[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhsVrdmlA6YQwlRO_6xLFIf8E2tUnmeR44zs7A8iieRw":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":22,"download_link":23,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":36,"analysis":139,"fingerprints":211},"admin-bar-user-switching","Admin Bar User Switching","1.4","Saad Iqbal","https:\u002F\u002Fprofiles.wordpress.org\u002Fsaadiqbal\u002F","\u003Cp>This plugin was originally developed by \u003Ca href=\"https:\u002F\u002Fmarkwilkinson.me\u002F\" rel=\"nofollow ugc\">Mark Wilkinson\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>An admin bar “Switch to User” option is provided which on hover provides a search box where you can query a user to switch to. The results are links to switch to that user. This plugin is great for when you are building sites for clients and it is beneficial to see the site as your logged in client see’s it.\u003C\u002Fp>\n\u003Cp>And there is an optional mode where you can use a custom keyboard combination, say ‘su’, and it activates the form where you search for users, and then you can use keyboard arrows to navigate the list of results, and the return key to switch to the selected user. The same combo can be used to focus the ‘Switch Off’ link, following a return to simulate a click.\u003C\u002Fp>\n\u003Cp>To activate this feature and set the custom keyboard combination, aka magic word, you need to use the \u003Ccode>abus_ajax_args\u003C\u002Fcode> and add a ‘magicWord’ variable.\u003C\u002Fp>\n\u003Cp>Note that keyboard navigation is not dependant on the custom keyboard combination, and can be used out of the box.\u003C\u002Fp>\n","Extends the excellent User Switching plugin by John Blackbourn by adding a User Switching to the admin bar for quick and easy user switching.",2000,49259,96,12,"2022-05-24T09:29:00.000Z","6.0.11","3.1","5.6",[20,21],"user-switching","users","https:\u002F\u002Fwpexperts.io","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadmin-bar-user-switching.1.4.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":13,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"saadiqbal",84,1428520,287,76,"2026-04-04T02:43:25.391Z",[37,59,77,95,119],{"slug":20,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":56,"download_link":57,"security_score":58,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"User Switching","1.11.2","John Blackbourn","https:\u002F\u002Fprofiles.wordpress.org\u002Fjohnbillion\u002F","\u003Cp>This plugin allows you to quickly swap between user accounts in WordPress at the click of a button. You’ll be instantly logged out and logged in as your desired user. This is handy for helping customers on WooCommerce sites, membership sites, testing environments, or for any site where administrators need to switch between multiple accounts.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Switch user: Instantly switch to any user account from the \u003Cem>Users\u003C\u002Fem> screen.\u003C\u002Fli>\n\u003Cli>Switch back: Instantly switch back to your originating account.\u003C\u002Fli>\n\u003Cli>Switch off: Log out of your account but retain the ability to instantly switch back in again.\u003C\u002Fli>\n\u003Cli>Compatible with Multisite, WooCommerce, BuddyPress, and bbPress.\u003C\u002Fli>\n\u003Cli>Compatible with most membership and user management plugins.\u003C\u002Fli>\n\u003Cli>Compatible with most two-factor authentication solutions (see the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fuser-switching\u002Ffaq\u002F\" rel=\"ugc\">FAQ\u003C\u002Fa> for more info).\u003C\u002Fli>\n\u003Cli>Approved for use on enterprise-grade WordPress platforms such as \u003Ca href=\"https:\u002F\u002Fwww.altis-dxp.com\u002F\" rel=\"nofollow ugc\">Altis\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwpvip.com\u002F\" rel=\"nofollow ugc\">WordPress VIP\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Note: User Switching supports versions of WordPress up to three years old, and PHP version 7.4 or higher.\u003C\u002Fp>\n\u003Ch3>Security\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Only users with the ability to edit other users can switch user accounts. By default this is only Administrators on single site installations, and Super Admins on Multisite installations.\u003C\u002Fli>\n\u003Cli>Passwords are not (and cannot be) revealed.\u003C\u002Fli>\n\u003Cli>Uses the cookie authentication system in WordPress when remembering the account(s) you’ve switched from and when switching back.\u003C\u002Fli>\n\u003Cli>Implements the nonce security system in WordPress, meaning only those who intend to switch users can switch.\u003C\u002Fli>\n\u003Cli>Full support for user session validation where appropriate.\u003C\u002Fli>\n\u003Cli>Full support for HTTPS.\u003C\u002Fli>\n\u003Cli>Backed by \u003Ca href=\"https:\u002F\u002Fpatchstack.com\u002Fdatabase\u002Fvdp\u002Fuser-switching\" rel=\"nofollow ugc\">the Patchstack Vulnerability Disclosure Program\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Visit the \u003Cem>Users\u003C\u002Fem> menu in WordPress and you’ll see a \u003Cem>Switch To\u003C\u002Fem> link in the list of action links for each user.\u003C\u002Fli>\n\u003Cli>Click this and you will immediately switch into that user account.\u003C\u002Fli>\n\u003Cli>You can switch back to your originating account via the \u003Cem>Switch back\u003C\u002Fem> link on each dashboard screen or in your profile menu in the WordPress toolbar.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>See the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fuser-switching\u002Ffaq\u002F\" rel=\"ugc\">FAQ\u003C\u002Fa> for information about the \u003Cem>Switch Off\u003C\u002Fem> feature.\u003C\u002Fp>\n\u003Ch3>Other Plugins\u003C\u002Fh3>\n\u003Cp>I maintain several other plugins for developers. Check them out:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fquery-monitor\u002F\" rel=\"ugc\">Query Monitor\u003C\u002Fa> is the developer tools panel for WordPress\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-crontrol\u002F\" rel=\"ugc\">WP Crontrol\u003C\u002Fa> lets you view and control what’s happening in the WP-Cron system\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy Statement\u003C\u002Fh3>\n\u003Cp>User Switching does not send data to any third party, nor does it include any third party resources, nor will it ever do so.\u003C\u002Fp>\n\u003Cp>User Switching makes use of browser cookies in order to allow users to switch to another account. Its cookies operate using the same mechanism as the authentication cookies in WordPress core, which means their values contain the user’s \u003Ccode>user_login\u003C\u002Fcode> field in plain text which should be treated as potentially personally identifiable information (PII) for privacy and regulatory reasons (GDPR, CCPA, etc). The names of the cookies are:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>wordpress_user_sw_{COOKIEHASH}\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>wordpress_user_sw_secure_{COOKIEHASH}\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>wordpress_user_sw_olduser_{COOKIEHASH}\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>See also the FAQ for some questions relating to privacy and safety when switching between users.\u003C\u002Fp>\n\u003Ch3>Accessibility Statement\u003C\u002Fh3>\n\u003Cp>User Switching aims to be fully accessible to all of its users. It implements best practices for web accessibility, outputs semantic and structured markup, adheres to the default styles and accessibility guidelines of WordPress, uses the accessibility APIs provided by WordPress and web browsers where appropriate, and is fully accessible via keyboard.\u003C\u002Fp>\n\u003Cp>User Switching should adhere to Web Content Accessibility Guidelines (WCAG) 2.0 at level AA when used with a recent version of WordPress where its admin area itself adheres to these guidelines. If you’ve experienced or identified an accessibility issue in User Switching, please open a thread in \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fuser-switching\u002F\" rel=\"ugc\">the User Switching plugin support forum\u003C\u002Fa> and I’ll address it swiftly.\u003C\u002Fp>\n","Instant switching between user accounts in WordPress and WooCommerce.",200000,5499975,98,239,"2026-02-27T00:17:00.000Z","6.9.4","6.1","7.4",[53,54,20,21,55],"fast-user-switching","multisite","woocommerce","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fuser-switching\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuser-switching.1.11.2.zip",100,{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":25,"num_ratings":25,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":72,"tags":73,"homepage":75,"download_link":76,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"um-user-switching","UM User Switching","1.0.1.1","SuitePlugins","https:\u002F\u002Fprofiles.wordpress.org\u002Fsuiteplugins\u002F","\u003Cp>Adds a link to member profile header section of Ultimate Member for switching to a user.\u003C\u002Fp>\n\u003Ch4>Compatibility\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Tested up to 1.4.0 of User Switching\u003C\u002Fli>\n\u003Cli>Tested up to 2.0.35 of Ultimate Member\u003C\u002Fli>\n\u003C\u002Ful>\n","Addon that integrates User Switching to Ultimate Member",10,1842,"2018-12-12T15:21:00.000Z","4.9.29","3.7","",[53,54,74,20,21],"profiles","https:\u002F\u002Fsuiteplugins.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fum-user-switching.1.0.1.1.zip",{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":67,"downloaded":85,"rating":25,"num_ratings":25,"last_updated":86,"tested_up_to":49,"requires_at_least":87,"requires_php":51,"tags":88,"homepage":93,"download_link":94,"security_score":58,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"usermorph","UserMorph – Instant User Switching & Account Impersonation for WordPress","1.0.0","VerseSofts","https:\u002F\u002Fprofiles.wordpress.org\u002Fwoosofts\u002F","\u003Cp>\u003Cstrong>UserMorph\u003C\u002Fstrong> by \u003Ca href=\"https:\u002F\u002Fversesofts.com\u002F\" rel=\"nofollow ugc\">VerseSofts\u003C\u002Fa> is the ultimate user-switching tool designed for Administrators and developers who need to work efficiently. Instantly “morph” into any user account on your site with a single click, completely eliminating the need to log out and back in with different credentials.\u003C\u002Fp>\n\u003Cp>Traditional user switching is slow and requires navigating deep into the admin screens. UserMorph optimizes this workflow with a \u003Cstrong>Smart Search Bar\u003C\u002Fstrong> integrated directly into your WordPress Admin Bar. Simply hover, type a name or an email, and switch your session instantly.\u003C\u002Fp>\n\u003Ch3>Core Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Instant Admin Bar Switcher:\u003C\u002Fstrong> A searchable, AJAX-powered dropdown in the top toolbar for rapid account swapping from any page.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Search and Switch:\u003C\u002Fstrong> Find users quickly by name, username, or email without leaving your current screen.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Seamless Switch Back:\u003C\u002Fstrong> A dedicated, prominent button returns you to your original Administrator session instantly and securely.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Developer Friendly:\u003C\u002Fstrong> The perfect utility for testing user roles, custom capabilities, and personalized dashboard views.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Advanced Debugging:\u003C\u002Fstrong> Resolve customer support issues in real-time by seeing exactly what they see on the frontend.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Switch Off Mode:\u003C\u002Fstrong> Logout temporarily to view your site as an anonymous visitor while keeping a secure link to jump back into your admin account.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Native Security:\u003C\u002Fstrong> Built strictly using WordPress authentication protocols and nonces. Fully compatible with SSL and premium caching plugins.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Perfect For\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Testing & Development:\u003C\u002Fstrong> Quickly verify how new features or restrictions look for different user roles.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customer Support:\u003C\u002Fstrong> Reproduce and debug issues reported by customers by logging in as them securely.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Permission Verification:\u003C\u002Fstrong> Test complex visibility rules created by plugins like Store Restriction.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Site Management:\u003C\u002Fstrong> Efficiently manage multi-user environments without session conflicts.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Explore More from VerseSofts\u003C\u002Fh3>\n\u003Cp>We build professional grade tools to help your WordPress site scale. Check out our entire portfolio:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Our Free Plugins:\u003C\u002Fstrong>\u003Cbr \u002F>\n*   \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmultiple-cart-fee-for-woocommerce\u002F\" rel=\"ugc\">Multiple Cart Fee\u003C\u002Fa>\u003C\u002Fstrong> – Add dynamic, conditional checkout fees securely.\u003Cbr \u002F>\n*   \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fadvanced-order-status-for-woocommerce\u002F\" rel=\"ugc\">Advanced Order Status\u003C\u002Fa>\u003C\u002Fstrong> – Create custom order statuses to optimize your fulfillment workflow.\u003Cbr \u002F>\n*   \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fprice-cart-hider-for-woocommerce\u002F\" rel=\"ugc\">Price & Cart Hider\u003C\u002Fa>\u003C\u002Fstrong> – Disable purchasing and hide prices for Catalog Mode.\u003Cbr \u002F>\n*   \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fstore-restriction-for-woocommerce\u002F\" rel=\"ugc\">Store Restriction\u003C\u002Fa>\u003C\u002Fstrong> – B2B and wholesale visibility control. Hide catalog by role or country.\u003Cbr \u002F>\n*   \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhealthbeam\u002F\" rel=\"ugc\">HealthBeam\u003C\u002Fa>\u003C\u002Fstrong> – Monitor and debug your WordPress site efficiently.\u003Cbr \u002F>\n*   \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fversesofts-ai-order-insights\u002F\" rel=\"ugc\">AI Order Insights\u003C\u002Fa>\u003C\u002Fstrong> – Automate order analysis with AI to get customer insights and upsell recommendations.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Our Premium Solutions:\u003C\u002Fstrong>\u003Cbr \u002F>\n*   \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fconditional-store-restrictions\u002F\" rel=\"nofollow ugc\">Conditional Store Restrictions\u003C\u002Fa>\u003C\u002Fstrong> – The ultimate access control for WooCommerce.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Visit our official website for premium support and custom development solutions: \u003Ca href=\"https:\u002F\u002Fversesofts.com\" rel=\"nofollow ugc\">VerseSofts.com\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For help, documentation, feature requests, and contact options:\u003Cbr \u002F>\n*   Website: https:\u002F\u002Fversesofts.com\u002F\u003Cbr \u002F>\n*   Contact: https:\u002F\u002Fversesofts.com\u002Fcontact\u003C\u002Fp>\n\u003Ch3>Additional Information\u003C\u002Fh3>\n\u003Cp>For professional feedback or technical assistance, email \u003Cstrong>contact@versesofts.com\u003C\u002Fstrong>.\u003C\u002Fp>\n","Instant user-switching for WordPress. Morph into any account via a searchable admin bar menu securely and fast.",111,"2026-03-15T12:35:00.000Z","5.0",[89,90,91,20,92],"debug-users","impersonate-account","switch-user","user-testing","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fusermorph\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fusermorph.1.0.0.zip",{"slug":96,"name":97,"version":98,"author":99,"author_profile":100,"description":101,"short_description":102,"active_installs":103,"downloaded":104,"rating":105,"num_ratings":106,"last_updated":107,"tested_up_to":49,"requires_at_least":108,"requires_php":72,"tags":109,"homepage":114,"download_link":115,"security_score":116,"vuln_count":117,"unpatched_count":25,"last_vuln_date":118,"fetched_at":27},"one-user-avatar","One User Avatar | User Profile Picture","2.5.4","One Designs","https:\u002F\u002Fprofiles.wordpress.org\u002Fonedesigns\u002F","\u003Cp>WordPress currently only allows you to use custom avatars that are uploaded through \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa>. \u003Cstrong>One User Avatar\u003C\u002Fstrong> enables you to use any photo uploaded into your Media Library as an avatar. This means you use the same uploader and library as your posts. No extra folders or image editing functions are necessary. This plugin is a fork of WP User Avatar v2.2.16.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>One User Avatar\u003C\u002Fstrong> also lets you:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Upload your own Default Avatar in your One User Avatar settings.\u003C\u002Fli>\n\u003Cli>Show the user’s \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa> avatar or Default Avatar if the user doesn’t have a One User Avatar image.\u003C\u002Fli>\n\u003Cli>Disable \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa> avatars and use only local avatars.\u003C\u002Fli>\n\u003Cli>Use the \u003Ccode>[avatar_upload]\u003C\u002Fcode> shortcode to add a standalone uploader to a front page or widget. This uploader is only visible to logged-in users.\u003C\u002Fli>\n\u003Cli>Use the \u003Ccode>[avatar]\u003C\u002Fcode> shortcode in your posts. These shortcodes will work with any theme, whether it has avatar support or not.\u003C\u002Fli>\n\u003Cli>Allow Contributors and Subscribers to upload their own avatars.\u003C\u002Fli>\n\u003Cli>Limit upload file size and image dimensions for Contributors and Subscribers.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Copyright\u003C\u002Fh3>\n\u003Cp>One User Avatar\u003Cbr \u002F>\nCopyright (c) 2023 One Designs https:\u002F\u002Fonedesigns.com\u002F\u003Cbr \u002F>\nLicense: GPLv2\u003Cbr \u002F>\nSource: https:\u002F\u002Fgithub.com\u002Fonedesigns\u002Fone-user-avatar\u003C\u002Fp>\n\u003Cp>One User Avatar is based on WP User Avatar v2.2.16\u003Cbr \u002F>\nCopyright (c) 2020-2021 ProfilePress https:\u002F\u002Fprofilepress.net\u002F\u003Cbr \u002F>\nCopyright (c) 2014-2020 Flippercode https:\u002F\u002Fwww.flippercode.com\u002F\u003Cbr \u002F>\nCopyright (c) 2013-2014 Bangbay Siboliban http:\u002F\u002Fbangbay.com\u002F\u003Cbr \u002F>\nLicense: GPLv2\u003Cbr \u002F>\nSource: https:\u002F\u002Fgithub.com\u002Fprofilepress\u002Fwp-user-avatar\u003C\u002Fp>\n\u003Cp>One User Avatar is distributed under the terms of the GNU GPL\u003C\u002Fp>\n\u003Cp>This program is free software: you can redistribute it and\u002For modify\u003Cbr \u002F>\nit under the terms of the GNU General Public License as published by\u003Cbr \u002F>\nthe Free Software Foundation, either version 2 of the License, or\u003Cbr \u002F>\n(at your option) any later version.\u003C\u002Fp>\n\u003Cp>This program is distributed in the hope that it will be useful,\u003Cbr \u002F>\nbut WITHOUT ANY WARRANTY; without even the implied warranty of\u003Cbr \u002F>\nMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\u003Cbr \u002F>\nGNU General Public License for more details.\u003C\u002Fp>\n\u003Ch3>Advanced Settings\u003C\u002Fh3>\n\u003Ch4>Add One User Avatar to your own profile edit page\u003C\u002Fh4>\n\u003Cp>You can use the [avatar_upload] shortcode to add a standalone uploader to any page. It’s best to use this uploader by itself and without other profile fields.\u003C\u002Fp>\n\u003Cp>If you’re building your own profile edit page with other fields, One User Avatar is automatically added to the \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FPlugin_API\u002FAction_Reference\u002Fshow_user_profile\" rel=\"nofollow ugc\">show_user_profile\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FPlugin_API\u002FAction_Reference\u002Fshow_user_profile\" rel=\"nofollow ugc\">edit_user_profile\u003C\u002Fa> hooks. If you’d rather have One User Avatar in its own section, you could add another hook:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>do_action( 'edit_user_avatar', $current_user );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Then, to add One User Avatar to that hook and remove it from the other hooks outside of the administration panel, you would add this code to the \u003Ccode>functions.php\u003C\u002Fcode> file of your theme:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>function my_avatar_filter() {\n    \u002F\u002F Remove from show_user_profile hook\n    remove_action( 'show_user_profile', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    remove_action( 'show_user_profile', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n\n    \u002F\u002F Remove from edit_user_profile hook\n    remove_action( 'edit_user_profile', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    remove_action( 'edit_user_profile', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n\n    \u002F\u002F Add to edit_user_avatar hook\n    add_action( 'edit_user_avatar', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    add_action( 'edit_user_avatar', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n}\n\n\u002F\u002F Loads only outside of administration panel\nif ( ! is_admin() ) {\n    add_action( 'init','my_avatar_filter' );\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>HTML Wrapper\u003C\u002Fh4>\n\u003Cp>You can change the HTML wrapper of the One User Avatar section by using the functions \u003Ccode>wpua_before_avatar\u003C\u002Fcode> and \u003Ccode>wpua_after_avatar\u003C\u002Fcode>. By default, the avatar code is structured like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cdiv class=\"wpua-edit-container\">\n    \u003Ch3>Avatar\u003C\u002Fh3>\n    \u003Cinput type=\"hidden\" name=\"wp-user-avatar\" id=\"wp-user-avatar\" value=\"{attachmentID}\" \u002F>\n    \u003Cp id=\"wpua-add-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-add\" name=\"wpua-add\">Edit Image\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-preview\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        Original Size\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-thumbnail\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        Thumbnail\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-remove-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-remove\" name=\"wpua-remove\">Default Avatar\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-undo-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-undo\" name=\"wpua-undo\">Undo\u003C\u002Fbutton>\n    \u003C\u002Fp>\n\u003C\u002Fdiv>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To strip out the div container and h3 heading, you would add the following filters to the \u003Ccode>functions.php\u003C\u002Fcode> file in your theme:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>remove_action( 'wpua_before_avatar', 'wpua_do_before_avatar' );\nremove_action( 'wpua_after_avatar', 'wpua_do_after_avatar' );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To add your own wrapper, you could create something like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>function my_before_avatar() {\n    echo '\u003Cdiv id=\"my-avatar\">';\n}\nadd_action( 'wpua_before_avatar', 'my_before_avatar' );\n\nfunction my_after_avatar() {\n    echo '\u003C\u002Fdiv>';\n}\nadd_action( 'wpua_after_avatar', 'my_after_avatar' );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>This would output:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cdiv id=\"my-avatar\">\n    \u003Cinput type=\"hidden\" name=\"wp-user-avatar\" id=\"wp-user-avatar\" value=\"{attachmentID}\" \u002F>\n    \u003Cp id=\"wpua-add-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-add\" name=\"wpua-add\">Edit Image\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-preview\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        \u003Cspan class=\"description\">Original Size\u003C\u002Fspan>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-thumbnail\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        \u003Cspan class=\"description\">Thumbnail\u003C\u002Fspan>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-remove-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-remove\" name=\"wpua-remove\">Default Avatar\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-undo-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-undo\" name=\"wpua-undo\">Undo\u003C\u002Fbutton>\n    \u003C\u002Fp>\n\u003C\u002Fdiv>\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Use any image from your WordPress Media Library as a custom user avatar or user profile picture. Add your own Default Avatar.",100000,490816,94,41,"2026-01-12T00:58:00.000Z","4.0",[110,111,112,113,21],"avatar","bbpress","gravatar","profile","https:\u002F\u002Fonedesigns.com\u002Fplugins\u002Fone-user-avatar\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-user-avatar.2.5.4.zip",99,2,"2021-09-20 00:00:00",{"slug":120,"name":121,"version":122,"author":123,"author_profile":124,"description":125,"short_description":126,"active_installs":103,"downloaded":127,"rating":128,"num_ratings":129,"last_updated":130,"tested_up_to":49,"requires_at_least":131,"requires_php":51,"tags":132,"homepage":134,"download_link":135,"security_score":136,"vuln_count":137,"unpatched_count":25,"last_vuln_date":138,"fetched_at":27},"simple-local-avatars","Simple Local Avatars","2.8.6","10up","https:\u002F\u002Fprofiles.wordpress.org\u002F10up\u002F","\u003Cp>Adds an avatar upload field to user profiles if the current user has media permissions. Generates requested sizes on demand just like Gravatar! Simple and lightweight.\u003C\u002Fp>\n\u003Cp>Just edit a user profile, and scroll down to the new “Avatar” field. The plug-in will take care of cropping and sizing!\u003C\u002Fp>\n\u003Col>\n\u003Cli>Stores avatars in the “uploads” folder where all of your other media is kept.\u003C\u002Fli>\n\u003Cli>Has a simple, native interface.\u003C\u002Fli>\n\u003Cli>Fully supports Gravatar and default avatars if no local avatar is set for the user – but also allows you turn off Gravatar.\u003C\u002Fli>\n\u003Cli>Generates the requested avatar size on demand (and stores the new size for efficiency), so it looks great, just like Gravatar!\u003C\u002Fli>\n\u003Cli>Lets you decide whether lower privilege users (subscribers, contributors) can upload their own avatar.\u003C\u002Fli>\n\u003Cli>Enables rating of local avatars, just like Gravatar.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Support Level\u003C\u002Fh3>\n\u003Cp>Simple Local Avatars’ support level is marked as \u003Ccode>stable\u003C\u002Fcode>.  10up is not planning to develop any new features for this, but will still respond to bug reports and security concerns.  We welcome PRs, but any that include new features should be small and easy to integrate and should not include breaking changes.  We otherwise intend to keep this tested up to the most recent version of WordPress.\u003C\u002Fp>\n","Adds an avatar upload field to user profiles. Generates requested sizes on demand just like Gravatar!",2395990,92,89,"2026-02-17T19:34:00.000Z","6.6",[110,112,113,133,21],"user-photos","https:\u002F\u002F10up.com\u002Fplugins\u002Fsimple-local-avatars-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-local-avatars.2.8.6.zip",93,6,"2025-08-11 18:20:29",{"attackSurface":140,"codeSignals":191,"taintFlows":203,"riskAssessment":204,"analyzedAt":210},{"hooks":141,"ajaxHandlers":180,"restRoutes":188,"shortcodes":189,"cronEvents":190,"entryPointCount":151,"unprotectedCount":25},[142,148,154,158,161,165,168,172,175],{"type":143,"name":144,"callback":145,"file":146,"line":147},"action","admin_notices","error","includes\\Admin\\Notice.php",15,{"type":143,"name":149,"callback":150,"priority":151,"file":152,"line":153},"wp_before_admin_bar_render","output",1,"includes\\Integrations\\WordPress\\AdminBar.php",18,{"type":143,"name":155,"callback":155,"file":156,"line":157},"init","includes\\Plugin.php",22,{"type":143,"name":155,"callback":159,"file":156,"line":160},"loadPluginTextDomain",23,{"type":143,"name":162,"callback":163,"file":156,"line":164},"admin_enqueue_scripts","enqueueScripts",24,{"type":143,"name":166,"callback":163,"file":156,"line":167},"wp_enqueue_scripts",25,{"type":143,"name":169,"callback":170,"file":156,"line":171},"wp_head","enqueueStyles",26,{"type":143,"name":173,"callback":170,"file":156,"line":174},"admin_head",27,{"type":176,"name":177,"callback":178,"priority":67,"file":156,"line":179},"filter","plugin_row_meta","pluginRowMeta",28,[181],{"action":182,"nopriv":183,"callback":184,"hasNonce":185,"hasCapCheck":183,"file":186,"line":187},"abus_user_search",false,"userSearch",true,"includes\\Controllers\\AdminBar.php",19,[],[],[],{"dangerousFunctions":192,"sqlUsage":193,"outputEscaping":195,"fileOperations":25,"externalRequests":25,"nonceChecks":151,"capabilityChecks":151,"bundledLibraries":202},[],{"prepared":25,"raw":25,"locations":194},[],{"escaped":137,"rawEcho":117,"locations":196},[197,200],{"file":146,"line":198,"context":199},37,"raw output",{"file":156,"line":201,"context":199},178,[],[],{"summary":205,"deductions":206},"The 'admin-bar-user-switching' plugin, version 1.4, demonstrates a generally strong security posture based on the provided static analysis.  A key strength is its complete reliance on prepared statements for all SQL queries and the presence of both nonce and capability checks for its single AJAX entry point, indicating good practice in preventing common web vulnerabilities. The absence of file operations, external HTTP requests, and dangerous functions further bolsters its security. The lack of any recorded CVEs and taint analysis issues further suggests a well-maintained and secure codebase.\n\nWhile the plugin exhibits many positive security characteristics, a minor concern exists with output escaping. With 8 total outputs and 75% properly escaped, there's a possibility of one output being unescaped. Although the static analysis doesn't explicitly flag this as a vulnerability, it represents a potential area for improvement and a small risk of cross-site scripting (XSS) if the unescaped output contains user-controlled data.  The small attack surface and lack of critical vulnerabilities in its history are very positive indicators, but this minor oversight in output escaping is the only area that prevents a perfect security score.",[207],{"reason":208,"points":209},"One unescaped output identified",4,"2026-03-16T18:37:22.529Z",{"wat":212,"direct":219},{"assetPaths":213,"generatorPatterns":215,"scriptPaths":216,"versionParams":217},[214],"\u002Fwp-content\u002Fplugins\u002Fadmin-bar-user-switching\u002Fassets\u002Fjs\u002Fabus_script.js",[],[214],[218],"admin-bar-user-switching\u002Fassets\u002Fjs\u002Fabus_script.js?ver=",{"cssClasses":220,"htmlComments":223,"htmlAttributes":224,"restEndpoints":226,"jsGlobals":227,"shortcodeOutput":229},[221,222],"abus_search_text","abus_search_submit",[],[225],"data-url",[],[228],"abus_ajax",[]]