[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frtg4Q5-iZpRsSpdakj77RYxhgpM6ufjLkkqz514V1cU":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":21,"download_link":22,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25,"vulnerabilities":26,"developer":27,"crawl_stats":24,"alternatives":33,"analysis":131,"fingerprints":183},"user-profile-pic","User Profile Pic","1.0.0","farvehandleren","https:\u002F\u002Fprofiles.wordpress.org\u002Ffarvehandleren\u002F","\u003Cp>A plugin to add new field for user profile pic\u003C\u002Fp>\n","A plugin to add new field for user profile pic.",60,2835,0,"2017-06-23T17:11:00.000Z","4.8.28","4.0","",[19,20],"profile-pic","user-pic","http:\u002F\u002Ffodboldspilleren.dk","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuser-profile-pic.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":28,"total_installs":29,"avg_security_score":23,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},11,240,30,84,"2026-04-04T13:42:05.898Z",[34,58,80,98,115],{"slug":35,"name":36,"version":37,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":44,"num_ratings":45,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":56,"download_link":57,"security_score":44,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25},"gravatar-enhanced","Gravatar Enhanced – Avatars, Profiles, and Privacy","0.13.0","Automattic","https:\u002F\u002Fprofiles.wordpress.org\u002Fautomattic\u002F","\u003Cp>Elevate your WordPress site with Gravatar Enhanced – the plugin that simplifies digital identity and improves user engagement.\u003C\u002Fp>\n\u003Cp>Seven Ways Gravatar Enhanced Improves WordPress:\u003C\u002Fp>\n\u003Cp>✓ Privacy Protection – Automatic referrer blocking and optional IP address proxy\u003Cbr \u002F>\n✓ Accessibility Improvements – Alt-text for all avatars to support screen readers\u003Cbr \u002F>\n✓ One-Click Profile Updates – Edit Gravatar directly from the WordPress dashboard\u003Cbr \u002F>\n✓ Versatile Profile Block & Patterns – Showcase authors and team members anywhere\u003Cbr \u002F>\n✓ Comment Engagement Tools – Remind users to create avatars for better discussions\u003Cbr \u002F>\n✓ Comment Form Integration – Show Gravatar directly in the comment form\u003Cbr \u002F>\n✓ WooCommerce Integration – Personalized account pages for customers\u003C\u002Fp>\n\u003Ch3>Privacy Protection\u003C\u002Fh3>\n\u003Cp>Just by enabling the plugin, the plugin ensures that no referrer information is sent to Gravatar. The opt-in proxy service also keeps IP addresses from being exposed or logged.\u003C\u002Fp>\n\u003Ch3>Accessibility Improvements\u003C\u002Fh3>\n\u003Cp>All avatars now include alt-text, enhancing the experience for users with screen readers. Alt-text can be edited in the Gravatar Profile editor.\u003C\u002Fp>\n\u003Ch3>One-Click Profile Updates\u003C\u002Fh3>\n\u003Cp>Visit Users > Your Profile to edit your Gravatar profile directly from WordPress. Preview your hovercard and make updates with ease.\u003C\u002Fp>\n\u003Ch3>Gravatar Profile Block & Patterns\u003C\u002Fh3>\n\u003Cp>Enhance your website with our custom Gravatar profile block and patterns. Seamlessly integrate Gravatar profiles into posts, pages, or biographies to elegantly showcase team members, guest contributors, speakers, event attendees, authors, and more.\u003C\u002Fp>\n\u003Ch3>Comment Engagement Tools\u003C\u002Fh3>\n\u003Cp>Automatically remind commenters without avatars to create a Gravatar, increasing visual engagement on your blog.\u003C\u002Fp>\n\u003Ch3>Comment Form Integration\u003C\u002Fh3>\n\u003Cp>When the plugin is enabled we will show a Gravatar profile directly in the comment form, and allow the profile to be updated, so users can feel confident their details are correct, and the site shows richer comments.\u003C\u002Fp>\n\u003Ch3>WooCommerce Integration\u003C\u002Fh3>\n\u003Cp>Enhance your WooCommerce store by displaying user Gravatar avatars on the My Account page. Customers can view and update their avatars directly from their account dashboard, improving personalization and user engagement.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Seamless Integration: Automatically works if WooCommerce is installed and activated.\u003C\u002Fli>\n\u003Cli>Direct Avatar Management: Users can change their Gravatar avatars without leaving your site.\u003C\u002Fli>\n\u003Cli>Improved Personalization: Adds a personal touch to the shopping experience, fostering customer loyalty.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Automatic Installation\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Click ‘Add New Plugin’ from your WordPress plugins page and search for ‘Gravatar Enhanced’\u003C\u002Fli>\n\u003Cli>Press the ‘Install Now’ button\u003C\u002Fli>\n\u003Cli>Activate the plugin\u003C\u002Fli>\n\u003Cli>Go to the “Discussion” Settings page to enable the new features.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Manual Installation\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Download the plugin from https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgravatar-enhanced\u002F\u003C\u002Fli>\n\u003Cli>Upload and extract the plugin to your \u003Ccode>\u002Fwp-content\u002Fplugins\u002F\u003C\u002Fcode> directory\u003C\u002Fli>\n\u003Cli>Activate the plugin through the ‘Plugins’ menu in WordPress\u003C\u002Fli>\n\u003Cli>Go to the “Discussion” Settings page to enable the new features.\u003C\u002Fli>\n\u003C\u002Fol>\n","The official Gravatar plugin, featuring privacy-focused settings, easy profile updates, and customizable Gravatar Profile blocks.",90000,31841,100,3,"2025-10-07T09:31:00.000Z","6.8.5","6.6","7.4",[51,52,53,54,55],"avatar","comments","privacy","profile","profile-picture","https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fgravatar-enhanced\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravatar-enhanced.0.13.0.zip",{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":66,"downloaded":67,"rating":68,"num_ratings":69,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":17,"tags":73,"homepage":78,"download_link":79,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25},"custom-user-profile-photo","Custom User Profile Photo","0.5.3","Vincent Listrani","https:\u002F\u002Fprofiles.wordpress.org\u002Fvincentlistrani\u002F","\u003Cp>A more flexible way to attach and display a photo for a WordPress user profile.\u003C\u002Fp>\n\u003Cp>Some users might not have or want to have a gravatar account or other universal avatar account. They simply may want to use a one-time specified photo to represent them on your WordPress site. This plugin solves that use case.\u003C\u002Fp>\n\u003Cp>With the ability to upload a photo to a user profile via the WordPress Media Uploader or by specifying an external URL to an image, your users and\u002For authors can have a personalized photo specific to your website.*\u003C\u002Fp>\n\u003Cp>This plugin will add a custom set of fields to the user profile page which will allow for the use of a custom profile photo.\u003C\u002Fp>\n\u003Cp>You can add\u002Fchange\u002Fedit uploaded photos directly from the user profile page. The external option allows you to provide a URL to the external image or remove it.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>As of v0.4\u003C\u002Fstrong>, the plugin now filters the get_avatar() function found in most WordPress themes.\u003C\u002Fp>\n\u003Cp>Simply go to the users section and select a user or select “Your Profile” depending on your permission level. The new fields are added to the bottom of the user profile page. Choose which type of photo you want to use. Upload an image or add an external url. Then press the Update Profile button.\u003C\u002Fp>\n\u003Cp>If you require a customized approach or your theme does not support the get_avatar() hook, use the example below.\u003C\u002Fp>\n\u003Cp>To retrieve the photo on the front-end use the following example on your template page(s).\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\n    \u002F\u002F Retrieve The Post's Author ID\n    $user_id = get_the_author_meta('ID');\n    \u002F\u002F Set the image size. Accepts all registered images sizes and array(int, int)\n    $size = 'thumbnail';\n\n    \u002F\u002F Get the image URL using the author ID and image size params\n    $imgURL = get_cupp_meta($user_id, $size);\n\n    \u002F\u002F Print the image on the page\n    echo '\u003Cimg src=\"'. $imgURL .'\" alt=\"\">';\n?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>You will need to place the code above in each area of your theme where you wish to add and retrieve your theme’s custom avatar image. This can include but is not limited to single.php, page.php, and comments.php.\u003C\u002Fp>\n\u003Cp>*Future Updates to this plugin include allowing other roles to access this feature, a settings page to allow a custom default image and other options.\u003C\u002Fp>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>English – default, always included\u003C\u002Fli>\n\u003Cli>Dutch\u003C\u002Fli>\n\u003Cli>Hungarian\u003C\u002Fli>\n\u003Cli>Spanish\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Thanks to \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Ffinalwebsites\u002F\" rel=\"nofollow ugc\">Olaf Lederer\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fharkalygergo\" rel=\"nofollow ugc\">Harkály Gergő\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fsqhendr\u002F\" rel=\"nofollow ugc\">sqhendr\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fsomtijds\u002F\" rel=\"nofollow ugc\">SOMTIJDS\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.closemarketing.es\" rel=\"nofollow ugc\">David Pérez\u003C\u002Fa>\u003C\u002Fp>\n","Add a customized User Profile photo to a WordPress user profile.",5000,150231,88,26,"2017-05-24T05:25:00.000Z","4.7.32","3.6.1",[74,75,76,55,77],"custom-profile-photo","custom-profile-picture","profile-photo","user-profile","http:\u002F\u002Fvincentlistrani.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-user-profile-photo.0.5.3.zip",{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":88,"downloaded":89,"rating":13,"num_ratings":13,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":17,"tags":93,"homepage":96,"download_link":97,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25},"ap-gravatars","AP Gravatars","1.0","Josh Maxwell","https:\u002F\u002Fprofiles.wordpress.org\u002Fhornetok\u002F","\u003Cp>The \u003Ca href=\"http:\u002F\u002Fardentpixels.com\u002F\" rel=\"nofollow ugc\">Ardent Pixels’\u003C\u002Fa> \u003Cem>Gravatar\u003C\u002Fem> plugin adds the gravatar photo associated with the user’s email to their \u003Cstrong>profile page\u003C\u002Fstrong>. If they do not have a gravatar account, it displays a link to create one. And is \u003Cstrong>MultiSite compatable!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin does \u003Cstrong>not\u003C\u002Fstrong> add gravatar support to your theme.\u003C\u002Fp>\n\u003Ch3>Notes\u003C\u002Fh3>\n\u003Cp>= Donations =\u003Cbr \u002F>\nFeel free to \u003Ca href=\"http:\u002F\u002Fardentpixels.com\u002Fjosh\u002Fcontact\u002F\" rel=\"nofollow ugc\">donate\u003C\u002Fa> if you liked this plugin.\u003C\u002Fp>\n","A simple plugin that adds the gravatar photo associated with the user's email to their profile page... MultiSite compatable!",200,11617,"2012-04-25T00:59:00.000Z","3.3.2","2.0",[51,94,54,55,95],"gravatar","wpms","http:\u002F\u002Fardentpixels.com\u002Fjosh\u002Fwordpress\u002Fplugins\u002Fap-gravatars","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fap-gravatars.zip",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":88,"downloaded":106,"rating":44,"num_ratings":107,"last_updated":108,"tested_up_to":47,"requires_at_least":109,"requires_php":49,"tags":110,"homepage":113,"download_link":114,"security_score":44,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25},"wpmake-advance-user-avatar","Advanced User Avatar | Custom Profile Picture Uploader for WordPress, WooCommerce, and BuddyPress","1.1.2","wpmakedev","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpmakedev\u002F","\u003Cp>\u003Cstrong>Advanced User Avatar – The Ultimate Plugin for Custom Profile Picture Uploads in WordPress, WooCommerce, and BuddyPress\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Are you tired of the default Gravatar system on WordPress, where users must create a Gravatar account to upload their profile picture? Many users find this a hassle and end up with a generic avatar. This can result in a less personalized user experience and hinder site engagement. With the \u003Cstrong>Advanced User Avatar\u003C\u002Fstrong> plugin, you can easily allow users to upload their own custom profile picture (avatar) directly from their device.\u003C\u002Fp>\n\u003Cp>The \u003Cstrong>Advanced User Avatar\u003C\u002Fstrong> plugin solves plugin eliminates the need for a Gravatar account by offering a seamless solution to upload, crop, and display avatars on your WordPress site. Whether it’s for a personal photo, logo, or any other image, this plugin gives users full control over their avatar. You can easily add an avatar uploader field anywhere on your site using a simple shortcode or Gutenberg block.\u003C\u002Fp>\n\u003Cp>The plugin also includes useful features like file type and size validation, so users won’t upload unsupported or oversized images. Plus, users can crop their profile picture to make sure it fits perfectly as their avatar. This gives them more flexibility and control over their profile picture’s appearance. By making it easy for users to upload their own avatar and customize it, the \u003Cstrong>Advanced User Avatar\u003C\u002Fstrong> plugin creates a more personalized and engaging experience for everyone on your site.\u003C\u002Fp>\n\u003Cp>Plus, it’s not just about uploads; the plugin integrates perfectly with WooCommerce and BuddyPress, allowing you to display avatars in My Account pages, member profiles, and more, creating a fully personalized experience across your WordPress site.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Simple Shortcode Support:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>[wpmake_advance_user_avatar]\u003C\u002Fcode>: Display the uploaded avatar anywhere on your site.\u003C\u002Fli>\n\u003Cli>\u003Ccode>[wpmake_advance_user_avatar_upload]\u003C\u002Fcode>:  Add a profile picture upload form, allowing users to upload or remove their avatar image.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Gutenberg Block Support:\u003C\u002Fstrong> Seamlessly add the avatar upload feature using the WordPress block editor.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>File Type Validation:\u003C\u002Fstrong>  Admins can choose which file types (like JPG, JPEG, PNG) are allowed for profile pictures. This stops users from uploading unsupported file types, ensuring only valid images are used for avatars.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Max File Size Limit:\u003C\u002Fstrong> Admins can set a maximum file size for uploaded avatars to keep the site running smoothly. This prevents slow loading times by stopping oversized images from being uploaded.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Image Cropping Interface:\u003C\u002Fstrong> Users can crop their uploaded profile picture to ensure it fits perfectly within the avatar space, providing more flexibility in how avatars are displayed.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Webcam Capture:\u003C\u002Fstrong>  Users can capture a profile picture directly from their webcam and crop it as needed, without the need to upload an external image file.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Different size images:\u003C\u002Fstrong> Automatically generates different image sizes for the uploaded avatar to ensure it displays correctly across various parts of your site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Uploaded Image Size:\u003C\u002Fstrong> Admins can set a specific width and height for uploaded images to maintain uniformity across the site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>WooCommerce Integration:\u003C\u002Fstrong> Display avatars in the WooCommerce My Account Dashboard and add an avatar upload option to the WooCommerce My Account’s Account Details page.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>BuddyPress Integration:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Replace the default BuddyPress Avatar Uploader with the plugin’s avatar upload functionality.\u003C\u002Fli>\n\u003Cli>Seamlessly display custom user avatars on BuddyPress member pages, giving your community a more personalized experience.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How to Use the Plugin\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>Install the Plugin\u003C\u002Fstrong>:\u003Cbr \u002F>\nGo to \u003Cstrong>Users -> User Avatar\u003C\u002Fstrong> in your WordPress dashboard.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Configure Settings\u003C\u002Fstrong>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Store avatar in different thumbnail sizes\u003C\u002Fstrong>: Saves the avatar in different sizes to ensure they display perfectly wherever they appear on your site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Max Avatar Size Allowed\u003C\u002Fstrong>:  Set a limit on how large uploaded images can be (e.g., 20KB). Users can’t upload files over this limit.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Allowed File Types\u003C\u002Fstrong>: Choose which image file types (JPG, JPEG, PNG, GIF) are allowed for profile pictures.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Capture Picture\u003C\u002Fstrong>: Allow users to capture a new profile picture directly through their webcam.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Cropping Interface\u003C\u002Fstrong>: Enable the cropping feature, allowing users to adjust their avatar for the perfect fit.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Uploaded Image Size\u003C\u002Fstrong>: Set the width and height of uploaded images to maintain a consistent look across the site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Integrations\u003C\u002Fstrong>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>WooCommerce Integration\u003C\u002Fstrong>: Display avatars on WooCommerce My Account pages and integrate the avatar uploader into the account details section.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>BuddyPress Integration\u003C\u002Fstrong>:  Replace the default BuddyPress avatar uploader and display avatars on member profiles..\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n","Adds an avatar upload field through a simple shortcode or block to let your site users upload a custom profile picture (avatar) directly from their de …",2251,5,"2025-11-15T10:10:00.000Z","5.5",[51,111,94,55,112],"custom-avatar","user-avatar","https:\u002F\u002Fwww.wpmake.net\u002Fuser-avatar-demo\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpmake-advance-user-avatar.1.1.2.zip",{"slug":55,"name":116,"version":83,"author":117,"author_profile":118,"description":119,"short_description":120,"active_installs":121,"downloaded":122,"rating":123,"num_ratings":45,"last_updated":124,"tested_up_to":125,"requires_at_least":126,"requires_php":17,"tags":127,"homepage":17,"download_link":130,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25},"Profile Picture","Arul Jayaraj","https:\u002F\u002Fprofiles.wordpress.org\u002Faruljayarajs\u002F","\u003Cp>Users can set his profile picture from admin end and as well as Front End.\u003C\u002Fp>\n\u003Cp>Admin End it would come automatically based on the user role, who has \u003Ccode>upload_files\u003C\u002Fcode> capability, otherwise we need to assign capability to them.\u003C\u002Fp>\n\u003Cp>In Front End when we use \u003Ccode>\u003C?php do_action('edit_user_profile',$current_user); ?>\u003C\u002Fcode> on edit profile section, it would be placed on additonal user profile fields.\u003C\u002Fp>\n\u003Cp>*Future Updates: Display current user images alone, short code and migrate withsocial media profile pictures.\u003C\u002Fp>\n","Set a profile picture as your wish using media upload.",80,8715,86,"2016-06-03T02:30:00.000Z","4.5.33","3.0",[75,76,55,128,129],"user-photo","user-profile-picture","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fprofile-picture.1.0.zip",{"attackSurface":132,"codeSignals":163,"taintFlows":173,"riskAssessment":174,"analyzedAt":182},{"hooks":133,"ajaxHandlers":154,"restRoutes":155,"shortcodes":156,"cronEvents":161,"entryPointCount":162,"unprotectedCount":13},[134,140,143,147,151],{"type":135,"name":136,"callback":137,"file":138,"line":139},"action","show_user_profile","upp_additional_user_fields","main.php",49,{"type":135,"name":141,"callback":137,"file":138,"line":142},"edit_user_profile",50,{"type":135,"name":144,"callback":145,"file":138,"line":146},"admin_footer","upp_wpdocs_scripts_method_add_js",52,{"type":135,"name":148,"callback":149,"file":138,"line":150},"personal_options_update","upp_save_additional_user_meta",67,{"type":135,"name":152,"callback":149,"file":138,"line":153},"edit_user_profile_update",68,[],[],[157],{"tag":158,"callback":159,"file":138,"line":160},"upp_user_pic","upp_dup_fn",95,[],1,{"dangerousFunctions":164,"sqlUsage":165,"outputEscaping":167,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":162,"bundledLibraries":172},[],{"prepared":13,"raw":13,"locations":166},[],{"escaped":45,"rawEcho":162,"locations":168},[169],{"file":138,"line":170,"context":171},39,"raw output",[],[],{"summary":175,"deductions":176},"The \"user-profile-pic\" plugin v1.0.0 appears to have a generally good security posture based on the provided static analysis. There are no identified dangerous functions, SQL queries are exclusively using prepared statements, and there are no file operations or external HTTP requests. The presence of capability checks further strengthens its security. However, a significant concern is the complete absence of nonce checks, especially given the plugin has entry points (shortcodes) that could potentially be manipulated. While the taint analysis found no issues, this could be due to the limited scope of the analysis or the absence of complex data flows.",[177,180],{"reason":178,"points":179},"Missing nonce checks on entry points",7,{"reason":181,"points":45},"75% of output escaping is good, but 25% is not.","2026-03-16T21:50:16.296Z",{"wat":184,"direct":191},{"assetPaths":185,"generatorPatterns":187,"scriptPaths":188,"versionParams":189},[186],"\u002Fwp-content\u002Fplugins\u002Fuser-profile-pic\u002Fuser-profile-pic.js",[],[186],[190],"user-profile-pic\u002Fuser-profile-pic.js?ver=",{"cssClasses":192,"htmlComments":195,"htmlAttributes":199,"restEndpoints":207,"jsGlobals":208,"shortcodeOutput":211},[193,194],"additional-user-image","regular-text",[196,197,198],"\u003C!-- Outputs the image after save -->","\u003C!-- Outputs the text field and displays the URL of the image retrieved by the media uploader -->","\u003C!-- Outputs the save button -->",[200,201,202,203,204,205,206],"id=\"upp_user_meta_image\"","id=\"user_image_1\"","id=\"upload_image_button\"","class=\"additional-user-image\"","name=\"upp_user_meta_image\"","value=\"Upload Image\"","id=\"uploadimage\"",[],[209,210],"window.send_to_editor","jQuery",[212],"esc_url( get_the_author_meta( 'upp_user_meta_image', $userID ) )"]