[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fg_AUxoVmU3eD3FYUa6b5ZdfvpNcM4EkeUsR3cM1UasE":3,"$fxhxcV3hQb-gL2aMYy3j3rwwE8uoppM9FSHzmzoeAmJE":633,"$f2SbHFJcY2ivcL-4lokETGQYQ9wnAUGFPYoEyQRMDXO4":637},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":30,"crawl_stats":26,"alternatives":36,"analysis":141,"fingerprints":613},"wp-hr-gdpr","WP-HR GDPR: GDPR Tools for Human Resources on WordPress","0.9","wphrmanager","https:\u002F\u002Fprofiles.wordpress.org\u002Fwphrmanager\u002F","\u003Cp>Now you can manage HR (Human Resource) GDPR processes from within your website with our exciting new plugin WP-HR GDPR. The plugin helps you draft a Data Privacy Notice and collect consents to process data.\u003Cbr \u002F>\nIdeal for small and medium sized businesses (SME) needing a simple solution to assist with managing GDPR responsibilities.\u003C\u002Fp>\n\u003Ch4>WP-HR GDPR PRO Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Create a Data Privacy Notice for employees easily using our structured form with content notes and suggestions\u003C\u002Fli>\n\u003Cli>Display your Data Privacy Notice anywhere on your site with a shortcode\u003C\u002Fli>\n\u003Cli>Create a Consent Form for users to consent to you processing their data or alternatively acknowledge they have read your Data Privacy Notice\u003C\u002Fli>\n\u003Cli>Display Consent Form anywhere on your site with a shortcode\u003C\u002Fli>\n\u003Cli>View a summary of all consents received to get the full picture of your progress\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WP-HR GDPR Extensions\u003C\u002Fh4>\n\u003Cp>Our Pro version is designed to integrate with the WP-HR Manager plugin [LINK: https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-hr-manager].  When both plugins are installed you benefit from all the employee management features of WP-HR Manager plus enhanced GDPR tools, including:\u003Cbr \u002F>\n* Nominate Data Protection Officers who can access plugin features and restrict access to certain data for other user types\u003Cbr \u002F>\n* Link Consents and other GDPR activities to employee profiles\u003Cbr \u002F>\n* Create a Subject Access Request page and allow logged in users to submit without the need to submit additional ID\u003Cbr \u002F>\n* Create a Register to log all Subject Access Requests and manage how they are processed\u003Cbr \u002F>\n* Record GDPR training for each employee\u003Cbr \u002F>\n* Automatically send an email to people submitting Consent and Subject Access Request forms as a record of their submission\u003Cbr \u002F>\n* Automatically notify Data Protection Officers about new Consent and Subject Access Request submissions\u003Cbr \u002F>\n* Integrate your Data Privacy Notice and Consent forms within Job Applications created using the WP-HR Recruitment extension\u003C\u002Fp>\n\u003Ch4>Links\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwphrmanager.com\u002Fdocumentation\u002F\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwphrmanager.com\u002F\" rel=\"nofollow ugc\">Project Site\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwphrmanager.com\u002Fextensions\u002F\" rel=\"nofollow ugc\">Extensions\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Now you can manage HR (Human Resource) GDPR processes from within your website with our exciting new plugin WP-HR GDPR. The plugin helps you draft a D …",10,3855,0,"2022-02-28T10:50:00.000Z","5.9.13","",[18,19,20,21,22],"data-protection","gdpr","hr","human-resources","privacy-notice","http:\u002F\u002Fwww.wphrmanager.com\u002Fplugins\u002Fwp-hr-gdpr\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-hr-gdpr.zip",85,null,"2026-04-06T09:54:40.288Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":25,"trust_score":34,"computed_at":35},2,310,88,80,"2026-05-20T09:09:03.839Z",[37,61,83,105,121],{"slug":19,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":57,"download_link":58,"security_score":59,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":60},"GDPR","2.1.2","Trew Knowledge","https:\u002F\u002Fprofiles.wordpress.org\u002Ftrewknowledge\u002F","\u003Cp>This plugin is meant to assist a Controller, Data Processor, and Data Protection Officer (DPO) with efforts to meet the obligations and rights enacted under the GDPR.\u003C\u002Fp>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftrewknowledge\u002FGDPR\u002Fwiki\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Ftrewknowledge\u002FGDPR\u002Fwiki\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Collaboration\u003C\u002Fh3>\n\u003Cp>You can send your pull request at \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftrewknowledge\u002Fgdpr\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Ftrewknowledge\u002Fgdpr\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Shortcodes & helper functions\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftrewknowledge\u002FGDPR\u002Fwiki\u002FFunctions-&-Shortcodes\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Ftrewknowledge\u002FGDPR\u002Fwiki\u002FFunctions-&-Shortcodes\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Consent management\u003C\u002Fli>\n\u003Cli>Privacy Preference management for Cookies with front-end preference UI & banner notifications\u003C\u002Fli>\n\u003Cli>Privacy Policy page configurations with version control and re-consent management\u003C\u002Fli>\n\u003Cli>Rights to erasure & deletion of website data with a double opt-in confirmation email\u003C\u002Fli>\n\u003Cli>Re-assignment of user data on erasure requests & pseudonymization of user website data\u003C\u002Fli>\n\u003Cli>Data Processor settings and publishing of contact information\u003C\u002Fli>\n\u003Cli>Right to access data by admin dashboard with email look up and export\u003C\u002Fli>\n\u003Cli>Right to access data by Data Subject with front-end requests button & double opt-in confirmation email\u003C\u002Fli>\n\u003Cli>Right to portability & export of data by Admin or Data Subject in XML or JSON formats\u003C\u002Fli>\n\u003Cli>Encrypted audit logs for the lifetime of Data Subject compliance activity\u003C\u002Fli>\n\u003Cli>Data Subject Secret Token for two-factor decryption and recovery of data\u003C\u002Fli>\n\u003Cli>Data breach notification logs and batch email notifications to Data Subjects\u003C\u002Fli>\n\u003Cli>Telemetry Tracker for visualizing plugins and website data\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Settings\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>General\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>From the Settings options in the dashboard, you can select the Privacy Policy page for tracking and logging consent.\u003C\u002Fp>\n\u003Cp>On login, the user must consent to the Privacy Policy outlined on the site. If the user does not consent, the user will not be registered or logged in.\u003C\u002Fp>\n\u003Cp>If the site owner updates the Privacy Policy page content, the change will be logged and flagged to the admin that they must notify users on next login to seek re-consent. Additionally, the warning message can be dismissed in the event of a minor correction or mistake.\u003C\u002Fp>\n\u003Cp>Additionally, under General Settings the Admin can set the outgoing email limitation which would set the batch notification email limit per hour in the event of a Breach Notification.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Cookie Preference Management\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Similar to consent management, users can opt in or out of cookies that are being used on the site. There are 3 formats of cookies that can be created which include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Always Active:\u003C\u002Fstrong> Cookies that are always active or are required for the site to function.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Toggled:\u003C\u002Fstrong> Cookies that can be activated or blocked based on the user preference\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Opt-Out Link:\u003C\u002Fstrong> Cookies that require configuration from a third-party source in order to opt-out\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Depending on the user preference setting, you can use the \u003Ccode>is_allowed_cookie( $cookie )\u003C\u002Fcode> function to save and set the cookies. The cookie with the user approved cookies can be found at another cookie named \u003Ccode>gdpr_approved_cookies\u003C\u002Fcode>. There’s also a helper function called \u003Ccode>is_allowed_cookie( $cookie )\u003C\u002Fcode> that you can use to prevent setting up a cookie.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Consent Management\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Consents can be registered on the settings page. They can be optional or not. By default, this plugin comes with a Privacy Policy consent that users need to agree with on registration.\u003C\u002Fp>\n\u003Cp>For optional consents, there’s a wrapper function \u003Ccode>have_consent( $consent_id )\u003C\u002Fcode> to help you display or hide something on the site depending if the user gave consent or not.\u003C\u002Fp>\n\u003Cp>Consents are logged to the user record for auditing or for access purposes.\u003C\u002Fp>\n\u003Ch3>Requests Table & Rights of Data Subject\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Right to Erasure Requests\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>The Data Subject is able to submit a request to be erased from the site using a shortcode.\u003C\u002Fli>\n\u003Cli>\n\u003Cp>When a request is made, the Data Subject will receive an email confirmation to confirm the deletion request.\u003C\u002Fp>\n\u003Col>\n\u003Cli>After email confirmation, the user request is added to the requests table for review by the Administrator. The Administrator can also add a user manually with an email look up and review.\u003C\u002Fli>\n\u003Cli>If the Data Subject has content published on the site for any post types or comments, they will be added to this table. If they do not have any content, they will receive a confirmation of erasure request and be provided a 6 digit Token for safekeeping after erasure in case of recover data needs.\u003C\u002Fli>\n\u003Cli>The requests table allows the Administrator to reassign any content to another user or delete it.\u003C\u002Fli>\n\u003Cli>In the event of comments, the Data Subject’s content would be made anonymous.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Admin can also manually add users to the erasure requests table with a manual email search\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>Right to Access Data Request & User Data Portability\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>The Data Subject can place a request to download their data with the shortcode.\u003C\u002Fli>\n\u003Cli>After requesting their data, the user will receive a double opt-in confirmation email then the plugin will generate an XML or JSON file, which will be emailed to them for download with an expiration time of 48 hours.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>Right to Rectify & Complaint Requests\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>The Data Subject can place a request to rectify data or file a complaint with the shortcode.\u003C\u002Fli>\n\u003Cli>After making their request, the user will receive a double opt-in confirmation email and then add them to the table for admin to handle the request.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Tools\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Access Data\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The Access Data tool allows the Admin to look up a user email and view the data of a particular user. The Admin can download and export the data in a JSON or XML format and provide to the Data Subject if manually requested.\u003C\u002Fp>\n\u003Cp>NOTE: This method should not be used without the Data Subject confirming their identity.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Audit Log\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Everything the Data Subject does from registration, providing consent to the privacy policy, terms of service and other requests are logged and encrypted in a database. Data breach notifications are also logged to all Data Subjects upon confirmation by Controller.\u003C\u002Fp>\n\u003Col>\n\u003Cli>Using the Data Subject’s email, you can look up and retrieve the user information and display it.\u003C\u002Fli>\n\u003Cli>If the Data Subject has been removed from the site, this encrypted log is deleted from the database and saved as an encrypted file inside the plugin folder.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>If in the future, the Data Subject makes a complaint or there is a need to recover the data, the user can provide their email address and the 6 digit token they received from the deletion confirmation email to decrypt and retrieve the file.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Data Breach & Notifications\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>In case of a data breach, the Admin can generate a Data Breach Notification to users by logging the information and confirm the breach through a double opt-in confirmation email. The following information would be recorded in the audit log:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Nature of the personal data breach\u003C\u002Fli>\n\u003Cli>Name and contact details of the data protection officer\u003C\u002Fli>\n\u003Cli>Likely consequences of the personal data breach\u003C\u002Fli>\n\u003Cli>Measures were taken or proposed to be taken\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Once the confirmation of the breach has been confirmed via email, the website will begin a batch email notification process to all users every hour until all users receive the notification.\u003C\u002Fp>\n\u003Ch3>Telemetry Tracker\u003C\u002Fh3>\n\u003Cp>The Telemetry Tracker feature will display all data that is being sent outside of your server to another destination. It will indicate the plugin or theme responsible, file and line where the data is being sent.\u003C\u002Fp>\n\u003Cp>WordPress Core and some plugins gather data from your install and send this data to an outside server.\u003C\u002Fp>\n\u003Cp>WordPress Plugin Repository does not allow plugins to do that, but premium plugins are able to do this because they are not bound by the Plugin repository rules. If you did not explicitly opt-in for this feature you should make a complaint.\u003C\u002Fp>\n\u003Ch3>Important!\u003C\u002Fh3>\n\u003Cp>Activating this plugin does not guarantee that an organization is successfully meeting its responsibilities and obligations of GDPR. Individual organizations should assess their unique responsibilities and ensure extra measures are taken to meet any obligations required by law and based on a data protection impact assessment (DPIA).\u003C\u002Fp>\n","This plugin is meant to assist with the GDPR obligations of a Data processor and Controller.",10000,372285,86,58,"2026-02-24T15:47:00.000Z","6.9.4","4.7","5.6",[53,19,54,55,56],"compliance","general-data-protection-regulation","law","privacy","https:\u002F\u002Ftrewknowledge.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgdpr.2.1.2.zip",100,"2026-04-16T10:56:18.058Z",{"slug":62,"name":63,"version":64,"author":7,"author_profile":8,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":69,"num_ratings":70,"last_updated":71,"tested_up_to":72,"requires_at_least":73,"requires_php":16,"tags":74,"homepage":78,"download_link":79,"security_score":80,"vuln_count":81,"unpatched_count":13,"last_vuln_date":82,"fetched_at":60},"wp-hr-manager","WP-HR Manager: The Human Resources Plugin for WordPress","3.2.0","\u003Cp>Now you can easily manage HR (Human Resource) records and processes from within your website with our highly rated plugin, WP-HR Manager. You can quickly install an ESS (employee self-service) portal and HRM system, update staff records, track attendance and absence, message team members, approve leave and more.\u003C\u002Fp>\n\u003Cp>Ideal for small and medium sized businesses (SME) who want to create their own HR information system (HRIS) on WordPress.\u003C\u002Fp>\n\u003Ch4>WP-HR Manager enables you to:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Install a powerful HRM system on your website to record and manage employee HR information via any browser \u003C\u002Fli>\n\u003Cli>Take advantage of employee self service (ESS) features to reduce admin and improve accuracy (ideal for remote workers)\u003C\u002Fli>\n\u003Cli>Retain control of your data (and host your site\u002Fdata in the location of your choice) helping with GDPR compliance\u003C\u002Fli>\n\u003Cli>Manage as many employees as you wish, with our free HR WordPress plugin: No incremental\u002Fper employee charges unlike cloud based HR systems\u003C\u002Fli>\n\u003Cli>Add features and plugins as you need them (even build your own!) with fully editable open source code\u003C\u002Fli>\n\u003Cli>Control access to data and capabilities with three inbuilt user levels (Admin, HR Manager and Employee)\u003C\u002Fli>\n\u003Cli>Keep it focussed – WP-HR Manager only adds HR features, keeping the plugin as lite as possible \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>New – WP-HR Mobile Check In Add On\u003C\u002Fh4>\n\u003Cp>We now offer a mobile app to enable employees to check in\u002Fout (clock in\u002Fout) with mobile phones.\u003Cbr \u002F>\nRequires Pro version and WP-HR Attendance upgrade within WP-HR Manager (Settings) or\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fwww.wphrmanager.com\u002Fproduct\u002Fwp-hr-check-in-out\u002F\" rel=\"nofollow ugc\">Find out more\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FvygOR0o6Z-s?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>This plugin includes –\u003C\u002Fp>\n\u003Ch4>WP-HR Manager Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Company profile\u003C\u002Fli>\n\u003Cli>Branch listing – add local offices, outlets, factories etc.\u003C\u002Fli>\n\u003Cli>Employee profile – record and manage employee information\u003C\u002Fli>\n\u003Cli>Department listing – create departments and assign to employees\u003C\u002Fli>\n\u003Cli>Roles listing – create roles (eg ‘Driver’ or ‘Branch Manager’) and assign to employees\u003C\u002Fli>\n\u003Cli>Leave \u002F holiday management – create and approve holiday, sickness, unpaid and other leave requests\u003C\u002Fli>\n\u003Cli>Set multiple leave \u002F holiday policies to specify number of day’s leave allowed, national (Bank) holiday dates, etc\u003C\u002Fli>\n\u003Cli>Monitor number of leave days taken and remaining for each employee\u003C\u002Fli>\n\u003Cli>Enable Employee Self Service (ESS) options so staff and update their own records\u003C\u002Fli>\n\u003Cli>Front end view for employees (discourages logged in employees from viewing WordPress backend screens)\u003C\u002Fli>\n\u003Cli>Employee Assessments and Appraisals – track performance and set goals\u003C\u002Fli>\n\u003Cli>WordPress admin dashboard customizing features\u003C\u002Fli>\n\u003Cli>DashBoard Tab added in the setting page\u003C\u002Fli>\n\u003Cli>Admin can hid\u002Fshow the dashboard widgets as well as in the employee profile\u003C\u002Fli>\n\u003Cli>Emoloyee have option to show\u002Fhide Annual Work Anniversary,Birthday Anniversary and InOutopts from profile edit window\u003C\u002Fli>\n\u003Cli>Audit log – track changes to records\u003C\u002Fli>\n\u003Cli>44 currencies supported\u003C\u002Fli>\n\u003Cli>Announcements feature – send to specific employees or all employees \u003C\u002Fli>\n\u003Cli>Notification emails with custom templates and shortcode support\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin is forked from https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ferp\u002F by Tareq Hasan,Nizam Uddin,weDevs\u003Cbr \u002F>\nin order to keep up with changes to the core WordPress.\u003C\u002Fp>\n\u003Cp>This plugin includes additional features than the original plugin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Enhancements to leave management, fixes, and licensing SDK.\u003C\u002Fli>\n\u003Cli>Plugin supports in multiple languages.\u003C\u002Fli>\n\u003Cli>Added feature to book leave from the front end view.\u003C\u002Fli>\n\u003Cli>Added feature to resend the welcome email.\u003C\u002Fli>\n\u003Cli>Added feature to allow more than one leave per day.\u003C\u002Fli>\n\u003Cli>Enable employees to apply for leave for a half-day or a few hours based on their needs.\u003C\u002Fli>\n\u003Cli>Calculate leave from the start date (by months left in the year).\u003C\u002Fli>\n\u003Cli>Enable leave for future and past years.\u003C\u002Fli>\n\u003Cli>Added feature to be able to sync “Who is out” widget with the calendar.\u003C\u002Fli>\n\u003Cli>Display all employees on the calendar of who is going to be off throughout the year.\u003C\u002Fli>\n\u003Cli>Added feature to only display assigned leave policies to the employee.\u003C\u002Fli>\n\u003Cli>Added feature to display employee leave to the line managers.\u003C\u002Fli>\n\u003Cli>Added feature to change the employee profile title based on the department.\u003C\u002Fli>\n\u003Cli>Added feature to archive old leave requests  (PRO VERSION ONLY).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Upgrade to WP-HR Manager Pro for additional features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Reports\u003C\u002Fli>\n\u003Cli>Import \u002F export employee data\u003C\u002Fli>\n\u003Cli>Option to force employee to front end profile page on log in (restrict access to WP back end)\u003C\u002Fli>\n\u003Cli>Multiple Holiday Calendars (useful to create holiday sets for different countries)\u003C\u002Fli>\n\u003Cli>Allow \u002F Restrich leave notifications and approvals from HR Managers and Line Managers\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WP-HR Manager Extensions\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>WP-HR Attendance\u003C\u002Fstrong> (monitor check-in \u002F check-out, add shifts)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WP-HR Mobile Check In\u003C\u002Fstrong> (NEW! enable employees to check-in \u002F check-out on their mobile phones)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WP-HR Recruitment\u003C\u002Fstrong> (create and advertise job vacancies on your site and manage recruitment process)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WP-HR GDPR Pro\u003C\u002Fstrong> (a set of useful tools to: Create your Privacy Policy; Record Consent to Manage Data from employees and job applicants; track employee GDPR training; log and manage Subject Access Requests; and more.) We also offer a stand alone lite version for free \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-hr-gdpr\u002F\" rel=\"ugc\">here\u003C\u002Fa> \u003C\u002Fli>\n\u003Cli>\u003Cstrong>WP-HR SMS Messages\u003C\u002Fstrong>(Send SMS messages to employees)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WP-HR Documents\u003C\u002Fstrong> (Upload documents to a company library or to employee profiles)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WP-HR Add Fields\u003C\u002Fstrong>(Add extra fields to collect and display information in the employee profile and all other tabs)\u003C\u002Fli>\n\u003Cli>More planned – watch this space!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>These extensions can be added from with the WPHR Settings menu on your WordPress dashboard.\u003C\u002Fp>\n\u003Ch4>Links\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwphrmanager.com\u002Fdocumentation\u002F\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwphrmanager.com\u002F\" rel=\"nofollow ugc\">Project Site\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.wphrmanager.com\u002Fshop\u002F\" rel=\"nofollow ugc\">Extensions\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Translations (full or partial)\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Bulgarian \u002F Български\u003C\u002Fli>\n\u003Cli>Chinese (China) \u002F 简体中文\u003C\u002Fli>\n\u003Cli>Danish \u002F Dansk\u003C\u002Fli>\n\u003Cli>Dutch \u002F Nederlands\u003C\u002Fli>\n\u003Cli>German \u002F Deutsch\u003C\u002Fli>\n\u003Cli>Japanese \u002F 日本語 \u003C\u002Fli>\n\u003Cli>Norwegian (Bokmål) \u002F Norsk bokmål\u003C\u002Fli>\n\u003Cli>Polish \u002F Polski\u003C\u002Fli>\n\u003Cli>Persian (Iranian)\u003C\u002Fli>\n\u003Cli>Spanish (Spain) \u002F Español\u003C\u002Fli>\n\u003Cli>Swedish \u002F Svenska\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you would like to help with translating this plugin, please go \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fwp-hr-manager\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Press Coverage\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>\"WP-HR Manager is a new approach to HRM software - neither a clunky old desktop application, nor a cloud system with expensive per employee pricing. An exciting new tool for HR managers.\"\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cem>Becki Clarke, Editor, www.HRreview.co.uk\u003C\u002Fem>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\"A great tool for organisations of all sizes.  The free version does all the basics things you need - and then you can customize with add-ons to get the exact mix of functionality you want.  This one will just get better and better.\" \n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cem>Bill Banham, Publisher, www.hr-gazette.com\u003C\u002Fem>\u003C\u002Fp>\n","Easily add a powerful HR \u002F human resource management system and employee self service (ESS) portal to your website. = Credits = This plugin uses [WP E …",300,46355,40,5,"2025-03-27T14:40:00.000Z","6.7.5","5.0",[75,20,21,76,77],"attendance-management","leave","recruitment","http:\u002F\u002Fwww.wphrmanager.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-hr-manager.zip",91,1,"2025-01-16 00:00:00",{"slug":84,"name":85,"version":86,"author":87,"author_profile":88,"description":89,"short_description":90,"active_installs":91,"downloaded":92,"rating":59,"num_ratings":81,"last_updated":93,"tested_up_to":94,"requires_at_least":95,"requires_php":96,"tags":97,"homepage":102,"download_link":103,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":104},"ao-lfsmanager","hanapaena's Lite – Font & Style Manager – DSGVO\u002FGDPR","2.1","hanapaena","https:\u002F\u002Fprofiles.wordpress.org\u002Fhanapaena\u002F","\u003Cp>Das Plugin Lite – Font & Style Manager ist die perfekte Lösung für alle, die sich der aktuellen Abmahnwelle, bezüglich Google-Schriftarten entziehen möchten!\u003Cbr \u002F>\nDas Plugin entfernt die Google Fonts automatisch und ersetzt diese durch Schriftarten, die im Theme oder alternativ lokal eingebunden sind.\u003Cbr \u002F>\nSo können Sie sicher sein, dass Ihre Seite rechtlich einwandfrei ist. Die Kompatibilität zu Page Buildern und gängigen Themes ist gewährleistet!\u003C\u002Fp>\n\u003Cp>Font & Style Manager ist ein schlankes Plugin und nach der Installation sehr einfach zu bedienen.\u003Cbr \u002F>\nDarüber hinaus bietet das Plugin in der Basis-Edition, viele weitere nützliche Funktionen, wie das Zusammenführen von CSS-Dateien,\u003Cbr \u002F>\ndie Bereitstellung eines Style Caches, der CSS-Dateien in einen Zwischenspeicher legt, um die Performance Ihrer Seite zu erhöhen.\u003Cbr \u002F>\nZudem wird durch Font & Style Manager die SEO-Freundlichkeit Ihrer Seite erhöht!\u003C\u002Fp>\n\u003Cp>In der Font & Style Manager Agency-Version erhalten Sie zusätzlich die Kontrolle darüber,\u003Cbr \u002F>\nwelche Dateien konkret vereint werden sollen und Sie haben auch die Möglichkeit noch manuell Passagen aus Dateien heraus zu löschen.\u003C\u002Fp>\n\u003Cp>Laden Sie sich jetzt unser Plugin Font & Style Manager herunter,\u003Cbr \u002F>\num Ihre Webseite abmahnsicher und zukunftsorientiert zu optimieren.\u003C\u002Fp>\n\u003Cp>The Lite – Font & Style Manager plugin is the perfect solution for anyone who wants to escape the current wave of warnings regarding Google fonts!\u003Cbr \u002F>\nThe plugin automatically removes the Google Fonts and replaces them with fonts that are integrated in the theme or alternatively locally.\u003Cbr \u002F>\nSo you can be sure that your site is legally sound.\u003Cbr \u002F>\nCompatibility with page builders and common themes is guaranteed!\u003C\u002Fp>\n\u003Cp>Upgrade now!\u003Cbr \u002F>\nFont & Style Manager is a lightweight plugin and very easy to use once installed.\u003Cbr \u002F>\nIn addition, the plugin in the basic edition offers many other useful functions, such as merging CSS files,\u003Cbr \u002F>\nproviding a style cache that caches CSS files to increase the performance of your site. In addition,\u003Cbr \u002F>\nFont & Style Manager increases the SEO-friendliness of your site!\u003C\u002Fp>\n\u003Cp>In the Font & Style Manager Agency version,\u003Cbr \u002F>\nyou also have control over which files are to be merged and you also have the option of manually deleting passages from files.\u003C\u002Fp>\n\u003Cp>Download our Font & Style Manager plugin now to optimize your website in a way that is safe from warnings and future-oriented.\u003C\u002Fp>\n","Das Plugin Lite - Font & Style Manager ist die perfekte Lösung für alle, die sich der aktuellen Abmahnwelle, bezüglich Google-Schriftarten entzieh …",90,2363,"2023-06-15T09:29:00.000Z","6.2.9","5.2","7.2",[98,99,19,100,101],"dsgvo","font","google","schrift","https:\u002F\u002Fhana-paena.de\u002Fplugins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fao-lfsmanager.2.1.zip","2026-03-15T15:16:48.613Z",{"slug":106,"name":107,"version":108,"author":109,"author_profile":110,"description":111,"short_description":112,"active_installs":113,"downloaded":114,"rating":13,"num_ratings":13,"last_updated":115,"tested_up_to":116,"requires_at_least":16,"requires_php":16,"tags":117,"homepage":119,"download_link":120,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":60},"gf-data-purge","Gravity Forms Data Purge","1.0.4","Andrew Dixon","https:\u002F\u002Fprofiles.wordpress.org\u002Faandrewdixon\u002F","\u003Cp>The plugin is very simple. It adds a setting to the Gravity Forms menu in the WP Admin called “Purge Data” and under this option you set the number of days you would like to retain Gravity Forms entries for, for all forms on your site.\u003C\u002Fp>\n\u003Cp>The default is to keep all entries forever, empty field, and a valid value is any number of days from 0 (zero) to X. Once an entry is that number of days old, it is removed.\u003C\u002Fp>\n\u003Cp>The cron task to delete the entries runs once per hour, so when set to 0, the maximum time an entry will be stored for is one hour.\u003C\u002Fp>\n\u003Cp>PLEASE NOTE: Entries are permanently deleted, so use with care.\u003C\u002Fp>\n","Simple plugin to purge data from Gravity Forms Entries that are older that a certain number of days.",60,2590,"2018-04-07T16:17:00.000Z","4.9.29",[18,19,118],"gravity-forms","https:\u002F\u002Fgithub.com\u002Fmso-net\u002Fgravity-forms-data-purge\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgf-data-purge.zip",{"slug":122,"name":123,"version":124,"author":125,"author_profile":126,"description":127,"short_description":128,"active_installs":113,"downloaded":129,"rating":13,"num_ratings":13,"last_updated":130,"tested_up_to":49,"requires_at_least":131,"requires_php":132,"tags":133,"homepage":137,"download_link":138,"security_score":139,"vuln_count":81,"unpatched_count":81,"last_vuln_date":140,"fetched_at":60},"hr-press-lite","Hr Press Lite","1.0.3","CODECLOVE","https:\u002F\u002Fprofiles.wordpress.org\u002Fcodeclove\u002F","\u003Cp>\u003Cstrong>Hr Press Lite\u003C\u002Fstrong> is \u003Cstrong>Employee management system\u003C\u002Fstrong> that help companies to manage employees and employees time, holidays, leave etc. it is user friendly and easy to user wordpress plugin. You can use Hr Press Lite completely free.\u003C\u002Fp>\n\u003Cp>It can also manage Departments, Designations, Employee Leaves, Holidays, Employee Attendance and more will be added as plugin progress.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Hr Press Lite\u003C\u002Fstrong> lets you manage Employees daily timings and breaks. Hr Press Lite uses a \u003Cstrong>very modern, clean and easy to use interface\u003C\u002Fstrong> to make managing a breeze!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Did you know?\u003C\u002Fstrong>\u003Cbr \u002F>\nMore than \u003Ca href=\"https:\u002F\u002Fwww.wordfence.com\u002Fblog\u002F2020\u002F09\u002Fmillions-of-sites-targeted-in-file-manager-vulnerability-attacks\u002F\" rel=\"nofollow ugc\">700,000 WordPress websites\u003C\u002Fa> were attacked during September 2020.\u003Cbr \u002F>\nMalicious bots are looking to exploit vulnerable versions of WP file manager plugins.\u003C\u002Fp>\n\u003Cp>Fortunately, Hr Press Lite is built with \u003Cstrong>security in mind\u003C\u002Fstrong> and comes with this vulnerability \u003Cstrong>fixed\u003C\u002Fstrong>! So rest assured! Hr Press Lite poses no risk to you!\u003C\u002Fp>\n\u003Ch3>⚡️Features include:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Employees check-in and check-out time\u003C\u002Fli>\n\u003Cli>Employees Break logs\u003C\u002Fli>\n\u003Cli>Send emails to employees\u003C\u002Fli>\n\u003Cli>Announcements\u003C\u002Fli>\n\u003Cli>Departments\u003C\u002Fli>\n\u003Cli>Designations\u003C\u002Fli>\n\u003Cli>Attendance\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>\u003Ca href=\"https:\u002F\u002Fcodeclove.com\u002Fplugins\u002Fhr-press\" rel=\"nofollow ugc\">👉 \u003Cstrong>Hr Press PRO\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fh3>\n\u003Ch3>⭐️ PRO FEATURES\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Leave requests\u003C\u002Fli>\n\u003Cli>Send Holiday emails to employees\u003C\u002Fli>\n\u003Cli>IP Addresses restriction\u003C\u002Fli>\n\u003Cli>IP Address whitelisting\u003C\u002Fli>\n\u003Cli>Better support\u003C\u002Fli>\n\u003Cli>Features requests\u003C\u002Fli>\n\u003Cli>More coming…\u003C\u002Fli>\n\u003C\u002Ful>\n","Hr Press Lite is a modern Employee Management System to track attendance, breaks, and manage employees efficiently. HRM (Human Resource Management) is …",2554,"2026-04-11T08:20:00.000Z","6.0","7.4",[75,134,20,135,136],"employee-self-service","hrm","human-resources-management","https:\u002F\u002FCodeClove.com\u002Fhr-press","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhr-press-lite.1.0.3.zip",78,"2026-03-20 15:15:10",{"attackSurface":142,"codeSignals":305,"taintFlows":497,"riskAssessment":596,"analyzedAt":612},{"hooks":143,"ajaxHandlers":274,"restRoutes":291,"shortcodes":292,"cronEvents":302,"entryPointCount":303,"unprotectedCount":304},[144,150,153,157,161,165,169,173,178,182,185,188,191,193,194,197,201,205,209,213,217,222,226,229,232,236,239,242,246,248,251,254,257,260,265,268,271],{"type":145,"name":146,"callback":147,"file":148,"line":149},"action","admin_enqueue_scripts","wphrgdpr_admin_styles","includes\\admin\\class-wp-hr-admin-assets.php",20,{"type":145,"name":146,"callback":151,"file":148,"line":152},"wphrgdpr_admin_scripts",21,{"type":145,"name":154,"callback":155,"file":148,"line":156},"after_edit_recruitment","wphrgdpr_edit_recruitment_fields",22,{"type":145,"name":158,"callback":159,"file":148,"line":160},"after_add_recruitment","wphrgdpr_add_recruitment_fields",23,{"type":145,"name":162,"callback":163,"file":148,"line":164},"wphr_rec_opened_recruitment","wphrgdpr_save_recruitment_fields",24,{"type":145,"name":166,"callback":167,"file":148,"line":168},"add_job_information","wphrgdpr_add_job_information",25,{"type":145,"name":170,"callback":171,"file":148,"line":172},"wphr_applicant_details_data_section","consent_form_data_for_applicant",26,{"type":174,"name":175,"callback":176,"file":148,"line":177},"filter","wphr_applicant_details_field_section","consent_form_field_for_applicant",28,{"type":145,"name":179,"callback":180,"file":181,"line":149},"admin_init","wphrgdpr_create_meta_field","includes\\admin\\class-wp-hr-admin-custom-post.php",{"type":145,"name":183,"callback":184,"file":181,"line":156},"save_post","wphrgdpr_save_meta_field",{"type":145,"name":186,"callback":187,"file":181,"line":160},"pre_post_update","wphrgdpr_before_insert",{"type":145,"name":189,"callback":190,"file":181,"line":164},"admin_menu","wphrgdpr_add_custom_link_into_appearnace_menu",{"type":145,"name":179,"callback":192,"file":181,"line":168},"wphrgdpr_form_save_handle",{"type":145,"name":179,"callback":192,"file":181,"line":172},{"type":145,"name":195,"callback":196,"file":181,"line":177},"admin_notices","wphrgdpr_error_notice",{"type":174,"name":198,"callback":199,"file":181,"line":200},"parse_query","wphrgdpr_privacy_list_handle",29,{"type":145,"name":202,"callback":203,"file":181,"line":204},"edit_form_top","add_wphrgdpr_heading",30,{"type":145,"name":206,"callback":207,"file":181,"line":208},"edit_form_after_title","wphrgdpr_replace_column_title_method_b",31,{"type":174,"name":210,"callback":211,"priority":11,"file":181,"line":212},"enter_title_here","wphrgdpr_change_title_placeholder",32,{"type":174,"name":214,"callback":215,"priority":11,"file":181,"line":216},"default_content","wphrgdpr_post_content_placeholder",38,{"type":145,"name":218,"callback":219,"file":220,"line":221},"init","wphrgdpr_admin_includes","includes\\admin\\class-wp-hr-admin.php",19,{"type":145,"name":223,"callback":224,"file":225,"line":221},"wphr_user_profile_role","role","includes\\admin\\class-wp-hr-dpo.php",{"type":145,"name":227,"callback":228,"priority":11,"file":225,"line":149},"wphr_update_user","update_user",{"type":174,"name":230,"callback":231,"priority":11,"file":225,"line":156},"wphr_hr_get_caps_for_role","wphr_dpo_capability",{"type":174,"name":233,"callback":234,"priority":149,"file":235,"line":156},"wphr_hr_employee_single_tabs","tab","includes\\class-wp-hr-user-data.php",{"type":174,"name":237,"callback":238,"file":235,"line":160},"wphr_hr_localize_script","script_variable_name",{"type":174,"name":240,"callback":241,"priority":81,"file":235,"line":164},"wphr_email_classes","gdpr_email_classes",{"type":145,"name":243,"callback":244,"file":245,"line":149},"wp_enqueue_scripts","wphrgdpr_frontend_styles","includes\\frontend\\class-wp-hr-frontend-assets.php",{"type":145,"name":243,"callback":247,"file":245,"line":152},"wphrgdpr_frontend_scripts",{"type":145,"name":249,"callback":250,"file":245,"line":156},"template_redirect","wphrgdpr_template_redirect",{"type":145,"name":252,"callback":253,"file":245,"line":160},"after_wphr_recruitment_job_application_form","wphrgdpr_job_application_form",{"type":145,"name":255,"callback":256,"file":245,"line":164},"wphr_rec_applied_job","wphrgdpr_job_application_handler",{"type":145,"name":218,"callback":258,"file":259,"line":156},"save_subject_access_request_summary","includes\\frontend\\class-wp-hr-shortcode-handler.php",{"type":174,"name":261,"callback":262,"file":263,"line":264},"connect_url","wphr_gdpr_settings_url","wp-hr-gdpr.php",64,{"type":174,"name":266,"callback":262,"file":263,"line":267},"after_skip_url",65,{"type":174,"name":269,"callback":262,"file":263,"line":270},"after_connect_url",66,{"type":174,"name":272,"callback":262,"file":263,"line":273},"after_pending_connect_url",67,[275,279,283,286,288,290],{"action":276,"nopriv":277,"callback":276,"hasNonce":277,"hasCapCheck":277,"file":181,"line":278},"wphrgdpr_post_sortable_handle",false,27,{"action":280,"nopriv":277,"callback":281,"hasNonce":277,"hasCapCheck":277,"file":282,"line":156},"wphr-hr-manage-training","employee_training_controller","includes\\class-wp-hr-user-training.php",{"action":284,"nopriv":277,"callback":285,"hasNonce":277,"hasCapCheck":277,"file":259,"line":160},"privacy_form_shortcode_save","wphrgdpr_privacy_form_shortcode_save",{"action":284,"nopriv":287,"callback":285,"hasNonce":277,"hasCapCheck":277,"file":259,"line":164},true,{"action":289,"nopriv":277,"callback":289,"hasNonce":287,"hasCapCheck":277,"file":259,"line":168},"wphrgdpr_consent_form_save_front",{"action":289,"nopriv":287,"callback":289,"hasNonce":287,"hasCapCheck":277,"file":259,"line":172},[],[293,296,299],{"tag":294,"callback":295,"file":259,"line":221},"consent_form","wphrgdpr_consent_form_shortcode",{"tag":297,"callback":298,"file":259,"line":149},"privacy_policy","wphrgdpr_privacy_form_shortcode",{"tag":300,"callback":301,"file":259,"line":152},"subject_access_request","wphrgdpr_subject_access_request_form_shortcode",[],9,4,{"dangerousFunctions":306,"sqlUsage":340,"outputEscaping":349,"fileOperations":81,"externalRequests":13,"nonceChecks":303,"capabilityChecks":31,"bundledLibraries":492},[307,312,316,319,322,325,327,330,333,335,337],{"fn":308,"file":309,"line":310,"context":311},"unserialize","includes\\admin\\custom_tables\\wp-hr-consent-table.php",82,"$data = unserialize( $employee['data'] );",{"fn":308,"file":313,"line":314,"context":315},"includes\\admin\\templates\\wp-hr-meta-box-field.php",48,"$old_answer_chk_default1 = unserialize($old_answer_chk_default);",{"fn":308,"file":313,"line":317,"context":318},50,"$old_answer_chk_default = unserialize($old_answer_chk_default1);",{"fn":308,"file":313,"line":320,"context":321},79,"$value_checked = unserialize($value_checked);",{"fn":308,"file":313,"line":323,"context":324},84,"$old_answer_chk1 = unserialize($old_answer_chk);",{"fn":308,"file":313,"line":46,"context":326},"$old_answer_chk = unserialize($old_answer_chk1);",{"fn":308,"file":328,"line":264,"context":329},"includes\\emails\\class-email-data-protection-form.php","$consent_aggrement = unserialize( $consent_data->data );",{"fn":308,"file":331,"line":156,"context":332},"includes\\frontend\\shortcode-template\\privacy-form-template.php","$value_checked=unserialize($value_checked);",{"fn":308,"file":331,"line":204,"context":334},"$old_answer_chk1= unserialize($old_answer_chk);",{"fn":308,"file":331,"line":212,"context":336},"$old_answer_chk=unserialize($old_answer_chk1);",{"fn":308,"file":338,"line":156,"context":339},"includes\\functions.php","$consent_aggrement = unserialize( $consent_record->data );",{"prepared":303,"raw":31,"locations":341},[342,345],{"file":181,"line":343,"context":344},662,"$wpdb->get_results() with variable interpolation",{"file":346,"line":347,"context":348},"includes\\class-wp-hr-gdrp.php",366,"$wpdb->get_var() with variable interpolation",{"escaped":212,"rawEcho":350,"locations":351},81,[352,355,357,359,361,363,364,367,369,372,374,375,377,380,381,382,383,384,385,386,387,388,390,391,394,395,396,397,399,401,403,405,407,408,410,412,413,414,416,418,420,422,424,426,428,430,432,434,436,438,440,442,444,446,448,451,452,454,455,457,459,461,462,463,465,468,469,471,472,473,474,475,477,479,481,483,485,486,488,490,491],{"file":181,"line":353,"context":354},71,"raw output",{"file":181,"line":356,"context":354},121,{"file":181,"line":358,"context":354},128,{"file":181,"line":360,"context":354},694,{"file":225,"line":362,"context":354},77,{"file":225,"line":362,"context":354},{"file":365,"line":366,"context":354},"includes\\admin\\templates\\applicant_consent_form.php",13,{"file":368,"line":31,"context":354},"includes\\admin\\templates\\dependency_error.php",{"file":370,"line":371,"context":354},"includes\\admin\\templates\\wp-hr-consent-form.php",17,{"file":370,"line":373,"context":354},54,{"file":370,"line":373,"context":354},{"file":370,"line":376,"context":354},75,{"file":378,"line":379,"context":354},"includes\\admin\\templates\\wp-hr-email-template.php",35,{"file":378,"line":216,"context":354},{"file":378,"line":216,"context":354},{"file":378,"line":113,"context":354},{"file":378,"line":362,"context":354},{"file":378,"line":139,"context":354},{"file":313,"line":160,"context":354},{"file":313,"line":172,"context":354},{"file":313,"line":47,"context":354},{"file":313,"line":389,"context":354},98,{"file":313,"line":389,"context":354},{"file":392,"line":393,"context":354},"includes\\admin\\templates\\wp-hr-new-access-request.php",16,{"file":392,"line":149,"context":354},{"file":392,"line":164,"context":354},{"file":392,"line":379,"context":354},{"file":392,"line":398,"context":354},45,{"file":392,"line":400,"context":354},47,{"file":392,"line":402,"context":354},53,{"file":392,"line":404,"context":354},63,{"file":392,"line":406,"context":354},69,{"file":392,"line":320,"context":354},{"file":392,"line":409,"context":354},83,{"file":392,"line":411,"context":354},87,{"file":392,"line":80,"context":354},{"file":392,"line":59,"context":354},{"file":392,"line":415,"context":354},114,{"file":392,"line":417,"context":354},118,{"file":392,"line":419,"context":354},123,{"file":392,"line":421,"context":354},133,{"file":392,"line":423,"context":354},137,{"file":392,"line":425,"context":354},146,{"file":392,"line":427,"context":354},150,{"file":392,"line":429,"context":354},154,{"file":392,"line":431,"context":354},163,{"file":392,"line":433,"context":354},172,{"file":392,"line":435,"context":354},176,{"file":392,"line":437,"context":354},180,{"file":392,"line":439,"context":354},189,{"file":392,"line":441,"context":354},194,{"file":392,"line":443,"context":354},205,{"file":445,"line":59,"context":354},"includes\\admin\\templates\\wp-hr-support-template.php",{"file":445,"line":447,"context":354},130,{"file":449,"line":450,"context":354},"includes\\admin\\templates\\wp-hr-user-data.php",7,{"file":449,"line":393,"context":354},{"file":449,"line":453,"context":354},18,{"file":449,"line":379,"context":354},{"file":449,"line":456,"context":354},39,{"file":449,"line":458,"context":354},62,{"file":449,"line":460,"context":354},72,{"file":449,"line":320,"context":354},{"file":449,"line":80,"context":354},{"file":328,"line":464,"context":354},177,{"file":466,"line":467,"context":354},"includes\\emails\\class-email-subject-access-request.php",183,{"file":245,"line":389,"context":354},{"file":470,"line":366,"context":354},"includes\\frontend\\shortcode-template\\consent-form-template.php",{"file":470,"line":393,"context":354},{"file":470,"line":156,"context":354},{"file":470,"line":278,"context":354},{"file":470,"line":216,"context":354},{"file":470,"line":476,"context":354},46,{"file":470,"line":478,"context":354},57,{"file":470,"line":480,"context":354},73,{"file":470,"line":482,"context":354},74,{"file":331,"line":484,"context":354},11,{"file":331,"line":273,"context":354},{"file":331,"line":487,"context":354},68,{"file":489,"line":393,"context":354},"includes\\frontend\\shortcode-template\\subject-access-request.php",{"file":489,"line":152,"context":354},{"file":489,"line":177,"context":354},[493],{"name":494,"version":495,"knownCves":496},"Freemius","1.0",[],[498,524,542,555,568,578,587],{"entryPoint":499,"graph":500,"unsanitizedCount":13,"severity":523},"\u003Cclass-wp-hr-admin-custom-post> (includes\\admin\\class-wp-hr-admin-custom-post.php:0)",{"nodes":501,"edges":520},[502,507,513,515],{"id":503,"type":504,"label":505,"file":181,"line":506},"n0","source","$_GET",387,{"id":508,"type":509,"label":510,"file":181,"line":511,"wp_function":512},"n1","sink","get_row() [SQLi]",388,"get_row",{"id":514,"type":504,"label":505,"file":181,"line":506},"n2",{"id":516,"type":509,"label":517,"file":181,"line":518,"wp_function":519},"n3","wp_redirect() [Open Redirect]",593,"wp_redirect",[521,522],{"from":503,"to":508,"sanitized":287},{"from":514,"to":516,"sanitized":287},"low",{"entryPoint":525,"graph":526,"unsanitizedCount":13,"severity":523},"\u003Cwp-hr-consent-table> (includes\\admin\\custom_tables\\wp-hr-consent-table.php:0)",{"nodes":527,"edges":539},[528,531,534,535],{"id":503,"type":504,"label":529,"file":309,"line":530},"$_REQUEST",33,{"id":508,"type":509,"label":532,"file":309,"line":216,"wp_function":533},"get_results() [SQLi]","get_results",{"id":514,"type":504,"label":529,"file":309,"line":530},{"id":516,"type":509,"label":536,"file":309,"line":537,"wp_function":538},"get_var() [SQLi]",167,"get_var",[540,541],{"from":503,"to":508,"sanitized":287},{"from":514,"to":516,"sanitized":287},{"entryPoint":543,"graph":544,"unsanitizedCount":13,"severity":523},"\u003Cwp-hr-request> (includes\\admin\\custom_tables\\wp-hr-request.php:0)",{"nodes":545,"edges":552},[546,548,549,550],{"id":503,"type":504,"label":529,"file":547,"line":208},"includes\\admin\\custom_tables\\wp-hr-request.php",{"id":508,"type":509,"label":532,"file":547,"line":379,"wp_function":533},{"id":514,"type":504,"label":529,"file":547,"line":208},{"id":516,"type":509,"label":536,"file":547,"line":551,"wp_function":538},56,[553,554],{"from":503,"to":508,"sanitized":287},{"from":514,"to":516,"sanitized":287},{"entryPoint":556,"graph":557,"unsanitizedCount":13,"severity":523},"\u003Cwp-hr-training> (includes\\admin\\custom_tables\\wp-hr-training.php:0)",{"nodes":558,"edges":565},[559,561,563,564],{"id":503,"type":504,"label":529,"file":560,"line":379},"includes\\admin\\custom_tables\\wp-hr-training.php",{"id":508,"type":509,"label":532,"file":560,"line":562,"wp_function":533},42,{"id":514,"type":504,"label":529,"file":560,"line":379},{"id":516,"type":509,"label":536,"file":560,"line":362,"wp_function":538},[566,567],{"from":503,"to":508,"sanitized":287},{"from":514,"to":516,"sanitized":287},{"entryPoint":569,"graph":570,"unsanitizedCount":81,"severity":523},"\u003Cwp-hr-email-template> (includes\\admin\\templates\\wp-hr-email-template.php:0)",{"nodes":571,"edges":576},[572,573],{"id":503,"type":504,"label":529,"file":378,"line":31},{"id":508,"type":509,"label":574,"file":378,"line":362,"wp_function":575},"echo() [XSS]","echo",[577],{"from":503,"to":508,"sanitized":277},{"entryPoint":579,"graph":580,"unsanitizedCount":81,"severity":523},"\u003Csubject-access-request> (includes\\frontend\\shortcode-template\\subject-access-request.php:0)",{"nodes":581,"edges":585},[582,584],{"id":503,"type":504,"label":583,"file":489,"line":393},"$_GET['status']",{"id":508,"type":509,"label":574,"file":489,"line":393,"wp_function":575},[586],{"from":503,"to":508,"sanitized":277},{"entryPoint":588,"graph":589,"unsanitizedCount":81,"severity":595},"wphrgdpr_access_request_callback (includes\\admin\\class-wp-hr-admin-custom-post.php:342)",{"nodes":590,"edges":593},[591,592],{"id":503,"type":504,"label":505,"file":181,"line":506},{"id":508,"type":509,"label":510,"file":181,"line":511,"wp_function":512},[594],{"from":503,"to":508,"sanitized":277},"high",{"summary":597,"deductions":598},"The wp-hr-gdpr plugin version 0.9 exhibits a mixed security posture. While it demonstrates some good practices, such as a high percentage of SQL queries using prepared statements and a clean vulnerability history with no known CVEs, there are significant areas of concern. The plugin has a notable attack surface, with four out of six AJAX handlers lacking authentication checks. Furthermore, the taint analysis reveals one high-severity flow with unsanitized paths, indicating a potential for exploitation if data is processed without proper validation. The presence of the `unserialize` function, often a vector for deserialization vulnerabilities, is another red flag.  Despite the absence of historical vulnerabilities, the current code analysis points to potential weaknesses that require immediate attention, particularly the unprotected AJAX endpoints and the identified high-severity taint flow. The plugin's strengths lie in its SQL query practices and lack of historical issues, but the identified code-level risks overshadow these positives, suggesting a moderate to high risk level without remediation.",[599,602,605,607,610],{"reason":600,"points":601},"High-severity taint flow with unsanitized paths",12,{"reason":603,"points":604},"AJAX handlers without auth checks",8,{"reason":606,"points":70},"Dangerous function: unserialize",{"reason":608,"points":609},"Low percentage of properly escaped outputs",6,{"reason":611,"points":304},"Bundled outdated library: Freemius v1.0","2026-03-17T01:36:29.826Z",{"wat":614,"direct":624},{"assetPaths":615,"generatorPatterns":618,"scriptPaths":619,"versionParams":621},[616,617],"\u002Fwp-content\u002Fplugins\u002Fwp-hr-gdpr\u002Fassets\u002Fcss\u002Fwp_hr_admin_custom_css.css","\u002Fwp-content\u002Fplugins\u002Fwp-hr-gdpr\u002Fassets\u002Fjs\u002Fwp_hr_admin_custom.js",[],[620],"https:\u002F\u002Fmaxcdn.bootstrapcdn.com\u002Ffont-awesome\u002F4.1.0\u002Fcss\u002Ffont-awesome.min.css",[622,623],"\u002Fwp-content\u002Fplugins\u002Fwp-hr-gdpr\u002Fassets\u002Fcss\u002Fwp_hr_admin_custom_css.css?ver=","\u002Fwp-content\u002Fplugins\u002Fwp-hr-gdpr\u002Fassets\u002Fjs\u002Fwp_hr_admin_custom.js?ver=",{"cssClasses":625,"htmlComments":626,"htmlAttributes":627,"restEndpoints":629,"jsGlobals":630,"shortcodeOutput":632},[],[],[628],"data-id=\"wphrgdpr_applicant_data\"",[],[631],"admin_veriables",[],{"error":287,"url":634,"statusCode":635,"statusMessage":636,"message":636},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fwp-hr-gdpr\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":450,"versions":638},[639,645,652,659,666,673,680],{"version":6,"download_url":640,"svn_tag_url":641,"released_at":26,"has_diff":277,"diff_files_changed":642,"diff_lines":26,"trac_diff_url":643,"vulnerabilities":644,"is_current":287},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-hr-gdpr.0.9.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwp-hr-gdpr\u002Ftags\u002F0.9\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwp-hr-gdpr%2Ftags%2F0.8&new_path=%2Fwp-hr-gdpr%2Ftags%2F0.9",[],{"version":646,"download_url":647,"svn_tag_url":648,"released_at":26,"has_diff":277,"diff_files_changed":649,"diff_lines":26,"trac_diff_url":650,"vulnerabilities":651,"is_current":277},"0.8","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-hr-gdpr.0.8.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwp-hr-gdpr\u002Ftags\u002F0.8\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwp-hr-gdpr%2Ftags%2F0.7&new_path=%2Fwp-hr-gdpr%2Ftags%2F0.8",[],{"version":653,"download_url":654,"svn_tag_url":655,"released_at":26,"has_diff":277,"diff_files_changed":656,"diff_lines":26,"trac_diff_url":657,"vulnerabilities":658,"is_current":277},"0.7","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-hr-gdpr.0.7.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwp-hr-gdpr\u002Ftags\u002F0.7\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwp-hr-gdpr%2Ftags%2F0.3.1&new_path=%2Fwp-hr-gdpr%2Ftags%2F0.7",[],{"version":660,"download_url":661,"svn_tag_url":662,"released_at":26,"has_diff":277,"diff_files_changed":663,"diff_lines":26,"trac_diff_url":664,"vulnerabilities":665,"is_current":277},"0.3.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-hr-gdpr.0.3.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwp-hr-gdpr\u002Ftags\u002F0.3.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwp-hr-gdpr%2Ftags%2F0.3&new_path=%2Fwp-hr-gdpr%2Ftags%2F0.3.1",[],{"version":667,"download_url":668,"svn_tag_url":669,"released_at":26,"has_diff":277,"diff_files_changed":670,"diff_lines":26,"trac_diff_url":671,"vulnerabilities":672,"is_current":277},"0.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-hr-gdpr.0.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwp-hr-gdpr\u002Ftags\u002F0.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwp-hr-gdpr%2Ftags%2F0.2&new_path=%2Fwp-hr-gdpr%2Ftags%2F0.3",[],{"version":674,"download_url":675,"svn_tag_url":676,"released_at":26,"has_diff":277,"diff_files_changed":677,"diff_lines":26,"trac_diff_url":678,"vulnerabilities":679,"is_current":277},"0.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-hr-gdpr.0.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwp-hr-gdpr\u002Ftags\u002F0.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwp-hr-gdpr%2Ftags%2F0.1&new_path=%2Fwp-hr-gdpr%2Ftags%2F0.2",[],{"version":681,"download_url":682,"svn_tag_url":683,"released_at":26,"has_diff":277,"diff_files_changed":684,"diff_lines":26,"trac_diff_url":26,"vulnerabilities":685,"is_current":277},"0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-hr-gdpr.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwp-hr-gdpr\u002Ftags\u002F0.1\u002F",[],[]]