[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOFyi2qfGZyEUGkoKFvt9JAHqfmZeFDgnuTksaP9h6PQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":38,"analysis":126,"fingerprints":164},"avatar-project","Avatar Project","1.0.2","justnorris","https:\u002F\u002Fprofiles.wordpress.org\u002Fjustnorris\u002F","\u003Cp>Receiving a comment on your blog post is great and the more comments the better the feeling. It means that not only your post is good but your site becomes more and more popular and thrust-worthy. When comments start rolling in, you must make sure they display properly and look good. It’s great when a comment author has taken the time to upload a custom image of herself on her Gravatar account, but as we all know only a handful of people actually do that. This means that your precious comment area ends up filled with no-face, gray avatar thumbnails that look plane boring.\u003C\u002Fp>\n\u003Cp>Well, that ends here and now!\u003C\u002Fp>\n\u003Cp>Take control of the way your comment area looks by installing Avatar Project. Avatar Project is a plugin that will replace all avatar icons that don’t have a custom avatar assigned to it. Depending on your websites look, feel and theme, choose one of our Avatar Project icon packs. Currently you have a choice between colorful blobers, cups hoped up on caffeine, smug cat faces and a bunch of actual human portraits.\u003Cbr \u002F>\nThis plugin will be useful for not only real, functioning blogs but for theme developers and designers as well. Install Avatar Project, write a couple of sample comments and make your comment area demonstration look much nicer than it would with the default avatars.\u003C\u002Fp>\n","Receiving a comment on your blog post is great and the more comments the better the feeling. It means that not only your post is good but your site be …",10,2237,100,1,"2017-11-16T11:17:00.000Z","4.9.29","4.8","",[20,21,22,23,24],"avatar","avatars","comment","custom-avatar","gravatar","https:\u002F\u002Fcolormelon.com\u002Fplugins\u002Favatar-project","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Favatar-project.1.0.2.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":27,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},5,3660,30,84,"2026-04-04T05:52:08.119Z",[39,58,79,96,107],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":49,"num_ratings":50,"last_updated":51,"tested_up_to":52,"requires_at_least":17,"requires_php":53,"tags":54,"homepage":56,"download_link":57,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"letter-avatars","Letter Avatars","3.1.0","Sibin Grasic","https:\u002F\u002Fprofiles.wordpress.org\u002Fseebeen\u002F","\u003Cp>Letter Avatars \u003Cstrong>enables custom avatars for users without gravatar\u003C\u002Fstrong>. Avatar will be replaced with the first letter of username or e-mail.\u003C\u002Fp>\n\u003Cp>Letter Avatars does not use any images, scripts, or font-icons. All letters will be rendered by your theme font (or Optionally via a Google font).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Works anywhere – Plugin hooks into pre_get_avatar function, so the avatar size is preserved\u003C\u002Fli>\n\u003Cli>Highly customizable – You can change colors, letter font, as well as the font size\u003C\u002Fli>\n\u003Cli>Stylish – You can change the background and letter colors or you can randomize them for all the avatars\u003C\u002Fli>\n\u003Cli>Lightweight – Plugin does not use any external stylesheet, image, or js files. It only adds a small inline css in your header\u003C\u002Fli>\n\u003Cli>Highly compatible – You don’t have to edit your theme \u002F plugin files, it works automatically and plays nice with other plugins\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Works with BuddyPress\u003C\u002Fstrong> – Users and groups without gravatar \u002F local avatar will use Letter Avatars\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Works with YITH Reviews for WooCommerce\u003C\u002Fstrong> – Avatars in reviews support Letter Avatars\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Works with WP User Avatar\u003C\u002Fstrong> – Users with Custom Avatar will use those, users without avatar will default to Letter Avatar\u003C\u002Fli>\n\u003C\u002Ful>\n","Sets custom avatars for users without gravatar. Avatars will be replaced by first letter of usename (or e-mail) on a colorful background",300,18850,92,9,"2020-03-03T09:24:00.000Z","5.3.21","7.0",[21,22,23,24,55],"letter","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fletter-avatars\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fletter-avatars.3.1.zip",{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":66,"downloaded":67,"rating":68,"num_ratings":69,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":18,"tags":73,"homepage":77,"download_link":78,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-first-letter-avatar","WP First Letter Avatar","2.2.8","DanielAGW","https:\u002F\u002Fprofiles.wordpress.org\u002Fdanielagw\u002F","\u003Cp>WP First Letter Avatar \u003Cstrong>sets custom avatars for users without Gravatar\u003C\u002Fstrong>. The avatar will be a first letter of the user’s name. You can also configure the plugin to use any other letter to set custom avatar.\u003C\u002Fp>\n\u003Cp>WP First Letter Avatar includes a set of \u003Cstrong>beautiful, colorful letter avatars\u003C\u002Fstrong> in many sizes. Optimal size will be chosen by the plugin in order to display high quality avatar and not download, for example, big 512px avatars when only 48px is needed… \u003Cstrong>PSD template\u003C\u002Fstrong> for avatar is also included.\u003C\u002Fp>\n\u003Cp>You can also create your own avatar set by creating new directory next to \u003Cem>‘default’\u003C\u002Fem> folder and following the naming convention from \u003Cem>‘default’\u003C\u002Fem>.\u003C\u002Fp>\n\u003Cp>By default, custom avatar will be set only to users without Gravatars, but you can change that in settings and not use Gravatar at all.\u003C\u002Fp>\n\u003Cp>WP First Letter Avatar helps you \u003Cstrong>bring more colors\u003C\u002Fstrong> into your blog. Plus, your readers will be more \u003Cstrong>willing to comment on your posts\u003C\u002Fstrong>, since they can actually relate to these avatars much better than to Mystery Person.\u003C\u002Fp>\n\u003Cp>All images were compressed using the fantastic \u003Ca href=\"https:\u002F\u002Ftinypng.com\u002F\" rel=\"nofollow ugc\">TinyPNG\u003C\u002Fa>, so avatars are \u003Cstrong>incredibly light and ultra-high quality\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>WP First Letter Avatar is also available \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FDev49net\u002Fwp-first-letter-avatar\" rel=\"nofollow ugc\">on GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Compatibility with other plugins\u003C\u002Fh4>\n\u003Cp>WP First Letter Avatar is fully compatible with \u003Ca href=\"https:\u002F\u002Fbbpress.org\u002F\" rel=\"nofollow ugc\">bbPress\u003C\u002Fa> and \u003Ca href=\"http:\u002F\u002Fwww.gvectors.com\u002Fwpdiscuz\u002F\" rel=\"nofollow ugc\">wpDiscuz\u003C\u002Fa>. For \u003Ca href=\"https:\u002F\u002Fbuddypress.org\u002F\" rel=\"nofollow ugc\">BuddyPress\u003C\u002Fa> compatibility please use my other plugin – \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbuddypress-first-letter-avatar\u002F\" rel=\"ugc\">BuddyPress First Letter Avatar\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cp>WP First Letter Avatar requires at least PHP 5.4. It \u003Cstrong>does not work properly\u003C\u002Fstrong> on PHP 5.3.x and earlier.\u003C\u002Fp>\n","Set custom avatars for users with no Gravatar. The avatar will be the first (or any other) letter of user's name on a colorful background.",2000,67403,94,33,"2017-03-11T22:26:00.000Z","4.7.32","4.6",[21,74,75,23,76],"change-avatar","comments","discussion","http:\u002F\u002Fdev49.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-first-letter-avatar.zip",{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":87,"downloaded":88,"rating":13,"num_ratings":14,"last_updated":89,"tested_up_to":90,"requires_at_least":91,"requires_php":18,"tags":92,"homepage":94,"download_link":95,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"easygravatars","Easy Gravatars","1.3","Dougal Campbell","https:\u002F\u002Fprofiles.wordpress.org\u002Fdougal\u002F","\u003Cp>This plugin allows you to automatically add Gravatars for commenters to your\u003Cbr \u002F>\ntheme, if your theme does not already support them.\u003C\u002Fp>\n\u003Cp>According to the Gravatar.com website, Gravatars are Globally Recognized\u003Cbr \u002F>\nAvatars, or an “avatar image that follows you from weblog to weblog\u003Cbr \u002F>\nappearing beside your name when you comment on gravatar enabled sites.”\u003Cbr \u002F>\nYou register with the Gravatar server, and upload an image which you will\u003Cbr \u002F>\nuse as your avatar. The gravatar image is keyed to your email address, so\u003Cbr \u002F>\nthat it is unique to you.\u003C\u002Fp>\n\u003Cp>This plugin will display gravatars for the people who comment on your posts.\u003Cbr \u002F>\nYou do not need to modify any of your template files — just activate the\u003Cbr \u002F>\nplugin, and it will add gravatars to your comments template automatically.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Based on a code snippet from Matt Mullenweg:\u003Cbr \u002F>\n  http:\u002F\u002Fphotomatt.net\u002F2007\u002F10\u002F20\u002Fgravatar-enabled\u002F\u003Cbr \u002F>\n  http:\u002F\u002Fpastebin.ca\u002F743979\u003C\u002Fp>\n\u003Cp>Props to David Potter for pointing out that Gravatar normalizes email\u003Cbr \u002F>\naddresses to lowercase before hashing with MD5:\u003Cbr \u002F>\n  http:\u002F\u002Fdpotter.net\u002FTechnical\u002Findex.php\u002F2007\u002F10\u002F22\u002Fintegrating-gravatar-support\u002F\u003C\u002Fp>\n","Add Gravatars to your comments without modifying any template files. Just activate, and you're done!",200,64590,"2010-01-14T15:36:00.000Z","3.0.5","2.0.4",[20,21,75,24,93],"gravatars","http:\u002F\u002Fdougal.gunters.org\u002Fplugins\u002Feasy-gravatars","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasygravatars.1.3.zip",{"slug":97,"name":98,"version":61,"author":62,"author_profile":63,"description":99,"short_description":100,"active_installs":13,"downloaded":101,"rating":102,"num_ratings":103,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":18,"tags":104,"homepage":77,"download_link":106,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"buddypress-first-letter-avatar","BuddyPress First Letter Avatar","\u003Cp>BuddyPress First Letter Avatar \u003Cstrong>sets custom avatars for users without profile picture or Gravatar\u003C\u002Fstrong>. The avatar will be a first letter of user’s name. You can also configure plugin to use any other letter to set custom avatar.\u003C\u002Fp>\n\u003Cp>BuddyPress First Letter Avatar is based on my other plugin – \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-first-letter-avatar\u002F\" rel=\"ugc\">WP First Letter Avatar\u003C\u002Fa>. BuddyPress First Letter Avatar is basically the same thing, but programmed to work with BuddyPress.\u003C\u002Fp>\n\u003Cp>BuddyPress First Letter Avatar includes a set of \u003Cstrong>beautiful, colorful letter avatars\u003C\u002Fstrong> in many sizes. Optimal size will be chosen by the plugin in order to display high quality avatar and not download, for example, big 512px avatars when only 48px is needed… \u003Cstrong>PSD template\u003C\u002Fstrong> for avatar is also included.\u003C\u002Fp>\n\u003Cp>You can also create your own avatar set by creating new directory next to \u003Cem>‘default’\u003C\u002Fem> folder and following the naming convention from \u003Cem>‘default’\u003C\u002Fem>.\u003C\u002Fp>\n\u003Cp>By default, custom avatar will be set only to users without profile pictures and Gravatars, but you can change that in settings and not use Gravatar\u002Fprofile pictures at all.\u003C\u002Fp>\n\u003Cp>BuddyPress First Letter Avatar helps you \u003Cstrong>bring more colors into your BuddyPress site\u003C\u002Fstrong>. Plus, your users will be more \u003Cstrong>willing to actively participate in your site\u003C\u002Fstrong> since they can actually relate to these avatars much better than to the Mystery Person.\u003C\u002Fp>\n\u003Cp>All images were compressed using the fantastic \u003Ca href=\"https:\u002F\u002Ftinypng.com\u002F\" rel=\"nofollow ugc\">TinyPNG\u003C\u002Fa>, so avatars are \u003Cstrong>incredibly light and ultra-high quality\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>Plugin is also available \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FDev49net\u002Fbuddypress-first-letter-avatar\" rel=\"nofollow ugc\">on GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cp>BuddyPress First Letter Avatar requires at least PHP 5.4. It \u003Cstrong>does not work properly\u003C\u002Fstrong> on PHP 5.3.x and earlier.\u003C\u002Fp>\n","A WordPress-BuddyPress plugin to set fancy custom avatars for users with no Gravatar and no profile picture.",29807,98,16,[21,105,75,23,76],"buddypress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-first-letter-avatar.zip",{"slug":108,"name":109,"version":110,"author":111,"author_profile":112,"description":113,"short_description":114,"active_installs":35,"downloaded":115,"rating":13,"num_ratings":14,"last_updated":116,"tested_up_to":117,"requires_at_least":118,"requires_php":18,"tags":119,"homepage":124,"download_link":125,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"top-contributors","Top Contributors","1.4.1","blueinstyle","https:\u002F\u002Fprofiles.wordpress.org\u002Fblueinstyle\u002F","\u003Cp>Display your top commenters or authors in a widget, or you can display anywhere on your blog by pasting this code into your theme: \u003Ccode>\u003C?php if(function_exists('jme_top_contributors')) { jme_top_contributors(); } ?>\u003C\u002Fcode>\u003C\u002Fp>\n\u003Cp>Version 1.4 includes many user requested features. Check \u003Ca href=\"http:\u002F\u002Fjustmyecho.com\u002F2010\u002F07\u002Ftop-contributors-plugin-wordpress\u002F\" rel=\"nofollow ugc\">plugin webpage\u003C\u002Fa> for details on the update.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>List your top commenters or authors with the option to display their Gravatar, and several other options.\u003C\u002Fli>\n\u003Cli>Choose from 2 formats of the widget, with complete control of styles via css.\u003C\u002Fli>\n\u003Cli>Exclude users from the list by email address.\u003C\u002Fli>\n\u003Cli>The list uses a cache system for improved performance. List updates only when a post or comment is added, or options updated.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Extra Feature\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Add a special Icon next to each of your Top Commenter’s name in their comments to give them a little special recognition for being a regular contributor.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Support and Feature request forum at http:\u002F\u002Fjustmyecho.com\u002Fforums\u002F\u003C\u002Fp>\n","Display your top commenters or authors in a widget.",11508,"2011-04-10T16:46:00.000Z","3.1.4","2.8",[120,93,121,122,123],"commenters","plugins","top-commenters","widgets","http:\u002F\u002Fjustmyecho.com\u002F2010\u002F07\u002Ftop-contributors-plugin-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftop-contributors.1.4.1.zip",{"attackSurface":127,"codeSignals":147,"taintFlows":155,"riskAssessment":156,"analyzedAt":163},{"hooks":128,"ajaxHandlers":143,"restRoutes":144,"shortcodes":145,"cronEvents":146,"entryPointCount":28,"unprotectedCount":28},[129,134,138],{"type":130,"name":131,"callback":132,"file":133,"line":35},"filter","avatar_defaults","avproject_avatar_defaults","avatar-project.php",{"type":130,"name":135,"callback":136,"priority":11,"file":133,"line":137},"get_avatar","avproject_get_avatar",31,{"type":139,"name":140,"callback":141,"file":133,"line":142},"action","init","avproject_init",35,[],[],[],[],{"dangerousFunctions":148,"sqlUsage":149,"outputEscaping":151,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":154},[],{"prepared":28,"raw":28,"locations":150},[],{"escaped":152,"rawEcho":28,"locations":153},2,[],[],[],{"summary":157,"deductions":158},"The static analysis of the 'avatar-project' v1.0.2 plugin reveals a generally strong security posture.  There are no identified dangerous functions, all SQL queries use prepared statements, and all output is properly escaped.  Furthermore, the plugin demonstrates a lack of common attack vectors by having zero AJAX handlers, REST API routes, shortcodes, or cron events exposed, and no file operations or external HTTP requests are present in the code.  This significantly limits the potential attack surface.\n\nThe vulnerability history also indicates a clean record, with no known CVEs and no past vulnerabilities. This suggests a commitment to secure coding practices or a lack of prior security scrutiny that may have uncovered issues.  However, the complete absence of nonce checks and capability checks across all entry points (though there are none to check) is a potential concern if the plugin's functionality were to expand or if new entry points were introduced without proper security measures.  While the current version is secure based on the provided data, future development should prioritize implementing these checks to maintain this strong security stance.\n\nIn conclusion, 'avatar-project' v1.0.2 exhibits excellent security fundamentals with no directly exploitable vulnerabilities identified in the static analysis and a clean vulnerability history. The primary area for improvement, and a potential future risk if not addressed, lies in the lack of explicit authorization and security checks, which are crucial for robust plugin security, especially as features are added.",[159,161],{"reason":160,"points":33},"No nonce checks implemented",{"reason":162,"points":33},"No capability checks implemented","2026-03-17T00:56:44.416Z",{"wat":165,"direct":172},{"assetPaths":166,"generatorPatterns":169,"scriptPaths":170,"versionParams":171},[167,168],"\u002Fwp-content\u002Fplugins\u002Favatar-project\u002Favatars\u002F","\u002Fwp-content\u002Fplugins\u002Favatar-project\u002Flanguages\u002F",[],[],[],{"cssClasses":173,"htmlComments":174,"htmlAttributes":175,"restEndpoints":176,"jsGlobals":177,"shortcodeOutput":178},[],[],[],[],[],[]]