[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fothjvNRICwZVZDhbVU14i1Sm-vBWyOF_mk9XOTaGgwY":3},{"slug":4,"name":5,"version":6,"author":4,"author_profile":7,"description":8,"short_description":9,"active_installs":10,"downloaded":11,"rating":12,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":12,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":37,"analysis":136,"fingerprints":389},"transact","Transact","6.0.0","https:\u002F\u002Fprofiles.wordpress.org\u002Ftransact\u002F","\u003Cp>Transact.io brings A la Carte revenue model to digital media.  Charge for content within your posts.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The publisher sets the price, which can be as low as $0.01\u003C\u002Fli>\n\u003Cli>Transact.io enables publishers to regain control of distribution.\u003C\u002Fli>\n\u003Cli>Single post, you can set the price from $0.01 to $50.00\u003C\u002Fli>\n\u003Cli>Optionally you can enable Subscriptions,  allow for unlimited content for a fixed monthly or annual rate\u003C\u002Fli>\n\u003Cli>For small amounts, transact has lower fees than credit cards or paypal.  For transactions less than $1 the commission is 10%, Over $1 it is 2%.\u003C\u002Fli>\n\u003Cli>Optionally use Google Tag Manager for conversion metrics.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Read more about us at https:\u002F\u002Ftransact.io\u002F\u003C\u002Fp>\n\u003Cp>This plugin is open source.   Source code is available at https:\u002F\u002Fgitlab.com\u002Ftransact\u002Ftransact-wordpress\u003C\u002Fp>\n\u003Cp>If you need help setting up your account please do not hesitate to contact us:\u003Cbr \u002F>\nhttps:\u002F\u002Ftransact.io\u002Fabout\u002Fcontact\u003C\u002Fp>\n","Micropayments from $0.01.   Receive payments for digital content on WordPress.",10,4832,100,1,"","6.4.8","5.0","8.1",[19,20,21,22,23],"e-commerce","micropayments","payments","paywall","subscription","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftransact\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftransact.6.0.0.zip",0,null,"2026-03-15T10:48:56.248Z",[],{"slug":4,"display_name":31,"profile_url":7,"plugin_count":32,"total_installs":33,"avg_security_score":34,"avg_patch_time_days":33,"trust_score":35,"computed_at":36},"transactiumdev",3,30,97,92,"2026-04-04T15:54:53.301Z",[38,59,81,104,120],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":26,"downloaded":46,"rating":26,"num_ratings":26,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":50,"tags":51,"homepage":55,"download_link":56,"security_score":57,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":58},"premiuum-content-monetization","PREMIUUM Content Monetization","1.0.0","Premiuum","https:\u002F\u002Fprofiles.wordpress.org\u002Fpremiuum\u002F","\u003Cp>Premiuum™ is a simple, powerful content monetization service that adds seamless payments (“price tags” per link) across your website.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cp>✓ No Code\u003Cbr \u002F>\n✓ No PayPal\u002FStripe account required.\u003Cbr \u002F>\n✓ Available in 40+ languages.\u003Cbr \u002F>\n✓ Free to install and activate.\u003C\u002Fp>\n\u003Ch4>Easy and Fun to Set-Up\u003C\u002Fh4>\n\u003Cp>Simply point and click to set “price tag” values (0.01 – 0.99) “per link”, across your website.\u003C\u002Fp>\n\u003Ch4>Advanced Options\u003C\u002Fh4>\n\u003Cp>Set “time-based” price tag values, for example:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Premiering: 0.90 €\u002F$\u003C\u002Fli>\n\u003Cli>New: 0.30\u003C\u002Fli>\n\u003Cli>Standard 0.00 (free)\u003C\u002Fli>\n\u003Cli>Archives 0.60\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Premiuum for Video!\u003C\u002Fh4>\n\u003Cp>Premiuum also instantly transforms any YouTube, Vimeo and MP4 (video) to a “pay-per-view” experience.  Simply point and click to set “price tag” values (0.01 – 0.99) per video!\u003C\u002Fp>\n\u003Ch3>Visitors’ Experience\u003C\u002Fh3>\n\u003Cp>Visitors “top-up” with MasterCard \u002F VISA, to quickly and seamlessly pay price tag values across your website.\u003C\u002Fp>\n","Revenue-per-Link™ content monetization. PREMIUUM makes it easy to sell articles, music, videos, files & links via subscriptions and\u002For micropayments.",726,"2022-07-29T19:15:00.000Z","6.0.11","3.6","5.2",[20,52,53,22,54],"monetization","monetize","subscriptions","https:\u002F\u002Fwww.premiuum.net\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpremiuum-content-monetization.zip",85,"2026-03-15T15:16:48.613Z",{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":69,"num_ratings":70,"last_updated":71,"tested_up_to":72,"requires_at_least":49,"requires_php":73,"tags":74,"homepage":78,"download_link":79,"security_score":34,"vuln_count":32,"unpatched_count":26,"last_vuln_date":80,"fetched_at":58},"memberful-wp","Memberful – Membership Plugin","1.78.0","memberful","https:\u002F\u002Fprofiles.wordpress.org\u002Fmemberful\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fmemberful.com\u002F\" rel=\"nofollow ugc\">Memberful\u003C\u002Fa> is a best-in-class membership software and WordPress plugin used by some of the web’s biggest creators, publishers, and independent media companies.\u003C\u002Fp>\n\u003Cp>Generate reliable, recurring revenue by selling subscription plans while protecting access to your content. Memberful allows you to maintain full control and ownership of your audience, your brand, and your business.\u003C\u002Fp>\n\u003Ch3>Protect Content\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Protect members-only content and select which subscribers get access to gated areas of your website using server-side content protection.\u003C\u002Fli>\n\u003Cli>Restrict access to content based on membership level and protect specific posts or pages right from your WordPress edit screen.\u003C\u002Fli>\n\u003Cli>Manage access to media including blog articles, in-house newsletters, private podcasts, protected downloads, and more.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Integrations\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Built-in integrations with popular third-party services including Mailchimp, Discord, ConvertKit, Klaviyo, and Google Analytics.\u003C\u002Fli>\n\u003Cli>Add new custom applications or develop your own using the Memberful API.\u003C\u002Fli>\n\u003Cli>Utilize webhooks to trigger when important events happen on your site, such as when a member changes their payment\u002Ftax details.\u003C\u002Fli>\n\u003Cli>Integrate with popular ad providers to disable ads based on user subscription plans and user status.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Membership Management\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Automatically sync your Memberful membership data to WordPress or import a list of your existing members.\u003C\u002Fli>\n\u003Cli>Add multiple staff users and manage their account permissions.\u003C\u002Fli>\n\u003Cli>Utilize built-in analytics dashboards to monitor and grow your business.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Payment and Plans\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Easily accept payments through your Stripe account.\u003C\u002Fli>\n\u003Cli>Streamlined member checkout process with Single-Sign-On (SSO) and Apple & Google Pay integration.\u003C\u002Fli>\n\u003Cli>Create multiple membership plans and upgrades to allow tiered access to different areas of your website.\u003C\u002Fli>\n\u003Cli>Discounts, Referrals, and Retention bonuses to incentivize sign-ups and membership upgrades.\u003C\u002Fli>\n\u003Cli>Enable automatic tax calculations based on where you and your members are located.\u003C\u002Fli>\n\u003C\u002Ful>\n","Sell memberships and restrict access to content with WordPress and Memberful.",1000,203513,94,13,"2026-02-25T14:49:00.000Z","6.9.4","7.4",[75,22,76,77,54],"membership","recurring-payments","stripe","http:\u002F\u002Fgithub.com\u002Fmemberful\u002Fmemberful-wp","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmemberful-wp.1.78.0.zip","2025-09-22 00:00:00",{"slug":82,"name":83,"version":84,"author":85,"author_profile":86,"description":87,"short_description":88,"active_installs":89,"downloaded":90,"rating":91,"num_ratings":92,"last_updated":93,"tested_up_to":94,"requires_at_least":95,"requires_php":73,"tags":96,"homepage":100,"download_link":101,"security_score":102,"vuln_count":92,"unpatched_count":26,"last_vuln_date":103,"fetched_at":58},"paid-membership","MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet","3.2.5","videowhisper","https:\u002F\u002Fprofiles.wordpress.org\u002Fvideowhisper\u002F","\u003Cp>Revolutionize how you monetize content with the MicroPayments – Fans Paysite plugin. This versatile solution empowers creators to sell subscriptions, manage digital assets, and operate seamless transactions via an integrated tokens\u002Fcredits wallet system. Supports all major payment gateways with WooCommerce token packages, ensuring a frictionless payment experience. Perfect marketplace services for authors, educators, and digital artists looking to maximize their earnings through paid memberships and content sales.\u003C\u002Fp>\n\u003Ch4>Benefits\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Flexible Monetization: Offer creator subscriptions, pay-per-view content, and memberships tailored to various creator needs.\u003C\u002Fli>\n\u003Cli>Direct Content Sales: Creators can directly sell access to posts, videos, downloads, live video streams, enhancing revenue opportunities.\u003C\u002Fli>\n\u003Cli>Versatile Payment Integration: Supports all major gateways with WooCommerce, including PayPal, Stripe, CCBill for broad accessibility.\u003C\u002Fli>\n\u003Cli>Reduced Transaction Fees: Streamline finances with microtransactions that cut down on costs.\u003C\u002Fli>\n\u003Cli>Dynamic Wallet System: Enables secure, in-site transactions with internal credits and support for other popular wallets like TeraWallet and MyCred.\u003C\u002Fli>\n\u003Cli>Enhanced User Engagement: Features like crowdfunding and donations add interactive elements to content monetization.\u003C\u002Fli>\n\u003Cli>Comprehensive Admin Control: Manage access, monitor transactions, and customize content offerings with ease.\u003C\u002Fli>\n\u003Cli>BuddyPress Integration: Enhances community features, allowing for real-time updates and user interactions within the platform.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>3 Wallet Tokens\u002FCredits supported: internal, TeraWallet (for WooCommerce), MyCred \u003C\u002Fli>\n\u003Cli>Tokens for micropayments can be purchased using multiple payment gateways like Paypal, Stripe, Skrill (Moneybookers) NETbilling, CCBill, BitPay (bitcoin) or earned with site activities, depending on setup.\u003C\u002Fli>\n\u003Cli>Authors\u002Fcreators can sell subscriptions to their content: users can subscribe to authors for a recurring fee (per author) for access to their content\u003C\u002Fli>\n\u003Cli>Webmaster can manage access to content (including pages, posts, customizable post types) by membership\u002Frole.\u003C\u002Fli>\n\u003Cli>Authors\u002Fwebmasters cans sell access to digital content (posts, custom posts as videos, pictures, documents, chat rooms)\u003C\u002Fli>\n\u003Cli>Webmaster can Sell Site Membership: Users can obtain site roles (membership) by purchase or subscription.\u003C\u002Fli>\n\u003Cli>Edit content page in frontend for authors to be able to manage individual post items (integrates automatically with VideoShareVOD videos, Picture Gallery pictures, PaidVideochat webcam rooms).\u003C\u002Fli>\n\u003Cli>3 paid content options: internal handler, WooCommerce product, MyCred Sell Content \u003C\u002Fli>\n\u003Cli>Comment restrictions: also hide comments with paid content, limit comments per user (per post) except author, coauthors\u003C\u002Fli>\n\u003Cli>WooCommerce content product: setup WC products that need to be purchased for access to post contents (for using with cart)\u003C\u002Fli>\n\u003Cli>BuddyPress \u002F BuddyBoss activity updates for new products, subscriptions, donations\u003C\u002Fli>\n\u003Cli>My Content purchase list shortcode and page, showing all purchased products; products include button to access content\u003C\u002Fli>\n\u003Cli>Multi wallet support (MyCred + TeraWallet WooCommerce)\u003C\u002Fli>\n\u003Cli>Custom token packages as WooCommerce products\u003C\u002Fli>\n\u003Cli>Wallet user page with shortcode [videowhisper_my_wallet]\u003C\u002Fli>\n\u003Cli>Membership upgrade page with shortcode [videowhisper_membership_buy]\u003C\u002Fli>\n\u003Cli>Downloads management: Digital media downloads\u003C\u002Fli>\n\u003Cli>Donations\u002Fcrowdfunding\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Author Subscriptions\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Authors can setup multiple subscription tiers (limited by webmaster settings), with custom label, description, duration (monthly, yearly, one time payment)\u003C\u002Fli>\n\u003Cli>Authors can assign their content to subscription tiers\u003C\u002Fli>\n\u003Cli>Clients can subscribe to author subscriptions, for access to their content\u003C\u002Fli>\n\u003Cli>Optionally, each item accessible by subscription can also be provided for a price per item, for users that don’t want to subscribe\u003C\u002Fli>\n\u003Cli>Customizable author earning ratio for subscription earnings\u003C\u002Fli>\n\u003Cli>BuddyPress\u002FBuddyBoss activity updates when users subscribe to authors\u003C\u002Fli>\n\u003Cli>BuddyPress\u002FBuddyBoss user tab with available subscriptions\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ffanspaysite.com\u002F\" title=\"Fans Paysite Solution\" rel=\"nofollow ugc\">Fans Paysite\u003C\u002Fa> – Turnkey Fans Monetization Business Platform\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Donations, Goals, CrowdFunding\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>enable donations for any content page\u003C\u002Fli>\n\u003Cli>configure donation goals and\u002For crowdfunding\u003C\u002Fli>\n\u003Cli>goals show progress bar and goal details on content page\u003C\u002Fli>\n\u003Cli>crowfunding shows funders and their contributions including percents\u003C\u002Fli>\n\u003Cli>donation button with wallet\u003C\u002Fli>\n\u003Cli>donation dialog with customizable slider, AJAX (user does not leave content page to make donation)\u003C\u002Fli>\n\u003Cli>customizable author earning ratio for donation\u002Fcrowdfunding earnings\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Paid Content: Posts as Digital Products\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Content page aggregates the digital content (post types) available for sale.\u003C\u002Fli>\n\u003Cli>Content types is configurable from MicroPayments settings, as custom posts types available for sale: videos, pictures, downloads, webcam rooms.\u003C\u002Fli>\n\u003Cli>My Assets page enables providers to manage their content and set prices.\u003C\u002Fli>\n\u003Cli>My Content page enables clients to access content they previously purchases.\u003C\u002Fli>\n\u003Cli>Content Upload page enables providers to upload videos, pictures and documents from a single form (integrates Downloads, Video Share VOD](https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fvideo-share-vod\u002F  “Video Share \u002F Video On Demand Script”), \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpicture-gallery\u002F\" title=\"Picture Gallery – Frontend Image Uploads, AJAX Photo List\" rel=\"ugc\">Picture Gallery\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>Content (custom posts) configured with price, can be sold with the WooCommerce integration as products and clients have to purchase the associated product to get access to that content.\u003C\u002Fli>\n\u003Cli>Custom activity updates to BuddyPress\u002FBuddyBoss\u002FPeepSo with multiple asset mentions, including thumbnails\u003C\u002Fli>\n\u003Cli>BuddyPress\u002FBuddyBoss user tab with author content\u003C\u002Fli>\n\u003Cli>Customizable author earning ratio for content sale earnings\u003C\u002Fli>\n\u003Cli>Moderator roles can access content without paying\u003C\u002Fli>\n\u003Cli>Also hides comments with paid post contents (configurable)\u003C\u002Fli>\n\u003Cli>Coauthors: Asset owner can add coauthors to their assets (posts) and share earnings with them (configurable), access to content\u002Fcomments\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Downloads: Downloadable File Management\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Enable file uploads from backend and frontend (with publisher access list)\u003C\u002Fli>\n\u003Cli>Restrict access by membership roles\u003C\u002Fli>\n\u003Cli>Sell downloads per item (as WooCommerce products or MyCred Sell Content addon)\u003C\u002Fli>\n\u003Cli>Restrict allowed extensions (server side)\u003C\u002Fli>\n\u003Cli>Obfuscated file name on server to prevent naming exploits\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Recommended for use with these solutions\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpaidvideochat.com\u002F\" title=\"Paid VideoChat Script\" rel=\"nofollow ugc\">Paid VideoChat\u003C\u002Fa> – Pay Per Minute Videochat site solution.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fvideo-share-vod\u002F\" title=\"Video Share \u002F Video On Demand Script\" rel=\"ugc\">Video Share VOD\u003C\u002Fa> – Video Share \u002F Video On Demand site solution.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbroadcastlivevideo.com\u002F\" title=\"Broadcast Live Video Camera Script\" rel=\"nofollow ugc\">Broadcast Live Video\u003C\u002Fa> – Broadcast Live Video Channels site solution.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpicture-gallery\u002F\" title=\"Picture Gallery – Frontend Image Uploads, AJAX Photo List\" rel=\"ugc\">Picture Gallery\u003C\u002Fa> – Picture Gallery – Frontend Image Uploads, AJAX Photo List.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Benefits of using tokens include:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>less transaction fees (clients fund their account once for multiple purchases)\u003C\u002Fli>\n\u003Cli>cost control (clients can have added peace of mind and sensation of control for the fixed amount they pay),\u003C\u002Fli>\n\u003Cli>payment in advance (clients prepay for future services) ,\u003C\u002Fli>\n\u003Cli>increased sales (once the have the tokens they will put them to use faster than real money)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you find this plugin idea useful or interesting, leave a review to help us drive more resources into further development and improvements.\u003C\u002Fp>\n\u003Ch3>Demo\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>See WordPress integration (after login):\u003Cbr \u002F>\nhttps:\u002F\u002Fvideochat-scripts.com\u002Fbuy-membership\u002F\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Extra\u003C\u002Fh3>\n\u003Cp>More information, the latest updates, other plugins and non-WordPress editions can be found at https:\u002F\u002Fvideowhisper.com\u002F .\u003C\u002Fp>\n","Monetize digital content with creator subscriptions, micro-payments, and a tokens wallet system.",20,29497,84,5,"2025-09-09T16:21:00.000Z","6.8.5","5.1",[97,20,54,98,99],"creators","tokens","wallet","https:\u002F\u002Ffanspaysite.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpaid-membership.zip",96,"2025-06-27 19:13:01",{"slug":105,"name":106,"version":107,"author":105,"author_profile":108,"description":109,"short_description":110,"active_installs":89,"downloaded":111,"rating":26,"num_ratings":26,"last_updated":112,"tested_up_to":113,"requires_at_least":114,"requires_php":115,"tags":116,"homepage":118,"download_link":119,"security_score":35,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":58},"wallkit","Wallkit Subscriptions & Paywall Plugin for WordPress","3.4.4","https:\u002F\u002Fprofiles.wordpress.org\u002Fwallkit\u002F","\u003Cp>Wallkit is the most progressive paid-content system out in the market today. This versatile technological platform handles content access control, billing and administrative functions for membership-based content publishers.\u003C\u002Fp>\n\u003Cp>Wallkit software integrates seamlessly across WordPress users’ websites and your other platforms like Hubspot, Mailchimp and Stripe.\u003C\u002Fp>\n\u003Cp>This easy-to-install and lightning-fast system connects with Wallkit server to bring content protection, subscriber management, sign up\u002Fsign in, member-CRM plus access to analytics features.\u003C\u002Fp>\n\u003Cp>It’s free to use. Simply sign up for a Wallkit account once you’ve installed the Plugin at \u003Ca href=\"https:\u002F\u002Fwallkit.net\" rel=\"nofollow ugc\">www.wallkit.net\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Service is subject to Wallkit \u003Ca href=\"https:\u002F\u002Fdocs.google.com\u002Fdocument\u002Fd\u002F19PTSlPcUSZKqTnJlolzOoaIH-PMsNElDO9_aAjaqQ6U\u002Fedit?usp=sharing\" rel=\"nofollow ugc\">Terms and Conditions\u003C\u002Fa>.\u003C\u002Fp>\n","A Plug & Play paid-content system to manage subscribers, gather fees and drive additional content sales.",4293,"2025-03-26T13:29:00.000Z","6.6.5","4.0","5.6",[117,82,22,76,54],"memberships","https:\u002F\u002Fwallkit.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwallkit.zip",{"slug":121,"name":122,"version":41,"author":123,"author_profile":124,"description":125,"short_description":126,"active_installs":10,"downloaded":127,"rating":26,"num_ratings":26,"last_updated":128,"tested_up_to":129,"requires_at_least":130,"requires_php":115,"tags":131,"homepage":134,"download_link":135,"security_score":57,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":58},"fluid","Fluid","Paul Bearne","https:\u002F\u002Fprofiles.wordpress.org\u002Fpbearne\u002F","\u003Cp>\u003Ciframe loading=\"lazy\" title=\"Publishers Expand Your Monetization Reach with Fluid.\" src=\"https:\u002F\u002Fplayer.vimeo.com\u002Fvideo\u002F283521499?dnt=1&app_id=122963\" width=\"750\" height=\"422\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture; clipboard-write\">\u003C\u002Fiframe>\u003C\u002Fp>\n\u003Ch3>Expand Your Monetization Reach\u003C\u002Fh3>\n\u003Cp>Capture revenues beyond advertising and traditional paywalls. Fluid is a new revenue partner for publishers. Fluid enables you to create new direct revenues from your readers and audience.\u003C\u002Fp>\n\u003Cp>With Fluid readers can pay to access a single article, video and more. You decide. Fluid is completely turnkey.\u003C\u002Fp>\n\u003Cp>Existing Fluid users (i.e., consumers) can pay to access content on your website with just a couple clicks. Simple, frictionless.\u003C\u002Fp>\n\u003Ch3>Publisher Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Set your price-per-article (or single piece of content)\u003C\u002Fli>\n\u003Cli>Enable Fluid Gateway across your entire website or only when an ad-blocker is detected\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Join Our Exclusive Launch Partner Program\u003C\u002Fh3>\n\u003Cp>Gain early access, get preferred terms, white glove service and more. We are inviting a few select partners to participate in our exclusive Launch Partner Program. For more information and to sign-up go to \u003Ca href=\"https:\u002F\u002Fwww.fluid.us\u002Fpublishers\u002Fpartners-program\" rel=\"nofollow ugc\">Fluid Launch partner Program\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Set-Up Costs\u003C\u002Fh3>\n\u003Cp>Free for publishers. No cost to you, we will cut you the checks.\u003C\u002Fp>\n\u003Ch3>Why Fluid?\u003C\u002Fh3>\n\u003Cp>Current paywalls and subscriptions don’t (necessarily) scale for the majority of publishers. However, publishers need a pathway to monetize consumers directly. In fact, when we surveyed consumers most are willing to pay something to access a single piece of content if given the means.\u003C\u002Fp>\n\u003Ch3>Learn More About Fluid\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.fluid.us\u002Fpublishers\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.fluid.us\u002Fpublishers\u003C\u002Fa>\u003C\u002Fp>\n","WordPress Integration for Fluid.us mircopayment Fluid is a new revenue partner for publishers. Capture revenues beyond advertising and traditional pay …",1423,"2018-08-07T12:52:00.000Z","4.9.29","4.4",[132,133,20,21,22],"accept-payments","micro-payments","https:\u002F\u002Ffluid.us","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffluid.1.0.0.zip",{"attackSurface":137,"codeSignals":298,"taintFlows":327,"riskAssessment":375,"analyzedAt":388},{"hooks":138,"ajaxHandlers":238,"restRoutes":239,"shortcodes":290,"cronEvents":295,"entryPointCount":296,"unprotectedCount":297},[139,145,149,152,157,161,165,169,173,178,182,184,188,192,196,200,203,207,211,214,217,220,224,226,229,233,236],{"type":140,"name":141,"callback":142,"file":143,"line":144},"action","admin_menu","add_transact_menu","admin\\controllers\\transact-admin-settings-menu.php",24,{"type":140,"name":146,"callback":147,"file":143,"line":148},"admin_init","register_transact_settings",25,{"type":140,"name":146,"callback":150,"file":143,"line":151},"hook_post_settings_and_validates",26,{"type":140,"name":153,"callback":154,"file":155,"line":156},"add_meta_boxes","add_transact_metadata_post","admin\\controllers\\transact-admin-settings-post.php",41,{"type":140,"name":158,"callback":159,"file":155,"line":160},"save_post","save_meta_box",42,{"type":140,"name":162,"callback":163,"file":155,"line":164},"admin_head","set_transact_style",60,{"type":140,"name":166,"callback":167,"file":155,"line":168},"enqueue_block_editor_assets","set_transact_premium_block",61,{"type":140,"name":170,"callback":171,"file":172,"line":57},"rest_api_init","closure","frontend\\controllers\\transact-single-post.php",{"type":174,"name":175,"callback":176,"file":172,"line":177},"filter","auth_cookie_expiration","get_cookie_expire_callback",466,{"type":174,"name":179,"callback":180,"file":172,"line":181},"comments_template","comments_slot",650,{"type":174,"name":175,"callback":176,"file":172,"line":183},707,{"type":174,"name":185,"callback":186,"file":172,"line":187},"the_content","filter_pre_get_content",748,{"type":174,"name":189,"callback":190,"file":172,"line":191},"render_block","filter_pre_render_block",749,{"type":140,"name":193,"callback":194,"file":172,"line":195},"template_redirect","register_purchase",753,{"type":140,"name":197,"callback":198,"file":172,"line":199},"wp_enqueue_scripts","load_js_xsact_library",754,{"type":140,"name":197,"callback":201,"file":172,"line":202},"load_css_xsact_library",755,{"type":140,"name":204,"callback":205,"file":172,"line":206},"wp_body_open","add_gtm_body_include",757,{"type":140,"name":208,"callback":209,"file":172,"line":210},"wp_head","add_gtm_head_include",758,{"type":140,"name":208,"callback":212,"file":172,"line":213},"add_paywall_meta",759,{"type":140,"name":208,"callback":215,"file":172,"line":216},"add_wp_nonce",760,{"type":140,"name":193,"callback":218,"file":172,"line":219},"oauth_login_validate",763,{"type":140,"name":221,"callback":222,"file":172,"line":223},"after_setup_theme","init_search_crawler",780,{"type":174,"name":179,"callback":180,"file":172,"line":225},788,{"type":174,"name":227,"callback":227,"priority":10,"file":172,"line":228},"comments_open",790,{"type":174,"name":230,"callback":231,"priority":10,"file":172,"line":232},"block_categories","transact_block_categories",795,{"type":174,"name":234,"callback":231,"priority":10,"file":172,"line":235},"block_categories_all",797,{"type":174,"name":175,"callback":176,"file":172,"line":237},897,[],[240,248,252,257,261,265,270,274,280,285],{"namespace":241,"route":242,"methods":243,"callback":245,"permissionCallback":246,"file":172,"line":247},"transact\u002Fv1","\u002Ftoken\u002F(?P\u003Cpost_id>\\d+)",[244],"GET","request_token_rest","__return_true",86,{"namespace":241,"route":249,"methods":250,"callback":245,"permissionCallback":246,"file":172,"line":251},"\u002Ftoken\u002F(?P\u003Cpost_id>\\d+)\u002F(?P\u003Caffiliate_id>\\d+)",[244],101,{"namespace":241,"route":253,"methods":254,"callback":255,"permissionCallback":246,"file":172,"line":256},"\u002Foauth\u002Fstate",[244],"get_oauth_state",121,{"namespace":241,"route":258,"methods":259,"callback":245,"permissionCallback":246,"file":172,"line":260},"\u002Fsubscription\u002F(?P\u003Cpost_id>\\d+)",[244],133,{"namespace":241,"route":262,"methods":263,"callback":245,"permissionCallback":246,"file":172,"line":264},"\u002Fsubscription\u002F(?P\u003Cpost_id>\\d+)\u002F(?P\u003Caffiliate_id>\\d+)",[244],148,{"namespace":241,"route":266,"methods":267,"callback":268,"permissionCallback":246,"file":172,"line":269},"\u002Fdonation\u002F(?P\u003Cpost_id>\\d+)\u002F(?P\u003Camount>\\d+)",[244],"request_donation_token_rest",168,{"namespace":241,"route":271,"methods":272,"callback":268,"permissionCallback":246,"file":172,"line":273},"\u002Fdonation\u002F(?P\u003Cpost_id>\\d+)\u002F(?P\u003Camount>\\d+)\u002F(?P\u003Caffiliate_id>\\d+)",[244],185,{"namespace":241,"route":275,"methods":276,"callback":278,"permissionCallback":246,"file":172,"line":279},"\u002Fverify",[277],"POST","purchase_verify_rest",207,{"namespace":241,"route":281,"methods":282,"callback":283,"permissionCallback":171,"file":172,"line":284},"\u002Fpremium\u002F(?P\u003Cpost_id>\\d+)",[244],"get_premium_content_rest",220,{"namespace":241,"route":286,"methods":287,"callback":288,"permissionCallback":171,"file":172,"line":289},"\u002Fcomments_template\u002F(?P\u003Cpost_id>\\d+)",[244],"get_comment_template_rest",234,[291],{"tag":292,"callback":293,"file":155,"line":294},"transact_button","transact_shortcode",43,[],11,8,{"dangerousFunctions":299,"sqlUsage":300,"outputEscaping":303,"fileOperations":26,"externalRequests":92,"nonceChecks":32,"capabilityChecks":32,"bundledLibraries":326},[],{"prepared":301,"raw":26,"locations":302},6,[],{"escaped":304,"rawEcho":305,"locations":306},199,9,[307,311,313,315,317,319,321,323,325],{"file":308,"line":309,"context":310},"vendors\\transact-io-php\\demo\\demo-api.php",125,"raw output",{"file":308,"line":312,"context":310},142,{"file":308,"line":314,"context":310},150,{"file":308,"line":316,"context":310},154,{"file":308,"line":318,"context":310},187,{"file":308,"line":320,"context":310},194,{"file":308,"line":322,"context":310},200,{"file":308,"line":324,"context":310},209,{"file":308,"line":284,"context":310},[],[328,352,365],{"entryPoint":329,"graph":330,"unsanitizedCount":13,"severity":351},"\u003Ctransact-admin-settings-menu> (admin\\controllers\\transact-admin-settings-menu.php:0)",{"nodes":331,"edges":347},[332,336,340],{"id":333,"type":334,"label":335,"file":143,"line":237},"n0","source","$_POST",{"id":337,"type":338,"label":339,"file":143,"line":237},"n1","transform","→ subscriptionValidates()",{"id":341,"type":342,"label":343,"file":344,"line":345,"wp_function":346},"n2","sink","wp_remote_get() [SSRF]","admin\\controllers\\transact-api.php",69,"wp_remote_get",[348,350],{"from":333,"to":337,"sanitized":349},false,{"from":337,"to":341,"sanitized":349},"medium",{"entryPoint":353,"graph":354,"unsanitizedCount":13,"severity":351},"register_purchase (frontend\\controllers\\transact-single-post.php:664)",{"nodes":355,"edges":363},[356,359],{"id":333,"type":334,"label":357,"file":172,"line":358},"$_SERVER",727,{"id":337,"type":342,"label":360,"file":172,"line":361,"wp_function":362},"wp_redirect() [Open Redirect]",735,"wp_redirect",[364],{"from":333,"to":337,"sanitized":349},{"entryPoint":366,"graph":367,"unsanitizedCount":26,"severity":374},"\u003Ctransact-single-post> (frontend\\controllers\\transact-single-post.php:0)",{"nodes":368,"edges":371},[369,370],{"id":333,"type":334,"label":357,"file":172,"line":358},{"id":337,"type":342,"label":360,"file":172,"line":361,"wp_function":362},[372],{"from":333,"to":337,"sanitized":373},true,"low",{"summary":376,"deductions":377},"The \"transact\" v6.0.0 plugin exhibits a mixed security posture. On the positive side, it demonstrates strong practices regarding SQL queries, utilizing prepared statements exclusively, and a high percentage of properly escaped output, which are foundational for secure WordPress development. The absence of dangerous functions, file operations, and bundled libraries also reduces potential attack vectors. \n\nHowever, significant concerns arise from the attack surface analysis. A substantial number of REST API routes (8 out of 10) lack permission callbacks, making them directly accessible without proper authentication or authorization. Furthermore, the taint analysis reveals flows with unsanitized paths, indicating a potential for improper data handling that could lead to security issues, even if no critical or high severity vulnerabilities were immediately identified in this specific analysis. The limited number of nonce and capability checks further exacerbates the risk associated with these unprotected entry points. \n\nThe plugin's vulnerability history is clean, with no recorded CVEs. This absence of past security incidents is a positive sign, suggesting a generally well-maintained codebase or limited exposure. However, it does not negate the risks identified in the current static and taint analysis. The overall conclusion is that while the plugin has strengths in core secure coding practices like prepared statements and output escaping, the significant number of unprotected REST API endpoints and unsanitized paths represent a considerable risk that requires immediate attention and remediation.",[378,380,382,384,386],{"reason":379,"points":10},"REST API routes without permission callbacks",{"reason":381,"points":297},"Taint flows with unsanitized paths",{"reason":383,"points":92},"AJAX handlers without auth checks",{"reason":385,"points":32},"Limited nonce checks",{"reason":387,"points":32},"Limited capability checks","2026-03-16T23:17:37.446Z",{"wat":390,"direct":401},{"assetPaths":391,"generatorPatterns":395,"scriptPaths":396,"versionParams":397},[392,393,394],"\u002Fwp-content\u002Fplugins\u002Ftransact\u002Ffrontend\u002Fassets\u002Fcss\u002Ftransact-frontend.css","\u002Fwp-content\u002Fplugins\u002Ftransact\u002Ffrontend\u002Fassets\u002Fjs\u002Ftransact-frontend.js","\u002Fwp-content\u002Fplugins\u002Ftransact\u002Fadmin\u002Fassets\u002Fcss\u002Ftransact-admin.css",[],[393],[398,399,400],"transact\u002Ffrontend\u002Fassets\u002Fcss\u002Ftransact-frontend.css?ver=","transact\u002Ffrontend\u002Fassets\u002Fjs\u002Ftransact-frontend.js?ver=","transact\u002Fadmin\u002Fassets\u002Fcss\u002Ftransact-admin.css?ver=",{"cssClasses":402,"htmlComments":405,"htmlAttributes":407,"restEndpoints":411,"jsGlobals":414,"shortcodeOutput":416},[403,404],"transact-payment-button","transact-donation-button",[406],"\u003C!-- transact.io -->",[408,409,410],"data-transact-id","data-transact-price","data-transact-post-id",[412,413],"\u002Fwp-json\u002Ftransact\u002Fv1\u002Fpayment-intent","\u002Fwp-json\u002Ftransact\u002Fv1\u002Fvalidate-payment",[415],"transact_frontend_params",[417],"[transact_button]"]