[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhYBhrj-cjhIyLokbSd70nJMK80GaMn-cx5OeNq6UpVo":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":36,"analysis":86,"fingerprints":159},"block-user-account","DW Block User Account","1.4","Dango Web","https:\u002F\u002Fprofiles.wordpress.org\u002Fdangoweb\u002F","\u003Cp>If you have a large website with a lot of users or a small website with few users, and in some cases, such as user abuse or other reasons, you can block user, with this plugin. (user cannot enter to wp_admin.)\u003Cbr \u002F>\nAfter blocking if the user is in his account, he will also be logged out.\u003C\u002Fp>\n","This plugin blocks user accounts and prevents users from accessing the WP ADMIN",1000,10290,86,7,"2025-08-28T23:41:00.000Z","6.8.5","6.5","7.4",[20,21,22],"block-account","block-user","disable-account","https:\u002F\u002Fdangoweb.ir\u002Fproduct\u002Fbuacc-wordpress-user-block-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fblock-user-account.1.4.zip",100,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"dangoweb",2,30,94,"2026-04-04T04:21:34.758Z",[37,62],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":57,"download_link":58,"security_score":59,"vuln_count":60,"unpatched_count":26,"last_vuln_date":61,"fetched_at":28},"user-blocker","User Blocker","2.2","solwininfotech","https:\u002F\u002Fprofiles.wordpress.org\u002Fsolwininfotech\u002F","\u003Cp>User Blocker plugin provide the ability to admin to block or unblock user accounts quickly and effortlessly. User can be blocked by Roll or username for specific day & time OR date range Or permanently. When someone tries to log in, and if that user blocked then a friendly error message is displayed on the login screen. You can unblock accounts at any time you want.\u003Cbr \u002F>\nAlso admin can view blocked user list and quickly search user and unblock account if require.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>User Blocker Plugin Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Block user by time (FROM-time to TO-time) for certain week days\u003C\u002Fli>\n\u003Cli>Block user by date (FROM-date to TO-date)\u003C\u002Fli>\n\u003Cli>Block user Permanently\u003C\u002Fli>\n\u003Cli>Unblock user any time\u003C\u002Fli>\n\u003Cli>Block user by UserName OR by Role\u003C\u002Fli>\n\u003Cli>Customizable message for each blocked User OR Blocked Role\u003C\u002Fli>\n\u003Cli>View blocked user list By Time, By Date and Permanently blocked users.\u003C\u002Fli>\n\u003Cli>Easy to search any blocked user by username\u002F email \u002F First name to view blocking status and modify or remove blocking\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Technical Support\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You have any suggestion with User Blocker plugin or you found a bug, please contact us at \u003Ca href=\"http:\u002F\u002Fsupport.solwininfotech.com\" rel=\"nofollow ugc\">support.solwininfotech.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Permissions:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Only administrators are allowed to use this system. People with lower access levels are neither shown the new bulk actions, nor are they allowed to change the status of accounts.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Important: Plugin does not deactivate any Admin users.\u003C\u002Fstrong>\u003C\u002Fp>\n","To block users from admin side except admin users for specific day,time, and date or permanently.",3000,81478,82,"2024-08-09T14:45:00.000Z","6.6.5","5.4","",[21,53,54,55,56],"deactivate-users","deny-user","disable-users","restrict-user","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fuser-blocker\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuser-blocker.zip",92,1,"2022-11-09 00:00:00",{"slug":63,"name":64,"version":65,"author":66,"author_profile":67,"description":68,"short_description":69,"active_installs":70,"downloaded":71,"rating":72,"num_ratings":32,"last_updated":73,"tested_up_to":74,"requires_at_least":75,"requires_php":76,"tags":77,"homepage":83,"download_link":84,"security_score":85,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"bp-block-users","BP Block Users","1.0.2","Brandon Allen","https:\u002F\u002Fprofiles.wordpress.org\u002Fthebrandonallen\u002F","\u003Cblockquote>\n\u003Cp>This plugin requires BuddyPress 2.4.0+.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>Sometimes a user in your community needs a some time to cool off. In BuddyPress, spamming or deleting the user is a destructive action, leaving little to no trace that the user existed. BP Block Users allows a capable user (administrators only by default) to block a user from logging into the site. Users can be blocked for a specified period of time, or indefinitely, if administrators need more time to determine the best course of action.\u003C\u002Fp>\n\u003Cp>A message will be shown on the login screen when a blocked user attempts, but ultimately fails, to login, informing them that their account has been blocked. During the block period, email notifications are suspended.\u003C\u002Fp>\n\u003Cp>For bug reports or to submit patches or translation files, visit https:\u002F\u002Fgithub.com\u002Fthebrandonallen\u002Fbp-block-users\u002Fissues.\u003C\u002Fp>\n","Allows BuddyPress administrators to block users indefinitely, or for a specified period of time.",50,6491,60,"2018-01-15T21:39:00.000Z","4.9.29","4.3","5.2.4",[78,79,80,81,82],"block","block-users","bp","buddypress","users","https:\u002F\u002Fgithub.com\u002Fthebrandonallen\u002Fbp-block-users","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-block-users.1.0.2.zip",85,{"attackSurface":87,"codeSignals":140,"taintFlows":151,"riskAssessment":152,"analyzedAt":158},{"hooks":88,"ajaxHandlers":136,"restRoutes":137,"shortcodes":138,"cronEvents":139,"entryPointCount":26,"unprotectedCount":26},[89,95,99,102,106,109,114,119,123,127,132],{"type":90,"name":91,"callback":92,"file":93,"line":94},"action","plugins_loaded","bua_translation","block-user-account.php",12,{"type":90,"name":96,"callback":97,"file":93,"line":98},"show_user_profile","bua_block_checkbox",24,{"type":90,"name":100,"callback":97,"file":93,"line":101},"edit_user_profile",25,{"type":90,"name":103,"callback":104,"file":93,"line":105},"personal_options_update","bua_save_user_status",67,{"type":90,"name":107,"callback":104,"file":93,"line":108},"edit_user_profile_update",68,{"type":110,"name":111,"callback":112,"file":93,"line":113},"filter","bulk_actions-users","bua_user_bulk_actions",90,{"type":110,"name":115,"callback":116,"priority":117,"file":93,"line":118},"handle_bulk_actions-users","bua_user_bulk_actions_handle",10,98,{"type":110,"name":120,"callback":121,"file":93,"line":122},"manage_users_columns","bua_user_status_column",125,{"type":90,"name":124,"callback":125,"priority":117,"file":93,"line":126},"manage_users_custom_column","bua_show_user_status",133,{"type":110,"name":128,"callback":129,"priority":130,"file":93,"line":131},"authenticate","bua_login_authenticate",99,158,{"type":90,"name":133,"callback":134,"file":93,"line":135},"admin_enqueue_scripts","closure",180,[],[],[],[],{"dangerousFunctions":141,"sqlUsage":142,"outputEscaping":144,"fileOperations":26,"externalRequests":26,"nonceChecks":26,"capabilityChecks":149,"bundledLibraries":150},[],{"prepared":26,"raw":26,"locations":143},[],{"escaped":60,"rawEcho":60,"locations":145},[146],{"file":93,"line":147,"context":148},54,"raw output",3,[],[],{"summary":153,"deductions":154},"The 'block-user-account' v1.4 plugin exhibits a generally strong security posture based on the provided static analysis.  The complete absence of a discernible attack surface, including AJAX handlers, REST API routes, shortcodes, and cron events, is a significant positive.  Furthermore, the plugin demonstrates good practices by exclusively using prepared statements for its SQL queries and avoiding file operations and external HTTP requests.  The presence of capability checks, even without explicit mention of nonce checks, suggests some level of access control is implemented.\n\nHowever, a notable concern arises from the output escaping. With 50% of outputs not properly escaped, there is a risk of Cross-Site Scripting (XSS) vulnerabilities if user-supplied data is reflected directly in the output without sanitization.  The lack of any taint analysis results is also interesting; it could indicate a very limited data flow or potentially that the analysis tools were not able to fully assess it.  The plugin's history of zero vulnerabilities, across all severities and types, is highly commendable and suggests a commitment to secure coding practices.  This, combined with the lack of an attack surface, points to a plugin that is likely very lightweight and focused.  The primary weakness lies in the potential for XSS due to incomplete output escaping, which, while not a critical or high-severity finding on its own without further context, is the most concrete risk identified.",[155],{"reason":156,"points":157},"50% of outputs not properly escaped",5,"2026-03-16T18:51:20.223Z",{"wat":160,"direct":166},{"assetPaths":161,"generatorPatterns":163,"scriptPaths":164,"versionParams":165},[162],"\u002Fwp-content\u002Fplugins\u002Fblock-user-account\u002Fcss\u002Fstyle.css",[],[],[],{"cssClasses":167,"htmlComments":173,"htmlAttributes":174,"restEndpoints":180,"jsGlobals":181,"shortcodeOutput":182},[168,169,170,171,172],"bua-toggle-switch","bua-toggle-slider","tgl","user-status-deactive","user-status-active",[],[175,176,177,178,179],"id=\"block_user\"","name=\"user_status\"","id=\"user_status\"","name=\"user_status_message\"","id=\"user_status_message\"",[],[],[]]