[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuwSXdPr128NZL8bl9J57KTy9bcvbWC-AZkVZ3FZN9-Y":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":22,"download_link":23,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":33,"analysis":124,"fingerprints":169},"watchlog-rum","Watchlog RUM","0.2.0","watchlog","https:\u002F\u002Fprofiles.wordpress.org\u002Fwatchlog\u002F","\u003Cp>Watchlog RUM delivers Real User Monitoring for WordPress sites by mirroring the Watchlog Vue\u002FReact SDK event format. It tracks session lifecycle events, performance metrics, network activity, resource usage, and optional Web Vitals so you can understand how visitors experience your site in production.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Automatic \u003Ccode>session_start\u003C\u002Fcode>, \u003Ccode>page_view\u003C\u002Fcode>, and \u003Ccode>session_end\u003C\u002Fcode> events.\u003C\u002Fli>\n\u003Cli>Navigation\u002Fpaint timings plus optional Web Vitals (CLS, LCP, INP, TTFB, FID).\u003C\u002Fli>\n\u003Cli>Instrumentation for \u003Ccode>fetch\u003C\u002Fcode>, \u003Ccode>XMLHttpRequest\u003C\u002Fcode>, long tasks, resources, and user interactions.\u003C\u002Fli>\n\u003Cli>Breadcrumb and error capture hooks to enrich every event.\u003C\u002Fli>\n\u003Cli>WordPress-aware route normalization and session persistence to align data with SPA SDKs.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Third-Party Libraries\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>web-vitals (GoogleChrome\u002Fweb-vitals) — Source: https:\u002F\u002Fgithub.com\u002FGoogleChrome\u002Fweb-vitals — License: Apache-2.0 — Bundled file: assets\u002Fjs\u002Fweb-vitals.iife.js\u003C\u002Fli>\n\u003C\u002Ful>\n","Real User Monitoring (RUM) for WordPress powered by Watchlog.",0,96,"2025-12-27T18:41:00.000Z","6.9.4","5.8","7.4",[18,19,20,21],"analytics","monitoring","performance","rum","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwatchlog-rum.0.2.0.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":11,"avg_security_score":24,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},1,30,94,"2026-04-04T05:53:18.109Z",[34,51,73,94,109],{"slug":35,"name":36,"version":37,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":24,"num_ratings":29,"last_updated":44,"tested_up_to":45,"requires_at_least":46,"requires_php":47,"tags":48,"homepage":22,"download_link":50,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"speedvitals-rum","SpeedVitals RUM","1.0.2","SpeedVitals","https:\u002F\u002Fprofiles.wordpress.org\u002Fspeedvitals\u002F","\u003Cp>SpeedVitals RUM WordPress plugin provides seamless integration of SpeedVitals Real-User Monitoring into your WordPress site. Monitor and analyze your website’s performance metrics in real-time with SpeedVitals RUM.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy integration with SpeedVitals RUM\u003C\u002Fli>\n\u003Cli>Configurable script placement (header\u002Ffooter)\u003C\u002Fli>\n\u003Cli>Flexible script loading options (defer\u002Fasync)\u003C\u002Fli>\n\u003Cli>Simple setup with minimal configuration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>Site ID (Required)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Enter your SpeedVitals RUM Site ID\u003C\u002Fli>\n\u003Cli>This is required for the plugin to function\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Script Position (Optional)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Header (default): Places the script in the  section\u003C\u002Fli>\n\u003Cli>Footer: Places the script at the end of the  section\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Script Loading (Optional)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Defer (default): Loads the script after HTML parsing\u003C\u002Fli>\n\u003Cli>Async: Loads the script asynchronously with HTML parsing\u003C\u002Fli>\n\u003Cli>None: Loads the script normally without any loading attribute\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>Once configured with a valid Site ID, the plugin will automatically insert the SpeedVitals RUM tracking script into your website. The script will collect performance metrics and send them to your SpeedVitals dashboard.\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin sends data to the SpeedVitals API to monitor website performance metrics via Real User Monitoring (RUM). The library we are using to send the data is based built upon the Google Chrome’s Web Vitals Library (https:\u002F\u002Fgithub.com\u002FGoogleChrome\u002Fweb-vitals).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Data Sent: Performance metrics like page load time, resource timings, user-agent info, and other web vitals are sent to SpeedVitals servers.\u003C\u002Fli>\n\u003Cli>When: Data is sent automatically whenever users visit any page of your website\u003C\u002Fli>\n\u003Cli>Data storage: Data is stored in the EU servers for GDPR Compliance\u003C\u002Fli>\n\u003Cli>Service Provider: SpeedVitals (SpeedVitals Private Limited)\u003C\u002Fli>\n\u003Cli>Terms of Service: https:\u002F\u002Fapp.speedvitals.com\u002Fterms-of-use\u003C\u002Fli>\n\u003Cli>Privacy Policy: https:\u002F\u002Fspeedvitals.com\u002Fprivacy-policy\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support and documentation, please visit https:\u002F\u002Fspeedvitals.com\u002Fcontact-us\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPL v2 or later.\u003C\u002Fp>\n\u003Cp>For the full license text, please see the GNU General Public License v2.0 at https:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-2.0.html.\u003C\u002Fp>\n","Integrates SpeedVitals RUM Script in your WordPress Website",40,1002,"2025-06-25T06:15:00.000Z","6.8.5","5.0","7.0",[18,19,20,49,21],"real-user-monitoring","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fspeedvitals-rum.1.0.2.zip",{"slug":52,"name":53,"version":54,"author":55,"author_profile":56,"description":57,"short_description":58,"active_installs":59,"downloaded":60,"rating":24,"num_ratings":61,"last_updated":62,"tested_up_to":14,"requires_at_least":63,"requires_php":64,"tags":65,"homepage":69,"download_link":70,"security_score":71,"vuln_count":29,"unpatched_count":11,"last_vuln_date":72,"fetched_at":26},"vibes","Vibes","2.3.0","Pierre Lannoy","https:\u002F\u002Fprofiles.wordpress.org\u002Fpierrelannoy\u002F","\u003Cp>\u003Cstrong>Truthful user experience and browsing performances monitoring.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Vibes\u003C\u002Fstrong> is a robust user experience and browsing performances monitoring solution that analyzes perceived performances from users’ viewpoint.\u003C\u002Fp>\n\u003Cp>It is fully autonomous – does not rely on external services and does not require any API keys, works on any type of hosting and in any type of environment – including staging, intranets or password protected sites.\u003C\u002Fp>\n\u003Cp>By continuously monitoring user experience, \u003Cstrong>Vibes\u003C\u002Fstrong> can report:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>navigation performance KPIs per pages – like latency, redirections, browser caching hit rates, etc.;\u003C\u002Fli>\n\u003Cli>network timelines as if you were in the dev tools of your users’ browsers;\u003C\u002Fli>\n\u003Cli>resources details – like initiators, protocols, mime types, average sizes, etc.;\u003C\u002Fli>\n\u003Cli>Web Vitals: LCP, FID, CLS, FCP and TTFB.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>It can segment all this data per:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>user type (anonymous vs. authenticated);\u003C\u002Fli>\n\u003Cli>channel (frontend vs. backend);\u003C\u002Fli>\n\u003Cli>country (requires the free \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fip-locator\u002F\" rel=\"ugc\">IP Locator\u003C\u002Fa> plugin);\u003C\u002Fli>\n\u003Cli>device classes and types (requires the free \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdevice-detector\u002F\" rel=\"ugc\">Device Detector\u003C\u002Fa> plugin).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Vibes\u003C\u002Fstrong> supports multisite report delegation (see FAQ).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Vibes\u003C\u002Fstrong> supports WP-CLI commands to:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>display (past or current) performances signals in console – see \u003Ccode>wp help vibes tail\u003C\u002Fcode> for details;\u003C\u002Fli>\n\u003Cli>toggle on\u002Foff main settings – see \u003Ccode>wp help vibes settings\u003C\u002Fcode> for details.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For a full help on WP-CLI commands in Vibes, please \u003Ca href=\"https:\u002F\u002Fperfops.one\u002Fvibes-wpcli\" rel=\"nofollow ugc\">read this guide\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Vibes\u003C\u002Fstrong> is part of \u003Ca href=\"https:\u002F\u002Fperfops.one\u002F\" rel=\"nofollow ugc\">PerfOps One\u003C\u002Fa>, a suite of free and open source WordPress plugins dedicated to observability and operations performance.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>Vibes\u003C\u002Fstrong> is a free and open source plugin for WordPress. It integrates many other free and open source works (as-is or modified). Please, see ‘about’ tab in the plugin settings to see the details.\u003C\u002Fp>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>This plugin is free and provided without warranty of any kind. Use it at your own risk, I’m not responsible for any improper use of this plugin, nor for any damage it might cause to your site. Always backup all your data before installing a new plugin.\u003C\u002Fp>\n\u003Cp>Anyway, I’ll be glad to help you if you encounter issues when using this plugin. Just use the support section of this plugin page.\u003C\u002Fp>\n\u003Ch4>Donation\u003C\u002Fh4>\n\u003Cp>If you like this plugin or find it useful and want to thank me for the work done, please consider making a donation to \u003Ca href=\"https:\u002F\u002Fwww.laquadrature.net\u002Fen\" rel=\"nofollow ugc\">La Quadrature Du Net\u003C\u002Fa> or the \u003Ca href=\"https:\u002F\u002Fwww.eff.org\u002F\" rel=\"nofollow ugc\">Electronic Frontier Foundation\u003C\u002Fa> which are advocacy groups defending the rights and freedoms of citizens on the Internet. By supporting them, you help the daily actions they perform to defend our fundamental freedoms!\u003C\u002Fp>\n","Truthful user experience and browsing performances monitoring.",400,16959,2,"2025-11-14T06:40:00.000Z","6.2","8.1",[49,21,66,67,68],"ux","web-performance","web-vitals","https:\u002F\u002Fperfops.one\u002Fvibes","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvibes.2.3.0.zip",98,"2025-08-25 14:10:31",{"slug":74,"name":75,"version":76,"author":77,"author_profile":78,"description":79,"short_description":80,"active_installs":24,"downloaded":81,"rating":82,"num_ratings":29,"last_updated":83,"tested_up_to":84,"requires_at_least":85,"requires_php":86,"tags":87,"homepage":91,"download_link":92,"security_score":93,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"site24x7-rum","Site24x7 Real User Monitoring","1.3","Site24x7","https:\u002F\u002Fprofiles.wordpress.org\u002Fsite24x7integrations\u002F","\u003Cp>Real User Monitoring by Site24x7 gives accurate insight into real users application experience and helps visualise web app interaction patterns. Real User Monitoring provides deep insight into key performance metrics right from the initiation of the URL until the request is served back to the browser.\u003C\u002Fp>\n\u003Cp>The RUM plugin helps you add your Site24x7 RUM code snippet to the Head tag of your WordPress blog. Once added, Site24x7 immediately starts collecting data from your WordPress blog’s visitors. You can view all that collected data in \u003Ca href=\"https:\u002F\u002Fwww.site24x7.com\u002Fapp\u002Fapm#\u002Fapm\u002Frum\u002Flist\u002F\" rel=\"nofollow ugc\">Site24x7 console\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Site24x7 Real User Monitoring provides better understanding of performance issues by providing actionable data like showing real user performance by region, browser type, device used to access the application and more, these metric assist in pinpointing issues faster to make applications more fluid and user friendly. The back-end response time provides metrics from a server perspective calculating the time taken by the server to serve the request and statistics such as the page rendering time, document processing time and document downloading time, all of which help developers tailor applications to be more fluid to end users.please refer the help document for more information \u003Ca href=\"https:\u002F\u002Fwww.site24x7.com\u002Fhelp\u002Fapm\u002Frum.html\" rel=\"nofollow ugc\">site24x7-rum\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>P.S: You will need a Site24x7 account for this plugin. If you don’t have one, grab one at \u003Ca href=\"https:\u002F\u002Fwww.site24x7.com\u002Fsignup.html?pack=4&l=en\" rel=\"nofollow ugc\">site24x7.com\u003C\u002Fa> – its super-easy!\u003C\u002Fp>\n","Real User Monitoring (RUM) by Site24x7 provides deep and accurate insight into real users’experience on your WordPress setup.",3664,80,"2025-01-22T12:28:00.000Z","6.7.5","2.8","5.2.4",[88,49,21,89,90],"application-performance","user-experience-monitoring","website-monitoring","https:\u002F\u002Fwww.site24x7.com\u002Freal-user-monitoring.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsite24x7-rum.1.3.zip",92,{"slug":95,"name":96,"version":37,"author":97,"author_profile":98,"description":99,"short_description":100,"active_installs":11,"downloaded":101,"rating":11,"num_ratings":11,"last_updated":102,"tested_up_to":45,"requires_at_least":63,"requires_php":103,"tags":104,"homepage":107,"download_link":108,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"core-web-vitals-real-user-monitoring-rum","Core Web Vitals – Real User Monitoring (RUM)","Prakhar Bhatia","https:\u002F\u002Fprofiles.wordpress.org\u002Fprakharb88\u002F","\u003Cp>\u003Cstrong>Core Web Vitals RUM\u003C\u002Fstrong> is a comprehensive WordPress plugin that monitors your website’s Core Web Vitals metrics from real users, not just lab tests. Get actionable insights to improve your site’s performance and SEO rankings.\u003C\u002Fp>\n\u003Ch4>Why Real User Monitoring (RUM)?\u003C\u002Fh4>\n\u003Cp>While tools like Google PageSpeed Insights provide valuable lab data, they don’t reflect the actual experience of your visitors. Core Web Vitals RUM collects data from real users across different devices, browsers, and network conditions, giving you the most accurate picture of your site’s performance.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cp>🚀 \u003Cstrong>Real User Monitoring\u003C\u002Fstrong>\u003Cbr \u002F>\n* Collects LCP, INP, CLS, FCP, and TTFB from actual visitors\u003Cbr \u002F>\n* Tracks performance across different devices and browsers\u003Cbr \u002F>\n* Provides accurate, real-world performance data\u003C\u002Fp>\n\u003Cp>📊 \u003Cstrong>Comprehensive Analytics\u003C\u002Fstrong>\u003Cbr \u002F>\n* Beautiful dashboard with real-time performance scores\u003Cbr \u002F>\n* Detailed reports with trends and insights\u003Cbr \u002F>\n* Page-specific performance analysis\u003Cbr \u002F>\n* Device and browser breakdown\u003C\u002Fp>\n\u003Cp>🔔 \u003Cstrong>Smart Alerts\u003C\u002Fstrong>\u003Cbr \u002F>\n* Email notifications when performance drops\u003Cbr \u002F>\n* Configurable thresholds for each metric\u003Cbr \u002F>\n* Daily, weekly, or immediate alerts\u003Cbr \u002F>\n* Beautiful HTML email templates\u003C\u002Fp>\n\u003Cp>📈 \u003Cstrong>Google Analytics 4 Integration\u003C\u002Fstrong>\u003Cbr \u002F>\n* Send Core Web Vitals data to GA4\u003Cbr \u002F>\n* Custom events for each metric\u003Cbr \u002F>\n* Enhanced GA4 reporting capabilities\u003Cbr \u002F>\n* Measurement Protocol API integration\u003C\u002Fp>\n\u003Cp>⚙️ \u003Cstrong>Flexible Configuration\u003C\u002Fstrong>\u003Cbr \u002F>\n* Adjustable sample rates (1-100%)\u003Cbr \u002F>\n* Customizable performance thresholds\u003Cbr \u002F>\n* Data retention settings\u003Cbr \u002F>\n* Privacy-compliant data collection\u003C\u002Fp>\n\u003Cp>🔒 \u003Cstrong>Privacy & Security\u003C\u002Fstrong>\u003Cbr \u002F>\n* GDPR-compliant data collection\u003Cbr \u002F>\n* IP address anonymization\u003Cbr \u002F>\n* No personal data collection\u003Cbr \u002F>\n* Secure REST API endpoints with proper permission callbacks\u003Cbr \u002F>\n* Input validation and sanitization on all data\u003C\u002Fp>\n\u003Ch4>Core Web Vitals Explained\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>LCP (Largest Contentful Paint)\u003C\u002Fstrong>: Measures loading performance. Shows when the largest content element becomes visible.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>INP (Interaction to Next Paint)\u003C\u002Fstrong>: Measures interactivity. Shows how quickly the page responds to user interactions.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>CLS (Cumulative Layout Shift)\u003C\u002Fstrong>: Measures visual stability. Shows how much content shifts during page load.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>FCP (First Contentful Paint)\u003C\u002Fstrong>: Measures loading performance. Shows when the first content becomes visible.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>TTFB (Time to First Byte)\u003C\u002Fstrong>: Measures server response time. Shows how quickly the server responds to requests.\u003C\u002Fp>\n\u003Ch4>How It Works\u003C\u002Fh4>\n\u003Col>\n\u003Cli>\u003Cstrong>Data Collection\u003C\u002Fstrong>: The plugin automatically collects Core Web Vitals data from your visitors\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Analysis\u003C\u002Fstrong>: Data is processed and analyzed to provide meaningful insights\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Reporting\u003C\u002Fstrong>: View comprehensive reports in your WordPress admin dashboard\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Alerts\u003C\u002Fstrong>: Get notified when performance issues are detected\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Integration\u003C\u002Fstrong>: Send data to Google Analytics 4 for enhanced reporting\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Use Cases\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>SEO Optimization\u003C\u002Fstrong>: Improve your Core Web Vitals scores for better search rankings\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Performance Monitoring\u003C\u002Fstrong>: Track performance trends over time\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Issue Detection\u003C\u002Fstrong>: Identify performance problems before they impact users\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Competitive Analysis\u003C\u002Fstrong>: Compare your performance against industry standards\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User Experience\u003C\u002Fstrong>: Ensure your site provides a great experience for all visitors\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Privacy Compliance\u003C\u002Fh4>\n\u003Cp>The plugin is designed with privacy in mind:\u003Cbr \u002F>\n* No personal data is collected\u003Cbr \u002F>\n* IP addresses are anonymized\u003Cbr \u002F>\n* GDPR-compliant data collection\u003Cbr \u002F>\n* Users can opt-out of data collection\u003Cbr \u002F>\n* Data is stored securely on your server\u003C\u002Fp>\n\u003Ch4>Data Collection & Third-Party Services\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>What Data is Collected:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin collects anonymous performance metrics from your website visitors to help you monitor and improve your site’s Core Web Vitals scores. The following data is collected:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Performance Metrics\u003C\u002Fstrong>: LCP (Largest Contentful Paint), INP (Interaction to Next Paint), CLS (Cumulative Layout Shift), FCP (First Contentful Paint), and TTFB (Time to First Byte) values\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Page Information\u003C\u002Fstrong>: Page URL and page title where metrics were collected\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Technical Information\u003C\u002Fstrong>: Device type (mobile\u002Ftablet\u002Fdesktop), connection type, user agent string\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Anonymized Location\u003C\u002Fstrong>: IP addresses are anonymized by removing the last octet (IPv4) or last 80 bits (IPv6)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Session ID\u003C\u002Fstrong>: A randomly generated session identifier (not linked to any personal information)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>When Data is Collected:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Data collection can be enabled or disabled at any time in the plugin settings\u003C\u002Fli>\n\u003Cli>You can configure a sample rate (1-100%) to control what percentage of visitors have their metrics collected\u003C\u002Fli>\n\u003Cli>Data is collected only when visitors load pages on your website\u003C\u002Fli>\n\u003Cli>Collection is disabled by default until you enable monitoring in settings\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Where Data is Stored:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>All performance data is stored locally in your WordPress database on your own server\u003C\u002Fli>\n\u003Cli>No data is sent to external servers or third-party services by default\u003C\u002Fli>\n\u003Cli>You have full control over data retention periods (configurable from 1-365 days)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Optional Third-Party Service – Google Analytics 4:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>If you choose to enable the optional Google Analytics 4 (GA4) integration:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Core Web Vitals data will be sent to Google Analytics using the Measurement Protocol API\u003C\u002Fli>\n\u003Cli>You must provide your own GA4 Measurement ID and API Secret\u003C\u002Fli>\n\u003Cli>Data sent to GA4 is subject to Google’s privacy policy and terms of service\u003C\u002Fli>\n\u003Cli>Google Analytics 4 Privacy Policy: https:\u002F\u002Fpolicies.google.com\u002Fprivacy\u003C\u002Fli>\n\u003Cli>Google Analytics 4 Terms of Service: https:\u002F\u002Fmarketingplatform.google.com\u002Fabout\u002Fanalytics\u002Fterms\u002Fus\u002F\u003C\u002Fli>\n\u003Cli>This integration is completely optional and disabled by default\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>User Consent:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Site administrators have full control over enabling\u002Fdisabling data collection\u003C\u002Fli>\n\u003Cli>Monitoring can be turned off at any time from the plugin settings\u003C\u002Fli>\n\u003Cli>The plugin does not track individual users or collect personal information\u003C\u002Fli>\n\u003Cli>All collected data is aggregated and anonymized for performance analysis only\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Data Security:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>All REST API endpoints use proper authentication and validation\u003C\u002Fli>\n\u003Cli>Input data is sanitized and validated before storage\u003C\u002Fli>\n\u003Cli>Database queries use prepared statements to prevent SQL injection\u003C\u002Fli>\n\u003Cli>The plugin follows WordPress security best practices\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support, feature requests, or bug reports, please visit our \u003Ca href=\"https:\u002F\u002Fnandann.com\u002Fcontact\" rel=\"nofollow ugc\">support page\u003C\u002Fa> or create an issue on our GitHub repository.\u003C\u002Fp>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>This plugin collects anonymous performance data to help you improve your website’s Core Web Vitals scores. No personal information is collected, and all data is stored securely on your server. For more information, please review our privacy policy.\u003C\u002Fp>\n\u003Ch3>About the Developer\u003C\u002Fh3>\n\u003Cp>Prakhar Bhatia is a professional WordPress developer and troubleshooter with extensive experience in:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>WordPress Troubleshooting\u003C\u002Fstrong>: Expert diagnosis and resolution of complex WordPress issues, performance optimization, and security hardening\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Development\u003C\u002Fstrong>: Bespoke WordPress plugins, themes, and custom functionality tailored to specific business needs\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Site Migration & Hosting\u003C\u002Fstrong>: Seamless website migrations, hosting optimization, and server configuration for peak performance\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Security & Maintenance\u003C\u002Fstrong>: Comprehensive security audits, malware removal, and ongoing maintenance to keep sites secure\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Nandann Creative Agency specializes in WordPress development solutions for businesses of all sizes.\u003C\u002Fp>\n\u003Cp>Contact: prakhar@nandann.com | Website: https:\u002F\u002Fnandann.com\u003C\u002Fp>\n","Track Core Web Vitals (LCP, INP, CLS, FCP, TTFB) from real users with comprehensive analytics, GA4 integration, and performance insights.",168,"2025-11-14T02:26:00.000Z","7.2",[105,106,19,20,21],"core-web-vitals","lcp","https:\u002F\u002Fnandann.com\u002Fcontact","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcore-web-vitals-real-user-monitoring-rum.1.0.2.zip",{"slug":110,"name":111,"version":112,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":11,"downloaded":117,"rating":11,"num_ratings":11,"last_updated":118,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":119,"homepage":122,"download_link":123,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"linkrivers-site-monitor","LinkRivers Site Monitor","1.2.0","linkrivers","https:\u002F\u002Fprofiles.wordpress.org\u002Flinkrivers\u002F","\u003Cp>LinkRivers Site Monitor keeps your business website running smoothly with comprehensive monitoring that just works.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Perfect for local businesses:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Uptime Monitoring\u003C\u002Fstrong> – Get alerted instantly when your website goes down\u003C\u002Fli>\n\u003Cli>\u003Cstrong>SSL Certificate Tracking\u003C\u002Fstrong> – Never let your SSL expire unexpectedly\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Page Speed Monitoring\u003C\u002Fstrong> – Track how fast your site loads for real visitors\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Core Web Vitals\u003C\u002Fstrong> – Monitor Google’s key performance metrics (LCP, FID, CLS)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>SEO Health\u003C\u002Fstrong> – Autopilot suggests and fixes SEO issues automatically\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Form Tracking\u003C\u002Fstrong> – Know when visitors submit contact forms\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Error Detection\u003C\u002Fstrong> – Catch JavaScript errors before they affect customers\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Autopilot Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>LinkRivers Autopilot can automatically detect and fix common SEO issues:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Missing or poor meta descriptions\u003C\u002Fli>\n\u003Cli>Broken links\u003C\u002Fli>\n\u003Cli>Missing image alt text\u003C\u002Fli>\n\u003Cli>Schema markup issues\u003C\u002Fli>\n\u003Cli>Canonical URL problems\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Choose between “Review Mode” (approve changes before they’re applied) or “Auto Mode” (fixes applied automatically).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Built for Non-Technical Users:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>No complicated dashboards or technical jargon. Just a simple traffic light showing your website’s health status – green means everything’s good, yellow means attention needed, red means action required.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>External Service Notice:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin connects to the LinkRivers service (api.linkrivers.com) to:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Receive and store monitoring data\u003C\u002Fli>\n\u003Cli>Process SEO analysis\u003C\u002Fli>\n\u003Cli>Display metrics in your dashboard\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>A free LinkRivers account is required. View our \u003Ca href=\"https:\u002F\u002Flinkrivers.com\u002Fterms\" rel=\"nofollow ugc\">Terms of Service\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Flinkrivers.com\u002Fprivacy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Privacy\u003C\u002Fh3>\n\u003Cp>This plugin sends data to external servers (api.linkrivers.com). See our \u003Ca href=\"https:\u002F\u002Flinkrivers.com\u002Fprivacy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa> for details on what data is collected and how it is used.\u003C\u002Fp>\n\u003Cp>Data collected includes:\u003Cbr \u002F>\n* Page load timing metrics\u003Cbr \u002F>\n* Core Web Vitals measurements\u003Cbr \u002F>\n* JavaScript error messages (not user data)\u003Cbr \u002F>\n* Form submission events (metadata only, not form content)\u003Cbr \u002F>\n* Basic browser\u002Fdevice information\u003C\u002Fp>\n\u003Cp>No personal visitor data, form contents, or cookies are collected.\u003C\u002Fp>\n","Professional website monitoring for local businesses. Track uptime, SSL, page speed, SEO health, and Real User Monitoring.",139,"2026-02-04T11:20:00.000Z",[18,19,20,120,121],"seo","uptime","https:\u002F\u002Flinkrivers.com\u002Fwordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flinkrivers-site-monitor.1.2.0.zip",{"attackSurface":125,"codeSignals":150,"taintFlows":161,"riskAssessment":162,"analyzedAt":168},{"hooks":126,"ajaxHandlers":146,"restRoutes":147,"shortcodes":148,"cronEvents":149,"entryPointCount":11,"unprotectedCount":11},[127,133,137,141],{"type":128,"name":129,"callback":130,"file":131,"line":132},"action","admin_init","register_settings","includes\\class-watchlog-rum.php",50,{"type":128,"name":134,"callback":135,"file":131,"line":136},"admin_menu","register_settings_page",51,{"type":128,"name":138,"callback":139,"file":131,"line":140},"wp_enqueue_scripts","enqueue_assets",52,{"type":128,"name":142,"callback":143,"file":144,"line":145},"plugins_loaded","watchlog_rum_bootstrap","watchlog-rum.php",34,[],[],[],[],{"dangerousFunctions":151,"sqlUsage":152,"outputEscaping":154,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":29,"bundledLibraries":160},[],{"prepared":11,"raw":11,"locations":153},[],{"escaped":155,"rawEcho":29,"locations":156},21,[157],{"file":131,"line":158,"context":159},112,"raw output",[],[],{"summary":163,"deductions":164},"The \"watchlog-rum\" v0.2.0 plugin exhibits a strong security posture based on the static analysis. The absence of AJAX handlers, REST API routes, shortcodes, and cron events significantly limits the plugin's attack surface.  Furthermore, the code demonstrates good practices with 100% of SQL queries utilizing prepared statements and a high percentage (95%) of outputs being properly escaped. The single capability check also indicates an awareness of access control.\n\nHowever, a notable concern arises from the complete lack of nonce checks. While the plugin has a very small attack surface and the available capability checks mitigate some risk, the absence of nonces on any potential (though currently zero) entry points leaves it vulnerable to Cross-Site Request Forgery (CSRF) attacks if new entry points are added in future versions without corresponding security measures. The taint analysis showing zero flows is positive, but this is likely due to the plugin's limited functionality and lack of user-supplied input processing, which could change.\n\nThe plugin's vulnerability history is clean, with no recorded CVEs. This, combined with the positive static analysis results, suggests the developers are either new or have a strong focus on security. The lack of historical vulnerabilities is a positive indicator, but the absence of nonce checks remains a concerning oversight that should be addressed to ensure robust security.",[165],{"reason":166,"points":167},"Missing nonce checks",5,"2026-03-17T07:32:54.917Z",{"wat":170,"direct":179},{"assetPaths":171,"generatorPatterns":174,"scriptPaths":175,"versionParams":176},[172,173],"\u002Fwp-content\u002Fplugins\u002Fwatchlog-rum\u002Fincludes\u002Fjs\u002Fdist\u002Fbundle.js","\u002Fwp-content\u002Fplugins\u002Fwatchlog-rum\u002Fincludes\u002Fjs\u002Fdist\u002Fwatchlog-rum-script.js",[],[172,173],[177,178],"watchlog-rum\u002Fincludes\u002Fjs\u002Fdist\u002Fbundle.js?ver=","watchlog-rum\u002Fincludes\u002Fjs\u002Fdist\u002Fwatchlog-rum-script.js?ver=",{"cssClasses":180,"htmlComments":181,"htmlAttributes":182,"restEndpoints":183,"jsGlobals":184,"shortcodeOutput":186},[],[],[],[],[185],"window.watchlogRumConfig",[]]