[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUkg-96WFfXaJkIWwrnxWP5lxPeMA_o8j54ZfMcr3_40":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":33,"analysis":136,"fingerprints":261},"truconversion-connect","TruConversion Connect","1.2.9","TruConversion a Digital Marketer development company","https:\u002F\u002Fprofiles.wordpress.org\u002Ftruconversion\u002F","\u003Cul>\n\u003Cli>\n\u003Cp>TruConversion Connect is a seamless integration plugin between your Worspress site and your TruConversion account. TruConversion monitors vistor interaction with your web pages, posts by monitoring clicks, scrolls, form use, and the user journey. With this information you’ll be able to make better design decisions by identifying where your visitor is having trouble (or is downright frustrated).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Here’s an example of what TruConversion can do for you. Say you have an amazing product but nobody is adding it to their cart. You’ve tested your price point, new colors, better headlines, new photos…well you’ve tried just about everything and nothing has helped. Want to know why? You’re testing what YOU think is wrong and not what the visitor thinks is confusing. With TruConversion you can monitor the page to see how your user interacts. In a heatmap report (this tells you where they scroll and click), you notice that your main CTA is in an area where only 25% of your audience scrolls to. Well you know the old adage “You can’t get what you don’t ask for?” Well, that’s your page!\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>So how do you use this information? Find an area that gets significantly more user attention and move your messaging there. It’s a simple solution you would have overlooked had you not taken the time to see how visitors use your site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>It’s TruConversion’s mission is to help you understand the WHY behind visitor behvior and use that knowledge to boost sales and leads.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fapp.truconversion.com\u002Fsignup\" rel=\"nofollow ugc\">Signup\u003C\u002Fa> here for your TruConversion trial account.\u003C\u002Fp>\n\u003Cp>For more information visit:\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fhelp.truconversion.com\u002F\" rel=\"nofollow ugc\">TruConversion\u003C\u002Fa>\u003C\u002Fp>\n","Enables truconversion tracking code on all pages.",300,6964,0,"2025-08-07T18:45:00.000Z","6.5.8","2.7","",[19,20,21],"analytics","javascript","truconversion","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftruconversion-connect\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftruconversion-connect.1.2.9.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":21,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":11,"avg_security_score":24,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},1,30,94,"2026-04-04T07:14:42.561Z",[34,56,81,103,118],{"slug":35,"name":36,"version":37,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":44,"num_ratings":45,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":54,"download_link":55,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"web-worker-offloading","Web Worker Offloading","0.2.1","WordPress Performance Team","https:\u002F\u002Fprofiles.wordpress.org\u002Fperformanceteam\u002F","\u003Cp>This plugin offloads JavaScript execution to a Web Worker, improving performance by freeing up the main thread. This should translate into improved \u003Ca href=\"https:\u002F\u002Fweb.dev\u002Farticles\u002Finp\" rel=\"nofollow ugc\">Interaction to Next Paint\u003C\u002Fa> (INP) scores.\u003C\u002Fp>\n\u003Cp>⚠ \u003Cem>This functionality is experimental, and \u003Cstrong>it is now \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FWordPress\u002Fperformance\u002Fissues\u002F2284\" rel=\"nofollow ugc\">intended to be sunset\u003C\u002Fa>\u003C\u002Fstrong>.\u003C\u002Fem> ⚠\u003C\u002Fp>\n\u003Cp>In order to opt in a script to be loaded in a worker, simply add \u003Ccode>worker\u003C\u002Fcode> script data to a registered script. For example,\u003Cbr \u002F>\nif you have a script registered with the handle of \u003Ccode>foo\u003C\u002Fcode>, opt-in to offload it to a web worker by doing:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>wp_script_add_data( 'foo', 'worker', true );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Unlike with the script loading strategies (async\u002Fdefer), any inline before\u002Fafter scripts associated with the worker-offloaded registered script will also be offloaded to the worker, whereas with the script strategies an inline after script would block the script from being delayed.\u003C\u002Fp>\n\u003Cp>Otherwise, the plugin currently ships with built-in integrations to offload Google Analytics to a web worker for the following plugin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fseo-by-rank-math\u002F\" rel=\"ugc\">Rank Math SEO\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgoogle-site-kit\u002F\" rel=\"ugc\">Site Kit by Google\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoocommerce\u002F\" rel=\"ugc\">WooCommerce\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Please monitor your analytics once activating to ensure all the expected events are being logged. At the same time, monitor your INP scores to check for improvement.\u003C\u002Fp>\n\u003Cp>This plugin relies on the \u003Ca href=\"https:\u002F\u002Fpartytown.builder.io\u002F\" rel=\"nofollow ugc\">Partytown 🎉\u003C\u002Fa> library by Builder.io, released under the MIT license. This library is in beta and there are quite a few \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FBuilderIO\u002Fpartytown\u002Fissues?q=is%3Aopen+is%3Aissue+label%3Abug\" rel=\"nofollow ugc\">open bugs\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>The \u003Ca href=\"https:\u002F\u002Fpartytown.builder.io\u002Fconfiguration\" rel=\"nofollow ugc\">Partytown configuration\u003C\u002Fa> can be modified via the \u003Ccode>plwwo_configuration\u003C\u002Fcode> filter. For example:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\nadd_filter( 'plwwo_configuration', function ( $config ) {\n    $config['mainWindowAccessors'][] = 'wp'; \u002F\u002F Make the wp global available in the worker (e.g. wp.i18n and wp.hooks).\n    return $config;\n} );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>However, not all of the configuration options can be serialized to JSON in this way, for example the \u003Ccode>resolveUrl\u003C\u002Fcode> configuration is a function. To specify this, you can add an inline script as follows.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\nadd_action(\n    'wp_enqueue_scripts',\n    function () {\n        wp_add_inline_script(\n            'web-worker-offloading',\n            \u003C\u003C\u003CJS\n            window.partytown = {\n                ...(window.partytown || {}),\n                resolveUrl: (url, location, type) => {\n                    if (type === 'script') {\n                        const proxyUrl = new URL('https:\u002F\u002Fmy-reverse-proxy.example.com\u002F');\n                        proxyUrl.searchParams.append('url', url.href);\n                        return proxyUrl;\n                    }\n                    return url;\n                },\n            };\n            JS,\n            'before'\n        );\n    }\n);\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>There are also many configuration options which are not documented, so refer to the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FBuilderIO\u002Fpartytown\u002Fblob\u002Fb292a14047a0c12ca05ba97df1833935d42fdb66\u002Fsrc\u002Flib\u002Ftypes.ts#L393-L548\" rel=\"nofollow ugc\">TypeScript definitions\u003C\u002Fa>.\u003C\u002Fp>\n","Offloads select JavaScript execution to a Web Worker to reduce work on the main thread and improve the Interaction to Next Paint (INP) metric.",20000,75473,60,3,"2026-02-27T20:19:00.000Z","7.0","6.6","7.2",[19,20,51,52,53],"partytown","performance","web-worker","https:\u002F\u002Fgithub.com\u002FWordPress\u002Fperformance\u002Fissues\u002F176","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fweb-worker-offloading.0.2.1.zip",{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":64,"downloaded":65,"rating":24,"num_ratings":66,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":17,"tags":70,"homepage":76,"download_link":77,"security_score":78,"vuln_count":79,"unpatched_count":13,"last_vuln_date":80,"fetched_at":26},"insert-headers-and-footers-script","Insert Headers and Footers Code – HT Script","1.1.8","HT Plugins","https:\u002F\u002Fprofiles.wordpress.org\u002Fhtplugins\u002F","\u003Cp>Insert Headers and Footers Code allows you to insert Google Analytics, Facebook Pixel, custom CSS, custom HTML, JavaScript code to your website header and footer without modifying your theme code.\u003C\u002Fp>\n\u003Cp>This plugin has the option to add any custom code to your theme in one place, no need to edit the theme code. It will save your time and remove the hassle for the theme update.\u003C\u002Fp>\n\u003Cp>Pro version is also available : \u003Ca href=\"https:\u002F\u002Fhasthemes.com\u002Fplugins\u002Finsert-headers-and-footers-code-ht-script\u002F\" rel=\"nofollow ugc\">Check it out now!\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Video Documentation:\u003C\u002Fh3>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Ftv4q46ZD8lA?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch3>Features:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Very easy to use\u003C\u002Fli>\n\u003Cli>Insert Unlimited Scripts\u003C\u002Fli>\n\u003Cli>Insert Code to header \u002F footer\u003C\u002Fli>\n\u003Cli>Add custom CSS\u002Fjs to any theme\u003C\u002Fli>\n\u003Cli>Add Google Analytics code\u003C\u002Fli>\n\u003Cli>Add Facebook Pixel code\u003C\u002Fli>\n\u003Cli>Show On Full website\u003C\u002Fli>\n\u003Cli>Show on Only Homepage (Pro)\u003C\u002Fli>\n\u003Cli>Show on Selected Pages (Pro)\u003C\u002Fli>\n\u003Cli>Show on Selected Posts (Pro)\u003C\u002Fli>\n\u003Cli>Show on Selected Categories (Pro)\u003C\u002Fli>\n\u003Cli>Show on Selected Tags (Pro)\u003C\u002Fli>\n\u003Cli>Exclude Pages (Pro)\u003C\u002Fli>\n\u003Cli>Exclude Posts (Pro)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Other Projects\u003C\u002Fh3>\n\u003Cp>We have a lot of plugins and extensions that might interest you. Try out other projects by following this link:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoolentor-addons\u002F\" rel=\"ugc\">Woolentor Addons\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nWoolentor is a WooCommerce page builder plugin that extends the functionality of the WooCommerce store. These Elementor Addons provide additional features and options for WooCommerce stores. Woolentor is the best alternative for ShopReady, Kadence, JetWidgets, ShopEngine, and CoDesigner. The Woolentor addons come with 50+ free Elementor widgets like Wishlist Extension Addon, Product compare, Product Filters, Product Variation Swatches, Shopify Style Checkout, Product Slider and 50+ pro Elementor Widgets like Checkout Fields Editor, Partial Payment, Email Customizer for WooCommerce with ready Email Templates, WooCommerce Email Automation, Multi Step Checkout, and many much more. Also it provide 90+ WooCommerce Elementor templates, 22+ WooCommerce Modules, and Gutenberg Blocks.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fht-mega-for-elementor\u002F\" rel=\"ugc\">HT Mega For Elementor\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nHT Mega is an Elementor Addons that comes with custom page builder,  header builder, footer builder, mega menus, and more for your Elementor based website. The HT Mega plugin also includes a comprehensive set of Elementor widgets, readymade Elementor templates and Elementor Blocks.  HT Mega plugin works like ElementsKit, Essential Addons for Elementor, Royal Elementor Addons, Premium Addons, Happy Addons, PowerPack Addons, Unlimited Elements, Qi Addons, etc. The HT Mega plugin provides 84+ free Elementor widgets like Post Grid widget, Slider widget, Accordion widget, Elementor Forms widget, Contact Form Widget, Elementor tables, and other related items. It also provides 18+ pro widgets like Filterable Gallery Widget, Event Box Widget, Breadcrumbs Widget, Elementor Facebook Review Widget, Elementor Category List Widget, etc.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhashbar-wp-notification-bar\u002F\" rel=\"ugc\">Hashbar Wp Notification Bar\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nHashBar is a WordPress Notification Bar Plugin that enables you to create unlimited notification bars on your WordPress website. You can create as many notification bars as you want and customize their content to meet your needs.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-plugin-manager\u002F\" rel=\"ugc\">WP Plugin Manager – Deactivate plugins per page\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nWP Plugin Manager is the perfect solution for those who want to disable certain plugins on specific pages or posts. With this plugin, you can easily activate or deactivate plugins on a per-page or per-post basis. Whichever plugin you don’t need you can deactivate or disable that plugin with the help of WP plugin Manager.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fextensions-for-cf7\u002F\" rel=\"ugc\">Extensions For Cf7\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nContact Form 7 is an excellent plugin for organizing your contact page. The CF7 extensions plugin includes Contact Form 7 Database, enabling Conditional Fields for Contact Form 7, etc. It allows fields to be set up as either visible or hidden depending upon the input from visitors. In addition, integrating seamlessly with Mailchimp brings leads generated every time someone fills out one form into an associated email list immediately.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwhols\u002F\" rel=\"ugc\">Whols\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nWhols is an outstanding plugin for WooCommerce that allows store owners to set wholesale prices for the products of their online stores. With Whols, you can easily add custom fields to your registration form, set minimum product requirements, and control how wholesale prices are displayed on both the shop and product detail pages. Whols work  like Wholesale Suite, B2Bking and B2B plugins.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjust-tables\u002F\" rel=\"ugc\">Just Tables\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nJustTables is a WooCommerce product table plugin that helps you easily create and manage tables for your products. It includes 28 pre-built columns with options to enable\u002Fdisable, and you can add custom columns with custom fields\u002Ftaxonomies. Just Tables also allows you to order table columns using drag and drop and set the number of products per page.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fswatchly\u002F\" rel=\"ugc\">Swatchly\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nSwatchly is a WooCommerce product variation swatches plugin that allows you to add color swatches to your product pages. With Swatchly, you can enable swatches for the shop, product list, and product details pages. There are three swatch types (label swatche, color swatche, image swatche), and the plugin supports multi-colored swatches.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fht-slider-for-elementor\u002F\" rel=\"ugc\">HT Slider For Elementor\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nHT Slider For Elementor is a powerful and user-friendly slider addon for Elementor. You can customize the look and feel of your slider with HT Slider’s custom styling options. You also have the option to display your slides by id and category. Plus, HT Slider For Elementor comes with custom design options for slider navigation and pagination, so you can easily control the look and feel of your slider.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fht-contactform\u002F\" rel=\"ugc\">HT Contact form\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nHT Contact Form 7 Widget is an Elementor addon that allows you to easily drag and drop Contact Form 7 forms into your web pages. With the help of this plugin, you can choose your form from the drop-down list, Custom Styling Options, and add it to any page or place on your website. The HT Contact Form 7 Widget is an essential tool for anyone using Contact Form 7 on their website.\u003C\u002Fp>\n\u003Ch3>Need Help?\u003C\u002Fh3>\n\u003Cp>Is there any feature that you want to get in this plugin?\u003Cbr \u002F>\nNeeds assistance to use this plugin?\u003Cbr \u002F>\nFeel free to \u003Ca href=\"https:\u002F\u002Fhasthemes.com\u002Fcontact-us\u002F\" rel=\"nofollow ugc\">Contact us\u003C\u002Fa>\u003C\u002Fp>\n","This plugin allows you to insert Google analytic code, Facebook pixel code, custom javascript, custom style in your website's header and footer.",7000,102148,8,"2026-02-26T07:32:00.000Z","6.9.4","5.0",[71,72,73,74,75],"facebook-pixel","google-analytics","inject-code","inject-html","inject-javascript","https:\u002F\u002Fhtplugins.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finsert-headers-and-footers-script.1.1.8.zip",98,2,"2025-11-07 14:55:13",{"slug":82,"name":83,"version":84,"author":85,"author_profile":86,"description":87,"short_description":88,"active_installs":89,"downloaded":90,"rating":24,"num_ratings":91,"last_updated":92,"tested_up_to":93,"requires_at_least":94,"requires_php":17,"tags":95,"homepage":100,"download_link":101,"security_score":102,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"cache-external-scripts","Cache External Scripts","0.4","Voorsie","https:\u002F\u002Fprofiles.wordpress.org\u002Fvoorsie\u002F","\u003Cp>Often when trying to optimize the Google Pagespeed score, there is one script which still causing the ‘Leverage browser caching’ rule popping up: Google’s own gtag.js and\u002For analytics.js file…\u003C\u002Fp>\n\u003Cp>With this plugin you will be able to cache this file on your local server and enable browser caching for longer than 2 hours. The plugin will check every day if there is a newer version of the file to keep the cache up to date.\u003C\u002Fp>\n","Save the Google Analytics file (gtag.js \u002F analytics.js) locally to be able to cache it for longer than 2 hours for a better PageSpeed score!",1000,31606,25,"2019-05-11T19:04:00.000Z","5.2.24","3.0.1",[96,97,72,98,99],"cache","caching","javascripts","scripts","http:\u002F\u002Fwww.forcemedia.nl\u002Fwordpress-plugins\u002Fcache-external-scripts\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcache-external-scripts.0.4.zip",85,{"slug":104,"name":105,"version":106,"author":107,"author_profile":108,"description":109,"short_description":110,"active_installs":24,"downloaded":111,"rating":13,"num_ratings":13,"last_updated":112,"tested_up_to":113,"requires_at_least":16,"requires_php":17,"tags":114,"homepage":116,"download_link":117,"security_score":102,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"estadisticas-web","Estadisticas Web","0.1.1","atareao","https:\u002F\u002Fprofiles.wordpress.org\u002Fatareao\u002F","\u003Cp>This plugin adds the required javascript for google analytics.\u003C\u002Fp>\n\u003Cp>For more information visit:\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.atareao.es\u002Fwordpress\" rel=\"nofollow ugc\">Atareao\u003C\u002Fa>\u003C\u002Fp>\n","Enables google analytics on all pages.",4360,"2015-12-14T20:39:00.000Z","4.1.42",[19,115,20],"google","http:\u002F\u002Fwww.atareao.es","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Festadisticas-web.0.1.1.zip",{"slug":119,"name":120,"version":121,"author":122,"author_profile":123,"description":124,"short_description":125,"active_installs":44,"downloaded":126,"rating":44,"num_ratings":79,"last_updated":127,"tested_up_to":128,"requires_at_least":129,"requires_php":17,"tags":130,"homepage":133,"download_link":134,"security_score":102,"vuln_count":29,"unpatched_count":13,"last_vuln_date":135,"fetched_at":26},"universal-analytics","Universal Analytics","1.3.2","Cullen Whitmore","https:\u002F\u002Fprofiles.wordpress.org\u002Fcwhitmore\u002F","\u003Cp>With Google’s Universal Analytics officialy out of beta, there is no better time to start using Universal Analytics.  This plugin provides a simple method for you to add the analytics snippet to your website.  All you need to do is paste your Tracking ID into the field and press save.\u003C\u002Fp>\n\u003Cp>There are a few advanced options as well.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Determine if you wan the snippet in the head or footer\u003C\u002Fli>\n\u003Cli>Track events such as downloads, mailto, & outbound links\u003C\u002Fli>\n\u003Cli>Enable Display Advertising (Remarketing & Demographics)\u003C\u002Fli>\n\u003Cli>Anonymize IP addresses\u003C\u002Fli>\n\u003Cli>Disable tracking for administrators\u003C\u002Fli>\n\u003Cli>…and more to come.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you don’t already have your Tracking ID or for more information about Universal Analytics visit: \u003Ca href=\"http:\u002F\u002Fwww.google.com\u002Fanalytics\" rel=\"nofollow ugc\">Google Analytics\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>We would like to give special credit to Audrius Dobilinskas.  Our plugin is based on his version of \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgoogle-universal-analytics\" rel=\"ugc\">Google Universal Analytics\u003C\u002Fa> which provides several more advanced features as well as being able to use the “Classic” version of Google Analytics as well as being able to add your own custom snippets.\u003C\u002Fp>\n\u003Cp>Our version of Universal Analytics has been modified and trimmed down to meet our specific needs and supports integration with \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Flaunch-check\" rel=\"ugc\">Launch Check\u003C\u002Fa>.  If you’re not familiar with it, Launch Check ensures you have made your site visible to search engines, changed the default description and added Google Analytics before launch.\u003C\u002Fp>\n","A simple method to add Google's Universal Analytics JavaScript tracking code to your WordPress website.",5068,"2016-02-08T18:00:00.000Z","4.4.34","3.0",[19,115,20,131,132],"tracking","universal","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Funiversal-analytics\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Funiversal-analytics.1.3.2.zip","2016-02-04 00:00:00",{"attackSurface":137,"codeSignals":177,"taintFlows":199,"riskAssessment":251,"analyzedAt":260},{"hooks":138,"ajaxHandlers":159,"restRoutes":174,"shortcodes":175,"cronEvents":176,"entryPointCount":45,"unprotectedCount":13},[139,144,146,151,155],{"type":140,"name":141,"callback":142,"file":143,"line":44},"action","wp_head","install_code","truconversion-connect.php",{"type":140,"name":141,"callback":142,"file":143,"line":145},90,{"type":140,"name":147,"callback":148,"file":149,"line":150},"admin_menu","add_menu_page","truconversion-settings.php",13,{"type":140,"name":152,"callback":153,"file":149,"line":154},"admin_init","init",14,{"type":140,"name":156,"callback":157,"file":149,"line":158},"admin_enqueue_scripts","add_scripts",96,[160,166,170],{"action":161,"nopriv":162,"callback":163,"hasNonce":164,"hasCapCheck":162,"file":149,"line":165},"tc_signin",false,"tc_signin_callback",true,75,{"action":167,"nopriv":162,"callback":168,"hasNonce":164,"hasCapCheck":162,"file":149,"line":169},"tc_signup","tc_signup_callback",76,{"action":171,"nopriv":162,"callback":172,"hasNonce":164,"hasCapCheck":162,"file":149,"line":173},"tc_install_code","tc_install_code_callback",77,[],[],[],{"dangerousFunctions":178,"sqlUsage":179,"outputEscaping":181,"fileOperations":13,"externalRequests":197,"nonceChecks":45,"capabilityChecks":13,"bundledLibraries":198},[],{"prepared":13,"raw":13,"locations":180},[],{"escaped":13,"rawEcho":182,"locations":183},6,[184,187,189,191,193,195],{"file":143,"line":185,"context":186},49,"raw output",{"file":149,"line":188,"context":186},228,{"file":149,"line":190,"context":186},244,{"file":149,"line":192,"context":186},256,{"file":149,"line":194,"context":186},290,{"file":149,"line":196,"context":186},329,5,[],[200,225,238],{"entryPoint":201,"graph":202,"unsanitizedCount":13,"severity":224},"tc_signin_callback (truconversion-settings.php:269)",{"nodes":203,"edges":221},[204,209,215,217],{"id":205,"type":206,"label":207,"file":149,"line":208},"n0","source","$_POST",275,{"id":210,"type":211,"label":212,"file":149,"line":213,"wp_function":214},"n1","sink","wp_remote_post() [SSRF]",286,"wp_remote_post",{"id":216,"type":206,"label":207,"file":149,"line":208},"n2",{"id":218,"type":211,"label":219,"file":149,"line":194,"wp_function":220},"n3","echo() [XSS]","echo",[222,223],{"from":205,"to":210,"sanitized":164},{"from":216,"to":218,"sanitized":164},"low",{"entryPoint":226,"graph":227,"unsanitizedCount":13,"severity":224},"tc_signup_callback (truconversion-settings.php:305)",{"nodes":228,"edges":235},[229,231,233,234],{"id":205,"type":206,"label":207,"file":149,"line":230},314,{"id":210,"type":211,"label":212,"file":149,"line":232,"wp_function":214},325,{"id":216,"type":206,"label":207,"file":149,"line":230},{"id":218,"type":211,"label":219,"file":149,"line":196,"wp_function":220},[236,237],{"from":205,"to":210,"sanitized":164},{"from":216,"to":218,"sanitized":164},{"entryPoint":239,"graph":240,"unsanitizedCount":13,"severity":224},"\u003Ctruconversion-settings> (truconversion-settings.php:0)",{"nodes":241,"edges":248},[242,244,245,247],{"id":205,"type":206,"label":243,"file":149,"line":208},"$_POST (x4)",{"id":210,"type":211,"label":212,"file":149,"line":213,"wp_function":214},{"id":216,"type":206,"label":246,"file":149,"line":208},"$_POST (x2)",{"id":218,"type":211,"label":219,"file":149,"line":194,"wp_function":220},[249,250],{"from":205,"to":210,"sanitized":164},{"from":216,"to":218,"sanitized":164},{"summary":252,"deductions":253},"The truconversion-connect v1.2.9 plugin exhibits a generally good security posture with several positive indicators. The absence of known vulnerabilities, including critical and high severity ones, along with the lack of recorded security incidents, is a strong positive signal. Furthermore, the use of prepared statements for all SQL queries and the implementation of nonce checks on all identified AJAX handlers demonstrate a commitment to core WordPress security best practices. The plugin also avoids bundling external libraries, which can often be a source of outdated and vulnerable code.  \n\nHowever, there are significant areas for concern. The most prominent issue is that 100% of the plugin's output is not properly escaped. This presents a considerable risk, as it means any data processed or displayed by the plugin could potentially be vulnerable to Cross-Site Scripting (XSS) attacks. Even with a limited attack surface and no apparent taint analysis issues, unescaped output is a critical gateway for attackers. Additionally, the plugin relies on capability checks for only 0 out of 3 entry points, meaning the majority of its AJAX handlers might be accessible to users without the necessary permissions, potentially leading to unauthorized actions or information disclosure if the handlers themselves are exploitable.  \n\nIn conclusion, while the plugin's history and basic query\u002Fnonce handling are commendable, the critical flaw of universally unescaped output and the lack of capability checks on a significant portion of its entry points create substantial security risks. Addressing these issues is paramount to improving the overall security of truconversion-connect.",[254,257],{"reason":255,"points":256},"100% of output not properly escaped",15,{"reason":258,"points":259},"0 capability checks on AJAX handlers",10,"2026-03-16T20:05:30.151Z",{"wat":262,"direct":271},{"assetPaths":263,"generatorPatterns":265,"scriptPaths":266,"versionParams":268},[264],"\u002Fwp-content\u002Fplugins\u002Ftruconversion-connect\u002Fimages\u002Flogo.png",[],[267],"\u002F\u002Fapp.truconversion.com\u002Fti-js\u002F",[269,270],"truconversion-connect\u002Fstyle.css?ver=","truconversion-connect\u002Fscript.js?ver=",{"cssClasses":272,"htmlComments":279,"htmlAttributes":281,"restEndpoints":284,"jsGlobals":286,"shortcodeOutput":290},[273,274,275,276,277,278],"tc-panel","tc-panel-img","tc-panel-content","tc-panel-head","tc-panel-paragraph","tc-panel-btn",[280],"\u003C!-- Add new settings section below -->",[282,283],"id=\"tc-signin-form\"","id=\"tc-signup-form\"",[285],"\u002Fwp-json\u002Ftc-api\u002Fv1\u002Fsettings",[287,288,289],"var _tip","var tc_plugin_url","var tc_ajax_url",[]]