[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiwmRERhDIl3OMoPvOV0667lhhaOxS9akXikudKFLbvo":3,"$fW0rsHJ61-w10zO2IRDyZL1b1XocVa4PAJGqamsMacow":333,"$fa01qcQtGYo3JMU3Xw3zMgiJbQgBFJyEQlUhc4sG2NFw":337},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":16,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"discovery_status":27,"vulnerabilities":28,"developer":29,"crawl_stats":25,"alternatives":36,"analysis":134,"fingerprints":310},"bp-mcsg","BuddyPress Minecraft Server Group","1.1","D Cartwright","https:\u002F\u002Fprofiles.wordpress.org\u002Faekeron\u002F","\u003Cp>Enables control of minecraft server whitelist and website\u003C>server chat integration.\u003C\u002Fp>\n\u003Cp>How to install:\u003Cbr \u002F>\nhttp:\u002F\u002Flinktart.co.uk\u002Fgroups\u002Fbuddypress-plugin-info\u002Fdocs\u002Finstallation-steps\u003C\u002Fp>\n\u003Ch3>Notes\u003C\u002Fh3>\n","Enables control of minecraft server whitelist and websiteserver chat integration.",10,4040,0,"2011-12-13T21:00:00.000Z","",[17,18,19,20,21],"buddypress","control","game","hosting","minecraft","http:\u002F\u002Flinktart.co.uk\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-mcsg.zip",85,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":24,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"aekeron",6,60,30,84,"2026-05-20T06:56:17.491Z",[37,63,82,99,116],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":52,"tags":53,"homepage":58,"download_link":59,"security_score":60,"vuln_count":61,"unpatched_count":13,"last_vuln_date":62,"fetched_at":26},"bp-restrict","Restrictions for BuddyPress","1.5.3","SeventhQueen","https:\u002F\u002Fprofiles.wordpress.org\u002Fseventhqueen\u002F","\u003Cp>\u003Cstrong>Restrictions for BuddyPress\u003C\u002Fstrong> gives you full control over who can see and access your BuddyPress community pages. Hide profiles, groups, activity, and messages from visitors, non-members, or specific membership levels.\u003C\u002Fp>\n\u003Cp>Perfect for \u003Cstrong>membership sites\u003C\u002Fstrong>, \u003Cstrong>private communities\u003C\u002Fstrong>, \u003Cstrong>paid networks\u003C\u002Fstrong>, and \u003Cstrong>gated BuddyPress installations\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Ch4>What You Can Restrict\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Members Directory\u003C\u002Fstrong> — Hide the full members list from visitors or non-members\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Member Profiles\u003C\u002Fstrong> — Control who can view individual BuddyPress profiles\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Groups Directory\u003C\u002Fstrong> — Restrict access to the groups listing page\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Single Group Pages\u003C\u002Fstrong> — Lock individual group pages behind membership\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Site-Wide Activity\u003C\u002Fstrong> — Hide the activity stream from unauthorized users\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Private Messages\u003C\u002Fstrong> — Restrict messaging to specific membership levels\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Membership Integration\u003C\u002Fh4>\n\u003Cp>Seamlessly integrates with \u003Cstrong>Paid Memberships Pro (PMPro)\u003C\u002Fstrong>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Apply restrictions based on your existing membership levels\u003C\u002Fli>\n\u003Cli>Show upgrade prompts to non-members trying to access restricted content\u003C\u002Fli>\n\u003Cli>Mix and match — some areas free, some members-only\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Free Access by Profile Field\u003C\u002Fh4>\n\u003Cp>Grant free access to specific BuddyPress members based on a \u003Cstrong>profile field value\u003C\u002Fstrong> — no membership plugin required. Ideal for:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Giving VIP access to users with a specific role or profile attribute\u003C\u002Fli>\n\u003Cli>Creating tiered access without a full membership setup\u003C\u002Fli>\n\u003Cli>Whitelisting beta testers or early adopters\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>BuddyBoss Compatible\u003C\u002Fh4>\n\u003Cp>Fully compatible with \u003Cstrong>BuddyBoss Platform\u003C\u002Fstrong>, so your restrictions work whether you’re running classic BuddyPress or BuddyBoss.\u003C\u002Fp>\n\u003Ch4>How It Works\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Install and activate the plugin\u003C\u002Fli>\n\u003Cli>Go to \u003Cstrong>Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> BP Restrict\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Choose which BuddyPress areas to restrict\u003C\u002Fli>\n\u003Cli>Select restriction type: visitors, all non-members, or specific membership levels\u003C\u002Fli>\n\u003Cli>Set a custom redirect URL or restriction message\u003C\u002Fli>\n\u003Cli>Done — your community is protected\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Use Cases\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Private communities\u003C\u002Fstrong> — Only logged-in members can browse profiles and groups\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Paid membership sites\u003C\u002Fstrong> — Gate BuddyPress features behind PMPro membership levels\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Corporate intranets\u003C\u002Fstrong> — Restrict the social layer to employees only\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Online courses\u003C\u002Fstrong> — Let students access the community, hide it from everyone else\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Dating sites\u003C\u002Fstrong> — Require membership to view profiles or send messages\u003C\u002Fli>\n\u003C\u002Ful>\n","Restrict BuddyPress profiles, groups, activity, and messages by login status, membership level, or profile field.",300,17808,100,4,"2026-02-24T10:02:00.000Z","6.9.4","5.0","7.4",[54,17,55,56,57],"access-control","membership","pmpro","restrict-content","http:\u002F\u002Fwordpress.org\u002Fplugins","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-restrict.1.5.3.zip",99,1,"2025-11-17 20:52:43",{"slug":64,"name":65,"version":66,"author":67,"author_profile":68,"description":69,"short_description":70,"active_installs":71,"downloaded":72,"rating":13,"num_ratings":13,"last_updated":73,"tested_up_to":50,"requires_at_least":74,"requires_php":75,"tags":76,"homepage":80,"download_link":81,"security_score":47,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"storelinkformc","StoreLink for Minecraft by MrDino","1.0.32","mrdinocarlos","https:\u002F\u002Fprofiles.wordpress.org\u002Fmrdinocarlos\u002F","\u003Cp>\u003Cstrong>StoreLink for Minecraft\u003C\u002Fstrong> allows you to automatically deliver Minecraft items or execute commands after a WooCommerce purchase is completed.\u003C\u002Fp>\n\u003Cp>Perfect for store owners who sell in-game items or ranks. This plugin connects your website to your Minecraft server securely, reliably, and easily.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Main Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>🔗 Sync WooCommerce products with Minecraft items or commands.\u003C\u002Fli>\n\u003Cli>🚀 Auto-delivery on order completion.\u003C\u002Fli>\n\u003Cli>🔒 API token authentication for secure access.\u003C\u002Fli>\n\u003Cli>📦 Delivery queue management with a pending\u002Fdelivered system.\u003C\u002Fli>\n\u003Cli>🛠 Admin tools for rebuilding database, viewing table structure, and debugging.\u003C\u002Fli>\n\u003Cli>🔧 Supports LiteSpeed \u002F WP Rocket \u002F caching plugins safely.\u003C\u002Fli>\n\u003Cli>🌍 Full REST API support.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Debugging & Tools\u003C\u002Fh3>\n\u003Cp>The \u003Cstrong>Settings\u003C\u002Fstrong> page provides:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>🧪 View current DB table structure.\u003C\u002Fli>\n\u003Cli>♻️ Rebuild the \u003Ccode>pending_deliveries\u003C\u002Fcode> table.\u003C\u002Fli>\n\u003Cli>🔑 Regenerate API token.\u003C\u002Fli>\n\u003Cli>🧹 Flush WordPress object cache.\u003C\u002Fli>\n\u003Cli>🛠 Access recommendation for WP phpMyAdmin or Adminer for deeper inspection.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is open-source software licensed under the GPL v2 or later.\u003C\u002Fp>\n","Connect your WooCommerce store with a Minecraft server. Deliver in-game items when an order is completed, using a secure and customizable REST API.",20,751,"2025-12-11T01:40:00.000Z","6.0","8.1",[77,19,21,78,79],"delivery","shop","woocommerce","https:\u002F\u002Fmrdino.es\u002Fwoostorelink-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstorelinkformc.1.0.32.zip",{"slug":83,"name":84,"version":85,"author":7,"author_profile":8,"description":86,"short_description":87,"active_installs":11,"downloaded":88,"rating":89,"num_ratings":90,"last_updated":91,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":92,"homepage":96,"download_link":97,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":98},"bp-group-dice","BuddyPress Group Dice","1.2","\u003Cp>Dice rolling in forums for RP\u002Fetc groups.\u003C\u002Fp>\n\u003Ch3>Notes\u003C\u002Fh3>\n\u003Cp>History.txt – contains all the changes since version 1.0\u003Cbr \u002F>\nLicense.txt – contains the licensing details for this component.\u003C\u002Fp>\n","BuddyPress Group Dice.",3280,50,2,"2013-05-17T14:24:00.000Z",[17,93,19,94,95],"dice","games","groups","http:\u002F\u002Flinktart.co.uk","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-group-dice.zip","2026-04-06T09:54:40.288Z",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":11,"downloaded":107,"rating":71,"num_ratings":61,"last_updated":108,"tested_up_to":109,"requires_at_least":110,"requires_php":15,"tags":111,"homepage":114,"download_link":115,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"fenshop","FenShop (gaming shop for minecraft & steam games)","1.13.2","fensoft","https:\u002F\u002Fprofiles.wordpress.org\u002Ffensoft\u002F","\u003Cp>Ce plugin permet de relier FenShop à n’importe quelle installation wordpress et d’y integrer les boutons d’achat, de vote et des pages de top.\u003Cbr \u002F>\nCes pages sont en HTML et peuvent donc être modifiée facilement.\u003C\u002Fp>\n\u003Cp>This plugin allow you to link FenShop to your wordpress to add buy, vote and top pages.\u003Cbr \u002F>\nTheses pages are in HTML and can be easily edited.\u003C\u002Fp>\n","Lien vers FenShop - Boutique gaming sur mesure minecraft & steam Link to FenShop - Gaming shop for minecraft & steam games",3134,"2017-06-16T12:31:00.000Z","4.8.28","3.0.1",[19,112,21,78,113],"gaming","steam","http:\u002F\u002Ffensoftheberge.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffenshop.zip",{"slug":117,"name":118,"version":119,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":11,"downloaded":124,"rating":13,"num_ratings":13,"last_updated":125,"tested_up_to":126,"requires_at_least":127,"requires_php":15,"tags":128,"homepage":132,"download_link":133,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"imdb-video-movie-trailers","Add Movie Trailers and Games Trailers to your site","1.04","cinemabase","https:\u002F\u002Fprofiles.wordpress.org\u002Fcinemabase\u002F","\u003Cp>If you like to add movie trailers, game trailers or TV trailers to your blog or create your own IMDB site, Cinemabase can help you do that.\u003Cbr \u002F>\nOne professional plugin that will add movie trailers to your site – Free \u003Ca href=\"http:\u002F\u002Fwww.cinemabase.org\" rel=\"nofollow ugc\">Visit Site >>\u003C\u002Fa> :\u003C\u002Fp>\n\u003Cp>Adding movie trailers to your site is as easy as 1-2-3 :\u003C\u002Fp>\n\u003Cpre>\u003Ccode>*  1. Get the tt movie code.\n*  2. Select your player.\n*  3. Embed the code in your site.\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>All you need to do it to add a tag with the imdb movie code (the tt code – search for the movie or game trailer on the www.imdb.com site) and the type of player (template) you would like and the movie trailer will be added.\u003C\u002Fp>\n\u003Cp>For example for the movie trailer \u003Ca href=\"http:\u002F\u002Fwww.imdb.com\u002Ftitle\u002Ftt1598778\u002F\" rel=\"nofollow ugc\">Contagion http:\u002F\u002Fwww.imdb.com\u002Ftitle\u002Ftt1598778\u002F\u003C\u002Fa> add the following tag :\u003Cbr \u002F>\n[cinemabase tt1598778 image_list_wide]\u003C\u002Fp>\n\u003Cpre>\u003Ccode>Available templates :\n*  1. image_list_wide\n*  2. video_player\n*  3. video_playlist_v\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>For comments, questions and support use this support email \u003Ca href=\"mailto:cinemabase1@gmail.com\" rel=\"nofollow ugc\">cinemabase1@gmail.com\u003C\u002Fa>\u003C\u002Fp>\n","Add Movie Trailers and Game Trailers to your site or create your own IMDB site",247191,"2011-11-10T15:26:00.000Z","3.2.1","2.0.2",[17,19,129,130,131],"imdb","movie","trailer","http:\u002F\u002Fwww.cinemabase.org","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fimdb-video-movie-trailers.zip",{"attackSurface":135,"codeSignals":164,"taintFlows":260,"riskAssessment":301,"analyzedAt":309},{"hooks":136,"ajaxHandlers":160,"restRoutes":161,"shortcodes":162,"cronEvents":163,"entryPointCount":13,"unprotectedCount":13},[137,143,146,149,152,155],{"type":138,"name":139,"callback":140,"file":141,"line":142},"action","get_header","process_minecraft_whitelist_form","includes\u002Ffunctions.php",77,{"type":138,"name":139,"callback":144,"file":141,"line":145},"process_minecraft_username_form",126,{"type":138,"name":139,"callback":147,"file":141,"line":148},"server_livechat_who_is_online",207,{"type":138,"name":139,"callback":150,"file":141,"line":151},"server_livechat_new_message",250,{"type":138,"name":139,"callback":153,"file":141,"line":154},"server_livechat_load_messages",316,{"type":138,"name":156,"callback":157,"file":158,"line":159},"bp_init","bp_mscg_init","loader.php",24,[],[],[],[],{"dangerousFunctions":165,"sqlUsage":166,"outputEscaping":169,"fileOperations":13,"externalRequests":13,"nonceChecks":258,"capabilityChecks":13,"bundledLibraries":259},[],{"prepared":167,"raw":13,"locations":168},7,[],{"escaped":13,"rawEcho":170,"locations":171},46,[172,175,177,179,181,183,185,187,189,191,194,196,198,200,202,204,206,208,210,212,214,216,218,220,222,224,226,228,230,232,234,235,237,239,241,242,243,244,245,246,248,249,250,253,255,256],{"file":141,"line":173,"context":174},168,"raw output",{"file":141,"line":176,"context":174},169,{"file":141,"line":178,"context":174},170,{"file":141,"line":180,"context":174},196,{"file":141,"line":182,"context":174},197,{"file":141,"line":184,"context":174},198,{"file":141,"line":186,"context":174},199,{"file":141,"line":188,"context":174},307,{"file":141,"line":190,"context":174},309,{"file":192,"line":193,"context":174},"includes\u002Fmc-admin-page.php",15,{"file":192,"line":195,"context":174},17,{"file":192,"line":197,"context":174},19,{"file":192,"line":199,"context":174},21,{"file":192,"line":201,"context":174},23,{"file":192,"line":203,"context":174},36,{"file":192,"line":205,"context":174},38,{"file":192,"line":207,"context":174},40,{"file":192,"line":209,"context":174},42,{"file":192,"line":211,"context":174},44,{"file":192,"line":213,"context":174},57,{"file":192,"line":215,"context":174},59,{"file":192,"line":217,"context":174},61,{"file":192,"line":219,"context":174},63,{"file":192,"line":221,"context":174},65,{"file":192,"line":223,"context":174},69,{"file":192,"line":225,"context":174},71,{"file":192,"line":227,"context":174},73,{"file":192,"line":229,"context":174},75,{"file":231,"line":201,"context":174},"includes\u002Fonline-users.php",{"file":231,"line":233,"context":174},45,{"file":231,"line":142,"context":174},{"file":236,"line":90,"context":174},"includes\u002Fregister.php",{"file":236,"line":238,"context":174},9,{"file":240,"line":195,"context":174},"includes\u002Fserver-chat.php",{"file":240,"line":195,"context":174},{"file":240,"line":195,"context":174},{"file":240,"line":159,"context":174},{"file":240,"line":159,"context":174},{"file":240,"line":159,"context":174},{"file":240,"line":247,"context":174},31,{"file":240,"line":247,"context":174},{"file":240,"line":247,"context":174},{"file":251,"line":252,"context":174},"includes\u002Fwhitelist.php",43,{"file":251,"line":254,"context":174},49,{"file":251,"line":89,"context":174},{"file":251,"line":257,"context":174},101,5,[],[261,290],{"entryPoint":262,"graph":263,"unsanitizedCount":13,"severity":289},"server_livechat_who_is_online (includes\u002Ffunctions.php:131)",{"nodes":264,"edges":285},[265,270,276,280],{"id":266,"type":267,"label":268,"file":141,"line":269},"n0","source","$_POST (x2)",176,{"id":271,"type":272,"label":273,"file":141,"line":274,"wp_function":275},"n1","sink","query() [SQLi]",177,"query",{"id":277,"type":267,"label":278,"file":141,"line":279},"n2","$_POST['server_livechat_group_id']",187,{"id":281,"type":272,"label":282,"file":141,"line":283,"wp_function":284},"n3","get_results() [SQLi]",185,"get_results",[286,288],{"from":266,"to":271,"sanitized":287},true,{"from":277,"to":281,"sanitized":287},"low",{"entryPoint":291,"graph":292,"unsanitizedCount":13,"severity":289},"\u003Cfunctions> (includes\u002Ffunctions.php:0)",{"nodes":293,"edges":298},[294,295,296,297],{"id":266,"type":267,"label":268,"file":141,"line":269},{"id":271,"type":272,"label":273,"file":141,"line":274,"wp_function":275},{"id":277,"type":267,"label":278,"file":141,"line":279},{"id":281,"type":272,"label":282,"file":141,"line":283,"wp_function":284},[299,300],{"from":266,"to":271,"sanitized":287},{"from":277,"to":281,"sanitized":287},{"summary":302,"deductions":303},"The bp-mcsg plugin version 1.1 demonstrates a strong adherence to fundamental WordPress security practices, particularly concerning its attack surface and data handling. The absence of any registered AJAX handlers, REST API routes, shortcodes, or cron events, especially those lacking authentication, indicates a minimal exposure to common attack vectors. Furthermore, the plugin exclusively utilizes prepared statements for its SQL queries, which is a critical defense against SQL injection vulnerabilities. The presence of nonce checks also suggests an awareness of cross-site request forgery prevention.\n\nHowever, a significant concern arises from the complete lack of output escaping. With 100% of outputs unescaped, this plugin is highly vulnerable to Cross-Site Scripting (XSS) attacks. Any dynamic data displayed to users, if not properly sanitized before rendering, could be exploited by attackers to inject malicious scripts. This oversight, coupled with the absence of capability checks, presents a substantial risk despite the otherwise robust foundation.\n\nThe plugin's vulnerability history is entirely clean, with no recorded CVEs. This is a positive indicator, suggesting that the plugin has either been developed with security in mind or has not yet been a target for significant exploitation. However, the lack of historical vulnerabilities does not negate the immediate and severe risk posed by the unescaped output, which is a fundamental security requirement that has been overlooked in this version.",[304,306],{"reason":305,"points":193},"Output escaping: 0% properly escaped",{"reason":307,"points":308},"Capability checks: 0",8,"2026-04-16T12:45:31.950Z",{"wat":311,"direct":317},{"assetPaths":312,"generatorPatterns":314,"scriptPaths":315,"versionParams":316},[313],"\u002Fwp-content\u002Fplugins\u002Fbp-mcsg\u002Fcss\u002Fstyle.css",[],[],[],{"cssClasses":318,"htmlComments":321,"htmlAttributes":322,"restEndpoints":324,"jsGlobals":325,"shortcodeOutput":327},[319,320],"item-list-tabs","no-ajax",[],[323],"data-target=\"#minecraft-server-modal\"",[],[326],"BP_MCSG_AJAX",[328,329,330,331,332],"\u003Ca href=\"server-chat\">Server Chat\u003C\u002Fa>","\u003Ca href=\"whitelist\">Whitelist\u003C\u002Fa>","\u003Ca href=\"map\">Map\u003C\u002Fa>","\u003Ca href=\"register\">Register\u003C\u002Fa>","\u003Cp>Select an option from above.\u003C\u002Fp>",{"error":287,"url":334,"statusCode":335,"statusMessage":336,"message":336},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fbp-mcsg\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":13,"versions":338},[]]