[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKlDEUhOxoLlf-wuz7RRRZGapgVcv7fJzZRPICt9vMu4":3,"$fM2QNWamzEk_e_pkwA2dIzkFiR7Cx8RRD4EYMznSCmQs":233,"$fmeCRQdCVACH2a0uRZZwaepd1Elt1jzPL-LZoNshv54M":238},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":14,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"discovery_status":30,"vulnerabilities":31,"developer":48,"crawl_stats":37,"alternatives":55,"analysis":162,"fingerprints":208},"registration-password","FS Registration Password","2.0.1","Firdaus Zahari","https:\u002F\u002Fprofiles.wordpress.org\u002Ffsylum\u002F","\u003Cp>This plugin allows users to set their passwords during the registration process. Once activated, a password field will appear on the registration field which uses the same functionality as the password field you get when you’re resetting your password.\u003C\u002Fp>\n\u003Cp>The email notification sent to the new user is also modified to indicate a successful password set.\u003C\u002Fp>\n","Allow users to set their own password during site registration.",50,1693,100,1,"2026-01-03T13:55:00.000Z","6.9.4","5.9","8.2",[20,21,22,23],"password","register","registration","user","https:\u002F\u002Fgithub.com\u002Ffsylum\u002Ffs-registration-password","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fregistration-password.2.0.1.zip",94,0,"2026-01-05 16:31:31","2026-04-16T10:56:18.058Z","no_bundle",[32],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":6,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":28,"updated_date":43,"references":44,"days_to_patch":14,"patch_diff_files":46,"patch_trac_url":37,"research_status":37,"research_verified":47,"research_rounds_completed":27,"research_plan":37,"research_summary":37,"research_vulnerable_code":37,"research_fix_diff":37,"research_exploit_outline":37,"research_model_used":37,"research_started_at":37,"research_completed_at":37,"research_error":37,"poc_status":37,"poc_video_id":37,"poc_summary":37,"poc_steps":37,"poc_tested_at":37,"poc_wp_version":37,"poc_php_version":37,"poc_playwright_script":37,"poc_exploit_code":37,"poc_has_trace":47,"poc_model_used":37,"poc_verification_depth":37},"CVE-2025-15001","fs-registration-password-unauthenticated-privilege-escalation-via-account-takeover","FS Registration Password \u003C= 1.0.1 - Unauthenticated Privilege Escalation via Account Takeover","The FS Registration Password plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.",null,"\u003C=1.0.1","critical",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Authorization Bypass Through User-Controlled Key","2026-01-06 04:31:55",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F22351b90-fc34-44ce-9241-4a0f01eb7b1c?source=api-prod",[],false,{"slug":49,"display_name":7,"profile_url":8,"plugin_count":50,"total_installs":51,"avg_security_score":52,"avg_patch_time_days":14,"trust_score":53,"computed_at":54},"fsylum",4,110,87,91,"2026-05-20T09:28:51.989Z",[56,80,101,123,142],{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":64,"downloaded":65,"rating":26,"num_ratings":66,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":70,"tags":71,"homepage":75,"download_link":76,"security_score":77,"vuln_count":78,"unpatched_count":27,"last_vuln_date":79,"fetched_at":29},"ajax-login-and-registration-modal-popup","AJAX Login and Registration modal popup + inline form","2.26","Max K","https:\u002F\u002Fprofiles.wordpress.org\u002Fkaminskym\u002F","\u003Cp>Easy to integrate modal with Login and Registration features + inline form using shortcode. Compatible with any theme.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fdemo.maxim-kaminsky.com\u002Flrm\u002F\" rel=\"nofollow ugc\">DEMO >>\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>Easy to integrate (as modal or inline via shortcode)\u003C\u002Fli>\n\u003Cli>Well customized\u003C\u002Fli>\n\u003Cli>100% responsive\u003C\u002Fli>\n\u003Cli>Beautifully coded\u003C\u002Fli>\n\u003Cli>Compatible with other plugins (WooCommerce, BuddyPress, Ultimate Member, WPML, etc)\u003C\u002Fli>\n\u003Cli>Tested with the latest WP version\u003C\u002Fli>\n\u003Cli>Compatible with the Gutenberg\u003C\u002Fli>\n\u003Cli>Possible to replace wp-login.php with a custom “Login”, “Registration” and “Reset password” pages\u003C\u002Fli>\n\u003Cli>Skins support (1 default skin + 2 new in a PRO version) + possible to customize Skins colors via WP Customizer\u003C\u002Fli>\n\u003Cli>Powerful after-login\u002Fregistration\u002Flogout actions (reload, redirects, etc)\u003C\u002Fli>\n\u003Cli>Role-based redirects (in PRO)\u003C\u002Fli>\n\u003Cli>In-build reCaptcha & MatchCaptcha (in PRO)\u003C\u002Fli>\n\u003Cli>Google Authenticator plugin & Wordfence 2FA support (in PRO)\u003C\u002Fli>\n\u003Cli>Developer support (via forums or personal via email for PRO users)\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>Customization options:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>You can add your custom CSS selectors to attach modal\u003C\u002Fli>\n\u003Cli>All texts\u002Fmessages can be edited\u002Ftranslated in settings\u003C\u002Fli>\n\u003Cli>Emails (for registration and lost password) can customized in settings7\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>Free version compatible with (and other, this is 100% tested):\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Flogin-lockdown\u002F\" rel=\"ugc\">Login LockDown\u003C\u002Fa> (limit login attempts count)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-facebook-login\u002F\" rel=\"ugc\">WP Facebook Login\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwp-vote.net\u002Fwordpress-voting-plugin\u002F\" rel=\"nofollow ugc\">WP Foto Vote contests\u003C\u002Fa> (photo contest plugin from author of this plugin ☺)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fall-in-one-wp-security-and-firewall\u002F\" rel=\"ugc\">All In One WP Security & Firewall\u003C\u002Fa> (tested with “Renamed Login Page”)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Feonet-manual-user-approve\u002F\" rel=\"ugc\">Eonet Manual User Approve\u003C\u002Fa>: review user before they an sign in – \u003Ca href=\"https:\u002F\u002Fdocs.maxim-kaminsky.com\u002Flrm\u002Fkb\u002Fhow-to-manually-review-new-users-registrations\u002F\" rel=\"nofollow ugc\">tutorial\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpml.org\u002F\" rel=\"nofollow ugc\">WPML\u003C\u002Fa>: Multi-language support – \u003Ca href=\"https:\u002F\u002Fdocs.maxim-kaminsky.com\u002Flrm\u002Fkb\u002Fmulti-language-support-via-wpml\u002F\" rel=\"nofollow ugc\">tutorial\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fweglot\u002F\" rel=\"ugc\">Weglot translation plugin\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fdocs.maxim-kaminsky.com\u002Flrm\u002Fkb\u002Fweglot-support\u002F\" rel=\"nofollow ugc\">tutorial\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fs2member\u002F\" rel=\"ugc\">s2member\u003C\u002Fa> plugin: tweaks for login process\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fnew-user-approve\u002F\" rel=\"ugc\">New User Approve \u003C\u002Fa> plugin: review approve new users registrations\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>Roadmap\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>+Allow including form to page content (without modal) (done in version 1.41)\u003C\u002Fli>\n\u003Cli>+Colors\u002Fstyles customizer [implemented via WP Customizer]\u003C\u002Fli>\n\u003Cli>+Documentation and Videos [done] – https:\u002F\u002Fdocs.maxim-kaminsky.com\u002Flrm\u002F\u003C\u002Fli>\n\u003Cli>+WooCommerce Login\u002FRegistration form integration (done in PRO version 1.28)\u003C\u002Fli>\n\u003Cli>Registration Form builder\u003C\u002Fli>\n\u003Cli>+Settings Import\u002FExport [done]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>PRO features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>6-month personal support from the developer via Email\u003C\u002Fli>\n\u003Cli>Troubleshooting problems and conflicts with other plugins\u002Fthemes\u003C\u002Fli>\n\u003Cli>Unlimited plugin updates\u003C\u002Fli>\n\u003Cli>Compatibility with other popular plugins (list below)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>The PRO version extra features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>Allow user to set a custom password (not randomly generated) during registration\u003C\u002Fli>\n\u003Cli>Redirect the user to the specified page after login\u002Fregistration\u002Flogout (for example to the User Profile)\u003C\u002Fli>\n\u003Cli>User verification via click on the link in registration email\u003C\u002Fli>\n\u003Cli>Email only registration – hide username filed from registration form\u003C\u002Fli>\n\u003Cli>Customize button color in \u003Ca href=\"https:\u002F\u002Fdocs.maxim-kaminsky.com\u002Flrm\u002Fkb\u002Fhow-to-customize-form-colors-pro-only\u002F\" rel=\"nofollow ugc\">WP Customizer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmaxim-kaminsky.com\u002Fshop\u002Fcontact-me\u002F\" rel=\"nofollow ugc\">Request other feature >>\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>The PRO version is 100% tested and are compatible with a following plugins:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwordfence\u002F\" rel=\"ugc\">Wordfence & Wordfence Login Security\u003C\u002Fa>\u003C\u002Fstrong> (2 factor login – \u003Ca href=\"https:\u002F\u002Fdocs.maxim-kaminsky.com\u002Flrm\u002Fkb\u002F2-factor-login-otp-verification\u002F\" rel=\"nofollow ugc\">example\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoocommerce\u002F\" rel=\"ugc\">WooCommerce\u003C\u002Fa>\u003C\u002Fstrong> (show modal when clicked “Add to cart” in list or single product or in Cart when click “Process to Checkout”, option to replace WC account login\u002Fregistration form to plugin ajax form)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fsensei\u002F\" rel=\"nofollow ugc\">WooCommerce Sensei\u003C\u002Fa> (fix for Login process)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-recaptcha-integration\u002F\" rel=\"ugc\">WP reCaptcha Integration\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Finvisible-recaptcha\u002F\" rel=\"ugc\">Invisible reCaptcha\u003C\u002Fa>\u003C\u002Fstrong> – \u003Ca href=\"https:\u002F\u002Fdocs.maxim-kaminsky.com\u002Flrm\u002Fkb\u002Fhow-to-set-up-invisible-recaptcha\u002F\" rel=\"nofollow ugc\">tutorial\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbuddypress\u002F\" rel=\"ugc\">BuddyPress\u003C\u002Fa>\u003C\u002Fstrong> (\u003Ca href=\"https:\u002F\u002Fmonosnap.com\u002Ffile\u002F3RNMa7Wl3EYWidw9znAJbgJ5QVL7oy\" rel=\"nofollow ugc\">replace default registration form with BuddyPress one >>\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fultimate-member\u002F\" rel=\"ugc\">UltimateMember\u003C\u002Fa>\u003C\u002Fstrong> (\u003Ca href=\"https:\u002F\u002Fmonosnap.com\u002Ffile\u002Fa2RxnzawR2N9qBdyKJMxh8J5ALuaYs\" rel=\"nofollow ugc\">replace default registration form with UltimateMember one >>\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcaptcha\u002F\" rel=\"ugc\">Captcha\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Freally-simple-captcha\u002F\" rel=\"ugc\">Really Simple CAPTCHA\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fru.wordpress.org\u002Fplugins\u002Fcaptcha-bank\u002F\" rel=\"nofollow ugc\">Captcha bank\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwordpress-social-login\u002F\" rel=\"ugc\">WordPress Social Login\u003C\u002Fa> (social login buttons below login\u002Fregister form)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Faccesspress-social-login-lite\u002F\" rel=\"ugc\">Social Login WordPress Plugin – AccessPress\u003C\u002Fa> (social login buttons below login\u002Fregister form)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsuper-socializer\u002F\" rel=\"ugc\">WordPress Social Share, Social Login and Social Comments Plugin – Super Socializer\u003C\u002Fa> (social login buttons below login\u002Fregister form, social share, etc)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsuper-socializer\u002F\" rel=\"ugc\">WordPress Social Share, Social Login and Social Comments Plugin – Super Socializer\u003C\u002Fa> (social login buttons below login\u002Fregister form, social share, etc)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fjetpack.com\u002Fsupport\u002Fsso\u002F\" rel=\"nofollow ugc\">Jetpack – SSO login\u003C\u002Fa> \u003Ca href=\"https:\u002F\u002Fmonosnap.com\u002Ffile\u002F4Na5FYYONRj79jnLBmQFK3hjnMJQDR\" rel=\"nofollow ugc\">WordPress.com login button >>\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwc-vendors\u002F\" rel=\"ugc\">WC Vendors & WC Vendors Pro\u003C\u002Fa> \u003Ca href=\"https:\u002F\u002Fmonosnap.com\u002Ffile\u002FTmpY4bYTHwF36ouN6fGpdjKZi5k3jz\" rel=\"nofollow ugc\">Apply to become vendor checkbox >>\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmailchimp-for-wp\u002F\" rel=\"ugc\">MailChimp for WordPress\u003C\u002Fa> \u003Ca href=\"https:\u002F\u002Fmonosnap.com\u002Ffile\u002FsVpsvTnIzQoplRA7ap3IBPfb81kPuV\" rel=\"nofollow ugc\">Subscribe to newsletter checkbox >>\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgoogle-authenticator\u002F\" rel=\"ugc\">Google Authenticator\u003C\u002Fa> \u003Ca href=\"https:\u002F\u002Fdocs.maxim-kaminsky.com\u002Flrm\u002Fkb\u002F2-factor-login-otp-verification\u002F\" rel=\"nofollow ugc\">Google Authenticator field during the login\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.gravityforms.com\u002Fadd-ons\u002Fuser-registration\u002F\" rel=\"nofollow ugc\">Gravity Forms + Gravity Forms User Registration Add-On\u003C\u002Fa> \u003Ca href=\"https:\u002F\u002Fdocs.maxim-kaminsky.com\u002Flrm\u002Fkb\u002Fgravity-forms-integration\u002F\" rel=\"nofollow ugc\">Replace with Gravity Forms registration form\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Easy Digital Downloads – soon\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmaxim-kaminsky.com\u002Fshop\u002Fcontact-me\u002F\" rel=\"nofollow ugc\">Request other plugin >>\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fmaxim-kaminsky.com\u002Fshop\u002Fproduct\u002Fajax-login-and-registration-modal-popup-pro\u002F\" rel=\"nofollow ugc\">GET PRO >>\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fdemo.maxim-kaminsky.com\u002Flrm\u002Fpro\u002F\" rel=\"nofollow ugc\">PRO DEMO >>\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Known issues\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>With Theme my login (TML) plugin (3 Password fields on the Create Account tab, if enable password field in LRM and TML)\u003C\u002Fli>\n\u003C\u002Ful>\n","Easy to integrate modal with Login and Registration features.",4000,182828,120,"2025-11-12T16:18:00.000Z","6.9.0","4.1","7.0",[72,73,74,21,22],"login","lost-password","modal","https:\u002F\u002Fmaxim-kaminsky.com\u002Fshop\u002Fproduct\u002Fajax-login-and-registration-modal-popup-pro\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fajax-login-and-registration-modal-popup.zip",99,2,"2024-11-12 13:26:21",{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":88,"downloaded":89,"rating":13,"num_ratings":90,"last_updated":91,"tested_up_to":16,"requires_at_least":92,"requires_php":93,"tags":94,"homepage":99,"download_link":100,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":37,"fetched_at":29},"users-registered-list","Users Registration Date","1.0.1","Slava Abakumov","https:\u002F\u002Fprofiles.wordpress.org\u002Fslaffik\u002F","\u003Cp>The “Users Registration Date” plugin adds a new sortable “Registered” column to the users lists that you can see in wp-admin area.r\u003C\u002Fp>\n\u003Cp>You can sort users by this date in ascending (to see the oldest users first) and descending (the latest users first) order.\u003C\u002Fp>\n\u003Cp>The plugin honors global site date and time formats that you set on the Settings > General page.\u003C\u002Fp>\n\u003Ch3>Languages\u003C\u002Fh3>\n\u003Cp>You can translate the plugin into your language.\u003C\u002Fp>\n","New sortable \"Registered\" date column on the Users page in wp-admin area to see when each user has registered on a site.",2000,9458,5,"2025-12-30T09:39:00.000Z","3.3","5.6",[95,22,96,97,98],"registered-date","sort","users","users-list","https:\u002F\u002Fovirium.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fusers-registered-list.1.0.1.zip",{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":109,"downloaded":110,"rating":111,"num_ratings":90,"last_updated":112,"tested_up_to":113,"requires_at_least":114,"requires_php":115,"tags":116,"homepage":120,"download_link":121,"security_score":122,"vuln_count":27,"unpatched_count":27,"last_vuln_date":37,"fetched_at":29},"show-user-registration-date","Show User Registration Date","1.0.0","Carlos Martínez Romero","https:\u002F\u002Fprofiles.wordpress.org\u002Fcarlosmr96\u002F","\u003Cp>“Show User Registration Date” is a small plugin that displays the user registered date in the table of the users section in the WordPress dashboard. It will be added as a column with the other data of each user.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Displays the user registered date at Users table\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin shows the registed date field in the table of the Users section in the WordPress dashboard.",1000,7445,76,"2023-02-23T20:50:00.000Z","6.1.10","4.0","5.2.4",[117,118,22,119,23],"display","registered","show","https:\u002F\u002Fcarlosmr.com\u002Fshow-user-registration-date","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshow-user-registration-date.zip",85,{"slug":124,"name":125,"version":126,"author":127,"author_profile":128,"description":129,"short_description":130,"active_installs":131,"downloaded":132,"rating":133,"num_ratings":50,"last_updated":134,"tested_up_to":135,"requires_at_least":136,"requires_php":137,"tags":138,"homepage":140,"download_link":141,"security_score":122,"vuln_count":27,"unpatched_count":27,"last_vuln_date":37,"fetched_at":29},"force-password-change","Force Password Change","0.6","Simon Blackbourn","https:\u002F\u002Fprofiles.wordpress.org\u002Flumpysimon\u002F","\u003Cp>This plugin redirects newly-registered users to the \u003Cem>Admin -> Edit Profile\u003C\u002Fem> page when they first log in. Until they have changed their password, they will not be able to access either the front-end or other admin pages. An admin notice is also displayed informing them that they must change their password.\u003C\u002Fp>\n\u003Cp>New administrators must also change their password, but as a safety measure they can also access the \u003Cem>Admin -> Plugins\u003C\u002Fem> page.\u003C\u002Fp>\n\u003Ch4>Translations included\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Català (Catalan)\u003C\u002Fli>\n\u003Cli>中文 (Chinese)\u003C\u002Fli>\n\u003Cli>Nederlands (Dutch)\u003C\u002Fli>\n\u003Cli>Français (French)\u003C\u002Fli>\n\u003Cli>Deutsch (German)\u003C\u002Fli>\n\u003Cli>Ελληνικά (Greek)\u003C\u002Fli>\n\u003Cli>Hebrew\u003C\u002Fli>\n\u003Cli>Hindi\u003C\u002Fli>\n\u003Cli>Magyar (Hungarian)\u003C\u002Fli>\n\u003Cli>Italiano (Italian)\u003C\u002Fli>\n\u003Cli>日本語 (Japanese)\u003C\u002Fli>\n\u003Cli>Khmer\u003C\u002Fli>\n\u003Cli>한국어 (Korean)\u003C\u002Fli>\n\u003Cli>Lietuvių kalba (Lithuanian)\u003C\u002Fli>\n\u003Cli>македонски јазик (Macedonian)\u003C\u002Fli>\n\u003Cli>Polski (Polish)\u003C\u002Fli>\n\u003Cli>Português do Brasil (Brazilian Portuguese)\u003C\u002Fli>\n\u003Cli>Português (Portuguese)\u003C\u002Fli>\n\u003Cli>Română (Romanian)\u003C\u002Fli>\n\u003Cli>Русский (Russian)\u003C\u002Fli>\n\u003Cli>Español (Spanish)\u003C\u002Fli>\n\u003Cli>Türkçe (Turkish)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>New translations are very welcome – please submit them via \u003Ca href=\"http:\u002F\u002Fwp-translations.org\u002F\" rel=\"nofollow ugc\">WP-Translations\u003C\u002Fa>. This plugin’s WP-Translations page is \u003Ca href=\"https:\u002F\u002Fwww.transifex.com\u002Fprojects\u002Fp\u002Fforce-password-change\u002F\" rel=\"nofollow ugc\">transifex.com\u002Fprojects\u002Fp\u002Fforce-password-change\u003C\u002Fa>\u003C\u002Fp>\n","Require users to change their password on first login.",500,14980,80,"2020-08-10T12:28:00.000Z","5.5.18","3.2","",[20,139,22,23,97],"passwords","https:\u002F\u002Fgithub.com\u002Flumpysimon\u002Fwp-force-password-change","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fforce-password-change.zip",{"slug":143,"name":144,"version":145,"author":146,"author_profile":147,"description":148,"short_description":149,"active_installs":131,"downloaded":150,"rating":151,"num_ratings":90,"last_updated":152,"tested_up_to":16,"requires_at_least":153,"requires_php":93,"tags":154,"homepage":137,"download_link":159,"security_score":160,"vuln_count":78,"unpatched_count":27,"last_vuln_date":161,"fetched_at":29},"user-registration-using-contact-form-7","User Registration Using Contact Form 7","2.6","ZealousWeb","https:\u002F\u002Fprofiles.wordpress.org\u002Fzealopensource\u002F","\u003Cp>User Registration Using Contact Form 7 plugin provides the feature to register the user to the website. By using this plugin, it becomes easy to create the registration or sign up form by selecting the fields for username and Email Id. The plugin allows the admins to view the list of registered users and set their roles efficiently.\u003C\u002Fp>\n\u003Ch4>Features of User Registration Using Contact Form 7\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Advanced Custom Field Mapping: Create advanced custom fields for user profiles, with only text and textarea options, and map them to corresponding Contact Form 7 fields. This allows for a more personalized user experience.\u003C\u002Fli>\n\u003Cli>Social Sign Up : Enable users to sign up in using popular social media platforms such as Facebook.\u003C\u002Fli>\n\u003Cli>Option to include the login URL in the email.\u003C\u002Fli>\n\u003Cli>Users can register to the site using the Contact Form 7 plugin. \u003C\u002Fli>\n\u003Cli>Option to view the list of the users who have been registered to the site.\u003C\u002Fli>\n\u003Cli>Option to set the User Role for the registered users.\u003C\u002Fli>\n\u003Cli>Option to select the Username and email field for the registration.\u003C\u002Fli>\n\u003Cli>An email consisting of an auto-generated password will be sent to the users after their registration is completed on the site.\u003C\u002Fli>\n\u003Cli>There is a debug mode option for debugging.\u003C\u002Fli>\n\u003Cli>Option to set a URL to redirect users to a particular page after a user is registered.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fdemo.zealousweb.com\u002Fwordpress-plugins\u002Fuser-registration-using-contact-form-7\u002F\" rel=\"nofollow ugc\">Demo for User Registration Using Contact Form 7\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>Features of User Registration Using Contact Form 7 Pro\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>BuddyPress Profile Field Mapping:\u003C\u002Fstrong> Mapping field This should include a dropdown list showing all BP profile fields. This mapping can be saved and reused across multiple forms.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Field Mapping for BuddyPress Profiles:\u003C\u002Fstrong>  Custom fields (text, textarea) are mapped in a dedicated section for advanced users.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>BuddyPress Activity Stream Integration:\u003C\u002Fstrong> An option allows admins to enable or disable logging of user registration and profile updates to the BuddyPress activity stream.\u003C\u002Fli>\n\u003Cli>Users can also login using the Contact Form 7 plugin.\u003C\u002Fli>\n\u003Cli>Woocommerce field integration for the users to collect the data.\u003C\u002Fli>\n\u003Cli>Custom validation message for reset password and forgot password.\u003C\u002Fli>\n\u003Cli>Shortcode for forgot password and reset password.\u003C\u002Fli>\n\u003Cli>Email SMTP settings.\u003C\u002Fli>\n\u003Cli>Admins can restrict users from login.\u003C\u002Fli>\n\u003Cli>Auto login after user registration.\u003C\u002Fli>\n\u003Cli>Option to add a password field to the Contact Form 7 plugin.\u003C\u002Fli>\n\u003Cli>Social Sign Up + Login: Enable users to sign up and log in using popular social media platforms such as Google, Facebook, and Apple.\u003C\u002Fli>\n\u003Cli>Push Notifications: Set up push notifications to be sent to registered users on your site, keeping them informed and engaged.\u003C\u002Fli>\n\u003Cli>Compatibility with Multi-Step for Contact Form 7: Ensure seamless integration between Contact Form 7 and the Multi-Step extension, allowing you to create intuitive and user-friendly multi-step forms.\u003C\u002Fli>\n\u003Cli>Email Templates for Contact Form 7: Customize email templates for Contact Form 7 or bypass the default email notifications entirely. This allows you to send personalized registration and login email notifications.\u003C\u002Fli>\n\u003Cli>Multilingual Support: Provide support for multiple languages on your site, enabling users to view and interact with content in their preferred language.\u003C\u002Fli>\n\u003Cli>Advanced Custom Field Mapping: Create advanced custom fields for user profiles, with only text and textarea options, and map them to corresponding Contact Form 7 fields. This allows for a more personalized user experience.\u003C\u002Fli>\n\u003Cli>WooCommerce Field Mapping\u003C\u002Fli>\n\u003Cli>Compatibility of WordPress VIP.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fstore.zealousweb.com\u002Fuser-registration-using-contact-form-7-pro\" rel=\"nofollow ugc\">Get more information of Pro version here\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fdemo.zealousweb.com\u002Fwordpress-plugins\u002Fuser-registration-using-contact-form-7-pro\u002F\" rel=\"nofollow ugc\">Demo for User Registration Using Contact Form 7 Pro\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>Shortcodes\u003C\u002Fh4>\n\u003Cp>You can use the below shortcode for Forgot Password:\u003Cbr \u002F>\n[zurcf7_forget_password]\u003Cbr \u002F>\nYou can use the below shortcode for Reset Password:\u003Cbr \u002F>\n[zurcf7_reset_password_custom_form]\u003C\u002Fp>\n\u003Ch4>Getting Help From Our Support System\u003C\u002Fh4>\n\u003Cp>Furthermore, if you need technical assistance to integrate ‘User Registration Using Contact Form 7’, you can reach out to us at \u003Ca href=\"https:\u002F\u002Fsupport.zealousweb.com\u002F\" rel=\"nofollow ugc\">ZealousWeb Support\u003C\u002Fa> System, and our support team will lend you the necessary assistance. As a leading company providing digital solutions, and the developers of this plugin, we ensure our clients have a seamless experience with ‘User Registration Using Contact Form 7’.\u003C\u002Fp>\n\u003Cp>We also offer custom WordPress extension development and WordPress theme design services to fulfill your e-commerce objectives.\u003C\u002Fp>\n\u003Cp>Thank you for choosing a Plugin developed by \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.zealousweb.com\" rel=\"nofollow ugc\">ZealousWeb\u003C\u002Fa>\u003C\u002Fstrong>!\u003C\u002Fp>\n\u003Ch3>OUR OTHER PLUGINS\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fstore.zealousweb.com\u002Fwordpress-plugins\u002Fabandoned-contact-form-7-pro\" rel=\"nofollow ugc\">Abandoned Contact Form 7 Pro\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fstore.zealousweb.com\u002Fwordpress-plugins\u002Faccept-2checkout-payments-using-contact-form-7-pro\" rel=\"nofollow ugc\">Accept 2 Checkout Payments Using Contact Form 7 Pro\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fstore.zealousweb.com\u002Fwordpress-plugins\u002Faccept-authorize-net-payments-using-contact-form-7-pro\" rel=\"nofollow ugc\">Accept Authorize.NET Payments Using Contact Form 7 Pro\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fstore.zealousweb.com\u002Fwordpress-plugins\u002Faccept-elavon-payments-using-contact-form-7-pro\" rel=\"nofollow ugc\">Accept Elavon Payments Using Contact Form 7 Pro\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fstore.zealousweb.com\u002Fwordpress-plugins\u002Faccept-paypal-payments-using-contact-form-7-pro\" rel=\"nofollow ugc\">Accept PayPal Payments Using Contact Form 7 Pro\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fstore.zealousweb.com\u002Fwordpress-plugins\u002Faccept-sage-pay-opayo-payments-using-contact-form-7-pro\" rel=\"nofollow ugc\">Accept Sagepay(Opayo) Payments Using Contact Form 7 Pro\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fstore.zealousweb.com\u002Fwordpress-plugins\u002Faccept-stripe-payments-using-contact-form-7-pro\" rel=\"nofollow ugc\">Accept Stripe Payments Using Contact Form 7 Pro\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fstore.zealousweb.com\u002Fwordpress-plugins\u002Fcustom-product-options-woocommerce-pro\" rel=\"nofollow ugc\">Custom Product Options WooCommerce Pro\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fstore.zealousweb.com\u002Fwordpress-plugins\u002Fgenerate-pdf-using-contact-form-7-pro\" rel=\"nofollow ugc\">Generate PDF Using Contact Form 7 Pro\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fstore.zealousweb.com\u002Fwordpress-plugins\u002Fsmart-appointment-booking-pro\" rel=\"nofollow ugc\">Smart Appointment & Booking Pro\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fstore.zealousweb.com\u002Fwordpress-plugins\u002Fsmart-showcase-for-google-reviews-pro\" rel=\"nofollow ugc\">Smart Showcase for Google Reviews Pro\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fstore.zealousweb.com\u002Fwordpress-plugins\u002Fuser-registration-using-contact-form-7-pro\" rel=\"nofollow ugc\">User Registration Using Contact Form 7 Pro\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n","User Registration Using Contact Form 7 plugin provides the feature to register the user to the website.",13966,84,"2026-01-06T07:36:00.000Z","3.5",[155,156,157,158],"contact-form-7","forgot-password","user-login","user-registration","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuser-registration-using-contact-form-7.2.6.zip",98,"2026-01-16 00:00:00",{"attackSurface":163,"codeSignals":189,"taintFlows":197,"riskAssessment":198,"analyzedAt":207},{"hooks":164,"ajaxHandlers":185,"restRoutes":186,"shortcodes":187,"cronEvents":188,"entryPointCount":27,"unprotectedCount":27},[165,171,174,178,182],{"type":166,"name":167,"callback":168,"file":169,"line":170},"action","login_enqueue_scripts","anonymous","inc\\namespace.php",12,{"type":166,"name":172,"callback":168,"file":169,"line":173},"register_form",13,{"type":175,"name":176,"callback":168,"file":169,"line":177},"filter","registration_errors",14,{"type":175,"name":179,"callback":168,"priority":180,"file":169,"line":181},"wp_pre_insert_user_data",10,15,{"type":175,"name":183,"callback":168,"priority":180,"file":169,"line":184},"wp_new_user_notification_email",16,[],[],[],[],{"dangerousFunctions":190,"sqlUsage":191,"outputEscaping":193,"fileOperations":27,"externalRequests":27,"nonceChecks":14,"capabilityChecks":27,"bundledLibraries":196},[],{"prepared":27,"raw":27,"locations":192},[],{"escaped":194,"rawEcho":27,"locations":195},3,[],[],[],{"summary":199,"deductions":200},"The registration-password plugin v2.0.1 exhibits a mixed security posture. On the positive side, the static analysis reveals a commendable lack of immediate code-level risks. There are no identified dangerous functions, all SQL queries utilize prepared statements, and output is consistently escaped. Furthermore, the absence of file operations and external HTTP requests limits potential attack vectors. The presence of a nonce check is a good practice, though the lack of capability checks on entry points is a notable oversight.\n\nThe primary concern stems from the vulnerability history. A past critical vulnerability of 'Authorization Bypass Through User-Controlled Key' highlights a significant historical weakness. Although this vulnerability is currently patched, its critical nature and the specific type suggest that the plugin's authorization mechanisms may have been complex or prone to subtle misinterpretations. The fact that this critical vulnerability exists and was patched indicates potential underlying issues in how user-controlled data was handled, even if current code analysis doesn't reveal explicit flaws.\n\nIn conclusion, while the current version of the registration-password plugin appears to have addressed immediate code-level vulnerabilities, the historical existence of a critical authorization bypass warrants caution. The lack of capability checks on its entry points is a potential weakness that could be exploited if new vulnerabilities are introduced in future versions. Users should remain vigilant and ensure the plugin is always updated to the latest patched version.",[201,204],{"reason":202,"points":203},"Past critical vulnerability (Authorization Bypass)",18,{"reason":205,"points":206},"No capability checks on entry points",7,"2026-03-16T22:00:37.743Z",{"wat":209,"direct":215},{"assetPaths":210,"generatorPatterns":211,"scriptPaths":212,"versionParams":213},[],[],[],[214],"registration-password\u002Fstyle.css?ver=",{"cssClasses":216,"htmlComments":225,"htmlAttributes":226,"restEndpoints":230,"jsGlobals":231,"shortcodeOutput":232},[217,218,219,220,221,222,223,224],"user-pass1-wrap","wp-pwd","password-input","hide-if-no-js","pw-weak","pw-checkbox","user-pass2-wrap","indicator-hint",[],[227,228,229],"data-reveal","data-pw","aria-label",[],[],[],{"error":234,"url":235,"statusCode":236,"statusMessage":237,"message":237},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fregistration-password\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":194,"versions":239},[240,245,252],{"version":6,"download_url":25,"svn_tag_url":241,"released_at":37,"has_diff":47,"diff_files_changed":242,"diff_lines":37,"trac_diff_url":243,"vulnerabilities":244,"is_current":234},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fregistration-password\u002Ftags\u002F2.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fregistration-password%2Ftags%2F1.0.1&new_path=%2Fregistration-password%2Ftags%2F2.0.1",[],{"version":83,"download_url":246,"svn_tag_url":247,"released_at":37,"has_diff":47,"diff_files_changed":248,"diff_lines":37,"trac_diff_url":249,"vulnerabilities":250,"is_current":47},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fregistration-password.1.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fregistration-password\u002Ftags\u002F1.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fregistration-password%2Ftags%2F1.0.0&new_path=%2Fregistration-password%2Ftags%2F1.0.1",[251],{"id":33,"url_slug":34,"title":35,"severity":39,"cvss_score":40,"vuln_type":42,"patched_in_version":6},{"version":104,"download_url":253,"svn_tag_url":254,"released_at":37,"has_diff":47,"diff_files_changed":255,"diff_lines":37,"trac_diff_url":37,"vulnerabilities":256,"is_current":47},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fregistration-password.1.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fregistration-password\u002Ftags\u002F1.0.0\u002F",[],[257],{"id":33,"url_slug":34,"title":35,"severity":39,"cvss_score":40,"vuln_type":42,"patched_in_version":6}]