[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fArdH0UtYDn2Z2p2g-KWKJ6pvR2BZV7qEFOMCveNj1hA":3,"$f_tP0Q-ZW8gYApb23tSr0-zO7ZnfOf3gUKJsI-Afki2w":202,"$ftYPHsNOrPN2Tl4N5Uce9BLTsQZBtqrGVTKv43WVCztw":207},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"discovery_status":31,"vulnerabilities":32,"developer":33,"crawl_stats":29,"alternatives":38,"analysis":122,"fingerprints":177},"echo1-consulting-inital-js-avatar","Echo1 Consulting – Inital JS Avatar","1.0","echo1consulting","https:\u002F\u002Fprofiles.wordpress.org\u002Fecho1consulting\u002F","\u003Cp>Simple jQuery plugin to make gmail like text avatars for profile pictures. These avatars can be scaled up to any size as they are SVG based.\u003C\u002Fp>\n\u003Cp>This is an integration of the initial.js jquery plugin (http:\u002F\u002Fjudelicio.us\u002Finitial.js\u002F). This plugin contains hooks for extensibility, and modifications of avatars.\u003C\u002Fp>\n\u003Cp>The avatar will be the first initial of the username. Colors are set by default, but can be manipulated using built-in hooks.\u003C\u002Fp>\n","Simple jQuery plugin to make gmail like text avatars for profile pictures. These avatars can be scaled up to any size as they are SVG based.",10,1588,80,2,"2015-06-03T03:38:00.000Z","4.2.39","3.0","",[20,21,22,23,24],"avatar","avatars","change-avatar","comment-change-avatar","comments","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fecho1-consulting-inital-js-avatar\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fecho1-consulting-inital-js-avatar.zip",85,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},1,30,84,"2026-05-19T21:22:25.243Z",[39,59,78,89,106],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":49,"num_ratings":50,"last_updated":51,"tested_up_to":52,"requires_at_least":53,"requires_php":18,"tags":54,"homepage":57,"download_link":58,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-first-letter-avatar","WP First Letter Avatar","2.2.8","DanielAGW","https:\u002F\u002Fprofiles.wordpress.org\u002Fdanielagw\u002F","\u003Cp>WP First Letter Avatar \u003Cstrong>sets custom avatars for users without Gravatar\u003C\u002Fstrong>. The avatar will be a first letter of the user’s name. You can also configure the plugin to use any other letter to set custom avatar.\u003C\u002Fp>\n\u003Cp>WP First Letter Avatar includes a set of \u003Cstrong>beautiful, colorful letter avatars\u003C\u002Fstrong> in many sizes. Optimal size will be chosen by the plugin in order to display high quality avatar and not download, for example, big 512px avatars when only 48px is needed… \u003Cstrong>PSD template\u003C\u002Fstrong> for avatar is also included.\u003C\u002Fp>\n\u003Cp>You can also create your own avatar set by creating new directory next to \u003Cem>‘default’\u003C\u002Fem> folder and following the naming convention from \u003Cem>‘default’\u003C\u002Fem>.\u003C\u002Fp>\n\u003Cp>By default, custom avatar will be set only to users without Gravatars, but you can change that in settings and not use Gravatar at all.\u003C\u002Fp>\n\u003Cp>WP First Letter Avatar helps you \u003Cstrong>bring more colors\u003C\u002Fstrong> into your blog. Plus, your readers will be more \u003Cstrong>willing to comment on your posts\u003C\u002Fstrong>, since they can actually relate to these avatars much better than to Mystery Person.\u003C\u002Fp>\n\u003Cp>All images were compressed using the fantastic \u003Ca href=\"https:\u002F\u002Ftinypng.com\u002F\" rel=\"nofollow ugc\">TinyPNG\u003C\u002Fa>, so avatars are \u003Cstrong>incredibly light and ultra-high quality\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>WP First Letter Avatar is also available \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FDev49net\u002Fwp-first-letter-avatar\" rel=\"nofollow ugc\">on GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Compatibility with other plugins\u003C\u002Fh4>\n\u003Cp>WP First Letter Avatar is fully compatible with \u003Ca href=\"https:\u002F\u002Fbbpress.org\u002F\" rel=\"nofollow ugc\">bbPress\u003C\u002Fa> and \u003Ca href=\"http:\u002F\u002Fwww.gvectors.com\u002Fwpdiscuz\u002F\" rel=\"nofollow ugc\">wpDiscuz\u003C\u002Fa>. For \u003Ca href=\"https:\u002F\u002Fbuddypress.org\u002F\" rel=\"nofollow ugc\">BuddyPress\u003C\u002Fa> compatibility please use my other plugin – \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbuddypress-first-letter-avatar\u002F\" rel=\"ugc\">BuddyPress First Letter Avatar\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cp>WP First Letter Avatar requires at least PHP 5.4. It \u003Cstrong>does not work properly\u003C\u002Fstrong> on PHP 5.3.x and earlier.\u003C\u002Fp>\n","Set custom avatars for users with no Gravatar. The avatar will be the first (or any other) letter of user's name on a colorful background.",2000,67658,94,33,"2017-03-11T22:26:00.000Z","4.7.33","4.6",[21,22,24,55,56],"custom-avatar","discussion","http:\u002F\u002Fdev49.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-first-letter-avatar.zip",{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":69,"num_ratings":34,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":18,"tags":73,"homepage":76,"download_link":77,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"easygravatars","Easy Gravatars","1.3","Dougal Campbell","https:\u002F\u002Fprofiles.wordpress.org\u002Fdougal\u002F","\u003Cp>This plugin allows you to automatically add Gravatars for commenters to your\u003Cbr \u002F>\ntheme, if your theme does not already support them.\u003C\u002Fp>\n\u003Cp>According to the Gravatar.com website, Gravatars are Globally Recognized\u003Cbr \u002F>\nAvatars, or an “avatar image that follows you from weblog to weblog\u003Cbr \u002F>\nappearing beside your name when you comment on gravatar enabled sites.”\u003Cbr \u002F>\nYou register with the Gravatar server, and upload an image which you will\u003Cbr \u002F>\nuse as your avatar. The gravatar image is keyed to your email address, so\u003Cbr \u002F>\nthat it is unique to you.\u003C\u002Fp>\n\u003Cp>This plugin will display gravatars for the people who comment on your posts.\u003Cbr \u002F>\nYou do not need to modify any of your template files — just activate the\u003Cbr \u002F>\nplugin, and it will add gravatars to your comments template automatically.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Based on a code snippet from Matt Mullenweg:\u003Cbr \u002F>\n  http:\u002F\u002Fphotomatt.net\u002F2007\u002F10\u002F20\u002Fgravatar-enabled\u002F\u003Cbr \u002F>\n  http:\u002F\u002Fpastebin.ca\u002F743979\u003C\u002Fp>\n\u003Cp>Props to David Potter for pointing out that Gravatar normalizes email\u003Cbr \u002F>\naddresses to lowercase before hashing with MD5:\u003Cbr \u002F>\n  http:\u002F\u002Fdpotter.net\u002FTechnical\u002Findex.php\u002F2007\u002F10\u002F22\u002Fintegrating-gravatar-support\u002F\u003C\u002Fp>\n","Add Gravatars to your comments without modifying any template files. Just activate, and you're done!",200,64656,100,"2010-01-14T15:36:00.000Z","3.0.5","2.0.4",[20,21,24,74,75],"gravatar","gravatars","http:\u002F\u002Fdougal.gunters.org\u002Fplugins\u002Feasy-gravatars","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasygravatars.1.3.zip",{"slug":79,"name":80,"version":42,"author":43,"author_profile":44,"description":81,"short_description":82,"active_installs":69,"downloaded":83,"rating":84,"num_ratings":85,"last_updated":51,"tested_up_to":52,"requires_at_least":53,"requires_php":18,"tags":86,"homepage":57,"download_link":88,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"buddypress-first-letter-avatar","BuddyPress First Letter Avatar","\u003Cp>BuddyPress First Letter Avatar \u003Cstrong>sets custom avatars for users without profile picture or Gravatar\u003C\u002Fstrong>. The avatar will be a first letter of user’s name. You can also configure plugin to use any other letter to set custom avatar.\u003C\u002Fp>\n\u003Cp>BuddyPress First Letter Avatar is based on my other plugin – \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-first-letter-avatar\u002F\" rel=\"ugc\">WP First Letter Avatar\u003C\u002Fa>. BuddyPress First Letter Avatar is basically the same thing, but programmed to work with BuddyPress.\u003C\u002Fp>\n\u003Cp>BuddyPress First Letter Avatar includes a set of \u003Cstrong>beautiful, colorful letter avatars\u003C\u002Fstrong> in many sizes. Optimal size will be chosen by the plugin in order to display high quality avatar and not download, for example, big 512px avatars when only 48px is needed… \u003Cstrong>PSD template\u003C\u002Fstrong> for avatar is also included.\u003C\u002Fp>\n\u003Cp>You can also create your own avatar set by creating new directory next to \u003Cem>‘default’\u003C\u002Fem> folder and following the naming convention from \u003Cem>‘default’\u003C\u002Fem>.\u003C\u002Fp>\n\u003Cp>By default, custom avatar will be set only to users without profile pictures and Gravatars, but you can change that in settings and not use Gravatar\u002Fprofile pictures at all.\u003C\u002Fp>\n\u003Cp>BuddyPress First Letter Avatar helps you \u003Cstrong>bring more colors into your BuddyPress site\u003C\u002Fstrong>. Plus, your users will be more \u003Cstrong>willing to actively participate in your site\u003C\u002Fstrong> since they can actually relate to these avatars much better than to the Mystery Person.\u003C\u002Fp>\n\u003Cp>All images were compressed using the fantastic \u003Ca href=\"https:\u002F\u002Ftinypng.com\u002F\" rel=\"nofollow ugc\">TinyPNG\u003C\u002Fa>, so avatars are \u003Cstrong>incredibly light and ultra-high quality\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>Plugin is also available \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FDev49net\u002Fbuddypress-first-letter-avatar\" rel=\"nofollow ugc\">on GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cp>BuddyPress First Letter Avatar requires at least PHP 5.4. It \u003Cstrong>does not work properly\u003C\u002Fstrong> on PHP 5.3.x and earlier.\u003C\u002Fp>\n","A WordPress-BuddyPress plugin to set fancy custom avatars for users with no Gravatar and no profile picture.",29920,98,16,[21,87,24,55,56],"buddypress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-first-letter-avatar.zip",{"slug":90,"name":91,"version":6,"author":92,"author_profile":93,"description":94,"short_description":95,"active_installs":96,"downloaded":97,"rating":69,"num_ratings":98,"last_updated":99,"tested_up_to":100,"requires_at_least":101,"requires_php":18,"tags":102,"homepage":104,"download_link":105,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-recent-comments-with-avatars","WP Recent Comments With Avatars","TrueFalse","https:\u002F\u002Fprofiles.wordpress.org\u002Ftruefalse\u002F","\u003Cp>Lightweight plugin that overrides the default widget “recent comments” in WordPress, adding an avatar display visitors comments and quotes length of 50 characters.\u003C\u002Fp>\n\u003Cp>Is a direct descendant of WP_Widget_Recent_Comments.\u003C\u002Fp>\n\u003Cp>Example markup that is generated by the plugin(for theming):\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cul id=\"recentcomments\">\n  \u003Cli class=\"recentcomments\">\n    \u003Cdiv class=\"alignleft\">\n      \u003Cimg width=\"32\" height=\"32\" class=\"avatar avatar-32 photo\" src=\"http:\u002F\u002F0.gravatar.com\u002F...%3D32&r=G\" alt=\"\">\n    \u003C\u002Fdiv>\n    \u003Cb>UserName\u003C\u002Fb>: excerpt comment \u003Ca href=\"http:\u002F\u002Fexample.com\u002Fpage\u002F#comment-ID\">»\u003C\u002Fa>\n  \u003C\u002Fli>\n  \u003Cli class=\"recentcomments\">\n  ...\n  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Adds avatars and announcements comments. Compact code.",90,5825,3,"2013-06-27T01:56:00.000Z","3.5.2","3.5.1",[21,24,103],"widget","http:\u002F\u002Fsitehint.ru\u002F?p=827","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-recent-comments-with-avatars.zip",{"slug":107,"name":108,"version":109,"author":110,"author_profile":111,"description":112,"short_description":113,"active_installs":114,"downloaded":115,"rating":28,"num_ratings":28,"last_updated":116,"tested_up_to":117,"requires_at_least":118,"requires_php":18,"tags":119,"homepage":120,"download_link":121,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"recent-comments-with-avatars","Recent Comments with Avatars","3.5","peterwsterling","https:\u002F\u002Fprofiles.wordpress.org\u002Fpeterwsterling\u002F","\u003Cp>Once the widget is added to your sidebar you may easily configure it to provide a display of recent comments with comment author avatars.  The options are:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The title of the widget.\u003C\u002Fli>\n\u003Cli>Limit the number of comments to shown (1 to 15).\u003C\u002Fli>\n\u003Cli>Option to display the avatar of the comment author, or not.\u003C\u002Fli>\n\u003Cli>Set the size of the avatar.\u003C\u002Fli>\n\u003Cli>Chose to have the comment author’s URL (if given) open in a new window,\u003C\u002Fli>\n\u003Cli>Show the date of the comment, or not.\u003C\u002Fli>\n\u003Cli>Set the format of the date.\u003C\u002Fli>\n\u003Cli>Set the size (as a fraction of the normal text size) of the date string.\u003C\u002Fli>\n\u003Cli>Show an excerpt from the comment.\u003C\u002Fli>\n\u003Cli>Convert smilies in the excerpt.\u003C\u002Fli>\n\u003Cli>Show a country flag indicating the source of the comment, requires MySQL database modifications, see below.\u003C\u002Fli>\n\u003Cli>Show a country flag in main comment loops, non-widget, requires theme and MySQL database modifications, see below.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The style of the output may be controlled with simple CSS rules that need to be included in your \u003Ccode>styles.css\u003C\u002Fcode> template file.\u003Cbr \u002F>\n    The container (i.e. \u003Ccode>\u003Cul>\u003C\u002Fcode> or \u003Ccode>\u003Ctable>\u003C\u002Fcode>) has the id recentcomments (use CSS \u003Ccode>.recentcomments\u003C\u002Fcode>).\u003Cbr \u002F>\n    List items (i.e. \u003Ccode>\u003Cli>\u003C\u002Fcode>) have the class recentcomments (use CSS \u003Ccode>#recentcomments\u003C\u002Fcode>).\u003C\u002Fp>\n","This plug-in provides a configurable widget to display recent comments with comment author avatars.",70,19894,"2012-08-10T10:54:00.000Z","3.4.2","2.5",[21,24],"http:\u002F\u002Fwww.sterling-adventures.co.uk\u002Fblog\u002F2009\u002F01\u002F01\u002Fcomments-with-avatars\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frecent-comments-with-avatars.zip",{"attackSurface":123,"codeSignals":154,"taintFlows":164,"riskAssessment":165,"analyzedAt":176},{"hooks":124,"ajaxHandlers":150,"restRoutes":151,"shortcodes":152,"cronEvents":153,"entryPointCount":28,"unprotectedCount":28},[125,132,136,141,144,147],{"type":126,"name":127,"callback":128,"priority":129,"file":130,"line":131},"filter","get_avatar","get_avatar_filter",15,"functions.php",59,{"type":126,"name":133,"callback":134,"priority":129,"file":130,"line":135},"avatar_defaults","avatar_defaults_filter",61,{"type":137,"name":138,"callback":139,"priority":129,"file":130,"line":140},"action","wp_enqueue_scripts","wp_enqueue_scripts_action",63,{"type":137,"name":142,"callback":139,"priority":129,"file":130,"line":143},"admin_enqueue_scripts",65,{"type":137,"name":145,"callback":145,"priority":129,"file":130,"line":146},"wp_footer",67,{"type":137,"name":148,"callback":145,"priority":129,"file":130,"line":149},"admin_footer",69,[],[],[],[],{"dangerousFunctions":155,"sqlUsage":156,"outputEscaping":158,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":163},[],{"prepared":28,"raw":28,"locations":157},[],{"escaped":28,"rawEcho":34,"locations":159},[160],{"file":130,"line":161,"context":162},259,"raw output",[],[],{"summary":166,"deductions":167},"Based on the static analysis, the \"echo1-consulting-inital-js-avatar\" v1.0 plugin exhibits a generally positive security posture. The absence of any detected AJAX handlers, REST API routes, shortcodes, or cron events significantly limits its attack surface, and importantly, all identified entry points (if any existed, which the data suggests are zero) are reported as having no authentication checks, indicating a potentially clean slate in terms of direct entry points.\n\nFurthermore, the code analysis shows no dangerous functions, no file operations, no external HTTP requests, and notably, 100% of SQL queries use prepared statements. The lack of any detected taint flows with unsanitized paths is also a strong positive indicator. However, a significant concern arises from the output escaping. With one total output identified and 0% properly escaped, this presents a clear risk of Cross-Site Scripting (XSS) vulnerabilities. The complete absence of nonce checks and capability checks, while not necessarily a direct vulnerability in itself without exposed entry points, suggests a lack of defensive programming practices that could become problematic if the plugin's functionality were to expand or be exposed in the future.\n\nThe vulnerability history further reinforces the perception of a secure plugin, with zero known CVEs and no past vulnerabilities recorded. This suggests a development process that has historically prioritized security or the plugin simply hasn't been a target. In conclusion, while the plugin benefits from a minimal attack surface and good SQL hygiene, the unescaped output represents a critical oversight that requires immediate attention. The lack of checks also indicates room for improvement in overall security hardening.",[168,171,174],{"reason":169,"points":170},"Unescaped output detected",8,{"reason":172,"points":173},"Missing nonce checks",5,{"reason":175,"points":173},"Missing capability checks","2026-03-16T23:19:09.099Z",{"wat":178,"direct":185},{"assetPaths":179,"generatorPatterns":181,"scriptPaths":182,"versionParams":183},[180],"\u002Fwp-content\u002Fplugins\u002Fecho1-consulting-inital-js-avatar\u002Fassets\u002Fjs\u002Finitial.min.js",[],[180],[184],"echo1-consulting-inital-js-avatar\u002Fassets\u002Fjs\u002Finitial.min.js?ver=1.0.0",{"cssClasses":186,"htmlComments":188,"htmlAttributes":189,"restEndpoints":198,"jsGlobals":199,"shortcodeOutput":201},[187],"e1ijsa",[],[190,191,192,193,194,195,196,197],"data-name","data-char-count","data-bg-color","data-text-color","data-font-size","data-font-weight","data-height","data-width",[],[200],"jQuery",[],{"error":203,"url":204,"statusCode":205,"statusMessage":206,"message":206},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fecho1-consulting-inital-js-avatar\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":28,"versions":208},[]]