[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJ-DVZRbIdp-zJUtIM0yDu-caZEOaaPswzYj51MU_tA0":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":48,"crawl_stats":37,"alternatives":56,"analysis":156,"fingerprints":609},"unilevel-mlm-plan","Unilevel MLM Plan","2.1","LETSCMS MLM Software","https:\u002F\u002Fprofiles.wordpress.org\u002Fletscms\u002F","\u003Cp>Unilevel MLM Plan software has been design to help customers to make the high profit gain based on level.\u003C\u002Fp>\n\u003Ch3>About\u003C\u002Fh3>\n\u003Ch3>ADMIN FEATURES\u003C\u002Fh3>\n\u003Cp>First User Registrattion\u003Cbr \u002F>\nGeneral Settings\u003Cbr \u002F>\nePin generate Option\u003Cbr \u002F>\nePin Reports\u003C\u002Fp>\n\u003Ch3>FRONTEND FEATURES\u003C\u002Fh3>\n\u003Cp>Register a Unilevel MLM User from provided registration page.\u003Cbr \u002F>\nRegister new Members using Genealogy\u003Cbr \u002F>\nGenealogy view\u003C\u002Fp>\n\u003Cp>For more understand Plugin follow \u003Ca href=\"https:\u002F\u002Fwww.letscms.com\u002Funilevel-mlm-plan-documentation\u002F\" rel=\"nofollow ugc\">Unilevel MLM Plan Documentation\u003C\u002Fa>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Ch3>Our Premium with wordpress support –\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fmlmtrees.com\u002Fproduct\u002Fumw\" rel=\"nofollow ugc\">UMW – Unilevel MLm Woocommerce\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fplaylist?list=PLn9cGkS1zw3RTk_YZIWAhno7fGVnRKI9M\" rel=\"nofollow ugc\">Overview\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fwww.letscms.com\u002Funilevel-woo-commerce-documentation\u002F\" rel=\"nofollow ugc\">Guidelines\u003C\u002Fa>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Fmlmtrees.com\u002Fproduct\u002Fbmw-wordpress\" rel=\"nofollow ugc\">BMW – Binary MLm Woocommerce\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fplaylist?list=PLn9cGkS1zw3QMCC-89p5zK39mPtfltkwq\" rel=\"nofollow ugc\">Overview\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fwww.letscms.com\u002Fbinary-mlm-woocommerce\u002F\" rel=\"nofollow ugc\">Guidelines\u003C\u002Fa>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Fmlmtrees.com\u002Fproduct\u002Fump-wordpress\" rel=\"nofollow ugc\">UMP – Unilevel MLm Plan\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fplaylist?list=PLn9cGkS1zw3QhCY1Ycsh2sJfHlZg7Mjee\" rel=\"nofollow ugc\">Overview\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fwww.letscms.com\u002Funilevel-mlm-plan-documentation\u002F\" rel=\"nofollow ugc\">Guidelines\u003C\u002Fa>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Fmlmtrees.com\u002Fproduct\u002Fbmp-pro-wordpress\" rel=\"nofollow ugc\">BMP – Binary MLm Plan\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fplaylist?list=PLn9cGkS1zw3Q1ZMo94AT9_RP1IPxnirpb\" rel=\"nofollow ugc\">Overview\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fwww.letscms.com\u002Fbmp_pro_documentation\u002F\" rel=\"nofollow ugc\">Guidelines\u003C\u002Fa>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Fmlmtrees.com\u002Fproduct\u002Ffmw-wordpress\" rel=\"nofollow ugc\">FMW – Force Matrix Woocommerce\u003C\u002Fa>  – \u003Ca href=\"https:\u002F\u002Fwww.letscms.com\u002Fforce-matrix-with-woocommerce\u002F\" rel=\"nofollow ugc\">Guidelines\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>\u003C\u002Fh3>\n\u003Ch3>Free Supports\u003C\u002Fh3>\n\u003Ch3>\u003C\u002Fh3>\n\u003Cp>Please share your issues\u002Ffeedback with us, if you are facing any while using our plugin, at letscmsdev@gmail.com\u003C\u002Fp>\n\u003Cp>Mail: letscmsdev@gmail.com\u003Cbr \u002F>\nSkype: jks0586\u003Cbr \u002F>\nWhats App: +91-9717478599\u003Cbr \u002F>\nSupport: 24X7\u003C\u002Fp>\n\u003Ch3>\u003C\u002Fh3>\n\u003Ch3>Pro Version\u003C\u002Fh3>\n\u003Ch3>\u003C\u002Fh3>\n\u003Cp>For more features Please use Pro version \u003Ca href=\"http:\u002F\u002Fmlmtrees.com\u002Fproduct\u002Funilevel-mlm-plan-wordpress\u002F\" rel=\"nofollow ugc\">Unilevel MLM Plan Pro\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>\u003C\u002Fh3>\n\u003Ch3>Paid Supports\u003C\u002Fh3>\n\u003Ch3>\u003C\u002Fh3>\n\u003Cp>We provide paid support for paid version.\u003Cbr \u002F>\nBased on work the cost vary.\u003Cbr \u002F>\nNormal customisation charges are 10 USD\u002FHour.\u003C\u002Fp>\n","Unilevel MLM Plan software has been design to help customers to make the high profit gain based on level.",10,10232,60,2,"2025-12-08T12:16:00.000Z","6.9.4","6.1","8.0",[20,21,22,4,23],"genealogy","mlm","network","unilevel-network","https:\u002F\u002Fletscms.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Funilevel-mlm-plan.2.1.zip",99,1,0,"2025-01-06 15:43:18","2026-03-15T15:16:48.613Z",[32],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":39,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":29,"updated_date":44,"references":45,"days_to_patch":47},"CVE-2024-12324","unilevel-mlm-plan-reflected-cross-site-scripting-via-page","Unilevel MLM Plan \u003C= 1.1.0 - Reflected Cross-Site Scripting via 'page'","The Unilevel MLM Plan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",null,"\u003C=1.1.0","2.0.0","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-11-20 19:11:37",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Ffe71e2b9-ddd7-4d6d-97e5-5fad41f8f35c?source=api-prod",318,{"slug":49,"display_name":7,"profile_url":8,"plugin_count":50,"total_installs":51,"avg_security_score":52,"avg_patch_time_days":53,"trust_score":54,"computed_at":55},"letscms",5,80,94,241,75,"2026-04-05T18:01:26.290Z",[57,74,92,116,136],{"slug":58,"name":59,"version":6,"author":7,"author_profile":8,"description":60,"short_description":61,"active_installs":62,"downloaded":63,"rating":51,"num_ratings":64,"last_updated":65,"tested_up_to":16,"requires_at_least":66,"requires_php":18,"tags":67,"homepage":71,"download_link":72,"security_score":26,"vuln_count":14,"unpatched_count":28,"last_vuln_date":73,"fetched_at":30},"woo-binary-mlm","Binary MLM For WooCommerce","\u003Cp>A Binary MLM (Multi-Level Marketing) structure is a specific type of compensation plan in the MLM business model. In this structure, each member or distributor recruits and sponsors two other distributors, forming two “legs” or “downlines.” These distributors further recruit their two distributors, and the process continues, creating a tree-like structure.\u003C\u002Fp>\n\u003Cp>Woocommerce is an e-commerce platform that operates as a plugin on WordPress websites. It facilitates the creation of online stores, allowing users to sell products and services.\u003C\u002Fp>\n\u003Cp>Combining a Binary MLM structure with Woocommerce means setting up an online business platform where individuals can sell products or services while also earning commissions and bonuses through the MLM structure. In such a setup, distributors can sell products through their personalized online stores built on Woocommerce, and they can earn commissions not only from their sales but also from the sales generated by their downline distributors.\u003C\u002Fp>\n\u003Cp>The integration of Binary MLM with Woocommerce typically involves setting up specific functionalities within the online store that track sales, manage commissions, and bonuses based on the MLM structure’s rules and regulations. There might be additional plugins or software required to manage the complexities of the MLM compensation plan within the Woocommerce platform.\u003C\u002Fp>\n\u003Ch3>About\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Each member can have two front-line distributors (legs) directly under him.\u003C\u002Fli>\n\u003Cli>The balance between these two legs holds great importance that also affects the results while members try to earn largest income.\u003C\u002Fli>\n\u003Cli>Binary Spillover are appealing and play a crucial role in building the income of members.\u003C\u002Fli>\n\u003Cli>With each of the newly added member, all the members in the upline avail some amount of monetary benefits.\u003C\u002Fli>\n\u003Cli>The focus of each member is on the profit leg as the income is more dependent on this leg. And with members from spillovers being placed in the power leg.\u003C\u002Fli>\n\u003Cli>The plan depends on team effort. With sales from upline members offering some benefits to the downline members, differentiates it from other MLM programs.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Key benefits of Woocommerce associated with MLM software Integration:\u003C\u002Fh3>\n\u003Col>\n\u003Cli>MLM plans helps in to make your online business flourishing by leaps & bounds\u003C\u002Fli>\n\u003Cli>Right Selection of MLM helps in to make the global presence of business\u003C\u002Fli>\n\u003Cli>MLM helps in to heighten the sales and make a blotch in prosperous e-commerce\u003C\u002Fli>\n\u003Cli>Multiple options to payment gateway for international MLM clients\u003C\u002Fli>\n\u003Cli>MLM business can be promoted through sharing the plans via e-commerce network links\u003C\u002Fli>\n\u003Cli>One of the Key attributes of MLM is to grow and e-commerce holds a cluster of people to foster congenial environment for growth\u003C\u002Fli>\n\u003Cli>E-commerce traffic can become potential platform for MLM business\u003C\u002Fli>\n\u003Cli>MLM business could be promoted through sharing the plan via e-commerce social networking links\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Free Version Features\u003C\u002Fh3>\n\u003Ch3>Frontend Features\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Registration -> User can registration here.\u003C\u002Fli>\n\u003Cli>Downlines -> User can see or display the number of childs in his downlines.\u003C\u002Fli>\n\u003Cli>Account-Display-> Display the User Account details such as order deatails, billing and shipping address etc.\u003C\u002Fli>\n\u003Cli>My Networks-> User can display details such as e-mailid ,Name and userId etc. \u003C\u002Fli>\n\u003Cli>Shop->user can purchase any product of admin website.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Backend Features\u003C\u002Fh3>\n\u003Col>\n\u003Cli>First of all first user register as root or admin of this system.\u003C\u002Fli>\n\u003Cli>Admin give settings such as\u003Cbr \u002F>\na. General setting.\u003Cbr \u002F>\nb. Mapping.\u003Cbr \u002F>\nb. Eligibility setting.\u003Cbr \u002F>\nc. Payout setting.\u003C\u002Fli>\n\u003Cli>Product Points-> Admin can check product point get by the users.  \u003C\u002Fli>\n\u003Cli>Payout Run-> User can get product point after purchase product on site.\u003C\u002Fli>\n\u003Cli>User Reports-> Admin display the users information.\u003C\u002Fli>\n\u003Cli>Payout Report->  Admin display or check payout list of every users.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Download \u003Ca href=\"https:\u002F\u002Fwww.mlmtrees.com\u002Fproduct\u002Fbinary-mlm-ecommerce\u002F\" rel=\"nofollow ugc\">Binary MLM Plan with WooCommerce Pro\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Features of Binary Mlm Plan with WooCommerce Pro\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Dashboard \u003C\u002Fli>\n\u003Cli>Genealogy Tree\u003C\u002Fli>\n\u003Cli>Member Management\u003C\u002Fli>\n\u003Cli>E-Wallet\u003C\u002Fli>\n\u003Cli>Earning commissions and bonuses\u003C\u002Fli>\n\u003Cli>Affiliate or Direct Referrals Commission\u003C\u002Fli>\n\u003Cli>Join Commission\u003C\u002Fli>\n\u003Cli>Pair  Commission\u003C\u002Fli>\n\u003Cli>Company Commission\u003C\u002Fli>\n\u003Cli>Regular Commission\u003C\u002Fli>\n\u003Cli>Royalty Bonus\u003C\u002Fli>\n\u003Cli>Selling Products\u003C\u002Fli>\n\u003Cli>User Dashnoard\u003C\u002Fli>\n\u003Cli>Point Value\u003C\u002Fli>\n\u003Cli>Downlines\u003C\u002Fli>\n\u003Cli>Registration\u003C\u002Fli>\n\u003Cli>Login\u003C\u002Fli>\n\u003Cli>User Profile\u003C\u002Fli>\n\u003Cli>Withdrawal\u003C\u002Fli>\n\u003Cli>Run Payout\u003C\u002Fli>\n\u003Cli>User Report\u003C\u002Fli>\n\u003Cli>Commissions and Bonuses Settings\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Free – Support 24×7\u003C\u002Fp>\n\u003Cblockquote>\n\u003Ch3>Our Premium with wordpress support –\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.mlmtrees.com\u002Fproduct\u002Fbinary-mlm-ecommerce\u002F\" rel=\"nofollow ugc\">BMW – Binary Mlm Plan with Woocommerce\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fwww.letscms.com\u002Fbinary-mlm-woocommerce\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fwpbmw.mlmforest.com\u002F\" rel=\"nofollow ugc\">Demo\u003C\u002Fa>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Fwww.mlmtrees.com\u002Fproduct\u002Fbmp-pro-wordpress\u002F\" rel=\"nofollow ugc\">BMP – Binary MLM Plan with E-pIn System\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fwww.letscms.com\u002Fbmp_pro_documentation\u002F\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fbmp.mlmforest.com\u002F\" rel=\"nofollow ugc\">Demo\u003C\u002Fa>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Fwww.mlmtrees.com\u002Fproduct\u002Funilevel-mlm-plan-wordpress\u002F\" rel=\"nofollow ugc\">UMP – Unilevel MLm E-pin Plan\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fwww.letscms.com\u002Funilevel-mlm-plan-documentation\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fump.mlmforest.com\u002F\" rel=\"nofollow ugc\">Demo\u003C\u002Fa>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Fwww.mlmtrees.com\u002Fproduct\u002Funilevel-mlm-woocommerce-wordpress\u002F\" rel=\"nofollow ugc\">UMW – Unilevel MLM Plan with WooCommerce\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fwww.letscms.com\u002Funilevel-woo-commerce-documentation\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fumw.mlmforest.com\u002F\" rel=\"nofollow ugc\">Demo\u003C\u002Fa>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Fwww.mlmtrees.com\u002Fproduct\u002Ffmw-wordpress\u002F\" rel=\"nofollow ugc\">FMW – Force Matrix Mlm Woocommerce\u003C\u002Fa>  – \u003Ca href=\"https:\u002F\u002Fwww.letscms.com\u002Fforce-matrix-with-woocommerce\u002F\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fwpfmw.mlmforest.com\u002F\" rel=\"nofollow ugc\">Demo\u003C\u002Fa>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Fwww.mlmtrees.com\u002Fproduct\u002Fmonoline-mlm-plan\u002F\" rel=\"nofollow ugc\">MMP – Monoline MLM Plan with E-Pin\u003C\u002Fa>  – \u003Ca href=\"https:\u002F\u002Fwww.letscms.com\u002Fmonoline-mlm-plans\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fmonoline.vxinfosystem.com\u002F\" rel=\"nofollow ugc\">Demo\u003C\u002Fa>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Fwww.mlmtrees.com\u002Fproduct\u002Fmonoline-mlm-woocommerce\u002F\" rel=\"nofollow ugc\">MMW – Monoline Mlm Plan with Woocommerce\u003C\u002Fa>  – \u003Ca href=\"https:\u002F\u002Fwww.letscms.com\u002Fmonoline-mlm-woocommerce\u002F\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fmonolinewoo.vxinfosystem.com\u002F\" rel=\"nofollow ugc\">Demo\u003C\u002Fa>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Fwww.mlmtrees.com\u002Fproduct\u002Fmonoline-mlm-woocommerce\u002F\" rel=\"nofollow ugc\">BPW – Board Mlm Plan Woocommerce\u003C\u002Fa>  – \u003Ca href=\"https:\u002F\u002Fwww.letscms.com\u002Fboard-mlm-plan-woocommerce\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> – \u003Ca href=\"https:\u002F\u002Fboardmlm.vxinfosystem.com\u002F\" rel=\"nofollow ugc\">Demo\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>For more understand Plugin follow \u003Ca href=\"https:\u002F\u002Fwww.letscms.com\u002Fbinary-mlm-woocommerce\" rel=\"nofollow ugc\">Binary MLM Woocommerce Documentation\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>\u003C\u002Fh3>\n\u003Ch3>Free Supports\u003C\u002Fh3>\n\u003Ch3>\u003C\u002Fh3>\n\u003Cp>Please share your issues\u002Ffeedback with us, if you are facing any while using our plugin, at letscmsdev@gmail.com\u003C\u002Fp>\n\u003Cp>Mail: letscmsdev@gmail.com\u003Cbr \u002F>\nSkype: jks0586\u003Cbr \u002F>\nWhats App: +91-9717478599\u003Cbr \u002F>\nSupport: 24X7\u003C\u002Fp>\n","Binary MLM plugin for WooCommerce with advanced features to manage users, commissions, and eCommerce growth.",20,15817,4,"2025-12-13T13:11:00.000Z","6.2",[20,68,69,70],"mlm-plugin","network-marketing","tags-binary-mlm-for-woocommerce","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwoo-binary-mlm.2.1.zip","2025-01-06 16:22:39",{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":11,"downloaded":82,"rating":83,"num_ratings":27,"last_updated":84,"tested_up_to":16,"requires_at_least":85,"requires_php":86,"tags":87,"homepage":71,"download_link":91,"security_score":83,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"mlm-soft-integration","MLM Soft Integration","3.19.5","mlmsoft","https:\u002F\u002Fprofiles.wordpress.org\u002Fmlmsoft\u002F","\u003Cp>Plugin allows:\u003Cbr \u002F>\n– single authorization and registration of users both website and mlm-soft.com platform\u003Cbr \u002F>\n– referral links and personalized websites for distributors\u003Cbr \u002F>\n– additional integration with Paid Memberships Pro and Woocommerce\u003C\u002Fp>\n","Plugin integrates your Wordpress site with your instance of mlm-soft.com cloud platform.",9179,100,"2026-02-12T04:35:00.000Z","6.8","8.1",[88,21,89,90,69],"direct-sales","mlm-soft-com","multi-level-marketing","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmlm-soft-integration.zip",{"slug":93,"name":94,"version":95,"author":94,"author_profile":96,"description":97,"short_description":98,"active_installs":99,"downloaded":100,"rating":101,"num_ratings":102,"last_updated":103,"tested_up_to":104,"requires_at_least":17,"requires_php":105,"tags":106,"homepage":111,"download_link":112,"security_score":113,"vuln_count":114,"unpatched_count":28,"last_vuln_date":115,"fetched_at":30},"buddypress","BuddyPress","14.4.0","https:\u002F\u002Fprofiles.wordpress.org\u002Fbuddypress\u002F","\u003Cp>Are you looking for modern, robust, and sophisticated social network software? BuddyPress is a suite of components that are common to a typical social network, and allows for great add-on features through WordPress’s extensive plugin system.\u003C\u002Fp>\n\u003Cp>Aimed at site builders & developers, BuddyPress is focused on ease of integration, ease of use, and extensibility. It is deliberately powerful yet unbelievably simple social network software, built by contributors to WordPress.\u003C\u002Fp>\n\u003Cp>\u003Ciframe loading=\"lazy\" title=\"VideoPress Video Player\" aria-label=\"VideoPress Video Player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fvideo.wordpress.com\u002Fembed\u002FwvvZgNwo?hd=1&cover=1\" frameborder=\"0\" allowfullscreen allow=\"clipboard-write\">\u003C\u002Fiframe>\u003Cscript src='https:\u002F\u002Fv0.wordpress.com\u002Fjs\u002Fnext\u002Fvideopress-iframe.js?m=1770107250'>\u003C\u002Fscript>\u003C\u002Fp>\n\u003Cp>Members can register on your site to create user profiles, have private conversations, make social connections, create and interact in groups, and much more. Truly a social network in a box, BuddyPress helps you build a home for your company, school, sports team, or other niche community.\u003C\u002Fp>\n\u003Ch4>Built with developers in mind\u003C\u002Fh4>\n\u003Cp>BuddyPress helps site builders & developers add community features to their websites. It comes with a robust theme compatibility API that does its best to make every BuddyPress content page look and feel right with just about any WordPress theme. You will likely need to adjust some styling on your own to make everything look pristine.\u003C\u002Fp>\n\u003Cp>BuddyPress themes are just WordPress themes with additional templates, and with a little work, you could easily create your own, too! A handful of BuddyPress-specific themes are readily available for download from WordPress.org, and lots more are available from third-party theme authors.\u003C\u002Fp>\n\u003Cp>BuddyPress also comes with built-in support for Akismet and \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbbpress\u002F\" rel=\"ugc\">bbPress\u003C\u002Fa>, two very popular and very powerful WordPress plugins. If you’re using either, visit their settings pages and ensure everything is configured to your liking.\u003C\u002Fp>\n\u003Ch4>The BuddyPress Add-ons\u003C\u002Fh4>\n\u003Cp>WordPress.org is home to some amazing Add-ons for BuddyPress, including:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbp-attachments\u002F\" rel=\"ugc\">BP Attachments\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbp-classic\u002F\" rel=\"ugc\">BP Classic\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>NB\u003C\u002Fstrong>: BP Classic is a backwards compatibility Add-on for BuddyPress 12.0 and up bringing back the BP Legacy URL parser, the BP Default theme and BP Legacy widgets.\u003C\u002Fp>\n\u003Cp>Go to \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fbuddypress\u002F\" rel=\"nofollow ugc\">BuddyPress profile on WordPress.org\u003C\u002Fa> to find them all!\u003C\u002Fp>\n\u003Ch4>Join our community\u003C\u002Fh4>\n\u003Cp>If you’re interested in contributing to BuddyPress, we’d love to have you. Head over to the \u003Ca href=\"https:\u002F\u002Fcodex.buddypress.org\u002Fparticipate-and-contribute\u002F\" rel=\"nofollow ugc\">BuddyPress Documentation\u003C\u002Fa> site to find out how you can pitch in.\u003C\u002Fp>\n\u003Cp>BuddyPress is available in many languages thanks to the volunteer efforts of individuals all around the world. Check out our \u003Ca href=\"https:\u002F\u002Fcodex.buddypress.org\u002Ftranslations\u002F\" rel=\"nofollow ugc\">translations page\u003C\u002Fa> on the BuddyPress Documentation site for more details. If you are a polyglot, please \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fbuddypress\" rel=\"nofollow ugc\">consider helping translate BuddyPress\u003C\u002Fa> into your language.\u003C\u002Fp>\n\u003Cp>Growing the BuddyPress community means better software for everyone!\u003C\u002Fp>\n","Get together safely, in your own way, in WordPress.",100000,13699562,82,375,"2025-09-24T19:13:00.000Z","6.8.5","5.6",[107,108,109,22,110],"community","group","members","self-hosted","https:\u002F\u002Fbuddypress.org","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress.14.4.0.zip",76,24,"2026-01-22 18:30:17",{"slug":117,"name":118,"version":119,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":99,"downloaded":124,"rating":125,"num_ratings":126,"last_updated":127,"tested_up_to":16,"requires_at_least":128,"requires_php":129,"tags":130,"homepage":134,"download_link":135,"security_score":83,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"simple-social-icons","Simple Social Icons","4.0.0","OsomPress","https:\u002F\u002Fprofiles.wordpress.org\u002Fosompress\u002F","\u003Cp>Simple Social Icons is an easy to use, customizable way to display icons that link visitors to your various social profiles. You can choose which profiles to link to, customize the color and size of your icons, and align them to the left, center, or right.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Two Ways to Use Social Icons:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>Widget (WordPress 4.0+):\u003C\u002Fstrong> The traditional widget works on all supported WordPress versions. Simply drag the “Simple Social Icons” widget into any widget area and configure it from the widget form. All available icons are accessible through the widget.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Block Variations (WordPress 6.9+):\u003C\u002Fstrong> On WordPress 6.9+, this plugin extends the core Social Icons block with additional icon variations. These icons automatically appear when adding a Social Icons block in the block editor. Block variations only add icons that are not already available in WordPress core, so you get the best of both worlds: core icons plus these additional options.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>Important:\u003C\u002Fstrong> If you’re currently using the widget, nothing changes for you. The widget continues to work exactly as before on all WordPress versions. Block variations are an additional feature that only activates on WordPress 6.9+ and doesn’t affect existing widget functionality.\u003C\u002Fp>\n\u003Cp>*Note: The simple_social_default_glyphs filter has been deprecated from this plugin.\u003C\u002Fp>\n","This plugin provides two ways to display social icons: a traditional widget (available on all WordPress versions) and block variations for the core So …",3241683,86,91,"2025-12-16T12:19:00.000Z","4.0","7.4",[131,132,133],"social-media","social-networking","social-profiles","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsimple-social-icons\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-social-icons.4.0.0.zip",{"slug":137,"name":138,"version":139,"author":140,"author_profile":141,"description":142,"short_description":143,"active_installs":144,"downloaded":145,"rating":52,"num_ratings":146,"last_updated":147,"tested_up_to":148,"requires_at_least":149,"requires_php":71,"tags":150,"homepage":153,"download_link":154,"security_score":155,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"lightweight-social-icons","Lightweight Social Icons","1.1","Tom","https:\u002F\u002Fprofiles.wordpress.org\u002Fedge22\u002F","\u003Cp>Lightweight Social Icons is an easy to use, lightweight social icon widget which lets you display your favorite social profile icons.\u003C\u002Fp>\n\u003Cp>The icons use an icon font, meaning you can choose the size, border radius (roundess), color and hover color of your icons!\u003C\u002Fp>\n\u003Cp>Check out GeneratePress, our awesome WordPress theme! (https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fgeneratepress)\u003C\u002Fp>\n\u003Ch4>Features include:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Choose your own order\u003C\u002Fli>\n\u003Cli>Icon size\u003C\u002Fli>\n\u003Cli>Border radius\u003C\u002Fli>\n\u003Cli>Background color\u003C\u002Fli>\n\u003Cli>Text\u002Ficon color\u003C\u002Fli>\n\u003Cli>Background color on hover\u003C\u002Fli>\n\u003Cli>Text\u002Ficon color on hover\u003C\u002Fli>\n\u003Cli>Open links in new window\u003C\u002Fli>\n\u003Cli>Enable\u002Fdisable tooltips\u003C\u002Fli>\n\u003Cli>Alignment of icons\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Included icons:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Facebook\u003C\u002Fli>\n\u003Cli>Twitter\u003C\u002Fli>\n\u003Cli>Google+\u003C\u002Fli>\n\u003Cli>Instagram\u003C\u002Fli>\n\u003Cli>LinkedIn\u003C\u002Fli>\n\u003Cli>Pinterest\u003C\u002Fli>\n\u003Cli>Flickr\u003C\u002Fli>\n\u003Cli>Email\u003C\u002Fli>\n\u003Cli>RSS\u003C\u002Fli>\n\u003Cli>Stumbleupon\u003C\u002Fli>\n\u003Cli>Tumblr\u003C\u002Fli>\n\u003Cli>Vimeo\u003C\u002Fli>\n\u003Cli>YouTube\u003C\u002Fli>\n\u003Cli>Github\u003C\u002Fli>\n\u003Cli>Soundcloud\u003C\u002Fli>\n\u003Cli>DeviantArt\u003C\u002Fli>\n\u003Cli>Phone\u003C\u002Fli>\n\u003Cli>Skype\u003C\u002Fli>\n\u003Cli>Dribbble\u003C\u002Fli>\n\u003Cli>Foursquare\u003C\u002Fli>\n\u003Cli>Reddit\u003C\u002Fli>\n\u003Cli>Spotify\u003C\u002Fli>\n\u003Cli>Digg\u003C\u002Fli>\n\u003Cli>Vine\u003C\u002Fli>\n\u003Cli>Codepen\u003C\u002Fli>\n\u003Cli>Delicious\u003C\u002Fli>\n\u003Cli>JSFiddle\u003C\u002Fli>\n\u003Cli>Stack Overflow\u003C\u002Fli>\n\u003Cli>WordPress\u003C\u002Fli>\n\u003Cli>Dropbox\u003C\u002Fli>\n\u003Cli>Steam\u003C\u002Fli>\n\u003Cli>Behance\u003C\u002Fli>\n\u003Cli>iTunes\u003C\u002Fli>\n\u003Cli>Yelp\u003C\u002Fli>\n\u003Cli>500px\u003C\u002Fli>\n\u003Cli>AngelList\u003C\u002Fli>\n\u003Cli>Blog Lovin’\u003C\u002Fli>\n\u003Cli>Paper Plane (Newsletter)\u003C\u002Fli>\n\u003Cli>VK\u003C\u002Fli>\n\u003Cli>Xing\u003C\u002Fli>\n\u003Cli>Bandcamp\u003C\u002Fli>\n\u003Cli>BitBucket\u003C\u002Fli>\n\u003Cli>Snapchat\u003C\u002Fli>\n\u003Cli>Trip Advisor\u003C\u002Fli>\n\u003Cli>Houzz\u003C\u002Fli>\n\u003Cli>Mixcloud\u003C\u002Fli>\n\u003Cli>Last.fm\u003C\u002Fli>\n\u003C\u002Ful>\n","Looking to add simple social icons to your widget areas? Choose the size and color of your icons, and then choose from 47 different social profiles.",30000,464772,63,"2020-03-18T17:14:00.000Z","5.4.19","4.5",[151,152,131,132,133],"social-icon-widget","social-icons","http:\u002F\u002Fgeneratepress.com\u002Flightweight-social-icons","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flightweight-social-icons.1.1.zip",85,{"attackSurface":157,"codeSignals":255,"taintFlows":373,"riskAssessment":595,"analyzedAt":608},{"hooks":158,"ajaxHandlers":211,"restRoutes":252,"shortcodes":253,"cronEvents":254,"entryPointCount":228,"unprotectedCount":228},[159,165,170,176,180,181,184,187,191,196,200,204,207],{"type":160,"name":161,"callback":161,"priority":162,"file":163,"line":164},"action","admin_menu",9,"includes\\admin\\class-ump-admin-menus.php",15,{"type":160,"name":166,"callback":167,"file":168,"line":169},"init","includes","includes\\admin\\class-ump-admin.php",13,{"type":171,"name":172,"callback":173,"priority":11,"file":174,"line":175},"filter","page_template","ump_page_template","includes\\catalog\\class-ump-templates.php",6,{"type":160,"name":177,"callback":178,"file":174,"line":179},"wp_enqueue_scripts","custom_ump_style",11,{"type":160,"name":177,"callback":178,"file":174,"line":164},{"type":160,"name":166,"callback":166,"priority":28,"file":182,"line":183},"includes\\class-ump.php",67,{"type":160,"name":166,"callback":185,"file":182,"line":186},"ump_session_register",68,{"type":160,"name":188,"callback":189,"file":182,"line":190},"admin_enqueue_scripts","custom_ump_admin_style",81,{"type":160,"name":192,"callback":193,"file":194,"line":195},"ump_user_check_validate","ump_user_check_validate_function","includes\\ump-hooks.php",25,{"type":171,"name":197,"callback":198,"file":194,"line":199},"manage_users_columns","ump_add_custom_column_users",30,{"type":160,"name":201,"callback":202,"priority":11,"file":194,"line":203},"manage_users_custom_column","ump_add_custom_column_users_value",31,{"type":160,"name":197,"callback":205,"file":194,"line":206},"ump_remove_custom_column_users",32,{"type":160,"name":208,"callback":209,"file":194,"line":210},"wp_head","ump_base_name_information",34,[212,217,220,223,224,227,229,233,235,239,240,244,246,250],{"action":213,"nopriv":214,"callback":215,"hasNonce":214,"hasCapCheck":214,"file":194,"line":216},"ump_user_register",false,"ump_front_register_function",7,{"action":213,"nopriv":218,"callback":215,"hasNonce":214,"hasCapCheck":214,"file":194,"line":219},true,8,{"action":221,"nopriv":214,"callback":222,"hasNonce":214,"hasCapCheck":214,"file":194,"line":11},"ump_username_exist","ump_username_exist_function",{"action":221,"nopriv":218,"callback":222,"hasNonce":214,"hasCapCheck":214,"file":194,"line":179},{"action":225,"nopriv":214,"callback":226,"hasNonce":214,"hasCapCheck":214,"file":194,"line":169},"ump_email_exist","ump_email_exist_function",{"action":225,"nopriv":218,"callback":226,"hasNonce":214,"hasCapCheck":214,"file":194,"line":228},14,{"action":230,"nopriv":214,"callback":231,"hasNonce":214,"hasCapCheck":214,"file":194,"line":232},"ump_epin_exist","ump_epin_exist_function",16,{"action":230,"nopriv":218,"callback":231,"hasNonce":214,"hasCapCheck":214,"file":194,"line":234},17,{"action":236,"nopriv":214,"callback":237,"hasNonce":214,"hasCapCheck":214,"file":194,"line":238},"ump_password_validation","ump_password_validation_function",19,{"action":236,"nopriv":218,"callback":237,"hasNonce":214,"hasCapCheck":214,"file":194,"line":62},{"action":241,"nopriv":214,"callback":242,"hasNonce":214,"hasCapCheck":214,"file":194,"line":243},"ump_sponsor_exist","ump_sponsor_exist_function",22,{"action":241,"nopriv":218,"callback":242,"hasNonce":214,"hasCapCheck":214,"file":194,"line":245},23,{"action":247,"nopriv":214,"callback":248,"hasNonce":214,"hasCapCheck":214,"file":194,"line":249},"update_payment_status_ump","update_payment_status_ump_function",27,{"action":247,"nopriv":218,"callback":248,"hasNonce":214,"hasCapCheck":214,"file":194,"line":251},28,[],[],[],{"dangerousFunctions":256,"sqlUsage":257,"outputEscaping":288,"fileOperations":28,"externalRequests":28,"nonceChecks":234,"capabilityChecks":28,"bundledLibraries":372},[],{"prepared":258,"raw":259,"locations":260},110,12,[261,264,268,270,272,274,277,279,281,283,284,286],{"file":262,"line":206,"context":263},"includes\\admin\\settings\\view\\general-settings.php","$wpdb->get_results() with variable interpolation",{"file":265,"line":266,"context":267},"includes\\class-ump-install.php",413,"$wpdb->get_var() with variable interpolation",{"file":265,"line":269,"context":267},588,{"file":265,"line":271,"context":267},680,{"file":265,"line":273,"context":263},684,{"file":265,"line":275,"context":276},690,"$wpdb->query() with variable interpolation",{"file":265,"line":278,"context":276},692,{"file":280,"line":175,"context":267},"includes\\common-functions.php",{"file":282,"line":249,"context":276},"includes\\uninstaller.php",{"file":282,"line":199,"context":276},{"file":282,"line":285,"context":276},72,{"file":287,"line":164,"context":263},"templates\\ump-register.php",{"escaped":289,"rawEcho":290,"locations":291},154,40,[292,295,296,298,300,302,304,307,310,311,313,315,317,319,321,323,324,326,327,328,331,334,336,338,340,342,344,346,348,350,352,354,356,358,360,362,364,366,368,370],{"file":293,"line":113,"context":294},"includes\\admin\\settings\\view\\create-first-user.php","raw output",{"file":293,"line":125,"context":294},{"file":293,"line":297,"context":294},96,{"file":293,"line":299,"context":294},106,{"file":293,"line":301,"context":294},114,{"file":293,"line":303,"context":294},125,{"file":305,"line":306,"context":294},"includes\\admin\\settings\\view\\epin-report.php",33,{"file":308,"line":309,"context":294},"includes\\admin\\settings\\view\\epins-settings.php",69,{"file":308,"line":190,"context":294},{"file":308,"line":312,"context":294},93,{"file":308,"line":314,"context":294},102,{"file":262,"line":316,"context":294},42,{"file":262,"line":318,"context":294},53,{"file":262,"line":320,"context":294},55,{"file":262,"line":322,"context":294},71,{"file":262,"line":54,"context":294},{"file":262,"line":325,"context":294},79,{"file":262,"line":125,"context":294},{"file":262,"line":83,"context":294},{"file":329,"line":330,"context":294},"includes\\admin\\settings\\view\\settings-left-section.php",57,{"file":332,"line":333,"context":294},"includes\\catalog\\class-ump-downlines.php",213,{"file":332,"line":335,"context":294},221,{"file":280,"line":337,"context":294},301,{"file":280,"line":339,"context":294},347,{"file":280,"line":341,"context":294},354,{"file":280,"line":343,"context":294},373,{"file":280,"line":345,"context":294},388,{"file":280,"line":347,"context":294},395,{"file":280,"line":349,"context":294},415,{"file":280,"line":351,"context":294},430,{"file":280,"line":353,"context":294},437,{"file":280,"line":355,"context":294},476,{"file":280,"line":357,"context":294},490,{"file":280,"line":359,"context":294},497,{"file":280,"line":361,"context":294},522,{"file":280,"line":363,"context":294},538,{"file":280,"line":365,"context":294},545,{"file":280,"line":367,"context":294},560,{"file":280,"line":369,"context":294},708,{"file":280,"line":371,"context":294},712,[],[374,390,399,409,418,450,460,470,480,506,527,549,586],{"entryPoint":375,"graph":376,"unsanitizedCount":28,"severity":389},"\u003Ccreate-first-user> (includes\\admin\\settings\\view\\create-first-user.php:0)",{"nodes":377,"edges":387},[378,382],{"id":379,"type":380,"label":381,"file":293,"line":50},"n0","source","$_GET",{"id":383,"type":384,"label":385,"file":293,"line":101,"wp_function":386},"n1","sink","echo() [XSS]","echo",[388],{"from":379,"to":383,"sanitized":218},"low",{"entryPoint":391,"graph":392,"unsanitizedCount":28,"severity":389},"\u003Cepins-settings> (includes\\admin\\settings\\view\\epins-settings.php:0)",{"nodes":393,"edges":397},[394,396],{"id":379,"type":380,"label":395,"file":308,"line":228},"$_POST",{"id":383,"type":384,"label":385,"file":308,"line":322,"wp_function":386},[398],{"from":379,"to":383,"sanitized":218},{"entryPoint":400,"graph":401,"unsanitizedCount":28,"severity":389},"\u003Cgeneral-settings> (includes\\admin\\settings\\view\\general-settings.php:0)",{"nodes":402,"edges":407},[403,405],{"id":379,"type":380,"label":381,"file":262,"line":404},3,{"id":383,"type":384,"label":385,"file":262,"line":406,"wp_function":386},49,[408],{"from":379,"to":383,"sanitized":218},{"entryPoint":410,"graph":411,"unsanitizedCount":28,"severity":389},"\u003Csettings-left-section> (includes\\admin\\settings\\view\\settings-left-section.php:0)",{"nodes":412,"edges":416},[413,415],{"id":379,"type":380,"label":414,"file":329,"line":228},"$_GET (x3)",{"id":383,"type":384,"label":385,"file":329,"line":309,"wp_function":386},[417],{"from":379,"to":383,"sanitized":218},{"entryPoint":419,"graph":420,"unsanitizedCount":28,"severity":389},"ump_front_register_function (includes\\common-functions.php:126)",{"nodes":421,"edges":446},[422,425,429,433,438,441],{"id":379,"type":380,"label":423,"file":280,"line":424},"$_POST (x3)",156,{"id":383,"type":384,"label":426,"file":280,"line":427,"wp_function":428},"get_var() [SQLi]",218,"get_var",{"id":430,"type":380,"label":431,"file":280,"line":432},"n2","$_POST (x2)",151,{"id":434,"type":384,"label":435,"file":280,"line":436,"wp_function":437},"n3","query() [SQLi]",275,"query",{"id":439,"type":380,"label":395,"file":280,"line":440},"n4",158,{"id":442,"type":384,"label":443,"file":280,"line":444,"wp_function":445},"n5","get_row() [SQLi]",284,"get_row",[447,448,449],{"from":379,"to":383,"sanitized":218},{"from":430,"to":434,"sanitized":218},{"from":439,"to":442,"sanitized":218},{"entryPoint":451,"graph":452,"unsanitizedCount":28,"severity":389},"ump_username_exist_function (includes\\common-functions.php:336)",{"nodes":453,"edges":458},[454,456],{"id":379,"type":380,"label":395,"file":280,"line":455},358,{"id":383,"type":384,"label":443,"file":280,"line":457,"wp_function":445},360,[459],{"from":379,"to":383,"sanitized":218},{"entryPoint":461,"graph":462,"unsanitizedCount":28,"severity":389},"ump_sponsor_exist_function (includes\\common-functions.php:480)",{"nodes":463,"edges":468},[464,466],{"id":379,"type":380,"label":423,"file":280,"line":465},501,{"id":383,"type":384,"label":426,"file":280,"line":467,"wp_function":428},504,[469],{"from":379,"to":383,"sanitized":218},{"entryPoint":471,"graph":472,"unsanitizedCount":28,"severity":389},"update_payment_status_ump_function (includes\\common-functions.php:781)",{"nodes":473,"edges":478},[474,476],{"id":379,"type":380,"label":395,"file":280,"line":475},795,{"id":383,"type":384,"label":435,"file":280,"line":477,"wp_function":437},797,[479],{"from":379,"to":383,"sanitized":218},{"entryPoint":481,"graph":482,"unsanitizedCount":14,"severity":505},"network (includes\\catalog\\class-ump-downlines.php:145)",{"nodes":483,"edges":500},[484,486,488,489,491,493,496],{"id":379,"type":380,"label":395,"file":332,"line":485},157,{"id":383,"type":384,"label":443,"file":332,"line":487,"wp_function":445},162,{"id":430,"type":380,"label":395,"file":332,"line":485},{"id":434,"type":384,"label":426,"file":332,"line":490,"wp_function":428},167,{"id":439,"type":380,"label":431,"file":332,"line":492},185,{"id":442,"type":494,"label":495,"file":332,"line":492},"transform","→ buildLevelByLevelNetwork()",{"id":497,"type":384,"label":498,"file":332,"line":325,"wp_function":499},"n6","get_results() [SQLi]","get_results",[501,502,503,504],{"from":379,"to":383,"sanitized":218},{"from":430,"to":434,"sanitized":218},{"from":439,"to":442,"sanitized":214},{"from":442,"to":497,"sanitized":214},"high",{"entryPoint":507,"graph":508,"unsanitizedCount":14,"severity":505},"\u003Cclass-ump-downlines> (includes\\catalog\\class-ump-downlines.php:0)",{"nodes":509,"edges":521},[510,511,512,513,514,515,516,517,519],{"id":379,"type":380,"label":395,"file":332,"line":485},{"id":383,"type":384,"label":443,"file":332,"line":487,"wp_function":445},{"id":430,"type":380,"label":431,"file":332,"line":485},{"id":434,"type":384,"label":426,"file":332,"line":490,"wp_function":428},{"id":439,"type":380,"label":395,"file":332,"line":485},{"id":442,"type":384,"label":385,"file":332,"line":333,"wp_function":386},{"id":497,"type":380,"label":431,"file":332,"line":492},{"id":518,"type":494,"label":495,"file":332,"line":492},"n7",{"id":520,"type":384,"label":498,"file":332,"line":325,"wp_function":499},"n8",[522,523,524,525,526],{"from":379,"to":383,"sanitized":218},{"from":430,"to":434,"sanitized":218},{"from":439,"to":442,"sanitized":218},{"from":497,"to":518,"sanitized":214},{"from":518,"to":520,"sanitized":214},{"entryPoint":528,"graph":529,"unsanitizedCount":27,"severity":505},"ump_epin_exist_function (includes\\common-functions.php:419)",{"nodes":530,"edges":544},[531,533,535,536,538,540,542],{"id":379,"type":380,"label":395,"file":280,"line":532},441,{"id":383,"type":384,"label":426,"file":280,"line":534,"wp_function":428},443,{"id":430,"type":380,"label":395,"file":280,"line":532},{"id":434,"type":384,"label":443,"file":280,"line":537,"wp_function":445},445,{"id":439,"type":380,"label":395,"file":280,"line":539},446,{"id":442,"type":494,"label":541,"file":280,"line":539},"→ get_user_name_by_key()",{"id":497,"type":384,"label":443,"file":280,"line":543,"wp_function":445},668,[545,546,547,548],{"from":379,"to":383,"sanitized":218},{"from":430,"to":434,"sanitized":218},{"from":439,"to":442,"sanitized":214},{"from":442,"to":497,"sanitized":214},{"entryPoint":550,"graph":551,"unsanitizedCount":404,"severity":505},"\u003Ccommon-functions> (includes\\common-functions.php:0)",{"nodes":552,"edges":577},[553,555,556,557,558,560,561,562,564,565,567,569,571,574],{"id":379,"type":380,"label":554,"file":280,"line":424},"$_POST (x10)",{"id":383,"type":384,"label":426,"file":280,"line":427,"wp_function":428},{"id":430,"type":380,"label":423,"file":280,"line":432},{"id":434,"type":384,"label":435,"file":280,"line":436,"wp_function":437},{"id":439,"type":380,"label":559,"file":280,"line":440},"$_POST (x4)",{"id":442,"type":384,"label":443,"file":280,"line":444,"wp_function":445},{"id":497,"type":380,"label":431,"file":280,"line":455},{"id":518,"type":384,"label":498,"file":280,"line":563,"wp_function":499},631,{"id":520,"type":380,"label":395,"file":280,"line":539},{"id":566,"type":494,"label":541,"file":280,"line":539},"n9",{"id":568,"type":384,"label":443,"file":280,"line":543,"wp_function":445},"n10",{"id":570,"type":380,"label":431,"file":280,"line":273},"n11",{"id":572,"type":494,"label":573,"file":280,"line":273},"n12","→ get_parent()",{"id":575,"type":384,"label":426,"file":280,"line":576,"wp_function":428},"n13",698,[578,579,580,581,582,583,584,585],{"from":379,"to":383,"sanitized":218},{"from":430,"to":434,"sanitized":218},{"from":439,"to":442,"sanitized":218},{"from":497,"to":518,"sanitized":218},{"from":520,"to":566,"sanitized":214},{"from":566,"to":568,"sanitized":214},{"from":570,"to":572,"sanitized":214},{"from":572,"to":575,"sanitized":214},{"entryPoint":587,"graph":588,"unsanitizedCount":27,"severity":505},"\u003Cump-register> (templates\\ump-register.php:0)",{"nodes":589,"edges":593},[590,592],{"id":379,"type":380,"label":591,"file":287,"line":11},"$_REQUEST",{"id":383,"type":384,"label":426,"file":287,"line":259,"wp_function":428},[594],{"from":379,"to":383,"sanitized":214},{"summary":596,"deductions":597},"The 'unilevel-mlm-plan' v2.1 plugin presents a mixed security posture. While it demonstrates good practices in using prepared statements for SQL queries and a reasonable rate of output escaping, significant concerns arise from its attack surface.  All 14 identified AJAX handlers lack authentication checks, creating a large entry point for potential unauthorized actions.  Furthermore, the taint analysis reveals 5 flows with unsanitized paths, and all of these are classified as high severity, indicating a tangible risk of vulnerabilities like Cross-Site Scripting (XSS) or other forms of injection if user-supplied data is not properly handled before being processed or displayed. The plugin's vulnerability history, featuring a medium-severity CVE related to XSS, reinforces these concerns, suggesting a pattern where input sanitization has been a past weakness. Although the current CVE is patched, the presence of high-severity taint flows without corresponding capability checks on AJAX handlers is a critical area of immediate concern. The lack of capability checks on the AJAX handlers is a significant oversight.",[598,600,602,604,606],{"reason":599,"points":11},"14 unprotected AJAX handlers",{"reason":601,"points":164},"5 high severity unsanitized taint flows",{"reason":603,"points":11},"No capability checks on AJAX handlers",{"reason":605,"points":164},"Medium severity CVE history (XSS)",{"reason":607,"points":404},"79% output escaping (not 100%)","2026-03-16T23:52:17.397Z",{"wat":610,"direct":631},{"assetPaths":611,"generatorPatterns":620,"scriptPaths":621,"versionParams":622},[612,613,614,615,616,617,618,619],"\u002Fwp-content\u002Fplugins\u002Funilevel-mlm-plan\u002Fassets\u002Fcss\u002Fbootstrap.css","\u002Fwp-content\u002Fplugins\u002Funilevel-mlm-plan\u002Fassets\u002Fcss\u002Fump.css","\u002Fwp-content\u002Fplugins\u002Funilevel-mlm-plan\u002Fassets\u002Fjs\u002Fmain.js","\u002Fwp-content\u002Fplugins\u002Funilevel-mlm-plan\u002Fassets\u002Fjs\u002Fchart.js","\u002Fwp-content\u002Fplugins\u002Funilevel-mlm-plan\u002Fassets\u002Fjs\u002Fbootstrap.min.js","\u002Fwp-content\u002Fplugins\u002Funilevel-mlm-plan\u002Fassets\u002Fjs\u002Fbootstrap.bundle.min.js","\u002Fwp-content\u002Fplugins\u002Funilevel-mlm-plan\u002Fassets\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Funilevel-mlm-plan\u002Fassets\u002Fjs\u002Fadmin.js",[],[614,615,616,617,619],[623,624,625,626,627,628,629,630],"unilevel-mlm-plan\u002Fassets\u002Fcss\u002Fbootstrap.css?ver=","unilevel-mlm-plan\u002Fassets\u002Fcss\u002Fump.css?ver=","unilevel-mlm-plan\u002Fassets\u002Fjs\u002Fmain.js?ver=","unilevel-mlm-plan\u002Fassets\u002Fjs\u002Fchart.js?ver=1.0.0","unilevel-mlm-plan\u002Fassets\u002Fjs\u002Fbootstrap.min.js?ver=","unilevel-mlm-plan\u002Fassets\u002Fjs\u002Fbootstrap.bundle.min.js?ver=","unilevel-mlm-plan\u002Fassets\u002Fcss\u002Fadmin.css?ver=","unilevel-mlm-plan\u002Fassets\u002Fjs\u002Fadmin.js?ver=",{"cssClasses":632,"htmlComments":635,"htmlAttributes":636,"restEndpoints":638,"jsGlobals":643,"shortcodeOutput":645},[633,634],"ump-register-form","ump-downlines-wrapper",[],[637],"data-ump-user-id",[639,640,641,642],"\u002Fwp-json\u002Fump\u002Fv1\u002Fregister","\u002Fwp-json\u002Fump\u002Fv1\u002Fcheck-username","\u002Fwp-json\u002Fump\u002Fv1\u002Fcheck-email","\u002Fwp-json\u002Fump\u002Fv1\u002Fcheck-epin",[644],"ump_ajax_obj",[646,647],"[ump_register_form]","[ump_downlines]"]