[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f52eNtGiqJYrmBdLSNE82tluyR0AODKG3ZZYffSfZbKo":3,"$fORUVaS3DBXaO1mz5wbMRzDY5ZreWxZZROTqMrogxq9k":371,"$fXs3GJ2DQ-9k-BsW-buJTL2EnsBKX_XB-FcG6xjAD54k":376},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"discovery_status":30,"vulnerabilities":31,"developer":32,"crawl_stats":28,"alternatives":40,"analysis":131,"fingerprints":354},"spam-protection-without-captcha","Spam Protection Without Captcha","1.2","Shamim Hasan","https:\u002F\u002Fprofiles.wordpress.org\u002Fshamim51\u002F","\u003Cp>Protect Login, Register, Lost & Reset Password, Comment, woocommerce, Contact Form 7, bbpress, BuddyPress forms. No user interaction needed.\u003C\u002Fp>\n\u003Ch4>Supported Forms\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Login\u003C\u002Fli>\n\u003Cli>Register\u003C\u002Fli>\n\u003Cli>Lost Password\u003C\u002Fli>\n\u003Cli>Reset Password\u003C\u002Fli>\n\u003Cli>Comment Form\u003C\u002Fli>\n\u003Cli>Multisite User Signup\u003C\u002Fli>\n\u003Cli>Multisite blog Signup\u003C\u002Fli>\n\u003Cli>WooCommerce Login\u003C\u002Fli>\n\u003Cli>WooCommerce Register\u003C\u002Fli>\n\u003Cli>WooCommerce Lost Password\u003C\u002Fli>\n\u003Cli>WooCommerce Reset Password\u003C\u002Fli>\n\u003Cli>Contact Form 7\u003C\u002Fli>\n\u003Cli>bbPress New topic\u003C\u002Fli>\n\u003Cli>bbPress reply to topic\u003C\u002Fli>\n\u003Cli>BuddyPress register\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Privacy Notices\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>If you check “Cookie Check” (checked by default) then a hash will be stored in user browser cookie.\u003C\u002Fli>\n\u003Cli>If you check “stopforumspam Check”, this plugin send IP address to stopforumspam.com for spam database check. Please read \u003Ca href=\"https:\u002F\u002Fwww.stopforumspam.com\u002Fprivacy\" rel=\"nofollow ugc\">Stop Forum Spam Privacy\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n","Protect Login, Register, Lost & Reset Password, Comment, woocommerce, CF7, bbpress, BuddyPress forms.",100,5393,3,"2020-08-03T02:40:00.000Z","5.5.18","4.6","5.4",[19,20,21,22,23],"bot","captcha","comments","nocaptcha","spam","https:\u002F\u002Fwww.shamimsplugins.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fspam-protection-without-captcha.1.2.zip",85,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":35,"avg_security_score":36,"avg_patch_time_days":37,"trust_score":38,"computed_at":39},"shamim51",6,5270,86,77,78,"2026-05-20T01:44:21.600Z",[41,61,81,100,117],{"slug":42,"name":43,"version":44,"author":45,"author_profile":46,"description":47,"short_description":48,"active_installs":49,"downloaded":50,"rating":11,"num_ratings":51,"last_updated":52,"tested_up_to":53,"requires_at_least":54,"requires_php":55,"tags":56,"homepage":59,"download_link":60,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"toms-recaptcha","TomS reCAPTCHA","1.2.0","TomS Caprice","https:\u002F\u002Fprofiles.wordpress.org\u002Ftomsneddon\u002F","\u003Cp>Integrated Google ReCaptcha for WordPress. Protect the login, register, lostpassword and comment forms. Support Woocommerce, Ultimate Member and more popular forms.\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Frecaptcha\" rel=\"nofollow ugc\">\u003Cstrong>Google reCAPTCHA\u003C\u002Fstrong>\u003C\u002Fa> is a free service that protects your site from spam and abuse. It uses advanced risk analysis techniques to tell humans and bots apart.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cp>Go to \u003Ca href=\"https:\u002F\u002Fwww.google.com\u002Frecaptcha\u002Fadmin\u002Fcreate\" rel=\"nofollow ugc\">Google reCAPTCHA\u003C\u002Fa> to get the \u003Cstrong>Site key\u003C\u002Fstrong> and \u003Cstrong>Secret key\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Ch4>reCAPTCHA Type:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>reCAPTCHA \u003Cstrong>v3\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>reCAPTCHA \u003Cstrong>v2 Checkbox\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>reCAPTCHA \u003Cstrong>v2 Invisible\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Supported Form List\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WordPress default login form\u003C\u002Fli>\n\u003Cli>WordPress default register form\u003C\u002Fli>\n\u003Cli>WordPress default lostpassword form\u003C\u002Fli>\n\u003Cli>\n\u003Cp>WordPress default comment form\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoocommerce\u002F\" rel=\"ugc\">\u003Cstrong>Woocommerce\u003C\u002Fstrong>\u003C\u002Fa> login form\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoocommerce\u002F\" rel=\"ugc\">\u003Cstrong>Woocommerce\u003C\u002Fstrong>\u003C\u002Fa> register form\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoocommerce\u002F\" rel=\"ugc\">\u003Cstrong>Woocommerce\u003C\u002Fstrong>\u003C\u002Fa> lostpassword form\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoocommerce\u002F\" rel=\"ugc\">\u003Cstrong>Woocommerce\u003C\u002Fstrong>\u003C\u002Fa> checkout Billing form\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Add a shortcode \u003Cstrong>[toms_woo_register_form]\u003C\u002Fstrong> for \u003Cstrong>woocommerce register form\u003C\u002Fstrong> on any page you want.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fultimate-member\u002F\" rel=\"ugc\">\u003Cstrong>Ultimate Member\u003C\u002Fstrong>\u003C\u002Fa> login form\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fultimate-member\u002F\" rel=\"ugc\">\u003Cstrong>Ultimate Member\u003C\u002Fstrong>\u003C\u002Fa> register form\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fultimate-member\u002F\" rel=\"ugc\">\u003Cstrong>Ultimate Member\u003C\u002Fstrong>\u003C\u002Fa> lostpassword form\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcontact-form-block\u002F\" rel=\"ugc\">\u003Cstrong>Contact Form Block\u003C\u002Fstrong>\u003C\u002Fa> Contact Form Block\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>more support forms comming soon…\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Option settings\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Verify API : \u003Cstrong>Google.com\u003C\u002Fstrong>\u002F\u003Cstrong>Recaptcha.net\u003C\u002Fstrong> \u003Cstrong>—Notice:—\u003C\u002Fstrong> Some country can not use Google verify API, that means Google verify API will not work, even using vpn. If google.com not work try use Recaptcha.net\u003C\u002Fli>\n\u003Cli>reCAPTCHA v2 (Checkbox)  Theme: \u003Cstrong>Light\u003C\u002Fstrong>\u002F\u003Cstrong>Dark\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>reCAPTCHA v2 (Invisible) Badge: \u003Cstrong>Bottom Right\u003C\u002Fstrong>\u002F\u003Cstrong>Bottom Left\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Custom reCAPTCHA Language\u003C\u002Fh4>\n\u003Ch4>Translation ready\u003C\u002Fh4>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cp>Reliance upon any non-English translation is at your own risk; TomS reCAPTCHA can give no guarantees that translations from the original English are accurate.\u003C\u002Fp>\n\u003Cp>We recognise and thank those mentioned at https:\u002F\u002Ftoms-caprice.org\u002Ftranslations for code and\u002For libraries used and\u002For modified under the terms of their open source licences.\u003C\u002Fp>\n","Integrated Google ReCaptcha for WordPress.Protect the login, register, lostpassword and comment forms. Support Woocommerce, Ultimate Member and more p …",600,16788,1,"2023-03-29T08:59:00.000Z","6.2.9","5.8","7.0",[57,20,22,58,42],"block-spam-comments","recaptcha","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftoms-recaptcha","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftoms-recaptcha.1.2.0.zip",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":71,"num_ratings":72,"last_updated":73,"tested_up_to":74,"requires_at_least":75,"requires_php":76,"tags":77,"homepage":79,"download_link":80,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"advanced-invisible-anti-spam","Advanced Invisible Anti-Spam","1.4.3","Matt Keys","https:\u002F\u002Fprofiles.wordpress.org\u002Fmattkeys\u002F","\u003Cp>Anti-Spam solutions that require your users to fill out captcha’s are frustrating for actual humans, and not that great at stopping bots.\u003C\u002Fp>\n\u003Cp>This solution works automatically without any user configuration, and puts no additional burden on your users. After activation this plugin will go to work stopping: comment spam, spam bot registration, and bbPress spam.\u003C\u002Fp>\n\u003Cp>Key features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Fully compatible with wordpress caching plugins or even more advanced server level caching solutions (like WP Engine uses).\u003C\u002Fli>\n\u003Cli>Utilizes randomly generated and rotating token field name and token value, which stops more clever bots that might try caching the ‘solved’ field.\u003C\u002Fli>\n\u003Cli>Anti-spam field is randomly placed within the form on page load to make it difficult for spammers to target the field.\u003C\u002Fli>\n\u003Cli>Developer friendly with filters and actions\u003C\u002Fli>\n\u003Cli>Lightweight, clean, and efficient solution to comment, registration, and bbPress spam\u003C\u002Fli>\n\u003Cli>Uses native JavaScript to avoid jQuery dependancies\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Requires JavaScript be enabled in client browser (Users will see a warning if JavaScript is disabled)\u003C\u002Fp>\n","Block bots without annoying captchas. Cache friendly solution with rotating keys! Blocks comment, registration, and bbpress spam. Activate and done!",300,5858,88,7,"2016-04-27T00:59:00.000Z","4.5.33","3.5","",[19,20,21,78,23],"invisible","http:\u002F\u002Fmattkeys.me","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadvanced-invisible-anti-spam.zip",{"slug":82,"name":83,"version":84,"author":85,"author_profile":86,"description":87,"short_description":88,"active_installs":89,"downloaded":90,"rating":91,"num_ratings":92,"last_updated":93,"tested_up_to":94,"requires_at_least":95,"requires_php":76,"tags":96,"homepage":98,"download_link":99,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"botblocker","BotBlocker","1.0.4","Brandon Fenning","https:\u002F\u002Fprofiles.wordpress.org\u002Fbrandonfenning\u002F","\u003Cp>Since the vast majority of WordPress spam is automated in nature, the goal of BotBlocker is to block comment spam bots and not hinder users. This is accomplished through the use of honeypot technology, which tricks the spambot into identifying itself by performing actions that a human could not.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>BotBlocker’s features include:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>Works out of the box to block spam\u003C\u002Fli>\n\u003Cli>Automatically stops spam-bots from commenting\u003C\u002Fli>\n\u003Cli>Zero hindrance to users: no CAPTCHAS, math questions, passwords or extra input required\u003C\u002Fli>\n\u003Cli>Zero false positives and ignores registered users\u003C\u002Fli>\n\u003Cli>Can be configured to completely block spam-bots or flag comments as spam\u003C\u002Fli>\n\u003Cli>Spam detection messages can be easily adjusted\u003C\u002Fli>\n\u003Cli>No javascript or cookies required\u003C\u002Fli>\n\u003Cli>Hooks into \u003Ccode>wp-comments-post.php\u003C\u002Fcode> to prevent spam-bots from directly submitting spam comments\u003C\u002Fli>\n\u003Cli>Should work fine with most customized comment forms\u003C\u002Fli>\n\u003Cli>No API keys required\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>http:\u002F\u002Fwww.lform.com\u002Fbotblocker\u002F for more information.\u003C\u002Fp>\n\u003Cp>Plugin by \u003Ca href=\"http:\u002F\u002Fwww.lform.com\u002F\" rel=\"nofollow ugc\">LFORM, a web design company\u003C\u002Fa> in New Jersey.\u003C\u002Fp>\n","Kills spam-bots, leaves humans standing. No CAPTCHAS, no math questions, no passwords, just spam blocking that stops spam-bots dead in their tracks.",200,10982,32,10,"2012-04-25T19:28:00.000Z","3.3.2","3.0",[97,19,20,21,23],"akismet","http:\u002F\u002Fwww.lform.com\u002Fbotblocker\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbotblocker.1.0.4.zip",{"slug":101,"name":102,"version":103,"author":104,"author_profile":105,"description":106,"short_description":107,"active_installs":108,"downloaded":109,"rating":27,"num_ratings":27,"last_updated":110,"tested_up_to":111,"requires_at_least":112,"requires_php":76,"tags":113,"homepage":115,"download_link":116,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"antibot-captcha","AntiBot Captcha","2.0","saint739","https:\u002F\u002Fprofiles.wordpress.org\u002Fsaint739\u002F","\u003Cp>AntiBot Captcha – simple good-looking, but well-protected plugin against spam robots for your blog comments\u003C\u002Fp>\n","AntiBot Captcha - simple good-looking, but well-protected plugin against spam robots for your blog comments",50,8530,"2010-07-12T02:05:00.000Z","3.0.5","2.8.4",[19,20,21,114,23],"robot","http:\u002F\u002Fisaev.asia\u002Fen\u002Fmy-wordpress-plugins\u002Fantibot-captchca\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fantibot-captcha.zip",{"slug":118,"name":119,"version":120,"author":121,"author_profile":122,"description":123,"short_description":124,"active_installs":92,"downloaded":125,"rating":11,"num_ratings":51,"last_updated":126,"tested_up_to":127,"requires_at_least":112,"requires_php":76,"tags":128,"homepage":129,"download_link":130,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"bt-captcha","BT Captcha","1.0","Payadl","https:\u002F\u002Fprofiles.wordpress.org\u002Fdlweb\u002F","\u003Cp>BT Captcha – simple, Bilingual, Flexible, Protect Your WP Blog Against Comment Spams\u003Cbr \u002F>\nSpecial thanks to  the developer of \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fanti-captcha\u002F\" rel=\"ugc\">Anti Captcha\u003C\u002Fa> Plugin\u003C\u002Fp>\n","BT Captcha - simple, Bilingual, Flexible, Protect Your WP Blog Against Comment Spams",8173,"2011-09-21T06:04:00.000Z","3.2.1",[19,20,21,114,23],"http:\u002F\u002Fwww.payadl.ir\u002Fservices\u002Fplugins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbt-captcha.1.0.zip",{"attackSurface":132,"codeSignals":294,"taintFlows":309,"riskAssessment":344,"analyzedAt":353},{"hooks":133,"ajaxHandlers":290,"restRoutes":291,"shortcodes":292,"cronEvents":293,"entryPointCount":27,"unprotectedCount":27},[134,139,143,146,150,152,156,161,166,169,174,177,180,182,185,190,193,196,200,204,207,210,214,217,220,224,227,231,235,239,243,246,250,253,256,258,262,266,270,272,276,279,283,287],{"type":135,"name":136,"callback":136,"file":137,"line":138},"action","admin_init","admin\\settings.php",19,{"type":135,"name":136,"callback":140,"priority":141,"file":137,"line":142},"settings_save",99,20,{"type":135,"name":144,"callback":144,"file":137,"line":145},"admin_enqueue_scripts",22,{"type":135,"name":147,"callback":148,"file":137,"line":149},"network_admin_menu","menu_page",30,{"type":135,"name":151,"callback":148,"file":137,"line":91},"admin_menu",{"type":135,"name":153,"callback":154,"file":137,"line":155},"wp_loaded","actions_filters",352,{"type":135,"name":157,"callback":158,"file":159,"line":160},"after_setup_theme","spwc_plugin_update","functions.php",8,{"type":135,"name":162,"callback":163,"file":164,"line":165},"wp_enqueue_scripts","register_script","spwc-hooks.php",23,{"type":135,"name":167,"callback":163,"file":164,"line":168},"login_enqueue_scripts",24,{"type":170,"name":171,"callback":172,"file":164,"line":173},"filter","spwc_verify","verify_callback",26,{"type":135,"name":175,"callback":176,"file":164,"line":149},"login_form","form_field",{"type":170,"name":178,"callback":176,"file":164,"line":179},"login_form_middle",31,{"type":135,"name":181,"callback":176,"file":164,"line":91},"woocommerce_login_form",{"type":135,"name":183,"callback":176,"file":164,"line":184},"um_after_login_fields",33,{"type":170,"name":186,"callback":187,"priority":188,"file":164,"line":189},"authenticate","login_verify",999,34,{"type":135,"name":191,"callback":176,"file":164,"line":192},"register_form",39,{"type":135,"name":194,"callback":176,"file":164,"line":195},"woocommerce_register_form",40,{"type":170,"name":197,"callback":198,"priority":92,"file":164,"line":199},"registration_errors","registration_verify",41,{"type":170,"name":201,"callback":202,"priority":92,"file":164,"line":203},"woocommerce_registration_errors","wc_registration_verify",42,{"type":135,"name":205,"callback":176,"file":164,"line":206},"lostpassword_form",47,{"type":135,"name":208,"callback":176,"file":164,"line":209},"woocommerce_lostpassword_form",48,{"type":135,"name":211,"callback":212,"file":164,"line":213},"lostpassword_post","lostpassword_verify",49,{"type":135,"name":215,"callback":176,"file":164,"line":216},"resetpass_form",54,{"type":135,"name":218,"callback":176,"file":164,"line":219},"woocommerce_resetpassword_form",55,{"type":170,"name":221,"callback":222,"priority":92,"file":164,"line":223},"validate_password_reset","reset_password_verify",56,{"type":135,"name":225,"callback":176,"file":164,"line":226},"comment_form",62,{"type":170,"name":228,"callback":229,"file":164,"line":230},"pre_comment_approved","comment_verify_490",65,{"type":170,"name":232,"callback":233,"file":164,"line":234},"preprocess_comment","comment_verify",67,{"type":135,"name":236,"callback":237,"file":164,"line":238},"bp_before_registration_submit_buttons","bp_form_field",73,{"type":135,"name":240,"callback":241,"file":164,"line":242},"bp_signup_validate","bp_registration_verify",74,{"type":135,"name":244,"callback":176,"file":164,"line":245},"woocommerce_checkout_after_order_review",79,{"type":135,"name":247,"callback":248,"priority":92,"file":164,"line":249},"woocommerce_after_checkout_validation","wc_checkout_verify",80,{"type":135,"name":251,"callback":252,"file":164,"line":26},"signup_extra_fields","ms_form_field",{"type":170,"name":254,"callback":255,"file":164,"line":36},"wpmu_validate_user_signup","ms_user_verify",{"type":135,"name":257,"callback":252,"file":164,"line":71},"signup_blogform",{"type":170,"name":259,"callback":260,"file":164,"line":261},"wpmu_validate_blog_signup","ms_blog_verify",89,{"type":170,"name":263,"callback":264,"file":164,"line":265},"wpcf7_form_elements","wpcf7_form_field",94,{"type":170,"name":267,"callback":268,"file":164,"line":269},"wpcf7_validate","wpcf7_verify",95,{"type":135,"name":271,"callback":176,"file":164,"line":11},"bbp_theme_before_topic_form_submit_wrapper",{"type":135,"name":273,"callback":274,"file":164,"line":275},"bbp_new_topic_pre_extras","bbp_new_verify",101,{"type":135,"name":277,"callback":176,"file":164,"line":278},"bbp_theme_before_reply_form_submit_wrapper",106,{"type":135,"name":280,"callback":281,"priority":92,"file":164,"line":282},"bbp_new_reply_pre_extras","bbp_reply_verify",107,{"type":135,"name":284,"callback":285,"priority":142,"file":164,"line":286},"init","set_cookie",110,{"type":135,"name":284,"callback":288,"file":164,"line":289},"hooks",392,[],[],[],[],{"dangerousFunctions":295,"sqlUsage":296,"outputEscaping":298,"fileOperations":27,"externalRequests":51,"nonceChecks":51,"capabilityChecks":307,"bundledLibraries":308},[],{"prepared":27,"raw":27,"locations":297},[],{"escaped":189,"rawEcho":13,"locations":299},[300,303,305],{"file":137,"line":301,"context":302},247,"raw output",{"file":137,"line":304,"context":302},314,{"file":164,"line":306,"context":302},178,2,[],[310,334],{"entryPoint":311,"graph":312,"unsanitizedCount":51,"severity":333},"settings_save (admin\\settings.php:278)",{"nodes":313,"edges":329},[314,319,323],{"id":315,"type":316,"label":317,"file":137,"line":318},"n0","source","$_POST",286,{"id":320,"type":321,"label":322,"file":137,"line":318},"n1","transform","→ spwc_update_option()",{"id":324,"type":325,"label":326,"file":159,"line":327,"wp_function":328},"n2","sink","update_option() [Settings Manipulation]",60,"update_option",[330,332],{"from":315,"to":320,"sanitized":331},false,{"from":320,"to":324,"sanitized":331},"low",{"entryPoint":335,"graph":336,"unsanitizedCount":51,"severity":333},"\u003Csettings> (admin\\settings.php:0)",{"nodes":337,"edges":341},[338,339,340],{"id":315,"type":316,"label":317,"file":137,"line":318},{"id":320,"type":321,"label":322,"file":137,"line":318},{"id":324,"type":325,"label":326,"file":159,"line":327,"wp_function":328},[342,343],{"from":315,"to":320,"sanitized":331},{"from":320,"to":324,"sanitized":331},{"summary":345,"deductions":346},"The \"spam-protection-without-captcha\" plugin v1.2 exhibits a generally strong security posture based on the provided static analysis. The complete absence of AJAX handlers, REST API routes, shortcodes, and cron events with unprotected entry points is a significant positive.  Furthermore, the code demonstrates good practices with 100% of SQL queries utilizing prepared statements and a high percentage of output being properly escaped. The presence of nonce and capability checks also indicates an awareness of security principles. However, the analysis does highlight one external HTTP request, which, while not inherently risky, warrants scrutiny to ensure the target is trusted and the request is handled securely. The taint analysis reveals two flows with unsanitized paths, which, despite not reaching a critical or high severity in this report, represent potential avenues for injection vulnerabilities if not handled with extreme care in the application logic.",[347,350],{"reason":348,"points":349},"Unsanitized paths in taint analysis",15,{"reason":351,"points":352},"External HTTP request detected",5,"2026-03-16T20:38:32.713Z",{"wat":355,"direct":363},{"assetPaths":356,"generatorPatterns":358,"scriptPaths":359,"versionParams":360},[357],"\u002Fwp-content\u002Fplugins\u002Fspam-protection-without-captcha\u002Fassets\u002Fjs\u002Fadmin.js",[],[357],[361,362],"spam-protection-without-captcha\u002Fassets\u002Fjs\u002Fadmin.js?ver=","spam-protection-without-captcha\u002Fstyle.css?ver=",{"cssClasses":364,"htmlComments":366,"htmlAttributes":367,"restEndpoints":368,"jsGlobals":369,"shortcodeOutput":370},[365],"spwc-show-field-for-stopforumspam",[],[],[],[],[],{"error":372,"url":373,"statusCode":374,"statusMessage":375,"message":375},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fspam-protection-without-captcha\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":307,"versions":377},[378,383],{"version":6,"download_url":25,"svn_tag_url":379,"released_at":28,"has_diff":331,"diff_files_changed":380,"diff_lines":28,"trac_diff_url":381,"vulnerabilities":382,"is_current":372},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fspam-protection-without-captcha\u002Ftags\u002F1.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fspam-protection-without-captcha%2Ftags%2F1.1&new_path=%2Fspam-protection-without-captcha%2Ftags%2F1.2",[],{"version":384,"download_url":385,"svn_tag_url":386,"released_at":28,"has_diff":331,"diff_files_changed":387,"diff_lines":28,"trac_diff_url":28,"vulnerabilities":388,"is_current":331},"1.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fspam-protection-without-captcha.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fspam-protection-without-captcha\u002Ftags\u002F1.1\u002F",[],[]]