[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftgcKWxff4E_qOmn6Ox6HGL7fRimuZ-uoNe1cWkKIHyU":3,"$fsxCVuB-bHN83FQ_uDwTRb3dVt2YqvqYtIIq2Hu13RoU":304,"$ffGVj6puwLttEAGWZxWD1pyxplcJdVwnhaVY58dLQf0M":308},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":30,"crawl_stats":26,"alternatives":36,"analysis":129,"fingerprints":282},"shulman-utm-attribution-for-elementor","Shulman UTM Attribution for Elementor","1.8.0","Ranel Shulman","https:\u002F\u002Fprofiles.wordpress.org\u002Franelshulman\u002F","\u003Cp>\u003Cstrong>Shulman UTM Attribution for Elementor\u003C\u002Fstrong> brings real marketing attribution directly into your WordPress site.\u003C\u002Fp>\n\u003Cp>Instead of relying only on external tools like Google Analytics, this plugin connects your traffic sources to actual leads and WooCommerce orders — so you can understand what truly drives results.\u003C\u002Fp>\n\u003Cp>Know not just what happened — but what caused it.\u003C\u002Fp>\n\u003Ch4>Why This Matters\u003C\u002Fh4>\n\u003Cp>Most analytics tools show you traffic.\u003C\u002Fp>\n\u003Cp>This plugin shows you \u003Cstrong>what actually generated the lead or sale\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Which campaign brought the customer?\u003C\u002Fli>\n\u003Cli>Which source deserves the credit?\u003C\u002Fli>\n\u003Cli>What really works in your marketing?\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>No more guessing. No more “direct traffic” confusion.\u003C\u002Fp>\n\u003Ch4>Attribution Model\u003C\u002Fh4>\n\u003Cp>Built around a \u003Cstrong>Last Non-Direct Click model (like Google Analytics)\u003C\u002Fstrong>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Direct visits never overwrite real marketing sources\u003C\u002Fli>\n\u003Cli>Internal navigation does not break attribution\u003C\u002Fli>\n\u003Cli>Previous campaigns keep their credit\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Optional: enable \u003Cstrong>First Click + Last Click tracking\u003C\u002Fstrong> for deeper funnel analysis.\u003C\u002Fp>\n\u003Ch4>Core Features\u003C\u002Fh4>\n\u003Cp>Built to give you reliable, real-world attribution — not just raw data:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Last Non-Direct Click attribution\u003C\u002Fstrong> – direct visits and internal page navigation never overwrite a previously stored source, matching Google Analytics default behavior\u003C\u002Fli>\n\u003Cli>\u003Cstrong>7-day attribution window\u003C\u002Fstrong> – UTM data persists for 7 days in localStorage and as a cookie\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Auto-fills Elementor hidden fields\u003C\u002Fstrong> – works with standard \u003Ccode>utm_source\u003C\u002Fcode>, \u003Ccode>utm_medium\u003C\u002Fcode>, \u003Ccode>utm_campaign\u003C\u002Fcode>, \u003Ccode>utm_content\u003C\u002Fcode>, \u003Ccode>utm_term\u003C\u002Fcode> field IDs\u003C\u002Fli>\n\u003Cli>\u003Cstrong>First Click + Last Click mode\u003C\u002Fstrong> – optional per-form dual attribution using \u003Ccode>fc_\u003C\u002Fcode> \u002F \u003Ccode>lc_\u003C\u002Fcode> prefixed field IDs\u003C\u002Fli>\n\u003Cli>\u003Cstrong>50+ referrer sources detected\u003C\u002Fstrong> – search engines, social networks, messaging apps (WhatsApp, Telegram, Viber), email providers (Gmail, Outlook, Yahoo Mail), video platforms, Israeli news sites, and more\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Click-ID detection\u003C\u002Fstrong> – \u003Ccode>gclid\u003C\u002Fcode> (Google Ads), \u003Ccode>fbclid\u003C\u002Fcode> (Meta), \u003Ccode>msclkid\u003C\u002Fcode> (Bing), \u003Ccode>ttclid\u003C\u002Fcode> (TikTok), \u003Ccode>li_fat_id\u003C\u002Fcode> (LinkedIn), \u003Ccode>twclid\u003C\u002Fcode> (Twitter), \u003Ccode>epik\u003C\u002Fcode> (Pinterest), \u003Ccode>dclid\u003C\u002Fcode> (Google Display)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Priority chain\u003C\u002Fstrong> – UTM params \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Click-ID \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Referrer \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Direct (never overwrites)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>localStorage fallback\u003C\u002Fstrong> – if localStorage is blocked, falls back to cookie; marks lead as “untracked” when both are unavailable\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>UTM Attribution Dashboard (Elementor Pro)\u003C\u002Fh4>\n\u003Cp>When Elementor Pro is installed, every form submission is captured with full UTM attribution data and displayed in a dedicated reporting dashboard:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>New admin page \u003Cstrong>UTM Attribution \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Attribution Dashboard\u003C\u002Fstrong> — view lead attribution data at a glance\u003C\u002Fli>\n\u003Cli>See source, medium, campaign, and attribution coverage for every captured lead\u003C\u002Fli>\n\u003Cli>Color-coded Source column (paid = orange, organic = green, social = blue, email = purple)\u003C\u002Fli>\n\u003Cli>Summary cards: Total leads · Attributed leads · Top source · Attribution rate %\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Attribution rate context label\u003C\u002Fstrong> — Good \u002F Partial \u002F Low tracking visibility thresholds (≥70% \u002F 40–70% \u002F \u003C40%)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Key Insights panel\u003C\u002Fstrong> — rule-based, deterministic insights: top source, unattributed rate, top combination, diversification tips\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Attributed vs Direct\u002FUnknown breakdown\u003C\u002Fstrong> — percentage and count split with visual bar\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Top Source \u002F Medium \u002F Campaign combinations\u003C\u002Fstrong> — ranked table of most common attribution paths\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Where journeys start vs convert\u003C\u002Fstrong> — last-touch source comparison with bar charts; links to First Click configuration\u003C\u002Fli>\n\u003Cli>Filter by form name and by UTM source to analyze top-performing traffic segments\u003C\u002Fli>\n\u003Cli>Full-text search across name, email, source, campaign\u003C\u002Fli>\n\u003Cli>Export attribution records to CSV for offline analysis (UTF-8 with BOM for Excel compatibility)\u003C\u002Fli>\n\u003Cli>Bulk delete old records\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This screen is designed for attribution and marketing analysis. Elementor’s native submissions table remains the primary source for full form-entry details.\u003C\u002Fp>\n\u003Ch4>WooCommerce Integration\u003C\u002Fh4>\n\u003Cp>Turn every order into actionable marketing insight:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>See exactly which source generated each order\u003C\u002Fli>\n\u003Cli>Filter orders by traffic source\u003C\u002Fli>\n\u003Cli>Export attribution data for analysis\u003C\u002Fli>\n\u003Cli>Works with HPOS and legacy storage\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>No external tools required.\u003C\u002Fp>\n\u003Cp>Enable via \u003Cstrong>UTM Attribution \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Enable WooCommerce tracking\u003C\u002Fstrong>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Saves UTM source\u002Fmedium\u002Fcampaign\u002Fcontent\u002Fterm\u002Fid to every order as order meta\u003C\u002Fli>\n\u003Cli>Adds a color-coded \u003Cstrong>UTM Source\u003C\u002Fstrong> column to the WooCommerce Orders table\u003C\u002Fli>\n\u003Cli>Adds a \u003Cstrong>UTM Tracking\u003C\u002Fstrong> meta box to each order detail page\u003C\u002Fli>\n\u003Cli>Filter orders by UTM source using the dropdown in the Orders filter bar\u003C\u002Fli>\n\u003Cli>UTM columns included in WooCommerce CSV export\u003C\u002Fli>\n\u003Cli>Compatible with both HPOS and Legacy order storage\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Elementor Form Setup\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Last Click only (default — no configuration needed):\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Add hidden fields with these IDs to your Elementor form:\u003Cbr \u002F>\n    utm_source · \u003Ccode>utm_medium\u003C\u002Fcode> · \u003Ccode>utm_campaign\u003C\u002Fcode> · \u003Ccode>utm_content\u003C\u002Fcode> · \u003Ccode>utm_term\u003C\u002Fcode> · \u003Ccode>utm_id\u003C\u002Fcode>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>First Click + Last Click (configure Form ID in Settings):\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Add hidden fields with these IDs:\u003Cbr \u002F>\nFirst click: \u003Ccode>fc_source\u003C\u002Fcode> · \u003Ccode>fc_medium\u003C\u002Fcode> · \u003Ccode>fc_campaign\u003C\u002Fcode> · \u003Ccode>fc_content\u003C\u002Fcode> · \u003Ccode>fc_term\u003C\u002Fcode>\u003Cbr \u002F>\nLast click:  \u003Ccode>lc_source\u003C\u002Fcode> · \u003Ccode>lc_medium\u003C\u002Fcode> · \u003Ccode>lc_campaign\u003C\u002Fcode> · \u003Ccode>lc_content\u003C\u002Fcode> · \u003Ccode>lc_term\u003C\u002Fcode>\u003C\u002Fp>\n\u003Ch4>Privacy & GDPR\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>All data is stored locally in the visitor’s browser (localStorage + cookie)\u003C\u002Fli>\n\u003Cli>No data is sent to external servers\u003C\u002Fli>\n\u003Cli>Cookie name: \u003Ccode>shulmanattrib_utm_data\u003C\u002Fcode>, expiry: 7 days, contains only marketing source data (no PII)\u003C\u002Fli>\n\u003Cli>Leads are stored in your own WordPress database for attribution reporting\u003C\u002Fli>\n\u003Cli>Add the cookie to your cookie consent notice\u003C\u002Fli>\n\u003Cli>No external APIs, no third-party tracking, no data sharing\u003C\u002Fli>\n\u003C\u002Ful>\n","Understand where your leads and sales really come from — built-in attribution (First & Last Click) directly inside WordPress.",0,105,"2026-04-14T12:38:00.000Z","6.9.4","6.0","7.4",[18,19,20,21,22],"attribution","elementor","tracking","utm","woocommerce","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshulman-utm-attribution-for-elementor.1.8.0.zip",100,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"ranelshulman",1,30,94,"2026-05-20T11:37:51.927Z",[37,55,75,96,111],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":11,"num_ratings":11,"last_updated":47,"tested_up_to":14,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":53,"download_link":54,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"click-trail-handler","ClickTrail – UTM, Click ID & Ad Tracking (with Consent)","1.5.2","Hugo Carvalho","https:\u002F\u002Fprofiles.wordpress.org\u002Fhugoc\u002F","\u003Cp>ClickTrail stores attribution data from landing pages and keeps it available for later form submissions, WooCommerce orders, and event flows.\u003C\u002Fp>\n\u003Cp>In WooCommerce, ClickTrail stores attribution on the order, pushes enriched purchase events on the thank-you page, and can optionally emit GA4-style storefront events for \u003Ccode>view_item\u003C\u002Fcode>, \u003Ccode>view_item_list\u003C\u002Fcode>, \u003Ccode>view_cart\u003C\u002Fcode>, \u003Ccode>add_to_cart\u003C\u002Fcode>, \u003Ccode>remove_from_cart\u003C\u002Fcode>, and \u003Ccode>begin_checkout\u003C\u002Fcode>, plus post-purchase milestones, through the same ClickTrail pipeline.\u003C\u002Fp>\n\u003Cp>It is designed for cases where attribution often breaks in practice: cached pages, dynamic forms, multi-page journeys, repeat visits, consent requirements, and optional server-side delivery.\u003C\u002Fp>\n\u003Cp>The plugin keeps first-touch and last-touch context available until the conversion point and makes that context usable inside WordPress.\u003C\u002Fp>\n\u003Cp>It captures first-touch and last-touch source data, keeps it available during the user journey, and makes that data usable where conversions actually happen:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>WooCommerce orders\u003C\u002Fli>\n\u003Cli>supported forms\u003C\u002Fli>\n\u003Cli>browser events\u003C\u002Fli>\n\u003Cli>optional server-side delivery\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Teams can start with order or form attribution first, then add browser events, consent handling, or server-side transport when needed.\u003C\u002Fp>\n\u003Ch4>What problems it solves\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>WooCommerce orders losing source data\u003C\u002Fstrong>: Paid traffic often ends up looking like direct traffic by the time an order is placed. ClickTrail stores attribution on the order and keeps purchase reporting tied to campaign context.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Checkout continuity breaking before purchase\u003C\u002Fstrong>: WooCommerce storefront journeys can now emit opt-in \u003Ccode>view_item\u003C\u002Fcode>, \u003Ccode>view_item_list\u003C\u002Fcode>, \u003Ccode>view_cart\u003C\u002Fcode>, \u003Ccode>add_to_cart\u003C\u002Fcode>, \u003Ccode>remove_from_cart\u003C\u002Fcode>, and \u003Ccode>begin_checkout\u003C\u002Fcode> signals through the same ClickTrail event layer used elsewhere in the plugin.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cached or dynamic forms\u003C\u002Fstrong>: Hidden fields often break on cached pages or AJAX-rendered forms. ClickTrail includes client-side fallback and dynamic-content support.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cross-domain breaks\u003C\u002Fstrong>: Approved link decoration and attribution tokens help keep continuity between domains or subdomains.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Consent and transport complexity\u003C\u002Fstrong>: Consent controls, browser events, webhook intake, and server-side transport live in the same plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Core capabilities\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Capture\u003C\u002Fstrong>: first-touch and last-touch UTMs, major ad click IDs, and referrers with automatic organic\u002Fsocial\u002Freferral fallback when UTMs are absent.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WooCommerce\u003C\u002Fstrong>: checkout attribution persistence, thank-you purchase event push, enriched commerce payloads, optional storefront commerce events, and optional order-status milestones.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Forms\u003C\u002Fstrong>: automatic hidden-field enrichment for Contact Form 7 and Fluent Forms, compatible hidden-field population for Gravity Forms and WPForms, client-side fallback, dynamic form support, and WhatsApp attribution continuity.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Events\u003C\u002Fstrong>: browser event collection with \u003Ccode>dataLayer\u003C\u002Fcode> pushes, canonical REST intake, webhook ingestion, lifecycle updates, one-time WordPress follow-up events such as \u003Ccode>login\u003C\u002Fcode>, \u003Ccode>sign_up\u003C\u002Fcode>, and \u003Ccode>comment_submit\u003C\u002Fcode>, and optional WooCommerce storefront events.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Delivery\u003C\u002Fstrong>: optional server-side transport, retry queue, diagnostics, consent-aware dispatch, and failure telemetry.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>What is new in 1.5.2\u003C\u002Fh4>\n\u003Cp>This maintenance release focuses on code-quality cleanup and standards compliance without changing runtime behavior:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Line-ending cleanup\u003C\u002Fstrong>: normalized mixed line endings in key PHP handlers so packaging and standards checks stay consistent across environments.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Standards cleanup\u003C\u002Fstrong>: resolved PHPCS findings in the consent, attribution-token, and privacy handlers, including targeted documentation for intentional exceptions.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>No runtime change\u003C\u002Fstrong>: behavior remains the same as \u003Ccode>1.5.1\u003C\u002Fcode>; this is a maintenance release focused on code hygiene.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Current admin structure\u003C\u002Fh4>\n\u003Cp>The main settings experience is organized by capability:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Capture\u003C\u002Fli>\n\u003Cli>Forms\u003C\u002Fli>\n\u003Cli>Events\u003C\u002Fli>\n\u003Cli>Delivery\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Operational screens stay separate:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Logs\u003C\u002Fli>\n\u003Cli>Diagnostics\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Supported integrations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Forms\u003C\u002Fstrong>: Contact Form 7, Elementor Forms (Pro), Fluent Forms, Gravity Forms, Ninja Forms, WPForms\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Commerce\u003C\u002Fstrong>: WooCommerce\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CMP sources\u003C\u002Fstrong>: ClickTrail banner, Cookiebot, OneTrust, Complianz, GTM, custom\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Webhook providers\u003C\u002Fstrong>: Calendly, HubSpot, Typeform\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Server-side adapters\u003C\u002Fstrong>: Generic collector, sGTM, Meta CAPI, Google Ads \u002F GA4, LinkedIn CAPI, Pinterest Conversions API, TikTok Events API\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Forms behavior by plugin\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Contact Form 7 and Fluent Forms\u003C\u002Fstrong>: ClickTrail can add hidden attribution fields automatically.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Gravity Forms and WPForms\u003C\u002Fstrong>: ClickTrail can populate matching hidden fields you add to the form.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Recommended for Gravity Forms and WPForms\u003C\u002Fstrong>: add the hidden fields you want stored or exported, and ClickTrail will fill them.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Elementor Forms (Pro)\u003C\u002Fstrong>: ClickTrail uses the available submission hooks and attribution fallback, not automatic hidden-field injection.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ninja Forms\u003C\u002Fstrong>: ClickTrail stores attribution with the submission and surfaces it in the submission record, not as automatic hidden-field injection.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Supported click IDs\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Google: \u003Ccode>gclid\u003C\u002Fcode>, \u003Ccode>wbraid\u003C\u002Fcode>, \u003Ccode>gbraid\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Meta: \u003Ccode>fbclid\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>TikTok: \u003Ccode>ttclid\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Microsoft: \u003Ccode>msclkid\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>X \u002F Twitter: \u003Ccode>twclid\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>LinkedIn: \u003Ccode>li_fat_id\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Snapchat: \u003Ccode>sccid\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Pinterest: \u003Ccode>epik\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Additional capture fields\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Extended UTMs: \u003Ccode>utm_id\u003C\u002Fcode>, \u003Ccode>utm_source_platform\u003C\u002Fcode>, \u003Ccode>utm_creative_format\u003C\u002Fcode>, \u003Ccode>utm_marketing_tactic\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Browser\u002Fplatform identifiers: \u003Ccode>fbc\u003C\u002Fcode>, \u003Ccode>fbp\u003C\u002Fcode>, \u003Ccode>_ttp\u003C\u002Fcode>, \u003Ccode>li_gc\u003C\u002Fcode>, \u003Ccode>ga_client_id\u003C\u002Fcode>, \u003Ccode>ga_session_id\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n","Consent-aware attribution for WooCommerce, WordPress forms, and event flows. Capture UTMs and click IDs across conversion paths.",10,784,"2026-03-14T19:20:00.000Z","6.5","8.1",[18,51,52,21,22],"consent-mode","server-side-tracking","https:\u002F\u002Fgithub.com\u002Fvizuh\u002Fclick-trail-handler","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fclick-trail-handler.1.5.2.zip",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":65,"num_ratings":66,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":16,"tags":70,"homepage":72,"download_link":73,"security_score":74,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"utm-for-woocommerce","UTM for Woocommerce","1.0.2","Spanrig Technologies LLP","https:\u002F\u002Fprofiles.wordpress.org\u002Fspanrig\u002F","\u003Cp>Elevate your WooCommerce analytics with the sophisticated capabilities of UTM for WooCommerce, a powerful plugin meticulously crafted to enhance your understanding of customer acquisition channels. This indispensable tool addresses the pain points of navigating between Google Analytics and Facebook Ads to track purchases, eliminating the frustration of mismatched numbers.\u003C\u002Fp>\n\u003Cp>In the digital marketing landscape, we, as a growing digital marketing agency, encountered the cumbersome challenge of toggling between platforms to reconcile data discrepancies. The painstaking process of cross-referencing Google Analytics and Facebook Ads to gain a unified view of purchase sources was not only time-consuming but also prone to errors, resulting in a frustrating lack of clarity.\u003C\u002Fp>\n\u003Cp>Driven by the desire to streamline this process and empower fellow store owners, we developed UTM for WooCommerce. This free plugin revolutionizes the way you track and understand your customers’ purchasing journey. Gone are the days of switching between platforms; UTM for WooCommerce seamlessly integrates with your WooCommerce orders list screen, providing a holistic view of the source of purchase directly within your familiar dashboard.\u003C\u002Fp>\n\u003Cp>No longer constrained by the arduous task of reconciling numbers and navigating multiple platforms, UTM for WooCommerce empowers store owners to focus on what matters most – optimizing marketing strategies and driving business success. Join the thousands of store owners who have benefited from our solution, and make UTM for WooCommerce an integral part of your toolkit for unparalleled insights and seamless analytics.\u003C\u002Fp>\n\u003Cp>Note: Compatible with Woocommerce HPOS\u003C\u002Fp>\n","Simply track UTM & CLID parameters in Woocommerce orders.",1000,5024,86,3,"2025-05-06T01:46:00.000Z","6.8.5","4.7",[20,21,71,22],"woo","https:\u002F\u002Fspanrig.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Futm-for-woocommerce.1.0.2.zip",92,{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":83,"downloaded":84,"rating":25,"num_ratings":85,"last_updated":86,"tested_up_to":14,"requires_at_least":87,"requires_php":88,"tags":89,"homepage":23,"download_link":95,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"utm-tracker-for-contact-form-7","UTM Tracker for Contact Form 7","1.5","Adnan Buksh","https:\u002F\u002Fprofiles.wordpress.org\u002Fadnanbuksh\u002F","\u003Cp>\u003Cstrong>UTM Tracker for Contact Form 7\u003C\u002Fstrong> automatically captures UTM parameters from incoming URLs and attaches them to Contact Form 7 submissions.\u003C\u002Fp>\n\u003Cp>This allows website owners, marketers, and agencies to see \u003Cstrong>exactly where their leads come from\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>If you run marketing campaigns using UTM parameters, the plugin detects them when visitors arrive and stores them in cookies so they can be attached to the form submission later.\u003C\u002Fp>\n\u003Cp>Works perfectly even if visitors browse multiple pages before submitting the form.\u003C\u002Fp>\n\u003Cp>Perfect for:\u003C\u002Fp>\n\u003Cp>• Marketers running Google Ads or Meta Ads campaigns\u003Cbr \u002F>\n• Agencies proving campaign ROI to clients\u003Cbr \u002F>\n• Businesses tracking lead sources from paid traffic\u003Cbr \u002F>\n• Developers implementing attribution tracking in Contact Form 7\u003C\u002Fp>\n\u003Cp>Example campaign URL:\u003C\u002Fp>\n\u003Cp>https:\u002F\u002Fwebfreelancer.in\u002F?utm_source=google&utm_medium=cpc&utm_campaign=spring_sale&utm_id=12345\u003C\u002Fp>\n\u003Cp>When a visitor lands on your site with UTM parameters:\u003C\u002Fp>\n\u003Col>\n\u003Cli>The plugin detects and stores the UTM values in cookies\u003C\u002Fli>\n\u003Cli>Visitors can navigate your website normally\u003C\u002Fli>\n\u003Cli>When they submit a Contact Form 7 form, the UTM data is automatically included in the email notification\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>This helps you understand \u003Cstrong>which campaigns generate real leads\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>The plugin is lightweight, privacy-friendly, and optimized for performance.\u003C\u002Fp>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Cp>• Automatically captures UTM parameters in Contact Form 7 submissions\u003Cbr \u002F>\n• Supports utm_source, utm_medium, utm_campaign, utm_term, utm_content and utm_id\u003Cbr \u002F>\n• First-touch attribution using cookies (stored for 30 days)\u003Cbr \u002F>\n• Works even if visitors browse multiple pages before submitting the form\u003Cbr \u002F>\n• Compatible with HTML and plain text Contact Form 7 emails\u003Cbr \u002F>\n• Works with cached pages and performance plugins\u003Cbr \u002F>\n• Lightweight and optimized for high-performance WordPress sites\u003Cbr \u002F>\n• No manual field setup required\u003C\u002Fp>\n\u003Ch3>Supported UTM Parameters\u003C\u002Fh3>\n\u003Cp>This plugin captures the following campaign parameters automatically:\u003C\u002Fp>\n\u003Cp>• utm_source – Traffic source (google, facebook, newsletter)\u003Cbr \u002F>\n• utm_medium – Marketing medium (cpc, email, display)\u003Cbr \u002F>\n• utm_campaign – Campaign name\u003Cbr \u002F>\n• utm_term – Paid keyword tracking\u003Cbr \u002F>\n• utm_content – Ad variation or content label\u003Cbr \u002F>\n• utm_id – Campaign ID used in platforms like Google Ads\u003C\u002Fp>\n\u003Cp>All captured values are attached to Contact Form 7 submissions.\u003C\u002Fp>\n\u003Ch3>Privacy\u003C\u002Fh3>\n\u003Cp>This plugin stores UTM parameters in browser cookies for up to 30 days in order to track marketing campaign attribution.\u003C\u002Fp>\n\u003Cp>No personal data is collected, stored, or transmitted by the plugin itself.\u003C\u002Fp>\n\u003Cp>Website owners should ensure their privacy policy mentions the use of marketing attribution cookies if required by local regulations such as GDPR.\u003C\u002Fp>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cp>For a complete setup tutorial and implementation guide:\u003C\u002Fp>\n\u003Cp>https:\u002F\u002Fwebfreelancer.in\u002Futm-tracker-for-contact-form-7\u002F?utm_source=wordpress-plugin&utm_medium=documentation&utm_campaign=utm-tracker-cf7\u003C\u002Fp>\n\u003Ch3>About the Developer\u003C\u002Fh3>\n\u003Cp>This plugin is developed and maintained by \u003Cstrong>Adnan Buksh\u003C\u002Fstrong>, a freelance WordPress developer specializing in custom development, plugin engineering, and performance optimization.\u003C\u002Fp>\n\u003Cp>If you need help with WordPress development, custom plugins, or technical SEO improvements, you can learn more here:\u003C\u002Fp>\n\u003Cp>https:\u002F\u002Fwebfreelancer.in\u002F?utm_source=wordpress-plugin&utm_medium=developer-section&utm_campaign=utm-tracker-cf7\u003C\u002Fp>\n","Track UTM parameters in Contact Form 7 submissions automatically and identify which campaigns generate real leads from your marketing traffic.",200,1036,2,"2026-03-13T18:18:00.000Z","5.6","7.2",[90,91,92,93,94],"cf7-utm-tracking","contact-form-7","marketing-attribution","utm-parameters","utm-tracking","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Futm-tracker-for-contact-form-7.1.5.zip",{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":45,"downloaded":104,"rating":25,"num_ratings":66,"last_updated":105,"tested_up_to":68,"requires_at_least":106,"requires_php":16,"tags":107,"homepage":109,"download_link":110,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"tag-syncer","TagSyncer – Free Google Tag Manager Plugin for WordPress","1.1.2","Involvz","https:\u002F\u002Fprofiles.wordpress.org\u002Finvolvz\u002F","\u003Cp>TagSyncer enables you to add Google Tag Manager (GTM) to your WordPress site with up to two GTM IDs and empowers tracking options like scroll depth, Contact Form 7 submissions, Elementor forms, and WooCommerce events. It ensures that analytics stay intact by notifying you when GTM IDs are removed.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>Google Tag Manager (GTM) Integration\u003C\u002Fstrong>\u003Cbr \u002F>\nAllows insertion of up to two GTM IDs.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Scroll Tracking\u003C\u002Fstrong>\u003Cbr \u002F>\nTracks scroll depth on pages. Enable this feature in the \u003Cstrong>Scroll Tracking Settings\u003C\u002Fstrong> tab in the plugin settings.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>GTM ID Removal Notification\u003C\u002Fstrong>\u003Cbr \u002F>\nProvides a dashboard notification and sends an email to the WordPress administrator when a GTM ID is removed.\u003Cbr \u002F>\nUpdated with improved subject and body formatting for clarity.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Contact Form 7 Tracking\u003C\u002Fstrong>\u003Cbr \u002F>\nTracks submissions from Contact Form 7 forms. Enable this feature in the \u003Cstrong>Integrations\u003C\u002Fstrong> tab.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Elementor Form Tracking\u003C\u002Fstrong>\u003Cbr \u002F>\nTracks form submissions from Elementor forms. Enable this feature in the \u003Cstrong>Integrations\u003C\u002Fstrong> tab.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>WooCommerce Tracking\u003C\u002Fstrong>\u003Cbr \u002F>\nTracks WooCommerce eCommerce events with dataLayer support, capturing product views, add-to-cart actions, and purchases. Enable this in the \u003Cstrong>Integrations\u003C\u002Fstrong> tab.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>dataLayer Events for Custom Tags\u003C\u002Fstrong>\u003Cbr \u002F>\nAutomatically pushes dataLayer events, allowing you to create custom GTM tags to track various interactions on your website.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Improved UI\u002FUX\u003C\u002Fstrong>\u003Cbr \u002F>\nRefreshed styling for a modern and user-friendly interface.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin relies on the external service \u003Cstrong>Google Tag Manager(GTM)\u003C\u002Fstrong> to enable advanced website tracking and analytics capabilities.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>What the service is and what it is used for\u003C\u002Fstrong>\u003Cbr \u002F>\nGoogle Tag Manager is a tag management system that allows users to deploy and manage marketing tags (such as analytics, conversion tracking, and remarketing tags) on their website without editing code directly. This plugin uses Google Tag Manager to integrate tracking features like scroll depth, form submissions, and WooCommerce events.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>What data is sent and when\u003C\u002Fstrong>\u003Cbr \u002F>\n– The plugin sends the configured Google Tag Manager ID to the Google Tag Manager service to load the appropriate container.\u003Cbr \u002F>\n– When enabled, the plugin may also send tracking events such as form submissions, scroll depth, and WooCommerce events to Google Tag Manager.\u003Cbr \u002F>\n– This data is used for creating custom tags, monitoring website interactions, and generating insights.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Links to the service’s terms of service and privacy policy\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fwww.google.com\u002Fanalytics\u002Ftag-manager\u002Fuse-policy\u002F\" rel=\"nofollow ugc\">Google Tag Manager Terms of Service\u003C\u002Fa>\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fpolicies.google.com\u002Fprivacy\" rel=\"nofollow ugc\">Google Privacy Policy\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Additional Information\u003C\u002Fh3>\n\u003Cp>\u003Cem>For advanced usage and custom GTM tag creation, refer to \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002F\" rel=\"ugc\">WordPress\u003C\u002Fa> documentation.\u003C\u002Fem>\u003C\u002Fp>\n","Easily integrate Google Tag Manager with tracking for scroll events, forms, and WooCommerce, all manageable from the WordPress dashboard.",984,"2025-11-07T11:31:00.000Z","4.0",[91,19,108,20,22],"google-tag-manager","https:\u002F\u002Fwww.tagsyncer.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftag-syncer.zip",{"slug":112,"name":113,"version":114,"author":115,"author_profile":116,"description":117,"short_description":118,"active_installs":11,"downloaded":119,"rating":11,"num_ratings":11,"last_updated":120,"tested_up_to":14,"requires_at_least":121,"requires_php":16,"tags":122,"homepage":127,"download_link":128,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"autoemails-by-autothink","AutoEmails by AutoThink","1.0.0","autothinkgroup","https:\u002F\u002Fprofiles.wordpress.org\u002Fautothinkgroup\u002F","\u003Cp>\u003Cstrong>AutoEmails by AutoThink\u003C\u002Fstrong> connects your WooCommerce store to \u003Ca href=\"https:\u002F\u002Fautoemails.com\" rel=\"nofollow ugc\">AutoEmails\u003C\u002Fa> so you can see exactly which email campaigns are driving revenue.\u003C\u002Fp>\n\u003Cp>When a customer places an order, this plugin automatically sends the order data to AutoEmails where it is matched against recent email activity using last-touch attribution (5-day window).\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>One-click setup\u003C\u002Fstrong> — just paste your API key and you’re live\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Real-time order sync\u003C\u002Fstrong> — orders are sent the moment they’re placed, no cron jobs or polling\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Revenue attribution\u003C\u002Fstrong> — see which campaigns, emails, and sequences are generating sales\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Refund tracking\u003C\u002Fstrong> — refunded orders are synced too, keeping your revenue figures accurate\u003C\u002Fli>\n\u003Cli>\u003Cstrong>HPOS compatible\u003C\u002Fstrong> — fully supports WooCommerce High-Performance Order Storage\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Lightweight\u003C\u002Fstrong> — no bloat, no JavaScript on the frontend, zero performance impact for shoppers\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How It Works\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Install the plugin\u003C\u002Fli>\n\u003Cli>Enter your AutoEmails API key (found in Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Integrations \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> WooCommerce)\u003C\u002Fli>\n\u003Cli>Orders are automatically synced whenever status changes to Processing, Completed, or Refunded\u003C\u002Fli>\n\u003Cli>View revenue attribution in AutoEmails campaign analytics and revenue dashboard\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin connects to the \u003Cstrong>AutoEmails\u003C\u002Fstrong> platform (\u003Ca href=\"https:\u002F\u002Fautoemails.com\" rel=\"nofollow ugc\">https:\u002F\u002Fautoemails.com\u003C\u002Fa>) to sync WooCommerce order data for email campaign revenue attribution.\u003C\u002Fp>\n\u003Ch4>What data is sent\u003C\u002Fh4>\n\u003Cp>When a WooCommerce order status changes to Processing, Completed, or Refunded, the following data is sent to the AutoEmails API:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Order ID and order number\u003C\u002Fli>\n\u003Cli>Order status and total amount\u003C\u002Fli>\n\u003Cli>Currency\u003C\u002Fli>\n\u003Cli>Billing email, first name, and last name\u003C\u002Fli>\n\u003Cli>Order creation and completion dates\u003C\u002Fli>\n\u003Cli>Line items (product name, quantity, total, SKU)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>When data is sent\u003C\u002Fh4>\n\u003Cp>Data is sent automatically via a server-side HTTP POST request each time an order reaches one of the tracked statuses (processing, completed, refunded). A test order can also be sent manually from the plugin settings page. No data is sent from the customer’s browser and no JavaScript is loaded on the storefront.\u003C\u002Fp>\n\u003Ch4>Service details\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service provider:\u003C\u002Fstrong> AutoThink (\u003Ca href=\"https:\u002F\u002Fautothink.io\" rel=\"nofollow ugc\">https:\u002F\u002Fautothink.io\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of Use:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fautoemails.com\u002Fterms\" rel=\"nofollow ugc\">https:\u002F\u002Fautoemails.com\u002Fterms\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy Policy:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fautoemails.com\u002Fprivacy\" rel=\"nofollow ugc\">https:\u002F\u002Fautoemails.com\u002Fprivacy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Sync WooCommerce orders to AutoEmails for automatic campaign revenue attribution and ROI tracking.",78,"2026-04-02T16:26:00.000Z","5.8",[123,124,125,126,22],"autoemails","campaign-tracking","email-marketing","revenue-attribution","https:\u002F\u002Fautoemails.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fautoemails-by-autothink.1.0.0.zip",{"attackSurface":130,"codeSignals":240,"taintFlows":250,"riskAssessment":278,"analyzedAt":281},{"hooks":131,"ajaxHandlers":236,"restRoutes":237,"shortcodes":238,"cronEvents":239,"entryPointCount":11,"unprotectedCount":11},[132,138,142,146,150,155,158,161,164,167,171,175,180,184,187,191,195,199,203,207,211,214,217,219,222,225,228,232],{"type":133,"name":134,"callback":135,"file":136,"line":137},"action","admin_menu","add_admin_menu","shulman-utm-attribution-for-elementor.php",41,{"type":133,"name":139,"callback":140,"file":136,"line":141},"admin_init","register_settings",42,{"type":133,"name":143,"callback":144,"file":136,"line":145},"admin_enqueue_scripts","enqueue_admin_assets",43,{"type":133,"name":147,"callback":148,"file":136,"line":149},"wp_enqueue_scripts","enqueue_frontend_scripts",44,{"type":133,"name":151,"callback":152,"priority":153,"file":136,"line":154},"plugins_loaded","maybe_migrate_legacy_options",5,46,{"type":133,"name":151,"callback":156,"file":136,"line":157},"maybe_create_leads_table",47,{"type":133,"name":151,"callback":159,"file":136,"line":160},"init_woocommerce_integration",48,{"type":133,"name":151,"callback":162,"file":136,"line":163},"init_elementor_integration",49,{"type":133,"name":165,"callback":166,"priority":45,"file":136,"line":83},"elementor_pro\u002Fforms\u002Fnew_record","save_elementor_lead",{"type":133,"name":168,"callback":169,"file":136,"line":170},"woocommerce_checkout_order_created","save_utm_to_order",274,{"type":133,"name":172,"callback":173,"file":136,"line":174},"admin_post_shulmanattrib_export_orders","maybe_export_orders_csv",275,{"type":176,"name":177,"callback":178,"file":136,"line":179},"filter","manage_woocommerce_page_wc-orders_columns","add_orders_column",278,{"type":133,"name":181,"callback":182,"priority":45,"file":136,"line":183},"manage_woocommerce_page_wc-orders_custom_column","render_orders_column",279,{"type":176,"name":185,"callback":178,"file":136,"line":186},"manage_edit-shop_order_columns",282,{"type":133,"name":188,"callback":189,"priority":45,"file":136,"line":190},"manage_shop_order_posts_custom_column","render_orders_column_legacy",283,{"type":133,"name":192,"callback":193,"file":136,"line":194},"add_meta_boxes","add_order_meta_box",286,{"type":133,"name":196,"callback":197,"file":136,"line":198},"restrict_manage_posts","add_utm_filter_ui",289,{"type":133,"name":200,"callback":201,"file":136,"line":202},"woocommerce_order_list_table_restrict_manage_orders","add_utm_filter_ui_hpos",290,{"type":176,"name":204,"callback":205,"file":136,"line":206},"request","apply_utm_filter_legacy",292,{"type":176,"name":208,"callback":209,"file":136,"line":210},"woocommerce_order_list_table_prepare_items_query_args","apply_utm_filter_hpos",293,{"type":176,"name":177,"callback":212,"file":136,"line":213},"add_fc_orders_column",298,{"type":133,"name":181,"callback":215,"priority":45,"file":136,"line":216},"render_fc_column_hpos",299,{"type":176,"name":185,"callback":212,"file":136,"line":218},301,{"type":133,"name":188,"callback":220,"priority":45,"file":136,"line":221},"render_fc_column_legacy",302,{"type":133,"name":200,"callback":223,"file":136,"line":224},"render_export_orders_btn",308,{"type":133,"name":196,"callback":226,"file":136,"line":227},"render_export_orders_btn_legacy",310,{"type":176,"name":229,"callback":230,"file":136,"line":231},"woocommerce_order_export_column_headers","add_utm_export_columns",313,{"type":176,"name":233,"callback":234,"priority":45,"file":136,"line":235},"woocommerce_order_export_row_data","add_utm_export_row_data",314,[],[],[],[],{"dangerousFunctions":241,"sqlUsage":242,"outputEscaping":245,"fileOperations":66,"externalRequests":11,"nonceChecks":248,"capabilityChecks":66,"bundledLibraries":249},[],{"prepared":243,"raw":11,"locations":244},27,[],{"escaped":246,"rawEcho":11,"locations":247},256,[],4,[],[251,270],{"entryPoint":252,"graph":253,"unsanitizedCount":11,"severity":269},"settings_page (shulman-utm-attribution-for-elementor.php:1119)",{"nodes":254,"edges":266},[255,260],{"id":256,"type":257,"label":258,"file":136,"line":259},"n0","source","$_POST (x3)",1132,{"id":261,"type":262,"label":263,"file":136,"line":264,"wp_function":265},"n1","sink","update_option() [Settings Manipulation]",1134,"update_option",[267],{"from":256,"to":261,"sanitized":268},true,"low",{"entryPoint":271,"graph":272,"unsanitizedCount":11,"severity":269},"\u003Cshulman-utm-attribution-for-elementor> (shulman-utm-attribution-for-elementor.php:0)",{"nodes":273,"edges":276},[274,275],{"id":256,"type":257,"label":258,"file":136,"line":259},{"id":261,"type":262,"label":263,"file":136,"line":264,"wp_function":265},[277],{"from":256,"to":261,"sanitized":268},{"summary":279,"deductions":280},"The plugin \"shulman-utm-attribution-for-elementor\" v1.8.0 demonstrates a strong security posture based on the provided static analysis.  The complete absence of unprotected entry points across AJAX handlers, REST API routes, shortcodes, and cron events is a significant strength, indicating good practice in limiting the plugin's attack surface.  Furthermore, the code shows adherence to secure coding practices with 100% of SQL queries using prepared statements and 100% of outputs being properly escaped, which mitigates common injection and cross-site scripting vulnerabilities. The low number of file operations and zero external HTTP requests also contribute positively to its security profile.\n\nHowever, while the code analysis reveals no immediate critical or high-severity vulnerabilities, the data is limited.  The absence of any recorded CVEs is positive, suggesting the plugin has historically been maintained securely.  Despite the strong static analysis, the limited scope of the taint analysis (only 2 flows analyzed) means that there's a possibility of undiscovered vulnerabilities that did not manifest in the analyzed flows.  The presence of capability checks and nonce checks, while positive, is limited (3 and 4 respectively), suggesting there might be room to further secure specific functionalities.  Overall, the plugin appears to be well-developed from a security perspective, but continuous monitoring and a more comprehensive security audit would be beneficial to ensure ongoing robustness.",[],"2026-04-16T13:50:08.077Z",{"wat":283,"direct":294},{"assetPaths":284,"generatorPatterns":287,"scriptPaths":288,"versionParams":290},[285,286],"\u002Fwp-content\u002Fplugins\u002Fshulman-utm-attribution-for-elementor\u002Fassets\u002Fjs\u002Ffrontend.js","\u002Fwp-content\u002Fplugins\u002Fshulman-utm-attribution-for-elementor\u002Fassets\u002Fcss\u002Ffrontend.css",[],[285,289],"\u002Fwp-content\u002Fplugins\u002Fshulman-utm-attribution-for-elementor\u002Fassets\u002Fjs\u002Fadmin.js",[291,292,293],"shulman-utm-attribution-for-elementor\u002Fassets\u002Fjs\u002Ffrontend.js?ver=","shulman-utm-attribution-for-elementor\u002Fassets\u002Fcss\u002Ffrontend.css?ver=","shulman-utm-attribution-for-elementor\u002Fassets\u002Fjs\u002Fadmin.js?ver=",{"cssClasses":295,"htmlComments":296,"htmlAttributes":297,"restEndpoints":298,"jsGlobals":299,"shortcodeOutput":303},[],[],[],[],[300,301,302],"shulmanAttrib","ShulmanAttrib","shulman_utm_data",[],{"error":268,"url":305,"statusCode":306,"statusMessage":307,"message":307},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fshulman-utm-attribution-for-elementor\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":85,"versions":309},[310,316],{"version":6,"download_url":24,"svn_tag_url":311,"released_at":26,"has_diff":312,"diff_files_changed":313,"diff_lines":26,"trac_diff_url":314,"vulnerabilities":315,"is_current":268},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fshulman-utm-attribution-for-elementor\u002Ftags\u002F1.8.0\u002F",false,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fshulman-utm-attribution-for-elementor%2Ftags%2F1.7.12&new_path=%2Fshulman-utm-attribution-for-elementor%2Ftags%2F1.8.0",[],{"version":317,"download_url":318,"svn_tag_url":319,"released_at":26,"has_diff":312,"diff_files_changed":320,"diff_lines":26,"trac_diff_url":26,"vulnerabilities":321,"is_current":312},"1.7.12","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshulman-utm-attribution-for-elementor.1.7.12.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fshulman-utm-attribution-for-elementor\u002Ftags\u002F1.7.12\u002F",[],[]]