[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLIUbwBDYC696T9RNXeJy-2yY2rIUeXDE4JbSXkFIDyM":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":15,"tags":16,"homepage":22,"download_link":23,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":35,"analysis":120,"fingerprints":171},"bp-delegated-xprofile","BP Delegated XProfile","0.1.1","Meitar","https:\u002F\u002Fprofiles.wordpress.org\u002Fmeitar\u002F","\u003Cp>Creates a simple, secure delegation system whereby a privileged user (such as an administrator) can assign other registered BuddyPress members to be “delegates” for a given user. A delegate has the capability to view and edit Extended Profile (XProfile) fields for the delegated user. This is useful on sites where certain relationships exist between one user and another, such as legal guardianship by an adult over a child. Using delegation reduces the need to share passwords or log in to shared accounts.\u003C\u002Fp>\n\u003Cp>\u003Cem>Donations for this plugin make up a chunk of my income. If you continue to enjoy this plugin, please consider \u003Ca href=\"https:\u002F\u002Fwww.paypal.com\u002Fcgi-bin\u002Fwebscr?cmd=_donations&business=TJLPJYXHSRBEE&lc=US&item_name=BP%20Delegated%20XProfile&item_number=bp-delegated-xprofile&currency_code=USD&bn=PP%2dDonationsBF%3abtn_donate_SM%2egif%3aNonHosted\" rel=\"nofollow ugc\">making a donation\u003C\u002Fa>. 🙂 Thank you for your support!\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Roles and capabilities\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin uses the built-in capabilities system as part of WordPress core, along with core BuddyPress hooks (\u003Ccode>bp_current_user_can\u003C\u002Fcode>) to check for appropriate permissions, making it both simple to customize and as secure as WP and BP core code. The custom capabilities are:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>edit_user_delegates\u003C\u002Fcode> – Users with this capability can assign delegates for users they can edit (determined by \u003Ccode>edit_users\u003C\u002Fcode>).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Additionally, the following core capabilities are required:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>list_users\u003C\u002Fcode> – The delegation options implicitly enumerate all registered users, so a user must also have the \u003Ccode>list_users\u003C\u002Fcode> capability to be granted access to the Delegation user interface.\u003C\u002Fli>\n\u003Cli>\u003Ccode>edit_users\u003C\u002Fcode> – If you cannot \u003Ccode>edit_users\u003C\u002Fcode>, you cannot \u003Ccode>edit_user_delegates\u003C\u002Fcode>, either.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>On a default WordPress and BuddyPress installation, these capabilities are granted only to Administrator users. However, this can be changed using the built-in capability filter hooks.\u003C\u002Fp>\n","Enables delegating a user's Extended Profile for editing by other users.",0,1462,"2017-08-23T21:01:00.000Z","4.8.28","",[17,18,19,20,21],"administration","buddypress","member-type","members","users","https:\u002F\u002Fgithub.com\u002Fmeitar\u002Fbp-delegated-xprofile","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-delegated-xprofile.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":32,"avg_patch_time_days":33,"trust_score":24,"computed_at":34},"meitar",13,1510,87,30,"2026-04-04T11:23:56.070Z",[36,49,72,87,103],{"slug":37,"name":38,"version":6,"author":7,"author_profile":8,"description":39,"short_description":40,"active_installs":41,"downloaded":42,"rating":43,"num_ratings":44,"last_updated":45,"tested_up_to":14,"requires_at_least":15,"requires_php":15,"tags":46,"homepage":47,"download_link":48,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"bp-signup-member-type","BP Signup Member Type","\u003Cp>Augment your BuddyPress sign-up form with your social network’s registered \u003Ca href=\"https:\u002F\u002Fcodex.buddypress.org\u002Fdeveloper\u002Fmember-types\u002F\" rel=\"nofollow ugc\">Member Types\u003C\u002Fa>. This allows new users to self-select one or more Member Types for themselves when they register for your site. You choose which Member Types you want to allow people to register with when they fill in your signup form.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Works with all BuddyPress member types registered by other plugins and themes.\u003C\u002Fli>\n\u003Cli>Seamlessly integrates with the BuddyPress registration form and administration screens.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>Donations for this plugin make up a chunk of my income. If you continue to enjoy this plugin, please consider \u003Ca href=\"https:\u002F\u002Fwww.paypal.com\u002Fcgi-bin\u002Fwebscr?cmd=_donations&business=TJLPJYXHSRBEE&lc=US&item_name=BP%20Signup%20Member%20Type&item_number=bp-signup-member-type&currency_code=USD&bn=PP%2dDonationsBF%3abtn_donate_SM%2egif%3aNonHosted\" rel=\"nofollow ugc\">making a donation\u003C\u002Fa>. 🙂 Thank you for your support!\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Once installed, simply access your main BuddyPress options (WordPress Dashboard → Settings → BuddyPress → Options → Main Settings) and you’ll see several \u003Cem>member type\u003C\u002Fem> options for you to configure.\u003C\u002Fp>\n","Add a \"Member Type\" option to the BuddyPress registration form.",10,2105,20,1,"2020-05-14T04:58:00.000Z",[17,18,19,20,21],"https:\u002F\u002Fgithub.com\u002Ffabacab\u002Fbp-signup-member-type","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-signup-member-type.zip",{"slug":50,"name":51,"version":52,"author":53,"author_profile":54,"description":55,"short_description":56,"active_installs":57,"downloaded":58,"rating":59,"num_ratings":60,"last_updated":61,"tested_up_to":62,"requires_at_least":63,"requires_php":15,"tags":64,"homepage":67,"download_link":68,"security_score":69,"vuln_count":70,"unpatched_count":11,"last_vuln_date":71,"fetched_at":26},"bp-profile-search","BP Profile Search","5.8.3","Andrea Tarantini","https:\u002F\u002Fprofiles.wordpress.org\u002Fdontdream\u002F","\u003Cp>BP Profile Search is a member search and member directories plugin for BuddyPress. It provides:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>A form builder to build the member search forms\u003C\u002Fli>\n\u003Cli>The [bps_directory] shortcode to customize the BuddyPress Members directory, or to build additional member directories\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Each search form has a \u003Cem>target directory\u003C\u002Fem>. When you run a search, you are redirected to the form’s target directory, filtered according to your search.\u003C\u002Fp>\n\u003Ch4>Build a search form\u003C\u002Fh4>\n\u003Cp>With the form builder you can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Add, edit, rearrange, and remove the search fields\u003C\u002Fli>\n\u003Cli>Use as search fields the BuddyPress profile fields, the \u003Cem>users\u003C\u002Fem> and \u003Cem>usermeta\u003C\u002Fem> data (including roles), the BuddyPress user groups, and the user taxonomies (including BuddyPress member types)\u003C\u002Fli>\n\u003Cli>Use \u003Cem>search by distance\u003C\u002Fem> fields when you install the free companion plugin \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbp-distance-search\u002F\" rel=\"ugc\">BP Distance Search\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Select, for each search field, one of the available search modes\u003C\u002Fli>\n\u003Cli>Select the BuddyPress Members directory, or one of the member directories built with this plugin, as the target directory\u003C\u002Fli>\n\u003Cli>Select the form template to display your form\u003C\u002Fli>\n\u003Cli>If in doubt, use the \u003Cem>Help\u003C\u002Fem> tab above the screen title\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The form template works just like any other BuddyPress template. To override a form template, copy it to the \u003Cem>buddypress\u002Fmembers\u003C\u002Fem> directory in your theme’s root, then edit the new copy according to your needs.\u003C\u002Fp>\n\u003Ch4>Display a search form\u003C\u002Fh4>\n\u003Cp>After you build your search form, you can display it:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>In its target directory, using the option \u003Cem>Add Form to Directory\u003C\u002Fem> in the form settings\u003C\u002Fli>\n\u003Cli>In a sidebar or widget area, using the widget \u003Cem>Profile Search\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>In a post or page, using the shortcode [bps_form]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Run a search\u003C\u002Fh4>\n\u003Cp>On the front-end, when you hit the \u003Cem>Search\u003C\u002Fem> button in a form, BP Profile Search shows the form’s target directory filtered according to your search. Both the \u003Cem>All Members\u003C\u002Fem> tab and the \u003Cem>My Friends\u003C\u002Fem> tab are filtered.\u003C\u002Fp>\n\u003Cp>Additionally, the plugin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Displays an \u003Cem>active filters\u003C\u002Fem> section containing the active search filters and a \u003Cem>Clear\u003C\u002Fem> button to clear them\u003C\u002Fli>\n\u003Cli>Displays for each member a \u003Cem>member details\u003C\u002Fem> section containing the values of the searched fields\u003C\u002Fli>\n\u003Cli>Adds to the \u003Cem>Order By\u003C\u002Fem> drop-down the options to sort the directory by the searched fields\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The \u003Cem>active filters\u003C\u002Fem> section and the \u003Cem>member details\u003C\u002Fem> section are displayed by two dedicated templates, that can be overridden just like any other BuddyPress template.\u003C\u002Fp>\n\u003Ch4>Build a member directory\u003C\u002Fh4>\n\u003Cp>With the [bps_directory] shortcode you can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Customize the BuddyPress Members directory, or build additional member directories\u003C\u002Fli>\n\u003Cli>Add hidden filters to a directory\u003C\u002Fli>\n\u003Cli>Add more sort options to a directory\u003C\u002Fli>\n\u003Cli>Show additional member information in each \u003Cem>member details\u003C\u002Fem> section, e.g. the value of profile fields\u003C\u002Fli>\n\u003Cli>Use a different Members directory template for each directory\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can enter the shortcode in an empty page to build a new member directory, or you can enter it in the BuddyPress Members page to customize the BuddyPress Members directory.\u003C\u002Fp>\n\u003Ch4>Additional documentation\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.dontdream.it\u002Fbp-profile-search\u002Fform-builder\u002F\" rel=\"nofollow ugc\">Form Builder\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdontdream.it\u002Fbp-profile-search\u002Fsearch-modes\u002F\" rel=\"nofollow ugc\">Search Modes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdontdream.it\u002Fbp-profile-search\u002Fcustom-directories\u002F\" rel=\"nofollow ugc\">Custom Directories\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdontdream.it\u002Fbp-profile-search\u002Fform-templates\u002F\" rel=\"nofollow ugc\">Form Templates\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>In the screenshots below, the \u003Cem>City\u003C\u002Fem> field is provided by the free companion plugin \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbp-distance-search\u002F\" rel=\"ugc\">BP Distance Search\u003C\u002Fa>.\u003C\u002Fp>\n","Member search and member directories for BuddyPress and the BuddyBoss Platform.",6000,669034,100,71,"2025-12-14T16:30:00.000Z","6.9.4","6.1",[18,65,20,66,21],"directory","search","https:\u002F\u002Fdontdream.it\u002Fbp-profile-search\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-profile-search.5.8.3.zip",95,3,"2024-08-19 13:39:17",{"slug":73,"name":74,"version":75,"author":76,"author_profile":77,"description":78,"short_description":79,"active_installs":41,"downloaded":80,"rating":11,"num_ratings":11,"last_updated":81,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":82,"homepage":85,"download_link":86,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"bp-fadmin","BuddyPress Frontend Admin","0.3","D Cartwright","https:\u002F\u002Fprofiles.wordpress.org\u002Faekeron\u002F","\u003Cp>Included component allows group admins to easily promote\u002Fdemote\u002Fban members from all their groups.\u003C\u002Fp>\n\u003Cp>It can be further extended using the standard buddypress profile subnav registration functions (for example, the bp-wiki plugin hooks into this to enable movement of wiki pages between groups).\u003C\u002Fp>\n","This plugin brings site-wide-like administration options to the frontend, allowing group admins simpler management of all of their groups.",5752,"2010-12-10T12:41:00.000Z",[17,18,83,84,20],"frontend","groups","http:\u002F\u002Fnamoo.co.uk","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-fadmin.zip",{"slug":88,"name":89,"version":90,"author":91,"author_profile":92,"description":93,"short_description":94,"active_installs":41,"downloaded":95,"rating":59,"num_ratings":96,"last_updated":97,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":98,"homepage":101,"download_link":102,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"buddypress-last-active-users-wp-admin","BuddyPress Last Active Users (wp-admin)","1.1","Slava Abakumov","https:\u002F\u002Fprofiles.wordpress.org\u002Fslaffik\u002F","\u003Cp>Display BuddyPress last active date for a user on \u003Ccode>wp-admin\u002Fusers.php\u003C\u002Fcode> page\u003C\u002Fp>\n\u003Cp>BuddyPress is required for plugin to work. If BuddyPress is not installed – plugin will not display any information.\u003C\u002Fp>\n\u003Cp>WordPress MultiSite supported.\u003C\u002Fp>\n","Display BuddyPress last active date for a user on wp-admin\u002Fusers.php page",2841,2,"2015-01-05T18:20:00.000Z",[18,99,20,21,100],"date","wp-admin","https:\u002F\u002Fgithub.com\u002FslaFFik\u002Fbuddypress-last-active-users-wp-admin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-last-active-users-wp-admin.1.1.zip",{"slug":104,"name":105,"version":106,"author":107,"author_profile":108,"description":109,"short_description":110,"active_installs":11,"downloaded":111,"rating":11,"num_ratings":11,"last_updated":15,"tested_up_to":112,"requires_at_least":113,"requires_php":15,"tags":114,"homepage":117,"download_link":118,"security_score":59,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":119},"signups-cron","Signups Cron","1.0.0","scottmotion","https:\u002F\u002Fprofiles.wordpress.org\u002Fscottmotion\u002F","\u003Cp>Enable a cron event that will remove active and\u002For pending user signups from the database.\u003C\u002Fp>\n\u003Cp>Features:\u003Cbr \u002F>\n* Displays information about the signups table such as size and number of signups.\u003Cbr \u002F>\n* Enable or disable removal of active and pending user signups independently.\u003Cbr \u002F>\n* Set separate thresholds for how old the signups should be before removal.\u003Cbr \u002F>\n* Choose to email a report to the Site Admin each time the event runs.\u003Cbr \u002F>\n* Set how often the cron event will run and see when the next event is scheduled for.\u003C\u002Fp>\n\u003Cp>Compatibility:\u003C\u002Fp>\n\u003Cp>This plugin is designed to work with single-site installations running BuddyPress (2.0 or later) or BuddyBoss.\u003C\u002Fp>\n","Manage WordPress user signups via WP-Cron.",313,"6.7.5","6.2",[18,115,20,116,21],"cron","signups","https:\u002F\u002Fgithub.com\u002Fscottmotion\u002FWP-Signups-Cron\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsignups-cron.1.0.0.zip","2026-03-15T10:48:56.248Z",{"attackSurface":121,"codeSignals":156,"taintFlows":164,"riskAssessment":165,"analyzedAt":170},{"hooks":122,"ajaxHandlers":152,"restRoutes":153,"shortcodes":154,"cronEvents":155,"entryPointCount":11,"unprotectedCount":11},[123,128,132,136,139,142,145,150],{"type":124,"name":125,"callback":125,"file":126,"line":127},"action","bp_include","bp-delegated-xprofile.php",60,{"type":124,"name":129,"callback":130,"file":126,"line":131},"bp_init","initialize",61,{"type":124,"name":133,"callback":134,"file":126,"line":135},"plugins_loaded","registerL10n",63,{"type":124,"name":137,"callback":137,"file":126,"line":138},"admin_menu",65,{"type":124,"name":140,"callback":140,"priority":41,"file":126,"line":141},"bp_members_admin_user_metaboxes",66,{"type":124,"name":143,"callback":143,"priority":41,"file":126,"line":144},"bp_members_admin_update_user",67,{"type":146,"name":147,"callback":147,"priority":148,"file":126,"line":149},"filter","user_has_cap",5,70,{"type":146,"name":151,"callback":151,"priority":41,"file":126,"line":60},"bp_current_user_can",[],[],[],[],{"dangerousFunctions":157,"sqlUsage":158,"outputEscaping":160,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":70,"bundledLibraries":163},[],{"prepared":96,"raw":11,"locations":159},[],{"escaped":161,"rawEcho":11,"locations":162},39,[],[],[],{"summary":166,"deductions":167},"The \"bp-delegated-xprofile\" plugin exhibits a very strong security posture based on the provided static analysis data. The plugin has no identified attack surface through AJAX, REST API, shortcodes, or cron events, which significantly limits potential entry points for attackers. Furthermore, all SQL queries are properly prepared, and all output is correctly escaped, indicating diligent development practices to prevent common vulnerabilities like SQL injection and Cross-Site Scripting (XSS). The presence of capability checks suggests that the plugin attempts to enforce user permissions where appropriate.\n\nThe taint analysis reveals no unsanitized paths, further reinforcing the impression of secure coding. The absence of any known vulnerabilities in its history is a significant positive indicator. The plugin also avoids dangerous functions, file operations, and external HTTP requests, minimizing additional risk vectors. \n\nWhile the plugin demonstrates excellent adherence to secure coding principles, the complete absence of AJAX handlers, REST API routes, shortcodes, and cron events means that the 'attack surface' metrics are zero by default. This can be a strength, but it's also worth noting that 0 nonce checks were identified, which is typically a concern for any interactive plugin. However, given the lack of other entry points, this may not represent a practical risk in this specific case. Overall, this plugin appears to be exceptionally secure, with the only potential area of note being the lack of explicit nonce checks, which is mitigated by the limited attack surface.",[168],{"reason":169,"points":148},"Missing nonce checks","2026-03-17T06:26:30.309Z",{"wat":172,"direct":181},{"assetPaths":173,"generatorPatterns":176,"scriptPaths":177,"versionParams":178},[174,175],"\u002Fwp-content\u002Fplugins\u002Fbp-delegated-xprofile\u002Fcss\u002Fbp-delegated-xprofile.css","\u002Fwp-content\u002Fplugins\u002Fbp-delegated-xprofile\u002Fjs\u002Fbp-delegated-xprofile.js",[],[175],[179,180],"bp-delegated-xprofile\u002Fcss\u002Fbp-delegated-xprofile.css?ver=","bp-delegated-xprofile\u002Fjs\u002Fbp-delegated-xprofile.js?ver=",{"cssClasses":182,"htmlComments":183,"htmlAttributes":184,"restEndpoints":185,"jsGlobals":186,"shortcodeOutput":187},[],[],[],[],[],[]]