Does BuddyPress Profile Completion have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Is BuddyPress Profile Completion compatible with WordPress 6.3.8?

According to WordPress.org data, BuddyPress Profile Completion 1.1.0 has been tested up to WordPress 6.3.8. Check the plugin's changelog for the latest compatibility information.

Is BuddyPress Profile Completion compatible with PHP 5.3+?

BuddyPress Profile Completion requires PHP 5.3 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is BuddyPress Profile Completion updated?

BuddyPress Profile Completion was last updated on Aug 11, 2023. Frequent updates are generally a positive security signal.

What is BuddyPress Profile Completion's security score?

BuddyPress Profile Completion has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

BuddyPress Profile Completion Security & Risk Analysis

wordpress.org/plugins/buddypress-profile-completion

BuddyPress Profile Completion Plugin allows site admins to force BuddyPress site members to fill all required profile fields, upload profile photo and …

500 active installs v1.1.0 PHP 5.3+ WP 4.5+ Updated Aug 11, 2023

buddypressprofileuser

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is BuddyPress Profile Completion Safe to Use in 2026?

Generally Safe

Score 85/100

BuddyPress Profile Completion has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2yr ago

Risk Assessment

Based on the static analysis, this plugin demonstrates a generally good security posture. The absence of dangerous functions, file operations, and external HTTP requests is a positive sign. Importantly, all SQL queries are properly prepared, and the vast majority of output is correctly escaped, mitigating common injection and cross-site scripting risks. The presence of nonce and capability checks on the single AJAX handler further strengthens its defenses.

Key Concerns

Small percentage of unescaped output remains

Vulnerabilities

None known

BuddyPress Profile Completion Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

BuddyPress Profile Completion Release Timeline

v1.1.0Current

v1.0.9

v1.0.8

v1.0.7

v1.0.6

v1.0.5

v1.0.4

v1.0.3

v1.0.2

v1.0.1

v1.0.0

Code Analysis

Analyzed Mar 16, 2026

BuddyPress Profile Completion Code Analysis

Dangerous Functions

Raw SQL Queries

4 prepared

Unescaped Output

68 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

100% prepared4 total queries

Output Escaping

87% escaped78 total outputs

Attack Surface

BuddyPress Profile Completion Attack Surface

Entry Points1

Unprotected0

AJAX Handlers 1

authwp_ajax_pt_settings_create_pagesrc\admin\pt-settings\src\class-ajax-handler.php:31

WordPress Hooks 19

actionadmin_initsrc\admin\class-admin-settings.php:56

actionadmin_menusrc\admin\class-admin-settings.php:57

actionadmin_enqueue_scriptssrc\admin\pt-settings\pt-settings-loader.php:89

actionbp_loadedsrc\bootstrap\class-bootstrapper.php:41

actionplugins_loadedsrc\bootstrap\class-bootstrapper.php:42

actionbp_initsrc\bootstrap\class-bootstrapper.php:43

filterbp_core_avatar_defaultsrc\core\bp-profile-completion-functions.php:242

actionwp_loginsrc\core\class-bp-profile-completion-helper.php:43

actionxprofile_updated_profilesrc\core\class-bp-profile-completion-helper.php:49

actionbp_template_redirectsrc\core\class-bp-profile-completion-helper.php:55

filterbp_force_profile_completion_skip_checksrc\core\class-bp-profile-completion-helper.php:57

actionbpavmod_avatar_restoredsrc\core\class-bp-profile-completion-helper.php:59

actionbp_core_delete_existing_avatarsrc\core\class-bp-profile-completion-helper.php:66

actionxprofile_avatar_uploadedsrc\core\class-bp-profile-completion-helper.php:70

actionbp_members_avatar_uploadedsrc\core\class-bp-profile-completion-helper.php:72

actionxprofile_cover_image_uploadedsrc\core\class-bp-profile-completion-helper.php:82

actionxprofile_cover_image_deletedsrc\core\class-bp-profile-completion-helper.php:83

actionmembers_cover_image_uploadedsrc\core\class-bp-profile-completion-helper.php:85

actionmembers_cover_image_deletedsrc\core\class-bp-profile-completion-helper.php:86

Maintenance & Trust

BuddyPress Profile Completion Maintenance & Trust

Maintenance Signals

WordPress version tested6.3.8

Last updatedAug 11, 2023

PHP min version5.3

Downloads22K

Community Trust

Rating92/100

Number of ratings10

Active installs500

Alternatives

BuddyPress Profile Completion Alternatives

Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress

youzify

The best BuddyPress plugin for building online communities, user profile, social networks, and membership sites on WordPress with tons of features.

6K 1 unpatched

JSON API User

json-api-user

Extends the JSON API Plugin to allow RESTful user registration, authentication & many other User Meta, BP functions. A Pro version is also available.

1K 1 CVE

BuddyPress to WordPress Full Sync

bp2wp-full-sync

BuddyPress to WordPress Full Sync lets BuddyPress xProfile fields to synchronize with WordPress user fields

200 No CVEs

LH Buddypress Export Xprofile Data

lh-buddypress-export-xprofile-data

This plugin lets you export xprofile field data from BuddyPress, as CSV, for manipulation elsewhere..

200 No CVEs

BuddyPress xProfile Checkout Manager for WooCommerce

woocommerce-buddypress-integration-xprofile-checkout-manager

BuddyPress xProfile Checkout Manager for WooCommerce extension where you can integrate BuddyPress xProfile into WooCommerce Checkout.

70 1 CVE

Developer Profile

BuddyPress Profile Completion Developer Profile

BuddyDev

15 plugins · 15K total installs

trust score

Avg Security Score

87/100

Avg Patch Time

17 days

View full developer profile

Detection Fingerprints

How We Detect BuddyPress Profile Completion

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/buddypress-profile-completion/assets/css/main.css/wp-content/plugins/buddypress-profile-completion/assets/js/main.js/wp-content/plugins/buddypress-profile-completion/assets/js/backend.js/wp-content/plugins/buddypress-profile-completion/assets/css/backend.css

Script Paths

/wp-content/plugins/buddypress-profile-completion/assets/js/main.js/wp-content/plugins/buddypress-profile-completion/assets/js/backend.js

Version Parameters

buddypress-profile-completion/assets/css/main.css?ver=buddypress-profile-completion/assets/js/main.js?ver=buddypress-profile-completion/assets/js/backend.js?ver=buddypress-profile-completion/assets/css/backend.css?ver=

HTML / DOM Fingerprints

CSS Classes

bp-profile-completion-formbp-profile-completion-progress-bar

Data Attributes

data-bp-profile-completion-user-id

JS Globals

bp_profile_completion_ajax_object

REST Endpoints

/wp-json/bp-profile-completion/v1/completion

Shortcode Output

[bp_profile_completion_form][bp_profile_completion_progress_bar]

FAQ