[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHrUdvqzXeJ4tJptB3S8YbDh1JSEQ_Ne15moqfm5ICRo":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":48,"crawl_stats":38,"alternatives":55,"analysis":164,"fingerprints":252},"login-widget-for-ultimate-member","Login Widget for Ultimate Member","1.1.3","SuitePlugins","https:\u002F\u002Fprofiles.wordpress.org\u002Fsuiteplugins\u002F","\u003Cp>This extension is a simple login widget that will display a login form for Ultimate Member. Once logged in, users will have quick access to all their Ultimate Member tabs, Profile and Account Edit.\u003C\u002Fp>\n\u003Ch4>Using Login Form shortcode\u003C\u002Fh4>\n\u003Cp>You can use the shortcode [um_login_widget].\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Use the attribute \u003Cstrong>form_type\u003C\u002Fstrong> and the login form ID to display the appropriate login form. By default, the shortcode will display the default WordPress login. e.g [um_login_widget form_type=”6″]\u003C\u002Fli>\n\u003Cli>Use the attribute \u003Cstrong>hide_remember_me\u003C\u002Fstrong> and enter 1 to hide the remember me option. e.g [um_login_widget hide_remember_me=”1″]\u003C\u002Fli>\n\u003Cli>As of version 1.1.0, you have options to hide avatar, profile link, account link and profile tabs.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Other Ultimate Member Plugins\u003C\u002Fh4>\n\u003Cp>SuitePlugins is on the verge of creating some great addons for Ultimate Member. Here are a few that you may want to check out\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsuiteplugins.com\u002Fdownloads\u002Fgallery-for-ultimate-members\u002F?utm_source=wordpress&utm_medium=plugin&utm_content=login-widget\" rel=\"nofollow ugc\">Gallery\u003C\u002Fa> – \u003Cstrong>Most Popular\u003C\u002Fstrong> An easy drag and drop gallery for Ultimate Members.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsuiteplugins.com\u002Fdownloads\u002Fum-events-pro\u002F?utm_source=wordpress&utm_medium=plugin&utm_content=login-widget\" rel=\"nofollow ugc\">Events\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsuiteplugins.com\u002Fdownloads\u002Fdocs-for-ultimatemember\u002F?utm_source=wordpress&utm_medium=plugin&utm_content=login-widget\" rel=\"nofollow ugc\">Docs\u003C\u002Fa> – Let users upload files that can be seen publicly or privately\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsuiteplugins.com\u002Fdownloads\u002Fstories-for-ultimate-member\u002F?utm_source=wordpress&utm_medium=plugin&utm_content=login-widget\" rel=\"nofollow ugc\">Stories\u003C\u002Fa> – Allow users to have a journal or mini-blog from their profile.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsuiteplugins.com\u002Fdownloads\u002Fvisitors-for-ultimate-members\u002F?utm_source=wordpress&utm_medium=plugin&utm_content=login-widget\" rel=\"nofollow ugc\">Visitors\u003C\u002Fa> – Visitors allow users to see others that have visited their profile\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsuiteplugins.com\u002Fdownloads\u002Frelationships-for-ultimate-member\u002F?utm_source=wordpress&utm_medium=plugin&utm_content=login-widget\" rel=\"nofollow ugc\">Relationships\u003C\u002Fa> – Allow users to select family members and display them on their profile\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Flogin-widget-for-ultimate-member\u002F?utm_source=wordpress&utm_medium=plugin&utm_content=login-widget\" rel=\"ugc\">Gallery Lite\u003C\u002Fa> – An easy drag and drop gallery for Ultimate Members.\u003C\u002Fli>\n\u003C\u002Ful>\n","Easily add a login widget that works with Ultimate Member",700,62441,74,6,"2025-02-22T18:32:00.000Z","6.7.5","4.0","5.6",[20,21,22,23,24],"login-widget","ultimate-member","ultimate-member-login","ultimate-member-widget","ultimatemember-login","http:\u002F\u002Fwww.suiteplugins.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flogin-widget-for-ultimate-member.1.1.3.zip",90,1,0,"2025-03-27 00:00:00","2026-03-15T15:16:48.613Z",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":6,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":30,"updated_date":44,"references":45,"days_to_patch":47},"CVE-2025-30890","login-widget-for-ultimate-member-authenticated-contributor-local-file-inclusion","Login Widget for Ultimate Member \u003C= 1.1.2 - Authenticated (Contributor+) Local File Inclusion","The Login Widget for Ultimate Member plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.",null,"\u003C=1.1.2","high",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Improper Control of Filename for Include\u002FRequire Statement in PHP Program ('PHP Remote File Inclusion')","2025-04-03 13:36:59",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F1c0f613e-5ee6-447c-b508-702627223979?source=api-prod",8,{"slug":49,"display_name":7,"profile_url":8,"plugin_count":50,"total_installs":51,"avg_security_score":52,"avg_patch_time_days":53,"trust_score":27,"computed_at":54},"suiteplugins",17,1600,86,7,"2026-04-04T06:53:17.107Z",[56,82,102,125,147],{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":64,"downloaded":65,"rating":66,"num_ratings":67,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":71,"tags":72,"homepage":77,"download_link":78,"security_score":79,"vuln_count":80,"unpatched_count":29,"last_vuln_date":81,"fetched_at":31},"bp-better-messages","Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages","2.13.0","wordplus","https:\u002F\u002Fprofiles.wordpress.org\u002Fwordplus\u002F","\u003Cp>\u003Cstrong>Better Messages\u003C\u002Fstrong> – is the most feature-rich \u003Cstrong>realtime private messaging system for WordPress\u003C\u002Fstrong>, with native integrations for \u003Cstrong>BuddyPress, BuddyBoss Platform, Ultimate Member, PeepSo\u003C\u002Fstrong> and any other WordPress powered websites.\u003C\u002Fp>\n\u003Cp>Transform your WordPress site into a powerful communication platform with \u003Cstrong>private messaging\u003C\u002Fstrong>, \u003Cstrong>chat rooms\u003C\u002Fstrong>, \u003Cstrong>video and audio calls\u003C\u002Fstrong>, \u003Cstrong>group video chats\u003C\u002Fstrong>, \u003Cstrong>AI chat bots\u003C\u002Fstrong>, and \u003Cstrong>native mobile apps\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>Whether you’re building a social network, online community, marketplace, or membership site – Better Messages provides enterprise-level messaging features with an easy-to-use interface.\u003C\u002Fp>\n\u003Cp>“\u003Cstrong>Better Messages\u003C\u002Fstrong>” plugin is formerly called “\u003Cstrong>BP Better Messages\u003C\u002Fstrong>“.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.better-messages.com\u002F\" rel=\"nofollow ugc\">More Info & Demo & Knowledge Base\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Fbm-translate\u002F\" rel=\"nofollow ugc\">Translate Better Messages to your language\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FjMHx97QsXj8?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Core Messaging Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>AJAX or WebSocket powered realtime conversations\u003C\u002Fli>\n\u003Cli>Private one-to-one conversations\u003C\u002Fli>\n\u003Cli>Group conversations with unlimited participants\u003C\u002Fli>\n\u003Cli>Chat Rooms with guest access support\u003C\u002Fli>\n\u003Cli>Messages for BuddyPress Groups, PeepSo Groups, Ultimate Member Groups, FluentCommunity Groups\u003C\u002Fli>\n\u003Cli>Subjects for conversations\u003C\u002Fli>\n\u003Cli>Search across all messages\u003C\u002Fli>\n\u003Cli>Mark messages as favorite\u003C\u002Fli>\n\u003Cli>Pin important messages to conversation top\u003C\u002Fli>\n\u003Cli>Pin favorite conversations to list top\u003C\u002Fli>\n\u003Cli>Filter conversations list to show only unread conversations\u003C\u002Fli>\n\u003Cli>Reply to specific messages\u003C\u002Fli>\n\u003Cli>Edit sent messages (with edit indicator)\u003C\u002Fli>\n\u003Cli>Delete messages\u003C\u002Fli>\n\u003Cli>Forward messages to other conversations\u003C\u002Fli>\n\u003Cli>Mute conversation notifications\u003C\u002Fli>\n\u003Cli>Message draft autosave with recovery\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>AI & Automation:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>AI Chat Bots powered by OpenAI ChatGPT API\u003C\u002Fli>\n\u003Cli>Voice message transcription powered by OpenAI\u003C\u002Fli>\n\u003Cli>Web Search capability for AI bots\u003C\u002Fli>\n\u003Cli>File Search tool for AI bots\u003C\u002Fli>\n\u003Cli>Image generation with AI\u003C\u002Fli>\n\u003Cli>PDF file support for AI conversations\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Media & Content:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>File sharing with resumable uploads and ability to protect files from direct access (images, videos, documents)\u003C\u002Fli>\n\u003Cli>Client-side image and video optimization for cross-browser compatibility and saving storage space (format conversion, quality control, metadata stripping)\u003C\u002Fli>\n\u003Cli>Voice Messages (available as addon)\u003C\u002Fli>\n\u003Cli>Embedded links with thumbnails and descriptions\u003C\u002Fli>\n\u003Cli>oEmbed support for YouTube, Vimeo, Spotify, SoundCloud, Flickr and 20+ services\u003C\u002Fli>\n\u003Cli>Emoji selector\u003C\u002Fli>\n\u003Cli>Stickers\u003C\u002Fli>\n\u003Cli>GIPHY integration\u003C\u002Fli>\n\u003Cli>Markdown text formatting support\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Notifications:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Email notifications for unread messages (customizable templates)\u003C\u002Fli>\n\u003Cli>Unsubscribe link support in emails\u003C\u002Fli>\n\u003Cli>Sound notifications for new messages\u003C\u002Fli>\n\u003Cli>On-site toast notifications anywhere on your website\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Moderation & Security:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>AI Content Moderation powered by OpenAI – automatically detect harmful content\u003C\u002Fli>\n\u003Cli>Pre-Moderated Messages – review messages before delivery\u003C\u002Fli>\n\u003Cli>Report messages feature\u003C\u002Fli>\n\u003Cli>Bad words filter with customizable blacklist\u003C\u002Fli>\n\u003Cli>Block user feature\u003C\u002Fli>\n\u003Cli>Role-based access control\u003C\u002Fli>\n\u003Cli>User whitelist\u002Fblacklist for moderation\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Engagement Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Reactions to messages\u003C\u002Fli>\n\u003Cli>Mentions (@username)\u003C\u002Fli>\n\u003Cli>Mass messaging from WP Admin with scheduling, file attachments, and background processing\u003C\u002Fli>\n\u003Cli>Suggested conversations for new users\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Customization:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Modern, fully customizable design\u003C\u002Fli>\n\u003Cli>Easy color customization via WP Customizer\u003C\u002Fli>\n\u003Cli>Custom notification sounds\u003C\u002Fli>\n\u003Cli>RTL layout support\u003C\u002Fli>\n\u003Cli>White label solution\u003C\u002Fli>\n\u003Cli>Fully translatable\u003C\u002Fli>\n\u003Cli>Auto-delete old messages option\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>This is not a complete list of features\u003C\u002Fstrong> – Better Messages has many more small features and options that are not listed here. We are constantly adding new features and improvements based on user feedback.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Compatible plugins:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbuddypress\" rel=\"ugc\">BuddyPress\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fultimate-member\" rel=\"ugc\">Ultimate Member\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Fpeepso\" rel=\"nofollow ugc\">PeepSo\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.better-messages.com\u002Fdocs\u002Fintegrations\u002Fsuredash\u002F\" rel=\"nofollow ugc\">SureDash\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Fwpjobmanager\" rel=\"nofollow ugc\">WP Job Manager\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Fprofilegrid\" rel=\"nofollow ugc\">ProfileGrid\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.better-messages.com\u002Fdocs\u002Fintegrations\u002Fuserswp\u002F\" rel=\"nofollow ugc\">UsersWP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.better-messages.com\u002Fdocs\u002Fintegrations\u002Fprogressify\u002F\" rel=\"nofollow ugc\">Progressify PWA\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.better-messages.com\u002Fdocs\u002Fintegrations\u002Fonesignal\u002F\" rel=\"nofollow ugc\">OneSignal\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.better-messages.com\u002Fdocs\u002Fintegrations\u002Fjet-engine\u002F\" rel=\"nofollow ugc\">Crocoblock JetEngine Profile Builder\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.better-messages.com\u002Fdocs\u002Fintegrations\u002Fwp-user-manager\u002F\" rel=\"nofollow ugc\">WP User Manager\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.better-messages.com\u002Fdocs\u002Fintegrations\u002Fwpforo\u002F\" rel=\"nofollow ugc\">wpForo\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Fhivepress\u002F\" rel=\"nofollow ugc\">HivePress\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.better-messages.com\u002Fdocs\u002Fintegrations\u002Fmultivendorx\u002F\" rel=\"nofollow ugc\">MultiVendorX\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.better-messages.com\u002Fdocs\u002Fintegrations\u002Fdokan\u002F\" rel=\"nofollow ugc\">Dokan Marketplace\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Fknowledge-base\u002Fwc-vendors\u002F\" rel=\"nofollow ugc\">WC Vendors\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Fknowledge-base\u002Fwcfm\u002F\" rel=\"nofollow ugc\">WCFM\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Fknowledge-base\u002Fwoocommerce-my-account\u002F\" rel=\"nofollow ugc\">WooCommerce\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Fbpvm\" rel=\"nofollow ugc\">Verified Member for BuddyPress\u003C\u002Fa> – verified badges for users\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Fautomatorwp\" rel=\"nofollow ugc\">AutomatorWP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Funcanny\" rel=\"nofollow ugc\">Uncanny Automator\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Fgamipress\" rel=\"nofollow ugc\">GamiPress\u003C\u002Fa> – charge for messages & calls\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Fmc\" rel=\"nofollow ugc\">MyCRED\u003C\u002Fa> – charge for messages & calls\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002FBSRB\" rel=\"nofollow ugc\">Block, Suspend, Report for BuddyPress\u003C\u002Fa> – allow users block each other\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Fyouzer\" rel=\"nofollow ugc\">Youzer\u003C\u002Fa> (Youzify)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Fpmpro\" rel=\"nofollow ugc\">Paid Memberships Pro\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.better-messages.com\u002Fdocs\u002Fcategory\u002Fintegrations\u002F\" rel=\"nofollow ugc\">Full list of integrations\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Feel free to report any incompatibility or request more integrations, that is very important to help to improve Better Messages plugin!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>WebSocket version:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>WebSocket version is a paid option, you can get license key on our website.\u003C\u002Fp>\n\u003Cp>We use our dedicated servers to implement WebSocket communications between your site and users. Our servers are completely private and do not store or track any private data – all messages remain in your database.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Performance & Reliability:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Significantly\u003C\u002Fstrong> reduces the load on your server (up to 200x less requests)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Instant\u003C\u002Fstrong> message delivery in realtime\u003C\u002Fli>\n\u003Cli>Works with any hosting including shared hosting\u003C\u002Fli>\n\u003Cli>No limits on concurrent connections or monthly active users\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Video & Audio Calls:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>HD Video Calls (1-to-1)\u003C\u002Fli>\n\u003Cli>HD Audio Calls (1-to-1)\u003C\u002Fli>\n\u003Cli>Group Video Chats (up to 32 participants)\u003C\u002Fli>\n\u003Cli>Group Audio Chats (up to 50 participants)\u003C\u002Fli>\n\u003Cli>Screen Sharing in calls and group chats\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Mobile Apps (Alpha):\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>iOS Mobile App (build your own branded app) – Alpha\u003C\u002Fli>\n\u003Cli>Android Mobile App (build your own branded app) – Alpha\u003C\u002Fli>\n\u003Cli>Push notifications for calls and messages\u003C\u002Fli>\n\u003Cli>VoIP notifications for incoming calls\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Note: Mobile apps are currently in alpha stage. Core functionality works, but some features may be limited or under development.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Realtime Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Messages Delivery Status (sent, delivered, seen)\u003C\u002Fli>\n\u003Cli>Typing indicator\u003C\u002Fli>\n\u003Cli>Online\u002FOffline presence indicator\u003C\u002Fli>\n\u003Cli>User statuses (Online, Away, Do Not Disturb)\u003C\u002Fli>\n\u003Cli>Mini Chats – chat windows anywhere on your site\u003C\u002Fli>\n\u003Cli>Mini Conversations widget\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Security & Encryption:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Optional End-to-End Encryption (E2EE) — can be enabled at the website level and per conversation; messages and files encrypted in users’ browsers with AES-256-GCM, server never sees plaintext\u003C\u002Fli>\n\u003Cli>Local browser encryption (AES256) for offline message storage\u003C\u002Fli>\n\u003Cli>Web Push Notifications (works even when the browser is closed)\u003C\u002Fli>\n\u003Cli>All data encrypted in transit, so we can’t read it on our servers\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Support:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Priority email support\u003C\u002Fli>\n\u003Cli>Regular updates and new features\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fmedium.com\u002F@monica.lucarini28\u002Fis-websocket-a-game-changer-aeaef68d1fba\" rel=\"nofollow ugc\">Why WebSockets are a game-changer?\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Fdownloads\u002Fbp-better-messages\u002F\" rel=\"nofollow ugc\">Get WebSocket version license key\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwww.wordplus.org\u002Fend-user-license-agreement\u002F\" rel=\"nofollow ugc\">Terms of Use\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Languages:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>English\u003C\u002Fli>\n\u003Cli>Spanish\u003C\u002Fli>\n\u003Cli>Portuguese (Brazil)\u003C\u002Fli>\n\u003Cli>Russian\u003C\u002Fli>\n\u003Cli>Dutch\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003Cli>Turkish\u003C\u002Fli>\n\u003Cli>Japanese\u003C\u002Fli>\n\u003Cli>Danish\u003C\u002Fli>\n\u003Cli>Korean \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fmodelaid\u002F\" rel=\"nofollow ugc\">@modelaid\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>RTL Layout built in to plugin.\u003C\u002Fp>\n\u003Cp>You can translate plugin to your language with LocoTranslate or \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fbp-better-messages\u002F\" rel=\"nofollow ugc\">participate in plugin translation\u003C\u002Fa>.\u003C\u002Fp>\n","Real-time messaging and chat rooms for WordPress ecosystem: private conversations, public and private chat rooms, video & audio calls, and more.",10000,1617996,96,135,"2026-03-05T15:21:00.000Z","6.9.4","5.9.0","7.4",[73,74,75,76,21],"buddypress","chat","messaging","private-message","https:\u002F\u002Fwww.wordplus.org","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-better-messages.2.13.0.zip",88,13,"2025-12-16 17:20:44",{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":64,"downloaded":90,"rating":27,"num_ratings":91,"last_updated":92,"tested_up_to":93,"requires_at_least":94,"requires_php":18,"tags":95,"homepage":99,"download_link":100,"security_score":101,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"sidebar-login","Sidebar Login","3.0.1","Mike Jolley","https:\u002F\u002Fprofiles.wordpress.org\u002Fmikejolley\u002F","\u003Cp>\u003Cem>Sidebar Login\u003C\u002Fem> adds a useful login widget which you can use to login from in the sidebar of your WordPress powered blog.\u003C\u002Fp>\n\u003Cp>Once a user logs in they are redirected back to the page they logged in from, rather than the admin panel (this is configurable).\u003C\u002Fp>\n\u003Cp>If you’d like to contribute code to the plugin you can do so via \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmikejolley\u002Fsidebar-login\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>If you’d like to contribute a translation, \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fsidebar-login\" rel=\"nofollow ugc\">the project is hosted on WordPress.org\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Cp>Simply go to \u003Ccode>Appearance > Widgets\u003C\u002Fcode> and drag “sidebar login” to the sidebar of your choice. Within the widget are several options you can use for changing the titles or the links displayed to the user.\u003C\u002Fp>\n\u003Cp>To use this widget in a template, use \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FFunction_Reference\u002Fthe_widget\" rel=\"nofollow ugc\">the \u003Ccode>the_widget()\u003C\u002Fcode> function\u003C\u002Fa> which WordPress provides.\u003C\u002Fp>\n\u003Ch4>Tags for titles + links\u003C\u002Fh4>\n\u003Cp>These tags can be used in the widget settings for titles + links and will be replaced at runtime.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>%username%\u003C\u002Fcode> – logged in users display name\u003C\u002Fli>\n\u003Cli>\u003Ccode>%userid%\u003C\u002Fcode> – logged in users ID\u003C\u002Fli>\n\u003Cli>\u003Ccode>%firstname%\u003C\u002Fcode> – logged in users firstname\u003C\u002Fli>\n\u003Cli>\u003Ccode>%lastname%\u003C\u002Fcode> – logged in users lastname\u003C\u002Fli>\n\u003Cli>\u003Ccode>%name%\u003C\u002Fcode> – logged in users firstname + lastname\u003C\u002Fli>\n\u003Cli>\u003Ccode>%nicename%\u003C\u002Fcode> – user nice name\u003C\u002Fli>\n\u003Cli>\u003Ccode>%admin_url%\u003C\u002Fcode> – url to WP admin\u003C\u002Fli>\n\u003Cli>\u003Ccode>%logout_url%\u003C\u002Fcode> – logout url\u003C\u002Fli>\n\u003Cli>\u003Ccode>%buddypress_profile_url%\u003C\u002Fcode> – Buddypress Profile URL\u003C\u002Fli>\n\u003Cli>\u003Ccode>%bbpress_profile_url%\u003C\u002Fcode> – Buddypress Profile URL\u003C\u002Fli>\n\u003Cli>\u003Ccode>%avatar%\u003C\u002Fcode> – User Avatar\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Filter Reference\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ccode>sidebar_login_include_css\u003C\u002Fcode> – return false to not include the CSS stylesheet\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_logged_in_links\u003C\u002Fcode> – An array of links shown when logged in.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_logged_out_links\u003C\u002Fcode> – An array of links shown when logged out.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_display\u003C\u002Fcode> – Return false to hide the widget.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_logged_in_title\u003C\u002Fcode> – The widget title shown when logged in.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_avatar_size\u003C\u002Fcode> – The avatar size – defaulted to 38 (thats in px)\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_logged_out_title\u003C\u002Fcode> – The widget title shown when logged out.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_form_args\u003C\u002Fcode> – Arguments for the wp_login_form function.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_login_redirect\u003C\u002Fcode> – Redirect URL after login.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_logout_redirect\u003C\u002Fcode> – the redirect after logging out.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_register_url\u003C\u002Fcode> – The URL for registration links.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_lost_password_url\u003C\u002Fcode> – The URL for lost password links.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_wp_login_form\u003C\u002Fcode> – The HTML of the Login form.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Action Reference\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ccode>sidebar_login_widget_start\u003C\u002Fcode> – Fired before the widget.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_{logged_in || logged_out}_content_start\u003C\u002Fcode> – Fired before the widget content.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_before_{logged_in || logged_out}_links\u003C\u002Fcode> – Fired before the links.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_after_{logged_in || logged_out}_links\u003C\u002Fcode> – Fire after the links.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_{logged_in || logged_out}_content_end\u003C\u002Fcode> – Fired after the widget content.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_end\u003C\u002Fcode> – Fired after the widget.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Notes\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Due to AJAX not working across different domains (see \u003Ca href=\"http:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FSame_origin_policy\" rel=\"nofollow ugc\">same_origin_policy\u003C\u002Fa>), AJAX logins will be disabled if your site it non-SSL, but the FORCE_SSL_ADMIN constant is set to true. Instead it will fallback to a traditional POST.\u003C\u002Fli>\n\u003C\u002Ful>\n","Easily add an ajax-enhanced login widget to your WordPress site sidebar.",1048824,78,"2020-10-17T20:43:00.000Z","5.5.18","5.0",[96,20,97,83,98],"login","sidebar","widget","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fsidebar-login\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsidebar-login.3.0.1.zip",85,{"slug":103,"name":104,"version":105,"author":106,"author_profile":107,"description":108,"short_description":109,"active_installs":110,"downloaded":111,"rating":112,"num_ratings":113,"last_updated":114,"tested_up_to":115,"requires_at_least":116,"requires_php":117,"tags":118,"homepage":120,"download_link":121,"security_score":122,"vuln_count":123,"unpatched_count":28,"last_vuln_date":124,"fetched_at":31},"login-sidebar-widget","Login Widget With Shortcode","6.1.2","aviplugins.com","https:\u002F\u002Fprofiles.wordpress.org\u002Favimegladon\u002F","\u003Cul>\n\u003Cli>This is a simple login form in the widget.\u003C\u002Fli>\n\u003Cli>Compatible with WordPress Multisite Installation.\u003C\u002Fli>\n\u003Cli>Use this shortcode [login_widget] to use login form in your pages\u002F posts. \u003C\u002Fli>\n\u003Cli>Just install the plugin and add the login widget in the sidebar. \u003C\u002Fli>\n\u003Cli>Change some ‘optional’ settings in \u003Ccode>Login Widget Settings\u003C\u002Fcode> (admin panel left side menu) and you are good to go. \u003C\u002Fli>\n\u003Cli>Add CSS as you prefer because the form structure is really very simple.\u003C\u002Fli>\n\u003Cli>Use this shortcode [forgot_password] in your page to display the forgot password form. Forgot password link can be added to login widget from plugin settings page.\u003C\u002Fli>\n\u003Cli>Login form is responsive.\u003C\u002Fli>\n\u003Cli>Plugin is compatible with \u003Cstrong>WPML\u003C\u002Fstrong> plugin. You can check the compatibility at \u003Ca href=\"https:\u002F\u002Fwpml.org\u002Fplugin\u002Flogin-widget-with-shortcode\u002F\" rel=\"nofollow ugc\">wpml.org\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FGIdsTLfH6Is?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch4>Other Optional Options\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Add CAPTCHA security in admin and frontend login forms.\u003C\u002Fli>\n\u003Cli>Login Logs are stored in database ( IP, login status, login time ). PRO version has options to block IPs after certain numbers of wrong login attempts.\u003C\u002Fli>\n\u003Cli>You can choose the redirect page after login. It can be a page or a custom URL.\u003C\u002Fli>\n\u003Cli>Choose redirect page after logout.\u003C\u002Fli>\n\u003Cli>Choose user profile page.\u003C\u002Fli>\n\u003Cli>Easy CSS implementation from admin panel.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Facebook Login Widget (PRO)\u003C\u002Fh4>\n\u003Cp>There is a PRO version of this plugin that supports login with \u003Cstrong>Facebook, Google, Twitter, LinkedIn, Amazon and Instagram accounts. Get it for \u003C\u002Fstrong>\u003Cstrong>USD 6.00\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.aviplugins.com\u002Ffb-login-widget-pro\u002F\" rel=\"nofollow ugc\">Click here for more details\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fdemo.aviplugins.com\u002Flogin\u002F\" rel=\"nofollow ugc\">Click here for a Live Demo\u003C\u002Fa>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The PRO version comes with a \u003Cstrong>FREE Content Restriction Addon\u003C\u002Fstrong>. Partial contents of Pages\u002F Posts or the complete Page\u002FPost can be hidden from visitors of your site.\u003C\u002Fli>\n\u003Cli>Compatible with \u003Cstrong>WooCommerce\u003C\u002Fstrong> plugin.\u003C\u002Fli>\n\u003Cli>Compatible with \u003Cstrong>WordPress Multisite\u003C\u002Fstrong> Installation.\u003C\u002Fli>\n\u003Cli>Login Logs are stored in database. IPs gets \u003Cstrong>Blocked\u003C\u002Fstrong> after a certain numbers of wrong login attempts. This ensures site’s security.\u003C\u002Fli>\n\u003Cli>IPs can be \u003Cstrong>Blocked\u003C\u002Fstrong> permanently from admin panel.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Captcha\u003C\u002Fstrong> login securiy in Frontend and Admin login Forms.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Restrict Admin panel Access\u003C\u002Fstrong> for selected user Roles. For example you can restrict Admin Panel access for “Subscriber” and “Contributor” from your site.\u003C\u002Fli>\n\u003Cli>Use Shortcode to display login form in Post or Page.\u003C\u002Fli>\n\u003Cli>Use only Social Icons for logging in. No need to put the entire login form.\u003C\u002Fli>\n\u003Cli>Change welcome text “Howdy” from plugin settings section.\u003C\u002Fli>\n\u003Cli>Manage Forgot Password Email Body.\u003C\u002Fli>\n\u003Cli>Easy CSS implementation from admin panel.\u003C\u002Fli>\n\u003Cli>And with other useful settings. \u003Ca href=\"https:\u002F\u002Fwww.aviplugins.com\u002Ffb-login-widget-pro\u002F\" rel=\"nofollow ugc\">Click here for details\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Social Login No Setup\u003C\u002Fh4>\n\u003Cp>The plugin supports login with 30+ sites. The most important part is that it requires no Setups, no Maintanance, no need to create any APPs, APIs, Client Ids, Client Secrets or anything. Get it for \u003Cstrong>USD 3.00\u003C\u002Fstrong>. Supported sites are listed below.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Facebook\u003C\u002Fli>\n\u003Cli>Google\u003C\u002Fli>\n\u003Cli>YouTube\u003C\u002Fli>\n\u003Cli>Google Drive\u003C\u002Fli>\n\u003Cli>Gmail\u003C\u002Fli>\n\u003Cli>Twitter\u003C\u002Fli>\n\u003Cli>LinkedIn\u003C\u002Fli>\n\u003Cli>PayPal\u003C\u002Fli>\n\u003Cli>Yahoo\u003C\u002Fli>\n\u003Cli>Microsoft\u003C\u002Fli>\n\u003Cli>WordPress\u003C\u002Fli>\n\u003Cli>Amazon\u003C\u002Fli>\n\u003Cli>Github\u003C\u002Fli>\n\u003Cli>Tumblr\u003C\u002Fli>\n\u003Cli>Vimeo\u003C\u002Fli>\n\u003Cli>Reddit\u003C\u002Fli>\n\u003Cli>Dribbble\u003C\u002Fli>\n\u003Cli>Twitch\u003C\u002Fli>\n\u003Cli>Medium\u003C\u002Fli>\n\u003Cli>Discord\u003C\u002Fli>\n\u003Cli>Line\u003C\u002Fli>\n\u003Cli>Stack Exchange\u003C\u002Fli>\n\u003Cli>Stack Overflow\u003C\u002Fli>\n\u003Cli>Disqus\u003C\u002Fli>\n\u003Cli>Blogger\u003C\u002Fli>\n\u003Cli>Meetup\u003C\u002Fli>\n\u003Cli>Foursquare\u003C\u002Fli>\n\u003Cli>Yandex\u003C\u002Fli>\n\u003Cli>VKontakte\u003C\u002Fli>\n\u003Cli>Telegram\u003C\u002Fli>\n\u003Cli>Dropbox\u003C\u002Fli>\n\u003Cli>Fitbit\u003C\u002Fli>\n\u003Cli>Slack\u003C\u002Fli>\n\u003Cli>Deviantart\u003C\u002Fli>\n\u003Cli>Mailchimp\u003C\u002Fli>\n\u003Cli>Skype\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.aviplugins.com\u002Fsocial-login-no-setup\u002F\" rel=\"nofollow ugc\">Click here for more details\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fdemo.aviplugins.com\u002Fsocial-login\u002F\" rel=\"nofollow ugc\">Click here for Live Demo\u003C\u002Fa>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>Post your plugin related queries at \u003Ca href=\"https:\u002F\u002Fwww.aviplugins.com\u002Fsupport.php\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.aviplugins.com\u002Fsupport.php\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n","This is a simple login form in the widget. This will allow users to login to the site from frontend.",6000,465398,76,29,"2024-03-25T11:33:00.000Z","6.4.8","2.0.2","",[96,20,83,98,119],"widget-login","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Flogin-sidebar-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flogin-sidebar-widget.6.1.2.zip",61,2,"2024-12-05 00:00:00",{"slug":126,"name":127,"version":128,"author":129,"author_profile":130,"description":131,"short_description":132,"active_installs":133,"downloaded":134,"rating":135,"num_ratings":136,"last_updated":137,"tested_up_to":138,"requires_at_least":139,"requires_php":140,"tags":141,"homepage":117,"download_link":145,"security_score":146,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"toolbox-for-asgaros-forum","Toolbox for Asgaros Forum","1.2.4","Dominik Rauch","https:\u002F\u002Fprofiles.wordpress.org\u002Fqualmy91\u002F","\u003Cp>Use Toolbox for Asgaros Forum to customize your Forum without the struggle to write some code. You can easily create some custom menu entries or change the url to the User Profile.\u003C\u002Fp>\n\u003Ch4>Support & Documentation\u003C\u002Fh4>\n\u003Cp>If you need further help with Toolbox for Asgaros Forum, please visit our \u003Ca href=\"https:\u002F\u002Fwww.toolboxforasgaros.com\u002Fdocumentation\u002F\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>. For personalized assistance, consider booking an appointment with us at domra Web Solutions. Visit our \u003Ca href=\"https:\u002F\u002Fwww.domrawebsolutions.com\u002Fcontact\u002F\" rel=\"nofollow ugc\">Contact Page\u003C\u002Fa> to schedule setup and customization services. Enhance your forum experience with our Toolbox for Asgaros Forum plugin. For community support, please visit our \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Ftoolbox-for-asgaros-forum\u002F\" rel=\"ugc\">Support Forum\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Add custom menu entries at the forum menu\u003C\u002Fli>\n\u003Cli>Remove the whole menu\u003C\u002Fli>\n\u003Cli>Customize the Asgaros Forum URLs (e.g. Member List, Profile)\u003C\u002Fli>\n\u003Cli>Shortcodes to integrate Asgaros Forum Profile in the ultimate Member Profile\u003C\u002Fli>\n\u003Cli>Create a custom tab at the ultimate member profile for the forum history\u003C\u002Fli>\n\u003Cli>Allow users to upload images inside a post\u003C\u002Fli>\n\u003Cli>Subscribe Users automatically to their own topics and posts\u003C\u002Fli>\n\u003C\u002Ful>\n","This toolbox allows you to extend the functionality of Asgaros Forum.",1000,14356,100,75,"2024-05-06T05:18:00.000Z","6.5.8","4.9","5.5",[142,143,144,21],"asgarso-forum","forum","toolbox","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftoolbox-for-asgaros-forum.1.2.4.zip",92,{"slug":148,"name":149,"version":150,"author":7,"author_profile":8,"description":151,"short_description":152,"active_installs":153,"downloaded":154,"rating":146,"num_ratings":53,"last_updated":155,"tested_up_to":156,"requires_at_least":85,"requires_php":18,"tags":157,"homepage":162,"download_link":163,"security_score":146,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"um-custom-tab-builder-lite","Ultimate Member Custom Tab Builder Lite","1.0.5","\u003Cp>Use the Ultimate Member custom tab builder to add unlimited tabs with icons and slug. Add custom content or shortcodes to Ultimate Member profiles with just a few clicks.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Show tabs based on roles\u003C\u002Fli>\n\u003Cli>Change icons, slug and name from admin\u003C\u002Fli>\n\u003Cli>Language Localization ready\u003C\u002Fli>\n\u003Cli>Add Shortcodes – Add shortcodes to profiles and change attributes with short tags.\u003C\u002Fli>\n\u003Cli>Add custom content – Add iframes, text, images, shortcodes to profiles.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Pro Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Show tabs based on roles\u003C\u002Fli>\n\u003Cli>Change icons, slug and name from admin\u003C\u002Fli>\n\u003Cli>Language Localization ready\u003C\u002Fli>\n\u003Cli>Add Shortcodes – Add shortcodes to profiles and change attributes with short tags.\u003C\u002Fli>\n\u003Cli>Add custom content – Add iframes, text, images, shortcodes to profiles.\u003C\u002Fli>\n\u003Cli>Add Profile Form – Create multiple profile forms\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Contact Form 7 Integration – Add Contact Form Shortcode to profiles and have emails sent to profile owner\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fsuiteplugins.com\u002Fdownloads\u002Fum-custom-tab-builder\u002F?utm_source=wordpress&utm_medium=plugin&utm_content=um-custom-tab-builder\" rel=\"nofollow ugc\">Get UM Custom Tab Builder\u003C\u002Fa> – Same as lite but with a few extras.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fsuiteplugins.com\u002Fdownloads\u002Fum-starter-suite\u002F?utm_source=wordpress&utm_medium=plugin&utm_content=um-custom-tab-builder\" rel=\"nofollow ugc\">Ultimate Member Plugin Bundle\u003C\u002Fa> – A bundle of all our plugins including UM Custom Tab Builder.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","An easy way to add custom profile tabs to Ultimate Member Profile. Ultimate Member 2.0 compatible",500,14878,"2024-07-29T02:59:00.000Z","6.6.5",[21,158,159,160,161],"ultimate-member-contact-form","ultimate-member-profile-tabs","ultimatemember","ultimatemember-custom-tabs","https:\u002F\u002Fsuiteplugins.com\u002Fdownloads\u002Fum-custom-tab-builder\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fum-custom-tab-builder-lite.1.0.5.zip",{"attackSurface":165,"codeSignals":215,"taintFlows":243,"riskAssessment":244,"analyzedAt":251},{"hooks":166,"ajaxHandlers":203,"restRoutes":208,"shortcodes":209,"cronEvents":214,"entryPointCount":123,"unprotectedCount":28},[167,173,177,181,185,190,192,197,200],{"type":168,"name":169,"callback":170,"file":171,"line":172},"action","login_form_middle","um_login_lost_password_link","includes\\class-um-login-core.php",21,{"type":168,"name":174,"callback":175,"file":171,"line":176},"plugins_loaded","um_login_widget_load_textdomain",22,{"type":168,"name":178,"callback":179,"file":171,"line":180},"enqueue_block_editor_assets","register_block_assets",23,{"type":168,"name":182,"callback":183,"file":171,"line":184},"wp_enqueue_scripts","um_login_widget_enqueue_scripts",25,{"type":168,"name":186,"callback":187,"priority":188,"file":171,"line":189},"dynamic_sidebar_before","um_login_widget_sidebar_enqueue_scripts",10,26,{"type":168,"name":186,"callback":187,"priority":188,"file":171,"line":191},39,{"type":168,"name":193,"callback":194,"file":195,"line":196},"init","load_files","login-widget-for-ultimate-member.php",45,{"type":168,"name":198,"callback":199,"file":195,"line":13},"widgets_init","um_login_form_register_widgets",{"type":168,"name":193,"callback":201,"file":195,"line":202},"um_login_widget_register_block",184,[204],{"action":205,"nopriv":206,"callback":205,"hasNonce":206,"hasCapCheck":206,"file":171,"line":207},"um_load_login_form",false,24,[],[210],{"tag":211,"callback":212,"file":171,"line":213},"um_login_widget","um_login_widget_shortcode_callback",20,[],{"dangerousFunctions":216,"sqlUsage":217,"outputEscaping":219,"fileOperations":29,"externalRequests":29,"nonceChecks":29,"capabilityChecks":29,"bundledLibraries":242},[],{"prepared":29,"raw":29,"locations":218},[],{"escaped":220,"rawEcho":221,"locations":222},79,9,[223,226,229,230,232,234,236,238,240],{"file":171,"line":224,"context":225},82,"raw output",{"file":227,"line":228,"context":225},"includes\\class-um-login-widget.php",59,{"file":227,"line":122,"context":225},{"file":227,"line":231,"context":225},63,{"file":227,"line":233,"context":225},65,{"file":235,"line":28,"context":225},"templates\\login-widget\\login-form.php",{"file":235,"line":237,"context":225},11,{"file":235,"line":239,"context":225},15,{"file":241,"line":188,"context":225},"templates\\login-widget\\login-view.php",[],[],{"summary":245,"deductions":246},"The 'login-widget-for-ultimate-member' plugin version 1.1.3 exhibits a mixed security posture. On the positive side, it demonstrates good practices by using prepared statements for all SQL queries and properly escaping the vast majority of its output. The absence of file operations, external HTTP requests, and bundled libraries further reduces potential attack vectors. However, the presence of one unprotected AJAX handler significantly elevates risk, as it represents an accessible entry point that could be exploited without proper authentication or authorization checks. This is a critical oversight that leaves the plugin vulnerable to unauthorized actions.\n\nThe vulnerability history for this plugin is concerning. The single recorded CVE, classified as 'PHP Remote File Inclusion,' is a high-severity vulnerability. While it is currently marked as patched, the nature of this vulnerability suggests that the plugin has, in the past, been susceptible to serious code execution attacks. The fact that a high-severity RFI vulnerability existed at all points to potential weaknesses in how the plugin handles user-supplied input for file operations, even if such operations are not present in the current static analysis. This historical context, combined with the current unprotected AJAX endpoint, suggests a pattern of potential security oversights that require careful monitoring.\n\nIn conclusion, while 'login-widget-for-ultimate-member' v1.1.3 has adopted some sound security practices, the unprotected AJAX handler is a major vulnerability that needs immediate attention. The past high-severity RFI vulnerability, even though patched, highlights a potential underlying architectural weakness. Users should proceed with caution and ensure this specific AJAX endpoint is secured or the plugin is updated to a version that addresses this issue.",[247,249],{"reason":248,"points":47},"1 AJAX handler without auth checks",{"reason":250,"points":239},"1 High severity vulnerability historically","2026-03-16T19:26:19.088Z",{"wat":253,"direct":263},{"assetPaths":254,"generatorPatterns":258,"scriptPaths":259,"versionParams":260},[255,256,257],"\u002Fwp-content\u002Fplugins\u002Flogin-widget-for-ultimate-member\u002Fbuild\u002Findex.js","\u002Fwp-content\u002Fplugins\u002Flogin-widget-for-ultimate-member\u002Fbuild\u002Fstyle-index.css","\u002Fwp-content\u002Fplugins\u002Flogin-widget-for-ultimate-member\u002Fbuild\u002Findex.asset.php",[],[255],[261,262],"login-widget-for-ultimate-member\u002Fbuild\u002Fstyle-index.css?ver=","login-widget-for-ultimate-member\u002Fbuild\u002Findex.js?ver=",{"cssClasses":264,"htmlComments":267,"htmlAttributes":268,"restEndpoints":270,"jsGlobals":272,"shortcodeOutput":274},[265,266],"um-login-widget","um-login-form-field",[],[269],"data-um-login-widget",[271],"\u002Fwp-json\u002Fum-login-widget\u002Fv1\u002Fget_member_forms",[273],"um_login_widget_params",[275],"[um_login_widget"]