[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjX5Z0Ai0YaEzSj6iymGKyLQdiEJ177tl0FPg58FU-Wg":3},{"slug":4,"name":5,"version":6,"author":5,"author_profile":7,"description":8,"short_description":9,"active_installs":10,"downloaded":11,"rating":12,"num_ratings":12,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":12,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":61,"crawl_stats":35,"alternatives":66,"analysis":164,"fingerprints":312},"ownerrez","OwnerRez","1.2.6","https:\u002F\u002Fprofiles.wordpress.org\u002Fownerrez\u002F","\u003Cp>OwnerRez API WordPress Plugin\u003C\u002Fp>\n\u003Cp>The official WordPress plugin for the OwnerRez API. View \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fownerrez\u002Forez-wp\" rel=\"nofollow ugc\">the readme\u003C\u002Fa> for more information on using this plugin.\u003C\u002Fp>\n\u003Cp>This plugin provides interconnectivity between your OwnerRez account and your WordPress website. This plugin will communicate with the \u003Ca href=\"https:\u002F\u002Fwww.ownerrez.com\" rel=\"nofollow ugc\">OwnerRez API\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>The OwnerRez terms of service and privacy policy govern our usage of data collected through this plugin.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.ownerrez.com\u002Fsupport\u002Farticles\u002Fprivacy-security-terms-of-service\" rel=\"nofollow ugc\">Terms of Service\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.ownerrez.com\u002Fsupport\u002Farticles\u002Fprivacy-security-privacy-policy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Please submit questions or problems to \u003Ca href=\"mailto:help@ownerrez.com\" rel=\"nofollow ugc\">help@ownerrez.com\u003C\u002Fa>\u003C\u002Fp>\n","The official WordPress plugin for the OwnerRez API.",700,12658,0,"2026-02-23T18:41:00.000Z","6.9.4","5.4","",[18,19,20,21,22],"airbnb","booking","property-management","vacation-rental","vrbo","https:\u002F\u002Fwww.ownerrez.com\u002Fsupport\u002Fwordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fownerrez.1.2.6.zip",98,2,"2025-07-04 00:00:00","2026-03-15T15:16:48.613Z",[30,46],{"id":31,"url_slug":32,"title":33,"description":34,"plugin_slug":4,"theme_slug":35,"affected_versions":36,"patched_in_version":37,"severity":38,"cvss_score":39,"cvss_vector":40,"vuln_type":41,"published_date":27,"updated_date":42,"references":43,"days_to_patch":45},"CVE-2025-28957","ownerrez-authenticated-contributor-stored-cross-site-scripting","OwnerRez \u003C= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting","The OwnerRez plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=1.2.1","1.2.2","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-07-21 20:36:23",[44],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fd058b578-3bf1-4bd4-a13b-8b55d4800fd9?source=api-prod",18,{"id":47,"url_slug":48,"title":49,"description":50,"plugin_slug":4,"theme_slug":35,"affected_versions":51,"patched_in_version":52,"severity":38,"cvss_score":53,"cvss_vector":54,"vuln_type":55,"published_date":56,"updated_date":57,"references":58,"days_to_patch":60},"CVE-2025-31814","ownerrez-cross-site-request-forgery","OwnerRez \u003C= 1.2.0 - Cross-Site Request Forgery","The OwnerRez plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.0. This is due to missing or incorrect nonce validation on the menu_settings_save() function. This makes it possible for unauthenticated attackers to update settings granted they can trick a site administrator into performing an action such as clicking on a link.","\u003C=1.2.0","1.2.1",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2025-04-01 00:00:00","2025-05-23 13:31:12",[59],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Ff7ed8472-1e42-4abd-9978-8f5080ec2ee1?source=api-prod",53,{"slug":4,"display_name":5,"profile_url":7,"plugin_count":62,"total_installs":10,"avg_security_score":25,"avg_patch_time_days":63,"trust_score":64,"computed_at":65},1,36,87,"2026-04-04T21:22:57.649Z",[67,88,107,126,147],{"slug":68,"name":69,"version":70,"author":71,"author_profile":72,"description":73,"short_description":74,"active_installs":10,"downloaded":75,"rating":76,"num_ratings":77,"last_updated":78,"tested_up_to":79,"requires_at_least":80,"requires_php":81,"tags":82,"homepage":16,"download_link":86,"security_score":87,"vuln_count":12,"unpatched_count":12,"last_vuln_date":35,"fetched_at":28},"lodgify-booking-engine","Booking Engine by Lodgify","1.0.1","canizbul","https:\u002F\u002Fprofiles.wordpress.org\u002Fcanizbul\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.lodgify.com\u002F\" rel=\"nofollow ugc\">Lodgify\u003C\u002Fa> is a vacation rental property management software (PMS) that simplifies the management and marketing of lodging businesses for independent hosts and property managers. With Lodgify, users can take advantage of property management (PM) modules, synchronize their calendars across top booking platforms (such as Airbnb, Vrbo, and Booking.com), and drive direct bookings through a direct booking site or direct booking widget.\u003C\u002Fp>\n\u003Cp>Lodgify’s most popular features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Channel manager\u003C\u002Fli>\n\u003Cli>Reservation system\u003C\u002Fli>\n\u003Cli>Website builder\u003C\u002Fli>\n\u003Cli>Embeddable booking widget\u003C\u002Fli>\n\u003Cli>Unified inbox\u003C\u002Fli>\n\u003Cli>Guest management tools\u003C\u002Fli>\n\u003Cli>Task management tools\u003C\u002Fli>\n\u003Cli>Automation & AI tools\u003C\u002Fli>\n\u003Cli>Reporting & analytics\u003C\u002Fli>\n\u003Cli>Payment processing\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Lodgify’s vacation rental direct booking engine enables you to:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Accept direct bookings directly through your existing vacation rental website.\u003C\u002Fli>\n\u003Cli>Process payments for your direct bookings via top payment gateways. You can accept Visa, MasterCard, and American Express the moment you launch the direct booking engine.\u003C\u002Fli>\n\u003Cli>Sync your direct booking calendar, reservations, and listings with the rest of your channels (such as Airbnb or Vrbo).\u003C\u002Fli>\n\u003Cli>Ensure seamless communication with your direct booking guests through automation and synchronization.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>How the Lodgify direct booking engine works:\u003C\u002Fp>\n\u003Cp>To start driving direct bookings for your business, simply paste the embeddable code Lodgify generates into your vacation rental site. You also have the option to customize the direct booking widget so that it fits seamlessly with your website’s look and feel via your Lodgify account.\u003C\u002Fp>\n\u003Cp>Users can start making direct bookings through your site as soon as you install the plugin. When users click on the booking widget, they will be directed to the All Properties page, the Rental page, and finally the Checkout page, in that order:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The All Properties page is the page where users can see all available rentals. Users can select dates and also see each rental’s location.\u003C\u002Fli>\n\u003Cli>The Rental page is the page where users see all the details for the selected property, including an overview, rates, reviews, amenities, and house rules.\u003C\u002Fli>\n\u003Cli>The Checkout page is where users complete their booking for the selected rental. They can fine-tune the final settings, such as contact details, and complete their transaction by choosing their preferred payment method.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fhelp.lodgify.com\u002Fhc\u002Fen-us\u002Farticles\u002F360002880853-Use-Lodgify-s-booking-widget-on-an-external-website\" rel=\"nofollow ugc\">Visit the Lodgify Knowledge Base\u003C\u002Fa> to learn more about the Lodgify direct booking engine.\u003C\u002Fp>\n\u003Cp>Read more about Lodgify’s \u003Ca href=\"https:\u002F\u002Fwww.lodgify.com\u002Fterms\u002F\" rel=\"nofollow ugc\">terms and conditions\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwww.lodgify.com\u002Fprivacy\u002F\" rel=\"nofollow ugc\">privacy policy\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Types of Booking Engine’s\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Search Box, in case you have several rentals, the Search Box will show a possibility to filter by location. If you only offer one rental, guests can search by available dates and number of guests.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How to start using it?\u003C\u002Fh4>\n\u003Cp>Simply signing or logging to Lodgify will be sufficient to begin the journey (You can also visit the Lodgify plugin in WordPress to see the next steps). Then the rentals hosted in Lodgify can be used on your website through this booking engine plugin.\u003C\u002Fp>\n\u003Cp>The following must be done first to be able to use the plugin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>You have a Lodgify subscription\u003C\u002Fli>\n\u003Cli>Have rentals at Lodgify. This is super easy, you can also automatically import your rentals through OTA’s.\u003C\u002Fli>\n\u003Cli>Now you can use the booking engine code snippet on your WordPress website\u003C\u002Fli>\n\u003C\u002Ful>\n","Easy to use booking engine for your vacation rental website. List your rentals on your site and save on commissions (from big OTA's).",54959,80,4,"2024-08-15T17:25:00.000Z","6.5.8","5.6","7.2",[18,83,84,85,21],"booking-engine","lodgify","vacation-home","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flodgify-booking-engine.1.0.1.zip",92,{"slug":89,"name":90,"version":91,"author":92,"author_profile":93,"description":94,"short_description":95,"active_installs":12,"downloaded":96,"rating":12,"num_ratings":12,"last_updated":97,"tested_up_to":14,"requires_at_least":98,"requires_php":99,"tags":100,"homepage":104,"download_link":105,"security_score":106,"vuln_count":12,"unpatched_count":12,"last_vuln_date":35,"fetched_at":28},"domilocus","Domilocus","1.0.17","consulinfolm","https:\u002F\u002Fprofiles.wordpress.org\u002Fconsulinfolm\u002F","\u003Cp>Domilocus is a comprehensive booking management system designed for vacation rentals, apartments, and property managers. Manage your properties, bookings, calendar, and pricing all from your WordPress dashboard.\u003C\u002Fp>\n\u003Ch4>Free Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Property Management\u003C\u002Fstrong> – Add and manage unlimited apartments\u002Fproperties with photo galleries (backend)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Booking Management\u003C\u002Fstrong> – Accept and manage bookings manually from your WordPress dashboard\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Visual Calendar\u003C\u002Fstrong> – See availability and bookings at a glance in admin area\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Email Notifications\u003C\u002Fstrong> – Basic booking confirmation emails\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multi-language\u003C\u002Fstrong> – Available in Italian, English, German, French, Spanish\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable\u003C\u002Fstrong> – Settings for check-in\u002Fout times, minimum stays, guest limits\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Backend Administration\u003C\u002Fstrong> – Complete admin interface for property and booking management\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Note:\u003C\u002Fstrong> The free version provides backend management only. Frontend features (property display, booking forms, payments) require Premium add-ons.\u003C\u002Fp>\n\u003Ch4>Premium Add-ons\u003C\u002Fh4>\n\u003Cp>Extend Domilocus with powerful premium add-ons available at \u003Ca href=\"https:\u002F\u002Fdomilocus.consulinfo.it\u002Fpremium\" rel=\"nofollow ugc\">domilocus.consulinfo.it\u003C\u002Fa>:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Starter Plan (€19\u002Fmonth)\u003C\u002Fstrong>\u003Cbr \u002F>\n* Online booking forms for guests\u003Cbr \u002F>\n* Automated pricing rules (seasons, weekends, discounts)\u003Cbr \u002F>\n* Email automation\u003Cbr \u002F>\n* Basic statistics (occupancy, revenue)\u003Cbr \u002F>\n* Online payment gateways (Stripe, PayPal)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Professional Plan (€39\u002Fmonth)\u003C\u002Fstrong>\u003Cbr \u002F>\n* Everything in Starter, plus:\u003Cbr \u002F>\n* Advanced tariff system (flexible pricing based on stay duration and booking advance)\u003Cbr \u002F>\n* Dynamic pricing (automatic price optimization)\u003Cbr \u002F>\n* iCal synchronization (Airbnb, Booking.com integration)\u003Cbr \u002F>\n* Event-based pricing (automatic adjustments for local events)\u003Cbr \u002F>\n* Advanced statistics and reports\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Premium Plan (€69\u002Fmonth)\u003C\u002Fstrong>\u003Cbr \u002F>\n* Everything in Professional, plus:\u003Cbr \u002F>\n* Multiple payment gateways\u003Cbr \u002F>\n* Advanced API access\u003Cbr \u002F>\n* White label (remove branding)\u003Cbr \u002F>\n* Detailed export reports\u003Cbr \u002F>\n* Priority support\u003C\u002Fp>\n\u003Cp>Premium add-ons are installed separately and extend the free version with additional functionality.\u003C\u002Fp>\n\u003Ch4>Perfect For\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Vacation rental owners\u003C\u002Fli>\n\u003Cli>Property managers\u003C\u002Fli>\n\u003Cli>Bed & breakfasts\u003C\u002Fli>\n\u003Cli>Apartment rentals\u003C\u002Fli>\n\u003Cli>Holiday homes\u003C\u002Fli>\n\u003Cli>Short-term rentals\u003C\u002Fli>\n\u003Cli>Guest houses\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>The FREE version of this plugin does NOT connect to any external services.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Premium add-ons (sold separately) may connect to third-party services to provide specific functionalities:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Google Maps\u003C\u002Fstrong> (Premium Add-on)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Used to display apartment locations on maps.\u003C\u002Fli>\n\u003Cli>Data sent: IP address (to Google servers when map loads).\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcloud.google.com\u002Fmaps-platform\u002Fterms\u002F\" rel=\"nofollow ugc\">Terms of Service\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fpolicies.google.com\u002Fprivacy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Stripe\u003C\u002Fstrong> (Premium Add-on)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Used for processing credit card payments.\u003C\u002Fli>\n\u003Cli>Data sent: Payment details, customer information.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fstripe.com\u002Flegal\" rel=\"nofollow ugc\">Terms of Service\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fstripe.com\u002Fprivacy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>PayPal\u003C\u002Fstrong> (Premium Add-on)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Used for processing payments.\u003C\u002Fli>\n\u003Cli>Data sent: Payment details, customer information.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.paypal.com\u002Fus\u002Fwebapps\u002Fmpp\u002Fua\u002Fuseragreement-full\" rel=\"nofollow ugc\">Terms of Service\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwww.paypal.com\u002Fus\u002Fwebapps\u002Fmpp\u002Fua\u002Fprivacy-full\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support, feature requests, or bug reports:\u003Cbr \u002F>\n* Free version support: WordPress.org support forum\u003Cbr \u002F>\n* Premium support: https:\u002F\u002Fdomilocus.consulinfo.it\u002Fsupport\u003Cbr \u002F>\n* Documentation: https:\u002F\u002Fdomilocus.consulinfo.it\u002Fdocs\u003Cbr \u002F>\n* GitHub: https:\u002F\u002Fgithub.com\u002Fconsulinfo\u002Fdomilocus\u003C\u002Fp>\n","Complete booking and property management solution for vacation rentals, apartments, and accommodations with backend administration.",639,"2026-03-10T12:45:00.000Z","6.0","8.0",[19,101,20,102,103],"calendar","reservations","vacation-rentals","https:\u002F\u002Fdomilocus.consulinfo.it","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdomilocus.1.0.17.zip",100,{"slug":108,"name":109,"version":110,"author":111,"author_profile":112,"description":113,"short_description":114,"active_installs":12,"downloaded":115,"rating":12,"num_ratings":12,"last_updated":116,"tested_up_to":117,"requires_at_least":118,"requires_php":119,"tags":120,"homepage":16,"download_link":125,"security_score":106,"vuln_count":12,"unpatched_count":12,"last_vuln_date":35,"fetched_at":28},"single-page-booking-system","Simple rental system","2.2.1","i-rent.net","https:\u002F\u002Fprofiles.wordpress.org\u002Firentnet\u002F","\u003Cp>Introducing the i-rent.net Accommodation Rental Plugin for WordPress!\u003C\u002Fp>\n\u003Cp>Exclusively designed for i-rent.net clients, this plugin seamlessly integrates with your WordPress website to showcase and manage accommodations. With a user-friendly booking system powered by the i-rent.net property management platform, you can provide a hassle-free experience for your guests.\u003C\u002Fp>\n\u003Cp>Key Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Tailored for i-rent.net Clients\u003C\u002Fstrong>: Developed exclusively for i-rent.net clients, ensuring a seamless connection between your property management system and WordPress site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Effortless Integration\u003C\u002Fstrong>: Easily add sleek rental listings and a user-friendly booking system to any page of your WordPress site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Secure Booking\u003C\u002Fstrong>: Guests can confidently book accommodations, thanks to the integration with i-rent.net and the need for valid credentials.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Customizable Settings\u003C\u002Fstrong>: Personalize the rental booking system parameters through the settings page to match your preferences and operational needs.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Getting Started:\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>Install the Plugin\u003C\u002Fstrong>: Quickly download and install the plugin on your WordPress site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Obtain Credentials\u003C\u002Fstrong>: Reach out to i-rent.net to get the necessary credentials for secure integration.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Adjust Settings\u003C\u002Fstrong>: Tailor the rental system settings on the plugin’s interface according to your requirements.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Showcase Rentals\u003C\u002Fstrong>: Choose a page on your website to display rental listings and the booking system.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Elevate your rental management experience with the i-rent.net Accommodation Rental Plugin for WordPress. Streamline processes, enhance guest satisfaction, and bring efficiency to your online rental bookings. Get started today!\u003C\u002Fp>\n","This WordPress plugin integrates the simple rental booking system from i-rent.net into a selected page on the user’s website.",1724,"2025-05-21T12:58:00.000Z","6.8.5","4.7","7.4",[121,122,123,124,103],"accommodation-management","booking-system","rental-property-management","short-term-rentals","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsingle-page-booking-system.zip",{"slug":127,"name":128,"version":129,"author":130,"author_profile":131,"description":132,"short_description":133,"active_installs":134,"downloaded":135,"rating":106,"num_ratings":136,"last_updated":137,"tested_up_to":14,"requires_at_least":138,"requires_php":16,"tags":139,"homepage":143,"download_link":144,"security_score":145,"vuln_count":77,"unpatched_count":12,"last_vuln_date":146,"fetched_at":28},"wp-airbnb-review-slider","WP Airbnb Review Slider","4.4","jgwhite33","https:\u002F\u002Fprofiles.wordpress.org\u002Fjgwhite33\u002F","\u003Cp>Now you can easily display your Airbnb reviews on your WordPress site in a cool slider or grid! Take our word for it, testimonials work a lot better when your customers can verify they came from Airbnb directly.\u003C\u002Fp>\n\u003Cp>I created this plugin to easily fetch your Airbnb reviews and then display them on your WordPress site. It’s simple and easy to use. Here’s a video of setting up Airbnb reviews on your site in less than 2 minutes!\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FFmwqov_RwiA?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>Some of the Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Display your Airbnb reviews in a slider or a static grid.\u003C\u002Fli>\n\u003Cli>Specify the number of reviews per a row and the number of rows.\u003C\u002Fli>\n\u003Cli>All reviews have the Airbnb logo that link to the original source.\u003C\u002Fli>\n\u003Cli>Mobile friendly!\u003C\u002Fli>\n\u003Cli>Display then on a Page or Post with a Shortcode or use the Widget.\u003C\u002Fli>\n\u003Cli>Airbnb is checked each day for new reviews.\u003C\u002Fli>\n\u003Cli>Create an unlimited number of review templates for your site.\u003C\u002Fli>\n\u003Cli>Each review template can be customized and you can even add Custom CSS.\u003C\u002Fli>\n\u003Cli>Template display options like:  border radius, show\u002Fhide date, show\u002Fhide star rating, background and text colors.\u003C\u002Fli>\n\u003Cli>Hide the reviews that don’t have any text.\u003C\u002Fli>\n\u003Cli>Sort the reviews randomly or by newest.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Check out our other free versions!\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-facebook-reviews\u002F\" rel=\"ugc\">Facebook\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-google-places-review-slider\u002F\" rel=\"ugc\">Google\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-yelp-review-slider\u002F\" rel=\"ugc\">Yelp\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-tripadvisor-review-slider\u002F\" rel=\"ugc\">TripAdvisor\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-thumbtack-review-slider\u002F\" rel=\"ugc\">Thumbtack\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Freview-slider-for-woocommerce\u002F\" rel=\"ugc\">WooCommerce\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>If you have multiple Airbnb properties or would like to also download other types of reviews check out the Pro version of the plugin.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpreviewslider.com\u002F\" rel=\"nofollow ugc\">Pro Version features!\u003C\u002Fa>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>More template styles!\u003C\u002Fli>\n\u003Cli>Grab your latest 100 reviews multiple locations.\u003C\u002Fli>\n\u003Cli>Create summary badges of your reviews.\u003C\u002Fli>\n\u003Cli>Make your badges or review sliders float on the page!\u003C\u002Fli>\n\u003Cli>Front end submission form.\u003C\u002Fli>\n\u003Cli>Also download reviews from 90+ other social sites like Google, Facebook, TripAdvisor, Yelp, etc…\u003C\u002Fli>\n\u003Cli>Crazy amount of review filters so you only show the ones you want.\u003C\u002Fli>\n\u003Cli>Lots of slider controls.\u003C\u002Fli>\n\u003C\u002Ful>\n","Download and display your Airbnb business reviews in your Posts, Pages, and Widget areas with a review slider!",1000,39575,54,"2025-12-03T17:06:00.000Z","4.0.1",[18,140,141,142,22],"reviews","slider","testimonials","https:\u002F\u002Fwpreviewslider.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-airbnb-review-slider.4.4.zip",93,"2025-11-06 00:00:00",{"slug":148,"name":149,"version":150,"author":151,"author_profile":152,"description":153,"short_description":154,"active_installs":106,"downloaded":155,"rating":12,"num_ratings":12,"last_updated":156,"tested_up_to":157,"requires_at_least":158,"requires_php":80,"tags":159,"homepage":161,"download_link":162,"security_score":163,"vuln_count":12,"unpatched_count":12,"last_vuln_date":35,"fetched_at":28},"igms-direct-booking","iGMS Direct Booking","1.3","igms","https:\u002F\u002Fprofiles.wordpress.org\u002Figms\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.igms.com\u002Fhelp\u002Fknowledge-base\u002Fhow-can-igms-help-me\u002F\" rel=\"nofollow ugc\">iGMS is a vacation rental software\u003C\u002Fa> that helps hosts to handle day-to-day short-term rental management tasks efficiently. With iGMS, users can operate Airbnb and Vrbo accounts, as well as Booking.com properties via a single interface, with access to the same advanced functionality through the mobile app.\u003C\u002Fp>\n\u003Cp>On average, our users see a 34% increase in the number of reservations and are able to automate up to 70% of their daily communication.\u003C\u002Fp>\n\u003Cp>Our most popular features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Channel manager\u003C\u002Fli>\n\u003Cli>Unified inbox\u003C\u002Fli>\n\u003Cli>Tools for team coordination\u003C\u002Fli>\n\u003Cli>Automated guest messaging and message templates\u003C\u002Fli>\n\u003Cli>Payment processing\u003C\u002Fli>\n\u003Cli>Automated guest reviews for Airbnb\u003C\u002Fli>\n\u003Cli>Detailed financial reporting\u003C\u002Fli>\n\u003Cli>Direct booking management toolkit\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>With the iGMS Direct Booking Widget, you can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Allow your guests to make reservations directly via your website\u003C\u002Fli>\n\u003Cli>Process payments for your direct bookings via \u003Ca href=\"https:\u002F\u002Fwww.igms.com\u002Fhelp\u002Fknowledge-base\u002Fhow-to-integrate-a-stripe-account-to-igms\u002F\" rel=\"nofollow ugc\">Stripe\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Make sure your direct bookings sync with the rest of your channels\u003C\u002Fli>\n\u003Cli>Make your communication with direct booking guests flawless with the power of automation\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can check out the Direct Booking Widget in action on the following website: \u003Ca href=\"http:\u002F\u002Fvancouverdirect.igms.com\" rel=\"nofollow ugc\">vancouverdirect.igms.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>The Direct Booking Widget is developed by \u003Ca href=\"https:\u002F\u002Fwww.igms.com\" rel=\"nofollow ugc\">iGMS\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>By using the plugin, you agree to the iGMS \u003Ca href=\"https:\u002F\u002Fwww.igms.com\u002Fterms\u002F\" rel=\"nofollow ugc\">terms of use\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>All reservations created and accepted through the Direct Booking Widget are stored, managed, and processed by iGMS in accordance with the \u003Ca href=\"https:\u002F\u002Fwww.igms.com\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">privacy policy\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>iGMS is committed to securing your data.\u003C\u002Fp>\n","iGMS is introducing the Direct Booking Widget. It allows your guests to select and book dates with you right via your website.",5420,"2023-09-26T15:06:00.000Z","6.3.8","5.6.2",[18,19,160,151,102],"direct-booking","https:\u002F\u002Fwww.igms.com\u002Fhelp\u002Fknowledge-base\u002Figms-direct-booking-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Figms-direct-booking.zip",85,{"attackSurface":165,"codeSignals":222,"taintFlows":253,"riskAssessment":301,"analyzedAt":311},{"hooks":166,"ajaxHandlers":207,"restRoutes":214,"shortcodes":215,"cronEvents":220,"entryPointCount":221,"unprotectedCount":26},[167,173,176,178,182,185,188,191,194,196,199,202],{"type":168,"name":169,"callback":170,"file":171,"line":172},"action","plugins_loaded","anonymous","includes\\class-ownerrez.php",127,{"type":168,"name":174,"callback":170,"file":171,"line":175},"admin_enqueue_scripts",141,{"type":168,"name":174,"callback":170,"file":171,"line":177},142,{"type":179,"name":180,"callback":170,"file":171,"line":181},"filter","admin_menu",143,{"type":168,"name":183,"callback":170,"file":171,"line":184},"admin_post_save_ownerrez_settings",144,{"type":168,"name":186,"callback":170,"file":171,"line":187},"admin_post_clear_ownerrez_transients",145,{"type":179,"name":189,"callback":170,"file":171,"line":190},"plugin_action_links_ownerrez\u002Fownerrez.php",146,{"type":168,"name":192,"callback":170,"file":171,"line":193},"wp_enqueue_scripts",167,{"type":168,"name":192,"callback":170,"file":171,"line":195},168,{"type":168,"name":197,"callback":170,"file":171,"line":198},"parse_request",169,{"type":168,"name":200,"callback":170,"file":171,"line":201},"init",173,{"type":168,"name":203,"callback":204,"file":205,"line":206},"activated_plugin","activated_ownerrez","ownerrez.php",73,[208,211],{"action":4,"nopriv":209,"callback":170,"hasNonce":209,"hasCapCheck":209,"file":171,"line":210},false,151,{"action":4,"nopriv":212,"callback":170,"hasNonce":209,"hasCapCheck":209,"file":171,"line":213},true,152,[],[216],{"tag":4,"callback":217,"file":218,"line":219},"shortcode","public\\class-ownerrez-shortcodes.php",86,[],3,{"dangerousFunctions":223,"sqlUsage":224,"outputEscaping":226,"fileOperations":12,"externalRequests":12,"nonceChecks":26,"capabilityChecks":26,"bundledLibraries":252},[],{"prepared":26,"raw":12,"locations":225},[],{"escaped":227,"rawEcho":228,"locations":229},14,10,[230,234,237,239,241,243,244,246,247,249],{"file":231,"line":232,"context":233},"admin\\class-ownerrez-admin.php",166,"raw output",{"file":235,"line":236,"context":233},"admin\\class-ownerrez-ajax.php",94,{"file":235,"line":238,"context":233},97,{"file":240,"line":136,"context":233},"admin\\partials\\ownerrez-admin-display.php",{"file":240,"line":242,"context":233},64,{"file":240,"line":206,"context":233},{"file":240,"line":245,"context":233},83,{"file":240,"line":25,"context":233},{"file":240,"line":248,"context":233},120,{"file":250,"line":251,"context":233},"public\\class-ownerrez-public.php",139,[],[254,274,292],{"entryPoint":255,"graph":256,"unsanitizedCount":221,"severity":38},"menu_settings (admin\\class-ownerrez-admin.php:78)",{"nodes":257,"edges":271},[258,262,266],{"id":259,"type":260,"label":261,"file":231,"line":236},"n0","source","$_POST (x3)",{"id":263,"type":264,"label":265,"file":231,"line":236},"n1","transform","→ orez_render_admin()",{"id":267,"type":268,"label":269,"file":240,"line":242,"wp_function":270},"n2","sink","echo() [XSS]","echo",[272,273],{"from":259,"to":263,"sanitized":209},{"from":263,"to":267,"sanitized":209},{"entryPoint":275,"graph":276,"unsanitizedCount":221,"severity":38},"\u003Cclass-ownerrez-admin> (admin\\class-ownerrez-admin.php:0)",{"nodes":277,"edges":288},[278,280,283,284,286],{"id":259,"type":260,"label":261,"file":231,"line":279},110,{"id":263,"type":268,"label":281,"file":231,"line":172,"wp_function":282},"update_option() [Settings Manipulation]","update_option",{"id":267,"type":260,"label":261,"file":231,"line":236},{"id":285,"type":264,"label":265,"file":231,"line":236},"n3",{"id":287,"type":268,"label":269,"file":240,"line":242,"wp_function":270},"n4",[289,290,291],{"from":259,"to":263,"sanitized":212},{"from":267,"to":285,"sanitized":209},{"from":285,"to":287,"sanitized":209},{"entryPoint":293,"graph":294,"unsanitizedCount":12,"severity":300},"menu_settings_save (admin\\class-ownerrez-admin.php:99)",{"nodes":295,"edges":298},[296,297],{"id":259,"type":260,"label":261,"file":231,"line":279},{"id":263,"type":268,"label":281,"file":231,"line":172,"wp_function":282},[299],{"from":259,"to":263,"sanitized":212},"low",{"summary":302,"deductions":303},"The ownerrez plugin v1.2.6 exhibits a mixed security posture.  While it demonstrates good practices by utilizing prepared statements for all SQL queries and includes nonce and capability checks for its entry points, significant concerns remain. The presence of two AJAX handlers without authentication checks represents a substantial attack surface, making it vulnerable to unauthorized actions if these endpoints can be triggered externally.  Furthermore, the taint analysis revealing two flows with unsanitized paths, though not classified as critical or high severity, suggests potential for subtle vulnerabilities in how input is processed. The plugin's vulnerability history, with two past medium-severity CVEs for Cross-site Scripting and Cross-Site Request Forgery, indicates a pattern of past security weaknesses, even though there are no currently unpatched vulnerabilities. This history, coupled with the identified unprotected AJAX handlers, suggests a need for continued vigilance and thorough code review.",[304,306,309],{"reason":305,"points":228},"Unprotected AJAX handlers",{"reason":307,"points":308},"Flows with unsanitized paths",5,{"reason":310,"points":228},"Past medium severity CVEs","2026-03-16T19:25:19.825Z",{"wat":313,"direct":322},{"assetPaths":314,"generatorPatterns":317,"scriptPaths":318,"versionParams":319},[315,316],"\u002Fwp-content\u002Fplugins\u002Fownerrez\u002Fadmin\u002Fcss\u002Fownerrez-admin.css","\u002Fwp-content\u002Fplugins\u002Fownerrez\u002Fadmin\u002Fjs\u002Fownerrez-admin.js",[],[],[320,321],"ownerrez\u002Fadmin\u002Fcss\u002Fownerrez-admin.css?ver=","ownerrez\u002Fadmin\u002Fjs\u002Fownerrez-admin.js?ver=",{"cssClasses":323,"htmlComments":325,"htmlAttributes":328,"restEndpoints":332,"jsGlobals":334,"shortcodeOutput":338},[324],"ownerrez-settings",[326,327],"\u003C!-- OwnerRez Settings -->","\u003C!-- This is the main section for ownerrez settings -->",[329,330,331],"data-ownerrez-api-root","data-ownerrez-username","data-ownerrez-token",[333],"\u002Fwp-json\u002Fownerrez\u002Fv1\u002Fsettings",[335,336,337],"ownerrezApiRoot","ownerrezUsername","ownerrezToken",[339],"[ownerrez_booking_widget]"]