[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZOakCSj4CNBDZVwd-Jp1KodBdEo88-OrZl2npg0mKhM":3,"$f-xcZmE5xgL3Fs5H14pTAxVA2VnIYD_fZ4LhLsN5X7Yc":235,"$f7lH42aZFC_MUgDqMcG9YmW_9dpXsixp3p6FKJle2qRI":240},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":16,"homepage":20,"download_link":21,"security_score":22,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":24,"discovery_status":25,"vulnerabilities":26,"developer":27,"crawl_stats":23,"alternatives":34,"analysis":144,"fingerprints":207},"bp-blog-avatar","BuddyPress Blog Avatar","1.0","BuddyDev","https:\u002F\u002Fprofiles.wordpress.org\u002Fbuddydev\u002F","\u003Cp>Blog Avatar Plugin allows site admins to upload avatars for their blog\u003C\u002Fp>\n\u003Ch4>How it works:-\u003C\u002Fh4>\n\u003Cp>Upload blog avatar from backend settings options.\u003C\u002Fp>\n\u003Ch4>Help & Support\u003C\u002Fh4>\n\u003Cp>Please leave a comment on our blog \u003Ca href=\"http:\u002F\u002Fbuddydev.com\u002Fbuddypress\u002Fadd-avatars-to-your-blogs-on-buddypresswordpress-multisite-network\u002F\" rel=\"nofollow ugc\">BuddyDev\u003C\u002Fa> for any suggestions, support request.\u003Cbr \u002F>\nPlease leave a comment on \u003Ca href=\"http:\u002F\u002Fbuddydev.com\u002Fbuddypress\u002Fadd-avatars-to-your-blogs-on-buddypresswordpress-multisite-network\u002F\" rel=\"nofollow ugc\">BuddyDev\u003C\u002Fa>\u003C\u002Fp>\n","Blog Avatar Plugin allows site admins to upload avatars for their blog",10,9275,0,"2013-12-02T05:07:00.000Z","",[17,18,19],"avatar","blog","buddypress","http:\u002F\u002Fbuddydev.com\u002Fplugins\u002Fblog-avatar\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-blog-avatar.1.0.zip",85,null,"2026-04-06T09:54:40.288Z","no_bundle",[],{"slug":28,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":30,"avg_security_score":31,"avg_patch_time_days":32,"trust_score":22,"computed_at":33},"buddydev",15,15420,87,17,"2026-05-20T07:02:33.677Z",[35,57,79,101,121],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":45,"num_ratings":46,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":15,"tags":50,"homepage":54,"download_link":55,"security_score":22,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":56},"buddypress-cover-photo","BuddyPress Default Cover Photo","1.6.0","SeventhQueen","https:\u002F\u002Fprofiles.wordpress.org\u002Fseventhqueen\u002F","\u003Cp>The plugin adds DEFAULT Profile and Group cover settings in WP Admin – Settings – BuddyPress – Settings.\u003C\u002Fp>\n\u003Cp>You also have the option to replace default BuddyPress cover photo and use this plugin for the cover functionality.\u003C\u002Fp>\n\u003Cp>Check out this demo to see it in action:\u003Cbr \u002F>\nhttp:\u002F\u002Fseventhqueen.com\u002Fthemes\u002Fkleo\u002Fmembers\u002Fkleoadmin\u002F\u003C\u002Fp>\n","The plugin adds DEFAULT Profile and Group cover settings in WP Admin - Settings - BuddyPress - Settings.",500,102818,76,12,"2019-12-20T13:38:00.000Z","5.3.21","4.1",[17,19,51,52,53],"default-cover","group-cover","profile-cover","http:\u002F\u002Fseventhqueen.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-cover-photo.1.6.0.zip","2026-04-16T10:56:18.058Z",{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":67,"num_ratings":68,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":15,"tags":72,"homepage":77,"download_link":78,"security_score":22,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":56},"lava-bp-post","Lava Bp Post","1.0.10","lavacode","https:\u002F\u002Fprofiles.wordpress.org\u002Flavacode\u002F","\u003Cp>Lava Bp Post is for buddypress. It provides a frontend form in buddypress user (profile) nav tab. It’s also possible to add on pages by a form shortcode.\u003Cbr \u002F>\nThis plugin enables you to use the power and flexibility of BuddyPress in WordPress to generate blog posts in user (profile) nav tab and a frontend form in a page.\u003C\u002Fp>\n\u003Ch4>FEATURES\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>BuddyPress nav tab supported.\u003C\u002Fli>\n\u003Cli>Approval option for new posts\u003C\u002Fli>\n\u003Cli>Features images supported.\u003C\u002Fli>\n\u003Cli>Detail images supported.\u003C\u002Fli>\n\u003Cli>List of posts in BuddyPress nav tab (User Profile) supported.\u003C\u002Fli>\n\u003Cli>Edit, Delete options supported for users ( Front-end )\u003C\u002Fli>\n\u003Cli>Submit form shortcode supported.\u003C\u002Fli>\n\u003Cli>Without Login, it’s possible to submit posts.\u003C\u002Fli>\n\u003Cli>Without Login, automatically register new members supported.\u003C\u002Fli>\n\u003Cli>Buddypress 2.9 compatible\u003C\u002Fli>\n\u003Cli>Responsive design\u003C\u002Fli>\n\u003Cli>Etc\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>LANGUAGES\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>English (default)\u003Cbr \u002F>\nWe are happy to have volunteer to assist to translate in your own languages.\u003Cbr \u002F>\nPlease email us at wp.lava.code@gmail.com , if you are interested. We will add it on next update.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Intro page : http:\u002F\u002Flava-code.com\u002Fbp-post\u003Cbr \u002F>\nDocumentation : http:\u002F\u002Flava-code.com\u002Fbp-post\u002Fdocumentation\u002F\u003Cbr \u002F>\nDemo site : http:\u002F\u002Flava-code.com\u002Fbp-post\u002Fdemo\u002F\u003C\u002Fp>\n\u003Ch3>Languages\u003C\u002Fh3>\n\u003Cp>It is currently (v0.1) available only English version. we are happy to have volunteer to assist to translate in your own languages.\u003Cbr \u002F>\nPlease email us at wp.lava.code@gmail.com , if you are interested.\u003Cbr \u002F>\nThank you in advance.\u003C\u002Fp>\n","Lava Bp Post Provides front-end form for buddypress. It's also possible to add on pages by a form shortcode.",200,23367,60,2,"2022-04-19T02:05:00.000Z","5.9.13","3.2",[19,73,74,75,76],"buddypress-blog-form","buddypress-frontend-form","front-end-form","social-articles","http:\u002F\u002Flava-code.com\u002Fbp-post\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flava-bp-post.1.0.10.zip",{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":87,"downloaded":88,"rating":89,"num_ratings":90,"last_updated":91,"tested_up_to":92,"requires_at_least":93,"requires_php":15,"tags":94,"homepage":15,"download_link":99,"security_score":100,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":56},"bp-local-avatars","BP Local Avatars","3.0","shanebp","https:\u002F\u002Fprofiles.wordpress.org\u002Fshanebp\u002F","\u003Cp>BP Local Avatars is a BuddyPress plugin.\u003C\u002Fp>\n\u003Cp>Do you have members or groups on your BuddyPress site who do not have an Avatar?\u003Cbr \u002F>\nAnd you do not want to show the generic default avatar?\u003Cbr \u002F>\nOr maybe you do not want each page view to include a lot of calls to gravatar.com to load avatars?\u003C\u002Fp>\n\u003Cul>\n\u003Cli>This plugin will create a Gravatar Identicon avatar, thumb and full versions, for any user who does not already have an Avatar, and save it locally.\u003C\u002Fli>\n\u003Cli>Supports user creation, user registration, user login, and Bulk Generation for user and groups.\u003C\u002Fli>\n\u003Cli>Uses the existing BuddyPress avatar directory structure.\u003C\u002Fli>\n\u003Cli>Conforms to the defined sizes for BuddyPress thumb and full avatars.\u003C\u002Fli>\n\u003Cli>Users can still upload an avatar via their profile.\u003C\u002Fli>\n\u003Cli>Groups can still upload an avatar via Group > Manage > Photo.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Usage:\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>Provides an option in wp-admin under:\u003Cbr \u002F>\nSettings -> Discussion > Default Avatar > BuddyPress Identicon (Generated and Stored Locally).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Select and Save. Otherwise this plugin will not do anything.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>After saving, you will see a link to ‘Bulk Generate’ avatars for all users and groups who do not have a local avatar. If a user already has their own Gravatar, it will save it locally.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>For more BuddyPress plugins, please visit \u003Ca href=\"https:\u002F\u002Fwww.philopress.com\u002F\" rel=\"nofollow ugc\">PhiloPress\u003C\u002Fa>\u003C\u002Fp>\n","A BuddyPress plugin that creates Gravatar avatars for any user or group without one, and stores them locally.",100,10656,82,7,"2025-04-19T17:32:00.000Z","6.8.5","4.0",[95,19,96,97,98],"avatars","gravatars","groups","members","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-local-avatars.3.0.zip",92,{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":87,"downloaded":109,"rating":110,"num_ratings":111,"last_updated":112,"tested_up_to":113,"requires_at_least":114,"requires_php":15,"tags":115,"homepage":119,"download_link":120,"security_score":22,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":56},"buddypress-first-letter-avatar","BuddyPress First Letter Avatar","2.2.8","DanielAGW","https:\u002F\u002Fprofiles.wordpress.org\u002Fdanielagw\u002F","\u003Cp>BuddyPress First Letter Avatar \u003Cstrong>sets custom avatars for users without profile picture or Gravatar\u003C\u002Fstrong>. The avatar will be a first letter of user’s name. You can also configure plugin to use any other letter to set custom avatar.\u003C\u002Fp>\n\u003Cp>BuddyPress First Letter Avatar is based on my other plugin – \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-first-letter-avatar\u002F\" rel=\"ugc\">WP First Letter Avatar\u003C\u002Fa>. BuddyPress First Letter Avatar is basically the same thing, but programmed to work with BuddyPress.\u003C\u002Fp>\n\u003Cp>BuddyPress First Letter Avatar includes a set of \u003Cstrong>beautiful, colorful letter avatars\u003C\u002Fstrong> in many sizes. Optimal size will be chosen by the plugin in order to display high quality avatar and not download, for example, big 512px avatars when only 48px is needed… \u003Cstrong>PSD template\u003C\u002Fstrong> for avatar is also included.\u003C\u002Fp>\n\u003Cp>You can also create your own avatar set by creating new directory next to \u003Cem>‘default’\u003C\u002Fem> folder and following the naming convention from \u003Cem>‘default’\u003C\u002Fem>.\u003C\u002Fp>\n\u003Cp>By default, custom avatar will be set only to users without profile pictures and Gravatars, but you can change that in settings and not use Gravatar\u002Fprofile pictures at all.\u003C\u002Fp>\n\u003Cp>BuddyPress First Letter Avatar helps you \u003Cstrong>bring more colors into your BuddyPress site\u003C\u002Fstrong>. Plus, your users will be more \u003Cstrong>willing to actively participate in your site\u003C\u002Fstrong> since they can actually relate to these avatars much better than to the Mystery Person.\u003C\u002Fp>\n\u003Cp>All images were compressed using the fantastic \u003Ca href=\"https:\u002F\u002Ftinypng.com\u002F\" rel=\"nofollow ugc\">TinyPNG\u003C\u002Fa>, so avatars are \u003Cstrong>incredibly light and ultra-high quality\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>Plugin is also available \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FDev49net\u002Fbuddypress-first-letter-avatar\" rel=\"nofollow ugc\">on GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cp>BuddyPress First Letter Avatar requires at least PHP 5.4. It \u003Cstrong>does not work properly\u003C\u002Fstrong> on PHP 5.3.x and earlier.\u003C\u002Fp>\n","A WordPress-BuddyPress plugin to set fancy custom avatars for users with no Gravatar and no profile picture.",29920,98,16,"2017-03-11T22:26:00.000Z","4.7.33","4.6",[95,19,116,117,118],"comments","custom-avatar","discussion","http:\u002F\u002Fdev49.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-first-letter-avatar.zip",{"slug":122,"name":123,"version":124,"author":125,"author_profile":126,"description":127,"short_description":128,"active_installs":129,"downloaded":130,"rating":131,"num_ratings":132,"last_updated":133,"tested_up_to":134,"requires_at_least":135,"requires_php":15,"tags":136,"homepage":139,"download_link":140,"security_score":141,"vuln_count":142,"unpatched_count":13,"last_vuln_date":143,"fetched_at":56},"bp-groupblog","BuddyPress Groupblog","1.9.4","Boone Gorges","https:\u002F\u002Fprofiles.wordpress.org\u002Fboonebgorges\u002F","\u003Cp>Requires BuddyPress 1.7+ and PHP 5.3+.\u003C\u002Fp>\n\u003Cp>The BuddyPress Groupblog plugin extends the group functionality by enabling each group to have a single blog associated with it. Group members are automatically added to the blog and will have blog roles as set by the groupblog admin settings.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>P2 integration and frontend posting.\u003C\u002Fli>\n\u003Cli>Admin can set Template specific groupblogs.\u003C\u002Fli>\n\u003Cli>Allow group admins choose the desired template page themselves.\u003C\u002Fli>\n\u003Cli>Full blog theme integration. The included bp-groupblog theme mimics the group pages.\u003C\u002Fli>\n\u003Cli>Automated blog registration at group creation stage.\u003C\u002Fli>\n\u003Cli>Bypass default blog validation to allow dashes, underscores, numeral only and minimum character count.\u003C\u002Fli>\n\u003Cli>Blog privacy settings are initially inherited from group privacy settings.\u003C\u002Fli>\n\u003Cli>Group members are automatically added to the blog.\u003C\u002Fli>\n\u003Cli>Blog roles match group roles as set by the group admin.\u003C\u002Fli>\n\u003Cli>Solid error checking that the blog follows validation.\u003C\u002Fli>\n\u003Cli>Group admin tab to access the group-blog settings.\u003C\u002Fli>\n\u003Cli>Blog themes will have the ability to pull in group info and create a theme that could resemble the group exactly.\u003C\u002Fli>\n\u003Cli>Leaving the group will downgrade the member role to ‘subscriber’.\u003C\u002Fli>\n\u003Cli>Allow the group admin to select one of his\u002Fher existing blogs.\u003C\u002Fli>\n\u003Cli>A new ajax backend.\u003C\u002Fli>\n\u003C\u002Ful>\n","BuddyPress Groupblog extends the group functionality by enabling the group to have a single blog associated with it.",50,67261,66,11,"2026-03-30T17:50:00.000Z","7.0","3.6",[137,19,138,97],"blogs","content","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbp-groupblog\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-groupblog.1.9.4.zip",97,1,"2026-04-10 12:09:00",{"attackSurface":145,"codeSignals":185,"taintFlows":197,"riskAssessment":198,"analyzedAt":206},{"hooks":146,"ajaxHandlers":181,"restRoutes":182,"shortcodes":183,"cronEvents":184,"entryPointCount":13,"unprotectedCount":13},[147,152,155,159,163,166,171,177],{"type":148,"name":149,"callback":150,"file":151,"line":132},"action","admin_menu","add_menu","admin\\admin.php",{"type":148,"name":153,"callback":154,"file":151,"line":46},"admin_init","handler",{"type":148,"name":156,"callback":157,"file":151,"line":158},"admin_print_scripts-settings_page_blog-avatar","add_jquery_cropper",175,{"type":148,"name":160,"callback":161,"file":151,"line":162},"admin_head","bp_core_add_cropper_inline_js",212,{"type":148,"name":160,"callback":164,"file":151,"line":165},"bp_core_add_cropper_inline_css",213,{"type":148,"name":167,"callback":168,"file":169,"line":170},"bp_loaded","load","blog-avatar.php",20,{"type":172,"name":173,"callback":174,"priority":11,"file":175,"line":176},"filter","bp_get_blog_avatar","bd_filter_blog_avatar","hooks.php",32,{"type":172,"name":178,"callback":179,"priority":11,"file":175,"line":180},"bp_core_avatar_item_id","bd_filter_avatar_item_id",59,[],[],[],[],{"dangerousFunctions":186,"sqlUsage":187,"outputEscaping":189,"fileOperations":13,"externalRequests":13,"nonceChecks":142,"capabilityChecks":13,"bundledLibraries":196},[],{"prepared":68,"raw":13,"locations":188},[],{"escaped":13,"rawEcho":68,"locations":190},[191,194],{"file":151,"line":192,"context":193},117,"raw output",{"file":195,"line":11,"context":193},"functions.php",[],[],{"summary":199,"deductions":200},"The `bp-blog-avatar` plugin v1.0 exhibits a generally strong security posture based on the provided static analysis. The complete absence of AJAX handlers, REST API routes, shortcodes, and cron events significantly limits the potential attack surface. The plugin also demonstrates good practices by using prepared statements for all its SQL queries and includes a nonce check, indicating an awareness of common web vulnerabilities. The lack of any recorded vulnerabilities in its history further suggests a history of secure development or a lack of targeted attacks. However, a significant concern arises from the complete lack of output escaping, with 100% of the detected outputs being unescaped. This could leave the plugin vulnerable to cross-site scripting (XSS) attacks if any user-supplied data is reflected directly into the HTML output without proper sanitization. The absence of capability checks, while not inherently a vulnerability, could be a point of improvement for more granular access control if the plugin were to handle sensitive data or actions in the future.",[201,204],{"reason":202,"points":203},"All detected outputs are unescaped",6,{"reason":205,"points":68},"No capability checks found","2026-03-17T00:54:22.734Z",{"wat":208,"direct":219},{"assetPaths":209,"generatorPatterns":213,"scriptPaths":214,"versionParams":215},[210,211,212],"\u002Fwp-content\u002Fplugins\u002Fbp-blog-avatar\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fbp-blog-avatar\u002Fjs\u002Fscript.js","\u002Fwp-content\u002Fplugins\u002Fbp-blog-avatar\u002Fjs\u002Fjquery.jcrop.min.js",[],[211,212],[216,217,218],"bp-blog-avatar\u002Fcss\u002Fstyle.css?ver=","bp-blog-avatar\u002Fjs\u002Fscript.js?ver=","bp-blog-avatar\u002Fjs\u002Fjquery.jcrop.min.js?ver=",{"cssClasses":220,"htmlComments":224,"htmlAttributes":225,"restEndpoints":231,"jsGlobals":232,"shortcodeOutput":234},[221,222,223],"blog-avatar-upload-form","existing-blog-avatar","avatar-crop-pane",[],[226,227,228,229,227,230],"id=\"blog-avatar-upload-form\"","name=\"blog-avatar-action\"","id=\"avatar-to-crop\"","id=\"avatar-crop-preview\"","id=\"blog-avatar-action\"",[],[233],"window.bd_blog_avatar",[],{"error":236,"url":237,"statusCode":238,"statusMessage":239,"message":239},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fbp-blog-avatar\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":142,"versions":241},[242],{"version":6,"download_url":21,"svn_tag_url":243,"released_at":23,"has_diff":244,"diff_files_changed":245,"diff_lines":23,"trac_diff_url":23,"vulnerabilities":246,"is_current":236},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fbp-blog-avatar\u002Ftags\u002F1.0\u002F",false,[],[]]