[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9ok-5uaNjKrf83oARyqoOkS7sgcRs8bpvjUQKqiH6xA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":37,"analysis":148,"fingerprints":210},"lh-profile-page","LH Profile Page","1.2","shawfactor","https:\u002F\u002Fprofiles.wordpress.org\u002Fshawfactor\u002F","\u003Cp>LH Profile Page creates a post or page shortcode: [lh_profile_page_form]. This shortcode along with appropriate attributes and handlers allow logged in users to change their own user data on the front end or if they have the appropriate capabilities also edit others users on the front end. This plugin works with user data, user meta data and also user taxonomies (if enabled via a user taxonomy plugin like LH User Taxonomies).\u003C\u002Fp>\n","LH Profile Page is a WordPress plugin that enables users to change their user data on the front end of the website",10,1671,0,"2015-09-17T16:41:00.000Z","4.3.34","3.0","",[19,20,21,22,23],"front-end","meta","profile","user","users","http:\u002F\u002Flhero.org\u002Fplugins\u002Flh-profile-page\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flh-profile-page.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},77,14650,87,7,91,"2026-04-03T23:12:35.968Z",[38,60,84,105,127],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":53,"tags":54,"homepage":58,"download_link":59,"security_score":48,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"jsm-show-user-meta","JSM Show User Metadata","4.8.0","JS Morisset","https:\u002F\u002Fprofiles.wordpress.org\u002Fjsmoriss\u002F","\u003Cp>The JSM Show User Metadata plugin displays user profile meta keys and unserialized values in a metabox at the bottom of the user profile editing page.\u003C\u002Fp>\n\u003Cp>There are no plugin settings – simply install and activate the plugin.\u003C\u002Fp>\n\u003Ch4>Available Filters for Developers\u003C\u002Fh4>\n\u003Cp>Filter the user meta shown in the metabox:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>'jsmsum_metabox_table_metadata' ( array $metadata, $user_obj )\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Array of regular expressions to exclude meta keys:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>'jsmsum_metabox_table_exclude_keys' ( array $exclude_keys, $user_obj )\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Capability required to show user meta:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>'jsmsum_show_metabox_capability' ( 'manage_options', $user_obj )\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Show user meta for a screen base (defaults to true):\u003C\u002Fp>\n\u003Cpre>\u003Ccode>'jsmsum_show_metabox_screen_base' ( true, $screen_base )\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Capability required to delete user meta:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>'jsmsum_delete_meta_capability' ( 'manage_options', $user_obj )\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Icon for the delete user meta button:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>'jsmsum_delete_meta_icon_class' ( 'dashicons dashicons-table-row-delete' )\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Related Plugins\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjsm-show-comment-meta\u002F\" rel=\"ugc\">JSM Show Comment Metadata\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjsm-show-order-meta\u002F\" rel=\"ugc\">JSM Show Order Metadata for WooCommerce HPOS\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjsm-show-post-meta\u002F\" rel=\"ugc\">JSM Show Post Metadata\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjsm-show-term-meta\u002F\" rel=\"ugc\">JSM Show Term Metadata\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjsm-show-user-meta\u002F\" rel=\"ugc\">JSM Show User Metadata\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjsm-show-registered-shortcodes\u002F\" rel=\"ugc\">JSM Show Registered Shortcodes\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Show user metadata in a metabox when editing users - a great tool for debugging issues with user metadata.",3000,95927,100,2,"2026-03-11T18:12:00.000Z","6.9.4","6.0","7.4.33",[55,56,57,21,23],"custom-fields","inspector","metadata","https:\u002F\u002Fsurniaulula.com\u002Fextend\u002Fplugins\u002Fjsm-show-user-meta\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjsm-show-user-meta.4.8.0.zip",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":48,"downloaded":68,"rating":69,"num_ratings":70,"last_updated":71,"tested_up_to":72,"requires_at_least":73,"requires_php":74,"tags":75,"homepage":79,"download_link":80,"security_score":81,"vuln_count":82,"unpatched_count":13,"last_vuln_date":83,"fetched_at":28},"wp-front-end-profile","WP Frontend Profile","1.3.9","Glowlogix","https:\u002F\u002Fprofiles.wordpress.org\u002Fglowlogix\u002F","\u003Cp>WP Frontend Profile gives you the ability to add a extensible user profile section to the frontend of your WordPress website. By default the plugin adds two tabs to the frontend profile. One of these tabs, titled profile, allows a user to edit their user data including email, first and last names, URL and bio (description). The password tab allows a user to change their password for the site.\u003C\u002Fp>\n\u003Ch4>Plugin Extensibility\u003C\u002Fh4>\n\u003Cp>As the frontend profile is rendered with tabs you can easily add your own tabs with your own fields to store user meta data. Tabs and fields are added through filters and all the saving of the data is taken care of for you.\u003C\u002Fp>\n\u003Cp>You can add the following field types:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>WYSIWYG\u003C\u002Fli>\n\u003Cli>Select\u003C\u002Fli>\n\u003Cli>Multi Select\u003C\u002Fli>\n\u003Cli>Radio\u003C\u002Fli>\n\u003Cli>Text Area\u003C\u002Fli>\n\u003Cli>Checkbox\u003C\u002Fli>\n\u003Cli>Password\u003C\u002Fli>\n\u003Cli>Email\u003C\u002Fli>\n\u003Cli>Text\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>See FAQs for how to add our own fields and tabs.\u003C\u002Fp>\n\u003Ch4>Profile Output\u003C\u002Fh4>\n\u003Cp>To output the frontend profile feature you can use the following shortcodes in editor:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Profile page \u003Ccode>[wpfep-profile]\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Edit profile \u003Ccode>[wpfep]\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Register page \u003Ccode>[wpfep-register]\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Login page \u003Ccode>[wpfep-login]\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Added Login Widget\u003C\u002Fli>\n\u003Cli>Addon for Mailchimp\u003C\u002Fli>\n\u003Cli>Added Content Restriction feature for paid members.\u003C\u002Fli>\n\u003C\u002Ful>\n","WP Frontend Profile allows users to edit\u002Fview their profile and register\u002Flogin without going into the dashboard to do so.",22187,86,8,"2026-02-21T21:44:00.000Z","6.8.5","4.0.1","5.2.17",[76,21,77,78,23],"login","register","user-meta","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-front-end-profile\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-front-end-profile.1.3.9.zip",83,5,"2026-03-06 11:21:23",{"slug":85,"name":86,"version":87,"author":88,"author_profile":89,"description":90,"short_description":91,"active_installs":92,"downloaded":93,"rating":94,"num_ratings":95,"last_updated":96,"tested_up_to":97,"requires_at_least":98,"requires_php":17,"tags":99,"homepage":103,"download_link":104,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"bp-xprofile-shortcode","BP XProfile Shortcode","1.0.1","TylerDigital","https:\u002F\u002Fprofiles.wordpress.org\u002Ftylerdigital\u002F","\u003Cp>Adds Shortcode for BuddyPress XProfile data\u003C\u002Fp>\n\u003Cp>For quick reference, here is a list of example shortcodes:\u003C\u002Fp>\n\u003Cp>Reference field by ID in case name changes:\u003Cbr \u002F>\n\u003Cstrong>[xprofile field=12]\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Output city using default user detection (currently displayed BP profile, fallback to author of current page\u002Fpost, fallback to currently logged in user):\u003Cbr \u002F>\n\u003Cstrong>[xprofile field=”City”]\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Output city for a specific user by ID or username:\u003Cbr \u002F>\n\u003Cstrong>[xprofile field=”City” user=20]\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Cstrong>[xprofile field=”City” user=”someusername”]\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Override the default user detection by specifying method:\u003Cbr \u002F>\nOutput city for the currently logged in user (blank if no user is logged in):\u003Cbr \u002F>\n\u003Cstrong>[xprofile field=”City” user=current]\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Output city for the author of the current page\u002Fpost being viewed:\u003Cbr \u002F>\n\u003Cstrong>[xprofile field=”City” user=author]\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Output city for the currently displayed BuddyPress profile:\u003Cbr \u002F>\n\u003Cstrong>[xprofile field=”City” user=displayed]\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Ftylerdigital.com\u002Fproducts\u002Fbp-xprofile-shortcode-plugin\u002F\" rel=\"nofollow ugc\">Learn more about BP XProfile Shortcode\u003C\u002Fa>\u003C\u002Fp>\n","Adds Shortcode for BuddyPress XProfile data",50,9039,60,4,"2015-04-25T00:24:00.000Z","3.9.40","3.5",[100,101,78,23,102],"buddypress","shortcode","xprofile","http:\u002F\u002Ftylerdigital.com\u002Flabs\u002Fbp-xprofile-shortcode","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-xprofile-shortcode.1.0.1.zip",{"slug":106,"name":107,"version":108,"author":109,"author_profile":110,"description":111,"short_description":112,"active_installs":113,"downloaded":114,"rating":115,"num_ratings":116,"last_updated":117,"tested_up_to":51,"requires_at_least":118,"requires_php":17,"tags":119,"homepage":123,"download_link":124,"security_score":125,"vuln_count":49,"unpatched_count":13,"last_vuln_date":126,"fetched_at":28},"one-user-avatar","One User Avatar | User Profile Picture","2.5.4","One Designs","https:\u002F\u002Fprofiles.wordpress.org\u002Fonedesigns\u002F","\u003Cp>WordPress currently only allows you to use custom avatars that are uploaded through \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa>. \u003Cstrong>One User Avatar\u003C\u002Fstrong> enables you to use any photo uploaded into your Media Library as an avatar. This means you use the same uploader and library as your posts. No extra folders or image editing functions are necessary. This plugin is a fork of WP User Avatar v2.2.16.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>One User Avatar\u003C\u002Fstrong> also lets you:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Upload your own Default Avatar in your One User Avatar settings.\u003C\u002Fli>\n\u003Cli>Show the user’s \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa> avatar or Default Avatar if the user doesn’t have a One User Avatar image.\u003C\u002Fli>\n\u003Cli>Disable \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa> avatars and use only local avatars.\u003C\u002Fli>\n\u003Cli>Use the \u003Ccode>[avatar_upload]\u003C\u002Fcode> shortcode to add a standalone uploader to a front page or widget. This uploader is only visible to logged-in users.\u003C\u002Fli>\n\u003Cli>Use the \u003Ccode>[avatar]\u003C\u002Fcode> shortcode in your posts. These shortcodes will work with any theme, whether it has avatar support or not.\u003C\u002Fli>\n\u003Cli>Allow Contributors and Subscribers to upload their own avatars.\u003C\u002Fli>\n\u003Cli>Limit upload file size and image dimensions for Contributors and Subscribers.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Copyright\u003C\u002Fh3>\n\u003Cp>One User Avatar\u003Cbr \u002F>\nCopyright (c) 2023 One Designs https:\u002F\u002Fonedesigns.com\u002F\u003Cbr \u002F>\nLicense: GPLv2\u003Cbr \u002F>\nSource: https:\u002F\u002Fgithub.com\u002Fonedesigns\u002Fone-user-avatar\u003C\u002Fp>\n\u003Cp>One User Avatar is based on WP User Avatar v2.2.16\u003Cbr \u002F>\nCopyright (c) 2020-2021 ProfilePress https:\u002F\u002Fprofilepress.net\u002F\u003Cbr \u002F>\nCopyright (c) 2014-2020 Flippercode https:\u002F\u002Fwww.flippercode.com\u002F\u003Cbr \u002F>\nCopyright (c) 2013-2014 Bangbay Siboliban http:\u002F\u002Fbangbay.com\u002F\u003Cbr \u002F>\nLicense: GPLv2\u003Cbr \u002F>\nSource: https:\u002F\u002Fgithub.com\u002Fprofilepress\u002Fwp-user-avatar\u003C\u002Fp>\n\u003Cp>One User Avatar is distributed under the terms of the GNU GPL\u003C\u002Fp>\n\u003Cp>This program is free software: you can redistribute it and\u002For modify\u003Cbr \u002F>\nit under the terms of the GNU General Public License as published by\u003Cbr \u002F>\nthe Free Software Foundation, either version 2 of the License, or\u003Cbr \u002F>\n(at your option) any later version.\u003C\u002Fp>\n\u003Cp>This program is distributed in the hope that it will be useful,\u003Cbr \u002F>\nbut WITHOUT ANY WARRANTY; without even the implied warranty of\u003Cbr \u002F>\nMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\u003Cbr \u002F>\nGNU General Public License for more details.\u003C\u002Fp>\n\u003Ch3>Advanced Settings\u003C\u002Fh3>\n\u003Ch4>Add One User Avatar to your own profile edit page\u003C\u002Fh4>\n\u003Cp>You can use the [avatar_upload] shortcode to add a standalone uploader to any page. It’s best to use this uploader by itself and without other profile fields.\u003C\u002Fp>\n\u003Cp>If you’re building your own profile edit page with other fields, One User Avatar is automatically added to the \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FPlugin_API\u002FAction_Reference\u002Fshow_user_profile\" rel=\"nofollow ugc\">show_user_profile\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FPlugin_API\u002FAction_Reference\u002Fshow_user_profile\" rel=\"nofollow ugc\">edit_user_profile\u003C\u002Fa> hooks. If you’d rather have One User Avatar in its own section, you could add another hook:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>do_action( 'edit_user_avatar', $current_user );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Then, to add One User Avatar to that hook and remove it from the other hooks outside of the administration panel, you would add this code to the \u003Ccode>functions.php\u003C\u002Fcode> file of your theme:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>function my_avatar_filter() {\n    \u002F\u002F Remove from show_user_profile hook\n    remove_action( 'show_user_profile', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    remove_action( 'show_user_profile', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n\n    \u002F\u002F Remove from edit_user_profile hook\n    remove_action( 'edit_user_profile', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    remove_action( 'edit_user_profile', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n\n    \u002F\u002F Add to edit_user_avatar hook\n    add_action( 'edit_user_avatar', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    add_action( 'edit_user_avatar', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n}\n\n\u002F\u002F Loads only outside of administration panel\nif ( ! is_admin() ) {\n    add_action( 'init','my_avatar_filter' );\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>HTML Wrapper\u003C\u002Fh4>\n\u003Cp>You can change the HTML wrapper of the One User Avatar section by using the functions \u003Ccode>wpua_before_avatar\u003C\u002Fcode> and \u003Ccode>wpua_after_avatar\u003C\u002Fcode>. By default, the avatar code is structured like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cdiv class=\"wpua-edit-container\">\n    \u003Ch3>Avatar\u003C\u002Fh3>\n    \u003Cinput type=\"hidden\" name=\"wp-user-avatar\" id=\"wp-user-avatar\" value=\"{attachmentID}\" \u002F>\n    \u003Cp id=\"wpua-add-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-add\" name=\"wpua-add\">Edit Image\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-preview\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        Original Size\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-thumbnail\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        Thumbnail\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-remove-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-remove\" name=\"wpua-remove\">Default Avatar\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-undo-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-undo\" name=\"wpua-undo\">Undo\u003C\u002Fbutton>\n    \u003C\u002Fp>\n\u003C\u002Fdiv>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To strip out the div container and h3 heading, you would add the following filters to the \u003Ccode>functions.php\u003C\u002Fcode> file in your theme:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>remove_action( 'wpua_before_avatar', 'wpua_do_before_avatar' );\nremove_action( 'wpua_after_avatar', 'wpua_do_after_avatar' );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To add your own wrapper, you could create something like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>function my_before_avatar() {\n    echo '\u003Cdiv id=\"my-avatar\">';\n}\nadd_action( 'wpua_before_avatar', 'my_before_avatar' );\n\nfunction my_after_avatar() {\n    echo '\u003C\u002Fdiv>';\n}\nadd_action( 'wpua_after_avatar', 'my_after_avatar' );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>This would output:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cdiv id=\"my-avatar\">\n    \u003Cinput type=\"hidden\" name=\"wp-user-avatar\" id=\"wp-user-avatar\" value=\"{attachmentID}\" \u002F>\n    \u003Cp id=\"wpua-add-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-add\" name=\"wpua-add\">Edit Image\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-preview\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        \u003Cspan class=\"description\">Original Size\u003C\u002Fspan>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-thumbnail\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        \u003Cspan class=\"description\">Thumbnail\u003C\u002Fspan>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-remove-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-remove\" name=\"wpua-remove\">Default Avatar\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-undo-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-undo\" name=\"wpua-undo\">Undo\u003C\u002Fbutton>\n    \u003C\u002Fp>\n\u003C\u002Fdiv>\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Use any image from your WordPress Media Library as a custom user avatar or user profile picture. Add your own Default Avatar.",100000,490816,94,41,"2026-01-12T00:58:00.000Z","4.0",[120,121,122,21,23],"avatar","bbpress","gravatar","https:\u002F\u002Fonedesigns.com\u002Fplugins\u002Fone-user-avatar\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-user-avatar.2.5.4.zip",99,"2021-09-20 00:00:00",{"slug":128,"name":129,"version":130,"author":131,"author_profile":132,"description":133,"short_description":134,"active_installs":113,"downloaded":135,"rating":136,"num_ratings":137,"last_updated":138,"tested_up_to":51,"requires_at_least":139,"requires_php":140,"tags":141,"homepage":143,"download_link":144,"security_score":145,"vuln_count":146,"unpatched_count":13,"last_vuln_date":147,"fetched_at":28},"simple-local-avatars","Simple Local Avatars","2.8.6","10up","https:\u002F\u002Fprofiles.wordpress.org\u002F10up\u002F","\u003Cp>Adds an avatar upload field to user profiles if the current user has media permissions. Generates requested sizes on demand just like Gravatar! Simple and lightweight.\u003C\u002Fp>\n\u003Cp>Just edit a user profile, and scroll down to the new “Avatar” field. The plug-in will take care of cropping and sizing!\u003C\u002Fp>\n\u003Col>\n\u003Cli>Stores avatars in the “uploads” folder where all of your other media is kept.\u003C\u002Fli>\n\u003Cli>Has a simple, native interface.\u003C\u002Fli>\n\u003Cli>Fully supports Gravatar and default avatars if no local avatar is set for the user – but also allows you turn off Gravatar.\u003C\u002Fli>\n\u003Cli>Generates the requested avatar size on demand (and stores the new size for efficiency), so it looks great, just like Gravatar!\u003C\u002Fli>\n\u003Cli>Lets you decide whether lower privilege users (subscribers, contributors) can upload their own avatar.\u003C\u002Fli>\n\u003Cli>Enables rating of local avatars, just like Gravatar.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Support Level\u003C\u002Fh3>\n\u003Cp>Simple Local Avatars’ support level is marked as \u003Ccode>stable\u003C\u002Fcode>.  10up is not planning to develop any new features for this, but will still respond to bug reports and security concerns.  We welcome PRs, but any that include new features should be small and easy to integrate and should not include breaking changes.  We otherwise intend to keep this tested up to the most recent version of WordPress.\u003C\u002Fp>\n","Adds an avatar upload field to user profiles. Generates requested sizes on demand just like Gravatar!",2395990,92,89,"2026-02-17T19:34:00.000Z","6.6","7.4",[120,122,21,142,23],"user-photos","https:\u002F\u002F10up.com\u002Fplugins\u002Fsimple-local-avatars-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-local-avatars.2.8.6.zip",93,6,"2025-08-11 18:20:29",{"attackSurface":149,"codeSignals":183,"taintFlows":203,"riskAssessment":204,"analyzedAt":209},{"hooks":150,"ajaxHandlers":174,"restRoutes":175,"shortcodes":176,"cronEvents":181,"entryPointCount":182,"unprotectedCount":13},[151,157,162,166,170],{"type":152,"name":153,"callback":154,"file":155,"line":156},"filter","get_edit_user_link","filter_edit_user_link","lh-profile-page.php",634,{"type":158,"name":159,"callback":160,"file":155,"line":161},"action","init","register_shortcodes",635,{"type":158,"name":163,"callback":164,"file":155,"line":165},"admin_menu","plugin_menu",636,{"type":152,"name":167,"callback":168,"priority":11,"file":155,"line":169},"plugin_action_links","add_settings_link",637,{"type":158,"name":171,"callback":172,"file":155,"line":173},"wp","save_data",638,[],[],[177],{"tag":178,"callback":179,"file":155,"line":180},"lh_profile_page_form","profile_page_shortcode_output",494,[],1,{"dangerousFunctions":184,"sqlUsage":185,"outputEscaping":187,"fileOperations":13,"externalRequests":13,"nonceChecks":182,"capabilityChecks":188,"bundledLibraries":202},[],{"prepared":13,"raw":13,"locations":186},[],{"escaped":188,"rawEcho":34,"locations":189},3,[190,193,195,197,199,200,201],{"file":155,"line":191,"context":192},549,"raw output",{"file":155,"line":194,"context":192},556,{"file":155,"line":196,"context":192},558,{"file":155,"line":198,"context":192},559,{"file":155,"line":198,"context":192},{"file":155,"line":198,"context":192},{"file":155,"line":198,"context":192},[],[],{"summary":205,"deductions":206},"The \"lh-profile-page\" plugin version 1.2 exhibits a generally good security posture with no known vulnerabilities or critical issues identified in the static analysis.  The absence of dangerous functions, raw SQL queries, file operations, and external HTTP requests are all positive indicators.  The plugin also demonstrates good practice by incorporating nonce and capability checks, suggesting an effort to secure its entry points.\n\nHowever, a notable concern is the low percentage of properly escaped output. With only 30% of the 10 identified outputs being properly escaped, this presents a potential risk for cross-site scripting (XSS) vulnerabilities. While the attack surface is small and no unauthenticated entry points were found, unescaped output is a common vector for attackers to inject malicious scripts. The plugin's vulnerability history is clean, which is a strong positive, but the presence of unescaped output means this could be an area where vulnerabilities might emerge if not addressed.\n\nIn conclusion, the plugin has a solid foundation with no immediate critical flaws detected. The primary area requiring attention is the output escaping. Addressing this weakness will significantly improve the plugin's overall security and mitigate the risk of XSS attacks, even in the absence of past vulnerabilities.",[207],{"reason":208,"points":146},"Low percentage of properly escaped output","2026-03-17T00:28:46.094Z",{"wat":211,"direct":219},{"assetPaths":212,"generatorPatterns":214,"scriptPaths":215,"versionParams":216},[213],"\u002Fwp-content\u002Fplugins\u002Flh-profile-page\u002Fassets\u002Flh-profile-page.js",[],[213],[217,218],"lh-profile-page\u002Fstyle.css?ver=","lh-profile-page.js?ver=",{"cssClasses":220,"htmlComments":222,"htmlAttributes":234,"restEndpoints":263,"jsGlobals":264,"shortcodeOutput":267},[221],"login-field",[223,224,225,226,227,228,229,230,231,232,233,223,224,225,226,227,228,229,230,231,232,233,223,224,225,226,227,228,229,230,231,232,233],"\u003C!--[if lt IE 10]>\u003Cbr\u002F>\u003Clabel for=\"lh_profile_page-users-display_name\">Display Name\u003C\u002Flabel>\u003Cbr\u002F>-->","\u003C!--[if lt IE 10]>\u003Cbr\u002F>\u003Clabel for=\"lh_profile_page-users-user_email\">Email\u003C\u002Flabel>\u003Cbr\u002F>-->","\u003C!--[if lt IE 10]>\u003Cbr\u002F>\u003Clabel for=\"lh_profile_page-usermeta-description\">About Me\u003C\u002Flabel>\u003Cbr\u002F>-->","\u003C!--[if lt IE 10]>\u003Cbr\u002F>\u003Clabel for=\"lh_profile_page-taxonomy-category\">Categories\u003C\u002Flabel>\u003Cbr\u002F>-->","\u003C!--[if lt IE 10]>\u003Cbr\u002F>\u003Clabel for=\"lh_profile_page-usermeta-billing_phone\">Phone\u003C\u002Flabel>\u003Cbr\u002F>-->","\u003C!--[if lt IE 10]>\u003Cbr\u002F>\u003Clabel for=\"lh_profile_page-usermeta-billing_address_1\">Street Address\u003C\u002Flabel>\u003Cbr\u002F>-->","\u003C!--[if lt IE 10]>\u003Cbr\u002F>\u003Clabel for=\"lh_profile_page-usermeta-billing_city\">City\u003C\u002Flabel>\u003Cbr\u002F>-->","\u003C!--[if lt IE 10]>\u003Cbr\u002F>\u003Clabel for=\"lh_profile_page-usermeta-billing_state\">State\u003C\u002Flabel>\u003Cbr\u002F>-->","\u003C!--[if lt IE 10]>\u003Cbr\u002F>\u003Clabel for=\"lh_profile_page-usermeta-billing_postcode\">Postcode\u003C\u002Flabel>\u003Cbr\u002F>-->","\u003C!--[if lt IE 10]>\u003Cbr\u002F>\u003Clabel for=\"lh_profile_page-usermeta-billing_country\">Country\u003C\u002Flabel>\u003Cbr\u002F>-->","\u003C!--[if lt IE 10]>\u003Cbr\u002F>\u003Clabel for=\"lh_profile_page-users-user_url\">Website\u003C\u002Flabel>\u003Cbr\u002F>-->",[235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,249,261,262,249],"id=\"lh_profile_page-users-display_name\"","id=\"lh_profile_page-users-user_email\"","id=\"lh_profile_page-usermeta-description\"","id=\"lh_profile_page-taxonomy-category\"","id=\"lh_profile_page-usermeta-billing_phone\"","id=\"lh_profile_page-usermeta-billing_address_1\"","id=\"lh_profile_page-usermeta-billing_city\"","id=\"lh_profile_page-usermeta-billing_state\"","id=\"lh_profile_page-usermeta-billing_postcode\"","id=\"lh_profile_page-usermeta-billing_country\"","id=\"lh_profile_page-users-user_url\"","name=\"lh_profile_page-users-display_name\"","name=\"lh_profile_page-users-user_email\"","name=\"lh_profile_page-usermeta-description\"","name=\"lh_profile_page-taxonomy-category[]\"","name=\"lh_profile_page-usermeta-billing_phone\"","name=\"lh_profile_page-usermeta-billing_address_1\"","name=\"lh_profile_page-usermeta-billing_city\"","name=\"lh_profile_page-usermeta-billing_state\"","name=\"lh_profile_page-usermeta-billing_postcode\"","name=\"lh_profile_page-usermeta-billing_country\"","name=\"lh_profile_page-users-user_url\"","class=\"form-control login-field\"","id=\"lh-profile-page-form\"","data-lh_profile_page_nonce","id=\"lh_profile_page_nonce\"","id=\"lh_profile_page-taxonomy-category_termslug\"","name=\"lh_profile_page-taxonomy-category\"",[],[265,266,266],"window.lh_profile_page-update-result","var lh_profile_page_nonce",[268],"\u003Cform method=\"post\" id=\"lh-profile-page-form\" action=\""]