Does Profile Field Repeater have any unpatched vulnerabilities?

No. All known vulnerabilities in Profile Field Repeater have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Profile Field Repeater compatible with WordPress 5.9.13?

According to WordPress.org data, Profile Field Repeater 1.0.1 has been tested up to WordPress 5.9.13. Check the plugin's changelog for the latest compatibility information.

Is Profile Field Repeater compatible with PHP 5.6+?

Profile Field Repeater requires PHP 5.6 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Profile Field Repeater updated?

Profile Field Repeater was last updated on Apr 10, 2022. Frequent updates are generally a positive security signal.

What is Profile Field Repeater's security score?

Profile Field Repeater has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Profile Field Repeater Security & Risk Analysis

wordpress.org/plugins/bp-profile-field-repeater

Make TEXT BOX or NUMBER type BuddyPress profile field as a repeater.

20 active installs v1.0.1 PHP 5.6+ WP 4.0+ Updated Apr 10, 2022

buddypressprofileprofile-fieldsrepeater

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Profile Field Repeater Safe to Use in 2026?

Generally Safe

Score 85/100

Profile Field Repeater has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago

Risk Assessment

The bp-profile-field-repeater plugin v1.0.1 exhibits a seemingly strong security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events with unprotected entry points, along with no detected dangerous functions or file operations, suggests a limited attack surface. Furthermore, all SQL queries utilize prepared statements, and there are no recorded vulnerabilities or known CVEs, which are positive indicators.

Key Concerns

70% output escaping is not ideal
No capability checks
No nonce checks

Vulnerabilities

None known

Profile Field Repeater Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

Profile Field Repeater Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

7 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

70% escaped10 total outputs

Attack Surface

Profile Field Repeater Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 10

actionxprofile_field_after_sidebarboxapp\admin\class-bp-field-repeater-admin.php:51

actionxprofile_fields_saved_fieldapp\admin\class-bp-field-repeater-admin.php:54

actionxprofile_admin_field_name_legendapp\admin\class-bp-field-repeater-admin.php:57

actionwp_enqueue_scriptsapp\main\class-bp-field-repeater.php:33

actionbp_custom_profile_edit_fields_pre_visibilityapp\main\class-bp-field-repeater.php:36

filterbp_xprofile_field_edit_html_elementsapp\main\class-bp-field-repeater.php:39

filterbp_xprofile_set_field_data_pre_validateapp\main\class-bp-field-repeater.php:41

filterbp_get_the_profile_field_valueapp\main\class-bp-field-repeater.php:43

actionplugins_loadedbp-profile-field-repeater.php:64

actionadmin_noticesbp-profile-field-repeater.php:97

Maintenance & Trust

Profile Field Repeater Maintenance & Trust

Maintenance Signals

WordPress version tested5.9.13

Last updatedApr 10, 2022

PHP min version5.6

Downloads2K

Community Trust

Rating80/100

Number of ratings1

Active installs20

Alternatives

Profile Field Repeater Alternatives

BuddyPress Conditional Field Groups

buddypress-conditional-field-groups

Conditionally hide BuddyPress XProfile Field Groups based on user role.

80 No CVEs

Buddypress XProfile Custom Field Types Reloaded

bp-xprofile-custom-fields

Extends the default Buddypress XProfile field types you can set for profile. Some XProfile Field types are: Birthdate, Email, Url, Datepicker, Checkbo …

50 No CVEs

Birthday mails bp

birthday-mails-bp

Sends birthday emails to members on their birthdays .(Based on Buddypress)

10 No CVEs

BP Group Analytics

bp-group-analytics

Pie charts for xprofile fields.

10 No CVEs

Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress

youzify

The best BuddyPress plugin for building online communities, user profile, social networks, and membership sites on WordPress with tons of features.

6K 1 unpatched

Developer Profile

Profile Field Repeater Developer Profile

Bunty

12 plugins · 250 total installs

trust score

Avg Security Score

97/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Profile Field Repeater

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/bp-profile-field-repeater/assets/js/custom-script.js/wp-content/plugins/bp-profile-field-repeater/assets/css/custom-style.css

Script Paths

assets/js/custom-script.js

Version Parameters

bp-field-repeater-script?ver=bp-field-repeater-style?ver=

HTML / DOM Fingerprints

CSS Classes

more_datamore_data_clone_field_clone_fieldbp_add_more_fieldbp_remove_field

Data Attributes

data-field_id

JS Globals

BPPFR_VERSIONBPPFR_PATHBPPFR_URLBPPFR_BASE_NAME

FAQ