[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frC2AwaCQmIFDh-zBDXsGCTwUIjHePA6aYsXP7ZIfRoI":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":39,"analysis":148,"fingerprints":206},"user-access-shortcodes","User Access Shortcodes","2.3","WP Darko","https:\u002F\u002Fprofiles.wordpress.org\u002Fspwebguy\u002F","\u003Cp>This is the simplest way of controlling who sees what in your posts\u002Fpages. This plugin allows you to restrict content to logged in users only (or guests, or by roles) with simple shortcodes. What you see is what you get, and it’s totally free.\u003C\u002Fp>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Cp>Show content only for Guests\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[UAS_guest]\nThis content can only be seen by guests.\n[\u002FUAS_guest]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Show content only for Registered\u002FLogged in users\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[UAS_loggedin]\nThis content can only be seen by logged in users.\n[\u002FUAS_loggedin]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Show content ony for specific roles\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[UAS_role roles=\"administrator, editor\"]\nThis content can only be seen by administrators and editors.\n[\u002FUAS_role]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Show content ony for specific users\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[UAS_specific ids=\"23, 127\"]\nThis content can only be seen by users with IDs 23 and 127.\n[\u002FUAS_specific]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Several extra parameters are available, please go to \u003Ca href=\"https:\u002F\u002Fwpdarko.com\u002Fsupport\u002Fget-started-with-the-user-access-shortcodes-plugin\u002F\" rel=\"nofollow ugc\">the plugin’s documentation\u003C\u002Fa> if you need more information on how to use this plugin.\u003C\u002Fp>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>Find help on \u003Ca href=\"https:\u002F\u002Fwpdarko.com\u002Fsupport\" rel=\"nofollow ugc\">our support platform\u003C\u002Fa> for this plugin (we’ll answer you fast, promise).\u003C\u002Fp>\n","The simplest way of controlling who sees what in your posts\u002Fpages. Restrict content to logged in users only (or guests, or by roles) with simple short …",1000,23406,98,13,"2026-01-29T19:32:00.000Z","6.9.4","3.6","",[20,21,22,23,24],"access-shortcodes","logged","logged-in","user","users","https:\u002F\u002Fwpdarko.com\u002Fsupport\u002Fget-started-with-the-user-access-shortcodes-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuser-access-shortcodes.2.3.zip",100,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":35,"avg_security_score":13,"avg_patch_time_days":36,"trust_score":37,"computed_at":38},"spwebguy",8,58800,175,78,"2026-04-05T08:32:17.173Z",[40,62,86,107,124],{"slug":41,"name":42,"version":43,"author":44,"author_profile":45,"description":46,"short_description":47,"active_installs":48,"downloaded":49,"rating":28,"num_ratings":28,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":53,"tags":54,"homepage":60,"download_link":61,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"user-timer","User Timer","0.1.3","sosidee","https:\u002F\u002Fprofiles.wordpress.org\u002Fsosidee\u002F","\u003Cp>User Timer tracks how long logged-in users stay active on your site. It checks at regular intervals if the user’s browser is still open on any page. You can set the check interval (in minutes), and choose which user roles to monitor.\u003C\u002Fp>\n\u003Cp>Useful for understanding how long users engage with your site — for example, measuring admin working time, member activity, or student engagement on e-learning platforms.\u003C\u002Fp>\n\u003Cp>Collected data can be filtered by date range and exported to CSV, showing total time (in minutes) per user.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Main features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Set check interval (in minutes)\u003C\u002Fli>\n\u003Cli>Enable tracking by user role\u003C\u002Fli>\n\u003Cli>Filter data by date range\u003C\u002Fli>\n\u003Cli>Export results to CSV\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>Go to \u003Cstrong>Tools > User Timer\u003C\u002Fstrong>. Set the interval and select which user roles to track. The plugin will start logging active time.\u003C\u002Fp>\n","Tracks the activity of logged-in users by measuring how long their browser stays active on the site.",20,570,"2025-04-11T15:07:00.000Z","6.7.5","5.9","8.0",[55,56,57,58,59],"analytics","logged-in-users","usage-tracking","user-activity","user-tracking","https:\u002F\u002Fsosplugin.com\u002Fwp-shelly\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuser-timer.0.1.3.zip",{"slug":63,"name":64,"version":65,"author":66,"author_profile":67,"description":68,"short_description":69,"active_installs":70,"downloaded":71,"rating":27,"num_ratings":72,"last_updated":73,"tested_up_to":74,"requires_at_least":75,"requires_php":18,"tags":76,"homepage":82,"download_link":83,"security_score":84,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":85},"kings-different-content-for-members","Kings Different Content for Members","1.0.1","Saif","https:\u002F\u002Fprofiles.wordpress.org\u002Fkingsrrf\u002F","\u003Cp>This will add allow you to show some content to the general visitors, which the logged in users can’t see. On the other hand, you can also show some contents to the logged in users only, which general visitors can’t see.\u003C\u002Fp>\n\u003Cp>\u003Cstrong> Features: \u003C\u002Fstrong>\u003Cbr \u002F>\n1. Ultra light plugin, only around 2 KB. \u003Cbr \u002F>\n2. Show some contents only to the general visitors, which logged in users can’t see.  \u003Cbr \u002F>\n3. Show some contents only to the logged in users, which general visitors can’t see.  \u003Cbr \u002F>\n4. Show all other contents to all the visitors, regardless of their login state.  \u003Cbr \u002F>\n5. Use this shortcode as many times as you want, anywhere in any of your websites.  \u003C\u002Fp>\n\u003Cp>\u003Cstrong> Usage: \u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Here’s a step by step user manual:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Install the plugin. (Find the instructions in the “Installation” section.)\u003C\u002Fli>\n\u003Cli>Use the shortcode to show contents (text\u002Fimages\u002Fvideos\u002F etc) only to the logged in users: \u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cpre>[logged-in] YOUR CONTENT FOR LOGGED IN USERS HERE [\u002Flogged-in]\u003C\u002Fpre>\n\u003Cp>Note: general visitors, who are not logged in can’t see this content. \u003Cbr \u002F>\n3. Use the shortcode to show contents (text\u002Fimages\u002Fvideos\u002F etc) only to the general visitors:\u003C\u002Fp>\n\u003Cpre>[general-content] YOUR CONTENT FOR LOGGED IN USERS HERE [\u002Fgeneral-content]\u003C\u002Fpre>\n\u003Cp>Note: logged in users can’t see this content.\u003C\u002Fp>\n\u003Cp>You can use this short code as many times as you want.\u003C\u002Fp>\n","This will add allow you to show different texts only for logged in users, while normal texts for normal visitors.",10,1703,1,"2014-06-09T07:57:00.000Z","3.9.40","3.0.1",[77,78,79,80,81],"logged-in-content","logged-in-only-content","members-only-content","restricted-contents","view-content-to-logged-in-users","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fkings-different-content-for-members\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkings-different-content-for-members.zip",85,"2026-03-15T14:54:45.397Z",{"slug":87,"name":88,"version":89,"author":90,"author_profile":91,"description":92,"short_description":93,"active_installs":70,"downloaded":94,"rating":27,"num_ratings":95,"last_updated":96,"tested_up_to":97,"requires_at_least":98,"requires_php":18,"tags":99,"homepage":105,"download_link":106,"security_score":84,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"user-recent-search-history","User Recent Search History","1.1","Dipali Dhole","https:\u002F\u002Fprofiles.wordpress.org\u002Fdipalidhole27gmailcom\u002F","\u003Cp>If you have a search box on the site,\u003Cbr \u002F>\nthis plugin automatically records what logged In user’s are searching and keep records.\u003Cbr \u002F>\nsimply displays the recent searches of logged In User and anonymous user.\u003Cbr \u002F>\nLogged In user’s history stored in the database and it’s shows when that user is logged in.\u003Cbr \u002F>\nAnonymous user’s search history showing on the site until the browser closed.\u003Cbr \u002F>\nThis plugin added the widget to show user’s recent search history.\u003C\u002Fp>\n","This plugin is to show user's recent search history.",2107,2,"2014-04-10T05:46:00.000Z","3.7.41","3.0",[100,101,102,103,104],"anonymous-users-search-history","logged-in-users-recent-search-history","search-history","search-history-widget","user-recent-search","http:\u002F\u002Fwebelusion.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuser-recent-search-history.zip",{"slug":56,"name":108,"version":109,"author":110,"author_profile":111,"description":112,"short_description":113,"active_installs":28,"downloaded":114,"rating":28,"num_ratings":28,"last_updated":18,"tested_up_to":115,"requires_at_least":116,"requires_php":117,"tags":118,"homepage":121,"download_link":122,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":123},"Logged In Users","1.0","Pluginaid","https:\u002F\u002Fprofiles.wordpress.org\u002Fauthorityaid\u002F","\u003Cp>Adds a dashboard widget displaying a list of users currently logged in to your site. Useful for monitoring live user activity and session management.\u003C\u002Fp>\n","Adds a dashboard widget showing which users are currently logged in.",339,"6.3.8","4.7","7.0",[119,22,120,24],"dashboard","session","https:\u002F\u002Fpluginaid.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flogged-in-users.1.0.zip","2026-03-15T10:48:56.248Z",{"slug":125,"name":126,"version":127,"author":128,"author_profile":129,"description":130,"short_description":131,"active_installs":132,"downloaded":133,"rating":134,"num_ratings":135,"last_updated":136,"tested_up_to":16,"requires_at_least":137,"requires_php":138,"tags":139,"homepage":145,"download_link":146,"security_score":27,"vuln_count":72,"unpatched_count":28,"last_vuln_date":147,"fetched_at":30},"when-last-login","When Last Login","1.2.3","Andrew Lima","https:\u002F\u002Fprofiles.wordpress.org\u002Fandrewza\u002F","\u003Cp>A lightweight plugin that allows you to see active users according to their last login time\u002Fdate. No need to configure, simply activate When Last and you’re ready to go! This adds a custom column to your WordPress users list of “Last Login” and a timestamp linked to that user.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Show when last a user has logged into your site.\u003C\u002Fli>\n\u003Cli>Sorts users according to last login time stamp (Ascending\u002FDescending) in the WordPress user list.\u003C\u002Fli>\n\u003Cli>Administrator widget for top 3 users according to login count.\u003C\u002Fli>\n\u003Cli>Integrates with Paid Memberships Pro  1.8+ – Add’s a ‘Last Logged In’ column to the ‘Members List’.\u003C\u002Fli>\n\u003Cli>Generates a login history table under ‘When Last Login’ > ‘All Login Records’. \u003C\u002Fli>\n\u003Cli>Hooks and filters for developers.\u003C\u002Fli>\n\u003Cli>Record the user’s last IP address when logging into your WordPress website (Optional Setting).\u003C\u002Fli>\n\u003Cli>A variety of \u003Ca href=\"https:\u002F\u002Fyoohooplugins.com\u002Fplugins\u002F?utm_source=plugin&utm_medium=wordpress&utm_campaign=premium_addons\" rel=\"nofollow ugc\">Premium\u003C\u002Fa> and Free add-ons available. \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Free Add-ons\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwhen-last-login-welcome-email-add-on\u002F\" rel=\"ugc\">When Last Login – Welcome Email\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwhen-last-login-export-user-records\u002F\" rel=\"ugc\">When Last Login – Export User Records\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Premium Add-ons\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fyoohooplugins.com\u002Fplugins\u002Fwhen-last-login-slack-notifications\u002F?utm_source=plugin&utm_medium=wordpress&utm_campaign=slack_notifications\" rel=\"nofollow ugc\">When Last Login – Slack Notifications\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fyoohooplugins.com\u002Fplugins\u002Fwhen-last-login-user-statistics\u002F?utm_source=plugin&utm_medium=wordpress&utm_campaign=user_statistics\" rel=\"nofollow ugc\">When Last Login – User Statistics\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fyoohooplugins.com\u002Fplugins\u002Fzapier-integration\u002F?utm_source=plugin&utm_medium=wordpress&utm_campaign=zapier_integration\" rel=\"nofollow ugc\">When Last Login – Zapier Integration\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>When Last Login in your Language\u003C\u002Fh4>\n\u003Cp>We need your help to translate When Last Login into your locale. To translate When Last Login, simply visit \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fwhen-last-login\" rel=\"nofollow ugc\">https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fwhen-last-login\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Track Your Members Better\u003C\u002Fh4>\n\u003Cp>You are able to track which members login to your site by simply sorting your default user’s list according to when last the user was seen in easily readable text such as “X Min\u002FHours\u002FDays\u002FWeeks\u002FMonths\u002FYears”.\u003C\u002Fp>\n\u003Ch4>Plugins that When Last Login integrates with\u003C\u002Fh4>\n\u003Cp>Here is a list of plugins we currently support:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.paidmembershipspro.com\u002F\" rel=\"nofollow ugc\">Paid Memberships Pro\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftwo-factor\u002F\" rel=\"ugc\">Two Factor Authentication\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you have a plugin and would like to integrate with When Last Login, please open a support thread.\u003C\u002Fp>\n\u003Ch4>Need Help\u003C\u002Fh4>\n\u003Cp>Something not working as intended or have a question about functionality of When Last Login. \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fwhen-last-login\" rel=\"ugc\">Open a support thread\u003C\u002Fa>\u003C\u002Fp>\n","Show a users last login date by creating a sortable column in your WordPress users list.",50000,184463,94,36,"2025-12-03T08:51:00.000Z","5.0","7.4",[140,141,142,143,144],"last-logged-in","last-login","last-seen","user-login","user-login-time","https:\u002F\u002Fwhenlastlogin.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwhen-last-login.1.2.3.zip","2023-03-01 00:00:00",{"attackSurface":149,"codeSignals":189,"taintFlows":199,"riskAssessment":200,"analyzedAt":205},{"hooks":150,"ajaxHandlers":169,"restRoutes":170,"shortcodes":171,"cronEvents":187,"entryPointCount":188,"unprotectedCount":28},[151,157,162,166],{"type":152,"name":153,"callback":154,"file":155,"line":156},"action","admin_head","uasc_css","uasc.php",12,{"type":158,"name":159,"callback":160,"file":155,"line":161},"filter","mce_external_plugins","uasc_add_tinymce_plugin",34,{"type":158,"name":163,"callback":164,"file":155,"line":165},"mce_buttons","uasc_register_mce_button",35,{"type":152,"name":153,"callback":167,"file":155,"line":168},"uasc_add_mce_button",38,[],[],[172,176,179,183],{"tag":173,"callback":174,"file":155,"line":175},"UAS_guest","uasc_guest_sc",52,{"tag":177,"callback":178,"file":155,"line":13},"UAS_loggedin","uasc_loggedin_sc",{"tag":180,"callback":181,"file":155,"line":182},"UAS_role","uasc_role_sc",129,{"tag":184,"callback":185,"file":155,"line":186},"UAS_specific","uasc_specific_sc",179,[],4,{"dangerousFunctions":190,"sqlUsage":191,"outputEscaping":193,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":188,"bundledLibraries":198},[],{"prepared":28,"raw":28,"locations":192},[],{"escaped":28,"rawEcho":72,"locations":194},[195],{"file":155,"line":196,"context":197},17,"raw output",[],[],{"summary":201,"deductions":202},"The 'user-access-shortcodes' plugin version 2.3 exhibits a generally good security posture with several positive attributes. Notably, all identified entry points, which consist solely of shortcodes, are protected by capability checks. The plugin also demonstrates robust data handling by exclusively using prepared statements for its SQL queries, indicating a commitment to preventing SQL injection vulnerabilities. Furthermore, the absence of known CVEs and a clean vulnerability history suggest a well-maintained and secure codebase. However, a significant concern arises from the output escaping analysis, where 100% of identified outputs are not properly escaped. This opens the door to cross-site scripting (XSS) vulnerabilities, as user-supplied data displayed by the shortcodes could be manipulated to execute malicious scripts in the user's browser. The lack of taint analysis data also means that complex data flow vulnerabilities might not have been detected by the static analysis, though this is less of a direct concern given the other findings.",[203],{"reason":204,"points":34},"100% of outputs not properly escaped","2026-03-16T18:45:54.348Z",{"wat":207,"direct":216},{"assetPaths":208,"generatorPatterns":210,"scriptPaths":211,"versionParams":213},[209],"\u002Fwp-content\u002Fplugins\u002Fuser-access-shortcodes\u002Fimg\u002Fuasc-icon.png",[],[212],"\u002Fwp-content\u002Fplugins\u002Fuser-access-shortcodes\u002Fjs\u002Fuasc-mce-button.js",[214,215],"user-access-shortcodes\u002Fstyle.css?ver=","user-access-shortcodes\u002Fjs\u002Fuasc-mce-button.js?ver=",{"cssClasses":217,"htmlComments":219,"htmlAttributes":220,"restEndpoints":221,"jsGlobals":222,"shortcodeOutput":223},[218],"mce-i-uasc-mce-icon",[],[],[],[],[224,225,226,227,228,229,230,231],"[UAS_guest]","[\u002FUAS_guest]","[UAS_loggedin]","[\u002FUAS_loggedin]","[UAS_role]","[\u002FUAS_role]","[UAS_specific]","[\u002FUAS_specific]"]