[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5-o5a77XpfF3oy1Qb5QpQ2Ns5SaphU3UDTLjT3sajS4":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":34,"analysis":133,"fingerprints":190},"temp-mail-detector-block-temporary-emails","Temp Mail Detector – Block Temporary Emails","1.0","tempmaildetector","https:\u002F\u002Fprofiles.wordpress.org\u002Ftempmaildetector\u002F","\u003Cp>The Temp Mail Detector WordPress Plugin is a privacy first temporary email prevention plugin which helps stop disposable emails from being able to sign up or comment on your website.\u003C\u002Fp>\n\u003Cp>By combining the ability to use custom block lists alongside the optional Temp Mail Detector API you can choose which hosts are allowed or not allowed to register or comment on your website.\u003C\u002Fp>\n\u003Ch3>What’s available\u003C\u002Fh3>\n\u003Cp>This plugin offers multiple options:\u003Cbr \u002F>\n* \u003Cstrong>Blocklist\u003C\u002Fstrong> – You can enter a list of domains you would like to block at signup.\u003Cbr \u002F>\n* \u003Cstrong>Protect comments\u003C\u002Fstrong> – Choose if you would like the plugin to protect comments from disposable emails.\u003Cbr \u002F>\n* \u003Cstrong>Plus emails\u003C\u002Fstrong> – Block emails which have a \u003Ccode>+\u003C\u002Fcode> in the user part.\u003Cbr \u002F>\n* \u003Cstrong>External check\u003C\u002Fstrong> – This makes use of the dynamic Temp Mail Detector API for real-time checks.\u003C\u002Fp>\n\u003Cp>To check against the Temp Mail Detector API, you will need to \u003Ca href=\"https:\u002F\u002Ftempmaildetector.com\" rel=\"nofollow ugc\">register for a free API key\u003C\u002Fa>.\u003Cbr \u002F>\nEach API key gets 200 lookups for free each month, which reset on the first of the month.\u003C\u002Fp>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>If external checks are enabled via the use of an API key, when checking if an email is temporary or not through the Temp Mail Detector API, only the website address of the email is sent to be analysed. Your users emails addresses are never transmitted or shared with anyone.\u003C\u002Fp>\n\u003Cp>If an email is \u003Ccode>user@website.com\u003C\u002Fcode>, this plugin will only send \u003Ccode>website.com\u003C\u002Fcode> to be analysed. By never sharing your users emails, you can both check if an email is disposable while also maintaining your users privacy.\u003C\u002Fp>\n\u003Ch3>Terms of Service \u002F Privacy Policy\u003C\u002Fh3>\n\u003Cp>Please make yourselves familiar with our terms of service and privacy policy, which can be found here:\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ftempmaildetector.com\u002Fprivacy-policy\" rel=\"nofollow ugc\">Terms of Service\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ftempmaildetector.com\u002Fprivacy-policy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>\u003C\u002Fp>\n","Detect and block temporary emails from registering on your website using the Temp Mail Detector plugin.",0,281,"2025-07-05T08:06:00.000Z","6.8.5","2.9","7.0",[18,19,20,21,22],"disposable-email","fake-email","spam","temporary-email","validate-email","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftemp-mail-detector-block-temporary-emails.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},1,30,94,"2026-04-05T18:00:08.186Z",[35,52,74,91,111],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":45,"num_ratings":46,"last_updated":47,"tested_up_to":14,"requires_at_least":15,"requires_php":23,"tags":48,"homepage":50,"download_link":51,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"block-temporary-email","Block Temporary Email","1.7.5","IsTempMail","https:\u002F\u002Fprofiles.wordpress.org\u002Fistempmail\u002F","\u003Cp>This plugin will verify every email address submitted by users.\u003Cbr \u002F>\nIt’ll automatically detect and block disposable, temporary email addresses.\u003Cbr \u002F>\nIt’ll give a nice warning message when users are signing up, logging in,\u003Cbr \u002F>\nor changing email to a temporary email.\u003C\u002Fp>\n\u003Cp>The plugin checks the domain name using a service named\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.istempmail.com\u002F?ref=wp\" rel=\"nofollow ugc\">IsTempMail\u003C\u002Fa>.\u003Cbr \u002F>\nIf a domain name is blocked, it will be stored into a local blacklist.\u003Cbr \u002F>\nYou can also manage your own local whitelist and blacklist to allow or\u003Cbr \u002F>\ndisallow certain domains.\u003C\u002Fp>\n\u003Cp>The plugin integrates with the WordPress built-in function \u003Ccode>is_email()\u003C\u002Fcode>.\u003Cbr \u002F>\nIt works seamlessly with other plugins including WooCommerce,\u003Cbr \u002F>\nContact Form 7, Gravity Form, Jetpack\u002FGrunion contact forms, Kadence Blocks Forms as well as\u003Cbr \u002F>\nother formbuilders and ecommerce plugins and WordPress’ own registration form.\u003C\u002Fp>\n","This plugin stops users from giving you disposable or fake email addresses when signing up. This helps reduce spam and fraud.",500,8483,90,8,"2025-08-12T12:41:00.000Z",[49,18,19,21,22],"check-email","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fblock-temporary-email\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fblock-temporary-email.1.7.5.zip",{"slug":53,"name":54,"version":55,"author":56,"author_profile":57,"description":58,"short_description":59,"active_installs":60,"downloaded":61,"rating":11,"num_ratings":11,"last_updated":62,"tested_up_to":63,"requires_at_least":64,"requires_php":65,"tags":66,"homepage":71,"download_link":72,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":73},"email-blocklist","Email Blocklist","1.2.7","Michał Kowalik","https:\u002F\u002Fprofiles.wordpress.org\u002Fklapaucius4\u002F","\u003Cp>Email Blocklist helps you keep your WordPress site safe and clean by preventing registrations and comments from users with disposable, temporary, or otherwise unwanted email domains.\u003C\u002Fp>\n\u003Cp>Spam registrations and fake accounts often rely on throwaway email addresses. With Email Blocklist, you can easily stop them at the source. The plugin lets you build and manage your own custom blocklist of domains to prevent low-quality signups, spam comments, and fake interactions.\u003C\u002Fp>\n\u003Cp>Unlike many similar plugins, Email Blocklist is completely free and does not rely on any paid APIs or third-party services. Everything runs directly on your WordPress installation. No hidden costs, no subscriptions – just a lightweight solution that does one job and does it well.\u003C\u002Fp>\n\u003Cp>This plugin also lets you scan existing users and flag accounts using suspicious or blocked email domains as potential spam, highlighting them in the user list so you can easily filter or remove them if needed.\u003C\u002Fp>\n\u003Ch3>External Service Usage\u003C\u002Fh3>\n\u003Cp>This plugin uses a public GitHub repository to fetch a global blocklist.\u003Cbr \u002F>\nOne JSON file contains the list of blocked domains (https:\u002F\u002Fraw.githubusercontent.com\u002Fklapaucius4\u002Femail-blocklist\u002Frefs\u002Fheads\u002Fmaster\u002Fblocklist.json),\u003Cbr \u002F>\nand another holds basic metadata (https:\u002F\u002Fraw.githubusercontent.com\u002Fklapaucius4\u002Femail-blocklist\u002Frefs\u002Fheads\u002Fmaster\u002Fblocklist-meta.json).\u003C\u002Fp>\n\u003Cp>The blocklist is downloaded during plugin activation. A daily WP-Cron task checks for updates,\u003Cbr \u002F>\nand the list is refreshed automatically if a newer version is available.\u003Cbr \u002F>\nYou can also trigger a manual update from the plugin settings page.\u003C\u002Fp>\n\u003Cp>Note: This plugin sends requests to GitHub to fetch the blocklist files.\u003Cbr \u002F>\nBy using this plugin, data is transmitted to GitHub under GitHub’s Terms of Service (https:\u002F\u002Fdocs.github.com\u002Fen\u002Fsite-policy\u002Fgithub-terms\u002Fgithub-terms-of-service)\u003Cbr \u002F>\nand GitHub Privacy Statement (https:\u002F\u002Fdocs.github.com\u002Fen\u002Fsite-policy\u002Fprivacy-policies\u002Fgithub-privacy-statement).\u003C\u002Fp>\n","Keep your WordPress site clean by blocking signups and comments from temporary or disposable email domains. 100% free, no paid APIs.",10,458,"2026-03-02T21:36:00.000Z","6.9.4","5.2","7.4",[67,68,69,70,22],"disposable-emails","spam-prevention","temporary-emails","user-registration","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Femail-blocklist\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Femail-blocklist.1.2.7.zip","2026-03-15T14:54:45.397Z",{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":60,"downloaded":82,"rating":11,"num_ratings":11,"last_updated":23,"tested_up_to":83,"requires_at_least":84,"requires_php":85,"tags":86,"homepage":88,"download_link":89,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":90},"ultimate-email-validator","Ultimate Email Validator – Validate and Stop Fake, Temporary and Disposable Emails","2.2.0","Oxibug","https:\u002F\u002Fprofiles.wordpress.org\u002Foxibug\u002F","\u003Cp>Enhance Your Website’s Integrity with Ultimate Email Validator Plugin!\u003C\u002Fp>\n\u003Cp>Are you tired of dealing with fake registrations and spammy submissions on your website? Say goodbye to disposable and temporary email addresses causing havoc in your databases. Introducing the Ultimate Email Validator, a powerful WordPress plugin designed to ensure the authenticity of user registrations, contact form submissions, and more.\u003C\u002Fp>\n\u003Cp>Powered by the reliable \u003Ca href=\"https:\u002F\u002Fquickemailverification.com\u002F\" rel=\"nofollow ugc\">Quick Email Verification\u003C\u002Fa> API, the Ultimate Email Validator is your ultimate solution to maintaining a clean and genuine user base. Our plugin seamlessly integrates with popular WordPress extensions including Contact Form 7, Mailchimp, WooCommerce, BuddyPress, Gravity Forms, and Ninja Forms, making it a comprehensive tool for various forms across your site.\u003C\u002Fp>\n\u003Cp>Experience a new level of email verification with our cutting-edge WordPress plugin. Designed to enhance user registration processes, our plugin is your ultimate solution to verify email addresses in registration forms. Say goodbye to the nuisance of fake and disposable emails cluttering your user database. Our plugin is engineered to seamlessly integrate into your registration process, ensuring that only genuine email addresses make the cut. We’re here to transform your website’s integrity with advanced technology that checks disposable emails during the registration process. Don’t compromise on data quality – empower your website today with the power to validate and authenticate email addresses effectively.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Advanced Email Validation:\u003C\u002Fstrong> Our plugin utilizes the [Quick Email Verification] API to meticulously validate email addresses in real-time. Say goodbye to disposable and temporary email addresses flooding your database.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Robust Compatibility:\u003C\u002Fstrong> Whether you’re using Contact Form 7, Mailchimp, WooCommerce, BuddyPress, Gravity Forms, or Ninja Forms, our plugin works seamlessly with these extensions to ensure uniform protection against fake registrations.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Cost-Effective Solution:\u003C\u002Fstrong> Worried about the cost? Don’t be! Our plugin leverages the [Quick Email Verification] API’s generous free plan, offering up to 100 requests daily, translating to approximately 3000 requests monthly. This is the perfect solution for small to medium websites looking for comprehensive protection without breaking the bank.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>User-Friendly Interface:\u003C\u002Fstrong> We believe in simplicity. Our user-friendly interface allows you to effortlessly enable or disable email validation for each form, ensuring you’re in full control of your website’s integrity.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Enhanced Security:\u003C\u002Fstrong> By preventing disposable and temporary emails from accessing your forms, you’re effectively safeguarding your website from spam, fraudulent activities, and potential security breaches.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Start Protecting Your Website Today:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>With the Ultimate Email Validator, you can provide a seamless user experience while keeping your website’s integrity intact. Don’t let disposable emails tarnish your online presence. Empower your website with a powerful layer of protection and ensure every interaction on your site is genuine and meaningful.\u003C\u002Fp>\n\u003Cp>Don’t compromise on quality. Get the Ultimate Email Validator plugin today and enjoy the benefits of clean and reliable user data. Take advantage of our cost-effective solution and make a difference in your website’s security.\u003C\u002Fp>\n\u003Ch3>Registration Form Validation\u003C\u002Fh3>\n\u003Cp>Ultimate Email Validator identifies email fields in \u003Cstrong>WordPress, BuddyPress and WooCommerce\u003C\u002Fstrong> registration forms. It also identifies email fields on the \u003Cstrong>Update User Profile\u003C\u002Fstrong> page, preventing users from later modifying their genuine email addresses.\u003C\u002Fp>\n\u003Ch3>Form Validation\u003C\u002Fh3>\n\u003Cp>You can also utilize Ultimate Email Validator to validate email fields in Comment Boxes within posts or pages. It supports popular contact forms like \u003Cstrong>Contact Form 7, MailChimp, Ninja Forms and Gravity Forms\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Ultimate Email Validator Compatibility\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>BuddyPress\u003C\u002Fli>\n\u003Cli>WooCommerce\u003C\u002Fli>\n\u003Cli>MailChimp\u003C\u002Fli>\n\u003Cli>Contact Form 7\u003C\u002Fli>\n\u003Cli>Ninja Forms\u003C\u002Fli>\n\u003Cli>Gravity Forms\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Display a Custom Message\u003C\u002Fh3>\n\u003Cp>Ultimate Email Validator includes a user-friendly and stylish options panel, allowing you to manage the validation process according to your preferences. You can enable or disable validations for each registration or contact form and customize the message for each form. This way, the message displayed during registration will differ from the one shown in contact forms, and so on.\u003C\u002Fp>\n","Enhance Website Security: Stop Fake, Temporary, and Disposable Emails Across Registration, Contact Form 7, Mailchimp, Woocommerce, and More!",3024,"6.3.8","5.3","5.6",[18,87,19,21,22],"email-validation","https:\u002F\u002Foxibug.com\u002Fplugins\u002Fultimate-email-validator","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fultimate-email-validator.2.2.0.zip","2026-03-15T10:48:56.248Z",{"slug":92,"name":93,"version":94,"author":95,"author_profile":96,"description":97,"short_description":98,"active_installs":60,"downloaded":99,"rating":100,"num_ratings":101,"last_updated":102,"tested_up_to":103,"requires_at_least":104,"requires_php":23,"tags":105,"homepage":108,"download_link":109,"security_score":110,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"block-disposable-email-addresses","Block Disposable Email","0.8","gsetz","https:\u002F\u002Fprofiles.wordpress.org\u002Fgsetz\u002F","\u003Cp>This plugin prevents people from registering with disposable email addresses (dea) like the ones provided by mailinator (also known as throw-away email, one-time email). It protects your most important asset, your registered user base, by preventing contamination by fake accounts. This plugin working principle is similar to spam blacklists.\u003C\u002Fp>\n\u003Cp>It hooks in the wordpress function is_email() so it will extend the known email validation of wordpress to detect dea domains.\u003C\u002Fp>\n\u003Cp>The plugin itself does not contain a list of domains to block. Instead of local maintenance the plugin uses the service of http:\u002F\u002Fwww.block-disposable-email.com. This is a very accurate free service for up to 200 queries a month. For huge sites several commercial plans are available.\u003C\u002Fp>\n\u003Cp>Please see the FAQ section for some more information.\u003C\u002Fp>\n","This plugin detects one-time email addresses (disposable email, trashmail, mailinator, 10minutemail) and helps to keep your userbase and comments clea …",4288,46,3,"2017-03-16T18:51:00.000Z","4.6.30","3.3.1",[106,18,107,20,21],"comments","posts","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fblock-disposable-email-addresses\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fblock-disposable-email-addresses.zip",85,{"slug":112,"name":113,"version":114,"author":115,"author_profile":116,"description":117,"short_description":118,"active_installs":119,"downloaded":120,"rating":25,"num_ratings":101,"last_updated":121,"tested_up_to":63,"requires_at_least":122,"requires_php":65,"tags":123,"homepage":129,"download_link":130,"security_score":131,"vuln_count":30,"unpatched_count":11,"last_vuln_date":132,"fetched_at":27},"reoon-email-verifier","Reoon Email Verifier","2.1.1","Reoon Technology","https:\u002F\u002Fprofiles.wordpress.org\u002Freoon\u002F","\u003Cp>Reoon Email Verifier offers a robust solution for verifying email addresses in real-time, protecting your site from spam registrations and enhancing email campaign effectiveness. With over 99% accuracy, our verification service integrates seamlessly with popular WordPress forms, offering broad compatibility and exceptional reliability.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Check email address during the form submission.\u003Cbr \u002F>\n– Can detect valid, invalid, temporary, catch-all, inbox-full, spamtrap addresses.\u003Cbr \u002F>\n– Quick mode verification checks an email within 0.5 seconds.\u003Cbr \u002F>\n– Dynamic detection of disposable and temporary email addresses.\u003Cbr \u002F>\n– Supports most of the free email providers and business\u002Fprofessional emails.\u003Cbr \u002F>\n– Live API for instant verification during user registration (within 0.5 seconds).\u003Cbr \u002F>\n– Verification mode and custom filters can be selected.\u003Cbr \u002F>\n– GDPR compliant, ensuring user data protection and privacy.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Supported WordPress Forms:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Formidable Form\u003Cbr \u002F>\n– Gravity Form\u003Cbr \u002F>\n– Default WordPress Registration Form\u003Cbr \u002F>\n– WooCommerce Checkout Form\u003Cbr \u002F>\n– Contact Form 7\u003Cbr \u002F>\n– Ninja Forms\u003Cbr \u002F>\n– WPForms\u003Cbr \u002F>\n– Elementor Forms\u003Cbr \u002F>\n– Fluent Forms\u003Cbr \u002F>\n– Forminator Forms\u003Cbr \u002F>\n– HappyForms\u003Cbr \u002F>\n– Mail Mint Form\u003Cbr \u002F>\n– Contact Form by BestWebSoft\u003Cbr \u002F>\n– WordPress Comment Form\u003Cbr \u002F>\n– SureCart\u003Cbr \u002F>\n– WS Form\u003Cbr \u002F>\n– JetForm Builder\u003Cbr \u002F>\n– MetForm\u003Cbr \u002F>\n– BuddyForms\u003Cbr \u002F>\n– EverestForms\u003Cbr \u002F>\n– Bitforms\u003C\u002Fp>\n\u003Cp>To learn about the list of features and detailed benefits, please visit \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.reoon.com\u002Femail-verifier\u002F\" rel=\"nofollow ugc\">Reoon Email Verifier\u003C\u002Fa>\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Ch3>Third-Party Service Usage\u003C\u002Fh3>\n\u003Cp>This plugin integrates with the Reoon Email Verifier service to provide real-time email verification functionality. Through API calls to Reoon Technology’s servers, it verifies email addresses and retrieves account information, using the following endpoints:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>Verify email addresses: https:\u002F\u002Femailverifier.reoon.com\u002Fapi\u002Fv1\u002Fverify?email=[email]&mode=[mode]&key=[your_api_key]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>By installing and activating this plugin, you consent to the transmission of email addresses to these URLs for the purpose of verification.\u003C\u002Fp>\n\u003Cp>Data Privacy and Security Commitment: We prioritize your privacy and the security of your data. All submitted email addresses are automatically deleted from our servers after 15 days, ensuring that your data is not stored indefinitely. Furthermore, we do not sell or use the submitted emails for marketing purposes. This practice is part of our commitment to maintaining your trust and complying with data protection regulations.\u003C\u002Fp>\n\u003Cp>The use of the Reoon Email Verifier service is subject to Reoon’s Terms of Service and Privacy Policy, available at:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>Terms of Service: https:\u002F\u002Fwww.reoon.com\u002Fterms-and-conditions\u002F\nPrivacy Policy: https:\u002F\u002Fwww.reoon.com\u002Fprivacy-policy\u002F\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>We encourage you to review these documents to understand how Reoon Technology handles and protects your data. It is crucial to ensure that the use of this plugin complies with your website’s privacy policy and any applicable legal obligations concerning data protection and privacy.\u003C\u002Fp>\n","Safeguard your online forms against invalid, temporary, disposable, and harmful email addresses with real-time verification.",600,6021,"2026-01-18T16:36:00.000Z","4.7",[124,125,126,127,128],"block-spam-registration","email-validator","email-verifier","form-email-validation","temporary-email-blocker","https:\u002F\u002Fwww.reoon.com\u002Femail-verifier\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Freoon-email-verifier.2.1.1.zip",99,"2025-10-09 00:00:00",{"attackSurface":134,"codeSignals":171,"taintFlows":179,"riskAssessment":180,"analyzedAt":189},{"hooks":135,"ajaxHandlers":167,"restRoutes":168,"shortcodes":169,"cronEvents":170,"entryPointCount":11,"unprotectedCount":11},[136,142,146,152,155,159,163],{"type":137,"name":138,"callback":139,"file":140,"line":141},"action","admin_menu","tmdetect_add_admin_menu","settings.php",16,{"type":137,"name":143,"callback":144,"file":140,"line":145},"admin_init","tmdetect_register_settings",28,{"type":147,"name":148,"callback":149,"priority":60,"file":150,"line":151},"filter","registration_errors","tmdetect_check_temporary_email_before_registration","temp-mail-detector-block-temporary-emails.php",17,{"type":137,"name":153,"callback":149,"priority":60,"file":150,"line":154},"user_profile_update_errors",18,{"type":147,"name":156,"callback":157,"file":150,"line":158},"preprocess_comment","tmdetect_check_temporary_email_before_comment_submission",21,{"type":137,"name":160,"callback":161,"file":150,"line":162},"admin_notices","tmdetect_show_admin_banner",22,{"type":147,"name":164,"callback":165,"file":150,"line":166},"pre_comment_approved","closure",43,[],[],[],[],{"dangerousFunctions":172,"sqlUsage":173,"outputEscaping":175,"fileOperations":11,"externalRequests":177,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":178},[],{"prepared":11,"raw":11,"locations":174},[],{"escaped":60,"rawEcho":11,"locations":176},[],2,[],[],{"summary":181,"deductions":182},"The plugin 'temp-mail-detector-block-temporary-emails' version 1.0 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of any detected dangerous functions, raw SQL queries, file operations, or taint flows with unsanitized paths is commendable and suggests developers have adhered to secure coding practices in these areas.  Furthermore, the plugin demonstrates proper output escaping and the use of prepared statements for its SQL queries, mitigating common vulnerabilities like cross-site scripting (XSS) and SQL injection.\n\nHowever, the analysis does reveal some potential areas of concern.  The presence of external HTTP requests (2) without further context about their purpose or validation of returned data introduces a minor risk of introducing vulnerabilities if those external resources are compromised or return malicious content.  More significantly, the complete lack of nonce checks and capability checks across all identified entry points (though there are none reported) is a notable weakness. While the current attack surface is zero, this indicates a lack of defensive mechanisms that would be crucial if new entry points are added in future updates without adequate security considerations.\n\nThe plugin's vulnerability history is entirely clean, with no recorded CVEs. This is a positive indicator, suggesting a history of security consciousness. However, it's important to recognize that this is a static snapshot. The absence of vulnerabilities in the past does not guarantee future security, especially when combined with the noted lack of comprehensive security checks like nonces and capability checks.",[183,185,187],{"reason":184,"points":60},"Lack of nonce checks",{"reason":186,"points":60},"Lack of capability checks",{"reason":188,"points":101},"External HTTP requests (potential risk)","2026-03-17T06:53:09.969Z",{"wat":191,"direct":197},{"assetPaths":192,"generatorPatterns":194,"scriptPaths":195,"versionParams":196},[193],"\u002Fwp-content\u002Fplugins\u002Ftemp-mail-detector-block-temporary-emails\u002Fsettings.php",[],[],[],{"cssClasses":198,"htmlComments":201,"htmlAttributes":202,"restEndpoints":203,"jsGlobals":204,"shortcodeOutput":205},[199,200],"notice-warning","is-dismissible",[],[],[],[],[]]