[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCQmq14FPgAMEOh7mDizrdSR6Pwcwl37Jmr7jPA7L8Yw":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":40,"analysis":114,"fingerprints":612},"zibal-payment-gateway-for-gravity-forms","Zibal Payment Gateway for Gravity Forms","1.0.0","Mohammad Zamanzadeh","https:\u002F\u002Fprofiles.wordpress.org\u002Fmzamanzadah\u002F","\u003Cp>افزونه Zibal Payment Gateway for Gravity Forms امکان فروش اینترنتی و آنلاین از طریق درگاه پرداخت زیبال به افزونه گرویتی فرم اضافه می کند.\u003C\u002Fp>\n","با نصب این پلاگین می توانید از خدمات درگاه پرداخت واسط و مستقیم و یا اختصاصی زیبال برروی افزونه گرویتی فرم استفاده کنید!",600,5545,100,1,"2022-06-20T09:48:00.000Z","6.0.11","4.5","5.4",[20,21,22,23,24],"gateway","gravityforms","payment","zibal","%d8%b2%db%8c%d8%a8%d8%a7%d9%84","http:\u002F\u002Fzibal.ir\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fzibal-payment-gateway-for-gravity-forms.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":35,"avg_security_score":36,"avg_patch_time_days":37,"trust_score":38,"computed_at":39},"mzamanzadah",5,6860,91,30,88,"2026-04-04T04:09:50.122Z",[41,56,70,83,99],{"slug":42,"name":43,"version":44,"author":7,"author_profile":8,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":13,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":17,"requires_php":52,"tags":53,"homepage":52,"download_link":55,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"zibal-payment-gateway-for-woocommerce","Gateway zibal for Woocommerce","1.9","\u003Cp>افزونه Zibal Payment Gateway for Woocommerce امکان فروش اینترنتی و آنلاین از طریق درگاه پرداخت زیبال به ووکامرس اضافه می کند.\u003C\u002Fp>\n","با نصب این پلاگین می توانید از خدمات درگاه پرداخت واسط و مستقیم و یا اختصاصی زیبال برروی فروشگاه ساز ووکامرس استفاده کنید",6000,35146,2,"2025-08-25T07:36:00.000Z","6.7.5","",[20,22,54,23,24],"woocommerce","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fzibal-payment-gateway-for-woocommerce.1.9.zip",{"slug":57,"name":58,"version":59,"author":7,"author_profile":8,"description":60,"short_description":61,"active_installs":62,"downloaded":63,"rating":28,"num_ratings":28,"last_updated":64,"tested_up_to":16,"requires_at_least":17,"requires_php":65,"tags":66,"homepage":68,"download_link":69,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"zibal-payment-gateway-for-contact-form7","Zibal Payment Gateway for Contact Form 7","1.0","\u003Cp>افزونه Zibal Payment Gateway for Contact Form 7 امکان فروش اینترنتی و آنلاین از طریق درگاه پرداخت زیبال به فرم های Contact Form 7 اضافه می کند.\u003Cbr \u002F>\nافزونه Zibal Payment Gateway for Contact Form 7 امکان ایجاد پرداخت و همچنین مشاهده پرداخت‌های انجام شده را به افزونه فرم تماس ۷ اضافه می‌کند.\u003C\u002Fp>\n","با نصب این پلاگین می توانید از خدمات درگاه پرداخت زیبال برروی افزونه فرم تماس ۷ استفاده کنید!",40,1636,"2022-06-20T10:15:00.000Z","7.0",[67,20,22,23,24],"contact-form-7","https:\u002F\u002Fdocs.zibal.ir\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fzibal-payment-gateway-for-contact-form7.1.0.zip",{"slug":71,"name":72,"version":73,"author":7,"author_profile":8,"description":74,"short_description":75,"active_installs":76,"downloaded":77,"rating":28,"num_ratings":28,"last_updated":78,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":79,"homepage":52,"download_link":82,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"zibal-payment-gateway-for-easy-digital-downloads","Zibal Payment Gateway for Easy Digital Downloads","1.2.1","\u003Cp>افزونه Zibal Payment Gateway for Easy Digital Download امکان فروش اینترنتی و آنلاین فایل را از طریق درگاه پرداخت زیبال به افزونه اضافه می کند.\u003Cbr \u002F>\nبرای فعالسازی درگاه مستقیم از بخش تنظیمات پلاگین زیبال دایرکت را فعال کنید.\u003C\u002Fp>\n","با نصب این پلاگین می توانید از خدمات درگاه پرداخت واسط و مستقیم و یا اختصاصی زیبال برروی اسکریپت فروش فایل easy digital downloads استفاده کنید!",200,3357,"2022-06-20T10:10:00.000Z",[80,81,20,22,23],"easydigitaldownloads","edd","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fzibal-payment-gateway-for-easy-digital-downloads.zip",{"slug":84,"name":85,"version":86,"author":87,"author_profile":88,"description":89,"short_description":90,"active_installs":13,"downloaded":91,"rating":92,"num_ratings":14,"last_updated":93,"tested_up_to":94,"requires_at_least":52,"requires_php":52,"tags":95,"homepage":52,"download_link":98,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"idpay-gateway-gravity-forms","IDPay For Wp Gravity Forms","3.1.1","IDPay","https:\u002F\u002Fprofiles.wordpress.org\u002Fidpayir\u002F","\u003Cp>After installing and enabling this plugin, your customers can pay through IDPay gateway.\u003Cbr \u002F>\nFor doing a transaction through IDPay gateway, you must have an API Key. You can obtain the API Key by going to your \u003Ca href=\"https:\u002F\u002Fidpay.ir\u002Fdashboard\u002Fweb-services\" rel=\"nofollow ugc\">dashboard\u003C\u002Fa> in your IDPay \u003Ca href=\"https:\u002F\u002Fidpay.ir\u002Fuser\" rel=\"nofollow ugc\">account\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>3.1.1, DEC 04, 2023\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>New Version Plugin And Many Add Features\u003C\u002Fli>\n\u003Cli>Fix All Problems\u003C\u002Fli>\n\u003Cli>Update Structures\u003C\u002Fli>\n\u003Cli>Tested Up With WordPress 6.4.1 And GravityForm 2.7.17\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>2.0.0, STP 11, 2023\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>New Version Plugin And Many Add Features\u003C\u002Fli>\n\u003Cli>Fix All Problems\u003C\u002Fli>\n\u003Cli>Update Structures\u003C\u002Fli>\n\u003Cli>Tested Up With WordPress 6.3.1 And GravityForm 2.7.12\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.1.2, Nov 13, 2022\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Tested Up With WordPress 6.1 And GravityForm 2.6.3\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>1.1.1, June 18, 2022\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Tested Up With WordPress 6.0 And GravityForm 2.6.3\u003C\u002Fli>\n\u003Cli>Check Double Spending Correct\u003C\u002Fli>\n\u003Cli>Check Does Not Xss Attack Correct\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>1.0.5, January 30, 2021\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>add deactivation method.\u003C\u002Fli>\n\u003Cli>add checkbox to use Gravity Forms confirmations.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>1.0.4, December 9, 2020\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>add name and email to gateway configuration.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>1.0.3, October 11, 2020\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>check GET parameters if POST was empty in relation with IDPay webservices new update.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>1.0.2, October 6, 2020\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Prevent IDPay logo applying in all forms.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>1.0.1, August 22, 2020\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Fix a typo bug.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>1.0.0, Jul 08, 2020\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Develope release.\u003C\u002Fli>\n\u003C\u002Ful>\n","After installing and enabling this plugin, your customers can pay through IDPay gateway.",7372,20,"2023-12-09T05:55:00.000Z","6.4.8",[20,96,21,97,22],"gravity-forms","idpay","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fidpay-gateway-gravity-forms.zip",{"slug":100,"name":101,"version":102,"author":7,"author_profile":8,"description":103,"short_description":104,"active_installs":92,"downloaded":105,"rating":28,"num_ratings":28,"last_updated":52,"tested_up_to":106,"requires_at_least":107,"requires_php":108,"tags":109,"homepage":52,"download_link":112,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":113},"zibal-payment-learnpress","Zibal Payment Gateway for Learnpress","1.3","\u003Cp>افزونه Zibal Payment Gateway for Learnpress امکان فروش اینترنتی و آنلاین از طریق درگاه پرداخت زیبال به افزونه مدیریت آموزش الکترونیک لرن پرس اضافه می کند.\u003C\u002Fp>\n","با نصب این پلاگین می توانید از خدمات درگاه پرداخت واسط و مستقیم و یا اختصاصی زیبال برروی افزونه لرن پرس استفاده کنید!",1796,"6.9.4","6.9","7.4",[20,110,111,22,23],"learnpress","lms","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fzibal-payment-learnpress.1.3.zip","2026-03-15T10:48:56.248Z",{"attackSurface":115,"codeSignals":194,"taintFlows":555,"riskAssessment":598,"analyzedAt":611},{"hooks":116,"ajaxHandlers":184,"restRoutes":191,"shortcodes":192,"cronEvents":193,"entryPointCount":14,"unprotectedCount":28},[117,122,126,129,133,137,141,146,150,155,159,163,167,172,176,180],{"type":118,"name":119,"callback":119,"file":120,"line":121},"action","init","zibal.php",6,{"type":118,"name":123,"callback":124,"file":120,"line":125},"admin_notices","admin_notice_persian_gf",26,{"type":118,"name":123,"callback":127,"file":120,"line":128},"admin_notice_gf_support",32,{"type":130,"name":131,"callback":131,"file":120,"line":132},"filter","members_get_capabilities",37,{"type":130,"name":134,"callback":135,"file":120,"line":136},"gform_tooltips","tooltips",41,{"type":130,"name":138,"callback":139,"file":120,"line":140},"gform_addon_navigation","menu",42,{"type":118,"name":142,"callback":143,"priority":144,"file":120,"line":145},"gform_entry_info","payment_entry_detail",4,43,{"type":118,"name":147,"callback":148,"priority":144,"file":120,"line":149},"gform_after_update_entry","update_payment_entry",44,{"type":130,"name":151,"callback":152,"priority":153,"file":120,"line":154},"gform_form_settings_menu","toolbar",10,47,{"type":118,"name":156,"callback":157,"file":120,"line":158},"gform_form_settings_page_zibal","feed_page",48,{"type":130,"name":160,"callback":161,"priority":153,"file":120,"line":162},"gform_disable_post_creation","delay_posts",70,{"type":130,"name":164,"callback":165,"priority":153,"file":120,"line":166},"gform_is_delayed_pre_process_feed","delay_addons",71,{"type":130,"name":168,"callback":169,"priority":170,"file":120,"line":171},"gform_confirmation","Request",1000,73,{"type":118,"name":173,"callback":174,"priority":34,"file":120,"line":175},"wp","Verify",74,{"type":130,"name":177,"callback":178,"file":120,"line":179},"gform_logging_supported","set_logging_supported",77,{"type":130,"name":181,"callback":182,"priority":49,"file":120,"line":183},"gf_payment_gateways","gravityformszibal",80,[185],{"action":186,"nopriv":187,"callback":188,"hasNonce":189,"hasCapCheck":187,"file":120,"line":190},"gf_zibal_update_feed_active",false,"update_feed_active",true,67,[],[],[],{"dangerousFunctions":195,"sqlUsage":196,"outputEscaping":267,"fileOperations":28,"externalRequests":14,"nonceChecks":553,"capabilityChecks":28,"bundledLibraries":554},[],{"prepared":197,"raw":198,"locations":199},16,31,[200,204,206,208,210,212,214,216,218,220,222,224,226,228,230,232,234,236,238,240,242,244,246,248,250,252,254,256,258,262,265],{"file":201,"line":202,"context":203},"chart.php",738,"$wpdb->get_results() with variable interpolation",{"file":201,"line":205,"context":203},749,{"file":201,"line":207,"context":203},760,{"file":201,"line":209,"context":203},771,{"file":201,"line":211,"context":203},887,{"file":201,"line":213,"context":203},898,{"file":201,"line":215,"context":203},910,{"file":201,"line":217,"context":203},921,{"file":201,"line":219,"context":203},1095,{"file":201,"line":221,"context":203},1106,{"file":201,"line":223,"context":203},1117,{"file":201,"line":225,"context":203},1128,{"file":201,"line":227,"context":203},1341,{"file":201,"line":229,"context":203},1352,{"file":201,"line":231,"context":203},1363,{"file":201,"line":233,"context":203},1374,{"file":201,"line":235,"context":203},1491,{"file":201,"line":237,"context":203},1501,{"file":201,"line":239,"context":203},1512,{"file":201,"line":241,"context":203},1523,{"file":201,"line":243,"context":203},1633,{"file":201,"line":245,"context":203},1644,{"file":201,"line":247,"context":203},1655,{"file":201,"line":249,"context":203},1666,{"file":201,"line":251,"context":203},1820,{"file":201,"line":253,"context":203},1831,{"file":201,"line":255,"context":203},1842,{"file":201,"line":257,"context":203},1853,{"file":259,"line":260,"context":261},"database.php",17,"$wpdb->get_var() with variable interpolation",{"file":259,"line":263,"context":264},18,"$wpdb->query() with variable interpolation",{"file":259,"line":266,"context":264},60,{"escaped":268,"rawEcho":269,"locations":270},65,149,[271,274,276,278,280,282,284,286,288,290,292,294,296,298,300,302,304,306,308,310,312,314,316,318,320,322,324,326,328,330,332,334,336,338,340,342,344,346,348,350,352,354,356,358,360,362,364,366,368,370,372,374,376,378,380,382,384,386,388,390,392,394,396,398,400,402,404,405,407,408,410,412,413,415,416,418,420,421,423,424,426,428,429,431,432,434,436,438,440,442,444,446,447,449,450,451,453,455,457,458,460,462,464,466,468,470,472,474,476,478,480,482,484,486,488,490,492,494,496,498,500,502,504,506,508,510,512,514,515,516,518,520,522,524,526,528,530,532,534,535,537,538,540,542,544,546,548,550,551],{"file":201,"line":272,"context":273},152,"raw output",{"file":201,"line":275,"context":273},155,{"file":201,"line":277,"context":273},158,{"file":201,"line":279,"context":273},161,{"file":201,"line":281,"context":273},164,{"file":201,"line":283,"context":273},167,{"file":201,"line":285,"context":273},169,{"file":201,"line":287,"context":273},171,{"file":201,"line":289,"context":273},174,{"file":201,"line":291,"context":273},177,{"file":201,"line":293,"context":273},180,{"file":201,"line":295,"context":273},183,{"file":201,"line":297,"context":273},186,{"file":201,"line":299,"context":273},188,{"file":201,"line":301,"context":273},190,{"file":201,"line":303,"context":273},192,{"file":201,"line":305,"context":273},194,{"file":201,"line":307,"context":273},197,{"file":201,"line":309,"context":273},341,{"file":201,"line":311,"context":273},361,{"file":201,"line":313,"context":273},365,{"file":201,"line":315,"context":273},366,{"file":201,"line":317,"context":273},370,{"file":201,"line":319,"context":273},371,{"file":201,"line":321,"context":273},375,{"file":201,"line":323,"context":273},376,{"file":201,"line":325,"context":273},380,{"file":201,"line":327,"context":273},381,{"file":201,"line":329,"context":273},385,{"file":201,"line":331,"context":273},386,{"file":201,"line":333,"context":273},395,{"file":201,"line":335,"context":273},417,{"file":201,"line":337,"context":273},421,{"file":201,"line":339,"context":273},422,{"file":201,"line":341,"context":273},426,{"file":201,"line":343,"context":273},427,{"file":201,"line":345,"context":273},431,{"file":201,"line":347,"context":273},432,{"file":201,"line":349,"context":273},436,{"file":201,"line":351,"context":273},437,{"file":201,"line":353,"context":273},441,{"file":201,"line":355,"context":273},442,{"file":201,"line":357,"context":273},469,{"file":201,"line":359,"context":273},473,{"file":201,"line":361,"context":273},474,{"file":201,"line":363,"context":273},478,{"file":201,"line":365,"context":273},479,{"file":201,"line":367,"context":273},483,{"file":201,"line":369,"context":273},484,{"file":201,"line":371,"context":273},488,{"file":201,"line":373,"context":273},489,{"file":201,"line":375,"context":273},493,{"file":201,"line":377,"context":273},494,{"file":201,"line":379,"context":273},520,{"file":201,"line":381,"context":273},524,{"file":201,"line":383,"context":273},525,{"file":201,"line":385,"context":273},529,{"file":201,"line":387,"context":273},530,{"file":201,"line":389,"context":273},533,{"file":201,"line":391,"context":273},534,{"file":201,"line":393,"context":273},538,{"file":201,"line":395,"context":273},539,{"file":201,"line":397,"context":273},543,{"file":201,"line":399,"context":273},544,{"file":201,"line":401,"context":273},567,{"file":201,"line":403,"context":273},568,{"file":201,"line":403,"context":273},{"file":201,"line":406,"context":273},570,{"file":201,"line":406,"context":273},{"file":201,"line":409,"context":273},580,{"file":201,"line":411,"context":273},581,{"file":201,"line":411,"context":273},{"file":201,"line":414,"context":273},583,{"file":201,"line":414,"context":273},{"file":201,"line":417,"context":273},593,{"file":201,"line":419,"context":273},594,{"file":201,"line":419,"context":273},{"file":201,"line":422,"context":273},596,{"file":201,"line":422,"context":273},{"file":201,"line":425,"context":273},606,{"file":201,"line":427,"context":273},607,{"file":201,"line":427,"context":273},{"file":201,"line":430,"context":273},609,{"file":201,"line":430,"context":273},{"file":201,"line":433,"context":273},640,{"file":120,"line":435,"context":273},505,{"file":120,"line":437,"context":273},547,{"file":120,"line":439,"context":273},556,{"file":120,"line":441,"context":273},558,{"file":120,"line":443,"context":273},560,{"file":120,"line":445,"context":273},564,{"file":120,"line":403,"context":273},{"file":120,"line":448,"context":273},576,{"file":120,"line":448,"context":273},{"file":120,"line":409,"context":273},{"file":120,"line":452,"context":273},584,{"file":120,"line":454,"context":273},588,{"file":120,"line":456,"context":273},592,{"file":120,"line":422,"context":273},{"file":120,"line":459,"context":273},621,{"file":120,"line":461,"context":273},623,{"file":120,"line":463,"context":273},655,{"file":120,"line":465,"context":273},847,{"file":120,"line":467,"context":273},848,{"file":120,"line":469,"context":273},849,{"file":120,"line":471,"context":273},850,{"file":120,"line":473,"context":273},851,{"file":120,"line":475,"context":273},894,{"file":120,"line":477,"context":273},900,{"file":120,"line":479,"context":273},904,{"file":120,"line":481,"context":273},908,{"file":120,"line":483,"context":273},915,{"file":120,"line":485,"context":273},1034,{"file":120,"line":487,"context":273},1059,{"file":120,"line":489,"context":273},1061,{"file":120,"line":491,"context":273},1063,{"file":120,"line":493,"context":273},1066,{"file":120,"line":495,"context":273},1069,{"file":120,"line":497,"context":273},1119,{"file":120,"line":499,"context":273},1151,{"file":120,"line":501,"context":273},1236,{"file":120,"line":503,"context":273},1237,{"file":120,"line":505,"context":273},1287,{"file":120,"line":507,"context":273},1291,{"file":120,"line":509,"context":273},1307,{"file":120,"line":511,"context":273},1320,{"file":120,"line":513,"context":273},1331,{"file":120,"line":513,"context":273},{"file":120,"line":513,"context":273},{"file":120,"line":517,"context":273},1404,{"file":120,"line":519,"context":273},1419,{"file":120,"line":521,"context":273},1455,{"file":120,"line":523,"context":273},1467,{"file":120,"line":525,"context":273},1480,{"file":120,"line":527,"context":273},1493,{"file":120,"line":529,"context":273},1535,{"file":120,"line":531,"context":273},1595,{"file":120,"line":533,"context":273},1597,{"file":120,"line":533,"context":273},{"file":120,"line":536,"context":273},1600,{"file":120,"line":536,"context":273},{"file":120,"line":539,"context":273},1610,{"file":120,"line":541,"context":273},1623,{"file":120,"line":543,"context":273},1739,{"file":120,"line":545,"context":273},1740,{"file":120,"line":547,"context":273},1741,{"file":120,"line":549,"context":273},1742,{"file":120,"line":549,"context":273},{"file":120,"line":552,"context":273},1789,8,[],[556,573,585],{"entryPoint":557,"graph":558,"unsanitizedCount":28,"severity":572},"settings_page (zibal.php:1027)",{"nodes":559,"edges":570},[560,565],{"id":561,"type":562,"label":563,"file":120,"line":564},"n0","source","$_POST['gf_zibal_configured']",1046,{"id":566,"type":567,"label":568,"file":120,"line":564,"wp_function":569},"n1","sink","update_option() [Settings Manipulation]","update_option",[571],{"from":561,"to":566,"sanitized":189},"low",{"entryPoint":574,"graph":575,"unsanitizedCount":28,"severity":572},"config_page (zibal.php:1196)",{"nodes":576,"edges":583},[577,580],{"id":561,"type":562,"label":578,"file":120,"line":579},"$_GET",1304,{"id":566,"type":567,"label":581,"file":120,"line":517,"wp_function":582},"echo() [XSS]","echo",[584],{"from":561,"to":566,"sanitized":189},{"entryPoint":586,"graph":587,"unsanitizedCount":28,"severity":572},"\u003Czibal> (zibal.php:0)",{"nodes":588,"edges":595},[589,590,591,593],{"id":561,"type":562,"label":563,"file":120,"line":564},{"id":566,"type":567,"label":568,"file":120,"line":564,"wp_function":569},{"id":592,"type":562,"label":578,"file":120,"line":579},"n2",{"id":594,"type":567,"label":581,"file":120,"line":517,"wp_function":582},"n3",[596,597],{"from":561,"to":566,"sanitized":189},{"from":592,"to":594,"sanitized":189},{"summary":599,"deductions":600},"The \"zibal-payment-gateway-for-gravity-forms\" plugin v1.0.0 exhibits a mixed security posture.  On the positive side, the plugin has no recorded vulnerabilities (CVEs) and the static analysis shows no critical or high severity taint flows, indicating that potentially dangerous data processing paths are likely well-handled or not present. The absence of shortcodes, cron events, and REST API routes, along with all identified AJAX handlers having authentication checks, significantly limits the attack surface and potential for unauthorized actions.\n\nHowever, several areas present potential concerns. A notable weakness is the relatively low percentage of properly escaped output (30%), which could expose the site to cross-site scripting (XSS) vulnerabilities if untrusted data is rendered without proper sanitization. Furthermore, 34% of SQL queries not using prepared statements is a concern, as this increases the risk of SQL injection vulnerabilities, especially if any of these queries involve user-supplied input. The plugin also makes an external HTTP request, which could be a vector for information disclosure or man-in-the-middle attacks if not handled securely. The complete lack of capability checks on the single AJAX endpoint, despite it having an authentication check, is also a point of weakness, as it doesn't verify if the authenticated user has the necessary permissions to perform the action.\n\nOverall, while the lack of historical vulnerabilities and critical taint flows is reassuring, the issues with output escaping and SQL query preparation, coupled with the absence of capability checks on the AJAX handler, suggest that the plugin could be improved to enhance its security. The current version is not exhibiting severe, exploitable vulnerabilities based on the provided data, but the potential for medium to low severity issues exists due to the identified code quality concerns.",[601,603,606,609],{"reason":602,"points":553},"Low percentage of properly escaped output",{"reason":604,"points":605},"Significant percentage of raw SQL queries",7,{"reason":607,"points":608},"External HTTP request present",3,{"reason":610,"points":34},"No capability checks on AJAX handler","2026-03-16T19:31:26.897Z",{"wat":613,"direct":620},{"assetPaths":614,"generatorPatterns":617,"scriptPaths":618,"versionParams":619},[615,616],"\u002Fwp-content\u002Fplugins\u002Fzibal-payment-gateway-for-gravity-forms\u002Fassets\u002Fjs\u002Fjalali-datepicker.js","\u002Fwp-content\u002Fplugins\u002Fzibal-payment-gateway-for-gravity-forms\u002Fassets\u002Fjs\u002Fshamsi_chart.js",[],[],[],{"cssClasses":621,"htmlComments":632,"htmlAttributes":633,"restEndpoints":634,"jsGlobals":635,"shortcodeOutput":639},[622,623,624,625,626,627,628,629,630,631],"zibal_graph_container","zibal_message_container","zibal_summary_container","zibal_summary_item","zibal_summary_value","zibal_summary_title","tooltipbox_blue","tooltipbox_green","tooltipbox_orang","tooltipbox_red",[],[],[],[636,637,638],"GFPersian_Chart_Zibal","GFPersian_Payments","dp",[]]