[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fermqtwEGa07aYDxrrsliAyGkf7Z858Mr3dGuF7miCiE":3,"$fhzTG3cdYy28BA5tED6R83ZVQJnZ8V7GEF_Y0ZjhjAEU":304,"$fWoIr4wXvIiYOcRnEDzSh6kh-CVTJjKs8pJf4I_VKmBk":309},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":18,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":30,"crawl_stats":26,"alternatives":34,"analysis":145,"fingerprints":278},"site-visitor-info","Site visitor Information","1.0","usmanaltafwp","https:\u002F\u002Fprofiles.wordpress.org\u002Fusmanaltafwp\u002F","\u003Cp>Enables Administrator to easily Block Speciif Visitor to Access the website and redirect visitors to a predefined URL using IP address.\u003C\u002Fp>\n\u003Cp>Key Features\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Block Specific Visitor\u003C\u002Fli>\n\u003Cli>Redirects Specific visitors to a predefined URL\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>More Information\u003C\u002Fh4>\n\u003Cp>Please Connect me at \u003Ca href=\"mailto:usmanaltafwp@gmail.com\" rel=\"nofollow ugc\">usmanaltafwp@gmail.com\u003C\u002Fa>\u003C\u002Fp>\n","Block Visitor to Access the Website and Redirects visitors to a predefined URL using IP address.",0,963,100,1,"2018-09-09T13:02:00.000Z","4.9.29","3.0","",[20,21,22,23],"ip-address","ip-based-block-visitor","ip-based-redirection","targeted-content","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsite-visitor-info.zip",85,null,"2026-03-15T15:16:48.613Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},30,84,"2026-05-20T07:11:52.865Z",[35,61,83,104,126],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":32,"num_ratings":45,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":55,"download_link":56,"security_score":57,"vuln_count":58,"unpatched_count":11,"last_vuln_date":59,"fetched_at":60},"ip2location-country-blocker","IP2Location Country Blocker","2.41.2","IP2Location","https:\u002F\u002Fprofiles.wordpress.org\u002Fip2location\u002F","\u003Cp>\u003Cem>This plugin will NOT work if any cache plugin is enabled.\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>This plugin enables user to block unwanted traffic from accessing your frontend (blog pages) or backend (admin area) by countries or proxy servers. It helps to reduce spam and unwanted sign ups easily by preventing unwanted visitors from browsing a particular page or entire website.\u003C\u002Fp>\n\u003Cp>Key Features\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Allow you to block the access from multiple countries.\u003C\u002Fli>\n\u003Cli>Allow you to block the access by country grouping, such as EU, APAC, and so on.\u003C\u002Fli>\n\u003Cli>Allow you to block the access from anonymous proxies.\u003C\u002Fli>\n\u003Cli>Allow you to block the access by IP ranges.\u003C\u002Fli>\n\u003Cli>Allow you to whitelist the crawler, for example, Google, Bing, Yandex, and so on, to index your pages (SEO friendly).\u003C\u002Fli>\n\u003Cli>Supports IPv4 and IPv6\u003C\u002Fli>\n\u003Cli>Default to 403 error (Permission Denied) display\u003C\u002Fli>\n\u003Cli>Allow you to customize your own 403 page.\u003C\u002Fli>\n\u003Cli>Send you an email notification if some one is trying to access your admin area.\u003C\u002Fli>\n\u003Cli>Provide you statistical report of traffics blocked.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin supports both IP2Location BIN data and web service for IP geolocation lookup. If you would like to use the IP2Location geolocation BIN data, you can easily download and update the BIN data via the plugin settings page. Alternatively, you can also download and update the BIN data file manually using the below links:\u003C\u002Fp>\n\u003Cp>IP Geolocation file download:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Flite.ip2location.com\" title=\"IP2Location LITE database\" rel=\"nofollow ugc\">IP2Location & IP2Proxy LITE database (Free)\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fip2location.com\" title=\"IP2Location commercial database\" rel=\"nofollow ugc\">IP2Location & IP2Proxy Commercial database (Comprehensive)\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>To use the IP2Location IP geolocation web service (REST API) for geolocation, you’ll need to register an account at \u003Ca href=\"https:\u002F\u002Fwww.ip2location.io\" title=\"IP2Location.io IP Geolocation API\" rel=\"nofollow ugc\">IP2Location.io IP Geolocation API\u003C\u002Fa>. A free plan is available.\u003C\u002Fp>\n\u003Ch4>More Information\u003C\u002Fh4>\n\u003Cp>Please visit us at \u003Ca href=\"https:\u002F\u002Fwww.ip2location.com\" title=\"https:\u002F\u002Fwww.ip2location.com\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.ip2location.com\u003C\u002Fa>\u003C\u002Fp>\n","Blocks unwanted visitors from accessing your frontend (blog pages) or backend (admin area) by countries or proxy servers.",30000,1636207,124,"2025-12-03T07:19:00.000Z","6.9.4","4.6","7.4",[51,52,20,53,54],"block-country","block-proxy","ip2location","redirection","https:\u002F\u002Fip2location.com\u002Fresources\u002Fwordpress-ip2location-country-blocker","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fip2location-country-blocker.2.41.2.zip",93,9,"2025-02-21 19:56:54","2026-04-16T10:56:18.058Z",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":71,"num_ratings":57,"last_updated":72,"tested_up_to":47,"requires_at_least":73,"requires_php":74,"tags":75,"homepage":81,"download_link":82,"security_score":13,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":60},"disabled-source-disabled-right-click-and-content-protection","Disabled Source, Disabled Right Click and Content Protection","1.7.0","Jahid Hasan","https:\u002F\u002Fprofiles.wordpress.org\u002Fjahidcse\u002F","\u003Cp>Disabled Source, Disabled Right Click, and Content Protection is a very simple plugin to Protect your Website Content, Disable view page source(Ctrl+U), Disable Right Click, Disable F12 functional key, and Disable save the page(Ctrl+S). The special thing is for you to allow or disallow your post comments\u002Freview section.\u003C\u002Fp>\n\u003Cp>The plugin is called copy content protection. It is very easy to use and install. This plugin protects content both on PC and mobile devices. Our latest features block IP Addresses.\u003C\u002Fp>\n\u003Cp>\u003Cstrong> Activate Disabled Source, Disabled Right Click, and Content Protection plugin and check those features by opening your website on a private\u002FIncognito window\u002FBy Logout \u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>🎉 Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Content Protection\u003C\u002Fli>\n\u003Cli>Notification text\u003C\u002Fli>\n\u003Cli>Disable Developer Tools\u003C\u002Fli>\n\u003Cli>Right Click Off\u003C\u002Fli>\n\u003Cli>Disable Image Drag\u002FDrop\u003C\u002Fli>\n\u003Cli>Disable F12\u003C\u002Fli>\n\u003Cli>Disable Ctrl+I\u003C\u002Fli>\n\u003Cli>Disable Ctrl+Shift+I\u003C\u002Fli>\n\u003Cli>Disable Ctrl+J\u003C\u002Fli>\n\u003Cli>Disable Ctrl+Shift+J\u003C\u002Fli>\n\u003Cli>Disable Ctrl+C\u003C\u002Fli>\n\u003Cli>Disable Ctrl+Shift+C\u003C\u002Fli>\n\u003Cli>Disable Ctrl+U\u003C\u002Fli>\n\u003Cli>Disable Ctrl+Shift+U\u003C\u002Fli>\n\u003Cli>Disable Comments\u003C\u002Fli>\n\u003Cli>Disable by IP Address \u003C\u002Fli>\n\u003Cli>Disable by IP Address Page Design\u003C\u002Fli>\n\u003Cli>Disable by Country\u003C\u002Fli>\n\u003Cli>Disable by Country Notification\u003C\u002Fli>\n\u003Cli>Disable by Country Notification Page Design\u003C\u002Fli>\n\u003Cli>Website Maintenance\u003C\u002Fli>\n\u003Cli>Website Maintenance Custom Design\u003C\u002Fli>\n\u003Cli>Disable Print Preview Page\u003C\u002Fli>\n\u003Cli>Disable by Page id\u003C\u002Fli>\n\u003Cli>Disable by Role wise\u003C\u002Fli>\n\u003Cli>Disable by Post Type\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>🎉 Content Copy Protection\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Prevent unauthorized users from copying or reproducing your website content and images. Perfect for bloggers, photographers, and businesses who need to protect their intellectual property.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>🎉 Disable Developer Tools\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Blocks users from inspecting your website source code or accessing developer tools, enhancing overall site security.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>🎉 Disable Comments\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>If you planning to allow or disallow comments on your website you just activate the Disabled Source, Disabled Right Click, and Content Protection plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>🎉 Disable by IP Address\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>This feature enables users to block unwanted traffic from accessing your website frontend and backend by IP Address. It helps to reduce spam and unwanted sign-ups quickly by preventing unwanted visitors from browsing an entire website.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>🎉 Disable by Country\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>This feature enables users to block unwanted traffic from accessing your website frontend and backend by Country. It helps to reduce spam and unwanted sign-ups quickly by preventing unwanted visitors from browsing an entire website.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>🎉 Website Maintenance Mode\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Activate maintenance mode with a professional custom design, ensuring visitors see a well-crafted page while your site is being developed or updated.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>🎉 Protect by Post Type\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Apply protection to entire post types (e.g., Posts, or Custom Post Types), providing comprehensive coverage for your website’s critical assets.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>🎉 Protect by User Roles\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>You can restrict content and image usage based on user roles (e.g., Editor, Subscriber), allowing you to define who can view or copy sensitive information.\u003C\u002Fli>\n\u003C\u002Ful>\n","Disable Source(Ctrl+U), Disable Right click, Disable F12 functional key, and Disable save the page(Ctrl+S) and Content Protection of your WordPress We …",10000,256185,98,"2026-04-12T11:55:00.000Z","4.7","5.3",[76,77,78,79,80],"content-protection","disable-ip-address-and-country","image-protection","no-right-click","right-click-off","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdisabled-source-disabled-right-click-and-content-protection\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdisabled-source-disabled-right-click-and-content-protection.1.7.0.zip",{"slug":84,"name":85,"version":86,"author":87,"author_profile":88,"description":89,"short_description":90,"active_installs":69,"downloaded":91,"rating":92,"num_ratings":93,"last_updated":94,"tested_up_to":95,"requires_at_least":96,"requires_php":18,"tags":97,"homepage":102,"download_link":103,"security_score":13,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":60},"ip-location-block","IP Location Block","1.3.8","Darko G.","https:\u002F\u002Fprofiles.wordpress.org\u002Fdarkog\u002F","\u003Cp>IP Location Block plugin that allows you to block access to your site based on the visitor location while also keeping your site safe from malicious attacks. The plugin brings a smart and powerful protection methods such as “\u003Cstrong>WP Metadata Exploit Protection\u003C\u002Fstrong>“.\u003C\u002Fp>\n\u003Cp>Combined with those methods and IP address geolocation, you’ll be surprised to find a bunch of malicious or undesirable access blocked in the logs of this plugin after several days of installation.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note:\u003C\u002Fstrong> This plugin is based on the now abandoned “IP Geo Block” plugin by tokkonopapa. I fixed various issues and improved the overall codebase.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Native Geo-Location Provider\u003C\u002Fstrong>\u003Cbr \u002F>\nIP Location Block provides \u003Ca href=\"https:\u002F\u002Fiplocationblock.com\u002Fcodex\u002Fnative-geo-location-provider\u002F?utm_source=plugin&utm_medium=wporgpage&utm_campaign=readme\" rel=\"nofollow ugc\">Native Geo-Location Provider\u003C\u002Fa> that is faster, more secure and provides the needed \u003Cstrong>precision\u003C\u002Fstrong> for matching \u003Cstrong>CITY\u003C\u002Fstrong> and \u003Cstrong>STATE\u003C\u002Fstrong> besides the standard COUNTRY matching.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Privacy by design:\u003C\u002Fstrong>\u003Cbr \u002F>\nIP address is always encrypted on recording in logs\u002Fcache. Moreover, it can be anonymized and restricted on sending to the 3rd parties such as geolocation APIs or whois service.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Immigration control:\u003C\u002Fstrong>\u003Cbr \u002F>\nAccess to the basic and important entrances into back-end such as \u003Ccode>wp-comments-post.php\u003C\u002Fcode>, \u003Ccode>xmlrpc.php\u003C\u002Fcode>, \u003Ccode>wp-login.php\u003C\u002Fcode>, \u003Ccode>wp-signup.php\u003C\u002Fcode>, \u003Ccode>wp-admin\u002Fadmin.php\u003C\u002Fcode>, \u003Ccode>wp-admin\u002Fadmin-ajax.php\u003C\u002Fcode>, \u003Ccode>wp-admin\u002Fadmin-post.php\u003C\u002Fcode> will be validated by means of a country code based on IP address. It allows you to configure either whitelist or blacklist to \u003Ca href=\"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FISO_3166-1_alpha-2#Officially_assigned_code_elements\" title=\"ISO 3166-1 alpha-2 - Wikipedia\" rel=\"nofollow ugc\">specify the countires\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FClassless_Inter-Domain_Routing\" title=\"Classless Inter-Domain Routing - Wikipedia\" rel=\"nofollow ugc\">CIDR notation\u003C\u002Fa> for a range of IP addresses and \u003Ca href=\"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FAutonomous_system_(Internet)\" title=\"Autonomous system (Internet) - Wikipedia\" rel=\"nofollow ugc\">AS number\u003C\u002Fa> for a group of IP networks.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Guard against login attempts:\u003C\u002Fstrong>\u003Cbr \u002F>\nIn order to prevent hacking through the login form and XML-RPC by brute-force and the reverse-brute-force attacks, the number of login attempts will be limited per IP address even from the permitted countries.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Minimize server load against brute-force attacks:\u003C\u002Fstrong>\u003Cbr \u002F>\nYou can configure this plugin as a \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FMust_Use_Plugins\" title=\"Must Use Plugins « WordPress Codex\" rel=\"nofollow ugc\">Must Use Plugins\u003C\u002Fa> so that this plugin can be loaded prior to regular plugins. It can massively \u003Ca href=\"https:\u002F\u002Fiplocationblock.com\u002Fcodex\u002Fvalidation-timing\u002F\" title=\"Validation timing | IP Location Block\" rel=\"nofollow ugc\">reduce the load on server\u003C\u002Fa>.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Prevent malicious down\u002Fuploading:\u003C\u002Fstrong>\u003Cbr \u002F>\nA malicious request such as exposing \u003Ccode>wp-config.php\u003C\u002Fcode> or uploading malwares via vulnerable plugins\u002Fthemes can be blocked.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Block badly-behaved bots and crawlers:\u003C\u002Fstrong>\u003Cbr \u002F>\nA simple logic may help to reduce the number of rogue bots and crawlers scraping your site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Support of BuddyPress and bbPress:\u003C\u002Fstrong>\u003Cbr \u002F>\nYou can configure this plugin so that a registered user can login as a membership from anywhere, while a request such as a new user registration, lost password, creating a new topic and subscribing comment can be blocked by country. It is suitable for \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbuddypress\u002F\" title=\"BuddyPress — WordPress Plugins\" rel=\"ugc\">BuddyPress\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbbpress\u002F\" title=\"WordPress › bbPress « WordPress Plugins\" rel=\"ugc\">bbPress\u003C\u002Fa> to help reducing spams.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Referrer suppressor for external links:\u003C\u002Fstrong>\u003Cbr \u002F>\nWhen you click an external hyperlink on admin screens, http referrer will be eliminated to hide a footprint of your site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Multiple source of IP Geolocation databases:\u003C\u002Fstrong>\u003Cbr \u002F>\nBesides the \u003Ca href=\"https:\u002F\u002Fiplocationblock.com\u002Fcodex\u002Fnative-geo-location-provider\u002F?utm_source=plugin&utm_medium=wporgpage&utm_campaign=readme\" rel=\"nofollow ugc\">Native Geo-Location provider\u003C\u002Fa>, this plugin supports \u003Ca href=\"https:\u002F\u002Fwww.maxmind.com\" title=\"MaxMind - IP Geolocation and Online Fraud Prevention\" rel=\"nofollow ugc\">MaxMind GeoLite2 free databases\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwww.ip2location.com\u002F\" title=\"IP Address Geolocation to Identify Website Visitor's Geographical Location\" rel=\"nofollow ugc\">IP2Location LITE databases\u003C\u002Fa>. Also free Geolocation REST APIs and whois information can be available for audit purposes.\u003Cbr \u002F>\nFather more, \u003Ca href=\"https:\u002F\u002Fiplocationblock.com\u002Fcloudflare-cloudfront-api-class-library\u002F\" title=\"CloudFlare & CloudFront API class library | IP Location Block\" rel=\"nofollow ugc\">dedicated API class libraries\u003C\u002Fa> can be installed for CloudFlare and CloudFront as a reverse proxy service.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Customizing response:\u003C\u002Fstrong>\u003Cbr \u002F>\nHTTP response code can be selectable as \u003Ccode>403 Forbidden\u003C\u002Fcode> to deny access pages, \u003Ccode>404 Not Found\u003C\u002Fcode> to hide pages or even \u003Ccode>200 OK\u003C\u002Fcode> to redirect to the top page.\u003Cbr \u002F>\nYou can also have a human friendly page (like \u003Ccode>404.php\u003C\u002Fcode>) in your parent\u002Fchild theme template directory to fit your site design.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Validation logs:\u003C\u002Fstrong>\u003Cbr \u002F>\nValidation logs for useful information to audit attack patterns can be manageable.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Cooperation with full spec security plugin:\u003C\u002Fstrong>\u003Cbr \u002F>\nThis plugin is lite enough to be able to cooperate with other full spec security plugin such as \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwordfence\u002F\" title=\"Wordfence Security — WordPress Plugins\" rel=\"ugc\">Wordfence Security\u003C\u002Fa>. See \u003Ca href=\"https:\u002F\u002Fiplocationblock.com\u002Fcodex\u002Fpage-speed-performance\u002F\" title=\"Page speed performance | IP Location Block\" rel=\"nofollow ugc\">this report\u003C\u002Fa> about page speed performance.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Extendability:\u003C\u002Fstrong>\u003Cbr \u002F>\nYou can customize the behavior of this plugin via \u003Ccode>add_filter()\u003C\u002Fcode> with \u003Ca href=\"https:\u002F\u002Fiplocationblock.com\u002Fcodex\u002F\" title=\"Codex | IP Location Block\" rel=\"nofollow ugc\">pre-defined filter hook\u003C\u002Fa>. See various use cases in \u003Ca href=\"https:\u002F\u002Fiplocationblock.com\u002Fcodex\u002Fexample-use-cases-for-the-developer-hooks\u002F\" rel=\"nofollow ugc\">samples.php\u003C\u002Fa> bundled within this package.\u003Cbr \u002F>\nYou can also get the extension \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fddur\u002FWordPress-IP-Geo-Allow\" title=\"GitHub - ddur\u002FWordPress-IP-Geo-Allow: WordPress Plugin Exension for WordPress-IP-Geo-Block Plugin\" rel=\"nofollow ugc\">IP Geo Allow\u003C\u002Fa> by \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fddur\" title=\"ddur (Dragan) - GitHub\" rel=\"nofollow ugc\">Dragan\u003C\u002Fa>. It makes admin screens strictly private with more flexible way than specifying IP addresses.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Self blocking prevention and easy rescue:\u003C\u002Fstrong>\u003Cbr \u002F>\nWebsite owners do not prefer themselves to be blocked. This plugin prevents such a sad thing unless you force it. And futhermore, if such a situation occurs, you can \u003Ca href=\"https:\u002F\u002Fiplocationblock.com\u002Fcodex\u002Fwhat-should-i-do-when-im-locked-out\u002F\" title=\"What should I do when I'm locked out? | IP Location Block\" rel=\"nofollow ugc\">rescue yourself\u003C\u002Fa> easily.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Clean uninstallation:\u003C\u002Fstrong>\u003Cbr \u002F>\nNothing is left in your precious mySQL database after uninstallation. So you can feel free to install and activate to make a trial of this plugin’s functionality.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Documentation\u003C\u002Fh4>\n\u003Cp>Documentation and more information can always be found on our \u003Ca href=\"https:\u002F\u002Fiplocationblock.com\u002F\" title=\"IP Location Block\" rel=\"nofollow ugc\">plugin website\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Attribution\u003C\u002Fh4>\n\u003Cp>This package includes GeoLite2 library distributed by MaxMind, available from \u003Ca href=\"https:\u002F\u002Fwww.maxmind.com\" title=\"MaxMind - IP Geolocation and Online Fraud Prevention\" rel=\"nofollow ugc\">MaxMind\u003C\u002Fa>, and also includes IP2Location open source libraries available from \u003Ca href=\"https:\u002F\u002Fwww.ip2location.com\" title=\"IP Address Geolocation to Identify Website Visitor's Geographical Location\" rel=\"nofollow ugc\">IP2Location\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Also thanks for providing the following services and REST APIs for free.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fgeoiplookup.net\u002F\" title=\"What Is My IP Address | GeoIP Lookup\" rel=\"nofollow ugc\">http:\u002F\u002Fgeoiplookup.net\u002F\u003C\u002Fa> (IPv4, IPv6 \u002F free)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fipinfo.io\u002F\" title=\"IP Address API and Data Solutions\" rel=\"nofollow ugc\">https:\u002F\u002Fipinfo.io\u002F\u003C\u002Fa> (IPv4, IPv6 \u002F free)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fipapi.com\u002F\" title=\"ipapi - IP Address Lookup and Geolocation API\" rel=\"nofollow ugc\">https:\u002F\u002Fipapi.com\u002F\u003C\u002Fa> (IPv4, IPv6 \u002F free, need API key)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fipstack.com\u002F\" title=\"ipstack - Free IP Geolocation API\" rel=\"nofollow ugc\">https:\u002F\u002Fipstack.com\u002F\u003C\u002Fa> (IPv4, IPv6 \u002F free, need API key)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fipinfodb.com\u002F\" title=\"Free IP Geolocation Tools and API| IPInfoDB\" rel=\"nofollow ugc\">https:\u002F\u002Fipinfodb.com\u002F\u003C\u002Fa> (IPv4, IPv6 \u002F free, need API key)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Development\u003C\u002Fh4>\n\u003Cp>Development of this plugin happens at \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fgdarko\u002Fip-location-block\" title=\"gdarko\u002Fip-location-block - GitHub\" rel=\"nofollow ugc\">IP Location Block – GitHub\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>All contributions will always be welcome.\u003C\u002Fp>\n\u003Ch4>Known issues\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>From \u003Ca href=\"https:\u002F\u002Fmake.wordpress.org\u002Fcore\u002F2016\u002F03\u002F09\u002Fcomment-changes-in-wordpress-4-5\u002F\" title=\"Comment Changes in WordPress 4.5 – Make WordPress Core\" rel=\"nofollow ugc\">WordPress 4.5\u003C\u002Fa>, \u003Ccode>rel=nofollow\u003C\u002Fcode> had no longer be attached to the links in \u003Ccode>comment_content\u003C\u002Fcode>. This change prevents to block “\u003Ca href=\"https:\u002F\u002Fwww.owasp.org\u002Findex.php\u002FServer_Side_Request_Forgery\" title=\"Server Side Request Forgery - OWASP\" rel=\"nofollow ugc\">Server Side Request Forgeries\u003C\u002Fa>” (not Cross Site but a malicious internal link in the comment field).\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fapps.wordpress.com\u002Fmobile\u002F\" title=\"WordPress.com Apps - Mobile Apps\" rel=\"nofollow ugc\">WordPress.com Mobile App\u003C\u002Fa> can’t execute image uploading because of its own authentication system via XMLRPC.\u003C\u002Fli>\n\u003C\u002Ful>\n","Easily block visitors by country, state or ISP provider. Also, protects your site from spam, login attempts, malicious access & more.",198024,92,33,"2026-03-13T00:57:00.000Z","7.0","3.7",[98,99,100,20,101],"block","country","geolocation","ip-geo-block","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fip-location-block\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fip-location-block.1.3.8.zip",{"slug":105,"name":106,"version":107,"author":108,"author_profile":109,"description":110,"short_description":111,"active_installs":112,"downloaded":113,"rating":32,"num_ratings":58,"last_updated":114,"tested_up_to":115,"requires_at_least":116,"requires_php":117,"tags":118,"homepage":123,"download_link":124,"security_score":13,"vuln_count":14,"unpatched_count":11,"last_vuln_date":125,"fetched_at":60},"user-ip-and-location","User IP and Location","4.0.2","Sunny Kumar","https:\u002F\u002Fprofiles.wordpress.org\u002Ftheguidex\u002F","\u003Cp>Looking to display your website visitor’s IP address, location, browser details, and other information on your WordPress site? Then “User IP and Location” plugin is exactly what you need!\u003C\u002Fp>\n\u003Cp>This plugin is very simple to set up and use. Just install it, and you can start showing visitor information anywhere on your website using easy shortcodes. You can put these shortcodes in your posts, pages, sidebar, footer – anywhere you want!\u003C\u002Fp>\n\u003Cp>The best part? We use the reliable and free \u003Ca href=\"http:\u002F\u002Fip-api.com\" title=\"IP-API\" rel=\"friend nofollow ugc\">IP-API\u003C\u002Fa> service to get all the location data, so the information is always accurate and up-to-date.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>New in Version 4.x.x – Works with Caching Plugins!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Are you using WP-Rocket, W3 Total Cache, or any other caching plugin? No problem at all! We’ve completely rebuilt the plugin to work perfectly with all caching plugins. Your visitors will always see their own correct information, not some cached data from another visitor.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Advanced Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Multi-Language Support\u003C\u002Fstrong> – Get location names in 8 different languages (English, German, Spanish, Portuguese, French, Japanese, Chinese, Russian)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PRO API Key Support\u003C\u002Fstrong> – Use your premium IP-API key for higher limits and HTTPS security\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Smart Caching System\u003C\u002Fstrong> – Built-in server-side caching with customizable expiration times (1 hour to 1 week)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Conditional Content\u003C\u002Fstrong> – Show different content to visitors from specific countries, regions, or cities\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Developer Tools\u003C\u002Fstrong> – PHP functions and REST API endpoints for custom development\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable Output\u003C\u002Fstrong> – Change “Yes\u002FNo” text to any language or format you prefer\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Here are all the shortcodes you can use:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[userip_location type=\"ip\"] - Shows visitor's IP address\n[userip_location type=\"continent\"] - Shows continent name\n[userip_location type=\"country\"] - Shows country name\n[userip_location type=\"countrycode\"] - Shows country code (like IN, US, UK)\n[userip_location type=\"region\"] - Shows region code\n[userip_location type=\"regionname\"] - Shows region\u002Fstate name\n[userip_location type=\"city\"] - Shows city name\n[userip_location type=\"zip\"] - **NEW!** Shows ZIP\u002Fpostal code\n[userip_location type=\"lat\"] - Shows latitude\n[userip_location type=\"lon\"] - Shows longitude\n[userip_location type=\"timezone\"] - Shows timezone\n[userip_location type=\"currency\"] - Shows local currency\n[userip_location type=\"isp\"] - Shows internet provider name\n[userip_location type=\"mobile\"] - Shows if visitor is on mobile network\n[userip_location type=\"proxy\"] - Shows if visitor is using proxy\n[userip_location type=\"hosting\"] - Shows if IP is from hosting provider\n[userip_location type=\"browser\"] - Shows browser name\n[userip_location type=\"os\"] - Shows operating system\n[userip_location type=\"flag\" height=\"auto\" width=\"50px\" vertical_align=\"middle\"] - Shows country flag\n[userip_localtime] - **NEW!** Shows visitor's current local time\n[userip_localdate] - **NEW!** Shows visitor's current local date\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Smart Conditional Content:\u003C\u002Fstrong>\u003Cbr \u002F>\nShow different content to visitors from different places! Perfect for targeted marketing, regional offers, or localized messages.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[userip_conditional country=\"US,IN\"]Content for US and India visitors only[\u002Fuserip_conditional]\n[userip_conditional country_not=\"CN,RU\"]Content for everyone except China and Russia[\u002Fuserip_conditional]\n[userip_conditional region=\"CA,TX\"]Special offers for California and Texas![\u002Fuserip_conditional]\n[userip_conditional city=\"Mumbai,Delhi\"]Mumbai and Delhi exclusive deals[\u002Fuserip_conditional]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>About the Flag Shortcode:\u003C\u002Fstrong>\u003Cbr \u002F>\nWhen using the flag shortcode, you can control its size and position. The \u003Ccode>height\u003C\u002Fcode>, \u003Ccode>width\u003C\u002Fcode>, and \u003Ccode>vertical_align\u003C\u002Fcode> options are all optional. By default, height is auto, width is 50px, and it aligns in the middle. You can change these as per your needs.\u003C\u002Fp>\n\u003Ch4>Why Choose User IP and Location Plugin?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Super Easy Setup\u003C\u002Fstrong> – Just install and activate, that’s it!\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Works with All Caching Plugins\u003C\u002Fstrong> – WP-Rocket, W3 Total Cache, you name it!\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Fast Loading\u003C\u002Fstrong> – Uses modern AJAX technology so it doesn’t slow down your site\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Lots of Information\u003C\u002Fstrong> – IP, country, city, flag, browser, OS, ISP, and much more\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multi-Language Support\u003C\u002Fstrong> – Location names in 8 different languages\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PRO API Support\u003C\u002Fstrong> – Use premium IP-API keys for higher limits and HTTPS\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Smart Caching\u003C\u002Fstrong> – Server-side caching with customizable expiration (1 hour to 1 week)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>New Features\u003C\u002Fstrong> – ZIP code and local time shortcodes added\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Smart Content\u003C\u002Fstrong> – Show different content to visitors from different countries, regions, or cities\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Always Updated\u003C\u002Fstrong> – Uses reliable IP-API service for accurate data\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Developer Friendly\u003C\u002Fstrong> – Includes PHP functions and REST API for custom development\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable\u003C\u002Fstrong> – Change output text, caching settings, and more from admin panel\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Perfect for bloggers, businesses, and developers who want to personalize their website based on visitor location!\u003C\u002Fp>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cp>This awesome plugin is created by the talented team at \u003Ca href=\"https:\u002F\u002Fheyserp.com\" title=\"HeySERP\" rel=\"friend nofollow ugc\"> HeySERP \u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Want to learn more about WordPress? Check out our website \u003Ca href=\"https:\u002F\u002Ftheguidex.com\u002F\" title=\"TheGuideX\" rel=\"friend nofollow ugc\"> TheGuideX \u003C\u002Fa> where we share helpful tutorials on:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fthewpx.com\u002Fget-ip-address-and-location-in-wordpress\u002F\" title=\"How to Get the IP Address and Location of Users in WordPress\" rel=\"friend nofollow ugc\">How to Get User IP and Location in WordPress\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftheguidex.com\u002Fcommon-wordpress-errors\u002F\" title=\"Common WordPress Errors & Solutions\" rel=\"friend nofollow ugc\">Common WordPress Errors & How to Fix Them\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftheguidex.com\u002Fgoogle-adsense-plugins-for-wordpress\u002F\" title=\"Best WordPress Ads Manager Plugins\" rel=\"friend nofollow ugc\">Best WordPress Ad Management Plugins\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>…and many more helpful \u003Ca href=\"https:\u002F\u002Ftheguidex.com\u002Fcategory\u002Fwordpress\u002F\" title=\"WordPress Tutorials\" rel=\"friend nofollow ugc\">WordPress tutorials\u003C\u002Fa> in simple language!\u003C\u002Fp>\n","Want to show your website visitors their IP address, location, and other cool details? This plugin makes it super easy! Now works perfectly with cachi …",3000,38194,"2025-07-15T07:41:00.000Z","6.8.5","5.0","7.2",[119,100,120,121,122],"country-code","region","user-ip-address","user-location","https:\u002F\u002Ftheguidex.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuser-ip-and-location.zip","2023-04-28 00:00:00",{"slug":127,"name":128,"version":129,"author":130,"author_profile":131,"description":132,"short_description":133,"active_installs":134,"downloaded":135,"rating":13,"num_ratings":136,"last_updated":137,"tested_up_to":115,"requires_at_least":138,"requires_php":18,"tags":139,"homepage":18,"download_link":143,"security_score":71,"vuln_count":14,"unpatched_count":11,"last_vuln_date":144,"fetched_at":60},"belingogeo","belingoGeo","1.13.2","Belingo","https:\u002F\u002Fprofiles.wordpress.org\u002Fbelingo\u002F","\u003Cp>The plugin adds the ability to select cities, unique pages are created with a unique url for each city. This allows you to uniqueize content for search engines.\u003C\u002Fp>\n\u003Cp>If for some reason the video is unavailable, you can watch it on \u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=gTIPR8cmQmM\" rel=\"nofollow ugc\">Youtube\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fdzen.ru\u002Fvideo\u002Fwatch\u002F6759510b565b5409ab52b754?share_to=link\" rel=\"nofollow ugc\">Zen\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Frutube.ru\u002Fvideo\u002F0c08cc8493b2893a7c33b2ff5252a1db\u002F\" rel=\"nofollow ugc\">Rutube\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fvkvideo.ru\u002Fvideo-54775454_456239017\" rel=\"nofollow ugc\">VK Video\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Plugin capabilities:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Creating virtual URLs for all WordPress pages and posts\u003C\u002Fli>\n\u003Cli>Ability to combine cities into regions.\u003C\u002Fli>\n\u003Cli>Ability to exclude pages, posts or taxonomies for which there is no need to create a URL\u003C\u002Fli>\n\u003Cli>Pre-made pop-up windows for confirming the found city, as well as for selecting other cities.\u003C\u002Fli>\n\u003Cli>Defining those cities that are not added to the list\u003C\u002Fli>\n\u003Cli>Shortcodes for displaying cities in different cases\u003C\u002Fli>\n\u003Cli>Shortcodes with a phone number and address for each city\u003C\u002Fli>\n\u003Cli>Shortcodes that allow you to add any content, depending on the selected city\u003C\u002Fli>\n\u003Cli>Shortcodes for regions, allowing you to display different content for a group of cities.\u003C\u002Fli>\n\u003Cli>Creating virtual URLs for Woocommerce categories and products\u003C\u002Fli>\n\u003Cli>Support for Yoast.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbelingo.ru\u002Fproducts\u002Fbelingogeo-pro\u002F?utm_source=wordpress.org&utm_medium=description\" rel=\"nofollow ugc\">Extended version of the plugin\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Useful articles:\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbelingo.ru\u002Fustanovka-i-nastrojka-plagina-belingogeo\u002F?utm_source=wordpress.org&utm_medium=description\" rel=\"nofollow ugc\">Installing and configuring the plugin\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fbelingo.ru\u002Fkak-sortirovat-goroda-v-plagine-belingogeo\u002F?utm_source=wordpress.org&utm_medium=description\" rel=\"nofollow ugc\">How to sort cities in plugin\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fbelingo.ru\u002Fkak-sozdat-dopolnitelnoe-pole-dlya-goroda-v-plagine-belingogeo\u002F?utm_source=wordpress.org&utm_medium=description\" rel=\"nofollow ugc\">How to create an additional field for the city in the plugin\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fbelingo.ru\u002Fopisanie-vsex-nastroek-plagina-belingogeo\u002F?utm_source=wordpress.org&utm_medium=description\" rel=\"nofollow ugc\">Description of all settings of the BelingoGeo plugin\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fbelingo.ru\u002Fnastrojka-plagina-belingogeo-v-rezhime-poddomenov\u002F?utm_source=wordpress.org&utm_medium=description\" rel=\"nofollow ugc\">Setting up the BelingoGeo plugin in the “city in a subdomain” mode\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fbelingo.ru\u002Fopisanie-shortkodov-plagina-belingogeo\u002F?utm_source=wordpress.org&utm_medium=description\" rel=\"nofollow ugc\">Description of shortcodes of the BelingoGeo plugin\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>We are on social networks:\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ft.me\u002Fbelingollc\" rel=\"nofollow ugc\">Telegram channel\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fvk.com\u002Fitbelingo\" rel=\"nofollow ugc\">VK Group\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fdzen.ru\u002Fbelingo\" rel=\"nofollow ugc\">Zen channel\u003C\u002Fa>\u003C\u002Fp>\n","The plugin adds the ability to select cities, unique pages are created with a unique url for each city. This allows you to uniqueize content.",1000,11122,13,"2026-01-22T17:25:00.000Z","5.0.0",[140,141,100,142,23],"geo-target","geo-targeting","geotargeting","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbelingogeo.1.13.2.zip","2025-05-09 00:00:00",{"attackSurface":146,"codeSignals":161,"taintFlows":193,"riskAssessment":262,"analyzedAt":277},{"hooks":147,"ajaxHandlers":157,"restRoutes":158,"shortcodes":159,"cronEvents":160,"entryPointCount":11,"unprotectedCount":11},[148,154],{"type":149,"name":150,"callback":151,"file":152,"line":153},"action","admin_menu","svi_visitor_plugin_page","sitevisitor.php",20,{"type":149,"name":155,"callback":155,"file":152,"line":156},"init",34,[],[],[],[],{"dangerousFunctions":162,"sqlUsage":163,"outputEscaping":184,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":192},[],{"prepared":11,"raw":164,"locations":165},7,[166,169,171,174,177,179,181],{"file":152,"line":167,"context":168},69,"$wpdb->query() with variable interpolation",{"file":152,"line":170,"context":168},75,{"file":152,"line":172,"context":173},97,"$wpdb->get_var() with variable interpolation",{"file":152,"line":175,"context":176},99,"$wpdb->get_results() with variable interpolation",{"file":152,"line":178,"context":176},174,{"file":152,"line":180,"context":176},192,{"file":182,"line":183,"context":168},"uninstall.php",12,{"escaped":14,"rawEcho":185,"locations":186},2,[187,190],{"file":152,"line":188,"context":189},123,"raw output",{"file":152,"line":191,"context":189},134,[],[194,223,235,244],{"entryPoint":195,"graph":196,"unsanitizedCount":221,"severity":222},"svi_site_visitor_html_page (sitevisitor.php:56)",{"nodes":197,"edges":217},[198,203,209,213],{"id":199,"type":200,"label":201,"file":152,"line":202},"n0","source","$_POST",61,{"id":204,"type":205,"label":206,"file":152,"line":207,"wp_function":208},"n1","sink","update_option() [Settings Manipulation]",63,"update_option",{"id":210,"type":200,"label":211,"file":152,"line":212},"n2","$_POST (x2)",67,{"id":214,"type":205,"label":215,"file":152,"line":167,"wp_function":216},"n3","query() [SQLi]","query",[218,220],{"from":199,"to":204,"sanitized":219},false,{"from":210,"to":214,"sanitized":219},3,"high",{"entryPoint":224,"graph":225,"unsanitizedCount":14,"severity":222},"init (sitevisitor.php:139)",{"nodes":226,"edges":233},[227,230],{"id":199,"type":200,"label":228,"file":152,"line":229},"$_SERVER",159,{"id":204,"type":205,"label":231,"file":152,"line":178,"wp_function":232},"get_results() [SQLi]","get_results",[234],{"from":199,"to":204,"sanitized":219},{"entryPoint":236,"graph":237,"unsanitizedCount":14,"severity":222},"svi_Check_User_info (sitevisitor.php:188)",{"nodes":238,"edges":242},[239,241],{"id":199,"type":200,"label":228,"file":152,"line":240},191,{"id":204,"type":205,"label":231,"file":152,"line":180,"wp_function":232},[243],{"from":199,"to":204,"sanitized":219},{"entryPoint":245,"graph":246,"unsanitizedCount":261,"severity":222},"\u003Csitevisitor> (sitevisitor.php:0)",{"nodes":247,"edges":257},[248,249,250,251,252,255],{"id":199,"type":200,"label":201,"file":152,"line":202},{"id":204,"type":205,"label":206,"file":152,"line":207,"wp_function":208},{"id":210,"type":200,"label":211,"file":152,"line":212},{"id":214,"type":205,"label":215,"file":152,"line":167,"wp_function":216},{"id":253,"type":200,"label":254,"file":152,"line":229},"n4","$_SERVER (x2)",{"id":256,"type":205,"label":231,"file":152,"line":178,"wp_function":232},"n5",[258,259,260],{"from":199,"to":204,"sanitized":219},{"from":210,"to":214,"sanitized":219},{"from":253,"to":256,"sanitized":219},5,{"summary":263,"deductions":264},"The \"site-visitor-info\" v1.0 plugin exhibits significant security concerns despite having a seemingly small attack surface and no known historical vulnerabilities. While the absence of AJAX handlers, REST API routes, shortcodes, and cron events reduces direct entry points, the code analysis reveals critical weaknesses in data handling. Specifically, 100% of SQL queries are not using prepared statements, which is a major risk for SQL injection vulnerabilities. Furthermore, all four analyzed taint flows indicate unsanitized paths with high severity, suggesting that user-supplied data is not being properly validated or escaped before being used in sensitive operations, likely related to the SQL queries.\n\nThe plugin's output escaping is also a concern, with only 33% of outputs properly escaped, leaving potential for cross-site scripting (XSS) vulnerabilities. The complete lack of nonce and capability checks on any potential entry points, although currently not exposed by the static analysis, means that if any were introduced or discovered, they would be unprotected. The vulnerability history showing no past issues is a positive sign, but it does not mitigate the severe flaws identified in the current codebase. The overall security posture is poor due to the combination of unescaped data, raw SQL queries, and high-severity taint flows, outweighing the benefit of a limited attack surface and clean history.",[265,267,269,272,275],{"reason":266,"points":153},"Raw SQL queries without prepared statements",{"reason":268,"points":153},"High severity taint flows with unsanitized paths",{"reason":270,"points":271},"Low percentage of properly escaped output",6,{"reason":273,"points":274},"Missing nonce checks",10,{"reason":276,"points":274},"Missing capability checks","2026-04-06T09:43:57.136Z",{"wat":279,"direct":284},{"assetPaths":280,"generatorPatterns":281,"scriptPaths":282,"versionParams":283},[],[],[],[],{"cssClasses":285,"htmlComments":288,"htmlAttributes":289,"restEndpoints":301,"jsGlobals":302,"shortcodeOutput":303},[286,287],"site_visited","wrap",[],[290,291,292,293,294,295,296,297,298,299,300],"name=\"redirect\"","name=\"user_ip\"","name=\"block\"","name=\"unblock\"","name=\"submit\"","type=\"text\"","placeholder=\"Enter the Url\"","type=\"submit\"","value=\"send\"","value=\"Un Block IP\"","value=\"Block IP\"",[],[],[],{"error":305,"url":306,"statusCode":307,"statusMessage":308,"message":308},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fsite-visitor-info\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":11,"versions":310},[]]