{"id":339552,"date":"2026-07-25T16:39:17","date_gmt":"2026-07-25T16:39:17","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/crypto-mailto-defender\/"},"modified":"2026-10-25T22:37:13","modified_gmt":"2026-10-25T22:37:13","slug":"crypto-mailto-defender","status":"publish","type":"plugin","link":"https:\/\/az.wordpress.org\/plugins\/crypto-mailto-defender\/","author":20710598,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.2.0","stable_tag":"1.2.0","tested":"7.1.3","requires":"6.3","requires_php":"7.4","requires_plugins":null,"header_name":"Crypto Mailto Defender","header_author":"Marco Petrucci","header_description":"Enterprise spam protection. Encrypts mailto: links server-side with AES-256 and securely decrypts them via AJAX upon human interaction.","assets_banners_color":"b0a0ea","last_updated":"2026-10-25 22:37:13","external_support_url":"","external_repository_url":"","donate_link":"https:\/\/www.paypal.me\/marco00petrucci","header_plugin_uri":"","header_author_uri":"https:\/\/linktr.ee\/marco00petrucci","rating":0,"author_block_rating":0,"active_installs":0,"downloads":385,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.0":{"tag":"1.0.0","author":"marco00petrucci","date":"2026-07-25 16:39:05","revision":3622632},"1.0.1":{"tag":"1.0.1","author":"marco00petrucci","date":"2026-07-26 18:52:48","revision":3623726},"1.1.0":{"tag":"1.1.0","author":"marco00petrucci","date":"2026-10-24 18:02:45","revision":3763615},"1.2.0":{"tag":"1.2.0","author":"marco00petrucci","date":"2026-10-25 22:37:13","revision":3765317}},"upgrade_notice":{"1.2.0":"<p>Security update: AES-256-GCM + SHA-256 Proof-of-Work. Payload and token format changed \u2014 purge your page cache after updating, or cached 1.1.0 pages will fail to decrypt.<\/p>"},"ratings":[],"assets_icons":{"icon-256x256.png":{"filename":"icon-256x256.png","revision":3622632,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256},"icon.svg":{"filename":"icon.svg","revision":3623723,"resolution":false,"location":"assets","locale":false}},"assets_banners":{"banner-1544x500-ar.gif":{"filename":"banner-1544x500-ar.gif","revision":3623723,"resolution":"1544x500","location":"assets","locale":"ar","width":1544,"height":500},"banner-1544x500-de_DE.gif":{"filename":"banner-1544x500-de_DE.gif","revision":3623723,"resolution":"1544x500","location":"assets","locale":"de_DE","width":1544,"height":500},"banner-1544x500-es_ES.gif":{"filename":"banner-1544x500-es_ES.gif","revision":3623723,"resolution":"1544x500","location":"assets","locale":"es_ES","width":1544,"height":500},"banner-1544x500-fr_FR.gif":{"filename":"banner-1544x500-fr_FR.gif","revision":3623723,"resolution":"1544x500","location":"assets","locale":"fr_FR","width":1544,"height":500},"banner-1544x500-it_IT.gif":{"filename":"banner-1544x500-it_IT.gif","revision":3623723,"resolution":"1544x500","location":"assets","locale":"it_IT","width":1544,"height":500},"banner-1544x500-ru_RU.gif":{"filename":"banner-1544x500-ru_RU.gif","revision":3623723,"resolution":"1544x500","location":"assets","locale":"ru_RU","width":1544,"height":500},"banner-1544x500-zh_CN.gif":{"filename":"banner-1544x500-zh_CN.gif","revision":3623723,"resolution":"1544x500","location":"assets","locale":"zh_CN","width":1544,"height":500},"banner-1544x500.gif":{"filename":"banner-1544x500.gif","revision":3623723,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250-ar.gif":{"filename":"banner-772x250-ar.gif","revision":3623723,"resolution":"772x250","location":"assets","locale":"ar","width":772,"height":250},"banner-772x250-de_DE.gif":{"filename":"banner-772x250-de_DE.gif","revision":3623723,"resolution":"772x250","location":"assets","locale":"de_DE","width":772,"height":250},"banner-772x250-es_ES.gif":{"filename":"banner-772x250-es_ES.gif","revision":3623723,"resolution":"772x250","location":"assets","locale":"es_ES","width":772,"height":250},"banner-772x250-fr_FR.gif":{"filename":"banner-772x250-fr_FR.gif","revision":3623723,"resolution":"772x250","location":"assets","locale":"fr_FR","width":772,"height":250},"banner-772x250-it_IT.gif":{"filename":"banner-772x250-it_IT.gif","revision":3623723,"resolution":"772x250","location":"assets","locale":"it_IT","width":772,"height":250},"banner-772x250-ru_RU.gif":{"filename":"banner-772x250-ru_RU.gif","revision":3623723,"resolution":"772x250","location":"assets","locale":"ru_RU","width":772,"height":250},"banner-772x250-zh_CN.gif":{"filename":"banner-772x250-zh_CN.gif","revision":3623723,"resolution":"772x250","location":"assets","locale":"zh_CN","width":772,"height":250},"banner-772x250.gif":{"filename":"banner-772x250.gif","revision":3623723,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0","1.0.1","1.1.0","1.2.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3765317,"resolution":"1","location":"assets","locale":"","width":647,"height":905}},"screenshots":{"1":"Admin Dashboard settings for Crypto Mailto Defender."}},"plugin_section":[],"plugin_tags":[109,267,49336,18103,599],"plugin_category":[41,54],"plugin_contributors":[271092],"plugin_business_model":[],"class_list":["post-339552","plugin","type-plugin","status-publish","hentry","plugin_tags-antispam","plugin_tags-email","plugin_tags-email-protection","plugin_tags-mailto","plugin_tags-spam","plugin_category-communication","plugin_category-security-and-spam-protection","plugin_contributors-marco00petrucci","plugin_committers-marco00petrucci"],"banners":{"banner":"https:\/\/ps.w.org\/crypto-mailto-defender\/assets\/banner-772x250.gif?rev=3623723","banner_2x":"https:\/\/ps.w.org\/crypto-mailto-defender\/assets\/banner-1544x500.gif?rev=3623723","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":"https:\/\/ps.w.org\/crypto-mailto-defender\/assets\/icon.svg?rev=3623723","icon":"https:\/\/ps.w.org\/crypto-mailto-defender\/assets\/icon.svg?rev=3623723","icon_2x":false,"generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/crypto-mailto-defender\/assets\/screenshot-1.png?rev=3765317","caption":"Admin Dashboard settings for Crypto Mailto Defender."}],"raw_content":"<!--section=description-->\n<p>\ud83d\udea8 <strong>Tired of spam bots harvesting your email addresses?<\/strong> \nStandard obfuscation techniques\u2014like ROT13, CSS direction tricks, HTML entities, or simple Base64\/XOR encoding\u2014are effortlessly bypassed in milliseconds by modern scrapers, AI crawlers, and headless browsers.<\/p>\n\n<p>\ud83d\udd10 <strong>Crypto Mailto Defender<\/strong> takes a radically different approach: <strong>real server-side cryptography<\/strong>. Your email addresses never exist in the page source code or in the DOM until a verified human physically interacts with them.<\/p>\n\n<h3>\u26a1 How It Works Under the Hood<\/h3>\n\n<ol>\n<li><strong>Global Server-Side Interception:<\/strong> The plugin captures the final HTML output before it leaves your server, finding every <code>mailto:<\/code> link and plain-text email across your entire layout.<\/li>\n<li><strong>Authenticated AES-256-GCM Encryption<\/strong>: Every email is encrypted using a unique 256-bit secret key, a 96-bit Initialization Vector (IV), and a 128-bit authentication tag, replacing the address in the HTML with a clean, customizable mask (e.g., ********@domain.com).<\/li>\n<li><strong>Hardware Human Proof &amp; SHA-256 PoW Verification:<\/strong> When a visitor clicks or taps an email, the plugin verifies physical interaction metrics (hold duration, bounding-box geometry, hardware score, and a cryptographic SHA-256 Proof-of-Work) and performs a secure <strong>Server-Side AJAX request<\/strong> to decrypt the address on the fly. The encryption key never leaves your server.<\/li>\n<\/ol>\n\n<h3>\u2728 Key Features<\/h3>\n\n<ul>\n<li>\ud83d\ude80 <strong>Ultra-Fast Early-Exit Engine:<\/strong> Zero CPU wasted. If a page does not contain an <code>@<\/code> symbol, the regex engine is completely bypassed in 0ms, and frontend JS is loaded non-blockingly via <code>defer<\/code>.<\/li>\n<li>\ud83e\udd16 <strong>Anti-Headless Bot Shield:<\/strong> Defeats automated scraping tools (Puppeteer, Playwright, Selenium, WebDriver, cURL, Python) by validating real hardware press timing, pointer telemetry, WebGL software renderer detection, <code>isTrusted<\/code> events, and Same-Origin headers.<\/li>\n<li>\u26a1 <strong>100% Cache-Friendly:<\/strong> Works seamlessly with aggressive Full-Page Caching (<strong>Cloudflare, WP Rocket, LiteSpeed Cache, W3 Total Cache<\/strong>) without breaking when WordPress nonces expire.<\/li>\n<li>\ud83c\udf10 <strong>Global Page Builder Compatibility:<\/strong> Protects emails everywhere\u2014inside standard posts, headers, footers, widgets, AJAX forms, and builders like <strong>Elementor, Divi, Bricks, Oxygen, Beaver Builder, WPBakery, Breakdance, and Gutenberg<\/strong>.<\/li>\n<li>\ud83d\udccb <strong>Smart 1-Step or 2-Step UX:<\/strong> Choose whether text links are revealed on the first click and open the mail client on the second click, or launch <code>mailto:<\/code> immediately on the first click. Icon and button links always launch <code>mailto:<\/code> immediately.<\/li>\n<li>\ud83d\udee1\ufe0f <strong>Built-In Rate Limiting:<\/strong> Protects your <code>admin-ajax.php<\/code> endpoint against flooding attacks using spoof-resistant IP verification (<code>REMOTE_ADDR<\/code>) and Object Cache support.<\/li>\n<li>\u267f <strong>Accessible by Design:<\/strong> Full keyboard navigation support (<code>Tab<\/code> + <code>Enter<\/code> \/ <code>Space<\/code>) and screen-reader friendly attributes.<\/li>\n<\/ul>\n\n<h3>\ud83d\udc96 Support the Project<\/h3>\n\n<p><strong>Crypto Mailto Defender<\/strong> is 100% free, open-source, and has no paid \"Pro\" upsells. If this plugin saves your inbox from spam, consider <a href=\"https:\/\/paypal.me\/marco00petrucci\">buying me a coffee via PayPal<\/a>!<\/p>\n\n<p><strong>Acknowledgements<\/strong>\nThe architectural concept and research behind this plugin were inspired by the article <a href=\"https:\/\/spencermortensen.com\/articles\/email-obfuscation\/\">Email Obfuscation<\/a> by Spencer Mortensen.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Upload the plugin files to the <code>\/wp-content\/plugins\/crypto-mailto-defender<\/code> directory, or install the plugin directly through the WordPress <strong>Plugins &gt; Add New<\/strong> screen.<\/li>\n<li>Activate the plugin through the <strong>Plugins<\/strong> screen in WordPress.<\/li>\n<li>Done! \ud83c\udf89 The plugin immediately starts encrypting all <code>mailto:<\/code> links and plain-text emails across your website.<\/li>\n<li>Go to <strong>Settings &gt; Crypto Mailto Defender<\/strong> to customize the masking character, mask length, hint text, and strict hardware protection.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"%F0%9F%93%AC%20can%20i%20use%20this%20for%20multiple%20email%20addresses%20on%20the%20same%20page%3F\"><h3>\ud83d\udcec Can I use this for multiple email addresses on the same page?<\/h3><\/dt>\n<dd><p>Absolutely! The plugin intercepts and encrypts every single email address or <code>mailto:<\/code> link on the page. Plus, thanks to client-side in-memory caching, if the same email appears multiple times on a page, it only queries the server once!<\/p><\/dd>\n<dt id=\"%F0%9F%8E%A8%20does%20this%20plugin%20work%20with%20elementor%2C%20divi%2C%20bricks%2C%20or%20gutenberg%3F\"><h3>\ud83c\udfa8 Does this plugin work with Elementor, Divi, Bricks, or Gutenberg?<\/h3><\/dt>\n<dd><p>Yes. Because Crypto Mailto Defender operates via global output buffering at the template level, it captures and protects emails regardless of how your theme or page builder renders them\u2014including headers, footers, popups, and custom SVG icon buttons.<\/p><\/dd>\n<dt id=\"%E2%9A%A1%20will%20this%20plugin%20break%20with%20wp%20rocket%2C%20cloudflare%2C%20or%20litespeed%20cache%3F\"><h3>\u26a1 Will this plugin break with WP Rocket, Cloudflare, or LiteSpeed Cache?<\/h3><\/dt>\n<dd><p>No. Version 1.1.0+ uses a cache-resilient verification mechanism that combines hardware interaction proofs with WordPress security headers, ensuring emails always unlock smoothly even on pages cached for weeks.<\/p><\/dd>\n<dt id=\"%F0%9F%9A%AB%20what%20happens%20if%20a%20visitor%20%28or%20bot%29%20has%20javascript%20disabled%3F\"><h3>\ud83d\udeab What happens if a visitor (or bot) has JavaScript disabled?<\/h3><\/dt>\n<dd><p>The email addresses remain securely encrypted and visually masked (e.g., <code>********@domain.com<\/code>). Non-JS scrapers and raw HTML harvesters see zero email addresses in the source code.<\/p>\n\n<p>Please note: JavaScript is required to reveal an address. Without JavaScript, nobody can reveal or use a protected email address, including legitimate visitors. If those visitors must be able to reach you, offer an alternative contact method, such as a contact form.<\/p><\/dd>\n<dt id=\"%F0%9F%94%8D%20will%20masking%20emails%20hurt%20my%20website%27s%20seo%3F\"><h3>\ud83d\udd0d Will masking emails hurt my website's SEO?<\/h3><\/dt>\n<dd><p>Not at all. Search engines like Google do not rank pages based on plain-text email addresses, and the plugin automatically adds <code>rel=\"nofollow noindex\"<\/code> to masked links to follow SEO best practices.<\/p><\/dd>\n<dt id=\"%F0%9F%A4%96%20is%20it%20100%25%20bot-proof%3F\"><h3>\ud83e\udd16 Is it 100% bot-proof?<\/h3><\/dt>\n<dd><p>No. It stops harvesters that read page source and common headless browsers. A determined attacker driving a real browser can still reveal an address. If an address must never be exposed, use a contact form instead.<\/p><\/dd>\n<dt id=\"%E2%98%81%EF%B8%8F%20does%20it%20work%20behind%20cloudflare%20or%20another%20reverse%20proxy%3F\"><h3>\u2601\ufe0f Does it work behind Cloudflare or another reverse proxy?<\/h3><\/dt>\n<dd><p>The rate limiter uses REMOTE_ADDR. If your server only sees the proxy's IP, restore the real visitor IP at server level or return it from the <code>cryptomail_client_ip<\/code> filter. The per-minute limit can be changed with the <code>cryptomail_rate_limit<\/code> filter.<\/p><\/dd>\n<dt id=\"%F0%9F%94%92%20requirements%3F\"><h3>\ud83d\udd12 Requirements?<\/h3><\/dt>\n<dd><p>PHP with the OpenSSL extension, and HTTPS (the proof-of-work uses the browser's Web Crypto API, available only in secure contexts).<\/p><\/dd>\n<dt id=\"%E2%9C%8F%EF%B8%8F%20does%20it%20affect%20page%20builders%20and%20the%20editor%3F\"><h3>\u270f\ufe0f Does it affect page builders and the editor?<\/h3><\/dt>\n<dd><p>Protection is skipped in the block editor, the Customizer and the preview\/editing modes of common page builders. Use the <code>cryptomail_skip_request<\/code> filter to exclude others.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.2.0<\/h4>\n\n<ul>\n<li><strong>Security:<\/strong> Replaced AES-256-CBC with authenticated <strong>AES-256-GCM<\/strong> (12-byte IV, 16-byte tag, AAD bound to home_url) to guarantee payload integrity.<\/li>\n<li><strong>Security:<\/strong> Introduced multi-factor <strong>human-proof telemetry<\/strong>: interaction mask (in-bounds click, pointer movement, hover\/focus), DOM age, hardware score, and a SHA-256 <strong>Proof-of-Work<\/strong> challenge. Synthetic clicks and headless drivers are now reliably rejected.<\/li>\n<li><strong>Security:<\/strong> Added <strong>anti-replay protection<\/strong> (nonce+timestamp+payload hash, 90s TTL) and upgraded rate limiting with object-cache awareness and an eviction-resistant bucket capped at 500 entries.<\/li>\n<li><strong>Security:<\/strong> Hardened the AJAX endpoint with <code>Sec-Fetch-Site\/Mode\/Dest<\/code>, <code>X-Requested-With<\/code>, Origin validation, and an expanded automated-agent User-Agent blocklist.<\/li>\n<li><strong>Security:<\/strong> Replaced expiring WordPress nonces with a deterministic <strong>HMAC client token<\/strong>, making strict-mode verification fully compatible with Cloudflare, WP Rocket, LiteSpeed, and other full-page caches.<\/li>\n<li><strong>Feature:<\/strong> New <strong>\"Open Mail Client on First Click\"<\/strong> setting (1-step vs 2-step reveal UX).<\/li>\n<li><strong>Feature:<\/strong> New <strong>\"Reveal All Identical Emails Simultaneously\"<\/strong> setting with in-request encryption cache to avoid duplicate AJAX calls.<\/li>\n<li><strong>Feature:<\/strong> New <strong>\"Show Spinner Loader While Decrypting\"<\/strong> setting with an accessible animated loader, properly dimensioned and centered on both text links and standalone icon\/button elements.<\/li>\n<li><strong>Feature:<\/strong> Admin JS auto-syncs the hint-text placeholder when the 1-click toggle changes.<\/li>\n<li><strong>Feature:<\/strong> Added <code>cryptomail_skip_request<\/code>, <code>cryptomail_client_ip<\/code>, and <code>cryptomail_rate_limit<\/code> filters for advanced integrations.<\/li>\n<li><strong>Compatibility:<\/strong> Global output buffering now hooks <code>init<\/code> (priority 1) and transparently handles <strong>HTML, JSON, and AJAX\/REST fragments<\/strong>, protecting emails rendered by page builders and dynamic widgets.<\/li>\n<li><strong>Compatibility:<\/strong> Added comprehensive <strong>builder\/editor context detection<\/strong> (Elementor, Divi, Bricks, Oxygen, Beaver, WPBakery, Breakdance, Brizy, Fusion, Zion, SeedProd, plus <code>customize_preview<\/code> and ~70 known query params) to prevent encrypting emails inside editing UIs.<\/li>\n<li><strong>Performance:<\/strong> Ultra-fast <strong>0ms early-exit<\/strong> and <code>&lt;head&gt;<\/code> slicing before PCRE, eliminating regex scanning over styles\/scripts.<\/li>\n<li><strong>Performance:<\/strong> Modernized frontend asset delivery via <code>wp_enqueue_script<\/code> with the <code>defer<\/code> strategy instead of inline <code>&lt;script&gt;<\/code> injection.<\/li>\n<li><strong>Performance:<\/strong> Lazy runtime initialization (<code>init_runtime()<\/code>), so settings and secrets are only loaded when actually needed.<\/li>\n<li><strong>Fix:<\/strong> Multibyte-safe masking character via <code>mb_substr<\/code>, and unified sanitization for all settings through <code>sanitize_setting()<\/code>.<\/li>\n<li><strong>Fix:<\/strong> <code>(*SKIP)(*F)<\/code> regex now correctly skips <code>head, script, style, textarea, pre, code, option, select, noscript, template, svg, iframe, object<\/code>, and HTML comments, preventing accidental masking inside non-visible contexts.<\/li>\n<li><strong>Changed:<\/strong> Minimum WordPress version raised to <strong>6.3<\/strong>.<\/li>\n<li><strong>Changed:<\/strong> Client-IP detection defaults to <code>REMOTE_ADDR<\/code> (spoof-resistant); proxy environments should use the <code>cryptomail_client_ip<\/code> filter.<\/li>\n<li><strong>Removed:<\/strong> Silent clipboard copy on first reveal and the legacy <code>TreeWalker<\/code>\/non-anchor\u2192anchor DOM rewriting in favor of a lighter reveal path.<\/li>\n<\/ul>\n\n<h4>1.1.0<\/h4>\n\n<ul>\n<li><strong>Security:<\/strong> Introduced hardware interaction verification (hold duration &amp; CRC32 signature) to effectively block automated headless browsers (Puppeteer, Selenium, WebDriver).<\/li>\n<li><strong>Performance:<\/strong> Implemented ultra-fast early-exit execution if no email symbols (<code>@<\/code>) are present in the response HTML, dramatically reducing CPU overhead.<\/li>\n<li><strong>Compatibility:<\/strong> Made AJAX decryption cache-friendly (WP Rocket, Cloudflare, LiteSpeed) by decoupling strict verification from expiring WordPress nonces.<\/li>\n<li><strong>UX:<\/strong> Added client-side in-memory caching to eliminate redundant AJAX requests on duplicate emails, along with automatic clipboard copy on text links.<\/li>\n<li><strong>Fix:<\/strong> Resolved PHPCS warnings regarding Cloudflare connecting IP sanitization and modernized tested compatibility to WordPress 7.1.<\/li>\n<\/ul>\n\n<h4>1.0.1<\/h4>\n\n<ul>\n<li><strong>Feature:<\/strong> Migrated to Global Output Buffering. The plugin now catches emails in headers, footers, and complex page builder layouts.<\/li>\n<li><strong>Security:<\/strong> Added a Rate Limiting layer to the AJAX decryption endpoint to prevent server flooding attacks.<\/li>\n<li><strong>Fix:<\/strong> Improved handling of custom SVG icons and HTML attributes, avoiding destructive sanitization when rebuilding links.<\/li>\n<li><strong>Performance:<\/strong> Assets (CSS\/JS) are now dynamically injected strictly at the end of the HTML document only when an email is actively masked.<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release.<\/li>\n<\/ul>","raw_excerpt":"\ud83d\udee1\ufe0f Enterprise-grade email spam protection. Encrypts mailto: links and plain emails server-side with AES-256-GCM and unlocks them only for real humans.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/az.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/339552","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/az.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/az.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/az.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=339552"}],"author":[{"embeddable":true,"href":"https:\/\/az.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/marco00petrucci"}],"wp:attachment":[{"href":"https:\/\/az.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=339552"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/az.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=339552"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/az.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=339552"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/az.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=339552"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/az.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=339552"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/az.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=339552"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}