[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcrBruCHV_Q2tNIuP0ZdHrqHzxrJvUSuBhPuHKLmw28s":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":38,"analysis":145,"fingerprints":596},"wf-cpanel-email-accounts","WebFacing™ – Email Accounts management for cPanel®","5.3.6","Knut Sparhell","https:\u002F\u002Fprofiles.wordpress.org\u002Fknutsp\u002F","\u003Cp>🕸️ By \u003Ca href=\"https:\u002F\u002Fwebfacing.eu\u002F\" rel=\"nofollow ugc\">WebFacing™\u003C\u002Fa>. Read, send, show, manage, list, create, add, remove or delete email accounts, old messages, forwarders and autoresponders.\u003Cbr \u002F>\nOne click read, send and manage all your emails without a login step. Update notification recipients. Backup and download your complete cPanel® account.\u003C\u002Fp>\n\u003Cp>This plugin requires your site is hosted on a cPanel® equipped server.\u003C\u002Fp>\n\u003Cp>It uses it’s UAPI through shell access by default, or via HTTP API. Using without \u003Ccode>shell_exec\u003C\u002Fcode> initially requires a temporary access token generated in the cPanel® native interface.\u003C\u002Fp>\n\u003Ch3>Translation ready. Ready translations are\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Norwegian (bokmål)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Current features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>NEW:\u003C\u002Fstrong> Dashboard widget with three live graphic server memory usage and server load gauge charts (can eassily be minimized or hidden via Screen Options or programatically)\u003C\u002Fli>\n\u003Cli>WP Block for frontend access user’s own Webmail\u003C\u002Fli>\n\u003Cli>Bulk entry of forwarders and email accounts (as free trial only, very limited use)\u003C\u002Fli>\n\u003Cli>Screen Options to select visible forms on New Email screen, saved for as user option (and per site for Multisite)\u003C\u002Fli>\n\u003Cli>Shortcode \u003Ccode>[wf_cpanel_email_webmail]\u003C\u002Fcode> or as \u003Ccode>[wf_cpanel_email_webmail]\u003C\u002Fcode>My Email\u003Ccode>[\u002Fwf_cpanel_email_webmail]\u003C\u002Fcode> for frontend access user’s own Webmail\u003C\u002Fli>\n\u003Cli>cPanel® API Tokens Management – needed in case \u003Ccode>shell_exec\u003C\u002Fcode> is not available or when accessing a remote server\u003C\u002Fli>\n\u003Cli>Backup complete cPanel® hosting account to file, and download it\u003C\u002Fli>\n\u003Cli>Restore account backup files by extracting it to a folder (experimental)\u003C\u002Fli>\n\u003Cli>Semi automated migration to new email server, including setup of new accounts for users, with sending setup instructions, passwords and links to setup guides for most common email clients\u003C\u002Fli>\n\u003Cli>Add 10 single Email Accounts per week (without Pro nag) — actually unlimited\u003C\u002Fli>\n\u003Cli>Remove single\u002Fmultiple Email Accounts\u003C\u002Fli>\n\u003Cli>List mailboxes with number of messages for each box\u003C\u002Fli>\n\u003Cli>Remove old messages from mailboxes (older than 52 weeks as default)\u003C\u002Fli>\n\u003Cli>Shrink a mailbox (empty it)\u003C\u002Fli>\n\u003Cli>Change storage quota for for email accounts\u003C\u002Fli>\n\u003Cli>Add 20 forwarders per week (without Pro nag) — actually unlimited\u003C\u002Fli>\n\u003Cli>Add\u002Fremove single\u002Fmultiple Email Failure addresses or Blackhole addresses\u003C\u002Fli>\n\u003Cli>Add\u002Fdelete\u002Fedit email autoresponders (for, subject, body, from, start, stop, interval)\u003C\u002Fli>\n\u003Cli>Send single cPanel® Email Account Instruction (Client Setup) to specfied address\u003C\u002Fli>\n\u003Cli>Send multipe cPanel® Email Account Instructions (Client Setups) to yourself for distribution\u003C\u002Fli>\n\u003Cli>Open your cPanel® Webmail app for selected account (single click\u002Ftap – no further login needed!)\u003C\u002Fli>\n\u003Cli>Set\u002Fchange Email Account passwords\u003C\u002Fli>\n\u003Cli>Set Default Email Address (catch-all) as forwarder, failure or blackhole\u003C\u002Fli>\n\u003Cli>View\u002Fchange Notification\u002FContact Email Addresses\u003C\u002Fli>\n\u003Cli>Access for any user to view and read their \u003Cem>own\u003C\u002Fem> emails, if given the \u003Ccode>cpanel\u003C\u002Fcode> capability (Use custom code or a Roles\u002FCapabilities Manager plugin)\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Support for subdomain email addresses when the main domain is a subdomain (only)\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>In case the \u003Ccode>shell_exec\u003C\u002Fcode> function is disabled in your server PHP configuration, create a token in native cPanel® interface and add \u003Cem>one\u003C\u002Fem> of these lines to your \u003Ccode>wp-config.php\u003C\u002Fcode> file, \u003Ccode>functions.php\u003C\u002Fcode> in your child theme, in Must-use plugin or a custom regular plugin\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>const WF_CPANEL_API_TOKEN = 'my-temp-api-token';\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>define( 'WF_CPANEL_API_TOKEN', 'my-temp-api-token' );\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>See \u003Ca href=\"https:\u002F\u002Fdocs.cpanel.net\u002Fcpanel\u002Fsecurity\u002Fmanage-api-tokens-in-cpanel\u002F\" rel=\"nofollow ugc\">Manage API Tokens in cPanel®\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>The \u003Ccode>WF_CPANEL_API_TOKEN\u003C\u002Fcode> constant may be removed when a new token is created and activated from the plugin admin page\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Option to set the default visibility for users on New Email screen (users may still set their own preferences):\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>add_filter( 'wf-cpanel-email-new-email_user-option', static function( bool $default, string $option, int $user_id ) {\u003Cbr \u002F>\nif ( $option === 'wc-show-new-blackhole' \u002F*or by $user_id*\u002F ) {\u003Cbr \u002F>\n$default = true\u002F*false*\u002F;\u003Cbr \u002F>\n}\u003Cbr \u002F>\nreturn $default;\u003Cbr \u002F>\n}, 10, 3 );\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Option to allow other users than those with \u003Ccode>manage_options\u003C\u002Fcode> capability to manage email adresses, single- or multisite, \u003Cem>one\u003C\u002Fem> of the following:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>add_filter( 'wf_cpanel_email_capability', static fn( string $cap ): string => $my_cpanel_email_cap );\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>add_filter( 'wf_cpanel_email_capability', static fn( string $cap ) => 'edit_published_pages' );\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Option to allow other users than those with \u003Ccode>manage_options\u003C\u002Fcode> capability to see the dashboard widget, or remove it, \u003Cem>one\u003C\u002Fem> of the following:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>add_filter( 'wf_cpanel_email_widget_capability', static fn( string $cap ): string => $my_cpanel_widget_cap );\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>add_filter( 'wf_cpanel_email_widget_capability', static fn( string $cap ) => 'edit_published_pages' );\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>add_filter( 'wf_cpanel_email_widget_capability', static fn( string $cap ) => 'do_not_allow' );\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Option to alter the refresh interval in seconds for the dashboard widget, \u003Cem>one\u003C\u002Fem> of the following:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>add_filter( 'wf_cpanel_email_widget_interval', static fn( int $interval ): int => $my_cpanel_widget_interval );\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>add_filter( 'wf_cpanel_email_widget_interval', static fn( int $interval ) => 45 );\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Option to limit email addresses to current site domain, even for single site admins, \u003Cem>one\u003C\u002Fem> of the following\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>const WF_CPANEL_EMAIL_SITE_DOMAIN_ONLY = true;\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>define( 'WF_CPANEL_EMAIL_SITE_DOMAIN_ONLY', true );\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>add_filter( 'wf_cpanel_email_site_domain_only', '__return_true' );\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>add_filter( 'wf_cpanel_email_site_domain_only', fn() => true );\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Multisite Network: Option not to limit email addresses to current subsite domain, for site admins that are not network (super) admins, \u003Cem>one\u003C\u002Fem> of the following:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>const WF_CPANEL_EMAIL_SITE_DOMAIN_ONLY = false;\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>define( 'WF_CPANEL_EMAIL_SITE_DOMAIN_ONLY', false );\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>add_filter( 'wf_cpanel_email_site_domain_only', '__return_false' );\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>add_filter( 'wf_cpanel_email_site_domain_only', fn() => false );\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Many optional parameters and API filters for the shortcode output, see \u003Ccode>includes\u002FShortCode.php\u003C\u002Fcode> until further tested and documented\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>If you want to access another user on the server, use \u003Cem>one\u003C\u002Fem> of the following\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>const WF_CPANEL_USER = 'my-username';\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>define( 'WF_CPANEL_USER', 'my-username' );\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>If you want to access a remote server, use \u003Cem>one\u003C\u002Fem> of the following\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>const WF_CPANEL_HOST = 'my-host';\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>define( 'WF_CPANEL_HOST', 'my-host' );\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>using \u003Ccode>WF_CPANEL_HOST\u003C\u002Fcode>requires \u003Ccode>WF_CPANEL_USER\u003C\u002Fcode> to also be defined\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Automaticallly create new accounts when a new user is registered?\u003Cbr \u002F>\n    add_action( ‘user_register’, static function( int $user_id, array $userdata ): void {\u003Cbr \u002F>\n            \u002F\u002F What to do just after the registraton here, like this (adds an email address that forwards to all users, a mailing list):\u003Cbr \u002F>\n            if ( method_exists( ‘WebFacing\\cPanel\\UAPI’, ‘add_forwarder’ ) ) {\u003Cbr \u002F>\n                \\WebFacing\\cPanel\\UAPI::add_forwarder( ‘all-users@yoursite.tld, ‘$userdata[‘user_email’] );\u003Cbr \u002F>\n            }\u003Cbr \u002F>\n        }, 2 );\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Site Health\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Tests and information\u003C\u002Fli>\n\u003Cli>Check auto detecting and current email routing in an extra Site Health tab (to any email address sent from your server)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Possible future features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Scheduled automatic removal of old messages in\u002Ffrom mailboxes\u003C\u002Fli>\n\u003Cli>Import migration list for create account, send instructions and password to current address\u003C\u002Fli>\n\u003Cli>Delete \u003Cem>selected\u003C\u002Fem> email messages from mailboxes (by selectd message age etc.)\u003C\u002Fli>\n\u003Cli>Suspend\u002Funsuspend incoming\u002Foutgoing for email accounts (if requested)\u003C\u002Fli>\n\u003Cli>Suspend\u002Funsuspend \u003Cem>login\u003C\u002Fem> to email accounts (if requested)\u003C\u002Fli>\n\u003Cli>Domain level email forwarding\u003C\u002Fli>\n\u003Cli>Domain Managament\u003C\u002Fli>\n\u003Cli>DNS Zone editing\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Limitations, security, privacy – be warned\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Maximum New Forwarders = 20, Maximum New Accounts = 5, weekly reset\u003C\u002Fli>\n\u003Cli>Trial: Maximum New Forwarders as \u003Cstrong>bulk entry\u003C\u002Fstrong> = 4, Maximum New Accounts as \u003Cstrong>bulk entry\u003C\u002Fstrong> = 2\u003C\u002Fli>\n\u003Cli>Now works without shell access! Will not work at all if \u003Ccode>shell_exec\u003C\u002Fcode> is disabled in \u003Ccode>php.ini\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Works only for admins, or other users with a custom \u003Ccode>cpanel\u003C\u002Fcode> capability and email on site domain (so far)\u003C\u002Fli>\n\u003Cli>Any admin (if multisite, only network admins), or user with the filtered capability, on a site, can fully access \u003Cem>any\u003C\u002Fem> account on the cPanel® server instance\u003C\u002Fli>\n\u003Cli>No AYS warnings for delete actions\u003C\u002Fli>\n\u003Cli>If several sites\u002Fadmins share the same cPanel® account, without being part of a WP Multisite network, no bulletproof separation, because of the way the cPanel® UAPI CLI works, with or without this plugin\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Pro Addon\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Pro Addon plugin was released May 1, 2023 at https:\u002F\u002Fwebfacing.eu\u002Fplugin\u002Fwf-cpanel-email-accounts-pro\u002F and will unlock \u003Cstrong>in bulk entry\u003C\u002Fstrong> new forwarders and new accounts to the numbers in the purchesed license\u003C\u002Fli>\n\u003C\u002Ful>\n","WebFacing™ - Email Accounts management for cPanel®",200,22999,100,8,"2025-01-10T22:12:00.000Z","6.7.5","6.5","8.1",[20,21,22,23,24],"auto-reply","backup","cpanel","email","membership","https:\u002F\u002Fwebfacing.eu\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwf-cpanel-email-accounts.5.3.zip",92,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"knutsp",1,30,88,"2026-04-04T22:27:56.125Z",[39,65,86,105,124],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":49,"num_ratings":50,"last_updated":51,"tested_up_to":52,"requires_at_least":53,"requires_php":54,"tags":55,"homepage":60,"download_link":61,"security_score":62,"vuln_count":63,"unpatched_count":28,"last_vuln_date":64,"fetched_at":30},"convertkit","Kit (formerly ConvertKit) – Email Newsletter, Email Marketing, Membership, Subscribers and Landing Pages","3.2.1","Kit","https:\u002F\u002Fprofiles.wordpress.org\u002Fconvertkit\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fkit.com?utm_source=wordpress&utm_term=en_US&utm_content=readme\" rel=\"nofollow ugc\">Kit\u003C\u002Fa> makes it easy to create, send and manage your email marketing campaigns; grow your email subscribers lists; send targeted email newsletters; sell more products and build your membership site – all by easily embedding email marketing \u002F email subscriber forms anywhere on your WordPress web site.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>New to Kit? \u003Ca href=\"https:\u002F\u002Fapp.kit.com\u002Fusers\u002Fsignup?plan=newsletter-free&utm_source=wordpress&utm_term=en_US&utm_content=readme\" rel=\"nofollow ugc\">Creating an account\u003C\u002Fa> is 100% free for your first 10,000 subscribers, making Kit an email marketing solution for everyone – whether you’re new to email newsletter marketing or a seasoned professional email newsletter marketer.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Email Newsletter and Email Marketing Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Design \u003Ca href=\"https:\u002F\u002Fkit.com\u002Ffeatures\u002Fforms?utm_source=wordpress&utm_term=en_US&utm_content=readme\" rel=\"nofollow ugc\">email newsletter subscription forms\u003C\u002Fa> in Kit, automatically appending them to any WordPress post or page, or displaying forms within your WordPress content using the supplied Gutenberg block and shortcode options. Perfect for building your email subscribers lists and growing your newsletter audience.\u003C\u002Fli>\n\u003Cli>Build \u003Ca href=\"https:\u002F\u002Fkit.com\u002Ffeatures\u002Flanding-pages?utm_source=wordpress&utm_term=en_US&utm_content=readme\" rel=\"nofollow ugc\">landing pages\u003C\u002Fa> in Kit, and display landing pages on a WordPress page to capture additional email subscribers for your newsletter\u003C\u002Fli>\n\u003Cli>List past \u003Ca href=\"https:\u002F\u002Fkit.com\u002Ffeatures\u002Femail-marketing?utm_source=wordpress&utm_term=en_US&utm_content=readme\" rel=\"nofollow ugc\">email newsletters\u003C\u002Fa> on your WordPress site to engage your newsletter subscribers\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Email Subscription Forms and Newsletter Forms\u003C\u002Fh3>\n\u003Cp>Design \u003Ca href=\"https:\u002F\u002Fkit.com\u002Ffeatures\u002Fforms?utm_source=wordpress&utm_term=en_US&utm_content=readme\" rel=\"nofollow ugc\">forms\u003C\u002Fa> in Kit, choosing from a variety of designs, customisable to your branding for your email newsletter strategy.\u003C\u002Fp>\n\u003Cp>Email newsletter sign up forms can be configured to:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Send free content, such as a PDF newsletter\u003C\u002Fli>\n\u003Cli>Display when the user is about to leave the page\u003C\u002Fli>\n\u003Cli>Subscribe to an email newsletter, with powerful tagging and segmentation options for your newsletter subscribers\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Embedding Kit email subscription forms on your WordPress web site with the Kit Plugin is quick and simple:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Choose a default form to be displayed below each individual Post Type (Pages, Posts and other public Post Types, such as WooCommerce Products) to grow your email subscribers\u003C\u002Fli>\n\u003Cli>Choose a specific email marketing form to be displayed below a specific Page, Post or custom post type\u003C\u002Fli>\n\u003Cli>Turn off form embedding at both site wide and\u002For individual Page\u002FPost level to control your email newsletter strategy\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For greater control, Kit’s email marketing subscription forms can be displayed in specific sections of your WordPress site’s content, sidebars and footers by:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Using the Kit Forms block in Gutenberg\u003C\u002Fli>\n\u003Cli>Using the \u003Ccode>[convertkit]\u003C\u002Fcode> shortcode in the Classic Editor\u003C\u002Fli>\n\u003Cli>Using the Form Builder block in Gutenberg, to build fully custom subscription forms directly in WordPress – perfect for following your theme’s styles\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Start collecting email subscribers today, building your newsletter audience and taking your email marketing to the next level.\u003C\u002Fp>\n\u003Ch3>Form Builder Block\u003C\u002Fh3>\n\u003Cp>Kit’s Form Builder block, for the WordPress block editor, gives complete control to design and customize your own subscription and email marketing forms – directly in WordPress.\u003C\u002Fp>\n\u003Cp>With the Form Builder block, you can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Add fields such as first name, email address, and custom fields\u003C\u002Fli>\n\u003Cli>Apply tags and sequences to subscribers for powerful segmentation\u003C\u002Fli>\n\u003Cli>Enable reCAPTCHA protection (if configured in your Kit account)\u003C\u002Fli>\n\u003Cli>Style forms using block editor controls, with full support for your block theme’s CSS and styling\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This makes the Form Builder block ideal for:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Subscription forms to grow your email subscribers list\u003C\u002Fli>\n\u003Cli>Contact forms that connect directly to Kit\u003C\u002Fli>\n\u003Cli>Custom forms tailored to your email marketing strategy\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Build forms exactly how you want them, without touching a line of code, and start collecting the right email subscribers from day one.\u003C\u002Fp>\n\u003Ch3>Membership Sites and Membership Content Protection\u003C\u002Fh3>\n\u003Cp>Create powerful membership sites with Kit’s Membership Content feature. Require email subscribers to either purchase a \u003Ca href=\"https:\u002F\u002Fkit.com\u002Ffeatures\u002Fcommerce\" rel=\"nofollow ugc\">Kit Product\u003C\u002Fa>, or subscribe for free, to access your membership content – whether that’s a course, ebook, digital download, album, presets, coaching and more.\u003C\u002Fp>\n\u003Cp>This membership functionality transforms your WordPress site into a comprehensive membership platform. Subscribers access their membership by entering their email address, receiving a one time passcode by email and clicking the link in the email. That’s it – no complex membership plugins or payment gateways to configure for your membership site.\u003C\u002Fp>\n\u003Cp>There’s no limit to the number of Kit Products you can create for your membership site, and each can be assigned to one or more WordPress Pages and Posts, instantly turning them into membership-only content for your paid subscribers. Build a thriving membership community with ease.\u003C\u002Fp>\n\u003Cp>Whether you’re creating a paid membership site, or offering free membership access, Kit’s membership features provide the flexibility to monetize your content through membership subscriptions while growing your email subscribers list simultaneously.\u003C\u002Fp>\n\u003Ch3>Send Email Newsletters and Email Marketing Campaigns\u003C\u002Fh3>\n\u003Cp>Use Kit’s \u003Ca href=\"https:\u002F\u002Fkit.com\u002Ffeatures\u002Femail-marketing?utm_source=wordpress&utm_term=en_US&utm_content=readme\" rel=\"nofollow ugc\">email marketing\u003C\u002Fa> feature to build and send email newsletters to your subscribers and leads, with options to send email newsletters to segments of your newsletter subscriber list.\u003C\u002Fp>\n\u003Cp>Embed existing email newsletters on your WordPress web site, ensuring visitors never miss your email newsletter content, by:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Using the Kit Broadcasts block in Gutenberg\u003C\u002Fli>\n\u003Cli>Using the \u003Ccode>[convertkit_broadcasts]\u003C\u002Fcode> shortcode in the Classic Editor\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Landing Pages for Email Newsletter Growth\u003C\u002Fh3>\n\u003Cp>Design \u003Ca href=\"https:\u002F\u002Fkit.com\u002Ffeatures\u002Flanding-pages?utm_source=wordpress&utm_term=en_US&utm_content=readme\" rel=\"nofollow ugc\">landing pages\u003C\u002Fa> in Kit’s intuitive editor, choosing from a variety of landing page designs, customisable to your branding and ideal for building your email subscribers list or selling a product.\u003C\u002Fp>\n\u003Cp>Additional landing pages can then be embedded on your WordPress web site. Simply create or edit a WordPress Page, choose the Kit landing page from the Kit meta box settings to display, and you’re all set to begin growing your email subscribers list more effectively with targeted landing pages.\u003C\u002Fp>\n\u003Ch3>Sell Products and Membership Access\u003C\u002Fh3>\n\u003Cp>Embed buttons (or link text) to sell your Kit Products and Tip Jars in seconds – whether that’s digital goods, paid email newsletters, membership access, membership-only content, music, coaching and more. Perfect for membership sites and monetization.\u003C\u002Fp>\n\u003Ch3>List Email Newsletters\u003C\u002Fh3>\n\u003Cp>Continue your email marketing strategy by automatically publishing your past email newsletters to WordPress Posts, defining a WordPress author, category and cut-off date within the Plugin’s settings to keep your newsletter subscribers informed.\u003C\u002Fp>\n\u003Cp>Prefer to just list existing broadcasts, each linked to your Kit profile? Use the Broadcasts block or shortcode to embed your existing newsletters in any WordPress Page, Post or Custom Post Type, providing more touchpoints for your email newsletter content.\u003C\u002Fp>\n\u003Ch3>Plugin Integrations\u003C\u002Fh3>\n\u003Cp>With the Kit for WordPress Plugin, you also get integrations with:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Elementor: Form and Broadcast widgets natively integrated with Elementor, to embed Kit forms and broadcast lists for your email newsletter strategy\u003C\u002Fli>\n\u003Cli>Contact Form 7: Automatically add email subscribers to Kit when they submit a Contact Form 7 form\u003C\u002Fli>\n\u003Cli>WishList Member: Automatically subscribe, unsubscribe and tag users based on their membership level – perfect for membership site management\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Our other WordPress Plugins provide further integrations between WordPress and Kit:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fconvertkit-for-woocommerce\u002F\" rel=\"ugc\">Kit for WooCommerce\u003C\u002Fa>: Subscribe, tag and assign sequences to customers at checkout, and send order data to Kit\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fconvertkit-gravity-forms\u002F\" rel=\"ugc\">Kit for Gravity Forms\u003C\u002Fa>: Automatically add email subscribers to Kit when they submit a Gravity Form, with tagging options\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>What is Kit?\u003C\u002Fh3>\n\u003Cp>Kit is the go-to email marketing hub for creators that helps you grow and monetize your audience with ease.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Grow your audience:\u003C\u002Fstrong> Increase subscribers with beautiful landing pages, sign up forms, and link pages that make your work stand out.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Automate your email marketing:\u003C\u002Fstrong> Create lasting connections and promote like a pro with our intuitive email editor, powerful sales funnels and subscriber list segmentation using tags.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Sell your digital products:\u003C\u002Fstrong> Market and sell your digital products and subscriptions with Kit to drive higher conversions and save big on fees.\u003C\u002Fp>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cp>Full Plugin documentation can be found \u003Ca href=\"https:\u002F\u002Fhelp.kit.com\u002Fen\u002Farticles\u002F2502591-how-to-set-up-the-kit-plugin-on-your-wordpress-website?utm_source=wordpress&utm_term=en_US&utm_content=readme\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Configure the plugin by navigating to \u003Ccode>Settings > Kit\u003C\u002Fcode> in the WordPress Administration Menu, and clicking the \u003Ccode>Connect\u003C\u002Fcode> button\u003C\u002Fli>\n\u003Cli>Once connected, define the default forms to display on Pages, Posts and\u002For Custom Post Types\u003C\u002Fli>\n\u003Cli>(Optional) choose a specific Form to display when editing a Page, Post or Custom Post Type in the Page\u002FPost\u002FCustom Post Type’s Kit settings\u003C\u002Fli>\n\u003Cli>(Optional) use the Kit Form Shortcode or Block to insert Forms into your Page, Post or Custom Post Type content to enhance your email newsletter reach\u003C\u002Fli>\n\u003C\u002Fol>\n","Build your email subscriber lists, send email marketing newsletters, sell more products and build your membership site with Kit (formerly ConvertKit).",40000,4193119,96,87,"2026-03-06T07:29:00.000Z","6.9.4","5.6","7.1",[56,57,58,24,59],"email-marketing","email-newsletter","landing-page","subscribers","https:\u002F\u002Fkit.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconvertkit.3.2.1.zip",97,4,"2024-06-20 15:27:19",{"slug":66,"name":67,"version":68,"author":69,"author_profile":70,"description":71,"short_description":72,"active_installs":73,"downloaded":74,"rating":13,"num_ratings":75,"last_updated":76,"tested_up_to":77,"requires_at_least":78,"requires_php":79,"tags":80,"homepage":79,"download_link":84,"security_score":85,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"birthday-emails","Birthday Emails","1.2.3","carman23","https:\u002F\u002Fprofiles.wordpress.org\u002Fcarman23\u002F","\u003Cp>You or your members enter a birthdate in WordPress or BuddyPress. This plugin automatically sends an email to such members on their birthday.\u003C\u002Fp>\n\u003Cp>You can customize the email that is sent to all Users.\u003C\u002Fp>\n\u003Cp>You can request a notification email be sent to you for each birthday email that gets sent, so you know it happened and when.\u003C\u002Fp>\n\u003Cp>If you want to contact the author, write to clawrick@gmail.com\u003C\u002Fp>\n\u003Cp>Birthday Emails is currently available in English only, though you can customize the birthday email sent, in any language you wish.\u003C\u002Fp>\n","Automatically send an email to WordPress or BuddyPress users on their birthday.",300,10216,6,"2019-12-09T13:21:00.000Z","5.3.21","4.5","",[81,23,82,24,83],"birthday","member","user","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbirthday-emails.1.2.3.zip",85,{"slug":87,"name":88,"version":89,"author":90,"author_profile":91,"description":92,"short_description":93,"active_installs":13,"downloaded":94,"rating":13,"num_ratings":34,"last_updated":95,"tested_up_to":16,"requires_at_least":96,"requires_php":97,"tags":98,"homepage":101,"download_link":102,"security_score":103,"vuln_count":34,"unpatched_count":28,"last_vuln_date":104,"fetched_at":30},"digitimber-cpanel-integration","DigiTimber cPanel Integration","1.4.8","DigiTimber","https:\u002F\u002Fprofiles.wordpress.org\u002Fdigitimber\u002F","\u003Cp>DigiTimber cPanel Integration allows users to access basic cPanel functionality from within WordPress. This plugin was created initially for our own users, but decided that with the lack of any other plugins in the list, we’d toss it out there for others. Hopefully its helpful to you and your users!\u003C\u002Fp>\n\u003Cp>Currently limited to email administration, but more is planned.\u003Cbr \u002F>\n– View a list of all email accounts for all domains.\u003Cbr \u002F>\n– Add a new email accounts to any domain registered in cpanel.\u003Cbr \u002F>\n– Update email account passwords and quotas.\u003Cbr \u002F>\n– Delete email accounts.\u003C\u002Fp>\n\u003Cp>In time we are hoping to add many functions from within the WordPress site that users would otherwise need to log into cPanel in order to access.\u003C\u002Fp>\n","DigiTimber cPanel Integration allows users to access basic cPanel functionality from within WordPress. This plugin was created initially for our own u &hellip;",7087,"2025-01-27T22:24:00.000Z","6.0","7.2",[22,23,99,100],"mail","manage","https:\u002F\u002Fgithub.com\u002Fvexing-media\u002FDigiTimber-cPanel-Integration-WP-Plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdigitimber-cpanel-integration.zip",91,"2025-01-31 00:00:00",{"slug":106,"name":107,"version":108,"author":109,"author_profile":110,"description":111,"short_description":112,"active_installs":113,"downloaded":114,"rating":13,"num_ratings":34,"last_updated":115,"tested_up_to":52,"requires_at_least":116,"requires_php":53,"tags":117,"homepage":122,"download_link":123,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"recapture-for-restrict-content-pro","Recapture for Restrict Content Pro","1.0.21","Recapture Cart Recovery and Email Marketing","https:\u002F\u002Fprofiles.wordpress.org\u002Frecaptureio\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Frecapture.io\u002F\" rel=\"nofollow ugc\">Main Site\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Frecapture.io\u002Fcontact\" rel=\"nofollow ugc\">Support\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fdocs.recapture.io\u002F\" rel=\"nofollow ugc\">Docs\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Recapture is the easiest and most effective way to recover abandoned carts and do email marketing for your Restrict Content Pro site.  We also support \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Frecapture-for-edd\u002F\" rel=\"ugc\">Easy Digital Downloads abandoned cart recovery\u003C\u002Fa> as well!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>NOTE:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Requires: Restrict Content Pro 2.2.4\u003C\u002Fstrong> or newer and a free Recapture account\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>Recapture helps your site increase sales.  This plugin connects Recapture to Restrict Content Pro to send triggered emails to your customers to recover abandoned carts (membership signups that didn’t happen) for Restrict Content Pro, win back old customers, or request reviews.\u003C\u002Fp>\n\u003Ch4>** Recapture has a long history of success with Abandoned Carts **\u003C\u002Fh4>\n\u003Cp>\u003Cem>Recapture has already helped merchants generate \u003Cstrong>over $280,000,000\u003C\u002Fstrong> in additional revenue since 2015.\u003C\u002Fem>  We’re recovering on average $1,000,000+ a week for sites like yours.\u003C\u002Fp>\n\u003Cp>Recapture’s \u003Ca href=\"https:\u002F\u002Frecapture.io\u002Fabandoned-carts-rcp\" rel=\"nofollow ugc\">abandoned cart recovery for Restrict Content Pro\u003C\u002Fa> helps your ecommerce site \u003Cstrong>recover lost revenue\u003C\u002Fstrong> from abandoned carts\u002Fsignups for Restrict Content Pro.  Recapture tracks when signups are abandoned on your site, then lets you send recovery emails to encourage the customers who abandoned these carts to complete the purchase.\u003C\u002Fp>\n\u003Cp>You can set up as many campaigns and recovery emails as you’d like, and customize the text and design of every email sent.\u003C\u002Fp>\n\u003Cp>Recapture has best-in-class email capture capabilities–using email popups, or our new “Add to Cart” email popup, where users enter an email before they add the item to the cart, ensuring easier recovery.\u003C\u002Fp>\n\u003Ch4>** Emails are Ready-to-go on Install, but easily customized **\u003C\u002Fh4>\n\u003Cp>\u003Cem>You don’t need to spend a lot of time setting up Recapture before you can benefit from it.\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Recapture’s emails are setup using best practices out-of-the-box so you can turn them on immediately.  Or you can change them using our friendly drag and drop based editor, or even completely customize the content using full HTML.  The choice is yours!\u003C\u002Fp>\n\u003Cp>Campaigns come configured with ideal timings, but you’re free to set them as you’d like (e.g., send 3 recovery emails per abandoned cart, or a series of 4 emails in a winback campaign), customize their send timing, and use a drag-and-drop editor to change the content.  \u003Cstrong>Very friendly for non-technical users.\u003C\u002Fstrong>  Setting up recovery for abandoned carts on Restrict Content Pro has never been easier.\u003C\u002Fp>\n\u003Ch4>** Winbacks, Review Reminders, and Email Collectors, oh my! **\u003C\u002Fh4>\n\u003Cp>\u003Cem>Installing Recapture gives you the features of 4 separate plugins with less hassle\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Besides \u003Cstrong>abandoned carts for Restrict Content Pro\u003C\u002Fstrong>, we support \u003Cstrong>email popups\u003C\u002Fstrong> to encourage list building, we support \u003Cstrong>review reminder emails\u003C\u002Fstrong> to get customers to provide a review after purchase (social proof increases sales!), and \u003Cstrong>winback emails\u003C\u002Fstrong> to encourage customers to be repeat buyers.  All of these increase your average order value, making your site more profitable.\u003C\u002Fp>\n\u003Ch4>** Won’t drag your site down **\u003C\u002Fh4>\n\u003Cp>\u003Cem>Average load time for Recapture’s JavaScript library is between 30-600 milliseconds, so your site won’t suffer\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Tracking for orders and carts is done and stored in Recapture, not your site’s database.  We send emails from our robust cloud infrastructure using best practices (SPF, DKIM, etc) to ensure maximum delivery and open rates.  This means your site \u003Cstrong>stays FAST\u003C\u002Fstrong> for buyers while we track analytics and carts for you, allowing you see everything you need in a click or two.\u003C\u002Fp>\n\u003Cp>Recapture is backed by a team with a long history of ecommerce success.  Recapture Abandoned Carts for Restrict Content Pro works on any site and scales automatically with our AWS load-balanced, multi-server infrastructure.  We handle sites of all sizes.  No need to worry as you grow!\u003C\u002Fp>\n\u003Ch4>** Friendly, responsive support **\u003C\u002Fh4>\n\u003Cp>\u003Cem>We (heart) our merchants and ecommerce\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Our #1 goal is to make your site more successful, and we love to do it!  \u003Ca href=\"http:\u002F\u002Frecapture.io\u002Fcontact\u002F\" rel=\"nofollow ugc\">Contact us for support\u003C\u002Fa> and find out what sets us apart from so many other WordPress plugins.  Live chat available in the Recapture dashboard.\u003C\u002Fp>\n\u003Ch4>More Details\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Translators:\u003C\u002Fstrong> the plugin text domain is: \u003Ccode>recapture-for-rcp\u003C\u002Fcode>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Visit \u003Ca href=\"https:\u002F\u002Frecapture.io\" rel=\"nofollow ugc\">Recapture.io\u003C\u002Fa> for more details on Recapture, and to see how our average merchant can boost revenue 10% or more in just 5 minutes.\u003C\u002Fli>\n\u003Cli>Browse the \u003Ca href=\"http:\u002F\u002Fdocs.recapture.io\" rel=\"nofollow ugc\">documentation\u003C\u002Fa> for questions, FAQs and more.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Frecapture.io\u002Fcontact\u002F\" rel=\"nofollow ugc\">Contact us for support\u003C\u002Fa> on our site\u003C\u002Fli>\n\u003C\u002Ful>\n","Recapture is the easiest and most effective way to recover abandoned carts and do email marketing for your Restrict Content Pro site in WordPress.",20,4336,"2025-12-03T19:47:00.000Z","6.2",[118,56,119,120,121],"cart-abandonment","membership-plugins","restrict-content-pro","tags-abandoned-carts","https:\u002F\u002Frecapture.io\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frecapture-for-restrict-content-pro.1.0.21.zip",{"slug":125,"name":126,"version":127,"author":128,"author_profile":129,"description":130,"short_description":131,"active_installs":132,"downloaded":133,"rating":13,"num_ratings":134,"last_updated":135,"tested_up_to":136,"requires_at_least":137,"requires_php":138,"tags":139,"homepage":143,"download_link":144,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"ai-auto-responder-light","AI Auto Responder Light","1.4.0","Geeky Panda","https:\u002F\u002Fprofiles.wordpress.org\u002Faigeekypanda\u002F","\u003Cp>\u003Cstrong>AI Auto Responder Light\u003C\u002Fstrong> turns your \u003Cstrong>Contact Form 7\u003C\u002Fstrong> into a smart, 24\u002F7 “virtual assistant.” As soon as someone submits your form, your site automatically sends a customized reply—no manual intervention needed.\u003C\u002Fp>\n\u003Cp>Key benefits:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>🚀 \u003Cstrong>Instant Engagement\u003C\u002Fstrong>\u003Cbr \u002F>\nStop losing leads. Auto‑respond in seconds with a human‑like message.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>💼 \u003Cstrong>Professional Tone\u003C\u002Fstrong>\u003Cbr \u002F>\nConfigure your company “persona” once, and the AI always reflects your brand’s voice.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>📊 \u003Cstrong>Conversion Booster\u003C\u002Fstrong>\u003Cbr \u002F>\nQuick replies increase trust and open rates, leading to more booked calls or sales.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>🔒 \u003Cstrong>Own Your Data\u003C\u002Fstrong>\u003Cbr \u002F>\nAll conversation logs are stored in your database—no third‑party storage.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>How it works\u003C\u002Fstrong>\u003Cbr \u002F>\n1. You install and activate Light.\u003Cbr \u002F>\n2. Enter your \u003Cstrong>OpenAI API key\u003C\u002Fstrong> and a short \u003Cstrong>business description\u003C\u002Fstrong> in Settings.\u003Cbr \u002F>\n3. Every CF7 submission triggers an API call to OpenAI.\u003Cbr \u002F>\n4. Your visitor receives a tailored email reply automatically.\u003Cbr \u002F>\n5. Review and analyze the last 20 conversations in the \u003Cstrong>Logs\u003C\u002Fstrong> tab.\u003C\u002Fp>\n\u003Cp>Upgrade to Pro to unlock:\u003Cbr \u002F>\n*️⃣ WPForms, Ninja Forms, Formidable & WooCommerce support\u003Cbr \u002F>\n*️⃣ Custom “From” address, subject lines & email templates\u003Cbr \u002F>\n*️⃣ GPT‑3.5 \u002F GPT‑4 selector and advanced AI prompt rules\u003Cbr \u002F>\n*️⃣ License activation, automatic updates & priority support\u003C\u002Fp>\n\u003Ch3>Upgrade to Pro\u003C\u002Fh3>\n\u003Cp>Want \u003Cstrong>more control, integrations and priority support\u003C\u002Fstrong>? Check out the Pro version at: https:\u002F\u002Fai.geekypanda.fi\u002F\u003C\u002Fp>\n","Smart AI‑powered replies for Contact Form 7 — instantly engage leads, save time, and increase conversions with personalized, professional auto‑respons &hellip;",10,423,2,"2025-07-07T19:29:00.000Z","6.8.5","5.0","7.4",[140,20,141,23,142],"ai","contact-form","openai","https:\u002F\u002Fai.geekypanda.fi\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fai-auto-responder-light.1.4.0.zip",{"attackSurface":146,"codeSignals":152,"taintFlows":413,"riskAssessment":582,"analyzedAt":595},{"hooks":147,"ajaxHandlers":148,"restRoutes":149,"shortcodes":150,"cronEvents":151,"entryPointCount":28,"unprotectedCount":28},[],[],[],[],[],{"dangerousFunctions":153,"sqlUsage":154,"outputEscaping":157,"fileOperations":155,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":412},[],{"prepared":155,"raw":28,"locations":156},3,[],{"escaped":28,"rawEcho":158,"locations":159},147,[160,164,166,168,169,171,172,173,175,176,178,179,180,181,182,184,187,189,190,192,194,195,197,199,201,203,204,207,209,211,214,216,217,218,219,220,221,224,226,228,229,231,232,234,236,237,238,241,243,244,246,247,248,249,251,253,255,258,259,261,264,266,268,270,271,273,275,277,279,280,282,284,285,287,289,291,292,293,295,297,298,300,302,304,305,307,308,309,311,313,315,317,319,321,322,324,326,328,330,332,334,335,337,338,340,341,343,344,346,348,350,352,354,355,357,358,360,362,364,365,367,369,370,372,374,376,377,379,382,384,386,387,389,390,392,394,396,398,399,401,402,403,404,407,408,409,410],{"file":161,"line":162,"context":163},"includes\\AccountsPage.php",58,"raw output",{"file":161,"line":165,"context":163},61,{"file":161,"line":167,"context":163},64,{"file":161,"line":167,"context":163},{"file":161,"line":170,"context":163},72,{"file":161,"line":170,"context":163},{"file":161,"line":170,"context":163},{"file":161,"line":174,"context":163},73,{"file":161,"line":174,"context":163},{"file":161,"line":177,"context":163},84,{"file":161,"line":177,"context":163},{"file":161,"line":177,"context":163},{"file":161,"line":85,"context":163},{"file":161,"line":85,"context":163},{"file":161,"line":183,"context":163},155,{"file":185,"line":186,"context":163},"includes\\AccountsTable.php",405,{"file":185,"line":188,"context":163},406,{"file":185,"line":188,"context":163},{"file":185,"line":191,"context":163},421,{"file":185,"line":193,"context":163},422,{"file":185,"line":193,"context":163},{"file":185,"line":196,"context":163},537,{"file":185,"line":198,"context":163},538,{"file":185,"line":200,"context":163},698,{"file":185,"line":202,"context":163},699,{"file":185,"line":202,"context":163},{"file":205,"line":206,"context":163},"includes\\BackupsPage.php",48,{"file":205,"line":208,"context":163},51,{"file":205,"line":210,"context":163},57,{"file":212,"line":213,"context":163},"includes\\BackupsTable.php",402,{"file":212,"line":215,"context":163},441,{"file":212,"line":215,"context":163},{"file":212,"line":215,"context":163},{"file":212,"line":215,"context":163},{"file":212,"line":215,"context":163},{"file":212,"line":215,"context":163},{"file":222,"line":223,"context":163},"includes\\BoxesPage.php",40,{"file":222,"line":225,"context":163},46,{"file":222,"line":227,"context":163},53,{"file":222,"line":227,"context":163},{"file":222,"line":230,"context":163},59,{"file":222,"line":230,"context":163},{"file":222,"line":233,"context":163},77,{"file":222,"line":235,"context":163},83,{"file":222,"line":177,"context":163},{"file":222,"line":177,"context":163},{"file":239,"line":240,"context":163},"includes\\ContactsPage.php",78,{"file":239,"line":242,"context":163},80,{"file":239,"line":85,"context":163},{"file":239,"line":245,"context":163},86,{"file":239,"line":50,"context":163},{"file":239,"line":36,"context":163},{"file":239,"line":27,"context":163},{"file":239,"line":250,"context":163},95,{"file":239,"line":252,"context":163},103,{"file":239,"line":254,"context":163},124,{"file":256,"line":257,"context":163},"includes\\Main.php",320,{"file":256,"line":257,"context":163},{"file":256,"line":260,"context":163},387,{"file":262,"line":263,"context":163},"includes\\NewEmail.php",241,{"file":262,"line":265,"context":163},243,{"file":262,"line":267,"context":163},276,{"file":262,"line":269,"context":163},298,{"file":262,"line":269,"context":163},{"file":262,"line":272,"context":163},310,{"file":262,"line":274,"context":163},327,{"file":262,"line":276,"context":163},330,{"file":262,"line":278,"context":163},333,{"file":262,"line":278,"context":163},{"file":262,"line":281,"context":163},369,{"file":262,"line":283,"context":163},372,{"file":262,"line":283,"context":163},{"file":262,"line":286,"context":163},410,{"file":262,"line":288,"context":163},413,{"file":262,"line":290,"context":163},416,{"file":262,"line":290,"context":163},{"file":262,"line":193,"context":163},{"file":262,"line":294,"context":163},452,{"file":262,"line":296,"context":163},455,{"file":262,"line":296,"context":163},{"file":262,"line":299,"context":163},494,{"file":262,"line":301,"context":163},497,{"file":262,"line":303,"context":163},500,{"file":262,"line":303,"context":163},{"file":262,"line":306,"context":163},533,{"file":262,"line":196,"context":163},{"file":262,"line":196,"context":163},{"file":262,"line":310,"context":163},560,{"file":262,"line":312,"context":163},563,{"file":262,"line":314,"context":163},573,{"file":262,"line":316,"context":163},590,{"file":262,"line":318,"context":163},593,{"file":262,"line":320,"context":163},596,{"file":262,"line":320,"context":163},{"file":262,"line":323,"context":163},618,{"file":262,"line":325,"context":163},636,{"file":262,"line":327,"context":163},637,{"file":262,"line":329,"context":163},642,{"file":262,"line":331,"context":163},646,{"file":262,"line":333,"context":163},654,{"file":262,"line":333,"context":163},{"file":262,"line":336,"context":163},657,{"file":262,"line":336,"context":163},{"file":262,"line":339,"context":163},660,{"file":262,"line":339,"context":163},{"file":262,"line":342,"context":163},666,{"file":262,"line":342,"context":163},{"file":262,"line":345,"context":163},673,{"file":262,"line":347,"context":163},677,{"file":262,"line":349,"context":163},685,{"file":262,"line":351,"context":163},688,{"file":262,"line":353,"context":163},694,{"file":262,"line":353,"context":163},{"file":262,"line":356,"context":163},700,{"file":262,"line":356,"context":163},{"file":262,"line":359,"context":163},706,{"file":262,"line":361,"context":163},709,{"file":262,"line":363,"context":163},715,{"file":262,"line":363,"context":163},{"file":262,"line":366,"context":163},716,{"file":262,"line":368,"context":163},719,{"file":262,"line":368,"context":163},{"file":262,"line":371,"context":163},720,{"file":262,"line":373,"context":163},726,{"file":262,"line":375,"context":163},732,{"file":262,"line":375,"context":163},{"file":262,"line":378,"context":163},749,{"file":380,"line":381,"context":163},"includes\\SiteHealth.php",1041,{"file":380,"line":383,"context":163},1043,{"file":380,"line":385,"context":163},1047,{"file":380,"line":385,"context":163},{"file":380,"line":388,"context":163},1050,{"file":380,"line":388,"context":163},{"file":380,"line":391,"context":163},1058,{"file":380,"line":393,"context":163},1070,{"file":395,"line":206,"context":163},"includes\\TokensPage.php",{"file":395,"line":397,"context":163},49,{"file":395,"line":227,"context":163},{"file":395,"line":400,"context":163},94,{"file":395,"line":250,"context":163},{"file":395,"line":250,"context":163},{"file":395,"line":49,"context":163},{"file":405,"line":406,"context":163},"includes\\TokensTable.php",309,{"file":405,"line":272,"context":163},{"file":405,"line":272,"context":163},{"file":405,"line":272,"context":163},{"file":405,"line":411,"context":163},311,[],[414,440,460,477,488,497,505,516,530,546,557,571],{"entryPoint":415,"graph":416,"unsanitizedCount":438,"severity":439},"admin (includes\\NewEmail.php:21)",{"nodes":417,"edges":434},[418,423,428,432],{"id":419,"type":420,"label":421,"file":262,"line":422},"n0","source","$_POST",139,{"id":424,"type":425,"label":426,"file":262,"line":312,"wp_function":427},"n1","sink","echo() [XSS]","echo",{"id":429,"type":420,"label":430,"file":262,"line":431},"n2","$_GET (x26)",152,{"id":433,"type":425,"label":426,"file":262,"line":325,"wp_function":427},"n3",[435,437],{"from":419,"to":424,"sanitized":436},false,{"from":429,"to":433,"sanitized":436},27,"medium",{"entryPoint":441,"graph":442,"unsanitizedCount":63,"severity":439},"admin (includes\\SiteHealth.php:21)",{"nodes":443,"edges":456},[444,446,447,450,451,454],{"id":419,"type":420,"label":445,"file":380,"line":381},"$_GET['tab']",{"id":424,"type":425,"label":426,"file":380,"line":381,"wp_function":427},{"id":429,"type":420,"label":448,"file":380,"line":449},"$_GET (x2)",1033,{"id":433,"type":425,"label":426,"file":380,"line":383,"wp_function":427},{"id":452,"type":420,"label":421,"file":380,"line":453},"n4",1022,{"id":455,"type":425,"label":426,"file":380,"line":391,"wp_function":427},"n5",[457,458,459],{"from":419,"to":424,"sanitized":436},{"from":429,"to":433,"sanitized":436},{"from":452,"to":455,"sanitized":436},{"entryPoint":461,"graph":462,"unsanitizedCount":28,"severity":476},"process_bulk_action (includes\\AccountsTable.php:392)",{"nodes":463,"edges":472},[464,467,468,471],{"id":419,"type":420,"label":465,"file":185,"line":466},"$_GET (x5)",400,{"id":424,"type":425,"label":426,"file":185,"line":186,"wp_function":427},{"id":429,"type":420,"label":469,"file":185,"line":470},"$_POST (x2)",693,{"id":433,"type":425,"label":426,"file":185,"line":200,"wp_function":427},[473,475],{"from":419,"to":424,"sanitized":474},true,{"from":429,"to":433,"sanitized":474},"low",{"entryPoint":478,"graph":479,"unsanitizedCount":28,"severity":476},"\u003CAccountsTable> (includes\\AccountsTable.php:0)",{"nodes":480,"edges":485},[481,482,483,484],{"id":419,"type":420,"label":465,"file":185,"line":466},{"id":424,"type":425,"label":426,"file":185,"line":186,"wp_function":427},{"id":429,"type":420,"label":469,"file":185,"line":470},{"id":433,"type":425,"label":426,"file":185,"line":200,"wp_function":427},[486,487],{"from":419,"to":424,"sanitized":474},{"from":429,"to":433,"sanitized":474},{"entryPoint":489,"graph":490,"unsanitizedCount":28,"severity":476},"admin (includes\\ContactsPage.php:15)",{"nodes":491,"edges":495},[492,494],{"id":419,"type":420,"label":421,"file":239,"line":493},36,{"id":424,"type":425,"label":426,"file":239,"line":85,"wp_function":427},[496],{"from":419,"to":424,"sanitized":474},{"entryPoint":498,"graph":499,"unsanitizedCount":28,"severity":476},"\u003CContactsPage> (includes\\ContactsPage.php:0)",{"nodes":500,"edges":503},[501,502],{"id":419,"type":420,"label":421,"file":239,"line":493},{"id":424,"type":425,"label":426,"file":239,"line":85,"wp_function":427},[504],{"from":419,"to":424,"sanitized":474},{"entryPoint":506,"graph":507,"unsanitizedCount":28,"severity":476},"\u003CNewEmail> (includes\\NewEmail.php:0)",{"nodes":508,"edges":513},[509,510,511,512],{"id":419,"type":420,"label":421,"file":262,"line":422},{"id":424,"type":425,"label":426,"file":262,"line":312,"wp_function":427},{"id":429,"type":420,"label":430,"file":262,"line":431},{"id":433,"type":425,"label":426,"file":262,"line":325,"wp_function":427},[514,515],{"from":419,"to":424,"sanitized":474},{"from":429,"to":433,"sanitized":474},{"entryPoint":517,"graph":518,"unsanitizedCount":63,"severity":476},"\u003CSiteHealth> (includes\\SiteHealth.php:0)",{"nodes":519,"edges":526},[520,521,522,523,524,525],{"id":419,"type":420,"label":445,"file":380,"line":381},{"id":424,"type":425,"label":426,"file":380,"line":381,"wp_function":427},{"id":429,"type":420,"label":448,"file":380,"line":449},{"id":433,"type":425,"label":426,"file":380,"line":383,"wp_function":427},{"id":452,"type":420,"label":421,"file":380,"line":453},{"id":455,"type":425,"label":426,"file":380,"line":391,"wp_function":427},[527,528,529],{"from":419,"to":424,"sanitized":436},{"from":429,"to":433,"sanitized":436},{"from":452,"to":455,"sanitized":436},{"entryPoint":531,"graph":532,"unsanitizedCount":28,"severity":476},"admin (includes\\TokensPage.php:13)",{"nodes":533,"edges":543},[534,536,537,539],{"id":419,"type":420,"label":535,"file":395,"line":177},"$_GET",{"id":424,"type":425,"label":426,"file":395,"line":400,"wp_function":427},{"id":429,"type":420,"label":538,"file":395,"line":183},"$_POST (x4)",{"id":433,"type":425,"label":540,"file":395,"line":541,"wp_function":542},"update_option() [Settings Manipulation]",167,"update_option",[544,545],{"from":419,"to":424,"sanitized":474},{"from":429,"to":433,"sanitized":474},{"entryPoint":547,"graph":548,"unsanitizedCount":28,"severity":476},"\u003CTokensPage> (includes\\TokensPage.php:0)",{"nodes":549,"edges":554},[550,551,552,553],{"id":419,"type":420,"label":535,"file":395,"line":177},{"id":424,"type":425,"label":426,"file":395,"line":400,"wp_function":427},{"id":429,"type":420,"label":538,"file":395,"line":183},{"id":433,"type":425,"label":540,"file":395,"line":541,"wp_function":542},[555,556],{"from":419,"to":424,"sanitized":474},{"from":429,"to":433,"sanitized":474},{"entryPoint":558,"graph":559,"unsanitizedCount":28,"severity":476},"process_bulk_action (includes\\TokensTable.php:253)",{"nodes":560,"edges":568},[561,563,564,567],{"id":419,"type":420,"label":535,"file":405,"line":562},265,{"id":424,"type":425,"label":540,"file":405,"line":267,"wp_function":542},{"id":429,"type":420,"label":565,"file":405,"line":566},"$_GET (x3)",304,{"id":433,"type":425,"label":426,"file":405,"line":406,"wp_function":427},[569,570],{"from":419,"to":424,"sanitized":474},{"from":429,"to":433,"sanitized":474},{"entryPoint":572,"graph":573,"unsanitizedCount":28,"severity":476},"\u003CTokensTable> (includes\\TokensTable.php:0)",{"nodes":574,"edges":579},[575,576,577,578],{"id":419,"type":420,"label":535,"file":405,"line":562},{"id":424,"type":425,"label":540,"file":405,"line":267,"wp_function":542},{"id":429,"type":420,"label":565,"file":405,"line":566},{"id":433,"type":425,"label":426,"file":405,"line":406,"wp_function":427},[580,581],{"from":419,"to":424,"sanitized":474},{"from":429,"to":433,"sanitized":474},{"summary":583,"deductions":584},"The plugin \"wf-cpanel-email-accounts\" v5.3.6 exhibits a generally positive security posture with no known historical vulnerabilities or critical code signals. The absence of known CVEs and a lack of critical taint flows are significant strengths.  However, the static analysis reveals concerning areas that temper this otherwise good impression.  A major weakness is the complete lack of output escaping for all 147 identified outputs, presenting a significant risk of Cross-Site Scripting (XSS) vulnerabilities.  Additionally, while SQL queries are prepared, the presence of three file operations and zero nonce or capability checks on any entry points, despite having a zero attack surface, raises questions about how data might be manipulated or accessed without proper validation. The vulnerability history is clean, which is excellent, but the code analysis suggests that if vulnerabilities were to arise, they could be impactful due to the unescaped outputs and potential for insecure file operations.",[585,588,591,593],{"reason":586,"points":587},"0% output escaping on 147 outputs",15,{"reason":589,"points":590},"0 capability checks on entry points",5,{"reason":592,"points":590},"0 nonce checks on entry points",{"reason":594,"points":590},"3 file operations without context","2026-03-16T20:18:11.093Z",{"wat":597,"direct":604},{"assetPaths":598,"generatorPatterns":600,"scriptPaths":601,"versionParams":602},[599],"\u002Fwp-content\u002Fplugins\u002Fwf-cpanel-email-accounts\u002Fassets\u002Fcpanel.js",[],[599],[603],"wf-cpanel-email-accounts\u002Fassets\u002Fcpanel.js?ver=",{"cssClasses":605,"htmlComments":606,"htmlAttributes":607,"restEndpoints":616,"jsGlobals":617,"shortcodeOutput":619},[4],[],[608,609,610,611,612,613,614,615],"data-chartid","data-adminuri","data-datauri","data-secret","data-token","data-host","data-abs","data-interval",[],[618],"wFcPanelSettings",[620,621,622,623,624,625,626,627],"\u003Cform method=\"post\" action=\"https:\u002F\u002F",":2096\u002F","\u002Flogin\" target=\"","\" class=\"","\">\u003Cinput type=\"hidden\" name=\"session\" value=\"","\"\u002F>\u003Cbutton type=\"submit\" class=\"","\">","\u003C\u002Fbutton>\u003C\u002Fform>"]