[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQCE9K5ywmi9XwYVKVRu5kMEKcdkjSb30SlGltCZKIi0":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":16,"homepage":15,"download_link":19,"security_score":20,"vuln_count":13,"unpatched_count":13,"last_vuln_date":21,"fetched_at":22,"vulnerabilities":23,"developer":24,"crawl_stats":21,"alternatives":29,"analysis":140,"fingerprints":190},"bp-rsed","BP Restrict Signup by Email Domain","1.0.0","r-a-y","https:\u002F\u002Fprofiles.wordpress.org\u002Fr-a-y\u002F","\u003Cp>User registration spam is prevalent in BuddyPress.\u003C\u002Fp>\n\u003Cp>One way to dramatically decrease signup spam is to restrict the email address domains that users can sign up with.\u003C\u002Fp>\n\u003Cp>WordPress multisite has a native option called “Limited Email Registrations”.  But this option requires you to enter the full email domain.  For example, if you only wanted to allow .edu email addresses to register, this is not possible.\u003C\u002Fp>\n\u003Cp>This plugin restricts registrations to the email domains that you specify and works in WordPress single-site and multi-site.\u003C\u002Fp>\n\u003Cp>Plugin was developed for the \u003Ca href=\"http:\u002F\u002Fcommons.gc.cuny.edu\" rel=\"nofollow ugc\">CUNY Academic Commons\u003C\u002Fa>.  Licensed under the GPLv2 or later.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcuny-academic-commons\u002Fbp-rsed\" rel=\"nofollow ugc\">Follow development on GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Tested on BuddyPress 2.5, but should work all the way down to BuddyPress 1.6.\u003C\u002Fp>\n","Only allow users with email addresses from certain domains to register in BuddyPress.",30,3349,0,"2016-03-08T16:34:00.000Z","",[17,18],"buddypress","registration","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-rsed.1.0.0.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":25,"total_installs":26,"avg_security_score":20,"avg_patch_time_days":11,"trust_score":27,"computed_at":28},8,380,84,"2026-04-04T11:44:49.306Z",[30,51,75,98,120],{"slug":31,"name":32,"version":33,"author":34,"author_profile":35,"description":36,"short_description":37,"active_installs":38,"downloaded":39,"rating":40,"num_ratings":41,"last_updated":42,"tested_up_to":43,"requires_at_least":44,"requires_php":45,"tags":46,"homepage":15,"download_link":50,"security_score":20,"vuln_count":13,"unpatched_count":13,"last_vuln_date":21,"fetched_at":22},"bp-registration-options","Registration Options for BuddyPress","4.4.5","Brian Messenlehner","https:\u002F\u002Fprofiles.wordpress.org\u002Fmessenlehner\u002F","\u003Cp>Prevent users and bots from accessing the BuddyPress or bbPress areas of your website(s) until they are approved.\u003C\u002Fp>\n\u003Cp>This BuddyPress extension allows you to enable user moderation for new members, as well as help create a private network for your users. If moderation is enabled, any new members will be denied access to your BuddyPress and bbPress areas on your site, with the exception of their own user profile. They will be allowed to edit and configure that much. They will also not be listed in the members lists on the frontend until approved. Custom messages are available so you can tailor them to the tone of your website and community. When an admin approves or denies a user, email notifications will be sent to let them know of the decision.\u003C\u002Fp>\n\u003Cp>Requires BuddyPress version 1.7 or higher and bbPress 2.0 or higher.\u003C\u002Fp>\n\u003Ch3>General Data Protection Regulation\u003C\u002Fh3>\n\u003Cp>BuddyPress Registration Options temporarily stores user IP addresses as user meta to help validate and vet pending users. Saved IP values are deleted upon both approval and denial of pending user. No other personal data is recorded.\u003C\u002Fp>\n","Moderate new BuddyPress members and fight BuddyPress spam.",1000,175480,88,33,"2023-03-05T15:26:00.000Z","6.0.11","5.2","5.6",[47,17,48,49,18],"admin","groups","moderation","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-registration-options.zip",{"slug":52,"name":53,"version":54,"author":55,"author_profile":56,"description":57,"short_description":58,"active_installs":38,"downloaded":59,"rating":60,"num_ratings":61,"last_updated":62,"tested_up_to":63,"requires_at_least":64,"requires_php":15,"tags":65,"homepage":70,"download_link":71,"security_score":72,"vuln_count":73,"unpatched_count":13,"last_vuln_date":74,"fetched_at":22},"dynamic-user-directory","Dynamic User Directory","2.4","Sarah Giles","https:\u002F\u002Fprofiles.wordpress.org\u002Fsarah_dev\u002F","\u003Cp>This lightweight yet powerful and feature-rich plugin creates a user directory displaying the pre-existing user meta information you specify. It can show avatars, social icons, mailing address, email address, website, phone, or any other user meta information you wish. It is also fully compatible with BuddyPress, S2Member, and Cimy User Extra Fields plugins.\u003C\u002Fp>\n\u003Ch4>Current Features\u003C\u002Fh4>\n\u003Cp>The best thing about Dynamic User Directory is the high degree of control you have over the content, formatting, and style. This allows you to create a highly customized directory and integrate it seamlessly into your WordPress theme. The intuitive backend settings interface is designed to help you get your directory up and running quickly. Features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Compatible with BuddyPress Extended Profile, S2Member Custom Fields, Cimy User Extra Fields, and many other membership plugins\u003C\u002Fli>\n\u003Cli>Multisite compatible for sites that centrally manage the plugin’s data\u003C\u002Fli>\n\u003Cli>Sort by user last name or user display name \u003C\u002Fli>\n\u003Cli>Specify which user meta fields to display (up to 10)\u003C\u002Fli>\n\u003Cli>Hide users with specified user roles\u003C\u002Fli>\n\u003Cli>Include or exclude specific users\u003C\u002Fli>\n\u003Cli>Optionally hyperlink the user name and avatar to their WP author page or BuddyPress profile page\u003C\u002Fli>\n\u003Cli>Enjoy a fully responsive display for smaller screen sizes\u003C\u002Fli>\n\u003Cli>Optionally show a search box to quickly locate a user\u003C\u002Fli>\n\u003Cli>Optionally show pagination to reduce page load times\u003C\u002Fli>\n\u003Cli>Search by any user meta field with the Meta Fields Search add-on\u003C\u002Fli>\n\u003Cli>Create multiple directory instances with the Multiple Directories add-on\u003C\u002Fli>\n\u003Cli>Hide the directory until a search is run with the Hide Directory Before Search add-on\u003C\u002Fli>\n\u003Cli>Show directory listings in a table format with the Horizontal Layout add-on \u003C\u002Fli>\n\u003Cli>Sort by any custom meta field (instead of just last name) with the Custom Sort Field add-on\u003C\u002Fli>\n\u003Cli>Exclude users based on a custom meta field such as an “Opt out of Directory” option with the Exclude User Filter add-on\u003C\u002Fli>\n\u003Cli>Export full directory or just search results to CSV file with the Export add-on\u003C\u002Fli>\n\u003Cli>Show\u002Fhide WordPress avatars\u003C\u002Fli>\n\u003Cli>Show custom avatars where the img URL is stored in a meta field with the Custom Avatar add-on\u003C\u002Fli>\n\u003Cli>Set avatar style (circle, rounded edges, or standard) and size\u003C\u002Fli>\n\u003Cli>Show\u002Fhide listing border\u003C\u002Fli>\n\u003Cli>Set listing border style, color, length, and thickness\u003C\u002Fli>\n\u003Cli>Control font size of all text displayed\u003C\u002Fli>\n\u003Cli>Set the display order of each field\u003C\u002Fli>\n\u003Cli>Control space between alphabet letter links\u003C\u002Fli>\n\u003Cli>Control space between each directory listing\u003C\u002Fli>\n\u003Cli>Choose between showing all users or filtering by selected alphabet letter\u003C\u002Fli>\n\u003Cli>Hyperlink almost any user meta field\u003C\u002Fli>\n\u003Cli>Choose from a variety of field display formats, including phone number, comma delimited lists, & dates\u003C\u002Fli>\n\u003Cli>Display social media link icons (choose from two different icon styles)\u003C\u002Fli>\n\u003Cli>Display address fields as a formatted mailing address\u003C\u002Fli>\n\u003Cli>Display directory totals\u003C\u002Fli>\n\u003Cli>Check out upcoming features \u003Ca href=\"https:\u002F\u002Fsgcustomwebsolutions.com\u002Fplanned-features\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Add-Ons\u003C\u002Fh4>\n\u003Cp>There are is a growing library of powerful Dynamic User Directory add-ons available \u003Ca href=\"https:\u002F\u002Fsgcustomwebsolutions.com\u002Fwordpress-plugin-development\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa> to enhance and extend your directory.\u003C\u002Fp>\n\u003Ch4>Your Feedback is Valuable!\u003C\u002Fh4>\n\u003Cp>If this plugin benefits your website, please take a moment to say thanks by leaving a positive rating and\u002For review. Did you find a bug? Let me know and I’ll fix it ASAP. Have suggestions for improvement? Don’t hesitate to email me with your thoughts. Thanks so much!\u003C\u002Fp>\n\u003Ch3>Troubleshooting\u003C\u002Fh3>\n\u003Cp>The DUD troubleshooting guide can be found \u003Ca href=\"https:\u002F\u002Fsgcustomwebsolutions.com\u002Fdud-troubleshooting\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003C\u002Fp>\n","Powerful and feature-rich user directory based on user profile meta fields.",83365,96,38,"2025-11-11T14:53:00.000Z","6.8.5","3.0.1",[17,66,67,68,69],"member-directory","memberpress","user-directory","user-registration","http:\u002F\u002Fsgcustomwebsolutions.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdynamic-user-directory.2.4.zip",99,1,"2025-10-21 00:00:00",{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":38,"downloaded":83,"rating":84,"num_ratings":85,"last_updated":86,"tested_up_to":63,"requires_at_least":64,"requires_php":87,"tags":88,"homepage":94,"download_link":95,"security_score":96,"vuln_count":73,"unpatched_count":13,"last_vuln_date":97,"fetched_at":22},"json-api-user","JSON API User","4.1.0","Ali Qureshi","https:\u002F\u002Fprofiles.wordpress.org\u002Fparorrey\u002F","\u003Cp>JSON API User extends the JSON API Plugin with a new Controller to allow RESTful user registration, authentication, password reset, RESTful Facebook Login, RESTful User Meta and BuddyPress xProfile get and update methods. This plugin is for WordPress\u002FMobile app developers who want to use WordPress as mobile app data backend.\u003C\u002Fp>\n\u003Cp>JSON API Plugin, that is required, was closed on August 7, 2019 from WordPress repository. You can download \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FPI-Media\u002Fjson-api\" rel=\"nofollow ugc\">JSON API Plugin\u003C\u002Fa> from https:\u002F\u002Fgithub.com\u002FPI-Media\u002Fjson-api until it is republished and available on WordPress.\u003C\u002Fp>\n\u003Cp>Features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Generate Auth Cookie for user authentication\u003C\u002Fli>\n\u003Cli>Validate Auth Cookie\u003C\u002Fli>\n\u003Cli>RESTful User Registration\u003C\u002Fli>\n\u003Cli>RESTful Facebook Login\u002FRegistration with valid access_token\u003C\u002Fli>\n\u003Cli>RESTful BuddyPress xProfile fields update\u003C\u002Fli>\n\u003Cli>Get User Meta and xProfile fields\u003C\u002Fli>\n\u003Cli>Update User Meta and xProfile fields\u003C\u002Fli>\n\u003Cli>Delete User Meta\u003C\u002Fli>\n\u003Cli>Password Reset\u003C\u002Fli>\n\u003Cli>Get Avatar\u003C\u002Fli>\n\u003Cli>Get User Info\u003C\u002Fli>\n\u003Cli>Post Comment\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The plugin was created for mobile apps integration with the web app using WordPress as backend for all the data. WordPress helped in putting together the web app quickly and then Mobile iOS and Android apps were integrated via this plugin. There were some app specific customized methods which are not included but rest have been made generic for community usage.\u003C\u002Fp>\n\u003Cp>My other JSON API Auth plugin has also been integrated with this plugin from version 1.1 because most endpoints required user authentication via cookie for data update.\u003C\u002Fp>\n\u003Cp>Pro Version – JSON API User Plus\u003C\u002Fp>\n\u003Cp>A pro version of this plugin, \u003Ca href=\"http:\u002F\u002Fwww.parorrey.com\u002Fsolutions\u002Fjson-api-user-plus\u002F\" rel=\"nofollow ugc\">JSON API User Plus\u003C\u002Fa>, is available here http:\u002F\u002Fwww.parorrey.com\u002Fsolutions\u002Fjson-api-user-plus\u002F that supports BuddyPress Messages component, BuddyPress avatar upload, BuddyPress Extended Profile, BuddyPress Groups, BuddyPress Friends, BuddyPress Activity, BuddyPress Notifications, BuddyPres Settings and other BuddyPress related functions to integrate BuddyPress features in your mobile app via REST api.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.parorrey.com\u002Fsolutions\u002Fjson-api-user-plus\u002F\" rel=\"nofollow ugc\">JSON API User Plus\u003C\u002Fa> includes API key which protects and restricts the endpoint calls. This key can be updated from Settings > User Plus options page. Your app must include this key with every call to get the data from REST API. Please see documentation for calling endpoints examples for ‘JSON API User Plus’.\u003C\u002Fp>\n\u003Cp>JSON API User Plus features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Generate Auth Cookie for user authentication\u003C\u002Fli>\n\u003Cli>Validate Auth Cookie\u003C\u002Fli>\n\u003Cli>RESTful User Registration\u003C\u002Fli>\n\u003Cli>RESTful Facebook Login\u002FRegistration with valid access_token\u003C\u002Fli>\n\u003Cli>RESTful BuddyPress xProfile fields update\u003C\u002Fli>\n\u003Cli>Get User Meta and xProfile fields\u003C\u002Fli>\n\u003Cli>Update User Meta and xProfile fields\u003C\u002Fli>\n\u003Cli>Delete User Meta\u003C\u002Fli>\n\u003Cli>Password Reset\u003C\u002Fli>\n\u003Cli>Get\u002FUpload Avatar\u003C\u002Fli>\n\u003Cli>Get User Info\u003C\u002Fli>\n\u003Cli>Post Comment\u003C\u002Fli>\n\u003Cli>Add Post, Update Post, Delete Post\u003C\u002Fli>\n\u003Cli>Add\u002FEdit\u002FDelete Custom Post Type, Custom Fields\u003C\u002Fli>\n\u003Cli>Search User\u003C\u002Fli>\n\u003Cli>BuddyPress Activities\u003C\u002Fli>\n\u003Cli>BuddyPress Members\u003C\u002Fli>\n\u003Cli>BuddyPress Friends\u003C\u002Fli>\n\u003Cli>BuddyPress Notifications\u003C\u002Fli>\n\u003Cli>BuddyPress Settings\u003C\u002Fli>\n\u003Cli>& many more\u003C\u002Fli>\n\u003C\u002Ful>\n","Extends the JSON API Plugin to allow RESTful user registration, authentication & many other User Meta, BP functions. A Pro version is also available.",120913,78,21,"2025-07-29T11:54:00.000Z","5.3",[89,90,91,92,93],"authentication","json-api","restful-facebook-login","restful-user-meta-and-buddypress-xprofile","restful-user-registration","http:\u002F\u002Fwww.parorrey.com\u002Fsolutions\u002Fjson-api-user\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjson-api-user.4.1.0.zip",97,"2024-07-10 00:00:00",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":84,"num_ratings":85,"last_updated":108,"tested_up_to":109,"requires_at_least":110,"requires_php":15,"tags":111,"homepage":116,"download_link":117,"security_score":118,"vuln_count":73,"unpatched_count":13,"last_vuln_date":119,"fetched_at":22},"buddyforms-members","BuddyPress & BuddyBoss Member Profile Forms","1.5.7","Themekraft","https:\u002F\u002Fprofiles.wordpress.org\u002Fthemekraft\u002F","\u003Cp>Integrate Forms into the BuddyPress Members Profile. Empower your users to write, edit, upload posts, images, videos, and various other content within your community, all from their BuddyPress Member Profile!\u003C\u002Fp>\n\u003Ch3>With this extension, you can:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Enable easy integration of Forms into the BuddyPress Member Profile.\u003C\u002Fli>\n\u003Cli>Create Group Forms to group multiple forms under the same Profile Tab. Forms with the same attached page will be listed as sub-navigation tabs in the main menu of the profile tab.\u003C\u002Fli>\n\u003Cli>Manage the visibility of user submissions in their profile based on privacy settings:\n\u003Cul>\n\u003Cli>Private – Only visible to the logged-in member in their profile.\u003C\u002Fli>\n\u003Cli>Community – Logged-in users can view other users’ profile posts.\u003C\u002Fli>\n\u003Cli>Public Visible – Unregistered users can see user profile posts.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Define, create, edit, and delete rights for each user role and form.\u003C\u002Fli>\n\u003Cli>Create Member Type Forms and even override the default BuddyPress and BuddyBoss Profile Forms with Member Type-specific Forms.\u003C\u002Fli>\n\u003Cli>Utilize ACF (Advanced Custom Fields) and Pods Fields in the BuddyPress Registration and Profile Forms, allowing for seamless synchronization of data.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FK3JK9ISu0-w?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch3>Usage Examples:\u003C\u002Fh3>\n\u003Ch4>Integrate BuddyForms with BuddyPress Profile:\u003C\u002Fh4>\n\u003Cp>Create a new form that allows users to create and manage custom posts and content within their BuddyPress Member Profile. Enable community members to easily publish articles, images, and videos, enhancing engagement and interaction.\u003C\u002Fp>\n\u003Ch4>Create Member Type Forms:\u003C\u002Fh4>\n\u003Cp>Customize the registration and profile experience for different Member Types with unique forms tailored to their needs. Overwrite the default BuddyPress and BuddyBoss Profile Forms with personalized options.\u003C\u002Fp>\n\u003Ch4>ACF & Pods Integration:\u003C\u002Fh4>\n\u003Cp>Elevate the BuddyPress registration and profile forms using Advanced Custom Fields (ACF) and Pods fields. Sync ACF and Pods with BuddyPress xProfile Fields to enrich user profiles and capture valuable data.\u003C\u002Fp>\n\u003Ch4>Front-End Content Management:\u003C\u002Fh4>\n\u003Cp>Empower your BuddyPress and BuddyBoss community with front-end content management capabilities. Allow users to post, edit, and manage their content directly from their profiles, making content creation a seamless process.\u003C\u002Fp>\n\u003Ch3>Tutoriala\u003C\u002Fh3>\n\u003Ch4>How to Post and Manage Content from a BuddyPress\u002FBuddyBoss Member Profile or Group\u003C\u002Fh4>\n\u003Cp>Publishing Content in BuddyPress or BuddyBoss Made Easy. Enable your users to create content and bring your community to life. Easy Front-End Blogging with BuddyPress and BuddyForms!\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fthemekraft.com\u002Fwordpress-solutions\u002Fpost-manage-content-buddypress\u002F\" rel=\"nofollow ugc\">How To Member Profile CMS with BuddyPress or BuddyBoss\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>How to Enable Your BuddyPress\u002FBuddyBoss Members to Post from Their Profile Using BuddyForms Members!\u003C\u002Fh4>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F3n-NDIcUZAE?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cblockquote>\n\u003Ch4>Docs & Support\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Find our Getting Started, How-to and Developer Docs on \u003Ca href=\"http:\u002F\u002Fdocs.buddyforms.com\u002F\" rel=\"nofollow ugc\">docs.buddyforms.com\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fblockquote>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Powered with ❤ by \u003Ca href=\"https:\u002F\u002Fthemekraft.com\" rel=\"nofollow ugc\">ThemeKraft\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>Documentation & Support\u003C\u002Fh3>\n\u003Cblockquote>\n\u003Ch4>Extensive Documentation and Support\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>The Documentation with many how-to’s will help you on your way.\u003C\u002Fli>\n\u003Cli>Find our Getting Started, How-to, and Developer Docs on \u003Ca href=\"http:\u002F\u002Fdocs.buddyforms.com\u002F\" rel=\"nofollow ugc\">docs.buddyforms.com\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>If you still get stuck somewhere, our support will get you back on the right track. You can find all help buttons in your BuddyForms Settings Panel in your WP Dashboard and the Help Center!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fblockquote>\n","Create custom Member Profile Tabs and Registration Forms in BuddyPress and BuddyBoss. Allow your Members to create, edit, and delete any kind of data  …",400,58302,"2024-09-04T15:17:00.000Z","6.6.5","3.9",[112,17,113,114,115],"buddyboss","buddypress-profile","buddypress-registration","member-forms","http:\u002F\u002Fbuddyforms.com\u002Fdownloads\u002Fbuddyforms-members\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddyforms-members.1.5.7.zip",92,"2022-05-31 00:00:00",{"slug":121,"name":122,"version":123,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":128,"downloaded":129,"rating":130,"num_ratings":131,"last_updated":132,"tested_up_to":133,"requires_at_least":15,"requires_php":15,"tags":134,"homepage":138,"download_link":139,"security_score":20,"vuln_count":13,"unpatched_count":13,"last_vuln_date":21,"fetched_at":22},"bp-security-check","BuddyPress Security Check","3.2.2","Shea Bunge","https:\u002F\u002Fprofiles.wordpress.org\u002Fbungeshea\u002F","\u003Cblockquote>\n\u003Cp>\u003Cstrong>Important\u003C\u002Fstrong>: Since version 2.0, this plugin now requires at least PHP 5.3. Please ensure you are running the latest available version of PHP on your server.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>This plugin adds \u003Ca href=\"https:\u002F\u002Fwww.google.com\u002Frecaptcha\u002F\" rel=\"nofollow ugc\">Google’s reCAPTCHA\u003C\u002Fa> to the BuddyPress registration page and WordPress login page to prevent bots from registering and keep your site free from spam registrations.\u003C\u002Fp>\n\u003Cp>reCAPTCHA is “tough on bots, easy on humans”: while it is increbianle effective on preventing bots from registering, most of the time all the user needs to do to verify themselves is simply check a box.\u003C\u002Fp>\n\u003Cp>After installing this plugin, you will need to \u003Ca href=\"https:\u002F\u002Fwww.google.com\u002Frecaptcha\u002Fadmin\" rel=\"nofollow ugc\">register your site with Google\u003C\u002Fa> (requires a Google account) and enter the site key and secret key on the \u003Cstrong>Settings > BuddyPress > Options\u003C\u002Fstrong> admin menu. If you would prefer not to use Google’s service, there is an alternative security check method also available; see below;\u003C\u002Fp>\n\u003Cp>Prior to version 2.0, a less effective security check method was used where the user needed to answer simple math sum before registering. This method is still available, and can be turned on on the \u003Cstrong>Settings > BuddyPress > Options\u003C\u002Fstrong> menu.\u003C\u002Fp>\n\u003Cp>You can learn more at the \u003Ca href=\"https:\u002F\u002Fbungeshea.com\u002Fplugins\u002Fbp-security-check\u002F\" rel=\"nofollow ugc\">plugin’s website\u003C\u002Fa>, or on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsheabunge\u002Fbp-security-check\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Translations\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Thanks to the awesome work of the following translators, this plugin can be used in these languages:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Indonesian\u003C\u002Fstrong> thanks to \u003Ca href=\"https:\u002F\u002Fwww.chameleonjohn.com\u002F\" rel=\"nofollow ugc\">Jordan Silaen from ChameleonJohn.com\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Russian\u003C\u002Fstrong> thanks to \u003Ca href=\"http:\u002F\u002Fsuperbwebsitebuilders.com\u002F\" rel=\"nofollow ugc\">Howard Steele from SuperbWebsiteBuilders.com\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Swedish\u003C\u002Fstrong> thanks to \u003Ca href=\"http:\u002F\u002Ftdh.me\" rel=\"nofollow ugc\">Thord D. Hedengren\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>French\u003C\u002Fstrong> thanks to Frédérick Baldo\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Serbo-Croatian\u003C\u002Fstrong> thanks to \u003Ca href=\"https:\u002F\u002Fwebhostinggeeks.com\" rel=\"nofollow ugc\">Andrijana Nikolic from WebHostingGeeks\u003C\u002Fa> and \u003Ca href=\"http:\u002F\u002Ffirstsiteguide.com\u002F\" rel=\"nofollow ugc\">Ogi Djuraskovic from FirstSiteGuide.com\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Spanish\u003C\u002Fstrong> thanks to Renato Alves\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hungarian\u003C\u002Fstrong> thanks to Laszlo Espadas\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Brazilian Portuguese\u003C\u002Fstrong> thanks to Renato Alves\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Danish\u003C\u002Fstrong> thanks to Andreas Bjørn Hassing Nielsen\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Italian\u003C\u002Fstrong> thanks to \u003Ca href=\"http:\u002F\u002Fnicolecurioni.com\u002F\" rel=\"nofollow ugc\">Nicole Curioni\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Belarusian\u003C\u002Fstrong> thanks to \u003Ca href=\"https:\u002F\u002Fwww.ustarcash.com\" rel=\"nofollow ugc\">Natasha from uStarCash\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you have a translation to contribute, please sent it through to me \u003Ca href=\"https:\u002F\u002Fbungeshea.com\u002Fcontact\u002F\" rel=\"nofollow ugc\">by email\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsheabunge\u002Fbp-security-check\u002Fpulls\" rel=\"nofollow ugc\">on GitHub\u003C\u002Fa>.\u003C\u002Fp>\n","Combat spam registrations for a BuddyPress-powered site using Google's reCAPTCHA",300,51104,82,14,"2018-01-25T16:53:00.000Z","4.9.29",[135,17,136,18,137],"anti-spam","math","security","https:\u002F\u002Fbungeshea.com\u002Fplugins\u002Fbp-security-check\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-security-check.zip",{"attackSurface":141,"codeSignals":171,"taintFlows":182,"riskAssessment":183,"analyzedAt":189},{"hooks":142,"ajaxHandlers":167,"restRoutes":168,"shortcodes":169,"cronEvents":170,"entryPointCount":13,"unprotectedCount":13},[143,149,154,159,163],{"type":144,"name":145,"callback":146,"priority":72,"file":147,"line":148},"action","bp_admin_init","screen","bp-rsed-admin.php",34,{"type":144,"name":150,"callback":151,"priority":152,"file":147,"line":153},"bp_register_admin_settings","add_fields",50,35,{"type":144,"name":155,"callback":156,"file":157,"line":158},"bp_include","init","bp-rsed.php",19,{"type":144,"name":160,"callback":161,"file":157,"line":162},"bp_signup_validate","validate",47,{"type":144,"name":164,"callback":165,"file":157,"line":166},"bp_before_account_details_fields","registration_msg",48,[],[],[],[],{"dangerousFunctions":172,"sqlUsage":173,"outputEscaping":175,"fileOperations":13,"externalRequests":13,"nonceChecks":73,"capabilityChecks":13,"bundledLibraries":181},[],{"prepared":13,"raw":13,"locations":174},[],{"escaped":176,"rawEcho":73,"locations":177},7,[178],{"file":157,"line":179,"context":180},126,"raw output",[],[],{"summary":184,"deductions":185},"The 'bp-rsed' plugin v1.0.0 exhibits a strong security posture based on the provided static analysis.  The absence of AJAX handlers, REST API routes, shortcodes, and cron events indicates a very limited attack surface.  Furthermore, the fact that all SQL queries utilize prepared statements and the presence of a nonce check are positive security indicators.  The low number of output operations, with a high percentage properly escaped, further contributes to its secure design.  The plugin also has no recorded vulnerabilities, further reinforcing its apparent safety.  However, the complete lack of capability checks is a notable weakness, as it means that even authenticated users would not have their permissions validated for any potential (albeit currently absent) functionality.  The absence of any taint analysis flows doesn't necessarily imply complete safety, but rather that the static analysis tools did not identify any such paths in this version.\n\nWhile the current lack of an attack surface and a clean vulnerability history are commendable, the absence of capability checks is a significant oversight. If the plugin were to introduce any new functionality in the future, without proper capability checks, it could expose sensitive actions to unauthorized users.  The taint analysis reporting zero flows is positive, but it is important to remember that static analysis is not foolproof and dynamic testing or manual code review would provide a more comprehensive security assessment. Overall, the plugin appears secure due to its minimal attack surface and good coding practices regarding SQL and output sanitization, but the lack of capability checks is a point of concern for future extensibility and robustness.",[186],{"reason":187,"points":188},"Missing capability checks",10,"2026-03-16T22:23:19.016Z",{"wat":191,"direct":196},{"assetPaths":192,"generatorPatterns":193,"scriptPaths":194,"versionParams":195},[],[],[],[],{"cssClasses":197,"htmlComments":198,"htmlAttributes":199,"restEndpoints":200,"jsGlobals":201,"shortcodeOutput":202},[],[],[],[],[],[]]