[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHpxXzmyIV-fOney7w7N-A8YgwihsfZwwPa3NLoBYkVI":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":35,"analysis":130,"fingerprints":329},"user-login-tracker","User Login Tracker","2.0.1","Irfan","https:\u002F\u002Fprofiles.wordpress.org\u002Firfanntk\u002F","\u003Cp>User Login Tracker helps WordPress site administrators monitor and analyze user login activity with powerful analytics and detailed reporting. Perfect for membership sites, e-commerce platforms, and any website that needs to track user engagement and activity patterns.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Visual Analytics Dashboard\u003C\u002Fstrong> – Interactive charts showing login trends and user activity patterns\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Real-time Login Tracking\u003C\u002Fstrong> – Automatically track every user login with detailed information\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User Activity History\u003C\u002Fstrong> – View complete login history for any user with timestamps and IP addresses\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Dashboard Widget\u003C\u002Fstrong> – Quick overview of recent activity right on your WordPress dashboard\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Export\u003C\u002Fstrong> – Export login data in CSV format for external analysis\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Activity Status Indicators\u003C\u002Fstrong> – Instantly see which users are active or inactive\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Performance Optimized\u003C\u002Fstrong> – Fast, efficient database design that won’t slow down your site\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Mobile Responsive\u003C\u002Fstrong> – Works perfectly on all devices and screen sizes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Why Choose User Login Tracker?\u003C\u002Fh4>\n\u003Cp>✅ \u003Cstrong>Easy Setup\u003C\u002Fstrong> – Install and start tracking immediately, no configuration required\u003Cbr \u002F>\n✅ \u003Cstrong>Lightweight\u003C\u002Fstrong> – Minimal impact on site performance with optimized code\u003Cbr \u002F>\n✅ \u003Cstrong>Secure\u003C\u002Fstrong> – Built with WordPress security best practices\u003Cbr \u002F>\n✅ \u003Cstrong>User-Friendly\u003C\u002Fstrong> – Clean, intuitive interface that anyone can use\u003Cbr \u002F>\n✅ \u003Cstrong>Comprehensive\u003C\u002Fstrong> – Track everything you need without overwhelming complexity\u003C\u002Fp>\n\u003Ch4>Perfect For\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Membership Sites\u003C\u002Fstrong> – Monitor member engagement and login patterns\u003C\u002Fli>\n\u003Cli>\u003Cstrong>E-commerce Stores\u003C\u002Fstrong> – Track customer activity and identify trends\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Business Websites\u003C\u002Fstrong> – Understand user behavior and site usage\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Educational Platforms\u003C\u002Fstrong> – Monitor student login activity\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Community Sites\u003C\u002Fstrong> – Track member participation and engagement\u003C\u002Fli>\n\u003C\u002Ful>\n","Monitor user login activity with advanced analytics, visual charts, and comprehensive tracking dashboard.",30,494,0,"2025-09-05T18:43:00.000Z","6.8.5","5.0","7.2",[19,20,21,22,23],"login-history","login-tracking","user-activity","user-login","user-monitoring","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuser-login-tracker.2.0.1.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":11,"trust_score":33,"computed_at":34},"irfanntk",1,94,"2026-04-04T02:41:37.477Z",[36,54,73,88,108],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":26,"downloaded":44,"rating":26,"num_ratings":45,"last_updated":46,"tested_up_to":15,"requires_at_least":16,"requires_php":47,"tags":48,"homepage":52,"download_link":53,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"last-login-display","Last Login Display","1.0.5","Robiul Islam","https:\u002F\u002Fprofiles.wordpress.org\u002Frobiulrslam12\u002F","\u003Cp>\u003Cstrong>Last Login Display\u003C\u002Fstrong> adds a new column to the “Users” page in the WordPress admin dashboard, which displays the last login date and time of each user.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features\u003C\u002Fstrong>:\u003Cbr \u002F>\n– Tracks and displays the last login time of users.\u003Cbr \u002F>\n– Adds a sortable column to the user list for easy organization.\u003Cbr \u002F>\n– Helps admins monitor user activity.\u003C\u002Fp>\n\u003Ch3>Why Use Last Login Display?\u003C\u002Fh3>\n\u003Cp>Last Login Display is the ultimate solution for tracking and managing user activity on your WordPress website. This plugin integrates seamlessly into the WordPress admin dashboard, offering valuable insights about user behavior. Here’s why it’s a must-have:\u003C\u002Fp>\n\u003Col>\n\u003Cli>\u003Cstrong>Track User Activity:\u003C\u002Fstrong> Easily monitor when users last logged into your site, helping you stay informed about active and inactive accounts.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable Date and Time Format:\u003C\u002Fstrong> The plugin displays the last login time in the format defined in your WordPress settings, ensuring consistency with your site’s preferences.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Admin Dashboard Integration:\u003C\u002Fstrong> The “Last Login” column is added to the users’ table in the admin dashboard, making it convenient to view login data at a glance.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Sortable Last Login Column:\u003C\u002Fstrong> The “Last Login” column is fully sortable, allowing admins to quickly organize users by their most or least recent login activity.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Improve User Engagement and Security:\u003C\u002Fstrong> Identify dormant accounts or potential unauthorized access by analyzing login patterns, helping you enhance security and engagement.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Lightweight and Efficient:\u003C\u002Fstrong> Designed with performance in mind, this plugin adds essential functionality without slowing down your site.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>How it Works\u003C\u002Fh4>\n\u003Col>\n\u003Cli>The plugin automatically tracks users’ login times when they log in.\u003C\u002Fli>\n\u003Cli>The “Last Login” column will appear in the \u003Cstrong>Users\u003C\u002Fstrong> > \u003Cstrong>All Users\u003C\u002Fstrong> section of the admin dashboard.\u003C\u002Fli>\n\u003Cli>You can sort users by their last login time using the new column.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Cp>Once the plugin is activated:\u003Cbr \u002F>\n– Navigate to \u003Cstrong>Users\u003C\u002Fstrong> > \u003Cstrong>All Users\u003C\u002Fstrong>.\u003Cbr \u002F>\n– The \u003Cstrong>Last Login\u003C\u002Fstrong> column will display the last login date and time of each user.\u003Cbr \u002F>\n– Users who have never logged in will show “Never” in the column.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later. See the \u003Ca href=\"https:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-2.0.html\" rel=\"nofollow ugc\">LICENSE\u003C\u002Fa> file for more information.\u003C\u002Fp>\n","Show the last login date and time of users in the admin dashboard.",1752,3,"2025-04-27T05:43:00.000Z","7.4",[49,50,21,22,51],"last-login","login-time","user-management","https:\u002F\u002Frobiul.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flast-login-display.1.0.5.zip",{"slug":55,"name":56,"version":57,"author":58,"author_profile":59,"description":60,"short_description":61,"active_installs":62,"downloaded":63,"rating":26,"num_ratings":64,"last_updated":65,"tested_up_to":66,"requires_at_least":16,"requires_php":17,"tags":67,"homepage":70,"download_link":71,"security_score":72,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"last-login-tracker-redirect-url","Last Login Tracker & Redirect URL","1.1.0","Khurram Sohail","https:\u002F\u002Fprofiles.wordpress.org\u002Fkhurram50\u002F","\u003Cp>Track the last login time of users and optionally redirect 404 pages to the homepage. Includes an admin settings page.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cp>✅ Tracks user last login\u003Cbr \u002F>\n✅ Displays last login time in WordPress Users list\u003Cbr \u002F>\n✅ Sortable Last Login column\u003Cbr \u002F>\n✅ Enable\u002FDisable login tracking\u003Cbr \u002F>\n✅ Redirect 404 pages to homepage\u003Cbr \u002F>\n✅ Lightweight & optimized\u003C\u002Fp>\n","Tracks user last login and allows redirection of 404 pages to the homepage.",10,539,2,"2025-03-29T20:06:00.000Z","6.7.5",[68,69,49,20,21],"404-redirect","admin-tools","https:\u002F\u002Fkhurram.site\u002Fwordpress-plugins\u002Flast-login-tracker-redirect-url\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flast-login-tracker-redirect-url.1.1.0.zip",92,{"slug":74,"name":75,"version":76,"author":77,"author_profile":78,"description":79,"short_description":80,"active_installs":13,"downloaded":81,"rating":13,"num_ratings":13,"last_updated":82,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":83,"homepage":24,"download_link":87,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"login-activity-tracker","Login Activity Tracker","1.6","Debjit Das","https:\u002F\u002Fprofiles.wordpress.org\u002Fdebjit98\u002F","\u003Cp>\u003Cstrong>Login Activity Tracker\u003C\u002Fstrong> records every user login attempt—both successful and failed. It provides an admin panel for viewing all login logs and a user panel for individual login history. The plugin includes color-coded statuses and styled pagination for a better user experience.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Logs all login attempts (success & failure)\u003C\u002Fli>\n\u003Cli>Shows login date\u003C\u002Fli>\n\u003Cli>Admin can view all user login activities\u003C\u002Fli>\n\u003Cli>Users can view their own login history\u003C\u002Fli>\n\u003Cli>Super admin login status highlighted\u003C\u002Fli>\n\u003Cli>Color-coded login statuses (success\u002Ffailure)\u003C\u002Fli>\n\u003Cli>Clean UI with pagination\u003C\u002Fli>\n\u003Cli>Lightweight and secure\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later.\u003C\u002Fp>\n","Tracks user login attempts and displays login logs with styled pagination for admins and users.",267,"2025-06-29T12:25:00.000Z",[84,85,22,86],"login-tracker","tracking","user-login-history","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flogin-activity-tracker.1.6.zip",{"slug":89,"name":90,"version":91,"author":92,"author_profile":93,"description":94,"short_description":95,"active_installs":96,"downloaded":97,"rating":33,"num_ratings":98,"last_updated":99,"tested_up_to":100,"requires_at_least":16,"requires_php":47,"tags":101,"homepage":105,"download_link":106,"security_score":26,"vuln_count":32,"unpatched_count":13,"last_vuln_date":107,"fetched_at":28},"when-last-login","When Last Login","1.2.3","Andrew Lima","https:\u002F\u002Fprofiles.wordpress.org\u002Fandrewza\u002F","\u003Cp>A lightweight plugin that allows you to see active users according to their last login time\u002Fdate. No need to configure, simply activate When Last and you’re ready to go! This adds a custom column to your WordPress users list of “Last Login” and a timestamp linked to that user.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Show when last a user has logged into your site.\u003C\u002Fli>\n\u003Cli>Sorts users according to last login time stamp (Ascending\u002FDescending) in the WordPress user list.\u003C\u002Fli>\n\u003Cli>Administrator widget for top 3 users according to login count.\u003C\u002Fli>\n\u003Cli>Integrates with Paid Memberships Pro  1.8+ – Add’s a ‘Last Logged In’ column to the ‘Members List’.\u003C\u002Fli>\n\u003Cli>Generates a login history table under ‘When Last Login’ > ‘All Login Records’. \u003C\u002Fli>\n\u003Cli>Hooks and filters for developers.\u003C\u002Fli>\n\u003Cli>Record the user’s last IP address when logging into your WordPress website (Optional Setting).\u003C\u002Fli>\n\u003Cli>A variety of \u003Ca href=\"https:\u002F\u002Fyoohooplugins.com\u002Fplugins\u002F?utm_source=plugin&utm_medium=wordpress&utm_campaign=premium_addons\" rel=\"nofollow ugc\">Premium\u003C\u002Fa> and Free add-ons available. \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Free Add-ons\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwhen-last-login-welcome-email-add-on\u002F\" rel=\"ugc\">When Last Login – Welcome Email\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwhen-last-login-export-user-records\u002F\" rel=\"ugc\">When Last Login – Export User Records\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Premium Add-ons\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fyoohooplugins.com\u002Fplugins\u002Fwhen-last-login-slack-notifications\u002F?utm_source=plugin&utm_medium=wordpress&utm_campaign=slack_notifications\" rel=\"nofollow ugc\">When Last Login – Slack Notifications\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fyoohooplugins.com\u002Fplugins\u002Fwhen-last-login-user-statistics\u002F?utm_source=plugin&utm_medium=wordpress&utm_campaign=user_statistics\" rel=\"nofollow ugc\">When Last Login – User Statistics\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fyoohooplugins.com\u002Fplugins\u002Fzapier-integration\u002F?utm_source=plugin&utm_medium=wordpress&utm_campaign=zapier_integration\" rel=\"nofollow ugc\">When Last Login – Zapier Integration\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>When Last Login in your Language\u003C\u002Fh4>\n\u003Cp>We need your help to translate When Last Login into your locale. To translate When Last Login, simply visit \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fwhen-last-login\" rel=\"nofollow ugc\">https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fwhen-last-login\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Track Your Members Better\u003C\u002Fh4>\n\u003Cp>You are able to track which members login to your site by simply sorting your default user’s list according to when last the user was seen in easily readable text such as “X Min\u002FHours\u002FDays\u002FWeeks\u002FMonths\u002FYears”.\u003C\u002Fp>\n\u003Ch4>Plugins that When Last Login integrates with\u003C\u002Fh4>\n\u003Cp>Here is a list of plugins we currently support:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.paidmembershipspro.com\u002F\" rel=\"nofollow ugc\">Paid Memberships Pro\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftwo-factor\u002F\" rel=\"ugc\">Two Factor Authentication\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you have a plugin and would like to integrate with When Last Login, please open a support thread.\u003C\u002Fp>\n\u003Ch4>Need Help\u003C\u002Fh4>\n\u003Cp>Something not working as intended or have a question about functionality of When Last Login. \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fwhen-last-login\" rel=\"ugc\">Open a support thread\u003C\u002Fa>\u003C\u002Fp>\n","Show a users last login date by creating a sortable column in your WordPress users list.",50000,184463,36,"2025-12-03T08:51:00.000Z","6.9.4",[102,49,103,22,104],"last-logged-in","last-seen","user-login-time","https:\u002F\u002Fwhenlastlogin.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwhen-last-login.1.2.3.zip","2023-03-01 00:00:00",{"slug":109,"name":110,"version":111,"author":112,"author_profile":113,"description":114,"short_description":115,"active_installs":116,"downloaded":117,"rating":118,"num_ratings":119,"last_updated":120,"tested_up_to":100,"requires_at_least":16,"requires_php":47,"tags":121,"homepage":126,"download_link":127,"security_score":128,"vuln_count":32,"unpatched_count":13,"last_vuln_date":129,"fetched_at":28},"loggedin","Loggedin – Limit Concurrent Sessions","2.0.4","Joel James","https:\u002F\u002Fprofiles.wordpress.org\u002Fjoelcj91\u002F","\u003Cp>Loggedin is a lightweight WordPress plugin that lets you easily limit the number of simultaneous active sessions a user can have. This is a crucial feature for membership sites, online courses, and other platforms where you need to prevent users from sharing their accounts.\u003C\u002Fp>\n\u003Ch3>🎁 Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Set Global Limits\u003C\u002Fstrong>: Define a maximum number of concurrent logins for all users.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Flexible Login Behavior\u003C\u002Fstrong>: Choose to either block new logins when the limit is reached or automatically log out the oldest session to allow a new one.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Prevent Account Sharing\u003C\u002Fstrong>: By limiting sessions, you can effectively stop users from sharing their login credentials with others.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Admin Control\u003C\u002Fstrong>: Easily force log out a user from the admin dashboard, giving you full control over active sessions.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Developer-Friendly\u003C\u002Fstrong>: The plugin is built with a hook-based architecture, making it highly customizable and extensible for developers.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>📦 Addons\u003C\u002Fh3>\n\u003Cp>Enhance LoggedIn’s functionality with these simple yet powerful \u003Ca href=\"https:\u002F\u002Fduckdev.com\u002Faddons\u002Floggedin\u002F\" rel=\"nofollow ugc\">add-ons\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fduckdev.com\u002Faddon\u002Flimit-per-user\u002F\" rel=\"nofollow ugc\">Limit Per User\u003C\u002Fa>\u003C\u002Fstrong>: For more granular control, the Limit Per User addon allows you to set specific login limits for individual users, overriding the global settings. This is perfect for offering different tiers of access or special privileges.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fduckdev.com\u002Faddon\u002Freal-time-logout\u002F\" rel=\"nofollow ugc\">Real-time Logout\u003C\u002Fa>\u003C\u002Fstrong>: This add-on ensures a truly seamless experience by checking for logouts in real time. When a user’s session is terminated in the background due to a login limit, the add-on will automatically refresh their page, instantly restricting access.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🐛 Bug Reports\u003C\u002Fh3>\n\u003Cp>Found a bug? We welcome your bug reports! Please report any issues directly on the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FJoel-James\u002Floggedin\u002Fissues\" rel=\"nofollow ugc\">Loggedin GitHub repository\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cem>Please note: GitHub is for bug reports and development-related issues only. For support, please use the WordPress.org support forums.\u003C\u002Fem>\u003C\u002Fp>\n","Lightweight plugin that limits an account to a specific number of concurrent logins.",8000,115897,98,110,"2026-01-02T06:30:00.000Z",[122,123,124,125,22],"limit","login","logout","sessions","https:\u002F\u002Fduckdev.com\u002Fproducts\u002Floggedin-limit-active-logins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Floggedin.2.0.4.zip",99,"2024-09-30 19:43:37",{"attackSurface":131,"codeSignals":225,"taintFlows":271,"riskAssessment":320,"analyzedAt":328},{"hooks":132,"ajaxHandlers":205,"restRoutes":220,"shortcodes":221,"cronEvents":222,"entryPointCount":45,"unprotectedCount":13},[133,139,144,148,152,156,160,164,168,172,176,180,183,187,190,193,197,201],{"type":134,"name":135,"callback":136,"priority":62,"file":137,"line":138},"action","wp_login","track_user_login","user-login-tracker.php",42,{"type":140,"name":141,"callback":142,"file":137,"line":143},"filter","manage_users_columns","add_last_login_column",43,{"type":134,"name":145,"callback":146,"priority":62,"file":137,"line":147},"manage_users_custom_column","display_last_login_column",44,{"type":140,"name":149,"callback":150,"file":137,"line":151},"manage_users_sortable_columns","make_last_login_sortable",45,{"type":134,"name":153,"callback":154,"file":137,"line":155},"pre_get_users","sort_users_by_last_login",46,{"type":134,"name":157,"callback":158,"file":137,"line":159},"admin_enqueue_scripts","enqueue_admin_assets",47,{"type":134,"name":161,"callback":162,"file":137,"line":163},"admin_menu","add_admin_menu",48,{"type":134,"name":165,"callback":166,"file":137,"line":167},"wp_dashboard_setup","add_dashboard_widget",49,{"type":134,"name":169,"callback":170,"file":137,"line":171},"admin_init","register_settings",50,{"type":140,"name":173,"callback":174,"priority":62,"file":137,"line":175},"user_row_actions","add_user_row_actions",55,{"type":134,"name":177,"callback":178,"file":137,"line":179},"admin_notices","show_migration_notice",58,{"type":134,"name":169,"callback":181,"file":137,"line":182},"check_database_table",61,{"type":140,"name":184,"callback":185,"file":137,"line":186},"posts_join","closure",440,{"type":140,"name":188,"callback":185,"file":137,"line":189},"posts_orderby",445,{"type":140,"name":191,"callback":185,"file":137,"line":192},"posts_groupby",450,{"type":134,"name":194,"callback":195,"file":137,"line":196},"plugins_loaded","ultk_init",1346,{"type":134,"name":198,"callback":199,"file":137,"line":200},"admin_footer","ultk_add_modal_html",1377,{"type":134,"name":202,"callback":203,"file":137,"line":204},"ultk_cleanup_old_data","ultk_cleanup_old_data_hook",1384,[206,212,216],{"action":207,"nopriv":208,"callback":209,"hasNonce":210,"hasCapCheck":210,"file":137,"line":211},"ultk_export_data",false,"ajax_export_data",true,51,{"action":213,"nopriv":208,"callback":214,"hasNonce":210,"hasCapCheck":210,"file":137,"line":215},"ultk_get_user_history","ajax_get_user_history",53,{"action":217,"nopriv":208,"callback":218,"hasNonce":210,"hasCapCheck":210,"file":137,"line":219},"ultk_load_more_logins","ajax_load_more_logins",54,[],[],[223],{"hook":202,"callback":202,"file":137,"line":224},112,{"dangerousFunctions":226,"sqlUsage":227,"outputEscaping":249,"fileOperations":32,"externalRequests":13,"nonceChecks":45,"capabilityChecks":269,"bundledLibraries":270},[],{"prepared":228,"raw":229,"locations":230},28,7,[231,235,238,240,242,244,246],{"file":232,"line":233,"context":234},"uninstall.php",21,"$wpdb->query() with variable interpolation",{"file":137,"line":236,"context":237},70,"$wpdb->get_var() with variable interpolation",{"file":137,"line":239,"context":237},140,{"file":137,"line":241,"context":237},961,{"file":137,"line":243,"context":237},1115,{"file":137,"line":245,"context":237},1226,{"file":137,"line":247,"context":248},1316,"$wpdb->get_results() with variable interpolation",{"escaped":143,"rawEcho":250,"locations":251},8,[252,255,257,259,261,263,265,267],{"file":137,"line":253,"context":254},551,"raw output",{"file":137,"line":256,"context":254},570,{"file":137,"line":258,"context":254},597,{"file":137,"line":260,"context":254},627,{"file":137,"line":262,"context":254},697,{"file":137,"line":264,"context":254},757,{"file":137,"line":266,"context":254},762,{"file":137,"line":268,"context":254},766,6,[],[272,298,308],{"entryPoint":273,"graph":274,"unsanitizedCount":13,"severity":297},"ajax_get_user_history (user-login-tracker.php:1136)",{"nodes":275,"edges":294},[276,281,287,289],{"id":277,"type":278,"label":279,"file":137,"line":280},"n0","source","$_POST",1143,{"id":282,"type":283,"label":284,"file":137,"line":285,"wp_function":286},"n1","sink","get_var() [SQLi]",1148,"get_var",{"id":288,"type":278,"label":279,"file":137,"line":280},"n2",{"id":290,"type":283,"label":291,"file":137,"line":292,"wp_function":293},"n3","get_results() [SQLi]",1154,"get_results",[295,296],{"from":277,"to":282,"sanitized":210},{"from":288,"to":290,"sanitized":210},"low",{"entryPoint":299,"graph":300,"unsanitizedCount":13,"severity":297},"ajax_load_more_logins (user-login-tracker.php:1206)",{"nodes":301,"edges":306},[302,304],{"id":277,"type":278,"label":279,"file":137,"line":303},1214,{"id":282,"type":283,"label":291,"file":137,"line":305,"wp_function":293},1229,[307],{"from":277,"to":282,"sanitized":210},{"entryPoint":309,"graph":310,"unsanitizedCount":13,"severity":297},"\u003Cuser-login-tracker> (user-login-tracker.php:0)",{"nodes":311,"edges":317},[312,313,314,316],{"id":277,"type":278,"label":279,"file":137,"line":280},{"id":282,"type":283,"label":284,"file":137,"line":285,"wp_function":286},{"id":288,"type":278,"label":315,"file":137,"line":280},"$_POST (x2)",{"id":290,"type":283,"label":291,"file":137,"line":292,"wp_function":293},[318,319],{"from":277,"to":282,"sanitized":210},{"from":288,"to":290,"sanitized":210},{"summary":321,"deductions":322},"The user-login-tracker v2.0.1 plugin exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of any known CVEs, critical or high-severity taint flows, and a good percentage of SQL queries using prepared statements indicate that the developers have followed secure coding practices.  Furthermore, the plugin has a controlled attack surface with all identified entry points (AJAX handlers) seemingly protected by authentication checks, and no REST API routes or shortcodes present potential vulnerabilities. The presence of nonce and capability checks further bolsters its security.\n\nWhile the plugin appears robust, there are minor areas for attention. The 15% of SQL queries not using prepared statements represent a potential, albeit small, risk of SQL injection if the input is not sufficiently sanitized elsewhere. Similarly, the 16% of outputs that are not properly escaped could lead to cross-site scripting (XSS) vulnerabilities if user-supplied data is reflected directly in the output. The single file operation also warrants a closer look to ensure it doesn't introduce any file manipulation vulnerabilities.  Overall, the plugin's history of no vulnerabilities is a very positive sign, suggesting a mature and secure development process. The low number of potential risks identified in the code analysis, combined with the lack of past vulnerabilities, suggests a low to moderate risk profile.",[323,326],{"reason":324,"points":325},"SQL queries not using prepared statements (20%)",4,{"reason":327,"points":45},"Outputs not properly escaped (16%)","2026-03-16T22:37:43.247Z",{"wat":330,"direct":343},{"assetPaths":331,"generatorPatterns":336,"scriptPaths":337,"versionParams":338},[332,333,334,335],"\u002Fwp-content\u002Fplugins\u002Fuser-login-tracker\u002Fcss\u002Fultk-admin.css","\u002Fwp-content\u002Fplugins\u002Fuser-login-tracker\u002Fjs\u002Fultk-admin.js","\u002Fwp-content\u002Fplugins\u002Fuser-login-tracker\u002Fcss\u002Fultk-dashboard-widget.css","\u002Fwp-content\u002Fplugins\u002Fuser-login-tracker\u002Fjs\u002Fultk-dashboard-widget.js",[],[333,335],[339,340,341,342],"user-login-tracker\u002Fcss\u002Fultk-admin.css?ver=","user-login-tracker\u002Fjs\u002Fultk-admin.js?ver=","user-login-tracker\u002Fcss\u002Fultk-dashboard-widget.css?ver=","user-login-tracker\u002Fjs\u002Fultk-dashboard-widget.js?ver=",{"cssClasses":344,"htmlComments":349,"htmlAttributes":353,"restEndpoints":357,"jsGlobals":360,"shortcodeOutput":362},[345,346,347,348],"ultk-login-history-table","ultk-export-button","ultk-dashboard-widget-content","ultk-user-login-history-modal",[350,351,352],"\u003C!-- User Login Tracker Admin Settings -->","\u003C!-- User Login Tracker Dashboard Widget -->","\u003C!-- User Login Tracker User History Modal -->",[354,355,356],"data-user-id","data-nonce","data-action",[358,359],"\u002Fwp-json\u002Fultk\u002Fv1\u002Fexport","\u002Fwp-json\u002Fultk\u002Fv1\u002Fuser-history",[361],"ultk_ajax_object",[]]