[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1NrK3hJgxjVB1T6PwD5t-ycVT-gOhEr2-jMYnPJeZ7I":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":11,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":35,"analysis":116,"fingerprints":246},"vw-floating-chat","VW Floating Chat","1.2.0","vendweave","https:\u002F\u002Fprofiles.wordpress.org\u002Fvendweave\u002F","\u003Cp>VW Floating Chat adds a lightweight, accessible contact launcher to any WordPress site. Offer visitors a curated collection of chat and social links inside a draggable widget that sits on the left or right edge of the screen—similar to Chaty—without sacrificing performance or privacy.\u003C\u002Fp>\n\u003Ch3>Highlights\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Choose the default side (left or right) and fine-tune the widget offsets.\u003C\u002Fli>\n\u003Cli>Allow visitors to drag the widget anywhere; positions are stored in localStorage per browser.\u003C\u002Fli>\n\u003Cli>Toggle more than twenty contact and social channels with custom labels and destinations.\u003C\u002Fli>\n\u003Cli>Present official icons on the front-end with adjustable desktop and mobile sizing + spacing.\u003C\u002Fli>\n\u003Cli>Optional contextual tooltips and subtle attention effects keep the UI accessible yet lively.\u003C\u002Fli>\n\u003Cli>Enjoy a compact, card-based settings screen that keeps desktop and mobile controls side by side.\u003C\u002Fli>\n\u003Cli>Clean front-end CSS and vanilla JS with no external dependencies.\u003C\u002Fli>\n\u003Cli>Built following WordPress.org security, i18n, and accessibility guidelines.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy\u003C\u002Fh3>\n\u003Cp>VW Floating Chat does not send any data to external servers. If you enable WhatsApp, email, or call options, ensure your site’s privacy policy discloses that clicking those buttons opens third-party services (WhatsApp, email client, phone dialer). Drag positions are saved in the visitor’s browser using \u003Ccode>localStorage\u003C\u002Fcode> and can be cleared by removing browser data.\u003C\u002Fp>\n","A draggable floating chat widget offering WhatsApp, email, and call shortcuts with adjustable icon sizing.",100,304,1,"2025-12-18T07:14:00.000Z","6.9.4","5.8","7.4",[19,20,21,22,23],"chat","contact","floating","support","whatsapp","https:\u002F\u002Fvendweave.com\u002Fvw-floating-chat\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvw-floating-chat.1.2.0.zip",0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":11,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},2,30,94,"2026-04-04T15:23:10.029Z",[36,54,70,87,101],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":26,"downloaded":44,"rating":11,"num_ratings":45,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":52,"download_link":53,"security_score":11,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"simple-chat-app","Simple Chat App","1.0.0","sayem78","https:\u002F\u002Fprofiles.wordpress.org\u002Fsayem78\u002F","\u003Cp>Easily add a floating WhatsApp chat button to your WordPress site. Let your visitors contact you directly via WhatsApp with a single click. Admins can set the WhatsApp number and customize the button color from the settings page.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n* Floating WhatsApp chat button on all pages\u003Cbr \u002F>\n* Admin can set WhatsApp number and country code\u003Cbr \u002F>\n* Button color is fully customizable\u003Cbr \u002F>\n* Uses official WhatsApp wa.me service\u003Cbr \u002F>\n* Lightweight and easy to use\u003Cbr \u002F>\n* No coding required\u003C\u002Fp>\n","Easily add a floating WhatsApp chat button to your WordPress site. Let your visitors contact you directly via WhatsApp with a single click.",223,3,"2025-08-11T03:06:00.000Z","6.8.5","5.0","7.0",[19,20,51,22,23],"floating-button","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsimple-chat-app\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-chat-app.1.0.0.zip",{"slug":55,"name":56,"version":57,"author":58,"author_profile":59,"description":60,"short_description":61,"active_installs":62,"downloaded":63,"rating":11,"num_ratings":31,"last_updated":64,"tested_up_to":47,"requires_at_least":48,"requires_php":49,"tags":65,"homepage":68,"download_link":69,"security_score":11,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"chatfloat-floating-chat-button","ChatFloat – Floating Chat Button","1.2.1","Digital Eggheads","https:\u002F\u002Fprofiles.wordpress.org\u002Fdigitaleggheads\u002F","\u003Cp>A lightweight and easy-to-use WordPress plugin that adds a floating WhatsApp button on every page of your site. Let visitors instantly reach out via WhatsApp. Ideal for businesses, freelancers, or support teams who want to stay connected with their users in real time.\u003C\u002Fp>\n\u003Cp>Easily configure your WhatsApp number and button text from the plugin’s settings page. No coding required.\u003C\u002Fp>\n","A simple and lightweight plugin to add a floating WhatsApp button on your website. Fully customizable via admin settings.",50,1012,"2025-05-05T09:28:00.000Z",[19,66,51,23,67],"customer-service","whatsapp-support","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fchatfloat-floating-chat-button.1.2.1.zip",{"slug":71,"name":72,"version":73,"author":74,"author_profile":75,"description":76,"short_description":77,"active_installs":78,"downloaded":79,"rating":11,"num_ratings":80,"last_updated":81,"tested_up_to":47,"requires_at_least":48,"requires_php":82,"tags":83,"homepage":85,"download_link":86,"security_score":11,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"mw-messenger-button","MW Messenger Button","1.6.0","igor800","https:\u002F\u002Fprofiles.wordpress.org\u002Figor800\u002F","\u003Cp>MW-Whatsapp is a lightweight and customizable plugin that adds a beautiful WhatsApp contact button to your WordPress site.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>🔧 Customize phone number, button color and text  \u003C\u002Fli>\n\u003Cli>🎯 Control button position: vertical & horizontal offsets  \u003C\u002Fli>\n\u003Cli>\u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">↔\u003C\u002Fspan>️ Align button to the left or right side  \u003C\u002Fli>\n\u003Cli>🎨 Add your own CSS class and\u002For ID  \u003C\u002Fli>\n\u003Cli>💬 Set a default message (e.g. \u003Ccode>hello%20this%20is%20me\u003C\u002Fcode>)  \u003C\u002Fli>\n\u003Cli>👁️ Hide the button on desktop or mobile devices  \u003C\u002Fli>\n\u003Cli>🎭 Choose between two styles: classic icon or button with text  \u003C\u002Fli>\n\u003Cli>📱 Fully responsive design\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Perfect for support, chat, sales, and direct contact.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is released under the GPLv2 or later. You are free to use, modify, and distribute it.\u003C\u002Fp>\n","Adds an animated WhatsApp button to your site with customizable options: phone number, color, text, position, alignment, CSS class\u002FID, visibility, and &hellip;",10,347,5,"2025-06-28T14:18:00.000Z","7.2",[84,19,20,51,23],"button","https:\u002F\u002Fmoiseefweb.com\u002Fen\u002Fnews9","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmw-messenger-button.1.6.0.zip",{"slug":88,"name":89,"version":39,"author":90,"author_profile":91,"description":92,"short_description":93,"active_installs":78,"downloaded":94,"rating":26,"num_ratings":26,"last_updated":95,"tested_up_to":47,"requires_at_least":96,"requires_php":17,"tags":97,"homepage":99,"download_link":100,"security_score":11,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"nxt-floating-chat-widget","NXT Floating Chat Widget","NXTWEBSITE","https:\u002F\u002Fprofiles.wordpress.org\u002Fnxtwebsite\u002F","\u003Cp>NXT Floating Chat Widget (NXTFCW) adds a clean WhatsApp floating action button to your site so visitors can start a chat in a click.\u003Cbr \u002F>\nYou can configure the WhatsApp number, a pre-filled message, button position (4 corners), size presets (small\u002Fmedium\u002Flarge), and optionally track button clicks.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n* Position: bottom-right, bottom-left, top-right, top-left\u003Cbr \u002F>\n* Sizes: small, medium, large (responsive)\u003Cbr \u002F>\n* Pre-filled message support (emoji-friendly)\u003Cbr \u002F>\n* Optional click tracking (privacy-friendly, stored as a simple count in options)\u003Cbr \u002F>\n* Lightweight code; HTML\u002FCSS\u002FJS neatly separated\u003Cbr \u002F>\n* Translation-ready (Text Domain: \u003Ccode>nxt-floating-chat-widget\u003C\u002Fcode>)\u003C\u002Fp>\n\u003Ch3>Disclaimer\u003C\u002Fh3>\n\u003Cp>NXT Floating Chat Widget is \u003Cstrong>not affiliated with or endorsed by WhatsApp\u003C\u002Fstrong>. “WhatsApp” is a trademark of its respective owner.\u003C\u002Fp>\n\u003Ch3>Privacy\u003C\u002Fh3>\n\u003Cp>This plugin does not collect, store, or transmit personal data.\u003Cbr \u002F>\nWhen “Click Tracking” is enabled, a single integer counter is stored in the WordPress options table. No IP addresses or user identifiers are stored. Uninstalling the plugin removes this data.\u003C\u002Fp>\n","A lightweight, customizable WhatsApp floating button with position, size options, and optional click tracking.",193,"2025-10-13T07:16:00.000Z","6.0",[19,20,51,23,98],"widget","https:\u002F\u002Fnxtwebsite.com\u002Fwordpress\u002Fnxt-floating-chat-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnxt-floating-chat-widget.1.0.0.zip",{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":26,"downloaded":109,"rating":26,"num_ratings":26,"last_updated":68,"tested_up_to":47,"requires_at_least":16,"requires_php":17,"tags":110,"homepage":68,"download_link":114,"security_score":11,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":115},"advanced-contact-button","Advanced Contact Button","1.0.2","WPEnjoy","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpenjoy\u002F","\u003Cp>Advanced Contact Button is a powerful WordPress plugin that adds beautiful floating contact buttons to your website. It includes Call, Email, WhatsApp, and WeChat buttons that can be customized to match your needs.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Four contact buttons: Call, Email, WhatsApp, and WeChat\u003C\u002Fli>\n\u003Cli>Customizable button positions (Right Bottom, Right Middle)\u003C\u002Fli>\n\u003Cli>Two display styles: Icon Only or Icon with Text\u003C\u002Fli>\n\u003Cli>Individual enable\u002Fdisable options for each button\u003C\u002Fli>\n\u003Cli>Mobile-friendly and responsive design\u003C\u002Fli>\n\u003Cli>WeChat QR code display on hover\u003C\u002Fli>\n\u003Cli>Easy to configure through WordPress dashboard\u003C\u002Fli>\n\u003Cli>Clean and modern design\u003C\u002Fli>\n\u003Cli>Lightweight and fast\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Install and activate the plugin\u003C\u002Fli>\n\u003Cli>Go to Settings > Advanced Contact Button\u003C\u002Fli>\n\u003Cli>Configure your contact information and preferences\u003C\u002Fli>\n\u003Cli>Save changes and view your website\u003C\u002Fli>\n\u003C\u002Fol>\n","Add beautiful floating contact buttons (Call, Email, WhatsApp, WeChat) to your WordPress website with customizable settings.",323,[20,111,112,113,23],"contact-buttons","floating-buttons","wechat","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadvanced-contact-button.1.0.2.zip","2026-03-15T10:48:56.248Z",{"attackSurface":117,"codeSignals":149,"taintFlows":237,"riskAssessment":238,"analyzedAt":245},{"hooks":118,"ajaxHandlers":145,"restRoutes":146,"shortcodes":147,"cronEvents":148,"entryPointCount":26,"unprotectedCount":26},[119,124,128,132,136,140],{"type":120,"name":121,"callback":122,"file":123,"line":32},"action","admin_menu","register_settings_page","includes\\class-vwfc-admin.php",{"type":120,"name":125,"callback":126,"file":123,"line":127},"admin_init","register_settings",31,{"type":120,"name":129,"callback":130,"file":123,"line":131},"admin_enqueue_scripts","enqueue_assets",32,{"type":120,"name":133,"callback":130,"file":134,"line":135},"wp_enqueue_scripts","includes\\class-vwfc-frontend.php",27,{"type":120,"name":137,"callback":138,"file":134,"line":139},"wp_footer","render_widget",28,{"type":120,"name":141,"callback":142,"file":143,"line":144},"plugins_loaded","vwfc_bootstrap","vw-floating-chat.php",78,[],[],[],[],{"dangerousFunctions":150,"sqlUsage":151,"outputEscaping":153,"fileOperations":26,"externalRequests":26,"nonceChecks":26,"capabilityChecks":235,"bundledLibraries":236},[],{"prepared":26,"raw":26,"locations":152},[],{"escaped":154,"rawEcho":155,"locations":156},168,38,[157,161,163,165,167,169,171,173,175,177,179,181,183,185,187,189,191,193,195,197,199,201,203,205,207,209,211,213,215,217,219,221,223,225,227,229,231,233],{"file":158,"line":159,"context":160},"admin\\views\\settings-page.php",16,"raw output",{"file":158,"line":162,"context":160},18,{"file":158,"line":164,"context":160},39,{"file":158,"line":166,"context":160},43,{"file":158,"line":168,"context":160},47,{"file":158,"line":170,"context":160},57,{"file":158,"line":172,"context":160},61,{"file":158,"line":174,"context":160},69,{"file":158,"line":176,"context":160},74,{"file":158,"line":178,"context":160},83,{"file":158,"line":180,"context":160},88,{"file":158,"line":182,"context":160},97,{"file":158,"line":184,"context":160},102,{"file":158,"line":186,"context":160},113,{"file":158,"line":188,"context":160},117,{"file":158,"line":190,"context":160},130,{"file":158,"line":192,"context":160},139,{"file":158,"line":194,"context":160},143,{"file":158,"line":196,"context":160},144,{"file":158,"line":198,"context":160},145,{"file":158,"line":200,"context":160},153,{"file":158,"line":202,"context":160},154,{"file":158,"line":204,"context":160},158,{"file":158,"line":206,"context":160},162,{"file":158,"line":208,"context":160},165,{"file":158,"line":210,"context":160},182,{"file":158,"line":212,"context":160},198,{"file":158,"line":214,"context":160},231,{"file":158,"line":216,"context":160},265,{"file":158,"line":218,"context":160},266,{"file":158,"line":220,"context":160},271,{"file":158,"line":222,"context":160},276,{"file":158,"line":224,"context":160},278,{"file":158,"line":226,"context":160},338,{"file":158,"line":228,"context":160},373,{"file":158,"line":230,"context":160},414,{"file":134,"line":232,"context":160},147,{"file":134,"line":234,"context":160},157,4,[],[],{"summary":239,"deductions":240},"The \"vw-floating-chat\" v1.2.0 plugin exhibits a strong security posture based on the provided static analysis. The absence of critical security signals such as dangerous functions, raw SQL queries, and taint flows with unsanitized paths is highly positive. Furthermore, the plugin demonstrates good practices by consistently using prepared statements for SQL queries and maintaining a high percentage of properly escaped output. The limited attack surface, with no identified AJAX handlers, REST API routes, shortcodes, or cron events, further enhances its security profile, suggesting a well-contained plugin.\n\nWhile the code analysis reveals no immediate vulnerabilities, the presence of 4 capability checks and 82% output escaping, though generally good, indicates areas where an attacker might potentially find edge cases for exploitation. The lack of nonce checks on any entry points, coupled with no explicit permission callbacks on REST API routes (though none were found), could present a risk if new entry points were introduced or existing ones were exposed without proper authentication in future updates. The plugin's vulnerability history is clean, with no known CVEs, which is a significant strength. However, this could also be interpreted as a lack of rigorous past security audits or a limited history of public disclosures. The overall assessment is that the plugin is currently secure, but ongoing vigilance and attention to future updates are recommended, particularly concerning any new entry points or changes in output escaping efficiency.",[241,243],{"reason":242,"points":80},"Nonce checks missing on entry points",{"reason":244,"points":235},"Output escaping not 100% proper","2026-03-16T21:07:34.924Z",{"wat":247,"direct":260},{"assetPaths":248,"generatorPatterns":253,"scriptPaths":254,"versionParams":255},[249,250,251,252],"\u002Fwp-content\u002Fplugins\u002Fvw-floating-chat\u002Fadmin\u002Fcss\u002Fvwfc-admin.css","\u002Fwp-content\u002Fplugins\u002Fvw-floating-chat\u002Fadmin\u002Fjs\u002Fvwfc-admin.js","\u002Fwp-content\u002Fplugins\u002Fvw-floating-chat\u002Fassets\u002Fcss\u002Ffrontend.css","\u002Fwp-content\u002Fplugins\u002Fvw-floating-chat\u002Fassets\u002Fjs\u002Ffrontend.js",[],[250,252],[256,257,258,259],"vw-floating-chat\u002Fadmin\u002Fcss\u002Fvwfc-admin.css?ver=","vw-floating-chat\u002Fadmin\u002Fjs\u002Fvwfc-admin.js?ver=","vw-floating-chat\u002Fassets\u002Fcss\u002Ffrontend.css?ver=","vw-floating-chat\u002Fassets\u002Fjs\u002Ffrontend.js?ver=",{"cssClasses":261,"htmlComments":276,"htmlAttributes":277,"restEndpoints":281,"jsGlobals":282,"shortcodeOutput":284},[262,263,264,265,266,267,268,269,270,271,272,273,274,275],"vwfc-chat-widget","vwfc-channel-item","vwfc-channel-icon","vwfc-channel-label","vwfc-toggle-button","vwfc-chat-content","vwfc-chat-header","vwfc-chat-body","vwfc-chat-footer","vwfc-close-button","vwfc-drag-handle","vwfc-form-field","vwfc-form-label","vwfc-form-input",[],[278,279,280],"data-vwfc-channel-slug","data-vwfc-channel-label","data-vwfc-channel-type",[],[283],"VWFCAdmin",[]]