[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOuar5w5KIqXyGpaKphnCCEcOWR-8nnEyCqVZojjtcd8":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":37,"analysis":127,"fingerprints":203},"push7","Push7","3.0.7","gnexltd","https:\u002F\u002Fprofiles.wordpress.org\u002Fgnexltd\u002F","\u003Cp>Push7 | Web Push Notification Service for Web\u003Cbr \u002F>\n(https:\u002F\u002Fpush7.jp\u002F)\u003Cbr \u002F>\nPush7 is now available for Chrome(Android and desktop).\u003C\u002Fp>\n","Web Push Notification Service for your website. Now available for Android, iOS, Chrome and Firefox. We will soon support Safari and other platforms.",800,28357,60,2,"2021-03-24T03:49:00.000Z","4.4.34","4.0","",[20,21,22,23,24],"android","chrome","chrome-notifications","push","safari","https:\u002F\u002Fpush7.jp\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpush7.3.0.7.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},1,30,84,"2026-04-04T21:08:35.433Z",[38,59,78,97,112],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":13,"downloaded":46,"rating":47,"num_ratings":33,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":18,"tags":51,"homepage":57,"download_link":58,"security_score":47,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"aimtell-web-push-notifications","Web Push Notifications by Aimtell","2.13","aimtell","https:\u002F\u002Fprofiles.wordpress.org\u002Faimtell\u002F","\u003Cp>Re-engage your website visitors with highly targeted mobile & desktop web push notifications. A must have tool for blogs, e-commerce or informational websites!\u003C\u002Fp>\n\u003Cp>We have powered hundreds of billions of website push notifications for 20,000+ sites and it’s quickly becoming one of the most powerful re-engagement tools out there. Join Aimtell today and find out what you’ve been missing!\u003C\u002Fp>\n\u003Cp>About Aimtell: Web Push Notifications\u003C\u002Fp>\n\u003Ch3>\u003C\u002Fh3>\n\u003Cp>Web Push Notifications\u003C\u002Fp>\n\u003Cp>Aimtell provides a new way to re-engage your visitors and customers with highly targeted website push notifications.\u003C\u002Fp>\n\u003Cp>Trusted By Over 20,000 Sites\u003C\u002Fp>\n\u003Cp>We’ve powered hundreds of billions of website push notifications for over 20,000 sites with current users including Home Depot, Groupon, Shopify, Spartan Races, Rhone, Run The Jewels, Dolly Parton, Lotd, Radware, American Home Shield, Death Wish Coffee and many more.\u003C\u002Fp>\n\u003Cp>One-click Opt-in\u003C\u002Fp>\n\u003Cp>Aimtell enables visitors to subscribe to websites with just one click. Your visitors don’t need to submit their emails or fill out any forms!\u003C\u002Fp>\n\u003Cp>After a visitor subscribes we automatically track page views, geo-location, items purchased, items added to cart, and tons more.\u003C\u002Fp>\n\u003Cp>Subscribers can then be segmented based any set of criteria and sent real-time notifications that are delivered to the visitor regardless if they have their browser open.\u003C\u002Fp>\n\u003Cp>Tons of Features Including:\u003Cbr \u002F>\n* Instant or Scheduled Push Notifications\u003Cbr \u002F>\n* A\u002FB Testing\u003Cbr \u002F>\n* Abandoned Cart Push Notifications\u003Cbr \u002F>\n* Personalized Push Notifications\u003Cbr \u002F>\n* Conversion Tracking\u003Cbr \u002F>\n* Item Shipped Push Notifications\u003Cbr \u002F>\n* Welcome Push Notifications\u003Cbr \u002F>\n* RSS Feed Push Notifications\u003Cbr \u002F>\n* Automatically Track Item Purchases\u003Cbr \u002F>\n* Custom Events and Attributes\u003Cbr \u002F>\n* Emoji Support\u003Cbr \u002F>\n* Customizable opt-in prompts\u003Cbr \u002F>\n* Expiring Push Notifications\u003Cbr \u002F>\n* Large Image Support\u003Cbr \u002F>\n* Custom Branding\u003Cbr \u002F>\n* Zapier Integration\u003Cbr \u002F>\n* Unlimited Websites\u003Cbr \u002F>\n* Unlimited Push Notifications\u003Cbr \u002F>\n* Unlimited Team Members\u003Cbr \u002F>\n* Unlimited Segments\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Supported on:\u003C\u002Fstrong>\u003Cbr \u002F>\nAimtell’s Push Notifications are supported every website push notification supported browser on Desktop and Mobile (Android & iOS) including:\u003Cbr \u002F>\n* Chrome\u003Cbr \u002F>\n* Safari\u003Cbr \u002F>\n* Edge\u003Cbr \u002F>\n* Firefox\u003Cbr \u002F>\n* Opera\u003Cbr \u002F>\n* Samsung Internet\u003C\u002Fp>\n\u003Cp>Integrates with:\u003Cbr \u002F>\n* Zapier\u003Cbr \u002F>\n* Instagram\u003Cbr \u002F>\n* Pinterest\u003Cbr \u002F>\n* Youtube\u003Cbr \u002F>\n* Mailchimp\u003Cbr \u002F>\n* Activecampaign\u003C\u002Fp>\n\u003Cp>This plugin enables users to login into their Aimtell account or register a new account. Once logged in the plugin allows users to add their website and then installs the required files.\u003C\u002Fp>\n\u003Cp>Please note this is just an installer and users will need to log into the dashboard to view subscribers and send notifications.\u003C\u002Fp>\n","Aimtell enables users to re-engage their website visitors with highly targeted mobile & desktop web push notifications.",7862,100,"2025-12-16T17:05:00.000Z","6.9.4","4.7",[52,53,54,55,56],"chrome-push-notifications","marketing","rss","safari-push-notifications","web-push-notifications","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Faimtell-push-notifications\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faimtell-web-push-notifications.zip",{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":47,"num_ratings":33,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":72,"tags":73,"homepage":76,"download_link":77,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"digitalpush","DigitalPUSH notifications","1.6.2","Demetrius Tautu","https:\u002F\u002Fprofiles.wordpress.org\u002Fdigitalpush\u002F","\u003Cp>This plugin allows your visitors to subscribe to your push notifications as well as receive push notifications whenever you publish a new post.\u003C\u002Fp>\n\u003Cp>The process of subscription is 100% automated and your subscribers will be saved within your DigitalPUSH account.\u003C\u002Fp>\n\u003Cp>The process of sending notifications on a new post is also 100% automated and it will notify all your previously subscribed users with the following information:\u003Cbr \u002F>\n* Post title ( up to 64 characters )\u003Cbr \u002F>\n* Post content without any HTML tags ( up to 128 characters )\u003Cbr \u002F>\n* Post permalink\u003Cbr \u002F>\n* Post featured image ( If the post has no featured image, a standard bell image will be used instead. The same applies if your featured image is http:\u002F\u002F instead of https:\u002F\u002F )\u003C\u002Fp>\n\u003Cp>The subscription is made by implementing the DigitalPUSH javascript library into your pages ( https:\u002F\u002Fcdn.digitalpush.org\u002Flib.js ), library which handles the entire process.\u003Cbr \u002F>\nThe push notification sending process is handled by making a POST call from the plugin to the DigitalPUSH API ( https:\u002F\u002Fapi.digitalpush.org\u002Fpush\u002F ).\u003C\u002Fp>\n\u003Cp>To make use of the plugin you will need an account with DigitalPUSH which can be created here: https:\u002F\u002Fdigitalpush.org\u002Fregister.php\u003Cbr \u002F>\nThe registration is instant and completely free.\u003C\u002Fp>\n\u003Cp>DigitalPUSH is a free to use push notifications service which can be found here: https:\u002F\u002Fdigitalpush.org\u003Cbr \u002F>\nDigitalPUSH terms of service: https:\u002F\u002Fdigitalpush.org\u002Ftos.php\u003Cbr \u002F>\nDigitalPUSH privacy policy: https:\u002F\u002Fdigitalpush.org\u002Fprivacy.php\u003C\u002Fp>\n","This plugin allows you to to implement push notifications with your WordPress blog.",10,3160,"2023-10-25T07:03:00.000Z","6.1.10","3.6","5.5",[21,74,23,75,24],"firefox","push-notifications","http:\u002F\u002Fdigitalpush.org\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdigitalpush.zip",{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":67,"downloaded":86,"rating":28,"num_ratings":28,"last_updated":87,"tested_up_to":88,"requires_at_least":89,"requires_php":18,"tags":90,"homepage":95,"download_link":96,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"notificare-website-push","Notificare","2.0.0","jjonthemix","https:\u002F\u002Fprofiles.wordpress.org\u002Fjjonthemix\u002F","\u003Cp>Website push notifications for WordPress websites. Send push notifications to your website visitors even when they are not at your website.\u003C\u002Fp>\n\u003Cp>Start today automating how you notify your visitors about changes in your website, new blog posts or articles.\u003C\u002Fp>\n\u003Cp>A complete set of features that your website is missing:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Send or schedule remote notifications in any modern browser\u003C\u002Fli>\n\u003Cli>Easily divide your users in groups with segmentation\u003C\u002Fli>\n\u003Cli>Location based messages for when your users are on the move\u003C\u002Fli>\n\u003Cli>Automation tools for all your marketing efforts\u003C\u002Fli>\n\u003C\u002Ful>\n","Smart push notifications for WordPress websites.",2194,"2019-05-20T22:07:00.000Z","5.2.24","3.0.1",[91,92,93,75,94],"chrome-push","edge-push","firefox-push","safari-push","https:\u002F\u002Fnotifica.re","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnotificare-website-push.2.0.0.zip",{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":67,"downloaded":105,"rating":47,"num_ratings":33,"last_updated":106,"tested_up_to":107,"requires_at_least":108,"requires_php":18,"tags":109,"homepage":110,"download_link":111,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"push-notification-worldshaking","WorldShaking Web Push Notifications","1.0.5","grizzlygmbh","https:\u002F\u002Fprofiles.wordpress.org\u002Fgrizzlygmbh\u002F","\u003Cp>This is a complete push notification solution for WordPress blogs and websites. Working with Firefox, Chrome and Safari.\u003C\u002Fp>\n","Increase engagement and drive more repeat traffic to your WordPress site with desktop push notifications. Now supporting Chrome, Firefox, and Safari.",1453,"2017-10-24T14:40:00.000Z","4.8.28","3.8",[21,74,23,75,24],"https:\u002F\u002Fworldshaking.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpush-notification-worldshaking.1.0.5.zip",{"slug":113,"name":114,"version":115,"author":116,"author_profile":117,"description":118,"short_description":119,"active_installs":67,"downloaded":120,"rating":47,"num_ratings":33,"last_updated":18,"tested_up_to":107,"requires_at_least":121,"requires_php":18,"tags":122,"homepage":124,"download_link":125,"security_score":47,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":126},"push-world","Push World","2.0.2","pushworld","https:\u002F\u002Fprofiles.wordpress.org\u002Fpushworld\u002F","\u003Cp>Push notifications plugin for WordPress by \u003Ca href=\"https:\u002F\u002Fpush.world?utm_source=wordpress.org&utm_campaign=main-plugin\" rel=\"nofollow ugc\">PushWorld\u003C\u002Fa>. It gives you an ability to collect subscribers and push notifications through Push World. It also have Woocommerce integration and can return users to abandoned cart and send push about orders status.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Supports Chrome\u003C\u002Fstrong>, \u003Cstrong>Firefox\u003C\u002Fstrong> and \u003Cstrong>Yandex Browser\u003C\u002Fstrong> on both HTTP and HTTPS sites for Desctop and Android.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>RSS to push\u003C\u002Fstrong> – Send notifications to followers automatically.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Real Time Analytics\u003C\u002Fstrong> – See real time statistic for subscription process and for push notifications delivery, clicks and conversion.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Reach Push\u003C\u002Fstrong> – Push with 2 action buttons and big picture.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Native Widget on http websites\u003C\u002Fstrong> – Native widget for http increase subscription conversion.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Scheduled Notifications\u003C\u002Fstrong> – Сreate scheduled notifications to deliver push messages in the future.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Abandoned Cart Notifiaction\u003C\u002Fstrong> – Send personal push message about abandoned cart\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Order Status Notification\u003C\u002Fstrong> – Send personal push notification about order status\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin help send personal and mass push notifications. It also can return customers to abandoned WooCommerce cart through push notifications.",1860,"4.6",[123,21,22,91,52],"browser-notifications","https:\u002F\u002Fpush.world","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpush-world.zip","2026-03-15T10:48:56.248Z",{"attackSurface":128,"codeSignals":163,"taintFlows":192,"riskAssessment":193,"analyzedAt":202},{"hooks":129,"ajaxHandlers":159,"restRoutes":160,"shortcodes":161,"cronEvents":162,"entryPointCount":28,"unprotectedCount":28},[130,136,140,143,147,150,154],{"type":131,"name":132,"callback":133,"file":134,"line":135},"action","admin_menu","add_page","classes\\push7-admin-menu.php",5,{"type":131,"name":137,"callback":138,"file":139,"line":135},"admin_notices","check_setting","classes\\push7-admin-notices.php",{"type":131,"name":137,"callback":141,"file":139,"line":142},"message",6,{"type":131,"name":144,"callback":145,"priority":67,"file":146,"line":135},"transition_post_status","hook_transition_post_status","classes\\push7-post.php",{"type":131,"name":148,"callback":149,"file":146,"line":142},"add_meta_boxes","adding_meta_boxes",{"type":131,"name":151,"callback":152,"file":153,"line":135},"wp_head","render","classes\\push7-sdk.php",{"type":131,"name":155,"callback":156,"file":157,"line":158},"admin_init","init","classes\\push7.php",13,[],[],[],[],{"dangerousFunctions":164,"sqlUsage":165,"outputEscaping":167,"fileOperations":28,"externalRequests":190,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":191},[],{"prepared":28,"raw":28,"locations":166},[],{"escaped":168,"rawEcho":169,"locations":170},8,9,[171,174,176,177,180,182,184,186,188],{"file":139,"line":172,"context":173},35,"raw output",{"file":139,"line":175,"context":173},37,{"file":153,"line":158,"context":173},{"file":178,"line":179,"context":173},"setting.php",94,{"file":178,"line":181,"context":173},95,{"file":178,"line":183,"context":173},96,{"file":178,"line":185,"context":173},125,{"file":178,"line":187,"context":173},126,{"file":178,"line":189,"context":173},182,3,[],[],{"summary":194,"deductions":195},"The \"push7\" plugin version 3.0.7 demonstrates a generally strong security posture based on the provided static analysis. There are no identified AJAX handlers, REST API routes, shortcodes, or cron events, which significantly minimizes the potential attack surface. Furthermore, the absence of dangerous functions, raw SQL queries, file operations, and critical or high severity taint flows is highly encouraging.  The plugin also appears to not bundle external libraries, further reducing potential risks from outdated dependencies.\n\nHowever, there are a few areas for concern. The output escaping is only properly handled for 47% of the identified outputs, meaning a significant portion of data might be vulnerable to Cross-Site Scripting (XSS) attacks if user-supplied data is not adequately sanitized before display.  Additionally, the lack of nonce checks and capability checks on any entry points, coupled with no recorded vulnerability history, could indicate that either the plugin has been exceptionally well-maintained or that the analysis tools may not have detected potential weaknesses in these areas. The presence of external HTTP requests, while not inherently insecure, warrants attention to ensure these requests are made to trusted sources and that the data exchanged is handled securely.\n\nIn conclusion, \"push7\" v3.0.7 has a commendable baseline security due to its limited attack surface and avoidance of common high-risk coding practices. The primary weakness lies in the insufficient output escaping, which presents a clear risk of XSS vulnerabilities. While the absence of a vulnerability history is positive, the lack of security checks on potential entry points means that any vulnerabilities that might exist could be more easily exploited. Continued vigilance in output escaping and exploring the implementation of proper authorization checks would further enhance its security.",[196,198,200],{"reason":197,"points":142},"Insufficient output escaping (47% proper)",{"reason":199,"points":135},"No nonce checks found",{"reason":201,"points":135},"No capability checks found","2026-03-16T19:17:36.849Z",{"wat":204,"direct":216},{"assetPaths":205,"generatorPatterns":206,"scriptPaths":207,"versionParams":211},[],[],[208,209,210],"\u002Fwp-content\u002Fplugins\u002Fpush7\u002Fjs\u002Fadmin.js","\u002Fwp-content\u002Fplugins\u002Fpush7\u002Fjs\u002Fsettings.js","\u002Fwp-content\u002Fplugins\u002Fpush7\u002Fjs\u002Fcategories.js",[212,213,214,215],"push7\u002Fstyle.css?ver=","push7\u002Fadmin.js?ver=","push7\u002Fsettings.js?ver=","push7\u002Fcategories.js?ver=",{"cssClasses":217,"htmlComments":219,"htmlAttributes":221,"restEndpoints":225,"jsGlobals":226,"shortcodeOutput":228},[218],"push7_notify_checkbox",[220],"\u003C!-- Push7 通知設定 -->",[222,223,224],"name='push7_not_notify'","value='true'","name='metabox_exist'",[],[227],"p7.init",[]]