[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foxjnfspiLV0I3WzmPbqkWSwprskGjOG-PYK12orjLTE":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":47,"crawl_stats":38,"alternatives":54,"analysis":149,"fingerprints":395},"wc-carta-docente","ilGhera Carta Docente for WooCommerce","1.5.1","ilGhera","https:\u002F\u002Fprofiles.wordpress.org\u002Fghera74\u002F","\u003Cp>Il plugin consente di abilitare sul proprio store il pagamento con Carta del Docente.\u003Cbr \u002F>\nIn fase di checkout, il buono inserito dall’utente verrà verificato per validità, credito disponibile e pertinenza in termini di tipologia di prodotto.\u003C\u002Fp>\n\u003Ch4>Nore importanti\u003C\u002Fh4>\n\u003Cp>Il plugin prevede l’invio di contenuti ad un servizio esterno, in particolare i dati relativi ai prodotti acquistati dall’utente come categoria d’appartenenza e prezzo.\u003C\u002Fp>\n\u003Ch4>Indirizzo di destinazione\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fws.cartadeldocente.istruzione.it\u002FVerificaVoucherDocWEB\u002FVerificaVoucher\" rel=\"nofollow ugc\">https:\u002F\u002Fws.cartadeldocente.istruzione.it\u002FVerificaVoucherDocWEB\u002FVerificaVoucher\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Maggiori informazioni sul servizio Carta del docente:\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcartadeldocente.istruzione.it\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fcartadeldocente.istruzione.it\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Informativa privacy del servizio:\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcartadeldocente.istruzione.it\u002Fstatic\u002Fcartadeldocente_infoprivacy.pdf\" rel=\"nofollow ugc\">https:\u002F\u002Fcartadeldocente.istruzione.it\u002Fstatic\u002Fcartadeldocente_infoprivacy.pdf\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Important notes\u003C\u002Fh4>\n\u003Cp>This plugin sends data to an external service, like the categories and the prices of the products bought by the user.\u003C\u002Fp>\n\u003Ch4>Service endpoint:\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fws.cartadeldocente.istruzione.it\u002FVerificaVoucherDocWEB\u002FVerificaVoucher\" rel=\"nofollow ugc\">https:\u002F\u002Fws.cartadeldocente.istruzione.it\u002FVerificaVoucherDocWEB\u002FVerificaVoucher\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Service informations:\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcartadeldocente.istruzione.it\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fcartadeldocente.istruzione.it\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Service privacy policy:\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcartadeldocente.istruzione.it\u002Fstatic\u002Fcartadeldocente_infoprivacy.pdf\" rel=\"nofollow ugc\">https:\u002F\u002Fcartadeldocente.istruzione.it\u002Fstatic\u002Fcartadeldocente_infoprivacy.pdf\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Funzionalità\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Caricamento certificato (.pem)\u003C\u002Fli>\n\u003Cli>Impostazione categorie prodotti WooCommerce acquistabili\u003C\u002Fli>\n\u003Cli>Generazione richiesta certificato (.der) (Premium)\u003C\u002Fli>\n\u003Cli>Generazione certificato (.pem) (Premium)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FCU00ZZBZplI?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n","Abilita in WooCommerce il pagamento con Carta del Docente.",200,8272,92,10,"2026-03-13T07:32:00.000Z","6.9.4","4.0","",[20,21,22,23,24],"18app","carta-docente","carte-cultura","payment-gateway","woocommerce","https:\u002F\u002Fwww.ilghera.com\u002Fproduct\u002Fwc-carta-docente\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwc-carta-docente.1.5.1.zip",99,1,0,"2026-03-19 20:03:09","2026-03-15T15:16:48.613Z",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":6,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":30,"updated_date":44,"references":45,"days_to_patch":28},"CVE-2026-2421","ilghera-carta-docente-for-woocommerce-authenticated-administrator-path-traversal-to-arbitrary-file-deletion-via-cert-par","ilGhera Carta Docente for WooCommerce \u003C= 1.5.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'cert' Parameter","The ilGhera Carta Docente for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 via the 'cert' parameter of the 'wccd-delete-certificate' AJAX action. This is due to insufficient file path validation before performing a file deletion. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, such as wp-config.php, which can make site takeover and remote code execution possible.",null,"\u003C=1.5.0","medium",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","2026-03-20 08:26:02",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F7aab1307-7fb5-46fb-ae12-087dce3086fc?source=api-prod",{"slug":48,"display_name":7,"profile_url":8,"plugin_count":49,"total_installs":50,"avg_security_score":27,"avg_patch_time_days":51,"trust_score":52,"computed_at":53},"ghera74",13,1660,129,78,"2026-04-04T09:32:37.382Z",[55,69,90,110,131],{"slug":56,"name":57,"version":58,"author":7,"author_profile":8,"description":59,"short_description":60,"active_installs":61,"downloaded":62,"rating":29,"num_ratings":29,"last_updated":63,"tested_up_to":64,"requires_at_least":17,"requires_php":18,"tags":65,"homepage":66,"download_link":67,"security_score":68,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"wc-carte-cultura","WC Carte Cultura","1.1.0","\u003Cp>Il plugin consente di abilitare sul proprio store il pagamento con Carta della Cultura Giovane e Carta del Merito.\u003Cbr \u002F>\nIn fase di checkout, il buono inserito dall’utente verrà verificato per validità, credito disponibile e pertinenza in termini di tipologia di prodotto.\u003C\u002Fp>\n\u003Ch4>Nore importanti\u003C\u002Fh4>\n\u003Cp>Il plugin prevede l’invio di contenuti ad un servizio esterno, in particolare i dati relativi ai prodotti acquistati dall’utente come categoria d’appartenenza e prezzo.\u003C\u002Fp>\n\u003Ch4>Indirizzo di destinazione\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fws-cartegiovani.cultura.gov.it\u002FWSUtilizzoVoucherGMWEB\u002FVerificaVoucher\" rel=\"nofollow ugc\">https:\u002F\u002Fws-cartegiovani.cultura.gov.it\u002FWSUtilizzoVoucherGMWEB\u002FVerificaVoucher\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Maggiori informazioni sul servizio Carte Cultura:\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcartegiovani.cultura.gov.it\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fcartegiovani.cultura.gov.it\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Informativa privacy del servizio:\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcartegiovani.cultura.gov.it\u002Fassets\u002Fdocs\u002FInfoprivacy_GM_Esercenti.pdf\" rel=\"nofollow ugc\">https:\u002F\u002Fcartegiovani.cultura.gov.it\u002Fassets\u002Fdocs\u002FInfoprivacy_GM_Esercenti.pdf\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Important notes\u003C\u002Fh4>\n\u003Cp>This plugin sends data to an external service, like the categories and the prices of the products bought by the user.\u003C\u002Fp>\n\u003Ch4>Service endpoint:\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fws-cartegiovani.cultura.gov.it\u002FWSUtilizzoVoucherGMWEB\u002FVerificaVoucher\" rel=\"nofollow ugc\">https:\u002F\u002Fws-cartegiovani.cultura.gov.it\u002FWSUtilizzoVoucherGMWEB\u002FVerificaVoucher\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Service informations:\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcartegiovani.cultura.gov.it\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fcartegiovani.cultura.gov.it\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Service privacy policy:\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcartegiovani.cultura.gov.it\u002Fassets\u002Fdocs\u002FInfoprivacy_GM_Esercenti.pdf\" rel=\"nofollow ugc\">https:\u002F\u002Fcartegiovani.cultura.gov.it\u002Fassets\u002Fdocs\u002FInfoprivacy_GM_Esercenti.pdf\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Funzionalità\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Caricamento certificato (.pem)\u003C\u002Fli>\n\u003Cli>Impostazione categorie prodotti WooCommerce acquistabili\u003C\u002Fli>\n\u003Cli>Generazione richiesta certificato (.der) (Premium)\u003C\u002Fli>\n\u003Cli>Generazione certificato (.pem) (Premium)\u003C\u002Fli>\n\u003C\u002Ful>\n","Abilita in WooCommerce il pagamento con Carte Cultura.",40,1737,"2026-02-04T14:10:00.000Z","6.8.5",[20,21,22,23,24],"https:\u002F\u002Fwww.ilghera.com\u002Fproduct\u002Fwoocommerce-carte-cultura-premium\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwc-carte-cultura.1.1.0.zip",100,{"slug":70,"name":71,"version":72,"author":73,"author_profile":74,"description":75,"short_description":76,"active_installs":77,"downloaded":78,"rating":79,"num_ratings":80,"last_updated":81,"tested_up_to":64,"requires_at_least":82,"requires_php":83,"tags":84,"homepage":88,"download_link":89,"security_score":68,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"woo-paystack","Paystack WooCommerce Payment Gateway","5.8.2","Tunbosun Ayinla","https:\u002F\u002Fprofiles.wordpress.org\u002Ftubiz\u002F","\u003Cp>Paystack makes it easy for businesses in Nigeria, Ghana, Kenya and South Africa to accept secure payments from multiple local and global payment channels. Integrate Paystack with your store today, and let your customers pay you with their choice of methods.\u003C\u002Fp>\n\u003Cp>With Paystack for WooCommerce, you can accept payments via:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Credit\u002FDebit Cards — Visa, Mastercard, Verve (NG, GH, KE), American Express (SA only)\u003C\u002Fli>\n\u003Cli>Bank transfer (Nigeria)\u003C\u002Fli>\n\u003Cli>Mobile money (Ghana)\u003C\u002Fli>\n\u003Cli>Masterpass (South Africa)\u003C\u002Fli>\n\u003Cli>EFT (South Africa)\u003C\u002Fli>\n\u003Cli>USSD (Nigeria)\u003C\u002Fli>\n\u003Cli>Visa QR (Nigeria)\u003C\u002Fli>\n\u003Cli>Many more coming soon\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Why Paystack?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Start receiving payments instantly—go from sign-up to your first real transaction in as little as 15 minutes\u003C\u002Fli>\n\u003Cli>Simple, transparent pricing—no hidden charges or fees\u003C\u002Fli>\n\u003Cli>Modern, seamless payment experience via the Paystack Checkout — \u003Ca href=\"https:\u002F\u002Fpaystack.com\u002Fdemo\u002Fcheckout\" rel=\"nofollow ugc\">Try the demo!\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Advanced fraud detection\u003C\u002Fli>\n\u003Cli>Understand your customers better through a simple and elegant dashboard\u003C\u002Fli>\n\u003Cli>Access to attentive, empathetic customer support 24\u002F7\u003C\u002Fli>\n\u003Cli>Free updates as we launch new features and payment options\u003C\u002Fli>\n\u003Cli>Clearly documented APIs to build your custom payment experiences\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Over 60,000 businesses of all sizes in Nigeria, Ghana, Kenya, and South Africa rely on Paystack’s suite of products to receive payments and make payouts seamlessly. Sign up on \u003Ca href=\"https:\u002F\u002Fpaystack.com\u002Fsignup\" rel=\"nofollow ugc\">Paystack.com\u002Fsignup\u003C\u002Fa> to get started.\u003C\u002Fp>\n\u003Ch4>Note\u003C\u002Fh4>\n\u003Cp>This plugin is meant to be used by merchants in Ghana, Kenya, Nigeria and South Africa.\u003C\u002Fp>\n\u003Ch4>Plugin Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Accept payment\u003C\u002Fstrong> via Mastercard, Visa, Verve, USSD, Mobile Money, Bank Transfer, EFT, Bank Accounts, GTB 737 & Visa QR.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Seamless integration\u003C\u002Fstrong> into the WooCommerce checkout page. Accept payment directly on your site\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Refunds\u003C\u002Fstrong> from the WooCommerce order details page. Refund an order directly from the order details page\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Recurring payment\u003C\u002Fstrong> using \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fwoocommerce-subscriptions\u002F\" rel=\"nofollow ugc\">WooCommerce Subscriptions\u003C\u002Fa> plugin\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WooCommerce Subscriptions Integration\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\n\u003Cp>The \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fwoocommerce-subscriptions\u002F\" rel=\"nofollow ugc\">WooCommerce Subscriptions\u003C\u002Fa> integration only works with \u003Cstrong>WooCommerce v2.6 and above\u003C\u002Fstrong> and \u003Cstrong>WooCommerce Subscriptions v2.0 and above\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>No subscription plans is created on Paystack. The \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fwoocommerce-subscriptions\u002F\" rel=\"nofollow ugc\">WooCommerce Subscriptions\u003C\u002Fa> plugin handles all the subscription functionality.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>If a customer pays for a subscription using a Mastercard or Visa card, their subscription will renew automatically throughout the duration of the subscription. If an automatic renewal fail their subscription will be put on-hold and they will have to login to their account to renew the subscription.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>For customers paying with a Verve card, their subscription can’t be renewed automatically, once a payment is due their subscription will be on-hold. The customer will have to login to his account to manually renew his subscription.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>If a subscription has a free trial and no signup-fee, automatic renewal is not possible for the first payment because the initial order total will be 0, after the free trial the subscription will be put on-hold. The customer will have to login to his account to renew his subscription. If a Mastercard or Visa card is used to renew the subscription subsequent renewals will be automatic throughout the duration of the subscription, if a Verve card is used automatic renewal isn’t possible.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Suggestions \u002F Feature Request\u003C\u002Fh4>\n\u003Cp>If you have suggestions or a new feature request, feel free to get in touch with me via the contact form on my website \u003Ca href=\"http:\u002F\u002Fbosun.me\u002Fget-in-touch\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>You can also follow me on Twitter! \u003Cstrong>\u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Ftubiz\" rel=\"nofollow ugc\">@tubiz\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n","Paystack for WooCommerce allows your WooCommerce store to accept secure payments from multiple local and global payment channels.",30000,432109,90,24,"2025-04-17T08:26:00.000Z","6.2","7.4",[85,23,86,87,24],"mastercard","paystack","visa","https:\u002F\u002Fpaystack.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwoo-paystack.5.8.2.zip",{"slug":91,"name":92,"version":93,"author":94,"author_profile":95,"description":96,"short_description":97,"active_installs":98,"downloaded":99,"rating":68,"num_ratings":100,"last_updated":101,"tested_up_to":16,"requires_at_least":102,"requires_php":103,"tags":104,"homepage":108,"download_link":109,"security_score":68,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"montonio-for-woocommerce","Montonio for WooCommerce","9.4.1","Montonio","https:\u002F\u002Fprofiles.wordpress.org\u002Fmontonio\u002F","\u003Cp>Montonio is a complete checkout solution for online stores that includes all popular payment methods (local banks, card payments, Apple Pay, Google Pay) plus financing and shipping. Montonio offers you everything you need in your online store checkout.\u003C\u002Fp>\n\u003Ch4>Payments\u003C\u002Fh4>\n\u003Cp>The easiest way to collect payments in your online store. Montonio payment initiation service offers integrations with all major banks in Estonia, Finland, Latvia, Lithuania and Poland, additionally Apple Pay, Google Pay, Revolut (available everywhere) and Blik in Poland.\u003C\u002Fp>\n\u003Cp>All funds are immediately deposited to your bank account and an overview of the transactions can be found in our \u003Ca href=\"https:\u002F\u002Fpartner.montonio.com\" rel=\"nofollow ugc\">partner system\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Card Payments\u003C\u002Fh4>\n\u003Cp>Give your customers more ways to pay. In addition to payment links, Montonio lets your users pay by credit card.\u003C\u002Fp>\n\u003Ch4>Apple Pay, Google Pay\u003C\u002Fh4>\n\u003Cp>Want to offer an even easier way of paying? We also have Apple Pay and Google Pay! You can add these popular mobile wallets to your online store’s checkout. Your customers can pay faster since their credit card info is stored in the digital wallet and they don’t need to enter card details with each purchase.\u003C\u002Fp>\n\u003Ch4>Refunds\u003C\u002Fh4>\n\u003Cp>You can do a partial or full refund with a couple of clicks in the Montonio Partner System. Just open the order, check what items your customer returned and refund the amount needed.\u003C\u002Fp>\n\u003Ch4>Financing (Hire purchase)\u003C\u002Fh4>\n\u003Cp>Montonio Financing is just the right solution for financing larger purchases. You customers can choose a payment schedule that exactly suits their needs. Shoppers pay in equal instalments but you will get the full payment amount upfront. Plus, there’s no service fee for the merchant.\u003C\u002Fp>\n\u003Ch4>Pay Later\u003C\u002Fh4>\n\u003Cp>Give your visitors the most convenient ways to pay – with Montonio ‘Pay later’ your customers can pay later or split purchase into two or three payments. All this without any additional interest or contract fees for them. Shoppers pay in equal instalments but you will get the full payment amount upfront.\u003C\u002Fp>\n\u003Ch4>Shipping\u003C\u002Fh4>\n\u003Cp>Handle everything from one system: automatically generate, edit and print shipping labels without having to ever leave the Montonio dashboard. Labels are automatically retrieved from providers after order creation. You can start printing with just 2 clicks. With Montonio you can add order tracking codes with a link to the providers’ tracking page.\u003C\u002Fp>\n\u003Ch4>How to get started\u003C\u002Fh4>\n\u003Cp>Adding Montonio to your store is only a matter of minutes.\u003Cbr \u002F>\n1. Sign up at \u003Ca href=\"https:\u002F\u002Fmontonio.com\" rel=\"nofollow ugc\">montonio.com\u003C\u002Fa>\u003Cbr \u002F>\n2. Verify your identity and confirm your account with Montonio\u003Cbr \u002F>\n3. Set up the plugin, insert API keys and start using Montonio. More details on how to install and set up the plugin can be found in the Installation tab.\u003C\u002Fp>\n\u003Ch4>Availability\u003C\u002Fh4>\n\u003Cp>Montonio currently offers services in these countries:\u003Cbr \u002F>\n* Payments: Estonia, Finland, Latvia, Lithuania, Poland\u003Cbr \u002F>\n* Card payments: Estonia, Finland, Latvia, Lithuania, Poland\u003Cbr \u002F>\n* Financing: Estonia\u003Cbr \u002F>\n* Pay Later: Estonia\u003Cbr \u002F>\n* Shipping: Estonia, Latvia, Lithuania\u003Cbr \u002F>\nWe are also working on adding new countries.\u003C\u002Fp>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>Any questions? Just drop us an email at support@montonio.com.\u003C\u002Fp>\n\u003Ch4>WANT TO KNOW MORE?\u003C\u002Fh4>\n\u003Cp>More information about our solutions can be found on our \u003Ca href=\"https:\u002F\u002Fmontonio.com\" rel=\"nofollow ugc\">website\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin connects to multiple Montonio services to provide payment processing, shipping management, and service improvements:\u003C\u002Fp>\n\u003Ch4>Montonio Payment Gateway (Stargate)\u003C\u002Fh4>\n\u003Cp>What it does: Processes various payment methods including bank payments, card payments, BLIK payments, hire purchase and pay later options.\u003C\u002Fp>\n\u003Cp>Data transmitted: Order information (total amount, currency, order items), customer details (name, email, billing\u002Fshipping addresses), payment method selection, and merchant identification.\u003C\u002Fp>\n\u003Cp>When transmitted: During checkout when a payment is initiated, when checking payment status, and when processing refunds.\u003C\u002Fp>\n\u003Cp>Service URLs:\u003Cbr \u002F>\n* Production: https:\u002F\u002Fstargate.montonio.com\u002Fapi\u003Cbr \u002F>\n* Sandbox: https:\u002F\u002Fsandbox-stargate.montonio.com\u002Fapi\u003C\u002Fp>\n\u003Cp>Service information: \u003Ca href=\"https:\u002F\u002Fs3.eu-central-1.amazonaws.com\u002Fpublic.montonio.com\u002Fterms_and_conditions\u002Fmontonio_general\u002Fv3.0\u002Fmontonio_general_ee.pdf\" rel=\"nofollow ugc\">Terms of Service\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fmontonio.com\u002Flegal\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Montonio Shipping API\u003C\u002Fh4>\n\u003Cp>What it does: Manages shipping methods, pickup points, courier services, label generation and shipment tracking.\u003C\u002Fp>\n\u003Cp>Data transmitted: Shipping addresses, order details, selected shipping methods, parcel information (weight, dimensions), and shipment tracking information.\u003C\u002Fp>\n\u003Cp>When transmitted: When retrieving available shipping methods, displaying pickup points, creating shipments, and generating shipping labels.\u003C\u002Fp>\n\u003Cp>Service URLs:\u003Cbr \u002F>\n* Production: https:\u002F\u002Fshipping.montonio.com\u002Fapi\u003Cbr \u002F>\n* Sandbox: https:\u002F\u002Fsandbox-shipping.montonio.com\u002Fapi\u003C\u002Fp>\n\u003Cp>Service information: \u003Ca href=\"https:\u002F\u002Fs3.eu-central-1.amazonaws.com\u002Fpublic.montonio.com\u002Fterms_and_conditions\u002Fshipping\u002Fv3.0\u002Fshipping_international.pdf\" rel=\"nofollow ugc\">Terms of Service\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fmontonio.com\u002Flegal\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Montonio JavaScript SDK\u003C\u002Fh4>\n\u003Cp>What it does: Client-side library that renders payment forms, handles payment method selection and processes transactions.\u003C\u002Fp>\n\u003Cp>Data transmitted: Payment form inputs, selected payment method details, transaction authentication data.\u003C\u002Fp>\n\u003Cp>When transmitted: During checkout when payment forms are displayed and when customers interact with payment elements.\u003C\u002Fp>\n\u003Cp>Service URLs:\u003Cbr \u002F>\n* Montonio JS: https:\u002F\u002Fjs.montonio.com\u002F1.x.x\u002Fmontonio.umd.js\u003Cbr \u002F>\n* Montonio JS (Legacy): https:\u002F\u002Fpublic.montonio.com\u002Fassets\u002Fmontonio-js\u002F3.x\u002Fmontonio.bundle.js\u003Cbr \u002F>\n* Card payments API (Production): https:\u002F\u002Fapi.card-payments.montonio.com\u002Fpayment-intents\u003Cbr \u002F>\n* Card payments API (Sandbox): https:\u002F\u002Fapi.sandbox-card-payments.montonio.com\u002Fpayment-intents\u003Cbr \u002F>\n* Payment intents API (Production): https:\u002F\u002Fstargate.montonio.com\u002Fapi\u002Fpayment-intents\u003Cbr \u002F>\n* Payment intents API (Sandbox): https:\u002F\u002Fsandbox-stargate.montonio.com\u002Fapi\u002Fpayment-intents\u003C\u002Fp>\n\u003Cp>Service information: \u003Ca href=\"https:\u002F\u002Fs3.eu-central-1.amazonaws.com\u002Fpublic.montonio.com\u002Fterms_and_conditions\u002Fpayment_initiation\u002Fv3.0\u002Fpayment_initiation_international.pdf\" rel=\"nofollow ugc\">Bank Payment Terms of Service\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fs3.eu-central-1.amazonaws.com\u002Fpublic.montonio.com\u002Fterms_and_conditions\u002Fcard_payments\u002Fv3.0\u002Fcard_payments_international.pdf\" rel=\"nofollow ugc\">Card Payment Terms of Service\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fmontonio.com\u002Flegal\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Montonio Telemetry Service\u003C\u002Fh4>\n\u003Cp>What it does: Sends Store URL, WordPress\u002FWooCommerce version information and plugin configuration settings to offer better customer support when troubleshooting issues. No sensitive or private data is collected.\u003C\u002Fp>\n\u003Cp>Data transmitted: Store URL, WordPress\u002FWooCommerce version information, plugin configuration settings (with sensitive data removed).\u003C\u002Fp>\n\u003Cp>When transmitted: Upon plugin activation, deactivation, settings changes, and periodically (once per day).\u003C\u002Fp>\n\u003Cp>Service URL: https:\u002F\u002Fplugin-telemetry.montonio.com\u002Fapi\u003C\u002Fp>\n\u003Cp>Service information: \u003Ca href=\"https:\u002F\u002Fs3.eu-central-1.amazonaws.com\u002Fpublic.montonio.com\u002Fterms_and_conditions\u002Fmontonio_general\u002Fv3.0\u002Fmontonio_general_ee.pdf\" rel=\"nofollow ugc\">Terms of Service\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fmontonio.com\u002Flegal\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>\u003C\u002Fp>\n","Montonio is a complete checkout solution for online stores that includes all popular payment methods (local banks, card payments, Apple Pay, Google Pa …",10000,346076,8,"2026-03-10T08:35:00.000Z","5.0","7.0",[105,23,106,107,24],"montonio","payments","shipping","https:\u002F\u002Fwww.montonio.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmontonio-for-woocommerce.9.4.1.zip",{"slug":111,"name":112,"version":113,"author":114,"author_profile":115,"description":116,"short_description":117,"active_installs":98,"downloaded":118,"rating":119,"num_ratings":100,"last_updated":120,"tested_up_to":121,"requires_at_least":122,"requires_php":18,"tags":123,"homepage":129,"download_link":130,"security_score":13,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"netopia-payments-payment-gateway","NETOPIA Payments Payment Gateway","1.4.4","netopiapayments","https:\u002F\u002Fprofiles.wordpress.org\u002Fnetopiapayments\u002F","\u003Cp>NETOPIA Payments Payment Gateway extends WooCommerce payment options by adding NETOPIA’s Payment Gateway options.\u003C\u002Fp>\n\u003Ch4>Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>100% FREE TO USE\u003C\u002Fstrong> (GPLv2 license).\u003C\u002Fli>\n\u003Cli>Integrates NETOPIA payments’ card and cryptocoin payments service with your WordPress + WooCommerce online shop. SMS and Wire transfer options are still under development.\u003C\u002Fli>\n\u003Cli>Accepts payments with Visa and Mastercard credit\u002Fdebit cards\u003C\u002Fli>\n\u003Cli>Handles IPN responses and automatically changes order status on your shop in real time (confirmed\u002Fpaid or failure messages and refunds).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Requirements:\u003C\u002Fh4>\n\u003Cp>Please note that \u003Cstrong>on first update\u003C\u002Fstrong> your \u003Ccode>private.key\u003C\u002Fcode> and \u003Ccode>public.cer\u003C\u002Fcode> could be removed and \u003Cstrong>the plugin might need to be reconfigured\u003C\u002Fstrong>!\u003Cbr \u002F>\n* PHP 7+\u003Cbr \u002F>\n* openssl and dom extensions\u003C\u002Fp>\n","NETOPIA Payments Payment Gateway extends WooCommerce payment options by adding NETOPIA's Payment Gateway options.",47985,66,"2025-03-13T07:28:00.000Z","6.7.5","4.0.1",[124,125,126,127,128],"mobilpay","netopia","netopia-for-woocommerce","netopia-payment-gateway","netopia-payments","https:\u002F\u002Fwww.netopia-payments.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnetopia-payments-payment-gateway.1.4.4.zip",{"slug":132,"name":133,"version":134,"author":135,"author_profile":136,"description":137,"short_description":138,"active_installs":98,"downloaded":139,"rating":140,"num_ratings":141,"last_updated":142,"tested_up_to":121,"requires_at_least":102,"requires_php":143,"tags":144,"homepage":146,"download_link":147,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":148,"fetched_at":31},"sumup-payment-gateway-for-woocommerce","SumUp Payment Gateway For WooCommerce","2.8.2","sumup","https:\u002F\u002Fprofiles.wordpress.org\u002Fsumup\u002F","\u003Cp>Grow your business by accepting payments through SumUp in your WooCommerce store.\u003C\u002Fp>\n\u003Cp>The SumUp plugin for WooCommerce offers consumers a seamless payment experience with their favourite payment methods in just a few steps.  The payments are processed through the SumUp payment platform, so you can see them alongside your in-store sales. It’s affordable, easy to set up and use, and simply a better way to get paid.\u003C\u002Fp>\n\u003Ch4>TAKE PAYMENTS\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsumup.co.uk\u002Fcredit-card-processing-pricing\u002F\" rel=\"nofollow ugc\">No fixed costs. No binding contracts. Just a small % per transaction\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Receive secure payments to your bank account within 3 days\u003C\u002Fli>\n\u003Cli>Find everything in one place in the SumUp Dashboard and App\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>SUPPORTED PAYMENT METHODS\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Accept different debit and credit cards: Visa, VPay, Mastercard, American Express, Diners Club, Discover\u003C\u002Fli>\n\u003Cli>Accept alternative payment methods: Apple Pay, Bancontact, Boleto, iDeal, PayPal & Sofort\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdeveloper.sumup.com\u002Fcontact\" rel=\"nofollow ugc\">Request access to Alternative Payment Methods here\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>STAY SECURE\u003C\u002Fh4>\n\u003Cp>SumUp is authorised as a Payment Institution by the Financial Conduct Authority and is Europay, Mastercard and Visa (EMV) and PCI-DSS certified.\u003Cbr \u002F>\nThis ensures that payments are processed in accordance with the highest security standards.\u003C\u002Fp>\n\u003Ch4>BE FLEXIBLE\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>SumUp processes in 16 currencies: Australian Dollar (AUD), Brazilian Real (BRL), Bulgarian Lev (BGN), Chilean Peso (CLP), Colombian Peso (COP), Czech Koruna (CZK), Danish Krone (DKK), Euro (EUR), Forint (HUF), Norwegian Krone (NOK), Pound Sterling (GBP), Romanian Leu (RON), Swedish Krona (SEK), Swiss Franc (CHF), US Dollar (USD), Zloty (PLZ)\u003C\u002Fli>\n\u003Cli>SumUp supports 22 languages: Bulgarian, Czech, Danish, Dutch, English, Estonian, Finnish, French, German, Greek, Hungarian, Italian, Latvian, Lithuanian, Norwegian, Polish, Portuguese, Romanian, Slovak, Slovenian, Spanish and Swedish\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Want to try it?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>GET STARTED\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Download the plugin\u003C\u002Fli>\n\u003Cli>Create a \u003Ca href=\"https:\u002F\u002Fbuy.sumup.com\u002Fen-gb\u002Fsignup\u002Fcreate-account\" rel=\"nofollow ugc\">free account\u003C\u002Fa> or use \u003Ca href=\"https:\u002F\u002Fme.sumup.com\u002F\" rel=\"nofollow ugc\">your existing one\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Verify your account and connect the plugin by using the “Connect Account” button\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdeveloper.sumup.com\u002Fcontact\" rel=\"nofollow ugc\">Contact our support team\u003C\u002Fa> for a test account or to enable necessary scopes when you are ready to accept payments\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You’re ready to go.\u003C\u002Fp>\n","The SumUp plugin for WooCommerce allows businesses to securely process payments online. Accept payments from customers using a range of payment method …",259059,46,36,"2026-03-04T18:57:00.000Z","7.2",[145,23,106,135,24],"ecommerce","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsumup-payment-gateway-for-woocommerce\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsumup-payment-gateway-for-woocommerce.2.8.2.zip","2026-01-19 00:00:00",{"attackSurface":150,"codeSignals":227,"taintFlows":332,"riskAssessment":384,"analyzedAt":394},{"hooks":151,"ajaxHandlers":205,"restRoutes":219,"shortcodes":220,"cronEvents":225,"entryPointCount":226,"unprotectedCount":29},[152,157,161,165,168,170,176,179,182,185,190,194,197,201],{"type":153,"name":154,"callback":155,"file":156,"line":141},"action","admin_init","wccd_save_settings","includes\\class-wccd-admin.php",{"type":153,"name":158,"callback":159,"file":156,"line":160},"admin_menu","register_options_page",37,{"type":153,"name":162,"callback":163,"file":156,"line":164},"admin_notices","wrong_certificate_password",793,{"type":153,"name":162,"callback":166,"file":156,"line":167},"not_valid_certificate",805,{"type":153,"name":162,"callback":163,"file":156,"line":169},823,{"type":171,"name":172,"callback":173,"file":174,"line":175},"filter","woocommerce_available_payment_gateways","unset_teacher_gateway","includes\\class-wccd-teacher-gateway.php",74,{"type":153,"name":177,"callback":178,"priority":14,"file":174,"line":52},"woocommerce_order_details_after_order_table","display_teacher_code",{"type":153,"name":180,"callback":178,"priority":14,"file":174,"line":181},"woocommerce_email_after_order_table",79,{"type":153,"name":183,"callback":178,"priority":14,"file":174,"line":184},"woocommerce_admin_order_data_after_billing_address",80,{"type":171,"name":186,"callback":187,"file":188,"line":189},"woocommerce_payment_gateways","wccd_add_teacher_gateway_class","includes\\class-wccd.php",27,{"type":153,"name":191,"callback":192,"file":193,"line":27},"wp_enqueue_scripts","wccd_load_scripts","wc-carta-docente.php",{"type":153,"name":195,"callback":196,"file":193,"line":68},"admin_enqueue_scripts","wccd_load_admin_scripts",{"type":153,"name":198,"callback":199,"priority":68,"file":193,"line":200},"plugins_loaded","wccd_activation",102,{"type":153,"name":202,"callback":203,"file":193,"line":204},"before_woocommerce_init","closure",107,[206,212,216],{"action":207,"nopriv":208,"callback":209,"hasNonce":210,"hasCapCheck":208,"file":156,"line":211},"wccd-delete-certificate",false,"delete_certificate_callback",true,38,{"action":213,"nopriv":208,"callback":214,"hasNonce":210,"hasCapCheck":208,"file":156,"line":215},"wccd-add-cat","add_cat_callback",39,{"action":217,"nopriv":208,"callback":218,"hasNonce":210,"hasCapCheck":208,"file":156,"line":61},"wccd-sandbox","sandbox_callback",[],[221],{"tag":222,"callback":223,"file":174,"line":224},"checkout-url","get_checkout_payment_url",83,[],4,{"dangerousFunctions":228,"sqlUsage":229,"outputEscaping":231,"fileOperations":330,"externalRequests":29,"nonceChecks":330,"capabilityChecks":29,"bundledLibraries":331},[],{"prepared":29,"raw":29,"locations":230},[],{"escaped":232,"rawEcho":233,"locations":234},81,47,[235,238,240,242,244,246,248,250,252,254,256,258,260,262,264,266,268,270,272,274,276,278,280,282,284,286,288,290,292,294,296,298,300,302,304,306,308,310,312,314,316,318,320,322,324,326,328],{"file":156,"line":236,"context":237},359,"raw output",{"file":156,"line":239,"context":237},366,{"file":156,"line":241,"context":237},367,{"file":156,"line":243,"context":237},374,{"file":156,"line":245,"context":237},394,{"file":156,"line":247,"context":237},398,{"file":156,"line":249,"context":237},401,{"file":156,"line":251,"context":237},408,{"file":156,"line":253,"context":237},412,{"file":156,"line":255,"context":237},416,{"file":156,"line":257,"context":237},424,{"file":156,"line":259,"context":237},437,{"file":156,"line":261,"context":237},440,{"file":156,"line":263,"context":237},450,{"file":156,"line":265,"context":237},462,{"file":156,"line":267,"context":237},467,{"file":156,"line":269,"context":237},473,{"file":156,"line":271,"context":237},479,{"file":156,"line":273,"context":237},485,{"file":156,"line":275,"context":237},491,{"file":156,"line":277,"context":237},497,{"file":156,"line":279,"context":237},503,{"file":156,"line":281,"context":237},509,{"file":156,"line":283,"context":237},518,{"file":156,"line":285,"context":237},527,{"file":156,"line":287,"context":237},534,{"file":156,"line":289,"context":237},538,{"file":156,"line":291,"context":237},541,{"file":156,"line":293,"context":237},555,{"file":156,"line":295,"context":237},566,{"file":156,"line":297,"context":237},569,{"file":156,"line":299,"context":237},589,{"file":156,"line":301,"context":237},609,{"file":156,"line":303,"context":237},614,{"file":156,"line":305,"context":237},622,{"file":156,"line":307,"context":237},632,{"file":156,"line":309,"context":237},640,{"file":156,"line":311,"context":237},650,{"file":156,"line":313,"context":237},660,{"file":156,"line":315,"context":237},672,{"file":156,"line":317,"context":237},674,{"file":156,"line":319,"context":237},680,{"file":156,"line":321,"context":237},682,{"file":156,"line":323,"context":237},688,{"file":156,"line":325,"context":237},706,{"file":174,"line":327,"context":237},372,{"file":174,"line":329,"context":237},376,5,[],[333,355,375],{"entryPoint":334,"graph":335,"unsanitizedCount":28,"severity":40},"add_cat_callback (includes\\class-wccd-admin.php:194)",{"nodes":336,"edges":352},[337,342,346],{"id":338,"type":339,"label":340,"file":156,"line":341},"n0","source","$_POST",203,{"id":343,"type":344,"label":345,"file":156,"line":341},"n1","transform","→ setup_cat()",{"id":347,"type":348,"label":349,"file":156,"line":350,"wp_function":351},"n2","sink","echo() [XSS]",162,"echo",[353,354],{"from":338,"to":343,"sanitized":208},{"from":343,"to":347,"sanitized":208},{"entryPoint":356,"graph":357,"unsanitizedCount":28,"severity":40},"\u003Cclass-wccd-admin> (includes\\class-wccd-admin.php:0)",{"nodes":358,"edges":371},[359,362,366,367,369],{"id":338,"type":339,"label":360,"file":156,"line":361},"$_POST (x4)",761,{"id":343,"type":348,"label":363,"file":156,"line":364,"wp_function":365},"update_option() [Settings Manipulation]",796,"update_option",{"id":347,"type":339,"label":340,"file":156,"line":341},{"id":368,"type":344,"label":345,"file":156,"line":341},"n3",{"id":370,"type":348,"label":349,"file":156,"line":350,"wp_function":351},"n4",[372,373,374],{"from":338,"to":343,"sanitized":210},{"from":347,"to":368,"sanitized":208},{"from":368,"to":370,"sanitized":208},{"entryPoint":376,"graph":377,"unsanitizedCount":29,"severity":383},"wccd_save_settings (includes\\class-wccd-admin.php:756)",{"nodes":378,"edges":381},[379,380],{"id":338,"type":339,"label":360,"file":156,"line":361},{"id":343,"type":348,"label":363,"file":156,"line":364,"wp_function":365},[382],{"from":338,"to":343,"sanitized":210},"low",{"summary":385,"deductions":386},"The plugin \"wc-carta-docente\" v1.5.1 demonstrates a generally good security posture with several positive indicators. It has no known historical vulnerabilities (CVEs), which is a significant strength.  The code analysis shows a complete absence of dangerous functions and all SQL queries are properly prepared, mitigating common injection risks.  Furthermore, all identified entry points (AJAX handlers, shortcodes) are protected by nonce checks, and there are no external HTTP requests, reducing the attack surface for remote code execution or SSRF vulnerabilities.\n\nHowever, there are areas for concern. A notable issue is the relatively low percentage of properly escaped outputs (63%), which leaves the plugin susceptible to Cross-Site Scripting (XSS) vulnerabilities. While taint analysis did not reveal critical or high severity unsanitized paths, the presence of two flows with unsanitized paths, even if categorized lower, warrants attention as it indicates potential for data manipulation or unauthorized access if inputs are not handled with extreme care.  The absence of capability checks on AJAX handlers, while protected by nonces, could still allow unintended actions by authenticated users who might not possess the correct privileges for those operations.\n\nIn conclusion, the plugin is strong in preventing SQL injection and has a clean vulnerability history. The primary weaknesses lie in the insufficient output escaping and the potential for XSS. The presence of unsanitized paths, while not critically rated, is a risk that should be addressed. Improving output escaping and carefully reviewing the identified unsanitized paths would significantly enhance the plugin's security.",[387,390,392],{"reason":388,"points":389},"Unescaped output detected",12,{"reason":391,"points":100},"Flows with unsanitized paths",{"reason":393,"points":330},"No capability checks on AJAX","2026-03-16T20:28:33.939Z",{"wat":396,"direct":413},{"assetPaths":397,"generatorPatterns":404,"scriptPaths":405,"versionParams":406},[398,399,400,401,402,403],"\u002Fwp-content\u002Fplugins\u002Fwc-carta-docente\u002Fcss\u002Fwc-carta-docente.css","\u002Fwp-content\u002Fplugins\u002Fwc-carta-docente\u002Fcss\u002Fwc-carta-docente-admin.css","\u002Fwp-content\u002Fplugins\u002Fwc-carta-docente\u002Fjs\u002Fwc-carta-docente-admin.js","\u002Fwp-content\u002Fplugins\u002Fwc-carta-docente\u002Fjs\u002FtzCheckbox\u002Fjquery.tzCheckbox\u002Fjquery.tzCheckbox.css","\u002Fwp-content\u002Fplugins\u002Fwc-carta-docente\u002Fjs\u002FtzCheckbox\u002Fjquery.tzCheckbox\u002Fjquery.tzCheckbox.js","\u002Fwp-content\u002Fplugins\u002Fwc-carta-docente\u002Fjs\u002FtzCheckbox\u002Fjs\u002Fscript.js",[],[400,402,403],[407,408,409,410,411,412],"wc-carta-docente\u002Fcss\u002Fwc-carta-docente.css?ver=","wc-carta-docente\u002Fcss\u002Fwc-carta-docente-admin.css?ver=","wc-carta-docente\u002Fjs\u002Fwc-carta-docente-admin.js?ver=","wc-carta-docente\u002Fjs\u002FtzCheckbox\u002Fjquery.tzCheckbox\u002Fjquery.tzCheckbox.css?ver=","wc-carta-docente\u002Fjs\u002FtzCheckbox\u002Fjquery.tzCheckbox\u002Fjquery.tzCheckbox.js?ver=","wc-carta-docente\u002Fjs\u002FtzCheckbox\u002Fjs\u002Fscript.js?ver=",{"cssClasses":414,"htmlComments":417,"htmlAttributes":418,"restEndpoints":421,"jsGlobals":422,"shortcodeOutput":424},[415,416],"wccd-style","wccd-admin-style",[],[419,420],"data-wccd-del-cert-nonce","data-wccd-add-cat-nonce",[],[423],"wccdData",[425],"[checkout-url]"]