[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1aIWSfz6PQe0ldOfeQMvMh-rClqJXxk2fnnnxd8ghFw":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":6,"requires_at_least":6,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":33,"analysis":135,"fingerprints":257},"stay-alive","Stay Alive","2.4.8","rajulmondal5","https:\u002F\u002Fprofiles.wordpress.org\u002Frajulmondal5\u002F","\u003Cul>\n\u003Cli>Stay Alive plugin will help you to show online users \u003C\u002Fli>\n\u003Cli>Plugin is manageable using widget and shortcode \u003C\u002Fli>\n\u003Cli>Pusher credentials are need to use this plugin\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Frajulmondal5\" rel=\"nofollow ugc\">rajulmondal5\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frazzul\" rel=\"nofollow ugc\">github.razzul\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Get Online Users list in your website\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>This plugin is manageable from widget\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>You can use short code at any point\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Secure\u003C\u002Fstrong>\n    \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Free for all\u003C\u002Fstrong>\n    \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Socket service is used from the free socket service provider \u003Ca href=\"https:\u002F\u002Fpusher.com\u002F\" rel=\"nofollow ugc\">Pusher\u003C\u002Fa>\u003C\u002Fstrong>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Official Site\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>For More Information\u003C\u002Fli>\n\u003Cli>https:\u002F\u002Fgithub.com\u002Frazzul\u002Fstay-alive\u003C\u002Fli>\n\u003Cli>Or Advanced feature drop mail:developer.rajul@gmail.com\u003C\u002Fli>\n\u003C\u002Ful>\n","Stay Alive wordpress plugin to check online user's in your website in just minutes with widget or shortcode using Pusher 3rd party socket service …",0,1192,100,1,"2018-07-10T08:36:00.000Z","5.2.4",[18,19,20,21,22],"active","live","online","pusher","users","https:\u002F\u002Fgithub.com\u002Frazzul\u002Fstayalive","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstay-alive.2.4.8.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},30,84,"2026-04-05T15:17:55.749Z",[34,58,78,96,121],{"slug":35,"name":36,"version":37,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":44,"num_ratings":45,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":56,"download_link":57,"security_score":13,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"online-active-users","WP Online Active Users","3.1","Nikul Patel","https:\u002F\u002Fprofiles.wordpress.org\u002Fvalani9099\u002F","\u003Cp>\u003Cstrong>WP Online Active Users\u003C\u002Fstrong> is a lightweight and powerful WordPress plugin that lets you monitor and display how many users are currently online active on your website. Easily view real-time user activity and last seen status directly on the Users page in your WordPress admin dashboard.\u003C\u002Fp>\n\u003Cp>This plugin is the best solution to show live \u003Cstrong>online active users\u003C\u002Fstrong> on your WordPress site, providing instant insights into user engagement and site activity. Simply login and check the \u003Cstrong>Users\u003C\u002Fstrong> menu to see all currently logged-in users.\u003C\u002Fp>\n\u003Cp>Ideal for website owners who want to enhance site security, track active sessions, and improve user interaction. With a simple, user-friendly interface, \u003Cstrong>WP Online Active Users\u003C\u002Fstrong> is easy to install and configure. This plugin is ideal for all types of websites including blogs, membership sites, forums, and WooCommerce stores.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>WooCommerce compatible\u003C\u002Fstrong>, it also displays the number of logged-in customers on your online store, helping you monitor customer activity in real-time.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>WP Online Active Users\u003C\u002Fstrong> also provides a user-friendly shortcode that lets you display live user counts anywhere on your site — whether on posts, pages, widgets, or within compatible with popular page builders.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[webi_active_user]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>KEY FEATURES:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>View real-time online active user status in WordPress admin dashboard.\u003C\u002Fli>\n\u003Cli>Green dot indicator for online users and red dot with last seen for offline users.\u003C\u002Fli>\n\u003Cli>Display active users count in the WordPress admin bar.\u003C\u002Fli>\n\u003Cli>WooCommerce support to track logged-in customers.\u003C\u002Fli>\n\u003Cli>Shortcode support for displaying active users on posts, pages, or widgets.\u003C\u002Fli>\n\u003Cli>Display online active users list table with user info.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Who Should Use WP Online Active Users?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Website Owners and Administrators\u003C\u002Fli>\n\u003Cli>Membership and Community Sites\u003C\u002Fli>\n\u003Cli>WooCommerce Store Managers\u003C\u002Fli>\n\u003Cli>Editors, Authors, and Subscribers\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Why Use WP Online Active Users on Your Site?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Real-Time User Monitoring:\u003C\u002Fstrong> Instantly see how many users are active on your website to better understand engagement and traffic patterns.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Improve Security:\u003C\u002Fstrong> Detect unusual login activity and monitor user sessions to enhance your site’s security.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Boost User Engagement:\u003C\u002Fstrong> Showcase live user activity as social proof to encourage interaction and trust.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WooCommerce Friendly:\u003C\u002Fstrong> Track active customers in your online store to optimize marketing and sales strategies.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Easy to Use & Lightweight:\u003C\u002Fstrong> Minimal setup with a clean interface that won’t slow down your website.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Flexible Display Options:\u003C\u002Fstrong> Use shortcode to show online user counts anywhere on your site, compatible with all page builders.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Support\u003C\u002Fstrong>\u003Cbr \u002F>\nWe are committed to providing ongoing updates and new features based on user feedback. For support, feature requests, or bug reports, please visit our \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fonline-active-users\u002F\" title=\"support forum\" rel=\"ugc\">support forum\u003C\u002Fa>.\u003C\u002Fp>\n","WP Online Active Users is a lightweight, powerful plugin to monitor and display how many users are currently online active on your WordPress website.",2000,21683,94,38,"2025-12-22T16:55:00.000Z","6.9.4","6.3","7.3",[51,52,53,54,55],"active-users","online-users","user-status","woocommerce-users","wp-online-users","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fonline-active-users\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fonline-active-users.3.1.zip",{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":13,"downloaded":66,"rating":13,"num_ratings":14,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":70,"tags":71,"homepage":76,"download_link":77,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"display-live-visitors-counter","Display Live Visitors & Counter","1.0","Rajdip Sinha Roy","https:\u002F\u002Fprofiles.wordpress.org\u002Frajdipsinharoy\u002F","\u003Cp>Show How Many Users Are Online On Your WordPress Site.\u003Cbr \u002F>\nUsage and customization possibilities are endless!\u003Cbr \u002F>\nKeep Track In Admin Dashboard.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Show Users Gravatars\u003C\u002Fli>\n\u003Cli>Sidebar Widget – Use Anywhere\u003C\u002Fli>\n\u003Cli>Admin Dashboard – See Online Users in admin\u003C\u002Fli>\n\u003Cli>Track Registered Users\u003C\u002Fli>\n\u003Cli>Theme PHP function get_whos_online()\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>SHORTCODE\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ccode>\u003C?php echo do_shortcode('[who-is-online]'); ?>\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Suggestions\u003C\u002Fh3>\n\u003Cp>The plugin does not change any core files or database.\u003C\u002Fp>\n\u003Cp>If you’re facing any issues:-\u003Cbr \u002F>\nDeactivate the plugin through the ‘Plugins’ screen in WordPress.\u003C\u002Fp>\n\u003Ch3>Translators\u003C\u002Fh3>\n\u003Ch4>Available Languages\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>English\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you can’t find this plugin in your language and want to translate it, use the dedicated tool at [Translating WordPress] (https:\u002F\u002Ftranslate.wordpress.org\u002Flocale\u002Fit\u002Fdefault\u002Fwp-plugins\u002Fdisplay-live-visitors-counter “Translating WordPress”).\u003C\u002Fp>\n\u003Cp>Or, if you have created your own language pack, or have an update for an existing one, you can send it as an email attachment at \u003Cstrong>rajdipsinharoy@yahoo.in\u003C\u002Fstrong>.\u003C\u002Fp>\n","Show How Many Users Are Online On Your Wordpress Site.",5025,"2020-07-17T14:46:00.000Z","5.4.19","5.0","7.0",[72,73,19,74,75],"counter","display","users-online","visitors","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdisplay-live-visitors-counter","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdisplay-live-visitors-counter.1.0.zip",{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":30,"downloaded":86,"rating":11,"num_ratings":11,"last_updated":87,"tested_up_to":88,"requires_at_least":89,"requires_php":90,"tags":91,"homepage":94,"download_link":95,"security_score":13,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"fullworks-active-users-monitor","Fullworks Active Users Monitor","1.1.0","fullworks","https:\u002F\u002Fprofiles.wordpress.org\u002Ffullworks\u002F","\u003Cp>\u003Cstrong>Fullworks Active Users Monitor\u003C\u002Fstrong> provides administrators with real-time visibility of logged-in users on your WordPress site. Using WordPress’s native session tokens system, this plugin accurately tracks user login states and provides powerful monitoring tools.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Real-Time Tracking\u003C\u002Fstrong> – Uses WordPress session tokens for accurate online\u002Foffline status\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Comprehensive Audit Trail\u003C\u002Fstrong> – Track all login\u002Flogout events with detailed logging\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Admin Bar Widget\u003C\u002Fstrong> – Quick overview of online users with role breakdown\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enhanced Users List\u003C\u002Fstrong> – Visual indicators, status columns, and filtering options\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Dashboard Widget\u003C\u002Fstrong> – At-a-glance view of active users on your dashboard\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Audit Log Export\u003C\u002Fstrong> – Export user activity to CSV, JSON, or Excel formats\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Auto-Refresh\u003C\u002Fstrong> – Configurable automatic updates without page reload\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Role-Based Display\u003C\u002Fstrong> – Color-coded indicators for different user roles\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WP-CLI Support\u003C\u002Fstrong> – Command line tools for monitoring and management\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Performance Optimized\u003C\u002Fstrong> – Smart caching and efficient queries\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Fully Translatable\u003C\u002Fstrong> – Ready for localization\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Visual Indicators\u003C\u002Fh4>\n\u003Cp>The plugin provides clear visual feedback for online users:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Green status dots for online users\u003C\u002Fli>\n\u003Cli>Gold\u002Forange borders for administrators\u003C\u002Fli>\n\u003Cli>Color-coded role indicators\u003C\u002Fli>\n\u003Cli>Animated pulse effects (optional)\u003C\u002Fli>\n\u003Cli>“ONLINE” badges in user lists\u003C\u002Fli>\n\u003Cli>Last seen timestamps for offline users\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Perfect For\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Membership sites monitoring user activity\u003C\u002Fli>\n\u003Cli>Educational platforms tracking student engagement\u003C\u002Fli>\n\u003Cli>Multi-author blogs coordinating content creation\u003C\u002Fli>\n\u003Cli>Support teams managing customer interactions\u003C\u002Fli>\n\u003Cli>Any site requiring user activity insights\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Developer Friendly\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Clean, well-documented code\u003C\u002Fli>\n\u003Cli>Action and filter hooks for customization\u003C\u002Fli>\n\u003Cli>WP-CLI commands for automation\u003C\u002Fli>\n\u003Cli>Follows WordPress coding standards\u003C\u002Fli>\n\u003Cli>Compatible with multisite installations\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>WP-CLI Commands\u003C\u002Fh3>\n\u003Cp>The plugin provides powerful WP-CLI commands for monitoring and automation:\u003C\u002Fp>\n\u003Ch4>Basic Commands\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ccode>wp active-users list\u003C\u002Fcode> – List all online users\u003C\u002Fli>\n\u003Cli>\u003Ccode>wp active-users stats\u003C\u002Fcode> – Display online user statistics\u003C\u002Fli>\n\u003Cli>\u003Ccode>wp active-users check \u003Cuser>\u003C\u002Fcode> – Check if a specific user is online\u003C\u002Fli>\n\u003Cli>\u003Ccode>wp active-users monitor\u003C\u002Fcode> – Real-time monitoring in terminal\u003C\u002Fli>\n\u003Cli>\u003Ccode>wp active-users clear-cache\u003C\u002Fcode> – Clear the online users cache\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Automation Commands\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Check if any users are online (for scripting):\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>wp active-users any [--quiet] [--count] [--json]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cul>\n\u003Cli>\u003Ccode>--quiet\u003C\u002Fcode> – Returns exit code only (0 = users online, 1 = no users online)\u003C\u002Fli>\n\u003Cli>\u003Ccode>--count\u003C\u002Fcode> – Returns just the number of online users\u003C\u002Fli>\n\u003Cli>\u003Ccode>--json\u003C\u002Fcode> – Returns detailed JSON output\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Wait until no users are online:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>wp active-users wait-clear [--timeout=\u003Cseconds>] [--check-interval=\u003Cseconds>] [--quiet]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cul>\n\u003Cli>\u003Ccode>--timeout\u003C\u002Fcode> – Maximum time to wait (default: 300 seconds)\u003C\u002Fli>\n\u003Cli>\u003Ccode>--check-interval\u003C\u002Fcode> – How often to check (default: 30 seconds)\u003C\u002Fli>\n\u003Cli>\u003Ccode>--quiet\u003C\u002Fcode> – Suppress progress messages\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Example Automation Scripts\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Safe upgrade script:\u003C\u002Fstrong>\u003Cbr \u002F>\n    `bash\u003C\u002Fp>\n\u003Cp>!\u002Fbin\u002Fbash\u003C\u002Fp>\n\u003Cp>Only upgrade when no users are online\u003C\u002Fp>\n\u003Cp>if wp active-users any –quiet; then\u003Cbr \u002F>\n    echo “Users are online, postponing upgrade”\u003Cbr \u002F>\nelse\u003Cbr \u002F>\n    echo “No users online, safe to upgrade”\u003Cbr \u002F>\n    wp core update\u003Cbr \u002F>\n    wp plugin update –all\u003Cbr \u002F>\nfi\u003Cbr \u002F>\n    `\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Maintenance with user wait:\u003C\u002Fstrong>\u003Cbr \u002F>\n    `bash\u003C\u002Fp>\n\u003Cp>Wait for users to go offline, then perform maintenance\u003C\u002Fp>\n\u003Cp>wp active-users wait-clear –timeout=600 && {\u003Cbr \u002F>\n    wp maintenance-mode activate\u003Cbr \u002F>\n    wp db optimize\u003Cbr \u002F>\n    wp cache flush\u003Cbr \u002F>\n    wp maintenance-mode deactivate\u003Cbr \u002F>\n}\u003Cbr \u002F>\n    `\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Monitoring script:\u003C\u002Fstrong>\u003Cbr \u002F>\n    `bash\u003C\u002Fp>\n\u003Cp>Get online user count for monitoring dashboard\u003C\u002Fp>\n\u003Cp>ONLINE_COUNT=$(wp active-users any –count)\u003Cbr \u002F>\nif [ “$ONLINE_COUNT” -gt “100” ]; then\u003Cbr \u002F>\n    # Send alert about high user activity\u003Cbr \u002F>\n    echo “High activity: $ONLINE_COUNT users online”\u003Cbr \u002F>\nfi\u003Cbr \u002F>\n    `\u003C\u002Fp>\n\u003Cp>These commands make it easy to create maintenance scripts that respect user activity, ensuring updates and maintenance tasks only run when appropriate.\u003C\u002Fp>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>This plugin does not collect or store any personal data beyond what WordPress already tracks for logged-in users. It only reads existing session data to determine online status. No data is sent to external services.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Developed by \u003Ca href=\"https:\u002F\u002Ffullworks.net\u002F\" rel=\"nofollow ugc\">Fullworks\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Icons and visual elements use WordPress core styles for consistency.\u003C\u002Fp>\n","Real-time monitoring of logged-in WordPress users with visual indicators, filtering, and comprehensive admin tools.",417,"2025-09-17T20:12:00.000Z","6.8.5","6.2","7.4",[51,92,93,52,22],"admin-tools","monitoring","https:\u002F\u002Ffullworks.net\u002Fproducts\u002Factive-users-monitor\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffullworks-active-users-monitor.1.1.0.zip",{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":104,"downloaded":105,"rating":106,"num_ratings":107,"last_updated":108,"tested_up_to":109,"requires_at_least":110,"requires_php":111,"tags":112,"homepage":118,"download_link":119,"security_score":120,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"wp-user-chat","WP User Chat","1.0.8","WPSuperiors Developer","https:\u002F\u002Fprofiles.wordpress.org\u002Famitwpdeveloper\u002F","\u003Cp>WP User Chat gives you freedom to chat with any logged-in user. It stated that only logged-in users are capable of doing chat between each other.\u003Cbr \u002F>\nIt is very helpfull for any internal system, thats needs to interact users with each other.\u003C\u002Fp>\n\u003Cp>Additionally, these plugins have a special features, that permits you to share your fellings with everyone.\u003Cbr \u002F>\nThese is very familiar with Facebook chat.\u003Cbr \u002F>\nAlso these plugin permits users to set users profile image. If you did not set any avatar, default image will see.\u003C\u002Fp>\n\u003Cp>Besides that these plugins not required any type of settings, but if you want to chage or view your fellings,\u003Cbr \u002F>\nyou have to put the widget(which is created after plugins activated) into any sidebar.The chat data stored into a separate\u003Cbr \u002F>\ntable, in future you may get the chat histroy from the database table.\u003C\u002Fp>\n\u003Cp>For getting best result, please logged-in and logged-out in proper way.\u003C\u002Fp>\n\u003Cp>Into the next version, you will get more exciting features, so keep in touch.\u003C\u002Fp>\n\u003Cp>If you need any customization into these plugin for your site, or if you have any query\u002Fsuggestion\u002Ffeedback,\u003Cbr \u002F>\nplease get back to us on support@wpsuperiors.com\u003C\u002Fp>\n\u003Cp>Do you need more features on this plugins? feel free to connect with us, we are WPSuperiors(http:\u002F\u002Fwww.wpsuperiors.com\u002F).\u003C\u002Fp>\n","These plugins gives you many to many interaction through chat like social media`s. Additionaly, you can share your feelings with every logged-in users …",10,10790,46,3,"2024-11-20T14:43:00.000Z","6.7.5","3.0.1","",[113,114,115,116,117],"chat","live-chat","online-chat","users-chat","wp-chat","https:\u002F\u002Fwww.wpsuperiors.com\u002Fplugins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-user-chat.zip",92,{"slug":122,"name":123,"version":61,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":11,"downloaded":128,"rating":11,"num_ratings":11,"last_updated":111,"tested_up_to":129,"requires_at_least":130,"requires_php":16,"tags":131,"homepage":111,"download_link":133,"security_score":13,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":134},"active-users-list","Active Users List","Ambarish","https:\u002F\u002Fprofiles.wordpress.org\u002Fambarishchatterjee89\u002F","\u003Cp>[Available-Users] shortcode will fetch all current active users\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This file is part of WordPress Active Users.\u003C\u002Fp>\n\u003Cp>WordPress Active Users is free software: you can redistribute it and\u002For modify it under the terms of the GNU General Public License as published\u003Cbr \u002F>\nby the Free Software Foundation, either version 3 of the License, or (at your option) any later version.\u003C\u002Fp>\n\u003Cp>WordPress Active Users is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of\u003Cbr \u002F>\nMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.\u003C\u002Fp>\n\u003Cp>Get a copy of the GNU General Public License in \u003Ca href=\"http:\u002F\u002Fwww.gnu.org\u002Flicenses\u002F\" rel=\"nofollow ugc\">http:\u002F\u002Fwww.gnu.org\u002Flicenses\u002F\u003C\u002Fa>.\u003C\u002Fp>\n","List all the current active users",1839,"5.2.24","3.0",[51,132,52,22],"available-users","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Factive-users-list.zip","2026-03-15T10:48:56.248Z",{"attackSurface":136,"codeSignals":184,"taintFlows":212,"riskAssessment":239,"analyzedAt":256},{"hooks":137,"ajaxHandlers":171,"restRoutes":176,"shortcodes":177,"cronEvents":182,"entryPointCount":183,"unprotectedCount":14},[138,144,149,153,157,161,163,167],{"type":139,"name":140,"callback":141,"file":142,"line":143},"action","widgets_init","anonymous","stay-alive-widget.php",65,{"type":139,"name":145,"callback":146,"file":147,"line":148},"admin_menu","add_plugin_page","stay-alive.php",34,{"type":139,"name":150,"callback":151,"file":147,"line":152},"admin_init","page_init",35,{"type":139,"name":154,"callback":155,"file":147,"line":156},"admin_head","stay_alive_css",36,{"type":139,"name":158,"callback":159,"file":147,"line":160},"admin_footer","stay_alive_checker",37,{"type":139,"name":162,"callback":159,"file":147,"line":45},"wp_footer",{"type":139,"name":164,"callback":165,"file":147,"line":166},"wp_logout","user_logout",39,{"type":139,"name":168,"callback":169,"file":147,"line":170},"wp_login","user_in",40,[172],{"action":173,"nopriv":174,"callback":173,"hasNonce":174,"hasCapCheck":174,"file":147,"line":175},"stay_alive_auth",false,41,[],[178],{"tag":179,"callback":180,"file":147,"line":181},"sa_online_users","stay_alive_shortcode",42,[],2,{"dangerousFunctions":185,"sqlUsage":189,"outputEscaping":191,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":211},[186],{"fn":187,"file":142,"line":143,"context":188},"create_function","add_action('widgets_init', create_function('', 'return register_widget(\"StayAliveWidget\");'));",{"prepared":11,"raw":11,"locations":190},[],{"escaped":192,"rawEcho":193,"locations":194},11,9,[195,198,200,201,202,203,205,207,209],{"file":142,"line":196,"context":197},22,"raw output",{"file":142,"line":199,"context":197},23,{"file":142,"line":199,"context":197},{"file":142,"line":199,"context":197},{"file":142,"line":181,"context":197},{"file":142,"line":204,"context":197},50,{"file":142,"line":206,"context":197},56,{"file":142,"line":208,"context":197},59,{"file":147,"line":210,"context":197},69,[],[213,230],{"entryPoint":214,"graph":215,"unsanitizedCount":14,"severity":229},"stay_alive_auth (stay-alive.php:54)",{"nodes":216,"edges":227},[217,222],{"id":218,"type":219,"label":220,"file":147,"line":221},"n0","source","$_POST",57,{"id":223,"type":224,"label":225,"file":147,"line":210,"wp_function":226},"n1","sink","echo() [XSS]","echo",[228],{"from":218,"to":223,"sanitized":174},"medium",{"entryPoint":231,"graph":232,"unsanitizedCount":14,"severity":238},"\u003Cstay-alive> (stay-alive.php:0)",{"nodes":233,"edges":236},[234,235],{"id":218,"type":219,"label":220,"file":147,"line":221},{"id":223,"type":224,"label":225,"file":147,"line":210,"wp_function":226},[237],{"from":218,"to":223,"sanitized":174},"low",{"summary":240,"deductions":241},"The 'stay-alive' v2.4.8 plugin exhibits a mixed security posture. While it demonstrates good practices in its use of prepared statements for SQL queries and a lack of file operations or external HTTP requests, several significant concerns are present. The presence of an unprotected AJAX handler is a primary risk, creating an easily accessible entry point for potential attackers. Furthermore, the use of the `create_function` dangerous function, although not directly linked to a taint flow in this analysis, is a code smell that can lead to security vulnerabilities if not handled with extreme care. The output escaping is also only moderately effective, with 45% of outputs not being properly escaped, potentially exposing the site to cross-site scripting (XSS) vulnerabilities.\n\nThe plugin has no recorded vulnerability history, which is a positive indicator. However, this could also simply mean that it hasn't been a target or that past vulnerabilities were not publicly disclosed or significant enough to be tracked. The taint analysis shows flows with unsanitized paths, which, while not classified as critical or high in this instance, still highlight potential weaknesses in how data is handled within the plugin. The absence of nonce checks and capability checks on its entry points further exacerbates the risk associated with the unprotected AJAX handler.\n\nIn conclusion, 'stay-alive' v2.4.8 has strengths in its database query handling and avoidance of risky network operations. However, its security is significantly undermined by an unprotected AJAX endpoint, insufficient output escaping, and the use of a dangerous function. The lack of historical vulnerabilities should not lead to complacency, as the identified code issues present tangible risks that require immediate attention.",[242,244,247,249,252,254],{"reason":243,"points":104},"Unprotected AJAX handler",{"reason":245,"points":246},"Dangerous function: create_function",5,{"reason":248,"points":246},"Unescaped output (45%)",{"reason":250,"points":251},"Flows with unsanitized paths",7,{"reason":253,"points":246},"Missing nonce checks",{"reason":255,"points":246},"Missing capability checks","2026-03-17T06:28:41.869Z",{"wat":258,"direct":267},{"assetPaths":259,"generatorPatterns":261,"scriptPaths":262,"versionParams":264},[260],"\u002Fwp-content\u002Fplugins\u002Fstay-alive\u002Fassets\u002Fcss\u002Fstay-alive.css",[],[263],"\u002Fwp-content\u002Fplugins\u002Fstay-alive\u002Fassets\u002Fjs\u002Fstay-alive.js",[265,266],"stay-alive.css?ver=","stay-alive.js?ver=",{"cssClasses":268,"htmlComments":271,"htmlAttributes":272,"restEndpoints":277,"jsGlobals":279,"shortcodeOutput":281},[269,270],"stay_alive","stay_alive_users",[],[273,274,275,276],"name=\"stay_alive_credentials[pusher_app_id]\"","name=\"stay_alive_credentials[pusher_key]\"","name=\"stay_alive_credentials[pusher_secret]\"","name=\"stay_alive_credentials[pusher_cluster]\"",[278],"\u002Fwp-json\u002Fstay_alive_auth",[280],"config",[282],"\u003Cdiv class=\"stay_alive\">\n            \u003Cul class=\"stay_alive_users\">\u003C\u002Ful>\n        \u003C\u002Fdiv>"]