[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6mWTgPWu0zZrAYrz1CRRzaL1FBM9cKM3Xq_-cU6qNKo":3,"$f1VQpSaADVa88wB8oULwqwCTeOqwlTCb_J0f6KhD8SnI":326,"$fVxiCd6WAPVSNIJQF8G_r_rv5JwHrbNpJyIfXRcOL2lI":331},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"discovery_status":32,"vulnerabilities":33,"developer":51,"crawl_stats":39,"alternatives":59,"analysis":173,"fingerprints":307},"text-hover","Text Hover","4.2","Scott Reilly","https:\u002F\u002Fprofiles.wordpress.org\u002Fcoffee2code\u002F","\u003Cp>This plugin allows you to easily define help text that appears when a visitor hovers their mouse over a word or phrase in a post or page.\u003C\u002Fp>\n\u003Cp>Via the plugin’s settings, simply specify the words or phrases that you want to be associated with hover text, and of course, the desired hover texts themselves. The format is quite simple; an example of which is shown here:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>WP => WordPress\nMatt => Matt Mullenweg\nThe Scooby Shack => the bar where the gang hangs out\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Additional features of the plugin controlled both via settings and filters:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Hover text can be enabled for comments (it isn’t by default)\u003C\u002Fli>\n\u003Cli>Hover text can be made case insensitive (it is case sensitive by default)\u003C\u002Fli>\n\u003Cli>Hover text can be limited to doing only one replacement per term, per post (by default, all occurrences of a term are given hovertext)\u003C\u002Fli>\n\u003Cli>Hover text can be rendered using the default browser tooltip (by default, the better-looking \u003Ca href=\"http:\u002F\u002Fqtip2.com\u002F\" rel=\"nofollow ugc\">qTip2\u003C\u002Fa> library is used)\u003C\u002Fli>\n\u003Cli>Hover text can be expanded to affect other filters\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Note:\u003C\u002Fstrong> This is not the same as my \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftext-replace\" rel=\"ugc\">Text Replace\u003C\u002Fa> plugin, which defines terms or phrases that you want replaced by replacement text when displayed on your site. Text Hover instead adds the hover text as additional information for when visitors hover over the term, which is otherwise displayed in the post as you typed it.\u003C\u002Fp>\n\u003Cp>Links: \u003Ca href=\"https:\u002F\u002Fcoffee2code.com\u002Fwp-plugins\u002Ftext-hover\u002F\" rel=\"nofollow ugc\">Plugin Homepage\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftext-hover\u002F\" rel=\"ugc\">Plugin Directory Page\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcoffee2code\u002Ftext-hover\u002F\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fcoffee2code.com\" rel=\"nofollow ugc\">Author Homepage\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Developer Documentation\u003C\u002Fh3>\n\u003Cp>Developer documentation can be found in \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcoffee2code\u002Ftext-hover\u002Fblob\u002Fmaster\u002FDEVELOPER-DOCS.md\" rel=\"nofollow ugc\">DEVELOPER-DOCS.md\u003C\u002Fa>. That documentation covers the numerous hooks provided by the plugin. Those hooks are listed below to provide an overview of what’s available.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>c2c_text_hover_filters\u003C\u002Fcode> : Customize what hooks get text hover applied to them.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_text_hover_third_party_filters\u003C\u002Fcode> : Customize what third-party hooks get text hover applied to them.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_text_hover_filter_priority\u003C\u002Fcode> : Override the default priority for the \u003Ccode>c2c_text_hover\u003C\u002Fcode> filter.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_text_hover\u003C\u002Fcode> Customize or override the setting defining all of the text hover terms and their hover texts.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_text_hover_comments\u003C\u002Fcode> : Customize or override the setting indicating if text hover should be enabled in comments.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_text_hover_case_sensitive\u003C\u002Fcode> : Customize or override the setting indicating if text hover should be case sensitive.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_text_hover_once\u003C\u002Fcode> : Customize or override the setting indicating if text hovering should be limited to once per term per piece of text being processed regardless of how many times the term appears.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_text_hover_use_pretty_tooltips\u003C\u002Fcode> : Customize or override the setting indicating if prettier tooltips should be used.\u003C\u002Fli>\n\u003C\u002Ful>\n","Add hover text (aka tooltips) to content in posts. Handy for providing explanations of names, terms, phrases, abbreviations, and acronyms.",2000,62572,90,17,"2022-03-23T06:10:00.000Z","5.9.13","4.9","",[20,21,22,23,24],"abbreviations","acronyms","help","terms","tooltips","https:\u002F\u002Fcoffee2code.com\u002Fwp-plugins\u002Ftext-hover\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.4.2.zip",85,1,0,"2022-04-09 00:00:00","2026-04-16T10:56:18.058Z","no_bundle",[34],{"id":35,"url_slug":36,"title":37,"description":38,"plugin_slug":4,"theme_slug":39,"affected_versions":40,"patched_in_version":6,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48,"patch_diff_files":49,"patch_trac_url":39,"research_status":39,"research_verified":50,"research_rounds_completed":29,"research_plan":39,"research_summary":39,"research_vulnerable_code":39,"research_fix_diff":39,"research_exploit_outline":39,"research_model_used":39,"research_started_at":39,"research_completed_at":39,"research_error":39,"poc_status":39,"poc_video_id":39,"poc_summary":39,"poc_steps":39,"poc_tested_at":39,"poc_wp_version":39,"poc_php_version":39,"poc_playwright_script":39,"poc_exploit_code":39,"poc_has_trace":50,"poc_model_used":39,"poc_verification_depth":39},"CVE-2022-0737","text-hover-admin-stored-cross-site-scripting","Text Hover \u003C= 4.1 - Admin+ Stored Cross-Site Scripting","The Text Hover WordPress plugin before 4.2 does not sanitize and escape the text to hover, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.",null,"\u003C=4.1","medium",5.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-01-22 19:56:02",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F3d8b8f54-b2af-42dd-af82-c1e8726c87e2?source=api-prod",654,[],false,{"slug":52,"display_name":7,"profile_url":8,"plugin_count":53,"total_installs":54,"avg_security_score":55,"avg_patch_time_days":56,"trust_score":57,"computed_at":58},"coffee2code",63,91830,88,374,71,"2026-05-19T21:07:25.513Z",[60,79,103,123,148],{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":29,"downloaded":68,"rating":29,"num_ratings":29,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":72,"tags":73,"homepage":18,"download_link":77,"security_score":78,"vuln_count":29,"unpatched_count":29,"last_vuln_date":39,"fetched_at":31},"easy-glossary","Easy Glossary","1.2","GrayStud.io","https:\u002F\u002Fprofiles.wordpress.org\u002Fgraystudio\u002F","\u003Cp>Easy Glossary plugin helps you create a glossary of terms and definitions, automatically link terms in your content, display optional tooltips, and render an A–Z index. It includes a Settings page to customize behavior.\u003C\u002Fp>\n","A lightweight, flexible glossary plugin that auto-links terms, shows tooltips, and provides an index shortcode.",414,"2026-02-21T20:45:00.000Z","6.8.5","5.7","7.4",[74,75,76,23,24],"dictionary","glossary","index","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-glossary.1.2.zip",100,{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":87,"downloaded":88,"rating":13,"num_ratings":89,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":18,"tags":93,"homepage":98,"download_link":99,"security_score":100,"vuln_count":101,"unpatched_count":29,"last_vuln_date":102,"fetched_at":31},"taxonomy-terms-order","Category Order and Taxonomy Terms Order","1.9.5","nsp-code","https:\u002F\u002Fprofiles.wordpress.org\u002Fnsp-code\u002F","\u003Cp>Easily control the order of Categories and any hierarchical taxonomy with a simple drag-and-drop interface. Reorder parent and child terms visually in the admin and choose whether the plugin automatically applies your custom term order to front-end queries.\u003C\u002Fp>\n\u003Ch3>Key features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Intuitive drag-and-drop reordering for Categories and all hierarchical taxonomies. \u003C\u002Fli>\n\u003Cli>Option to auto-apply the custom term order to front-end queries (no theme\u002Fplugin edits required). \u003C\u002Fli>\n\u003Cli>Keep the admin term lists in your new order (makes management and editorial workflows consistent). \u003C\u002Fli>\n\u003Cli>Works with multiple taxonomies per post type — switch between taxonomies from the same interface. \u003C\u002Fli>\n\u003Cli>Multisite aware and regularly updated for modern WordPress and PHP versions (see changelog for compatibility notes).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How it works\u003C\u002Fh3>\n\u003Cp>After activating the plugin, a new Taxonomy Order page becomes available under the custom post type menu. Simply open it and drag terms into the exact order you want — including parent\u002Fchild hierarchy.\u003Cbr \u002F>\nUse the plugin’s Taxonomy Order screen to drag terms into the order you want. To apply the custom order automatically across your site, enable the Autosort option — the plugin will adjust term queries on the fly so your chosen order shows without template changes. If you prefer to control ordering in code, include orderby => ‘term_order’ when calling get_terms() to use the plugin’s order programmatically.\u003C\u002Fp>\n\u003Cp>This plugin is developed by \u003Ca href=\"http:\u002F\u002Fwww.nsp-code.com\" rel=\"nofollow ugc\">Nsp-Code\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>See the \u003Ca href=\"https:\u002F\u002Fwww.nsp-code.com\u002Fpremium-plugins\u002Fwordpress-plugins\u002Fadvanced-taxonomy-terms-order\u002F\" rel=\"nofollow ugc\">Advanced Taxonomy Terms Order\u003C\u002Fa> for advanced features.\u003C\u002Fp>\n\u003Ch3>Localization\u003C\u002Fh3>\n\u003Cp>Available in Catalan, Chinese (China), Chinese (Taiwan), Czech, Dutch, Dutch (Belgium), English (Australia), English (Canada), English (New Zealand), English (UK), English (US), French (France), Galician, German, Italian, Japanese, Norwegian (Bokmål), Polish, Portuguese (Portugal), Russian, Spanish (Chile), Spanish (Spain), Spanish (Venezuela), Swedish, and Turkish.\u003Cbr \u002F>\nWhant to contribute with a translation to your language? Please check at https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Ftaxonomy-terms-order\u003C\u002Fp>\n\u003Cp>There isn’t any Editors for your native language on plugin Contributors? You can help to moderate! https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Ftaxonomy-terms-order\u002Fcontributors\u003C\u002Fp>\n","Drag-and-drop ordering for Categories & any taxonomy (hierarchically) using a Drag and Drop Sortable JavaScript capability.",500000,10130592,162,"2026-03-16T08:12:00.000Z","6.9.4","2.8",[94,95,96,97],"categories-sort","category-order","taxonomy-order","terms-order","http:\u002F\u002Fwww.nsp-code.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftaxonomy-terms-order.1.9.5.zip",99,2,"2018-02-22 00:00:00",{"slug":104,"name":105,"version":106,"author":107,"author_profile":108,"description":109,"short_description":110,"active_installs":111,"downloaded":112,"rating":113,"num_ratings":114,"last_updated":115,"tested_up_to":91,"requires_at_least":71,"requires_php":72,"tags":116,"homepage":121,"download_link":122,"security_score":78,"vuln_count":29,"unpatched_count":29,"last_vuln_date":39,"fetched_at":31},"complianz-terms-conditions","Complianz – Terms and Conditions","1.3.0","Complianz","https:\u002F\u002Fprofiles.wordpress.org\u002Fcomplianz\u002F","\u003Cp>Complianz – Terms and Conditions is a stand-alone plugin from Complianz. A simple, but in-depth wizard will configure a Terms and Conditions page for your website or for those of your clients.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>A simple but in-depth wizard to configure the Terms & Conditions specified to your needs or the needs of your clients.\u003C\u002Fli>\n\u003Cli>Includes specific paragraphs for affiliate marketing, WooCommerce or Easy Digital Downloads, digital and physical goods and services, and other variables.\u003C\u002Fli>\n\u003Cli>Optional are sections about minimum age requirements, a return policy, accessibility policy and user created content, for example.\u003C\u002Fli>\n\u003Cli>A full-featured Terms & Conditions applicable to most businesses and personal endeavours, and available for editing if needed.\u003C\u002Fli>\n\u003Cli>Can be used stand-alone or fully integrated with the Complianz – GDPR\u002FCCPA Cookie Consent plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Are you missing anything or have suggestions? Leave an issue, or do a pull request on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcomplianz\u002Fcomplianz-terms-conditions\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Check out other plugins developed by Complianz: \u003Ca href=\"https:\u002F\u002Fcomplianz.io\u002F\" rel=\"nofollow ugc\">Complianz – GDPR\u002FCCPA Cookie Consent\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcomplianz.io\u002Fsupport\u002F\" rel=\"nofollow ugc\">Contact\u003C\u002Fa> us if you have any questions, issues, or suggestions. Complianz – Terms & Conditions is developed by \u003Ca href=\"https:\u002F\u002Fcomplianz.io\" rel=\"nofollow ugc\">Complianz B.V.\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Installation\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Go to “plugins” in your WordPress Dashboard, and click “add new”\u003C\u002Fli>\n\u003Cli>Upload the downloaded .zip file and activate the plugin\u003C\u002Fli>\n\u003Cli>Navigate to Tools -> Terms and Conditions and follow the instructions\u003C\u002Fli>\n\u003Cli>If you already have Complianz GDPR\u002FCCPA Cookie Consent installed: Please visit Complianz -> Terms and conditions.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>IMPORTANT! Complianz – Terms and Conditions can help you meet compliance requirements, but you as the user must nonetheless ensure that you have all the necessary configurations in place.\u003C\u002Fp>\n","Configure your own Terms and Conditions specific to your service or webshop.",300000,1809860,98,177,"2026-03-31T10:56:00.000Z",[117,118,23,119,120],"conditions","legal","terms-and-conditions","webshop","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcomplianz-terms-conditions","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcomplianz-terms-conditions.1.3.0.zip",{"slug":124,"name":125,"version":126,"author":127,"author_profile":128,"description":129,"short_description":130,"active_installs":131,"downloaded":132,"rating":133,"num_ratings":134,"last_updated":135,"tested_up_to":91,"requires_at_least":136,"requires_php":137,"tags":138,"homepage":143,"download_link":144,"security_score":145,"vuln_count":146,"unpatched_count":29,"last_vuln_date":147,"fetched_at":31},"iubenda-cookie-law-solution","iubenda | All-in-one Compliance for GDPR \u002F CCPA Cookie Consent + more","3.13.1","iubenda","https:\u002F\u002Fprofiles.wordpress.org\u002Fiubenda\u002F","\u003Cp>The iubenda plugin is an \u003Cstrong>all-in-one\u003C\u002Fstrong>, extremely easy to use 360° compliance solution, with text crafted by actual lawyers, that quickly \u003Cstrong>scans your site and auto-configures to match your specific setup\u003C\u002Fstrong>. It supports the GDPR (DSGVO, RGPD), UK-GDPR, ePrivacy, LGPD, CPRA \u002F CCPA, CalOPPA, PECR and more, and seamlessly integrates with the latest versions of Google Consent Mode and IAB’s TCF.\u003Cbr \u002F>\nIt allows you to:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>⚡️Scan your site and have solutions auto-configured\u003C\u002Fstrong> to match your site’s specific needs.\u003C\u002Fli>\n\u003Cli>🚀 Easily generate a fully customizable \u003Cstrong>cookie banner,\u003C\u002Fstrong> \u003Cstrong>manage cookie consent\u003C\u002Fstrong> and store legally required \u003Cstrong>GDPR consent proofs\u003C\u002Fstrong> for cookies.\u003C\u002Fli>\n\u003Cli>Generate a \u003Cstrong>CCPA notice with working DNSMPI link\u003C\u002Fstrong> as legally required.\u003C\u002Fli>\n\u003Cli>Activate IABs \u003Cstrong>TCF to maximize ad earning\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>🚀 Quickly generate a fully customizable \u003Cstrong>privacy and cookie policy\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Auto-detect user location and auto-applies the correct data privacy settings\u003C\u002Fstrong> (needed if you have users from multiple regions like the US and the EU).\u003C\u002Fli>\n\u003Cli>🚀 Capture, store and manage \u003Cstrong>GDPR consent records\u003C\u002Fstrong> for your webforms.\u003C\u002Fli>\n\u003Cli>🚀 Effortlessly \u003Cstrong>generate professional Terms and Conditions\u003C\u002Fstrong> to protect you from liabilities and more.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Translate all documents with a single click\u003C\u002Fstrong> (supports 10 languages).\u003C\u002Fli>\n\u003Cli>Compatible with \u003Cstrong>Google’s Accelerated Mobile Pages\u003C\u002Fstrong> (AMP)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>And of course, basic set-up is completely free.\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FZmUC66etPbk?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cp>This all-in-one plugin lets you integrate all iubenda compliance solutions in a single install and basic set-up is completely free.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>⚡️\u003C\u002Fstrong> The plugin \u003Cstrong>scans your site and auto-configures everything\u003C\u002Fstrong> based on your site’s specific needs.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>⭐ All our solutions are fully responsive (perfect for all screen sizes) and WCAG Level AAA Compliant.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>They’re auto-updated when the law changes so that they’re always up-to-date and our built-in site scanner runs periodic scans on your site and alerts you if it detects something that should be added to your compliance documents.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Our solutions support the GDPR (DSGVO, RGPD), UK-GDPR, ePrivacy, LGPD, CCPA \u002F CPRA, VCDPA, CalOPPA, PECR and more.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Privacy Controls and Cookie Solution\u003C\u002Fh3>\n\u003Cp>Includes cookie banner\u002FCCPA notice, and cookie consent management (blocking scripts until consent is collected as legally required). Free basic setup and full CCPA support.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy and guided set-up: \u003Cstrong>Analyzes your site and auto-configures everything\u003C\u002Fstrong> to make set-up as easy as possible.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Fully customizable cookie banner\u003C\u002Fstrong> – change functionality, design, location, colors, add your logo and more.\u003C\u002Fli>\n\u003Cli>Asynchronously re-activates cookie scripts once consent is collected (\u003Cstrong>no page reload needed\u003C\u002Fstrong>).\u003C\u002Fli>\n\u003Cli>Lightning-fast: \u003Cstrong>won’t affect page performance\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Auto-detects and blocks a wide range of 3rd party script\u003C\u002Fstrong>s like Google Analytics, Google Maps, Facebook and Instagram widgets, Youtube, Twitter, PayPal, Disqus, Outbrain, AdRoll, Kissmetrics, Freshchat and more.\u003C\u002Fli>\n\u003Cli>Allows you to provide your users with \u003Cstrong>granular, per-category preference control\u003C\u002Fstrong> (e.g. basic functionalities, experience enhancement, targeting & advertising)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Google Consent Mode\u003C\u002Fstrong> (both \u003Cstrong>Basic\u003C\u002Fstrong> and \u003Cstrong>Advanced\u003C\u002Fstrong> implementations; no extra setup required): Enables \u003Cstrong>efficient conversion tracking\u003C\u002Fstrong> even without user consent for cookies and tracking technologies, \u003Cstrong>enhancing Google Analytics and Ads performance\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Integrates with IAB’s \u003Ca href=\"https:\u002F\u002Fwww.iubenda.com\u002Fen\u002Fhelp\u002F7440-enable-preference-management-iab-framework#revenue\" rel=\"nofollow ugc\">Transparency and Consent Framework\u003C\u002Fa> (\u003Cstrong>TCF\u003C\u002Fstrong>) to maximize ad revenue (needed if your site uses ad networks like Google ads and more)\u003C\u002Fli>\n\u003Cli>Compatible with \u003Cstrong>Google’s Accelerated Mobile Pages\u003C\u002Fstrong> (AMP)\u003C\u002Fli>\n\u003Cli>Allows you to auto-detect and \u003Cstrong>limit prior-blocking and cookie consent requests only to users from the EU\u003C\u002Fstrong> – where this is a legal requirement \u003Cstrong>for GDPR compliance\u003C\u002Fstrong> – while running cookies scripts normally in regions where you are still legally allowed to do so.\u003C\u002Fli>\n\u003Cli>Features an \u003Cstrong>easy-to-use interface for entering custom scripts\u003C\u002Fstrong> and iframes\u003C\u002Fli>\n\u003Cli>Cookie database feature allows you to auto-set \u003Cstrong>cookie lifetime information\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Display CCPA \u002F CPRA notice and opt-out link as required by the\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.iubenda.com\u002Fen\u002Fhelp\u002F21165-ccpa-how-to-add-a-notice-of-collection-and-a-do-not-sell-link\" rel=\"nofollow ugc\">\u003Cstrong>California Consumer Privacy Act\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Provides \u003Cstrong>cookie consent analytics\u003C\u002Fstrong> for high-traffic sites.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Detects bots\u002Fspiders\u003C\u002Fstrong> and serves them a clean page \u003Cstrong>so that your SEO efforts are never compromised\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy and Cookie Policy Generator\u003C\u002Fh3>\n\u003Cp>This solution lets you generate professional privacy and cookie policies \u003Cstrong>in minutes\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Super \u003Cstrong>easy interface, guided process, fully customizable\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>All \u003Cstrong>legal text written by actual legal professionals\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Quick select from \u003Cstrong>over 1900 clauses or create custom clauses\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Activate \u003Cstrong>cookie policy in a single click\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Site Scanner to quickly \u003Cstrong>detect which services\u002F clauses you need to add to your policies\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>One-click translation\u003C\u002Fstrong>. 10 languages supported: English-US, English-UK, Italian, French, Spanish, German, Portuguese, Brazilian Portuguese, Russian, Dutch.\u003C\u002Fli>\n\u003Cli>One-click activation for \u003Cstrong>country\u002F region-specific text\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Compatible with \u003Cstrong>Google’s Accelerated Mobile Pages\u003C\u002Fstrong> (AMP)\u003C\u002Fli>\n\u003Cli>Documents are \u003Cstrong>remotely updated when legal requirements change\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Manage documents for \u003Cstrong>multiple sites from a single dashboard\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>White label option\u003C\u002Fstrong> allows you to seamlessly integrate your privacy policy text into the body of your webpage\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Consent Database\u003C\u002Fh3>\n\u003Cp>Collect consent, document opt-ins and opt-outs via your web forms. This solution smoothly integrates with your consent collection forms to auto-create legally required GDPR and LGPD consent records.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>About Legal requirements and Consent Records\u003C\u002Fstrong>\u003Cbr \u002F>\nThese records should include a userid, timestamp, consent proof, record of the consenting action, and the legal documents available to the user at the time of consent, \u003Ca href=\"https:\u002F\u002Fwww.iubenda.com\u002Fen\u002Fhelp\u002F5428-gdpr-guide#records-of-consent\" rel=\"nofollow ugc\">among other things\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>This plugin is \u003Cstrong>THE most complete solution for recording, sorting and maintaining GDPR & LGPD records of consent for optimal privacy compliance\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>The plugin also boasts built-in compatibility with WordPress comment form, Contact Form 7, Elementor forms and WP Forms plugins for your convenience, but can be manually integrated with any type of web-form and can even store consent proofs for consents collected offline (e.g in-store sign-ups) via WP media upload.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>It’s \u003Cstrong>auto-compatible with and allows super easy mapping\u003C\u002Fstrong> of Contact Form 7, WP Forms, WordPress comment, Mailchimp for WordPress, Germanized for WooCommerce, Elementor forms and WooCommerce checkout forms\u003C\u002Fli>\n\u003Cli>Also allows manual integration with \u003Cstrong>any type of web-form\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>For each consent, \u003Cstrong>track the form\u002Fwording the user was prompted\u003C\u002Fstrong> with at the time of the consent collection\u003C\u002Fli>\n\u003Cli>Accurate \u003Cstrong>timestamping and recording of consenting action\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Flexibly \u003Cstrong>upload any form of proof of consent or legal notice, including a PDF if consent was collected offline\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>It provides a \u003Cstrong>high granularity\u003C\u002Fstrong>: map individual form fields, exclude fields (like password inputs), add legal notices available at the time of consent collection, indicate double opt-in, set preferences and more\u003C\u002Fli>\n\u003Cli>REST \u003Cstrong>HTTP API and JS SDK, to give you total control\u003C\u002Fstrong> and how and when consent is stored\u003C\u002Fli>\n\u003Cli>Store \u003Cstrong>multiple preferences for each user\u003C\u002Fstrong> (e.g. if you have multiple newsletters or opt-ins)\u003C\u002Fli>\n\u003Cli>Features an \u003Cstrong>easy-to-use interface for entering custom scripts and iframes\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>It provides \u003Cstrong>API input field for quick and easy activation\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Terms and Conditions\u003C\u002Fh3>\n\u003Cp>Create your terms and conditions in minutes.\u003C\u002Fp>\n\u003Cp>Customizable from hundreds of combinations, available in 10 languages, powerful and precise — our solution is capable of handling even the most complex, individual scenarios. Optimized for e-commerce, marketplace, SaaS, apps and more.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy, \u003Cstrong>guided set-up\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Expertly crafted at the hands of our \u003Cstrong>international legal team\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Pre-defined scenarios modules for everything from basic \u003Cstrong>disclaimers to copyright licenses, account terminations rules, product-comparison, age-related disclaimers, virtual currency,\u003C\u002Fstrong> and more.\u003C\u002Fli>\n\u003Cli>Plug-and-go \u003Cstrong>integrations for popular eCommerce solutions like Shopify, Wix, Squarespace, Weebly, WooCommerce, PrestaShop\u003C\u002Fstrong> and more\u003C\u002Fli>\n\u003Cli>\u003Cstrong>One-click translation\u003C\u002Fstrong> (10 languages supported EN-US, EN-UK, IT, FR, ES, DE, PT, PT-BR, RU, NL)\u003C\u002Fli>\n\u003Cli>Compatible with \u003Cstrong>Google’s Accelerated Mobile Pages\u003C\u002Fstrong> (AMP)\u003C\u002Fli>\n\u003Cli>Manage documents for \u003Cstrong>multiple sites from a single dashboard\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>White label option\u003C\u002Fstrong> allows you to seamlessly integrate your privacy policy text into the body of your webpage\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>iubenda and Third-party services\u003C\u002Fh3>\n\u003Cp>The iubenda plugin makes use of two iubenda services:\u003C\u002Fp>\n\u003Col>\n\u003Cli>A service named \u003Cstrong>Quick generator\u003C\u002Fstrong> that allows you to login\u002Fsignup on iubenda.com and creates privacy policies for your website right from the plugin. The service is publicly available and described in detail on the \u003Ca href=\"https:\u002F\u002Fwww.iubenda.com\u002Fen\u002Fhelp\u002F37013-api-docs-quick-generator-manual\" rel=\"nofollow ugc\">official documentation page\u003C\u002Fa> on the iubenda website.\u003C\u002Fli>\n\u003Cli>An internal service to scan the user’s website and detect the correct data privacy settings to be applied, depending on the website location.\u003Cbr \u002F>\nExternal CSS and JS assets used in the plugin or applied to the user’s website by iubenda are delivered either by \u003Ca href=\"http:\u002F\u002Fcdn.iubenda.com\u002F\" rel=\"nofollow ugc\">cdn.iubenda.com\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fcdn.ampproject.org\u002F\" rel=\"nofollow ugc\">cdn.ampproject.org\u003C\u002Fa> (only when the AMP settings are \u003Ca href=\"https:\u002F\u002Fwww.iubenda.com\u002Fen\u002Fhelp\u002F22135-cookie-solution-amp-wordpress#wordpress\" rel=\"nofollow ugc\">activated\u003C\u002Fa>). Any services available at \u003Ca href=\"http:\u002F\u002Fcdn.iubenda.com\u002F\" rel=\"nofollow ugc\">cdn.iubenda.com\u003C\u002Fa> are provided by iubenda and the respective privacy policy applies. Any services available at \u003Ca href=\"http:\u002F\u002Fcdn.ampproject.org\u002F\" rel=\"nofollow ugc\">cdn.ampproject.org\u003C\u002Fa> are provided by Google and the respective privacy policy applies.\u003Cbr \u002F>\nIf you integrate the Privacy Controls and Cookie Solution to allow your website to request and manage consent for the use of cookies and similar technologies, when the final user navigates on your website\u002Fapplication, then the \u003Ca href=\"https:\u002F\u002Fwww.iubenda.com\u002Fprivacy-policy\u002F36700132\" rel=\"nofollow ugc\">Privacy Policy of iubenda Privacy Controls and Cookie Solution\u003C\u002Fa> applies.\u003Cbr \u002F>\nSimilarly, when you integrate the Consent Database tool to keep track of the user’s consent activities and store the information necessary to record evidence of that consent, then the \u003Ca href=\"https:\u002F\u002Fwww.iubenda.com\u002Fprivacy-policy\u002F94654098\" rel=\"nofollow ugc\">Privacy Policy of iubenda Consent Database\u003C\u002Fa> applies.\u003Cbr \u002F>\nFor further details on the iubenda tools and services privacy policies please refer to the \u003Ca href=\"https:\u002F\u002Fwww.iubenda.com\u002Fprivacy-policy\u002F252372\" rel=\"nofollow ugc\">privacy policy\u003C\u002Fa> on the iubenda website.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>About iubenda\u003C\u002Fh3>\n\u003Cp>We help companies all over the world to keep their websites and apps compliant with international privacy laws for optimal peace of mind. \u003Ca href=\"https:\u002F\u002Fwww.iubenda.com\u002F\" rel=\"nofollow ugc\">More here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Languages\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Our services are currently available in the following languages:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>English US and UK\u003C\u002Fli>\n\u003Cli>Italian\u003C\u002Fli>\n\u003Cli>French\u003C\u002Fli>\n\u003Cli>Spanish\u003C\u002Fli>\n\u003Cli>Portuguese\u003C\u002Fli>\n\u003Cli>Brazilian Portuguese\u003C\u002Fli>\n\u003Cli>German\u003C\u002Fli>\n\u003Cli>Dutch\u003C\u002Fli>\n\u003Cli>Russian\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support & Updates\u003C\u002Fh3>\n\u003Cp>All our solutions and plugins are \u003Cstrong>regularly updated and well maintained\u003C\u002Fstrong> to ensure that you’re always protected.\u003C\u002Fp>\n\u003Cp>You can access our friendly support in multiple languages (currently EN, IT, DE, FR, PT, PT-BR) via \u003Ca href=\"mailto:info@iubenda.com\" rel=\"nofollow ugc\">info@iubenda.com\u003C\u002Fa>, our \u003Ca href=\"https:\u002F\u002Fwww.iubenda.com\u002F\" rel=\"nofollow ugc\">onsite chat\u003C\u002Fa> \u003Cem>(just click the green Help button on the right side of the page)\u003C\u002Fem>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Other links:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.iubenda.com\u002Fen\u002Fhelp\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsupport.iubenda.com\u002F\" rel=\"nofollow ugc\">Feedback & Support forum\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","The solution for GDPR compliance + more. Get your cookie banner, privacy policy, terms and conditions and handle cookie consent in just one plugin.",200000,5368139,94,389,"2026-03-11T13:35:00.000Z","5.0","7.0.0",[139,140,141,142,119],"ccpa","cookie-banner","gdpr","privacy-policy","https:\u002F\u002Fwww.iubenda.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fiubenda-cookie-law-solution.3.13.1.zip",97,4,"2022-12-12 00:00:00",{"slug":149,"name":150,"version":151,"author":152,"author_profile":153,"description":154,"short_description":155,"active_installs":156,"downloaded":157,"rating":158,"num_ratings":159,"last_updated":160,"tested_up_to":70,"requires_at_least":161,"requires_php":162,"tags":163,"homepage":169,"download_link":170,"security_score":133,"vuln_count":171,"unpatched_count":29,"last_vuln_date":172,"fetched_at":31},"wp-live-chat-support","3CX Free Live Chat, Calls & Messaging","10.0.17","WP-LiveChat","https:\u002F\u002Fprofiles.wordpress.org\u002Fwp-livechat\u002F","\u003Cp>Increase your online conversions with the free \u003Ca href=\"https:\u002F\u002Fwww.3cx.com\u002Fsignup\u002Flive-chat\u002F?src=livechatwpplugin\" rel=\"nofollow ugc\">3CX Live Chat\u003C\u002Fa> plugin. Chat and call with your website visitors in real-time, and not only!\u003C\u002Fp>\n\u003Cp>The plugin includes a complete communications system for your business – for free. Call, chat, conference and collaborate with your teams and customers from your office, home or smartphone.\u003C\u002Fp>\n\u003Cp>Zero cost business communications from one central hub. Receive WhatsApp, Facebook and SMS messages on the same dashboard as your live chats and calls.\u003C\u002Fp>\n\u003Cp>Tried and tested with more than 100,000 active installations, 3CX Live Chat is a reliable free live chat solution for WordPress.\u003C\u002Fp>\n\u003Ch4>NO HIDDEN COSTS\u003C\u002Fh4>\n\u003Cp>The plugin is \u003Ca href=\"https:\u002F\u002Fwww.3cx.com\u002Fsignup\u002Flive-chat\u002F?src=livechatwpplugin\" rel=\"nofollow ugc\">free\u003C\u002Fa>, forever. It’s not a free trial and we don’t ask you for your credit card details.\u003Cbr \u002F>\nSimply create an account on the 3CX.com website, receive your account details, login and start chatting!\u003C\u002Fp>\n\u003Ch4>VOICE, WHATSAPP & FACEBOOK!\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Receive and respond to WhatsApp messages \u003C\u002Fli>\n\u003Cli>Facebook and Text messaging too!\u003C\u002Fli>\n\u003Cli>Free calls – voice calls directly to and from the browser\u003C\u002Fli>\n\u003Cli>Answer, transfer and resolve customer queries on one platform across multiple agents\u003C\u002Fli>\n\u003Cli>Move to a new cloud phone system for free\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>YOUR #1 LIVE CHAT SOLUTION\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Website Live Chat (and Call)\u003C\u002Fli>\n\u003Cli>Inbound WhatsApp, Facebook, Text\u003C\u002Fli>\n\u003Cli>Video Conferencing\u003C\u002Fli>\n\u003Cli>3CX Talk \u002F Meet Links\u003C\u002Fli>\n\u003Cli>Mobile & Desktop Apps\u003C\u002Fli>\n\u003Cli>Hosted on Cloud\u003C\u002Fli>\n\u003Cli>Choose your SIP Trunk\u003C\u002Fli>\n\u003Cli>Ring Group\u003C\u002Fli>\n\u003Cli>Auto Attendant\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Video: 3CX Free Live Chat, Calls & Messaging\u003C\u002Fh4>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FmtqHP_ef-2c?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch4>Video: How to Set Up 3CX Free and Live Chat\u003C\u002Fh4>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FM6b23DJ2b90?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n","Chat with your website visitors in real-time for free! Engage with your customers and increase sales.",100000,3932872,92,821,"2025-08-25T09:22:00.000Z","5.3","5.4",[164,165,166,167,168],"free-live-chat","live-chat","live-help","live-support","wordpress-live-chat","https:\u002F\u002Fwww.3cx.com\u002Flive-chat\u002Ffree-wordpress-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-live-chat-support.10.0.17.zip",15,"2022-04-28 00:00:00",{"attackSurface":174,"codeSignals":234,"taintFlows":292,"riskAssessment":293,"analyzedAt":306},{"hooks":175,"ajaxHandlers":230,"restRoutes":231,"shortcodes":232,"cronEvents":233,"entryPointCount":29,"unprotectedCount":29},[176,181,185,189,195,200,203,206,210,215,218,223,226],{"type":177,"name":178,"callback":178,"file":179,"line":180},"action","init","c2c-plugin.php",122,{"type":177,"name":182,"callback":183,"file":179,"line":184},"admin_init","init_options",125,{"type":177,"name":186,"callback":187,"file":179,"line":188},"admin_head","add_c2c_admin_css",126,{"type":190,"name":191,"callback":192,"priority":193,"file":179,"line":194},"filter","plugin_row_meta","donate_link",10,189,{"type":190,"name":196,"callback":197,"priority":198,"file":179,"line":199},"http_request_args","disable_update_check",5,192,{"type":177,"name":201,"callback":201,"file":179,"line":202},"admin_menu",196,{"type":190,"name":204,"callback":204,"priority":193,"file":179,"line":205},"contextual_help",199,{"type":177,"name":207,"callback":208,"file":179,"line":209},"admin_enqueue_scripts","add_thickbox",201,{"type":177,"name":211,"callback":212,"file":213,"line":214},"wp_enqueue_scripts","enqueue_scripts","text-hover.php",288,{"type":177,"name":216,"callback":216,"file":213,"line":217},"admin_print_scripts",289,{"type":190,"name":219,"callback":220,"priority":221,"file":213,"line":222},"get_comment_text","text_hover_comment_text",11,291,{"type":190,"name":224,"callback":220,"priority":221,"file":213,"line":225},"get_comment_excerpt",292,{"type":177,"name":227,"callback":228,"file":213,"line":229},"plugins_loaded","get_instance",671,[],[],[],[],{"dangerousFunctions":235,"sqlUsage":240,"outputEscaping":242,"fileOperations":29,"externalRequests":29,"nonceChecks":29,"capabilityChecks":28,"bundledLibraries":291},[236],{"fn":237,"file":179,"line":238,"context":239},"unserialize",298,"$plugins = unserialize( $r['body']['plugins'] );",{"prepared":29,"raw":29,"locations":241},[],{"escaped":243,"rawEcho":244,"locations":245},14,22,[246,249,251,253,255,257,259,261,263,265,267,269,271,273,275,277,279,281,283,285,287,289],{"file":179,"line":247,"context":248},355,"raw output",{"file":179,"line":250,"context":248},358,{"file":179,"line":252,"context":248},644,{"file":179,"line":254,"context":248},1013,{"file":179,"line":256,"context":248},1015,{"file":179,"line":258,"context":248},1018,{"file":179,"line":260,"context":248},1022,{"file":179,"line":262,"context":248},1029,{"file":179,"line":264,"context":248},1033,{"file":179,"line":266,"context":248},1039,{"file":179,"line":268,"context":248},1042,{"file":179,"line":270,"context":248},1045,{"file":179,"line":272,"context":248},1059,{"file":179,"line":274,"context":248},1066,{"file":213,"line":276,"context":248},421,{"file":213,"line":278,"context":248},423,{"file":213,"line":280,"context":248},424,{"file":213,"line":282,"context":248},426,{"file":213,"line":284,"context":248},427,{"file":213,"line":286,"context":248},428,{"file":213,"line":288,"context":248},431,{"file":213,"line":290,"context":248},433,[],[],{"summary":294,"deductions":295},"The \"text-hover\" plugin v4.2 exhibits a mixed security posture. On the positive side, the plugin has a minimal attack surface with no discoverable AJAX handlers, REST API routes, shortcodes, or cron events.  Furthermore, all SQL queries utilize prepared statements, and there are no file operations or external HTTP requests, which are good security practices.  However, several concerns emerge from the static analysis. The presence of the `unserialize` function is a significant red flag, as it can be a vector for object injection vulnerabilities if the serialized data is not strictly controlled.  The output escaping rate is also a concern, with 61% of outputs not properly escaped, which could lead to Cross-Site Scripting (XSS) vulnerabilities.  The lack of nonce checks, despite the presence of a capability check, suggests potential for CSRF or unauthorized actions if an entry point were to be discovered.\n\nThe vulnerability history indicates a past medium-severity XSS vulnerability, which aligns with the output escaping issues found in the current analysis. The fact that this vulnerability is no longer unpatched is positive, but it highlights a recurring theme of input sanitization and output escaping weaknesses. The overall conclusion is that while the plugin has a small attack surface and uses secure practices for database interactions, the presence of `unserialize` and poor output escaping, coupled with a history of XSS, warrants careful consideration.  The plugin is not inherently insecure due to its limited entry points, but the identified code signals and past vulnerabilities suggest a need for more robust input validation and output encoding.",[296,298,301,303],{"reason":297,"points":193},"Dangerous function unserialize found",{"reason":299,"points":300},"Low output escaping rate",6,{"reason":302,"points":198},"No nonce checks implemented",{"reason":304,"points":305},"Medium severity vulnerability in history",8,"2026-03-16T18:40:16.000Z",{"wat":308,"direct":317},{"assetPaths":309,"generatorPatterns":312,"scriptPaths":313,"versionParams":314},[310,311],"\u002Fwp-content\u002Fplugins\u002Ftext-hover\u002Fcss\u002Ftext-hover.css","\u002Fwp-content\u002Fplugins\u002Ftext-hover\u002Fjs\u002Ftext-hover.js",[],[311],[315,316],"text-hover\u002Fcss\u002Ftext-hover.css?ver=","text-hover\u002Fjs\u002Ftext-hover.js?ver=",{"cssClasses":318,"htmlComments":320,"htmlAttributes":321,"restEndpoints":323,"jsGlobals":324,"shortcodeOutput":325},[319],"c2c_text_hover_tooltip",[],[322],"data-c2c-text-hover",[],[],[],{"error":327,"url":328,"statusCode":329,"statusMessage":330,"message":330},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Ftext-hover\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":244,"versions":332},[333,338,346,354,362,370,378,386,394,402,410,418,426,434,442,450,458,466,474,482,490,498],{"version":6,"download_url":26,"svn_tag_url":334,"released_at":39,"has_diff":50,"diff_files_changed":335,"diff_lines":39,"trac_diff_url":336,"vulnerabilities":337,"is_current":327},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F4.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F4.1&new_path=%2Ftext-hover%2Ftags%2F4.2",[],{"version":339,"download_url":340,"svn_tag_url":341,"released_at":39,"has_diff":50,"diff_files_changed":342,"diff_lines":39,"trac_diff_url":343,"vulnerabilities":344,"is_current":50},"4.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.4.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F4.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F4.0&new_path=%2Ftext-hover%2Ftags%2F4.1",[345],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":347,"download_url":348,"svn_tag_url":349,"released_at":39,"has_diff":50,"diff_files_changed":350,"diff_lines":39,"trac_diff_url":351,"vulnerabilities":352,"is_current":50},"4.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.4.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F4.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F3.9.1&new_path=%2Ftext-hover%2Ftags%2F4.0",[353],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":355,"download_url":356,"svn_tag_url":357,"released_at":39,"has_diff":50,"diff_files_changed":358,"diff_lines":39,"trac_diff_url":359,"vulnerabilities":360,"is_current":50},"3.9.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.3.9.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F3.9.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F3.9&new_path=%2Ftext-hover%2Ftags%2F3.9.1",[361],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":363,"download_url":364,"svn_tag_url":365,"released_at":39,"has_diff":50,"diff_files_changed":366,"diff_lines":39,"trac_diff_url":367,"vulnerabilities":368,"is_current":50},"3.9","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.3.9.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F3.9\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F3.8&new_path=%2Ftext-hover%2Ftags%2F3.9",[369],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":371,"download_url":372,"svn_tag_url":373,"released_at":39,"has_diff":50,"diff_files_changed":374,"diff_lines":39,"trac_diff_url":375,"vulnerabilities":376,"is_current":50},"3.8","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.3.8.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F3.8\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F3.7.1&new_path=%2Ftext-hover%2Ftags%2F3.8",[377],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":379,"download_url":380,"svn_tag_url":381,"released_at":39,"has_diff":50,"diff_files_changed":382,"diff_lines":39,"trac_diff_url":383,"vulnerabilities":384,"is_current":50},"3.7.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.3.7.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F3.7.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F3.6&new_path=%2Ftext-hover%2Ftags%2F3.7.1",[385],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":387,"download_url":388,"svn_tag_url":389,"released_at":39,"has_diff":50,"diff_files_changed":390,"diff_lines":39,"trac_diff_url":391,"vulnerabilities":392,"is_current":50},"3.6","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.3.6.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F3.6\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F3.5.1&new_path=%2Ftext-hover%2Ftags%2F3.6",[393],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":395,"download_url":396,"svn_tag_url":397,"released_at":39,"has_diff":50,"diff_files_changed":398,"diff_lines":39,"trac_diff_url":399,"vulnerabilities":400,"is_current":50},"3.5.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.3.5.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F3.5.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F3.5&new_path=%2Ftext-hover%2Ftags%2F3.5.1",[401],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":403,"download_url":404,"svn_tag_url":405,"released_at":39,"has_diff":50,"diff_files_changed":406,"diff_lines":39,"trac_diff_url":407,"vulnerabilities":408,"is_current":50},"3.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.3.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F3.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F3.2.2&new_path=%2Ftext-hover%2Ftags%2F3.5",[409],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":411,"download_url":412,"svn_tag_url":413,"released_at":39,"has_diff":50,"diff_files_changed":414,"diff_lines":39,"trac_diff_url":415,"vulnerabilities":416,"is_current":50},"3.2.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.3.2.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F3.2.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F3.2.1&new_path=%2Ftext-hover%2Ftags%2F3.2.2",[417],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":419,"download_url":420,"svn_tag_url":421,"released_at":39,"has_diff":50,"diff_files_changed":422,"diff_lines":39,"trac_diff_url":423,"vulnerabilities":424,"is_current":50},"3.2.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.3.2.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F3.2.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F3.2&new_path=%2Ftext-hover%2Ftags%2F3.2.1",[425],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":427,"download_url":428,"svn_tag_url":429,"released_at":39,"has_diff":50,"diff_files_changed":430,"diff_lines":39,"trac_diff_url":431,"vulnerabilities":432,"is_current":50},"3.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.3.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F3.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F3.1.1&new_path=%2Ftext-hover%2Ftags%2F3.2",[433],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":435,"download_url":436,"svn_tag_url":437,"released_at":39,"has_diff":50,"diff_files_changed":438,"diff_lines":39,"trac_diff_url":439,"vulnerabilities":440,"is_current":50},"3.1.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.3.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F3.1.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F3.1&new_path=%2Ftext-hover%2Ftags%2F3.1.1",[441],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":443,"download_url":444,"svn_tag_url":445,"released_at":39,"has_diff":50,"diff_files_changed":446,"diff_lines":39,"trac_diff_url":447,"vulnerabilities":448,"is_current":50},"3.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.3.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F3.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F3.0.3&new_path=%2Ftext-hover%2Ftags%2F3.1",[449],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":451,"download_url":452,"svn_tag_url":453,"released_at":39,"has_diff":50,"diff_files_changed":454,"diff_lines":39,"trac_diff_url":455,"vulnerabilities":456,"is_current":50},"3.0.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.3.0.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F3.0.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F3.0.2&new_path=%2Ftext-hover%2Ftags%2F3.0.3",[457],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":459,"download_url":460,"svn_tag_url":461,"released_at":39,"has_diff":50,"diff_files_changed":462,"diff_lines":39,"trac_diff_url":463,"vulnerabilities":464,"is_current":50},"3.0.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.3.0.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F3.0.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F3.0.1&new_path=%2Ftext-hover%2Ftags%2F3.0.2",[465],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":467,"download_url":468,"svn_tag_url":469,"released_at":39,"has_diff":50,"diff_files_changed":470,"diff_lines":39,"trac_diff_url":471,"vulnerabilities":472,"is_current":50},"3.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.3.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F3.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F3.0&new_path=%2Ftext-hover%2Ftags%2F3.0.1",[473],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":475,"download_url":476,"svn_tag_url":477,"released_at":39,"has_diff":50,"diff_files_changed":478,"diff_lines":39,"trac_diff_url":479,"vulnerabilities":480,"is_current":50},"3.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.3.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F3.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F2.2&new_path=%2Ftext-hover%2Ftags%2F3.0",[481],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":483,"download_url":484,"svn_tag_url":485,"released_at":39,"has_diff":50,"diff_files_changed":486,"diff_lines":39,"trac_diff_url":487,"vulnerabilities":488,"is_current":50},"2.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.2.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F2.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F2.0&new_path=%2Ftext-hover%2Ftags%2F2.2",[489],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":491,"download_url":492,"svn_tag_url":493,"released_at":39,"has_diff":50,"diff_files_changed":494,"diff_lines":39,"trac_diff_url":495,"vulnerabilities":496,"is_current":50},"2.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.2.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F2.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftext-hover%2Ftags%2F1.0&new_path=%2Ftext-hover%2Ftags%2F2.0",[497],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":499,"download_url":500,"svn_tag_url":501,"released_at":39,"has_diff":50,"diff_files_changed":502,"diff_lines":39,"trac_diff_url":39,"vulnerabilities":503,"is_current":50},"1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftext-hover\u002Ftags\u002F1.0\u002F",[],[504],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6}]