[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f96ajRkb6yp6fL4OeyJhVquU9fuxxjKuFRpN1sjfqaFU":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":11,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":37,"analysis":143,"fingerprints":303},"password-requirements","WP Password Policy","3.6.0","Teydea Studio","https:\u002F\u002Fprofiles.wordpress.org\u002Fteydeastudio\u002F","\u003Cp>\u003Cstrong>WP Password Policy lets you define and enforce password policies for all users on your WordPress site.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Set rules for password length, complexity (uppercase, lowercase, digits, special characters), restricted characters, password expiration, and more. The plugin validates passwords on login, registration, password changes, and during active sessions — automatically redirecting users to reset non-compliant passwords.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key benefits:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Enforce password length and complexity rules from a single settings page.\u003C\u002Fli>\n\u003Cli>Set password expiration to ensure users update their passwords regularly.\u003C\u002Fli>\n\u003Cli>Require users to confirm their current password before making changes.\u003C\u002Fli>\n\u003Cli>Compatible with WordPress multisite networks.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Whether you manage a personal blog, a membership site, or a multisite network, WP Password Policy helps you maintain consistent password standards across all user accounts.\u003C\u002Fp>\n\u003Cp>Learn more at \u003Ca href=\"https:\u002F\u002Fwppasswordpolicy.com\u002F?utm_source=WP+Password+Policy\" rel=\"nofollow ugc\">wppasswordpolicy.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why password policies matter\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Weak passwords remain one of the most common entry points for unauthorized access to WordPress sites. Enforcing password rules helps reduce this risk and supports compliance with security best practices.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Ch4>Free Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Minimum password length\u003C\u002Fstrong> — Set and enforce the minimum number of characters for user passwords.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Maximum password length\u003C\u002Fstrong> — Limit password length to prevent denial-of-service attacks caused by hashing very long passwords.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Password complexity rules\u003C\u002Fstrong> — Require a mix of uppercase letters, lowercase letters, digits, special characters, and a minimum number of unique characters.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Consecutive username symbols\u003C\u002Fstrong> — Restrict how many consecutive characters from the username can appear in the password.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Restricted characters\u003C\u002Fstrong> — Block specific characters from being used in passwords.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Maximum password age\u003C\u002Fstrong> — Force users to update their passwords periodically (e.g., every 30 days).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Minimum password age\u003C\u002Fstrong> — Prevent users from changing their password too frequently, discouraging rapid cycling back to an old password.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Require current password\u003C\u002Fstrong> — Add a “Current Password” field to the user profile screen and validate it before allowing password changes.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom password hints\u003C\u002Fstrong> — Replace the default WordPress password hint with a policy-specific hint based on active rules.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Site Health integration\u003C\u002Fstrong> — A Site Health test reports whether your plugin settings are properly configured.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multisite\u002Fnetwork support\u003C\u002Fstrong> — Works with both standard and multisite WordPress installations.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwppasswordpolicy.com\u002Ffeatures\u002Fai-integration\u002F?utm_source=WP+Password+Policy\" rel=\"nofollow ugc\">AI integration\u003C\u002Fa>\u003C\u002Fstrong> — On WordPress 6.9+ with the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmcp-adapter\u002F\" rel=\"ugc\">MCP Adapter\u003C\u002Fa> plugin, list, configure, and delete password policies through natural language commands from any connected AI provider.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Translation-ready\u003C\u002Fstrong> — Localize the plugin into any language.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>PRO Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwppasswordpolicy.com\u002Ffeatures\u002Fpasswords-reuse-prevention\u002F?utm_source=WP+Password+Policy\" rel=\"nofollow ugc\">Prevent password reuse\u003C\u002Fa>\u003C\u002Fstrong> — Block users from reusing their previous passwords, encouraging new, unique passwords every time.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwppasswordpolicy.com\u002Ffeatures\u002Fdedicated-policies-by-user-and-or-role\u002F?utm_source=WP+Password+Policy\" rel=\"nofollow ugc\">Custom password policies per role or user\u003C\u002Fa>\u003C\u002Fstrong> — Assign different password rules for administrators, editors, WooCommerce customers, or specific users.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwppasswordpolicy.com\u002Ffeatures\u002Frestricted-passwords-list\u002F?utm_source=WP+Password+Policy\" rel=\"nofollow ugc\">Block common, weak passwords\u003C\u002Fa>\u003C\u002Fstrong> — Over 100,000 common passwords are blocked, preventing users from choosing easy-to-guess passwords.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WooCommerce integration\u003C\u002Fstrong> — Enforce password policies on WooCommerce account pages, password reset, and registration forms.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ultimate Member integration\u003C\u002Fstrong> — Enforce password policies within Ultimate Member registration and account forms.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Priority support and updates\u003C\u002Fstrong> — Get premium email support and updates.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Learn more about the PRO version at \u003Ca href=\"https:\u002F\u002Fwppasswordpolicy.com\u002Fpricing\u002F?utm_source=WP+Password+Policy\" rel=\"nofollow ugc\">wppasswordpolicy.com\u002Fpricing\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Video Tutorial\u003C\u002Fh3>\n\u003Cp>See the plugin in action:\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F7g_hWHZ4IFs?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch3>Related Plugins\u003C\u002Fh3>\n\u003Cp>Looking for a way to force users to reset their passwords immediately? Check our \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpassword-reset-enforcement\u002F\" rel=\"ugc\">Password Reset Enforcement\u003C\u002Fa> plugin — it lets you require password resets site-wide, by role, or for individual users, with WP-CLI support for automation.\u003C\u002Fp>\n","Define and enforce password policies for your WordPress site with length, complexity, and expiration rules.",100,4554,1,"2026-03-13T23:03:00.000Z","6.9.4","6.6","7.4",[19,20,21,22,23],"password-policy","password-strength","passwords","security","strong-password","https:\u002F\u002Fwppasswordpolicy.com\u002F?utm_source=WP+Password+Policy","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpassword-requirements.3.6.0.zip",0,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":11,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"teydeastudio",5,10280,30,94,"2026-04-04T21:37:52.374Z",[38,63,85,103,123],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":53,"tags":54,"homepage":58,"download_link":59,"security_score":60,"vuln_count":61,"unpatched_count":26,"last_vuln_date":62,"fetched_at":28},"password-policy-manager","Password Policy Manager | Password Manager","2.0.6","miniOrange","https:\u002F\u002Fprofiles.wordpress.org\u002Fcyberlord92\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fpassword-policy-manager\" rel=\"nofollow ugc\">Features\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fsetup-password-policy-manager-to-enforce-wordpress-password-security\" rel=\"nofollow ugc\">Setup Guide\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fpassword-policy-manager#free-demo\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Enforce Strong and Secure Password Policies with Password Policy Manager\u003C\u002Fh3>\n\u003Cp>The miniOrange \u003Cstrong>Password Policy Manager\u003C\u002Fstrong> plugin helps you enforce strong and secure password policies with features like \u003Cstrong>password reset\u003C\u002Fstrong>, \u003Cstrong>password expiry\u003C\u002Fstrong>, \u003Cstrong>password score\u003C\u002Fstrong>, and \u003Cstrong>strong password rules\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>You can manage user passwords efficiently using the user password manager, password strength meter, and history manager to enhance overall password security.\u003Cbr \u002F>\nIn case of a breach, take quick action with one-click password reset, lock inactive users, and enforce random password rules.\u003C\u002Fp>\n\u003Cp>This ensures complete protection by securing passwords, and managing both active and lock inactive users to prevent password-based attacks.\u003Cbr \u002F>\nHave questions? Reach us at \u003Cstrong>mfasupport@xecurify.com\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>What is the Password Policy Manager Plugin for WordPress?\u003C\u002Fh3>\n\u003Cp>WordPress plugin for password expiry, strength check, and secure policy enforcement. Easy to install and configure, this Password Security plugin secures your site without disrupting the user experience.\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FZnwEDbedz1A?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch3>WordPress PPM Key Features (Free Version)\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Enforce strong passwords:\u003C\u002Fstrong> Force all users to create strong passwords according to the password policy set by the admin for high Password Security.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fhow-to-setup-password-policy-setting-wordpress-password-policy-plugin\" rel=\"nofollow ugc\">Users password manager:\u003C\u002Fa>\u003C\u002Fstrong> User password manager allows the admin to manage the users’ passwords (like password strength, how many passwords are strong, etc) to check the Password Security. [password policy setup guide]\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enforce password change:\u003C\u002Fstrong> Administrators can force users to change their password on their next login using this functionality use to enforce strong passwords on their users and ensure strong Password Security.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fhow-to-set-one-click-reset-password-setting-wordpress-password-policy-plugin\" rel=\"nofollow ugc\">One click reset password:\u003C\u002Fa>\u003C\u002Fstrong> This feature allows the admin to invalidate the current password and force their users to generate a new strong password. This can be done for all users in case of any breach. This will kill all the current sessions and users will be forced to set a new strong password via email hence reinforcing the Password Security.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"http:\u002F\u002Fplugins.miniorange.com\u002Fhow-to-set-password-score-or-password-strength-checker-password-policy\" rel=\"nofollow ugc\">Password Score:\u003C\u002Fa>\u003C\u002Fstrong> It will show all the users’ password strengths. You can check whether the passwords being used are strong, medium or weak. Based on that you can use the enforce strong passwords feature to improve Password Security.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fhow-to-setup-password-expiry-time-wordpress-password-policy-plugin\" rel=\"nofollow ugc\">Auto Password Expiry:\u003C\u002Fa>\u003C\u002Fstrong> This feature allows the admin to enforce a custom time-based password expiry to improve Password Security. Once the password has expired, the users will be forced to create a new password.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Password strength:\u003C\u002Fstrong> The admin can set the minimum and maximum length of the password. You can also add constraints that you want your users to follow while setting a strong password.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Unlimited Users:\u003C\u002Fstrong> There is no user limit on the password policy manager plugin and it can be used to create password policies for unlimited users.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Which Key Features does Password Policy Manager support in the Enterprise Plan?\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\u003Cstrong>Role-Based Enforce Strong Password on First Login:\u003C\u002Fstrong> Force specific users roles to create strong passwords according to the password policy set by the admin on their first login.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User-Based One-click password Reset and Logout:\u003C\u002Fstrong> Admin can reset passwords of users at once and terminate their logged-in sessions with just one click in case of any suspicious activity using the One-click reset password. Admin can then send password reset links over email.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Redirect URL:\u003C\u002Fstrong> The admin can redirect their users to a different \u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fhow-to-set-custom-redirect-url-password-policy-manager-on-wordpress\" rel=\"nofollow ugc\">custom URL\u003C\u002Fa> using this functionality.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Active & Inactive Users Activity Log:\u003C\u002Fstrong> The admin can track the activity of all active as well as lock inactive users using this tool of the Password Policy Enterprise plan.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Logout Inactive Users:\u003C\u002Fstrong> When this setting is enabled, a user is logged out and their session is destroyed if they are inactive for more than the customizable set time limit.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multisite:\u003C\u002Fstrong> The Password Policy Manager Enterprise plugin is multisite compatible and can be used to create password policies for an entire multisite network.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>For any customization-related queries, reach us at mfasupport@xecurify.com or call us at +1 9786589387.\u003C\u002Fp>\n\u003Ch3>Upgrade to miniOrange Password Policy Manager Premium Plan for Advanced Security\u003C\u002Fh3>\n\u003Cp>The premium plan of miniOrange WordPress Password Policy Manager gives you complete control over how users can secure passwords, helping you enforce policies across all roles, customize the login experience, and secure even the most complex WordPress setups.\u003C\u002Fp>\n\u003Cp>With the premium \u003Cstrong>Password Policy Manager\u003C\u002Fstrong> plugin offers advanced \u003Cstrong>password security features\u003C\u002Fstrong>, including role-based and user-based password policies. It also supports custom login forms like WooCommerce, Elementor, Ultimate Member, and more.\u003C\u002Fp>\n\u003Ch4>Premium Features List\u003C\u002Fh4>\n\u003Cblockquote>\n\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fhow-to-set-password-policy-role-based\" rel=\"nofollow ugc\">Role-Based and User-Based Password Policies:\u003C\u002Fa>\u003C\u002Fstrong> Admin can set different [role-based as well as user-based policies] and enforce password policy changes to ensure strong Password Security.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User-Based Enforce Strong Password on First Login:\u003C\u002Fstrong> Force a specific set of users to create strong passwords according to the password policy set by the admin on their first login to maintain strong Password Security. \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Role-Based Enforce Password Change:\u003C\u002Fstrong> Administrators can enforce specific sets of roles to change their passwords on their next login using this configuration to enhance Password Security.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fhow-to-set-one-click-reset-password-policy-role-based\" rel=\"nofollow ugc\">Role-Based One-click password Reset and Logout:\u003C\u002Fa>\u003C\u002Fstrong> Using [one-click reset password])  feature, the admin can reset passwords of all users \u002F particular roles at once and terminate all logged-in sessions with just one click in case of any suspicious activity. Admin can then send the password reset link over email.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fhow-to-generate-random-password\" rel=\"nofollow ugc\">Generate Random Passwords:\u003C\u002Fa>\u003C\u002Fstrong> Generate random passwords generates a random strong password containing all variations to make the password security strong and secure against brute force attacks.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fhow-to-apply-automatically-lock-inactive-user\" rel=\"nofollow ugc\">Automatically Lock Inactive Users:\u003C\u002Fa>\u003C\u002Fstrong> It will lock the user automatically if the user is inactive for the custom-specified time period. This can be set for particular roles as well as users.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fhow-to-set-password-history-management\" rel=\"nofollow ugc\">Password History Manager:\u003C\u002Fa>\u003C\u002Fstrong> It will manage the history of all the recently used passwords for each user, so no user can reuse a previous password.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Active Users Activity Log:\u003C\u002Fstrong> The admin can track the activity of all Active Users using this setting of the Password Policy Premium plan.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Login Forms Supported:\u003C\u002Fstrong>  The Premium plan also supports the following custom login forms: WooCommerce, Ultimate Member, Elementor Pro, BBPress, Gravity Forms, Ninja Forms, Buddy Press, User Registration, User Pro, MemberPress, and many others.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Single Site:\u003C\u002Fstrong> The Password Policy Manager Premium plugin is single-site compatible and can be used to create password policies on only one site at a time.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fblockquote>\n\u003Ch3>Why You Need to Register with miniOrange\u003C\u002Fh3>\n\u003Cp>Some advanced features in the \u003Cstrong>Password Policy Manager\u003C\u002Fstrong> plugin, like one-click password reset and random password generation.\u003Cbr \u002F>\nCore functionalities such as enforcing strong password policies, password expiry, password history, and locking inactive users work without registration.\u003C\u002Fp>\n\u003Cp>Customized solutions and active support for the miniOrange Password Policy Manager plugin are available. Email us at mfasupport@xecurify.com or call us at +1 9786589387.\u003C\u002Fp>\n","Enforce strong passwords with expiry, reset, score checks, inactive user lock, and user password management using Password Policy Manager.",6000,93974,88,14,"2025-10-20T08:18:00.000Z","6.8.5","4.6","5.3.0",[55,20,56,57,23],"password-security","reset-password","secure-password","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpassword-policy-manager.2.0.6.zip",96,2,"2025-10-24 18:09:09",{"slug":64,"name":65,"version":66,"author":67,"author_profile":68,"description":69,"short_description":70,"active_installs":71,"downloaded":72,"rating":73,"num_ratings":74,"last_updated":75,"tested_up_to":76,"requires_at_least":77,"requires_php":58,"tags":78,"homepage":82,"download_link":83,"security_score":84,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"wc-password-strength-settings","Password Strength Settings for WooCommerce","3.0.1","Danny Santoro","https:\u002F\u002Fprofiles.wordpress.org\u002Fdanielsantoro\u002F","\u003Cp>Help secure your WooCommerce site by enforcing stronger passwords and taking additional control of your strength requirements.\u003C\u002Fp>\n\u003Ch3>What does this plugin do?\u003C\u002Fh3>\n\u003Cp>WooCommerce has an integrated Password Strength Meter which forces users to use strong passwords. Sometimes this isn’t desirable – with this plugin, you can choose between five password levels ranging from “Anything Goes” to “Strong Passwords Only”. In addition, you can modify the colors and appearance of these custom messages, as well as modify or remove the password hint. For details on how the password strength is determined, \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FDanielSantoro\u002Fwc-password-strength-settings\u002Fwiki\u002FHow-Password-Strength-is-Determined\" rel=\"nofollow ugc\">please read the documentation here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>What’s New?\u003C\u002Fh4>\n\u003Cp>Version 3.0.0 is a bit of a rewrite to bring the plugin up to modern coding standards. Functionality should not be impacted, but if it is, please reach out on the support forums.\u003C\u002Fp>\n\u003Cp>Version 3.0.1 is simply a hotfix declaring compatibility with WooCommerce HPOS. Since this plugin doesn’t touch anything with the orders or order metadata, it shouldn’t be impacted at all. \u003Cem>However\u003C\u002Fem>, if you notice any issues then please reach out via the contact form on my website.\u003C\u002Fp>\n\u003Ch4>Notes\u003C\u002Fh4>\n\u003Cp>While this does allow for user accounts to have weaker passwords, it’s a good idea to still encourage strong password use – \u003Cem>especially\u003C\u002Fem> for administrators!\u003C\u002Fp>\n\u003Ch4>Planned Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Option to remove “- Please enter a stronger password.” that is added by WordPress.\u003C\u002Fli>\n\u003Cli>Nothing else at the moment, but let me know if you have any ideas.\u003C\u002Fli>\n\u003C\u002Ful>\n","Help secure your WooCommerce site by enforcing stronger passwords and taking additional control of your strength requirements.",10000,176985,90,24,"2023-10-11T20:51:00.000Z","6.3.8","5.8",[79,21,22,80,81],"accounts","users","woocommerce","https:\u002F\u002Fdanielsantoro.com\u002Fproject\u002Fwoocommerce-password-strength-settings-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwc-password-strength-settings.zip",85,{"slug":86,"name":87,"version":88,"author":89,"author_profile":90,"description":91,"short_description":92,"active_installs":93,"downloaded":94,"rating":95,"num_ratings":32,"last_updated":96,"tested_up_to":15,"requires_at_least":97,"requires_php":98,"tags":99,"homepage":58,"download_link":102,"security_score":11,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"expire-user-passwords","Expire User Passwords","1.4.2","Matt Miller","https:\u002F\u002Fprofiles.wordpress.org\u002Fmillermedianow\u002F","\u003Cp>Note: This is a forked version of the now unsupported \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fexpire-passwords\u002F\" rel=\"ugc\">Expire Passwords\u003C\u002Fa> plugin. The notes below are copied over from the original plugin and will be updated as relevant updates become available. Please help by contributing to the GitHub repository \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FMiller-Media\u002Fexpire-passwords\" rel=\"nofollow ugc\">Expire Passwords\u003C\u002Fa> on GitHub\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Did you find this plugin helpful? Please consider \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fview\u002Fplugin-reviews\u002Fexpire-user-passwords\" rel=\"ugc\">leaving a 5-star review\u003C\u002Fa>.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Harden the security of your site by preventing unauthorized access to stale user accounts.\u003C\u002Fp>\n\u003Cp>This plugin is also ideal for sites needing to meet certain industry security compliances – such as government, banking or healthcare.\u003C\u002Fp>\n\u003Cp>In the plugin settings you can set the maximum number of days users are allowed to use the same password (90 days by default), as well as which user roles will be required to reset their passwords regularly (non-Administrators by default).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Languages supported:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Albanian (Shqip)\u003C\u002Fli>\n\u003Cli>Arabic (العربية)\u003C\u002Fli>\n\u003Cli>Armenian (Հայերեն)\u003C\u002Fli>\n\u003Cli>Basque (Euskara)\u003C\u002Fli>\n\u003Cli>Bengali (বাংলা)\u003C\u002Fli>\n\u003Cli>Bulgarian (Български)\u003C\u002Fli>\n\u003Cli>Catalan (Català)\u003C\u002Fli>\n\u003Cli>Chinese Simplified (简体中文)\u003C\u002Fli>\n\u003Cli>Croatian (Hrvatski)\u003C\u002Fli>\n\u003Cli>Czech (Čeština)\u003C\u002Fli>\n\u003Cli>Danish (Dansk)\u003C\u002Fli>\n\u003Cli>Dutch (Nederlands)\u003C\u002Fli>\n\u003Cli>Estonian (Eesti)\u003C\u002Fli>\n\u003Cli>Finnish (Suomi)\u003C\u002Fli>\n\u003Cli>French (Français)\u003C\u002Fli>\n\u003Cli>Galician (Galego)\u003C\u002Fli>\n\u003Cli>Georgian (ქართული)\u003C\u002Fli>\n\u003Cli>German (Deutsch)\u003C\u002Fli>\n\u003Cli>Greek (Ελληνικά)\u003C\u002Fli>\n\u003Cli>Hebrew (עברית)\u003C\u002Fli>\n\u003Cli>Hindi (हिन्दी)\u003C\u002Fli>\n\u003Cli>Hungarian (Magyar)\u003C\u002Fli>\n\u003Cli>Indonesian (Bahasa Indonesia)\u003C\u002Fli>\n\u003Cli>Irish (Gaeilge)\u003C\u002Fli>\n\u003Cli>Italian (Italiano)\u003C\u002Fli>\n\u003Cli>Japanese (日本語)\u003C\u002Fli>\n\u003Cli>Korean (한국어)\u003C\u002Fli>\n\u003Cli>Latvian (Latviešu)\u003C\u002Fli>\n\u003Cli>Lithuanian (Lietuvių)\u003C\u002Fli>\n\u003Cli>Macedonian (Македонски)\u003C\u002Fli>\n\u003Cli>Norwegian (Norsk)\u003C\u002Fli>\n\u003Cli>Persian (فارسی)\u003C\u002Fli>\n\u003Cli>Persian – Afghanistan (دری)\u003C\u002Fli>\n\u003Cli>Polish (Polski)\u003C\u002Fli>\n\u003Cli>Portuguese – Brazil (Português do Brasil)\u003C\u002Fli>\n\u003Cli>Portuguese – Portugal (Português)\u003C\u002Fli>\n\u003Cli>Romanian (Română)\u003C\u002Fli>\n\u003Cli>Russian (Русский)\u003C\u002Fli>\n\u003Cli>Serbian (Српски)\u003C\u002Fli>\n\u003Cli>Slovak (Slovenčina)\u003C\u002Fli>\n\u003Cli>Slovenian (Slovenščina)\u003C\u002Fli>\n\u003Cli>Spanish (Español)\u003C\u002Fli>\n\u003Cli>Swedish (Svenska)\u003C\u002Fli>\n\u003Cli>Tamil (தமிழ்)\u003C\u002Fli>\n\u003Cli>Thai (ไทย)\u003C\u002Fli>\n\u003Cli>Turkish (Türkçe)\u003C\u002Fli>\n\u003Cli>Ukrainian (Українська)\u003C\u002Fli>\n\u003Cli>Urdu (اردو)\u003C\u002Fli>\n\u003Cli>Vietnamese (Tiếng Việt)\u003C\u002Fli>\n\u003Cli>Welsh (Cymraeg)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Development of this plugin is done \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FMiller-Media\u002Fexpire-passwords\" rel=\"nofollow ugc\">on GitHub\u003C\u002Fa>. Pull requests welcome. Please see \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FMiller-Media\u002Fexpire-passwords\u002Fissues\" rel=\"nofollow ugc\">issues reported\u003C\u002Fa> there before going to the plugin forum.\u003C\u002Fstrong>\u003C\u002Fp>\n","Require certain users to change their passwords on a regular basis.",3000,57937,84,"2026-02-17T09:27:00.000Z","4.0","8.1",[100,101,21,22,80],"login","membership","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fexpire-user-passwords.1.4.2.zip",{"slug":104,"name":105,"version":106,"author":107,"author_profile":108,"description":109,"short_description":110,"active_installs":111,"downloaded":112,"rating":113,"num_ratings":114,"last_updated":115,"tested_up_to":116,"requires_at_least":117,"requires_php":58,"tags":118,"homepage":120,"download_link":121,"security_score":122,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"password-strength-for-woocommerce","Password Strength for WooCommerce","1.0.3","WP Zone","https:\u002F\u002Fprofiles.wordpress.org\u002Faspengrovestudios\u002F","\u003Cp>This plugin disables password strength enforcement in WooCommerce. Future versions may allow the user to change the minimum password strength rather than disabling it altogether.\u003C\u002Fp>\n\u003Cp>Disabling the minimum password strength is not recommended from a security standpoint. Use at your own risk!\u003C\u002Fp>\n\u003Cp>If you like this plugin, please consider leaving a comment or review.\u003C\u002Fp>\n\u003Ch3>You may also like these plugins\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpzone.co\u002F\" rel=\"nofollow ugc\">WP Zone\u003C\u002Fa> has built a bunch of plugins, add-ons, and themes. Check out other favorites here on the repository and don’t forget to leave a 5-star review to help others in the community decide.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fproduct-sales-report-for-woocommerce\u002F\" rel=\"ugc\">Product Sales Report for WooCommerce\u003C\u002Fa> – setup a custom sales report for the products in your WooCommerce store with toggle sorting options. Including or excluding items based on date range, sale status, product category and id, define display order, choose what fields to include, and generate your report with a click.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fexport-order-items-for-woocommerce\u002F\" rel=\"ugc\">Export Order Items for WooCommerce\u003C\u002Fa> – export the order details for each sale in your WooCommerce store. Simplify order fulfillment, generate accounting reports in a few clicks, and download into CSV format for readability and universal compatibility with Export Order Items.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Freplace-image\u002F\" rel=\"ugc\">Replace Image\u003C\u002Fa> – keep the same URL when uploading to the WordPress media library\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fforce-update-check-for-plugins-and-themes\u002F\" rel=\"ugc\">Force Update Check for Plugins and Themes\u003C\u002Fa> -force Update Check for Plugins and Themes forces WordPress to run a theme and plugin update check whenever you visit the WordPress updates page\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fconnect-sendgrid-for-emails\u002F\" rel=\"ugc\">Connect SendGrid for Emails\u003C\u002Fa> –  connect SendGrid for Emails is a third-party fork of (and a drop-in replacement for) the official SendGrid plugin\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcustom-css-and-javascript\u002F\" rel=\"ugc\">Custom CSS and JavaScript\u003C\u002Fa> – allows you to add custom site-wide CSS styles and JavaScript code to your WordPress site. Useful for overriding your theme’s styles and adding client-side functionality.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdisable-user-registration-notification-emails\u002F\" rel=\"ugc\">Disable User Registration Notification Emails\u003C\u002Fa> – when this plugin is activated, it disables the notification sent to the admin email when a new user account is registered.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fimage-upload-for-bbpress\u002F\" rel=\"ugc\">Inline Image Upload for BBPress\u003C\u002Fa> – enables the TinyMCE WYSIWYG editor for BBPress forum topics and replies and adds a button to the editor’s “Insert\u002Fedit image” dialog that allows forum users to upload images from their computer and insert them inline into their posts.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdonations-for-woocommerce\u002F\" rel=\"ugc\">Potent Donations for WooCommerce\u003C\u002Fa> – acceptance donations through your WooCommerce store\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fshortcodes-for-divi\u002F\" rel=\"ugc\">Shortcodes for Divi\u003C\u002Fa> – allows to use Divi Library layouts as shortcodes everywhere where text comes.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fstock-export-and-import-for-woocommerce\u002F\" rel=\"ugc\">Stock Export and Import for WooCommerce\u003C\u002Fa> – generates reports on the stock status (in stock \u002F out of stock) and quantity of individual WooCommerce products.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Frandom-quiz-addon-for-lifterlms\u002F\" rel=\"ugc\">Random Quiz Generator for LifterLMS\u003C\u002Fa> – pull a random set of questions from your quiz so users never get the same question twice when retaking or setting up a practice quiz.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-and-divi-icons\u002F\" rel=\"ugc\">WP and Divi Icons\u003C\u002Fa> – adds over 660 custom outline SVG icons to your website. SVG icons are vector icons, so they are sharp and look good on any screen at any size.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-layouts\u002F\" rel=\"ugc\">WP Layouts\u003C\u002Fa> – the best way to organize, import, and export your layouts, especially if you have multiple websites.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-squish\u002F\" rel=\"ugc\">WP Squish\u003C\u002Fa> – reduce the amount of storage space consumed by your WordPress installation through the application of user-definable JPEG compression levels and image resolution limits to uploaded images.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>To view WP Zone’s premium WordPress plugins and themes, visit our \u003Ca href=\"https:\u002F\u002Fwpzone.co\u002Fproduct\u002F\" rel=\"nofollow ugc\">WordPress products catalog page\u003C\u002Fa>\u003C\u002Fp>\n","Disables password strength enforcement in WooCommerce.",1000,27179,86,6,"2024-08-12T19:56:00.000Z","6.6.5","3.5",[119,20,22,81],"password","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpassword-strength-for-woocommerce\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpassword-strength-for-woocommerce.1.0.3.zip",92,{"slug":124,"name":125,"version":126,"author":127,"author_profile":128,"description":129,"short_description":130,"active_installs":131,"downloaded":132,"rating":133,"num_ratings":134,"last_updated":135,"tested_up_to":15,"requires_at_least":136,"requires_php":58,"tags":137,"homepage":141,"download_link":142,"security_score":11,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"no-weak-passwords","No Weak Passwords","1.0.2","David Anderson \u002F Team Updraft","https:\u002F\u002Fprofiles.wordpress.org\u002Fdavidanderson\u002F","\u003Cp>This plugin forbids any user to choose any password from the “common passwords list” obtained from http:\u002F\u002Fwww.openwall.com\u002Fpasswords\u002Fwordlists\u002F, and requires any who are already doing so to reset their passwords.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>Copyright 2012- David Anderson\u003C\u002Fp>\n\u003Cp>MIT License:\u003C\u002Fp>\n\u003Cp>Permission is hereby granted, free of charge, to any person obtaining\u003Cbr \u002F>\na copy of this software and associated documentation files (the\u003Cbr \u002F>\n“Software”), to deal in the Software without restriction, including\u003Cbr \u002F>\nwithout limitation the rights to use, copy, modify, merge, publish,\u003Cbr \u002F>\ndistribute, sublicense, and\u002For sell copies of the Software, and to\u003Cbr \u002F>\npermit persons to whom the Software is furnished to do so, subject to\u003Cbr \u002F>\nthe following conditions:\u003C\u002Fp>\n\u003Cp>The above copyright notice and this permission notice shall be\u003Cbr \u002F>\nincluded in all copies or substantial portions of the Software.\u003C\u002Fp>\n\u003Cp>THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND,\u003Cbr \u002F>\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\u003Cbr \u002F>\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\u003Cbr \u002F>\nNONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE\u003Cbr \u002F>\nLIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\u003Cbr \u002F>\nOF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION\u003Cbr \u002F>\nWITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\u003C\u002Fp>\n","This plugin forbids any user to choose any password from the \"common passwords list\" obtained from http:\u002F\u002Fwww.openwall.",400,9090,80,4,"2025-11-12T16:20:00.000Z","3.2",[138,139,20,21,140],"ban-passwords","ban-weak-passwords","weak-passwords","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fno-weak-passwords","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fno-weak-passwords.1.0.2.zip",{"attackSurface":144,"codeSignals":284,"taintFlows":295,"riskAssessment":296,"analyzedAt":302},{"hooks":145,"ajaxHandlers":280,"restRoutes":281,"shortcodes":282,"cronEvents":283,"entryPointCount":26,"unprotectedCount":26},[146,152,157,161,165,168,172,176,180,184,188,192,197,202,206,210,213,218,223,227,232,235,237,240,243,248,252,256,260,264,269,273,276],{"type":147,"name":148,"callback":149,"file":150,"line":151},"action","init","register_cache_invalidation_listeners","deps\\php\\universal-modules\\class-module-cache-invalidation.php",27,{"type":147,"name":153,"callback":154,"file":155,"line":156},"rest_api_init","register_endpoints","deps\\php\\universal-modules\\class-module-endpoint-settings.php",40,{"type":147,"name":148,"callback":158,"file":159,"line":160},"setup_class_properties","deps\\php\\universal-modules\\class-module-settings-page.php",70,{"type":147,"name":162,"callback":163,"file":159,"line":164},"network_admin_menu","register_settings_page",73,{"type":147,"name":166,"callback":163,"file":159,"line":167},"admin_menu",76,{"type":147,"name":169,"callback":170,"file":159,"line":171},"admin_init","maybe_redirect_after_activation",79,{"type":147,"name":173,"callback":174,"file":159,"line":175},"admin_enqueue_scripts","enqueue_scripts",82,{"type":177,"name":178,"callback":179,"file":159,"line":84},"filter","admin_body_class","filter_admin_body_class",{"type":147,"name":169,"callback":181,"file":182,"line":183},"maybe_update_capabilities","deps\\php\\utils\\class-container.php",270,{"type":147,"name":185,"callback":186,"file":182,"line":187},"granted_super_admin","add_network_capabilities_to_user",275,{"type":147,"name":189,"callback":190,"file":182,"line":191},"revoked_super_admin","remove_network_capabilities_from_user",278,{"type":147,"name":193,"callback":194,"file":195,"line":196},"plugins_loaded","closure","password-requirements.php",35,{"type":147,"name":198,"callback":199,"file":200,"line":201},"wp_abilities_api_categories_init","register_categories","src\\modules\\class-module-abilities.php",42,{"type":147,"name":203,"callback":204,"file":200,"line":205},"wp_abilities_api_init","register_abilities",45,{"type":147,"name":169,"callback":207,"file":208,"line":209},"on_interaction","src\\modules\\class-module-compliance-on-interaction.php",36,{"type":147,"name":211,"callback":207,"file":208,"line":212},"parse_request",39,{"type":147,"name":214,"callback":215,"file":216,"line":217},"login_form","render_nonce_field","src\\modules\\class-module-compliance-on-login.php",31,{"type":177,"name":219,"callback":220,"priority":221,"file":216,"line":222},"login_redirect","on_login",99,34,{"type":177,"name":224,"callback":225,"file":216,"line":226},"login_message","filter_login_message",37,{"type":147,"name":228,"callback":229,"priority":13,"file":230,"line":231},"wp_update_user","on_update_user","src\\modules\\class-module-compliance-on-password-change.php",33,{"type":147,"name":233,"callback":234,"priority":13,"file":230,"line":209},"wp_set_password","on_password_set",{"type":147,"name":236,"callback":236,"priority":13,"file":230,"line":212},"validate_password_reset",{"type":147,"name":238,"callback":239,"priority":13,"file":230,"line":201},"password_reset","on_password_reset",{"type":147,"name":241,"callback":242,"priority":13,"file":230,"line":205},"user_profile_update_errors","on_user_profile_update",{"type":177,"name":244,"callback":245,"priority":246,"file":230,"line":247},"allow_password_reset","filter_allow_password_reset",10,48,{"type":177,"name":249,"callback":250,"priority":246,"file":230,"line":251},"show_password_fields","filter_show_password_fields",51,{"type":147,"name":253,"callback":254,"priority":246,"file":255,"line":34},"user_register","after_user_registered","src\\modules\\class-module-compliance-on-register.php",{"type":147,"name":153,"callback":257,"file":258,"line":259},"register_endpoint","src\\modules\\class-module-endpoint-should-change-password.php",32,{"type":147,"name":261,"callback":262,"file":263,"line":151},"clear_auth_cookie","clear_dangling_cookie_data","src\\modules\\class-module-logout-cleanup.php",{"type":177,"name":265,"callback":266,"file":267,"line":268},"password_hint","filter_password_hint","src\\modules\\class-module-password-hint.php",29,{"type":147,"name":270,"callback":271,"file":272,"line":156},"show_user_profile","add_current_password_field","src\\modules\\class-module-require-current-password.php",{"type":147,"name":241,"callback":274,"priority":13,"file":272,"line":275},"validate_current_password",43,{"type":177,"name":277,"callback":278,"file":279,"line":196},"site_status_tests","register_site_health_tests","src\\modules\\class-module-site-health.php",[],[],[],[],{"dangerousFunctions":285,"sqlUsage":286,"outputEscaping":292,"fileOperations":26,"externalRequests":26,"nonceChecks":134,"capabilityChecks":26,"bundledLibraries":294},[],{"prepared":26,"raw":13,"locations":287},[288],{"file":289,"line":290,"context":291},"deps\\php\\utils\\class-users.php",72,"$wpdb->get_var() with variable interpolation",{"escaped":205,"rawEcho":26,"locations":293},[],[],[],{"summary":297,"deductions":298},"The \"password-requirements\" v3.6.0 plugin exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of any recorded CVEs, particularly with no currently unpatched vulnerabilities, suggests a history of responsible development and timely patching. The code analysis reveals no critical or high severity taint flows, no dangerous functions, and a complete absence of file operations or external HTTP requests. Furthermore, all output is properly escaped, which is a crucial defense against cross-site scripting (XSS) vulnerabilities. The plugin also implements nonce checks and capability checks, which are fundamental for securing WordPress actions. The attack surface is notably zero, with no exposed AJAX handlers, REST API routes, shortcodes, or cron events without proper authentication or permission checks. \n\nHowever, one significant concern arises from the SQL query analysis: one SQL query is present, and it is not using prepared statements. This represents a potential risk for SQL injection vulnerabilities, even if the query itself doesn't appear to be directly handling user-supplied input in a way that creates an immediate critical risk. The lack of any capability checks on the identified entry points (though there are zero entry points) is also a theoretical concern, but mitigated by the zero attack surface. Overall, the plugin is commendably secure, but the un-prepared SQL query warrants attention to further harden its security.",[299],{"reason":300,"points":301},"Raw SQL query without prepared statements",7,"2026-03-16T20:42:55.878Z",{"wat":304,"direct":313},{"assetPaths":305,"generatorPatterns":308,"scriptPaths":309,"versionParams":310},[306,307],"\u002Fwp-content\u002Fplugins\u002Fpassword-requirements\u002Fbuild\u002Fpassword-requirements\u002Findex.css","\u002Fwp-content\u002Fplugins\u002Fpassword-requirements\u002Fbuild\u002Fpassword-requirements\u002Findex.js",[],[307],[311,312],"password-requirements\u002Findex.css?ver=","password-requirements\u002Findex.js?ver=",{"cssClasses":314,"htmlComments":315,"htmlAttributes":316,"restEndpoints":318,"jsGlobals":319,"shortcodeOutput":323},[],[],[317],"data-prefix=\"password-requirements\"",[],[320,321,322],"window.teydeaStudio.passwordRequirements.environment","window.teydeaStudio.passwordRequirements.plugin","window.teydeaStudio.passwordRequirements.plugin.isPro",[]]