Description
Techved Lead Manager is a powerful and secure WordPress plugin designed to capture Facebook and Instagram leads using incoming webhooks. It stores leads as a custom post type, providing a centralized location to manage and export your social media leads without the need for expensive third-party automation tools.
Features:
- Capture Facebook Lead Ads via webhook in real-time
- Capture Instagram Lead Ads via webhook in real-time
- LinkedIn Lead Gen Forms integration
- Twitter/X lead capture from interactions
- Secure webhook signature verification (HMAC SHA-256)
- Encrypted storage of API credentials
- CSV export of all leads
- Platform-specific filtering and reporting
Third-Party Services
This plugin connects to the following third-party services to retrieve lead data submitted through social media advertising platforms.
Facebook & Instagram Graph API
This plugin sends requests to the Facebook Graph API (also used for Instagram) to retrieve lead form submission data when a webhook notification is received.
- When data is sent: Each time a new lead is submitted through a Facebook or Instagram Lead Ad, the platform sends a webhook notification to your WordPress site. The plugin then makes an API call to
https://graph.facebook.com/v19.0/{lead_id}to fetch the full lead details. - What data is sent: Your Page Access Token is sent as an authentication parameter in the API request. No personal user data from your WordPress site is transmitted.
- What data is received: The lead’s form submission data (e.g., name, email, phone) as provided by the person who filled out the Lead Ad form.
- Service provider: Meta Platforms, Inc.
- Terms of Service: https://developers.facebook.com/terms/
- Privacy Policy: https://www.facebook.com/privacy/policy/
- Data Processing Terms: https://www.facebook.com/legal/terms/dataprocessing
LinkedIn API
This plugin can receive lead data from LinkedIn Lead Gen Forms via webhook.
- When data is sent: When a LinkedIn Lead Gen Form is submitted, the platform sends a POST request to your site’s webhook endpoint.
- What data is received: The lead’s form submission data (e.g., name, email, company, job title).
- Service provider: LinkedIn Corporation (Microsoft)
- Terms of Service: https://www.linkedin.com/legal/l/api-terms-of-use
- Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Twitter/X API
This plugin can receive interaction data from the Twitter/X Account Activity API via webhook.
- When data is sent: When relevant Twitter interactions occur, the platform sends a POST request to your site’s webhook endpoint.
- What data is received: Tweet data including user name, handle, and tweet text for lead extraction.
- Service provider: X Corp.
- Terms of Service: https://developer.twitter.com/en/developer-terms/agreement-and-policy
- Privacy Policy: https://twitter.com/en/privacy
Important: By using this plugin, you agree to comply with the terms of service and privacy policies of the respective social media platforms. You are responsible for obtaining proper consent from your users and complying with all applicable data protection laws (e.g., GDPR, CCPA).
Installation
- Upload the plugin folder to the
/wp-content/plugins/directory. - Activate the plugin through the ‘Plugins’ menu in WordPress.
- Go to Social Leads -> Settings to configure your API keys and Webhook verify tokens.
- Configure webhook URLs in your respective social media developer portals.
FAQ
-
Does this require Zapier?
-
No, this plugin uses direct webhooks to capture leads, saving you from third-party subscription costs.
-
Is my data secure?
-
Yes, the plugin uses HMAC SHA-256 signature verification for incoming webhooks and encrypts all sensitive API keys in the database using AES-256-CBC encryption.
-
What permissions do I need from Facebook?
-
You need “pages_show_list”, “pages_read_engagement”, and “leads_retrieval” permissions for your Facebook app, along with a valid Page Access Token.
-
Does the plugin store data externally?
-
No. All lead data is stored locally in your WordPress database as custom post type entries. The only external communication is fetching lead details from the respective platform APIs when a webhook notification arrives.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Techved Lead Manager” is open source software. The following people have contributed to this plugin.
ContributorsTranslate “Techved Lead Manager” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.3.0
- Added rate limiting (60 requests per minute per IP) to all webhook endpoints.
- Added optional IP whitelisting for additional webhook security.
- Improved sanitization for API credential fields to preserve special characters needed for tokens.
- Enhanced security documentation in settings page.
- All prefixing standards verified and documented (classes: TVSLM_, functions: tvslm_, options: tvslm_, meta: tvslm_lead).
1.2.0
- Renamed plugin to “Techved Lead Manager” for ww.wp.xz.cn compliance.
- Added full third-party service disclosure documentation.
- Enforced mandatory HMAC signature verification on all webhook endpoints.
- Added unique
_tvslm_prefix to all meta keys to avoid naming collisions. - Improved sanitization of API credential fields.
- Fixed security issue where verify token was exposed in error responses.
1.1.0
- Improved admin dashboard design.
- Added lead export functionality.
- Integrated security enhancements.
- Centralized settings under Social Leads menu.
1.0.0
- Initial release.