[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdzXVfqphoGjkVhfvWPoeed9e7WmGuPMfRXCBjE6BGJY":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":37,"analysis":148,"fingerprints":186},"redirect-gravatar-requests","Redirect Gravatar requests","2.0.0","Bart Kuijper","https:\u002F\u002Fprofiles.wordpress.org\u002Fspartelfant\u002F","\u003Cp>When displaying a post or comment with avatars enabled, WordPress will always check for the existence of a Gravatar. (Note: even the default avatars ‘mystery person’ and ‘blank’ are in fact Gravatars served from gravatar.com.) WordPress does this by sending an MD5 hash of every displayed post or comment author’s email address to gravatar.com. Even with many plugins that introduce locally stored default or user avatars, this check still happens. On top of that, some themes or plugins force (Gr)avatars to load even if the display of avatars is disabled completely in WordPress’ settings. If for whatever reason you do not wish for Gravatar to receive these requests (which some people have voiced GDPR concerns about), this plugin is for you.\u003C\u002Fp>\n\u003Cp>The way it works is every time WordPress attempts to display an avatar, this plugin first checks if the image is about to be retrieved from gravatar.com. If it is, the URL is changed to the locally stored ‘mystery person’ image (included with this plugin). If the avatar has any other source, this plugin doesn’t interfere.\u003C\u002Fp>\n\u003Cp>Gravatars are also removed from the Discussion page in Settings and replaced with the locally stored ‘mystery person’ image. Again, any non-Gravatar images are left alone.\u003C\u002Fp>\n\u003Cp>Upon activation of this plugin, if a Gravatar is selected as the default avatar, that setting is changed to the locally stored ‘mystery person’ image. If any non-Gravatar avatar is selected, that setting isn’t changed.\u003C\u002Fp>\n\u003Cp>Upon deactivation of this plugin, if the locally stored ‘mystery person’ image is selected as the default avatar, that setting is changed to the Gravatar logo. If any non-Gravatar avatar is selected, that setting isn’t changed.\u003C\u002Fp>\n","All requests to load an avatar from gravatar.com are redirected to a local image, preventing Gravatar from potentially gathering data about your site  …",200,3923,100,1,"2022-05-24T21:28:00.000Z","6.0.11","4.6","5.6.20",[20,21,22,23,24],"avatar","block","disable","gravatar","redirect","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fredirect-gravatar-requests\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fredirect-gravatar-requests.2.0.0.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"spartelfant",30,84,"2026-04-04T07:16:37.107Z",[38,61,85,106,128],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":17,"requires_php":52,"tags":53,"homepage":57,"download_link":58,"security_score":59,"vuln_count":14,"unpatched_count":28,"last_vuln_date":60,"fetched_at":30},"metronet-profile-picture","User Profile Picture","2.6.3","Cozmoslabs","https:\u002F\u002Fprofiles.wordpress.org\u002Fcozmoslabs\u002F","\u003Cp>\u003Cstrong>User Profile Picture is no longer under active development, but will continue to work as is. We have integrated the current functionality in \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fprofile-builder\u002F\" rel=\"ugc\">Profile Builder\u003C\u002Fa> where it will actively be maintained, and we recommend migrating to it.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Set or remove a custom profile image for a user using the standard WordPress media upload tool.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.cozmoslabs.com\u002Fuser-profile-picture\u002F\" rel=\"nofollow ugc\">View Documentation and Examples\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F9icnOWWZUpA?version=3&rel=0&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>Users must have the ability to upload images (typically author role or greater). You can use the plugin \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fprofile-builder\u002F\" rel=\"ugc\">Profile Builder\u003C\u002Fa> to allow other roles (e.g. subscribers) the ability to upload images.\u003C\u002Fp>\n\u003Cp>A template tag is supplied for outputting to a theme and the option to override a user’s default avatar is also available.\u003C\u002Fp>\n\u003Ch3>Documentation and Feedback\u003C\u002Fh3>\n\u003Cp>See the documentation on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmadalinungureanu\u002Fuser-profile-picture\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>Please \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fmetronet-profile-picture\u002Freviews\u002F#new-post\" rel=\"ugc\">Rate the Plugin\u003C\u002Fa>.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n","Set a custom profile image (avatar) for a user using the standard WordPress media upload tool.",40000,1023099,92,59,"2024-07-18T13:11:00.000Z","6.6.5","5.6",[20,54,23,55,56],"blocks","user-profile","users","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmetronet-profile-picture\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmetronet-profile-picture.2.6.3.zip",91,"2024-06-20 00:00:00",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":71,"num_ratings":72,"last_updated":73,"tested_up_to":74,"requires_at_least":75,"requires_php":76,"tags":77,"homepage":83,"download_link":84,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-disable","Reduce HTTP Requests, Disable Emojis & Disable Embeds, Speedup WooCommerce","1.6.1","hosting.io","https:\u002F\u002Fprofiles.wordpress.org\u002Fpigeonhut\u002F","\u003Cp>\u003Cstrong>Reduce HTTP requests\u003C\u002Fstrong> – Disable Emojis, Disable Gravatars, Disable Embeds and Remove Querystrings. SpeedUp WooCommerce, Added support to disable pingbacks, disable trackbacks, close comments after 28 days, Added the ability to force pagingation after 20 posts,\u003Cbr \u002F>\nDisable WooCommerce scripts and CSS on non WooCommerce Pages, Disable RSS, Disable XML-RPC, Disable Autosave, Remove Windows Live Writer tag, Remove Shortlink Tag, Remove WP API from header and\u003Cbr \u002F>\n many more features to help speed and SEO gains.  Now includes \u003Cstrong>Disable Comments, Heartbeat Control, Selective Disable\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003C\u002Fstrong>\u003Cstrong>NEW Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n Better Stats on Dashboard\u003Cbr \u002F>\n Disable loading dashicons on front end if admin bar disabled\u003Cbr \u002F>\n Disable Author Pages\u003C\u002Fp>\n\u003Cp>Disabling Emojis does not disable emoticons, it disables the support for Emojis added since WP 4.2 and removes 1 HTTP request.\u003C\u002Fp>\n\u003Cp>Disabling Embeds  – script that auto formats pasted content in the visual editor, eg videos, etc. Big issue with this script is it loads on every\u003Cbr \u002F>\nsingle page. You can still use the default embed code from YouTube, Twitter etc to included content.\u003C\u002Fp>\n\u003Cp>Remove Query Strings: If you look at the waterfall view of your page load, you will see your query strings end in something like ver=1.12.4.\u003Cbr \u002F>\nThese are called query strings and help determine the version of the script. The problem with query strings like these is that it isn’t very efficient for caching purposes and sometimes prevents caching those assets altogether.  If you are using a CDN already, you can ignore this.\u003C\u002Fp>\n\u003Cp>Disabling Gravatars is completely optional, advise, if you don’t use them, disable as it gets rid of one more useless HTTP request.\u003C\u002Fp>\n\u003Cp>General Performance improvements: Added support for : disable ping\u002Ftrackbacks, close comments after 28 days, force pagingation after 20 posts, Disable WooCommerce scripts and CSS on non WooCommerce Pages.\u003C\u002Fp>\n\u003Cp>Have an idea ?\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fhosting-io\u002Fwp-disable\" rel=\"nofollow ugc\">Public repo on GitHub\u003C\u002Fa> if you would like to contribute or have any ideas to add.\u003C\u002Fp>\n\u003Cp>Docs & Support\u003Cbr \u002F>\nThe \u003Ca href=\"https:\u002F\u002Foptimisation.io\u002Ffaq\u002F\" rel=\"nofollow ugc\">documentation is an on-going project\u003C\u002Fa>, so please bare with us as we update.  If you would like to help with the documentation, please get in touch.\u003C\u002Fp>\n","Reduce HTTP requests - Disable Emojis, Disable Gravatars, Disable Embeds and Remove Querystrings. SpeedUp WooCommerce, Added support to disable pingba …",10000,309866,82,45,"2020-08-09T07:42:00.000Z","5.3.21","4.5","",[78,79,80,81,82],"disable-embeds","disable-emoji","disable-gravatars","reduce-http-requests","remove-querystrings","https:\u002F\u002Foptimisation.io","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-disable.1.6.1.zip",{"slug":86,"name":87,"version":88,"author":89,"author_profile":90,"description":91,"short_description":92,"active_installs":28,"downloaded":93,"rating":28,"num_ratings":28,"last_updated":94,"tested_up_to":95,"requires_at_least":96,"requires_php":97,"tags":98,"homepage":104,"download_link":105,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"custom-profile-avatar","Custom Profile Avatar","1.4.1","Hakan","https:\u002F\u002Fprofiles.wordpress.org\u002Fen0ndev\u002F","\u003Cp>Custom Profile Avatar allows you to upload and manage WordPress user avatars directly from your dashboard — no external services required.\u003C\u002Fp>\n\u003Cp>By default, WordPress uses Gravatar for profile images. This plugin gives you full control by letting you:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Upload a custom avatar from your profile page\u003C\u002Fli>\n\u003Cli>Replace the default WordPress avatar instantly\u003C\u002Fli>\n\u003Cli>Disable Gravatar completely\u003C\u002Fli>\n\u003Cli>Keep avatar data local to your site\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>No more forcing users to create Gravatar accounts. No unnecessary external requests. Just simple, clean avatar management.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Upload custom avatars for users\u003C\u002Fli>\n\u003Cli>Override default WordPress avatars\u003C\u002Fli>\n\u003Cli>Option to disable Gravatar\u003C\u002Fli>\n\u003Cli>Lightweight and fast\u003C\u002Fli>\n\u003Cli>Easy-to-use interface inside the profile page\u003C\u002Fli>\n\u003Cli>Privacy-friendly (no third-party calls)\u003C\u002Fli>\n\u003C\u002Ful>\n","Easily upload and use custom profile avatars in WordPress. Disable Gravatar and keep everything local.",5050,"2026-02-13T15:12:00.000Z","6.9.4","5.0","7.0",[99,100,101,102,103],"change-avatar","custom-avatar","disable-gravatar","wordpress-avatar","wp-avatar","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcustom-profile-avatar","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-profile-avatar.1.4.1.zip",{"slug":107,"name":108,"version":109,"author":110,"author_profile":111,"description":112,"short_description":113,"active_installs":114,"downloaded":115,"rating":116,"num_ratings":117,"last_updated":118,"tested_up_to":95,"requires_at_least":119,"requires_php":76,"tags":120,"homepage":123,"download_link":124,"security_score":125,"vuln_count":126,"unpatched_count":28,"last_vuln_date":127,"fetched_at":30},"one-user-avatar","One User Avatar | User Profile Picture","2.5.4","One Designs","https:\u002F\u002Fprofiles.wordpress.org\u002Fonedesigns\u002F","\u003Cp>WordPress currently only allows you to use custom avatars that are uploaded through \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa>. \u003Cstrong>One User Avatar\u003C\u002Fstrong> enables you to use any photo uploaded into your Media Library as an avatar. This means you use the same uploader and library as your posts. No extra folders or image editing functions are necessary. This plugin is a fork of WP User Avatar v2.2.16.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>One User Avatar\u003C\u002Fstrong> also lets you:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Upload your own Default Avatar in your One User Avatar settings.\u003C\u002Fli>\n\u003Cli>Show the user’s \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa> avatar or Default Avatar if the user doesn’t have a One User Avatar image.\u003C\u002Fli>\n\u003Cli>Disable \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa> avatars and use only local avatars.\u003C\u002Fli>\n\u003Cli>Use the \u003Ccode>[avatar_upload]\u003C\u002Fcode> shortcode to add a standalone uploader to a front page or widget. This uploader is only visible to logged-in users.\u003C\u002Fli>\n\u003Cli>Use the \u003Ccode>[avatar]\u003C\u002Fcode> shortcode in your posts. These shortcodes will work with any theme, whether it has avatar support or not.\u003C\u002Fli>\n\u003Cli>Allow Contributors and Subscribers to upload their own avatars.\u003C\u002Fli>\n\u003Cli>Limit upload file size and image dimensions for Contributors and Subscribers.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Copyright\u003C\u002Fh3>\n\u003Cp>One User Avatar\u003Cbr \u002F>\nCopyright (c) 2023 One Designs https:\u002F\u002Fonedesigns.com\u002F\u003Cbr \u002F>\nLicense: GPLv2\u003Cbr \u002F>\nSource: https:\u002F\u002Fgithub.com\u002Fonedesigns\u002Fone-user-avatar\u003C\u002Fp>\n\u003Cp>One User Avatar is based on WP User Avatar v2.2.16\u003Cbr \u002F>\nCopyright (c) 2020-2021 ProfilePress https:\u002F\u002Fprofilepress.net\u002F\u003Cbr \u002F>\nCopyright (c) 2014-2020 Flippercode https:\u002F\u002Fwww.flippercode.com\u002F\u003Cbr \u002F>\nCopyright (c) 2013-2014 Bangbay Siboliban http:\u002F\u002Fbangbay.com\u002F\u003Cbr \u002F>\nLicense: GPLv2\u003Cbr \u002F>\nSource: https:\u002F\u002Fgithub.com\u002Fprofilepress\u002Fwp-user-avatar\u003C\u002Fp>\n\u003Cp>One User Avatar is distributed under the terms of the GNU GPL\u003C\u002Fp>\n\u003Cp>This program is free software: you can redistribute it and\u002For modify\u003Cbr \u002F>\nit under the terms of the GNU General Public License as published by\u003Cbr \u002F>\nthe Free Software Foundation, either version 2 of the License, or\u003Cbr \u002F>\n(at your option) any later version.\u003C\u002Fp>\n\u003Cp>This program is distributed in the hope that it will be useful,\u003Cbr \u002F>\nbut WITHOUT ANY WARRANTY; without even the implied warranty of\u003Cbr \u002F>\nMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\u003Cbr \u002F>\nGNU General Public License for more details.\u003C\u002Fp>\n\u003Ch3>Advanced Settings\u003C\u002Fh3>\n\u003Ch4>Add One User Avatar to your own profile edit page\u003C\u002Fh4>\n\u003Cp>You can use the [avatar_upload] shortcode to add a standalone uploader to any page. It’s best to use this uploader by itself and without other profile fields.\u003C\u002Fp>\n\u003Cp>If you’re building your own profile edit page with other fields, One User Avatar is automatically added to the \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FPlugin_API\u002FAction_Reference\u002Fshow_user_profile\" rel=\"nofollow ugc\">show_user_profile\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FPlugin_API\u002FAction_Reference\u002Fshow_user_profile\" rel=\"nofollow ugc\">edit_user_profile\u003C\u002Fa> hooks. If you’d rather have One User Avatar in its own section, you could add another hook:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>do_action( 'edit_user_avatar', $current_user );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Then, to add One User Avatar to that hook and remove it from the other hooks outside of the administration panel, you would add this code to the \u003Ccode>functions.php\u003C\u002Fcode> file of your theme:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>function my_avatar_filter() {\n    \u002F\u002F Remove from show_user_profile hook\n    remove_action( 'show_user_profile', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    remove_action( 'show_user_profile', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n\n    \u002F\u002F Remove from edit_user_profile hook\n    remove_action( 'edit_user_profile', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    remove_action( 'edit_user_profile', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n\n    \u002F\u002F Add to edit_user_avatar hook\n    add_action( 'edit_user_avatar', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    add_action( 'edit_user_avatar', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n}\n\n\u002F\u002F Loads only outside of administration panel\nif ( ! is_admin() ) {\n    add_action( 'init','my_avatar_filter' );\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>HTML Wrapper\u003C\u002Fh4>\n\u003Cp>You can change the HTML wrapper of the One User Avatar section by using the functions \u003Ccode>wpua_before_avatar\u003C\u002Fcode> and \u003Ccode>wpua_after_avatar\u003C\u002Fcode>. By default, the avatar code is structured like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cdiv class=\"wpua-edit-container\">\n    \u003Ch3>Avatar\u003C\u002Fh3>\n    \u003Cinput type=\"hidden\" name=\"wp-user-avatar\" id=\"wp-user-avatar\" value=\"{attachmentID}\" \u002F>\n    \u003Cp id=\"wpua-add-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-add\" name=\"wpua-add\">Edit Image\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-preview\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        Original Size\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-thumbnail\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        Thumbnail\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-remove-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-remove\" name=\"wpua-remove\">Default Avatar\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-undo-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-undo\" name=\"wpua-undo\">Undo\u003C\u002Fbutton>\n    \u003C\u002Fp>\n\u003C\u002Fdiv>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To strip out the div container and h3 heading, you would add the following filters to the \u003Ccode>functions.php\u003C\u002Fcode> file in your theme:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>remove_action( 'wpua_before_avatar', 'wpua_do_before_avatar' );\nremove_action( 'wpua_after_avatar', 'wpua_do_after_avatar' );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To add your own wrapper, you could create something like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>function my_before_avatar() {\n    echo '\u003Cdiv id=\"my-avatar\">';\n}\nadd_action( 'wpua_before_avatar', 'my_before_avatar' );\n\nfunction my_after_avatar() {\n    echo '\u003C\u002Fdiv>';\n}\nadd_action( 'wpua_after_avatar', 'my_after_avatar' );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>This would output:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cdiv id=\"my-avatar\">\n    \u003Cinput type=\"hidden\" name=\"wp-user-avatar\" id=\"wp-user-avatar\" value=\"{attachmentID}\" \u002F>\n    \u003Cp id=\"wpua-add-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-add\" name=\"wpua-add\">Edit Image\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-preview\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        \u003Cspan class=\"description\">Original Size\u003C\u002Fspan>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-thumbnail\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        \u003Cspan class=\"description\">Thumbnail\u003C\u002Fspan>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-remove-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-remove\" name=\"wpua-remove\">Default Avatar\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-undo-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-undo\" name=\"wpua-undo\">Undo\u003C\u002Fbutton>\n    \u003C\u002Fp>\n\u003C\u002Fdiv>\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Use any image from your WordPress Media Library as a custom user avatar or user profile picture. Add your own Default Avatar.",100000,490816,94,41,"2026-01-12T00:58:00.000Z","4.0",[20,121,23,122,56],"bbpress","profile","https:\u002F\u002Fonedesigns.com\u002Fplugins\u002Fone-user-avatar\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-user-avatar.2.5.4.zip",99,2,"2021-09-20 00:00:00",{"slug":129,"name":130,"version":131,"author":132,"author_profile":133,"description":134,"short_description":135,"active_installs":114,"downloaded":136,"rating":48,"num_ratings":137,"last_updated":138,"tested_up_to":95,"requires_at_least":139,"requires_php":140,"tags":141,"homepage":143,"download_link":144,"security_score":145,"vuln_count":146,"unpatched_count":28,"last_vuln_date":147,"fetched_at":30},"simple-local-avatars","Simple Local Avatars","2.8.6","10up","https:\u002F\u002Fprofiles.wordpress.org\u002F10up\u002F","\u003Cp>Adds an avatar upload field to user profiles if the current user has media permissions. Generates requested sizes on demand just like Gravatar! Simple and lightweight.\u003C\u002Fp>\n\u003Cp>Just edit a user profile, and scroll down to the new “Avatar” field. The plug-in will take care of cropping and sizing!\u003C\u002Fp>\n\u003Col>\n\u003Cli>Stores avatars in the “uploads” folder where all of your other media is kept.\u003C\u002Fli>\n\u003Cli>Has a simple, native interface.\u003C\u002Fli>\n\u003Cli>Fully supports Gravatar and default avatars if no local avatar is set for the user – but also allows you turn off Gravatar.\u003C\u002Fli>\n\u003Cli>Generates the requested avatar size on demand (and stores the new size for efficiency), so it looks great, just like Gravatar!\u003C\u002Fli>\n\u003Cli>Lets you decide whether lower privilege users (subscribers, contributors) can upload their own avatar.\u003C\u002Fli>\n\u003Cli>Enables rating of local avatars, just like Gravatar.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Support Level\u003C\u002Fh3>\n\u003Cp>Simple Local Avatars’ support level is marked as \u003Ccode>stable\u003C\u002Fcode>.  10up is not planning to develop any new features for this, but will still respond to bug reports and security concerns.  We welcome PRs, but any that include new features should be small and easy to integrate and should not include breaking changes.  We otherwise intend to keep this tested up to the most recent version of WordPress.\u003C\u002Fp>\n","Adds an avatar upload field to user profiles. Generates requested sizes on demand just like Gravatar!",2395990,89,"2026-02-17T19:34:00.000Z","6.6","7.4",[20,23,122,142,56],"user-photos","https:\u002F\u002F10up.com\u002Fplugins\u002Fsimple-local-avatars-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-local-avatars.2.8.6.zip",93,6,"2025-08-11 18:20:29",{"attackSurface":149,"codeSignals":174,"taintFlows":181,"riskAssessment":182,"analyzedAt":185},{"hooks":150,"ajaxHandlers":170,"restRoutes":171,"shortcodes":172,"cronEvents":173,"entryPointCount":28,"unprotectedCount":28},[151,157,161,165],{"type":152,"name":153,"callback":154,"file":155,"line":156},"action","init","load_own_textdomain","redirect-gravatar-requests.php",97,{"type":158,"name":159,"callback":160,"file":155,"line":13},"filter","get_avatar","filter_get_avatar",{"type":158,"name":162,"callback":163,"file":155,"line":164},"avatar_defaults","filter_avatar_defaults",102,{"type":158,"name":166,"callback":167,"priority":168,"file":155,"line":169},"plugin_row_meta","filter_plugin_row_meta",10,104,[],[],[],[],{"dangerousFunctions":175,"sqlUsage":176,"outputEscaping":178,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":180},[],{"prepared":28,"raw":28,"locations":177},[],{"escaped":28,"rawEcho":28,"locations":179},[],[],[],{"summary":183,"deductions":184},"The \"redirect-gravatar-requests\" v2.0.0 plugin exhibits a strong security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, cron events, dangerous functions, direct SQL queries, unescaped output, file operations, external HTTP requests, nonce checks, or capability checks on its entry points indicates a well-designed plugin that minimizes its attack surface. The complete lack of taint flows with unsanitized paths further reinforces this positive assessment.\n\nFurthermore, the plugin's vulnerability history is exceptionally clean, with no recorded CVEs of any severity. This suggests a history of secure development and maintenance. The absence of common vulnerability types further indicates that the developers are likely adhering to secure coding practices. The plugin's strengths lie in its minimal attack surface and its lack of known vulnerabilities, suggesting it is likely safe for use.\n\nHowever, it is important to acknowledge that the static analysis reported zero total entry points and zero unprotected entry points. While this is excellent, it could also imply that the plugin's functionality is extremely limited or that its core purpose is achieved through methods not captured by this specific static analysis, such as by directly modifying core WordPress behavior through filters and actions without explicit entry points. In a perfect world, we would see some evidence of capability checks or nonce usage even for internal operations, but their absence here, coupled with no known vulnerabilities, is still a very positive sign.",[],"2026-03-16T20:25:56.772Z",{"wat":187,"direct":192},{"assetPaths":188,"generatorPatterns":189,"scriptPaths":190,"versionParams":191},[],[],[],[],{"cssClasses":193,"htmlComments":194,"htmlAttributes":195,"restEndpoints":196,"jsGlobals":197,"shortcodeOutput":198},[],[],[],[],[],[]]