[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fv15pd1VaA--vUWstazIapKRqMLYVnXTVEPyMyE4Ask4":3,"$fo6POQM2qjIygTKG5Dp2_CsgoJ0a8Mol4ptahbC6Z_ls":172,"$fvrh4Mo6a9eiavVcFG3PFFjGJkAr-KiklGAStRQd9Xh0":177},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":16,"homepage":20,"download_link":21,"security_score":22,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":24,"discovery_status":25,"vulnerabilities":26,"developer":27,"crawl_stats":23,"alternatives":34,"analysis":111,"fingerprints":155},"bp-random-member-widget","BP Random Member Widget","1.0","Thomas Opp","https:\u002F\u002Fprofiles.wordpress.org\u002Ftomyaway\u002F","\u003Cp>English: This Plugin adds a sidebar widget with avatar and username of a random BuddyPress user.\u003C\u002Fp>\n\u003Cp>German: Dieses BuddyPress-Plugin erstellt ein Sidebar-Widget, welches ein zuf&auml;lliges Mitglied mit Avatar und Namen anzeigt, ohne den ganzen anderen Schnick-Schnack des Standard-Widgets.\u003C\u002Fp>\n","This Plugin adds a sidebar widget with avatar and username of a random BuddyPress user.",10,3279,0,"2010-04-29T11:35:00.000Z","",[17,18,19],"buddypress","member","widget","http:\u002F\u002Fwww.wptoolbox.de\u002Fplugins\u002F2010\u002F02\u002Fbp-random-member-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-random-member-widget.zip",85,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":28,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":30,"avg_security_score":22,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},"tomyaway",2,20,30,84,"2026-05-20T04:31:36.050Z",[35,57,72,85,100],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":45,"num_ratings":46,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":50,"tags":51,"homepage":55,"download_link":56,"security_score":45,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":24},"birthday-widget-for-buddypress","Wbcom Designs – Birthday Widget for BuddyPress","2.4.1","wbcomdesigns","https:\u002F\u002Fprofiles.wordpress.org\u002Fwbcomdesigns\u002F","\u003Cp>Transform your BuddyPress community with the Birthday Widget! Know the upcoming birthdays of your site’s members and help them celebrate their special day. A little effort to greet community members keeps the saying alive: “community that celebrates together stays together”.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Smart Birthday Display\u003C\u002Fstrong>\u003Cbr \u002F>\n* Show birthdays for all members, friends, or followers\u003Cbr \u002F>\n* Flexible time ranges: weekly, monthly, or unlimited\u003Cbr \u002F>\n* Today’s birthdays get special highlighting\u003Cbr \u002F>\n* Age display with customizable “Turning X” format\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Modern & Responsive Design\u003C\u002Fstrong>\u003Cbr \u002F>\n* Clean, minimal design that works with any theme\u003Cbr \u002F>\n* Mobile-first responsive layout\u003Cbr \u002F>\n* Smooth animations and hover effects\u003Cbr \u002F>\n* Optimized for performance with smart caching\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Flexible Configuration\u003C\u002Fstrong>\u003Cbr \u002F>\n* Multiple name display options (username, nickname, first name)\u003Cbr \u002F>\n* Customizable date formats\u003Cbr \u002F>\n* Optional emoji support\u003Cbr \u002F>\n* Send birthday wishes via private messages\u003C\u002Fp>\n\u003Cp>\u003Cstrong>NEW: Automatic Notifications\u003C\u002Fstrong>\u003Cbr \u002F>\n* Automatic birthday email greetings to members\u003Cbr \u002F>\n* Activity feed auto-posts for birthdays\u003Cbr \u002F>\n* BuddyPress notification support\u003Cbr \u002F>\n* Admin daily birthday summary email\u003Cbr \u002F>\n* Configurable send time and templates\u003C\u002Fp>\n\u003Cp>\u003Cstrong>NEW: Display Enhancements\u003C\u002Fstrong>\u003Cbr \u002F>\n* Zodiac sign display option\u003Cbr \u002F>\n* Confetti animation for celebrations\u003Cbr \u002F>\n* Centralized admin settings page\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Developer Friendly\u003C\u002Fstrong>\u003Cbr \u002F>\n* Theme-compatible styling using CSS inheritance\u003Cbr \u002F>\n* Smart asset loading (only loads when widget is active)\u003Cbr \u002F>\n* Shortcode support: \u003Ccode>[bp_birthdays]\u003C\u002Fcode>\u003Cbr \u002F>\n* Extensive filter and action hooks\u003Cbr \u002F>\n* WPCS compliant code\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Performance Optimized\u003C\u002Fstrong>\u003Cbr \u002F>\n* 30-minute smart caching system\u003Cbr \u002F>\n* Conditional asset loading\u003Cbr \u002F>\n* Minimal database queries\u003Cbr \u002F>\n* Zero Cumulative Layout Shift (CLS)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Accessibility Ready\u003C\u002Fstrong>\u003Cbr \u002F>\n* WCAG 2.1 compliant\u003Cbr \u002F>\n* Keyboard navigation support\u003Cbr \u002F>\n* Screen reader friendly\u003Cbr \u002F>\n* Reduced motion support\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Supercharge Your BuddyPress Community\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Love Birthday Widget? Check out our other free community plugins:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fstore.wbcomdesigns.com\u002F\" rel=\"nofollow ugc\">Jetonomy\u003C\u002Fa>\u003C\u002Fstrong> — Next-gen discussion platform for WordPress — forums, Q&A, ideas, voting, trust levels. Free forever. \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fvapvarun\u002Fjetonomy\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fstore.wbcomdesigns.com\u002F\" rel=\"nofollow ugc\">WPMediaVerse\u003C\u002Fa>\u003C\u002Fstrong> — A general-purpose WordPress media platform plugin. Albums, galleries, and media sharing. \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fvapvarun\u002Fwpmediaverse\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Visit \u003Ca href=\"https:\u002F\u002Fstore.wbcomdesigns.com\u002F\" rel=\"nofollow ugc\">store.wbcomdesigns.com\u003C\u002Fa> for more products and the \u003Ca href=\"https:\u002F\u002Fwbcomdesigns.com\u002Fdownloads\u002Fbuddypress-community-bundle\u002F\" rel=\"nofollow ugc\">BuddyPress Community Bundle\u003C\u002Fa>.\u003C\u002Fp>\n","Display upcoming birthdays of BuddyPress members with a beautiful, responsive widget that integrates seamlessly with any WordPress theme.",400,11640,100,1,"2026-04-03T09:22:00.000Z","6.9.4","5.0","7.4",[52,17,53,54,19],"birthdays","community","members","https:\u002F\u002Fwbcomdesigns.com\u002Fdownloads\u002Fbuddypress-birthdays\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbirthday-widget-for-buddypress.2.4.1.zip",{"slug":58,"name":59,"version":6,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":11,"downloaded":64,"rating":45,"num_ratings":46,"last_updated":65,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":66,"homepage":70,"download_link":71,"security_score":22,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":24},"bp-extend-widgets","BuddyPress Extend Widgets","Slava Abakumov","https:\u002F\u002Fprofiles.wordpress.org\u002Fslaffik\u002F","\u003Cp>After activating all current and possible future widgets will get extra BuddyPress specific options.\u003Cbr \u002F>\nYou will be able to select on which users profiles or groups pages you want to display this widget and on which – don’t.\u003C\u002Fp>\n\u003Cp>So you will get more flexibility in arranging your sidebars (or widget-zones).\u003C\u002Fp>\n","Provide all widgets with BuddyPress specific fields (conditional display logic)",6325,"2015-01-04T17:52:00.000Z",[17,67,68,54,69],"conditional","groups","widgets","http:\u002F\u002Fovirium.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-extend-widgets.1.0.zip",{"slug":73,"name":74,"version":75,"author":76,"author_profile":77,"description":78,"short_description":79,"active_installs":11,"downloaded":80,"rating":13,"num_ratings":13,"last_updated":81,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":82,"homepage":83,"download_link":84,"security_score":22,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":24},"enhanced-buddypress-widgets","Enhanced BuddyPress Widgets","0.2.1","Boone Gorges","https:\u002F\u002Fprofiles.wordpress.org\u002Fboonebgorges\u002F","\u003Cp>This plugin adds two widgets to your WordPress MU\u002FBuddyPress installation: Groups and Members. Use them instead of the Groups and Members widgets that ship with BuddyPress. They provide the ability to select which of the three tabs – Newest, Active, or Popular – will be the widget’s default view.\u003C\u002Fp>\n\u003Cp>Version 0.2 of this plugin works only with BuddyPress 1.2. For earlier versions of BuddyPress, please download version 0.1 of the plugin.\u003C\u002Fp>\n\u003Cp>Developed for the CUNY Academic Commons. Visit http:\u002F\u002Fcommons.gc.cuny.edu to learn more about this Totally Kewl project.\u003C\u002Fp>\n","Provides enhanced version of BuddyPress's core Groups and Members widgets",14110,"2011-05-16T03:56:00.000Z",[17,68,54,19],"http:\u002F\u002Fdev.commons.gc.cuny.edu\u002F2009\u002F09\u002F07\u002Fnew-buddypress-plugin-enhanced-buddypress-widgets","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fenhanced-buddypress-widgets.zip",{"slug":86,"name":87,"version":88,"author":89,"author_profile":90,"description":91,"short_description":92,"active_installs":11,"downloaded":93,"rating":13,"num_ratings":13,"last_updated":94,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":95,"homepage":98,"download_link":99,"security_score":22,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":24},"jet-event-system-for-buddypress","Jet Event System for BuddyPress","1.7.0.1","milordk","https:\u002F\u002Fprofiles.wordpress.org\u002Fmilordk\u002F","\u003Cp>\u003Cstrong>en:\u003C\u002Fstrong> The modern System of events for your social network. Ability to attract members of the network to the ongoing activities, a wide range of possibilities and options, support for different types of display, etc.\u003Cbr \u002F>\nSupport for 9 languages.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>ru:\u003C\u002Fstrong> Современная Система событий для Вашей социальной сети. Возможность привлекать участников сети к проводимым мероприятиям, широкий спектр возможностей и настроек, поддержка разных видов отображения и т.п.\u003Cbr \u002F>\nПоддержка 9 языков.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Before you install or upgrade sure to read the Readme file!\u003C\u002Fstrong>!\u003Cbr \u002F>\n\u003Cstrong>Перед установкой или обновлением обязательно прочтите Readme файл!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Translation for the following locations: ru_RU, fr_FR, de_DE, es_ES, da_DK, it_IT, sv_SE (see Translate section in readme)\u003C\u002Fp>\n\u003Cp>Live Demo: \u003Ca href=\"http:\u002F\u002Fsportactions.ru\" rel=\"nofollow ugc\">Sport site\u003C\u002Fa> , \u003Ca href=\"http:\u002F\u002Fvolks-wagen-club.ru\" rel=\"nofollow ugc\">Volkswagen Club\u003C\u002Fa> (Please do not create events on these sites! Use the \u003Ca href=\"http:\u002F\u002Fjes.milordk.ru\" rel=\"nofollow ugc\">jes.milordk.ru\u003C\u002Fa>)\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fjes.milordk.ru\" rel=\"nofollow ugc\">Official website of the plugin\u003C\u002Fa> (You can register and create events, thereby testing the latest version of plug-ins under development)\u003C\u002Fp>\n\u003Cp>\u003Cem>Implementation of many functions in the future – beyond the needs of my projects. I am interested to develop a plug-in direction of maximum capacity for most users. Absolutely not renounce the support of you, both financially and from the ideas and assistance in programming.\u003C\u002Fem>\u003C\u002Fp>\n\u003Ch3>Special Note\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Correct operation of the plugin is guaranteed only in case of installation through the administrative panel of WordPress! If you install the plugin yourself – you must have the necessary knowledge of web servers, access rights & etc.!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Used your theme should be based on the default theme BP (styles and functions)! The efficiency of the plug can only be guaranteed on these themes!\u003Cbr \u002F>\nAs one of the options for addressing emerging problems with other themes – connection functions.php from a default theme to your BP\u003C\u002Fp>\n\u003Cp>\u003Cstrong>If you are using a theme different from the BP-Default, be sure to install and activate\u003C\u002Fstrong> – \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fbp-template-pack\" rel=\"ugc\">BP Template Pack\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Conflict jQuery:\u003C\u002Fstrong>\u003Cbr \u002F>\n* Event Calendar 6.7.5\u003Cbr \u002F>\n* Buddypress Ajax Chat ( see FAQ )\u003C\u002Fp>\n\u003Cp>Your wishes for the development of plug-in you can leave: http:\u002F\u002Fjes.milordk.ru\u002Fgroups\u002Fproposals-for-the-future\u003C\u002Fp>\n\u003Cp>Tell about problems with the plugin and read the other comments you can: http:\u002F\u002Fjes.milordk.ru\u002Fgroups\u002Fthe-bugs\u003C\u002Fp>\n\u003Ch3>Translate\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>ru_RU\u003C\u002Fstrong> – \u003Cem>Jettochkin\u003C\u002Fem>, \u003Ca href=\"http:\u002F\u002Fmilordk.ru\" rel=\"nofollow ugc\">milordk.ru\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>fr_FR\u003C\u002Fstrong> – \u003Cem>Laurent Hermann\u003C\u002Fem>, \u003Ca href=\"http:\u002F\u002Fwww.paysterresdelorraine.com\u002F\" rel=\"nofollow ugc\">paysterresdelorraine.com\u002F\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>de_DE\u003C\u002Fstrong> – \u003Cem>Manuel MЭller\u003C\u002Fem>, \u003Ca href=\"http:\u002F\u002Fwww.pixelartist.de\" rel=\"nofollow ugc\">pixelartist.de\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>es_ES\u003C\u002Fstrong> – \u003Cem>Alex_Mx\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>da_DK\u003C\u002Fstrong> – \u003Cem>Chono\u003C\u002Fem>, \u003Ca href=\"http:\u002F\u002Fwww.chono.dk\" rel=\"nofollow ugc\">chono.dk\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>it_IT\u003C\u002Fstrong> – \u003Cem>Andrea Bianchi\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>sv_SE\u003C\u002Fstrong> – \u003Cem>Thomas Schneider\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>pt_BR\u003C\u002Fstrong> – \u003Cem>Adilson, \u003Ca href=\"http:\u002F\u002Fwww.xrides.com.br\u002F\" rel=\"nofollow ugc\">XRides – DH e Freeride\u003C\u002Fa>\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>fi\u003C\u002Fstrong> – \u003Cem>Juho Pirhonen\u003C\u002Fem>, http:\u002F\u002Fmediajalostamo.fi\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Discuss the issues of localization plugin, you can: http:\u002F\u002Fjes.milordk.ru\u002Fgroups\u002Ftranslates\u003C\u002Fp>\n\u003Ch3>Future\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>In version 1.6.7 will be reviewed relating to the use of archival events in the widget! Can fully use the sorting mechanism of events\u003C\u002Fli>\n\u003Cli>In version 1.7 will be added to link events to a group\u003C\u002Fli>\n\u003Cli>In version 1.8 will add the ability to use a template for a single event\u003C\u002Fli>\n\u003Cli>In version 3.0 will add the ability to associate events with blogs\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>List of future functions formed the opinion creator plug-in and test participants, if you have something to offer – \u003Ca href=\"http:\u002F\u002Fjes.milordk.ru\u002Fgroups\u002Fproposals-for-the-future\" rel=\"nofollow ugc\">Poposals for the future\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Author plug reserves the right to order the implementation of functions\u003C\u002Fp>\n\u003Ch3>Contact\u003C\u002Fh3>\n\u003Cp>For suggestions, bugs, hugs and love can be donated at the following locations.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fmilordk.ru\" rel=\"nofollow ugc\">Authors page\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fmilordk.ru\u002Fr-lichnoe\u002Fopyt\u002Fcms\u002Fjet-event-system-for-buddypress-sistema-sobytij-dlya-vashej-socialnoj-seti.html\" rel=\"nofollow ugc\">Plugin page\u003C\u002Fa>\u003C\u002Fp>\n","The modern System of events for your social network. Ability to attract members of the network to the ongoing activities, etc.",33454,"2011-08-10T19:17:00.000Z",[17,54,96,19,97],"meta","wordpress-mu","http:\u002F\u002Fmilordk.ru\u002Fr-lichnoe\u002Fopyt\u002Fcms\u002Fjet-event-system-for-buddypress-sistema-sobytij-dlya-vashej-socialnoj-seti.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjet-event-system-for-buddypress.zip",{"slug":101,"name":102,"version":103,"author":89,"author_profile":90,"description":104,"short_description":105,"active_installs":11,"downloaded":106,"rating":13,"num_ratings":13,"last_updated":107,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":108,"homepage":109,"download_link":110,"security_score":22,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":24},"jet-member-could","Jet Random Members Widget","1.3","\u003Cp>en: Create a cloud of users on your social network! Do you have many users? Do you want more communication? Install this widget!\u003Cbr \u002F>\nProvides random members avatar with link to profile\u003C\u002Fp>\n\u003Cp>ru: Создайте облако пользователей Вашей социальной сети! У Вас много пользователей? Хотите больше коммуникаций? Установите этот виджет!\u003C\u002Fp>\n\u003Cp>!!!!!!!!!!!\u003Cbr \u002F>\nru: Данная версия плагина не будет поддерживаться в новых версия BuddyPress (1.2.5.1 и выше), взамен будет новый плагин:\u003Cbr \u002F>\nen: This version of the plug will not be supported in the new version BuddyPress (1.2.5.1 and above) will return the new plugin:\u003C\u002Fp>\n\u003Cp>Jet Unit Site Could (https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjet-unit-site-could\u002F)\u003Cbr \u002F>\n!!!!!!!!!!!\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fsportactions.ru\" rel=\"nofollow ugc\">Live demo\u003C\u002Fa> (need registration)\u003C\u002Fp>\n\u003Cp>! backward compatibility with 1.1.3\u003C\u002Fp>\n\u003Ch3>Contact\u003C\u002Fh3>\n\u003Cp>For suggestions, bugs, hugs and love can be donated at the following locations.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fmilordk.ru\" rel=\"nofollow ugc\">Authors page\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fmilordk.ru\u002Fr-lichnoe\u002Fopyt-l\u002Fcms\u002Fprodolzhaem-widget-o-stroenie-jet-random-members-widget.html\" rel=\"nofollow ugc\">Plugin page\u003C\u002Fa>\u003C\u002Fp>\n","en: Create a cloud of users on your social network! Do you have many users? Do you want more communication? Install this widget!",4876,"2010-07-08T19:46:00.000Z",[17,54,96,19,97],"http:\u002F\u002Fmilordk.ru\u002Fr-lichnoe\u002Fopyt-l\u002Fcms\u002Fprodolzhaem-widget-o-stroenie-jet-random-members-widget.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjet-member-could.zip",{"attackSurface":112,"codeSignals":124,"taintFlows":142,"riskAssessment":143,"analyzedAt":154},{"hooks":113,"ajaxHandlers":120,"restRoutes":121,"shortcodes":122,"cronEvents":123,"entryPointCount":13,"unprotectedCount":13},[114],{"type":115,"name":116,"callback":117,"file":118,"line":119},"action","bp_init","bp_randommemberwidget_init","bp-randommemberwidget-loader.php",15,[],[],[],[],{"dangerousFunctions":125,"sqlUsage":126,"outputEscaping":128,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":141},[],{"prepared":13,"raw":13,"locations":127},[],{"escaped":13,"rawEcho":129,"locations":130},4,[131,135,137,139],{"file":132,"line":133,"context":134},"bp-randommemberwidget.php",6,"raw output",{"file":132,"line":136,"context":134},7,{"file":132,"line":138,"context":134},9,{"file":132,"line":140,"context":134},33,[],[],{"summary":144,"deductions":145},"Based on the provided static analysis and vulnerability history, the \"bp-random-member-widget\" plugin v1.0 exhibits a generally good security posture regarding its attack surface and the use of prepared statements for SQL queries. There are no identified dangerous functions, file operations, or external HTTP requests, which are positive indicators. The absence of known CVEs and a history of vulnerabilities further suggests a relatively secure codebase up to this point.\n\nHowever, a significant concern arises from the complete lack of output escaping (0% properly escaped). This indicates that data displayed to users might not be adequately sanitized, potentially leading to Cross-Site Scripting (XSS) vulnerabilities. Additionally, the absence of nonce checks and capability checks on any potential entry points, while there are currently none reported, means that if new entry points are introduced in future versions or through configuration, they may lack essential authentication and authorization mechanisms. The lack of any identified taint flows is positive but could be a consequence of the limited complexity or entry points within the plugin rather than a definitive indicator of robust sanitization practices across all potential data flows.\n\nIn conclusion, while the plugin demonstrates strengths in minimizing its attack surface and using secure SQL practices, the critical deficiency in output escaping presents a clear and present danger of XSS vulnerabilities. The absence of checks on entry points, though currently not an issue due to zero entry points, is a structural weakness that could become problematic. Developers should prioritize addressing the output escaping issue to improve the plugin's overall security.",[146,149,152],{"reason":147,"points":148},"No output escaping found",8,{"reason":150,"points":151},"No nonce checks on entry points",5,{"reason":153,"points":151},"No capability checks on entry points","2026-04-16T12:06:52.216Z",{"wat":156,"direct":165},{"assetPaths":157,"generatorPatterns":160,"scriptPaths":161,"versionParams":162},[158,159],"\u002Fwp-content\u002Fplugins\u002Fbp-random-member-widget\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fbp-random-member-widget\u002Fjs\u002Frandom-member-widget.js",[],[159],[163,164],"bp-random-member-widget\u002Fcss\u002Fstyle.css?ver=","bp-random-member-widget\u002Fjs\u002Frandom-member-widget.js?ver=",{"cssClasses":166,"htmlComments":167,"htmlAttributes":168,"restEndpoints":169,"jsGlobals":170,"shortcodeOutput":171},[4],[],[],[],[],[],{"error":173,"url":174,"statusCode":175,"statusMessage":176,"message":176},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fbp-random-member-widget\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":13,"versions":178},[]]