[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGbXC51WO56g9wCcrBuH0nlmVH4BPvLihL8sZsyPQBNw":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":39,"analysis":138,"fingerprints":235},"sidebar-login","Sidebar Login","3.0.1","Mike Jolley","https:\u002F\u002Fprofiles.wordpress.org\u002Fmikejolley\u002F","\u003Cp>\u003Cem>Sidebar Login\u003C\u002Fem> adds a useful login widget which you can use to login from in the sidebar of your WordPress powered blog.\u003C\u002Fp>\n\u003Cp>Once a user logs in they are redirected back to the page they logged in from, rather than the admin panel (this is configurable).\u003C\u002Fp>\n\u003Cp>If you’d like to contribute code to the plugin you can do so via \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmikejolley\u002Fsidebar-login\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>If you’d like to contribute a translation, \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fsidebar-login\" rel=\"nofollow ugc\">the project is hosted on WordPress.org\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Cp>Simply go to \u003Ccode>Appearance > Widgets\u003C\u002Fcode> and drag “sidebar login” to the sidebar of your choice. Within the widget are several options you can use for changing the titles or the links displayed to the user.\u003C\u002Fp>\n\u003Cp>To use this widget in a template, use \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FFunction_Reference\u002Fthe_widget\" rel=\"nofollow ugc\">the \u003Ccode>the_widget()\u003C\u002Fcode> function\u003C\u002Fa> which WordPress provides.\u003C\u002Fp>\n\u003Ch4>Tags for titles + links\u003C\u002Fh4>\n\u003Cp>These tags can be used in the widget settings for titles + links and will be replaced at runtime.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>%username%\u003C\u002Fcode> – logged in users display name\u003C\u002Fli>\n\u003Cli>\u003Ccode>%userid%\u003C\u002Fcode> – logged in users ID\u003C\u002Fli>\n\u003Cli>\u003Ccode>%firstname%\u003C\u002Fcode> – logged in users firstname\u003C\u002Fli>\n\u003Cli>\u003Ccode>%lastname%\u003C\u002Fcode> – logged in users lastname\u003C\u002Fli>\n\u003Cli>\u003Ccode>%name%\u003C\u002Fcode> – logged in users firstname + lastname\u003C\u002Fli>\n\u003Cli>\u003Ccode>%nicename%\u003C\u002Fcode> – user nice name\u003C\u002Fli>\n\u003Cli>\u003Ccode>%admin_url%\u003C\u002Fcode> – url to WP admin\u003C\u002Fli>\n\u003Cli>\u003Ccode>%logout_url%\u003C\u002Fcode> – logout url\u003C\u002Fli>\n\u003Cli>\u003Ccode>%buddypress_profile_url%\u003C\u002Fcode> – Buddypress Profile URL\u003C\u002Fli>\n\u003Cli>\u003Ccode>%bbpress_profile_url%\u003C\u002Fcode> – Buddypress Profile URL\u003C\u002Fli>\n\u003Cli>\u003Ccode>%avatar%\u003C\u002Fcode> – User Avatar\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Filter Reference\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ccode>sidebar_login_include_css\u003C\u002Fcode> – return false to not include the CSS stylesheet\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_logged_in_links\u003C\u002Fcode> – An array of links shown when logged in.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_logged_out_links\u003C\u002Fcode> – An array of links shown when logged out.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_display\u003C\u002Fcode> – Return false to hide the widget.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_logged_in_title\u003C\u002Fcode> – The widget title shown when logged in.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_avatar_size\u003C\u002Fcode> – The avatar size – defaulted to 38 (thats in px)\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_logged_out_title\u003C\u002Fcode> – The widget title shown when logged out.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_form_args\u003C\u002Fcode> – Arguments for the wp_login_form function.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_login_redirect\u003C\u002Fcode> – Redirect URL after login.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_logout_redirect\u003C\u002Fcode> – the redirect after logging out.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_register_url\u003C\u002Fcode> – The URL for registration links.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_lost_password_url\u003C\u002Fcode> – The URL for lost password links.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_wp_login_form\u003C\u002Fcode> – The HTML of the Login form.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Action Reference\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ccode>sidebar_login_widget_start\u003C\u002Fcode> – Fired before the widget.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_{logged_in || logged_out}_content_start\u003C\u002Fcode> – Fired before the widget content.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_before_{logged_in || logged_out}_links\u003C\u002Fcode> – Fired before the links.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_after_{logged_in || logged_out}_links\u003C\u002Fcode> – Fire after the links.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_{logged_in || logged_out}_content_end\u003C\u002Fcode> – Fired after the widget content.\u003C\u002Fli>\n\u003Cli>\u003Ccode>sidebar_login_widget_end\u003C\u002Fcode> – Fired after the widget.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Notes\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Due to AJAX not working across different domains (see \u003Ca href=\"http:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FSame_origin_policy\" rel=\"nofollow ugc\">same_origin_policy\u003C\u002Fa>), AJAX logins will be disabled if your site it non-SSL, but the FORCE_SSL_ADMIN constant is set to true. Instead it will fallback to a traditional POST.\u003C\u002Fli>\n\u003C\u002Ful>\n","Easily add an ajax-enhanced login widget to your WordPress site sidebar.",10000,1048824,90,78,"2020-10-17T20:43:00.000Z","5.5.18","5.0","5.6",[20,21,22,4,23],"login","login-widget","sidebar","widget","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fsidebar-login\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsidebar-login.3.0.1.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":35,"avg_patch_time_days":36,"trust_score":37,"computed_at":38},"mikejolley",4,10620,89,30,86,"2026-04-04T08:29:31.441Z",[40,64,85,104,121],{"slug":41,"name":42,"version":43,"author":44,"author_profile":45,"description":46,"short_description":47,"active_installs":48,"downloaded":49,"rating":50,"num_ratings":51,"last_updated":52,"tested_up_to":53,"requires_at_least":54,"requires_php":55,"tags":56,"homepage":58,"download_link":59,"security_score":60,"vuln_count":61,"unpatched_count":62,"last_vuln_date":63,"fetched_at":29},"login-sidebar-widget","Login Widget With Shortcode","6.1.2","aviplugins.com","https:\u002F\u002Fprofiles.wordpress.org\u002Favimegladon\u002F","\u003Cul>\n\u003Cli>This is a simple login form in the widget.\u003C\u002Fli>\n\u003Cli>Compatible with WordPress Multisite Installation.\u003C\u002Fli>\n\u003Cli>Use this shortcode [login_widget] to use login form in your pages\u002F posts. \u003C\u002Fli>\n\u003Cli>Just install the plugin and add the login widget in the sidebar. \u003C\u002Fli>\n\u003Cli>Change some ‘optional’ settings in \u003Ccode>Login Widget Settings\u003C\u002Fcode> (admin panel left side menu) and you are good to go. \u003C\u002Fli>\n\u003Cli>Add CSS as you prefer because the form structure is really very simple.\u003C\u002Fli>\n\u003Cli>Use this shortcode [forgot_password] in your page to display the forgot password form. Forgot password link can be added to login widget from plugin settings page.\u003C\u002Fli>\n\u003Cli>Login form is responsive.\u003C\u002Fli>\n\u003Cli>Plugin is compatible with \u003Cstrong>WPML\u003C\u002Fstrong> plugin. You can check the compatibility at \u003Ca href=\"https:\u002F\u002Fwpml.org\u002Fplugin\u002Flogin-widget-with-shortcode\u002F\" rel=\"nofollow ugc\">wpml.org\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FGIdsTLfH6Is?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch4>Other Optional Options\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Add CAPTCHA security in admin and frontend login forms.\u003C\u002Fli>\n\u003Cli>Login Logs are stored in database ( IP, login status, login time ). PRO version has options to block IPs after certain numbers of wrong login attempts.\u003C\u002Fli>\n\u003Cli>You can choose the redirect page after login. It can be a page or a custom URL.\u003C\u002Fli>\n\u003Cli>Choose redirect page after logout.\u003C\u002Fli>\n\u003Cli>Choose user profile page.\u003C\u002Fli>\n\u003Cli>Easy CSS implementation from admin panel.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Facebook Login Widget (PRO)\u003C\u002Fh4>\n\u003Cp>There is a PRO version of this plugin that supports login with \u003Cstrong>Facebook, Google, Twitter, LinkedIn, Amazon and Instagram accounts. Get it for \u003C\u002Fstrong>\u003Cstrong>USD 6.00\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.aviplugins.com\u002Ffb-login-widget-pro\u002F\" rel=\"nofollow ugc\">Click here for more details\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fdemo.aviplugins.com\u002Flogin\u002F\" rel=\"nofollow ugc\">Click here for a Live Demo\u003C\u002Fa>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The PRO version comes with a \u003Cstrong>FREE Content Restriction Addon\u003C\u002Fstrong>. Partial contents of Pages\u002F Posts or the complete Page\u002FPost can be hidden from visitors of your site.\u003C\u002Fli>\n\u003Cli>Compatible with \u003Cstrong>WooCommerce\u003C\u002Fstrong> plugin.\u003C\u002Fli>\n\u003Cli>Compatible with \u003Cstrong>WordPress Multisite\u003C\u002Fstrong> Installation.\u003C\u002Fli>\n\u003Cli>Login Logs are stored in database. IPs gets \u003Cstrong>Blocked\u003C\u002Fstrong> after a certain numbers of wrong login attempts. This ensures site’s security.\u003C\u002Fli>\n\u003Cli>IPs can be \u003Cstrong>Blocked\u003C\u002Fstrong> permanently from admin panel.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Captcha\u003C\u002Fstrong> login securiy in Frontend and Admin login Forms.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Restrict Admin panel Access\u003C\u002Fstrong> for selected user Roles. For example you can restrict Admin Panel access for “Subscriber” and “Contributor” from your site.\u003C\u002Fli>\n\u003Cli>Use Shortcode to display login form in Post or Page.\u003C\u002Fli>\n\u003Cli>Use only Social Icons for logging in. No need to put the entire login form.\u003C\u002Fli>\n\u003Cli>Change welcome text “Howdy” from plugin settings section.\u003C\u002Fli>\n\u003Cli>Manage Forgot Password Email Body.\u003C\u002Fli>\n\u003Cli>Easy CSS implementation from admin panel.\u003C\u002Fli>\n\u003Cli>And with other useful settings. \u003Ca href=\"https:\u002F\u002Fwww.aviplugins.com\u002Ffb-login-widget-pro\u002F\" rel=\"nofollow ugc\">Click here for details\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Social Login No Setup\u003C\u002Fh4>\n\u003Cp>The plugin supports login with 30+ sites. The most important part is that it requires no Setups, no Maintanance, no need to create any APPs, APIs, Client Ids, Client Secrets or anything. Get it for \u003Cstrong>USD 3.00\u003C\u002Fstrong>. Supported sites are listed below.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Facebook\u003C\u002Fli>\n\u003Cli>Google\u003C\u002Fli>\n\u003Cli>YouTube\u003C\u002Fli>\n\u003Cli>Google Drive\u003C\u002Fli>\n\u003Cli>Gmail\u003C\u002Fli>\n\u003Cli>Twitter\u003C\u002Fli>\n\u003Cli>LinkedIn\u003C\u002Fli>\n\u003Cli>PayPal\u003C\u002Fli>\n\u003Cli>Yahoo\u003C\u002Fli>\n\u003Cli>Microsoft\u003C\u002Fli>\n\u003Cli>WordPress\u003C\u002Fli>\n\u003Cli>Amazon\u003C\u002Fli>\n\u003Cli>Github\u003C\u002Fli>\n\u003Cli>Tumblr\u003C\u002Fli>\n\u003Cli>Vimeo\u003C\u002Fli>\n\u003Cli>Reddit\u003C\u002Fli>\n\u003Cli>Dribbble\u003C\u002Fli>\n\u003Cli>Twitch\u003C\u002Fli>\n\u003Cli>Medium\u003C\u002Fli>\n\u003Cli>Discord\u003C\u002Fli>\n\u003Cli>Line\u003C\u002Fli>\n\u003Cli>Stack Exchange\u003C\u002Fli>\n\u003Cli>Stack Overflow\u003C\u002Fli>\n\u003Cli>Disqus\u003C\u002Fli>\n\u003Cli>Blogger\u003C\u002Fli>\n\u003Cli>Meetup\u003C\u002Fli>\n\u003Cli>Foursquare\u003C\u002Fli>\n\u003Cli>Yandex\u003C\u002Fli>\n\u003Cli>VKontakte\u003C\u002Fli>\n\u003Cli>Telegram\u003C\u002Fli>\n\u003Cli>Dropbox\u003C\u002Fli>\n\u003Cli>Fitbit\u003C\u002Fli>\n\u003Cli>Slack\u003C\u002Fli>\n\u003Cli>Deviantart\u003C\u002Fli>\n\u003Cli>Mailchimp\u003C\u002Fli>\n\u003Cli>Skype\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.aviplugins.com\u002Fsocial-login-no-setup\u002F\" rel=\"nofollow ugc\">Click here for more details\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fdemo.aviplugins.com\u002Fsocial-login\u002F\" rel=\"nofollow ugc\">Click here for Live Demo\u003C\u002Fa>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>Post your plugin related queries at \u003Ca href=\"https:\u002F\u002Fwww.aviplugins.com\u002Fsupport.php\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.aviplugins.com\u002Fsupport.php\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n","This is a simple login form in the widget. This will allow users to login to the site from frontend.",6000,465398,76,29,"2024-03-25T11:33:00.000Z","6.4.8","2.0.2","",[20,21,4,23,57],"widget-login","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Flogin-sidebar-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flogin-sidebar-widget.6.1.2.zip",61,2,1,"2024-12-05 00:00:00",{"slug":65,"name":66,"version":67,"author":68,"author_profile":69,"description":70,"short_description":71,"active_installs":72,"downloaded":73,"rating":74,"num_ratings":75,"last_updated":76,"tested_up_to":77,"requires_at_least":78,"requires_php":55,"tags":79,"homepage":83,"download_link":84,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"sb-login","SB Login","2.5","Fida Al Hasan","https:\u002F\u002Fprofiles.wordpress.org\u002Ffida02\u002F","\u003Cp>Sb login widget that allows a user to login, register, reset their password, see recent activity, time, post and comment count, author info, in one place. You can also customize wordpress mail from name and address.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>A login and registration widget for your blog\u003C\u002Fli>\n\u003Cli>Tabs\u002Flinks for logged out users include login, register, and ‘lost password’.\u003C\u002Fli>\n\u003Cli>Captcha functionality included.\u003C\u002Fli>\n\u003Cli>Logged in users can see their name, avatar, logged in date, and comments\u002Fposts since sign in.\u003C\u002Fli>\n\u003Cli>User can see his\u002Fher recent viewed posts and recent comments made by him\u002Fher.\u003C\u002Fli>\n\u003Cli>User can see his ID, First joined date, total number of his\u002Fher posts, total number of comments made by him\u002Fher, user level, posts feed, comments feed.\u003C\u002Fli>\n\u003Cli>AJAX validation makes this thing run smooth\u003C\u002Fli>\n\u003Cli>Shortcode & PHP Code if you don’t want to use widget\u003C\u002Fli>\n\u003Cli>Options page for customizing the plugin\u003C\u002Fli>\n\u003Cli>User can add extra link\u003C\u002Fli>\n\u003Cli>This plugin is so light\u003C\u002Fli>\n\u003Cli>Smart & nice looking. You love it.\u003C\u002Fli>\n\u003Cli>Nice warning & success system.\u003C\u002Fli>\n\u003Cli>You can translate this plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cp>Available translations are listed in the plugin’s admin page\u003C\u002Fp>\n\u003Cp>If you have made a translation file please send it to this \u003Ca href=\"mailto:fidaalhasan@gmail.com\" rel=\"nofollow ugc\">mail\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Why dont you rate the plugin if you like it !! 🙂\u003C\u002Fp>\n\u003Cp>Our team \u003Ca href=\"http:\u002F\u002Fwebcarezone.com\u002F\" rel=\"nofollow ugc\">Web Care Zone\u003C\u002Fa>.\u003C\u002Fp>\n","Sb login widget that allows a user to login, register, reset their password, see recent activity,time,post and comment count & many more in one pl …",70,36276,80,24,"2014-05-23T09:38:00.000Z","3.9.40","2.8",[20,80,65,81,82],"sb","sidebar-login-widget","wordpress-login-widget","http:\u002F\u002Fwebcarezone.com\u002Fprojects\u002Fsb-login.asp","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsb-login.2.5.zip",{"slug":86,"name":87,"version":88,"author":89,"author_profile":90,"description":91,"short_description":92,"active_installs":93,"downloaded":94,"rating":27,"num_ratings":27,"last_updated":95,"tested_up_to":96,"requires_at_least":97,"requires_php":55,"tags":98,"homepage":102,"download_link":103,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"iw-profile","iw profile","1.4","Hamid Alinia","https:\u002F\u002Fprofiles.wordpress.org\u002Fglboy\u002F","\u003Cp>iw profile widget that allows a user to login, register, reset their password, see recent activity, time, post and comment count, author info, in one place. You can also customize wordpress mail from name and address.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>A login and registration widget for your blog\u003C\u002Fli>\n\u003Cli>Tabs\u002Flinks for logged out users include login, register, and ‘lost password’.\u003C\u002Fli>\n\u003Cli>Captcha functionality included.\u003C\u002Fli>\n\u003Cli>Logged in users can see their name, avatar, logged in date, and comments\u002Fposts since sign in.\u003C\u002Fli>\n\u003Cli>User can see his\u002Fher recent viewed posts and recent comments made by him\u002Fher.\u003C\u002Fli>\n\u003Cli>User can see his ID, First joined date, total number of his\u002Fher posts, total number of comments made by him\u002Fher, user level, posts feed, comments feed.\u003C\u002Fli>\n\u003Cli>AJAX validation makes this thing run smooth\u003C\u002Fli>\n\u003Cli>Shortcode & PHP Code if you don’t want to use widget\u003C\u002Fli>\n\u003Cli>Options page for customizing the plugin\u003C\u002Fli>\n\u003Cli>User can add extra link\u003C\u002Fli>\n\u003Cli>This plugin is so light\u003C\u002Fli>\n\u003Cli>Smart & nice looking. You love it.\u003C\u002Fli>\n\u003Cli>Nice warning & success system.\u003C\u002Fli>\n\u003Cli>You can translate this plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cp>Available translations are listed in the plugin’s admin page\u003C\u002Fp>\n\u003Cp>If you have made a translation file please send it to this \u003Ca href=\"mailto:a.goodlookingboy@gmail.com\" rel=\"nofollow ugc\">mail\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Why dont you rate the plugin if you like it !! 🙂\u003C\u002Fp>\n\u003Cp>Our team \u003Ca href=\"http:\u002F\u002Fidehweb.com\u002F\" rel=\"nofollow ugc\">IDehweb\u003C\u002Fa>.\u003C\u002Fp>\n","iw profile is a login\u002Fregister form and profile which you need to set frontend beautiful profile and special use when you have set up woocommerce.",10,1641,"2016-05-27T12:06:00.000Z","4.4.34","3.2",[99,100,20,101,81],"iw","iw-login","profile","http:\u002F\u002FIDEHWEB.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fiw-profile.1.4.zip",{"slug":105,"name":106,"version":107,"author":108,"author_profile":109,"description":110,"short_description":111,"active_installs":112,"downloaded":113,"rating":74,"num_ratings":114,"last_updated":115,"tested_up_to":96,"requires_at_least":116,"requires_php":55,"tags":117,"homepage":119,"download_link":120,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"wp-sidebar-login","WP Sidebar Login","2.14","Pankaj Jha","https:\u002F\u002Fprofiles.wordpress.org\u002Fmasdiblogs\u002F","\u003Cp>WP Sidebar Login is an ajax enabled wordpress login has both a widget and a template tag to allow you to have a login form in the sidebar of your wordpress powered blog. It lets users login, and then redirects them back to the page they logged in from rather than the backend, it also shows error messages. This plugin adds the capability of placing a login widget in the sidebar with smooth AJAX login effects.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Works on all modern browsers.\u003C\u002Fli>\n\u003Cli>Work With all the cache plugins.\u003C\u002Fli>\n\u003Cli>Widget available.\u003C\u002Fli>\n\u003Cli>Simple configuration.\u003C\u002Fli>\n\u003Cli>Shortcode and template tags available just add  to your page.\u003C\u002Fli>\n\u003Cli>AJAX Login without refreshing your screen.\u003C\u002Fli>\n\u003Cli>Redirect back to the same page or as per the configuration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\n\u003Ca href=\"http:\u002F\u002Fonlinewebapplication.com\u002Fwp-sidebar-login\u002F\" rel=\"nofollow ugc\">Plugin Home Page\u003C\u002Fa>\u003Cbr \u002F>\n\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fonlinewebapplication.com\" rel=\"nofollow ugc\">Author Site\u003C\u002Fa>|\u003Cbr \u002F>\n\u003C\u002Fp>\n\u003Ch4>Support Forums\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>[\u003Ca href=\"http:\u002F\u002Fonlinewebapplication.com\u002Fwp-sidebar-login\u002F\" rel=\"nofollow ugc\">Plugin Home Page\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Sidebar Login By \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fmikejolley\u002F\" rel=\"nofollow ugc\">mikejolley\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin used to easily add an ajax enabled wordpress login widget to your site's sidebar.",100,27222,6,"2016-02-03T18:05:00.000Z","3.0",[118,20,22,4,23],"admin","http:\u002F\u002Fonlinewebapplication.com\u002F2012\u002F07\u002Fwp-sidebar-login.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-sidebar-login.zip",{"slug":122,"name":123,"version":124,"author":125,"author_profile":126,"description":127,"short_description":128,"active_installs":93,"downloaded":129,"rating":27,"num_ratings":27,"last_updated":130,"tested_up_to":131,"requires_at_least":132,"requires_php":55,"tags":133,"homepage":136,"download_link":137,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"siris-login-widget","Siris Login Widget","1.2","Vamsi Pulavarthi","https:\u002F\u002Fprofiles.wordpress.org\u002Fvamsitech\u002F","\u003Cp>Add a custom Login and secured menu experience to your sidebar with ease. You can add as many Siris Login Widgets as needed.\u003C\u002Fp>\n\u003Cp>Usage: \u003Cbr \u002F>\n1. Install and activate Siris Login Widget \u003Cbr \u002F>\n2. In the WordPress dashboard under Appearance Tab: \u003Cbr \u002F>\n     2a. Go to Menus under Appearance tab \u003Cbr \u002F>\n     2b. Create a new Menu \u003Cbr \u002F>\n     2c. Go to Widgets under Appearance tab \u003Cbr \u002F>\n     2d. Add the Siris Login Widget \u003Cbr \u002F>\n3. In the Widget options, select the name of the menu you want to show \u003C\u002Fp>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fsirisgraphics.com\u002Fcontact-us\u002F\" rel=\"nofollow ugc\">contact us\u003C\u002Fa> for any kind of support. We promise to get back to you as soon as possible.\u003C\u002Fp>\n\u003Cp>Like our plugin? Please rate us and send us a comment so we can make the plugin better for you.\u003C\u002Fp>\n\u003Cp>=Coming Soon=\u003Cbr \u002F>\n1. Sub menu’s are not supported with this version. We are working on expanding support to sub menu’s.\u003Cbr \u002F>\n2. We are also working on expanding support to select link colors. You will have to use the Plugins Editor to change the colors.\u003C\u002Fp>\n","Add a customizable Login form and secured menu experience to your sidebar with ease.",1633,"2015-08-01T21:22:00.000Z","4.2.39","4.0",[134,135,20,4,23],"custom-login","custom-menu","http:\u002F\u002Fsirisgraphics.com\u002Fdevelopment\u002Fsiris-login-widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsiris-login-widget.zip",{"attackSurface":139,"codeSignals":177,"taintFlows":198,"riskAssessment":224,"analyzedAt":234},{"hooks":140,"ajaxHandlers":165,"restRoutes":174,"shortcodes":175,"cronEvents":176,"entryPointCount":61,"unprotectedCount":61},[141,147,152,157,161],{"type":142,"name":143,"callback":144,"file":145,"line":146},"action","admin_notices","closure","sidebar-login.php",54,{"type":142,"name":148,"callback":149,"priority":150,"file":145,"line":151},"plugins_loaded","sidebar_login_init",20,91,{"type":142,"name":153,"callback":154,"file":155,"line":156},"init","load_plugin_textdomain","src\\Plugin.php",37,{"type":142,"name":158,"callback":159,"file":155,"line":160},"widgets_init","register_widgets",38,{"type":142,"name":162,"callback":163,"file":155,"line":164},"wp_enqueue_scripts","enqueue_scripts",39,[166,171],{"action":167,"nopriv":168,"callback":169,"hasNonce":168,"hasCapCheck":168,"file":155,"line":170},"sidebar_login_process",false,"ajax_handler",40,{"action":167,"nopriv":172,"callback":169,"hasNonce":168,"hasCapCheck":168,"file":155,"line":173},true,41,[],[],[],{"dangerousFunctions":178,"sqlUsage":179,"outputEscaping":181,"fileOperations":27,"externalRequests":27,"nonceChecks":27,"capabilityChecks":62,"bundledLibraries":197},[],{"prepared":27,"raw":27,"locations":180},[],{"escaped":37,"rawEcho":114,"locations":182},[183,187,189,191,193,195],{"file":184,"line":185,"context":186},"src\\Widget\\Account.php",74,"raw output",{"file":184,"line":188,"context":186},82,{"file":190,"line":50,"context":186},"src\\Widget\\LoginForm.php",{"file":190,"line":192,"context":186},104,{"file":194,"line":50,"context":186},"src\\Widget.php",{"file":194,"line":196,"context":186},102,[],[199,215],{"entryPoint":200,"graph":201,"unsanitizedCount":62,"severity":214},"render (src\\Widget\\LoginForm.php:65)",{"nodes":202,"edges":212},[203,207],{"id":204,"type":205,"label":206,"file":190,"line":151},"n0","source","$_SERVER",{"id":208,"type":209,"label":210,"file":190,"line":192,"wp_function":211},"n1","sink","echo() [XSS]","echo",[213],{"from":204,"to":208,"sanitized":168},"medium",{"entryPoint":216,"graph":217,"unsanitizedCount":62,"severity":223},"\u003CLoginForm> (src\\Widget\\LoginForm.php:0)",{"nodes":218,"edges":221},[219,220],{"id":204,"type":205,"label":206,"file":190,"line":151},{"id":208,"type":209,"label":210,"file":190,"line":192,"wp_function":211},[222],{"from":204,"to":208,"sanitized":168},"low",{"summary":225,"deductions":226},"The \"sidebar-login\" v3.0.1 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices by exclusively using prepared statements for SQL queries and performing output escaping on a high percentage of outputs. The absence of any recorded vulnerabilities in its history is also a strong indicator of a generally well-maintained codebase. However, significant security concerns are present due to its attack surface.\n\nSpecifically, the plugin exposes two AJAX handlers, both of which lack authentication checks. This is a critical weakness as it allows any authenticated user to trigger these functions without proper authorization, potentially leading to unintended actions or information disclosure. While the taint analysis did not reveal critical or high severity unsanitized paths, the presence of two flows with unsanitized paths in conjunction with unprotected AJAX endpoints warrants caution. The lack of nonce checks on these AJAX handlers further exacerbates the risk, making them susceptible to Cross-Site Request Forgery (CSRF) attacks.\n\nIn conclusion, while the plugin avoids common pitfalls like raw SQL queries and has no known vulnerabilities, the unprotected AJAX endpoints represent a substantial security risk that should be addressed immediately. The plugin's strengths in query and output handling are overshadowed by the potential for unauthorized execution of its AJAX functionalities.",[227,229,231],{"reason":228,"points":93},"AJAX handlers without auth checks",{"reason":230,"points":93},"Unsanitized paths in taint flows",{"reason":232,"points":233},"Missing nonce checks on AJAX handlers",7,"2026-03-16T17:47:41.220Z",{"wat":236,"direct":245},{"assetPaths":237,"generatorPatterns":240,"scriptPaths":241,"versionParams":242},[238,239],"\u002Fwp-content\u002Fplugins\u002Fsidebar-login\u002Fbuild\u002Fsidebar-login.css","\u002Fwp-content\u002Fplugins\u002Fsidebar-login\u002Fbuild\u002Ffrontend.js",[],[239],[243,244],"sidebar-login\u002Fbuild\u002Fsidebar-login.css?ver=","sidebar-login\u002Fbuild\u002Ffrontend.js?ver=",{"cssClasses":246,"htmlComments":248,"htmlAttributes":249,"restEndpoints":251,"jsGlobals":252,"shortcodeOutput":254},[247],"sidebar-login-error",[],[250],"data-security",[],[253],"sidebar_login_params",[]]