[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzPx_p2tIJ2CNrX6fVxvt96xr4CSgHcRlujXUK5ooglQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":16,"homepage":22,"download_link":23,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":35,"analysis":132,"fingerprints":867},"bebop","Bebop","1.3.2","Dale Mckeown","https:\u002F\u002Fprofiles.wordpress.org\u002Fdalemac\u002F","\u003Cp>Bebop is a BuddyPress plugin which allows you to connect your BuddyPress profile to other social media platforms such as Twitter, Flickr, Slideshare, Youtube and Vimeo. Bebop is an aggregator and curatorial tool, pulling content from other web services into your BuddyPress activity timeline. It will also pull in content from RSS\u002FAtom feeds, so will work with sites like Tumblr, WordPress and Blogger.\u003Cbr \u002F>\nBebop gives you control over exactly what items of content appear in your activity stream and works on WordPress network installs, too.\u003Cbr \u002F>\nBebop was developed by the University of Lincoln for a JISC-funded ‘Open Educational Resources’ project, to allow teachers to select and aggregate teaching resources they have shared on third-party sites into their BuddyPress profile. BuddyPress and Bebop are being used at the University of Lincoln to power staff and student profiles.\u003C\u002Fp>\n\u003Cp>German (de_DE) Language pack courtesy of HansRuedi Keller (http:\u002F\u002Fwww.info.ch)\u003C\u002Fp>\n\u003Ch3>Licence\u003C\u002Fh3>\n\u003Cp>Released under the GNU General Public Licence – https:\u002F\u002Fwww.gnu.org\u002Fcopyleft\u002Fgpl.html\u003Cbr \u002F>\nCopyright 2013 The University of Lincoln – http:\u002F\u002Fwww.lincoln.ac.uk.\u003C\u002Fp>\n\u003Ch3>\u003C\u002Fh3>\n\u003Ch3>\u003C\u002Fh3>\n","Bebop is a BuddyPress plugin which allows you to connect your BuddyPress profile to other social media platforms such as Twitter, Flickr, Slideshare,  …",10,7295,80,4,"",[17,18,19,20,21],"buddypress","oer","open-educational-resources","ukeor","wordpress","http:\u002F\u002Fbebop.blogs.lincoln.ac.uk\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbebop.zip",100,0,null,"2026-03-15T10:48:56.248Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":24,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"dalemac",1,30,94,"2026-04-04T07:13:48.391Z",[36,58,85,105,119],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":24,"num_ratings":46,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":15,"tags":50,"homepage":55,"download_link":56,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":57},"cbxuseronline","CBX User Online & Last Login","1.3.5","Sabuj Kundu","https:\u002F\u002Fprofiles.wordpress.org\u002Fmanchumahara\u002F","\u003Cp>This plugin helps to show online users. Member, guest and bot can be tracked, their counts, most users online etc. This plugin also helps to records any user’s last login time, ip address and device.\u003C\u002Fp>\n\u003Ch3>CBX User Online & Last Login by \u003Ca href=\"https:\u002F\u002Fcodeboxr.com\u002Fproduct\u002Fcbx-user-online-for-wordpress\u002F\" rel=\"nofollow ugc\">Codeboxr\u003C\u002Fa>\u003C\u002Fh3>\n\u003Cblockquote>\n\u003Cp>📺 \u003Ca href=\"https:\u002F\u002Fcodeboxr.net\u002Fwordpress\u002Fdemo-cbx-user-online-for-wordpress\u002F\" rel=\"nofollow ugc\">Live Demo\u003C\u002Fa> | 📋 \u003Ca href=\"https:\u002F\u002Fcodeboxr.com\u002Fdoc\u002Fcbxuseronline-doc\u002F\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> | 🌟 \u003Ca href=\"https:\u002F\u002Fcodeboxr.com\u002Fproduct\u002Fcbx-user-online-for-wordpress\u002F\" rel=\"nofollow ugc\">Upgrade to PRO\u003C\u002Fa> |  👨‍💻 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fcbxuseronline\u002F\" rel=\"ugc\">Free Support\u003C\u002Fa> | 🤴 \u003Ca href=\"https:\u002F\u002Fcodeboxr.com\u002Fcontact-us\" rel=\"nofollow ugc\">Pro Support\u003C\u002Fa> | 📱 \u003Ca href=\"https:\u002F\u002Fcodeboxr.com\u002Fcontact-us\u002F\" rel=\"nofollow ugc\">Contact\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>If you think any necessary feature is missing contact with us, we will add in new release. Best way to check the feature is install the free core version in any dev site and explore\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>🛄 Core Plugin Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Cookie for guest user and login session check for registered user which tracks users perfectly.\u003C\u002Fli>\n\u003Cli>Most user online count and date\u003C\u002Fli>\n\u003Cli>Shortcode and widget based display\u003C\u002Fli>\n\u003Cli>Username, ip, user agent, is from mobile or desktop etc are tracked\u003C\u002Fli>\n\u003Cli>Simple plugin option  to set refresh time\u003C\u002Fli>\n\u003Cli>Show logged in member as online list\u003C\u002Fli>\n\u003Cli>Show site or specific page’s online user statistics\u003C\u002Fli>\n\u003Cli>Dynamically created cookie name for guest visitor\u003C\u002Fli>\n\u003Cli>[new] Records user’s last login time, ip and device from v1.0.6\u003C\u002Fli>\n\u003Cli>[new] Elementor & WPBakery support from v1.0.9\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FnZbt4BtqArI?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch3>📺 Live Demo\u003C\u002Fh3>\n\u003Cp>Check \u003Ca href=\"http:\u002F\u002Fcodeboxr.net\u002Fwordpress\u002Fdemo-cbx-user-online-for-wordpress\u002F\" rel=\"nofollow ugc\">Live Demo\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>🧮 Shortcodes\u003C\u002Fh3>\n\u003Cp>Shortcode with lot of params. Shortcode works for any post, page or do_shortcode.\u003Cbr \u002F>\nShortcode Format: \u003Ccode>[cbxuseronline]\u003C\u002Fcode>\u003C\u002Fp>\n\u003Ch3>🀄 Widgets\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Classic Widgets\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Show Memberlist\u003C\u002Fli>\n\u003Cli>Link user to author page\u003C\u002Fli>\n\u003Cli>Show online count\u003C\u002Fli>\n\u003Cli>Show individual count\u003C\u002Fli>\n\u003Cli>Show member count\u003C\u002Fli>\n\u003Cli>Show guest count\u003C\u002Fli>\n\u003Cli>Show bot count\u003C\u002Fli>\n\u003Cli>Show bot count\u003C\u002Fli>\n\u003Cli>Show for current page\u003C\u002Fli>\n\u003Cli>Show most user online\u003C\u002Fli>\n\u003Cli>Show mobile or desktop logged in status\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Elementor Widgets\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Show Member list\u003C\u002Fli>\n\u003Cli>Link user to author page\u003C\u002Fli>\n\u003Cli>Show online count\u003C\u002Fli>\n\u003Cli>Show individual count\u003C\u002Fli>\n\u003Cli>Show member count\u003C\u002Fli>\n\u003Cli>Show guest count\u003C\u002Fli>\n\u003Cli>Show bot count\u003C\u002Fli>\n\u003Cli>Show bot count\u003C\u002Fli>\n\u003Cli>Show for current page\u003C\u002Fli>\n\u003Cli>Show most user online\u003C\u002Fli>\n\u003Cli>Show mobile or desktop logged in status\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>WPBakery Addon\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Show Member list\u003C\u002Fli>\n\u003Cli>Link user to author page\u003C\u002Fli>\n\u003Cli>Show online count\u003C\u002Fli>\n\u003Cli>Show individual count\u003C\u002Fli>\n\u003Cli>Show member count\u003C\u002Fli>\n\u003Cli>Show guest count\u003C\u002Fli>\n\u003Cli>Show bot count\u003C\u002Fli>\n\u003Cli>Show bot count\u003C\u002Fli>\n\u003Cli>Show for current page\u003C\u002Fli>\n\u003Cli>Show most user online\u003C\u002Fli>\n\u003Cli>Show mobile or desktop logged in status\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>👨‍🏫 \u003Ca href=\"https:\u002F\u002Fcodeboxr.com\u002Fproduct\u002Fcbx-user-online-for-wordpress\" rel=\"nofollow ugc\">See more details and usages guide here\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>💎 Pro Plugin Features\u003C\u002Fh3>\n\u003Cp>Note: free version will be always free but we released pro version with some more extra features.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Dashboard widgets: Online users\u003C\u002Fli>\n\u003Cli>Dashboard widgets: Latest Logged in users (New)\u003C\u002Fli>\n\u003Cli>Dashboard details online user page\u003C\u002Fli>\n\u003Cli>User login history listing and tracking\u003C\u002Fli>\n\u003Cli>Pro version enables some extra features in shortcode params and widget setting\u003C\u002Fli>\n\u003Cli>Support Elementor & WPBakery page builder for Latest Logged-in users.\u003C\u002Fli>\n\u003Cli>Admin details page custom setting\u003C\u002Fli>\n\u003Cli>Shortcode extra params\u003C\u002Fli>\n\u003Cli>Buddpress profile link integration (New in V1.0.4)\u003C\u002Fli>\n\u003Cli>BBpress profile link integration (New in V1.0.4)\u003C\u002Fli>\n\u003Cli>Peepso profile link integration (New in V1.1.2)\u003C\u002Fli>\n\u003Cli>BBpress Online User Statistics (New in V1.0.5)\u003C\u002Fli>\n\u003Cli>User login history feature (New in 1.2.3)\u003C\u002Fli>\n\u003Cli>Export\u002FImport plugin settings\u003C\u002Fli>\n\u003Cli>Reset plugin settings\u003C\u002Fli>\n\u003Cli>Export plugin settings single section\u003C\u002Fli>\n\u003Cli>Reset plugin settings single section\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>👍 Liked Codeboxr?\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Join our \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fcodeboxr\u002F\" rel=\"nofollow ugc\">Facebook Page\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Learn from our tutorials on \u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fuser\u002Fcodeboxr\" rel=\"nofollow ugc\">Youtube Channel\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Or \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fcbxuseronline\u002Freviews\u002F#new-post\" rel=\"ugc\">rate us\u003C\u002Fa> on WordPress\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>🔩 Installation\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>How to install the plugin and get it working.\u003C\u002Fp>\n\u003Col>\n\u003Cli>Upload \u003Ccode>cbxuseronline\u003C\u002Fcode> folder  to the \u003Ccode>\u002Fwp-content\u002Fplugins\u002F\u003C\u002Fcode> directory\u003C\u002Fli>\n\u003Cli>Activate the plugin through the ‘Plugins’ menu in WordPress\u003C\u002Fli>\n\u003Cli>Go to Setting-> CBX Useronline to edit settings\u003C\u002Fli>\n\u003Cli>In any post or page you can write shortcode [cbxuseronline]\u003C\u002Fli>\n\u003C\u002Fol>\n","Shows online users based on cookie for guest and session for registered user. It also records the last login of user.",900,31813,6,"2025-05-16T19:01:00.000Z","6.8.5","5.3",[51,17,52,53,54],"bbpress","last-login","useronline","wordpress-user-online","https:\u002F\u002Fcodeboxr.com\u002Fproduct\u002Fcbx-user-online-for-wordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcbxuseronline.1.3.5.zip","2026-03-15T15:16:48.613Z",{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":11,"downloaded":66,"rating":25,"num_ratings":25,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":15,"tags":70,"homepage":82,"download_link":83,"security_score":84,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":57},"buddypress-ads","Buddypress Ads","1.0","Sandeep Hegde","https:\u002F\u002Fprofiles.wordpress.org\u002Fsandeephegde\u002F","\u003Cp>The developement of this plugin is paused ! This plugin does not support buddypress 1.2\u003C\u002Fp>\n\u003Cp>This plugin will allow you to publish ads through your buddypress site(with wordpress mu) Supports multiple ad networks including adsense , adbrite and many more. Just replace the ad code in the file bp-custom.php with your own ad code.\u003C\u002Fp>\n\u003Cp>Supported Ad Networks :\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Google Adsense\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Adbrite\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Bidvertiser\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Kontera\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>All other\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin will allow you to publish ads throughout your buddypress site.",7099,"2010-03-25T17:38:00.000Z","2.9.2","2.0.2",[17,71,72,59,73,74,75,76,77,78,79,80,81],"buddypress-ad-plugin","buddypress-adbrite","buddypress-adsense","buddypress-adsense-plugin","buddypress-advertising","buddypress-plugins","monetize-buddypress","wordpress-mu-ads","wpmu-adbrite","wpmu-ads","wpmu-adsense","http:\u002F\u002Fwww.sandeephegde.me\u002F2009\u002F11\u002Fbuddypress-ads-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-ads.zip",85,{"slug":86,"name":87,"version":88,"author":62,"author_profile":63,"description":89,"short_description":90,"active_installs":11,"downloaded":91,"rating":92,"num_ratings":31,"last_updated":93,"tested_up_to":68,"requires_at_least":69,"requires_php":15,"tags":94,"homepage":103,"download_link":104,"security_score":84,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":57},"buddypress-analytics","Buddypress Analytics","1.1","\u003Cp>This plugin will allow you to use your analytics script with your buddypress site (with wordpress mu) Supports any analytics script including but not limited to Google Analytics. Just replace the analytics code below with your own analytics code.\u003C\u002Fp>\n\u003Cp>Google analytics users can just replace the google analytics ID (UA-5834099-9 in the code) with your google analytics ID.\u003C\u002Fp>\n","This plugin will allow you to easily install Analytics tracting through your Buddypress and wordpress mu sites.",6874,20,"2010-02-17T13:28:00.000Z",[17,86,95,96,97,98,99,100,101,102],"buddypress-analytics-plugin","buddypress-easy-analytics","buddypress-google-analytics","buddypress-sitewide-analytics","buddypress-stats","wordpress-mu-analytics","wpmu-analytics","wpmu-google-analytics","http:\u002F\u002Fwww.sandeephegde.me\u002F2009\u002F11\u002Fbuddypress-analytics-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-analytics.zip",{"slug":106,"name":107,"version":108,"author":109,"author_profile":110,"description":111,"short_description":112,"active_installs":11,"downloaded":113,"rating":25,"num_ratings":25,"last_updated":114,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":115,"homepage":15,"download_link":118,"security_score":84,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":57},"jet-active-blog-list-ru-edition","Jet Blog List","0.1.2","milordk","https:\u002F\u002Fprofiles.wordpress.org\u002Fmilordk\u002F","\u003Cp>Provides a list of blogs sorted by last update (the last activity on the blog) in two columns. Ability to customize the header and the number of blogs in the blog list\u003C\u002Fp>\n\u003Cp>no longer supported! completely replaced by this plugin https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjet-blog-meta-list-2-ru-edition\u002F\u003C\u002Fp>\n\u003Ch3>Contact\u003C\u002Fh3>\n\u003Cp>For suggestions, bugs, hugs and love can be donated at the following locations.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fmilordk.ru\" rel=\"nofollow ugc\">Authors page\u003C\u002Fa>\u003C\u002Fp>\n","Provides a list of blogs sorted by last update (the last activity on the blog) in two columns.",2661,"2010-02-08T18:05:00.000Z",[116,17,117],"blog","wordpress-mu","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjet-active-blog-list-ru-edition.zip",{"slug":120,"name":121,"version":122,"author":109,"author_profile":110,"description":123,"short_description":124,"active_installs":11,"downloaded":125,"rating":25,"num_ratings":25,"last_updated":15,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":126,"homepage":130,"download_link":131,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"jet-member-could","Jet Random Members Widget","1.3","\u003Cp>en: Create a cloud of users on your social network! Do you have many users? Do you want more communication? Install this widget!\u003Cbr \u002F>\nProvides random members avatar with link to profile\u003C\u002Fp>\n\u003Cp>ru: Создайте облако пользователей Вашей социальной сети! У Вас много пользователей? Хотите больше коммуникаций? Установите этот виджет!\u003C\u002Fp>\n\u003Cp>!!!!!!!!!!!\u003Cbr \u002F>\nru: Данная версия плагина не будет поддерживаться в новых версия BuddyPress (1.2.5.1 и выше), взамен будет новый плагин:\u003Cbr \u002F>\nen: This version of the plug will not be supported in the new version BuddyPress (1.2.5.1 and above) will return the new plugin:\u003C\u002Fp>\n\u003Cp>Jet Unit Site Could (https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjet-unit-site-could\u002F)\u003Cbr \u002F>\n!!!!!!!!!!!\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fsportactions.ru\" rel=\"nofollow ugc\">Live demo\u003C\u002Fa> (need registration)\u003C\u002Fp>\n\u003Cp>! backward compatibility with 1.1.3\u003C\u002Fp>\n\u003Ch3>Contact\u003C\u002Fh3>\n\u003Cp>For suggestions, bugs, hugs and love can be donated at the following locations.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fmilordk.ru\" rel=\"nofollow ugc\">Authors page\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fmilordk.ru\u002Fr-lichnoe\u002Fopyt-l\u002Fcms\u002Fprodolzhaem-widget-o-stroenie-jet-random-members-widget.html\" rel=\"nofollow ugc\">Plugin page\u003C\u002Fa>\u003C\u002Fp>\n","en: Create a cloud of users on your social network! Do you have many users? Do you want more communication? Install this widget!",4821,[17,127,128,129,117],"members","meta","widget","http:\u002F\u002Fmilordk.ru\u002Fr-lichnoe\u002Fopyt-l\u002Fcms\u002Fprodolzhaem-widget-o-stroenie-jet-random-members-widget.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjet-member-could.zip",{"attackSurface":133,"codeSignals":258,"taintFlows":791,"riskAssessment":848,"analyzedAt":866},{"hooks":134,"ajaxHandlers":248,"restRoutes":249,"shortcodes":250,"cronEvents":251,"entryPointCount":25,"unprotectedCount":25},[135,141,145,150,153,158,162,164,167,170,174,177,181,185,188,192,196,199,203,207,211,214,217,220,224,226,231,235,238,242,244,247],{"type":136,"name":137,"callback":138,"file":139,"line":140},"action","bebop_main_import_cron","bebop_main_import_function","bebop.php",50,{"type":136,"name":142,"callback":143,"file":139,"line":144},"bebop_secondary_import_cron","bebop_secondary_import_function",51,{"type":146,"name":147,"callback":148,"file":139,"line":149},"filter","cron_schedules","bebop_main_cron_schedule",54,{"type":146,"name":147,"callback":151,"file":139,"line":152},"bebop_secondary_cron_schedule",55,{"type":136,"name":154,"callback":155,"priority":156,"file":139,"line":157},"bp_init","bebop_init",5,149,{"type":136,"name":159,"callback":160,"file":161,"line":156},"admin_init","bebop_general_admin_update_settings","core\\bebop-core-admin.php",{"type":136,"name":159,"callback":163,"file":161,"line":46},"bebop_oer_providers_update_active",{"type":136,"name":159,"callback":165,"file":161,"line":166},"bebop_extension_admin_update_settings",7,{"type":136,"name":159,"callback":168,"file":161,"line":169},"bebop_admin_flush_table",8,{"type":136,"name":171,"callback":172,"file":161,"line":173},"all_admin_notices","bebop_admin_notice",9,{"type":136,"name":175,"callback":176,"file":161,"line":11},"admin_enqueue_scripts","bebop_provider_js",{"type":136,"name":178,"callback":179,"file":180,"line":166},"bp_actions","bebop_manage_oers","core\\bebop-core.php",{"type":136,"name":182,"callback":183,"file":180,"line":184},"wp_enqueue_scripts","bebop_oer_js",120,{"type":136,"name":178,"callback":186,"file":180,"line":187},"bebop_manage_provider",125,{"type":136,"name":189,"callback":190,"file":180,"line":191},"bp_activity_deleted_activities","update_bebop_status",441,{"type":136,"name":193,"callback":194,"file":180,"line":195},"bp_member_activity_filter_options","bebop_load_filter_options",599,{"type":136,"name":197,"callback":194,"file":180,"line":198},"bp_activity_filter_options",602,{"type":136,"name":200,"callback":201,"file":180,"line":202},"bp_before_activity_loop","bebop_access_ajax",605,{"type":146,"name":204,"callback":205,"file":180,"line":206},"bp_ajax_querystring","bebop_dropdown_query_checker",609,{"type":146,"name":208,"callback":209,"file":210,"line":169},"bebop_plugin_extensions","anonymous","core\\bebop-extensions.php",{"type":136,"name":182,"callback":212,"file":210,"line":213},"bebop_user_stylesheets",165,{"type":136,"name":215,"callback":209,"file":210,"line":216},"bp_template_content",166,{"type":136,"name":178,"callback":218,"file":219,"line":156},"bebop_feeds","core\\bebop-feeds.php",{"type":136,"name":221,"callback":222,"priority":92,"file":223,"line":169},"bp_setup_nav","bebop_setup_user_nav","core\\bebop-pages.php",{"type":136,"name":221,"callback":222,"priority":92,"file":223,"line":225},12,{"type":146,"name":227,"callback":228,"priority":229,"file":223,"line":230},"wp_before_admin_bar_render","bebop_admin_bar_resources",999,13,{"type":136,"name":182,"callback":232,"file":233,"line":234},"bebop_loop_js","core\\templates\\user\\bebop-user-settings.php",44,{"type":136,"name":200,"callback":236,"file":237,"line":225},"add_oembed_slideshare","extensions\\slideshare\\core.php",{"type":146,"name":239,"callback":240,"priority":156,"file":241,"line":166},"bp_get_activity_content","bebop_twitter_photos","extensions\\twitter\\core.php",{"type":146,"name":243,"callback":240,"priority":156,"file":241,"line":169},"bp_get_activity_content_body",{"type":146,"name":239,"callback":245,"priority":169,"file":246,"line":169},"bebop_youtube_embed","extensions\\youtube\\core.php",{"type":146,"name":243,"callback":245,"priority":169,"file":246,"line":173},[],[],[],[252,254,256],{"hook":137,"callback":137,"file":139,"line":253},59,{"hook":142,"callback":142,"file":139,"line":255},64,{"hook":137,"callback":137,"file":161,"line":257},34,{"dangerousFunctions":259,"sqlUsage":268,"outputEscaping":374,"fileOperations":789,"externalRequests":789,"nonceChecks":14,"capabilityChecks":31,"bundledLibraries":790},[260,263],{"fn":261,"file":210,"line":169,"context":262},"create_function","add_filter( 'bebop_plugin_extensions', create_function( '$extensions', '",{"fn":264,"file":265,"line":266,"context":267},"unserialize","extensions\\vimeo\\import.php",77,"$data = unserialize( $data );",{"prepared":92,"raw":269,"locations":270},52,[271,274,276,277,279,281,283,285,287,289,291,293,295,297,299,302,304,307,308,310,312,313,314,316,319,321,323,325,327,329,331,332,334,336,338,340,342,344,346,348,350,352,354,356,358,360,362,364,366,368,370,372],{"file":272,"line":13,"context":273},"core\\bebop-activate.php","$wpdb->get_results() with variable interpolation",{"file":272,"line":275,"context":273},89,{"file":272,"line":184,"context":273},{"file":272,"line":278,"context":273},131,{"file":272,"line":280,"context":273},132,{"file":272,"line":282,"context":273},133,{"file":272,"line":284,"context":273},135,{"file":272,"line":286,"context":273},136,{"file":272,"line":288,"context":273},138,{"file":272,"line":290,"context":273},139,{"file":272,"line":292,"context":273},141,{"file":272,"line":294,"context":273},142,{"file":272,"line":296,"context":273},150,{"file":272,"line":298,"context":273},176,{"file":180,"line":300,"context":301},446,"$wpdb->get_row() with variable interpolation",{"file":303,"line":11,"context":273},"core\\bebop-tables.php",{"file":303,"line":305,"context":306},38,"$wpdb->query() with variable interpolation",{"file":303,"line":140,"context":273},{"file":303,"line":309,"context":273},62,{"file":303,"line":311,"context":273},63,{"file":303,"line":255,"context":273},{"file":303,"line":266,"context":301},{"file":303,"line":315,"context":301},87,{"file":303,"line":317,"context":318},97,"$wpdb->get_var() with variable interpolation",{"file":303,"line":320,"context":273},115,{"file":303,"line":322,"context":273},119,{"file":303,"line":324,"context":318},126,{"file":303,"line":326,"context":273},144,{"file":303,"line":328,"context":273},147,{"file":303,"line":330,"context":273},154,{"file":303,"line":216,"context":306},{"file":303,"line":333,"context":318},193,{"file":303,"line":335,"context":273},211,{"file":303,"line":337,"context":273},214,{"file":303,"line":339,"context":301},237,{"file":303,"line":341,"context":301},248,{"file":303,"line":343,"context":306},264,{"file":303,"line":345,"context":273},282,{"file":303,"line":347,"context":301},298,{"file":303,"line":349,"context":301},308,{"file":303,"line":351,"context":273},320,{"file":303,"line":353,"context":273},326,{"file":303,"line":355,"context":301},340,{"file":303,"line":357,"context":306},396,{"file":303,"line":359,"context":273},414,{"file":303,"line":361,"context":273},431,{"file":303,"line":363,"context":273},442,{"file":303,"line":365,"context":301},468,{"file":303,"line":367,"context":273},504,{"file":303,"line":369,"context":273},511,{"file":303,"line":371,"context":273},518,{"file":303,"line":373,"context":273},532,{"escaped":25,"rawEcho":375,"locations":376},317,[377,380,382,384,386,388,390,392,394,397,399,401,403,405,406,408,410,411,413,414,415,417,419,421,422,424,426,428,429,431,433,434,435,437,439,440,442,444,446,448,450,451,453,455,456,457,458,459,461,463,464,466,468,470,472,474,476,477,479,481,482,483,484,487,488,489,490,491,492,493,494,496,498,499,500,501,502,504,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,526,527,528,529,531,533,535,537,539,541,543,544,546,547,548,549,550,552,554,556,557,558,559,560,562,563,564,565,566,567,568,569,570,571,572,573,574,575,577,579,580,581,582,584,585,588,589,590,591,592,593,594,596,597,599,601,602,603,604,605,606,607,608,609,610,611,613,614,615,616,618,620,622,623,624,625,626,627,628,629,630,631,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,665,666,667,668,669,670,671,672,673,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,707,708,709,710,711,712,714,716,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,736,738,740,742,743,744,745,746,747,748,749,751,753,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,774,775,776,777,778,779,780,781,782,785,786,788],{"file":161,"line":378,"context":379},167,"raw output",{"file":161,"line":381,"context":379},170,{"file":180,"line":383,"context":379},469,{"file":180,"line":385,"context":379},472,{"file":180,"line":387,"context":379},476,{"file":180,"line":389,"context":379},627,{"file":180,"line":391,"context":379},634,{"file":210,"line":393,"context":379},157,{"file":395,"line":396,"context":379},"core\\bebop-oauth.php",267,{"file":395,"line":398,"context":379},302,{"file":400,"line":31,"context":379},"core\\templates\\admin\\bebop-admin-settings.php",{"file":400,"line":402,"context":379},24,{"file":400,"line":404,"context":379},27,{"file":400,"line":32,"context":379},{"file":400,"line":407,"context":379},32,{"file":409,"line":31,"context":379},"core\\templates\\admin\\bebop-admin.php",{"file":409,"line":46,"context":379},{"file":409,"line":412,"context":379},42,{"file":409,"line":269,"context":379},{"file":409,"line":311,"context":379},{"file":416,"line":31,"context":379},"core\\templates\\admin\\bebop-content-providers.php",{"file":416,"line":418,"context":379},48,{"file":416,"line":420,"context":379},56,{"file":416,"line":420,"context":379},{"file":416,"line":423,"context":379},60,{"file":425,"line":31,"context":379},"core\\templates\\admin\\bebop-content.php",{"file":425,"line":427,"context":379},31,{"file":425,"line":407,"context":379},{"file":425,"line":430,"context":379},33,{"file":425,"line":432,"context":379},41,{"file":425,"line":412,"context":379},{"file":425,"line":234,"context":379},{"file":425,"line":436,"context":379},46,{"file":425,"line":438,"context":379},75,{"file":425,"line":275,"context":379},{"file":425,"line":441,"context":379},92,{"file":425,"line":443,"context":379},93,{"file":445,"line":31,"context":379},"core\\templates\\admin\\bebop-error-log.php",{"file":445,"line":447,"context":379},16,{"file":445,"line":449,"context":379},21,{"file":445,"line":436,"context":379},{"file":445,"line":452,"context":379},57,{"file":454,"line":31,"context":379},"core\\templates\\admin\\bebop-general-log.php",{"file":454,"line":447,"context":379},{"file":454,"line":449,"context":379},{"file":454,"line":436,"context":379},{"file":454,"line":452,"context":379},{"file":460,"line":11,"context":379},"core\\templates\\user\\bebop-feed-template.php",{"file":460,"line":462,"context":379},22,{"file":460,"line":402,"context":379},{"file":460,"line":465,"context":379},25,{"file":460,"line":467,"context":379},26,{"file":460,"line":469,"context":379},35,{"file":460,"line":471,"context":379},36,{"file":460,"line":473,"context":379},37,{"file":460,"line":475,"context":379},40,{"file":460,"line":412,"context":379},{"file":460,"line":478,"context":379},43,{"file":460,"line":480,"context":379},45,{"file":460,"line":149,"context":379},{"file":233,"line":305,"context":379},{"file":233,"line":423,"context":379},{"file":485,"line":486,"context":379},"core\\templates\\user\\oer-manager.php",19,{"file":485,"line":92,"context":379},{"file":485,"line":449,"context":379},{"file":485,"line":462,"context":379},{"file":485,"line":465,"context":379},{"file":485,"line":469,"context":379},{"file":485,"line":234,"context":379},{"file":485,"line":480,"context":379},{"file":485,"line":495,"context":379},47,{"file":485,"line":497,"context":379},53,{"file":485,"line":420,"context":379},{"file":485,"line":253,"context":379},{"file":485,"line":309,"context":379},{"file":485,"line":255,"context":379},{"file":485,"line":503,"context":379},67,{"file":505,"line":462,"context":379},"extensions\\facebook\\templates\\admin-settings.php",{"file":505,"line":402,"context":379},{"file":505,"line":471,"context":379},{"file":505,"line":473,"context":379},{"file":505,"line":473,"context":379},{"file":505,"line":305,"context":379},{"file":505,"line":305,"context":379},{"file":505,"line":305,"context":379},{"file":505,"line":475,"context":379},{"file":505,"line":475,"context":379},{"file":505,"line":432,"context":379},{"file":505,"line":432,"context":379},{"file":505,"line":432,"context":379},{"file":505,"line":436,"context":379},{"file":505,"line":495,"context":379},{"file":505,"line":495,"context":379},{"file":505,"line":149,"context":379},{"file":505,"line":152,"context":379},{"file":505,"line":152,"context":379},{"file":505,"line":525,"context":379},61,{"file":505,"line":309,"context":379},{"file":505,"line":309,"context":379},{"file":505,"line":309,"context":379},{"file":505,"line":530,"context":379},66,{"file":505,"line":532,"context":379},71,{"file":505,"line":534,"context":379},78,{"file":505,"line":536,"context":379},95,{"file":505,"line":538,"context":379},101,{"file":505,"line":540,"context":379},111,{"file":505,"line":542,"context":379},123,{"file":505,"line":288,"context":379},{"file":545,"line":32,"context":379},"extensions\\facebook\\templates\\user-settings.php",{"file":545,"line":430,"context":379},{"file":545,"line":305,"context":379},{"file":545,"line":140,"context":379},{"file":545,"line":420,"context":379},{"file":545,"line":551,"context":379},74,{"file":545,"line":553,"context":379},88,{"file":555,"line":462,"context":379},"extensions\\flickr\\templates\\admin-settings.php",{"file":555,"line":402,"context":379},{"file":555,"line":473,"context":379},{"file":555,"line":305,"context":379},{"file":555,"line":305,"context":379},{"file":555,"line":561,"context":379},39,{"file":555,"line":561,"context":379},{"file":555,"line":561,"context":379},{"file":555,"line":234,"context":379},{"file":555,"line":480,"context":379},{"file":555,"line":480,"context":379},{"file":555,"line":269,"context":379},{"file":555,"line":497,"context":379},{"file":555,"line":497,"context":379},{"file":555,"line":253,"context":379},{"file":555,"line":423,"context":379},{"file":555,"line":423,"context":379},{"file":555,"line":423,"context":379},{"file":555,"line":255,"context":379},{"file":555,"line":576,"context":379},69,{"file":555,"line":578,"context":379},76,{"file":555,"line":536,"context":379},{"file":555,"line":538,"context":379},{"file":555,"line":540,"context":379},{"file":555,"line":583,"context":379},129,{"file":555,"line":326,"context":379},{"file":586,"line":587,"context":379},"extensions\\flickr\\templates\\user-settings.php",29,{"file":586,"line":407,"context":379},{"file":586,"line":471,"context":379},{"file":586,"line":475,"context":379},{"file":586,"line":478,"context":379},{"file":586,"line":420,"context":379},{"file":586,"line":452,"context":379},{"file":586,"line":595,"context":379},58,{"file":586,"line":255,"context":379},{"file":586,"line":598,"context":379},73,{"file":600,"line":402,"context":379},"extensions\\rss\\templates\\admin-settings.php",{"file":600,"line":587,"context":379},{"file":600,"line":32,"context":379},{"file":600,"line":32,"context":379},{"file":600,"line":473,"context":379},{"file":600,"line":305,"context":379},{"file":600,"line":305,"context":379},{"file":600,"line":234,"context":379},{"file":600,"line":480,"context":379},{"file":600,"line":480,"context":379},{"file":600,"line":480,"context":379},{"file":600,"line":612,"context":379},49,{"file":600,"line":269,"context":379},{"file":600,"line":253,"context":379},{"file":600,"line":534,"context":379},{"file":600,"line":617,"context":379},104,{"file":600,"line":619,"context":379},118,{"file":621,"line":587,"context":379},"extensions\\rss\\templates\\user-settings.php",{"file":621,"line":407,"context":379},{"file":621,"line":430,"context":379},{"file":621,"line":471,"context":379},{"file":621,"line":475,"context":379},{"file":621,"line":478,"context":379},{"file":621,"line":595,"context":379},{"file":621,"line":253,"context":379},{"file":621,"line":503,"context":379},{"file":621,"line":266,"context":379},{"file":632,"line":462,"context":379},"extensions\\slideshare\\templates\\admin-settings.php",{"file":632,"line":402,"context":379},{"file":632,"line":471,"context":379},{"file":632,"line":473,"context":379},{"file":632,"line":473,"context":379},{"file":632,"line":305,"context":379},{"file":632,"line":305,"context":379},{"file":632,"line":305,"context":379},{"file":632,"line":475,"context":379},{"file":632,"line":475,"context":379},{"file":632,"line":432,"context":379},{"file":632,"line":432,"context":379},{"file":632,"line":432,"context":379},{"file":632,"line":436,"context":379},{"file":632,"line":495,"context":379},{"file":632,"line":495,"context":379},{"file":632,"line":149,"context":379},{"file":632,"line":152,"context":379},{"file":632,"line":152,"context":379},{"file":632,"line":525,"context":379},{"file":632,"line":309,"context":379},{"file":632,"line":309,"context":379},{"file":632,"line":309,"context":379},{"file":632,"line":530,"context":379},{"file":632,"line":532,"context":379},{"file":632,"line":534,"context":379},{"file":632,"line":536,"context":379},{"file":632,"line":538,"context":379},{"file":632,"line":540,"context":379},{"file":632,"line":583,"context":379},{"file":632,"line":326,"context":379},{"file":664,"line":587,"context":379},"extensions\\slideshare\\templates\\user-settings.php",{"file":664,"line":407,"context":379},{"file":664,"line":473,"context":379},{"file":664,"line":432,"context":379},{"file":664,"line":234,"context":379},{"file":664,"line":452,"context":379},{"file":664,"line":595,"context":379},{"file":664,"line":255,"context":379},{"file":664,"line":598,"context":379},{"file":674,"line":462,"context":379},"extensions\\twitter\\templates\\admin-settings.php",{"file":674,"line":402,"context":379},{"file":674,"line":471,"context":379},{"file":674,"line":473,"context":379},{"file":674,"line":473,"context":379},{"file":674,"line":305,"context":379},{"file":674,"line":305,"context":379},{"file":674,"line":305,"context":379},{"file":674,"line":475,"context":379},{"file":674,"line":475,"context":379},{"file":674,"line":432,"context":379},{"file":674,"line":432,"context":379},{"file":674,"line":432,"context":379},{"file":674,"line":436,"context":379},{"file":674,"line":495,"context":379},{"file":674,"line":495,"context":379},{"file":674,"line":149,"context":379},{"file":674,"line":152,"context":379},{"file":674,"line":152,"context":379},{"file":674,"line":525,"context":379},{"file":674,"line":309,"context":379},{"file":674,"line":309,"context":379},{"file":674,"line":309,"context":379},{"file":674,"line":530,"context":379},{"file":674,"line":532,"context":379},{"file":674,"line":534,"context":379},{"file":674,"line":536,"context":379},{"file":674,"line":538,"context":379},{"file":674,"line":540,"context":379},{"file":674,"line":542,"context":379},{"file":674,"line":288,"context":379},{"file":706,"line":32,"context":379},"extensions\\twitter\\templates\\user-settings.php",{"file":706,"line":430,"context":379},{"file":706,"line":473,"context":379},{"file":706,"line":432,"context":379},{"file":706,"line":140,"context":379},{"file":706,"line":420,"context":379},{"file":706,"line":713,"context":379},81,{"file":706,"line":715,"context":379},90,{"file":717,"line":718,"context":379},"extensions\\vimeo\\templates\\admin-settings.php",23,{"file":717,"line":467,"context":379},{"file":717,"line":404,"context":379},{"file":717,"line":404,"context":379},{"file":717,"line":257,"context":379},{"file":717,"line":469,"context":379},{"file":717,"line":469,"context":379},{"file":717,"line":432,"context":379},{"file":717,"line":412,"context":379},{"file":717,"line":412,"context":379},{"file":717,"line":412,"context":379},{"file":717,"line":436,"context":379},{"file":717,"line":144,"context":379},{"file":717,"line":595,"context":379},{"file":717,"line":438,"context":379},{"file":717,"line":713,"context":379},{"file":717,"line":735,"context":379},91,{"file":717,"line":737,"context":379},109,{"file":717,"line":739,"context":379},124,{"file":741,"line":587,"context":379},"extensions\\vimeo\\templates\\user-settings.php",{"file":741,"line":407,"context":379},{"file":741,"line":430,"context":379},{"file":741,"line":473,"context":379},{"file":741,"line":478,"context":379},{"file":741,"line":478,"context":379},{"file":741,"line":420,"context":379},{"file":741,"line":311,"context":379},{"file":741,"line":750,"context":379},72,{"file":752,"line":718,"context":379},"extensions\\youtube\\templates\\admin-settings.php",{"file":752,"line":754,"context":379},28,{"file":752,"line":587,"context":379},{"file":752,"line":587,"context":379},{"file":752,"line":471,"context":379},{"file":752,"line":473,"context":379},{"file":752,"line":473,"context":379},{"file":752,"line":478,"context":379},{"file":752,"line":234,"context":379},{"file":752,"line":234,"context":379},{"file":752,"line":234,"context":379},{"file":752,"line":418,"context":379},{"file":752,"line":144,"context":379},{"file":752,"line":595,"context":379},{"file":752,"line":438,"context":379},{"file":752,"line":713,"context":379},{"file":752,"line":735,"context":379},{"file":752,"line":737,"context":379},{"file":752,"line":739,"context":379},{"file":773,"line":587,"context":379},"extensions\\youtube\\templates\\user-settings.php",{"file":773,"line":407,"context":379},{"file":773,"line":473,"context":379},{"file":773,"line":432,"context":379},{"file":773,"line":234,"context":379},{"file":773,"line":452,"context":379},{"file":773,"line":595,"context":379},{"file":773,"line":255,"context":379},{"file":773,"line":598,"context":379},{"file":783,"line":784,"context":379},"import.php",70,{"file":783,"line":438,"context":379},{"file":787,"line":532,"context":379},"secondary_import.php",{"file":787,"line":438,"context":379},3,[],[792,811,819,831,840],{"entryPoint":793,"graph":794,"unsanitizedCount":25,"severity":810},"bebop_manage_provider (core\\bebop-core.php:126)",{"nodes":795,"edges":807},[796,801],{"id":797,"type":798,"label":799,"file":180,"line":800},"n0","source","$_GET",218,{"id":802,"type":803,"label":804,"file":180,"line":805,"wp_function":806},"n1","sink","file_get_contents() [SSRF\u002FLFI]",225,"file_get_contents",[808],{"from":797,"to":802,"sanitized":809},true,"low",{"entryPoint":812,"graph":813,"unsanitizedCount":25,"severity":810},"\u003Cbebop-core> (core\\bebop-core.php:0)",{"nodes":814,"edges":817},[815,816],{"id":797,"type":798,"label":799,"file":180,"line":800},{"id":802,"type":803,"label":804,"file":180,"line":805,"wp_function":806},[818],{"from":797,"to":802,"sanitized":809},{"entryPoint":820,"graph":821,"unsanitizedCount":789,"severity":810},"\u003Cbebop-content> (core\\templates\\admin\\bebop-content.php:0)",{"nodes":822,"edges":828},[823,825],{"id":797,"type":798,"label":824,"file":425,"line":427},"$_SERVER['PHP_SELF'] (x3)",{"id":802,"type":803,"label":826,"file":425,"line":427,"wp_function":827},"echo() [XSS]","echo",[829],{"from":797,"to":802,"sanitized":830},false,{"entryPoint":832,"graph":833,"unsanitizedCount":31,"severity":810},"\u003Cbebop-error-log> (core\\templates\\admin\\bebop-error-log.php:0)",{"nodes":834,"edges":838},[835,837],{"id":797,"type":798,"label":836,"file":445,"line":447},"$_SERVER['PHP_SELF']",{"id":802,"type":803,"label":826,"file":445,"line":447,"wp_function":827},[839],{"from":797,"to":802,"sanitized":830},{"entryPoint":841,"graph":842,"unsanitizedCount":31,"severity":810},"\u003Cbebop-general-log> (core\\templates\\admin\\bebop-general-log.php:0)",{"nodes":843,"edges":846},[844,845],{"id":797,"type":798,"label":836,"file":454,"line":447},{"id":802,"type":803,"label":826,"file":454,"line":447,"wp_function":827},[847],{"from":797,"to":802,"sanitized":830},{"summary":849,"deductions":850},"The bebop plugin v1.3.2 exhibits a mixed security posture. On one hand, the plugin demonstrates strong adherence to WordPress security best practices by having a clean vulnerability history with no recorded CVEs.  Furthermore, the static analysis shows a promisingly small attack surface, with no unprotected AJAX handlers, REST API routes, or shortcodes identified. The presence of nonce checks and capability checks, while limited, indicates some effort towards securing entry points.\n\nHowever, significant concerns arise from the code analysis. The presence of dangerous functions like `create_function` and `unserialize` immediately flags potential security risks, as these functions can be exploited if not handled with extreme care and robust sanitization.  The low percentage of SQL queries using prepared statements (28%) is particularly worrying, suggesting a high probability of SQL injection vulnerabilities. Compounding this, 0% of output escaping is properly implemented, indicating a high risk of Cross-Site Scripting (XSS) vulnerabilities across the plugin's output.\n\nDespite the lack of a public vulnerability history, the internal code signals paint a picture of potential weaknesses. The taint analysis showing flows with unsanitized paths, even if not classified as critical or high severity, are still red flags that require attention. The combination of vulnerable functions, widespread unescaped output, and a large number of raw SQL queries strongly suggests that while no public exploits exist yet, the plugin is susceptible to exploitation if an attacker can find and leverage these weaknesses. A responsible disclosure process or immediate code audit is recommended.",[851,854,856,858,860,862,864],{"reason":852,"points":853},"Dangerous function 'unserialize' used",15,{"reason":855,"points":853},"Dangerous function 'create_function' used",{"reason":857,"points":11},"Low percentage of prepared statements in SQL queries",{"reason":859,"points":169},"No output escaping implemented",{"reason":861,"points":156},"Taint analysis found unsanitized paths",{"reason":863,"points":789},"Limited capability checks",{"reason":865,"points":789},"Limited nonce checks","2026-03-16T23:18:50.457Z",{"wat":868,"direct":876},{"assetPaths":869,"generatorPatterns":871,"scriptPaths":872,"versionParams":873},[870],"\u002Fwp-content\u002Fplugins\u002Fbebop\u002Fcore\u002Fresources\u002Fjs\u002Fbebop-provider-helper.js",[],[870],[874,875],"bebop\u002Fstyle.css?ver=","bebop\u002Fcore\u002Fresources\u002Fjs\u002Fbebop-provider-helper.js?ver=",{"cssClasses":877,"htmlComments":878,"htmlAttributes":879,"restEndpoints":880,"jsGlobals":881,"shortcodeOutput":882},[],[],[],[],[],[]]