[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fM7YE-MrbwIuTnJ1KQV-yvCXlw5qyE5tGwfBTrqlHBTk":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":18,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":37,"analysis":137,"fingerprints":203},"profile-picture","Profile Picture","1.0","Arul Jayaraj","https:\u002F\u002Fprofiles.wordpress.org\u002Faruljayarajs\u002F","\u003Cp>Users can set his profile picture from admin end and as well as Front End.\u003C\u002Fp>\n\u003Cp>Admin End it would come automatically based on the user role, who has \u003Ccode>upload_files\u003C\u002Fcode> capability, otherwise we need to assign capability to them.\u003C\u002Fp>\n\u003Cp>In Front End when we use \u003Ccode>\u003C?php do_action('edit_user_profile',$current_user); ?>\u003C\u002Fcode> on edit profile section, it would be placed on additonal user profile fields.\u003C\u002Fp>\n\u003Cp>*Future Updates: Display current user images alone, short code and migrate withsocial media profile pictures.\u003C\u002Fp>\n","Set a profile picture as your wish using media upload.",80,8715,86,3,"2016-06-03T02:30:00.000Z","4.5.33","3.0","",[20,21,4,22,23],"custom-profile-picture","profile-photo","user-photo","user-profile-picture","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fprofile-picture.1.0.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":25,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"aruljayarajs",2,280,30,84,"2026-04-05T02:28:12.930Z",[38,58,77,95,112],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":18,"tags":53,"homepage":56,"download_link":57,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"custom-user-profile-photo","Custom User Profile Photo","0.5.3","Vincent Listrani","https:\u002F\u002Fprofiles.wordpress.org\u002Fvincentlistrani\u002F","\u003Cp>A more flexible way to attach and display a photo for a WordPress user profile.\u003C\u002Fp>\n\u003Cp>Some users might not have or want to have a gravatar account or other universal avatar account. They simply may want to use a one-time specified photo to represent them on your WordPress site. This plugin solves that use case.\u003C\u002Fp>\n\u003Cp>With the ability to upload a photo to a user profile via the WordPress Media Uploader or by specifying an external URL to an image, your users and\u002For authors can have a personalized photo specific to your website.*\u003C\u002Fp>\n\u003Cp>This plugin will add a custom set of fields to the user profile page which will allow for the use of a custom profile photo.\u003C\u002Fp>\n\u003Cp>You can add\u002Fchange\u002Fedit uploaded photos directly from the user profile page. The external option allows you to provide a URL to the external image or remove it.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>As of v0.4\u003C\u002Fstrong>, the plugin now filters the get_avatar() function found in most WordPress themes.\u003C\u002Fp>\n\u003Cp>Simply go to the users section and select a user or select “Your Profile” depending on your permission level. The new fields are added to the bottom of the user profile page. Choose which type of photo you want to use. Upload an image or add an external url. Then press the Update Profile button.\u003C\u002Fp>\n\u003Cp>If you require a customized approach or your theme does not support the get_avatar() hook, use the example below.\u003C\u002Fp>\n\u003Cp>To retrieve the photo on the front-end use the following example on your template page(s).\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\n    \u002F\u002F Retrieve The Post's Author ID\n    $user_id = get_the_author_meta('ID');\n    \u002F\u002F Set the image size. Accepts all registered images sizes and array(int, int)\n    $size = 'thumbnail';\n\n    \u002F\u002F Get the image URL using the author ID and image size params\n    $imgURL = get_cupp_meta($user_id, $size);\n\n    \u002F\u002F Print the image on the page\n    echo '\u003Cimg src=\"'. $imgURL .'\" alt=\"\">';\n?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>You will need to place the code above in each area of your theme where you wish to add and retrieve your theme’s custom avatar image. This can include but is not limited to single.php, page.php, and comments.php.\u003C\u002Fp>\n\u003Cp>*Future Updates to this plugin include allowing other roles to access this feature, a settings page to allow a custom default image and other options.\u003C\u002Fp>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>English – default, always included\u003C\u002Fli>\n\u003Cli>Dutch\u003C\u002Fli>\n\u003Cli>Hungarian\u003C\u002Fli>\n\u003Cli>Spanish\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Thanks to \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Ffinalwebsites\u002F\" rel=\"nofollow ugc\">Olaf Lederer\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fharkalygergo\" rel=\"nofollow ugc\">Harkály Gergő\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fsqhendr\u002F\" rel=\"nofollow ugc\">sqhendr\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fsomtijds\u002F\" rel=\"nofollow ugc\">SOMTIJDS\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.closemarketing.es\" rel=\"nofollow ugc\">David Pérez\u003C\u002Fa>\u003C\u002Fp>\n","Add a customized User Profile photo to a WordPress user profile.",5000,150231,88,26,"2017-05-24T05:25:00.000Z","4.7.32","3.6.1",[54,20,21,4,55],"custom-profile-photo","user-profile","http:\u002F\u002Fvincentlistrani.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-user-profile-photo.0.5.3.zip",{"slug":59,"name":60,"version":6,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":65,"num_ratings":32,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":18,"tags":70,"homepage":75,"download_link":76,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"author-image","WP Custom Author Image","p4wparamjeet","https:\u002F\u002Fprofiles.wordpress.org\u002Fp4wparamjeet\u002F","\u003Cp>The WP Custom Author Image plugin for WordPress lets you easily add WP Custom Author Images on your site.\u003C\u002Fp>\n\u003Cp>It creates a widget that you can insert in a sidebar or any other widget area allowed by your theme.\u003Cbr \u002F>\nThe plugin now supports a short code [wp-custom-author-image] you can use to directly add the image to the page or post content.\u003C\u002Fp>\n\u003Cp>Alternatively, you can place the following call in the loop where you want the WP Custom Author Image to appear:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php the_wp_custom_author_image($author_id = null); ?>\n\nThis $author_id parameter is optional.  If it is not passed in, the code will attempt to get the current author of the page\u002Fpost.\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>A second version of this function exists whereby you can pass in width and height to display the image.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php the_wp_custom_author_image_size($width, $height, $author_id = null); ?>\n\nThis $author_id parameter is optional.  If it is not passed in, the code will attempt to get the current author of the page\u002Fpost.\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To configure your WP Custom Author Image, browse Users \u002F Your Profile in the admin area.\u003C\u002Fp>\n\u003Ch4>Setting WP Custom Author Image Size\u003C\u002Fh4>\n\u003Cp>You can adjust the actual display size in the WP Custom Author Image widget or by using the_wp_custom_author_image_size function call.\u003C\u002Fp>\n\u003Cp>If you do not specify a size the width and height of the actual image will be used.\u003C\u002Fp>\n\u003Ch4>Shortcode\u003C\u002Fh4>\n\u003Col>\n\u003Cli>You can use [wp-custom-author-image] to display the uploaded WP Custom Author Image in your page\u002Fpost content.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Multi-Author Sites\u003C\u002Fh4>\n\u003Cp>For sites with multitudes of authors, the widget offers the ability to insert a link to the author’s posts — his archives.\u003C\u002Fp>\n\u003Ch4>Single Author Sites\u003C\u002Fh4>\n\u003Cp>Normally the widget will only display an WP Custom Author Image when it can clearly identify who the content’s author actually is. In other words, on singular pages or in the loop.\u003C\u002Fp>\n\u003Cp>If you run a single author site, or a site with multiple ghost writers, be sure to check the “This site has a single author” option. The widget will then output your image at all times.\u003C\u002Fp>\n\u003Ch4>Alternate About Page Link\u003C\u002Fh4>\n\u003Cp>Normally the widget will use the author’s posts page (\u002Fauthor\u002Fauthorname\u002F) is the image is clicked on.   If your site has a dedicated page for the author, such as an ‘About Me’ page,\u003C\u002Fp>\n\u003Cp>there is a new field in ‘Your Profile’ called ‘About Me Page’.  Entering a url in this field (\u002Fabout-me\u002F) will cause the widget to use this link as opposed to \u002Fauthor\u002Fauthorname.\u003C\u002Fp>\n\u003Ch4>Retrieving Author Url\u003C\u002Fh4>\n\u003Cp>You can retrieve the url to the respective WP Custom Author Image by calling the function\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php the_wp_custom_author_image_url($author_id = null); ?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>If $author_id is blank the plugin will attempt to determine the current author and retrieve his\u002Fher image.\u003C\u002Fp>\n","Lets you easily add WP Custom Author Images on your site.",100,2740,"2019-08-27T05:41:00.000Z","5.2.24","3.1",[71,72,22,73,74],"author","user-gravatar","user-profile-photo","wp-custom-author-image","https:\u002F\u002Fprofiles.wordpress.org\u002Fp4wparamjeet","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fauthor-image.zip",{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":85,"downloaded":86,"rating":26,"num_ratings":26,"last_updated":87,"tested_up_to":51,"requires_at_least":88,"requires_php":18,"tags":89,"homepage":93,"download_link":94,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"gitst-custom-avatar-user-profile-pictures-manager","GITST CUSTOM AVATAR","1.0.0","Haykaz Kotanjyan","https:\u002F\u002Fprofiles.wordpress.org\u002Fhkotanjyan\u002F","\u003Cp>This Avatar changes allows to change user profile picture.\u003Cbr \u002F>\nAvatar is stored in database in table gitst_avatar.\u003Cbr \u002F>\nTo use this avatar in front page  you should use the following shortcodes\u003Cbr \u002F>\n –  [gitst_set_avatar] : to display avatar set option.\u003Cbr \u002F>\n –  [gitst_display_avatar height=150 width=150] : To display\u003C\u002Fp>\n\u003Cp>Note: This plugin will override the WordPress get_avatar hook.\u003Cbr \u002F>\nNote: This pligin will create gitst_avatar table in database.\u003Cbr \u002F>\nNote: Deleting Avatar plugin will not delete gitst_avatar table from database.\u003Cbr \u002F>\nNote: Avatar stored into database as base64 file.\u003C\u002Fp>\n","Set custom AVATAR (User Profile Image) and store avatars into Database as base64 string.",60,1366,"2016-12-28T22:15:00.000Z","4.5",[90,91,55,92,23],"avatar","custom-avatar","user-profile-image","http:\u002F\u002Fgitst.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgitst-custom-avatar-user-profile-pictures-manager.zip",{"slug":96,"name":97,"version":98,"author":99,"author_profile":100,"description":101,"short_description":102,"active_installs":34,"downloaded":103,"rating":26,"num_ratings":26,"last_updated":104,"tested_up_to":105,"requires_at_least":106,"requires_php":18,"tags":107,"homepage":110,"download_link":111,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"author-avatar","author_avatar","1.0.2","Guillaume","https:\u002F\u002Fprofiles.wordpress.org\u002Fguillaume-lostweb\u002F","\u003Cp>Add an upload field in the user profile admin – Don’t want to use gravatar profile picture, or just don’t have one, just download this plugin. It will add a custom field in the user admin with the possibility to upload your own. Once uploaded, it will add the picture url inside the usermeta table so you can easily display it with \u003Ccode>get_the_author_meta\u003C\u002Fcode> .\u003C\u002Fp>\n\u003Cp>Translation ready and already available in French.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Easy to use, once activated and your picture uploaded, grab the source url with:\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Just add an image tag where you want the picture to be displayed like so:\u003C\u002Fp>\n\u003Cpre>\u003Ccode> \u003Cimg src=\"\u003C?php echo $user_meta_image;?>\" alt=\"My Custom user Profile Picture\"> \n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Et voilà!\u003C\u002Fp>\n","Add an upload field in the user profile admin to add a custom profile picture into usermeta table.",4821,"2014-03-07T23:19:00.000Z","3.8.41","3.5.1",[96,108,109,4,55],"custom-user-profile-picture","gravatar","http:\u002F\u002Flostwebdesigns.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fauthor-avatar.1.0.2.zip",{"slug":113,"name":114,"version":115,"author":116,"author_profile":117,"description":118,"short_description":119,"active_installs":120,"downloaded":121,"rating":122,"num_ratings":123,"last_updated":124,"tested_up_to":125,"requires_at_least":126,"requires_php":127,"tags":128,"homepage":132,"download_link":133,"security_score":134,"vuln_count":135,"unpatched_count":26,"last_vuln_date":136,"fetched_at":28},"simple-local-avatars","Simple Local Avatars","2.8.6","10up","https:\u002F\u002Fprofiles.wordpress.org\u002F10up\u002F","\u003Cp>Adds an avatar upload field to user profiles if the current user has media permissions. Generates requested sizes on demand just like Gravatar! Simple and lightweight.\u003C\u002Fp>\n\u003Cp>Just edit a user profile, and scroll down to the new “Avatar” field. The plug-in will take care of cropping and sizing!\u003C\u002Fp>\n\u003Col>\n\u003Cli>Stores avatars in the “uploads” folder where all of your other media is kept.\u003C\u002Fli>\n\u003Cli>Has a simple, native interface.\u003C\u002Fli>\n\u003Cli>Fully supports Gravatar and default avatars if no local avatar is set for the user – but also allows you turn off Gravatar.\u003C\u002Fli>\n\u003Cli>Generates the requested avatar size on demand (and stores the new size for efficiency), so it looks great, just like Gravatar!\u003C\u002Fli>\n\u003Cli>Lets you decide whether lower privilege users (subscribers, contributors) can upload their own avatar.\u003C\u002Fli>\n\u003Cli>Enables rating of local avatars, just like Gravatar.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Support Level\u003C\u002Fh3>\n\u003Cp>Simple Local Avatars’ support level is marked as \u003Ccode>stable\u003C\u002Fcode>.  10up is not planning to develop any new features for this, but will still respond to bug reports and security concerns.  We welcome PRs, but any that include new features should be small and easy to integrate and should not include breaking changes.  We otherwise intend to keep this tested up to the most recent version of WordPress.\u003C\u002Fp>\n","Adds an avatar upload field to user profiles. Generates requested sizes on demand just like Gravatar!",100000,2395990,92,89,"2026-02-17T19:34:00.000Z","6.9.4","6.6","7.4",[90,109,129,130,131],"profile","user-photos","users","https:\u002F\u002F10up.com\u002Fplugins\u002Fsimple-local-avatars-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-local-avatars.2.8.6.zip",93,6,"2025-08-11 18:20:29",{"attackSurface":138,"codeSignals":177,"taintFlows":196,"riskAssessment":197,"analyzedAt":202},{"hooks":139,"ajaxHandlers":173,"restRoutes":174,"shortcodes":175,"cronEvents":176,"entryPointCount":26,"unprotectedCount":26},[140,146,149,154,159,163,166,170],{"type":141,"name":142,"callback":143,"file":144,"line":145},"action","admin_enqueue_scripts","add_media_upload_scripts","class\\class_pp.php",7,{"type":141,"name":147,"callback":143,"file":144,"line":148},"wp_enqueue_scripts",8,{"type":150,"name":151,"callback":152,"file":144,"line":153},"filter","the_content","do_shortcode",12,{"type":150,"name":155,"callback":156,"priority":157,"file":144,"line":158},"get_avatar","pp_avatar",1,13,{"type":141,"name":160,"callback":161,"file":144,"line":162},"show_user_profile","pp_additional_fields",33,{"type":141,"name":164,"callback":161,"file":144,"line":165},"edit_user_profile",34,{"type":141,"name":167,"callback":168,"file":144,"line":169},"personal_options_update","pp_custom_profile_fields",36,{"type":141,"name":171,"callback":168,"file":144,"line":172},"edit_user_profile_update",37,[],[],[],[],{"dangerousFunctions":178,"sqlUsage":179,"outputEscaping":181,"fileOperations":26,"externalRequests":26,"nonceChecks":26,"capabilityChecks":194,"bundledLibraries":195},[],{"prepared":26,"raw":26,"locations":180},[],{"escaped":26,"rawEcho":182,"locations":183},4,[184,188,190,192],{"file":185,"line":186,"context":187},"html\\profile_fields.php",14,"raw output",{"file":185,"line":189,"context":187},15,{"file":185,"line":191,"context":187},21,{"file":185,"line":193,"context":187},22,5,[],[],{"summary":198,"deductions":199},"The 'profile-picture' plugin v1.0 exhibits a generally positive security posture based on the provided static analysis. The absence of known vulnerabilities in its history and the zero count for dangerous functions and SQL queries with prepared statements are strong indicators of good development practices.  The limited attack surface with no unprotected entry points further reinforces this.  However, a significant concern arises from the output escaping analysis, where 100% of the outputs are not properly escaped. This represents a critical weakness, as it leaves the plugin susceptible to Cross-Site Scripting (XSS) vulnerabilities.  While there are no current taint analysis findings, the lack of output escaping means any data processed by the plugin and then displayed to users could be manipulated by attackers. The vulnerability history being clean is a positive sign, but it does not negate the immediate risks identified in the static analysis.  The plugin's strengths lie in its minimal attack surface and secure handling of database queries, but its critical deficiency in output sanitization requires immediate attention to mitigate XSS risks.",[200],{"reason":201,"points":148},"100% of outputs unescaped","2026-03-16T21:28:05.880Z",{"wat":204,"direct":214},{"assetPaths":205,"generatorPatterns":209,"scriptPaths":210,"versionParams":211},[206,207,208],"\u002Fwp-content\u002Fplugins\u002Fprofile-picture\u002Fassets\u002Fcss\u002Fpp.css","\u002Fwp-content\u002Fplugins\u002Fprofile-picture\u002Fassets\u002Fjs\u002Fpp.js","\u002Fwp-content\u002Fplugins\u002Fprofile-picture\u002Fassets\u002Fimages\u002Ftrash.png",[],[207],[212,213],"profile-picture\u002Fassets\u002Fcss\u002Fpp.css?ver=","profile-picture\u002Fassets\u002Fjs\u002Fpp.js?ver=",{"cssClasses":215,"htmlComments":220,"htmlAttributes":221,"restEndpoints":224,"jsGlobals":225,"shortcodeOutput":227},[216,217,218,219],"pp-container","pp-picture","pp_url","pp_delete",[],[222,223],"id=\"pp_button\"","id=\"pp_url\"",[],[226],"ppvars",[]]