[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCMg6kh-jcD4Coq3bmGroemYYTqinZ9HyVSLhcuMU3ng":3,"$fTELy2187VIJT6XFrUnkRJHIV316SnN2Yz7PhOP025ys":829,"$faTAOAvMNJ-TBvQDOfsxJp_svQE1ozY7VWrduHfQwgwI":833},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"discovery_status":31,"vulnerabilities":32,"developer":50,"crawl_stats":38,"alternatives":57,"analysis":160,"fingerprints":810},"wp-click-track","WP-Click-Tracker","0.7.3","mithra62","https:\u002F\u002Fprofiles.wordpress.org\u002Fmithra62\u002F","\u003Cp>The click tracker works in 2 modes:\u003Cbr \u002F>\n1. Scans posts and rewrites them to include a tracking element\u003Cbr \u002F>\n2. Enables users to create stand alone trackable links that can be embedded in posts or offsite.\u003C\u002Fp>\n\u003Cp>There is advanced reporting for viewing the click statistics. Reports include:\u003Cbr \u002F>\n1. Top Referrers of clicks. Helps to coorelate where the popular links are at 🙂\u003Cbr \u002F>\n2. Individual clicks. \u003Cbr \u002F>\n3. Clicks by day. \u003Cbr \u002F>\n4. Clicks by hour.\u003Cbr \u002F>\n5. Graphs and charts per link and globally.\u003Cbr \u002F>\n6. Admin dashboard widget.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Usage\u003C\u002Fstrong>\u003Cbr \u002F>\nThe click tracker works in 2 modes:\u003Cbr \u002F>\n1. Scans posts and rewrites them to include a tracking element\u003Cbr \u002F>\n2. Enables users to create stand alone trackable links that can be embedded in posts or offsite.\u003C\u002Fp>\n\u003Cp>Links that are included in posts should contain a title paramater in the href to have the reference name \u003Cbr \u002F>\nbe automatically created. Ex:\u003Cbr \u002F>\n\u003Ca href=”http:\u002F\u002Furl.com” title=”Link Title”>link copy\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Links without a title attribute will have the name parsed through the wrapped text (if that fails default name is used (No Name Given)).\u003C\u002Fp>\n\u003Cp>You can also create standalone links using the Link Manager to embed in external websites. \u003C\u002Fp>\n\u003Cp>\u003Cstrong>Future Releases\u003C\u002Fstrong>\u003Cbr \u002F>\n* localization\u003Cbr \u002F>\n* export data\u003Cbr \u002F>\n* link list sorting\u003Cbr \u002F>\n* referrer link list grouping\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Bugs\u003C\u002Fstrong>\u003Cbr \u002F>\n* There’s a conflict with any plugin that uses the onclick method in URLs.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Changelog\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\n0.7.2 :: \u003Cbr \u002F>\n*Bug Fixes *\u003C\u002Fp>\n\u003Cp>Fixed Timezone issue\u003Cbr \u002F>\n\u003Cbr \u002F>\n0.7.2 :: \u003Cbr \u002F>\n*Bug Fixes *\u003C\u002Fp>\n\u003Cp>Fixed data reset\u003Cbr \u002F>\n  \u003Cbr \u002F>Fixed IIS6 HTTPS issue\u003Cbr \u002F>\n\u003Cbr \u002F>\n0.7.1 :: \u003Cbr \u002F>\n*Bug Fixes *\u003C\u002Fp>\n\u003Cp>Small bug fixes for JS compatibility and slow and sloppy SQL.\u003Cbr \u002F>\n\u003C\u002Fp>\n\u003Cp>0.7 :: \u003Cbr \u002F>\n* Modification *\u003Cbr \u002F>\n  \u003Cbr \u002F>Improved tracking cookie management.\u003Cbr \u002F>\n  \u003Cbr \u002F>Added setting to disable the tracking of internal (same URL) links\u003Cbr \u002F>\n  \u003Cbr \u002F>Changed Configure page to use tab ui\u003Cbr \u002F>\n\u003Cbr \u002F>\n*Bug Fixes *\u003C\u002Fp>\n\u003Cp>Fixed ssl (https) => flash issue\u003Cbr \u002F>\n  \u003Cbr \u002F>Fixed sidebar.css 404 error\u003C\u002Fp>\n\u003Cp>Added “nowrap” to table template headers\u003Cbr \u002F>\n  \u003Cbr \u002F>Fixed Day Pie chart for thousandths\u003Cbr \u002F>\n\u003C\u002Fp>\n\u003Cp>0.6 :: \u003Cbr \u002F>\n* Modification *\u003Cbr \u002F>\n  \u003Cbr \u002F>Added Top Clicks Sidebar Widget\u003Cbr \u002F>\n  \u003Cbr \u002F>Added Todays Clicks Sidebar Widget\u003Cbr \u002F>\n  \u003Cbr \u002F>Added Link Search (requires MyISAM table type)\u003Cbr \u002F>\n  \u003Cbr \u002F>Began localization phase\u003Cbr \u002F>\n  \u003Cbr \u002F>Improved admin interface and menu\u003Cbr \u002F>\n  \u003Cbr \u002F>Improved tracking mechanism\u003Cbr \u002F>\n\u003Cbr \u002F>\n*Bug Fixes *\u003Cbr \u002F>\n  \u003Cbr \u002F>Fixed ‘label’ in Exclude IP field on configure page\u003Cbr \u002F>\n  \u003Cbr \u002F>Fixed “self” link tracking\u002FFireFox issue.\u003C\u002Fp>\n\u003Cp>Fixed “https” being ignored during sanity check.\u003C\u002Fp>\n\u003Cp>\n0.5.1 :: \u003Cbr \u002F>\n* Modification *\u003Cbr \u002F>\n  \u003Cbr \u002F>Added Miscellaneous Settings (Sarah Mod)\u003Cbr \u002F>\n  \u003Cbr \u002F>Changed admin widget date range to match WordPress.com Stats widget\u003Cbr \u002F>\n\u003Cbr \u002F>\n*Bug Fixes *\u003Cbr \u002F>\n  \u003Cbr \u002F>Fixed ‘label’ in configure page form\u003C\u002Fp>\n\u003Cp>0.5 :: \u003Cbr \u002F>\n* Modification *\u003Cbr \u002F>\n \u003Cbr \u002F>Added settings to disable user clicks\u003Cbr \u002F>\n \u003Cbr \u002F>Added ignore IP address for click tracking\u003Cbr \u002F>\n \u003Cbr \u002F>Added link statistics reset\u003Cbr \u002F>\n \u003Cbr \u002F>Changed graphs to Open Flash Chart\u003Cbr \u002F>\n \u003Cbr \u002F>Added additional line chart vectors to display unique clicks\u003Cbr \u002F>\n \u003Cbr \u002F>Added link parsing of next and prev template tags\u003Cbr \u002F>\n \u003Cbr \u002F>Added link parsing of categories in posts\u002Fpages as well as sidebar widget\u003Cbr \u002F>\n \u003Cbr \u002F>Added link parsing of tags links template\u003Cbr \u002F>\n \u003Cbr \u002F>Improved title extraction to reduce No Name Given auto-label\u003Cbr \u002F>\n \u003Cbr \u002F>Added global history and report page\u003Cbr \u002F>\n* Bug Fixes *\u003C\u002Fp>\n\u003Cp>Click graph date descrepancy issue\u003Cbr \u002F>\n \u003Cbr \u002F>Added bypass for external links being double tracked when entered in page\u003Cbr \u002F>\n \u003Cbr \u002F>Fixed backwards tracking flags\u003Cbr \u002F>\n \u003Cbr \u002F>Changed admin widget ordering to list most clicked to least click\u003Cbr \u002F>\n\u003C\u002Fp>\n\u003Cp>0.4.2 :: \u003Cbr \u002F>\n* Modification *\u003Cbr \u002F>\n \u003Cbr \u002F>Admin widget links to click admin\u003Cbr \u002F>\n \u003Cbr \u002F>Added contextual help\u003Cbr \u002F>\n* Bug Fixes *\u003Cbr \u002F>\n \u003Cbr \u002F>Comment parsing in admin removal\u003Cbr \u002F>\n \u003Cbr \u002F>Fixed pathing issue for blogs in a sub directory\u003Cbr \u002F>\n\u003C\u002Fp>\n\u003Cp>0.4.1 :: \u003Cbr \u002F>\n* Improvements *\u003Cbr \u002F>\n \u003Cbr \u002F>Added admin dashboard for x day click count line graph\u003Cbr \u002F>\n* Bug Fixes *\u003Cbr \u002F>\n \u003Cbr \u002F>Fixed Division by zero bug\u003Cbr \u002F>\n\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Changelog\u003C\u002Fstrong>\u003Cbr \u002F>\n0.4 :: \u003Cbr \u002F>\n* Improvements *\u003Cbr \u002F>\n \u003Cbr \u002F>Added configuration page\u003Cbr \u002F>\n \u003Cbr \u002F>Added “Add Link” mod. Admins can create standalone links for placement on external sites.\u003Cbr \u002F>\n \u003Cbr \u002F>Added “Edit Link” mod for editing names or stored links.\u003Cbr \u002F>\n \u003Cbr \u002F>Enable or disable individual parsing sections\u003Cbr \u002F>\n \u003Cbr \u002F>Enable or disable individual parsing sections\u003Cbr \u002F>\n \u003Cbr \u002F>Moved google api js call to only fire on click track pages (was slowing down some areas of the admin).\u003Cbr \u002F>\n* Bug Fixes *\u003Cbr \u002F>\n \u003Cbr \u002F>fixed spelling of days of week\u003Cbr \u002F>\n \u003Cbr \u002F>fixed pathing issue for tracking call (Logan and Gary’s Bug)\u003Cbr \u002F>\n \u003Cbr \u002F>fixed comment body parsing (wasn’t grabbing links)\u003Cbr \u002F>\n \u003Cbr \u002F>fixed memory issues (FINALLY 🙂\u003Cbr \u002F>\n\u003C\u002Fp>\n\u003Cp>0.3 :: \u003Cbr \u002F>\n* Improvements *\u003Cbr \u002F>\n \u003Cbr \u002F>Added Indexes on tables for better performance\u003Cbr \u002F>\n \u003Cbr \u002F>Updated Install system\u003Cbr \u002F>\n \u003Cbr \u002F>Added pie charts for clicks by day and hour\u003Cbr \u002F>\n* Bug Fixes *\u003Cbr \u002F>\n \u003Cbr \u002F>fixed hour click report formatting\u003Cbr \u002F>\n \u003Cbr \u002F>fixed blank link haunting\u003Cbr \u002F>\n \u003Cbr \u002F>fixed option saving\u003Cbr \u002F>\n\u003C\u002Fp>\n\u003Cp>0.2.1 :: \u003Cbr \u002F>\n* Bug Fixes *\u003Cbr \u002F>\n \u003Cbr \u002F>fixed bug for attributes with single quotes\u003Cbr \u002F>\n \u003Cbr \u002F>added parsing \u002F tracking of Archive links, Bookmark links, Comment Author URL links and fixed option updates\u003C\u002Fp>\n\u003Cp>0.2 :: \u003Cbr \u002F>\n* Improvements *\u003Cbr \u002F>\n \u003Cbr \u002F>Added reporting\u003Cbr \u002F>\n \u003Cbr \u002F>Added blogroll link tracking\u003Cbr \u002F>\n \u003Cbr \u002F>Added upgrade alert and plugin compatibility notification\u003C\u002Fp>\n\u003Cp>0.1.1 ::\u003Cbr \u002F>\n* Bug Fixes *\u003Cbr \u002F>\n \u003Cbr \u002F>Moved js to  to fix tracking issues in some browsers\u003C\u002Fp>\n\u003Cp>0.1 :: Release\u003C\u002Fp>\n","Tracks link clicks from hrefs in posts and pages. REQUIRES PHP at least 5.2",90,31724,60,2,"2011-04-16T04:20:00.000Z","3.1.4","2.6","",[20,21,22,23,24],"click","clicks","link","links","tracking","http:\u002F\u002Fblog.ericlamb.net\u002Fprojects\u002Fwp-click-track\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-click-track.zip",64,1,"2025-07-14 00:00:00","2026-04-16T10:56:18.058Z","no_bundle",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":38,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":29,"updated_date":44,"references":45,"days_to_patch":38,"patch_diff_files":47,"patch_trac_url":38,"research_status":38,"research_verified":48,"research_rounds_completed":49,"research_plan":38,"research_summary":38,"research_vulnerable_code":38,"research_fix_diff":38,"research_exploit_outline":38,"research_model_used":38,"research_started_at":38,"research_completed_at":38,"research_error":38,"poc_status":38,"poc_video_id":38,"poc_summary":38,"poc_steps":38,"poc_tested_at":38,"poc_wp_version":38,"poc_php_version":38,"poc_playwright_script":38,"poc_exploit_code":38,"poc_has_trace":48,"poc_model_used":38,"poc_verification_depth":38},"CVE-2025-49954","wp-click-tracker-reflected-cross-site-scripting","WP-Click-Tracker \u003C= 0.7.3 - Reflected Cross-Site Scripting","The WP-Click-Tracker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 0.7.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",null,"\u003C=0.7.3","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-10-29 20:02:29",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fc6996e6b-e421-438a-ad21-f7ddbd29742f?source=api-prod",[],false,0,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":51,"total_installs":52,"avg_security_score":53,"avg_patch_time_days":54,"trust_score":55,"computed_at":56},3,110,78,30,79,"2026-07-15T03:25:24.401Z",[58,84,101,123,141],{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":66,"downloaded":67,"rating":68,"num_ratings":69,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":73,"tags":74,"homepage":80,"download_link":81,"security_score":82,"vuln_count":28,"unpatched_count":49,"last_vuln_date":83,"fetched_at":30},"linker","Linker – URL shortener & track outbound link clicks","1.3.0","Elementor","https:\u002F\u002Fprofiles.wordpress.org\u002Felemntor\u002F","\u003Cp>\u003Cstrong>Manage, create and track outbound links by custom pretty links with your domain.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Through Linker’s short url tool you can know on which links your visitors are clicking. Linker is the easiest tool to use in order to create a short link in your own domain & track outbound link clicks from your website, using software like Google Analytics.\u003Cbr \u002F>\nCreate short links to your post, manage your 301 redirects, track affiliate links and do many other URL related tasks easily.\u003C\u002Fp>\n\u003Ch3>Major Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Create Short and clean URLs, using your own domain\u003C\u002Fli>\n\u003Cli>Redirect links to any location, both inbound and outbound, using 301 redirects\u003C\u002Fli>\n\u003Cli>Track outbound link clicks, with internal reporting for Hits per link\u003C\u002Fli>\n\u003Cli>Enjoy an intuitive and User Friendly Admin Interface\u003C\u002Fli>\n\u003Cli>Setup tracking easily using Linker’s out of the box functionality\u003C\u002Fli>\n\u003Cli>Set URL Parameters forwarding for improved tracking on every redirection\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How it Works?\u003C\u002Fh3>\n\u003Cp>Linker adds a new custom post type to your Admin menu, where you can create, edit, delete, and manage Links by 301 redirects. What’s great about Linker is that it tracks click counts and saves them as a custom field. it’s really simple & cool and there is no setup involved. It works seamlessly straight out of the box for whichever theme and plugins you are using.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Link Example\u003C\u002Fstrong>: Just to make it extra clear, here’s how the Linker plugin works.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Original URL: https:\u002F\u002Fwordpress.org\u002Fplugins\u002Flinker\u002F\u003C\u002Fli>\n\u003Cli>New URL with Linker: https:\u002F\u002Fpojo.me\u002Fgo\u002Flinker\u002F\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Contributions:\u003C\u002Fh3>\n\u003Cp>Would you like to contribute to this plugin? You’re more than welcome to submit your pull requests on the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fpojome\u002Fwp-linker\" rel=\"nofollow ugc\">GitHub repo\u003C\u002Fa>. And, if you have any notes about the code, please open a ticket on the issue tracker.\u003C\u002Fp>\n","Track Outbound Link Clicks Easily: Shorten & track your site links by using your own domain name. e.g. \"your-domain.com\u002Fgo\u002Flink\"",2000,40438,86,14,"2024-12-08T15:26:00.000Z","6.7.5","6.0","7.0",[75,76,77,78,79],"301","click-tracking","link-shortener","redirect","shortlinks","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Flinker\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flinker.1.3.0.zip",92,"2023-10-31 00:00:00",{"slug":85,"name":86,"version":87,"author":88,"author_profile":89,"description":90,"short_description":91,"active_installs":92,"downloaded":93,"rating":49,"num_ratings":49,"last_updated":94,"tested_up_to":71,"requires_at_least":95,"requires_php":96,"tags":97,"homepage":99,"download_link":100,"security_score":82,"vuln_count":49,"unpatched_count":49,"last_vuln_date":38,"fetched_at":30},"linkt","Linkt – A Plugin for Affiliate Links, Branded Links and Custom Link Tracking & Management","2.0.1","Kaira","https:\u002F\u002Fprofiles.wordpress.org\u002Fkaira\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fkairaweb.com\u002Fwordpress-plugin\u002Flinkt\u002F\" rel=\"nofollow ugc\">Linkt\u003C\u002Fa> is a robust WordPress plugin designed to simplify the tracking and management of your affiliate links. This tool is perfect for anyone looking to organize and monitor not just affiliate links, but any URLs you want to track.\u003C\u002Fp>\n\u003Cp>With Linkt, you can shorten URLs to make them more user-friendly and easier to share. The plugin also offers multi-level link categorization, allowing you to organize your links in a way that suits your needs. You can easily view detailed visit statistics displayed on an intuitive line graph, providing insights into how your links are performing.\u003C\u002Fp>\n\u003Cp>Additionally, Linkt supports tracking multiple URLs using URL parameters, making it easy to monitor different campaigns or sources. Whether you’re a blogger, marketer, or business owner, Linkt provides a complete solution for optimizing your link management and tracking processes.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>NOTE:\u003C\u002Fstrong> Linkt is NOT an affiliate program for your website; it’s a tool designed for tracking and managing your links, whether they’re from affiliate programs or other sources.\u003C\u002Fp>\n\u003Ch3>Linkt Features\u003C\u002Fh3>\n\u003Cp>✅ \u003Cstrong>Tracking URL Visits\u003C\u002Fstrong>: Keep an eye on and log the number of times each URL is accessed, offering valuable insights into your traffic sources and trends.\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Shortened URLs\u003C\u002Fstrong>: Generate streamlined and aesthetically pleasing URLs that are easy to share and track, improving both appearance and user experience.\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Link Categorization\u003C\u002Fstrong>: Sort your URLs into various categories for more efficient organization and easier access.\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>URL Parameters\u003C\u002Fstrong>: Monitor & track multiple URLs with specific parameters to obtain insights into traffic patterns and user behavior.\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Visit Statistics\u003C\u002Fstrong>: Access comprehensive statistics on URL visits, featuring data displayed in a user-friendly line graph format.\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Customizable Dashboard\u003C\u002Fstrong>: Manage Linkt’s features and view stats directly from your WordPress dashboard, displayed as you want to view them.\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Exclude Known Bots\u003C\u002Fstrong>: Exclude known bots and scripts from your analytics to ensure that your link tracking is more accurate and trustworthy.\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Quick Use Functionality\u003C\u002Fstrong>: Easily access and manage your favorite features with user-friendly, intuitive controls.\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Fully Translatable\u003C\u002Fstrong>: Linkt supports full translation, allowing users from around the globe to use the plugin in their preferred language.\u003C\u002Fp>\n\u003Cp>🔸 We’re working on adding more features… Send us some ideas and maybe we can on what you need!\u003C\u002Fp>\n\u003Ch3>We’re here to help!\u003C\u002Fh3>\n\u003Cp>We strive to provide the best affiliate url tracking & management plugin and support experience possible. While occasional bugs may occur, we appreciate your understanding. If you encounter any issues or need assistance, please don’t hesitate to contact us. We’re here to help!\u003C\u002Fp>\n\u003Ch4>Fast & Intuitive\u003C\u002Fh4>\n\u003Cp>Linkt is designed to be fast, lightweight, and user-friendly, making it an excellent choice for managing and tracking your affiliate urls.\u003C\u002Fp>\n\u003Cp>Created using the latest techniques and technologies for WordPress and the core block editor, Linkt ensures a seamless, speedy experience while offering powerful and advanced editing options.\u003C\u002Fp>\n\u003Cp>Being concerned about bloat code… Linkt only includes the code as it’s used, focusing on speed and performance!\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cp>Please get in contact if you’re interested in helping translate Linkt into a language not yet available. We’d love to have your assistance!\u003C\u002Fp>\n","Simplify your affiliate link management and tracking with Linkt, the ultimate WordPress plugin for creating, categorizing, and analyzing your website  …",300,17256,"2025-02-07T11:37:00.000Z","5.0","5.6",[75,76,77,78,98],"track-links","https:\u002F\u002Fkairaweb.com\u002Fwordpress-plugins\u002Flinkt\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flinkt.2.0.1.zip",{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":109,"downloaded":110,"rating":109,"num_ratings":111,"last_updated":112,"tested_up_to":113,"requires_at_least":114,"requires_php":73,"tags":115,"homepage":119,"download_link":120,"security_score":121,"vuln_count":28,"unpatched_count":49,"last_vuln_date":122,"fetched_at":30},"shortlinkspro","ShortLinks Pro – Affiliate Links, Link Shortening, Click Tracking & Marketing","1.2.1","Ruben Garcia","https:\u002F\u002Fprofiles.wordpress.org\u002Frubengc\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fshortlinkspro.com\" title=\"ShortLinks Pro\" rel=\"nofollow ugc\">ShortLinks Pro\u003C\u002Fa> is the easiest way to shorten, track, manage and share any URL using your own domain name.\u003C\u002Fp>\n\u003Cp>ShortLinks Pro is the most complete link management plugin that not only powers WordPress websites with shortened URLs, also empowers site owners to create clean, branded and unique affiliate links easily letting them save time and get focused on the most important work.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FTI8nMhIfYok?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch4>Examples\u003C\u002Fh4>\n\u003Cp>Short link from a social profile:\u003Cbr \u002F>\nwww.sample-social.com\u002Fyour-profile -> https:\u002F\u002Fdomain.com\u003Cstrong>\u002Fsocial\u002Fx\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Short link from a post (product, article, etc):\u003Cbr \u002F>\ndomain.com\u002Fyour-post-title -> https:\u002F\u002Fdomain.com\u003Cstrong>\u002F123z\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Short link from an affiliate link:\u003Cbr \u002F>\nwww.sample-affiliate.com\u002F12345?ref=123 -> https:\u002F\u002Fdomain.com\u003Cstrong>\u002Frecommends\u002Fproduct\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Short link from anything!\u003Cbr \u002F>\nANY URL OF THE INTERNET -> The short link of your choice!\u003C\u002Fp>\n\u003Cp>ShortLinks Pro helps you to create clean links and brings you detailed reports of their clicks (including IP, Browser, OS, Referrer, among others)\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cp>Short Links:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easily create short links from any URL.\u003C\u002Fli>\n\u003Cli>301, 302 & 307 redirects.\u003C\u002Fli>\n\u003Cli>Custom slugs with support to prefixes.\u003C\u002Fli>\n\u003Cli>Auto-generated slugs.\u003C\u002Fli>\n\u003Cli>No follow & sponsored support.\u003C\u002Fli>\n\u003Cli>Parameter forwarding.\u003C\u002Fli>\n\u003Cli>UTM builder included.\u003C\u002Fli>\n\u003Cli>Categories & tags to organize your links.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Tracking:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Track clicks & unique clicks per link.\u003C\u002Fli>\n\u003Cli>Advanced reports with essential information (IP, Browser, OS, Referrer, among others).\u003C\u002Fli>\n\u003Cli>Filter reports by IP, browser, OS, country, etc.\u003C\u002Fli>\n\u003Cli>Monitor & analyze your marketing campaigns in live.\u003C\u002Fli>\n\u003Cli>Anti-bot features to get reliable tracking analytics.\u003C\u002Fli>\n\u003Cli>Block any IP of your choice.\u003C\u002Fli>\n\u003Cli>Option to disable tracking on any link.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Affiliate Links:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Turn long affiliate URLs into short ones.\u003C\u002Fli>\n\u003Cli>Easy-to-use UI to manage tons of links.\u003C\u002Fli>\n\u003Cli>Affiliate links under your own domain.\u003C\u002Fli>\n\u003Cli>Created unique & branded short links.\u003C\u002Fli>\n\u003Cli>Manage all your affiliate links in the same place.\u003C\u002Fli>\n\u003Cli>Internal notes on any link for your own needs.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Powerful add-ons to extend ShortLinks Pro\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fshortlinkspro.com\u002Fadd-ons\u002Fadvanced-redirects\u002F\" rel=\"nofollow ugc\">Advanced Redirects\u003C\u002Fa>: Lets you mask your link redirects through cloaked, meta refresh & javascript redirects!\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fshortlinkspro.com\u002Fadd-ons\u002Fdynamic-redirects\u002F\" rel=\"nofollow ugc\">Dynamic Redirects\u003C\u002Fa>: Lets you add multiple target URLs to your links based on the conditions of your choice!\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fshortlinkspro.com\u002Fadd-ons\u002Femail-notifications\u002F\" rel=\"nofollow ugc\">Email Notifications\u003C\u002Fa>: Helps you to get informed of the growth of your link campaigns automatically.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fshortlinkspro.com\u002Fadd-ons\u002Flink-expirations\u002F\" rel=\"nofollow ugc\">Link Expirations\u003C\u002Fa>: Lets you add expiration to your links based on different conditions!\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fshortlinkspro.com\u002Fadd-ons\u002Fqr-codes\u002F\" rel=\"nofollow ugc\">QR Codes\u003C\u002Fa>: Lets you to generate QR codes from your links created through ShortLinks Pro.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fshortlinkspro.com\u002Fadd-ons\u002Ffacebook-pixel\u002F\" rel=\"nofollow ugc\">Facebook Pixel\u003C\u002Fa>: Add Facebook Pixel (Meta Pixel) tracking to your link clicks!\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fshortlinkspro.com\u002Fadd-ons\u002Ftwitter-pixel\u002F\" rel=\"nofollow ugc\">Twitter Pixel\u003C\u002Fa>: Add Twitter Pixel (X Pixel) tracking to your link clicks!\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fshortlinkspro.com\u002Fadd-ons\u002Fgoogle-analytics\u002F\" rel=\"nofollow ugc\">Google Analytics\u003C\u002Fa>: Add Google Analytics tracking to your link clicks!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>More plugins from the ShortLinks Pro team\u003C\u002Fh4>\n\u003Cp>If you like ShortLinks Pro, you will love our other plugins!\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgamipress\u002F\" rel=\"ugc\">GamiPress\u003C\u002Fa> – Flexible gamification plugin to reward your users with points, achievements, badges & ranks based on their activity in your WordPress.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fautomatorwp\u002F\" rel=\"ugc\">AutomatorWP\u003C\u002Fa> – Powerful no-code automator plugin that lets you connect +200 plugins together or with apps, platforms with webhooks plus other WordPress sites.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbbforms\u002F\" rel=\"ugc\">BBForms\u003C\u002Fa> – BBForms is a code form plugin designed to help you build multipurpose forms in seconds!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>ShortLinks Pro connects to ip-api to obtain geolocation information from the visitor IP, it’s needed to be able to meet, for example, from which country the visitor is.\u003C\u002Fp>\n\u003Cp>The process requires to send the visitor’s IP to ip-api IP geolocation API on links with tracking enabled.\u003C\u002Fp>\n\u003Cp>This service is provided by “IP-API”: \u003Ca href=\"https:\u002F\u002Fip-api.com\u002Fdocs\u002Flegal\" rel=\"nofollow ugc\">Terms of service & Privacy policy\u003C\u002Fa>.\u003C\u002Fp>\n","Shorten, track, manage and share any URL using your own domain name!",100,2879,12,"2026-03-25T13:08:00.000Z","6.9.4","4.4",[116,76,77,117,118],"affiliate-links","link-tracking","url-shortener","https:\u002F\u002Fshortlinkspro.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshortlinkspro.1.2.1.zip",99,"2025-06-05 00:00:00",{"slug":124,"name":125,"version":126,"author":127,"author_profile":128,"description":129,"short_description":130,"active_installs":131,"downloaded":132,"rating":49,"num_ratings":49,"last_updated":133,"tested_up_to":113,"requires_at_least":96,"requires_php":134,"tags":135,"homepage":18,"download_link":139,"security_score":109,"vuln_count":49,"unpatched_count":49,"last_vuln_date":38,"fetched_at":140},"link-visit-counter","Link Visit Counter","1.0","samiur6688","https:\u002F\u002Fprofiles.wordpress.org\u002Fsamiur6688\u002F","\u003Cp>\u003Cstrong>Link Visit Counter\u003C\u002Fstrong> is a lightweight WordPress plugin that allows site administrators to track clicks on links across their website. With a clean and user-friendly admin interface, you can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Add multiple URLs to monitor without changing the actual links in your content.\u003C\u002Fli>\n\u003Cli>Track real-time clicks on these links using AJAX.\u003C\u002Fli>\n\u003Cli>View click counts for each link directly from the WordPress dashboard.\u003C\u002Fli>\n\u003Cli>Reset or delete links as needed directly from the admin interface.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n1. \u003Cstrong>Multiple Links Tracking:\u003C\u002Fstrong> Track as many links as you need.\u003Cbr \u002F>\n3. \u003Cstrong>Admin Dashboard:\u003C\u002Fstrong> Easy-to-use pages for adding links and viewing click statistics.\u003Cbr \u002F>\n4. \u003Cstrong>Reset & Delete:\u003C\u002Fstrong> Manage tracked links efficiently.\u003C\u002Fp>\n","Track and monitor clicks on links within your website using a simple, professional WordPress plugin with an admin interface.",20,233,"2025-12-09T14:35:00.000Z","7.2",[136,137,21,138,117],"admin-dashboard","analytics","link-monitor","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flink-visit-counter.1.0.zip","2026-04-06T09:54:40.288Z",{"slug":142,"name":143,"version":144,"author":145,"author_profile":146,"description":147,"short_description":148,"active_installs":149,"downloaded":150,"rating":49,"num_ratings":49,"last_updated":151,"tested_up_to":152,"requires_at_least":95,"requires_php":134,"tags":153,"homepage":18,"download_link":159,"security_score":109,"vuln_count":49,"unpatched_count":49,"last_vuln_date":38,"fetched_at":30},"custom-link-click-tracker","Affiliate Link Click Tracker","1.1","WPEasyTools","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpeasytools\u002F","\u003Cp>Affiliate Link Click Tracker by \u003Ca href=\"https:\u002F\u002Fwpeasytools.com\u002F\" rel=\"nofollow ugc\">WPEasyTools\u003C\u002Fa> is one of the \u003Ca href=\"https:\u002F\u002Fwww.wpressblog.com\u002Fbest-wordpress-plugins-for-affiliate-marketers\u002F\" rel=\"nofollow ugc\">best WordPress plugin for affiliate marketers\u003C\u002Fa> that allows you to track clicks on links with a specific prefix. It records information like the post URL, link URL, device, and click time to help you analyze user interactions on your site.\u003C\u002Fp>\n\u003Ch3>Features:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Track clicks for URLs with a specified prefix.\u003C\u002Fli>\n\u003Cli>Capture details such as post URL and title, link URL, device, and click time.\u003C\u002Fli>\n\u003Cli>View tracked click data in a filterable table within the WordPress admin.\u003C\u002Fli>\n\u003Cli>Date and time format according to your WordPress timezone settings.\u003C\u002Fli>\n\u003Cli>Supports date filtering for better data analysis.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Premium Features:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>All free features,\u003C\u002Fli>\n\u003Cli>Anchor Text\u003C\u002Fli>\n\u003Cli>Referral URL\u003C\u002Fli>\n\u003Cli>Device Resolution\u003C\u002Fli>\n\u003Cli>Search Report\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpeasytools.com\u002Flink-click-tracker\u002F\" rel=\"nofollow ugc\">Get Premium Version\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later. See \u003Ca href=\"https:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-2.0.html\" rel=\"nofollow ugc\">GPL License\u003C\u002Fa> for more details.\u003C\u002Fp>\n","Track affiliate, internal, or external link clicks for your given URL prefix. Get post title, link url, device type, and click time for analysis.",10,953,"2025-07-30T03:13:00.000Z","6.8.5",[154,155,156,157,158],"affiliate-link-click-tracker","link-click-tracker","link-click-tracking","link-tracker","track-affiliate-link-clicks","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-link-click-tracker.1.1.zip",{"attackSurface":161,"codeSignals":262,"taintFlows":472,"riskAssessment":793,"analyzedAt":809},{"hooks":162,"ajaxHandlers":258,"restRoutes":259,"shortcodes":260,"cronEvents":261,"entryPointCount":49,"unprotectedCount":49},[163,169,173,176,180,184,188,191,195,198,201,205,210,213,216,219,222,225,229,232,235,238,241,244,248,252],{"type":164,"name":165,"callback":166,"file":167,"line":168},"action","init","wpct_load_plugin_textdomain","click-tracker.php",552,{"type":164,"name":170,"callback":171,"file":167,"line":172},"edit_form_advanced","wpct_link_data",557,{"type":164,"name":174,"callback":171,"file":167,"line":175},"edit_page_form",558,{"type":164,"name":177,"callback":178,"file":167,"line":179},"admin_head","wpct_admin_head",561,{"type":164,"name":181,"callback":182,"file":167,"line":183},"admin_menu","wpct_menu",562,{"type":164,"name":185,"callback":186,"file":167,"line":187},"wp_head","wpct_head",564,{"type":164,"name":165,"callback":189,"file":167,"line":190},"wpct_go",565,{"type":164,"name":192,"callback":193,"file":167,"line":194},"admin_init","wpct_mod_go",566,{"type":164,"name":192,"callback":196,"file":167,"line":197},"wpct_get_graph_stats",567,{"type":164,"name":185,"callback":199,"file":167,"line":200},"wpct_sidebar_header",570,{"type":164,"name":202,"callback":203,"file":167,"line":204},"plugins_loaded","wpct_sidebar_init",571,{"type":206,"name":207,"callback":208,"priority":28,"file":167,"line":209},"filter","get_archives_link","wpct_filter",575,{"type":206,"name":211,"callback":208,"priority":28,"file":167,"line":212},"wp_list_bookmarks",579,{"type":206,"name":214,"callback":208,"priority":28,"file":167,"line":215},"get_comment_author_link",583,{"type":206,"name":217,"callback":208,"priority":28,"file":167,"line":218},"the_excerpt",587,{"type":206,"name":220,"callback":208,"priority":28,"file":167,"line":221},"the_content",591,{"type":206,"name":223,"callback":208,"priority":28,"file":167,"line":224},"the_meta_key",595,{"type":206,"name":226,"callback":208,"priority":227,"file":167,"line":228},"comment_text",9,599,{"type":206,"name":230,"callback":208,"priority":227,"file":167,"line":231},"next_post_link",603,{"type":206,"name":233,"callback":208,"priority":227,"file":167,"line":234},"previous_post_link",604,{"type":206,"name":236,"callback":208,"priority":227,"file":167,"line":237},"the_tags",608,{"type":206,"name":239,"callback":208,"priority":227,"file":167,"line":240},"the_category",612,{"type":206,"name":242,"callback":208,"priority":227,"file":167,"line":243},"wp_list_categories",613,{"type":164,"name":245,"callback":246,"file":167,"line":247},"wp_footer","wpct_ego_footer",617,{"type":164,"name":249,"callback":250,"file":167,"line":251},"wp_dashboard_setup","wpct_admin_add_dashboard_widgets",623,{"type":206,"name":253,"callback":254,"priority":255,"file":256,"line":257},"contextual_help","wpct_contextual_help",11,"contextual_help.php",124,[],[],[],[],{"dangerousFunctions":263,"sqlUsage":264,"outputEscaping":272,"fileOperations":49,"externalRequests":28,"nonceChecks":49,"capabilityChecks":14,"bundledLibraries":471},[],{"prepared":265,"raw":14,"locations":266},49,[267,271],{"file":268,"line":269,"context":270},"install.inc.php",27,"$wpdb->get_var() with variable interpolation",{"file":268,"line":53,"context":270},{"escaped":273,"rawEcho":274,"locations":275},8,105,[276,280,281,283,285,287,289,290,292,294,296,298,300,302,304,306,308,310,312,314,316,318,320,322,324,325,327,329,331,333,335,337,338,339,341,343,344,346,348,350,352,354,356,358,360,362,364,365,367,369,370,372,374,376,378,379,381,382,384,386,388,390,392,394,396,397,398,400,401,404,407,409,411,413,414,415,417,418,420,421,422,424,426,428,430,432,433,435,437,439,441,443,445,447,449,451,453,455,458,460,462,463,465,467,469],{"file":277,"line":278,"context":279},"admin.inc.php",54,"raw output",{"file":277,"line":13,"context":279},{"file":277,"line":282,"context":279},63,{"file":277,"line":284,"context":279},66,{"file":277,"line":286,"context":279},67,{"file":277,"line":288,"context":279},83,{"file":277,"line":68,"context":279},{"file":277,"line":291,"context":279},95,{"file":277,"line":293,"context":279},103,{"file":277,"line":295,"context":279},106,{"file":277,"line":297,"context":279},142,{"file":277,"line":299,"context":279},151,{"file":277,"line":301,"context":279},168,{"file":277,"line":303,"context":279},185,{"file":277,"line":305,"context":279},186,{"file":277,"line":307,"context":279},187,{"file":277,"line":309,"context":279},191,{"file":277,"line":311,"context":279},199,{"file":277,"line":313,"context":279},232,{"file":277,"line":315,"context":279},256,{"file":277,"line":317,"context":279},262,{"file":277,"line":319,"context":279},264,{"file":277,"line":321,"context":279},269,{"file":277,"line":323,"context":279},286,{"file":277,"line":92,"context":279},{"file":277,"line":326,"context":279},302,{"file":277,"line":328,"context":279},307,{"file":277,"line":330,"context":279},327,{"file":277,"line":332,"context":279},351,{"file":277,"line":334,"context":279},353,{"file":277,"line":336,"context":279},359,{"file":277,"line":336,"context":279},{"file":277,"line":336,"context":279},{"file":277,"line":340,"context":279},361,{"file":277,"line":342,"context":279},367,{"file":277,"line":342,"context":279},{"file":277,"line":345,"context":279},369,{"file":277,"line":347,"context":279},424,{"file":277,"line":349,"context":279},426,{"file":277,"line":351,"context":279},431,{"file":277,"line":353,"context":279},436,{"file":277,"line":355,"context":279},466,{"file":277,"line":357,"context":279},467,{"file":277,"line":359,"context":279},481,{"file":277,"line":361,"context":279},482,{"file":277,"line":363,"context":279},491,{"file":277,"line":363,"context":279},{"file":277,"line":366,"context":279},548,{"file":277,"line":368,"context":279},573,{"file":277,"line":209,"context":279},{"file":277,"line":371,"context":279},600,{"file":277,"line":373,"context":279},607,{"file":277,"line":375,"context":279},618,{"file":277,"line":377,"context":279},625,{"file":167,"line":132,"context":279},{"file":380,"line":288,"context":279},"configure.php",{"file":380,"line":288,"context":279},{"file":380,"line":383,"context":279},173,{"file":380,"line":385,"context":279},178,{"file":380,"line":387,"context":279},183,{"file":380,"line":389,"context":279},202,{"file":380,"line":391,"context":279},216,{"file":380,"line":393,"context":279},231,{"file":380,"line":395,"context":279},236,{"file":380,"line":321,"context":279},{"file":380,"line":321,"context":279},{"file":380,"line":399,"context":279},276,{"file":380,"line":399,"context":279},{"file":402,"line":403,"context":279},"open-flash-chart\\php-ofc-library\\open_flash_chart_object.php",16,{"file":405,"line":406,"context":279},"reporting.php",131,{"file":405,"line":408,"context":279},205,{"file":405,"line":410,"context":279},340,{"file":412,"line":274,"context":279},"template.inc.php",{"file":412,"line":297,"context":279},{"file":412,"line":297,"context":279},{"file":412,"line":416,"context":279},147,{"file":412,"line":416,"context":279},{"file":412,"line":419,"context":279},198,{"file":412,"line":311,"context":279},{"file":412,"line":311,"context":279},{"file":412,"line":423,"context":279},203,{"file":412,"line":425,"context":279},207,{"file":412,"line":427,"context":279},210,{"file":412,"line":429,"context":279},211,{"file":412,"line":431,"context":279},224,{"file":412,"line":431,"context":279},{"file":412,"line":434,"context":279},251,{"file":412,"line":436,"context":279},254,{"file":412,"line":438,"context":279},312,{"file":412,"line":440,"context":279},313,{"file":412,"line":442,"context":279},319,{"file":412,"line":444,"context":279},322,{"file":412,"line":446,"context":279},324,{"file":412,"line":448,"context":279},329,{"file":412,"line":450,"context":279},330,{"file":412,"line":452,"context":279},338,{"file":412,"line":454,"context":279},339,{"file":456,"line":457,"context":279},"widget.inc.php",38,{"file":456,"line":459,"context":279},56,{"file":456,"line":461,"context":279},93,{"file":456,"line":295,"context":279},{"file":456,"line":464,"context":279},108,{"file":456,"line":466,"context":279},125,{"file":456,"line":468,"context":279},132,{"file":456,"line":470,"context":279},134,[],[473,502,516,525,534,547,606,620,663,675,688,715,734,764],{"entryPoint":474,"graph":475,"unsanitizedCount":501,"severity":40},"wpct_mod_link_form (admin.inc.php:30)",{"nodes":476,"edges":497},[477,481,486,490,492,495],{"id":478,"type":479,"label":480,"file":277,"line":13},"n0","source","$_SERVER['PHP_SELF']",{"id":482,"type":483,"label":484,"file":277,"line":13,"wp_function":485},"n1","sink","echo() [XSS]","echo",{"id":487,"type":479,"label":488,"file":277,"line":489},"n2","$_REQUEST",33,{"id":491,"type":483,"label":484,"file":277,"line":286,"wp_function":485},"n3",{"id":493,"type":479,"label":494,"file":277,"line":82},"n4","$_SERVER (x2)",{"id":496,"type":483,"label":484,"file":277,"line":291,"wp_function":485},"n5",[498,499,500],{"from":478,"to":482,"sanitized":48},{"from":487,"to":491,"sanitized":48},{"from":493,"to":496,"sanitized":48},4,{"entryPoint":503,"graph":504,"unsanitizedCount":515,"severity":40},"wpct_admin_list_link_page (admin.inc.php:203)",{"nodes":505,"edges":512},[506,508,509,511],{"id":478,"type":479,"label":507,"file":277,"line":313},"$_SERVER['PHP_SELF'] (x3)",{"id":482,"type":483,"label":484,"file":277,"line":313,"wp_function":485},{"id":487,"type":479,"label":510,"file":277,"line":336},"$_REQUEST['page'] (x2)",{"id":491,"type":483,"label":484,"file":277,"line":336,"wp_function":485},[513,514],{"from":478,"to":482,"sanitized":48},{"from":487,"to":491,"sanitized":48},5,{"entryPoint":517,"graph":518,"unsanitizedCount":28,"severity":40},"wpct_admin_list_links (admin.inc.php:380)",{"nodes":519,"edges":523},[520,522],{"id":478,"type":479,"label":488,"file":277,"line":521},388,{"id":482,"type":483,"label":484,"file":277,"line":347,"wp_function":485},[524],{"from":478,"to":482,"sanitized":48},{"entryPoint":526,"graph":527,"unsanitizedCount":28,"severity":40},"wpct_admin_main (admin.inc.php:566)",{"nodes":528,"edges":532},[529,531],{"id":478,"type":479,"label":530,"file":277,"line":200},"$_GET",{"id":482,"type":483,"label":484,"file":277,"line":368,"wp_function":485},[533],{"from":478,"to":482,"sanitized":48},{"entryPoint":535,"graph":536,"unsanitizedCount":546,"severity":40},"wpct_options (configure.php:12)",{"nodes":537,"edges":543},[538,539,540,542],{"id":478,"type":479,"label":507,"file":380,"line":288},{"id":482,"type":483,"label":484,"file":380,"line":288,"wp_function":485},{"id":487,"type":479,"label":541,"file":380,"line":288},"$_REQUEST['page'] (x3)",{"id":491,"type":483,"label":484,"file":380,"line":288,"wp_function":485},[544,545],{"from":478,"to":482,"sanitized":48},{"from":487,"to":491,"sanitized":48},6,{"entryPoint":548,"graph":549,"unsanitizedCount":273,"severity":40},"wpct_admin_module_template (template.inc.php:115)",{"nodes":550,"edges":593},[551,553,554,556,559,560,563,566,568,572,575,577,580,583,585,588,591],{"id":478,"type":479,"label":552,"file":412,"line":419},"$_SERVER['PHP_SELF'] (x7)",{"id":482,"type":483,"label":484,"file":412,"line":419,"wp_function":485},{"id":487,"type":479,"label":480,"file":412,"line":555},169,{"id":491,"type":557,"label":558,"file":412,"line":555},"transform","→ wpct_admin_message()",{"id":493,"type":483,"label":484,"file":412,"line":274,"wp_function":485},{"id":496,"type":479,"label":561,"file":412,"line":562},"$_REQUEST (x3)",252,{"id":564,"type":557,"label":565,"file":412,"line":562},"n6","→ wpct_mod_link_form()",{"id":567,"type":483,"label":484,"file":277,"line":282,"wp_function":485},"n7",{"id":569,"type":479,"label":570,"file":412,"line":571},"n8","$_REQUEST (x2)",271,{"id":573,"type":557,"label":574,"file":412,"line":571},"n9","→ wpct_admin_list_ip_page()",{"id":576,"type":483,"label":484,"file":277,"line":299,"wp_function":485},"n10",{"id":578,"type":479,"label":488,"file":412,"line":579},"n11",275,{"id":581,"type":557,"label":582,"file":412,"line":579},"n12","→ wpct_admin_list_link_page()",{"id":584,"type":483,"label":484,"file":277,"line":345,"wp_function":485},"n13",{"id":586,"type":479,"label":488,"file":412,"line":587},"n14",281,{"id":589,"type":557,"label":590,"file":412,"line":587},"n15","→ wpct_admin_list_links()",{"id":592,"type":483,"label":484,"file":277,"line":353,"wp_function":485},"n16",[594,596,597,598,599,600,601,602,603,604,605],{"from":478,"to":482,"sanitized":595},true,{"from":487,"to":491,"sanitized":48},{"from":491,"to":493,"sanitized":48},{"from":496,"to":564,"sanitized":48},{"from":564,"to":567,"sanitized":48},{"from":569,"to":573,"sanitized":48},{"from":573,"to":576,"sanitized":48},{"from":578,"to":581,"sanitized":48},{"from":581,"to":584,"sanitized":48},{"from":586,"to":589,"sanitized":48},{"from":589,"to":592,"sanitized":48},{"entryPoint":607,"graph":608,"unsanitizedCount":515,"severity":40},"wpct_admin_head (template.inc.php:309)",{"nodes":609,"edges":617},[610,613,614,616],{"id":478,"type":479,"label":611,"file":412,"line":612},"$_GET (x3)",316,{"id":482,"type":483,"label":484,"file":412,"line":446,"wp_function":485},{"id":487,"type":479,"label":494,"file":412,"line":615},315,{"id":491,"type":483,"label":484,"file":412,"line":452,"wp_function":485},[618,619],{"from":478,"to":482,"sanitized":48},{"from":487,"to":491,"sanitized":48},{"entryPoint":621,"graph":622,"unsanitizedCount":273,"severity":40},"\u003Ctemplate.inc> (template.inc.php:0)",{"nodes":623,"edges":649},[624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,643,645,647],{"id":478,"type":479,"label":552,"file":412,"line":419},{"id":482,"type":483,"label":484,"file":412,"line":419,"wp_function":485},{"id":487,"type":479,"label":611,"file":412,"line":612},{"id":491,"type":483,"label":484,"file":412,"line":446,"wp_function":485},{"id":493,"type":479,"label":494,"file":412,"line":615},{"id":496,"type":483,"label":484,"file":412,"line":452,"wp_function":485},{"id":564,"type":479,"label":480,"file":412,"line":555},{"id":567,"type":557,"label":558,"file":412,"line":555},{"id":569,"type":483,"label":484,"file":412,"line":274,"wp_function":485},{"id":573,"type":479,"label":561,"file":412,"line":562},{"id":576,"type":557,"label":565,"file":412,"line":562},{"id":578,"type":483,"label":484,"file":277,"line":282,"wp_function":485},{"id":581,"type":479,"label":570,"file":412,"line":571},{"id":584,"type":557,"label":574,"file":412,"line":571},{"id":586,"type":483,"label":484,"file":277,"line":299,"wp_function":485},{"id":589,"type":479,"label":488,"file":412,"line":579},{"id":592,"type":557,"label":582,"file":412,"line":579},{"id":642,"type":483,"label":484,"file":277,"line":345,"wp_function":485},"n17",{"id":644,"type":479,"label":488,"file":412,"line":587},"n18",{"id":646,"type":557,"label":590,"file":412,"line":587},"n19",{"id":648,"type":483,"label":484,"file":277,"line":353,"wp_function":485},"n20",[650,651,652,653,654,655,656,657,658,659,660,661,662],{"from":478,"to":482,"sanitized":595},{"from":487,"to":491,"sanitized":595},{"from":493,"to":496,"sanitized":595},{"from":564,"to":567,"sanitized":48},{"from":567,"to":569,"sanitized":48},{"from":573,"to":576,"sanitized":48},{"from":576,"to":578,"sanitized":48},{"from":581,"to":584,"sanitized":48},{"from":584,"to":586,"sanitized":48},{"from":589,"to":592,"sanitized":48},{"from":592,"to":642,"sanitized":48},{"from":644,"to":646,"sanitized":48},{"from":646,"to":648,"sanitized":48},{"entryPoint":664,"graph":665,"unsanitizedCount":546,"severity":674},"\u003Cconfigure> (configure.php:0)",{"nodes":666,"edges":671},[667,668,669,670],{"id":478,"type":479,"label":507,"file":380,"line":288},{"id":482,"type":483,"label":484,"file":380,"line":288,"wp_function":485},{"id":487,"type":479,"label":541,"file":380,"line":288},{"id":491,"type":483,"label":484,"file":380,"line":288,"wp_function":485},[672,673],{"from":478,"to":482,"sanitized":48},{"from":487,"to":491,"sanitized":48},"low",{"entryPoint":676,"graph":677,"unsanitizedCount":14,"severity":687},"wpct_link_data (admin.inc.php:511)",{"nodes":678,"edges":685},[679,681],{"id":478,"type":479,"label":570,"file":277,"line":680},514,{"id":482,"type":483,"label":682,"file":277,"line":683,"wp_function":684},"get_results() [SQLi]",521,"get_results",[686],{"from":478,"to":482,"sanitized":48},"high",{"entryPoint":689,"graph":690,"unsanitizedCount":714,"severity":687},"\u003Cadmin.inc> (admin.inc.php:0)",{"nodes":691,"edges":707},[692,694,695,697,698,700,701,702,703,704,705,706],{"id":478,"type":479,"label":693,"file":277,"line":13},"$_SERVER['PHP_SELF'] (x4)",{"id":482,"type":483,"label":484,"file":277,"line":13,"wp_function":485},{"id":487,"type":479,"label":696,"file":277,"line":489},"$_REQUEST (x4)",{"id":491,"type":483,"label":484,"file":277,"line":286,"wp_function":485},{"id":493,"type":479,"label":699,"file":277,"line":82},"$_SERVER (x9)",{"id":496,"type":483,"label":484,"file":277,"line":291,"wp_function":485},{"id":564,"type":479,"label":510,"file":277,"line":336},{"id":567,"type":483,"label":484,"file":277,"line":336,"wp_function":485},{"id":569,"type":479,"label":696,"file":277,"line":680},{"id":573,"type":483,"label":682,"file":277,"line":683,"wp_function":684},{"id":576,"type":479,"label":530,"file":277,"line":200},{"id":578,"type":483,"label":484,"file":277,"line":368,"wp_function":485},[708,709,710,711,712,713],{"from":478,"to":482,"sanitized":48},{"from":487,"to":491,"sanitized":48},{"from":493,"to":496,"sanitized":48},{"from":564,"to":567,"sanitized":48},{"from":569,"to":573,"sanitized":48},{"from":576,"to":578,"sanitized":48},24,{"entryPoint":716,"graph":717,"unsanitizedCount":546,"severity":687},"wpct_go (click-tracker.php:270)",{"nodes":718,"edges":731},[719,722,724,727],{"id":478,"type":479,"label":720,"file":167,"line":721},"$_GET (x2)",282,{"id":482,"type":483,"label":682,"file":167,"line":723,"wp_function":684},284,{"id":487,"type":479,"label":725,"file":167,"line":726},"$_GET (x4)",296,{"id":491,"type":483,"label":728,"file":167,"line":729,"wp_function":730},"query() [SQLi]",360,"query",[732,733],{"from":478,"to":482,"sanitized":48},{"from":487,"to":491,"sanitized":48},{"entryPoint":735,"graph":736,"unsanitizedCount":501,"severity":687},"wpct_mod_go (click-tracker.php:450)",{"nodes":737,"edges":757},[738,740,742,743,746,748,750,752,754,756],{"id":478,"type":479,"label":739,"file":167,"line":355},"$_POST",{"id":482,"type":483,"label":728,"file":167,"line":741,"wp_function":730},469,{"id":487,"type":479,"label":480,"file":167,"line":359},{"id":491,"type":483,"label":744,"file":167,"line":359,"wp_function":745},"header() [Header Injection]","header",{"id":493,"type":479,"label":739,"file":167,"line":747},461,{"id":496,"type":557,"label":749,"file":167,"line":747},"→ wpct_get_link_data()",{"id":564,"type":483,"label":682,"file":167,"line":751,"wp_function":684},441,{"id":567,"type":479,"label":739,"file":167,"line":753},477,{"id":569,"type":557,"label":755,"file":167,"line":753},"→ wpct_add_link()",{"id":573,"type":483,"label":728,"file":167,"line":680,"wp_function":730},[758,759,760,761,762,763],{"from":478,"to":482,"sanitized":48},{"from":487,"to":491,"sanitized":48},{"from":493,"to":496,"sanitized":48},{"from":496,"to":564,"sanitized":48},{"from":567,"to":569,"sanitized":48},{"from":569,"to":573,"sanitized":48},{"entryPoint":765,"graph":766,"unsanitizedCount":792,"severity":687},"\u003Cclick-tracker> (click-tracker.php:0)",{"nodes":767,"edges":783},[768,769,770,772,773,774,775,776,777,778,779,780,781,782],{"id":478,"type":479,"label":725,"file":167,"line":721},{"id":482,"type":483,"label":682,"file":167,"line":723,"wp_function":684},{"id":487,"type":479,"label":771,"file":167,"line":726},"$_GET (x5)",{"id":491,"type":483,"label":728,"file":167,"line":729,"wp_function":730},{"id":493,"type":479,"label":739,"file":167,"line":355},{"id":496,"type":483,"label":728,"file":167,"line":741,"wp_function":730},{"id":564,"type":479,"label":480,"file":167,"line":359},{"id":567,"type":483,"label":744,"file":167,"line":359,"wp_function":745},{"id":569,"type":479,"label":739,"file":167,"line":747},{"id":573,"type":557,"label":749,"file":167,"line":747},{"id":576,"type":483,"label":682,"file":167,"line":751,"wp_function":684},{"id":578,"type":479,"label":739,"file":167,"line":753},{"id":581,"type":557,"label":755,"file":167,"line":753},{"id":584,"type":483,"label":728,"file":167,"line":680,"wp_function":730},[784,785,786,787,788,789,790,791],{"from":478,"to":482,"sanitized":48},{"from":487,"to":491,"sanitized":48},{"from":493,"to":496,"sanitized":48},{"from":564,"to":567,"sanitized":48},{"from":569,"to":573,"sanitized":48},{"from":573,"to":576,"sanitized":48},{"from":578,"to":581,"sanitized":48},{"from":581,"to":584,"sanitized":48},13,{"summary":794,"deductions":795},"The wp-click-track plugin exhibits a mixed security posture. While it demonstrates good practices in its use of prepared statements for SQL queries and avoids common attack vectors like direct file operations and external HTTP requests, significant concerns arise from its output escaping and taint analysis. The extremely low percentage of properly escaped outputs suggests a high risk of Cross-Site Scripting (XSS) vulnerabilities, especially given that 100% of analyzed taint flows had unsanitized paths.  The presence of 5 high-severity taint flows is particularly alarming and points to potential injection issues.\n\nThe plugin's vulnerability history, while showing only one medium CVE, is concerning due to its recent nature (2025-07-14) and the indication of a past XSS vulnerability type. The fact that this CVE is currently unpatched further exacerbates the risk. The lack of nonce checks on any entry points, coupled with only two capability checks across the entire code, means that many potential actions within the plugin might be susceptible to unauthorized execution if an attacker can leverage the identified output escaping and taint flow weaknesses.\n\nIn conclusion, the plugin has some strengths in its foundational security for database interactions but suffers from critical weaknesses in output sanitization and handling of potentially untrusted input. The combination of widespread unsanitized taint flows, poor output escaping, and an unpatched vulnerability creates a substantial risk profile that requires immediate attention. The minimal attack surface in terms of exposed handlers and routes is a mitigating factor, but it does not negate the severity of the identified code-level risks.",[796,799,801,803,805,807],{"reason":797,"points":798},"Unpatched CVE",15,{"reason":800,"points":798},"High severity taint flows (5)",{"reason":802,"points":149},"Taint flows with unsanitized paths (100%)",{"reason":804,"points":273},"Low proper output escaping (7%)",{"reason":806,"points":515},"No nonce checks on entry points",{"reason":808,"points":51},"Limited capability checks (2)","2026-03-16T21:16:57.310Z",{"wat":811,"direct":820},{"assetPaths":812,"generatorPatterns":814,"scriptPaths":815,"versionParams":816},[813],"\u002Fwp-content\u002Fplugins\u002Fwp-click-track\u002Fjs\u002Fajax.js",[],[],[817,818,819],"wp-click-track\u002Fstyle.css?ver=","wp-click-track\u002Fadmin.css?ver=","wp-click-track\u002Fjs\u002Fajax.js?ver=",{"cssClasses":821,"htmlComments":822,"htmlAttributes":823,"restEndpoints":824,"jsGlobals":825,"shortcodeOutput":828},[],[],[],[],[826,827],"sack","ajax",[],{"error":595,"url":830,"statusCode":831,"statusMessage":832,"message":832},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fwp-click-track\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":49,"versions":834},[]]