[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqhZYdeYiC-yjZ9TDtYI4EjK8ELVLBsSiZtcm-skZQW0":3,"$fJLFHVh5qXsnd3QBCrz5asW3iIOIA-7k_-PdlxVr0Ra0":311,"$foURsgIfxoesGcAM3Stga0iXtZPCB9U48G_W_RdiCVkc":316},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"discovery_status":31,"vulnerabilities":32,"developer":33,"crawl_stats":29,"alternatives":41,"analysis":137,"fingerprints":286},"userswp-recaptcha","UsersWP – ReCaptcha","1.3.22","Stiofan","https:\u002F\u002Fprofiles.wordpress.org\u002Fstiofansisland\u002F","\u003Cp>ReCaptcha addon for \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fuserswp\u002F\" rel=\"ugc\">UsersWP\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>The UsersWP ReCaptcha plugin allows you to implement a super security captcha into forms like\u003Cbr \u002F>\nregistration, login forms. UsersWP Re-Captcha protects your site against spam, malicious registrations\u003Cbr \u002F>\nand other forms of attacks where computers try to disguise themselves as a human.\u003C\u002Fp>\n\u003Cp>UsersWP Re-Captcha provides some of the smartest anti-spam security by protecting your site against spam and\u003Cbr \u002F>\nmalicious registrations available today for WordPress.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.google.com\u002Frecaptcha\u002F\" rel=\"nofollow ugc\">Learn how reCAPTCHA works\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Requirements\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>You need the Google reCAPTCHA keys from \u003Ca href=\"https:\u002F\u002Fwww.google.com\u002Frecaptcha\u002Fadmin#whyrecaptcha\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n","ReCaptcha addon for UsersWP.",3000,124279,90,2,"2025-12-03T07:08:00.000Z","6.9.4","6.1","",[20,21,22,23,24],"account","frontend","login","recaptcha","register","https:\u002F\u002Fuserswp.io\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.22.zip",100,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":34,"display_name":7,"profile_url":8,"plugin_count":35,"total_installs":36,"avg_security_score":37,"avg_patch_time_days":38,"trust_score":39,"computed_at":40},"stiofansisland",12,88900,98,160,78,"2026-05-19T21:16:05.519Z",[42,66,83,105,117],{"slug":43,"name":44,"version":45,"author":46,"author_profile":47,"description":48,"short_description":49,"active_installs":50,"downloaded":51,"rating":37,"num_ratings":52,"last_updated":53,"tested_up_to":54,"requires_at_least":55,"requires_php":18,"tags":56,"homepage":61,"download_link":62,"security_score":63,"vuln_count":64,"unpatched_count":28,"last_vuln_date":65,"fetched_at":30},"frontend-dashboard","Frontend Dashboard","2.2.10","M A Vinoth Kumar","https:\u002F\u002Fprofiles.wordpress.org\u002Fvinoth06\u002F","\u003Ch4>Frontend Dashboard Designed and Developed with WordPress Coding Standards\u003C\u002Fh4>\n\u003Cp>Frontend Dashboard is bundled with the huge list of custom features which can easily customise the User profile, Posts, Login, Register, Custom roles on the custom front page.\u003C\u002Fp>\n\u003Col>\n\u003Cli>Custom Login Page.\u003C\u002Fli>\n\u003Cli>Custom Register Page.\u003C\u002Fli>\n\u003Cli>Custom Forgot Password.\u003C\u002Fli>\n\u003Cli>Custom Redirect URL for before and after Login, Register, Logout.\u003C\u002Fli>\n\u003Cli>Restrict WP Admin area for role based users.\u003C\u002Fli>\n\u003Cli>Add\u002FDelete custom User Roles.\u003C\u002Fli>\n\u003Cli>Customise the Frontend Dashboard with your theme matching colors.\u003C\u002Fli>\n\u003Cli>Enable\u002FDisable the Frontend Dashboard scripts and styles on both frontend and admin.\u003C\u002Fli>\n\u003Cli>Add Frontend Dashboard menus for User based roles.\u003C\u002Fli>\n\u003Cli>Add any number of custom user field.\u003C\u002Fli>\n\u003Cli>Add any number of post\u002Fcustom post field.\u003C\u002Fli>\n\u003Cli>Each custom fields can be configured based on user roles.\u003C\u002Fli>\n\u003Cli>Allow\u002FDisallow to upload files in Frontend Dashboard based on User Role.\u003C\u002Fli>\n\u003Cli>Show custom user fields on Register page.\u003C\u002Fli>\n\u003Cli>Add\u002FEdit\u002FDelete Post\u002FCustom post in Frontend Dashboard based on User Role.\u003C\u002Fli>\n\u003Cli>Show user role based custom profile page.\u003C\u002Fli>\n\u003Cli>Manage custom Post type and Taxonomies.\u003C\u002Fli>\n\u003Cli>Customize templates.\u003C\u002Fli>\n\u003Cli>Restrict illegal username on Registration.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Frontend Dashboard Plugins List\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fplugin\u002Ffrontend-dashboard-user-management\" rel=\"nofollow ugc\">Frontend Dashboard User Management (Pro) \u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fplugin\u002Ffrontend-dashboard-social-connect\" rel=\"nofollow ugc\">Frontend Dashboard Social Connect (Pro) \u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fplugin\u002Ffrontend-dashboard-pages\" rel=\"nofollow ugc\">Frontend Dashboard Pages\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fplugin\u002Ffrontend-dashboard-extra\" rel=\"nofollow ugc\">Frontend Dashboard Extra\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fplugin\u002Ffrontend-dashboard-captcha\" rel=\"nofollow ugc\">Frontend Dashboard Captcha\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fplugin\u002Ffrontend-dashboard-templates\" rel=\"nofollow ugc\">Frontend Dashboard Templates\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fplugin\u002Ffrontend-dashboard-social-chat\" rel=\"nofollow ugc\">Frontend Dashboard Social Chat\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fplugin\u002Ffrontend-dashboard-notification\" rel=\"nofollow ugc\">Frontend Dashboard Notification\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fplugin\u002Ffrontend-dashboard-custom-post-and-taxonomies\" rel=\"nofollow ugc\">Frontend Dashboard Custom Post and Taxonomies\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Videos\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>How to Setup Frontend Dashboard and its Add-on\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FlyoUkwndoRA?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>For more video : \u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fcategory\u002Fname\u002Ffrontend-dashboard\" rel=\"nofollow ugc\">Frontend Dashboard\u003C\u002Fa>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fpost\u002Fhow-to-setup-payment-and-membership-pro\" rel=\"nofollow ugc\">How to setup Membership and Payment (PRO)\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fpost\u002Fhow-to-show-custom-post-field-in-frontend-post\" rel=\"nofollow ugc\">How to show custom post field in Frontend Post\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fpost\u002Fhow-to-translate-frontend-dashboard\" rel=\"nofollow ugc\">How to Translate Frontend Dashboard\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fpost\u002Fhow-to-create-custom-login-for-frontend-dashboard-wordpress-plugin\" rel=\"nofollow ugc\">How to create custom login for Frontend Dashboard\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fpost\u002Fhow-to-create-dashboard-for-frontend-dashboard-wordpress-plugin\" rel=\"nofollow ugc\">How to create Dashboard for Frontend Dashboard\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fpost\u002Fhow-to-set-redirect-on-login-for-frontend-dashboard-wordpress-plugin\" rel=\"nofollow ugc\">How to set Redirect on Login for Frontend Dashboard\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fpost\u002Fhow-to-set-widget-for-frontend-dashboard-wordpress-plugin\" rel=\"nofollow ugc\">How to set Widget for Frontend Dashboard\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fpost\u002Fhow-to-create-custom-user-role-in-frontend-dashboard-wordpress-plugin\" rel=\"nofollow ugc\">How to Create Custom User Role in Frontend Dashboard\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fpost\u002Fhow-to-create-a-page-for-users-based-on-their-user-role\" rel=\"nofollow ugc\">How to create a page for Users, based on their User Role\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fpost\u002Fhow-new-user-can-select-user-role-on-registration\" rel=\"nofollow ugc\">How new user can select user role on registration\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fpost\u002Fhow-to-customise-the-layout-colours-in-frontend-dashboard\" rel=\"nofollow ugc\">How to customise the layout colours in Frontend Dashboard\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fpost\u002Fhow-to-manage-post-options-in-frontend-dashboard\" rel=\"nofollow ugc\">How to manage post options in Frontend Dashboard\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fpost\u002Fhow-to-create-custom-menu-in-frontend-dashboard\" rel=\"nofollow ugc\">How to create custom menu in Frontend Dashboard\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For more video : \u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fcategory\u002Fname\u002Ffrontend-dashboard\" rel=\"nofollow ugc\">Frontend Dashboard\u003C\u002Fa>\u003C\u002Fp>\n","Frontend Dashboard is bundled with huge list of custom features which can easily customise the User profile, Posts, Login, Register, Custom roles.",500,145025,134,"2025-07-07T15:58:00.000Z","6.8.5","5.8.3",[57,58,59,60,43],"custom-login","custom-profile","custom-register","dashboard","https:\u002F\u002Fbuffercode.com\u002Fplugin\u002Ffrontend-dashboard","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffrontend-dashboard.2.2.10.zip",87,8,"2025-06-05 00:00:00",{"slug":67,"name":68,"version":69,"author":46,"author_profile":47,"description":70,"short_description":71,"active_installs":13,"downloaded":72,"rating":27,"num_ratings":73,"last_updated":74,"tested_up_to":75,"requires_at_least":76,"requires_php":18,"tags":77,"homepage":80,"download_link":81,"security_score":82,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"frontend-dashboard-captcha","Frontend Dashboard Captcha","1.4","\u003Cp>Frontend Dashboard Captcha WordPress plugin is a supportive plugin for Frontend Dashboard to protect against spam in Login and Register form.\u003C\u002Fp>\n\u003Cp>=Login=\u003C\u002Fp>\n\u003Cp>Stop Brute force attack on login page using the Captcha\u003C\u002Fp>\n\u003Cp>=Register=\u003C\u002Fp>\n\u003Cp>Stop botnet registration on register page using the Captcha\u003C\u002Fp>\n\u003Cp>=Google Captcha=\u003C\u002Fp>\n\u003Cp>Uses Google captcha through their API service.\u003C\u002Fp>\n","Frontend Dashboard Captcha WordPress plugin is a supportive plugin for Frontend Dashboard to protect against spam in Login and Register form.",78769,1,"2020-05-18T16:53:00.000Z","5.4.19","4.6",[60,67,78,79],"login-captcha","register-captcha","https:\u002F\u002Fbuffercode.com\u002Fplugin\u002Ffrontend-dashboard-captcha","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffrontend-dashboard-captcha.1.4.1.zip",85,{"slug":84,"name":85,"version":86,"author":87,"author_profile":88,"description":89,"short_description":90,"active_installs":91,"downloaded":92,"rating":28,"num_ratings":28,"last_updated":93,"tested_up_to":54,"requires_at_least":94,"requires_php":95,"tags":96,"homepage":101,"download_link":102,"security_score":103,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":104},"addonify-recaptcha-for-edd","Addonify – reCaptcha For EDD","1.0.14","Addonify","https:\u002F\u002Fprofiles.wordpress.org\u002Faddonify\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Faddonify.com\u002F\" rel=\"nofollow ugc\">Addonify reCAPTCHA For EDD\u003C\u002Fa> is a simple plugin that adds Google reCaptcha in Easy Digital Downloads login and registration forms. Enable reCaptcha from Dashboard > EDD Setting > reCaptcha.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>FEATURES:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>✅ Add Google reCaptcha v2 in EDD login forms.\u003Cbr \u002F>\n✅ Add Google reCaptcha v2 in EDD register forms.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>KNOWN LIMITATIONS:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>❌ We have not tested this plugin in WP Multisite.\u003Cbr \u002F>\n❌ EDD login submit button is clickable even without passing reCaptcha validation.\u003Cbr \u002F>\n❌ EDD registration submit button is clickable even without passing reCaptcha validation.\u003Cbr \u002F>\n❌ Only supports Google reCaptcha v2 no-robot checkbox.\u003C\u002Fp>\n","Addonify reCAPTCHA for EDD is a simple plugin that adds Google reCaptcha in Easy Digital Downloads login and registration forms.",60,4523,"2025-03-25T05:31:00.000Z","5.0","7.4.0",[97,98,99,23,100],"edd-recaptcha","google-recaptcha","login-recaptcha","register-recaptcha","https:\u002F\u002Faddonify.com\u002Fdownloads\u002Frecaptcha-for-edd","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faddonify-recaptcha-for-edd.1.0.14.zip",92,"2026-04-06T09:54:40.288Z",{"slug":106,"name":107,"version":108,"author":46,"author_profile":47,"description":109,"short_description":110,"active_installs":91,"downloaded":111,"rating":28,"num_ratings":28,"last_updated":112,"tested_up_to":75,"requires_at_least":76,"requires_php":18,"tags":113,"homepage":115,"download_link":116,"security_score":82,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"frontend-dashboard-notification","Frontend Dashboard Notification","1.1","\u003Cblockquote>\n\u003Ch4>Notice\u003C\u002Fh4>\n\u003Cp>This is an Add-on plugin of \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ffrontend-dashboard\u002F\" rel=\"ugc\">Frontend Dashboard\u003C\u002Fa>, So please install \u003Ca href=\"https:\u002F\u002Fbuffercode.com\u002Fplugin\u002Ffrontend-dashboard\" rel=\"nofollow ugc\">Frontend Dashboard\u003C\u002Fa> to use this plugin\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>Frontend Dashboard Notification is an add-on for Frontend Dashboard WordPress plugin which allows user to show notification in Frontend Dashboard page. There are six notification slots where users can show content, image, slider, post or gutenberg blocks. The six notification slots can be restricted to users by their user role or dashboard menu or notification slot.\u003C\u002Fp>\n","Frontend Dashboard Notification is an add-on for Frontend Dashboard WordPress plugin which allows user to show notification in Frontend Dashboard page …",72020,"2020-05-27T03:56:00.000Z",[57,59,114,60,43],"custom-roles","https:\u002F\u002Fbuffercode.com\u002Fplugin\u002Ffrontend-dashboard-notification","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffrontend-dashboard-notification.1.1.zip",{"slug":118,"name":119,"version":120,"author":121,"author_profile":122,"description":123,"short_description":124,"active_installs":91,"downloaded":125,"rating":27,"num_ratings":14,"last_updated":126,"tested_up_to":127,"requires_at_least":128,"requires_php":18,"tags":129,"homepage":135,"download_link":136,"security_score":82,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-ajax-login-and-register","WP AJAX Login and Register","1.3","newbiesup","https:\u002F\u002Fprofiles.wordpress.org\u002Fnewbiesup\u002F","\u003Cp>This plugin will automatically add a login\u002Fregister link to your ‘primary’ menu location. A nice looking form will popup when the link is clicked.\u003Cbr \u002F>\nShortcode is also available for use on any post or widget with ‘[wp-ajax-login text=”Login\u002FRegister”]’ and ‘text’ attribute is the link text.\u003C\u002Fp>\n\u003Cp>For more information, please visit \u003Ca href=\"http:\u002F\u002Fptheme.com\u002Fitem\u002Fwp-ajax-login\u002F\" title=\"ptheme\" rel=\"nofollow ugc\">ptheme.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n","Easy to use frontend AJAX Login and Register plugin with no settings required.",8987,"2016-04-25T14:52:00.000Z","4.5.33","3.0.1",[130,131,132,133,134],"ajax","ajax-login","ajax-register","frontend-login","login-form","http:\u002F\u002Fptheme.com\u002Fitem\u002Fwp-ajax-login","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-ajax-login-and-register.1.3.zip",{"attackSurface":138,"codeSignals":215,"taintFlows":244,"riskAssessment":272,"analyzedAt":285},{"hooks":139,"ajaxHandlers":211,"restRoutes":212,"shortcodes":213,"cronEvents":214,"entryPointCount":28,"unprotectedCount":28},[140,145,150,154,160,164,168,171,175,179,183,187,191,195,199,203,207],{"type":141,"name":142,"callback":143,"file":144,"line":14},"filter","uwp_get_sections_uwp-addons","uwp_recaptcha_addons_get_sections","admin\\settings.php",{"type":141,"name":146,"callback":147,"priority":148,"file":144,"line":149},"uwp_get_settings_uwp-addons","uwp_recaptcha_addons_get_settings",10,11,{"type":141,"name":151,"callback":152,"file":144,"line":153},"uwp_get_settings_uninstall","uwp_recaptcha_settings_uninstall",166,{"type":155,"name":156,"callback":157,"file":158,"line":159},"action","wp_enqueue_scripts","enqueue_scripts","includes\\class-uwp-recaptcha.php",40,{"type":155,"name":161,"callback":162,"file":158,"line":163},"login_enqueue_scripts","admin_enqueue_scripts",41,{"type":155,"name":165,"callback":166,"file":158,"line":167},"wp_authenticate_user","login_authenticate",42,{"type":155,"name":169,"callback":169,"file":158,"line":170},"registration_errors",43,{"type":155,"name":172,"callback":173,"file":158,"line":174},"init","load_textdomain",44,{"type":155,"name":176,"callback":177,"priority":148,"file":158,"line":178},"uwp_template_fields","add_captcha_for_uwp_forms",45,{"type":155,"name":180,"callback":181,"priority":148,"file":158,"line":182},"uwp_validate_result","validate_recaptcha",46,{"type":155,"name":184,"callback":185,"priority":148,"file":158,"line":186},"register_form","add_recaptcha_wp_register_form",47,{"type":155,"name":188,"callback":189,"priority":148,"file":158,"line":190},"login_form","add_recaptcha_wp_login_form",48,{"type":155,"name":192,"callback":193,"file":158,"line":194},"uwp_options_for_translation","uwp_add_options_for_translation",49,{"type":155,"name":196,"callback":197,"file":158,"line":198},"admin_init","activation_redirect",52,{"type":155,"name":200,"callback":201,"file":158,"line":202},"admin_notices","recaptcha_key_notices",53,{"type":155,"name":200,"callback":204,"file":205,"line":206},"uwp_recaptcha_requires_userswp_plugin","uwp-recaptcha.php",36,{"type":155,"name":208,"callback":209,"file":205,"line":210},"plugins_loaded","init_uwp_recaptcha",80,[],[],[],[],{"dangerousFunctions":216,"sqlUsage":217,"outputEscaping":219,"fileOperations":28,"externalRequests":73,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":243},[],{"prepared":28,"raw":28,"locations":218},[],{"escaped":220,"rawEcho":35,"locations":221},14,[222,225,227,229,232,234,235,236,237,238,240,241],{"file":158,"line":223,"context":224},209,"raw output",{"file":158,"line":226,"context":224},211,{"file":158,"line":228,"context":224},213,{"file":230,"line":231,"context":224},"includes\\functions.php",59,{"file":230,"line":233,"context":224},63,{"file":230,"line":63,"context":224},{"file":230,"line":63,"context":224},{"file":230,"line":63,"context":224},{"file":230,"line":37,"context":224},{"file":230,"line":239,"context":224},130,{"file":230,"line":38,"context":224},{"file":205,"line":242,"context":224},34,[],[245,264],{"entryPoint":246,"graph":247,"unsanitizedCount":73,"severity":263},"uwp_recaptcha_get_response (includes\\functions.php:284)",{"nodes":248,"edges":260},[249,254],{"id":250,"type":251,"label":252,"file":230,"line":253},"n0","source","$_POST",292,{"id":255,"type":256,"label":257,"file":230,"line":258,"wp_function":259},"n1","sink","wp_remote_post() [SSRF]",299,"wp_remote_post",[261],{"from":250,"to":255,"sanitized":262},false,"medium",{"entryPoint":265,"graph":266,"unsanitizedCount":73,"severity":263},"\u003Cfunctions> (includes\\functions.php:0)",{"nodes":267,"edges":270},[268,269],{"id":250,"type":251,"label":252,"file":230,"line":253},{"id":255,"type":256,"label":257,"file":230,"line":258,"wp_function":259},[271],{"from":250,"to":255,"sanitized":262},{"summary":273,"deductions":274},"The userswp-recaptcha plugin v1.3.22 exhibits a mixed security posture. On the positive side, the plugin demonstrates good practices in its database interactions, with all SQL queries utilizing prepared statements, and there are no recorded historical vulnerabilities (CVEs).  The static analysis also shows no dangerous functions or file operations, and a limited external HTTP request.  However, concerns arise from the output escaping, where only 54% of outputs are properly escaped, leaving a significant portion potentially vulnerable to cross-site scripting (XSS) attacks.\n\nFurther analysis reveals a critical weakness in the taint analysis.  Despite a low total number of flows analyzed, both identified flows have unsanitized paths, indicating a potential for data injection or manipulation. The absence of nonce checks and capability checks on any entry points (AJAX, REST API, shortcodes, cron events) is a significant concern, as it implies that any user, regardless of their role or permissions, could potentially interact with these points and trigger unintended actions or expose sensitive information.\n\nWhile the plugin has a clean vulnerability history, this should not be taken as a guarantee of future security, especially given the identified issues in output escaping and taint analysis. The lack of authentication checks on entry points is a fundamental security flaw that needs immediate attention. Overall, the plugin has some strong security foundations but suffers from critical omissions in input sanitization and output escaping, and a lack of proper access control for its entry points.",[275,278,281,283],{"reason":276,"points":277},"Unsanitized taint flows detected",15,{"reason":279,"points":280},"Insufficient output escaping",6,{"reason":282,"points":148},"No capability checks on entry points",{"reason":284,"points":148},"No nonce checks on entry points","2026-03-16T18:16:33.886Z",{"wat":287,"direct":298},{"assetPaths":288,"generatorPatterns":291,"scriptPaths":292,"versionParams":295},[289,290],"\u002Fwp-content\u002Fplugins\u002Fuserswp-recaptcha\u002Fassets\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fuserswp-recaptcha\u002Fassets\u002Fjs\u002Ffrontend.js",[],[293,294],"https:\u002F\u002Fwww.recaptcha.net\u002Frecaptcha\u002Fapi.js?onload=uwp_init_recaptcha&hl=","https:\u002F\u002Fwww.recaptcha.net\u002Frecaptcha\u002Fapi.js?render=",[296,297],"userswp-recaptcha\u002Fassets\u002Fcss\u002Fstyle.css?ver=","userswp-recaptcha\u002Fassets\u002Fjs\u002Ffrontend.js?ver=",{"cssClasses":299,"htmlComments":303,"htmlAttributes":304,"restEndpoints":306,"jsGlobals":307,"shortcodeOutput":310},[300,301,302],"uwp-recaptcha-form","uwp-captcha-render","g-recaptcha",[],[305],"data-sitekey",[],[308,309],"uwp_recaptcha_data","uwp_init_recaptcha",[],{"error":312,"url":313,"statusCode":314,"statusMessage":315,"message":315},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fuserswp-recaptcha\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":317,"versions":318},21,[319,324,331,338,345,352,359,366,373,380,387,394,401,408,415,422,429,436,443,450,457],{"version":6,"download_url":26,"svn_tag_url":320,"released_at":29,"has_diff":262,"diff_files_changed":321,"diff_lines":29,"trac_diff_url":322,"vulnerabilities":323,"is_current":312},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.22\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.21&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.22",[],{"version":325,"download_url":326,"svn_tag_url":327,"released_at":29,"has_diff":262,"diff_files_changed":328,"diff_lines":29,"trac_diff_url":329,"vulnerabilities":330,"is_current":262},"1.3.21","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.21.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.21\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.20&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.21",[],{"version":332,"download_url":333,"svn_tag_url":334,"released_at":29,"has_diff":262,"diff_files_changed":335,"diff_lines":29,"trac_diff_url":336,"vulnerabilities":337,"is_current":262},"1.3.20","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.20.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.20\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.19&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.20",[],{"version":339,"download_url":340,"svn_tag_url":341,"released_at":29,"has_diff":262,"diff_files_changed":342,"diff_lines":29,"trac_diff_url":343,"vulnerabilities":344,"is_current":262},"1.3.19","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.19.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.19\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.18&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.19",[],{"version":346,"download_url":347,"svn_tag_url":348,"released_at":29,"has_diff":262,"diff_files_changed":349,"diff_lines":29,"trac_diff_url":350,"vulnerabilities":351,"is_current":262},"1.3.18","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.18.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.18\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.17&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.18",[],{"version":353,"download_url":354,"svn_tag_url":355,"released_at":29,"has_diff":262,"diff_files_changed":356,"diff_lines":29,"trac_diff_url":357,"vulnerabilities":358,"is_current":262},"1.3.17","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.17.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.17\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.16&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.17",[],{"version":360,"download_url":361,"svn_tag_url":362,"released_at":29,"has_diff":262,"diff_files_changed":363,"diff_lines":29,"trac_diff_url":364,"vulnerabilities":365,"is_current":262},"1.3.16","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.16.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.16\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.15&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.16",[],{"version":367,"download_url":368,"svn_tag_url":369,"released_at":29,"has_diff":262,"diff_files_changed":370,"diff_lines":29,"trac_diff_url":371,"vulnerabilities":372,"is_current":262},"1.3.15","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.15.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.15\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.14&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.15",[],{"version":374,"download_url":375,"svn_tag_url":376,"released_at":29,"has_diff":262,"diff_files_changed":377,"diff_lines":29,"trac_diff_url":378,"vulnerabilities":379,"is_current":262},"1.3.14","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.14.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.14\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.13&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.14",[],{"version":381,"download_url":382,"svn_tag_url":383,"released_at":29,"has_diff":262,"diff_files_changed":384,"diff_lines":29,"trac_diff_url":385,"vulnerabilities":386,"is_current":262},"1.3.13","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.13.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.13\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.12&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.13",[],{"version":388,"download_url":389,"svn_tag_url":390,"released_at":29,"has_diff":262,"diff_files_changed":391,"diff_lines":29,"trac_diff_url":392,"vulnerabilities":393,"is_current":262},"1.3.12","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.12.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.12\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.11&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.12",[],{"version":395,"download_url":396,"svn_tag_url":397,"released_at":29,"has_diff":262,"diff_files_changed":398,"diff_lines":29,"trac_diff_url":399,"vulnerabilities":400,"is_current":262},"1.3.11","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.11.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.11\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.10&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.11",[],{"version":402,"download_url":403,"svn_tag_url":404,"released_at":29,"has_diff":262,"diff_files_changed":405,"diff_lines":29,"trac_diff_url":406,"vulnerabilities":407,"is_current":262},"1.3.10","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.10.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.10\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.9&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.10",[],{"version":409,"download_url":410,"svn_tag_url":411,"released_at":29,"has_diff":262,"diff_files_changed":412,"diff_lines":29,"trac_diff_url":413,"vulnerabilities":414,"is_current":262},"1.3.9","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.9.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.9\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.8&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.9",[],{"version":416,"download_url":417,"svn_tag_url":418,"released_at":29,"has_diff":262,"diff_files_changed":419,"diff_lines":29,"trac_diff_url":420,"vulnerabilities":421,"is_current":262},"1.3.8","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.8.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.8\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.7&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.8",[],{"version":423,"download_url":424,"svn_tag_url":425,"released_at":29,"has_diff":262,"diff_files_changed":426,"diff_lines":29,"trac_diff_url":427,"vulnerabilities":428,"is_current":262},"1.3.7","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.7.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.7\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.6&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.7",[],{"version":430,"download_url":431,"svn_tag_url":432,"released_at":29,"has_diff":262,"diff_files_changed":433,"diff_lines":29,"trac_diff_url":434,"vulnerabilities":435,"is_current":262},"1.3.6","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.6.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.6\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.5&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.6",[],{"version":437,"download_url":438,"svn_tag_url":439,"released_at":29,"has_diff":262,"diff_files_changed":440,"diff_lines":29,"trac_diff_url":441,"vulnerabilities":442,"is_current":262},"1.3.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.4&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.5",[],{"version":444,"download_url":445,"svn_tag_url":446,"released_at":29,"has_diff":262,"diff_files_changed":447,"diff_lines":29,"trac_diff_url":448,"vulnerabilities":449,"is_current":262},"1.3.4","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.4.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.3&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.4",[],{"version":451,"download_url":452,"svn_tag_url":453,"released_at":29,"has_diff":262,"diff_files_changed":454,"diff_lines":29,"trac_diff_url":455,"vulnerabilities":456,"is_current":262},"1.3.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.2&new_path=%2Fuserswp-recaptcha%2Ftags%2F1.3.3",[],{"version":458,"download_url":459,"svn_tag_url":460,"released_at":29,"has_diff":262,"diff_files_changed":461,"diff_lines":29,"trac_diff_url":29,"vulnerabilities":462,"is_current":262},"1.3.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuserswp-recaptcha.1.3.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fuserswp-recaptcha\u002Ftags\u002F1.3.2\u002F",[],[]]