[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXPfeZ-maSCPeCKeWXiAB3jy_toBvpXNWq9Eyp4_m68w":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":47,"crawl_stats":37,"alternatives":54,"analysis":168,"fingerprints":223},"url-params","URL Params","2.5","Jeremy B. Shapiro","https:\u002F\u002Fprofiles.wordpress.org\u002Fjeremyshapiro\u002F","\u003Cp>The URL Params WordPress Plugin allows you to access URL parameters in the Query String of the URL.\u003C\u002Fp>\n\u003Cp>The plugin even allows you to specify a default value in the shortcode if the parameter isn’t set, so if you want to say “Hello, FirstName” and FirstName isn’t set, it could say something like “Hello, Friend!”\u003C\u002Fp>\n\u003Cp>To specify a backup url parameter, enter multiple parameters seperated by commas. The plugin will check for each parameter, in order, until a matching one is found and return that. Failing finding any of the parameters you listed, the default will be returned. For example, you can specify \u003Ccode>[urlparam param=\"FirstName, First, name\" default=\"Friend\" \u002F]\u003C\u002Fcode> to check for FirstName, and if not found, then First, if not found, then name, and if not, then just return “Friend”.\u003C\u002Fp>\n\u003Cp>If the parameter is a date, you can also specify the \u003Ccode>dateformat\u003C\u002Fcode> option using a \u003Ca href=\"http:\u002F\u002Fphp.net\u002Fmanual\u002Fen\u002Ffunction.date.php\" rel=\"nofollow ugc\">PHP friendly date format\u003C\u002Fa>, for example \u003Ccode>[urlparam param=\"somedate\" dateformat=\"F Js\" \u002F]\u003C\u002Fcode>. Note that PHP only returns dates formatted in English regardless of locale settings.\u003C\u002Fp>\n\u003Cp>This is great if you have personalized links, like from Infusionsoft or Keap, as it lets you personalize a landing page with a persons name.\u003C\u002Fp>\n\u003Cp>You can also use this to pre-fill out form fields for folks based on the querystring. For example, if their first name is passed in the URL, your landing page can greet the viewer by name and pre-fill their name on a form.\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>Use the shortcode urlparam with the optional parameter of “default”. For example \u003Ccode>[urlparam param=\"FirstName\" \u002F]\u003C\u002Fcode> or \u003Ccode>[urlparam param=\"FirstName\" default=\"Friend\"\u002F]\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cp>For conditional content use \u003Ccode>[ifurlparam][\u002Fifurlparam]\u003C\u002Fcode>. For example, \u003Ccode>[ifurlparam param=\"FirstName\"]Hey, I know you, [urlparam param=\"FirstName\"]![\u002Fifurlparam]\u003C\u002Fcode> would greet known visitors, but display nothing to users without a FirstName in the query string.\u003C\u002Fp>\n\u003Cp>If you want to show content when a value does NOT exist, you can set \u003Ccode>empty\u003C\u002Fcode> in \u003Ccode>[ifurlparam]\u003C\u002Fcode>. For example \u003Ccode>[ifurlparam param=\"FirstName\" empty=\"1\"]Welcome to the site, visitor![\u002Fifurlparam]\u003C\u002Fcode> would greet visitors without a FirstName in the query string, but display nothing for visitors with FirstName in the query string.\u003C\u002Fp>\n\u003Cp>If you want to show content only to visitors with a specific value in their query string, you can set \u003Ccode>is\u003C\u002Fcode> in \u003Ccode>[ifurlparam]\u003C\u002Fcode>. For example, \u003Ccode>[ifurlparam param=\"FirstName\" is=\"Bob\"]Hi, Bob![\u002Fifurlparam]\u003C\u002Fcode>, would only greet visitors with the FirstName param set to Bob.\u003C\u002Fp>\n\u003Cp>If you want to have urlparam return an HTML attribute, for example to use in pre-setting the value of input or hidden input fields, pass in the optional \u003Ccode>attr\u003C\u002Fcode> parameter. You might set a value attribute for an input field like so: \u003Ccode>\u003Cinput type=\"text\" name=\"firstname\" [urlparam attr=\"value\" param='FirstName']>\u003C\u002Fcode> or you might set a src attribute for an image tag like so: \u003Ccode>\u003Cimg [urlparam attr=\"src\" param='imgurl']>\u003C\u002Fcode>\u003C\u002Fp>\n\u003Cp>If you want urlparam to return an entire HTML tag, for example in creating an input field, pass in the optional \u003Ccode>htmltag\u003C\u002Fcode> parameter. For example, \u003Ccode>[urlparam htmltag=\"input\" type=\"text\" name=\"firstname\" id=\"first\" attr=\"value\" param=\"FirstName\" default=\"Bob\" \u002F]\u003C\u002Fcode> will produce something like \u003Ccode>\u003Cinput type=\"text\" name=\"firstname\" id=\"first\" value=\"Bob\" \u002F>\u003C\u002Fcode>\u003C\u002Fp>\n\u003Ch3>Security\u003C\u002Fh3>\n\u003Cp>To help protect your site against \u003Ca href=\"http:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FCross-site_scripting\" rel=\"nofollow ugc\">Reflected Cross Site Scripting\u003C\u002Fa>, we sanitize output with \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FFunction_Reference\u002Fesc_html\" rel=\"nofollow ugc\">esc_html()\u003C\u002Fa> which prevents any HTML tags from being passed in and displayed. This would prevent someone from passing in javascript, for example, and having it execute on your site.\u003C\u002Fp>\n\u003Cp>Starting in the \u003Ca href=\"https:\u002F\u002Fmake.wordpress.org\u002Fcore\u002F2015\u002F07\u002F23\u002Fchanges-to-the-shortcode-api\u002F\" rel=\"nofollow ugc\">WordPress 4.2.3 security auto-update\u003C\u002Fa>, you can no longer include shortcodes in HTML attributes. Previous to this WordPress update, you could set a field value like this: \u003Ccode>\u003Cinput type=\"text\" name=\"firstname\" value=\"[urlparam param='FirstName']\">\u003C\u002Fcode>. Now you have to set it like this: \u003Ccode>\u003Cinput type=\"text\" name=\"firstname\" [urlparam attr=\"value\" param='FirstName']>\u003C\u002Fcode> or  \u003Ccode>[urlparam htmltag=\"input\" type=\"text\" name=\"firstname\" attr=\"value\" param=\"FirstName\" \u002F]\u003C\u002Fcode>. If you are still using this shortcode the old way, unfortunately, WordPress simply won’t process the shortcode and will return the full shortcode text unprocessed.\u003C\u002Fp>\n\u003Cp>To prevent unprivileged users (like Contributors) from using this shortcode to have privileged users (like Admins) accidentally execute arbitrary javascript via HTML attributes (like \u003Ccode>onclick\u003C\u002Fcode>, \u003Ccode>onmouseover\u003C\u002Fcode>, etc), html tags and attributes are sanitized.\u003C\u002Fp>\n\u003Cp>If you do need have a need to set certain sanitized tags or attributes, at your own risk, you can manually allow these from the URL Params options page under Settings.\u003C\u002Fp>\n","Short Code to grab any URL parameter from the Query String and display it or display conditional content.",8000,100996,100,37,"2024-12-17T19:03:00.000Z","6.7.5","3.0","",[20,21,22,4,23],"query-string","url","url-parameters","urlparam","http:\u002F\u002Fasandia.com\u002Fwordpress-plugins\u002Furlparams\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Furl-params.2.5.zip",92,1,0,"2023-04-25 00:00:00","2026-03-15T15:16:48.613Z",[32],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":6,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":29,"updated_date":43,"references":44,"days_to_patch":46},"CVE-2023-0274","url-params-authenticated-contributor-stored-cross-site-scripting-via-shortcode","URL Params \u003C= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode","The URL Params plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including, 2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level and above permissions, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=2.4","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-01-22 19:56:02",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F98e22884-f7d6-47df-9b1b-9232c48e3685?source=api-prod",273,{"slug":48,"display_name":7,"profile_url":8,"plugin_count":49,"total_installs":50,"avg_security_score":51,"avg_patch_time_days":46,"trust_score":52,"computed_at":53},"jeremyshapiro",4,8120,89,71,"2026-04-04T07:12:43.011Z",[55,74,99,124,145],{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":28,"num_ratings":28,"last_updated":65,"tested_up_to":66,"requires_at_least":67,"requires_php":68,"tags":69,"homepage":18,"download_link":72,"security_score":73,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"iframe-plus-get-parameters","Iframe plus GET Parameters","1.0.2","Tron","https:\u002F\u002Fprofiles.wordpress.org\u002Ftronusa\u002F","\u003Cp>This plugin extends iframes in WordPress and passes GET parameters to the iframe. Can be used to prepopulate forms that pull data from php $_GET variables, also know as the query string.\u003C\u002Fp>\n","Passes GET parameters to iframes.",10,871,"2023-04-26T23:21:00.000Z","6.2.9","5.4.12","5.6",[70,20,71,22],"php-_get-variables","url-get-params","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fiframe-plus-get-parameters.1.0.2.zip",85,{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":82,"downloaded":83,"rating":84,"num_ratings":85,"last_updated":86,"tested_up_to":87,"requires_at_least":88,"requires_php":89,"tags":90,"homepage":18,"download_link":96,"security_score":97,"vuln_count":63,"unpatched_count":28,"last_vuln_date":98,"fetched_at":30},"wps-hide-login","WPS Hide Login","1.9.18","Remy Perona","https:\u002F\u002Fprofiles.wordpress.org\u002Ftabrisrp\u002F","\u003Ch4>English\u003C\u002Fh4>\n\u003Cp>\u003Cem>WPS Hide Login\u003C\u002Fem> is a very light plugin that lets you easily and safely change the url of the login form page to anything you want. It doesn’t literally rename or change files in core, nor does it add rewrite rules. It simply intercepts page requests and works on any WordPress website. The wp-admin directory and wp-login.php page become inaccessible, so you should bookmark or remember the url. Deactivating this plugin brings your site back exactly to the state it was before.\u003C\u002Fp>\n\u003Cp>This plugin is kindly proposed by \u003Ca href=\"https:\u002F\u002Fwww.wpserveur.net\u002F?refwps=14&campaign=wpshidelogin\" rel=\"nofollow ugc\">WPServeur\u003C\u002Fa> the specialized WordPress web host.\u003C\u002Fp>\n\u003Cp>Discover also our other free extensions:\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwps-limit-login\u002F\" rel=\"ugc\">WPS Limit Login\u003C\u002Fa> to block brute force attacks.\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwps-bidouille\u002F\" rel=\"ugc\">WPS Bidouille\u003C\u002Fa> to optimize your WordPress and get more info.\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwps-cleaner\u002F\" rel=\"ugc\">WPS Cleaner\u003C\u002Fa> to clean your WordPress site.\u003C\u002Fp>\n\u003Cp>This plugin is only maintained, which means we do not guarantee free support. Consider reporting a problem and be patient.\u003C\u002Fp>\n\u003Ch4>Français\u003C\u002Fh4>\n\u003Cp>\u003Cem>WPS Hide Login\u003C\u002Fem> est un plugin très léger qui vous permet de changer facilement et en toute sécurité l’url de la page de formulaire de connexion. Il ne renomme pas littéralement ou ne modifie pas les fichiers dans le noyau, ni n’ajoute des règles de réécriture. Il intercepte simplement les demandes de pages et fonctionne sur n’importe quel site WordPress. Le répertoire wp-admin et la page wp-login.php deviennent inaccessibles, vous devez donc ajouter un signet ou vous souvenir de l’URL. Désactiver ce plugin ramène votre site exactement à l’état dans lequel il était auparavant.\u003C\u002Fp>\n\u003Cp>Ce plugin vous est gentiment proposé par \u003Ca href=\"https:\u002F\u002Fwww.wpserveur.net\u002F?refwps=14&campaign=wpshidelogin\" rel=\"nofollow ugc\">WPServeur\u003C\u002Fa> l’hébergeur spécialisé WordPress.\u003C\u002Fp>\n\u003Cp>Plus d’infos sur son utilisation : \u003Ca href=\"https:\u002F\u002Fwpformation.com\u002Fwps-hide-login-url-connexion-wordpress\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwpformation.com\u002Fwps-hide-login-url-connexion-wordpress\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Découvrez également nos autres extensions gratuites :\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Ffr.wordpress.org\u002Fplugins\u002Fwps-limit-login\u002F\" rel=\"nofollow ugc\">WPS Limit Login\u003C\u002Fa> pour bloquer les attaques par force brute.\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Ffr.wordpress.org\u002Fplugins\u002Fwps-bidouille\u002F\" rel=\"nofollow ugc\">WPS Bidouille\u003C\u002Fa> pour optimiser votre WordPress et faire le plein d’infos.\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Ffr.wordpress.org\u002Fplugins\u002Fwps-cleaner\u002F\" rel=\"nofollow ugc\">WPS Cleaner\u003C\u002Fa> pour nettoyer votre site WordPress.\u003C\u002Fp>\n\u003Cp>Ce plugin est seulement maintenu, ce qui signifie que nous ne garantissons pas un support gratuit. Envisagez de signaler un problème et soyez patient.\u003C\u002Fp>\n\u003Ch4>Compatibility\u003C\u002Fh4>\n\u003Ch4>English\u003C\u002Fh4>\n\u003Cp>Requires WordPress 4.1 or higher. All login related things such as the registration form, lost password form, login widget and expired sessions just keep working.\u003C\u002Fp>\n\u003Cp>It’s also compatible with any plugin that hooks in the login form, including:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>BuddyPress,\u003C\u002Fli>\n\u003Cli>bbPress,\u003C\u002Fli>\n\u003Cli>Jetpack,\u003C\u002Fli>\n\u003Cli>WPS Limit Login,\u003C\u002Fli>\n\u003Cli>and User Switching.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Obviously it doesn’t work with plugins or themes that \u003Cem>hardcoded\u003C\u002Fem> wp-login.php.\u003C\u002Fp>\n\u003Cp>Works with multisite, with subdomains and subfolders. Activating it for a network allows you to set a networkwide default. Individual sites can still rename their login page to something else.\u003C\u002Fp>\n\u003Cp>If you’re using a \u003Cstrong>page caching plugin\u003C\u002Fstrong> other than WP Rocket, you should add the slug of the new login url to the list of pages not to cache. WP Rocket is already fully compatible with the plugin.\u003C\u002Fp>\n\u003Ch4>Français\u003C\u002Fh4>\n\u003Cp>Nécessite WordPress 4.1 ou supérieur. Toutes les choses liées à la connexion telles que le formulaire d’inscription, le formulaire de mot de passe perdu, le widget de connexion et les sessions expirées continuent de fonctionner.\u003C\u002Fp>\n\u003Cp>Il est également compatible avec tout plugin qui se connecte au formulaire de connexion, notamment:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>BuddyPress,\u003C\u002Fli>\n\u003Cli>bbPress,\u003C\u002Fli>\n\u003Cli>Jetpack,\u003C\u002Fli>\n\u003Cli>WPS Limit Login,\u003C\u002Fli>\n\u003Cli>and User Switching.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Évidemment, cela ne fonctionne pas avec les plugins ou les thèmes \u003Cem>hardcoded\u003C\u002Fem> wp-login.php.\u003C\u002Fp>\n\u003Cp>Fonctionne en multisite, avec sous-domaines ou sous dossiers. L’activer pour un réseau vous permet de définir une valeur par défaut pour l’ensemble du réseau. Les sites individuels peuvent toujours renommer leur page de connexion pour autre chose.\u003C\u002Fp>\n\u003Cp>Si vous utilisez un \u003Cstrong>plugin de mise en cache de pages\u003C\u002Fstrong> autre que WP Rocket, vous devez ajouter le slug de la nouvelle URL de connexion à la liste des pages à ne pas mettre en cache. WP Rocket est déjà entièrement compatible avec le plugin.\u003C\u002Fp>\n","Change wp-login.php to anything you want.",2000000,30498017,96,2101,"2026-01-12T08:47:00.000Z","6.9.4","4.1","7.0",[91,92,93,94,95],"custom-login-url","login","rename","wp-login","wp-login-php","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwps-hide-login.1.9.18.zip",95,"2024-06-24 00:00:00",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":107,"downloaded":108,"rating":109,"num_ratings":110,"last_updated":111,"tested_up_to":87,"requires_at_least":112,"requires_php":18,"tags":113,"homepage":119,"download_link":120,"security_score":121,"vuln_count":122,"unpatched_count":28,"last_vuln_date":123,"fetched_at":30},"better-search-replace","Better Search Replace","1.4.10","WP Engine","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpengine\u002F","\u003Cp>When moving your WordPress site to a new domain or server, you will likely run into a need to run a search\u002Freplace on the database for everything to work correctly. Fortunately, there are several plugins available for this task, however, all have a different approach to a few key features. This plugin consolidates the best features from these plugins, incorporating the following features in one simple plugin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Serialization support for all tables\u003C\u002Fli>\n\u003Cli>The ability to select specific tables\u003C\u002Fli>\n\u003Cli>The ability to run a “dry run” to see how many fields will be updated\u003C\u002Fli>\n\u003Cli>No server requirements aside from a running installation of WordPress\u003C\u002Fli>\n\u003Cli>WordPress Multisite support\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Time-saving features available in the Pro version:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>View exactly what changed during a search\u002Freplace\u003C\u002Fli>\n\u003Cli>Backup and import the database while running a search\u002Freplace\u003C\u002Fli>\n\u003Cli>Priority email support from the developer of the plugin\u003C\u002Fli>\n\u003Cli>Save or load custom profiles for quickly repeating a search\u002Freplace in the future\u003C\u002Fli>\n\u003Cli>Support and updates for 1 year\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fbettersearchreplace.com\u002F\" rel=\"nofollow ugc\">Learn more about Better Search Replace Pro\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>The search and replace functionality is heavily based on interconnect\u002Fit’s great and open-source Search Replace DB script, modified to use WordPress native database functions to ensure compatibility.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Supported Languages\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>English\u003C\u002Fli>\n\u003Cli>French\u003C\u002Fli>\n\u003Cli>German\u003C\u002Fli>\n\u003Cli>Spanish\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Want to contribute?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Feel free to open an issue or submit a pull request on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fdeliciousbrains\u002Fbetter-search-replace\u002F\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>.\u003C\u002Fp>\n","A simple plugin to update URLs or other text in a database.",1000000,17311737,86,541,"2025-12-08T17:21:00.000Z","3.0.1",[114,115,116,117,118],"search-and-replace","search-replace","search-replace-database","update-database-urls","update-live-url","https:\u002F\u002Fbettersearchreplace.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbetter-search-replace.1.4.10.zip",98,2,"2024-01-24 00:00:00",{"slug":125,"name":126,"version":127,"author":128,"author_profile":129,"description":130,"short_description":131,"active_installs":132,"downloaded":133,"rating":84,"num_ratings":52,"last_updated":134,"tested_up_to":135,"requires_at_least":136,"requires_php":137,"tags":138,"homepage":143,"download_link":144,"security_score":26,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"custom-post-type-permalinks","Custom Post Type Permalinks","3.5.3","Toro_Unit (Hiroshi Urabe)","https:\u002F\u002Fprofiles.wordpress.org\u002Ftoro_unit\u002F","\u003Cp>Custom Post Type Permalinks allow you edit the permalink structure of custom post type.\u003C\u002Fp>\n\u003Cp>Change custom taxonomy archive’s permalink to “example.org\u002Fpost_type\u002Ftaxonomy_name\u002Fterm_slug”. Can disable this fix.\u003C\u002Fp>\n\u003Cp>And support \u003Ccode>wp_get_archives( 'post_type=foo' )\u003C\u002Fcode> and post type date archive (ex. \u003Ccode>example.com\u002Fpost_type_slug\u002Fdate\u002F2010\u002F01\u002F01\u003C\u002Fcode> ).\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftorounit\u002Fcustom-post-type-permalinks\" rel=\"nofollow ugc\">This Plugin published on GitHub.\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Donation: Please send \u003Ca href=\"http:\u002F\u002Fwww.amazon.co.jp\u002Fregistry\u002Fwishlist\u002FCOKSXS25MVQV\" rel=\"nofollow ugc\">My Wishlist\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fwww.paypal.me\u002Ftorounit\" rel=\"nofollow ugc\">Paypal\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Translators\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Japanese(ja) – \u003Ca href=\"http:\u002F\u002Fwww.torounit.com\u002F\" rel=\"nofollow ugc\">Toro_Unit\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>French(fr_FR) – \u003Ca href=\"http:\u002F\u002Fgeoffrey.crofte.fr\u002F\" rel=\"nofollow ugc\">Geoffrey Crofte\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Russian(ru_RU) – \u003Ca href=\"http:\u002F\u002Folart.ru\" rel=\"nofollow ugc\">Olart\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fnatali_z\" rel=\"nofollow ugc\">Natali_Z\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Also checkout\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsimple-post-type-permalinks\u002F\" rel=\"ugc\">Simple Post Type Permalinks\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Setting on Code\u003C\u002Fh3>\n\u003Cp>Example:\u003C\u002Fp>\n\u003Cpre>register_post_type( 'foo',\n    array(\n        'public' => true,\n        'has_archive' => true,\n        'rewrite' => array(\n            \"with_front\" => true\n        ),\n        'cptp_permalink_structure' => '%post_id%'\n    )\n);\u003C\u002Fpre>\n\u003Ch4>Exclude specific post type\u003C\u002Fh4>\n\u003Cpre>add_filter(  'cptp_is_rewrite_supported_by_foo',  '__return_false' );\n\n\u002F\u002F or\n\nadd_filter(  'cptp_is_rewrite_supported', function ( $support , $post_type ) {\n    if ( 'foo' === $post_type ) {\n        return false;\n    }\n    return $support;\n}, 10, 2);\u003C\u002Fpre>\n","Edit the permalink of custom post type.",200000,1713689,"2024-10-10T06:12:00.000Z","6.6.5","6.1","7.4",[139,140,141,142,21],"address","custom-post-type","link","permalink","https:\u002F\u002Fgithub.com\u002Ftorounit\u002Fcustom-post-type-permalinks","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-post-type-permalinks.3.5.3.zip",{"slug":146,"name":147,"version":148,"author":149,"author_profile":150,"description":151,"short_description":152,"active_installs":132,"downloaded":153,"rating":154,"num_ratings":155,"last_updated":156,"tested_up_to":87,"requires_at_least":157,"requires_php":18,"tags":158,"homepage":18,"download_link":164,"security_score":165,"vuln_count":166,"unpatched_count":28,"last_vuln_date":167,"fetched_at":30},"wpcf7-redirect","Redirection for Contact Form 7","3.2.9","Themeisle","https:\u002F\u002Fprofiles.wordpress.org\u002Fthemeisle\u002F","\u003Cp>Redirection for Contact Form 7 enhances your forms with essential post-submission actions all in one plugin. Store form entries in your database, redirect users to any page or URL, send email notifications, block spam with honeypot protection, and help with GDPR compliance through data export\u002Ferase requests.\u003C\u002Fp>\n\u003Cp>Want more power? Our PRO version includes JavaScript execution after submission, webhook integration for third-party services, conditional logic based on user input, frontend post creation, PDF generation from form data, and seamless integrations with popular services like Mailchimp, PayPal, Stripe, HubSpot, Salesforce, and Twilio.\u003C\u002Fp>\n\u003Ch3>🔗 HELPFUL LINKS:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>Need any help with setup? \u003Ca href=\"https:\u002F\u002Fdocs.themeisle.com\u002Fcollection\u002F2014-redirection-for-contact-form-7\" rel=\"nofollow ugc\">CHECK DOCUMENTATION\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Interested in Redirection For CF7 Pro? \u003Ca href=\"https:\u002F\u002Fthemeisle.com\u002Fplugins\u002Fwpcf7-redirect\u002Fupgrade\u002F?utm_source=wordpressorg&utm_medium=wpcf-7readme&utm_campaign=pro-cta\" rel=\"nofollow ugc\">LEARN MORE\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>USAGE\u003C\u002Fh3>\n\u003Cp>Simply go to your form settings, select the “Action” tab, and add additional Submission Actions based on your requirements.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>NOTE:\u003C\u002Fstrong> This plugin requires CF7 version 4.8 or later.\u003C\u002Fp>\n\u003Ch3>🤝 HOW REDIRECTION FOR CF7 CAN HELP YOU:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Redirect to Any URL:\u003C\u002Fstrong> Easily redirect users to any specific webpage after form submission, enhancing user navigation and experience.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Open Page in a New Tab:\u003C\u002Fstrong> Configure forms to open the target URL in a new tab, keeping your site accessible to users post-submission.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Pass Fields from the Form as URL Query Parameters:\u003C\u002Fstrong> Seamlessly append submitted form data to the URL as query parameters, enabling personalized follow-up pages.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Add Honeypot to Minimize Spam:\u003C\u002Fstrong> Integrate a honeypot technique in your forms to prevent spam without affecting user experience.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Save Form Submissions to Your Database:\u003C\u002Fstrong> Automatically store all form submissions in your database, ensuring no data loss and facilitating easy back-referencing.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>GDPR Compliance – Create Erase Personal Data Request:\u003C\u002Fstrong> Allow users to initiate requests for erasing their personal data, ensuring compliance with GDPR mandates.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>GDPR Compliance – Create Export Personal Data Request:\u003C\u002Fstrong> Enable users to request exports of their personal data, supporting transparency and adherence to GDPR guidelines.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🤩 GET MORE FEATURES WITH REDIRECTION FOR CF7 PRO\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Add Conditional Logic:\u003C\u002Fstrong> Enhance your submission actions with the Conditional Logic of Actions Extension. Set If\u002FOr rules based on user inputs to manage powerful conditional rules effectively.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Run JavaScript After Form Submission:\u003C\u002Fstrong> Execute custom JavaScript code after a form is submitted, ideal for tracking conversions and integrating with analytics tools.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Create and Send PDF:\u003C\u002Fstrong> Add the option to generate and send PDF using the submitted form fields.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Frontend Publishing:\u003C\u002Fstrong> Add the ability to allow your users to publish posts from your website front-end.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Webhook Integration:\u003C\u002Fstrong> Supercharge your forms with advanced Webhook support—seamlessly connect to third-party apps using POST, GET, DELETE, and PATCH methods, with full compatibility for PARAMS, JSON, and XML formats.Empower your forms with advanced Webhook integration, supporting POST, GET, DELETE, PATCH methods and PARAMS, JSON, and XML formats for comprehensive connectivity with third party apps.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Add a Thank You Popup:\u003C\u002Fstrong> Add the ability to thank your users with a noticeably designed thank-you popup.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Integrate with Mailchimp:\u003C\u002Fstrong> Add the ability to register submitted forms to any of your MailChimp lists.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Integrate PayPal & Stripe:\u003C\u002Fstrong> Collect payments from your users by redirecting them to PayPal or Stripe.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Integrate with HubSpot CRM:\u003C\u002Fstrong> Add the ability to send form submissions from Contact Form 7 to HubSpot CRM.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Integrate with Salesforce CRM:\u003C\u002Fstrong> Add the ability to send submission forms from Contact Form 7 to Salesforce CRM.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>SMS with Twilio Integration:\u003C\u002Fstrong> Add the ability to send SMS messages to your users or notifications to yourself using Twilio.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Unlock these premium features and more with \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fthemeisle.com\u002Fplugins\u002Fwpcf7-redirect\u002Fupgrade\u002F?utm_source=wordpressorg&utm_medium=wpcf-7readme&utm_campaign=unlock-pro-cta\" rel=\"nofollow ugc\">Redirection for CF7 PRO\u003C\u002Fa>!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Still have questions?\u003C\u002Fstrong> Ask your pre-sales questions \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fthemeisle.com\u002Fcontact\u002F?utm_source=wordpressorg&utm_medium=wpcf-7readme&utm_campaign=pre-sales\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003C\u002Fstrong>, and we will get back to you promptly. Or, purchase with confidence and try it for yourself—we offer a \u003Cstrong>30-day no-questions-asked 100% money-back guarantee\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Ch3>🤔 WHAT YOU CAN DO WITH REDIRECTION FOR CF7:\u003C\u002Fh3>\n\u003Cp>Redirection for Contact Form 7 opens up a world of opportunities! Explore how different audiences can leverage its features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>📦 E-commerce Sites:\u003C\u002Fstrong> Automate order confirmations and updates through SMS with the Twilio integration, providing customers with real-time updates directly on their phones.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>🫶 Non-Profit Organizations:\u003C\u002Fstrong> Enhance donor engagement by redirecting donors to personalized thank you pages using Conditional Logic, and manage GDPR compliance with data export and erase requests.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>🏠 Real Estate Agencies:\u003C\u002Fstrong> Direct potential clients to a customized URL after form submission, showcasing specific property details or offers based on the input from inquiry forms.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>🛠️ Tech Support Services:\u003C\u002Fstrong> Link form submissions with Salesforce or HubSpot CRM to automatically create support tickets and manage follow-up actions efficiently.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>📚 Education Providers:\u003C\u002Fstrong> Implement the Frontend Publishing feature to allow students to submit assignments and projects directly through forms, making submission processes smoother and more organized.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>📈 Marketing Teams:\u003C\u002Fstrong> Capture lead information and automatically add it to a Mailchimp email list for subsequent marketing campaigns, ensuring seamless integration with your digital marketing strategies.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>💵 Freelancers and Consultants:\u003C\u002Fstrong> Offer a streamlined payment process by integrating with PayPal and Stripe, allowing clients to pay for services directly through the submission form.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>📝 Bloggers and Influencers:\u003C\u002Fstrong> Manage user-generated content by enabling frontend post submissions, allowing followers to contribute stories, photos, or feedback directly on the website.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>✨ YOU SHOULD USE REDIRECTION WITH CF7 IF:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>You Want to Personalize User Journeys:\u003C\u002Fstrong> Provide a tailored experience by redirecting users to pages that fit their needs.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>You Aim to Automate Processes:\u003C\u002Fstrong> Simplify workflows by directing users to relevant resources or actions after form submission.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>You Seek to Increase Engagement:\u003C\u002Fstrong> Capture user interest by guiding them to content or offers that resonate with them.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>You Need to Optimize Conversions:\u003C\u002Fstrong> Redirect users to strategically designed pages to maximize conversion opportunities.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>You Plan to Manage Leads Efficiently:\u003C\u002Fstrong> Ensure leads are channeled to the right destination for effective handling and follow-up.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>👋 WE’RE HERE FOR YOU, AND WE TAKE ALL FEEDBACK SERIOUSLY\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>📚 Knowledge Base:\u003C\u002Fstrong> We’ve created a complete \u003Ca href=\"https:\u002F\u002Fdocs.themeisle.com\u002Fcollection\u002F2014-redirection-for-contact-form-7\" rel=\"nofollow ugc\">documentation\u003C\u002Fa> library and we’re still constantly updating with new tutorials.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>🦸 Support forum:\u003C\u002Fstrong> We’re here to help. Feel free to open a new thread on the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fwpcf7-redirect\u002F\" rel=\"ugc\">Support Forum\u003C\u002Fa>.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🎙️ SEE WHAT REAL USERS TALK ABOUT US\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Fvery-nice-and-helpful-plugin-5\u002F\" rel=\"ugc\">Very nice and helpful plugin\u003C\u002Fa> – “This is a very helpful plugin. It makes my task much easier and it is also very nice for website users to be redirected to the summary page of their entries.”\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Fworks-like-a-charm-2147\u002F\" rel=\"ugc\">Works like a charm 🙂\u003C\u002Fa> – “What else to say? When a customer submits a form, it fluently redirects him\u002Fher to specific url when I say “Thank you for submitting the form, we will contact you later…”. So thank you very much creators!”\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002F5-stars-533\u002F\" rel=\"ugc\">5 star\u003C\u002Fa> – “Working with Conversion tracking and I like the fact that you can pull the contact form fields in that you want to show on the Thank you page. Everything works fantatic.”\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Freally-useful-311\u002F\" rel=\"ugc\">Really useful!\u003C\u002Fa> – “Just chiming in with a positive review. Works great, and has been for a while now. Thanks so much!!”\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","Redirect to any page or URL, execute scripts after submission, save data to the database, and unlock additional submission actions for Contact Form 7.",5558034,94,270,"2026-02-10T10:48:00.000Z","5.1",[159,160,161,162,163],"cf7-redirect","contact-form-7-mailchimp","contact-form-7-paypal","redirect-cf7","redirect-to-url","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpcf7-redirect.3.2.9.zip",88,14,"2025-12-20 18:43:20",{"attackSurface":169,"codeSignals":195,"taintFlows":208,"riskAssessment":209,"analyzedAt":222},{"hooks":170,"ajaxHandlers":186,"restRoutes":187,"shortcodes":188,"cronEvents":194,"entryPointCount":122,"unprotectedCount":28},[171,177,181],{"type":172,"name":173,"callback":174,"file":175,"line":176},"action","admin_menu","urlparams_admin_menu","urlparams.php",27,{"type":172,"name":178,"callback":179,"file":175,"line":180},"admin_init","admin_init_urlparams",28,{"type":182,"name":183,"callback":184,"priority":63,"file":175,"line":185},"filter","plugin_action_links","urlparams_plugin_action_links",36,[],[],[189,191],{"tag":23,"callback":23,"file":175,"line":190},20,{"tag":192,"callback":192,"file":175,"line":193},"ifurlparam",21,[],{"dangerousFunctions":196,"sqlUsage":197,"outputEscaping":199,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":207},[],{"prepared":28,"raw":28,"locations":198},[],{"escaped":200,"rawEcho":122,"locations":201},6,[202,205],{"file":203,"line":193,"context":204},"options.php","raw output",{"file":203,"line":206,"context":204},31,[],[],{"summary":210,"deductions":211},"The 'url-params' plugin v2.5 presents a mixed security profile. On the positive side, the static analysis indicates good practices in handling SQL queries, exclusively using prepared statements, and no file operations or external HTTP requests are detected, which reduces certain attack vectors. The absence of critical or high severity taint flows and dangerous functions is also reassuring. However, there are notable areas for concern. The plugin has a history of Cross-site Scripting (XSS) vulnerabilities, with one medium-severity CVE recorded in its past. The static analysis also reveals that 25% of output is not properly escaped, which could potentially lead to XSS if untrusted input is displayed without adequate sanitization, especially given the plugin's history. Furthermore, the lack of nonce checks and capability checks on the identified entry points (shortcodes) is a significant weakness, as it means these functions could be triggered by unauthenticated or unauthorized users. While the attack surface is small and currently lacks unprotected AJAX\u002FREST API endpoints, the existing shortcode entry points are a clear risk.",[212,214,217,219],{"reason":213,"points":200},"Unescaped output detected",{"reason":215,"points":216},"Missing nonce checks on entry points",8,{"reason":218,"points":216},"Missing capability checks on entry points",{"reason":220,"points":221},"Medium severity CVE in history",7,"2026-03-16T17:54:57.571Z",{"wat":224,"direct":229},{"assetPaths":225,"generatorPatterns":226,"scriptPaths":227,"versionParams":228},[],[],[],[],{"cssClasses":230,"htmlComments":231,"htmlAttributes":232,"restEndpoints":233,"jsGlobals":234,"shortcodeOutput":235},[],[],[],[],[],[236,237],"[urlparam]","[ifurlparam]"]