[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqZk-moxt25Hd5GZ1thmIrEZOJ_GJH8Tj9yIWP9HoZ6k":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":38,"analysis":136,"fingerprints":249},"gym-studio-membership-management","Gym Studio Membership Management","1.2.0","Fitsoft","https:\u002F\u002Fprofiles.wordpress.org\u002Ffitsoft\u002F","\u003Cp>Gym Studio Membership Management creates editor buttons for embedding class calendar, schedule of classes, login area, chat, and membership checkout to a post or a page. From the “Membership Management” page you can also manage classes, instructors, members, and memberships. Now includes an optional floating widget for all pages.\u003C\u002Fp>\n\u003Cp>New Features:\u003Cbr \u002F>\n* Refresh block update when editing\u003Cbr \u002F>\n* Updated Calendar\u003C\u002Fp>\n\u003Cp>Major features in Gym Studio Membership Management include:\u003Cbr \u002F>\n* Add a monthly class calendar along with class details to the frontend.\u003Cbr \u002F>\n* Add a login area with member’s dashboard to your site for updating payment information.\u003Cbr \u002F>\n* Add a schedule of classes to your website.\u003Cbr \u002F>\n* When a member signs up a QR-barcode it is automatically generated for the member.\u003Cbr \u002F>\n* Automatically charge members by a selected timeframe and with a number of recurring payments.\u003Cbr \u002F>\n* Track payments and unpaid members. See who has paid for what and their payment history.\u003Cbr \u002F>\n* New Promocode system set promo start date, end date, number of usage and discounts by percentage, sales price or discounted value.\u003C\u002Fp>\n\u003Cp>PS: You’ll need a \u003Ca href=\"http:\u002F\u002Fnews.fitsoft.com\u002Fwordpress-plugin-setup\" rel=\"nofollow ugc\">Fitsoft Plugin password\u003C\u002Fa> for instruction to create one.  It is free to signup and use; Transaction fee applies on a business or a commercial site.\u003C\u002Fp>\n\u003Cp>Also if you find any bugs or request for us to add new features please email us at support@fitsoft.com. Please check welcome email for instruction and app download links.\u003C\u002Fp>\n","Gym Studio Membership Management adds class calendar, schedule of classes and membership checkout to your posts and pages.",90,21773,78,15,"2025-07-02T23:12:00.000Z","6.8.5","4.2.4","",[20,21,22,23,24],"class-calendar","class-schedule","member","membership-management","schedule-of-classes","https:\u002F\u002Fnews.fitsoft.com\u002Fwordpress-plugin-setup","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgym-studio-membership-management.1.2.0.zip",100,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"fitsoft",1,30,94,"2026-04-05T02:54:56.820Z",[39,60,79,99,120],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":27,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":18,"tags":53,"homepage":58,"download_link":59,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"memberfindme-login-connector","MembershipWorks Login Connector","6.4","MembershipWorks","https:\u002F\u002Fprofiles.wordpress.org\u002Fsourcefound\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fmembershipworks.com\u002F\" rel=\"nofollow ugc\">MembershipWorks\u003C\u002Fa> (formerly MemberFindMe) is a comprehensive website, membership management and event management solution for small to mid sized chambers, professional groups, associations and other member organizations.\u003C\u002Fp>\n\u003Cp>This plugin supplements the main MembershipWorks plugin (version 5.0 and up) to allow your members signing in to MembershipWorks to be simultaneously signed in as a WordPress user. This lets you use other plugins that rely on the WordPress user system.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Creates a new user account on WordPress (if account does not already exist) upon member login or signup\u003C\u002Fli>\n\u003Cli>Replaces Gravatar with the member’s MembershipWorks avatar\u003C\u002Fli>\n\u003Cli>Adds a login\u002Flogout widget\u003C\u002Fli>\n\u003C\u002Ful>\n","Allows members to sign in to MembershipWorks and as a WordPress user on your site.",800,30902,2,"2026-02-22T06:57:00.000Z","6.9.4","4.0",[54,55,56,23,57],"member-login","memberfindme","membership","membershipworks","https:\u002F\u002Fmembershipworks.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmemberfindme-login-connector.6.4.zip",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":47,"downloaded":68,"rating":28,"num_ratings":28,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":18,"tags":72,"homepage":77,"download_link":78,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wild-apricot-login","Wild Apricot Login","1.0.16","Wild Apricot","https:\u002F\u002Fprofiles.wordpress.org\u002Fwild-apricot\u002F","\u003Cp>The \u003Ca href=\"http:\u002F\u002Fwww.wildapricot.com\u002F\" rel=\"nofollow ugc\">Wild Apricot\u003C\u002Fa> Login plugin allows you to restrict content on your WordPress to your Wild Apricot members, and provide access to restricted Wild Apricot content such as member directories and member-only events. Any restricted Wild Apricot content – embedded using Wild Apricot widgets – can be accessed without further authentication.\u003C\u002Fp>\n\u003Cp>You can display a login button for single sign-on by adding a widget – installed along with the Wild Apricot Login plugin – to the header in your WordPress theme layout, or by inserting a shortcode in your page content. A shortcode can be added to a WordPress page to restrict WordPress content to Wild Apricot members. As well, you can use the plugin to add Wild Apricot membership levels as WordPress roles.\u003C\u002Fp>\n","Provides single sign-on service for Wild Apricot members to provide access to restricted Wild Apricot content.",16008,"2025-12-11T14:56:00.000Z","6.9.0","4.0.1",[73,74,75,23,76],"event-management","events","members","wild-apricot","http:\u002F\u002Fwww.wildapricot.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwild-apricot-login.1.0.17.zip",{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":87,"downloaded":88,"rating":27,"num_ratings":49,"last_updated":89,"tested_up_to":90,"requires_at_least":91,"requires_php":18,"tags":92,"homepage":96,"download_link":97,"security_score":98,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"administrator-access-to-pmpro-protected-content","Administrator Access to PMPro Protected Content","1.3","Thomas S","https:\u002F\u002Fprofiles.wordpress.org\u002Feighty20results\u002F","\u003Cp>By default Paid Memberships Pro will \u003Cem>not\u003C\u002Fem> let an administrator get access to a protected post or page without making the administrator a member of one of the membership levels that are required for that post\u002Fpage in the “Require Membership” checkboxes in the post\u002Fpage editor.\u003C\u002Fp>\n\u003Cp>This is contrary to what a traditional interpretation of the “Administrator” role represents for WordPress (or any user based security system). People expect the administrator\u002Froot account(s) on the system to have full access to administer and view the content on the site.\u003C\u002Fp>\n\u003Cp>This behavior also represents one of the frequent problems experienced when trying to use a WordPress front-end post or page editor; The expected content for the post\u002Fpage being edited either doesn’t show up, or is being redirected away from.\u003C\u002Fp>\n\u003Cp>This plugin will remove the PMPro access restrictions to content for any user assigned to the WordPress ‘administrator’ role.\u003C\u002Fp>\n\u003Cp>As of version 1.2, the same functionality has been extended to the PMPro [membership] short code.\u003Cbr \u002F>\nThis plugin should be used with caution!\u003C\u002Fp>\n\u003Ch3>Credit\u003C\u002Fh3>\n\u003Cp>This plugin uses \u003Ca href=\"https:\u002F\u002Fwww.freeiconspng.com\u002Fimg\u002F29108\" rel=\"nofollow ugc\">Unlock Hd Icon by Ahkâm\u003C\u002Fa> – Copyright (c) Ahkâm\u003Cbr \u002F>\nThis plugin uses the logo by \u003Ca href=\"https:\u002F\u002Fwww.paid-memberships-pro.com\u002F\" rel=\"nofollow ugc\">Paid Memberships Pro\u003C\u002Fa> – Copyright (c) Stranger Studios, LLC\u003C\u002Fp>\n\u003Ch3>v1.3\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>REFACTOR: Updated to signify support for latest WordPress releases\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>v1.2\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>ENHANCEMENT: Add check override when using [membership] short code\u003C\u002Fli>\n\u003Cli>BUG FIX: Didn’t guarantee false return when user isn’t logged in or not an admin\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>v1.1\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>BUG FIX: Didn’t prevent redirect(s) when accessing the Membership Account page\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>v1.0\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Initial release of plugin\u003C\u002Fli>\n\u003C\u002Ful>\n","Overrides the PMPro \"Require Membership\" settings and grants view access to any user assigned to the WordPress \"Administrator\" rol &hellip;",60,2535,"2020-09-16T20:02:00.000Z","5.5.18","4.8",[56,23,93,94,95],"page-editor","paid-memberships-pro","pmpro","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fadministrator-access-to-pmpro-protected-content","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadministrator-access-to-pmpro-protected-content.zip",85,{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":107,"downloaded":108,"rating":28,"num_ratings":28,"last_updated":109,"tested_up_to":110,"requires_at_least":111,"requires_php":112,"tags":113,"homepage":18,"download_link":118,"security_score":119,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"memberclicks-professional-authentication","MC Professional Authentication and User Sync","1.0.2","MemberClicks","https:\u002F\u002Fprofiles.wordpress.org\u002Fmemberclicks\u002F","\u003Cp>The MC Professional Authentication and User Sync plugin allows you to offer exclusive member content on your WordPress site by restricting access to some or all areas of your site. As the administrator, you have control over permissions with the flexibility to set content access based on the member types and group affiliations that are already set up within your MC Professional system.\u003C\u002Fp>\n\u003Cp>To log in to your restricted WordPress site, your members can utilize convenient single sign-on (SSO) with their regular MC Professional credentials and will be able to access specific content and pages based on your settings. You even can customize the WordPress site login screen. Additionally, the plugin enables you to sync user records across your MC Professional system and WordPress site to ensure you have one consistent source of truth for user authentication.\u003C\u002Fp>\n\u003Cp>The plugin reaches out to MemberClicks Professional servers using the domain and API credentials that you enter in the plugin settings page. The plugin uses standard OAuth2 protocols to authenticate members, and data is transferred over secure connections. You can find Terms of Use, Privacy Policy and other legal documents in the \u003Ca href=\"https:\u002F\u002Fmemberclicks.com\u002Flegal\u002F\" rel=\"nofollow ugc\">Legal Center\u003C\u002Fa>.\u003C\u002Fp>\n","Provides SSO (Single Sign-On) with MemberClicks Professional to restrict content based on member group. Sync user records for consistent access.",20,2758,"2024-11-01T15:44:00.000Z","6.6.5","6.6","7.2",[114,115,23,116,117],"mc-professional","memberclicks","sso","user-authentication","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmemberclicks-professional-authentication.1.0.2.zip",92,{"slug":23,"name":121,"version":122,"author":123,"author_profile":124,"description":125,"short_description":126,"active_installs":28,"downloaded":127,"rating":28,"num_ratings":28,"last_updated":128,"tested_up_to":129,"requires_at_least":130,"requires_php":131,"tags":132,"homepage":134,"download_link":135,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"Membership Management","1.3.3","Digitally Cultured","https:\u002F\u002Fprofiles.wordpress.org\u002Fdigitally-cultured\u002F","\u003Cp>Unlock the full potential of your organization with our Membership Management Plugin. Designed for professional organizations and non-profits, this feature-rich tool allows you to easily manage and organize your membership list. Keep track of member status, contact information, and more, all within the familiar WordPress environment. As your organization grows, our plugin scales with you, offering future features like member self-service options for updating information and dues payment. Simplify your membership management today.\u003C\u002Fp>\n","Empower your organization with our Membership Management Plugin for WordPress. Effortlessly maintain and track membership status, contact details, and &hellip;",1614,"2025-12-02T14:16:00.000Z","6.5.8","5.0","7.4",[133,23],"crm","https:\u002F\u002Fgithub.com\u002Fchrisjangl\u002Fmembership-management","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmembership-management.1.3.3.zip",{"attackSurface":137,"codeSignals":216,"taintFlows":238,"riskAssessment":239,"analyzedAt":248},{"hooks":138,"ajaxHandlers":208,"restRoutes":209,"shortcodes":210,"cronEvents":215,"entryPointCount":34,"unprotectedCount":28},[139,146,151,154,158,162,166,170,174,176,178,182,186,190,194,197,201,205],{"type":140,"name":141,"callback":142,"priority":143,"file":144,"line":145},"filter","block_categories","my_fitsoft_block_category",10,"block\\index.php",25,{"type":147,"name":148,"callback":149,"file":144,"line":150},"action","init","fitsoft_gym_studio_membership_block",76,{"type":147,"name":148,"callback":152,"file":153,"line":49},"fgsmm_fitsoftbtn_buttons","membership-management-buttons.php",{"type":140,"name":155,"callback":156,"file":153,"line":157},"mce_external_plugins","fgsmm_fitsoftbtn_add_buttons",8,{"type":140,"name":159,"callback":160,"file":153,"line":161},"mce_buttons","fgsmm_fitsoftbtn_register_buttons",9,{"type":147,"name":163,"callback":164,"file":165,"line":49},"admin_menu","fgsmm_fitsoft_plugin_setup_menu","membership-management-common.php",{"type":147,"name":163,"callback":167,"file":168,"line":169},"add_plugin_page","membership-management-options.php",18,{"type":147,"name":171,"callback":172,"file":168,"line":173},"admin_init","page_init",19,{"type":147,"name":163,"callback":167,"file":168,"line":175},51,{"type":147,"name":171,"callback":172,"file":168,"line":177},52,{"type":147,"name":148,"callback":179,"file":180,"line":181},"add_cors_http_header","membership-management.php",130,{"type":147,"name":183,"callback":184,"file":180,"line":185},"wp_head","fgsmm_fitsoft_dns_prefetch",140,{"type":147,"name":187,"callback":188,"file":180,"line":189},"admin_enqueue_scripts","fgsmm_enqueue",242,{"type":147,"name":191,"callback":192,"file":180,"line":193},"wp_enqueue_scripts","fgsmm_load_scripts",265,{"type":147,"name":191,"callback":195,"file":180,"line":196},"fgsmm_load_css",266,{"type":147,"name":198,"callback":199,"file":180,"line":200},"wp_footer","fgsmm_footer",371,{"type":147,"name":202,"callback":203,"file":180,"line":204},"admin_footer","fgsmm_admin_footer",373,{"type":147,"name":187,"callback":206,"file":180,"line":207},"fgsmm_enqueue_color_picker",375,[],[],[211],{"tag":212,"callback":213,"file":180,"line":214},"fitsoft-code","fgsmm_fitsoft_embedcode",154,[],{"dangerousFunctions":217,"sqlUsage":218,"outputEscaping":224,"fileOperations":28,"externalRequests":219,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":237},[],{"prepared":219,"raw":34,"locations":220},3,[221],{"file":168,"line":222,"context":223},1080,"$wpdb->query() with variable interpolation",{"escaped":225,"rawEcho":226,"locations":227},27,4,[228,231,233,235],{"file":165,"line":229,"context":230},31,"raw output",{"file":168,"line":232,"context":230},103,{"file":180,"line":234,"context":230},360,{"file":180,"line":236,"context":230},368,[],[],{"summary":240,"deductions":241},"The gym-studio-membership-management plugin v1.2.0 exhibits a generally strong security posture, with several positive indicators. The absence of known CVEs and a clean vulnerability history are significant strengths, suggesting a history of good security practices by the developers. The static analysis also reveals a low attack surface with no unprotected entry points, minimal SQL queries, and a high percentage of properly escaped output.  External HTTP requests are present but do not pose an immediate concern without further context.\n\nHowever, there are notable areas for improvement and potential underlying risks. The complete lack of nonce checks and capability checks across all analyzed entry points is a critical oversight. This means that any user, regardless of their role or permissions, could potentially trigger the plugin's functionalities, leading to unauthorized actions. While taint analysis shows no critical or high severity flows currently, the absence of checks means that if a vulnerability were introduced in the future, it could be easily exploited. The static analysis does not indicate any direct vulnerabilities, but the identified missing security controls are significant concerns that warrant immediate attention.",[242,244,246],{"reason":243,"points":143},"Missing Nonce Checks",{"reason":245,"points":143},"Missing Capability Checks",{"reason":247,"points":49},"External HTTP Requests Present","2026-03-16T21:22:57.150Z",{"wat":250,"direct":260},{"assetPaths":251,"generatorPatterns":254,"scriptPaths":255,"versionParams":258},[252,253],"\u002Fwp-content\u002Fplugins\u002Fgym-studio-membership-management\u002Fjs\u002Ffitsoftsettingopt-plugin.js","\u002Fwp-content\u002Fplugins\u002Fgym-studio-membership-management\u002Fcss\u002Ffitsoft-dnsprefetch.css",[],[256,257],"https:\u002F\u002Fadmin.fitsoft.com\u002Fjs\u002Flib\u002Fapp.all.a","https:\u002F\u002Fadmin.fitsoft.com\u002Fjs\u002Flib\u002Fapp.all.b",[259],"gym-studio-membership-management\u002Fjs\u002Ffitsoftsettingopt-plugin.js?ver=1.2.0",{"cssClasses":261,"htmlComments":263,"htmlAttributes":264,"restEndpoints":269,"jsGlobals":270,"shortcodeOutput":271},[262],"fsframeinfo",[],[265,266,267,268],"data-page-name","data-page-guid","data-page-default-height","data-isloader-on",[],[],[272],"\u003Cdiv id='fsframeinfo"]