{"id":362,"type":363,"label":385,"file":298,"line":342,"wp_function":387},[441],{"from":357,"to":362,"sanitized":292},{"entryPoint":443,"graph":444,"unsanitizedCount":25,"severity":368},"\u003Ccards-ajax-front> (includes\\cards-ajax-front.php:0)",{"nodes":445,"edges":448},[446,447],{"id":357,"type":358,"label":437,"file":298,"line":438},{"id":362,"type":363,"label":385,"file":298,"line":342,"wp_function":387},[449],{"from":357,"to":362,"sanitized":292},{"entryPoint":451,"graph":452,"unsanitizedCount":25,"severity":368},"\u003Cpreview> (templates\\preview.php:0)",{"nodes":453,"edges":457},[454,456],{"id":357,"type":358,"label":455,"file":344,"line":345},"$_GET['deck']",{"id":362,"type":363,"label":385,"file":344,"line":345,"wp_function":387},[458],{"from":357,"to":362,"sanitized":292},{"summary":460,"deductions":461},"The 'oracle-cards' plugin, version 1.2.7, exhibits a mixed security posture. On the positive side, it demonstrates good practices by using prepared statements for all SQL queries, has a high percentage of properly escaped output, and performs nonce and capability checks on a majority of its entry points. There are no reported dangerous functions, file operations, or external HTTP requests, which are excellent indicators of secure coding. However, a significant concern is the presence of four unprotected AJAX handlers, which represent a substantial attack surface that could be exploited by unauthenticated users.\n\nThe vulnerability history indicates a past medium-severity Cross-Site Scripting (XSS) vulnerability, which, while currently patched, suggests a recurring pattern of input sanitization issues. The single flow with an unsanitized path identified in the taint analysis, despite not being classified as critical or high severity, aligns with this XSS history and warrants attention as a potential vector for indirect data compromise or manipulation.\n\nOverall, while the plugin has strong foundations in SQL and output handling, the unprotected AJAX endpoints and the historical XSS vulnerability present clear risks. Addressing these specific areas would significantly improve the plugin's security.",[462,464,466],{"reason":463,"points":178},"Unprotected AJAX handlers",{"reason":465,"points":300},"Flow with unsanitized paths",{"reason":467,"points":178},"Past medium severity XSS vulnerability","2026-03-16T20:00:38.969Z",{"wat":470,"direct":479},{"assetPaths":471,"generatorPatterns":474,"scriptPaths":475,"versionParams":476},[472,473],"\u002Fwp-content\u002Fplugins\u002Foracle-cards\u002Fassets-1.7.0\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Foracle-cards\u002Fassets-1.7.0\u002Fjs\u002Fscripts.js",[],[473],[477,478],"oracle-cards\u002Fassets-1.7.0\u002Fcss\u002Fstyle.css?ver=","oracle-cards\u002Fassets-1.7.0\u002Fjs\u002Fscripts.js?ver=",{"cssClasses":480,"htmlComments":481,"htmlAttributes":482,"restEndpoints":483,"jsGlobals":484,"shortcodeOutput":486},[],[],[],[],[485],"window.eos_cards_ajax_url",[487],"[oracle_cards]",{"error":292,"url":489,"statusCode":490,"statusMessage":491,"message":491},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Foracle-cards\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":179,"versions":493},[494,501,506,513,520,527,534,540,548,556,564],{"version":495,"download_url":496,"svn_tag_url":497,"released_at":35,"has_diff":47,"diff_files_changed":498,"diff_lines":35,"trac_diff_url":499,"vulnerabilities":500,"is_current":47},"2.2.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foracle-cards.2.2.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Foracle-cards\u002Ftags\u002F2.2.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Foracle-cards%2Ftags%2F1.2.7&new_path=%2Foracle-cards%2Ftags%2F2.2.0",[],{"version":6,"download_url":22,"svn_tag_url":502,"released_at":35,"has_diff":47,"diff_files_changed":503,"diff_lines":35,"trac_diff_url":504,"vulnerabilities":505,"is_current":292},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Foracle-cards\u002Ftags\u002F1.2.7\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Foracle-cards%2Ftags%2F1.2.6&new_path=%2Foracle-cards%2Ftags%2F1.2.7",[],{"version":507,"download_url":508,"svn_tag_url":509,"released_at":35,"has_diff":47,"diff_files_changed":510,"diff_lines":35,"trac_diff_url":511,"vulnerabilities":512,"is_current":47},"1.2.6","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foracle-cards.1.2.6.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Foracle-cards\u002Ftags\u002F1.2.6\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Foracle-cards%2Ftags%2F1.2.5&new_path=%2Foracle-cards%2Ftags%2F1.2.6",[],{"version":514,"download_url":515,"svn_tag_url":516,"released_at":35,"has_diff":47,"diff_files_changed":517,"diff_lines":35,"trac_diff_url":518,"vulnerabilities":519,"is_current":47},"1.2.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foracle-cards.1.2.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Foracle-cards\u002Ftags\u002F1.2.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Foracle-cards%2Ftags%2F1.2.4&new_path=%2Foracle-cards%2Ftags%2F1.2.5",[],{"version":521,"download_url":522,"svn_tag_url":523,"released_at":35,"has_diff":47,"diff_files_changed":524,"diff_lines":35,"trac_diff_url":525,"vulnerabilities":526,"is_current":47},"1.2.4","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foracle-cards.1.2.4.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Foracle-cards\u002Ftags\u002F1.2.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Foracle-cards%2Ftags%2F1.2.3&new_path=%2Foracle-cards%2Ftags%2F1.2.4",[],{"version":528,"download_url":529,"svn_tag_url":530,"released_at":35,"has_diff":47,"diff_files_changed":531,"diff_lines":35,"trac_diff_url":532,"vulnerabilities":533,"is_current":47},"1.2.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foracle-cards.1.2.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Foracle-cards\u002Ftags\u002F1.2.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Foracle-cards%2Ftags%2F1.2.2&new_path=%2Foracle-cards%2Ftags%2F1.2.3",[],{"version":37,"download_url":535,"svn_tag_url":536,"released_at":35,"has_diff":47,"diff_files_changed":537,"diff_lines":35,"trac_diff_url":538,"vulnerabilities":539,"is_current":47},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foracle-cards.1.2.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Foracle-cards\u002Ftags\u002F1.2.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Foracle-cards%2Ftags%2F1.2.1&new_path=%2Foracle-cards%2Ftags%2F1.2.2",[],{"version":541,"download_url":542,"svn_tag_url":543,"released_at":35,"has_diff":47,"diff_files_changed":544,"diff_lines":35,"trac_diff_url":545,"vulnerabilities":546,"is_current":47},"1.2.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foracle-cards.1.2.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Foracle-cards\u002Ftags\u002F1.2.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Foracle-cards%2Ftags%2F1.2.0&new_path=%2Foracle-cards%2Ftags%2F1.2.1",[547],{"id":31,"url_slug":32,"title":33,"severity":38,"cvss_score":39,"vuln_type":41,"patched_in_version":37},{"version":549,"download_url":550,"svn_tag_url":551,"released_at":35,"has_diff":47,"diff_files_changed":552,"diff_lines":35,"trac_diff_url":553,"vulnerabilities":554,"is_current":47},"1.2.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foracle-cards.1.2.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Foracle-cards\u002Ftags\u002F1.2.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Foracle-cards%2Ftags%2F1.1.9&new_path=%2Foracle-cards%2Ftags%2F1.2.0",[555],{"id":31,"url_slug":32,"title":33,"severity":38,"cvss_score":39,"vuln_type":41,"patched_in_version":37},{"version":557,"download_url":558,"svn_tag_url":559,"released_at":35,"has_diff":47,"diff_files_changed":560,"diff_lines":35,"trac_diff_url":561,"vulnerabilities":562,"is_current":47},"1.1.9","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foracle-cards.1.1.9.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Foracle-cards\u002Ftags\u002F1.1.9\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Foracle-cards%2Ftags%2F0.1.0&new_path=%2Foracle-cards%2Ftags%2F1.1.9",[563],{"id":31,"url_slug":32,"title":33,"severity":38,"cvss_score":39,"vuln_type":41,"patched_in_version":37},{"version":565,"download_url":566,"svn_tag_url":567,"released_at":35,"has_diff":47,"diff_files_changed":568,"diff_lines":35,"trac_diff_url":35,"vulnerabilities":569,"is_current":47},"0.1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foracle-cards.0.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Foracle-cards\u002Ftags\u002F0.1.0\u002F",[],[570],{"id":31,"url_slug":32,"title":33,"severity":38,"cvss_score":39,"vuln_type":41,"patched_in_version":37}]