[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPhDmo0UM4JcjkvveYT7UMpn3v3fJAYzKfJfPWTHoW_o":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":21,"download_link":22,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25,"vulnerabilities":26,"developer":27,"crawl_stats":24,"alternatives":33,"analysis":122,"fingerprints":193},"recent-comments-with-avatars","Recent Comments with Avatars","3.5","peterwsterling","https:\u002F\u002Fprofiles.wordpress.org\u002Fpeterwsterling\u002F","\u003Cp>Once the widget is added to your sidebar you may easily configure it to provide a display of recent comments with comment author avatars.  The options are:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The title of the widget.\u003C\u002Fli>\n\u003Cli>Limit the number of comments to shown (1 to 15).\u003C\u002Fli>\n\u003Cli>Option to display the avatar of the comment author, or not.\u003C\u002Fli>\n\u003Cli>Set the size of the avatar.\u003C\u002Fli>\n\u003Cli>Chose to have the comment author’s URL (if given) open in a new window,\u003C\u002Fli>\n\u003Cli>Show the date of the comment, or not.\u003C\u002Fli>\n\u003Cli>Set the format of the date.\u003C\u002Fli>\n\u003Cli>Set the size (as a fraction of the normal text size) of the date string.\u003C\u002Fli>\n\u003Cli>Show an excerpt from the comment.\u003C\u002Fli>\n\u003Cli>Convert smilies in the excerpt.\u003C\u002Fli>\n\u003Cli>Show a country flag indicating the source of the comment, requires MySQL database modifications, see below.\u003C\u002Fli>\n\u003Cli>Show a country flag in main comment loops, non-widget, requires theme and MySQL database modifications, see below.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The style of the output may be controlled with simple CSS rules that need to be included in your \u003Ccode>styles.css\u003C\u002Fcode> template file.\u003Cbr \u002F>\n    The container (i.e. \u003Ccode>\u003Cul>\u003C\u002Fcode> or \u003Ccode>\u003Ctable>\u003C\u002Fcode>) has the id recentcomments (use CSS \u003Ccode>.recentcomments\u003C\u002Fcode>).\u003Cbr \u002F>\n    List items (i.e. \u003Ccode>\u003Cli>\u003C\u002Fcode>) have the class recentcomments (use CSS \u003Ccode>#recentcomments\u003C\u002Fcode>).\u003C\u002Fp>\n","This plug-in provides a configurable widget to display recent comments with comment author avatars.",70,19806,0,"2012-08-10T10:54:00.000Z","3.4.2","2.5","",[19,20],"avatars","comments","http:\u002F\u002Fwww.sterling-adventures.co.uk\u002Fblog\u002F2009\u002F01\u002F01\u002Fcomments-with-avatars\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frecent-comments-with-avatars.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":28,"total_installs":29,"avg_security_score":23,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},4,180,30,84,"2026-04-04T17:07:17.313Z",[34,55,76,87,105],{"slug":35,"name":36,"version":37,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":44,"num_ratings":45,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":17,"tags":49,"homepage":53,"download_link":54,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25},"wp-first-letter-avatar","WP First Letter Avatar","2.2.8","DanielAGW","https:\u002F\u002Fprofiles.wordpress.org\u002Fdanielagw\u002F","\u003Cp>WP First Letter Avatar \u003Cstrong>sets custom avatars for users without Gravatar\u003C\u002Fstrong>. The avatar will be a first letter of the user’s name. You can also configure the plugin to use any other letter to set custom avatar.\u003C\u002Fp>\n\u003Cp>WP First Letter Avatar includes a set of \u003Cstrong>beautiful, colorful letter avatars\u003C\u002Fstrong> in many sizes. Optimal size will be chosen by the plugin in order to display high quality avatar and not download, for example, big 512px avatars when only 48px is needed… \u003Cstrong>PSD template\u003C\u002Fstrong> for avatar is also included.\u003C\u002Fp>\n\u003Cp>You can also create your own avatar set by creating new directory next to \u003Cem>‘default’\u003C\u002Fem> folder and following the naming convention from \u003Cem>‘default’\u003C\u002Fem>.\u003C\u002Fp>\n\u003Cp>By default, custom avatar will be set only to users without Gravatars, but you can change that in settings and not use Gravatar at all.\u003C\u002Fp>\n\u003Cp>WP First Letter Avatar helps you \u003Cstrong>bring more colors\u003C\u002Fstrong> into your blog. Plus, your readers will be more \u003Cstrong>willing to comment on your posts\u003C\u002Fstrong>, since they can actually relate to these avatars much better than to Mystery Person.\u003C\u002Fp>\n\u003Cp>All images were compressed using the fantastic \u003Ca href=\"https:\u002F\u002Ftinypng.com\u002F\" rel=\"nofollow ugc\">TinyPNG\u003C\u002Fa>, so avatars are \u003Cstrong>incredibly light and ultra-high quality\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>WP First Letter Avatar is also available \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FDev49net\u002Fwp-first-letter-avatar\" rel=\"nofollow ugc\">on GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Compatibility with other plugins\u003C\u002Fh4>\n\u003Cp>WP First Letter Avatar is fully compatible with \u003Ca href=\"https:\u002F\u002Fbbpress.org\u002F\" rel=\"nofollow ugc\">bbPress\u003C\u002Fa> and \u003Ca href=\"http:\u002F\u002Fwww.gvectors.com\u002Fwpdiscuz\u002F\" rel=\"nofollow ugc\">wpDiscuz\u003C\u002Fa>. For \u003Ca href=\"https:\u002F\u002Fbuddypress.org\u002F\" rel=\"nofollow ugc\">BuddyPress\u003C\u002Fa> compatibility please use my other plugin – \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbuddypress-first-letter-avatar\u002F\" rel=\"ugc\">BuddyPress First Letter Avatar\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cp>WP First Letter Avatar requires at least PHP 5.4. It \u003Cstrong>does not work properly\u003C\u002Fstrong> on PHP 5.3.x and earlier.\u003C\u002Fp>\n","Set custom avatars for users with no Gravatar. The avatar will be the first (or any other) letter of user's name on a colorful background.",2000,67403,94,33,"2017-03-11T22:26:00.000Z","4.7.32","4.6",[19,50,20,51,52],"change-avatar","custom-avatar","discussion","http:\u002F\u002Fdev49.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-first-letter-avatar.zip",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":65,"num_ratings":66,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":17,"tags":70,"homepage":74,"download_link":75,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25},"easygravatars","Easy Gravatars","1.3","Dougal Campbell","https:\u002F\u002Fprofiles.wordpress.org\u002Fdougal\u002F","\u003Cp>This plugin allows you to automatically add Gravatars for commenters to your\u003Cbr \u002F>\ntheme, if your theme does not already support them.\u003C\u002Fp>\n\u003Cp>According to the Gravatar.com website, Gravatars are Globally Recognized\u003Cbr \u002F>\nAvatars, or an “avatar image that follows you from weblog to weblog\u003Cbr \u002F>\nappearing beside your name when you comment on gravatar enabled sites.”\u003Cbr \u002F>\nYou register with the Gravatar server, and upload an image which you will\u003Cbr \u002F>\nuse as your avatar. The gravatar image is keyed to your email address, so\u003Cbr \u002F>\nthat it is unique to you.\u003C\u002Fp>\n\u003Cp>This plugin will display gravatars for the people who comment on your posts.\u003Cbr \u002F>\nYou do not need to modify any of your template files — just activate the\u003Cbr \u002F>\nplugin, and it will add gravatars to your comments template automatically.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Based on a code snippet from Matt Mullenweg:\u003Cbr \u002F>\n  http:\u002F\u002Fphotomatt.net\u002F2007\u002F10\u002F20\u002Fgravatar-enabled\u002F\u003Cbr \u002F>\n  http:\u002F\u002Fpastebin.ca\u002F743979\u003C\u002Fp>\n\u003Cp>Props to David Potter for pointing out that Gravatar normalizes email\u003Cbr \u002F>\naddresses to lowercase before hashing with MD5:\u003Cbr \u002F>\n  http:\u002F\u002Fdpotter.net\u002FTechnical\u002Findex.php\u002F2007\u002F10\u002F22\u002Fintegrating-gravatar-support\u002F\u003C\u002Fp>\n","Add Gravatars to your comments without modifying any template files. Just activate, and you're done!",200,64590,100,1,"2010-01-14T15:36:00.000Z","3.0.5","2.0.4",[71,19,20,72,73],"avatar","gravatar","gravatars","http:\u002F\u002Fdougal.gunters.org\u002Fplugins\u002Feasy-gravatars","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasygravatars.1.3.zip",{"slug":77,"name":78,"version":37,"author":38,"author_profile":39,"description":79,"short_description":80,"active_installs":65,"downloaded":81,"rating":82,"num_ratings":83,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":17,"tags":84,"homepage":53,"download_link":86,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25},"buddypress-first-letter-avatar","BuddyPress First Letter Avatar","\u003Cp>BuddyPress First Letter Avatar \u003Cstrong>sets custom avatars for users without profile picture or Gravatar\u003C\u002Fstrong>. The avatar will be a first letter of user’s name. You can also configure plugin to use any other letter to set custom avatar.\u003C\u002Fp>\n\u003Cp>BuddyPress First Letter Avatar is based on my other plugin – \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-first-letter-avatar\u002F\" rel=\"ugc\">WP First Letter Avatar\u003C\u002Fa>. BuddyPress First Letter Avatar is basically the same thing, but programmed to work with BuddyPress.\u003C\u002Fp>\n\u003Cp>BuddyPress First Letter Avatar includes a set of \u003Cstrong>beautiful, colorful letter avatars\u003C\u002Fstrong> in many sizes. Optimal size will be chosen by the plugin in order to display high quality avatar and not download, for example, big 512px avatars when only 48px is needed… \u003Cstrong>PSD template\u003C\u002Fstrong> for avatar is also included.\u003C\u002Fp>\n\u003Cp>You can also create your own avatar set by creating new directory next to \u003Cem>‘default’\u003C\u002Fem> folder and following the naming convention from \u003Cem>‘default’\u003C\u002Fem>.\u003C\u002Fp>\n\u003Cp>By default, custom avatar will be set only to users without profile pictures and Gravatars, but you can change that in settings and not use Gravatar\u002Fprofile pictures at all.\u003C\u002Fp>\n\u003Cp>BuddyPress First Letter Avatar helps you \u003Cstrong>bring more colors into your BuddyPress site\u003C\u002Fstrong>. Plus, your users will be more \u003Cstrong>willing to actively participate in your site\u003C\u002Fstrong> since they can actually relate to these avatars much better than to the Mystery Person.\u003C\u002Fp>\n\u003Cp>All images were compressed using the fantastic \u003Ca href=\"https:\u002F\u002Ftinypng.com\u002F\" rel=\"nofollow ugc\">TinyPNG\u003C\u002Fa>, so avatars are \u003Cstrong>incredibly light and ultra-high quality\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>Plugin is also available \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FDev49net\u002Fbuddypress-first-letter-avatar\" rel=\"nofollow ugc\">on GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cp>BuddyPress First Letter Avatar requires at least PHP 5.4. It \u003Cstrong>does not work properly\u003C\u002Fstrong> on PHP 5.3.x and earlier.\u003C\u002Fp>\n","A WordPress-BuddyPress plugin to set fancy custom avatars for users with no Gravatar and no profile picture.",29807,98,16,[19,85,20,51,52],"buddypress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-first-letter-avatar.zip",{"slug":88,"name":89,"version":90,"author":91,"author_profile":92,"description":93,"short_description":94,"active_installs":95,"downloaded":96,"rating":65,"num_ratings":97,"last_updated":98,"tested_up_to":99,"requires_at_least":100,"requires_php":17,"tags":101,"homepage":103,"download_link":104,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25},"wp-recent-comments-with-avatars","WP Recent Comments With Avatars","1.0","TrueFalse","https:\u002F\u002Fprofiles.wordpress.org\u002Ftruefalse\u002F","\u003Cp>Lightweight plugin that overrides the default widget “recent comments” in WordPress, adding an avatar display visitors comments and quotes length of 50 characters.\u003C\u002Fp>\n\u003Cp>Is a direct descendant of WP_Widget_Recent_Comments.\u003C\u002Fp>\n\u003Cp>Example markup that is generated by the plugin(for theming):\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cul id=\"recentcomments\">\n  \u003Cli class=\"recentcomments\">\n    \u003Cdiv class=\"alignleft\">\n      \u003Cimg width=\"32\" height=\"32\" class=\"avatar avatar-32 photo\" src=\"http:\u002F\u002F0.gravatar.com\u002F...%3D32&amp;r=G\" alt=\"\">\n    \u003C\u002Fdiv>\n    \u003Cb>UserName\u003C\u002Fb>: excerpt comment \u003Ca href=\"http:\u002F\u002Fexample.com\u002Fpage\u002F#comment-ID\">»\u003C\u002Fa>\n  \u003C\u002Fli>\n  \u003Cli class=\"recentcomments\">\n  ...\n  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Adds avatars and announcements comments. Compact code.",80,5770,3,"2013-06-27T01:56:00.000Z","3.5.2","3.5.1",[19,20,102],"widget","http:\u002F\u002Fsitehint.ru\u002F?p=827","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-recent-comments-with-avatars.zip",{"slug":106,"name":107,"version":108,"author":109,"author_profile":110,"description":111,"short_description":112,"active_installs":113,"downloaded":114,"rating":13,"num_ratings":13,"last_updated":115,"tested_up_to":47,"requires_at_least":116,"requires_php":17,"tags":117,"homepage":120,"download_link":121,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25},"better-gravatar-generated-icons","Better Gravatar generated icons","1","ginoplusio","https:\u002F\u002Fprofiles.wordpress.org\u002Fginoplusio\u002F","\u003Cp>Are you bored by Identicons and MonsterId icons in your blog comments?\u003Cbr \u002F>\nThis plugin will add new avatars for users that don’t have a Gravatar image setted, to use this choose the “blank” icon in your “Discussion settings” and use this plugin setting panel to choose your new avatar style. Avatars come from these 3rd party services: Flat Hash (from http:\u002F\u002Fflathash.com\u002F), Robot and monsters Hash (from https:\u002F\u002Frobohash.org\u002F) and Unicorns avatars (from https:\u002F\u002Funicornify.appspot.com\u002F).\u003C\u002Fp>\n","Bored by Identicon and MonsterId? Here is a way to add new automatic generated avatars, such as Flathash or Unicorns or funny robots",10,2133,"2017-04-07T16:02:00.000Z","4.3",[71,20,118,72,119],"generated","new-avatars","http:\u002F\u002Fwww.barattalo.it\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbetter-gravatar-generated-icons.1.00.zip",{"attackSurface":123,"codeSignals":135,"taintFlows":180,"riskAssessment":181,"analyzedAt":192},{"hooks":124,"ajaxHandlers":131,"restRoutes":132,"shortcodes":133,"cronEvents":134,"entryPointCount":13,"unprotectedCount":13},[125],{"type":126,"name":127,"callback":128,"file":129,"line":130},"action","plugins_loaded","sa_comments_widget_init","comments.php",248,[],[],[],[],{"dangerousFunctions":136,"sqlUsage":137,"outputEscaping":139,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":179},[],{"prepared":97,"raw":13,"locations":138},[],{"escaped":13,"rawEcho":140,"locations":141},21,[142,145,146,147,149,151,153,155,156,158,159,161,162,164,166,168,170,172,173,175,177],{"file":129,"line":143,"context":144},60,"raw output",{"file":129,"line":143,"context":144},{"file":129,"line":143,"context":144},{"file":129,"line":148,"context":144},61,{"file":129,"line":150,"context":144},64,{"file":129,"line":152,"context":144},67,{"file":129,"line":154,"context":144},69,{"file":129,"line":154,"context":144},{"file":129,"line":157,"context":144},72,{"file":129,"line":157,"context":144},{"file":129,"line":160,"context":144},90,{"file":129,"line":160,"context":144},{"file":129,"line":163,"context":144},124,{"file":129,"line":165,"context":144},125,{"file":129,"line":167,"context":144},133,{"file":129,"line":169,"context":144},138,{"file":129,"line":171,"context":144},149,{"file":129,"line":171,"context":144},{"file":129,"line":174,"context":144},155,{"file":129,"line":176,"context":144},186,{"file":129,"line":178,"context":144},188,[],[],{"summary":182,"deductions":183},"The plugin \"recent-comments-with-avatars\" v3.5 exhibits a mixed security posture.  While the static analysis reveals no direct SQL injection vulnerabilities due to the exclusive use of prepared statements and a clean taint analysis with no identified critical or high severity flows, there are significant concerns regarding output escaping.  A complete lack of proper output escaping across all identified outputs presents a substantial risk of Cross-Site Scripting (XSS) vulnerabilities.  The absence of any recorded vulnerability history suggests a historically secure plugin, but this should not be relied upon given the current critical flaw in output handling. The lack of any attack surface entry points is a positive indicator, but it does not mitigate the severe risk posed by unescaped output.",[184,187,190],{"reason":185,"points":186},"All outputs are unescaped",15,{"reason":188,"points":189},"No nonce checks implemented",5,{"reason":191,"points":189},"No capability checks implemented","2026-03-16T21:35:31.846Z",{"wat":194,"direct":201},{"assetPaths":195,"generatorPatterns":198,"scriptPaths":199,"versionParams":200},[196,197],"\u002Fwp-content\u002Fplugins\u002Frecent-comments-with-avatars\u002Fmini-flags\u002Fus.gif","\u002Fwp-content\u002Fplugins\u002Frecent-comments-with-avatars\u002Fmini-flags\u002Fgb.gif",[],[],[],{"cssClasses":202,"htmlComments":207,"htmlAttributes":208,"restEndpoints":210,"jsGlobals":211,"shortcodeOutput":212},[203,204,205,206],"comment-author","vcard","fn","says",[],[209],"id=\"recentcomments\"",[],[],[]]