[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3CkibU1uRlq4wZDRQY4bqgoCRO0B49wrJUSSY_TSA0c":3,"$fKjU3_Y_lZ3aEO9G5rQhKRYY9bf0SO7XukQf6DB7iriI":214,"$fmS0MflILP5RndSBrxKe1kzK-O17pl1oEd17gEnlRFw4":219},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"discovery_status":29,"vulnerabilities":30,"developer":31,"crawl_stats":27,"alternatives":38,"analysis":133,"fingerprints":193},"buddypress-activity-anywhere","Buddypress Activity Anywhere","1.1","Eyal Fitoussi","https:\u002F\u002Fprofiles.wordpress.org\u002Fninjew\u002F","\u003Cp>This is a simple that adds an activity button to the admin toolbar in the fron-end. Once a user (logged in) clicks on the button the activity form will pop up. The form will have a text area for the user to enter anything he want to post in his activity.\u003Cbr \u002F>\nWhen the user submit the form the plugin will post the info to his activity stream.\u003C\u002Fp>\n\u003Cp>Checkout the \u003Ca href=\"http:\u002F\u002Fcodecanyon.net\u002Fitem\u002Fbuddypress-quick-activity\u002F7112239\" rel=\"nofollow ugc\">premium version\u003C\u002Fa> for extra features\u003C\u002Fp>\n","Let the members of your site post an update to their activity stream from anywhere in your site or any other subsite in a multisite installation inste …",10,3150,70,2,"2014-04-11T22:27:00.000Z","3.7.41","3.8","",[20,21,22],"activity","buddypress","post","http:\u002F\u002Fgeomywp.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-activity-anywhere.1.1.zip",85,0,null,"2026-04-06T09:54:40.288Z","no_bundle",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":25,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"ninjew",4,4120,31,78,"2026-05-20T00:52:20.812Z",[39,60,78,98,111],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":49,"num_ratings":33,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":53,"tags":54,"homepage":18,"download_link":58,"security_score":47,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":59},"bp-repost-activity","Re-post Activity for BuddyPress","1.4.1","Bunty","https:\u002F\u002Fprofiles.wordpress.org\u002Fbhargavbhandari90\u002F","\u003Cp>Sometimes people like an activity and they would like to post the same activity to their profile or group.\u003C\u002Fp>\n\u003Cp>This plugin will fulfill the requirement of re-posting any activity.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F-rstsmCYfxk?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch3>Compatible with\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>BuddyPress\u003C\u002Fli>\n\u003Cli>BuddyBoss\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How to use?\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Click on “Re-Post” button on any activity.\u003C\u002Fli>\n\u003Cli>Select where to post that activity and post it.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>GitHub Repo\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002FBhargavBhandari90\u002Fbp-repost-activity\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002FBhargavBhandari90\u002Fbp-repost-activity\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Buy Me Coffee\u002FBeer\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbuymeacoffee.com\u002Fwpbunty\" rel=\"nofollow ugc\">https:\u002F\u002Fbuymeacoffee.com\u002Fwpbunty\u003C\u002Fa>\u003C\u002Fp>\n","Re-Post an Activity from activity stream. Re-post an activity to your group and personal activity.",100,7042,80,"2025-06-15T09:23:00.000Z","6.8.5","4.0","5.6",[20,55,21,56,57],"buddyboss","re-post","share","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-repost-activity.1.4.1.zip","2026-04-16T10:56:18.058Z",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":13,"downloaded":68,"rating":69,"num_ratings":70,"last_updated":71,"tested_up_to":18,"requires_at_least":18,"requires_php":18,"tags":72,"homepage":76,"download_link":77,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":59},"hashbuddy","HashBuddy","1.5.2","modemlooper","https:\u002F\u002Fprofiles.wordpress.org\u002Fmodemlooper\u002F","\u003Cp>Hashtags for WordPress, BuddyPress and bbPress. Adds hashtag links to BuddyPress activity and bbPress topics. Hashtags turn into links that are used to search items based on topics.\u003C\u002Fp>\n\u003Cp>demo: http:\u002F\u002Fdemo.taptappress.com\u003C\u002Fp>\n","Hashtags for WordPress, BuddyPress and bbPress. Adds hashtag links to BuddyPress activity and bbPress topics. Hashtags turn into links that are used t …",14008,96,5,"2014-12-28T19:33:00.000Z",[20,73,21,74,75],"bbpress","hashtags","posts","http:\u002F\u002Ftaptappress.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhashbuddy.1.5.2.zip",{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":86,"downloaded":87,"rating":88,"num_ratings":89,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":53,"tags":93,"homepage":95,"download_link":96,"security_score":97,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":59},"bp-add-post-updates-to-activity","BP Add Post Updates to Activity","1.2.2","Venutius","https:\u002F\u002Fprofiles.wordpress.org\u002Fvenutius\u002F","\u003Cp>By default this plugin allows for standard post updates to be pushed to the activity stream. Other post types can be selected in the plugin settings page (Dashboard>>Settings>>BP Add Post Updates).\u003C\u002Fp>\n\u003Cp>You can throttle the minimum re-update time for posts in order to prevent update storms and spam.\u003C\u002Fp>\n\u003Cp>You can also choose what content accompanies the update – the full post Content, the Excerpt or just the author and title links.\u003C\u002Fp>\n\u003Cp>This plugin requires BuddyPress.\u003C\u002Fp>\n\u003Ch3>1.2.2\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>30\u002F07\u002F2024\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Fix: Corrected plugin menu name.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>Fix: Corrected the code to save the delay between updates.\u003C\u002Fli>\n\u003Cli>Security: Changed input type from number, which is not secure, to number only text, which will not allow anything other than a whole number to be entered and is much more secure.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.2.1\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>30\u002F07\u002F2024\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Fix: Updated plugin to allow the delay period to apply to admin.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.2.0\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>20\u002F07\u002F2024\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Fix: Corrected typo.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.1.5\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>10\u002F02\u002F2021\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Fix: Translation improvements.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.1.4\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>14\u002F04\u002F2019\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Fix: Corrected Text Domain settings.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.1.3\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>20\u002F11\u002F2018\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Fix: Added check to prevent menu items from creating activity items.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.1.2\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>28\u002F04\u002F2018\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Fix: Adjusted activity message content.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.1.1\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>28\u002F04\u002F2018\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Updated: Added new update delay time check to make sure no new posts are published.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.1.0\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>27\u002F04\u002F2018\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Fix: Corrected activity content error.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>Refinement: switched main function to trigger on post_updated.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.0.9\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>26\u002F04\u002F2018\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Fix: Moved main function to trigger on edit_posts.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.0.8\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>26\u002F04\u002F2018\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Fix: corrected GMT issue when checking for update times.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.0.7\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>22\u002F04\u002F2018\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Fix: Activity excerpts now showing correctly.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.0.6\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>15\u002F04\u002F\u002F2018\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Added feature whereby activity will be deleted on post deletion.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>Improved error checking to reduce risk of duplicate activity updates.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.0.5\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>15\u002F04\u002F2018\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Updated code for more efficient operation\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>Added support for logged in and members only post types.\u003C\u002Fli>\n\u003Cli>Revised Text Domain\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.0.4\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Corrected naming error with text domain name.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.0.3\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>31\u002F01\u002F2018\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>changed translation text domain name to make it more readable.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>fixed illegal offset error\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.0.2\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>30\u002F01\u002F2018\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>fixed error with admin delay option on initial install.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.0.1\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>fixed error with admin page for first time display – no options set.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>1.0.0\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Content selection, escaped attributes and translation complete. Updated Readme and Uninstall pages.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>0.0.2\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Completed most of the basic structure. 28\u002F01\u002F2018\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>0.0.1\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>First Version. 21\u002F01\u002F2018\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin adds post updates (revisions) to the BuddyPress Activity Stream, other post-types are selectable, as is the minimum time before re-updatin …",20,3261,60,3,"2024-07-30T18:33:00.000Z","6.6.5","3.0.1",[20,21,75,94],"updates","https:\u002F\u002Fbuddyuser.com\u002Fplugin-bp-add-post-updates-to-activity","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-add-post-updates-to-activity.1.2.2.zip",92,{"slug":99,"name":100,"version":101,"author":82,"author_profile":83,"description":102,"short_description":103,"active_installs":11,"downloaded":104,"rating":47,"num_ratings":14,"last_updated":105,"tested_up_to":91,"requires_at_least":106,"requires_php":107,"tags":108,"homepage":109,"download_link":110,"security_score":97,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":59},"bp-template-overloader","BP Template Overloader","1.2.0","\u003Cp>This plugin is designed to simplify, improve and make the management of BuddyPress Template Overloads more accessible.\u003C\u002Fp>\n\u003Cp>Overloading in BuddyPress is the process of customizing the membership pages by replacing default files with your own content.\u003C\u002Fp>\n\u003Cp>It’s a process that can become burdensome to manage since unless you are very organized it’s easy to forget which files were changed and the changes made.\u003C\u002Fp>\n\u003Cp>Let’s say you inherited a BuddyPress site, or did some customization a while back and now want to know exactly what you did?\u003C\u002Fp>\n\u003Cp>This plugin can help you, it will scan your site, show you which templates have been overloaded and allow you to easily compare those overloads with the default files.\u003C\u002Fp>\n\u003Cp>Both traditional Theme Dependent (files stored in Child-theme) and Theme Independent Overloads are supported.\u003C\u002Fp>\n\u003Cp>Includes support for the forthcoming BP-Nouveau theme.\u003C\u002Fp>\n\u003Cp>On loading, BP Template Overloader will scan your theme directory and find any existing template overloads that are in place.\u003C\u002Fp>\n\u003Cp>Any that are found will be highlighted in the Template Overloader tools page and you will have the option to compare the current\u003Cbr \u002F>\noverload with the current default file, so you can understand if you need to bring your overload up to date.\u003C\u002Fp>\n\u003Cp>You will also get the option to migrate any Theme Dependent Overloads (TDO) to Theme Independent Overloads (TIO).\u003C\u002Fp>\n\u003Cp>For files where no overload is in place, you will have the option to view the current default file and to establish either a TIO or TDO for that file.\u003C\u002Fp>\n\u003Cp>Features\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Create Theme Overloads\u003C\u002Fli>\n\u003Cli>View BuddyPress master files\u003C\u002Fli>\n\u003Cli>Disable Theme Overloads\u003C\u002Fli>\n\u003Cli>Restore disabled Overloads\u003C\u002Fli>\n\u003Cli>Migration between Overload types\u003C\u002Fli>\n\u003Cli>Compare Overloads with the current BuddyPress default files\u003C\u002Fli>\n\u003Cli>Delete Overloads\u003C\u002Fli>\n\u003Cli>View Overload file paths and function data\u003C\u002Fli>\n\u003Cli>Supports both BP-Legacy and the forthcoming BP-Nouveau themes\u003C\u002Fli>\n\u003Cli>When Nouveau is released you will be able to compare the different template files\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin requires BuddyPress running either BP-Legacy or BP-Nouveau.\u003C\u002Fp>\n","This plugin is designed to simplify, improve and make the management of BuddyPress Template Overloads more accessible.",2809,"2024-08-02T01:14:00.000Z","5.4.0","6.2.4",[20,21,75,94],"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbp-template-overloader\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-template-overloader.1.2.0.zip",{"slug":112,"name":113,"version":114,"author":115,"author_profile":116,"description":117,"short_description":118,"active_installs":119,"downloaded":120,"rating":47,"num_ratings":121,"last_updated":122,"tested_up_to":123,"requires_at_least":52,"requires_php":18,"tags":124,"homepage":128,"download_link":129,"security_score":130,"vuln_count":131,"unpatched_count":26,"last_vuln_date":132,"fetched_at":59},"bp-activity-shortcode","BuddyPress Activity Shortcode","1.1.9","BuddyDev","https:\u002F\u002Fprofiles.wordpress.org\u002Fbuddydev\u002F","\u003Cp>BuddyPress Activity shortcode plugin allows you to insert BuddyPress activity stream on any page\u002Fpost using shortcode. It has a lot of flexibility built in the shortcode.\u003Cbr \u002F>\nYou can customize almost all aspects of the activity list, what should be listed, how many and everything using the shortcode.\u003C\u002Fp>\n\u003Cp>This plugin does not include any css and utilizes your theme’s css for displaying the activity. If you need any help, please ask on BuddyDev support forums.\u003Cbr \u002F>\nWe are helpful people looking forward to assist you.\u003C\u002Fp>\n\u003Cp>Features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>List all activities\u003C\u002Fli>\n\u003Cli>List activities for a user\u003C\u002Fli>\n\u003Cli>List activities for a group\u003C\u002Fli>\n\u003Cli>List activities of specific user role.\u003C\u002Fli>\n\u003Cli>Allow users to post from the page( experimental, if does not work with your theme, please let us know)\u003C\u002Fli>\n\u003Cli>All options supported by bp_has_activities are available\u003C\u002Fli>\n\u003Cli>For details, please see \u003Ca href=\"https:\u002F\u002Fbuddydev.com\u002Fplugins\u002Fbp-activity-shortcode\u002F\" title=\"Plugin page\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003Cbr \u002F>\nThe simple way to use it is by including this shortcode\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>[activity-stream ]\u003C\u002Fp>\n\u003Cp>Please make sure to check the usage instructions on the \u003Ca href=\"https:\u002F\u002Fbuddydev.com\u002Fplugins\u002Fbp-activity-shortcode\u002F\" title=\"Plugin page\" rel=\"nofollow ugc\">BuddyPress Activity shortcode plugin page\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Free & paid supports are available via \u003Ca href=\"https:\u002F\u002Fbuddydev.com\u002Fsupport\u002Fforums\u002F\" title=\"BuddyDev support forums\" rel=\"nofollow ugc\">BuddyDev Support Forum\u003C\u002Fa>\u003C\u002Fp>\n","BuddyPress Activity shortcode plugin allows you to insert BuddyPress activity stream on any page\u002Fpost using shortcode.",2000,55770,8,"2025-12-31T16:26:00.000Z","5.9.0",[125,21,126,127],"activity-shortcode","buddypress-activity","sitewide-activity","https:\u002F\u002Fbuddydev.com\u002Fplugins\u002Fbp-activity-shortcode\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-activity-shortcode.1.1.9.zip",99,1,"2025-12-31 00:00:00",{"attackSurface":134,"codeSignals":170,"taintFlows":186,"riskAssessment":187,"analyzedAt":192},{"hooks":135,"ajaxHandlers":166,"restRoutes":167,"shortcodes":168,"cronEvents":169,"entryPointCount":26,"unprotectedCount":26},[136,142,146,150,154,159,163],{"type":137,"name":138,"callback":139,"file":140,"line":141},"action","wp_enqueue_scripts","enqueue_scripts","bp-activity-anywhere.php",63,{"type":137,"name":143,"callback":144,"priority":47,"file":140,"line":145},"admin_bar_menu","adminbar_button",64,{"type":137,"name":147,"callback":148,"file":140,"line":149},"wp_footer","activity_form",65,{"type":137,"name":151,"callback":152,"file":140,"line":153},"bp_init","bpaa_init",149,{"type":137,"name":155,"callback":156,"file":157,"line":158},"admin_menu","bpqa_admin_menu","includes\\bpqa-admin.php",18,{"type":137,"name":160,"callback":161,"file":157,"line":162},"admin_init","bpqa_options_init",41,{"type":137,"name":160,"callback":164,"file":157,"line":165},"bpqa_admin_register_settings",118,[],[],[],[],{"dangerousFunctions":171,"sqlUsage":172,"outputEscaping":174,"fileOperations":26,"externalRequests":26,"nonceChecks":131,"capabilityChecks":26,"bundledLibraries":185},[],{"prepared":26,"raw":26,"locations":173},[],{"escaped":26,"rawEcho":33,"locations":175},[176,179,181,183],{"file":157,"line":177,"context":178},139,"raw output",{"file":157,"line":180,"context":178},164,{"file":157,"line":182,"context":178},188,{"file":157,"line":184,"context":178},190,[],[],{"summary":188,"deductions":189},"The plugin \"buddypress-activity-anywhere\" v1.1 exhibits a generally strong security posture based on the provided static analysis. The absence of AJAX handlers, REST API routes, shortcodes, and cron events significantly limits the plugin's attack surface. Furthermore, the analysis indicates a lack of dangerous functions and file operations, and all SQL queries utilize prepared statements, which are excellent security practices. The presence of a nonce check is also a positive indicator.\n\nHowever, a critical concern arises from the complete lack of output escaping. With 100% of outputs not properly escaped, this presents a significant risk for Cross-Site Scripting (XSS) vulnerabilities. If any user-supplied data is ever displayed on the front-end without proper sanitization or escaping, an attacker could inject malicious scripts. The zero taint analysis flows might be misleading if the taint analysis itself was not comprehensive or if the limited entry points did not expose exploitable data flows.\n\nThe plugin's vulnerability history is clean, with no known CVEs. This, combined with the limited attack surface, suggests a history of secure development or a lack of targeting. However, the current lack of output escaping overshadows this positive history and needs immediate attention. The plugin has strong foundations in input handling and SQL querying, but a critical weakness in output sanitization leaves it vulnerable.",[190],{"reason":191,"points":121},"All outputs are unescaped","2026-03-17T01:26:55.858Z",{"wat":194,"direct":202},{"assetPaths":195,"generatorPatterns":198,"scriptPaths":199,"versionParams":200},[196,197],"\u002Fwp-content\u002Fplugins\u002Fbuddypress-activity-anywhere\u002Fform-templates\u002Fdefault\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fbuddypress-activity-anywhere\u002Fassets\u002Fjs\u002Fjs.js",[],[197],[201],"buddypress-activity-anywhere\u002Fassets\u002Fjs\u002Fjs.js?ver=",{"cssClasses":203,"htmlComments":205,"htmlAttributes":206,"restEndpoints":208,"jsGlobals":209,"shortcodeOutput":213},[204],"bpqa-form-trigger",[],[207],"data-bpqa-textarea",[],[210,211,212],"BPQA_URL","BPQA_PATH","BPQA_VERSION",[],{"error":215,"url":216,"statusCode":217,"statusMessage":218,"message":218},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fbuddypress-activity-anywhere\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":14,"versions":220},[221,227],{"version":6,"download_url":24,"svn_tag_url":222,"released_at":27,"has_diff":223,"diff_files_changed":224,"diff_lines":27,"trac_diff_url":225,"vulnerabilities":226,"is_current":215},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fbuddypress-activity-anywhere\u002Ftags\u002F1.1\u002F",false,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fbuddypress-activity-anywhere%2Ftags%2F1.0&new_path=%2Fbuddypress-activity-anywhere%2Ftags%2F1.1",[],{"version":228,"download_url":229,"svn_tag_url":230,"released_at":27,"has_diff":223,"diff_files_changed":231,"diff_lines":27,"trac_diff_url":27,"vulnerabilities":232,"is_current":223},"1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-activity-anywhere.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fbuddypress-activity-anywhere\u002Ftags\u002F1.0\u002F",[],[]]