[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOOX7k29ya1_Hkbjflr5FCxypl1SYMNsY8SXaogJaC-Y":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":36,"analysis":142,"fingerprints":235},"wp-avatar","WP Avatar","1.0.0","tomiup","https:\u002F\u002Fprofiles.wordpress.org\u002Ftomiup\u002F","\u003Cp>WordPress avatar is now easier by WP Avatar. WP Avatar allows you to use any photos uploaded into your Media Library as an avatar instead of using Gravatar.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Upload avatar image from your computer.\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Choose an image from Media Library.\u003C\u002Fli>\n\u003Cli>Allow \u003Cstrong>anyone can upload avatar\u003C\u002Fstrong> (Subscriber can upload avatar).\u003C\u002Fli>\n\u003Cli>Automagically remove old image when you upload a new avatar (Avoid data redundancy).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Allow change default avatar.\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Feedback\u003C\u002Fh3>\n\u003Cp>If you like this plugin, then please consider leaving us a good rating and a review feedback.\u003Cbr \u002F>\nIf would like, you can follow us on \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Ftomiupdotcom\" rel=\"nofollow ugc\">Facebook\u003C\u002Fa>\u003C\u002Fp>\n","Allows you to use any photos uploaded into your Media Library as an avatar instead of using Gravatar.",400,7498,74,3,"2019-05-18T10:15:00.000Z","5.2.24","4.8","5.6",[20,21,22,23,4],"avatar","profile","user","user-avatar","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-avatar\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-avatar.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":32,"avg_security_score":26,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},440,30,84,"2026-04-05T03:34:04.740Z",[37,59,78,101,121],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":52,"tags":53,"homepage":57,"download_link":58,"security_score":47,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"wpmake-advance-user-avatar","Advanced User Avatar | Custom Profile Picture Uploader for WordPress, WooCommerce, and BuddyPress","1.1.2","wpmakedev","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpmakedev\u002F","\u003Cp>\u003Cstrong>Advanced User Avatar – The Ultimate Plugin for Custom Profile Picture Uploads in WordPress, WooCommerce, and BuddyPress\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Are you tired of the default Gravatar system on WordPress, where users must create a Gravatar account to upload their profile picture? Many users find this a hassle and end up with a generic avatar. This can result in a less personalized user experience and hinder site engagement. With the \u003Cstrong>Advanced User Avatar\u003C\u002Fstrong> plugin, you can easily allow users to upload their own custom profile picture (avatar) directly from their device.\u003C\u002Fp>\n\u003Cp>The \u003Cstrong>Advanced User Avatar\u003C\u002Fstrong> plugin solves plugin eliminates the need for a Gravatar account by offering a seamless solution to upload, crop, and display avatars on your WordPress site. Whether it’s for a personal photo, logo, or any other image, this plugin gives users full control over their avatar. You can easily add an avatar uploader field anywhere on your site using a simple shortcode or Gutenberg block.\u003C\u002Fp>\n\u003Cp>The plugin also includes useful features like file type and size validation, so users won’t upload unsupported or oversized images. Plus, users can crop their profile picture to make sure it fits perfectly as their avatar. This gives them more flexibility and control over their profile picture’s appearance. By making it easy for users to upload their own avatar and customize it, the \u003Cstrong>Advanced User Avatar\u003C\u002Fstrong> plugin creates a more personalized and engaging experience for everyone on your site.\u003C\u002Fp>\n\u003Cp>Plus, it’s not just about uploads; the plugin integrates perfectly with WooCommerce and BuddyPress, allowing you to display avatars in My Account pages, member profiles, and more, creating a fully personalized experience across your WordPress site.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Simple Shortcode Support:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>[wpmake_advance_user_avatar]\u003C\u002Fcode>: Display the uploaded avatar anywhere on your site.\u003C\u002Fli>\n\u003Cli>\u003Ccode>[wpmake_advance_user_avatar_upload]\u003C\u002Fcode>:  Add a profile picture upload form, allowing users to upload or remove their avatar image.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Gutenberg Block Support:\u003C\u002Fstrong> Seamlessly add the avatar upload feature using the WordPress block editor.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>File Type Validation:\u003C\u002Fstrong>  Admins can choose which file types (like JPG, JPEG, PNG) are allowed for profile pictures. This stops users from uploading unsupported file types, ensuring only valid images are used for avatars.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Max File Size Limit:\u003C\u002Fstrong> Admins can set a maximum file size for uploaded avatars to keep the site running smoothly. This prevents slow loading times by stopping oversized images from being uploaded.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Image Cropping Interface:\u003C\u002Fstrong> Users can crop their uploaded profile picture to ensure it fits perfectly within the avatar space, providing more flexibility in how avatars are displayed.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Webcam Capture:\u003C\u002Fstrong>  Users can capture a profile picture directly from their webcam and crop it as needed, without the need to upload an external image file.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Different size images:\u003C\u002Fstrong> Automatically generates different image sizes for the uploaded avatar to ensure it displays correctly across various parts of your site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Uploaded Image Size:\u003C\u002Fstrong> Admins can set a specific width and height for uploaded images to maintain uniformity across the site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>WooCommerce Integration:\u003C\u002Fstrong> Display avatars in the WooCommerce My Account Dashboard and add an avatar upload option to the WooCommerce My Account’s Account Details page.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>BuddyPress Integration:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Replace the default BuddyPress Avatar Uploader with the plugin’s avatar upload functionality.\u003C\u002Fli>\n\u003Cli>Seamlessly display custom user avatars on BuddyPress member pages, giving your community a more personalized experience.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How to Use the Plugin\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>Install the Plugin\u003C\u002Fstrong>:\u003Cbr \u002F>\nGo to \u003Cstrong>Users -> User Avatar\u003C\u002Fstrong> in your WordPress dashboard.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Configure Settings\u003C\u002Fstrong>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Store avatar in different thumbnail sizes\u003C\u002Fstrong>: Saves the avatar in different sizes to ensure they display perfectly wherever they appear on your site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Max Avatar Size Allowed\u003C\u002Fstrong>:  Set a limit on how large uploaded images can be (e.g., 20KB). Users can’t upload files over this limit.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Allowed File Types\u003C\u002Fstrong>: Choose which image file types (JPG, JPEG, PNG, GIF) are allowed for profile pictures.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Capture Picture\u003C\u002Fstrong>: Allow users to capture a new profile picture directly through their webcam.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Cropping Interface\u003C\u002Fstrong>: Enable the cropping feature, allowing users to adjust their avatar for the perfect fit.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Uploaded Image Size\u003C\u002Fstrong>: Set the width and height of uploaded images to maintain a consistent look across the site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Integrations\u003C\u002Fstrong>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>WooCommerce Integration\u003C\u002Fstrong>: Display avatars on WooCommerce My Account pages and integrate the avatar uploader into the account details section.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>BuddyPress Integration\u003C\u002Fstrong>:  Replace the default BuddyPress avatar uploader and display avatars on member profiles..\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n","Adds an avatar upload field through a simple shortcode or block to let your site users upload a custom profile picture (avatar) directly from their de …",200,2251,100,5,"2025-11-15T10:10:00.000Z","6.8.5","5.5","7.4",[20,54,55,56,23],"custom-avatar","gravatar","profile-picture","https:\u002F\u002Fwww.wpmake.net\u002Fuser-avatar-demo\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpmake-advance-user-avatar.1.1.2.zip",{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":33,"downloaded":67,"rating":27,"num_ratings":27,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":71,"tags":72,"homepage":76,"download_link":77,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"manage-user-avatar","Manage User Avatar","0.0.1","escaleta","https:\u002F\u002Fprofiles.wordpress.org\u002Fescaleta\u002F","\u003Ch4>Do you want a simple amd uniform avatar theme for your users?\u003C\u002Fh4>\n\u003Cp>Is yes, then consider using this plugin.\u003Cbr \u002F>\nThe initial letter of the username is taken and the image of this letter is set as an avatar for the user.\u003C\u002Fp>\n\u003Ch4>Where are these images are stored?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Go to the plugin folder \u002Fwp-content\u002Fplugins\u002Fescaleta-wp-avatar\u002Fassets\u002Favatars\u002Falphabets and ta-da you found all the images from A to Z.\u003C\u002Fli>\n\u003Cli>Images are named simply by letters (e.g. a.png, b.png, etc)\u003C\u002Fli>\n\u003Cli>You can also place your own images with same names so that the plugin will take it and set as a user avatar.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Do you have a suggestion?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>We are still in a development of this plugin. We want to improve and provide an added value to our users with each update of this plugin.\u003C\u002Fli>\n\u003Cli>Your valuable feedback, suggestion and even a samll comment will point us in the right direction.\u003C\u002Fli>\n\u003Cli>Please write to us at escaleta.solutions@gmail.com\u003C\u002Fli>\n\u003C\u002Ful>\n","WP Manage User Avatar plugin allows you to set your users avatar and select a uniform avatar theme for all users. You can set a avatar from the initia …",1709,"2021-04-11T17:28:00.000Z","5.7.15","3.0.1","",[20,73,74,75,4],"picture","profile-pic","user-profile","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmanage-user-avatar","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmanage-user-avatar.0.0.1.zip",{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":86,"downloaded":87,"rating":88,"num_ratings":89,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":71,"tags":93,"homepage":96,"download_link":97,"security_score":98,"vuln_count":99,"unpatched_count":27,"last_vuln_date":100,"fetched_at":29},"one-user-avatar","One User Avatar | User Profile Picture","2.5.4","One Designs","https:\u002F\u002Fprofiles.wordpress.org\u002Fonedesigns\u002F","\u003Cp>WordPress currently only allows you to use custom avatars that are uploaded through \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa>. \u003Cstrong>One User Avatar\u003C\u002Fstrong> enables you to use any photo uploaded into your Media Library as an avatar. This means you use the same uploader and library as your posts. No extra folders or image editing functions are necessary. This plugin is a fork of WP User Avatar v2.2.16.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>One User Avatar\u003C\u002Fstrong> also lets you:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Upload your own Default Avatar in your One User Avatar settings.\u003C\u002Fli>\n\u003Cli>Show the user’s \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa> avatar or Default Avatar if the user doesn’t have a One User Avatar image.\u003C\u002Fli>\n\u003Cli>Disable \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa> avatars and use only local avatars.\u003C\u002Fli>\n\u003Cli>Use the \u003Ccode>[avatar_upload]\u003C\u002Fcode> shortcode to add a standalone uploader to a front page or widget. This uploader is only visible to logged-in users.\u003C\u002Fli>\n\u003Cli>Use the \u003Ccode>[avatar]\u003C\u002Fcode> shortcode in your posts. These shortcodes will work with any theme, whether it has avatar support or not.\u003C\u002Fli>\n\u003Cli>Allow Contributors and Subscribers to upload their own avatars.\u003C\u002Fli>\n\u003Cli>Limit upload file size and image dimensions for Contributors and Subscribers.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Copyright\u003C\u002Fh3>\n\u003Cp>One User Avatar\u003Cbr \u002F>\nCopyright (c) 2023 One Designs https:\u002F\u002Fonedesigns.com\u002F\u003Cbr \u002F>\nLicense: GPLv2\u003Cbr \u002F>\nSource: https:\u002F\u002Fgithub.com\u002Fonedesigns\u002Fone-user-avatar\u003C\u002Fp>\n\u003Cp>One User Avatar is based on WP User Avatar v2.2.16\u003Cbr \u002F>\nCopyright (c) 2020-2021 ProfilePress https:\u002F\u002Fprofilepress.net\u002F\u003Cbr \u002F>\nCopyright (c) 2014-2020 Flippercode https:\u002F\u002Fwww.flippercode.com\u002F\u003Cbr \u002F>\nCopyright (c) 2013-2014 Bangbay Siboliban http:\u002F\u002Fbangbay.com\u002F\u003Cbr \u002F>\nLicense: GPLv2\u003Cbr \u002F>\nSource: https:\u002F\u002Fgithub.com\u002Fprofilepress\u002Fwp-user-avatar\u003C\u002Fp>\n\u003Cp>One User Avatar is distributed under the terms of the GNU GPL\u003C\u002Fp>\n\u003Cp>This program is free software: you can redistribute it and\u002For modify\u003Cbr \u002F>\nit under the terms of the GNU General Public License as published by\u003Cbr \u002F>\nthe Free Software Foundation, either version 2 of the License, or\u003Cbr \u002F>\n(at your option) any later version.\u003C\u002Fp>\n\u003Cp>This program is distributed in the hope that it will be useful,\u003Cbr \u002F>\nbut WITHOUT ANY WARRANTY; without even the implied warranty of\u003Cbr \u002F>\nMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\u003Cbr \u002F>\nGNU General Public License for more details.\u003C\u002Fp>\n\u003Ch3>Advanced Settings\u003C\u002Fh3>\n\u003Ch4>Add One User Avatar to your own profile edit page\u003C\u002Fh4>\n\u003Cp>You can use the [avatar_upload] shortcode to add a standalone uploader to any page. It’s best to use this uploader by itself and without other profile fields.\u003C\u002Fp>\n\u003Cp>If you’re building your own profile edit page with other fields, One User Avatar is automatically added to the \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FPlugin_API\u002FAction_Reference\u002Fshow_user_profile\" rel=\"nofollow ugc\">show_user_profile\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FPlugin_API\u002FAction_Reference\u002Fshow_user_profile\" rel=\"nofollow ugc\">edit_user_profile\u003C\u002Fa> hooks. If you’d rather have One User Avatar in its own section, you could add another hook:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>do_action( 'edit_user_avatar', $current_user );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Then, to add One User Avatar to that hook and remove it from the other hooks outside of the administration panel, you would add this code to the \u003Ccode>functions.php\u003C\u002Fcode> file of your theme:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>function my_avatar_filter() {\n    \u002F\u002F Remove from show_user_profile hook\n    remove_action( 'show_user_profile', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    remove_action( 'show_user_profile', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n\n    \u002F\u002F Remove from edit_user_profile hook\n    remove_action( 'edit_user_profile', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    remove_action( 'edit_user_profile', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n\n    \u002F\u002F Add to edit_user_avatar hook\n    add_action( 'edit_user_avatar', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    add_action( 'edit_user_avatar', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n}\n\n\u002F\u002F Loads only outside of administration panel\nif ( ! is_admin() ) {\n    add_action( 'init','my_avatar_filter' );\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>HTML Wrapper\u003C\u002Fh4>\n\u003Cp>You can change the HTML wrapper of the One User Avatar section by using the functions \u003Ccode>wpua_before_avatar\u003C\u002Fcode> and \u003Ccode>wpua_after_avatar\u003C\u002Fcode>. By default, the avatar code is structured like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cdiv class=\"wpua-edit-container\">\n    \u003Ch3>Avatar\u003C\u002Fh3>\n    \u003Cinput type=\"hidden\" name=\"wp-user-avatar\" id=\"wp-user-avatar\" value=\"{attachmentID}\" \u002F>\n    \u003Cp id=\"wpua-add-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-add\" name=\"wpua-add\">Edit Image\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-preview\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        Original Size\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-thumbnail\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        Thumbnail\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-remove-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-remove\" name=\"wpua-remove\">Default Avatar\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-undo-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-undo\" name=\"wpua-undo\">Undo\u003C\u002Fbutton>\n    \u003C\u002Fp>\n\u003C\u002Fdiv>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To strip out the div container and h3 heading, you would add the following filters to the \u003Ccode>functions.php\u003C\u002Fcode> file in your theme:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>remove_action( 'wpua_before_avatar', 'wpua_do_before_avatar' );\nremove_action( 'wpua_after_avatar', 'wpua_do_after_avatar' );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To add your own wrapper, you could create something like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>function my_before_avatar() {\n    echo '\u003Cdiv id=\"my-avatar\">';\n}\nadd_action( 'wpua_before_avatar', 'my_before_avatar' );\n\nfunction my_after_avatar() {\n    echo '\u003C\u002Fdiv>';\n}\nadd_action( 'wpua_after_avatar', 'my_after_avatar' );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>This would output:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cdiv id=\"my-avatar\">\n    \u003Cinput type=\"hidden\" name=\"wp-user-avatar\" id=\"wp-user-avatar\" value=\"{attachmentID}\" \u002F>\n    \u003Cp id=\"wpua-add-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-add\" name=\"wpua-add\">Edit Image\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-preview\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        \u003Cspan class=\"description\">Original Size\u003C\u002Fspan>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-thumbnail\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        \u003Cspan class=\"description\">Thumbnail\u003C\u002Fspan>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-remove-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-remove\" name=\"wpua-remove\">Default Avatar\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-undo-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-undo\" name=\"wpua-undo\">Undo\u003C\u002Fbutton>\n    \u003C\u002Fp>\n\u003C\u002Fdiv>\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Use any image from your WordPress Media Library as a custom user avatar or user profile picture. Add your own Default Avatar.",100000,490816,94,41,"2026-01-12T00:58:00.000Z","6.9.4","4.0",[20,94,55,21,95],"bbpress","users","https:\u002F\u002Fonedesigns.com\u002Fplugins\u002Fone-user-avatar\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-user-avatar.2.5.4.zip",99,2,"2021-09-20 00:00:00",{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":86,"downloaded":109,"rating":110,"num_ratings":111,"last_updated":112,"tested_up_to":91,"requires_at_least":113,"requires_php":52,"tags":114,"homepage":116,"download_link":117,"security_score":118,"vuln_count":119,"unpatched_count":27,"last_vuln_date":120,"fetched_at":29},"simple-local-avatars","Simple Local Avatars","2.8.6","10up","https:\u002F\u002Fprofiles.wordpress.org\u002F10up\u002F","\u003Cp>Adds an avatar upload field to user profiles if the current user has media permissions. Generates requested sizes on demand just like Gravatar! Simple and lightweight.\u003C\u002Fp>\n\u003Cp>Just edit a user profile, and scroll down to the new “Avatar” field. The plug-in will take care of cropping and sizing!\u003C\u002Fp>\n\u003Col>\n\u003Cli>Stores avatars in the “uploads” folder where all of your other media is kept.\u003C\u002Fli>\n\u003Cli>Has a simple, native interface.\u003C\u002Fli>\n\u003Cli>Fully supports Gravatar and default avatars if no local avatar is set for the user – but also allows you turn off Gravatar.\u003C\u002Fli>\n\u003Cli>Generates the requested avatar size on demand (and stores the new size for efficiency), so it looks great, just like Gravatar!\u003C\u002Fli>\n\u003Cli>Lets you decide whether lower privilege users (subscribers, contributors) can upload their own avatar.\u003C\u002Fli>\n\u003Cli>Enables rating of local avatars, just like Gravatar.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Support Level\u003C\u002Fh3>\n\u003Cp>Simple Local Avatars’ support level is marked as \u003Ccode>stable\u003C\u002Fcode>.  10up is not planning to develop any new features for this, but will still respond to bug reports and security concerns.  We welcome PRs, but any that include new features should be small and easy to integrate and should not include breaking changes.  We otherwise intend to keep this tested up to the most recent version of WordPress.\u003C\u002Fp>\n","Adds an avatar upload field to user profiles. Generates requested sizes on demand just like Gravatar!",2395990,92,89,"2026-02-17T19:34:00.000Z","6.6",[20,55,21,115,95],"user-photos","https:\u002F\u002F10up.com\u002Fplugins\u002Fsimple-local-avatars-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-local-avatars.2.8.6.zip",93,6,"2025-08-11 18:20:29",{"slug":122,"name":123,"version":124,"author":125,"author_profile":126,"description":127,"short_description":128,"active_installs":129,"downloaded":130,"rating":110,"num_ratings":131,"last_updated":132,"tested_up_to":133,"requires_at_least":134,"requires_php":18,"tags":135,"homepage":137,"download_link":138,"security_score":139,"vuln_count":140,"unpatched_count":27,"last_vuln_date":141,"fetched_at":29},"metronet-profile-picture","User Profile Picture","2.6.3","Cozmoslabs","https:\u002F\u002Fprofiles.wordpress.org\u002Fcozmoslabs\u002F","\u003Cp>\u003Cstrong>User Profile Picture is no longer under active development, but will continue to work as is. We have integrated the current functionality in \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fprofile-builder\u002F\" rel=\"ugc\">Profile Builder\u003C\u002Fa> where it will actively be maintained, and we recommend migrating to it.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Set or remove a custom profile image for a user using the standard WordPress media upload tool.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.cozmoslabs.com\u002Fuser-profile-picture\u002F\" rel=\"nofollow ugc\">View Documentation and Examples\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F9icnOWWZUpA?version=3&rel=0&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>Users must have the ability to upload images (typically author role or greater). You can use the plugin \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fprofile-builder\u002F\" rel=\"ugc\">Profile Builder\u003C\u002Fa> to allow other roles (e.g. subscribers) the ability to upload images.\u003C\u002Fp>\n\u003Cp>A template tag is supplied for outputting to a theme and the option to override a user’s default avatar is also available.\u003C\u002Fp>\n\u003Ch3>Documentation and Feedback\u003C\u002Fh3>\n\u003Cp>See the documentation on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmadalinungureanu\u002Fuser-profile-picture\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>Please \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fmetronet-profile-picture\u002Freviews\u002F#new-post\" rel=\"ugc\">Rate the Plugin\u003C\u002Fa>.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n","Set a custom profile image (avatar) for a user using the standard WordPress media upload tool.",40000,1023099,59,"2024-07-18T13:11:00.000Z","6.6.5","4.6",[20,136,55,75,95],"blocks","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmetronet-profile-picture\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmetronet-profile-picture.2.6.3.zip",91,1,"2024-06-20 00:00:00",{"attackSurface":143,"codeSignals":206,"taintFlows":223,"riskAssessment":224,"analyzedAt":234},{"hooks":144,"ajaxHandlers":202,"restRoutes":203,"shortcodes":204,"cronEvents":205,"entryPointCount":27,"unprotectedCount":27},[145,151,155,159,162,165,168,171,173,177,181,185,188,192,197],{"type":146,"name":147,"callback":148,"file":149,"line":150},"action","admin_enqueue_scripts","admin_enqueue_assets","inc\\plugin-core.php",13,{"type":146,"name":152,"callback":153,"file":149,"line":154},"tmu_sidebar_after","sidebar_rss_news",15,{"type":146,"name":156,"callback":157,"file":149,"line":158},"wp_dashboard_setup","add_dashboard_widgets",16,{"type":146,"name":147,"callback":147,"file":160,"line":161},"inc\\plugin-functions.php",12,{"type":146,"name":163,"callback":164,"file":160,"line":150},"show_user_profile","create_avatar_field",{"type":146,"name":166,"callback":164,"file":160,"line":167},"edit_user_profile",14,{"type":146,"name":169,"callback":170,"file":160,"line":154},"personal_options_update","save_avatar",{"type":146,"name":172,"callback":170,"file":160,"line":158},"edit_user_profile_update",{"type":174,"name":175,"callback":175,"priority":47,"file":160,"line":176},"filter","get_avatar",17,{"type":174,"name":175,"callback":178,"priority":179,"file":160,"line":180},"gravatar_on_local",101,18,{"type":174,"name":182,"callback":182,"priority":183,"file":160,"line":184},"avatar_defaults",102,19,{"type":174,"name":186,"callback":186,"file":160,"line":187},"user_profile_picture_description",20,{"type":174,"name":189,"callback":189,"priority":190,"file":160,"line":191},"display_media_states",103,21,{"type":146,"name":193,"callback":194,"priority":195,"file":160,"line":196},"admin_init","discussion_settings",104,22,{"type":146,"name":198,"callback":199,"file":200,"line":201},"init","load_textdomain","wp-avatar.php",31,[],[],[],[],{"dangerousFunctions":207,"sqlUsage":208,"outputEscaping":210,"fileOperations":27,"externalRequests":140,"nonceChecks":27,"capabilityChecks":48,"bundledLibraries":222},[],{"prepared":27,"raw":27,"locations":209},[],{"escaped":211,"rawEcho":48,"locations":212},10,[213,216,218,219,220],{"file":160,"line":214,"context":215},48,"raw output",{"file":160,"line":217,"context":215},410,{"file":160,"line":217,"context":215},{"file":160,"line":217,"context":215},{"file":160,"line":221,"context":215},411,[],[],{"summary":225,"deductions":226},"The \"wp-avatar\" v1.0.0 plugin exhibits a generally positive security posture based on the provided static analysis. The absence of any known CVEs, critical taint flows, dangerous functions, direct SQL queries, or file operations is a strong indicator of good development practices. The plugin also utilizes capability checks for some of its functions, which is a positive security measure.  However, there are areas for improvement that present minor risks. The existence of an external HTTP request without further analysis of its context is a potential concern, as such requests can sometimes be exploited for various attacks if not handled securely. Additionally, the fact that 33% of output operations are not properly escaped suggests a risk of Cross-Site Scripting (XSS) vulnerabilities, especially if user-supplied data is involved in these unescaped outputs. The complete lack of nonce checks, while not immediately problematic given the zero attack surface, could become a concern if new entry points are introduced in future versions without corresponding security measures. In conclusion, while the plugin is currently free of known severe vulnerabilities, the unescaped output and external HTTP request warrant closer inspection to ensure no subtle security flaws are present.",[227,230,232],{"reason":228,"points":229},"Unescaped output detected",8,{"reason":231,"points":48},"External HTTP request without auth checks",{"reason":233,"points":48},"No nonce checks on any entry points","2026-03-16T19:47:08.074Z",{"wat":236,"direct":247},{"assetPaths":237,"generatorPatterns":241,"scriptPaths":242,"versionParams":243},[238,239,240],"\u002Fwp-content\u002Fplugins\u002Fwp-avatar\u002Fassets\u002Fcore\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fwp-avatar\u002Fassets\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fwp-avatar\u002Fassets\u002Fjs\u002Fadmin.js",[],[238,239,240],[244,245,246],"wp-avatar\u002Fassets\u002Fcore\u002Fcss\u002Fadmin.css?ver=","wp-avatar\u002Fassets\u002Fcss\u002Fadmin.css?ver=","wp-avatar\u002Fassets\u002Fjs\u002Fadmin.js?ver=",{"cssClasses":248,"htmlComments":252,"htmlAttributes":253,"restEndpoints":256,"jsGlobals":257,"shortcodeOutput":258},[249,250,251],"tmu-rss-widget","tmu-box","tmu-title-box",[],[254,255],"name=\"wp_avatar[allow_anyone_upload]\"","name=\"wp_avatar[default_avatar_url]\"",[],[],[]]