[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqOpybVlCIicjOQQHLrDUALXlWN0nyBk4LZxIirC_U1M":3,"$ffPU0lClkRpYWvHQHol8GIEKNBuykY7ko-5WuKtoJOjE":395,"$fReiy7XAdsJW7UvhZpIKQ1tcfsYQ5Z5eAN8ykM1KPqno":399},{"slug":4,"name":5,"version":6,"author":5,"author_profile":7,"description":8,"short_description":9,"active_installs":10,"downloaded":11,"rating":12,"num_ratings":12,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":21,"download_link":22,"security_score":23,"vuln_count":12,"unpatched_count":12,"last_vuln_date":24,"fetched_at":25,"discovery_status":26,"vulnerabilities":27,"developer":28,"crawl_stats":24,"alternatives":33,"analysis":127,"fingerprints":332},"webphone","Webphone","2.3","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebphone\u002F","\u003Cp>Webphone plugin is a complement for Webphone customers that will make it easier to use the tool on your WordPress website.\u003Cbr \u002F>\nWebphone is click-to-call. The button that turns click into calls, users into clients, visits into sales. From telephone to telephone. Immediate. Profitable.\u003C\u002Fp>\n\u003Cp>After clicking Webphone and entering their telephone numbers, your visitors can immediatly speak with your sales department to solve their doubts and queries. Sales opportunities rise up to 40%, proven results for both SMEs and large companies around the globe.\u003C\u002Fp>\n\u003Cp>Every lead generated via Webphone (received calls, missed calls, and contacts received out of your working hours) is registered in your private control panel, where you’ll be able to manage the whole DDBB and all your Webphone buttons (customization, timetables, audio messages…).\u003Cbr \u002F>\nAll our plans include statistics on the performance of the tool (call lenght, original URL, effectiveness per widget…) as well as daily reports to be received by email.\u003C\u002Fp>\n\u003Cp>Discover all its features at \u003Ca href=\"http:\u002F\u002Fwebphone.net\u002Fen\" title=\"All features\" rel=\"nofollow ugc\">webphone\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Webphone is the way to make web calls. Free for your clients. Profitable for you.\u003C\u002Fp>\n\u003Cp>If you found any bug in our WordPress Webphone plugin or have a question contact us at help@webphone.net or use these support channels \u003Ca href=\"https:\u002F\u002Fdashboard.webphone.net\u002Fcontact\u002F\" rel=\"nofollow ugc\">Support\u003C\u002Fa>\u003C\u002Fp>\n","Webphone plugin is a complement for Webphone customers that will make it easier to use the tool on your Wordpress website.",10,4536,0,"2026-05-26T07:43:00.000Z","7.0.2","5.0","7.0",[18,4,19,20],"clicktocall","webphone-dinamcis","webphone-dynamics","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwebphone\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwebphone.zip",100,null,"2026-07-22T17:31:50.256Z","no_bundle",[],{"slug":4,"display_name":5,"profile_url":7,"plugin_count":29,"total_installs":10,"avg_security_score":23,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},1,30,94,"2026-08-29T14:57:23.077Z",[34,56,77,92,109],{"slug":35,"name":36,"version":37,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":30,"downloaded":42,"rating":23,"num_ratings":43,"last_updated":44,"tested_up_to":45,"requires_at_least":46,"requires_php":47,"tags":48,"homepage":53,"download_link":54,"security_score":55,"vuln_count":12,"unpatched_count":12,"last_vuln_date":24,"fetched_at":25},"click-to-call-for-twilio","Click-to-Call for Twilio","1.0.0","Dasweb Agency","https:\u002F\u002Fprofiles.wordpress.org\u002Fdaswebagency\u002F","\u003Cp>This Twilio plugin enables your website visitors to enter their mobile numbers and to be directed instantly to your Twilio endpoint numbers using voice or SMS\u002FMMS actions. You need to configure yourself the incoming routes for both voice and text in your Twilio dashboard. The plugin comes with flexible shortcodes to add the widget anywhere on your WP website.\u003C\u002Fp>\n\u003Cp>Simply put, this Twilio Plugin is a connector between your WordPress website and your Twilio numbers. We know that visitors don’t like to fill in long and intrusive contact forms, that is why we believe this is a great addition for those who need to decrease their interaction time with the website visitors and to grow their lead generation. With just a single phone input you can get connected to support, sales reps in less than 5 seconds! You can also use plugin’s SMS\u002FMMS shortcodes to send your website visitors promotions, specials, directions, instructions or anything you like – directly on their mobile phones.\u003C\u002Fp>\n\u003Cp>In order to get Click-to-Call for Twilio to work, you need to add your Twilio ACCOUNT SID and AUTH TOKEN. Basically these are the keys that will grant plugin access to your Twilio Cloud Infrastructure and will help to initiate voice or text actions.\u003C\u002Fp>\n\u003Cp>If you don’t have a Twilio account don’t worry, setting up an account is very simple and you can get your trial credentials in a matter of seconds. You can find a very comprehensive video tutorial \u003Ca href=\"https:\u002F\u002Ftwilio.dasweb.ca\u002Fgeneral-settings\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Obtaining the Twilio SID and AUTH tokens\u003C\u002Fh3>\n\u003Cp>After you have your Twilio account set up navigate to your main \u003Ca href=\"https:\u002F\u002Fwww.twilio.com\u002Fconsole\" rel=\"nofollow ugc\">Twilio Dashboard\u003C\u002Fa> and copy your credentials into the general settings of the plugin.\u003C\u002Fp>\n\u003Ch3>Adding a Click-to-Call shortcode\u003C\u002Fh3>\n\u003Cp>To add a shortcode of your Click-to-Call button simply add the following to any part of your WordPress page or visual editor:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[twtcall label='Click To Call' number='+1501222333']\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Notice that by default the label for the button is ‘Click to Call’ which you can change to whatever is the best for you. The second part of the shortcode is the default Voice number that you set up in the Settings page. You can overwrite it with another Voice capable number that you have in your Twilio account.\u003C\u002Fp>\n\u003Cp>You can find more in the \u003Ca href=\"https:\u002F\u002Ftwilio.dasweb.ca\u002Fdocumentation\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> section on our website and you can also test the \u003Ca href=\"https:\u002F\u002Ftwilio.dasweb.ca\u002Fclick-to-call-for-wordpress\u002F\" rel=\"nofollow ugc\">Demo\u003C\u002Fa> of the Click-to-Call functionality.\u003C\u002Fp>\n\u003Ch3>Pro Version\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ftwilio.dasweb.ca\u002Fshop\u002Ftwilio-wordpress-tools-pro\u002F\" rel=\"nofollow ugc\">The Pro Version\u003C\u002Fa> offers you a full integration of the SMS\u002FMMS and Fax options and offers you more options, customization and 6 months of free support.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Click-to-Call feature – Direct contact with your website visitors\u003C\u002Fli>\n\u003Cli>SMS\u002FMMS functionality – Capture visitors’ phone numbers and send marketing\u002Fcontact info\u003C\u002Fli>\n\u003Cli>vCards sent to visitors – Send visitors your contact information in a phone-ready format\u003C\u002Fli>\n\u003Cli>Fax outbound feature – Use it internally as a virtual fax machine to send documents \u003Cstrong>[discontinued by Twilio]\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Custom Voice Message – Write your own welcome message when placing click-to-call actions\u003C\u002Fli>\n\u003Cli>Custom Countries Flags – Select the countries you want to be visible in the input field\u003C\u002Fli>\n\u003Cli>WPMU\u002FTranslations – Ability to translate the plugin strings in different languages\u003C\u002Fli>\n\u003Cli>6 months Free Support – Include installation and technical support\u003C\u002Fli>\n\u003C\u002Ful>\n","This Twilio plugin enables your website visitors to enter their mobile numbers and to be directed instantly to your Twilio endpoint numbers using voic …",3251,3,"2021-10-29T15:16:00.000Z","5.8.13","4.0","5.6",[49,50,18,51,52],"click-to-call","click2call","sms","twilio-plugin","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fclick-to-call-for-twilio.zip",85,{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":30,"downloaded":64,"rating":12,"num_ratings":12,"last_updated":65,"tested_up_to":66,"requires_at_least":67,"requires_php":68,"tags":69,"homepage":74,"download_link":75,"security_score":23,"vuln_count":12,"unpatched_count":12,"last_vuln_date":24,"fetched_at":76},"connect-ez-click-to-call","Connect-EZ Click-To-Call","1.1.0","Connect-EZ","https:\u002F\u002Fprofiles.wordpress.org\u002Fconnectez\u002F","\u003Cp>With this plugin your site visitors can call you or your company for free directly from your website at the click of a button, using a data connection. You will be able to answer calls directly from your phone, laptop or PBX\u002Fcall centre.\u003C\u002Fp>\n\u003Ch3>Demo Video\u003C\u002Fh3>\n\u003Ch3>Technical Details\u003C\u002Fh3>\n\u003Cp>This plugin will upgrade your website to a single point of contact by adding the voice call capability directly into it.\u003Cbr \u002F>\nBy activating this plugin your website will turn into a call center interface, without the need of any telephone devices or mobile apps.\u003Cbr \u002F>\nJust setup your IP PBX for WEBRTC calls and get leverage of the best solution for call centre and website integration.\u003Cbr \u002F>\nYou can also use our cloud IP PBX or have our team set it up for you.\u003Cbr \u002F>\nPlease find more information at \u003Ca href=\"https:\u002F\u002Fwww.connect-ez.com\u002Fclick-to-call-service\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.connect-ez.com\u002Fclick-to-call-service\u003C\u002Fa>\u003C\u002Fp>\n","Make phone calls directly from your website!",3395,"2025-12-03T07:42:00.000Z","6.9.4","3.1","5.2.4",[70,71,72,4,73],"bpo","toll-free-calls","voip","webrtc","https:\u002F\u002Fwww.connect-ez.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconnect-ez-click-to-call.1.1.0.zip","2026-04-16T10:56:18.058Z",{"slug":78,"name":79,"version":37,"author":80,"author_profile":81,"description":82,"short_description":83,"active_installs":10,"downloaded":84,"rating":12,"num_ratings":12,"last_updated":85,"tested_up_to":86,"requires_at_least":67,"requires_php":68,"tags":87,"homepage":90,"download_link":91,"security_score":55,"vuln_count":12,"unpatched_count":12,"last_vuln_date":24,"fetched_at":25},"goldnet-sip-simple","Goldnet Sip Simple","GoldNet Engineering Group","https:\u002F\u002Fprofiles.wordpress.org\u002Fgoldnet\u002F","\u003Cp>With this plugin, you can have a call centre or support desk on your website. You will be able to make or answer calls directly on your website.\u003C\u002Fp>\n\u003Ch3>Technical Details\u003C\u002Fh3>\n\u003Cp>This plugin will upgrade your website to a single point of contact by adding the voice call capability directly into it.\u003Cbr \u002F>\nBy activating this plugin your website will turn into a call center interface, without the need of any telephone devices or mobile apps.\u003Cbr \u002F>\nJust setup your IP PBX for WEBRTC calls and get leverage of the best solution for call centre and website integration.\u003Cbr \u002F>\nYou can also use our cloud IP PBX or have our team set it up for you.\u003Cbr \u002F>\nPlease find more information at https:\u002F\u002Ftelcoservices.com.au\u002Fwebphone\u003C\u002Fp>\n","Make phone calls directly on your website!",3639,"2021-01-25T07:25:00.000Z","5.6.17",[88,89,72,4,73],"callcentre","sipml5","https:\u002F\u002Ftelcoservices.com.au","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgoldnet-sip-simple.1.0.zip",{"slug":93,"name":94,"version":95,"author":96,"author_profile":97,"description":98,"short_description":99,"active_installs":10,"downloaded":100,"rating":23,"num_ratings":29,"last_updated":101,"tested_up_to":102,"requires_at_least":103,"requires_php":53,"tags":104,"homepage":53,"download_link":108,"security_score":55,"vuln_count":12,"unpatched_count":12,"last_vuln_date":24,"fetched_at":25},"toky-click-to-call","Toky Click To Call","1.0","Toky Inc","https:\u002F\u002Fprofiles.wordpress.org\u002Fcaruizdiaz\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Ftoky.co\u002Fen?utm_source=Wordpress_plugin&utm_campaign=text-link-plugin&utm_medium=Plugin&utm_content=Plugin-Downloads\" rel=\"nofollow ugc\">Toky is a full featured business phone system\u003C\u002Fa> that allows you to make and receive calls from your website, Facebook and phones, all in one place.\u003C\u002Fp>\n\u003Ch4>For Personal and Business use\u003C\u002Fh4>\n\u003Cp>With Toky you can add a click to call button to your page absolutely for free, and you can upgrade the experience by subscribing to a business plan.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftoky.co\u002Fen\u002Flive-calls\" rel=\"nofollow ugc\">Live calls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftoky.co\u002Fen\u002Flive-calls\" rel=\"nofollow ugc\">Phone numbers in more than 60 countries\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftoky.co\u002Fen\u002Fplus\u002Fsms\" rel=\"nofollow ugc\">SMS\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Forward visitor calls to any phone number or take them using our apps\u003C\u002Fli>\n\u003Cli>Greeting messages\u003C\u002Fli>\n\u003Cli>Voicemail\u003C\u002Fli>\n\u003Cli>Attention hours\u003C\u002Fli>\n\u003Cli>Call transfer\u003C\u002Fli>\n\u003Cli>Call recording\u003C\u002Fli>\n\u003Cli>Integration with \u003Ca href=\"https:\u002F\u002Ftoky.co\u002Fen\u002Fplus\u002Ffacebook\" rel=\"nofollow ugc\">Facebook\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Ftoky.co\u002Fen\u002Fplus\u002Fslack\" rel=\"nofollow ugc\">Slack\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Integration with leading CRMs\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftoky.co\u002Fen\u002Fplus\u002Fzoho\" rel=\"nofollow ugc\">Zoho\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftoky.co\u002Fen\u002Fplus\u002Fpipedrive\" rel=\"nofollow ugc\">Pipedrive\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftoky.co\u002Fen\u002Fplus\u002Fhubspot\" rel=\"nofollow ugc\">Hubspot\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftoky.co\u002Fen\u002Fplus\u002Famocrm\" rel=\"nofollow ugc\">AmoCRM\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftoky.co\u002Fen\u002Fplus\u002Fagilecrm\" rel=\"nofollow ugc\">AgileCRM\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftoky.co\u002Fen\u002Fplus\u002Ffreshsales\" rel=\"nofollow ugc\">Freshsales\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftoky.co\u002Fen\u002Fplus\u002Finfusionsoft\" rel=\"nofollow ugc\">Infusionsoft\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftoky.co\u002Fen\u002Fplus\u002Finsightly\" rel=\"nofollow ugc\">Insightly\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>and more!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Apps for \u003Ca href=\"https:\u002F\u002Fplay.google.com\u002Fstore\u002Fapps\u002Fdetails?id=co.toky.business.app\" rel=\"nofollow ugc\">Android\u003C\u002Fa> and iOS\u003C\u002Fli>\n\u003Cli>Call reports \u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftoky.co\u002Fen\u002Fpricing\" rel=\"nofollow ugc\">Incredible prices\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>If you don’t have an account yet, \u003Ca href=\"https:\u002F\u002Fapp.toky.co\u002Fregister?utm_source=Wordpress_plugin&utm_campaign=text-link-plugin&utm_medium=Plugin&utm_content=Plugin-Downloads\" rel=\"nofollow ugc\">sign up to Toky for free\u003C\u002Fa>\u003C\u002Fem>\u003C\u002Fp>\n","Add a call button to your website to let your visitors and customers call you with a single click without leaving their browsers",3398,"2018-12-27T19:30:00.000Z","4.7.33","4.1",[49,18,105,106,107],"live-call","livecall","toky","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftoky-click-to-call.zip",{"slug":110,"name":111,"version":95,"author":112,"author_profile":113,"description":114,"short_description":115,"active_installs":10,"downloaded":116,"rating":12,"num_ratings":12,"last_updated":117,"tested_up_to":118,"requires_at_least":119,"requires_php":53,"tags":120,"homepage":124,"download_link":125,"security_score":55,"vuln_count":12,"unpatched_count":12,"last_vuln_date":24,"fetched_at":126},"wp-click-to-call-calledin","Called.in Click To Call Plugin","Ronak Dave","https:\u002F\u002Fprofiles.wordpress.org\u002Fronakdave\u002F","\u003Cp>This service allows you to easily issue a clickToCall service between two phone numbers. Both calls are dialed, and upon answer, they are bridged together.\u003C\u002Fp>\n\u003Cp>You will have to get registered with called.in website to get an API to use this plugin. You will get 10 credits free initially and after that you can buy credits from the website to continue the service.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why use click-to-call?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Need to connect your potential-customers with sales representatives through the web? Or connect your members to each other over the phone without revealing their phone numbers? Our Click-To-Call API can easily handle your needs!\u003C\u002Fp>\n\u003Cp>Supported Countries\u003C\u002Fp>\n\u003Cp>The countries currently supported are following : United States, Canada, United Kingdom, Australia, New Zealand, India\u003C\u002Fp>\n\u003Cp>Want to give it a try? Sign-up for an account and we will load up your account with free credits to test our services! Register Now.\u003C\u002Fp>\n\u003Cp>You can contact me if there is anything with which I can help you!\u003C\u002Fp>\n\u003Cp>\u003Cem>Contact\u003C\u002Fem> \u003Ca href=\"http:\u002F\u002Fwww.ronakdave.in\" title=\"Plugin Developer\" rel=\"nofollow ugc\">Ronak Dave\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>how to you use this plugin?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[called] use this shortcode anywhere on your post or pages.\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>There is a called widget also created which can be used in any widget area.\u003C\u002Fp>\n\u003Cp>Thanks 🙂\u003C\u002Fp>\n","Called Click to call plugin allows you to easily issue a clickToCall service between two phone numbers.",1369,"2014-09-05T13:27:00.000Z","4.0.38","3.0.1",[121,122,49,18,123],"automated-calling","automatic-calling","cloud-calling","http:\u002F\u002Fronakdave.wordpress.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-click-to-call-calledin.zip","2026-04-06T09:54:40.288Z",{"attackSurface":128,"codeSignals":186,"taintFlows":284,"riskAssessment":323,"analyzedAt":331},{"hooks":129,"ajaxHandlers":182,"restRoutes":183,"shortcodes":184,"cronEvents":185,"entryPointCount":12,"unprotectedCount":12},[130,136,140,144,147,150,152,155,157,162,166,171,173,178],{"type":131,"name":132,"callback":133,"file":134,"line":135},"action","admin_footer","load_webphone_config_parameters_js_in_plugin_admin_pages","admin\\class-webphone-dynamics-admin.php",142,{"type":131,"name":137,"callback":138,"file":134,"line":139},"plugins_loaded","webphone_init_button",309,{"type":131,"name":137,"callback":141,"file":142,"line":143},"anonymous","includes\\class-webphone-dynamics.php",152,{"type":131,"name":145,"callback":141,"file":142,"line":146},"admin_menu",167,{"type":131,"name":148,"callback":141,"file":142,"line":149},"admin_enqueue_scripts",169,{"type":131,"name":148,"callback":141,"file":142,"line":151},170,{"type":131,"name":153,"callback":141,"file":142,"line":154},"wp_enqueue_scripts",185,{"type":131,"name":153,"callback":141,"file":142,"line":156},186,{"type":131,"name":158,"callback":159,"file":160,"line":161},"wp_footer","load_webphone_config_parameters_js","public\\class-webphone-dynamics-public.php",121,{"type":131,"name":163,"callback":164,"file":160,"line":165},"the_content","webphone_add_object",127,{"type":131,"name":167,"callback":168,"file":169,"line":170},"admin_init","WPHD_edit_footer","webphone.php",93,{"type":131,"name":167,"callback":172,"file":169,"line":31},"WPHD_edit_version_footer",{"type":174,"name":175,"callback":176,"priority":10,"file":169,"line":177},"filter","admin_footer_text","wpse_edit_text",105,{"type":174,"name":179,"callback":180,"priority":10,"file":169,"line":181},"update_footer","WPHD_edit_text",108,[],[],[],[],{"dangerousFunctions":187,"sqlUsage":188,"outputEscaping":190,"fileOperations":12,"externalRequests":12,"nonceChecks":29,"capabilityChecks":282,"bundledLibraries":283},[],{"prepared":12,"raw":12,"locations":189},[],{"escaped":43,"rawEcho":191,"locations":192},48,[193,196,198,200,203,205,206,208,209,211,212,214,216,218,220,222,224,226,228,230,232,234,236,238,240,243,245,247,249,250,251,253,255,257,259,260,262,264,266,267,268,270,272,273,275,277,278,280],{"file":134,"line":194,"context":195},158,"raw output",{"file":134,"line":197,"context":195},272,{"file":134,"line":199,"context":195},329,{"file":201,"line":202,"context":195},"admin\\views\\admin_webphone_dynamics_button_page.php",44,{"file":201,"line":204,"context":195},81,{"file":201,"line":170,"context":195},{"file":201,"line":207,"context":195},126,{"file":201,"line":165,"context":195},{"file":201,"line":210,"context":195},141,{"file":201,"line":135,"context":195},{"file":201,"line":213,"context":195},156,{"file":201,"line":215,"context":195},157,{"file":201,"line":217,"context":195},171,{"file":201,"line":219,"context":195},172,{"file":201,"line":221,"context":195},190,{"file":201,"line":223,"context":195},191,{"file":201,"line":225,"context":195},205,{"file":201,"line":227,"context":195},206,{"file":201,"line":229,"context":195},220,{"file":201,"line":231,"context":195},221,{"file":201,"line":233,"context":195},234,{"file":201,"line":235,"context":195},235,{"file":201,"line":237,"context":195},252,{"file":201,"line":239,"context":195},288,{"file":241,"line":242,"context":195},"admin\\views\\admin_webphone_dynamics_settings_page.php",13,{"file":241,"line":244,"context":195},14,{"file":241,"line":246,"context":195},15,{"file":241,"line":248,"context":195},16,{"file":241,"line":191,"context":195},{"file":241,"line":191,"context":195},{"file":241,"line":252,"context":195},50,{"file":241,"line":254,"context":195},51,{"file":241,"line":256,"context":195},52,{"file":241,"line":258,"context":195},53,{"file":241,"line":258,"context":195},{"file":241,"line":261,"context":195},55,{"file":241,"line":263,"context":195},66,{"file":241,"line":265,"context":195},68,{"file":241,"line":31,"context":195},{"file":241,"line":23,"context":195},{"file":241,"line":269,"context":195},102,{"file":241,"line":271,"context":195},104,{"file":241,"line":177,"context":195},{"file":241,"line":274,"context":195},106,{"file":241,"line":276,"context":195},107,{"file":241,"line":181,"context":195},{"file":160,"line":279,"context":195},137,{"file":160,"line":281,"context":195},147,2,[],[285,312],{"entryPoint":286,"graph":287,"unsanitizedCount":310,"severity":311},"\u003Cadmin_webphone_dynamics_button_page> (admin\\views\\admin_webphone_dynamics_button_page.php:0)",{"nodes":288,"edges":306},[289,294,299,302],{"id":290,"type":291,"label":292,"file":201,"line":293},"n0","source","$_POST (x3)",24,{"id":295,"type":296,"label":297,"file":201,"line":30,"wp_function":298},"n1","sink","update_option() [Settings Manipulation]","update_option",{"id":300,"type":291,"label":301,"file":201,"line":293},"n2","$_POST",{"id":303,"type":296,"label":304,"file":201,"line":237,"wp_function":305},"n3","echo() [XSS]","echo",[307,309],{"from":290,"to":295,"sanitized":308},false,{"from":300,"to":303,"sanitized":308},4,"low",{"entryPoint":313,"graph":314,"unsanitizedCount":12,"severity":311},"\u003Cadmin_webphone_dynamics_settings_page> (admin\\views\\admin_webphone_dynamics_settings_page.php:0)",{"nodes":315,"edges":320},[316,319],{"id":290,"type":291,"label":317,"file":241,"line":318},"$_SERVER['REQUEST_URI']",57,{"id":295,"type":296,"label":304,"file":241,"line":318,"wp_function":305},[321],{"from":290,"to":295,"sanitized":322},true,{"summary":324,"deductions":325},"The 'webphone' plugin v2.2.1 exhibits a mixed security posture. On the positive side, there are no known vulnerabilities (CVEs) and the plugin appears to implement some fundamental security checks, including nonce and capability checks. The absence of dangerous functions, file operations, and external HTTP requests is also reassuring. However, the static analysis reveals significant concerns regarding output sanitization, with only 6% of outputs being properly escaped. This presents a substantial risk of Cross-Site Scripting (XSS) vulnerabilities, allowing attackers to inject malicious scripts into the website's frontend, potentially leading to session hijacking, data theft, or defacement.\n\nFurthermore, the taint analysis identified one flow with an unsanitized path. While the severity was not categorized as critical or high, any unsanitized path is a potential entry point for path traversal or other file system manipulation attacks if not properly handled by the underlying WordPress environment. The lack of an extensive attack surface with no AJAX handlers, REST API routes, or shortcodes is a positive sign, indicating fewer direct entry points for attackers. However, the identified output escaping issue and the unsanitized path flow are significant weaknesses that require immediate attention to mitigate potential security risks.",[326,328],{"reason":327,"points":246},"Low percentage of properly escaped output",{"reason":329,"points":330},"Flow with unsanitized path",5,"2026-03-17T00:16:27.184Z",{"wat":333,"direct":345},{"assetPaths":334,"generatorPatterns":338,"scriptPaths":339,"versionParams":341},[335,336,337],"\u002Fwp-content\u002Fplugins\u002Fwebphone-dynamics\u002Fadmin\u002Fcss\u002Fwebphone-dynamics-admin.css","\u002Fwp-content\u002Fplugins\u002Fwebphone-dynamics\u002Fadmin\u002Fjs\u002Fwebphone-dynamics-admin.js","\u002Fwp-content\u002Fplugins\u002Fwebphone-dynamics\u002Fadmin\u002Fjs\u002Fjquery.json-editor.min.js",[],[340],"https:\u002F\u002Fllamamegratis.es\u002Fwebphone-site\u002Fjs\u002Fwebphone.dinamics.js",[342,343,344],"webphone-dynamics-admin.css?ver=","webphone-dynamics-admin.js?ver=","jquery.json-editor.min.js?ver=",{"cssClasses":346,"htmlComments":347,"htmlAttributes":376,"restEndpoints":378,"jsGlobals":379,"shortcodeOutput":394},[],[348,349,350,351,352,353,354,355,356,357,358,359,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,367,368,369,370,371,372,373,375],"\u003C!-- Currently plugin version. -->","\u003C!-- Constant definitions -->","\u003C!-- The code that runs during plugin activation. -->","\u003C!-- The code that runs during plugin deactivation. -->","\u003C!-- The core plugin class that is used to define internationalization, -->","\u003C!-- admin-specific hooks, and public-facing site hooks. -->","\u003C!-- Begins execution of the plugin. -->","\u003C!-- Since everything within the plugin is registered via hooks, -->","\u003C!-- then kicking off the plugin from this point in the file does -->","\u003C!-- not affect the page life cycle. -->","\u003C!-- Remove 'thank you for creating with wordpress' and wordpress version in admin footer plugin pages -->","\u003C!-- The admin-specific functionality of the plugin. -->","\u003C!-- Defines the plugin name, version, and two examples hooks for how to -->","\u003C!-- enqueue the admin-specific stylesheet and JavaScript. -->","\u003C!-- The ID of this plugin. -->","\u003C!-- The version of this plugin. -->","\u003C!-- Webphone settings array. -->","\u003C!-- Initialize the class and set its properties. -->","\u003C!-- Register the stylesheets for the admin area. -->","\u003C!-- This function is provided for demonstration purposes only. -->","\u003C!-- An instance of this class should be passed to the run() function -->","\u003C!-- defined in WPHD_Webphone_Dynamics_Loader as all of the hooks are defined -->","\u003C!-- in that particular class. -->","\u003C!-- The WPHD_Webphone_Dynamics_Loader will then create the relationship -->","\u003C!-- between the defined hooks and the functions defined in this -->","\u003C!-- class. -->","\u003C!-- Register the JavaScript for the admin area. -->","\u003C!-- Load Json Webphone custom script configuration parameters on front page \u003C\u002Fbody> -->",[377],"id=\"webphoneConfigPluginWP\"",[],[380,381,382,383,384,385,386,180,168,172,387,388,389,390,391,133,392,393],"WPHD_WEBPHONE_DYNAMICS_VERSION","WPHD_PLUGIN_NAME","WPHD_PLUGIN_PATH","WPHD_POST_TYPE","WPHD_activate_webphone_dynamics","WPHD_deactivate_webphone_dynamics","WPHD_run_webphone_dynamics","WPHD_Webphone_Dynamics_Admin","webphone-dynamics-admin.css","webphone-dynamics-admin.js","jquery.json-editor.min.js","webphone-dinamics.js","webphoneSettingsArr","jQuery.noConflict()",[],{"error":322,"url":396,"statusCode":397,"statusMessage":398,"message":398},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fwebphone\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":29,"versions":400},[401],{"version":95,"download_url":402,"svn_tag_url":403,"released_at":24,"has_diff":308,"diff_files_changed":404,"diff_lines":24,"trac_diff_url":24,"vulnerabilities":405,"is_current":308},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwebphone.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwebphone\u002Ftags\u002F1.0\u002F",[],[]]