[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyOgKYdt6Ky65K4yliLhJqGHlb9b0T_F5oV4LB_ifXkc":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":33,"analysis":131,"fingerprints":801},"wp-webrtc2","WP-WebRTC2","1.7.4","adminkov","https:\u002F\u002Fprofiles.wordpress.org\u002Fadminkov\u002F","\u003Cp>WP-WebRTC2 is a WordPress CMS plugin that provides video chat between registered visitors to the site where the plugin is installed. The number of pairs of interlocutors is not limited. Within the framework of this video chat, it is possible to: exchange text messages, files, video recording of the conversation, providing the interlocutor with an overview of your computer screen during communication. A registered visitor can leave a message to an interlocutor who is not currently on the video chat page. When the interlocutor appears on the video chat page, he will read all the messages addressed to him from various registered site visitors. These messages will then be automatically deleted. The WP-WebRTC2 plugin is focused on the use of browsers: Google Chrome, Fire Fox, Edge, Opera, Yandex.\u003C\u002Fp>\n\u003Cp>Instructions for using the video-chat plugin in: \u003Ca href=\"https:\u002F\u002Fadminkov.bcr.by\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fdoc\u002Fdoc_cn\u002Fwebrtc2_cn.html\" title=\"中国人\" rel=\"nofollow ugc\">[CN]\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fadminkov.bcr.by\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fdoc\u002Fdoc_de\u002Fwebrtc2_de.html\" title=\"Deutsch\" rel=\"nofollow ugc\">[DE]\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fadminkov.bcr.by\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fdoc\u002Fdoc_en\u002Fwebrtc2_en.html\" title=\"English\" rel=\"nofollow ugc\">[EN]\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fadminkov.bcr.by\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fdoc\u002Fdoc_fr\u002Fwebrtc2_fr.html\" title=\"Français\" rel=\"nofollow ugc\">[FR]\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fadminkov.bcr.by\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fdoc\u002Fdoc_it\u002Fwebrtc2_it.html\" title=\"Italiano\" rel=\"nofollow ugc\">[IT]\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fadminkov.bcr.by\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fdoc\u002Fdoc_ru\u002Fwebrtc2_ru.html\" title=\"Русский\" rel=\"nofollow ugc\">[RU]\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>You can test this plugin on its \u003Ca href=\"https:\u002F\u002Fadminkov.bcr.by\u002Fcontact\u002F\" rel=\"nofollow ugc\">\u003Cstrong> home page\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>You can send a letter to the developer at: klenitskiy.oleg@mail.ru\u003C\u002Fp>\n\u003Ch3>Additionally:\u003C\u002Fh3>\n\u003Cp>Client WP-WebRTC2 (executable jar) application has been developed for a client workstation (personal computer or laptop) on the Windows platform, which provides video communication for two registered visitors to the site, on which the WP-WebRTC2 plugin is installed.After launch, the application is located in the system tray of Windows OS in the form of an icon waiting for a call to video communication.\u003Cbr \u002F>\n \u003Ca href=\"https:\u002F\u002Fadminkov.bcr.by\u002Fsupport\u002F\" title=\"Support\" rel=\"nofollow ugc\">Client WP-WebRTC2 (executable jar)\u003C\u002Fa>\u003C\u002Fp>\n","Free video chat for registered site users.",20,6361,0,"2025-12-31T09:22:00.000Z","6.9.4","","7.4",[19,20,21],"chat","videochat","webrtc","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-webrtc2\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-webrtc2.1.7.4.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":30,"avg_security_score":24,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},2,30,94,"2026-04-04T03:50:50.553Z",[34,53,74,96,115],{"slug":35,"name":36,"version":37,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":24,"num_ratings":29,"last_updated":44,"tested_up_to":45,"requires_at_least":46,"requires_php":47,"tags":48,"homepage":16,"download_link":51,"security_score":52,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"fullcall","FullCall VideoChat","2.0.7","FullCall","https:\u002F\u002Fprofiles.wordpress.org\u002Ffullcall\u002F","\u003Cp>This is a one-click installation plugin for FullCall. It is audio and video chat for your website. Easy to use compatible with all modern browsers. This plugin integrates your website with external services. To run it on your website, you must create an account on FullCall system. More about features and account you read on \u003Ca href=\"https:\u002F\u002Ffullcall.com\" rel=\"nofollow ugc\">FullCall.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Manual installation\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Upload “FullCall.zip” to the “\u002Fwp-content\u002Fplugins\u002F” directory and install.\u003C\u002Fli>\n\u003Cli>Activate the plugin through the “Plugins” menu in WordPress.\u003C\u002Fli>\n\u003Cli>Enjoy!\u003C\u002Fli>\n\u003C\u002Fol>\n","This is a one-click installation plugin for FullCall. It is audio and video chat for your website. Easy to use compatible with all modern browsers.",10,2611,"2023-04-17T05:39:00.000Z","6.2.9","5.7","7.0",[49,50,19,20,21],"audiochat","call","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffullcall.2.0.7.zip",85,{"slug":54,"name":55,"version":56,"author":57,"author_profile":58,"description":59,"short_description":60,"active_installs":61,"downloaded":62,"rating":24,"num_ratings":63,"last_updated":64,"tested_up_to":65,"requires_at_least":66,"requires_php":16,"tags":67,"homepage":72,"download_link":73,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"consolto-videochat","Consolto Video Chat","2.7.9","iharel","https:\u002F\u002Fprofiles.wordpress.org\u002Fiharel\u002F","\u003Cp>4-in-1: video chat, appointment scheduling, AI & live chat and forms for Sales, Support and Consultants.\u003C\u002Fp>\n\u003Ch3>What you’ll get?\u003C\u002Fh3>\n\u003Cp>Video chat, appointment scheduling, AI & live chat and forms for Sales, Support and Consultants.\u003Cbr \u002F>\nConsolto turns your website into a virtual office in minutes and enables: The AI will answer questions and when time is right, it can pass to video-calls, screen sharing, scheduling appointments, text-messaging and chat, whatsapp, Facebook messenger. All within a CRM including payment transfer, site analytics and more…\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Familiar with the feeling that you send your customers your skype account and they get confused and mixed up? Or a Zoom link that expires? \u003C\u002Fli>\n\u003Cli>Do you pay too much for marketing and find it hard to convert visitors in your website to customers? \u003C\u002Fli>\n\u003Cli>Did you find it hard to connect Zoom, Calendly, Intercom and Zapier all together?\u003C\u002Fli>\n\u003Cli>Do you find it hard to collect money from your clients for online sessions? \u003C\u002Fli>\n\u003Cli>Are you frustrated that people visit your website and leave no trace? \u003C\u002Fli>\n\u003Cli>Would you like to provide online-video-call sessions to your clients in a professional manner? \u003C\u002Fli>\n\u003Cli>Were you looking for a tool to share your screen with site-visitors easily from within your website? \u003C\u002Fli>\n\u003Cli>Are you looking for a multi-agent video chat solution for your website?\u003C\u002Fli>\n\u003Cli>Are you looking to answer customers on the go? \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>** If you answered yes to any of these questions, you’re at the right place. **\u003C\u002Fp>\n\u003Ch3>Major features in Consolto Video Chat Widget include:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Video chat directly from within your website. Niether your customers nor you will need to install anything.\u003C\u002Fli>\n\u003Cli>AI Chatbot that learns from your website and docuemnts in minutes. Answers customers 24\u002F7 including handoff to live agents via chat and video chat or schedule meetings. \u003C\u002Fli>\n\u003Cli>Dedicated mobile app (iOS and Anroid) and Desktop app (MacOS, Windows) keeps you updated and accessible on the go!\u003C\u002Fli>\n\u003Cli>Advanced Appointment Scheduling enables your site visitors schedule meetings with you in a simple manner. You can send them invitations as well!\u003C\u002Fli>\n\u003Cli>** Unique ** Multi-agent teams provide many 1×1 and group sessions remotely. Excellent for teams of sales-agents, therapists, diatitians, coaches…\u003C\u002Fli>\n\u003Cli>Comprehensive, real-time text chat, saved for your future needs.\u003C\u002Fli>\n\u003Cli>Share your screen or view your clients screen as simple as clicking a button\u003C\u002Fli>\n\u003Cli>Group meetings – add more people to the conversation. Get faster results!\u003C\u002Fli>\n\u003Cli>Social messaging: whatsapp and facebook messanger embedded in your website. \u003C\u002Fli>\n\u003Cli>Voice mail – let customers leave voice messages directly from within your website!\u003C\u002Fli>\n\u003Cli>Call recordings to keep track and be on top of the conversations. \u003C\u002Fli>\n\u003Cli>Actively start engagement via chat\u002Fvideochat\u002Faudio with people in your website. We made an extra effort for this to be as acceptable as possible by your site-visitors. \u003C\u002Fli>\n\u003Cli>Inbox: your site visitors will send you messages that will reach your email\u003C\u002Fli>\n\u003Cli>Receive email, SMS and site notifications upon new chats and webcalls\u003C\u002Fli>\n\u003Cli>Highly configurable widget!\u003C\u002Fli>\n\u003Cli>Supports 12 languages: English, Italian, Hebrew, Russian, French, Portugues, Japanese, German, Spanish, Dutch, Turkish\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Give it a try. It’s a 2-minute installation\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.consolto.com\u002Fknowledge-posts\u002Fwordpress-installation-instructions?utm_source=plugins&utm_medium=wordpress&utm_campaign=wp_plugin_banner\" rel=\"nofollow ugc\">Best installation instructions can be found here: LINK\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Conceptual demo:\u003C\u002Fh3>\n\u003Ch3>Important notes:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>The Consolto Plugin relies on Consolto.com as a means to provide all the above features. This practically means that all plugin content is served by Consolto.com (from within your website). \u003C\u002Fli>\n\u003Cli>You are more than invited to join us in www.consolto.com and learn more. \u003C\u002Fli>\n\u003Cli>Terms of Use: https:\u002F\u002Fwww.consolto.com\u002Flegal\u002Fterms-of-use\u003C\u002Fli>\n\u003Cli>Privacy policy: https:\u002F\u002Fwww.consolto.com\u002Flegal\u002Fprivacy\u003C\u002Fli>\n\u003C\u002Ful>\n","4-in-1: video chat, appointment scheduling, AI & live chat and forms for Sales, Support and Consultants.",300,31316,44,"2025-11-02T12:42:00.000Z","6.7.5","3.7",[68,69,70,71,20],"chatbot","live-chat","video-chat","video-conference","http:\u002F\u002Fwww.consolto.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconsolto-videochat.zip",{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":82,"downloaded":83,"rating":84,"num_ratings":85,"last_updated":86,"tested_up_to":15,"requires_at_least":87,"requires_php":16,"tags":88,"homepage":91,"download_link":92,"security_score":93,"vuln_count":94,"unpatched_count":13,"last_vuln_date":95,"fetched_at":26},"html5-chat","HTML5 Chat","1.08","proxymis","https:\u002F\u002Fprofiles.wordpress.org\u002Fproxymis\u002F","\u003Cp>HTML5 Chat allows you to quickly add a live audio and video chat to any WordPress page or post.\u003C\u002Fp>\n\u003Cp>The plugin embeds the HTML5-based chat service from html5-chat.com, without requiring any technical configuration.\u003Cbr \u002F>\nOnce activated, you can insert the chat anywhere using a simple shortcode.\u003C\u002Fp>\n\u003Cp>Key features:\u003Cbr \u002F>\n– Live audio & video chat (HTML5)\u003Cbr \u002F>\n– Simple shortcode integration\u003Cbr \u002F>\n– Customizable width & height\u003Cbr \u002F>\n– Fullscreen mode support\u003Cbr \u002F>\n– Admin moderation tools\u003Cbr \u002F>\n– CSS customization via admin panel\u003Cbr \u002F>\n– Works on desktop and mobile browsers\u003C\u002Fp>\n\u003Cp>After activation, your chat access credentials are automatically sent to your WordPress admin email.\u003C\u002Fp>\n\u003Cp>Security note:\u003Cbr \u002F>\nVersion 1.07 includes a security fix for a stored Cross-Site Scripting (XSS) vulnerability in shortcode attributes (CVE-2024-12451).\u003Cbr \u002F>\nCredit: Peter Thaleikis \u002F Wordfence.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For questions or assistance, please contact:\u003Cbr \u002F>\ncontact@proxymis.com\u003C\u002Fp>\n","HTML5 Chat is a WordPress plugin that lets you easily embed a real-time audio & video chat into your website using HTML5 technology.",90,13110,66,9,"2026-01-20T10:33:00.000Z","4.5",[19,70,20,89,90],"visiochat","webcam","https:\u002F\u002Fhtml5-chat.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhtml5-chat.zip",99,1,"2025-01-30 00:40:39",{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":104,"downloaded":105,"rating":24,"num_ratings":29,"last_updated":106,"tested_up_to":107,"requires_at_least":108,"requires_php":47,"tags":109,"homepage":113,"download_link":114,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"easy-video-call","Easy Video Call [GWE]","2.0.2","Mukul Hossain","https:\u002F\u002Fprofiles.wordpress.org\u002Fmukulwp\u002F","\u003Cp>Easy Video Call plugin was created using Agora’s API. To use this plugin, you have to create an account on agora.com. Note that without an SSL certificate on your website, this plugin won’t work.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Through a shortcode, you can display the ‘Start Call’ button anywhere on your website.\u003C\u002Fli>\n\u003Cli>You can turn on or off your camera.\u003C\u002Fli>\n\u003Cli>You can mute or unmute your speaker.\u003C\u002Fli>\n\u003C\u002Ful>\n","Easy Video Call is a simple plugin for making video call easily. To display the video call option simply add this [easy-video-call] shortcode inside y …",50,2455,"2025-07-22T18:27:00.000Z","6.8.5","4.7",[110,19,111,112,20],"agora","livechat","video-call","https:\u002F\u002Fgetwebexperts.com\u002Feasy-video-call","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-video-call.zip",{"slug":116,"name":117,"version":118,"author":119,"author_profile":120,"description":121,"short_description":122,"active_installs":30,"downloaded":123,"rating":24,"num_ratings":94,"last_updated":124,"tested_up_to":125,"requires_at_least":126,"requires_php":16,"tags":127,"homepage":129,"download_link":130,"security_score":52,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"new-dev-livesmart-video-chat","LiveSmart Video Chat Live Video Chat","1.1","nhadjidimitrov","https:\u002F\u002Fprofiles.wordpress.org\u002Fnhadjidimitrov\u002F","\u003Cp>The plugin is developed by LiveSmart Video Chat Inc., whose mission is to bring face-to-face communication online. Host your own live video\u002Fchat sessions, interact with your visitors and boost your sales.\u003C\u002Fp>\n\u003Cp>LiveSmart Video Chat plugin lets you embed ‘Video Chat’ button, online and offline forms on your website to let your website visitors click to start a video or regular chat with you directly. Visitors can also make an audio or video call directly from their web browser.\u003C\u002Fp>\n\u003Cp>Before installing this plugin make sure you have installed LiveSmart Video Chat on your server. You can acquire it from CodeCanyon.\u003C\u002Fp>\n\u003Cp>You can use LiveSmart Video Chat to:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Live video and\u002For audio chat;\u003C\u002Fli>\n\u003Cli>Own notification server, no third party software or accounts needed;\u003C\u002Fli>\n\u003Cli>File transfer;\u003C\u002Fli>\n\u003Cli>Pure HTML5 Web chat;\u003C\u002Fli>\n\u003Cli>Screen sharing. Supported on Chrome with additional plugin (Your will be guided in the installation process), Firefox 52+ and MS Edge 17+ browsers;\u003C\u002Fli>\n\u003Cli>Switch between front and back camera of your mobile;\u003C\u002Fli>\n\u003Cli>Notification system;\u003C\u002Fli>\n\u003Cli>Mobile friendly;\u003C\u002Fli>\n\u003Cli>Button for establishing a direct connection and a facility to track the presence of your visitors;\u003C\u002Fli>\n\u003Cli>Predefined buttons styling;\u003C\u002Fli>\n\u003Cli>Internationalization;\u003C\u002Fli>\n\u003Cli>Ability to set own video chat room;\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Integrate With Your Theme\u003C\u002Fp>\n\u003Cp>The LiveSmart Video Chat Plugin gives you the option to customize your button with a text of your own choice. Get exactly the look and feel you want.\u003C\u002Fp>\n\u003Ch4>Options\u003C\u002Fh4>\n\u003Cp>The following options are customizable:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>message on the LiveSmart Video Chat button\u003C\u002Fli>\n\u003Cli>CSS for the look and feel of the button\u003C\u002Fli>\n\u003Cli>Room ID\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Reference\u003C\u002Fh4>\n\u003Cp>Overview, user guide and installation instructions:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.new-dev.com\u002Fpage\u002Fident\u002Flive_smart_video_chat\" title=\"https:\u002F\u002Fwww.new-dev.com\u002Fpage\u002Fident\u002Flive_smart_video_chat\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.new-dev.com\u002Fpage\u002Fident\u002Flive_smart_video_chat\u003C\u002Fa>\u003Cbr \u002F>\nLive Smart in CodeCanyon:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fcodecanyon.net\u002Fitem\u002Flivesmart-video-chat\u002F23122332\" title=\"https:\u002F\u002Fcodecanyon.net\u002Fitem\u002Flivesmart-video-chat\u002F23122332\" rel=\"nofollow ugc\">https:\u002F\u002Fcodecanyon.net\u002Fitem\u002Flivesmart-video-chat\u002F23122332\u003C\u002Fa>\u003C\u002Fp>\n","LiveSmart Video Chat Live Video chat plugin for WordPress that allows visitors to establish live video chat in the browser without download.",5106,"2019-06-02T16:06:00.000Z","4.2.39","2.9",[128,50,19,71,21],"audio","https:\u002F\u002Fwww.new-dev.com\u002Fpage\u002Fident\u002Flive_smart_video_chat","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnew-dev-livesmart-video-chat.zip",{"attackSurface":132,"codeSignals":270,"taintFlows":656,"riskAssessment":787,"analyzedAt":800},{"hooks":133,"ajaxHandlers":237,"restRoutes":252,"shortcodes":253,"cronEvents":258,"entryPointCount":268,"unprotectedCount":269},[134,140,144,148,152,157,161,164,168,171,175,179,183,186,190,194,198,202,206,210,214,218,222,225,229,233],{"type":135,"name":136,"callback":137,"file":138,"line":139},"action","admin_init","webrtc2_settings_sections","class-webrtc2-core.php",27,{"type":135,"name":141,"callback":142,"file":138,"line":143},"admin_menu","webrtc2_admin_menu",28,{"type":135,"name":145,"callback":146,"file":138,"line":147},"admin_head","webrtc2_screen_options",29,{"type":149,"name":150,"callback":151,"priority":42,"file":138,"line":30},"filter","plugin_row_meta","webrtc2_plugin_meta",{"type":149,"name":153,"callback":154,"priority":155,"file":138,"line":156},"set-screen-option","webrtc2_set_screen_option",11,31,{"type":135,"name":158,"callback":159,"file":138,"line":160},"show_user_profile","webrtc2_users_select",33,{"type":135,"name":162,"callback":159,"file":138,"line":163},"edit_user_profile",34,{"type":135,"name":165,"callback":166,"file":138,"line":167},"personal_options_update","webrtc2_users_select_update",35,{"type":135,"name":169,"callback":166,"file":138,"line":170},"edit_user_profile_update",36,{"type":135,"name":172,"callback":173,"file":138,"line":174},"init","webrtc2_init",38,{"type":135,"name":176,"callback":177,"file":138,"line":178},"wp_head","webrtc2_viewport_tags",40,{"type":135,"name":180,"callback":181,"priority":42,"file":138,"line":182},"wp_login","webrtc2_users_online",42,{"type":135,"name":184,"callback":185,"file":138,"line":63},"wp_body_open","webrtc2_template_blank",{"type":135,"name":187,"callback":188,"file":138,"line":189},"after_setup_theme","webrtc2_hiden_toolbar",45,{"type":149,"name":191,"callback":192,"priority":42,"file":138,"line":193},"print_styles_array","webrtc2_head_content",47,{"type":135,"name":195,"callback":196,"file":138,"line":197},"plugins_loaded","closure",55,{"type":135,"name":199,"callback":200,"priority":42,"file":138,"line":201},"wp_mail_failed","webrtc2_mailer_errors",59,{"type":149,"name":203,"callback":204,"file":138,"line":205},"wp_mail_content_type","webrtc2_mail_content_type",60,{"type":135,"name":207,"callback":208,"file":138,"line":209},"webrtc2_truncate","webrtc2_truncate_stat",62,{"type":135,"name":211,"callback":212,"file":138,"line":213},"webrtc2_update","webrtc2_update_stun",63,{"type":135,"name":215,"callback":216,"file":138,"line":217},"webrtc2_update_repeat","webrtc2_update_stun_repeat",64,{"type":135,"name":219,"callback":220,"priority":42,"file":138,"line":221},"user_register","webrtc2_registered_user",65,{"type":149,"name":223,"callback":224,"file":138,"line":84},"user_contactmethods","webrtc2_user_contactmethods",{"type":135,"name":172,"callback":226,"file":227,"line":228},"webrtc2_textdomain","wp-webrtc2.php",106,{"type":135,"name":230,"callback":231,"file":227,"line":232},"admin_enqueue_scripts","webrtc2_enqueue_scripts_backend",138,{"type":135,"name":234,"callback":235,"file":227,"line":236},"wp_enqueue_scripts","webrtc2_scripts_css",237,[238,243,246,250],{"action":239,"nopriv":240,"callback":241,"hasNonce":240,"hasCapCheck":240,"file":227,"line":242},"sign",false,"webrtc2_sign",243,{"action":239,"nopriv":244,"callback":241,"hasNonce":240,"hasCapCheck":240,"file":227,"line":245},true,245,{"action":247,"nopriv":240,"callback":248,"hasNonce":240,"hasCapCheck":240,"file":227,"line":249},"sse","webrtc2_sse",251,{"action":247,"nopriv":244,"callback":248,"hasNonce":240,"hasCapCheck":240,"file":227,"line":251},253,[],[254],{"tag":255,"callback":256,"file":257,"line":139},"webrtc2","webrtc2_shortcode","class-webrtc2-shortcode.php",[259,260,262,264,266],{"hook":207,"callback":207,"file":138,"line":104},{"hook":211,"callback":211,"file":138,"line":261},53,{"hook":215,"callback":215,"file":138,"line":263},398,{"hook":211,"callback":211,"file":138,"line":265},1903,{"hook":215,"callback":215,"file":138,"line":267},1906,5,4,{"dangerousFunctions":271,"sqlUsage":272,"outputEscaping":317,"fileOperations":13,"externalRequests":13,"nonceChecks":654,"capabilityChecks":29,"bundledLibraries":655},[],{"prepared":273,"raw":274,"locations":275},21,18,[276,279,281,283,285,289,291,292,294,296,298,301,303,305,308,310,312,314],{"file":138,"line":277,"context":278},388,"$wpdb->get_results() with variable interpolation",{"file":138,"line":280,"context":278},411,{"file":138,"line":282,"context":278},1145,{"file":138,"line":284,"context":278},1183,{"file":286,"line":287,"context":288},"class-webrtc2-tbl-srv.php",83,"$wpdb->get_var() with variable interpolation",{"file":286,"line":290,"context":288},84,{"file":286,"line":52,"context":288},{"file":286,"line":293,"context":288},86,{"file":286,"line":295,"context":278},203,{"file":286,"line":297,"context":278},214,{"file":286,"line":299,"context":300},265,"$wpdb->query() with variable interpolation",{"file":286,"line":302,"context":278},277,{"file":286,"line":304,"context":278},291,{"file":306,"line":307,"context":278},"class-webrtc2-tbl-stat.php",108,{"file":306,"line":309,"context":278},120,{"file":306,"line":311,"context":300},170,{"file":306,"line":313,"context":278},182,{"file":315,"line":316,"context":278},"includes\\webrtc2-template.php",88,{"escaped":318,"rawEcho":319,"locations":320},165,192,[321,323,325,326,327,329,331,332,333,335,336,338,339,340,341,343,344,346,347,348,350,351,353,354,356,358,360,362,364,366,368,370,372,373,375,377,379,381,383,385,387,388,389,391,392,393,395,396,398,399,400,401,403,404,406,408,410,412,414,416,418,420,422,424,426,428,430,432,434,436,438,440,442,444,446,448,450,452,454,456,458,460,462,464,466,468,470,472,473,475,477,479,481,482,483,485,486,488,490,492,494,496,498,500,502,504,506,508,510,512,514,516,518,520,522,524,526,528,529,530,531,532,533,535,537,538,539,541,542,543,544,546,547,548,550,552,553,554,556,558,560,562,564,566,568,569,571,572,574,575,576,578,580,581,582,583,584,587,589,591,593,595,597,599,601,603,605,607,609,611,612,614,615,617,619,621,623,625,626,629,631,633,635,637,639,641,643,645,647,649,651,653],{"file":138,"line":313,"context":322},"raw output",{"file":138,"line":324,"context":322},186,{"file":138,"line":324,"context":322},{"file":138,"line":297,"context":322},{"file":138,"line":328,"context":322},221,{"file":138,"line":330,"context":322},877,{"file":138,"line":330,"context":322},{"file":138,"line":330,"context":322},{"file":138,"line":334,"context":322},884,{"file":138,"line":334,"context":322},{"file":138,"line":337,"context":322},896,{"file":138,"line":337,"context":322},{"file":138,"line":337,"context":322},{"file":138,"line":337,"context":322},{"file":138,"line":342,"context":322},903,{"file":138,"line":342,"context":322},{"file":138,"line":345,"context":322},914,{"file":138,"line":345,"context":322},{"file":138,"line":345,"context":322},{"file":138,"line":349,"context":322},921,{"file":138,"line":349,"context":322},{"file":138,"line":352,"context":322},929,{"file":138,"line":352,"context":322},{"file":138,"line":355,"context":322},939,{"file":138,"line":357,"context":322},948,{"file":138,"line":359,"context":322},960,{"file":138,"line":361,"context":322},1017,{"file":138,"line":363,"context":322},1021,{"file":138,"line":365,"context":322},1022,{"file":138,"line":367,"context":322},1023,{"file":138,"line":369,"context":322},1024,{"file":138,"line":371,"context":322},1049,{"file":138,"line":371,"context":322},{"file":138,"line":374,"context":322},1086,{"file":138,"line":376,"context":322},1090,{"file":138,"line":378,"context":322},1091,{"file":138,"line":380,"context":322},1092,{"file":138,"line":382,"context":322},1093,{"file":138,"line":384,"context":322},1101,{"file":138,"line":386,"context":322},1131,{"file":138,"line":386,"context":322},{"file":138,"line":386,"context":322},{"file":138,"line":390,"context":322},1215,{"file":138,"line":390,"context":322},{"file":138,"line":390,"context":322},{"file":138,"line":394,"context":322},1222,{"file":138,"line":394,"context":322},{"file":138,"line":397,"context":322},1234,{"file":138,"line":397,"context":322},{"file":138,"line":397,"context":322},{"file":138,"line":397,"context":322},{"file":138,"line":402,"context":322},1241,{"file":138,"line":402,"context":322},{"file":138,"line":405,"context":322},1251,{"file":138,"line":407,"context":322},1260,{"file":138,"line":409,"context":322},1272,{"file":138,"line":411,"context":322},1303,{"file":138,"line":413,"context":322},1307,{"file":138,"line":415,"context":322},1309,{"file":138,"line":417,"context":322},1310,{"file":138,"line":419,"context":322},1311,{"file":138,"line":421,"context":322},1312,{"file":138,"line":423,"context":322},1313,{"file":138,"line":425,"context":322},1314,{"file":138,"line":427,"context":322},1315,{"file":138,"line":429,"context":322},1316,{"file":138,"line":431,"context":322},1317,{"file":138,"line":433,"context":322},1318,{"file":138,"line":435,"context":322},1319,{"file":138,"line":437,"context":322},1321,{"file":138,"line":439,"context":322},1322,{"file":138,"line":441,"context":322},1323,{"file":138,"line":443,"context":322},1325,{"file":138,"line":445,"context":322},1326,{"file":138,"line":447,"context":322},1327,{"file":138,"line":449,"context":322},1329,{"file":138,"line":451,"context":322},1332,{"file":138,"line":453,"context":322},1347,{"file":138,"line":455,"context":322},1352,{"file":138,"line":457,"context":322},1353,{"file":138,"line":459,"context":322},1354,{"file":138,"line":461,"context":322},1355,{"file":138,"line":463,"context":322},1376,{"file":138,"line":465,"context":322},1389,{"file":138,"line":467,"context":322},1395,{"file":138,"line":469,"context":322},1443,{"file":138,"line":471,"context":322},1444,{"file":138,"line":471,"context":322},{"file":138,"line":474,"context":322},1540,{"file":138,"line":476,"context":322},1551,{"file":138,"line":478,"context":322},1562,{"file":138,"line":480,"context":322},1591,{"file":138,"line":480,"context":322},{"file":138,"line":480,"context":322},{"file":138,"line":484,"context":322},1592,{"file":138,"line":484,"context":322},{"file":138,"line":487,"context":322},1597,{"file":138,"line":489,"context":322},1615,{"file":138,"line":491,"context":322},1622,{"file":138,"line":493,"context":322},1630,{"file":138,"line":495,"context":322},1638,{"file":138,"line":497,"context":322},1646,{"file":138,"line":499,"context":322},1653,{"file":138,"line":501,"context":322},1664,{"file":138,"line":503,"context":322},1665,{"file":138,"line":505,"context":322},1666,{"file":138,"line":507,"context":322},1692,{"file":138,"line":509,"context":322},1694,{"file":138,"line":511,"context":322},1696,{"file":138,"line":513,"context":322},1697,{"file":138,"line":515,"context":322},1718,{"file":138,"line":517,"context":322},1798,{"file":138,"line":519,"context":322},1827,{"file":138,"line":521,"context":322},1923,{"file":257,"line":523,"context":322},102,{"file":257,"line":525,"context":322},118,{"file":257,"line":527,"context":322},164,{"file":257,"line":527,"context":322},{"file":257,"line":527,"context":322},{"file":257,"line":527,"context":322},{"file":257,"line":318,"context":322},{"file":257,"line":318,"context":322},{"file":257,"line":534,"context":322},180,{"file":257,"line":536,"context":322},181,{"file":257,"line":536,"context":322},{"file":257,"line":536,"context":322},{"file":257,"line":540,"context":322},229,{"file":257,"line":540,"context":322},{"file":257,"line":540,"context":322},{"file":257,"line":540,"context":322},{"file":257,"line":545,"context":322},230,{"file":257,"line":545,"context":322},{"file":257,"line":545,"context":322},{"file":257,"line":549,"context":322},231,{"file":257,"line":551,"context":322},233,{"file":257,"line":551,"context":322},{"file":257,"line":551,"context":322},{"file":257,"line":555,"context":322},244,{"file":257,"line":557,"context":322},260,{"file":257,"line":559,"context":322},446,{"file":257,"line":561,"context":322},449,{"file":257,"line":563,"context":322},454,{"file":257,"line":565,"context":322},467,{"file":257,"line":567,"context":322},475,{"file":286,"line":82,"context":322},{"file":286,"line":570,"context":322},91,{"file":286,"line":570,"context":322},{"file":286,"line":573,"context":322},93,{"file":286,"line":31,"context":322},{"file":286,"line":31,"context":322},{"file":286,"line":577,"context":322},96,{"file":286,"line":579,"context":322},97,{"file":286,"line":579,"context":322},{"file":286,"line":93,"context":322},{"file":286,"line":24,"context":322},{"file":286,"line":24,"context":322},{"file":585,"line":586,"context":322},"includes\\webrtc2-mail.php",128,{"file":585,"line":588,"context":322},131,{"file":585,"line":590,"context":322},132,{"file":585,"line":592,"context":322},133,{"file":585,"line":594,"context":322},134,{"file":585,"line":596,"context":322},142,{"file":585,"line":598,"context":322},145,{"file":585,"line":600,"context":322},146,{"file":585,"line":602,"context":322},147,{"file":585,"line":604,"context":322},148,{"file":606,"line":84,"context":322},"includes\\webrtc2-profile-tbls.php",{"file":606,"line":608,"context":322},67,{"file":606,"line":610,"context":322},70,{"file":606,"line":316,"context":322},{"file":606,"line":613,"context":322},89,{"file":606,"line":613,"context":322},{"file":606,"line":616,"context":322},155,{"file":606,"line":618,"context":322},156,{"file":606,"line":620,"context":322},159,{"file":606,"line":622,"context":322},177,{"file":606,"line":624,"context":322},178,{"file":606,"line":624,"context":322},{"file":627,"line":628,"context":322},"includes\\webrtc2-sign.php",278,{"file":627,"line":630,"context":322},302,{"file":627,"line":632,"context":322},304,{"file":627,"line":634,"context":322},333,{"file":627,"line":636,"context":322},346,{"file":627,"line":638,"context":322},364,{"file":627,"line":640,"context":322},374,{"file":627,"line":642,"context":322},399,{"file":627,"line":644,"context":322},417,{"file":627,"line":646,"context":322},484,{"file":627,"line":648,"context":322},507,{"file":627,"line":650,"context":322},518,{"file":652,"line":147,"context":322},"includes\\webrtc2-sse.php",{"file":652,"line":30,"context":322},3,[],[657,674,685,694,710,719,742,754,762,771,779],{"entryPoint":658,"graph":659,"unsanitizedCount":94,"severity":673},"webrtc2_redirectToHTTPS (class-webrtc2-core.php:286)",{"nodes":660,"edges":671},[661,666],{"id":662,"type":663,"label":664,"file":138,"line":665},"n0","source","$_SERVER['HTTP_HOST']",288,{"id":667,"type":668,"label":669,"file":138,"line":665,"wp_function":670},"n1","sink","wp_redirect() [Open Redirect]","wp_redirect",[672],{"from":662,"to":667,"sanitized":240},"medium",{"entryPoint":675,"graph":676,"unsanitizedCount":654,"severity":673},"webrtc2_servers (class-webrtc2-core.php:868)",{"nodes":677,"edges":683},[678,680],{"id":662,"type":663,"label":679,"file":138,"line":330},"$_POST['id'] (x3)",{"id":667,"type":668,"label":681,"file":138,"line":330,"wp_function":682},"echo() [XSS]","echo",[684],{"from":662,"to":667,"sanitized":240},{"entryPoint":686,"graph":687,"unsanitizedCount":29,"severity":673},"webrtc2_statistic (class-webrtc2-core.php:1206)",{"nodes":688,"edges":692},[689,691],{"id":662,"type":663,"label":690,"file":138,"line":390},"$_POST['id'] (x2)",{"id":667,"type":668,"label":681,"file":138,"line":390,"wp_function":682},[693],{"from":662,"to":667,"sanitized":240},{"entryPoint":695,"graph":696,"unsanitizedCount":29,"severity":673},"webrtc2_settings (class-webrtc2-core.php:1339)",{"nodes":697,"edges":707},[698,700,701,705],{"id":662,"type":663,"label":699,"file":138,"line":461},"$_SERVER['SERVER_SOFTWARE']",{"id":667,"type":668,"label":681,"file":138,"line":461,"wp_function":682},{"id":702,"type":663,"label":703,"file":138,"line":704},"n2","$_SERVER",1363,{"id":706,"type":668,"label":681,"file":138,"line":467,"wp_function":682},"n3",[708,709],{"from":662,"to":667,"sanitized":240},{"from":702,"to":706,"sanitized":240},{"entryPoint":711,"graph":712,"unsanitizedCount":269,"severity":673},"webrtc2_mail_check (includes\\webrtc2-mail.php:104)",{"nodes":713,"edges":717},[714,716],{"id":662,"type":663,"label":715,"file":585,"line":307},"$_SERVER (x4)",{"id":667,"type":668,"label":681,"file":585,"line":588,"wp_function":682},[718],{"from":662,"to":667,"sanitized":240},{"entryPoint":720,"graph":721,"unsanitizedCount":13,"severity":741},"\u003Cclass-webrtc2-core> (class-webrtc2-core.php:0)",{"nodes":722,"edges":736},[723,724,725,727,728,730,732,734],{"id":662,"type":663,"label":664,"file":138,"line":665},{"id":667,"type":668,"label":669,"file":138,"line":665,"wp_function":670},{"id":702,"type":663,"label":726,"file":138,"line":330},"$_POST['id'] (x5)",{"id":706,"type":668,"label":681,"file":138,"line":330,"wp_function":682},{"id":729,"type":663,"label":699,"file":138,"line":461},"n4",{"id":731,"type":668,"label":681,"file":138,"line":461,"wp_function":682},"n5",{"id":733,"type":663,"label":703,"file":138,"line":704},"n6",{"id":735,"type":668,"label":681,"file":138,"line":467,"wp_function":682},"n7",[737,738,739,740],{"from":662,"to":667,"sanitized":244},{"from":702,"to":706,"sanitized":244},{"from":729,"to":731,"sanitized":244},{"from":733,"to":735,"sanitized":244},"low",{"entryPoint":743,"graph":744,"unsanitizedCount":94,"severity":741},"prepare_items (class-webrtc2-tbl-srv.php:118)",{"nodes":745,"edges":752},[746,749],{"id":662,"type":663,"label":747,"file":286,"line":748},"$_POST['s']",124,{"id":667,"type":668,"label":750,"file":286,"line":748,"wp_function":751},"update_option() [Settings Manipulation]","update_option",[753],{"from":662,"to":667,"sanitized":240},{"entryPoint":755,"graph":756,"unsanitizedCount":13,"severity":741},"\u003Cclass-webrtc2-tbl-srv> (class-webrtc2-tbl-srv.php:0)",{"nodes":757,"edges":760},[758,759],{"id":662,"type":663,"label":747,"file":286,"line":748},{"id":667,"type":668,"label":750,"file":286,"line":748,"wp_function":751},[761],{"from":662,"to":667,"sanitized":244},{"entryPoint":763,"graph":764,"unsanitizedCount":94,"severity":741},"prepare_items (class-webrtc2-tbl-stat.php:46)",{"nodes":765,"edges":769},[766,768],{"id":662,"type":663,"label":747,"file":306,"line":767},52,{"id":667,"type":668,"label":750,"file":306,"line":767,"wp_function":751},[770],{"from":662,"to":667,"sanitized":240},{"entryPoint":772,"graph":773,"unsanitizedCount":13,"severity":741},"\u003Cclass-webrtc2-tbl-stat> (class-webrtc2-tbl-stat.php:0)",{"nodes":774,"edges":777},[775,776],{"id":662,"type":663,"label":747,"file":306,"line":767},{"id":667,"type":668,"label":750,"file":306,"line":767,"wp_function":751},[778],{"from":662,"to":667,"sanitized":244},{"entryPoint":780,"graph":781,"unsanitizedCount":269,"severity":741},"\u003Cwebrtc2-mail> (includes\\webrtc2-mail.php:0)",{"nodes":782,"edges":785},[783,784],{"id":662,"type":663,"label":715,"file":585,"line":307},{"id":667,"type":668,"label":681,"file":585,"line":588,"wp_function":682},[786],{"from":662,"to":667,"sanitized":240},{"summary":788,"deductions":789},"The wp-webrtc2 plugin version 1.7.4 presents a mixed security posture. While it demonstrates good practices by avoiding dangerous functions, file operations, and external HTTP requests, and has a clean vulnerability history with no recorded CVEs, there are significant concerns regarding its attack surface and input sanitization.  The presence of four AJAX handlers without authentication checks is a major red flag, opening the door for unauthorized actions if these handlers are exploitable. This, coupled with a concerning 8 out of 11 analyzed taint flows having unsanitized paths, indicates a high potential for vulnerabilities, even if no critical or high severity issues were flagged in the static analysis. The plugin also shows a moderate concern with only 46% of its output being properly escaped, which could lead to cross-site scripting (XSS) vulnerabilities.\n\nWhile the absence of known vulnerabilities is positive, it does not guarantee the plugin's current safety, especially given the identified weaknesses. The moderate use of prepared statements for SQL queries and the limited number of nonce and capability checks suggest areas for improvement in securing the codebase. The overall risk assessment leans towards caution due to the significant number of unprotected entry points and the taint analysis results, despite the lack of historical CVEs.",[790,792,795,798],{"reason":791,"points":11},"Unprotected AJAX handlers",{"reason":793,"points":794},"Unsanitized paths in taint flows",15,{"reason":796,"points":797},"Low percentage of properly escaped output",8,{"reason":799,"points":268},"Low percentage of prepared SQL statements","2026-03-16T22:50:22.816Z",{"wat":802,"direct":833},{"assetPaths":803,"generatorPatterns":817,"scriptPaths":818,"versionParams":819},[804,805,806,807,808,809,810,811,812,813,814,815,816],"\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fcss\u002Fwebrtc2-backend.css","\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fjs\u002Fwebrtc2-backend.js","\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fconverter\u002Fhtml2canvas.js","\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fkatex\u002Fkatex.css","\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fkatex\u002Fkatex.js","\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fkatex\u002Fmhchem.js","\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fcss\u002Fwebrtc2-dark.css","\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fcss\u002Fwebrtc2-light.css","\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fparser\u002Fdetect.js","\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fchart\u002Fsmoothie.js","\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fjs\u002Fwebrtc2-variables.js","\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fjs\u002Fwebrtc2-interface.js","\u002Fwp-content\u002Fplugins\u002Fwp-webrtc2\u002Fjs\u002Fwebrtc2-init.js",[],[806,808,809,812,813,814,815,816,805],[820,821,822,823,824,825,826,827,828,829,830,831,832],"webrtc2-backend.css?v1.7","webrtc2-backend.js?v1.7","html2canvas.js?v1.4.1","katex.css?v0.16.9","katex.js?v0.16.9","mhchem.js?v3.3.0","webrtc2-dark.css?v1.7","webrtc2-light.css?v1.7","detect.js?v2.2.2","smoothie.js?v1.36","webrtc2-variables.js?v1.7","webrtc2-interface.js?v1.7","webrtc2-init.js?v1.7",{"cssClasses":834,"htmlComments":835,"htmlAttributes":836,"restEndpoints":837,"jsGlobals":838,"shortcodeOutput":848},[],[],[],[],[839,840,841,842,843,844,845,846,847],"webrtc2_url_ajax","webrtc2_nonce","webrtc2_hostId","webrtc2_duration","webrtc2_stun","webrtc2_turn","webrtc2_turn_usr","webrtc2_turn_pwd","webrtc2_url",[]]