[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSQ5LMfT2pt6GJMEYSejmxHnwNeSlSl0X5Vz8VYEREd4":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":16,"requires_php":16,"tags":17,"homepage":22,"download_link":23,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":34,"analysis":125,"fingerprints":167},"buddypress-default-group-avatar","BuddyPress Group Default Avatar","0.1.1","Vernon Fowler","https:\u002F\u002Fprofiles.wordpress.org\u002Fvernonfowler\u002F","\u003Cp>Allows specifying the URL of an image to use as the BuddyPress default group avatar. This makes it easy to distinguish groups from members who are using the mystery man default user avatar. The avatar scales from full to thumb as per your theme settings. It works in all situations (activity stream, groups, forums, directory, etc). Upload your image to somewhere within your theme and drop the full URL in the options screen. Not yet working for multisite\u002Fnetwork install.\u003C\u002Fp>\n","Adds a default group avatar to BuddyPress. Configure the image URL via the option page.",10,4556,100,1,"2012-02-21T11:44:00.000Z","",[18,19,20,21],"avatar","buddypress","default","groups","http:\u002F\u002Fvfowler.com\u002F2012\u002F02\u002Fbuddypress-default-group-avatar\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-default-group-avatar.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":24,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},"vernonfowler",30,84,"2026-04-04T05:40:26.805Z",[35,48,69,88,104],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":11,"downloaded":43,"rating":13,"num_ratings":14,"last_updated":44,"tested_up_to":16,"requires_at_least":16,"requires_php":16,"tags":45,"homepage":46,"download_link":47,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"bp-default-group-avatar","BuddyPress Default Group Avatar","0.2","Mike Martel","https:\u002F\u002Fprofiles.wordpress.org\u002Fmike_cowobo\u002F","\u003Cp>\u003Cem>This plugin is tested only with BP 1.6.2 and WordPress 3.5, and is not meant to be backwards compatible! If you’re running an older version of WordPress, use Vernon’s original plugin \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fbuddypress-default-group-avatar\u002F\" rel=\"ugc\">BuddyPress Group Default Avatar\u003C\u002Fa>\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Allows specifying the URL of an image to use as the BuddyPress default group avatar. This makes it easy to distinguish groups from members who are using the mystery man default user avatar.\u003C\u002Fp>\n\u003Cp>It works in all situations (activity stream, groups, forums, directory, etc). Upload your image to somewhere within your theme and drop the full URL in the options screen.\u003C\u002Fp>\n\u003Cp>If you had \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fbuddypress-default-group-avatar\u002F\" rel=\"ugc\">BuddyPress Group Default Avatar\u003C\u002Fa> previously installed, this plugin will use the avatar set in that plugin. Otherwise it’s bundled with a default avatar for groups (see screenshots).\u003C\u002Fp>\n\u003Cp>Not tested on multisite\u002Fnetwork install yet (please confirm if it’s working!).\u003C\u002Fp>\n","Adds a default group avatar to BuddyPress without disabling Gravatars for users.",3769,"2012-12-19T19:07:00.000Z",[18,19,20,21],"http:\u002F\u002Ftrenvo.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-default-group-avatar.0.2.zip",{"slug":49,"name":50,"version":51,"author":52,"author_profile":53,"description":54,"short_description":55,"active_installs":56,"downloaded":57,"rating":58,"num_ratings":59,"last_updated":60,"tested_up_to":61,"requires_at_least":62,"requires_php":16,"tags":63,"homepage":67,"download_link":68,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"buddypress-cover-photo","BuddyPress Default Cover Photo","1.6.0","SeventhQueen","https:\u002F\u002Fprofiles.wordpress.org\u002Fseventhqueen\u002F","\u003Cp>The plugin adds DEFAULT Profile and Group cover settings in WP Admin – Settings – BuddyPress – Settings.\u003C\u002Fp>\n\u003Cp>You also have the option to replace default BuddyPress cover photo and use this plugin for the cover functionality.\u003C\u002Fp>\n\u003Cp>Check out this demo to see it in action:\u003Cbr \u002F>\nhttp:\u002F\u002Fseventhqueen.com\u002Fthemes\u002Fkleo\u002Fmembers\u002Fkleoadmin\u002F\u003C\u002Fp>\n","The plugin adds DEFAULT Profile and Group cover settings in WP Admin - Settings - BuddyPress - Settings.",600,102728,76,12,"2019-12-20T13:38:00.000Z","5.3.21","4.1",[18,19,64,65,66],"default-cover","group-cover","profile-cover","http:\u002F\u002Fseventhqueen.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-cover-photo.1.6.0.zip",{"slug":70,"name":71,"version":72,"author":73,"author_profile":74,"description":75,"short_description":76,"active_installs":13,"downloaded":77,"rating":78,"num_ratings":79,"last_updated":80,"tested_up_to":81,"requires_at_least":82,"requires_php":16,"tags":83,"homepage":16,"download_link":87,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"bp-local-avatars","BP Local Avatars","3.0","shanebp","https:\u002F\u002Fprofiles.wordpress.org\u002Fshanebp\u002F","\u003Cp>BP Local Avatars is a BuddyPress plugin.\u003C\u002Fp>\n\u003Cp>Do you have members or groups on your BuddyPress site who do not have an Avatar?\u003Cbr \u002F>\nAnd you do not want to show the generic default avatar?\u003Cbr \u002F>\nOr maybe you do not want each page view to include a lot of calls to gravatar.com to load avatars?\u003C\u002Fp>\n\u003Cul>\n\u003Cli>This plugin will create a Gravatar Identicon avatar, thumb and full versions, for any user who does not already have an Avatar, and save it locally.\u003C\u002Fli>\n\u003Cli>Supports user creation, user registration, user login, and Bulk Generation for user and groups.\u003C\u002Fli>\n\u003Cli>Uses the existing BuddyPress avatar directory structure.\u003C\u002Fli>\n\u003Cli>Conforms to the defined sizes for BuddyPress thumb and full avatars.\u003C\u002Fli>\n\u003Cli>Users can still upload an avatar via their profile.\u003C\u002Fli>\n\u003Cli>Groups can still upload an avatar via Group > Manage > Photo.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Usage:\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>Provides an option in wp-admin under:\u003Cbr \u002F>\nSettings -> Discussion > Default Avatar > BuddyPress Identicon (Generated and Stored Locally).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Select and Save. Otherwise this plugin will not do anything.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>After saving, you will see a link to ‘Bulk Generate’ avatars for all users and groups who do not have a local avatar. If a user already has their own Gravatar, it will save it locally.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>For more BuddyPress plugins, please visit \u003Ca href=\"https:\u002F\u002Fwww.philopress.com\u002F\" rel=\"nofollow ugc\">PhiloPress\u003C\u002Fa>\u003C\u002Fp>\n","A BuddyPress plugin that creates Gravatar avatars for any user or group without one, and stores them locally.",10578,82,7,"2025-04-19T17:32:00.000Z","6.8.5","4.0",[84,19,85,21,86],"avatars","gravatars","members","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-local-avatars.3.0.zip",{"slug":89,"name":90,"version":91,"author":92,"author_profile":93,"description":94,"short_description":95,"active_installs":11,"downloaded":96,"rating":13,"num_ratings":14,"last_updated":97,"tested_up_to":98,"requires_at_least":99,"requires_php":16,"tags":100,"homepage":102,"download_link":103,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"bp-avatar-hover","Buddypress Avatar Hover","1.0","aghajoon","https:\u002F\u002Fprofiles.wordpress.org\u002Faghajoon\u002F","\u003Cp>BuddyPress  Avatar Hover let’s you add a pop box when hovering on the group\u002Fmember avatars and gives you more information at a glance.\u003Cbr \u002F>\nif you install bp-cover plugin , bp avatar hover show cover of memeber\u002Fgroup\u003C\u002Fp>\n","BuddyPress  Avatar Hover let's you add a pop box when hovering on the group\u002Fmember avatars and gives you more information at a glance.",5312,"2016-06-07T14:09:00.000Z","4.5.33","3.8",[101,18,19,21,86],"activity","http:\u002F\u002Fwebcaffe.ir","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-avatar-hover.zip",{"slug":105,"name":106,"version":107,"author":108,"author_profile":109,"description":110,"short_description":111,"active_installs":112,"downloaded":113,"rating":114,"num_ratings":115,"last_updated":116,"tested_up_to":117,"requires_at_least":118,"requires_php":119,"tags":120,"homepage":16,"download_link":124,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"bp-registration-options","Registration Options for BuddyPress","4.4.5","Brian Messenlehner","https:\u002F\u002Fprofiles.wordpress.org\u002Fmessenlehner\u002F","\u003Cp>Prevent users and bots from accessing the BuddyPress or bbPress areas of your website(s) until they are approved.\u003C\u002Fp>\n\u003Cp>This BuddyPress extension allows you to enable user moderation for new members, as well as help create a private network for your users. If moderation is enabled, any new members will be denied access to your BuddyPress and bbPress areas on your site, with the exception of their own user profile. They will be allowed to edit and configure that much. They will also not be listed in the members lists on the frontend until approved. Custom messages are available so you can tailor them to the tone of your website and community. When an admin approves or denies a user, email notifications will be sent to let them know of the decision.\u003C\u002Fp>\n\u003Cp>Requires BuddyPress version 1.7 or higher and bbPress 2.0 or higher.\u003C\u002Fp>\n\u003Ch3>General Data Protection Regulation\u003C\u002Fh3>\n\u003Cp>BuddyPress Registration Options temporarily stores user IP addresses as user meta to help validate and vet pending users. Saved IP values are deleted upon both approval and denial of pending user. No other personal data is recorded.\u003C\u002Fp>\n","Moderate new BuddyPress members and fight BuddyPress spam.",1000,175480,88,33,"2023-03-05T15:26:00.000Z","6.0.11","5.2","5.6",[121,19,21,122,123],"admin","moderation","registration","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-registration-options.zip",{"attackSurface":126,"codeSignals":146,"taintFlows":159,"riskAssessment":160,"analyzedAt":166},{"hooks":127,"ajaxHandlers":142,"restRoutes":143,"shortcodes":144,"cronEvents":145,"entryPointCount":25,"unprotectedCount":25},[128,134,137],{"type":129,"name":130,"callback":131,"file":132,"line":133},"action","admin_menu","BPDGA_plugin_menu","buddypress-default-group-avatar.php",11,{"type":129,"name":135,"callback":136,"file":132,"line":59},"admin_init","BPDGA_admin_settings",{"type":138,"name":139,"callback":140,"file":132,"line":141},"filter","bp_group_gravatar_default","group_default",93,[],[],[],[],{"dangerousFunctions":147,"sqlUsage":148,"outputEscaping":150,"fileOperations":25,"externalRequests":25,"nonceChecks":25,"capabilityChecks":25,"bundledLibraries":158},[],{"prepared":25,"raw":25,"locations":149},[],{"escaped":25,"rawEcho":151,"locations":152},2,[153,156],{"file":132,"line":154,"context":155},41,"raw output",{"file":132,"line":157,"context":155},52,[],[],{"summary":161,"deductions":162},"The \"buddypress-default-group-avatar\" plugin v0.1.1 presents a very low-risk profile based on the provided static analysis and vulnerability history. The complete absence of identified entry points such as AJAX handlers, REST API routes, shortcodes, or cron events significantly limits the potential attack surface. Furthermore, the code signals show a lack of dangerous functions, no direct SQL queries (all are prepared), no file operations, and no external HTTP requests, which are all positive security indicators.  However, the fact that 0% of the observed output is properly escaped is a significant concern. While there are no immediate vulnerabilities suggested by the taint analysis or historical CVEs, this oversight could become a vector for Cross-Site Scripting (XSS) attacks if any user-supplied data is ever rendered without proper sanitization or escaping. The plugin's minimal functionality and lack of interaction points likely contribute to its current clean security record, but the unescaped output remains a notable weakness that should be addressed.",[163],{"reason":164,"points":165},"0% of output is properly escaped",5,"2026-03-17T01:36:44.263Z",{"wat":168,"direct":173},{"assetPaths":169,"generatorPatterns":170,"scriptPaths":171,"versionParams":172},[],[],[],[],{"cssClasses":174,"htmlComments":178,"htmlAttributes":179,"restEndpoints":189,"jsGlobals":190,"shortcodeOutput":191},[175,176,177],"wrap","form-table","submit",[],[180,181,182,183,184,185,186,187,188],"name=\"BPDGA_img_url\"","value=\"","placeholder=\"","name=\"action\"","value=\"update\"","name=\"page_options\"","value=\"BPDGA_img_url\"","class=\"button-primary\"","src=\"",[],[],[]]