[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkyJpOjNjmlOkWK9SPxD9XnT49cw6-KtD8FUh4tdKr6Y":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":37,"analysis":140,"fingerprints":188},"faces-of-users","Faces of Users","0.0.3","Matt McInvale","https:\u002F\u002Fprofiles.wordpress.org\u002Fmcinvale\u002F","\u003Cp>\u003Cstrong>Faces of Users\u003C\u002Fstrong> gives you a shortcode to display all of your registered users Gravatars. Current options include; sizing, displaying user names and default Gravatar.\u003C\u002Fp>\n\u003Col>\n\u003Cli>Install plugin\u003C\u002Fli>\n\u003Cli>Add [facesofusers] shortcode to your content\u003C\u002Fli>\n\u003Cli>Done!\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fbinarym.com\u002F2010\u002Ffaces-of-users-plugin\u002F\" rel=\"nofollow ugc\">Some examples and feature requests for Faces of Users on BinaryM.com\u003C\u002Fa>\u003C\u002Fp>\n","Display registered users Gravatars on a single page with shortcode.",10,2910,0,"2010-05-25T00:45:00.000Z","2.9.2","2.7","",[19,20,21,22,23],"fun","gravatars","shortcode","tacos","users","http:\u002F\u002Fbinarym.com\u002F2010\u002Ffaces-of-users-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffaces-of-users.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":34,"avg_patch_time_days":35,"trust_score":34,"computed_at":36},"mcinvale",5,1080,81,30,"2026-04-04T15:26:06.726Z",[38,61,81,103,123],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":17,"tags":53,"homepage":58,"download_link":59,"security_score":60,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"user-access-shortcodes","User Access Shortcodes","2.3","WP Darko","https:\u002F\u002Fprofiles.wordpress.org\u002Fspwebguy\u002F","\u003Cp>This is the simplest way of controlling who sees what in your posts\u002Fpages. This plugin allows you to restrict content to logged in users only (or guests, or by roles) with simple shortcodes. What you see is what you get, and it’s totally free.\u003C\u002Fp>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Cp>Show content only for Guests\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[UAS_guest]\nThis content can only be seen by guests.\n[\u002FUAS_guest]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Show content only for Registered\u002FLogged in users\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[UAS_loggedin]\nThis content can only be seen by logged in users.\n[\u002FUAS_loggedin]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Show content ony for specific roles\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[UAS_role roles=\"administrator, editor\"]\nThis content can only be seen by administrators and editors.\n[\u002FUAS_role]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Show content ony for specific users\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[UAS_specific ids=\"23, 127\"]\nThis content can only be seen by users with IDs 23 and 127.\n[\u002FUAS_specific]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Several extra parameters are available, please go to \u003Ca href=\"https:\u002F\u002Fwpdarko.com\u002Fsupport\u002Fget-started-with-the-user-access-shortcodes-plugin\u002F\" rel=\"nofollow ugc\">the plugin’s documentation\u003C\u002Fa> if you need more information on how to use this plugin.\u003C\u002Fp>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>Find help on \u003Ca href=\"https:\u002F\u002Fwpdarko.com\u002Fsupport\" rel=\"nofollow ugc\">our support platform\u003C\u002Fa> for this plugin (we’ll answer you fast, promise).\u003C\u002Fp>\n","The simplest way of controlling who sees what in your posts\u002Fpages. Restrict content to logged in users only (or guests, or by roles) with simple short …",1000,23406,98,13,"2026-01-29T19:32:00.000Z","6.9.4","3.6",[54,55,56,57,23],"access-shortcodes","logged","logged-in","user","https:\u002F\u002Fwpdarko.com\u002Fsupport\u002Fget-started-with-the-user-access-shortcodes-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuser-access-shortcodes.2.3.zip",100,{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":60,"downloaded":69,"rating":13,"num_ratings":13,"last_updated":70,"tested_up_to":51,"requires_at_least":71,"requires_php":17,"tags":72,"homepage":17,"download_link":77,"security_score":78,"vuln_count":79,"unpatched_count":13,"last_vuln_date":80,"fetched_at":28},"annuncifunebri-onoranza","AnnunciFunebri","4.8.3","pcantoni","https:\u002F\u002Fprofiles.wordpress.org\u002Fpcantoni\u002F","\u003Cp>This plugin allows you to display funeral announcements published on annuncifunebri.it directly on your website.\u003Cbr \u002F>\nNote: All images are loaded from www.annuncifunebri.it and are not stored on your server.\u003C\u002Fp>\n\u003Ch3>Installazione\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Carica i file del plugin nella cartella \u003Ccode>\u002Fwp-content\u002Fplugins\u002Fannuncifunebri-onoranza\u003C\u002Fcode>, o installa il plugin attraverso il menu nuovo plugin di WordPress.\u003C\u002Fli>\n\u003Cli>Attiva il plugin dalla schermata plugin\u003C\u002Fli>\n\u003Cli>Dal menu Annunci Funebri, inserisci l’#ID dell’impresa funebre che ti verrà fornito dallo staff di AnnunciFunebri ed eventualmente gli altri parametri di personalizzazione delle pagine utilizzate.\u003C\u002Fli>\n\u003C\u002Fol>\n","Display funeral announcements from annuncifunebri.it on your website for funeral homes using this service.",20916,"2026-02-23T11:16:00.000Z","4.0",[73,74,75,76,21],"annuncifunebri-it","funeral-home","page","post","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fannuncifunebri-onoranza.4.8.3.zip",99,1,"2025-12-12 16:04:52",{"slug":82,"name":83,"version":84,"author":85,"author_profile":86,"description":87,"short_description":88,"active_installs":89,"downloaded":90,"rating":60,"num_ratings":91,"last_updated":92,"tested_up_to":93,"requires_at_least":94,"requires_php":17,"tags":95,"homepage":101,"download_link":102,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"addfunc-adaptive-content","AddFunc Adaptive Content","2.0","Joe Rhoney","https:\u002F\u002Fprofiles.wordpress.org\u002Fjoerhoney\u002F","\u003Cp>With all of the new web enabled devices springing up in the market and with the wide range of screen sizes and data transfer speeds, a website can no longer serve the same content upon every request (not without some degree of limitation and\u002For traffic-loss).\u003C\u002Fp>\n\u003Cp>This lightweight plugin lets content writers and theme authors choose when WordPress should or shouldn’t show any give content item using shortcodes and quicktags or theme elements using functions. It uses \u003Ca href=\"http:\u002F\u002Fmobiledetect.net\u002F\" rel=\"nofollow ugc\">Mobile Detect\u003C\u002Fa> (a PHP script) to identify the website visitor’s device as either mobile, tablet or desktop, enabling you to allow or disallow content to be output. Use it to prevent large files such as images from outputting to devices that generally have a lower data transfer speed available to them (e.g. mobile devices). Serve more extensive copy and more elaborate userinterfaces to desktop devices and laptops. Target tablets to market a tablet oriented product or service. You can also detect iOS, iPhone, iPad, Android OS and Windows Mobile OS.\u003C\u002Fp>\n\u003Cp>Example of a shortcode: [notmobile]Write anything you want between these two tags and WordPress will only output it when the visitor is viewing your website with a desktop\u002Flaptop or tablet and not with a mobile device.[\u002Fnotmobile]\u003C\u002Fp>\n\u003Cp>Easily add these shortcodes using the Quicktags in Text view.\u003C\u002Fp>\n\u003Cp>All shortcodes also exist as functions (prefixed with aFAC_ for namespacing), which can be used in your theme as needed. See the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Faddfunc-adaptive-content\u002Ffaq\u002F\" rel=\"ugc\">FAQs\u003C\u002Fa> for more detail. Each function is a boolean and simply returns true or false.\u003C\u002Fp>\n","Adds functions, shortcodes & quicktags to empower WordPress users to have better control of when content is served, based on device.",50,2896,2,"2018-12-11T00:48:00.000Z","5.0.25","3.0.1",[96,97,98,99,100],"adaptive","adaptive-content","adaptive-function","adaptive-quicktags","adaptive-shortcode","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Faddfunc-adaptive-content","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faddfunc-adaptive-content.2.0.zip",{"slug":104,"name":105,"version":106,"author":107,"author_profile":108,"description":109,"short_description":110,"active_installs":89,"downloaded":111,"rating":112,"num_ratings":113,"last_updated":114,"tested_up_to":115,"requires_at_least":116,"requires_php":17,"tags":117,"homepage":121,"download_link":122,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"bp-xprofile-shortcode","BP XProfile Shortcode","1.0.1","TylerDigital","https:\u002F\u002Fprofiles.wordpress.org\u002Ftylerdigital\u002F","\u003Cp>Adds Shortcode for BuddyPress XProfile data\u003C\u002Fp>\n\u003Cp>For quick reference, here is a list of example shortcodes:\u003C\u002Fp>\n\u003Cp>Reference field by ID in case name changes:\u003Cbr \u002F>\n\u003Cstrong>[xprofile field=12]\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Output city using default user detection (currently displayed BP profile, fallback to author of current page\u002Fpost, fallback to currently logged in user):\u003Cbr \u002F>\n\u003Cstrong>[xprofile field=”City”]\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Output city for a specific user by ID or username:\u003Cbr \u002F>\n\u003Cstrong>[xprofile field=”City” user=20]\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Cstrong>[xprofile field=”City” user=”someusername”]\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Override the default user detection by specifying method:\u003Cbr \u002F>\nOutput city for the currently logged in user (blank if no user is logged in):\u003Cbr \u002F>\n\u003Cstrong>[xprofile field=”City” user=current]\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Output city for the author of the current page\u002Fpost being viewed:\u003Cbr \u002F>\n\u003Cstrong>[xprofile field=”City” user=author]\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Output city for the currently displayed BuddyPress profile:\u003Cbr \u002F>\n\u003Cstrong>[xprofile field=”City” user=displayed]\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Ftylerdigital.com\u002Fproducts\u002Fbp-xprofile-shortcode-plugin\u002F\" rel=\"nofollow ugc\">Learn more about BP XProfile Shortcode\u003C\u002Fa>\u003C\u002Fp>\n","Adds Shortcode for BuddyPress XProfile data",9039,60,4,"2015-04-25T00:24:00.000Z","3.9.40","3.5",[118,21,119,23,120],"buddypress","user-meta","xprofile","http:\u002F\u002Ftylerdigital.com\u002Flabs\u002Fbp-xprofile-shortcode","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-xprofile-shortcode.1.0.1.zip",{"slug":124,"name":125,"version":126,"author":127,"author_profile":128,"description":129,"short_description":130,"active_installs":11,"downloaded":131,"rating":60,"num_ratings":79,"last_updated":132,"tested_up_to":133,"requires_at_least":16,"requires_php":17,"tags":134,"homepage":138,"download_link":139,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"dob-easy-shortcoder","Dob Easy Shortcode","1.1","evgendob","https:\u002F\u002Fprofiles.wordpress.org\u002Fevgendob\u002F","\u003Cp>This plugin allow you to create any  number of shortcodeas, easily edit content and use it in posts and pages. You can use one shortcode inside other shortcode that allows you to build complex content systems.\u003C\u002Fp>\n\u003Cp>Leftside you will find Shortcodes menu. There you can add new shortcodes, edit current etc. Standart interface.\u003C\u002Fp>\n\u003Cp>For advanced users: In single editor you can also put shortcode content in div element and add class and additional styling to this element. That will help you to make code looks good in your design.\u003C\u002Fp>\n","DOB Shortcoder allows you to create any shortcode and easily modify it's content. No coding skills needed.",1822,"2012-05-31T15:35:00.000Z","3.3.2",[135,136,137],"functional","shortcodes","shortode","http:\u002F\u002Fwp-download-protect.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdob-easy-shortcoder.zip",{"attackSurface":141,"codeSignals":165,"taintFlows":177,"riskAssessment":178,"analyzedAt":187},{"hooks":142,"ajaxHandlers":157,"restRoutes":158,"shortcodes":159,"cronEvents":164,"entryPointCount":79,"unprotectedCount":13},[143,148,151,154],{"type":144,"name":145,"callback":146,"file":147,"line":26},"action","delete_user","reset_facesof_option","faces-of.php",{"type":144,"name":149,"callback":146,"file":147,"line":150},"edit_user_profile",86,{"type":144,"name":152,"callback":146,"file":147,"line":153},"profile_update",87,{"type":144,"name":155,"callback":146,"file":147,"line":156},"user_register",88,[],[],[160],{"tag":161,"callback":162,"file":147,"line":163},"facesofusers","facesof_users",19,[],{"dangerousFunctions":166,"sqlUsage":167,"outputEscaping":174,"fileOperations":13,"externalRequests":79,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":176},[],{"prepared":13,"raw":91,"locations":168},[169,172],{"file":147,"line":170,"context":171},40,"$wpdb->get_results() with variable interpolation",{"file":147,"line":173,"context":171},94,{"escaped":13,"rawEcho":13,"locations":175},[],[],[],{"summary":179,"deductions":180},"The \"faces-of-users\" plugin v0.0.3 exhibits a generally good security posture based on the provided static analysis.  The absence of critical or high severity taint flows, dangerous functions, file operations, and properly escaped output are significant strengths.  Furthermore, the lack of any recorded vulnerabilities in its history suggests a stable and well-maintained codebase. The plugin also boasts a very small attack surface, with only one shortcode as an entry point, and importantly, no unprotected entry points detected.\n\nHowever, there are areas for concern that prevent a perfect score. The plugin utilizes raw SQL queries without prepared statements, which is a significant risk. While the static analysis did not detect unsanitized paths or critical taint flows in this instance, un-prepared SQL queries are a common vector for SQL injection vulnerabilities if user input is ever incorporated indirectly or directly into these queries. The lack of nonce checks and capability checks on its single shortcode is also a notable weakness. While it's not an AJAX or REST API endpoint, shortcodes can still be triggered in various ways, and without proper authorization or nonce validation, they could potentially be exploited.\n\nIn conclusion, the plugin has a solid foundation with minimal known risks and a clean vulnerability history. The primary areas for improvement lie in addressing the use of raw SQL and implementing proper authorization and nonce checks for its shortcode. Addressing these would elevate its security significantly.",[181,183,185],{"reason":182,"points":11},"Raw SQL queries without prepared statements",{"reason":184,"points":32},"Missing nonce checks on shortcode",{"reason":186,"points":32},"Missing capability checks on shortcode","2026-03-17T01:27:40.470Z",{"wat":189,"direct":195},{"assetPaths":190,"generatorPatterns":192,"scriptPaths":193,"versionParams":194},[191],"\u002Fwp-content\u002Fplugins\u002Ffaces-of-users\u002Ffaces-of.css",[],[],[],{"cssClasses":196,"htmlComments":197,"htmlAttributes":198,"restEndpoints":200,"jsGlobals":201,"shortcodeOutput":202},[161],[],[199],"id=\"facesofusers\"",[],[],[203,204,205,206],"[facesofusers]","\u003Cdiv class=\"facesofusers\">","\u003Cimg src=\"http:\u002F\u002Fwww.gravatar.com\u002Favatar\u002F","\u003Ca href=\""]