[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4majH-lYO2-3TdCuquA685H7krwCb6AaRyEDdN9nN0c":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":36,"analysis":118,"fingerprints":175},"users-ultra-pro-recaptcha","Users Ultra Pro reCaptcha 3.0 Add-on","1.0.1","ExpressTech Systems","https:\u002F\u002Fprofiles.wordpress.org\u002Fexpresstech\u002F","\u003Cp>This is a free add-on for \u003Ca href='https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fusers-ultra\u002F' rel=\"ugc\">Users Ultra Pro 3.0 Plugin.\u003C\u002Fa>\u003C\u002Fp>\n","This is a free add-on for Users Ultra Pro 3.0 Plugin.",10,1377,0,"2020-12-18T00:24:00.000Z","5.6.17","3.0.1","",[19,20,21],"members-registration","recaptcha","spam-control","https:\u002F\u002Fusersultra.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fusers-ultra-pro-recaptcha.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":32,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"expresstech",21,121720,94,560,75,"2026-04-04T08:13:23.388Z",[37,48,63,76,101],{"slug":38,"name":39,"version":6,"author":7,"author_profile":8,"description":40,"short_description":41,"active_installs":11,"downloaded":42,"rating":13,"num_ratings":13,"last_updated":43,"tested_up_to":44,"requires_at_least":16,"requires_php":17,"tags":45,"homepage":46,"download_link":47,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"easy-wp-members-recaptcha","Easy WP Members reCaptcha Add-on","\u003Cp>This is a free add-on for \u003Ca href='https:\u002F\u002Fwordpress.org\u002Fplugins\u002Feasy-wp-members\u002F' rel=\"ugc\">Easy WP Members Plugin.\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>DOCUMENTATION\u003C\u002Fh4>\n\u003Cp>Click \u003Ca href='https:\u002F\u002Fdocs.easywpmembers.com\u002Finstalling-recaptcha\u002F' rel=\"nofollow ugc\">here\u003C\u002Fa> to check the installation guide\u003C\u002Fp>\n","This is a free add-on for Easy WP Members Plugin.",1178,"2019-09-01T14:33:00.000Z","5.2.24",[19,20,21],"https:\u002F\u002Feasywpmembers.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-wp-members-recaptcha.zip",{"slug":49,"name":50,"version":51,"author":7,"author_profile":8,"description":52,"short_description":53,"active_installs":13,"downloaded":54,"rating":13,"num_ratings":13,"last_updated":55,"tested_up_to":56,"requires_at_least":16,"requires_php":17,"tags":57,"homepage":61,"download_link":62,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"ultimate-captcha","Ultimate Captcha reCAPTCHA Plugin for WordPress","1.0.5","\u003Cp>\u003Ca href='https:\u002F\u002Fultimatecaptcha.com\u002F' rel=\"nofollow ugc\">Ultimate Captcha\u003C\u002Fa> helps you to protect your website by controlling fake accounts, spam comments. This plugin prevents brute force logins on your WordPress website, also you can avoid fake accounts created by robots.\u003C\u002Fp>\n\u003Cp>The plugin uses reCAPTCHA and it’s totally free. You can protect the following pages:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>WordPress Login Page\u003C\u002Fli>\n\u003Cli>WordPress Registration Page\u003C\u002Fli>\n\u003Cli>WordPress Password Reset Page\u003C\u002Fli>\n\u003Cli>WooCommerce Login Page\u003C\u002Fli>\n\u003Cli>WooCommerce Registration Page\u003C\u002Fli>\n\u003Cli>WooCommerce Password Reset Page\u003C\u002Fli>\n\u003Cli>Post Comments\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>DOCUMENTATION\u003C\u002Fh4>\n\u003Cp>\u003Ca href='http:\u002F\u002Fdocs.ultimatecaptcha.com\u002Finstalling-recaptcha\u002F' rel=\"nofollow ugc\">CLICK HERE\u003C\u002Fa> to check the documentation.\u003C\u002Fp>\n\u003Ch4>GET SUPPORT AND PRO FEATURES\u003C\u002Fh4>\n\u003Cp>Get professional support from our experts and pro features to take your site’s security to the next level with \u003Ca href='https:\u002F\u002Fultimatecaptcha.com\u002Findex.php#pricing-comparasion' rel=\"nofollow ugc\">Ultimate Captcha WordPress Security\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>PRO FEATURES\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Please note:\u003C\u002Fstrong> Using Ultimate Captcha is free, reCAPTCHA is a Google product, we’re not charging for the integration with reCAPTCHA. The following features are improvements and they’re optional.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href='https:\u002F\u002Fultimatecaptcha.com\u002Fextensions\u002Fpassword-strength\u002F' rel=\"nofollow ugc\">Password Strength\u003C\u002Fa> – This add-on helps you to protect your users’ accounts by managing and monitoring the strength of their passwords.\u003C\u002Fli>\n\u003Cli>\u003Ca href='https:\u002F\u002Fultimatecaptcha.com\u002Fextensions\u002Faweber\u002F' rel=\"nofollow ugc\">AWeber\u003C\u002Fa> – This will help you to start with your e-mail marketing campaign. It will add a checkbox to the registration form and ask users to register for your newsletter\u002Fe-mail list.\u003C\u002Fli>\n\u003Cli>\u003Ca href='https:\u002F\u002Fultimatecaptcha.com\u002Fextensions\u002Fcustom-pages\u002F' rel=\"nofollow ugc\">Custom Registration & Login Pages\u003C\u002Fa> – This allows you to create custom registration, login and password reset pages. You can also override the default WP pages.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>CUSTOM REGISTRATION AND LOGIN PAGES\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href='https:\u002F\u002Fultimatecaptcha.com\u002Ftesting\u002Fregistration-page\u002F' rel=\"nofollow ugc\">WordPress Custom Registration Page\u003C\u002Fa> – You can take additional information from your users, even you can ask them to input a password.\u003C\u002Fli>\n\u003Cli>\u003Ca href='https:\u002F\u002Fultimatecaptcha.com\u002Ftesting\u002Flogin-page\u002F' rel=\"nofollow ugc\">WordPress Custom Login Page\u003C\u002Fa> – This is a custom login page which can be used to override the default WordPress login page.\u003C\u002Fli>\n\u003Cli>\u003Ca href='https:\u002F\u002Fultimatecaptcha.com\u002Ftesting\u002Fpassword-recover\u002F' rel=\"nofollow ugc\">Custom Password Reset Page\u003C\u002Fa> – You can also override the default WP reset link.\u003C\u002Fli>\n\u003C\u002Ful>\n","This is a free plugin to protect your WordPress website.",1409,"2021-10-05T16:56:00.000Z","5.8.13",[58,59,20,60,21],"bots","captcha","registration","https:\u002F\u002Fultimatecaptcha.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fultimate-captcha.zip",{"slug":64,"name":65,"version":6,"author":7,"author_profile":8,"description":66,"short_description":67,"active_installs":13,"downloaded":68,"rating":13,"num_ratings":13,"last_updated":17,"tested_up_to":69,"requires_at_least":16,"requires_php":17,"tags":70,"homepage":72,"download_link":73,"security_score":74,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":75},"wp-ticket-ultra-recaptcha","WP Ticket Ultra reCaptcha Add-on","\u003Cp>\u003Ca href='https:\u002F\u002Fwpticketultra.com\u002F' rel=\"nofollow ugc\">WP Ticket Ultra Recaptcha\u003C\u002Fa> offers a great suite of features that will help you to offer Top-Notch Customer Support.\u003C\u002Fp>\n\u003Cp>This plugin needs \u003Ca href='https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-ticket-ultra\u002F' rel=\"ugc\">WP Ticket Ultra\u003C\u002Fa> and it can be used to display a reCaptcha code on multiple pages such as Registration, Login and Password Reset links. Since spam and form abuse are two critical security related issues we’re offering this add-on for free.\u003C\u002Fp>\n\u003Ch4>Do you need to implement reCAPTCHA in your WordPress?\u003C\u002Fh4>\n\u003Cp>Check \u003Ca href='https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fultimate-captcha\u002F' rel=\"ugc\">Ultimate Captcha\u003C\u002Fa>, this plugin allows you to add reCAPTCHA on registration, login, password reset and comments form avoiding spam attacks.\u003C\u002Fp>\n\u003Ch4>DOCUMENTATION\u003C\u002Fh4>\n\u003Cp>\u003Ca href='http:\u002F\u002Fdocs.wpticketultra.com\u002Finstalling-recaptcha\u002F' rel=\"nofollow ugc\">CLICK HERE\u003C\u002Fa> to check the documentation.\u003C\u002Fp>\n","This is a free add-on for WP Ticket Ultra Plugin.",982,"4.9.29",[20,60,21,71],"tickets","https:\u002F\u002Fwpticketultra.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-ticket-ultra-recaptcha.zip",100,"2026-03-15T10:48:56.248Z",{"slug":77,"name":78,"version":79,"author":80,"author_profile":81,"description":82,"short_description":83,"active_installs":84,"downloaded":85,"rating":86,"num_ratings":87,"last_updated":88,"tested_up_to":89,"requires_at_least":90,"requires_php":91,"tags":92,"homepage":96,"download_link":97,"security_score":98,"vuln_count":99,"unpatched_count":13,"last_vuln_date":100,"fetched_at":26},"advanced-google-recaptcha","Advanced Google reCAPTCHA","1.31","WebFactory","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebfactory\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fgetwpcaptcha.com\u002F\" rel=\"nofollow ugc\">Advanced Google reCAPTCHA\u003C\u002Fa> protects your WordPress site from spam comments & brute force login attacks using captcha. This captcha plugin, quickly adds Google reCAPTCHA and other captcha tests to WordPress comment form, login form, and other forms.\u003C\u002Fp>\n\u003Cp>Using Advanced Google reCAPTCHA (most popular captcha on the market), you’ll be safe from spam comments and protect user accounts, WooCommerce, Easy Digital Downloads, BuddyPress and other forms from brute-force login attacks.\u003C\u002Fp>\n\u003Cp>reCaptcha works for:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Login Form\u003C\u002Fli>\n\u003Cli>Registration Form\u003C\u002Fli>\n\u003Cli>Reset Password Form\u003C\u002Fli>\n\u003Cli>Comment Form\u003C\u002Fli>\n\u003Cli>BuddyPress Form\u003C\u002Fli>\n\u003Cli>WooCommerce Form\u003C\u002Fli>\n\u003Cli>Easy Digital Downloads (EDD) Login Form\u003C\u002Fli>\n\u003Cli>Easy Digital Downloads (EDD) Registration Form\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Captcha uses these 3rd party libs:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Chart.js, 2017 Nick Downie, MIT\u003C\u002Fli>\n\u003Cli>DataTables, 2008-2017 SpryMedia Ltd, MIT\u003C\u002Fli>\n\u003Cli>moment.js, Tim Wood, Iskren Chernev, MIT\u003C\u002Fli>\n\u003Cli>SweetAlert 2, github.com\u002FSweetalert2\u002FSweetalert2, MIT\u003C\u002Fli>\n\u003Cli>tooltipster, www.heteroclito.fr\u002Fmodules\u002Ftooltipster\u002F, MIT\u003C\u002Fli>\n\u003C\u002Ful>\n","Captcha protection against spam comments & brute force login attacks using Google reCAPTCHA.",200000,2435450,96,428,"2025-12-02T20:29:00.000Z","6.9.4","4.9","5.2",[59,93,94,95,20],"comment-recaptcha","google-recaptcha","login-recaptcha","https:\u002F\u002Fgetwpcaptcha.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadvanced-google-recaptcha.1.31.zip",98,3,"2025-03-27 19:32:14",{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":84,"downloaded":109,"rating":74,"num_ratings":110,"last_updated":111,"tested_up_to":112,"requires_at_least":90,"requires_php":17,"tags":113,"homepage":17,"download_link":117,"security_score":74,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"wpcf7-recaptcha","ReCaptcha v2 for Contact Form 7","1.4.9","IQComputing","https:\u002F\u002Fprofiles.wordpress.org\u002Fiqcomputing\u002F","\u003Cp>Contact Form 7 v5.1 dropped support for reCaptcha v2 along with the \u003Ccode>[recaptcha]\u003C\u002Fcode> tag December 2018. This plugin brings that functionality back from Contact Form 7 5.0.5 and re-adds the \u003Ccode>[recaptcha]\u003C\u002Fcode> tag.\u003C\u002Fp>\n\u003Cp>If this plugin is installed before updating Contact Form 7 from v5.0.5 to v5.1.1 then it will carry over your old API keys. At that point you will just need to head to this plugins settings page to tell the website to use reCaptcha v2.\u003C\u002Fp>\n\u003Cp>Once installed and configured it should be the same reCaptcha functionality you are used to in previous versions of Contact Form 7.\u003C\u002Fp>\n\u003Ch3>IQComputing\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Like us on \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fiqcomputing\u002F\" title=\"IQComputing on Facebook\" rel=\"nofollow ugc\">Facebook\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Follow us on \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fiqcomputing\u002F\" title=\"IQComputing on Twitter\" rel=\"nofollow ugc\">Twitter\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Fork on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FIQComputing\u002Fwpcf7-recaptcha\" title=\"IQComputing on Github\" rel=\"nofollow ugc\">Github\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Adds reCaptcha v2 from Contact Form 7 5.0.5 that was dropped on Contact Form 7 5.1",3905275,89,"2025-04-15T22:52:00.000Z","6.7.5",[114,115,20,116],"contact-form-7","contact-form-7-recaptcha","spam","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpcf7-recaptcha.1.4.9.zip",{"attackSurface":119,"codeSignals":145,"taintFlows":159,"riskAssessment":160,"analyzedAt":174},{"hooks":120,"ajaxHandlers":141,"restRoutes":142,"shortcodes":143,"cronEvents":144,"entryPointCount":13,"unprotectedCount":13},[121,128,133,138],{"type":122,"name":123,"callback":124,"priority":125,"file":126,"line":127},"action","wp_enqueue_scripts","add_front_end_scripts",12,"classes\\recaptcha.class.php",15,{"type":122,"name":129,"callback":130,"priority":131,"file":126,"line":132},"admin_enqueue_scripts","add_styles",9,16,{"type":122,"name":134,"callback":135,"priority":136,"file":126,"line":137},"admin_menu","add_menu",11,17,{"type":122,"name":139,"callback":139,"priority":131,"file":126,"line":140},"admin_init",18,[],[],[],[],{"dangerousFunctions":146,"sqlUsage":147,"outputEscaping":149,"fileOperations":13,"externalRequests":157,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":158},[],{"prepared":13,"raw":13,"locations":148},[],{"escaped":13,"rawEcho":99,"locations":150},[151,154,155],{"file":126,"line":152,"context":153},70,"raw output",{"file":126,"line":74,"context":153},{"file":126,"line":156,"context":153},109,1,[],[],{"summary":161,"deductions":162},"The 'users-ultra-pro-recaptcha' plugin, version 1.0.1, exhibits a generally strong security posture based on the provided static analysis.  The plugin reports zero AJAX handlers, REST API routes, shortcodes, or cron events, indicating a very small attack surface. Furthermore, the absence of dangerous functions, raw SQL queries, file operations, and known CVEs suggests a robust development approach.  The plugin also utilizes prepared statements for all its SQL queries.\n\nHowever, there are significant concerns related to output escaping and the lack of fundamental security checks. Specifically, 100% of the identified output points are not properly escaped, posing a risk of Cross-Site Scripting (XSS) vulnerabilities. Additionally, the absence of nonce checks and capability checks on any potential entry points, although the analysis shows zero entry points, is a critical oversight. The presence of an external HTTP request without any context on its security implications also warrants attention. The plugin's vulnerability history being clean is a positive sign, but the identified code analysis issues could lead to severe vulnerabilities if not addressed.\n\nIn conclusion, while the plugin benefits from a small attack surface and good database practices, the critical lack of output escaping and the absence of essential security checks like nonces and capability checks present significant risks. The single external HTTP request also introduces an unknown factor. Addressing the output escaping and implementing proper authentication\u002Fauthorization mechanisms for any future or existing functionalities is paramount to improving its security.",[163,166,169,171],{"reason":164,"points":165},"Unescaped output detected",8,{"reason":167,"points":168},"Missing nonce checks",5,{"reason":170,"points":168},"Missing capability checks",{"reason":172,"points":173},"External HTTP request without context",2,"2026-03-17T01:22:54.502Z",{"wat":176,"direct":188},{"assetPaths":177,"generatorPatterns":181,"scriptPaths":182,"versionParams":184},[178,179,180],"\u002Fwp-content\u002Fplugins\u002Fusers-ultra-pro-recaptcha\u002Fadmin\u002Fscripts\u002Fadmin.js","\u002Fwp-content\u002Fplugins\u002Fusers-ultra-pro-recaptcha\u002Fadmin\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fusers-ultra-pro-recaptcha\u002Fadmin\u002Ftabs\u002F",[],[183],"https:\u002F\u002Fwww.google.com\u002Frecaptcha\u002Fapi.js",[185,186,187],"users-ultra-pro-recaptcha\u002Findex.php?ver=","users-ultra-pro-recaptcha\u002Fadmin\u002Fscripts\u002Fadmin.js?ver=","users-ultra-pro-recaptcha\u002Fadmin\u002Fcss\u002Fadmin.css?ver=",{"cssClasses":189,"htmlComments":192,"htmlAttributes":193,"restEndpoints":195,"jsGlobals":196,"shortcodeOutput":197},[190,191],"users-ultra-pro-recaptcha-admin","g-recaptcha",[],[194],"data-sitekey",[],[],[198],"\u003Cdiv class=\"g-recaptcha\" data-sitekey=\""]