[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fG-3jn3nKqoWG4Jkgo_lAA4fzy5y2r3_18tULHMJXwBQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":16,"requires_php":16,"tags":17,"homepage":22,"download_link":23,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":37,"analysis":127,"fingerprints":187},"bp-default-group-avatar","BuddyPress Default Group Avatar","0.2","Mike Martel","https:\u002F\u002Fprofiles.wordpress.org\u002Fmike_cowobo\u002F","\u003Cp>\u003Cem>This plugin is tested only with BP 1.6.2 and WordPress 3.5, and is not meant to be backwards compatible! If you’re running an older version of WordPress, use Vernon’s original plugin \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fbuddypress-default-group-avatar\u002F\" rel=\"ugc\">BuddyPress Group Default Avatar\u003C\u002Fa>\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Allows specifying the URL of an image to use as the BuddyPress default group avatar. This makes it easy to distinguish groups from members who are using the mystery man default user avatar.\u003C\u002Fp>\n\u003Cp>It works in all situations (activity stream, groups, forums, directory, etc). Upload your image to somewhere within your theme and drop the full URL in the options screen.\u003C\u002Fp>\n\u003Cp>If you had \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fbuddypress-default-group-avatar\u002F\" rel=\"ugc\">BuddyPress Group Default Avatar\u003C\u002Fa> previously installed, this plugin will use the avatar set in that plugin. Otherwise it’s bundled with a default avatar for groups (see screenshots).\u003C\u002Fp>\n\u003Cp>Not tested on multisite\u002Fnetwork install yet (please confirm if it’s working!).\u003C\u002Fp>\n","Adds a default group avatar to BuddyPress without disabling Gravatars for users.",10,3769,100,1,"2012-12-19T19:07:00.000Z","",[18,19,20,21],"avatar","buddypress","default","groups","http:\u002F\u002Ftrenvo.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-default-group-avatar.0.2.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"mike_cowobo",7,70,89,30,86,"2026-04-04T14:00:18.724Z",[38,51,72,90,106],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":11,"downloaded":46,"rating":13,"num_ratings":14,"last_updated":47,"tested_up_to":16,"requires_at_least":16,"requires_php":16,"tags":48,"homepage":49,"download_link":50,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"buddypress-default-group-avatar","BuddyPress Group Default Avatar","0.1.1","Vernon Fowler","https:\u002F\u002Fprofiles.wordpress.org\u002Fvernonfowler\u002F","\u003Cp>Allows specifying the URL of an image to use as the BuddyPress default group avatar. This makes it easy to distinguish groups from members who are using the mystery man default user avatar. The avatar scales from full to thumb as per your theme settings. It works in all situations (activity stream, groups, forums, directory, etc). Upload your image to somewhere within your theme and drop the full URL in the options screen. Not yet working for multisite\u002Fnetwork install.\u003C\u002Fp>\n","Adds a default group avatar to BuddyPress. Configure the image URL via the option page.",4556,"2012-02-21T11:44:00.000Z",[18,19,20,21],"http:\u002F\u002Fvfowler.com\u002F2012\u002F02\u002Fbuddypress-default-group-avatar\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-default-group-avatar.zip",{"slug":52,"name":53,"version":54,"author":55,"author_profile":56,"description":57,"short_description":58,"active_installs":59,"downloaded":60,"rating":61,"num_ratings":62,"last_updated":63,"tested_up_to":64,"requires_at_least":65,"requires_php":16,"tags":66,"homepage":70,"download_link":71,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"buddypress-cover-photo","BuddyPress Default Cover Photo","1.6.0","SeventhQueen","https:\u002F\u002Fprofiles.wordpress.org\u002Fseventhqueen\u002F","\u003Cp>The plugin adds DEFAULT Profile and Group cover settings in WP Admin – Settings – BuddyPress – Settings.\u003C\u002Fp>\n\u003Cp>You also have the option to replace default BuddyPress cover photo and use this plugin for the cover functionality.\u003C\u002Fp>\n\u003Cp>Check out this demo to see it in action:\u003Cbr \u002F>\nhttp:\u002F\u002Fseventhqueen.com\u002Fthemes\u002Fkleo\u002Fmembers\u002Fkleoadmin\u002F\u003C\u002Fp>\n","The plugin adds DEFAULT Profile and Group cover settings in WP Admin - Settings - BuddyPress - Settings.",600,102728,76,12,"2019-12-20T13:38:00.000Z","5.3.21","4.1",[18,19,67,68,69],"default-cover","group-cover","profile-cover","http:\u002F\u002Fseventhqueen.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-cover-photo.1.6.0.zip",{"slug":73,"name":74,"version":75,"author":76,"author_profile":77,"description":78,"short_description":79,"active_installs":13,"downloaded":80,"rating":81,"num_ratings":31,"last_updated":82,"tested_up_to":83,"requires_at_least":84,"requires_php":16,"tags":85,"homepage":16,"download_link":89,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"bp-local-avatars","BP Local Avatars","3.0","shanebp","https:\u002F\u002Fprofiles.wordpress.org\u002Fshanebp\u002F","\u003Cp>BP Local Avatars is a BuddyPress plugin.\u003C\u002Fp>\n\u003Cp>Do you have members or groups on your BuddyPress site who do not have an Avatar?\u003Cbr \u002F>\nAnd you do not want to show the generic default avatar?\u003Cbr \u002F>\nOr maybe you do not want each page view to include a lot of calls to gravatar.com to load avatars?\u003C\u002Fp>\n\u003Cul>\n\u003Cli>This plugin will create a Gravatar Identicon avatar, thumb and full versions, for any user who does not already have an Avatar, and save it locally.\u003C\u002Fli>\n\u003Cli>Supports user creation, user registration, user login, and Bulk Generation for user and groups.\u003C\u002Fli>\n\u003Cli>Uses the existing BuddyPress avatar directory structure.\u003C\u002Fli>\n\u003Cli>Conforms to the defined sizes for BuddyPress thumb and full avatars.\u003C\u002Fli>\n\u003Cli>Users can still upload an avatar via their profile.\u003C\u002Fli>\n\u003Cli>Groups can still upload an avatar via Group > Manage > Photo.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Usage:\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>Provides an option in wp-admin under:\u003Cbr \u002F>\nSettings -> Discussion > Default Avatar > BuddyPress Identicon (Generated and Stored Locally).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Select and Save. Otherwise this plugin will not do anything.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>After saving, you will see a link to ‘Bulk Generate’ avatars for all users and groups who do not have a local avatar. If a user already has their own Gravatar, it will save it locally.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>For more BuddyPress plugins, please visit \u003Ca href=\"https:\u002F\u002Fwww.philopress.com\u002F\" rel=\"nofollow ugc\">PhiloPress\u003C\u002Fa>\u003C\u002Fp>\n","A BuddyPress plugin that creates Gravatar avatars for any user or group without one, and stores them locally.",10578,82,"2025-04-19T17:32:00.000Z","6.8.5","4.0",[86,19,87,21,88],"avatars","gravatars","members","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-local-avatars.3.0.zip",{"slug":91,"name":92,"version":93,"author":94,"author_profile":95,"description":96,"short_description":97,"active_installs":11,"downloaded":98,"rating":13,"num_ratings":14,"last_updated":99,"tested_up_to":100,"requires_at_least":101,"requires_php":16,"tags":102,"homepage":104,"download_link":105,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"bp-avatar-hover","Buddypress Avatar Hover","1.0","aghajoon","https:\u002F\u002Fprofiles.wordpress.org\u002Faghajoon\u002F","\u003Cp>BuddyPress  Avatar Hover let’s you add a pop box when hovering on the group\u002Fmember avatars and gives you more information at a glance.\u003Cbr \u002F>\nif you install bp-cover plugin , bp avatar hover show cover of memeber\u002Fgroup\u003C\u002Fp>\n","BuddyPress  Avatar Hover let's you add a pop box when hovering on the group\u002Fmember avatars and gives you more information at a glance.",5312,"2016-06-07T14:09:00.000Z","4.5.33","3.8",[103,18,19,21,88],"activity","http:\u002F\u002Fwebcaffe.ir","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-avatar-hover.zip",{"slug":107,"name":108,"version":109,"author":110,"author_profile":111,"description":112,"short_description":113,"active_installs":114,"downloaded":115,"rating":116,"num_ratings":117,"last_updated":118,"tested_up_to":119,"requires_at_least":120,"requires_php":121,"tags":122,"homepage":16,"download_link":126,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"bp-registration-options","Registration Options for BuddyPress","4.4.5","Brian Messenlehner","https:\u002F\u002Fprofiles.wordpress.org\u002Fmessenlehner\u002F","\u003Cp>Prevent users and bots from accessing the BuddyPress or bbPress areas of your website(s) until they are approved.\u003C\u002Fp>\n\u003Cp>This BuddyPress extension allows you to enable user moderation for new members, as well as help create a private network for your users. If moderation is enabled, any new members will be denied access to your BuddyPress and bbPress areas on your site, with the exception of their own user profile. They will be allowed to edit and configure that much. They will also not be listed in the members lists on the frontend until approved. Custom messages are available so you can tailor them to the tone of your website and community. When an admin approves or denies a user, email notifications will be sent to let them know of the decision.\u003C\u002Fp>\n\u003Cp>Requires BuddyPress version 1.7 or higher and bbPress 2.0 or higher.\u003C\u002Fp>\n\u003Ch3>General Data Protection Regulation\u003C\u002Fh3>\n\u003Cp>BuddyPress Registration Options temporarily stores user IP addresses as user meta to help validate and vet pending users. Saved IP values are deleted upon both approval and denial of pending user. No other personal data is recorded.\u003C\u002Fp>\n","Moderate new BuddyPress members and fight BuddyPress spam.",1000,175480,88,33,"2023-03-05T15:26:00.000Z","6.0.11","5.2","5.6",[123,19,21,124,125],"admin","moderation","registration","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-registration-options.zip",{"attackSurface":128,"codeSignals":162,"taintFlows":174,"riskAssessment":175,"analyzedAt":186},{"hooks":129,"ajaxHandlers":158,"restRoutes":159,"shortcodes":160,"cronEvents":161,"entryPointCount":25,"unprotectedCount":25},[130,136,139,146,150,153,155],{"type":131,"name":132,"callback":133,"file":134,"line":135},"action","admin_init","register","bp-default-group-avatar-admin.php",36,{"type":131,"name":137,"callback":138,"file":134,"line":33},"admin_menu","init",{"type":140,"name":141,"callback":142,"priority":143,"file":144,"line":145},"filter","bp_core_fetch_avatar_no_grav","maybe_load_grav",99,"bp-default-group-avatar.php",49,{"type":140,"name":147,"callback":148,"priority":11,"file":144,"line":149},"bp_core_default_avatar_user","takeover_gravatars",68,{"type":140,"name":151,"callback":148,"priority":11,"file":144,"line":152},"bp_core_default_avatar_group",69,{"type":140,"name":154,"callback":148,"priority":11,"file":144,"line":32},"bp_core_default_avatar_blog",{"type":131,"name":156,"callback":138,"file":144,"line":157},"bp_include",158,[],[],[],[],{"dangerousFunctions":163,"sqlUsage":164,"outputEscaping":166,"fileOperations":25,"externalRequests":25,"nonceChecks":25,"capabilityChecks":25,"bundledLibraries":173},[],{"prepared":25,"raw":25,"locations":165},[],{"escaped":25,"rawEcho":167,"locations":168},2,[169,172],{"file":134,"line":170,"context":171},74,"raw output",{"file":134,"line":24,"context":171},[],[],{"summary":176,"deductions":177},"The \"bp-default-group-avatar\" plugin version 0.2 exhibits a generally strong security posture in terms of its attack surface and code signals. The absence of any AJAX handlers, REST API routes, shortcodes, or cron events significantly limits the potential entry points for malicious actors. Furthermore, the use of prepared statements for all SQL queries is a positive indicator, mitigating the risk of SQL injection vulnerabilities. The plugin also shows no known vulnerabilities in its history, suggesting a consistent record of security awareness by its developers.\n\nHowever, a notable concern arises from the complete lack of output escaping for the identified outputs. This presents a risk of Cross-Site Scripting (XSS) vulnerabilities if any user-controlled or dynamic data is being displayed without proper sanitization. Additionally, the complete absence of nonce checks and capability checks, while not directly tied to an attack surface in this specific analysis, indicates a potential weakness in broader security practices, especially if the plugin were to introduce new user-interactive features in the future.\n\nIn conclusion, while the plugin benefits from a minimal attack surface and secure database practices, the unescaped output is a tangible security weakness that requires attention. The lack of explicit capability checks could also be a concern for future development. Overall, the plugin is in a good state regarding common web vulnerabilities, but the XSS risk needs to be addressed for a robust security profile.",[178,181,184],{"reason":179,"points":180},"Unescaped output found",6,{"reason":182,"points":183},"Missing capability checks",3,{"reason":185,"points":183},"Missing nonce checks","2026-03-17T00:36:40.163Z",{"wat":188,"direct":196},{"assetPaths":189,"generatorPatterns":191,"scriptPaths":192,"versionParams":193},[190],"\u002Fwp-content\u002Fplugins\u002Fbp-default-group-avatar\u002Fdefault.jpg",[],[],[194,195],"bp-default-group-avatar\u002Fstyle.css?ver=","bp-default-group-avatar\u002Fscript.js?ver=",{"cssClasses":197,"htmlComments":198,"htmlAttributes":199,"restEndpoints":200,"jsGlobals":201,"shortcodeOutput":202},[],[],[],[],[],[]]