[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLns7ghufPPU0wny_PtwdCpc1mms_XhUNyp1ckl472DM":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":36,"analysis":129,"fingerprints":168},"speedvitals-rum","SpeedVitals RUM","1.0.2","SpeedVitals","https:\u002F\u002Fprofiles.wordpress.org\u002Fspeedvitals\u002F","\u003Cp>SpeedVitals RUM WordPress plugin provides seamless integration of SpeedVitals Real-User Monitoring into your WordPress site. Monitor and analyze your website’s performance metrics in real-time with SpeedVitals RUM.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy integration with SpeedVitals RUM\u003C\u002Fli>\n\u003Cli>Configurable script placement (header\u002Ffooter)\u003C\u002Fli>\n\u003Cli>Flexible script loading options (defer\u002Fasync)\u003C\u002Fli>\n\u003Cli>Simple setup with minimal configuration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>Site ID (Required)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Enter your SpeedVitals RUM Site ID\u003C\u002Fli>\n\u003Cli>This is required for the plugin to function\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Script Position (Optional)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Header (default): Places the script in the  section\u003C\u002Fli>\n\u003Cli>Footer: Places the script at the end of the  section\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Script Loading (Optional)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Defer (default): Loads the script after HTML parsing\u003C\u002Fli>\n\u003Cli>Async: Loads the script asynchronously with HTML parsing\u003C\u002Fli>\n\u003Cli>None: Loads the script normally without any loading attribute\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>Once configured with a valid Site ID, the plugin will automatically insert the SpeedVitals RUM tracking script into your website. The script will collect performance metrics and send them to your SpeedVitals dashboard.\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin sends data to the SpeedVitals API to monitor website performance metrics via Real User Monitoring (RUM). The library we are using to send the data is based built upon the Google Chrome’s Web Vitals Library (https:\u002F\u002Fgithub.com\u002FGoogleChrome\u002Fweb-vitals).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Data Sent: Performance metrics like page load time, resource timings, user-agent info, and other web vitals are sent to SpeedVitals servers.\u003C\u002Fli>\n\u003Cli>When: Data is sent automatically whenever users visit any page of your website\u003C\u002Fli>\n\u003Cli>Data storage: Data is stored in the EU servers for GDPR Compliance\u003C\u002Fli>\n\u003Cli>Service Provider: SpeedVitals (SpeedVitals Private Limited)\u003C\u002Fli>\n\u003Cli>Terms of Service: https:\u002F\u002Fapp.speedvitals.com\u002Fterms-of-use\u003C\u002Fli>\n\u003Cli>Privacy Policy: https:\u002F\u002Fspeedvitals.com\u002Fprivacy-policy\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support and documentation, please visit https:\u002F\u002Fspeedvitals.com\u002Fcontact-us\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPL v2 or later.\u003C\u002Fp>\n\u003Cp>For the full license text, please see the GNU General Public License v2.0 at https:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-2.0.html.\u003C\u002Fp>\n","Integrates SpeedVitals RUM Script in your WordPress Website",40,1002,100,1,"2025-06-25T06:15:00.000Z","6.8.5","5.0","7.0",[20,21,22,23,24],"analytics","monitoring","performance","real-user-monitoring","rum","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fspeedvitals-rum.1.0.2.zip",0,null,"2026-03-15T15:16:48.613Z",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":13,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"speedvitals",30,94,"2026-04-03T23:32:49.455Z",[37,60,81,97,111],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":13,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":56,"download_link":57,"security_score":58,"vuln_count":14,"unpatched_count":27,"last_vuln_date":59,"fetched_at":29},"vibes","Vibes","2.3.0","Pierre Lannoy","https:\u002F\u002Fprofiles.wordpress.org\u002Fpierrelannoy\u002F","\u003Cp>\u003Cstrong>Truthful user experience and browsing performances monitoring.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Vibes\u003C\u002Fstrong> is a robust user experience and browsing performances monitoring solution that analyzes perceived performances from users’ viewpoint.\u003C\u002Fp>\n\u003Cp>It is fully autonomous – does not rely on external services and does not require any API keys, works on any type of hosting and in any type of environment – including staging, intranets or password protected sites.\u003C\u002Fp>\n\u003Cp>By continuously monitoring user experience, \u003Cstrong>Vibes\u003C\u002Fstrong> can report:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>navigation performance KPIs per pages – like latency, redirections, browser caching hit rates, etc.;\u003C\u002Fli>\n\u003Cli>network timelines as if you were in the dev tools of your users’ browsers;\u003C\u002Fli>\n\u003Cli>resources details – like initiators, protocols, mime types, average sizes, etc.;\u003C\u002Fli>\n\u003Cli>Web Vitals: LCP, FID, CLS, FCP and TTFB.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>It can segment all this data per:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>user type (anonymous vs. authenticated);\u003C\u002Fli>\n\u003Cli>channel (frontend vs. backend);\u003C\u002Fli>\n\u003Cli>country (requires the free \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fip-locator\u002F\" rel=\"ugc\">IP Locator\u003C\u002Fa> plugin);\u003C\u002Fli>\n\u003Cli>device classes and types (requires the free \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdevice-detector\u002F\" rel=\"ugc\">Device Detector\u003C\u002Fa> plugin).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Vibes\u003C\u002Fstrong> supports multisite report delegation (see FAQ).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Vibes\u003C\u002Fstrong> supports WP-CLI commands to:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>display (past or current) performances signals in console – see \u003Ccode>wp help vibes tail\u003C\u002Fcode> for details;\u003C\u002Fli>\n\u003Cli>toggle on\u002Foff main settings – see \u003Ccode>wp help vibes settings\u003C\u002Fcode> for details.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For a full help on WP-CLI commands in Vibes, please \u003Ca href=\"https:\u002F\u002Fperfops.one\u002Fvibes-wpcli\" rel=\"nofollow ugc\">read this guide\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Vibes\u003C\u002Fstrong> is part of \u003Ca href=\"https:\u002F\u002Fperfops.one\u002F\" rel=\"nofollow ugc\">PerfOps One\u003C\u002Fa>, a suite of free and open source WordPress plugins dedicated to observability and operations performance.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>Vibes\u003C\u002Fstrong> is a free and open source plugin for WordPress. It integrates many other free and open source works (as-is or modified). Please, see ‘about’ tab in the plugin settings to see the details.\u003C\u002Fp>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>This plugin is free and provided without warranty of any kind. Use it at your own risk, I’m not responsible for any improper use of this plugin, nor for any damage it might cause to your site. Always backup all your data before installing a new plugin.\u003C\u002Fp>\n\u003Cp>Anyway, I’ll be glad to help you if you encounter issues when using this plugin. Just use the support section of this plugin page.\u003C\u002Fp>\n\u003Ch4>Donation\u003C\u002Fh4>\n\u003Cp>If you like this plugin or find it useful and want to thank me for the work done, please consider making a donation to \u003Ca href=\"https:\u002F\u002Fwww.laquadrature.net\u002Fen\" rel=\"nofollow ugc\">La Quadrature Du Net\u003C\u002Fa> or the \u003Ca href=\"https:\u002F\u002Fwww.eff.org\u002F\" rel=\"nofollow ugc\">Electronic Frontier Foundation\u003C\u002Fa> which are advocacy groups defending the rights and freedoms of citizens on the Internet. By supporting them, you help the daily actions they perform to defend our fundamental freedoms!\u003C\u002Fp>\n","Truthful user experience and browsing performances monitoring.",400,16959,2,"2025-11-14T06:40:00.000Z","6.9.4","6.2","8.1",[23,24,53,54,55],"ux","web-performance","web-vitals","https:\u002F\u002Fperfops.one\u002Fvibes","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvibes.2.3.0.zip",98,"2025-08-25 14:10:31",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":13,"downloaded":68,"rating":69,"num_ratings":14,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":73,"tags":74,"homepage":78,"download_link":79,"security_score":80,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"site24x7-rum","Site24x7 Real User Monitoring","1.3","Site24x7","https:\u002F\u002Fprofiles.wordpress.org\u002Fsite24x7integrations\u002F","\u003Cp>Real User Monitoring by Site24x7 gives accurate insight into real users application experience and helps visualise web app interaction patterns. Real User Monitoring provides deep insight into key performance metrics right from the initiation of the URL until the request is served back to the browser.\u003C\u002Fp>\n\u003Cp>The RUM plugin helps you add your Site24x7 RUM code snippet to the Head tag of your WordPress blog. Once added, Site24x7 immediately starts collecting data from your WordPress blog’s visitors. You can view all that collected data in \u003Ca href=\"https:\u002F\u002Fwww.site24x7.com\u002Fapp\u002Fapm#\u002Fapm\u002Frum\u002Flist\u002F\" rel=\"nofollow ugc\">Site24x7 console\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Site24x7 Real User Monitoring provides better understanding of performance issues by providing actionable data like showing real user performance by region, browser type, device used to access the application and more, these metric assist in pinpointing issues faster to make applications more fluid and user friendly. The back-end response time provides metrics from a server perspective calculating the time taken by the server to serve the request and statistics such as the page rendering time, document processing time and document downloading time, all of which help developers tailor applications to be more fluid to end users.please refer the help document for more information \u003Ca href=\"https:\u002F\u002Fwww.site24x7.com\u002Fhelp\u002Fapm\u002Frum.html\" rel=\"nofollow ugc\">site24x7-rum\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>P.S: You will need a Site24x7 account for this plugin. If you don’t have one, grab one at \u003Ca href=\"https:\u002F\u002Fwww.site24x7.com\u002Fsignup.html?pack=4&l=en\" rel=\"nofollow ugc\">site24x7.com\u003C\u002Fa> – its super-easy!\u003C\u002Fp>\n","Real User Monitoring (RUM) by Site24x7 provides deep and accurate insight into real users’experience on your WordPress setup.",3664,80,"2025-01-22T12:28:00.000Z","6.7.5","2.8","5.2.4",[75,23,24,76,77],"application-performance","user-experience-monitoring","website-monitoring","https:\u002F\u002Fwww.site24x7.com\u002Freal-user-monitoring.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsite24x7-rum.1.3.zip",92,{"slug":82,"name":83,"version":84,"author":85,"author_profile":86,"description":87,"short_description":88,"active_installs":27,"downloaded":89,"rating":13,"num_ratings":14,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":25,"tags":93,"homepage":94,"download_link":95,"security_score":96,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"rapidspike-real-user-monitoring","Real User Monitoring by RapidSpike","1.0.0","rapidspike","https:\u002F\u002Fprofiles.wordpress.org\u002Frapidspike\u002F","\u003Cp>Ever wondered how your site performs from a user’s perspective? Well look no further – this simple RapidSpike plugin helps you record live performance data from real users. It can even be used to track dynamic pages like an “Order Confirmation” page. Just add this snippet to your individual pages or via your template header and RapidSpike’s lightweight script will begin receiving performance data as soon as visitors arrive on your website!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Effortless Set Up!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Simply add your tracking code and sit back as live performance statistics in real time will be collected through your RapidSpike account.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Automatic Alerts\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can set up automatic alerts to flag when things slow down or when key pages are not being served by your WordPress site. This is great for monitoring dynamic confirmation pages, landing pages and other critical parts of your site.\u003C\u002Fp>\n\u003Cp>Please note that you need a RapidSpike account for this plugin. If you don’t have one, grab one at \u003Ca href=\"https:\u002F\u002Fwww.rapidspike.com\u002F\" rel=\"nofollow ugc\">RapidSpike.com\u003C\u002Fa> – it’s super-easy!\u003C\u002Fp>\n","Live performance data via Real User Monitoring. Track real user experience - traffic volume and page load speed - by country, browser and device.",1300,"2017-05-27T09:36:00.000Z","4.7.32","3.0",[85,23,24,54],"https:\u002F\u002Fwww.rapidspike.com\u002Freal-user-monitoring\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frapidspike-real-user-monitoring.1.0.0.zip",85,{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":27,"downloaded":105,"rating":27,"num_ratings":27,"last_updated":106,"tested_up_to":49,"requires_at_least":107,"requires_php":108,"tags":109,"homepage":25,"download_link":110,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"watchlog-rum","Watchlog RUM","0.2.0","watchlog","https:\u002F\u002Fprofiles.wordpress.org\u002Fwatchlog\u002F","\u003Cp>Watchlog RUM delivers Real User Monitoring for WordPress sites by mirroring the Watchlog Vue\u002FReact SDK event format. It tracks session lifecycle events, performance metrics, network activity, resource usage, and optional Web Vitals so you can understand how visitors experience your site in production.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Automatic \u003Ccode>session_start\u003C\u002Fcode>, \u003Ccode>page_view\u003C\u002Fcode>, and \u003Ccode>session_end\u003C\u002Fcode> events.\u003C\u002Fli>\n\u003Cli>Navigation\u002Fpaint timings plus optional Web Vitals (CLS, LCP, INP, TTFB, FID).\u003C\u002Fli>\n\u003Cli>Instrumentation for \u003Ccode>fetch\u003C\u002Fcode>, \u003Ccode>XMLHttpRequest\u003C\u002Fcode>, long tasks, resources, and user interactions.\u003C\u002Fli>\n\u003Cli>Breadcrumb and error capture hooks to enrich every event.\u003C\u002Fli>\n\u003Cli>WordPress-aware route normalization and session persistence to align data with SPA SDKs.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Third-Party Libraries\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>web-vitals (GoogleChrome\u002Fweb-vitals) — Source: https:\u002F\u002Fgithub.com\u002FGoogleChrome\u002Fweb-vitals — License: Apache-2.0 — Bundled file: assets\u002Fjs\u002Fweb-vitals.iife.js\u003C\u002Fli>\n\u003C\u002Ful>\n","Real User Monitoring (RUM) for WordPress powered by Watchlog.",96,"2025-12-27T18:41:00.000Z","5.8","7.4",[20,21,22,24],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwatchlog-rum.0.2.0.zip",{"slug":112,"name":113,"version":114,"author":115,"author_profile":116,"description":117,"short_description":118,"active_installs":119,"downloaded":120,"rating":27,"num_ratings":27,"last_updated":121,"tested_up_to":122,"requires_at_least":123,"requires_php":18,"tags":124,"homepage":127,"download_link":128,"security_score":96,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"speedmetriks","SpeedMetriks","1.4.4","bookwyrm","https:\u002F\u002Fprofiles.wordpress.org\u002Fbookwyrm\u002F","\u003Cp>Each visitor to your website will have their own unique device and network connection and will experience the site differently. Some will be fast and others will be slow, but it’s hard to know what their experience is like. Modern browsers record detailed timing information about a visitor’s experience and SpeedMetriks lets you collect that data and save it in your WordPress database so you can get an aggregate view of your visitors’ experiences.\u003C\u002Fp>\n\u003Cp>The data is stored anonymously and there are no third party servers or services involved.\u003C\u002Fp>\n\u003Cp>This initial release will just show \u003Ccode>onDomReady\u003C\u002Fcode> timing data but additional metrics will be added soon.\u003C\u002Fp>\n","A self-contained service to see how visitors experience your site.",10,1279,"2019-04-25T22:07:00.000Z","5.1.22","4.7",[125,22,23,126],"anonymous-data","visitor-experience","https:\u002F\u002Fspeedmetriks.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fspeedmetriks.1.4.4.zip",{"attackSurface":130,"codeSignals":155,"taintFlows":163,"riskAssessment":164,"analyzedAt":167},{"hooks":131,"ajaxHandlers":151,"restRoutes":152,"shortcodes":153,"cronEvents":154,"entryPointCount":27,"unprotectedCount":27},[132,138,142,147],{"type":133,"name":134,"callback":135,"file":136,"line":137},"action","admin_menu","speedvitals_rum_add_settings_page","speedvitals-rum.php",27,{"type":133,"name":139,"callback":140,"file":136,"line":141},"admin_init","speedvitals_rum_register_settings",49,{"type":143,"name":144,"callback":145,"priority":119,"file":136,"line":146},"filter","script_loader_tag","speedvitals_rum_add_attributes",148,{"type":133,"name":148,"callback":149,"file":136,"line":150},"wp_enqueue_scripts","speedvitals_rum_enqueue_script",151,[],[],[],[],{"dangerousFunctions":156,"sqlUsage":157,"outputEscaping":159,"fileOperations":27,"externalRequests":27,"nonceChecks":27,"capabilityChecks":14,"bundledLibraries":162},[],{"prepared":27,"raw":27,"locations":158},[],{"escaped":160,"rawEcho":27,"locations":161},7,[],[],[],{"summary":165,"deductions":166},"The \"speedvitals-rum\" plugin v1.0.2 exhibits a strong security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events with exposed entry points suggests a minimal attack surface. Furthermore, the code's adherence to secure coding practices is evident through the complete absence of dangerous functions, the exclusive use of prepared statements for all SQL queries, and the proper escaping of all output. The plugin also demonstrates good security hygiene by not performing file operations or making external HTTP requests, further limiting potential vulnerabilities. The presence of a capability check, even with a zero count for unprotected entry points, indicates a consideration for access control.\n\nThe taint analysis shows zero flows with unsanitized paths, indicating no identified risks related to untrusted data manipulation within the analyzed code. The vulnerability history is also exceptionally clean, with no known CVEs, unpatched vulnerabilities, or past security issues recorded. This lack of historical vulnerabilities, coupled with the positive static analysis findings, suggests a well-developed and securely coded plugin. However, it's important to note that the total entry points are zero, which might imply a very limited functional scope for the plugin. While this is excellent for security, it could also mean the plugin doesn't perform many user-facing actions that would require robust authorization checks.  Overall, this plugin appears to be very secure in its current version, with no immediate exploitable vulnerabilities detected.",[],"2026-03-16T22:10:15.411Z",{"wat":169,"direct":176},{"assetPaths":170,"generatorPatterns":172,"scriptPaths":173,"versionParams":175},[171],"\u002Fwp-content\u002Fplugins\u002Fspeedvitals-rum\u002Fspeedvitals-rum.php",[],[174],"https:\u002F\u002Fassets.speedvitals.com\u002Fvitals.min.js",[],{"cssClasses":177,"htmlComments":178,"htmlAttributes":179,"restEndpoints":181,"jsGlobals":182,"shortcodeOutput":183},[],[],[180],"data-rum-site-id",[],[],[]]