[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flPUoiBN2n1KbcmbjFrpcKRjW3uKsbxJkIiCbGj9fErw":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":35,"analysis":129,"fingerprints":237},"absoluto-access-gate","Absoluto Access Gate","1.0.0","Absoluto Designs","https:\u002F\u002Fprofiles.wordpress.org\u002Fabsolutodesigns\u002F","\u003Cp>Absoluto Access Gate is a flexible WordPress access-control plugin that allows you to require user login across your site while offering precise control over who can access what. It is designed for site owners who need reliable login enforcement without sacrificing usability or performance.\u003C\u002Fp>\n\u003Cp>Many sites require authentication for content access but still need exceptions for specific pages, users, or integrations. Absoluto Access Gate provides a structured and predictable way to enforce login rules while supporting common real-world scenarios such as public landing pages, APIs, feeds, and temporary access needs.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Author:\u003C\u002Fstrong> Absoluto Designs\u003Cbr \u002F>\n\u003Cstrong>Author URI:\u003C\u002Fstrong> http:\u002F\u002Fabsolutodesigns.com\u003Cbr \u002F>\n\u003Cstrong>Plugin URI:\u003C\u002Fstrong> https:\u002F\u002Fabsolutodesigns.com\u002Fplugins\u002Fabsoluto-access-gate\u002F\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Force login requirement for all pages\u003C\u002Fli>\n\u003Cli>Enable\u002FDisable toggle without deactivating plugin\u003C\u002Fli>\n\u003Cli>Exclude specific pages from login requirement\u003C\u002Fli>\n\u003Cli>Exclude page templates from login requirement\u003C\u002Fli>\n\u003Cli>Exclude post types, categories, and tags\u003C\u002Fli>\n\u003Cli>Allow specific user roles to bypass login requirement\u003C\u002Fli>\n\u003Cli>Allow specific users to bypass login requirement\u003C\u002Fli>\n\u003Cli>IP whitelist with CIDR notation support\u003C\u002Fli>\n\u003Cli>Bypass key\u002Ftoken for temporary access\u003C\u002Fli>\n\u003Cli>Custom login page URL\u003C\u002Fli>\n\u003Cli>Custom redirect after login\u003C\u002Fli>\n\u003Cli>Maintenance mode with custom messages\u003C\u002Fli>\n\u003Cli>RSS feed and REST API exclusion options\u003C\u002Fli>\n\u003Cli>AJAX request exclusion\u003C\u002Fli>\n\u003Cli>Archive and search page exclusion\u003C\u002Fli>\n\u003Cli>Easy-to-use admin settings page with 2-column layout\u003C\u002Fli>\n\u003Cli>Clean and modern UI with enhanced multi-select dropdowns (uses native HTML5 selects, WordPress.org compliant)\u003C\u002Fli>\n\u003Cli>Quick add current IP to whitelist button\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Cp>After activating the plugin, navigate to \u003Cstrong>Settings > Absoluto Access Gate\u003C\u002Fstrong> to configure:\u003C\u002Fp>\n\u003Ch3>Excluded Pages\u003C\u002Fh3>\n\u003Cp>Select pages that should be accessible without login. These pages will be publicly accessible even when the plugin is active.\u003C\u002Fp>\n\u003Ch3>Excluded Page Templates\u003C\u002Fh3>\n\u003Cp>Select page templates that should be accessible without login. All pages using these templates will be publicly accessible.\u003C\u002Fp>\n\u003Ch3>Bypass Roles\u003C\u002Fh3>\n\u003Cp>Select user roles that can bypass the login requirement. Users with these roles can view all pages without being redirected to login.\u003C\u002Fp>\n\u003Ch3>Bypass Users\u003C\u002Fh3>\n\u003Cp>Select specific users that can bypass the login requirement. These users can view all pages without being redirected to login.\u003C\u002Fp>\n\u003Ch3>How It Works\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>When a user visits any page on your site, the plugin checks:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>If the user is logged in and has bypass permission (role or user)\u003C\u002Fli>\n\u003Cli>If the current page is excluded\u003C\u002Fli>\n\u003Cli>If the current page uses an excluded template\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>If none of the above conditions are met and the user is not logged in, they are redirected to the WordPress login page.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>After logging in, users are redirected back to the page they were trying to access.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Requirements\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>WordPress:\u003C\u002Fstrong> 5.0 or higher\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PHP:\u003C\u002Fstrong> 7.0 or higher\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Tested up to:\u003C\u002Fstrong> WordPress 6.4\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Network:\u003C\u002Fstrong> Not compatible with WordPress Multisite network activation\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For issues, questions, or contributions, please visit the \u003Ca href=\"https:\u002F\u002Fabsolutodesigns.com\u002Fplugins\u002Fabsoluto-access-gate\u002F\" rel=\"nofollow ugc\">plugin page\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>GPL v2 or later\u003C\u002Fp>\n","Force users to login before viewing pages. Exclude specific pages and allow certain user roles\u002Fusers to bypass the requirement.",0,123,"2026-01-27T10:51:00.000Z","6.9.4","5.0","7.0",[18,19,20,21,22],"access-control","force-login","login","restrict-access","security","https:\u002F\u002Fabsolutodesigns.com\u002Fplugins\u002Fabsoluto-access-gate\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fabsoluto-access-gate.1.0.0.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"absolutodesigns",1,30,94,"2026-04-04T03:52:14.447Z",[36,54,73,92,110],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":25,"num_ratings":46,"last_updated":47,"tested_up_to":14,"requires_at_least":15,"requires_php":48,"tags":49,"homepage":52,"download_link":53,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"easy-basic-authentication","Easy Basic Authentication – Add basic auth to site or admin area","3.9.1","Matteo Enna","https:\u002F\u002Fprofiles.wordpress.org\u002Fmatteoenna\u002F","\u003Cp>The Easy Basic Authentication plugin provides a simple method to add basic authentication to your WordPress site. You can enable basic authentication for the entire site or only for the admin area by setting a custom username and password. Secure your site by restricting access only to authorized users.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Try it on a free mock site: \u003Ca href=\"https:\u002F\u002Ftastewp.org\u002Fplugins\u002Feasy-basic-authentication\u002F\" rel=\"nofollow ugc\">click here\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Simple Configuration:\u003C\u002Fstrong> With Easy Basic Authentication, you can easily set up basic authentication for your entire website or specifically for the admin area. Set a custom username and password to ensure secure access.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Admin Area Protection:\u003C\u002Fstrong> If you wish to restrict access to your WordPress admin area, Easy Basic Authentication allows you to do so quickly and effectively. Only users with the correct credentials will be able to access this critical part of your site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Entire site protection:\u003C\u002Fstrong> If you wish, there is an option to extend the access limitation to the entire site and not just for your WordPress admin area, Easy Basic authentication allows you to do this quickly and effectively. Only users with the correct credentials will be able to access this critical part of your site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Failed Access Logging:\u003C\u002Fstrong> The plugin keeps track of failed login attempts, helping you identify unauthorized access attempts. This is particularly useful for monitoring your site’s security.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Access Log:\u003C\u002Fstrong> If you choose to enable this feature, Easy Basic Authentication allows you to log successful logins, providing a comprehensive overview of login activities on your site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Easy Management:\u003C\u002Fstrong> The plugin’s intuitive interface makes it simple to manage basic authentication settings. You can easily enable or disable basic authentication and adjust credentials to suit your needs.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Email Alert Functionality:\u003C\u002Fstrong> Easy Basic Authentication includes an email alert feature to notify you of unauthorized access attempts. You can receive email alerts when someone tries to access your site without proper credentials.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>White List Functionality:\u003C\u002Fstrong> Easy Basic Authentication now includes a White List feature, allowing you to specify trusted IP addresses exempt from basic authentication. Configure this list to grant immediate access to known users or systems without requiring credentials, enhancing convenience while maintaining security.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Protect your WordPress site with basic authentication quickly and reliably. Easy Basic Authentication gives you control to ensure that only authorized users can access your online resources. Maintain your site’s security and prevent unwanted access today with Easy Basic Authentication.\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Visit the plugin settings page to configure your desired basic authentication options.\u003C\u002Fli>\n\u003Cli>Choose whether to enable basic authentication for the entire site or just the admin area.\u003C\u002Fli>\n\u003Cli>Set a custom username and password for secure access.\u003C\u002Fli>\n\u003Cli>Monitor failed access attempts and access logs for added security.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Troubleshooting: Resetting Basic Authentication\u003C\u002Fh3>\n\u003Cp>If you’re having trouble logging in due to the basic authentication, you can reset it and regain access by following these steps:\u003C\u002Fp>\n\u003Cp>1 \u003Cstrong>Connect to your website via FTP.\u003C\u002Fstrong>\u003Cbr \u002F>\n2 \u003Cstrong>Navigate to the plugin directory:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>wp-content\u002Fplugins\u002Feasy-basic-authentication\u002Fclass\u002F\u003C\u002Fpre>\n\u003Cp>3 \u003Cstrong>Locate the file:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>easy-basic-authentication-class.php\u003C\u002Fpre>\n\u003Cp>4 \u003Cstrong>Find the following line:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>add_action( 'init', array($this,'basic_auth_admin') );\u003C\u002Fpre>\n\u003Cp>5 \u003Cstrong>Comment out that line\u003C\u002Fstrong> by adding a \u003Ccode>#\u003C\u002Fcode> at the beginning:\u003C\u002Fp>\n\u003Cpre>#add_action( 'init', array($this,'basic_auth_admin') );\u003C\u002Fpre>\n\u003Cp>6 \u003Cstrong>Save the file\u003C\u002Fstrong> and re-upload it to your server.\u003C\u002Fp>\n\u003Cp>This will disable the basic authentication temporarily, allowing you to log in. Once logged in, you can adjust the plugin settings as needed.\u003C\u002Fp>\n\u003Cp>If you need further assistance, feel free to reach out.\u003C\u002Fp>\n\u003Ch3>GitHub Repository\u003C\u002Fh3>\n\u003Cp>You can find the source code and contribute to the project on GitHub: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FEllusu\u002Feasy-basic-authentication\" rel=\"nofollow ugc\">Easy Basic Authentication on GitHub\u003C\u002Fa>\u003C\u002Fp>\n","Secure your WordPress site with easy and effective basic authentication. Restrict access, monitor attempts, and enhance security.",600,11185,3,"2025-12-03T06:03:00.000Z","7.2.5",[18,50,20,22,51],"authentication","wordpress-security","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-basic-authentication.3.9.1.zip",{"slug":55,"name":56,"version":57,"author":58,"author_profile":59,"description":60,"short_description":61,"active_installs":62,"downloaded":63,"rating":25,"num_ratings":64,"last_updated":65,"tested_up_to":66,"requires_at_least":67,"requires_php":68,"tags":69,"homepage":71,"download_link":72,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"attributes-user-access","Attributes User Access","1.2.2","Attributes WP","https:\u002F\u002Fprofiles.wordpress.org\u002Fattributeswp\u002F","\u003Cp>Attributes User Access is a lightweight and flexible authentication solution for WordPress. It empowers site administrators with detailed control over login processes, enhancing user authentication and access experience with a focus on security and performance.\u003C\u002Fp>\n\u003Ch4>Core Features\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Custom Login Page Creation\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Generate fully integrated login pages with WordPress\u003C\u002Fli>\n\u003Cli>Use shortcode-based forms for easy theme compatibility\u003C\u002Fli>\n\u003Cli>Automatically adapts to WordPress core updates\u003C\u002Fli>\n\u003Cli>Template override system for complete customization\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Flexible Login Redirection\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Redirect native WordPress login requests\u003C\u002Fli>\n\u003Cli>Define role-based and context-aware redirection rules\u003C\u002Fli>\n\u003Cli>Custom redirect URLs per user role\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Developer-Focused Architecture\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>PSR-4 autoloading and object-oriented design\u003C\u002Fli>\n\u003Cli>Extensible with action and filter hooks\u003C\u002Fli>\n\u003Cli>Modular components for easy customization\u003C\u002Fli>\n\u003Cli>Comprehensive API for extensions\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Security & Performance\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>WordPress.org compliant security practices\u003C\u002Fli>\n\u003Cli>Nonce verification on all forms and AJAX requests\u003C\u002Fli>\n\u003Cli>Transient-based error handling (no PHP sessions)\u003C\u002Fli>\n\u003Cli>Optimized asset loading\u003C\u002Fli>\n\u003Cli>Minified CSS and JavaScript for production\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Shortcode Usage\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Basic login form:\u003C\u002Fstrong>\u003Cbr \u002F>\n    [attributes_login_form]\u003C\u002Fp>\n\u003Cp>\u003Cstrong>With parameters:\u003C\u002Fstrong>\u003Cbr \u002F>\n    [attributes_login_form redirect=”\u002Fdashboard” remember=”false”]\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Available parameters:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>redirect\u003C\u002Fcode> – Target URL after login (default: Dashboard)\u003C\u002Fli>\n\u003Cli>\u003Ccode>remember\u003C\u002Fcode> – Show “Remember Me” checkbox (default: true)\u003C\u002Fli>\n\u003Cli>\u003Ccode>form_id\u003C\u002Fcode> – Custom form identifier (default: attributes_login_form)\u003C\u002Fli>\n\u003Cli>\u003Ccode>label_username\u003C\u002Fcode> – Custom username field label\u003C\u002Fli>\n\u003Cli>\u003Ccode>label_password\u003C\u002Fcode> – Custom password field label\u003C\u002Fli>\n\u003Cli>\u003Ccode>label_remember\u003C\u002Fcode> – Custom remember me label\u003C\u002Fli>\n\u003Cli>\u003Ccode>label_log_in\u003C\u002Fcode> – Custom login button text\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Template System\u003C\u002Fh4>\n\u003Ch4>Template System\u003C\u002Fh4>\n\u003Cp>Override templates in your theme for complete customization.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Template location in theme:\u003C\u002Fstrong>\u003Cbr \u002F>\n    your-theme\u002Fattributes\u002Ffront\u002Fforms\u002Flogin-form.php\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Original template location:\u003C\u002Fstrong>\u003Cbr \u002F>\n    wp-content\u002Fplugins\u002Fattributes-user-access\u002Ftemplates\u002Ffront\u002Fforms\u002Flogin-form.php\u003C\u002Fp>\n\u003Cp>Copy the original template to your theme and customize as needed. The plugin automatically uses your theme’s template when available.\u003C\u002Fp>\n\u003Ch4>Developer Hooks\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Actions:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>attrua_before_login_form\u003C\u002Fcode> – Fires before rendering the login form wrapper\u003C\u002Fli>\n\u003Cli>\u003Ccode>attrua_after_login_form\u003C\u002Fcode> – Fires after rendering the login form\u003C\u002Fli>\n\u003Cli>\u003Ccode>attrua_login_form_fields\u003C\u002Fcode> – Hook for adding custom fields to login form\u003C\u002Fli>\n\u003Cli>\u003Ccode>attrua_login_failed\u003C\u002Fcode> – Fires when a login attempt fails\u003C\u002Fli>\n\u003Cli>\u003Ccode>attrua_successful_login\u003C\u002Fcode> – Fires after successful authentication\u003C\u002Fli>\n\u003Cli>\u003Ccode>attrua_before_page_creation\u003C\u002Fcode> – Fires before creating authentication pages\u003C\u002Fli>\n\u003Cli>\u003Ccode>attrua_after_page_creation\u003C\u002Fcode> – Fires after creating authentication pages\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Filters:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>attrua_login_redirect_url\u003C\u002Fcode> – Customize login redirection\u003C\u002Fli>\n\u003Cli>\u003Ccode>attrua_login_error_message\u003C\u002Fcode> – Modify login error messages\u003C\u002Fli>\n\u003Cli>\u003Ccode>attrua_login_credentials\u003C\u002Fcode> – Filter login credentials before authentication\u003C\u002Fli>\n\u003Cli>\u003Ccode>attrua_action_links\u003C\u002Fcode> – Modify plugin action links\u003C\u002Fli>\n\u003Cli>\u003Ccode>attrua_row_meta\u003C\u002Fcode> – Modify plugin row meta links\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>Attributes User Access does not:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Collect any user data\u003C\u002Fli>\n\u003Cli>Send data to external servers\u003C\u002Fli>\n\u003Cli>Use cookies for tracking\u003C\u002Fli>\n\u003Cli>Store sensitive information\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The plugin only stores:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Plugin settings in WordPress options table\u003C\u002Fli>\n\u003Cli>Temporary error messages in WordPress transients (auto-expire)\u003C\u002Fli>\n\u003Cli>Page IDs for custom authentication pages\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>All data is stored locally in your WordPress database and is completely removed upon plugin uninstallation.\u003C\u002Fp>\n\u003Ch3>Support & Contributing\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Documentation:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fattributeswp.com\u002Fdocs\" rel=\"nofollow ugc\">https:\u002F\u002Fattributeswp.com\u002Fdocs\u003C\u002Fa>\u003Cbr \u002F>\n\u003Cstrong>Support Forum:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fattributes-user-access\" rel=\"ugc\">https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fattributes-user-access\u003C\u002Fa>\u003Cbr \u002F>\n\u003Cstrong>GitHub Repository:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fattributeswp\u002Fattributes-user-access\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Fattributeswp\u002Fattributes-user-access\u003C\u002Fa>\u003Cbr \u002F>\n\u003Cstrong>Report Issues:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fattributeswp\u002Fattributes-user-access\u002Fissues\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Fattributeswp\u002Fattributes-user-access\u002Fissues\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Contributions are welcome! Please feel free to submit pull requests or open issues on GitHub.\u003C\u002Fp>\n","Lightweight WordPress authentication with custom login pages, role-based redirections, and secure user access control.",20,529,2,"2026-02-10T16:59:00.000Z","6.7.5","5.8","7.4",[18,50,70,20,22],"custom-login","https:\u002F\u002Fattributeswp.com\u002F#features","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fattributes-user-access.1.2.2.zip",{"slug":74,"name":74,"version":75,"author":76,"author_profile":77,"description":78,"short_description":79,"active_installs":80,"downloaded":81,"rating":11,"num_ratings":11,"last_updated":82,"tested_up_to":83,"requires_at_least":39,"requires_php":52,"tags":84,"homepage":89,"download_link":90,"security_score":91,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"dpabadbotwp","1.27 [20200927]","peter achutha","https:\u002F\u002Fprofiles.wordpress.org\u002Fpeter-achutha\u002F","\u003Cp>The Bad Bot Exterminator Pro is a php program that was developed to block hacker attacks on WordPress websites. Please visit the website at https:\u002F\u002Fwww.drpeterscode.com for more details on the Bad bot Exterminator that blocks hackers, stops brute force login attempts and defends against ddos attacks.\u003C\u002Fp>\n\u003Cp>As of 2018 there are two versions of the Bad Bot Exterminator – the Free Version and the Pro Version which is within the budget of most people. There have been many improvements over the last 5.5 years and is much easier to use. The Free version has been discontinued.\u003C\u002Fp>\n\u003Cp>This plugin, dpabadbotwp works with both the Bad Bot Exterminator Pro & Free versions. The Bad Bot Exterminator is a firewall to protect your WordPress website and is not a plugin but an independent PHP program that runs in parallel with WordPress.\u003C\u002Fp>\n\u003Cp>With the Bad Bot Exterminator\u003Cbr \u002F>\ni. you can lock up your WordPress site so that no one can login to your site.\u003Cbr \u002F>\nii. will track and record every visitor and decides who should be allowed to access your website. It tries to block hackers, bad bots, scrappers, crawlers, spiders, … It can block by IP address or by name of web crawler (in Lenient mode).\u003C\u002Fp>\n\u003Cp>This WordPress plugin, dpaBadBotWP was developed to tell the Bad Bot Exterminator when you are working on your WordPress site and allows you to carry on working by sending your IP address to Bad Bot Exterminator and thereby allowing you unlimited access to your website. By its self this plugin will not be useful if you have not a installed Bad Bot Exterminator.\u003C\u002Fp>\n\u003Cp>It now stops automatic WordPress core updates so that the Bad Bot Exterminator will not be erased.\u003C\u002Fp>\n\u003Cp>Do visit our site https:\u002F\u002Fwww.drpeterscode.com\u002Findex.php for more information on the Bad Bot Exterminator\u003C\u002Fp>\n\u003Ch3>1.01\u003C\u002Fh3>\n\u003Cp>Previous version forgot to check ip address when logged into WordPress control panel. This version corrects that. The moment you are logged in, your current IP address is sent to dpaBadBot.\u003C\u002Fp>\n\u003Ch3>1.02\u003C\u002Fh3>\n\u003Cp>Added a better description of products offered by Software Propulsion with links to respective websites\u003C\u002Fp>\n\u003Ch3>1.03\u003C\u002Fh3>\n\u003Cp>Changed all file names to lower case so that they will be compatible with all servers. If you are upgrading and the plugin has problems accessing files, DELETE this plugin and reinstall the plugin.\u003C\u002Fp>\n\u003Ch3>1.04\u003C\u002Fh3>\n\u003Cp>dpaBadBot PHP program was upgraded to allow you to preview your edited posts. So this plugin had extra security feature added to work with these dpaBadBot upgrades.\u003C\u002Fp>\n\u003Ch3>1.05\u003C\u002Fh3>\n\u003Cp>Removed the check for logout as not a good idea.\u003C\u002Fp>\n\u003Ch3>1.06\u003C\u002Fh3>\n\u003Cp>Changed which ip address is saved. Only latest IP address is saved and all older one’s are deleted.\u003C\u002Fp>\n\u003Ch3>1.07\u003C\u002Fh3>\n\u003Cp>Added multiuser tracking. This version to be used with version 1.06 or later or the Bad Bot Exterminator.\u003C\u002Fp>\n\u003Ch3>1.08\u003C\u002Fh3>\n\u003Cp>Stops automatic WordPress core updates by setting filter ‘auto_update_core’ to ‘__return_false’.\u003C\u002Fp>\n\u003Ch3>1.09\u003C\u002Fh3>\n\u003Cp>Made the PHP code more compatible with the WordPress style by using the debug setting in wp-config.php\u003C\u002Fp>\n\u003Ch3>1.10\u003C\u002Fh3>\n\u003Cp>Corrected some bugs. The directory name can now end with or without ‘\u002F’.\u003C\u002Fp>\n\u003Ch3>1.11\u003C\u002Fh3>\n\u003Cp>Undid some of the upgrades in 1.09 to make it less prone to spurios memory problems.\u003C\u002Fp>\n\u003Ch3>1.12\u003C\u002Fh3>\n\u003Cp>Made some code more compatible with WordPress and checked if file existed.\u003C\u002Fp>\n\u003Ch3>1.13\u003C\u002Fh3>\n\u003Cp>Found out that when you upgrade any plugin, WordPress will delete the existing plugin before downloading the upgrade version. Since this plugin saves all settings in the plugin directory all settings were lost upon upgrading. With version 1.13 a separate directory is created …\u002Fwp-contents\u002Fplugins\u002Fdpabadbotwpdata\u002F and all settings are saved in the altrnative sub-directory. Thus even after upgrading the original seetings are still available.\u003C\u002Fp>\n\u003Cp>Changed all variable names to begin with $spmywp_.\u003C\u002Fp>\n\u003Ch3>1.14\u003C\u002Fh3>\n\u003Cp>changed permission of …\u002Fwp-content\u002Fplugins\u002Fdpabadbotwpdata\u002F sub-directory to 0775 & stop recording visitors not logged in\u003C\u002Fp>\n\u003Ch3>1.15\u003C\u002Fh3>\n\u003Cp>added display of memory in MB too.\u003C\u002Fp>\n\u003Ch3>1.16\u003C\u002Fh3>\n\u003Cp>corrected the link to two other websites.\u003C\u002Fp>\n\u003Ch3>1.17\u003C\u002Fh3>\n\u003Cp>Added display ID and username of those who logged in and moved data directory to \u002Fuploads\u002F directory in line with WordPress standard. As of 2017 March 09, it shows which pages, posts or WP files were accessed. This if for you to look at who logged in and what they did to your copy of WordPress.\u003C\u002Fp>\n\u003Ch3>1.18\u003C\u002Fh3>\n\u003Cp>This plugin now tracks which pages, posts or WP files were accessed. This if for you to look at who logged in and what they did to your copy of WordPress.\u003C\u002Fp>\n\u003Ch3>1.19\u003C\u002Fh3>\n\u003Cp>Version 1.18 had a array assigned wrongly. Its fixed with this version. The table showing who logged and where they went was corrected.\u003C\u002Fp>\n\u003Ch3>1.20\u003C\u002Fh3>\n\u003Cp>Version 1.19 had a searched file name wrong. Its corrected.\u003C\u002Fp>\n\u003Ch3>1.21\u003C\u002Fh3>\n\u003Cp>Removed session start as it was closing the Bad Bot Exterminator when logging out of WordPress. Changed the comments.\u003C\u002Fp>\n\u003Ch3>1.22\u003C\u002Fh3>\n\u003Cp>Tracing of pages added. Removed ‘\u002F’ from data sent to The Bad Bot Exterminator.\u003C\u002Fp>\n\u003Ch3>1.23\u003C\u002Fh3>\n\u003Cp>Tried to improve PHP code speed \u002F effeciency. Declared undefined variables. Added Speed Check for WordPress webpages through the Bad Bot Exterminator Pro. Changed all links to new website at https:\u002F\u002Fwww.drpeterscode.com\u003C\u002Fp>\n\u003Ch3>1.24\u003C\u002Fh3>\n\u003Cp>added .htaccess file to uploads directory\u003C\u002Fp>\n\u003Ch3>1.25\u003C\u002Fh3>\n\u003Cp>added code to generate sitemap data\u003C\u002Fp>\n\u003Ch3>1.26\u003C\u002Fh3>\n\u003Cp>correcter variable name is php shutdown function and improved speed test\u003C\u002Fp>\n\u003Ch3>1.27\u003C\u002Fh3>\n\u003Cp>corrected detection of undefined array\u003C\u002Fp>\n","This plugin, dpaBadBotWP, automatically tells Bad Bot Exterminator firewall software, your current IP address and you will not be blocked from working &hellip;",10,3570,"2020-09-27T08:27:00.000Z","5.5.18",[85,86,87,88,22],"bad-bot","block-hackers","brute-force-login","hack","https:\u002F\u002Fwww.drpeterscode.com\u002Fbad-bot-exterminator-protects-wordpress-sites-from-hackers-cyber-ddos-dos-attacks.php","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdpabadbotwp.zip",85,{"slug":93,"name":94,"version":95,"author":96,"author_profile":97,"description":98,"short_description":99,"active_installs":80,"downloaded":100,"rating":25,"num_ratings":31,"last_updated":101,"tested_up_to":102,"requires_at_least":103,"requires_php":52,"tags":104,"homepage":52,"download_link":109,"security_score":91,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"login-mandatory-pages","Login Mandatory Pages","1.2","dinesh224","https:\u002F\u002Fprofiles.wordpress.org\u002Fdinesh224\u002F","\u003Cp>Login Mandatory pages is a good handy and free solution for everyone who is looking to convert their simple pages to only accessible for logged in user.\u003Cbr \u002F>\nIt also provides setting to users to modify text on selected pages and also users can set their “login” page link.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Login Mandatory pages\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy to install\u003C\u002Fli>\n\u003Cli>Select the pages which you want to inaccessible for guest users\u003C\u002Fli>\n\u003Cli>You can set message on selected pages.\u003C\u002Fli>\n\u003Cli>You can also add a link of your website’s login page.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fblockquote>\n","Login Mandatory pages is a WordPress plugin that allows you to make pages accessible for only logged in users.",1302,"2017-10-04T11:21:00.000Z","4.8.28","4.0",[105,19,106,107,108],"control-pages","login-page","login-pages","user-access-control","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flogin-mandatory-pages.1.2.zip",{"slug":111,"name":112,"version":113,"author":114,"author_profile":115,"description":116,"short_description":117,"active_installs":80,"downloaded":118,"rating":25,"num_ratings":31,"last_updated":119,"tested_up_to":120,"requires_at_least":121,"requires_php":122,"tags":123,"homepage":126,"download_link":127,"security_score":128,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"passwordsentry","PasswordSentry","1.0.15","DJ Abrams","https:\u002F\u002Fprofiles.wordpress.org\u002Flionsgate\u002F","\u003Cp>\u003Cstrong>Password Sentry\u003C\u002Fstrong> (PS) is the \u003Cstrong>must-have\u003C\u002Fstrong> application for every membership site! We developed and released Password Sentry in 1999. Password Sentry was groundbreaking as the first application of its kind. Password Sentry continues to be groundbreaking as we grow and re-invent Password Sentry to continue to be the leader in the industry – exceeding anything our competition offers. Password Sentry is an affordable and reliable tool used by thousands of clients to secure and protect thousands of websites from password trading and dictionary \u002F brute force attacks: saving webmasters hundreds or thousands of dollars each year in extra bandwidth, and lost sales. Password Sentry is a free Open Source App.\u003C\u002Fp>\n\u003Cp>WordPress (WP) has become a CMS (Content Management System) for many webmasters. In particular, paysite webmasters who offer paid memberships. To that end, we have seen an explosion of apps and WP plugins that enhance the membership functionality of WP. Our plugin is the perfect fit to WP and those plugins. PasswordSentry Plugin hooks into the WP Login to track and log logins to detect and block password sharing and compromised passwords. The PasswordSentry Plugin protects your members and your WP from hackers trying to access your members WP accounts. It also protects your bottom line if you run a paysite by blocking members from sharing their passwords with others. The PasswordSentry Plugin depends on the Password Sentry App: \u003Ca href=\"https:\u002F\u002Fwww.password-sentry.com\u002F\" title=\"Password Sentry\" rel=\"nofollow ugc\">Password Sentry\u003C\u002Fa>. The Password Sentry App includes a standalone, web-based control panel (PS AdminCP) to manage Password Sentry App and logged WP users.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>o\u003C\u002Fstrong> Detect and block password sharing via UserTracking and GeoTracking technology\u003C\u002Fp>\n\u003Cp>\u003Cstrong>o\u003C\u002Fstrong> Web-based control panel to administer Password Sentry App, and monitor \u002F manage users\u003C\u002Fp>\n\u003Cp>\u003Cstrong>o\u003C\u002Fstrong> Priority Support [Fee-Based]\u003C\u002Fp>\n\u003Cp>\u003Cstrong>o\u003C\u002Fstrong> FREE Regular Forum Support\u003C\u002Fp>\n\u003Cp>\u003Cstrong>o\u003C\u002Fstrong> FREE updates\u003C\u002Fp>\n\u003Cp>\u003Cstrong>o\u003C\u002Fstrong> Unlimited Domains\u003C\u002Fp>\n\u003Cp>\u003Cstrong>o\u003C\u002Fstrong> Capability to block logins from specified countries, and\u002For IP addresses\u003C\u002Fp>\n\u003Cp>\u003Cstrong>o\u003C\u002Fstrong> Monitor and throttle per-user bandwidth\u003C\u002Fp>\n\u003Cp>Before you use this plugin, you must FIRST install the Password Sentry App. Once the Password Sentry App is fully installed and configured, you can then activate and configure the PasswordSentry Plugin. This plugin monitors WP logins, checking for password sharing. If password sharing is detected for a given user, that user is automatically suspended, and you are emailed. Suspended users can either be manually restored via PS AdminCP, or you can setup a cron job to automatically restore suspended users after XX minutes.\u003C\u002Fp>\n","Secure WordPress by detecting shared passwords, and blocking password sharing. The plugin integrates Password Sentry app into WP to track logins.",3779,"2024-10-04T15:44:00.000Z","6.6.5","5.7.2","5.6",[18,20,124,125,22],"login-security","protection","https:\u002F\u002Fwww.password-sentry.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpasswordsentry.zip",92,{"attackSurface":130,"codeSignals":173,"taintFlows":181,"riskAssessment":233,"analyzedAt":236},{"hooks":131,"ajaxHandlers":169,"restRoutes":170,"shortcodes":171,"cronEvents":172,"entryPointCount":11,"unprotectedCount":11},[132,138,140,144,148,152,156,160,165],{"type":133,"name":134,"callback":135,"file":136,"line":137},"action","admin_notices","closure","absoluto-access-gate.php",24,{"type":133,"name":134,"callback":135,"file":136,"line":139},38,{"type":133,"name":141,"callback":142,"file":136,"line":143},"template_redirect","force_login_redirect",79,{"type":133,"name":145,"callback":146,"file":136,"line":147},"admin_menu","add_admin_menu",80,{"type":133,"name":149,"callback":150,"file":136,"line":151},"admin_init","register_settings",81,{"type":133,"name":153,"callback":154,"file":136,"line":155},"admin_enqueue_scripts","enqueue_admin_scripts",82,{"type":133,"name":157,"callback":158,"file":136,"line":159},"login_message","display_login_message",83,{"type":133,"name":161,"callback":162,"priority":163,"file":136,"line":164},"admin_bar_menu","add_admin_bar_notice",999,84,{"type":133,"name":166,"callback":167,"file":136,"line":168},"plugins_loaded","absacga_init",2207,[],[],[],[],{"dangerousFunctions":174,"sqlUsage":175,"outputEscaping":177,"fileOperations":11,"externalRequests":11,"nonceChecks":31,"capabilityChecks":46,"bundledLibraries":180},[],{"prepared":11,"raw":11,"locations":176},[],{"escaped":178,"rawEcho":11,"locations":179},98,[],[],[182,219],{"entryPoint":183,"graph":184,"unsanitizedCount":11,"severity":218},"render_settings_page (absoluto-access-gate.php:1596)",{"nodes":185,"edges":213},[186,191,197,201,206,210],{"id":187,"type":188,"label":189,"file":136,"line":190},"n0","source","$_POST (x21)",1609,{"id":192,"type":193,"label":194,"file":136,"line":195,"wp_function":196},"n1","sink","update_option() [Settings Manipulation]",1610,"update_option",{"id":198,"type":188,"label":199,"file":136,"line":200},"n2","$_POST (x8)",1703,{"id":202,"type":193,"label":203,"file":136,"line":204,"wp_function":205},"n3","echo() [XSS]",2015,"echo",{"id":207,"type":188,"label":208,"file":136,"line":209},"n4","$_SERVER (x2)",1796,{"id":211,"type":193,"label":203,"file":136,"line":212,"wp_function":205},"n5",2019,[214,216,217],{"from":187,"to":192,"sanitized":215},true,{"from":198,"to":202,"sanitized":215},{"from":207,"to":211,"sanitized":215},"low",{"entryPoint":220,"graph":221,"unsanitizedCount":11,"severity":218},"\u003Cabsoluto-access-gate> (absoluto-access-gate.php:0)",{"nodes":222,"edges":229},[223,224,225,226,227,228],{"id":187,"type":188,"label":189,"file":136,"line":190},{"id":192,"type":193,"label":194,"file":136,"line":195,"wp_function":196},{"id":198,"type":188,"label":199,"file":136,"line":200},{"id":202,"type":193,"label":203,"file":136,"line":204,"wp_function":205},{"id":207,"type":188,"label":208,"file":136,"line":209},{"id":211,"type":193,"label":203,"file":136,"line":212,"wp_function":205},[230,231,232],{"from":187,"to":192,"sanitized":215},{"from":198,"to":202,"sanitized":215},{"from":207,"to":211,"sanitized":215},{"summary":234,"deductions":235},"The plugin 'absoluto-access-gate' v1.0.0 demonstrates a strong security posture based on the provided static analysis. The absence of any identified dangerous functions, file operations, or external HTTP requests is highly commendable. Furthermore, all SQL queries are properly prepared, and output escaping is implemented consistently, indicating good developer practices in preventing common web vulnerabilities like SQL injection and cross-site scripting. The presence of nonce and capability checks, even with a small attack surface, suggests an awareness of secure coding principles.\n\nThe limited attack surface of this plugin, with zero AJAX handlers, REST API routes, shortcodes, and cron events, significantly reduces the potential for exploitation. The taint analysis revealing no unsanitized paths further reinforces the low risk profile of the code itself. The plugin's vulnerability history is also clean, with zero recorded CVEs, which is a positive indicator of its historical security.\n\nWhile the plugin appears robust, the analysis is based on a single version, v1.0.0. A lack of historical vulnerabilities does not guarantee future security. The small attack surface and limited functionality might also contribute to the current lack of identified issues. Overall, the plugin exhibits good security practices, with no immediate or evident critical vulnerabilities detected in this analysis, making it a low-risk option at present.",[],"2026-03-17T06:23:50.425Z",{"wat":238,"direct":247},{"assetPaths":239,"generatorPatterns":242,"scriptPaths":243,"versionParams":244},[240,241],"\u002Fwp-content\u002Fplugins\u002Fabsoluto-access-gate\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fabsoluto-access-gate\u002Fjs\u002Fadmin.js",[],[],[245,246],"absoluto-access-gate\u002Fcss\u002Fadmin.css?ver=","absoluto-access-gate\u002Fjs\u002Fadmin.js?ver=",{"cssClasses":248,"htmlComments":251,"htmlAttributes":254,"restEndpoints":256,"jsGlobals":257,"shortcodeOutput":259},[249,250],"absacga-admin-wrap","absacga-notice",[252,253],"\u003C!-- Absoluto Access Gate Admin Settings -->","\u003C!-- Absoluto Access Gate Admin Notice -->",[255],"data-absacga-setting",[],[258],"absacga_vars",[]]