[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foCSqDSyBeoZq3uFtmPMGZF6rmSbRiV7dKxXNRRUvBjw":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":15,"requires_php":15,"tags":17,"homepage":23,"download_link":24,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":36,"analysis":137,"fingerprints":438},"bp-user-widgets","BP User Widgets","1.0.8","Venutius","https:\u002F\u002Fprofiles.wordpress.org\u002Fvenutius\u002F","\u003Cp>The ability to personalize a users own profile is an important part of a social network. This plugin is designed to deliver a key profile page personalization feature.\u003C\u002Fp>\n\u003Cp>It installs a widget that is only visible in the members profile pages that allows users to select up to four Text Widgets, four Video Widgets, My Posts, My Groups, My Friends, Who I’m following and Who I’m followed By. The widget order can be easily rearranged using a simple drag and drop interface.\u003C\u002Fp>\n\u003Cp>The default install configuration is to have all of the widgets empty and hidden, however the site admin can save a widget configuration to be used as the default\u002Fpreset setup for all users who have not configured their own widgets.\u003C\u002Fp>\n\u003Cp>This plugin can be used for both BP Legacy and BP Nouveau themes, it is optimized for sidebars. Only one instance of the widget is supported.\u003C\u002Fp>\n\u003Cp>Text Widgets – Provide a full featured TinyMCE text editor, if the use has video upload capability then the Media interface is also enabled.\u003C\u002Fp>\n\u003Cp>Video Widget – Allow links from YouTube and other video hosting sites to be added.\u003C\u002Fp>\n\u003Cp>WordPress Posts Widget – display the users latest post links and thumbnail.\u003C\u002Fp>\n\u003Cp>The following features need BuddyPress to be active.\u003C\u002Fp>\n\u003Cp>BuddyPress Groups – Adds a list of groups the user is a member of.\u003C\u002Fp>\n\u003Cp>BuddyPress Friends – Adds a friends list.\u003C\u002Fp>\n\u003Cp>The following features need BP Follow to be active.\u003C\u002Fp>\n\u003Cp>Who I’m following  – Lists recently active members the user is following.\u003C\u002Fp>\n\u003Cp>Who’s Following Me – Lists recently active followers.\u003C\u002Fp>\n\u003Cp>Another plugin that helps with profile personalization is BuddyDev’s\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fbuddydev.com\u002Fplugins\u002Fbp-custom-background-for-user-profile\u002F\" rel=\"nofollow ugc\">BP Custom Background for User Profile\u003C\u002Fa>\u003C\u002Fp>\n","Add user editable widgets to profile pages with a widgets for text, video, buddypress friends and groups, as well as followed and followiing.",30,3989,100,1,"","6.4.8",[18,19,20,21,22],"bp","buddypress","profile","users","widget","https:\u002F\u002Fbuddyuser.com\u002Fplugin-bp-user-widgets","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-user-widgets.1.0.8.zip",0,null,"2026-03-15T10:48:56.248Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":11,"trust_score":34,"computed_at":35},"venutius",20,640,93,89,"2026-04-03T19:21:20.791Z",[37,52,76,98,118],{"slug":38,"name":39,"version":40,"author":7,"author_profile":8,"description":41,"short_description":42,"active_installs":11,"downloaded":43,"rating":13,"num_ratings":14,"last_updated":44,"tested_up_to":45,"requires_at_least":15,"requires_php":15,"tags":46,"homepage":48,"download_link":49,"security_score":50,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":51},"bp-profile-home-widgets","BP Profile Home Widgets","1.2.0","\u003Cp>The ability to personalize a users own profile is an important part of a social network. This plugin is designed to deliver a key profile home page personalization feature. It’s designed to work specifically with the BP Nouveau members profile home page widget area and also the BP Legacy Profile page by adding a widget area to that page for use by the plugin. Simply install the plugin and place the widget into the BP Nouveau members home widget area or the Profile Widget Areas created for Legacy Users (Profile Top and Profile Bottom).\u003C\u002Fp>\n\u003Cp>When you enable the BP Nouveau Members Profile Home page for most users what will appear is a blank page that is set as their default landing page. BP Profile Home Widgets provides the next logical extension of the home page by allowing the site admin to place a number of user configurable widgets in the home page widget area. These can be configured as presets so that every users home-page will display some basic information even if they have not configured their own widgets.\u003C\u002Fp>\n\u003Cp>The widget allows users to select up to two Text Widgets, two Video Widgets, My Posts, My Groups, My Friends, My Activity, My Mentions, Mention Me (profile comment form), Who I’m following and Who I’m followed By. The widget order can be easily rearranged using a simple drag and drop interface.\u003C\u002Fp>\n\u003Cp>This is a companion plugin to BP User Widgets; whilst BP User Widgets is optimized for sidebars, BP PRofile Home Widgets is designed to be shown in wider formats.\u003C\u002Fp>\n\u003Cp>Text Widgets – Provide a full featured TinyMCE text editor, if the use has video upload capability then the Media interface is also enabled. Shortcodes are supported.\u003C\u002Fp>\n\u003Cp>Video Widget – Allow links from YouTube and other video hosting sites to be added.\u003C\u002Fp>\n\u003Cp>WordPress Posts Widget – display the users latest post links and thumbnail.\u003C\u002Fp>\n\u003Cp>The following features need BuddyPress to be active.\u003C\u002Fp>\n\u003Cp>BuddyPress Groups – Adds a list of groups the user is a member of.\u003C\u002Fp>\n\u003Cp>BuddyPress Friends – Adds a friends list.\u003C\u002Fp>\n\u003Cp>BuddyPress Activity – Adds a recent activity feed.\u003C\u002Fp>\n\u003Cp>BuddyPress Mentions – Displays any updates that mention the user.\u003C\u002Fp>\n\u003Cp>BuddyPress Mention Me – Adds an input form pre-populated with the @user mention code to enable other users to comment to the user.\u003C\u002Fp>\n\u003Cp>The following features need BP Follow to be active.\u003C\u002Fp>\n\u003Cp>Who I’m following  – Lists recently active members the user is following.\u003C\u002Fp>\n\u003Cp>Who’s Following Me – Lists recently active followers.\u003C\u002Fp>\n\u003Cp>Presets – Site Admin can configure their own default settings to be displayed on any members profile that has not configured their own widgets, to make sure blank pages are not shown as the members default landing page in the case of the Nouveau home page.\u003C\u002Fp>\n\u003Cp>For the Legacy Template, once you have enabled these profile widgets you may like to make the profile page the default landing page rather than the standard Activity, to do this simply add the following line to bp-custom.php in plugins\u002Fbuddypress:\u003C\u002Fp>\n\u003Cp>\u002F**\u003Cbr \u002F>\n * Change BuddyPress default Members landing tab.\u003Cbr \u002F>\n *\u002F\u003Cbr \u002F>\ndefine(‘BP_DEFAULT_COMPONENT’, ‘profile’ );\u003C\u002Fp>\n\u003Cp>Other plugins that help with profile personalization are:\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbp-user-widgets\u002F\" rel=\"ugc\">BP User Widgets\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fbuddydev.com\u002Fplugins\u002Fbp-custom-background-for-user-profile\u002F\" rel=\"nofollow ugc\">BP Custom Background for User Profile\u003C\u002Fa>\u003C\u002Fp>\n","Add user editable widgets to the BP Nouveau profile home page with a widgets for text, video, posts, BuddyPress activity, mentions, friends and groups …",4858,"2024-07-22T16:33:00.000Z","6.6.5",[18,19,47,20,22],"nouveau","https:\u002F\u002Fbuddyuser.com\u002Fplugin-bp-profile-home-widgets","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-profile-home-widgets.1.2.0.zip",92,"2026-03-15T15:16:48.613Z",{"slug":53,"name":54,"version":55,"author":56,"author_profile":57,"description":58,"short_description":59,"active_installs":60,"downloaded":61,"rating":62,"num_ratings":63,"last_updated":64,"tested_up_to":65,"requires_at_least":66,"requires_php":15,"tags":67,"homepage":71,"download_link":72,"security_score":73,"vuln_count":74,"unpatched_count":25,"last_vuln_date":75,"fetched_at":51},"one-user-avatar","One User Avatar | User Profile Picture","2.5.4","One Designs","https:\u002F\u002Fprofiles.wordpress.org\u002Fonedesigns\u002F","\u003Cp>WordPress currently only allows you to use custom avatars that are uploaded through \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa>. \u003Cstrong>One User Avatar\u003C\u002Fstrong> enables you to use any photo uploaded into your Media Library as an avatar. This means you use the same uploader and library as your posts. No extra folders or image editing functions are necessary. This plugin is a fork of WP User Avatar v2.2.16.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>One User Avatar\u003C\u002Fstrong> also lets you:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Upload your own Default Avatar in your One User Avatar settings.\u003C\u002Fli>\n\u003Cli>Show the user’s \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa> avatar or Default Avatar if the user doesn’t have a One User Avatar image.\u003C\u002Fli>\n\u003Cli>Disable \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa> avatars and use only local avatars.\u003C\u002Fli>\n\u003Cli>Use the \u003Ccode>[avatar_upload]\u003C\u002Fcode> shortcode to add a standalone uploader to a front page or widget. This uploader is only visible to logged-in users.\u003C\u002Fli>\n\u003Cli>Use the \u003Ccode>[avatar]\u003C\u002Fcode> shortcode in your posts. These shortcodes will work with any theme, whether it has avatar support or not.\u003C\u002Fli>\n\u003Cli>Allow Contributors and Subscribers to upload their own avatars.\u003C\u002Fli>\n\u003Cli>Limit upload file size and image dimensions for Contributors and Subscribers.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Copyright\u003C\u002Fh3>\n\u003Cp>One User Avatar\u003Cbr \u002F>\nCopyright (c) 2023 One Designs https:\u002F\u002Fonedesigns.com\u002F\u003Cbr \u002F>\nLicense: GPLv2\u003Cbr \u002F>\nSource: https:\u002F\u002Fgithub.com\u002Fonedesigns\u002Fone-user-avatar\u003C\u002Fp>\n\u003Cp>One User Avatar is based on WP User Avatar v2.2.16\u003Cbr \u002F>\nCopyright (c) 2020-2021 ProfilePress https:\u002F\u002Fprofilepress.net\u002F\u003Cbr \u002F>\nCopyright (c) 2014-2020 Flippercode https:\u002F\u002Fwww.flippercode.com\u002F\u003Cbr \u002F>\nCopyright (c) 2013-2014 Bangbay Siboliban http:\u002F\u002Fbangbay.com\u002F\u003Cbr \u002F>\nLicense: GPLv2\u003Cbr \u002F>\nSource: https:\u002F\u002Fgithub.com\u002Fprofilepress\u002Fwp-user-avatar\u003C\u002Fp>\n\u003Cp>One User Avatar is distributed under the terms of the GNU GPL\u003C\u002Fp>\n\u003Cp>This program is free software: you can redistribute it and\u002For modify\u003Cbr \u002F>\nit under the terms of the GNU General Public License as published by\u003Cbr \u002F>\nthe Free Software Foundation, either version 2 of the License, or\u003Cbr \u002F>\n(at your option) any later version.\u003C\u002Fp>\n\u003Cp>This program is distributed in the hope that it will be useful,\u003Cbr \u002F>\nbut WITHOUT ANY WARRANTY; without even the implied warranty of\u003Cbr \u002F>\nMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\u003Cbr \u002F>\nGNU General Public License for more details.\u003C\u002Fp>\n\u003Ch3>Advanced Settings\u003C\u002Fh3>\n\u003Ch4>Add One User Avatar to your own profile edit page\u003C\u002Fh4>\n\u003Cp>You can use the [avatar_upload] shortcode to add a standalone uploader to any page. It’s best to use this uploader by itself and without other profile fields.\u003C\u002Fp>\n\u003Cp>If you’re building your own profile edit page with other fields, One User Avatar is automatically added to the \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FPlugin_API\u002FAction_Reference\u002Fshow_user_profile\" rel=\"nofollow ugc\">show_user_profile\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FPlugin_API\u002FAction_Reference\u002Fshow_user_profile\" rel=\"nofollow ugc\">edit_user_profile\u003C\u002Fa> hooks. If you’d rather have One User Avatar in its own section, you could add another hook:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>do_action( 'edit_user_avatar', $current_user );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Then, to add One User Avatar to that hook and remove it from the other hooks outside of the administration panel, you would add this code to the \u003Ccode>functions.php\u003C\u002Fcode> file of your theme:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>function my_avatar_filter() {\n    \u002F\u002F Remove from show_user_profile hook\n    remove_action( 'show_user_profile', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    remove_action( 'show_user_profile', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n\n    \u002F\u002F Remove from edit_user_profile hook\n    remove_action( 'edit_user_profile', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    remove_action( 'edit_user_profile', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n\n    \u002F\u002F Add to edit_user_avatar hook\n    add_action( 'edit_user_avatar', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    add_action( 'edit_user_avatar', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n}\n\n\u002F\u002F Loads only outside of administration panel\nif ( ! is_admin() ) {\n    add_action( 'init','my_avatar_filter' );\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>HTML Wrapper\u003C\u002Fh4>\n\u003Cp>You can change the HTML wrapper of the One User Avatar section by using the functions \u003Ccode>wpua_before_avatar\u003C\u002Fcode> and \u003Ccode>wpua_after_avatar\u003C\u002Fcode>. By default, the avatar code is structured like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cdiv class=\"wpua-edit-container\">\n    \u003Ch3>Avatar\u003C\u002Fh3>\n    \u003Cinput type=\"hidden\" name=\"wp-user-avatar\" id=\"wp-user-avatar\" value=\"{attachmentID}\" \u002F>\n    \u003Cp id=\"wpua-add-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-add\" name=\"wpua-add\">Edit Image\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-preview\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        Original Size\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-thumbnail\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        Thumbnail\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-remove-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-remove\" name=\"wpua-remove\">Default Avatar\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-undo-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-undo\" name=\"wpua-undo\">Undo\u003C\u002Fbutton>\n    \u003C\u002Fp>\n\u003C\u002Fdiv>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To strip out the div container and h3 heading, you would add the following filters to the \u003Ccode>functions.php\u003C\u002Fcode> file in your theme:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>remove_action( 'wpua_before_avatar', 'wpua_do_before_avatar' );\nremove_action( 'wpua_after_avatar', 'wpua_do_after_avatar' );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To add your own wrapper, you could create something like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>function my_before_avatar() {\n    echo '\u003Cdiv id=\"my-avatar\">';\n}\nadd_action( 'wpua_before_avatar', 'my_before_avatar' );\n\nfunction my_after_avatar() {\n    echo '\u003C\u002Fdiv>';\n}\nadd_action( 'wpua_after_avatar', 'my_after_avatar' );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>This would output:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cdiv id=\"my-avatar\">\n    \u003Cinput type=\"hidden\" name=\"wp-user-avatar\" id=\"wp-user-avatar\" value=\"{attachmentID}\" \u002F>\n    \u003Cp id=\"wpua-add-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-add\" name=\"wpua-add\">Edit Image\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-preview\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        \u003Cspan class=\"description\">Original Size\u003C\u002Fspan>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-thumbnail\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        \u003Cspan class=\"description\">Thumbnail\u003C\u002Fspan>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-remove-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-remove\" name=\"wpua-remove\">Default Avatar\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-undo-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-undo\" name=\"wpua-undo\">Undo\u003C\u002Fbutton>\n    \u003C\u002Fp>\n\u003C\u002Fdiv>\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Use any image from your WordPress Media Library as a custom user avatar or user profile picture. Add your own Default Avatar.",100000,490816,94,41,"2026-01-12T00:58:00.000Z","6.9.4","4.0",[68,69,70,20,21],"avatar","bbpress","gravatar","https:\u002F\u002Fonedesigns.com\u002Fplugins\u002Fone-user-avatar\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-user-avatar.2.5.4.zip",99,2,"2021-09-20 00:00:00",{"slug":77,"name":78,"version":79,"author":80,"author_profile":81,"description":82,"short_description":83,"active_installs":84,"downloaded":85,"rating":86,"num_ratings":87,"last_updated":88,"tested_up_to":89,"requires_at_least":90,"requires_php":15,"tags":91,"homepage":95,"download_link":96,"security_score":13,"vuln_count":14,"unpatched_count":25,"last_vuln_date":97,"fetched_at":51},"bbpress-login-register-links-on-forum-topic-pages","bbPress Login Register Links On Forum Topic Pages","3.3.7","Tomas","https:\u002F\u002Fprofiles.wordpress.org\u002Fzhuyi\u002F","\u003Cblockquote>\n\u003Ch4>Features of bbPress Login Register Links On Forum Topic Pages\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Add dedicated bbPress only sidebar, when users view your bbPress forums, bbPress pages, you can use dedicated bbPress sidebar to show bbPress only widgets, without writing any codes \u003C\u002Fli>\n\u003Cli>Add bbPress login link in bbpress forum index pages or bbpress single forum pages or bbpress forum pages or bbpress topic pages. \u003Ca href=\"https:\u002F\u002Fwww.bbp.design\u002Ffeatures\u002F\" rel=\"nofollow ugc\">Check Demos\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>If you logged in your bbPress Forum, the login link will be replaced as Log Out link  in bbpress forum index pages or bbpress single forum pages or bbpress forum pages or bbpress topic pages.\u003C\u002Fli>\n\u003Cli>Add bbPress register link in bbpress forum index pages or bbpress single forum pages or bbpress forum pages or bbpress topic pages.\u003C\u002Fli>\n\u003Cli>Add bbPress forget password link in bbpress forum index pages or bbpress single forum pages or bbpress forum pages or bbpress topic pages.\u003C\u002Fli>\n\u003Cli>In Plugin Setting Panel, you can edit \u002F custom your bbPress links style via css\u003C\u002Fli>\n\u003Cli>In Plugin Setting Panel, default css codes for login \u002F logout \u002F forget password \u002F register links has been designed already\u003C\u002Fli>\n\u003Cli>In plugin Setting Panel, you can disable Top Admin Bar for Non-Admin Logged-in Users. \u003Ca href=\"https:\u002F\u002Fwww.bbp.design\u002Fforums\u002F\" rel=\"nofollow ugc\">Demos and Check\u003C\u002Fa>, you can register as a member and check the result.\u003C\u002Fli>\n\u003Cli>In plugin Setting Panel, You can custom Login Links in admin area “bbPress Custom Login Links Settings” panel. If you want to use your own custom login links.\u003Cbr \u002F>\n  You can enter your custom login link, for example “login”: \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Col>\n\u003Cli>The “login” link above forums, will change from http:\u002F\u002Fyourdomain.com\u002Fwp-login.php to http:\u002F\u002Fyourdomain.com\u002Flogin\u003C\u002Fli>\n\u003Cli>The “register” link above forums, will change from http:\u002F\u002Fyourdomain.com\u002Fwp-login.php?action=register to http:\u002F\u002Fyourdomain.com\u002Flogin?action=register\u003C\u002Fli>\n\u003Cli>The “Lost Password” link above forums, will change from http:\u002F\u002Fyourdomain.com\u002Fwp-login.php?action=lostpassword to http:\u002F\u002Fyourdomain.com\u002Flogin?action=lostpassword\u003Cbr \u002F>\n  If you do not want to use custom login links again, you can just remove login link in “bbPress Custom Login Links Settings” panel\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>*  In Plugin Global Setting Panel, you can enable \u002F disable “Login redirected to the same topic page from where clicked the login link”\u003Cbr \u002F>\n  *  In Plugin Global Setting Panel, you can enable \u002F disable bbPress Only Sidebar\u003Cbr \u002F>\n  *  In Plugin Global Setting Panel, you can select an existed sidebar as bbpress sidebar\u003Cbr \u002F>\n  * Support translate plugin to other languages and launch localized versions, .po files can be found in languages folder\u003Cbr \u002F>\n  * more feature request is super welcome at \u003Ca href=\"https:\u002F\u002Fwww.bbp.design\u002Fcontact-us\u002F\" rel=\"nofollow ugc\">Feature Request\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Why I develop this bbPress plugin:\u003C\u002Fh4>\n\u003Cp>bbPress is a great forum product, I used it build many forums, but in recent days when I build a site which focus the forum, I found a problem:  there are no bbpress login link, bbpress register link, bbpress forget password links in bbpress forum index pages or bbpress single forum pages or bbpress forum pages or bbpress topic pages.\u003C\u002Fp>\n\u003Cp>I try to find a solution, the result is I understand in the current time, I had to put the forum login link at the widget or I had to tell users to how to find the log in link in forum topics or add register\u002Flogin links in the menu items…\u003C\u002Fp>\n\u003Cp>For webmasters, the widget is rare asset and the sidebar area have no so many place to put a big log in widget…, for users, many of users\u002Fclients is not good at forum scripts or web sites, and they have no time to find the log in link in your sites…, the result is many of users just leave away from your forums, as a webmaster, this is not good because you used so many days\u002Fnights to build the site and offer the services.\u003C\u002Fp>\n\u003Cp>I think the most easy way is put the log in\u002Fregister links in the forum pages or in the topic pages, for this reason, I developed a new bbpress plugin: bbPress Login Register Links On Forum Page And Topic.\u003C\u002Fp>\n\u003Cp>Many users requested a dedicated bbPress sidebar, because in the current time, bbPress be designed to using wordpress sidebar, no bbpress sidebar, but in bbPress forums, there are a few things only releated with forum users, for example, recent topics, bbPress logged users… and so on, these things is important for bbPress users, but it is not helpful for users on wordpress side, so it is better to add a dedicated bbPress only sidebar.\u003Cbr \u002F>\nThis plugin works like this way:\u003Cbr \u002F>\nWhen users view wordpress pages(not in bbPress forums), nothing changed.\u003Cbr \u002F>\nWhen users view bbPress forums \u002F bbPress pages, the plugin will detect all sidebars in your theme,\u003Cbr \u002F>\nand replace the first sidebar as a dedicated bbPess sidebar automatically, no any code needed.\u003Cbr \u002F>\nIn admin area, you will find a new “bbPress Sidebar”, you can just drag your widgets to this bbPress Sidebar, and these widgets will shown only in bbPress pages.\u003Cbr \u002F>\nIn our plugin “bbPress Login Global Settings” Panel, you can enable \u002F disable bbPress only sidebar, and select an existed sidebar as bbpress sidebar\u003C\u002Fp>\n\u003Ch4>How To Use:\u003C\u002Fh4>\n\u003Cp>It is very easy to install and use:\u003C\u002Fp>\n\u003Cp>1: Please just upload the plugin and active it\u003C\u002Fp>\n\u003Cp>2: It will works well automatically, I have added default css codes in the plugin, and you can custom your codes in back end.\u003C\u002Fp>\n\u003Cp>3: You will find at the top of forum pages, there are log in \u002F register and Lost \u002F Password links,  when a user is logged in, the login link will turn into logout link.\u003Cbr \u002F>\nAlso if you use some log in plugins like theme my login which changed login\u002Fregister links, the plugin will still works well, how it looks? Please check screenshots. 🙂\u003C\u002Fp>\n\u003Cp>4: If you need custom style of any link for a better UI in your theme, you can go to the plugin setting panel “bbPress Custom”, you can do it very easy.\u003Cbr \u002F>\nAlso in here, actually you can custom any style css codes for your bbPress or WordPress site.\u003C\u002Fp>\n\u003Cp>5: If you click “Global Settings”, you will find options to “Login redirected to the same topic page from where clicked the login link” and “Enable bbPress only sidebar to allow admin to add widgets for bbPress topics and replies”, and you can select an existed sidebar as bbpress sidebar\u003C\u002Fp>\n\u003Cp>Feature Request and Plugin Support Forum: https:\u002F\u002Fwww.bbp.design\u002Fproduct\u002Fbbpress-login-register-pro-single-site\u002F\u003C\u002Fp>\n\u003Ch4>Features of bbPress Login Register Pro:\u003C\u002Fh4>\n\u003Cp>Our pro version have more features, it designed for help your bbpress forums more friendly for users, more pretty, stop brute force attacks on your bbpress forums… and so on.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Ch4>Pro Version Features\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.bbp.design\u002Ffeatures\u002F\" rel=\"nofollow ugc\">Check Pro Version Detailed Feature List and Demos\u003C\u002Fa>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>All features included in free version\u003C\u002Fli>\n\u003Cli>Login and Logout auto redirect based on user roles:you can setting after login redirect URLs and after logout URLs based on user roles. For example, you can setting users which have subscriber role redirect to their activity page after they logged in, and let users who have woocommerce customer role redirected to their shop account page,or redirect editors to their messages page… and so on,If you want to do a test, you can \u003Ca href=\"https:\u002F\u002Fwww.bbp.design\u002Fwp-login.php?action=register\"\" rel=\"nofollow ugc\">register as a member\u003C\u002Fa> , and \u003Ca href=\"https:\u002F\u002Fwww.bbp.design\u002Fwp-login.php\"\" rel=\"nofollow ugc\">login\u003C\u002Fa> , as an user with subscriber role, you will find you be redirected to our support forum, not the wordpress default home page. And when you logout, you will find you be redirected to the our shop, not wordpress default login page.\u003C\u002Fli>\n\u003Cli>bbPress Google reCAPTCHA Protection for Forums \u002F Login \u002F Register Pages: You can enable or disable google reCAPTCHA protection for bbPress New Topic Form \u002F bbPress New Reply Form \u002F bbPress Login Form \u002F bbPress Registration Form, if users did not pass the reCAPTCHA, users can not add new topic on your bbpress forums.\u003C\u002Fli>\n\u003Cli>bbPress Login \u002F Register Spam Protection, Disable Users Who From Proxy to Open Login \u002F Register Your bbPress Forums: If you enable this option, our plugin will detect user’s ip address, and check it is hidden behind a proxy or not, if a users is come from a proxy, we will disable these proxy users open your login page and register page. Many spam-bots is working behind a proxy server, in the current time, our plugin can detect about 22 proxy types and stop users login \u002F register on your site via these proxy types, so these proxy users can not log in your bbpress forum, so these proxy users will not have a chance to add spam content in your forums.\u003C\u002Fli>\n\u003Cli>Customize bbPress Background Image on Login Page \u002F Register Page: You can change background image for login page \u002F register page, please \u003Ca href=\"https:\u002F\u002Fwww.bbp.design\u002Fwp-login.php\" rel=\"nofollow ugc\">check demo\u003C\u002Fa> , you will find the we have changed default login background as a pretty background image, We have chosen 12 pretty background image for you,and we are add more pretty images\u003C\u002Fli>\n\u003Cli>Customize bbPress Login Page \u002F Register Page Logo: You can custom Login Logo Image to add your own custom logo on login form \u002F register form, please \u003Ca href=\"https:\u002F\u002Fwww.bbp.design\u002Fwp-login.php\" rel=\"nofollow ugc\">check demo\u003C\u002Fa> , you will find the default wordpress logo image has been changed as our specified logo image, also you can custom logo URL in plugin panel\u003C\u002Fli>\n\u003Cli>Customize bbPress Login Page \u002F Register Page Title\u003C\u002Fli>\n\u003Cli>Disable Top Admin Bar for Non-Admin Logged-in Users…\u003C\u002Fli>\n\u003Cli>Admin access restricts control based on user roles: in back end, you can enable or disable users access wordpress admin area based on user roles,\u003Cbr \u002F>\n  When users type ‘wp-admin’ to access admin area, if users did not allowed to access admin area, they will be redirected to home page of your site.\u003C\u002Fli>\n\u003Cli>Admin can add bbPress Login | Logout links in site menus, when guest not logged in your site, they will see ‘Log In’ link at the menu bar, when users logged in your site,\u003Cbr \u002F>\n  they will see ‘Log Out’ link in site menu bar, also you can add register link in site menus too\u003C\u002Fli>\n\u003Cli>In bbPress Login Pro plugin Setting Panel, You can custom Login Links in admin area “bbPress Custom Login Links Settings” panel. If you want to use your own custom login links.\u003Cbr \u002F>\n  You can enter your custom login link, for example “login”: \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Col>\n\u003Cli>The “login” link above forums, will change from http:\u002F\u002Fyourdomain.com\u002Fwp-login.php to http:\u002F\u002Fyourdomain.com\u002Flogin\u003C\u002Fli>\n\u003Cli>The “register” link above forums, will change from http:\u002F\u002Fyourdomain.com\u002Fwp-login.php?action=register to http:\u002F\u002Fyourdomain.com\u002Flogin?action=register\u003C\u002Fli>\n\u003Cli>The “Lost Password” link above forums, will change from http:\u002F\u002Fyourdomain.com\u002Fwp-login.php?action=lostpassword to http:\u002F\u002Fyourdomain.com\u002Flogin?action=lostpassword\u003Cbr \u002F>\n  If you do not want to use custom login links again, you can just remove login link in “bbPress Custom Login Links Settings” panel\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>* In Plugin Setting Panel, you can edit \u002F custom all bbPress links style via css code very easy, actually you can use this setting panel online custom any your bbPress style css codes and it will works\u003Cbr \u002F>\n  * more…\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>More amazing features are being developed and you can upgrade unlimited, you are very welcome to submit your feature request at https:\u002F\u002Fwww.bbp.design\u002Fcontact-us\u002F\u003C\u002Fp>\n\u003Cblockquote>\n\u003Ch4>More bbPress Plugins Maybe You Will Like\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.bbp.design\u002Ffeatures-of-bbpress-members-only-pro-plugin\u002F\" rel=\"nofollow ugc\">bbPress Members Only Membership Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.bbp.design\u002Ffeatures-of-bbpress-woocommerce-payment-gateway-plugin\u002F\" rel=\"nofollow ugc\">bbPress WooCommerce Payment Gateway Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.bbp.design\u002Ffeature-of-bbpress-most-liked-topics-plugin\u002F\" rel=\"nofollow ugc\">bbPress Most Liked Topics Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.bbp.design\u002Ffeatures-of-bbpress-new-user-approve\u002F\" rel=\"nofollow ugc\">bbPress New User Approve Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.bbp.design\u002Fbbpress-blacklist-whitelist-security-plugin\u002F\" rel=\"nofollow ugc\">bbPress Blacklist Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.bbp.design\u002Ffeature-of-bbpress-google-xml-sitemaps-generator-plugin\u002F\" rel=\"nofollow ugc\">bbPress Google XML Sitemaps Generator Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.bbp.design\u002Ffeatures-of-customize-bbp\u002F\" rel=\"nofollow ugc\">Customize bbPress Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.bbp.design\u002Ffeatures-of-bbpress-notification-pluginfree\u002F\" rel=\"nofollow ugc\">bbPress Notification Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>more…\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fblockquote>\n\u003Cp>More amazing features are being developed and you can upgrade unlimited, you are very welcome to submit your feature request at https:\u002F\u002Fwww.bbp.design\u002Fcontact-us\u002F\u003C\u002Fp>\n","Add bbPress only sidebar, Add bbpress login link, bbpress register link, forget password link, log out link in bbpress forum index pages or bbpress si …",700,66098,82,8,"2025-11-17T19:34:00.000Z","6.8.5","3.0",[69,92,93,94,19],"bbpress-login","bbpress-sidebar","bbpress-widget","https:\u002F\u002Fwww.bbp.design\u002Fproduct\u002Fbbpress-login-register-pro-single-site\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbbpress-login-register-links-on-forum-topic-pages.zip","2019-12-27 00:00:00",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":108,"num_ratings":109,"last_updated":110,"tested_up_to":111,"requires_at_least":66,"requires_php":15,"tags":112,"homepage":115,"download_link":116,"security_score":117,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":51},"bp2wp-full-sync","BuddyPress to WordPress Full Sync","0.3.7","Sergio De Falco","https:\u002F\u002Fprofiles.wordpress.org\u002Fsgr33n\u002F","\u003Cp>BuddyPress to WordPress Full Sync lets BuddyPress xProfile fields to synchronize with WordPress user fields with a user interface completely fused inside the BuddyPress profile fields management.\u003C\u002Fp>\n\u003Ch4>Let us know you care about this plugin\u003C\u002Fh4>\n\u003Cp>Please let us know how much you care about BuddyPress to WordPress Full Sync Plugin development rating it (5 stars).\u003C\u002Fp>\n","BuddyPress to WordPress Full Sync lets BuddyPress xProfile fields to synchronize with WordPress user fields",200,16106,96,12,"2021-06-16T08:01:00.000Z","5.7.15",[19,113,20,21,114],"fields","xprofile","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbp2wp-full-sync\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp2wp-full-sync.0.3.7.zip",85,{"slug":119,"name":120,"version":121,"author":122,"author_profile":123,"description":124,"short_description":125,"active_installs":106,"downloaded":126,"rating":13,"num_ratings":127,"last_updated":128,"tested_up_to":129,"requires_at_least":130,"requires_php":131,"tags":132,"homepage":135,"download_link":136,"security_score":117,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":51},"lh-buddypress-export-xprofile-data","LH Buddypress Export Xprofile Data","2.00","shawfactor","https:\u002F\u002Fprofiles.wordpress.org\u002Fshawfactor\u002F","\u003Cp>As BuddyPress powers communities large and small, certain types of site require member profile data to be viewed across multiple users, rather than one member at a time. In other words, wide and thin, instead of narrow and deep.\u003C\u002Fp>\n\u003Cp>For my own purposes and have republished in in the repository. I find it very useful!!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Like this plugin? Please consider \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fview\u002Fplugin-reviews\u002Flh-buddypress-export-xprofile-data\u002F\" rel=\"ugc\">leaving a 5-star review\u003C\u002Fa>.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Love this plugin or want to help the LocalHero Project? Please consider \u003Ca href=\"https:\u002F\u002Flhero.org\u002Fportfolio\u002Flh-buddypress-export-xprofile-data\u002F\" rel=\"nofollow ugc\">making a donation\u003C\u002Fa>.\u003C\u002Fstrong>\u003C\u002Fp>\n","This plugin lets you export xprofile field data from BuddyPress, as CSV, for manipulation elsewhere..",4128,4,"2022-07-30T16:11:00.000Z","6.0.11","5.0","5.6",[19,133,134,21,114],"csv","export","https:\u002F\u002Flhero.org\u002Fportfolio\u002Flh-buddypress-export-xprofile-data\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flh-buddypress-export-xprofile-data.zip",{"attackSurface":138,"codeSignals":198,"taintFlows":313,"riskAssessment":430,"analyzedAt":437},{"hooks":139,"ajaxHandlers":168,"restRoutes":195,"shortcodes":196,"cronEvents":197,"entryPointCount":87,"unprotectedCount":25},[140,145,149,153,158,164],{"type":141,"name":142,"callback":143,"file":144,"line":33},"action","wp_enqueue_scripts","bpuw_enqueue_scripts","bp-user-widgets.php",{"type":141,"name":146,"callback":147,"file":144,"line":148},"init","bpuw_localization",102,{"type":141,"name":150,"callback":151,"file":144,"line":152},"widgets_init","wppwu_register_widget",124,{"type":141,"name":154,"callback":155,"file":156,"line":157},"admin_init","bpuw_add_privacy_policy_content","includes\\bpuw-functions.php",524,{"type":159,"name":160,"callback":161,"priority":162,"file":156,"line":163},"filter","wp_privacy_personal_data_exporters","register_bpuw_exporter",10,614,{"type":159,"name":165,"callback":166,"priority":162,"file":156,"line":167},"wp_privacy_personal_data_erasers","register_bpuw_eraser",649,[169,175,177,180,183,186,189,192],{"action":170,"nopriv":171,"callback":170,"hasNonce":172,"hasCapCheck":171,"file":173,"line":174},"bpuw_moveable_widgets",false,true,"includes\\bpuw-ajax.php",60,{"action":176,"nopriv":171,"callback":176,"hasNonce":172,"hasCapCheck":171,"file":173,"line":62},"bpuw_reset_widget",{"action":178,"nopriv":171,"callback":178,"hasNonce":172,"hasCapCheck":171,"file":173,"line":179},"bpuw_clear_widget",161,{"action":181,"nopriv":171,"callback":181,"hasNonce":172,"hasCapCheck":171,"file":173,"line":182},"bpuw_add_video",211,{"action":184,"nopriv":171,"callback":184,"hasNonce":172,"hasCapCheck":171,"file":173,"line":185},"bpuw_add_text",260,{"action":187,"nopriv":171,"callback":187,"hasNonce":172,"hasCapCheck":171,"file":173,"line":188},"bpuw_add_follow",323,{"action":190,"nopriv":171,"callback":178,"hasNonce":172,"hasCapCheck":171,"file":173,"line":191},"bpuw_clear_text",364,{"action":193,"nopriv":171,"callback":193,"hasNonce":172,"hasCapCheck":172,"file":173,"line":194},"bpuw_update_presets",410,[],[],[],{"dangerousFunctions":199,"sqlUsage":200,"outputEscaping":202,"fileOperations":25,"externalRequests":25,"nonceChecks":87,"capabilityChecks":311,"bundledLibraries":312},[],{"prepared":25,"raw":25,"locations":201},[],{"escaped":203,"rawEcho":204,"locations":205},150,56,[206,209,211,213,215,217,219,221,222,224,226,228,230,232,233,234,236,237,238,239,241,244,246,248,250,252,254,255,256,258,260,262,264,266,268,270,272,274,276,278,280,282,284,286,287,289,291,293,295,297,299,301,303,305,307,309],{"file":173,"line":207,"context":208},88,"raw output",{"file":173,"line":210,"context":208},155,{"file":173,"line":212,"context":208},205,{"file":173,"line":214,"context":208},254,{"file":173,"line":216,"context":208},317,{"file":173,"line":218,"context":208},358,{"file":156,"line":220,"context":208},213,{"file":156,"line":220,"context":208},{"file":156,"line":223,"context":208},218,{"file":156,"line":225,"context":208},220,{"file":156,"line":227,"context":208},227,{"file":156,"line":229,"context":208},229,{"file":156,"line":231,"context":208},285,{"file":156,"line":231,"context":208},{"file":156,"line":231,"context":208},{"file":156,"line":235,"context":208},295,{"file":156,"line":235,"context":208},{"file":156,"line":235,"context":208},{"file":156,"line":235,"context":208},{"file":156,"line":240,"context":208},316,{"file":242,"line":243,"context":208},"includes\\bpuw-widget-class.php",45,{"file":242,"line":245,"context":208},47,{"file":242,"line":247,"context":208},62,{"file":242,"line":249,"context":208},64,{"file":242,"line":251,"context":208},69,{"file":242,"line":253,"context":208},80,{"file":242,"line":86,"context":208},{"file":242,"line":34,"context":208},{"file":242,"line":257,"context":208},98,{"file":242,"line":259,"context":208},107,{"file":242,"line":261,"context":208},116,{"file":242,"line":263,"context":208},126,{"file":242,"line":265,"context":208},141,{"file":242,"line":267,"context":208},147,{"file":242,"line":269,"context":208},154,{"file":242,"line":271,"context":208},160,{"file":242,"line":273,"context":208},170,{"file":242,"line":275,"context":208},176,{"file":242,"line":277,"context":208},181,{"file":242,"line":279,"context":208},187,{"file":242,"line":281,"context":208},189,{"file":242,"line":283,"context":208},191,{"file":242,"line":285,"context":208},198,{"file":242,"line":182,"context":208},{"file":242,"line":288,"context":208},219,{"file":242,"line":290,"context":208},221,{"file":242,"line":292,"context":208},226,{"file":242,"line":294,"context":208},228,{"file":242,"line":296,"context":208},233,{"file":242,"line":298,"context":208},235,{"file":242,"line":300,"context":208},238,{"file":242,"line":302,"context":208},240,{"file":242,"line":304,"context":208},244,{"file":242,"line":306,"context":208},249,{"file":242,"line":308,"context":208},290,{"file":242,"line":310,"context":208},297,3,[],[314,340,367,404,413,422],{"entryPoint":315,"graph":316,"unsanitizedCount":14,"severity":339},"bpuw_add_video (includes\\bpuw-ajax.php:164)",{"nodes":317,"edges":335},[318,322,327,329,333],{"id":319,"type":320,"label":321,"file":173,"line":273},"n0","source","$_POST",{"id":323,"type":324,"label":325,"file":173,"line":212,"wp_function":326},"n1","sink","echo() [XSS]","echo",{"id":328,"type":320,"label":321,"file":173,"line":106},"n2",{"id":330,"type":331,"label":332,"file":173,"line":106},"n3","transform","→ bpuw_get_video_content()",{"id":334,"type":324,"label":325,"file":156,"line":240,"wp_function":326},"n4",[336,337,338],{"from":319,"to":323,"sanitized":172},{"from":328,"to":330,"sanitized":171},{"from":330,"to":334,"sanitized":171},"medium",{"entryPoint":341,"graph":342,"unsanitizedCount":74,"severity":339},"bpuw_add_follow (includes\\bpuw-ajax.php:263)",{"nodes":343,"edges":361},[344,346,347,349,351,353,356,359],{"id":319,"type":320,"label":321,"file":173,"line":345},267,{"id":323,"type":324,"label":325,"file":173,"line":216,"wp_function":326},{"id":328,"type":320,"label":321,"file":173,"line":348},310,{"id":330,"type":331,"label":350,"file":173,"line":348},"→ bpuw_get_groups_output()",{"id":334,"type":324,"label":325,"file":156,"line":352,"wp_function":326},491,{"id":354,"type":320,"label":321,"file":173,"line":355},"n5",312,{"id":357,"type":331,"label":358,"file":173,"line":355},"n6","→ bpuw_get_posts_output()",{"id":360,"type":324,"label":325,"file":156,"line":220,"wp_function":326},"n7",[362,363,364,365,366],{"from":319,"to":323,"sanitized":172},{"from":328,"to":330,"sanitized":171},{"from":330,"to":334,"sanitized":171},{"from":354,"to":357,"sanitized":171},{"from":357,"to":360,"sanitized":171},{"entryPoint":368,"graph":369,"unsanitizedCount":311,"severity":339},"\u003Cbpuw-ajax> (includes\\bpuw-ajax.php:0)",{"nodes":370,"edges":395},[371,374,375,377,381,382,383,384,385,387,389,391,393],{"id":319,"type":320,"label":372,"file":173,"line":373},"$_POST (x5)",101,{"id":323,"type":324,"label":325,"file":173,"line":210,"wp_function":326},{"id":328,"type":320,"label":321,"file":173,"line":376},330,{"id":330,"type":324,"label":378,"file":173,"line":379,"wp_function":380},"update_option() [Settings Manipulation]",387,"update_option",{"id":334,"type":320,"label":321,"file":173,"line":106},{"id":354,"type":331,"label":332,"file":173,"line":106},{"id":357,"type":324,"label":325,"file":156,"line":240,"wp_function":326},{"id":360,"type":320,"label":321,"file":173,"line":348},{"id":386,"type":331,"label":350,"file":173,"line":348},"n8",{"id":388,"type":324,"label":325,"file":156,"line":352,"wp_function":326},"n9",{"id":390,"type":320,"label":321,"file":173,"line":355},"n10",{"id":392,"type":331,"label":358,"file":173,"line":355},"n11",{"id":394,"type":324,"label":325,"file":156,"line":220,"wp_function":326},"n12",[396,397,398,399,400,401,402,403],{"from":319,"to":323,"sanitized":172},{"from":328,"to":330,"sanitized":172},{"from":334,"to":354,"sanitized":171},{"from":354,"to":357,"sanitized":171},{"from":360,"to":386,"sanitized":171},{"from":386,"to":388,"sanitized":171},{"from":390,"to":392,"sanitized":171},{"from":392,"to":394,"sanitized":171},{"entryPoint":405,"graph":406,"unsanitizedCount":25,"severity":412},"bpuw_clear_widget (includes\\bpuw-ajax.php:97)",{"nodes":407,"edges":410},[408,409],{"id":319,"type":320,"label":321,"file":173,"line":373},{"id":323,"type":324,"label":325,"file":173,"line":210,"wp_function":326},[411],{"from":319,"to":323,"sanitized":172},"low",{"entryPoint":414,"graph":415,"unsanitizedCount":25,"severity":412},"bpuw_add_text (includes\\bpuw-ajax.php:214)",{"nodes":416,"edges":420},[417,419],{"id":319,"type":320,"label":321,"file":173,"line":418},223,{"id":323,"type":324,"label":325,"file":173,"line":214,"wp_function":326},[421],{"from":319,"to":323,"sanitized":172},{"entryPoint":423,"graph":424,"unsanitizedCount":25,"severity":412},"bpuw_clear_text (includes\\bpuw-ajax.php:326)",{"nodes":425,"edges":428},[426,427],{"id":319,"type":320,"label":321,"file":173,"line":376},{"id":323,"type":324,"label":325,"file":173,"line":218,"wp_function":326},[429],{"from":319,"to":323,"sanitized":172},{"summary":431,"deductions":432},"The bp-user-widgets plugin, version 1.0.8, demonstrates a generally good security posture with no known vulnerabilities in its history and strong adherence to several security best practices.  The plugin has no recorded CVEs, indicating a history of stable security. Static analysis reveals a complete absence of dangerous functions, raw SQL queries, file operations, and external HTTP requests, all positive signs. The presence of nonce checks on all AJAX handlers and capability checks on a significant portion of its entry points further bolster its security.  However, a notable concern arises from the taint analysis, which identified 3 flows with unsanitized paths, despite no critical or high severity issues being flagged. This suggests a potential for sensitive data to be mishandled if these flows were exploited in conjunction with other weaknesses, though the current lack of exploitable vulnerabilities is encouraging. The plugin's output escaping, while decent at 73%, still leaves room for improvement, as a portion of its output is not properly sanitized, posing a minor risk of cross-site scripting (XSS) if the unsanitized output contains user-supplied data. Overall, the plugin is relatively secure due to its robust foundation and lack of historical vulnerabilities, but the identified unsanitized paths and partially unescaped output warrant attention for future development.",[433,435],{"reason":434,"points":87},"Flows with unsanitized paths detected",{"reason":436,"points":127},"Output escaping is not 100%","2026-03-16T22:21:19.374Z",{"wat":439,"direct":447},{"assetPaths":440,"generatorPatterns":444,"scriptPaths":445,"versionParams":446},[441,442,443],"\u002Fwp-content\u002Fplugins\u002Fbp-user-widgets\u002Fjs\u002Fbpuw-fronntend.js","\u002Fwp-content\u002Fplugins\u002Fbp-user-widgets\u002Fvendor\u002Fjquery\u002Fjquery-ui.css","\u002Fwp-content\u002Fplugins\u002Fbp-user-widgets\u002Fcss\u002Fbpuw.css",[],[441],[],{"cssClasses":448,"htmlComments":449,"htmlAttributes":450,"restEndpoints":453,"jsGlobals":454,"shortcodeOutput":457},[],[],[451,452],"data-widget-id","data-widget-type",[],[455,456],"bpuw_translate","ajax_object",[]]