[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBuYe7wy368x2qJZEsWH2EhZwEYP7afQ0Kcq6SF9cQJA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":16,"homepage":21,"download_link":22,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25,"vulnerabilities":26,"developer":27,"crawl_stats":24,"alternatives":35,"analysis":125,"fingerprints":241},"enhanced-buddypress-widgets","Enhanced BuddyPress Widgets","0.2.1","Boone Gorges","https:\u002F\u002Fprofiles.wordpress.org\u002Fboonebgorges\u002F","\u003Cp>This plugin adds two widgets to your WordPress MU\u002FBuddyPress installation: Groups and Members. Use them instead of the Groups and Members widgets that ship with BuddyPress. They provide the ability to select which of the three tabs – Newest, Active, or Popular – will be the widget’s default view.\u003C\u002Fp>\n\u003Cp>Version 0.2 of this plugin works only with BuddyPress 1.2. For earlier versions of BuddyPress, please download version 0.1 of the plugin.\u003C\u002Fp>\n\u003Cp>Developed for the CUNY Academic Commons. Visit http:\u002F\u002Fcommons.gc.cuny.edu to learn more about this Totally Kewl project.\u003C\u002Fp>\n","Provides enhanced version of BuddyPress's core Groups and Members widgets",10,14077,0,"2011-05-16T03:56:00.000Z","",[17,18,19,20],"buddypress","groups","members","widget","http:\u002F\u002Fdev.commons.gc.cuny.edu\u002F2009\u002F09\u002F07\u002Fnew-buddypress-plugin-enhanced-buddypress-widgets","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fenhanced-buddypress-widgets.zip",85,null,"2026-03-15T14:54:45.397Z",[],{"slug":28,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":30,"avg_security_score":31,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"boonebgorges",27,11620,88,1864,71,"2026-04-04T16:30:20.109Z",[36,54,73,89,106],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":11,"downloaded":44,"rating":45,"num_ratings":46,"last_updated":47,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":48,"homepage":51,"download_link":52,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":53},"bp-extend-widgets","BuddyPress Extend Widgets","1.0","Slava Abakumov","https:\u002F\u002Fprofiles.wordpress.org\u002Fslaffik\u002F","\u003Cp>After activating all current and possible future widgets will get extra BuddyPress specific options.\u003Cbr \u002F>\nYou will be able to select on which users profiles or groups pages you want to display this widget and on which – don’t.\u003C\u002Fp>\n\u003Cp>So you will get more flexibility in arranging your sidebars (or widget-zones).\u003C\u002Fp>\n","Provide all widgets with BuddyPress specific fields (conditional display logic)",6281,100,1,"2015-01-04T17:52:00.000Z",[17,49,18,19,50],"conditional","widgets","http:\u002F\u002Fovirium.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-extend-widgets.1.0.zip","2026-03-15T15:16:48.613Z",{"slug":55,"name":56,"version":57,"author":58,"author_profile":59,"description":60,"short_description":61,"active_installs":62,"downloaded":63,"rating":64,"num_ratings":11,"last_updated":65,"tested_up_to":66,"requires_at_least":67,"requires_php":15,"tags":68,"homepage":71,"download_link":72,"security_score":45,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":53},"shortcodes-for-buddypress","Wbcom Designs – Shortcodes & Elementor Widgets For BuddyPress","2.9.1","wbcomdesigns","https:\u002F\u002Fprofiles.wordpress.org\u002Fwbcomdesigns\u002F","\u003Cp>This plugin will add an extended feature to BuddyPress. It will use Shortcode for Listing Activity Streams, Members directory, and Groups directory on any post or page within the website.\u003C\u002Fp>\n\u003Cp>With our current update, we have added three widgets to display the activity stream, member directory, and group directory using Elementor.\u003C\u002Fp>\n\u003Cdiv class=\"embed-vimeo\" style=\"text-align: center;\">\u003Ciframe loading=\"lazy\" src=\"https:\u002F\u002Fplayer.vimeo.com\u002Fvideo\u002F554193567\" width=\"750\" height=\"422\" frameborder=\"0\" webkitallowfullscreen mozallowfullscreen allowfullscreen>\u003C\u002Fiframe>\u003C\u002Fdiv>\n\u003Ch3>THEME – WORDPRESS THEME WITH OUTSTANDING BUDDYPRESS SUPPORT\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fbuddyx\u002F\" rel=\"ugc\">FREE BuddyPress Theme: BuddyX\u003C\u002Fa> – Offers unique layouts with clean code and easy-to-customise options, giving you a whole new way to visualize BuddyPress.\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin generates shortcodes for Listing Activity Streams, Members, and Groups on any website post or page.",700,51623,92,"2025-09-22T06:44:00.000Z","6.8.5","5.0.0",[69,17,70,18,19],"activity","buddypress-shortcodes","https:\u002F\u002Fgithub.com\u002Fwbcomdesigns\u002Fshortcodes-for-buddypress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshortcodes-for-buddypress.2.9.1.zip",{"slug":74,"name":75,"version":76,"author":58,"author_profile":59,"description":77,"short_description":78,"active_installs":79,"downloaded":80,"rating":45,"num_ratings":46,"last_updated":81,"tested_up_to":66,"requires_at_least":82,"requires_php":83,"tags":84,"homepage":87,"download_link":88,"security_score":45,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":53},"birthday-widget-for-buddypress","Wbcom Designs – Birthday Widget for BuddyPress","2.4.0","\u003Cp>Transform your BuddyPress community with the Birthday Widget! Know the upcoming birthdays of your site’s members and help them celebrate their special day. A little effort to greet community members keeps the saying alive: “community that celebrates together stays together”.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Smart Birthday Display\u003C\u002Fstrong>\u003Cbr \u002F>\n* Show birthdays for all members, friends, or followers\u003Cbr \u002F>\n* Flexible time ranges: weekly, monthly, or unlimited\u003Cbr \u002F>\n* Today’s birthdays get special highlighting\u003Cbr \u002F>\n* Age display with customizable “Turning X” format\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Modern & Responsive Design\u003C\u002Fstrong>\u003Cbr \u002F>\n* Clean, minimal design that works with any theme\u003Cbr \u002F>\n* Mobile-first responsive layout\u003Cbr \u002F>\n* Smooth animations and hover effects\u003Cbr \u002F>\n* Optimized for performance with smart caching\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Flexible Configuration\u003C\u002Fstrong>\u003Cbr \u002F>\n* Multiple name display options (username, nickname, first name)\u003Cbr \u002F>\n* Customizable date formats\u003Cbr \u002F>\n* Optional emoji support\u003Cbr \u002F>\n* Send birthday wishes via private messages\u003C\u002Fp>\n\u003Cp>\u003Cstrong>NEW: Automatic Notifications\u003C\u002Fstrong>\u003Cbr \u002F>\n* Automatic birthday email greetings to members\u003Cbr \u002F>\n* Activity feed auto-posts for birthdays\u003Cbr \u002F>\n* BuddyPress notification support\u003Cbr \u002F>\n* Admin daily birthday summary email\u003Cbr \u002F>\n* Configurable send time and templates\u003C\u002Fp>\n\u003Cp>\u003Cstrong>NEW: Display Enhancements\u003C\u002Fstrong>\u003Cbr \u002F>\n* Zodiac sign display option\u003Cbr \u002F>\n* Confetti animation for celebrations\u003Cbr \u002F>\n* Centralized admin settings page\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Developer Friendly\u003C\u002Fstrong>\u003Cbr \u002F>\n* Theme-compatible styling using CSS inheritance\u003Cbr \u002F>\n* Smart asset loading (only loads when widget is active)\u003Cbr \u002F>\n* Shortcode support: \u003Ccode>[bp_birthdays]\u003C\u002Fcode>\u003Cbr \u002F>\n* Extensive filter and action hooks\u003Cbr \u002F>\n* WPCS compliant code\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Performance Optimized\u003C\u002Fstrong>\u003Cbr \u002F>\n* 30-minute smart caching system\u003Cbr \u002F>\n* Conditional asset loading\u003Cbr \u002F>\n* Minimal database queries\u003Cbr \u002F>\n* Zero Cumulative Layout Shift (CLS)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Accessibility Ready\u003C\u002Fstrong>\u003Cbr \u002F>\n* WCAG 2.1 compliant\u003Cbr \u002F>\n* Keyboard navigation support\u003Cbr \u002F>\n* Screen reader friendly\u003Cbr \u002F>\n* Reduced motion support\u003C\u002Fp>\n","Display upcoming birthdays of BuddyPress members with a beautiful, responsive widget that integrates seamlessly with any WordPress theme.",400,11141,"2026-01-22T05:13:00.000Z","5.0","7.4",[85,17,86,19,20],"birthdays","community","https:\u002F\u002Fwbcomdesigns.com\u002Fdownloads\u002Fbuddypress-birthdays\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbirthday-widget-for-buddypress.2.4.0.zip",{"slug":90,"name":91,"version":92,"author":93,"author_profile":94,"description":95,"short_description":96,"active_installs":45,"downloaded":97,"rating":98,"num_ratings":99,"last_updated":100,"tested_up_to":66,"requires_at_least":101,"requires_php":15,"tags":102,"homepage":15,"download_link":105,"security_score":45,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":53},"bp-local-avatars","BP Local Avatars","3.0","shanebp","https:\u002F\u002Fprofiles.wordpress.org\u002Fshanebp\u002F","\u003Cp>BP Local Avatars is a BuddyPress plugin.\u003C\u002Fp>\n\u003Cp>Do you have members or groups on your BuddyPress site who do not have an Avatar?\u003Cbr \u002F>\nAnd you do not want to show the generic default avatar?\u003Cbr \u002F>\nOr maybe you do not want each page view to include a lot of calls to gravatar.com to load avatars?\u003C\u002Fp>\n\u003Cul>\n\u003Cli>This plugin will create a Gravatar Identicon avatar, thumb and full versions, for any user who does not already have an Avatar, and save it locally.\u003C\u002Fli>\n\u003Cli>Supports user creation, user registration, user login, and Bulk Generation for user and groups.\u003C\u002Fli>\n\u003Cli>Uses the existing BuddyPress avatar directory structure.\u003C\u002Fli>\n\u003Cli>Conforms to the defined sizes for BuddyPress thumb and full avatars.\u003C\u002Fli>\n\u003Cli>Users can still upload an avatar via their profile.\u003C\u002Fli>\n\u003Cli>Groups can still upload an avatar via Group > Manage > Photo.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Usage:\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>Provides an option in wp-admin under:\u003Cbr \u002F>\nSettings -> Discussion > Default Avatar > BuddyPress Identicon (Generated and Stored Locally).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Select and Save. Otherwise this plugin will not do anything.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>After saving, you will see a link to ‘Bulk Generate’ avatars for all users and groups who do not have a local avatar. If a user already has their own Gravatar, it will save it locally.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>For more BuddyPress plugins, please visit \u003Ca href=\"https:\u002F\u002Fwww.philopress.com\u002F\" rel=\"nofollow ugc\">PhiloPress\u003C\u002Fa>\u003C\u002Fp>\n","A BuddyPress plugin that creates Gravatar avatars for any user or group without one, and stores them locally.",10578,82,7,"2025-04-19T17:32:00.000Z","4.0",[103,17,104,18,19],"avatars","gravatars","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-local-avatars.3.0.zip",{"slug":107,"name":108,"version":109,"author":110,"author_profile":111,"description":112,"short_description":113,"active_installs":114,"downloaded":115,"rating":45,"num_ratings":116,"last_updated":117,"tested_up_to":118,"requires_at_least":119,"requires_php":15,"tags":120,"homepage":123,"download_link":124,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":53},"bp-groups-suggestions","BP Groups Suggestions","2.1.0","lenasterg","https:\u002F\u002Fprofiles.wordpress.org\u002Flenasterg\u002F","\u003Cp>Adds “Suggested groups” functionality into BuddyPress groups.\u003Cbr \u002F>\nBy default, the plugin uses the user’s friends’s groups in order to suggest groups of the login user, but this can be extended through available filters.\u003Cbr \u002F>\nIt adds a “Suggested group” tab into the Groups Directory page, and also a widget “Suggested groups” is available.\u003Cbr \u002F>\nThe login user can hide groups from suggestion list, by pressing the “Remove group”, either through the widget,\u003Cbr \u002F>\nthe “Suggested groups” tab or by the group’s homepage. Also the login user can reset the hidden suggestion list.\u003Cbr \u002F>\nThe plugin uses various ‘filters’ so a developer can extend it, for example to include admins specified groups as suggested,\u003Cbr \u002F>\nor to exclude groups from suggestion list.\u003Cbr \u002F>\nTested up to: BuddyPress 11.0.0\u003C\u002Fp>\n\u003Cp>Special thanks goes to Brajesh Singh, whoes ‘BP Groups Suggest Widget’ (https:\u002F\u002Fbuddydev.com\u002Fplugins\u002Fbp-group-suggest\u002F) gave the idea for extending it to a full plugin.\u003C\u002Fp>\n\u003Cp>PLEASE: If you have any issues or it doesn’t work for you, please report in support forum. It doesn’t help anyone to mark “broken” without asking around. Thanks!\u003C\u002Fp>\n\u003Ch3>Notes\u003C\u002Fh3>\n\u003Cp>ideas.txt – contains ideas (brainstorming) which can improve the plugin. Feel free to build some of them.\u003Cbr \u002F>\nLicense.txt – contains the licensing details for this component.\u003C\u002Fp>\n","Adds  Suggested groups functionality into BuddyPress.",40,7205,2,"2024-02-22T15:08:00.000Z","6.2.9","4.6",[17,18,121,122],"suggested-groups","suggested-groups-widget","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbp-groups-suggestions\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-groups-suggestions.2.1.0.zip",{"attackSurface":126,"codeSignals":152,"taintFlows":227,"riskAssessment":228,"analyzedAt":240},{"hooks":127,"ajaxHandlers":148,"restRoutes":149,"shortcodes":150,"cronEvents":151,"entryPointCount":13,"unprotectedCount":13},[128,134,139,141,142,144],{"type":129,"name":130,"callback":131,"file":132,"line":133},"action","bp_init","enhanced_buddypress_widgets_init","enhanced-bp-widgets.php",33,{"type":129,"name":135,"callback":136,"file":137,"line":138},"widgets_init","anonymous","enhanced-buddypress-widgets-bp-functions.php",5,{"type":129,"name":135,"callback":136,"file":137,"line":140},6,{"type":129,"name":135,"callback":136,"file":137,"line":99},{"type":129,"name":135,"callback":136,"file":137,"line":143},8,{"type":129,"name":145,"callback":146,"priority":147,"file":137,"line":11},"plugins_loaded","bp_enhanced_widgets_init",15,[],[],[],[],{"dangerousFunctions":153,"sqlUsage":163,"outputEscaping":165,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":226},[154,157,159,161],{"fn":155,"file":137,"line":138,"context":156},"create_function","add_action('widgets_init', create_function('', 'return unregister_widget(\"BP_Core_Members_Widget\");'",{"fn":155,"file":137,"line":140,"context":158},"add_action('widgets_init', create_function('', 'return register_widget(\"BP_Enhanced_Members_Widget\")",{"fn":155,"file":137,"line":99,"context":160},"add_action('widgets_init', create_function('', 'return unregister_widget(\"BP_Groups_Widget\");') );",{"fn":155,"file":137,"line":143,"context":162},"add_action('widgets_init', create_function('', 'return register_widget(\"BP_Enhanced_Groups_Widget\");",{"prepared":13,"raw":13,"locations":164},[],{"escaped":13,"rawEcho":166,"locations":167},35,[168,170,172,174,176,178,179,181,182,183,184,186,187,189,190,192,193,195,197,199,201,203,205,207,209,211,213,215,216,217,219,220,222,223,225],{"file":137,"line":133,"context":169},"raw output",{"file":137,"line":171,"context":169},34,{"file":137,"line":173,"context":169},41,{"file":137,"line":175,"context":169},42,{"file":137,"line":177,"context":169},43,{"file":137,"line":33,"context":169},{"file":137,"line":180,"context":169},81,{"file":137,"line":45,"context":169},{"file":137,"line":45,"context":169},{"file":137,"line":45,"context":169},{"file":137,"line":185,"context":169},103,{"file":137,"line":185,"context":169},{"file":137,"line":188,"context":169},105,{"file":137,"line":188,"context":169},{"file":137,"line":191,"context":169},106,{"file":137,"line":191,"context":169},{"file":137,"line":194,"context":169},130,{"file":137,"line":196,"context":169},131,{"file":137,"line":198,"context":169},139,{"file":137,"line":200,"context":169},140,{"file":137,"line":202,"context":169},141,{"file":137,"line":204,"context":169},158,{"file":137,"line":206,"context":169},161,{"file":137,"line":208,"context":169},163,{"file":137,"line":210,"context":169},172,{"file":137,"line":212,"context":169},182,{"file":137,"line":214,"context":169},200,{"file":137,"line":214,"context":169},{"file":137,"line":214,"context":169},{"file":137,"line":218,"context":169},203,{"file":137,"line":218,"context":169},{"file":137,"line":221,"context":169},205,{"file":137,"line":221,"context":169},{"file":137,"line":224,"context":169},206,{"file":137,"line":224,"context":169},[],[],{"summary":229,"deductions":230},"The 'enhanced-buddypress-widgets' plugin, version 0.2.1, presents a mixed security posture. On the positive side, there are no recorded vulnerabilities (CVEs) and the plugin utilizes prepared statements for all SQL queries, which is an excellent practice. Furthermore, the static analysis reveals a seemingly small attack surface with no identified AJAX handlers, REST API routes, shortcodes, or cron events that are unprotected. Taint analysis also shows no critical or high-severity issues, suggesting a lack of obvious pathways for code injection or data manipulation.\n\nHowever, significant concerns arise from the code signals. The presence of the dangerous `create_function` function four times is a major red flag, as this function is deprecated and can be a source of security vulnerabilities if not handled with extreme care, especially in older PHP versions. More critically, 100% of output is not properly escaped. This indicates a high risk of Cross-Site Scripting (XSS) vulnerabilities, where unescaped data displayed to users could contain malicious scripts.\n\nThe absence of vulnerability history is generally good, implying past development has been relatively secure. However, combined with the critical code issues identified, this might suggest a lack of rigorous security testing or that vulnerabilities have simply not been discovered or reported yet. The overall conclusion is that while the plugin has a good foundation regarding SQL and a limited attack surface, the critical issues with `create_function` and unescaped output expose it to significant security risks, particularly XSS.",[231,234,236,238],{"reason":232,"points":233},"Dangerous function create_function used",12,{"reason":235,"points":147},"100% of output not properly escaped",{"reason":237,"points":143},"No nonce checks detected",{"reason":239,"points":99},"No capability checks detected","2026-03-16T23:34:27.320Z",{"wat":242,"direct":251},{"assetPaths":243,"generatorPatterns":246,"scriptPaths":247,"versionParams":248},[244,245],"\u002Fwp-content\u002Fplugins\u002Fenhanced-buddypress-widgets\u002Fcss\u002Fenhanced-buddypress-widgets.css","\u002Fwp-content\u002Fplugins\u002Fenhanced-buddypress-widgets\u002Fjs\u002Fenhanced-buddypress-widgets.js",[],[],[249,250],"enhanced-buddypress-widgets\u002Fcss\u002Fenhanced-buddypress-widgets.css?ver=","enhanced-buddypress-widgets\u002Fjs\u002Fenhanced-buddypress-widgets.js?ver=",{"cssClasses":252,"htmlComments":264,"htmlAttributes":265,"restEndpoints":277,"jsGlobals":278,"shortcodeOutput":280},[253,254,255,256,257,258,259,260,69,261,262,263],"members-list-options","ajax-loader","item-list","vcard","item-avatar","item-title","fn","item-meta","widget-error","groups-list-options","ajax-loader-groups",[],[266,267,268,269,270,271,272,273,274,275,276],"id=\"members-list-options\"","id=\"ajax-loader-members\"","id=\"newest-members\"","id=\"recently-active-members\"","id=\"popular-members\"","id=\"members-list\"","id=\"ajax-loader-groups\"","id=\"newest-groups\"","id=\"recently-active-groups\"","id=\"popular-groups\"","id=\"groups-list\"",[],[279],"window.bp_core_widget_members",[]]