[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2FBKgTNAUD1qU-d2fWVU3oGNzwU5IoQo-cyIPIh_joA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":14,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":36,"analysis":147,"fingerprints":249},"force-registration-field","Force User Field Registration","0.6","fergbrain","https:\u002F\u002Fprofiles.wordpress.org\u002Ffergbrain\u002F","\u003Cp>Forces new users to register additional fields. Available fields are:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>First Name\u003C\u002Fli>\n\u003Cli>Last Name\u003C\u002Fli>\n\u003Cli>Nickname\u003C\u002Fli>\n\u003Cli>AIM screen name\u003C\u002Fli>\n\u003Cli>Yahoo IM screen name\u003C\u002Fli>\n\u003Cli>Jabber\u002FGoogle Talk user name\u003C\u002Fli>\n\u003C\u002Ful>\n","Forces new users to register additional fields (such as first name and last name). Note: WordPress 2.5 or higher is definite required due to new erro &hellip;",20,12668,0,"","2.5.1","2.5",[18,19,20,21,22],"field","force","register","registration","user","http:\u002F\u002Fwww.andrewferguson.net\u002Fwordpress-plugins\u002Fforce-user-field-registration\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fforce-registration-field.0.6.zip",100,null,"2026-03-15T10:48:56.248Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":32,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},7,1260,89,30,86,"2026-04-04T10:37:40.105Z",[37,60,83,103,127],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":25,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":57,"download_link":58,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":59},"users-registered-list","Users Registration Date","1.0.1","Slava Abakumov","https:\u002F\u002Fprofiles.wordpress.org\u002Fslaffik\u002F","\u003Cp>The “Users Registration Date” plugin adds a new sortable “Registered” column to the users lists that you can see in wp-admin area.r\u003C\u002Fp>\n\u003Cp>You can sort users by this date in ascending (to see the oldest users first) and descending (the latest users first) order.\u003C\u002Fp>\n\u003Cp>The plugin honors global site date and time formats that you set on the Settings > General page.\u003C\u002Fp>\n\u003Ch3>Languages\u003C\u002Fh3>\n\u003Cp>You can translate the plugin into your language.\u003C\u002Fp>\n","New sortable \"Registered\" date column on the Users page in wp-admin area to see when each user has registered on a site.",2000,9143,4,"2025-12-30T09:39:00.000Z","6.9.4","3.3","5.6",[53,21,54,55,56],"registered-date","sort","users","users-list","https:\u002F\u002Fovirium.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fusers-registered-list.1.0.1.zip","2026-03-15T15:16:48.613Z",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":68,"downloaded":69,"rating":70,"num_ratings":71,"last_updated":72,"tested_up_to":73,"requires_at_least":74,"requires_php":75,"tags":76,"homepage":80,"download_link":81,"security_score":82,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":59},"show-user-registration-date","Show User Registration Date","1.0.0","Carlos Martínez Romero","https:\u002F\u002Fprofiles.wordpress.org\u002Fcarlosmr96\u002F","\u003Cp>“Show User Registration Date” is a small plugin that displays the user registered date in the table of the users section in the WordPress dashboard. It will be added as a column with the other data of each user.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Displays the user registered date at Users table\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin shows the registed date field in the table of the Users section in the WordPress dashboard.",1000,7267,76,5,"2023-02-23T20:50:00.000Z","6.1.10","4.0","5.2.4",[77,78,21,79,22],"display","registered","show","https:\u002F\u002Fcarlosmr.com\u002Fshow-user-registration-date","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshow-user-registration-date.zip",85,{"slug":84,"name":85,"version":86,"author":87,"author_profile":88,"description":89,"short_description":90,"active_installs":91,"downloaded":92,"rating":34,"num_ratings":93,"last_updated":94,"tested_up_to":95,"requires_at_least":96,"requires_php":14,"tags":97,"homepage":101,"download_link":102,"security_score":82,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":59},"security-protection","Security-Protection","2.3","webvitaly","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebvitaly\u002F","\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"http:\u002F\u002Fweb-profile.net\u002Fwordpress\u002Fplugins\u002Fsecurity-protection\u002F\" title=\"Security-Protection\" rel=\"nofollow ugc\">Security-Protection\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"http:\u002F\u002Fweb-profile.net\u002Fdonate\u002F\" title=\"Donate\" rel=\"nofollow ugc\">Donate\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"http:\u002F\u002Fweb-profile.net\u002Fwordpress\u002Fplugins\u002F\" title=\"WordPress plugins\" rel=\"nofollow ugc\">WordPress plugins\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Why humans should prove that they are humans by filling captchas? Lets bots prove that they are not bots with adding javascript to their user-agents!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Security-Protection blocks and stops brute-force attacks.\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsecurity-protection\u002Ffaq\u002F\" rel=\"ugc\">Want to read more how Security-Protection plugin works\u003C\u002Fa>?\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>no captcha\u003C\u002Fstrong>, because brute-force attacks is not users’ problem\u003C\u002Fli>\n\u003Cli>\u003Cstrong>no options\u003C\u002Fstrong>, because it is great to forget about brute-force attacks completely\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Plugin is easy to use: just install it and it just works.\u003C\u002Fp>\n\u003Cp>Important: \u003Cstrong>delete ‘admin’ username\u003C\u002Fstrong> if you have it on your site. More than 90% of brute-force attacks try to crack the ‘admin’ username.\u003C\u002Fp>\n\u003Cp>Few of the most commonly used and worst passwords. Do not use them or similar:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>123456\u003C\u002Fli>\n\u003Cli>p@s$w0rd\u003C\u002Fli>\n\u003Cli>qwerty\u003C\u002Fli>\n\u003Cli>qwe123\u003C\u002Fli>\n\u003Cli>admin123\u003C\u002Fli>\n\u003Cli>iloveyou\u003C\u002Fli>\n\u003Cli>letmein\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Useful:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpage-list\u002F\" title=\"list of pages with shortcodes\" rel=\"ugc\">“Page-list” – show list of pages with shortcodes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fiframe\u002F\" title=\"embed content\" rel=\"ugc\">“Iframe” – embed content\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fweb-profile.net\u002Fwordpress\u002Fplugins\u002F\" title=\"WordPress Pro plugins\" rel=\"nofollow ugc\">WordPress Pro plugins\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Protection from login, registration and reset-password brute-force attacks. No captcha.",400,15407,11,"2020-09-05T16:59:00.000Z","5.5.18","3.0",[98,99,100,20,21],"brute-force","bruteforce","login","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsecurity-protection\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsecurity-protection.2.3.zip",{"slug":104,"name":105,"version":106,"author":107,"author_profile":108,"description":109,"short_description":110,"active_installs":91,"downloaded":111,"rating":112,"num_ratings":113,"last_updated":114,"tested_up_to":115,"requires_at_least":116,"requires_php":14,"tags":117,"homepage":122,"download_link":123,"security_score":124,"vuln_count":47,"unpatched_count":125,"last_vuln_date":126,"fetched_at":59},"wp-register-profile-with-shortcode","WP Register Profile With Shortcode","3.6.3","aviplugins.com","https:\u002F\u002Fprofiles.wordpress.org\u002Favimegladon\u002F","\u003Cul>\n\u003Cli>This is a simple registration form in the widget. The form is responsive. \u003C\u002Fli>\n\u003Cli>just install the plugin and add the register widget in the sidebar. \u003C\u002Fli>\n\u003Cli>Change some ‘optional’ settings in \u003Ccode>Settings-> WP Register Settings\u003C\u002Fcode> and you are good to go. \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Shortcodes\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Use this \u003Cstrong>[rp_register_widget]\u003C\u002Fstrong> shortcode to display registration form in post or page.\u003C\u002Fli>\n\u003Cli>Use This shortcode to retrieve user data \u003Cstrong>[rp_user_data field=”first_name” user_id=”2″]\u003C\u002Fstrong>. user_id can be blank. if blank then the data is retrieve from currently loged in user.\u003C\u002Fli>\n\u003Cli>Use this \u003Cstrong>[rp_profile_edit]\u003C\u002Fstrong> shortcode for user profile page. Logged in usres can edit profile data from this page.\u003C\u002Fli>\n\u003Cli>Use this \u003Cstrong>[rp_update_password] shortcode to display Update Password form in your page.\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Other Optional Options\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Redirect users to a chosen page after successfull registration. Maybe to a thankyou page.\u003C\u002Fli>\n\u003Cli>Users can be logged in automatically after successful registration. Option can be enabled from admin panel.\u003C\u002Fli>\n\u003Cli>Enable password fields so that users can choose there own passwords. Otherwise password will be auto generated and mailed to user.\u003C\u002Fli>\n\u003Cli>Admin will get a notification email once a new user make registration in the site.\u003C\u002Fli>\n\u003Cli>Enable additional fields in the registration form like First Name, Last Name, Display Name, Website etc.\u003C\u002Fli>\n\u003Cli>Custom Registration\u002F Profile fields can be created in the \u003Ca href=\"https:\u002F\u002Fwww.aviplugins.com\u002Fwp-register-profile-pro\u002F\" rel=\"nofollow ugc\">PRO\u003C\u002Fa> version of the plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WP Register Profile PRO\u003C\u002Fh4>\n\u003Cp>The \u003Ca href=\"https:\u002F\u002Fwww.aviplugins.com\u002Fwp-register-profile-pro\u002F\" rel=\"nofollow ugc\">PRO\u003C\u002Fa> version of this plugin has additional features like.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Multiple registration forms can be created and each form can be assigned to different user \u003Cstrong>Roles\u003C\u002Fstrong>. So that when user make registration they are assigned to that perticular \u003Cstrong>Role\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Registration with support for adding additional custom fields.\u003C\u002Fli>\n\u003Cli>Custom registration fields can be sorted by \u003Cstrong>Drag & Drop\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>User Profile page with custom fields. Here users can update their profile data.\u003C\u002Fli>\n\u003Cli>Create file type fields in Registration and Profile forms. Users can upload files to their profile. Uploadable file types can be allowed form plugin settings page.\u003C\u002Fli>\n\u003Cli>Reset user password shortcode.\u003C\u002Fli>\n\u003Cli>User profile data can be displayed easily with the help of shortcodes.\u003C\u002Fli>\n\u003Cli>Support for user profile image upload. Profile image can be used as \u003Cstrong>Avatar\u003C\u002Fstrong>. If this is enabled then profile image will be used as user \u003Cstrong>Avatar\u003C\u002Fstrong> throughout the site. When user posts a comment his profile image will be displayed instead of the defalut WordPress \u003Cstrong>Avatar\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Subscription\u003C\u002Fstrong> option is available with the PRO version. Payment for subscription is managed by \u003Cstrong>WooCommerce\u003C\u002Fstrong> for ease of use. Users will be able to select subscription packages at the time of registration. etc\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can get it \u003Ca href=\"https:\u002F\u002Fwww.aviplugins.com\u002Fwp-register-profile-pro\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa> in \u003Cstrong>USD 2.00\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>Post your plugin related queries at \u003Ca href=\"https:\u002F\u002Fwww.aviplugins.com\u002Fsupport.php\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.aviplugins.com\u002Fsupport.php\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n","This is a simple registration form in the widget. just install the plugin and add the register widget in the sidebar. Thats it. :)",66421,70,13,"2025-07-08T12:05:00.000Z","6.8.5","2.0.2",[118,20,119,120,121],"profile","register-widget","responsive-user-registration","wp-register","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-register-profile-with-shortcode\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-register-profile-with-shortcode.3.6.3.zip",71,1,"2025-07-10 00:00:00",{"slug":128,"name":129,"version":130,"author":131,"author_profile":132,"description":133,"short_description":134,"active_installs":135,"downloaded":136,"rating":137,"num_ratings":125,"last_updated":138,"tested_up_to":115,"requires_at_least":139,"requires_php":140,"tags":141,"homepage":14,"download_link":146,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":59},"custom-user-registration-fields-tutor-lms","Custom User Registration Fields for Tutor LMS","1.3","UserElements","https:\u002F\u002Fprofiles.wordpress.org\u002Fuserelements\u002F","\u003Cp>Custom User Registration Fields for Tutor LMS extends your Tutor LMS registration process by allowing you to add custom fields for both student and instructor registrations. This plugin provides a simple admin interface to manage custom fields without any coding knowledge required.\u003C\u002Fp>\n\u003Ch3>How It Works\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Install and activate the plugin\u003C\u002Fli>\n\u003Cli>Navigate to Users \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Tutor LMS User Fields in your admin panel\u003C\u002Fli>\n\u003Cli>Add custom fields with labels and meta keys\u003C\u002Fli>\n\u003Cli>Fields automatically appear on registration forms\u003C\u002Fli>\n\u003Cli>User data is saved and displayed on profile pages\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Tutorials & Guides\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.userelements.com\u002Flist\u002Ftutor-lms-website-examples\u002F\" rel=\"nofollow ugc\">17 Awesome Websites Made with Tutor LMS\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.userelements.com\u002Ftutor-lms-shortcodes\u002F\" rel=\"nofollow ugc\">The Complete List of Tutor LMS Shortcodes and How to Use Them – Tutor LMS\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.userelements.com\u002Fsending-reminder-emails-to-inactive-students-tutor-lms\u002F\" rel=\"nofollow ugc\">Sending Reminder Emails to Inactive Students – Tutor LMS\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.userelements.com\u002Ftutor-lms-get-student-information-in-php\u002F\" rel=\"nofollow ugc\">Tutor LMS – Get Student Information in PHP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.userelements.com\u002Fremove-tutor-reviews\u002F\" rel=\"nofollow ugc\">How to Hide, Remove or Disable Reviews or Star Rating in Tutor LMS\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fuserelements.com\u002Fcreate-user-directory-elementor\u002F\" rel=\"nofollow ugc\">Create a User Directory with Elementor\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.userelements.com\u002Flist\u002Fbest-wordpress-lms-plugins\u002F\" rel=\"nofollow ugc\">Best WordPress LMS Plugins to Create and Sell Courses Online\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>More Plugins by UserElements\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.userelements.com\u002Fmightymenu-tutorlms\u002F\" rel=\"nofollow ugc\">Personalized User Menu for TutorLMS\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.userelements.com\u002Fwp-user-data\u002F\" rel=\"nofollow ugc\">WP User Data\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.userelements.com\u002Fuser-broadcast-email\u002F\" rel=\"nofollow ugc\">User Broadcast Email\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fproduct-table-for-elementor\" rel=\"ugc\">Elementor Product Table for WooCommerce\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For technical support, feature requests, or general questions, please visit userelements.com or create a support ticket in the WordPress.org plugin forum.\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Ch3>Admin Panel\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Go to \u003Ccode>Users\u003C\u002Fcode> -> \u003Ccode>Tutor LMS User Fields\u003C\u002Fcode> to manage custom fields.\u003C\u002Fli>\n\u003Cli>There are two tabs: \u003Ccode>Student Registration Fields\u003C\u002Fcode> and \u003Ccode>Instructor Registration Fields\u003C\u002Fcode>.\u003C\u002Fli>\n\u003Cli>Add new fields by filling in the \u003Ccode>Field Label\u003C\u002Fcode> and \u003Ccode>Meta Key\u003C\u002Fcode> and clicking \u003Ccode>Add Field\u003C\u002Fcode>.\u003C\u002Fli>\n\u003Cli>Remove fields by clicking the \u003Ccode>Remove\u003C\u002Fcode> button next to the respective field.\u003C\u002Fli>\n\u003Cli>Save changes by clicking the \u003Ccode>Save Changes\u003C\u002Fcode> button.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Frontend\u003C\u002Fh3>\n\u003Cp>Custom fields will automatically appear on the Tutor LMS registration forms for students and instructors.\u003C\u002Fp>\n\u003Ch3>Hooks and Functions\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Admin Menu:\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>Adds a submenu under the \u003Ccode>Users\u003C\u002Fcode> menu for plugin settings.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom CSS:\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>Enqueues custom CSS for the plugin settings page.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Settings Page:\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>Displays the settings page for managing custom fields.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User Meta:\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>Adds and updates custom user meta during registration and profile updates.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Profile Page:\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>Displays custom fields on the user profile page.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Registration Forms:\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>Adds custom fields to Tutor LMS registration forms for students and instructors.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GNU General Public License v2.0. See the \u003Ca href=\"http:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-2.0.html\" rel=\"nofollow ugc\">License URI\u003C\u002Fa> for more details.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Developed by \u003Ca href=\"http:\u002F\u002Fuserelements.com\u002F\" rel=\"nofollow ugc\">userelements\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support, please visit \u003Ca href=\"http:\u002F\u002Fuserelements.com\u002F\" rel=\"nofollow ugc\">userelements.com\u003C\u002Fa>.\u003C\u002Fp>\n","Add Custom User Registration Fields for Tutor LMS.",200,1049,60,"2025-08-23T06:55:00.000Z","6.0","7.4",[142,143,144,145],"registration-field","tutor","tutor-lms","user-field","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-user-registration-fields-tutor-lms.1.3.zip",{"attackSurface":148,"codeSignals":173,"taintFlows":189,"riskAssessment":235,"analyzedAt":248},{"hooks":149,"ajaxHandlers":169,"restRoutes":170,"shortcodes":171,"cronEvents":172,"entryPointCount":13,"unprotectedCount":13},[150,156,161,165],{"type":151,"name":152,"callback":153,"file":154,"line":155},"action","register_form","fergcorp_forceRegistrationField_addFields","fergcorp_forceRegistrationField.php",26,{"type":151,"name":157,"callback":158,"priority":159,"file":154,"line":160},"register_post","fergcorp_forceRegistrationField_checkFields",10,27,{"type":151,"name":162,"callback":163,"priority":159,"file":154,"line":164},"user_register","fergcorp_forceRegistrationField_updateFields",28,{"type":151,"name":166,"callback":167,"file":154,"line":168},"admin_menu","fergcorp_forceRegistrationField_optionsPage",29,[],[],[],[],{"dangerousFunctions":174,"sqlUsage":175,"outputEscaping":177,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":188},[],{"prepared":13,"raw":13,"locations":176},[],{"escaped":13,"rawEcho":71,"locations":178},[179,182,184,186,187],{"file":154,"line":180,"context":181},57,"raw output",{"file":154,"line":183,"context":181},82,{"file":154,"line":185,"context":181},117,{"file":154,"line":185,"context":181},{"file":154,"line":185,"context":181},[],[190,207,221],{"entryPoint":191,"graph":192,"unsanitizedCount":125,"severity":206},"fergcorp_forceRegistrationField_addFields (fergcorp_forceRegistrationField.php:108)",{"nodes":193,"edges":203},[194,198],{"id":195,"type":196,"label":197,"file":154,"line":185},"n0","source","$_POST[$thisValue]",{"id":199,"type":200,"label":201,"file":154,"line":185,"wp_function":202},"n1","sink","echo() [XSS]","echo",[204],{"from":195,"to":199,"sanitized":205},false,"medium",{"entryPoint":208,"graph":209,"unsanitizedCount":125,"severity":220},"fergcorp_forceRegistrationField_myOptionsSubpanel (fergcorp_forceRegistrationField.php:49)",{"nodes":210,"edges":218},[211,214],{"id":195,"type":196,"label":212,"file":154,"line":213},"$_POST",54,{"id":199,"type":200,"label":215,"file":154,"line":216,"wp_function":217},"update_option() [Settings Manipulation]",55,"update_option",[219],{"from":195,"to":199,"sanitized":205},"low",{"entryPoint":222,"graph":223,"unsanitizedCount":234,"severity":220},"\u003Cfergcorp_forceRegistrationField> (fergcorp_forceRegistrationField.php:0)",{"nodes":224,"edges":231},[225,226,227,229],{"id":195,"type":196,"label":212,"file":154,"line":213},{"id":199,"type":200,"label":215,"file":154,"line":216,"wp_function":217},{"id":228,"type":196,"label":197,"file":154,"line":185},"n2",{"id":230,"type":200,"label":201,"file":154,"line":185,"wp_function":202},"n3",[232,233],{"from":195,"to":199,"sanitized":205},{"from":228,"to":230,"sanitized":205},2,{"summary":236,"deductions":237},"The 'force-registration-field' plugin v0.6 exhibits a generally weak security posture despite the absence of known vulnerabilities. While the plugin boasts no documented CVEs and a clean vulnerability history, its static analysis reveals significant concerns. The most alarming finding is that 100% of its outputs are unescaped. This means that any data displayed to users, particularly if it originates from user input or external sources, is vulnerable to Cross-Site Scripting (XSS) attacks. Furthermore, the taint analysis identified three flows with unsanitized paths, indicating that data is not being properly validated or cleaned before use, which can lead to various injection vulnerabilities, although no critical or high severity issues were flagged in this specific analysis.  The lack of capability checks and nonce checks on its zero entry points is also a notable weakness, as it doesn't employ fundamental WordPress security measures for potential future additions.\n\nWhile the plugin's strength lies in its lack of known exploits and its use of prepared statements for its SQL queries, this is overshadowed by the critical risk of unescaped output and unsanitized data flows. The absence of any attack surface (AJAX, REST API, shortcodes) in this version is a positive, but it's crucial to recognize that this could change with future updates. The overall security posture is therefore concerning due to the presence of exploitable coding practices, even if no direct vulnerabilities have been identified yet. It's recommended to address the unescaped output and taint flow issues immediately.",[238,241,244,246],{"reason":239,"points":240},"Unescaped output detected (0% properly escaped)",12,{"reason":242,"points":243},"Taint flows with unsanitized paths detected (3 flows)",9,{"reason":245,"points":71},"Missing capability checks",{"reason":247,"points":71},"Missing nonce checks","2026-03-16T22:40:48.641Z",{"wat":250,"direct":255},{"assetPaths":251,"generatorPatterns":252,"scriptPaths":253,"versionParams":254},[],[],[],[],{"cssClasses":256,"htmlComments":258,"htmlAttributes":259,"restEndpoints":263,"jsGlobals":264,"shortcodeOutput":265},[257],"fergcorpForceRegistrationFieldAdditionalFields",[],[260,261,262],"name=\"additionalFields[]\"","id=\"fergcorpForceRegistrationFieldAdditionalFields\"","name=\"selectNone\"",[],[],[]]