[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFGxgaXAAjCxbTcOrjhMEjPft6tYTwxR3SJGlcBBrwUY":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":13,"vuln_count":14,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":47,"crawl_stats":36,"alternatives":50,"analysis":158,"fingerprints":343},"ko-fi-button","Ko-fi Button","1.3.10","koficommunity","https:\u002F\u002Fprofiles.wordpress.org\u002Fkoficommunity\u002F","\u003Cp>Ko-fi is a fast and friendly way to earn money from your blog, website or project.\u003C\u002Fp>\n\u003Cp>Create your free page at ko-fi.com in just a few minutes and link your PayPal or Stripe account to start receiving donations.\u003C\u002Fp>\n\u003Cp>Use the Plugin to add a Ko-fi button or donation panel to any widget area, sidebar or use the shortcode [kofi] to add a button to any page or post.\u003C\u002Fp>\n\u003Cp>Not sure where to start? \u003Ca href=\"https:\u002F\u002Fhelp.ko-fi.com\u002Fhc\u002Fen-us\u002Farticles\u002F115004002614-Adding-a-Ko-fi-Button-to-your-WordPress-site-or-blog\" rel=\"nofollow ugc\">Take a look at our guide!\u003C\u002Fa>\u003C\u002Fp>\n","Receive donations on your Ko-fi page with a button on your WordPress site.",5000,87139,100,1,"2025-12-12T01:46:00.000Z","6.9.4","4.6","5.6",[20,21,22,23,24],"donate-plugin","ko-fi","membership","monetization","paypal-donate","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fko-fi-button.1.3.10.zip",0,"2023-04-25 00:00:00","2026-03-15T15:16:48.613Z",[31],{"id":32,"url_slug":33,"title":34,"description":35,"plugin_slug":4,"theme_slug":36,"affected_versions":37,"patched_in_version":38,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":28,"updated_date":43,"references":44,"days_to_patch":46},"CVE-2023-2254","ko-fi-button-authenticated-administrator-stored-cross-site-scripting","Ko-fi Button \u003C= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting","The Ko-fi Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.",null,"\u003C=1.3.2","1.3.3","medium",4.4,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-01-22 19:56:02",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Faa13426a-2d4e-4268-bc0d-e496bc9e6f33?source=api-prod",273,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":13,"avg_patch_time_days":46,"trust_score":48,"computed_at":49},79,"2026-04-04T05:03:39.703Z",[51,73,92,115,139],{"slug":52,"name":53,"version":54,"author":55,"author_profile":56,"description":57,"short_description":58,"active_installs":59,"downloaded":60,"rating":13,"num_ratings":61,"last_updated":62,"tested_up_to":63,"requires_at_least":64,"requires_php":65,"tags":66,"homepage":70,"download_link":71,"security_score":72,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":29},"unlock-protocol","Unlock Protocol","4.0.2","julien51","https:\u002F\u002Fprofiles.wordpress.org\u002Fjulien51\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Funlock-protocol.com\u002F\" rel=\"nofollow ugc\">Unlock\u003C\u002Fa> is a protocol for memberships that lets any creator monetize their content permissionless.\u003C\u002Fp>\n\u003Cp>In order to become members, visitors may need to be using a web3-enabled wallet such as \u003Ca href=\"https:\u002F\u002Fmetamask.io\u002F\" rel=\"nofollow ugc\">MetaMask\u003C\u002Fa> or a web browser with an embedded wallet, such as \u003Ca href=\"https:\u002F\u002Fwww.opera.com\u002Fcrypto\" rel=\"nofollow ugc\">Opera\u003C\u002Fa>. They also need a balance of crypto-currency to purchase the memberships.\u003C\u002Fp>\n\u003Cp>The plugin enables “full-post” locking, or just block-level level locking, using the Gutemberg Editor.\u003C\u002Fp>\n\u003Cp>The plugin uses Unlock’s default checkout UI, which means it lets users who do not have wallet create an Unlock account or even pay using credit card, if your lock supports this.\u003C\u002Fp>\n\u003Ch3>Getting Started\u003C\u002Fh3>\n\u003Cp>If you’d like to add a lock to your site, start by [deploying your first lock]https:\u002F\u002Fapp.unlock-protocol.com\u002Flocks\u002Fcreate). We \u003Cem>strongly\u003C\u002Fem> recommend starting with a test network such as Goerli.\u003C\u002Fp>\n\u003Cp>While the lock is deploying, you should \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Funlock-protocol\u002F\" rel=\"ugc\">download this plugin\u003C\u002Fa> from the WordPress site. Then, from the administration of your WordPress.org website, in the \u003Ccode>Plugins\u003C\u002Fcode> section, click on the \u003Ccode>Add New button and then on the\u003C\u002Fcode>Upload Plugin` button to upload the plugin.\u003C\u002Fp>\n\u003Cp>Note: To allow new users to log in using their Ethereum wallet with a single click, make sure that \u003Cstrong>Settings > General > Anyone can register\u003C\u002Fstrong> (for single sites) or \u003Cstrong>Network Settings > Allow new registrations > User accounts\u003C\u002Fstrong> may be registered (for multisites) is enabled. Your existing users can link their wallets to their WordPress accounts regardless of this setting.\u003C\u002Fp>\n\u003Ch3>Writing locked stories\u003C\u002Fh3>\n\u003Cp>You can either choose to lock the whole post, using the post-level settings, or to lock specific Blocks in the UI with the Gutenberg Editor, for posts and pages.\u003C\u002Fp>\n\u003Cp>To add the Unlock Protocol block inside the page\u002Fpost please follow the below steps:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Click on Post -> Add New\u003C\u002Fli>\n\u003Cli>To add a block you just need to click on “+” in the editor.\u003C\u002Fli>\n\u003Cli>Enter Unlock Protocol in the search.\u003C\u002Fli>\n\u003Cli>Unlock Protocol block will be shown. Click on the block, the block gets added.\u003C\u002Fli>\n\u003Cli>You will be able to see block settings on the right side. From block settings, add at least one lock, select the right network and, enter its address.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Once your page or post includes the content you need, you can preview its content like any other WordPress post or page. We recommend the use of a web3 wallet which supports multiple accounts so that you can easily toggle between accounts which are already members and accounts which are not members yet!\u003C\u002Fp>\n\u003Ch3>Contributing\u003C\u002Fh3>\n\u003Cp>This plugin is, like all of the Unlock code, \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Funlock-protocol\u002Funlock-wordpress-plugin\" rel=\"nofollow ugc\">open source\u003C\u002Fa>. You’re encouraged to fork it and make any changes you’d like! If you believe these changes would be beneficial to others, we encourage you to also open a Pull Request so that we could add these to the main branch released on the wordpress.org website!\u003C\u002Fp>\n\u003Ch4>Local Development\u003C\u002Fh4>\n\u003Cp>To setup local development environment for the plugin using we recommend using \u003Ca href=\"https:\u002F\u002Flocalwp.com\u002F\" rel=\"nofollow ugc\">Localwp\u003C\u002Fa>. To get started, simply clone the repo from \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Funlock-protocol\u002Funlock-wordpress-plugin\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>The repo includes a \u003Ccode>unlock-wordpress-plugin\u003C\u002Fcode> which has the required \u003Ccode>.php\u003C\u002Fcode> files and in which asset files (javascript, CSS and images) are added at build time.\u003C\u002Fp>\n\u003Cp>You can package the whole plugin by using \u003Ccode>yarn run release\u003C\u002Fcode> and install it in your local WordPress instance. Alternatively, you can add a symbolic link in the local WordPress’s \u003Ccode>wp-content\u002Fplugins\u003C\u002Fcode> folder that points to the \u003Ccode>unlock-wordpress-plugin\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Ch4>Publishing the plugin\u003C\u002Fh4>\n\u003Cp>In order to update the plugin, check out the current subversion state with\u003C\u002Fp>\n\u003Cpre>\u003Ccode>svn co  https:\u002F\u002Fplugins.svn.wordpress.org\u002Funlock-protocol\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Then, from the GitHub repo clone, inside the \u003Ccode>assets\u003C\u002Fcode> folder, write\u003C\u002Fp>\n\u003Cpre>\u003Ccode>yarn run release\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>This will generate a zip file in dist directory, unzip that file and copy the content to trunk directory in svn repo and commit the changes into svn with\u003C\u002Fp>\n\u003Cpre>\u003Ccode>svn ci -m \"commit message\"\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Then, tag the new version (replace X and Y!) to release it:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>svn cp trunk tags\u002FX.Y\nsvn ci -m \"tagging version X.Y\"\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Additionally, please make sure you tag the version on Github:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>git tag -a X.Y -m \"tagging version X.Y\"\ngit push origin X.Y\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>And finally, create the release on Github’si UI\u003C\u002Fp>\n","This plugin lets authors add locks to their posts and pages so that only paying visitors can view their content.",70,12951,4,"2023-08-01T15:26:00.000Z","5.9.13","5.1","7.0",[67,22,23,68,69],"ethereum","paywall","unlock","https:\u002F\u002Fgithub.com\u002Funlock-protocol\u002Funlock-wordpress-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Funlock-protocol.4.0.2.zip",85,{"slug":74,"name":75,"version":76,"author":77,"author_profile":78,"description":79,"short_description":80,"active_installs":81,"downloaded":82,"rating":27,"num_ratings":27,"last_updated":83,"tested_up_to":84,"requires_at_least":18,"requires_php":85,"tags":86,"homepage":90,"download_link":91,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":29},"members-for-kofi","Members for Ko-fi","1.0.1","trudslev","https:\u002F\u002Fprofiles.wordpress.org\u002Ftrudslev\u002F","\u003Cp>Members for Ko-fi is a WordPress plugin that integrates with Ko-fi to manage WordPress users and roles based on Ko-fi webhooks. This plugin allows you to automate user role assignments, log donations (in a database table), and manage memberships seamlessly.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Automatically assign roles to users based on Ko-fi donations or memberships.\u003Cbr \u002F>\n– Log user actions, such as donations and role changes, in a dedicated database table (no file logging).\u003Cbr \u002F>\n– Lightweight debug logging to the PHP error log when WP_DEBUG is enabled.\u003Cbr \u002F>\n– Fully compatible with GDPR and WordPress privacy tools.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Use Cases:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Reward your Ko-fi supporters with exclusive access to content or features.\u003Cbr \u002F>\n– Automate user role management for subscription-based memberships.\u003Cbr \u002F>\n– Track and log user activity for better insights.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv3 or later. See the \u003Ca href=\"https:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-3.0.html\" rel=\"nofollow ugc\">GNU General Public License\u003C\u002Fa> for more details.\u003C\u002Fp>\n","Integrate with Ko-fi to manage WordPress users or roles via webhook.",10,253,"2025-09-06T11:34:00.000Z","6.8.5","7.4",[21,22,87,88,89],"roles","user-management","webhook","https:\u002F\u002Fgithub.com\u002Ftrudslev\u002Fmembers-for-kofi","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmembers-for-kofi.1.0.1.zip",{"slug":93,"name":94,"version":95,"author":96,"author_profile":97,"description":98,"short_description":99,"active_installs":100,"downloaded":101,"rating":102,"num_ratings":103,"last_updated":104,"tested_up_to":16,"requires_at_least":105,"requires_php":85,"tags":106,"homepage":111,"download_link":112,"security_score":113,"vuln_count":14,"unpatched_count":27,"last_vuln_date":114,"fetched_at":29},"members","Members – Membership & User Role Editor Plugin","3.2.19","Blair Williams","https:\u002F\u002Fprofiles.wordpress.org\u002Fsupercleanse\u002F","\u003Cp>Members is a roles and capabilities based WordPress membership plugin. It gives your users the ultimate member experience by giving you powerful tools to add roles and capabilities and assign them to your users.\u003C\u002Fp>\n\u003Cp>Members allows you to set permissions to restrict content on your site by providing a simple user interface (UI) for WordPress’ powerful roles and capabilities system, which has traditionally only been available to developers who know how to code this by hand.\u003C\u002Fp>\n\u003Ch3>Plugin Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Role Editor:\u003C\u002Fstrong> Allows you to edit, create, and delete roles as well as capabilities for these roles.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multiple User Roles:\u003C\u002Fstrong> Give one, two, or even more roles to any user.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Explicitly Deny Capabilities:\u003C\u002Fstrong> Deny specific capabilities to specific user roles.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Clone Roles:\u003C\u002Fstrong> Build a new role by cloning an existing role.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Content Permissions \u002F Restricted Content:\u003C\u002Fstrong> Protect content to determine which users (by role) have access to post content.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcodes:\u003C\u002Fstrong> Shortcodes to control who has access to content.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Widgets:\u003C\u002Fstrong> A login form widget and users widget to show in your theme’s sidebars.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Private Site:\u003C\u002Fstrong> You can make your site and its feed completely private if you want.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Plugin Integration:\u003C\u002Fstrong> Members is highly recommended by other WordPress developers. Many existing plugins integrate their custom roles and capabilities directly into it.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Seamless MemberPress Integration\u003C\u002Fh4>\n\u003Cp>If you’re looking to build a business out of your membership site by creating paid memberships there’s no better way than to \u003Ca href=\"https:\u002F\u002Fmemberpress.com\u002Fplans\u002Fpricing\u002F?utm_source=members_plugin&utm_medium=link&utm_campaign=readme&utm_content=integration_1\" rel=\"nofollow ugc\">use MemberPress\u003C\u002Fa>. Members and \u003Ca href=\"https:\u002F\u002Fmemberpress.com\u002Fplans\u002Fpricing\u002F?utm_source=members_plugin&utm_medium=link&utm_campaign=readme&utm_content=integration_2\" rel=\"nofollow ugc\">MemberPress\u003C\u002Fa> work together to provide the ultimate member experience and will help you start and profit from your amazing WordPress membership sites!\u003C\u002Fp>\n\u003Ch4>All Add-ons are now included\u003C\u002Fh4>\n\u003Cp>Members now includes ALL of it’s add-ons completely free of charge! Here are some of the awesome features they add to Members:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Block Permissions:\u003C\u002Fstrong> Allows site owners to hide or show blocks based on user logged-in status, user role, or capability.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy Caps:\u003C\u002Fstrong> Creates additional capabilities for control over WordPressâ€™ privacy and personal data features (GDPR).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Admin Access:\u003C\u002Fstrong> Allows site administrators to control which users have access to the WordPress admin via role.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Core Create Caps:\u003C\u002Fstrong> Adds the create_posts and create_pages caps to posts\u002Fpages to separate them from their edit_* counterparts, providing more flexible editing capabilities.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Categories and Tag Caps:\u003C\u002Fstrong> The Category and Tag Caps add-on creates custom capabilities for the core category and post tag taxonomies. This allows site owners to have precise control over who can manage, edit, delete, or assign categories\u002Ftags.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Role Levels:\u003C\u002Fstrong> Exposes the old user levels system, which fixes the WordPress author drop-down bug when users don’t have a role with one of the assigned levels.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Role Hierarchy:\u003C\u002Fstrong> Creates a hierarchical roles system.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>ACF Integration:\u003C\u002Fstrong> Creates custom capabilities for the Advanced Custom Fields (ACF) plugin for managing with the Members plugin.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>EDD Integration:\u003C\u002Fstrong> Integrates the Easy Digital Downloads plugin capabilities into the Members plugin’s role manager.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>GiveWP Integration:\u003C\u002Fstrong> Integrates the GiveWP and GiveWP Recurring Donations plugin capabilities into the Members plugin’s role manager.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Meta Box Integration:\u003C\u002Fstrong> Integrates the Meta Box plugin capabilities into the Members plugin’s role manager.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WooCommerce Integration:\u003C\u002Fstrong> Integrates the WooCommerce plugin capabilities into the Members plugin’s role manager.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For more info, visit the \u003Ca href=\"https:\u002F\u002Fmembers-plugin.com\u002F?utm_source=members_plugin&utm_medium=link&utm_campaign=readme&utm_content=learn_more\" rel=\"nofollow ugc\">Members plugin home page\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Like this plugin?\u003C\u002Fh3>\n\u003Cp>The Members plugin is a massive project with 1,000s of lines of code to maintain. A major update can take weeks or months of work. We don’t make any money directly from this plugin while other, similar plugins charge substantial fees to even download them or get updates. Please consider helping the cause by:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmemberpress.com\u002F?utm_source=members_plugin&utm_medium=link&utm_campaign=readme&utm_content=memberpress_upgrade\" rel=\"nofollow ugc\">Adding MemberPress\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fmembers\u002Freviews\u002F?filter=5#new-post\" rel=\"ugc\">Rating the plugin\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>If you need plugin support from us, you can \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fmembers\u002F\" rel=\"ugc\">visit our support page\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Plugin Development\u003C\u002Fh3>\n\u003Cp>If you’re a theme author, plugin author, or just a code hobbyist, you can follow the development of this plugin on it’s \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcaseproof\u002Fmembers\" rel=\"nofollow ugc\">GitHub repository\u003C\u002Fa>.\u003C\u002Fp>\n","The best WordPress membership and user role editor plugin. User Roles & Capabilities editor helps you restrict content in just a few clicks.",300000,6754890,98,1242,"2026-02-13T16:00:00.000Z","6.0",[107,108,109,110,87],"access","capabilities","memberships","permissions","https:\u002F\u002Fmembers-plugin.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmembers.3.2.19.zip",99,"2024-12-10 00:00:00",{"slug":116,"name":117,"version":118,"author":119,"author_profile":120,"description":121,"short_description":122,"active_installs":123,"downloaded":124,"rating":125,"num_ratings":126,"last_updated":127,"tested_up_to":16,"requires_at_least":128,"requires_php":65,"tags":129,"homepage":134,"download_link":135,"security_score":136,"vuln_count":137,"unpatched_count":27,"last_vuln_date":138,"fetched_at":29},"ultimate-member","Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin","2.11.2","Ultimate Member","https:\u002F\u002Fprofiles.wordpress.org\u002Fultimatemember\u002F","\u003Ch4>User Profile & Membership Plugin for WordPress\u003C\u002Fh4>\n\u003Cp>The ultimate user profile & membership plugin for WordPress. The plugin makes it a breeze for users to sign-up and become members of your website. The plugin allows you to add beautiful user profiles to your site and is designed for creating advanced online communities and membership sites. Lightweight and highly extendible, Ultimate Member will enable you to create almost any type of site where users can join and become members with absolute ease.\u003C\u002Fp>\n\u003Ch4>Features of the plugin include:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Front-end user profiles\u003C\u002Fli>\n\u003Cli>Front-end user registration\u003C\u002Fli>\n\u003Cli>Front-end user login\u003C\u002Fli>\n\u003Cli>Custom form fields\u003C\u002Fli>\n\u003Cli>Conditional logic for form fields\u003C\u002Fli>\n\u003Cli>Drag and drop form builder\u003C\u002Fli>\n\u003Cli>User account page\u003C\u002Fli>\n\u003Cli>Custom user roles\u003C\u002Fli>\n\u003Cli>Member directories\u003C\u002Fli>\n\u003Cli>User emails\u003C\u002Fli>\n\u003Cli>Content restriction\u003C\u002Fli>\n\u003Cli>Conditional nav menus\u003C\u002Fli>\n\u003Cli>Show author posts & comments on user profiles\u003C\u002Fli>\n\u003Cli>Developer friendly with dozens of actions and filters\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Read about all of the plugin’s features at \u003Ca href=\"https:\u002F\u002Fultimatemember.com\" rel=\"nofollow ugc\">Ultimate Member\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Paid Extensions\u003C\u002Fh4>\n\u003Cp>Ultimate Member has a range of extensions that allow you to extend the power of the plugin. You can purchase all of these extensions at a significant discount with one of our \u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">paid plans\u003C\u002Fa> or you can purchase extensions individually.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fzapier\u002F\" rel=\"nofollow ugc\">Zapier\u003C\u002Fa> – Allow to integrate the Zapier popular apps with Ultimate Member\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fstripe\u002F\" rel=\"nofollow ugc\">Stripe\u003C\u002Fa> – Sell paid memberships to access your website via Stripe subscriptions\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fuser-notes\u002F\" rel=\"nofollow ugc\">User Notes\u003C\u002Fa> – Allow users to create public and private notes from their profile\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fprofile-tabs\u002F\" rel=\"nofollow ugc\">Profile Tabs\u003C\u002Fa> – Allow to add the custom tabs to profiles\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fuser-locations\u002F\" rel=\"nofollow ugc\">User Locations\u003C\u002Fa> – Allow to display users on a map on the member directory page and allow users to add their location via their profile\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Funsplash\u002F\" rel=\"nofollow ugc\">Unsplash\u003C\u002Fa> – Allow users to select a profile cover photo from \u003Ca href=\"https:\u002F\u002Funsplash.com\u002F\" rel=\"nofollow ugc\">Unsplash\u003C\u002Fa> from their profile\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fuser-bookmarks\u002F\" rel=\"nofollow ugc\">User Bookmarks\u003C\u002Fa> – Allow users to bookmark content from your website\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fuser-photos\u002F\" rel=\"nofollow ugc\">User Photos\u003C\u002Fa> – Allow users to upload photos to their profile\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fgroups\u002F\" rel=\"nofollow ugc\">Groups\u003C\u002Fa> – Allow users to create and join groups around shared topics, interests etc.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fprivate-content\u002F\" rel=\"nofollow ugc\">Private Content\u003C\u002Fa> – Display private content to logged in users that only they can access\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fuser-tags\u002F\" rel=\"nofollow ugc\">User Tags\u003C\u002Fa> – Lets you add a user tag system to your website\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fsocial-activity\u002F\" rel=\"nofollow ugc\">Social Activity\u003C\u002Fa> – Let users create public wall posts & see the activity of other users\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fwoocommerce\u002F\" rel=\"nofollow ugc\">WooCommerce\u003C\u002Fa> – Allow you to integrate WooCommerce with Ultimate Member\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fprivate-messages\u002F\" rel=\"nofollow ugc\">Private Messages\u003C\u002Fa> – Add a private messaging system to your site & allow users to message each other\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Ffollowers\u002F\" rel=\"nofollow ugc\">Followers\u003C\u002Fa> – Allow users to follow each other on your site and protect their profile information\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Freal-time-notifications\u002F\" rel=\"nofollow ugc\">Real-time Notifications\u003C\u002Fa> – Add a notifications system to your site so users can receive real-time notifications\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fsocial-login\u002F\" rel=\"nofollow ugc\">Social Login\u003C\u002Fa> – Let users register & login to your site via Facebook, Twitter, G+, LinkedIn, Instagram and Vkontakte (VK.com)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fbbpress\u002F\" rel=\"nofollow ugc\">bbPress\u003C\u002Fa> – With the bbPress extension you can beautifully integrate Ultimate Member with bbPress\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fmailchimp\u002F\" rel=\"nofollow ugc\">MailChimp\u003C\u002Fa> – Allow users to subscribe to your MailChimp lists when they signup on your site and sync user meta to MailChimp\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fuser-reviews\u002F\" rel=\"nofollow ugc\">User Reviews\u003C\u002Fa> – Allow users to rate & review each other using a 5 star rate\u002Freview system\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fverified-users\u002F\" rel=\"nofollow ugc\">Verified Users\u003C\u002Fa> – Add a user verification system to your site so user accounts can be verified\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fmycred\u002F\" rel=\"nofollow ugc\">myCRED\u003C\u002Fa> – With the myCRED extension you can integrate Ultimate Member with the popular myCRED points management plugin\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fnotices\u002F\" rel=\"nofollow ugc\">Notices\u003C\u002Fa> – Alert users to important information using conditional notices\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fprofile-completeness\u002F\" rel=\"nofollow ugc\">Profile Completeness\u003C\u002Fa> – Encourage or force users to complete their profiles with the profile completeness extension\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Ffriends\u002F\" rel=\"nofollow ugc\">Friends\u003C\u002Fa> – Allows users to become friends by sending & accepting\u002Frejecting friend requests\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Free Extensions\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fjobboardwp\u002F\" rel=\"nofollow ugc\">JobsBoardWP\u003C\u002Fa> – This free extension integrates Ultimate Member with the job board plugin \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjobboardwp\" rel=\"ugc\">JobBoardWP\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fforumwp\u002F\" rel=\"nofollow ugc\">ForumWP\u003C\u002Fa> – This free extension integrates Ultimate Member with the forum plugin \u003Ca href=\"https:\u002F\u002Fforumwpplugin.com\" rel=\"nofollow ugc\">ForumWP\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fterms-conditions\u002F\" rel=\"nofollow ugc\">Terms & Conditions\u003C\u002Fa> – Add a terms and condition checkbox to your registration forms & require users to agree to your T&Cs before registering on your site.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fgoogle-recaptcha\u002F\" rel=\"nofollow ugc\">Google reCAPTCHA\u003C\u002Fa> – Stop bots on your registration & login forms with Google reCAPTCHA\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Fextensions\u002Fonline-users\u002F\" rel=\"nofollow ugc\">Online Users\u003C\u002Fa> – Display what users are online with this extension\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Theme\u003C\u002Fh4>\n\u003Cp>Our official \u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Ftheme\u002F\" rel=\"nofollow ugc\">theme\u003C\u002Fa> is purpose built for websites that have logged in and out users. The \u003Ca href=\"https:\u002F\u002Fultimatemember.com\u002Ftheme\u002F\" rel=\"nofollow ugc\">theme\u003C\u002Fa> has deep integration with Ultimate Member plugin and the extensions, different header designs for logged-in\u002Fout users and works alongside the Beaver Builder and Elementor page builders.\u003C\u002Fp>\n\u003Ch4>Our other plugins\u003C\u002Fh4>\n\u003Cp>In addition to Ultimate Member, we also have two other plugins: \u003Ca href=\"https:\u002F\u002Fforumwpplugin.com\u002F\" rel=\"nofollow ugc\">ForumWP\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjobboardwp\" rel=\"ugc\">JobBoardWP\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>ForumWP\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fforumwpplugin.com\u002F\" rel=\"nofollow ugc\">ForumWP\u003C\u002Fa> is a forum plugin which adds an online forum to your website, allowing users to create topics and write replies. Forums are a great way to build and grow an online community.\u003C\u002Fp>\n\u003Ch4>JobBoardWP\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjobboardwp\" rel=\"ugc\">JobBoardWP\u003C\u002Fa> is a job board plugin which adds a modern job board to your website. Display job listings and allow employers to submit and manage jobs all from the front-end.\u003C\u002Fp>\n\u003Ch4>Development * Translations\u003C\u002Fh4>\n\u003Cp>If you’re a developer and would like to contribute to the source code of the plugin you can do so via our \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fultimatemember\u002Fultimatemember\" rel=\"nofollow ugc\">GitHub Repository\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Want to add a new language to Ultimate Member? Great! You can contribute via \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fultimate-member\" rel=\"nofollow ugc\">translate.wordpress.org\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>If you are a developer and you need to know the list of UM Hooks, make this via our \u003Ca href=\"https:\u002F\u002Fdocs.ultimatemember.com\u002Farticle\u002F1324-hooks-list\" rel=\"nofollow ugc\">Hooks Documentation\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fultimatemember.github.io\u002Fultimatemember\u002Fhooks\u002F\" rel=\"nofollow ugc\">Hooks Documentation v2\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>If you are a developer and you need to know the structure of our code, make this via our \u003Ca href=\"https:\u002F\u002Fultimatemember.github.io\u002Fultimatemember\u002Fphpdoc\u002F\" rel=\"nofollow ugc\">Documentation API\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Documentation & Support\u003C\u002Fh4>\n\u003Cp>Got a problem or need help with Ultimate Member? Head over to our \u003Ca href=\"http:\u002F\u002Fdocs.ultimatemember.com\u002F\" rel=\"nofollow ugc\">documentation\u003C\u002Fa> and perform a search of the knowledge base. If you can’t find a solution to your issue then you can create a topic on the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fultimate-member\" rel=\"ugc\">support forum\u003C\u002Fa>.\u003C\u002Fp>\n","Membership & community plugin with user profiles, registration & login, member directories, content restriction, user roles and much more.",200000,12785521,88,1445,"2026-02-10T13:30:00.000Z","6.2",[130,131,22,132,133],"community","member","user-profile","user-registration","http:\u002F\u002Fultimatemember.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fultimate-member.2.11.2.zip",76,68,"2026-02-17 00:00:00",{"slug":140,"name":141,"version":142,"author":143,"author_profile":144,"description":145,"short_description":146,"active_installs":147,"downloaded":148,"rating":149,"num_ratings":150,"last_updated":151,"tested_up_to":16,"requires_at_least":105,"requires_php":85,"tags":152,"homepage":154,"download_link":155,"security_score":136,"vuln_count":156,"unpatched_count":27,"last_vuln_date":157,"fetched_at":29},"wp-user-avatar","Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress","4.16.12","properfraction","https:\u002F\u002Fprofiles.wordpress.org\u002Fproperfraction\u002F","\u003Ch4>Modern WordPress Membership Plugin for Ecommerce, Digital Downloads, User Profile, Registration & Login Form\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">ProfilePress\u003C\u002Fa> is a powerful ecommerce and paid membership plugin for accepting one-time and recurring payments, selling subscriptions and digital products or digital downloads (downloadable files) via Bank Transfer, Stripe, PayPal, RazorPay, Mollie & Paystack, paywall & restrict content and control user access.\u003C\u002Fp>\n\u003Cp>ProfilePress is the best Stripe (Credit Card), PayPal, RazorPay, Paystack & Mollie payment forms and WooCommerce membership plugin for to quickly accept payments, sell memberships and provide your users the ultimate member experience.\u003C\u002Fp>\n\u003Cp>ProfilePress lets you create beautiful user profiles, member directories, frontend login, and user registration forms, member password reset and edit profile forms.\u003C\u002Fp>\n\u003Cp>Our Drag-and-Drop form builder makes building forms easy. It is the perfect solution for creating online communities and membership sites where users can register or signup to become members.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Website\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Addons\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Fdocs\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Fsupport\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Support\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FOXkWVm53Xzo?version=3&rel=0&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch3>Excellent Membership Features\u003C\u002Fh3>\n\u003Cp>ProfilePress ecommerce plugin is suited for selling non-physical goods, including online courses, digital downloads, downloadable files, paid memberships, subscriptions, services, accepting donations, selling digital downloads, etc.\u003C\u002Fp>\n\u003Cp>Our WordPress membership plugin is a perfect alternative to MemberPress, Paid Memberships Pro, MemberMouse, Thrive Apprentice, WishList Member, Ultimate Membership Pro and more!\u003C\u002Fp>\n\u003Ch4>Protect Registration Forms Against Banned Email Addresses\u003C\u002Fh4>\n\u003Cp>Prevent spam registrations and abuse by \u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Fblock-wordpress-registration-specific-email-domains\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">blocking user registration from a banned email address or email domain\u003C\u002Fa> or restricting user registration to specific email addresses.\u003C\u002Fp>\n\u003Ch4>Multiple Payment Processors\u003C\u002Fh4>\n\u003Cp>Easily connect to Stripe (supports Stripe-hosted checkout page and on-site payment form), PayPal, RazorPay, Paystack, Mollie, Bank Transfer to collect payments.\u003C\u002Fp>\n\u003Cp>Because we use the Stripe payment element, our integration gives your users the option to pay via Apple Pay, Google Pay, Microsoft Pay, Stripe Link, ACH Direct Debit, Alipay, Bancontact, Bank transfers, BLIK, EPS, FPX, Giropay, iDEAL, Sofort, P24, Affirm, Afterpay, Clearpay, Klarna, CashApp Pay, GrabPay, WeChat Pay, SEPA debit, Bacs Direct Debit and more.\u003C\u002Fp>\n\u003Ch4>Custom Frontend Forms\u003C\u002Fh4>\n\u003Cp>Create checkout page, member login form, user registration form, password reset and edit profile forms with our drag-and-drop builder.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Conversion Optimized Checkout Form\u003C\u002Fstrong> – Let users make payments to you and subscribe to your membership plans.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User Registration Forms\u003C\u002Fstrong> – Let users signup via a custom registration form.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Login & Password Reset Forms\u003C\u002Fstrong> – Allow users to log in and reset their passwords via custom frontent forms.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User Dashboard\u003C\u002Fstrong> – My Account page and edit profile forms for users to manage their profile details, account settings, change password and delete their account account.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Automatic Registration & Login Redirect\u003C\u002Fstrong> – Auto login users after they register and redirect them after they sign in, log out and reset their passwords.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>User Profiles & Member Directories\u003C\u002Fh4>\n\u003Cp>Add beautiful user profiles to your site that display your users’ profile pictures and information. And create searchable and filterable member directories allowing users to find each other on your membership website.\u003C\u002Fp>\n\u003Ch4>Drag-and-Drop Form Builder\u003C\u002Fh4>\n\u003Cp>We took out the pain of creating user profiles, member directories, and forms with our intuitive drag-and-drop builder.\u003C\u002Fp>\n\u003Ch4>Customisable Pre-Built Templates\u003C\u002Fh4>\n\u003Cp>ProfilePress comes with beautiful, customizable pre-built templates for user profiles, member directory, and forms to help you save even more time.\u003C\u002Fp>\n\u003Ch4>Access Control, Paywall & Content Restriction\u003C\u002Fh4>\n\u003Cp>Hide any article, post and content behind a paywall. With a few clicks, you can set up a \u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Fadd-wordpress-paywall-content\u002F\" rel=\"nofollow ugc\">WordPress paywall\u003C\u002Fa> to protect members-only content.\u003C\u002Fp>\n\u003Cp>It gives you control over what content your users can see based on your \u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Farticle\u002Fadding-content-protection-rules\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">protection rules\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Farticle\u002Fwordpress-content-restriction-shortcodes\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">shortcodes\u003C\u002Fa>. You can restrict content including pages, child pages, posts, custom post types, categories, tags and custom taxonomies based on their membership plans, user roles, usernames, and logged-in status.\u003C\u002Fp>\n\u003Cp>You can also control the visibility of \u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Farticle\u002Fwordpress-navigation-menu-restriction\u002F\" rel=\"nofollow ugc\">navigation menus\u003C\u002Fa> and widgets, modules & contents in the \u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Farticle\u002Frestrict-visibility-contents-wordpress-block-editor\u002F\" rel=\"nofollow ugc\">block editor\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Farticle\u002Frestrict-elementor-sections-widgets\u002F\" rel=\"nofollow ugc\">Elementor\u003C\u002Fa> & \u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Farticle\u002Frestrict-content-beaver-builder-visibility\u002F\" rel=\"nofollow ugc\">Beaver Builder\u003C\u002Fa> page builders.\u003C\u002Fp>\n\u003Ch4>Detailed Ecommerce & Membership Reports\u003C\u002Fh4>\n\u003Cp>We provide a complete reports section where you can Keep track of your earnings, refunds, sales, download logs and more. You can view and export reports for any period.\u003C\u002Fp>\n\u003Ch4>Login Redirect\u003C\u002Fh4>\n\u003Cp>Do you want to redirect WordPress users after login to a specific page or URL? This feature lets you setup login redirect based on user role and subscribed membership plan.\u003C\u002Fp>\n\u003Ch4>Email Customizer\u003C\u002Fh4>\n\u003Cp>Customize the email templates for each email that can be sent to users and administrators.\u003C\u002Fp>\n\u003Ch4>Tutor LMS & Academy LMS Integrations\u003C\u002Fh4>\n\u003Cp>The \u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Ftutor-lms\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Tutor LMS integration\u003C\u002Fa> lets you sell access to Tutor LMS courses, enroll users after registration to specific courses and create custom student and instructor WordPress registration forms.\u003C\u002Fp>\n\u003Cp>The \u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Facademy-lms\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Academy LMS integration\u003C\u002Fa> lets you sell your courses in Academy LMS plugin, enroll users to courses after registration and create custom registration forms for students and instructors.\u003C\u002Fp>\n\u003Ch4>Other Payment & Membership Plugin Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Accept one-time, recurring payments and charge for subscriptions via Bank Transfer, Stripe, PayPal, Paystack, RazorPay and Mollie.\u003C\u002Fli>\n\u003Cli>Smart fraud protection & spam prevention on the user registration form, login form and checkout page.\u003C\u002Fli>\n\u003Cli>Complete customer management to view and manage detailed records of all customers and their order history.\u003C\u002Fli>\n\u003Cli>Collect EU Vat or Tax from your users with our ecommerce plugin depending on their location, with complete control over tax rates and who to charge.\u003C\u002Fli>\n\u003Cli>Disable the admin bar and restrict access to the WordPress dashboard based on user roles.\u003C\u002Fli>\n\u003Cli>Redirect the WordPress default login page (wp-login.php) to your custom login, registration page, and password reset pages.\u003C\u002Fli>\n\u003Cli>Disable concurrent logins to prevent users from being logged into the same account from multiple computers at the same time.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Powerful Premium Features\u003C\u002Fh3>\n\u003Cp>Extend the capabilities of ProfilePress with our powerful addons and remove the additional 2% Stripe processing fee.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Ffixed-subscription-expiration\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Fixed Subscription Expiration\u003C\u002Fa> – Allows subscriptions of non-recurring plans to end at a specific date or after a specified duration of time.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fpaypal\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">PayPal Checkout\u003C\u002Fa> – Accept Visa, Mastercard, Venmo, Discover, iDEAL, American Express, Bancontact, BLIK, giropay, MyBank and Przelewy24 payments via PayPal.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002FrazorPay\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">RazorPay Checkout\u003C\u002Fa> – Accept Credit\u002FDebit cards, Netbanking, UPI, Wallets and more from Indian customers via RazorPay.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fmollie\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Mollie Checkout\u003C\u002Fa> – Accept payments via Credit Card, iDEAL, SEPA Direct Debit, Apple Pay, PayPal, Klarna, Bancontact, Bank transfer & Gift Card with Mollie.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fpaystack\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Paystack Checkout\u003C\u002Fa> – Accept payments via Credit Card, Bank Transfer, Mobile Money, USSD and more with Paystack.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fcustom-fields\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Custom Fields\u003C\u002Fa> – Collect additional information from users besides the standard profile data during user registration and payment checkout.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Femail-confirmation\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Email Confirmation\u003C\u002Fa> – Ensure registered users confirm their email addresses before they can sign in via the login form or social login.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fuser-moderation\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">User Moderation\u003C\u002Fa> – Decide whether to approve newly registered users or not. You can also block and unblock users at any time.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fmetered-paywall\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Metered Paywall\u003C\u002Fa> –  Let guest and visitors view limited number of restricted content using the best leaky paywall plugin. Metered paywalls allows free readers to access a few articles before restricting the rest to subscribers only.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Finvite-codes\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Invite Codes\u003C\u002Fa> –  Restrict WordPress registration to only users with invitation codes.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Freceipt\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">PDF Receipt\u003C\u002Fa> –  Allow customers to view, print and download as PDF, the receipt or invoice of their orders after payment.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fsocial-login\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Social Login\u003C\u002Fa> – Let users checkout, register & login to your site with social login via Facebook, Twitter, Google, LinkedIn, Yahoo, Microsoft, Amazon, GitHub, VK and WordPress.com.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002F2fa\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Two-Factor Authentication (2FA)\u003C\u002Fa> – Adds an additional layer of security to users accounts by requiring more than just a password to log in.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fpasswordless-login\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Passwordless Login\u003C\u002Fa> – Let users log in to your site via a one-time URL sent to their email addresses.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fwoocommerce\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">WooCommerce Memberships & Integration\u003C\u002Fa> – Create WooCommerce membership sites, members-only discounts and stores, manage WooCommerce billing and shipping fields, replace WooCommerce login and edit account forms in checkout and “My Account” pages with that of ProfilePress.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Flearndash\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">LearnDash\u003C\u002Fa> – Sell access to LearnDash courses and groups, enroll users after signup via a custom LearnDash registration form, and let users view their enrolled courses on the My Account page.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Flifterlms\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">LifterLMS\u003C\u002Fa> – Sell access to LifterLMS courses and memberships, enroll users after signup via a custom LifterLMS registration form, and let users view their enrolled courses on the My Account page.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fsensei-lms\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Sensei LMS\u003C\u002Fa> – Sell access to Sensei LMS courses and groups, enroll users after registration, and let users view their enrolled courses on the My Account page.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fmasterstudy-lms\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">MasterStudy LMS\u003C\u002Fa> – Restrict access to Masterstudy LMS courses until after payment and enroll users after registration.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Ffluentcommunity\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">FluentCommunity\u003C\u002Fa> – Sell access to FluentCommunity spaces and courses, and enroll users after WordPress registration to specific courses and spaces.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Frecaptcha\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Google reCAPTCHA\u003C\u002Fa> – Protect your user registration, login, checkout and password reset forms against spam and bot attacks using Google reCAPTCHA.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fcloudflare-turnstile\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Cloudflare Turnstile\u003C\u002Fa> – Stop spam registrations and bot attacks on your WordPress login, registration, and checkout forms by implementing Cloudflare Turnstile.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fsite-creation\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Site Creation\u003C\u002Fa> – Allow users to create new sites on a multisite network via a user registration form powered by ProfilePress.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fmailchimp\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Mailchimp\u003C\u002Fa> – Subscribe members to your Mailchimp audiences after they register, made a purchase and payment, subscribe to membership plans and automatically sync profile changes with Mailchimp.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fcampaign-monitor\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Campaign Monitor\u003C\u002Fa> – Subscribe members to your Campaign Monitor lists when they register, subscribe to membership plans via checkout form, and automatically sync profile changes with Campaign Monitor.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fmailerlite\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">MailerLite\u003C\u002Fa> – Add WordPress users to MailerLite groups when they register, subscribe to membership plans via checkout form, and automatically sync profile changes with MailerLite.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Faffiliatewp\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">AffiliateWP\u003C\u002Fa> – Launch an affiliate program for your WordPress membership website using AffiliateWP plugin.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fslicewp\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">SliceWP\u003C\u002Fa> – Use SliceWP affiliate plugin to add an affiliate program to your WordPress membership website.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fbuddypress\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">BuddyBoss\u002FBuddyPress\u003C\u002Fa> –  Sell access to groups, let users select groups to join during registration and sync WordPress profile fields with BuddyPress\u002FBuddyBoss extended profile.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fakismet\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Akismet\u003C\u002Fa> –  Block spam and bot user registrations with Akismet and keep your membership site safe and secured.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofilepress.com\u002Faddons\u002Fpolylang\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion\" rel=\"nofollow ugc\">Polylang\u003C\u002Fa> –  Build multilingual login, registration, password reset, and edit profile forms.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>ProfilePress is the Ecommerce platform and WooCommerce memberships plugin of your dreams. It delivers a complete experience with everything needed for selling digital products online.\u003C\u002Fp>\n\u003Cp>If you’re looking to build a business out of your membership site by creating paid memberships, there’s no better way than to use ProfilePress membership plugin which provide the ultimate member experience and will help you start and profit from your WordPress membership sites.\u003C\u002Fp>\n\u003Ch4>What’s Next\u003C\u002Fh4>\n\u003Cp>If you like this plugin, then consider checking out our other products:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmailoptin.io\u002F\" rel=\"nofollow ugc\">MailOptin\u003C\u002Fa> – Create popups and optin forms for capturing email newsletter subscribers. Integrates with Mailchimp, ConvertKit, Infusionsoft, ActiveCampaign, Campaign Monitor, Constant Contact & more.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ffusewp.com\u002F\" rel=\"nofollow ugc\">FuseWP\u003C\u002Fa> – Connect wordPress to marketing platforms and sync users to your email list.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ffeedbackwp.com\u002F\" rel=\"nofollow ugc\">FeedbackWP\u003C\u002Fa> – Add star rating to WordPress posts and collect user feedbacks.\u003C\u002Fli>\n\u003C\u002Ful>\n","Setup paid membership, accept payment, sell subscription & digital product, paywall, create login & registration form, user profile & member directory",100000,14909843,62,932,"2026-03-04T12:07:00.000Z",[153,22,109,132,133],"ecommerce","https:\u002F\u002Fprofilepress.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-user-avatar.4.16.12.zip",39,"2026-03-10 14:08:52",{"attackSurface":159,"codeSignals":231,"taintFlows":330,"riskAssessment":331,"analyzedAt":342},{"hooks":160,"ajaxHandlers":223,"restRoutes":224,"shortcodes":225,"cronEvents":230,"entryPointCount":14,"unprotectedCount":27},[161,167,171,176,180,185,189,193,197,201,206,210,214,218,221],{"type":162,"name":163,"callback":164,"file":165,"line":166},"action","admin_init","set_options","class-ko-fi-options.php",45,{"type":162,"name":168,"callback":169,"file":165,"line":170},"admin_menu","menu",46,{"type":162,"name":172,"callback":173,"file":174,"line":175},"widgets_init","widget","class-ko-fi.php",28,{"type":162,"name":177,"callback":178,"file":174,"line":179},"init","register_scripts",29,{"type":162,"name":181,"callback":182,"priority":183,"file":174,"line":184},"admin_enqueue_scripts","enqueue_admin_scripts",9,30,{"type":162,"name":186,"callback":187,"file":174,"line":188},"wp_head","maybe_display_floating_button",31,{"type":162,"name":190,"callback":191,"file":174,"line":192},"add_meta_boxes","register_posts_meta_box",32,{"type":162,"name":194,"callback":195,"priority":81,"file":174,"line":196},"save_post","save_post_meta",33,{"type":162,"name":198,"callback":199,"file":174,"line":200},"rest_api_init","prevent_floating_button_displaying_on_widget_previews",34,{"type":202,"name":203,"callback":204,"priority":81,"file":174,"line":205},"filter","plugin_action_links","add_action_links",42,{"type":202,"name":207,"callback":208,"priority":81,"file":174,"line":209},"plugin_row_meta","add_row_meta",43,{"type":202,"name":211,"callback":212,"file":174,"line":213},"kofi_display_floating_button","__return_false",442,{"type":162,"name":215,"callback":177,"file":216,"line":217},"plugins_loaded","Ko_fi.php",38,{"type":162,"name":163,"callback":164,"file":219,"line":220},"Ko_fi_Options.php",22,{"type":162,"name":168,"callback":169,"file":219,"line":222},23,[],[],[226],{"tag":227,"callback":228,"file":174,"line":229},"kofi","kofi_shortcode",36,[],{"dangerousFunctions":232,"sqlUsage":233,"outputEscaping":235,"fileOperations":27,"externalRequests":27,"nonceChecks":14,"capabilityChecks":14,"bundledLibraries":329},[],{"prepared":27,"raw":27,"locations":234},[],{"escaped":236,"rawEcho":237,"locations":238},210,54,[239,242,243,244,246,248,250,252,254,256,257,258,259,261,263,266,268,269,270,272,274,276,277,279,281,284,285,286,287,288,289,290,292,294,295,296,298,300,301,303,305,307,309,311,312,313,315,317,318,320,322,324,326,328],{"file":240,"line":229,"context":241},"class-ko-fi-button-widget.php","raw output",{"file":240,"line":217,"context":241},{"file":240,"line":156,"context":241},{"file":240,"line":245,"context":241},40,{"file":240,"line":247,"context":241},65,{"file":240,"line":249,"context":241},66,{"file":240,"line":251,"context":241},114,{"file":165,"line":253,"context":241},202,{"file":255,"line":229,"context":241},"class-ko-fi-panel-widget.php",{"file":255,"line":217,"context":241},{"file":255,"line":156,"context":241},{"file":255,"line":245,"context":241},{"file":255,"line":260,"context":241},49,{"file":255,"line":262,"context":241},50,{"file":264,"line":265,"context":241},"ko-fi-button-widget.php",35,{"file":264,"line":267,"context":241},37,{"file":264,"line":217,"context":241},{"file":264,"line":156,"context":241},{"file":264,"line":271,"context":241},63,{"file":264,"line":273,"context":241},64,{"file":264,"line":275,"context":241},111,{"file":219,"line":237,"context":241},{"file":219,"line":278,"context":241},135,{"file":219,"line":280,"context":241},150,{"file":282,"line":283,"context":241},"ko_fi_widget.php",26,{"file":282,"line":175,"context":241},{"file":282,"line":179,"context":241},{"file":282,"line":184,"context":241},{"file":282,"line":260,"context":241},{"file":282,"line":262,"context":241},{"file":282,"line":48,"context":241},{"file":282,"line":291,"context":241},80,{"file":282,"line":293,"context":241},81,{"file":282,"line":293,"context":241},{"file":282,"line":72,"context":241},{"file":282,"line":297,"context":241},86,{"file":282,"line":299,"context":241},87,{"file":282,"line":299,"context":241},{"file":282,"line":302,"context":241},91,{"file":282,"line":304,"context":241},101,{"file":282,"line":306,"context":241},106,{"file":282,"line":308,"context":241},107,{"file":282,"line":310,"context":241},108,{"file":282,"line":310,"context":241},{"file":282,"line":275,"context":241},{"file":282,"line":314,"context":241},112,{"file":282,"line":316,"context":241},113,{"file":282,"line":251,"context":241},{"file":282,"line":319,"context":241},118,{"file":282,"line":321,"context":241},119,{"file":282,"line":323,"context":241},120,{"file":282,"line":325,"context":241},124,{"file":282,"line":327,"context":241},125,{"file":282,"line":327,"context":241},[],[],{"summary":332,"deductions":333},"The ko-fi-button plugin v1.3.10 exhibits a generally good security posture due to its adherence to several best practices. The absence of dangerous functions, SQL queries executed solely through prepared statements, and the presence of nonce and capability checks are commendable. Furthermore, the plugin demonstrates a strong effort in output escaping, with 80% of outputs being properly handled. The lack of critical or high severity taint flows is also a positive indicator.\n\nHowever, the plugin is not without its risks. While the static analysis reports no unprotected entry points, the presence of a shortcode as the sole entry point warrants attention, as shortcodes can sometimes be vectors for vulnerabilities if not handled carefully, especially concerning input sanitization which wasn't fully analyzed (0 flows analyzed). The historical vulnerability data reveals a past medium-severity Cross-Site Scripting (XSS) vulnerability, which, although patched, suggests a potential for such issues if input handling is not consistently robust. The fact that it was a medium severity XSS means that while not critical, it could still impact users.\n\nIn conclusion, ko-fi-button v1.3.10 appears to be a reasonably secure plugin, with developers demonstrating good coding habits. The primary concern lies in the historical XSS vulnerability, which, despite being patched, highlights the importance of ongoing vigilance in input validation and output sanitization. The limited static analysis coverage of taint flows also leaves a slight unknown, though the existing signals are positive.",[334,336,339],{"reason":335,"points":81},"Past medium XSS vulnerability",{"reason":337,"points":338},"Limited taint flow analysis coverage",5,{"reason":340,"points":341},"Shortcode as sole entry point",2,"2026-03-16T18:09:18.006Z",{"wat":344,"direct":357},{"assetPaths":345,"generatorPatterns":348,"scriptPaths":349,"versionParams":352},[346,347],"\u002Fwp-content\u002Fplugins\u002Fko-fi-button\u002Fjs\u002Fwidget.js","\u002Fwp-content\u002Fplugins\u002Fko-fi-button\u002Fextra.js",[],[350,351],"https:\u002F\u002Fstorage.ko-fi.com\u002Fcdn\u002Fwidget\u002FWidget_2.js","https:\u002F\u002Fstorage.ko-fi.com\u002Fcdn\u002Fscripts\u002Foverlay-widget.js",[353,354,355,356],"ko-fi-button\u002Fjs\u002Fwidget.js?ver=","extra.js?ver=","Widget_2.js?ver=","overlay-widget.js?ver=",{"cssClasses":358,"htmlComments":360,"htmlAttributes":361,"restEndpoints":363,"jsGlobals":364,"shortcodeOutput":366},[359],"ko-fi-button-link",[],[362],"data-kofiseek",[],[365],"__kofiWidget__",[367,368,369,370,371],"\u003Cdiv style=\"width: 100%; text-align: center;\" class=\"ko-fi-button-link\">\u003Cdiv class=\"btn-container\">","\u003Ca href=\"http:\u002F\u002Fwww.ko-fi.com\u002F","\u003Cdiv class=\"ko-fi-button\">","\u003Cdiv class=\"kofi-button\">","\u003Cdiv class=\"kofi-button-link\">"]