[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhzB3dHtOogz6ykjuYZYK2ftWXCLHd-1UnZsDq365Oec":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":36,"analysis":133,"fingerprints":214},"ultimate-conversion-tracking-code","Ultimate Conversion Tracking Code","1.0.0","asanabria11","https:\u002F\u002Fprofiles.wordpress.org\u002Fasanabria11\u002F","\u003Cp>\u003Cstrong>Add Adwords, Facebook pixel or any Conversion Tracking scripts using variables like product ID, post id, title or custom ones.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin lets you insert any marketing script anywhere you want, before the head element closes, after the body or even before the body tag closes.\u003C\u002Fp>\n\u003Cp>Also you can use custom variables to share between scripts like conversion id or Facebook pixel id. as well as dynamic ones like product id.\u003C\u002Fp>\n\u003Cp>Also you can set your scripts to show in specific pages or events like right when somebody completes an order or when they are in a product page in case you are using Woocomerce.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Premium version\u003C\u002Fstrong>\u003Cbr \u002F>\n  With the premium version you have no limits in variables or scripts and you get much more options, you can check out here if you want more power to your marketing scripts:\u003Cbr \u002F>\n  \u003Ca href=\"http:\u002F\u002Fwww.ultimateconversiontrackingcode.com\u002F\" rel=\"nofollow ugc\">http:\u002F\u002Fwww.ultimateconversiontrackingcode.com\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n","Add Adwords, Facebook pixel or any Conversion Tracking scripts using variables like product ID, post id, title or custom ones.",20,2744,100,1,"2015-11-16T17:47:00.000Z","4.3.34","3.0","",[20,21,22,23,24],"adwords","adwords-scripts","conversion","tracking","woocomerce","http:\u002F\u002Fwww.ultimateconversiontrackingcode.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fultimate-conversion-tracking-code.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},30,84,"2026-04-04T13:05:32.159Z",[37,61,81,98,114],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":17,"requires_php":18,"tags":51,"homepage":56,"download_link":57,"security_score":58,"vuln_count":59,"unpatched_count":28,"last_vuln_date":60,"fetched_at":30},"callrail-phone-call-tracking","CallRail Phone Call Tracking","0.5.3","CallRail","https:\u002F\u002Fprofiles.wordpress.org\u002Fcallrail\u002F","\u003Cp>CallRail is here to bring complete visibility to the marketers who rely on quality inbound leads to measure success. Our customers live in a results-driven world, and giving them a clear view into their digital marketing efforts is a first priority for CallRail. We see the opportunities in surfacing and connecting data from calls, forms, chat and beyond — helping our customers get to better outcomes.\u003C\u002Fp>\n\u003Cp>Our WordPress plugin allows you to learn detailed information about the source and web session of every caller from your website using a process called \u003Ca href=\"https:\u002F\u002Fwww.callrail.com\u002Fleads\u002Fdynamic-number-insertion-2\u002F\" rel=\"nofollow ugc\">Dynamic Number Insertion\u003C\u002Fa>. It also powers our form tracking tool, which gives you the power to attribute form submissions back to their source and learn about what the user did on your site before submitting the form.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Learn more about \u003Ca href=\"https:\u002F\u002Fwww.callrail.com\u002F\" rel=\"nofollow ugc\">CallRail\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Check out our WP plugin \u003Ca href=\"https:\u002F\u002Fsupport.callrail.com\u002Fhc\u002Fen-us\u002Farticles\u002F201011537\" rel=\"nofollow ugc\">support documentation.\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Dynamically swap CallRail tracking phone numbers based on the visitor's referring source.",10000,358191,74,6,"2026-02-11T19:30:00.000Z","6.9.4",[20,52,53,54,55],"analytics","call-tracking","conversion-tracking","seo","http:\u002F\u002Fwww.callrail.com\u002Fdocs\u002Fweb-integration\u002Fwordpress-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcallrail-phone-call-tracking.0.5.3.zip",99,2,"2023-10-24 00:00:00",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":71,"num_ratings":72,"last_updated":73,"tested_up_to":74,"requires_at_least":75,"requires_php":18,"tags":76,"homepage":79,"download_link":80,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"tracking-script-manager","Tracking Script Manager","2.0.14","JHipkin","https:\u002F\u002Fprofiles.wordpress.org\u002Fjhipkin\u002F","\u003Cp>Tracking Script Manager lets you manage tracking scripts in WordPress, including tags, schema markup, javascript, or any other script. For example, analytic scripts, including Google Analytics, are easy to manage using Tracking Scripts Manager.\u003C\u002Fp>\n\u003Cp>Scripts can be added to the header, footer, or after the body tag.\u003C\u002Fp>\n\u003Cp>The after-body tag placement may require an update to your theme files. See the plugin’s page for more information.\u003C\u002Fp>\n\u003Cp>A script can appear globally or on specific pages or posts.\u003C\u002Fp>\n\u003Cp>Tracking Script Manager helps you manage advertising tags, social media tracking and retargeting scripts, conversion pixels, Facebook and AdWords pixels, schema markup, javascript, and scripts for marketing automation, e-commerce, or any other desired action.\u003C\u002Fp>\n\u003Cp>We added the ability to control when a script expires with this version, which is helpful for ad campaign scripts.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fyoutu.be\u002F8Vy0MJzJ22M\" rel=\"nofollow ugc\">https:\u002F\u002Fyoutu.be\u002F8Vy0MJzJ22M\u003C\u002Fa>\u003C\u002Fp>\n","Easy tag management. Manage the tracking tags, codes and scripts you use in your WordPress site; easily add, update, reorder, delete, as required.",2000,53079,82,7,"2025-05-05T15:45:00.000Z","6.8.5","4.0",[20,52,77,54,78],"conversion-pixel","facebook-pixel","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftracking-script-manager\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftracking-script-manager.2.0.14.zip",{"slug":82,"name":83,"version":84,"author":85,"author_profile":86,"description":87,"short_description":88,"active_installs":13,"downloaded":89,"rating":28,"num_ratings":28,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":18,"tags":93,"homepage":18,"download_link":97,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-tracking-manager","WP Tracking Manager","1.5","WP-EXPERTS.IN","https:\u002F\u002Fprofiles.wordpress.org\u002Findia-web-developer\u002F","\u003Ch3>Very simple and lightweight plugin to add any type of tracking code on your website and also block the direct access to thank page. “WP Tracking Manager” has provided an option to add page specific tracking code.\u003C\u002Fh3>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Post type specific tracking code\u003C\u002Fli>\n\u003Cli>Page specific tracking code\u003C\u002Fli>\n\u003Cli>Block Direct Access of Thank-You Page\u003C\u002Fli>\n\u003Cli>Adwords Conversion Code\u003C\u002Fli>\n\u003Cli>Facebook Pixel Code\u003C\u002Fli>\n\u003Cli>Google Analytics A\u002FB Testing Code \u003C\u002Fli>\n\u003Cli>Linkedin Conversion Code\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>“WP Tracking Manager” provide an important feature to block the thank-you page direct access and allow to add auto “noindex follow” meta robots on all thank-you pages .\u003C\u002Fp>\n\u003Ch3>Adwords Conversion Code =\u003C\u002Fh3>\n\u003Cp>Conversion tracking is a powerful tool in Google Ads (formerly known as AdWords) that lets you identify how well your ad campaign is generating leads, sales, downloads, email sign-ups, and other key actions for your business.\u003C\u002Fp>\n\u003Ch3>Facebook Pixel Code\u003C\u002Fh3>\n\u003Cp>It helps you track conversions from Facebook ads, optimize ads based on collected data, build targeted audiences for future ads, and remarket to qualified leads—people who have already taken some kind of action on your website.\u003C\u002Fp>\n\u003Ch3>Google Analytics A\u002FB Testing\u003C\u002Fh3>\n\u003Cp>Using A\u002FB testing, a company have try to determine which keyword produces the best results for a PPC campaign.\u003C\u002Fp>\n\u003Ch3>Linkedin Conversion Code\u003C\u002Fh3>\n\u003Cp>Linkedin Conversion tracking gathers insights into post-click and view-through conversions of your LinkedIn ads campaigns, giving you the ability to measure the impact and ROI of your ads.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>An option to add tracking code on all pages of the website.\u003C\u002Fli>\n\u003Cli>An option to add tracking code only on specific pages (i.e Thank-you & Landing pages)\u003C\u002Fli>\n\u003Cli>An option to block direct access to thank-you page.\u003C\u002Fli>\n\u003Cli>An option to noindex thank you and get actual conversions leads.\u003C\u002Fli>\n\u003C\u002Ful>\n","Very Simple plugin to add any type of tracking code on your website and also restrict the direct access of thank page.",3618,"2022-03-14T07:51:00.000Z","5.9.13","5.0",[20,94,95,77,96],"adwords-remarketing","conversion-code","tracking-code","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-tracking-manager.zip",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":13,"num_ratings":14,"last_updated":108,"tested_up_to":109,"requires_at_least":17,"requires_php":18,"tags":110,"homepage":112,"download_link":113,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"freespee-call-tracking","Freespee Call Tracking","1.0","Tobias Lindgren","https:\u002F\u002Fprofiles.wordpress.org\u002Feffeks\u002F","\u003Cp>The Freespee Call Tracking plugin dynamically displays a phone number on your WordPress site. Every phone call made by your visitors is turned into useful data. With the flip of a switch you deliver this phone call data to your Google Analytics account to see what keyword and Ad that drove the phone call.\u003C\u002Fp>\n\u003Cp>Some of the features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Link phone calls made by your online visitors to their source (Google SEM, Facebook, etc).\u003C\u002Fli>\n\u003Cli>View the full online user journey including phone calls.\u003C\u002Fli>\n\u003Cli>Feed call data into 3rd party platforms, like Google Analytics or Google AdWords. \u003Ca href=\"http:\u002F\u002Ffreespee.com\u002Fplugin-gallery\" rel=\"nofollow ugc\">Full list here!\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>For more information please visit \u003Ca href=\"http:\u002F\u002Ffreespee.com\u002F\" rel=\"nofollow ugc\">Freespee.com\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin works in USA, Canada and Europe.\u003C\u002Fp>\n\u003Cp>PS: You will need an \u003Ca href=\"http:\u002F\u002Ffreespee.com\u002Fsign-up\u002Fbasic\" rel=\"nofollow ugc\">Freespee.com customer ID\u003C\u002Fa> to use this plugin. Sign up for free!\u003C\u002Fp>\n","See which visitors ended up calling you, no coding required. Automated delivery of phone call data to your Google Analytics account.",10,1688,"2015-04-21T13:44:00.000Z","4.2.39",[20,52,53,54,111],"freespee","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Ffreespee-call-tracking\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffreespee-call-tracking.1.0.zip",{"slug":115,"name":116,"version":117,"author":118,"author_profile":119,"description":120,"short_description":121,"active_installs":28,"downloaded":122,"rating":13,"num_ratings":14,"last_updated":123,"tested_up_to":124,"requires_at_least":125,"requires_php":18,"tags":126,"homepage":131,"download_link":132,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"technoscore-google-tracking","Technoscore Google Tracking","1.0.1","Technoscore","https:\u002F\u002Fprofiles.wordpress.org\u002Fsaravan\u002F","\u003Cp>Technoscore Google Tracking is  best Google Analytics plugin for WordPress. See how visitors find and use your website, so you can keep them coming back.\u003C\u002Fp>\n\u003Ch4>More details are as follows:-\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Technoscore Google Tracking adds Google AdWords  Conversion tracking , Remarketing Tag  and Google Analytics  to header\u002Ffooter part of Selected webpages.\u003C\u002Fli>\n\u003Cli>Technoscore Google Tracking allows you to track your blog visitors easily.\u003C\u002Fli>\n\u003Cli>Really easy way to insert Google Analytics tracking code and keep it there when switching themes. No need to copy\u002Fpaste code anywhere. This is the best way to handle Google Analytics, Remarketing  in WordPress.\u003C\u002Fli>\n\u003C\u002Ful>\n","Technoscore Google Tracking is  best Google Analytics plugin for WordPress. See how visitors find and use your website, so you can keep them coming ba …",1161,"2017-05-23T07:32:00.000Z","4.7.32","4.3.6",[52,127,128,129,130],"google-adwords-conversion-tracking","google-analytics","google-tracking","remarketing-tag","http:\u002F\u002Fnddw.com\u002Fdemo3\u002Fsws-res-slider\u002Fgoogle-tracking-demo\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftechnoscore-google-tracking.zip",{"attackSurface":134,"codeSignals":179,"taintFlows":199,"riskAssessment":200,"analyzedAt":213},{"hooks":135,"ajaxHandlers":166,"restRoutes":176,"shortcodes":177,"cronEvents":178,"entryPointCount":59,"unprotectedCount":59},[136,142,146,150,154,158,162],{"type":137,"name":138,"callback":139,"file":140,"line":141},"action","admin_enqueue_scripts","uctc_load_scripts","ultimate-conversion-tracking-code.php",32,{"type":137,"name":143,"callback":144,"file":140,"line":145},"admin_menu","uctc_menu",34,{"type":137,"name":147,"callback":148,"file":140,"line":149},"admin_init","uctc_settings",36,{"type":137,"name":151,"callback":152,"file":140,"line":153},"wp_print_footer_scripts","uctc_add_all_pages_scripts",42,{"type":137,"name":155,"callback":156,"file":140,"line":157},"woocommerce_after_single_product","uctc_add_products_scripts",44,{"type":137,"name":159,"callback":160,"file":140,"line":161},"woocommerce_after_cart_totals","uctc_add_cart_scripts",46,{"type":137,"name":163,"callback":164,"file":140,"line":165},"woocommerce_thankyou","uctc_add_thankyou_scripts",50,[167,172],{"action":168,"nopriv":169,"callback":170,"hasNonce":169,"hasCapCheck":169,"file":140,"line":171},"uctcgetdata",false,"uctc_getdata",38,{"action":173,"nopriv":169,"callback":174,"hasNonce":169,"hasCapCheck":169,"file":140,"line":175},"uctcsavedata","uctc_savedata",40,[],[],[],{"dangerousFunctions":180,"sqlUsage":181,"outputEscaping":183,"fileOperations":14,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":198},[],{"prepared":28,"raw":28,"locations":182},[],{"escaped":28,"rawEcho":48,"locations":184},[185,188,190,192,194,196],{"file":140,"line":186,"context":187},61,"raw output",{"file":140,"line":189,"context":187},131,{"file":140,"line":191,"context":187},171,{"file":140,"line":193,"context":187},211,{"file":140,"line":195,"context":187},246,{"file":140,"line":197,"context":187},484,[],[],{"summary":201,"deductions":202},"The 'ultimate-conversion-tracking-code' plugin, version 1.0.0, presents a moderate security risk due to significant architectural weaknesses. While it has no known past vulnerabilities and employs prepared statements for SQL, its static analysis reveals critical security gaps.  Specifically, the plugin exposes two AJAX handlers that lack any authentication checks, creating a substantial attack surface for unauthorized actions. Furthermore, none of the six identified output points are properly escaped, opening the door for potential cross-site scripting (XSS) vulnerabilities. The complete absence of nonce checks and capability checks on these entry points exacerbates the risk, making it easier for attackers to exploit these weaknesses.  The lack of recorded vulnerabilities in its history is a positive sign, suggesting developers may have been diligent or the plugin hasn't been extensively targeted. However, the identified issues in the current version are serious enough to warrant immediate attention and remediation. The plugin's strength lies in its use of prepared SQL statements, but this is overshadowed by the critical lack of authorization and output sanitization.",[203,205,208,211],{"reason":204,"points":106},"AJAX handlers without authentication",{"reason":206,"points":207},"Output not properly escaped",8,{"reason":209,"points":210},"Missing nonce checks on AJAX",5,{"reason":212,"points":210},"Missing capability checks on AJAX","2026-03-16T22:50:46.152Z",{"wat":215,"direct":224},{"assetPaths":216,"generatorPatterns":220,"scriptPaths":221,"versionParams":223},[217,218,219],"\u002Fwp-content\u002Fplugins\u002Fultimate-conversion-tracking-code\u002Fincludes\u002Fmodal\u002Fanimate.min.css","\u002Fwp-content\u002Fplugins\u002Fultimate-conversion-tracking-code\u002Fincludes\u002Fscript.js","\u002Fwp-content\u002Fplugins\u002Fultimate-conversion-tracking-code\u002Fincludes\u002Fmodal\u002FanimatedModal.js",[],[222],"https:\u002F\u002Fajax.googleapis.com\u002Fajax\u002Flibs\u002Fangularjs\u002F1.4.7\u002Fangular.min.js",[],{"cssClasses":225,"htmlComments":230,"htmlAttributes":231,"restEndpoints":234,"jsGlobals":237,"shortcodeOutput":240},[226,227,228,229],"wrap","ng-app","ng-controller","row-actions",[],[227,228,232,233],"ng-click","ng-repeat",[235,236],"\u002Fwp-ajax.php?action=uctcgetdata","\u002Fwp-ajax.php?action=uctcsavedata",[238,239],"uctc_obj","uctcVariables",[]]