[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffp5-EYpCUmtKqB8F5GZUTAr0BpGPHXzRrVQPXoPodOA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":39,"analysis":125,"fingerprints":368},"shortcodes-for-buddypress","Wbcom Designs – Shortcodes & Elementor Widgets For BuddyPress","2.9.1","wbcomdesigns","https:\u002F\u002Fprofiles.wordpress.org\u002Fwbcomdesigns\u002F","\u003Cp>This plugin will add an extended feature to BuddyPress. It will use Shortcode for Listing Activity Streams, Members directory, and Groups directory on any post or page within the website.\u003C\u002Fp>\n\u003Cp>With our current update, we have added three widgets to display the activity stream, member directory, and group directory using Elementor.\u003C\u002Fp>\n\u003Cdiv class=\"embed-vimeo\" style=\"text-align: center;\">\u003Ciframe loading=\"lazy\" src=\"https:\u002F\u002Fplayer.vimeo.com\u002Fvideo\u002F554193567\" width=\"750\" height=\"422\" frameborder=\"0\" webkitallowfullscreen mozallowfullscreen allowfullscreen>\u003C\u002Fiframe>\u003C\u002Fdiv>\n\u003Ch3>THEME – WORDPRESS THEME WITH OUTSTANDING BUDDYPRESS SUPPORT\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fbuddyx\u002F\" rel=\"ugc\">FREE BuddyPress Theme: BuddyX\u003C\u002Fa> – Offers unique layouts with clean code and easy-to-customise options, giving you a whole new way to visualize BuddyPress.\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin generates shortcodes for Listing Activity Streams, Members, and Groups on any website post or page.",700,51623,92,10,"2025-09-22T06:44:00.000Z","6.8.5","5.0.0","",[20,21,22,23,24],"activity","buddypress","buddypress-shortcodes","groups","members","https:\u002F\u002Fgithub.com\u002Fwbcomdesigns\u002Fshortcodes-for-buddypress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshortcodes-for-buddypress.2.9.1.zip",100,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":35,"avg_patch_time_days":36,"trust_score":37,"computed_at":38},19,9840,98,807,78,"2026-04-04T04:24:41.918Z",[40,58,79,96,111],{"slug":41,"name":42,"version":43,"author":44,"author_profile":45,"description":46,"short_description":47,"active_installs":14,"downloaded":48,"rating":27,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":18,"tags":53,"homepage":55,"download_link":56,"security_score":57,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"bp-avatar-hover","Buddypress Avatar Hover","1.0","aghajoon","https:\u002F\u002Fprofiles.wordpress.org\u002Faghajoon\u002F","\u003Cp>BuddyPress  Avatar Hover let’s you add a pop box when hovering on the group\u002Fmember avatars and gives you more information at a glance.\u003Cbr \u002F>\nif you install bp-cover plugin , bp avatar hover show cover of memeber\u002Fgroup\u003C\u002Fp>\n","BuddyPress  Avatar Hover let's you add a pop box when hovering on the group\u002Fmember avatars and gives you more information at a glance.",5312,1,"2016-06-07T14:09:00.000Z","4.5.33","3.8",[20,54,21,23,24],"avatar","http:\u002F\u002Fwebcaffe.ir","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-avatar-hover.zip",85,{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":66,"downloaded":67,"rating":68,"num_ratings":69,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":73,"tags":74,"homepage":77,"download_link":78,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"buddypress-group-email-subscription","BuddyPress Group Email Subscription","4.2.4","Boone Gorges","https:\u002F\u002Fprofiles.wordpress.org\u002Fboonebgorges\u002F","\u003Cp>This powerful plugin allows users to receive email notifications of group activity. Weekly or daily digests are available. Each user can choose how they want to subscribe to their groups.\u003C\u002Fp>\n\u003Cp>Please note that this plugin requires BuddyPress, as well as the BuddyPress Groups and Activity components.\u003C\u002Fp>\n\u003Cp>EMAIL SUBSCRIPTION LEVELS\u003Cbr \u002F>\nThere are 5 levels of email subscription options:\u003C\u002Fp>\n\u003Col>\n\u003Cli>No Email – Read this group on the web\u003C\u002Fli>\n\u003Cli>Weekly Summary Email – A summary of new topics each week\u003C\u002Fli>\n\u003Cli>Daily Digest Email – All the day’s activity bundled into a single email\u003C\u002Fli>\n\u003Cli>New Topics Email – Send new topics as they arrive (but don’t send replies)\u003C\u002Fli>\n\u003Cli>All Email – Send all group activity as it arrives\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>DEFAULT SUBSCRIPTION STATUS\u003Cbr \u002F>\nGroup admins can choose one of the 5 subscription levels as a default that gets applied when new members join.\u003C\u002Fp>\n\u003Cp>DIGEST AND SUMMARY EMAILS\u003Cbr \u002F>\nThe daily digest email is sent every morning and contains all the emails from all the groups a user is subscribed to. The digest begins with a helpful topic summary. The weekly summary email contains the topic titles from the past week by default. Summary and digest timing can be configured in the back end. (The admin can view a sample of the digests and summaries in the queue by going adding this to your url: mydomain.com\u002Fsum=1. This won’t send emails just show what will be sent)\u003C\u002Fp>\n\u003Cp>HTML EMAILS\u003Cbr \u002F>\nThe digest and summary emails are sent out in multipart HTML and plain text email format. This makes the digest much more readable with better links. The email is multipart so users who need only plain text will get plain text.\u003C\u002Fp>\n\u003Cp>EMAILS FOR TOPICS I’VE STARTED OR COMMENTED ON (only available with BuddyPress legacy discussion forums)\u003Cbr \u002F>\nUsers receive email notifications when someone replies to a topic they create or comment on (similar to Facebook). This happens whether they are subscribed or not. Users can control this behaviour in their notifications page.\u003C\u002Fp>\n\u003Cp>TOPIC FOLLOW AND MUTE (only available with BuddyPress legacy discussion forums)\u003Cbr \u002F>\nUsers who are not fully subscribed to a group (ie. maybe they are on digest) can choose to get immediate email updates for specific topic threads. Any subsequent replies to that thread will be emailed to them. In an opposite way, users who are fully subscribed to a group but want to stop getting emails from a specific (perhaps annoying) thread can choose to mute that topic.  bbPress plugin users can utilize the “Subscribe” \u002F “Notify me of follow-up replies via email” option.\u003C\u002Fp>\n\u003Cp>ADMIN NOTIFICATION\u003Cbr \u002F>\nGroup admins can send out an email to all group members from the group’s admin section. This feature is helpful to quickly communicate to the whole group, but it should be used with caution.\u003C\u002Fp>\n\u003Cp>GROUP ADMINS CAN SET SUBSCRIPTION LEVEL\u003Cbr \u002F>\nGroup admins can set the subscription level for existing users on the group’s “Admin > Manage Members” page – either one by one or all at once.\u003C\u002Fp>\n\u003Cp>SPAM PROTECTION\u003Cbr \u002F>\nTo protect against spam, you can set a minimum number of days users need to be registered before their group activity will be emailed to other users. This feature is off by default, but can be enabled in the admin.\u003C\u002Fp>\n\u003Cp>TRANSLATORS\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Brazilian Portuguese – www.about.me\u002Fdennisaltermann (or www.congregacao.net)\u003C\u002Fli>\n\u003Cli>Catalan – Sara Arjona Téllez\u003C\u002Fli>\n\u003Cli>Danish – Morten Nalholm\u003C\u002Fli>\n\u003Cli>Dutch – Anja werkgroepen.net\u002Fwordpress, Tim de Hoog\u003C\u002Fli>\n\u003Cli>Farsi – Vahid Masoomi http:\u002F\u002Fwww.AzUni.ir\u003C\u002Fli>\n\u003Cli>French – http:\u002F\u002Fwww.claudegagne-photo.com, Sylvain Ghysens\u003C\u002Fli>\n\u003Cli>German – Peter Peterson, Thorsten Wollenhöfer, Jörg Lohrer\u003C\u002Fli>\n\u003Cli>Hebrew – Iggy Pritzker\u003C\u002Fli>\n\u003Cli>Italian – Stefano Russo\u003C\u002Fli>\n\u003Cli>Japanese – https:\u002F\u002Fbuddypress.org\u002Fcommunity\u002Fmembers\u002Fchestnut_jp\u002F\u003C\u002Fli>\n\u003Cli>Lithuanian – Vincent G http:\u002F\u002Fwww.Host1Free.com\u003C\u002Fli>\n\u003Cli>Russian – http:\u002F\u002Fwww.viaestvita.net\u002Fgroups\u002F\u003C\u002Fli>\n\u003Cli>Spanish – Williams Castillo, Gregor Gimmy\u003C\u002Fli>\n\u003Cli>Swedish – Thomas Schneider, Joakim Hising\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>NOTE TO PLUGIN AUTHORS\u003Cbr \u002F>\nIf your plugin posts updates to the standard BuddyPress activity stream, then group members who are subscribed via 3. Daily Digest and 5. All Email will get your updates automatically. However people subscribed as 2. Weekly Summary and 4. New Topic will not. If you feel some of your plugin’s updates are very important and want to make sure all subscribed members receive them, you can filter ‘ass_this_activity_is_important’ and return TRUE when $type matches your activity. See the ass_this_activity_is_important() function in bp-activity-subscription-functions.phpfor more info.\u003C\u002Fp>\n\u003Cp>PLUGIN SUPPORTERS:\u003Cbr \u002F>\nMajor supporters: shambhalanetwork.org & commons.gc.cuny.edu\u003Cbr \u002F>\nOther supporters: bluedotproductions.com\u003C\u002Fp>\n\u003Cp>PLUGIN DEVELOPMENT\u003Cbr \u002F>\nFor bug reports or to add patches or translation files, please visit the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fboonebgorges\u002Fbuddypress-group-email-subscription\u002F\" rel=\"nofollow ugc\">GES Github page\u003C\u002Fa>.  Contributions are definitely welcome!\u003C\u002Fp>\n","This powerful plugin allows users to receive email notifications of group activity. Weekly or daily digests are available.",1000,230356,80,32,"2024-10-04T14:35:00.000Z","6.6.5","3.2","5.3",[75,20,76,21,23],"activities","bp","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fbuddypress-group-email-subscription\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-group-email-subscription.4.2.4.zip",{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":27,"downloaded":87,"rating":88,"num_ratings":89,"last_updated":90,"tested_up_to":16,"requires_at_least":91,"requires_php":18,"tags":92,"homepage":18,"download_link":95,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"bp-local-avatars","BP Local Avatars","3.0","shanebp","https:\u002F\u002Fprofiles.wordpress.org\u002Fshanebp\u002F","\u003Cp>BP Local Avatars is a BuddyPress plugin.\u003C\u002Fp>\n\u003Cp>Do you have members or groups on your BuddyPress site who do not have an Avatar?\u003Cbr \u002F>\nAnd you do not want to show the generic default avatar?\u003Cbr \u002F>\nOr maybe you do not want each page view to include a lot of calls to gravatar.com to load avatars?\u003C\u002Fp>\n\u003Cul>\n\u003Cli>This plugin will create a Gravatar Identicon avatar, thumb and full versions, for any user who does not already have an Avatar, and save it locally.\u003C\u002Fli>\n\u003Cli>Supports user creation, user registration, user login, and Bulk Generation for user and groups.\u003C\u002Fli>\n\u003Cli>Uses the existing BuddyPress avatar directory structure.\u003C\u002Fli>\n\u003Cli>Conforms to the defined sizes for BuddyPress thumb and full avatars.\u003C\u002Fli>\n\u003Cli>Users can still upload an avatar via their profile.\u003C\u002Fli>\n\u003Cli>Groups can still upload an avatar via Group > Manage > Photo.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Usage:\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>Provides an option in wp-admin under:\u003Cbr \u002F>\nSettings -> Discussion > Default Avatar > BuddyPress Identicon (Generated and Stored Locally).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Select and Save. Otherwise this plugin will not do anything.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>After saving, you will see a link to ‘Bulk Generate’ avatars for all users and groups who do not have a local avatar. If a user already has their own Gravatar, it will save it locally.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>For more BuddyPress plugins, please visit \u003Ca href=\"https:\u002F\u002Fwww.philopress.com\u002F\" rel=\"nofollow ugc\">PhiloPress\u003C\u002Fa>\u003C\u002Fp>\n","A BuddyPress plugin that creates Gravatar avatars for any user or group without one, and stores them locally.",10578,82,7,"2025-04-19T17:32:00.000Z","4.0",[93,21,94,23,24],"avatars","gravatars","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-local-avatars.3.0.zip",{"slug":97,"name":98,"version":99,"author":62,"author_profile":63,"description":100,"short_description":101,"active_installs":102,"downloaded":103,"rating":104,"num_ratings":105,"last_updated":106,"tested_up_to":18,"requires_at_least":18,"requires_php":18,"tags":107,"homepage":109,"download_link":110,"security_score":57,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"bp-group-management","BP Group Management","0.6","\u003Cp>NOTE: This plugin is not recommended for users of BuddyPress 1.7+. Instead, use BP’s Groups panel in the Dashboard.\u003C\u002Fp>\n\u003Cp>This plugin creates an admin panel at Dashboard > BuddyPress > Group Management. On this panel, site admins can manage BP group membership by banning, unbanning, promoting and demoting current members of any group, adding members to any group, and deleting groups.\u003C\u002Fp>\n\u003Ch3>Translation credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Italian: Luca Camellini\u003C\u002Fli>\n\u003Cli>Turkish: gk\u003C\u002Fli>\n\u003Cli>German: Tom\u003C\u002Fli>\n\u003Cli>Dutch: \u003Ca href=\"http:\u002F\u002Fwerkgroepen.net\u002Fwordpress\u002F\" rel=\"nofollow ugc\">Anja\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Romanian, \u003Ca href=\"http:\u002F\u002Fwebhostinggeeks.com\u002F\" rel=\"nofollow ugc\">Web Geek Science\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>B. Radenovich, Slovak (\u003Ca href=\"http:\u002F\u002Fwebhostingw.com\u002F\" rel=\"nofollow ugc\">Web Hosting Watch\u003C\u002Fa>)\u003C\u002Fli>\n\u003C\u002Ful>\n","Allows site administrators to manage group membership on versions of BuddyPress earlier than 1.7.",30,38297,46,3,"2013-04-30T00:24:00.000Z",[21,23,108,24],"manage","http:\u002F\u002Fteleogistic.net\u002Fcode\u002Fbuddypress\u002Fbp-group-management","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-group-management.0.6.zip",{"slug":112,"name":113,"version":43,"author":114,"author_profile":115,"description":116,"short_description":117,"active_installs":14,"downloaded":118,"rating":27,"num_ratings":49,"last_updated":119,"tested_up_to":18,"requires_at_least":18,"requires_php":18,"tags":120,"homepage":123,"download_link":124,"security_score":57,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"bp-extend-widgets","BuddyPress Extend Widgets","Slava Abakumov","https:\u002F\u002Fprofiles.wordpress.org\u002Fslaffik\u002F","\u003Cp>After activating all current and possible future widgets will get extra BuddyPress specific options.\u003Cbr \u002F>\nYou will be able to select on which users profiles or groups pages you want to display this widget and on which – don’t.\u003C\u002Fp>\n\u003Cp>So you will get more flexibility in arranging your sidebars (or widget-zones).\u003C\u002Fp>\n","Provide all widgets with BuddyPress specific fields (conditional display logic)",6281,"2015-01-04T17:52:00.000Z",[21,121,23,24,122],"conditional","widgets","http:\u002F\u002Fovirium.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbp-extend-widgets.1.0.zip",{"attackSurface":126,"codeSignals":271,"taintFlows":337,"riskAssessment":362,"analyzedAt":367},{"hooks":127,"ajaxHandlers":249,"restRoutes":260,"shortcodes":261,"cronEvents":269,"entryPointCount":136,"unprotectedCount":270},[128,134,137,141,146,150,154,159,163,168,170,172,174,176,178,181,183,187,190,193,196,198,201,204,207,212,216,218,222,226,229,232,236,240,246],{"type":129,"name":130,"callback":131,"file":132,"line":133},"action","admin_init","check_installation_date","admin\\class-shortcode-for-buddypress-user-review.php",77,{"type":129,"name":130,"callback":135,"priority":136,"file":132,"line":37},"set_no_bug",5,{"type":129,"name":138,"callback":139,"file":132,"line":140},"admin_notices","display_admin_notice",155,{"type":129,"name":142,"callback":143,"priority":144,"file":145,"line":102},"admin_menu","wbcom_admin_additional_pages",999,"admin\\wbcom\\wbcom-admin-settings.php",{"type":129,"name":147,"callback":148,"file":145,"line":149},"admin_enqueue_scripts","wbcom_enqueue_admin_scripts",31,{"type":129,"name":151,"callback":152,"file":145,"line":153},"in_admin_header","wbcom_hide_all_admin_notices_from_setting_page",33,{"type":129,"name":155,"callback":156,"file":157,"line":158},"elementor\u002Felements\u002Fcategories_registered","register_widget_category","elementor\\class-buddypress-shortcode-elements.php",45,{"type":129,"name":160,"callback":161,"file":157,"line":162},"elementor\u002Fwidgets\u002Fregister","register_widgets",48,{"type":129,"name":164,"callback":165,"file":166,"line":167},"plugins_loaded","anonymous","includes\\class-shortcodes-for-buddypress.php",187,{"type":129,"name":147,"callback":165,"file":166,"line":169},202,{"type":129,"name":147,"callback":165,"file":166,"line":171},203,{"type":129,"name":142,"callback":165,"file":166,"line":173},204,{"type":129,"name":130,"callback":165,"file":166,"line":175},205,{"type":129,"name":130,"callback":165,"file":166,"line":177},206,{"type":129,"name":179,"callback":165,"file":166,"line":180},"wp_enqueue_scripts",220,{"type":129,"name":179,"callback":165,"file":166,"line":182},221,{"type":184,"name":185,"callback":165,"file":166,"line":186},"filter","bp_nouveau_get_search_primary_object",223,{"type":184,"name":188,"callback":165,"file":166,"line":189},"body_class",224,{"type":184,"name":191,"callback":165,"file":166,"line":192},"bp_core_get_js_strings",227,{"type":184,"name":194,"callback":165,"file":166,"line":195},"bp_nouveau_register_scripts",229,{"type":184,"name":191,"callback":165,"file":166,"line":197},231,{"type":184,"name":199,"callback":165,"file":166,"line":200},"bp_activity_reshare_action",234,{"type":184,"name":202,"callback":165,"file":166,"line":203},"bp_after_nouveau_wrapper_parse_args",235,{"type":184,"name":205,"callback":165,"file":166,"line":206},"bb_nouveau_get_activity_entry_bubble_buttons",238,{"type":184,"name":208,"callback":209,"file":210,"line":211},"bp_enqueue_assets_in_bp_pages_only","bp_shortcode_js_css","public\\class-shortcodes-for-buddypress-public.php",53,{"type":129,"name":138,"callback":213,"file":214,"line":215},"closure","shortcodes-for-buddypress.php",41,{"type":129,"name":138,"callback":217,"file":214,"line":171},"shortcodes_for_buddypress_required_plugin_admin_notice",{"type":129,"name":130,"callback":219,"priority":220,"file":214,"line":221},"shortcodes_for_buddypress_requires_buddypress",20,213,{"type":129,"name":223,"callback":224,"file":214,"line":225},"activated_plugin","shortcodes_for_buddypress_activation_redirect_settings",261,{"type":129,"name":130,"callback":227,"file":214,"line":228},"shortcodes_for_buddypress_do_activation_redirect",291,{"type":129,"name":155,"callback":230,"file":214,"line":231},"shortcodes_for_buddypress_categories_registered",375,{"type":184,"name":233,"callback":234,"priority":14,"file":214,"line":235},"bp_nouveau_get_loop_classes","shortcodes_for_buddypress_get_groups_loop_class",515,{"type":184,"name":237,"callback":213,"file":238,"line":239},"bp_current_action","templates\\legacy\\notifications\\notifications-loop.php",23,{"type":184,"name":241,"callback":242,"priority":243,"file":244,"line":245},"bp_get_group_description_excerpt","bb_get_group_description_excerpt_view_more",99,"templates\\nouveau\\groups\\bb-shortcodes-groups.php",13,{"type":184,"name":237,"callback":213,"file":247,"line":248},"templates\\nouveau\\notifications\\notifications-loop.php",17,[250,255,258],{"action":251,"nopriv":252,"callback":253,"hasNonce":254,"hasCapCheck":252,"file":145,"line":69},"wbcom_addons_cards",false,"wbcom_addons_cards_links",true,{"action":256,"nopriv":252,"callback":165,"hasNonce":252,"hasCapCheck":252,"file":166,"line":257},"bpsp_activities_load",232,{"action":256,"nopriv":254,"callback":165,"hasNonce":252,"hasCapCheck":252,"file":166,"line":259},233,[],[262,266],{"tag":263,"callback":264,"file":145,"line":265},"wbcom_admin_setting_header","wbcom_admin_setting_header_html",29,{"tag":267,"callback":165,"file":166,"line":268},"notifications-listing",225,[],2,{"dangerousFunctions":272,"sqlUsage":273,"outputEscaping":275,"fileOperations":28,"externalRequests":28,"nonceChecks":105,"capabilityChecks":49,"bundledLibraries":336},[],{"prepared":49,"raw":28,"locations":274},[],{"escaped":276,"rawEcho":277,"locations":278},246,26,[279,282,284,286,289,291,293,296,298,301,304,307,309,311,313,315,316,319,320,322,324,326,328,330,332,334],{"file":132,"line":280,"context":281},275,"raw output",{"file":132,"line":283,"context":281},278,{"file":132,"line":285,"context":281},286,{"file":287,"line":288,"context":281},"admin\\class-shortcodes-for-buddypress-admin.php",185,{"file":287,"line":290,"context":281},218,{"file":292,"line":248,"context":281},"admin\\wbcom\\templates\\wbcom-license-page.php",{"file":294,"line":295,"context":281},"admin\\wbcom\\templates\\wbcom-plugins-page.php",11,{"file":297,"line":295,"context":281},"admin\\wbcom\\templates\\wbcom-support-page.php",{"file":299,"line":300,"context":281},"elementor\\widgets\\class-buddypress-activity-widget.php",520,{"file":302,"line":303,"context":281},"elementor\\widgets\\class-buddypress-groups-widget.php",358,{"file":305,"line":306,"context":281},"elementor\\widgets\\class-buddypress-members-widget.php",323,{"file":210,"line":308,"context":281},313,{"file":210,"line":310,"context":281},322,{"file":210,"line":312,"context":281},330,{"file":210,"line":314,"context":281},524,{"file":214,"line":162,"context":281},{"file":317,"line":318,"context":281},"templates\\nouveau\\activity\\bp-shortcodes-activity.php",102,{"file":244,"line":318,"context":281},{"file":247,"line":321,"context":281},76,{"file":323,"line":243,"context":281},"templates\\youzify\\activity\\bp-shortcodes-activity.php",{"file":323,"line":325,"context":281},112,{"file":323,"line":327,"context":281},152,{"file":323,"line":329,"context":281},154,{"file":323,"line":331,"context":281},211,{"file":333,"line":57,"context":281},"templates\\youzify\\groups\\bp-shortcodes-groups.php",{"file":333,"line":335,"context":281},122,[],[338,354],{"entryPoint":339,"graph":340,"unsanitizedCount":28,"severity":353},"wbcom_addons_cards_links (admin\\wbcom\\wbcom-admin-settings.php:41)",{"nodes":341,"edges":351},[342,346],{"id":343,"type":344,"label":345,"file":145,"line":158},"n0","source","$_POST",{"id":347,"type":348,"label":349,"file":145,"line":104,"wp_function":350},"n1","sink","echo() [XSS]","echo",[352],{"from":343,"to":347,"sanitized":254},"low",{"entryPoint":355,"graph":356,"unsanitizedCount":28,"severity":353},"\u003Cwbcom-admin-settings> (admin\\wbcom\\wbcom-admin-settings.php:0)",{"nodes":357,"edges":360},[358,359],{"id":343,"type":344,"label":345,"file":145,"line":158},{"id":347,"type":348,"label":349,"file":145,"line":104,"wp_function":350},[361],{"from":343,"to":347,"sanitized":254},{"summary":363,"deductions":364},"The \"shortcodes-for-buddypress\" plugin v2.9.1 exhibits a generally good security posture with some notable areas of concern. The plugin demonstrates strong practices by exclusively using prepared statements for SQL queries and achieving a high percentage of properly escaped output. The absence of file operations, external HTTP requests, and known vulnerabilities in its history are positive indicators. However, the presence of unprotected AJAX handlers represents a significant security weakness.  These entry points could be exploited by unauthenticated users to trigger plugin functionality, potentially leading to unintended consequences or providing an avenue for further attacks if not properly secured.",[365],{"reason":366,"points":89},"Unprotected AJAX handlers","2026-03-16T19:24:57.262Z",{"wat":369,"direct":400},{"assetPaths":370,"generatorPatterns":384,"scriptPaths":385,"versionParams":386},[371,372,373,374,375,376,377,378,379,380,381,382,383],"\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fcss\u002Ffrontend.css","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fcss\u002Fowl.carousel.min.css","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fcss\u002Fslick.css","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fcss\u002Fslick-theme.css","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Ffrontend.js","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Fowl.carousel.min.js","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Fslick.min.js","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Fscript.js","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Fwaypoints.min.js","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Fcounterup.min.js","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Fimagesloaded.min.js","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Fisotope.min.js","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Fwbcp-public.js",[],[375,376,377,378,379,380,381,382,383],[387,388,389,390,391,392,393,394,395,396,397,398,399],"\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fcss\u002Ffrontend.css?ver=","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fcss\u002Fowl.carousel.min.css?ver=","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fcss\u002Fslick.css?ver=","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fcss\u002Fslick-theme.css?ver=","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Ffrontend.js?ver=","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Fowl.carousel.min.js?ver=","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Fslick.min.js?ver=","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Fscript.js?ver=","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Fwaypoints.min.js?ver=","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Fcounterup.min.js?ver=","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Fimagesloaded.min.js?ver=","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Fisotope.min.js?ver=","\u002Fwp-content\u002Fplugins\u002Fshortcodes-for-buddypress\u002Fassets\u002Fjs\u002Fwbcp-public.js?ver=",{"cssClasses":401,"htmlComments":421,"htmlAttributes":423,"restEndpoints":427,"jsGlobals":428,"shortcodeOutput":430},[402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420],"wbcp-bp-groups-slider","wbcp-bp-members-slider","wbcp-bp-activity-slider","wbcp-bp-groups-list","wbcp-bp-members-list","wbcp-bp-activity-list","wbcp-bp-groups-grid","wbcp-bp-members-grid","wbcp-bp-activity-grid","wbcp-member-profile-slider","wbcp-group-profile-slider","wbcp-recent-member-activity","wbcp-recent-group-activity","wbcp-bp-profile-completeness","wbcp-login-form","wbcp-registration-form","wbcp-forgot-password-form","wbcp-members-directory","wbcp-groups-directory",[422],"\u003C!-- Shortcodes for BuddyPress Plugin -->",[424,425,426],"data-slick","data-owl-carousel","data-wbcp-settings",[],[429],"wbcp_public_params",[431,432,433,434,435,436,437,438,439,440,441,442,443],"[bp_members]","[bp_groups]","[bp_activity]","[bp_member_profile]","[bp_group_profile]","[bp_recent_member_activity]","[bp_recent_group_activity]","[bp_profile_completeness]","[bp_login_form]","[bp_registration_form]","[bp_forgot_password_form]","[bp_members_directory]","[bp_groups_directory]"]