[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXJQuqZIhGqWmk8QCD5IxbkS48nPZ03H5NV_XyVrgPr0":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":40,"analysis":143,"fingerprints":320},"wp-user-avatars","WP User Avatars","1.4.1","John James Jacoby","https:\u002F\u002Fprofiles.wordpress.org\u002Fjohnjamesjacoby\u002F","\u003Cp>Allow registered users to upload & select their own avatars.\u003C\u002Fp>\n\u003Ch4>Recommended Plugins\u003C\u002Fh4>\n\u003Cp>If you like this plugin, you’ll probably like these!\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-user-profiles\u002F\" title=\"A sophisticated way to edit users in WordPress.\" rel=\"ugc\">WP User Profiles\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-user-activity\u002F\" title=\"The best way to log activity in WordPress.\" rel=\"ugc\">WP User Activity\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-user-avatars\u002F\" title=\"Allow users to upload avatars or choose them from your media library.\" rel=\"ugc\">WP User Avatars\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-user-groups\u002F\" title=\"Group users together with taxonomies & terms.\" rel=\"ugc\">WP User Groups\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-user-signups\u002F\" title=\"The best way to manage user & site sign-ups in WordPress.\" rel=\"ugc\">WP User Signups\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-term-authors\u002F\" title=\"Authors for categories, tags, and other taxonomy terms.\" rel=\"ugc\">WP Term Authors\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-term-colors\u002F\" title=\"Pretty colors for categories, tags, and other taxonomy terms.\" rel=\"ugc\">WP Term Colors\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-term-families\u002F\" title=\"Associate taxonomy terms with other taxonomy terms.\" rel=\"ugc\">WP Term Families\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-term-icons\u002F\" title=\"Pretty icons for categories, tags, and other taxonomy terms.\" rel=\"ugc\">WP Term Icons\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-term-images\u002F\" title=\"Pretty images for categories, tags, and other taxonomy terms.\" rel=\"ugc\">WP Term Images\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-term-locks\u002F\" title=\"Protect categories, tags, and other taxonomy terms from being edited or deleted.\" rel=\"ugc\">WP Term Locks\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-term-order\u002F\" title=\"Sort taxonomy terms, your way.\" rel=\"ugc\">WP Term Order\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-term-visibility\u002F\" title=\"Visibilities for categories, tags, and other taxonomy terms.\" rel=\"ugc\">WP Term Visibility\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-media-categories\u002F\" title=\"Add categories to media & attachments.\" rel=\"ugc\">WP Media Categories\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-pretty-filters\u002F\" title=\"Makes post filters better match what's already in Media & Attachments.\" rel=\"ugc\">WP Pretty Filters\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-chosen\u002F\" title=\"Make long, unwieldy select boxes much more user-friendly.\" rel=\"ugc\">WP Chosen\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Allow registered users to upload & select their own avatars.",20000,312818,90,29,"2021-06-01T15:55:00.000Z","5.8.13","5.2","7.0",[20,21,22,23,24],"avatar","local","media","profile","user","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-user-avatars\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-user-avatars.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":35,"avg_security_score":36,"avg_patch_time_days":37,"trust_score":38,"computed_at":39},"johnjamesjacoby",28,331580,87,1401,70,"2026-04-04T19:07:01.360Z",[41,66,87,110,124],{"slug":42,"name":43,"version":44,"author":45,"author_profile":46,"description":47,"short_description":48,"active_installs":49,"downloaded":50,"rating":51,"num_ratings":52,"last_updated":53,"tested_up_to":54,"requires_at_least":55,"requires_php":56,"tags":57,"homepage":61,"download_link":62,"security_score":63,"vuln_count":64,"unpatched_count":28,"last_vuln_date":65,"fetched_at":30},"one-user-avatar","One User Avatar | User Profile Picture","2.5.4","One Designs","https:\u002F\u002Fprofiles.wordpress.org\u002Fonedesigns\u002F","\u003Cp>WordPress currently only allows you to use custom avatars that are uploaded through \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa>. \u003Cstrong>One User Avatar\u003C\u002Fstrong> enables you to use any photo uploaded into your Media Library as an avatar. This means you use the same uploader and library as your posts. No extra folders or image editing functions are necessary. This plugin is a fork of WP User Avatar v2.2.16.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>One User Avatar\u003C\u002Fstrong> also lets you:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Upload your own Default Avatar in your One User Avatar settings.\u003C\u002Fli>\n\u003Cli>Show the user’s \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa> avatar or Default Avatar if the user doesn’t have a One User Avatar image.\u003C\u002Fli>\n\u003Cli>Disable \u003Ca href=\"http:\u002F\u002Fgravatar.com\u002F\" rel=\"nofollow ugc\">Gravatar\u003C\u002Fa> avatars and use only local avatars.\u003C\u002Fli>\n\u003Cli>Use the \u003Ccode>[avatar_upload]\u003C\u002Fcode> shortcode to add a standalone uploader to a front page or widget. This uploader is only visible to logged-in users.\u003C\u002Fli>\n\u003Cli>Use the \u003Ccode>[avatar]\u003C\u002Fcode> shortcode in your posts. These shortcodes will work with any theme, whether it has avatar support or not.\u003C\u002Fli>\n\u003Cli>Allow Contributors and Subscribers to upload their own avatars.\u003C\u002Fli>\n\u003Cli>Limit upload file size and image dimensions for Contributors and Subscribers.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Copyright\u003C\u002Fh3>\n\u003Cp>One User Avatar\u003Cbr \u002F>\nCopyright (c) 2023 One Designs https:\u002F\u002Fonedesigns.com\u002F\u003Cbr \u002F>\nLicense: GPLv2\u003Cbr \u002F>\nSource: https:\u002F\u002Fgithub.com\u002Fonedesigns\u002Fone-user-avatar\u003C\u002Fp>\n\u003Cp>One User Avatar is based on WP User Avatar v2.2.16\u003Cbr \u002F>\nCopyright (c) 2020-2021 ProfilePress https:\u002F\u002Fprofilepress.net\u002F\u003Cbr \u002F>\nCopyright (c) 2014-2020 Flippercode https:\u002F\u002Fwww.flippercode.com\u002F\u003Cbr \u002F>\nCopyright (c) 2013-2014 Bangbay Siboliban http:\u002F\u002Fbangbay.com\u002F\u003Cbr \u002F>\nLicense: GPLv2\u003Cbr \u002F>\nSource: https:\u002F\u002Fgithub.com\u002Fprofilepress\u002Fwp-user-avatar\u003C\u002Fp>\n\u003Cp>One User Avatar is distributed under the terms of the GNU GPL\u003C\u002Fp>\n\u003Cp>This program is free software: you can redistribute it and\u002For modify\u003Cbr \u002F>\nit under the terms of the GNU General Public License as published by\u003Cbr \u002F>\nthe Free Software Foundation, either version 2 of the License, or\u003Cbr \u002F>\n(at your option) any later version.\u003C\u002Fp>\n\u003Cp>This program is distributed in the hope that it will be useful,\u003Cbr \u002F>\nbut WITHOUT ANY WARRANTY; without even the implied warranty of\u003Cbr \u002F>\nMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\u003Cbr \u002F>\nGNU General Public License for more details.\u003C\u002Fp>\n\u003Ch3>Advanced Settings\u003C\u002Fh3>\n\u003Ch4>Add One User Avatar to your own profile edit page\u003C\u002Fh4>\n\u003Cp>You can use the [avatar_upload] shortcode to add a standalone uploader to any page. It’s best to use this uploader by itself and without other profile fields.\u003C\u002Fp>\n\u003Cp>If you’re building your own profile edit page with other fields, One User Avatar is automatically added to the \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FPlugin_API\u002FAction_Reference\u002Fshow_user_profile\" rel=\"nofollow ugc\">show_user_profile\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FPlugin_API\u002FAction_Reference\u002Fshow_user_profile\" rel=\"nofollow ugc\">edit_user_profile\u003C\u002Fa> hooks. If you’d rather have One User Avatar in its own section, you could add another hook:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>do_action( 'edit_user_avatar', $current_user );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Then, to add One User Avatar to that hook and remove it from the other hooks outside of the administration panel, you would add this code to the \u003Ccode>functions.php\u003C\u002Fcode> file of your theme:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>function my_avatar_filter() {\n    \u002F\u002F Remove from show_user_profile hook\n    remove_action( 'show_user_profile', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    remove_action( 'show_user_profile', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n\n    \u002F\u002F Remove from edit_user_profile hook\n    remove_action( 'edit_user_profile', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    remove_action( 'edit_user_profile', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n\n    \u002F\u002F Add to edit_user_avatar hook\n    add_action( 'edit_user_avatar', array( 'wp_user_avatar', 'wpua_action_show_user_profile' ) );\n    add_action( 'edit_user_avatar', array( 'wp_user_avatar', 'wpua_media_upload_scripts' ) );\n}\n\n\u002F\u002F Loads only outside of administration panel\nif ( ! is_admin() ) {\n    add_action( 'init','my_avatar_filter' );\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>HTML Wrapper\u003C\u002Fh4>\n\u003Cp>You can change the HTML wrapper of the One User Avatar section by using the functions \u003Ccode>wpua_before_avatar\u003C\u002Fcode> and \u003Ccode>wpua_after_avatar\u003C\u002Fcode>. By default, the avatar code is structured like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cdiv class=\"wpua-edit-container\">\n    \u003Ch3>Avatar\u003C\u002Fh3>\n    \u003Cinput type=\"hidden\" name=\"wp-user-avatar\" id=\"wp-user-avatar\" value=\"{attachmentID}\" \u002F>\n    \u003Cp id=\"wpua-add-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-add\" name=\"wpua-add\">Edit Image\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-preview\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        Original Size\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-thumbnail\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        Thumbnail\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-remove-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-remove\" name=\"wpua-remove\">Default Avatar\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-undo-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-undo\" name=\"wpua-undo\">Undo\u003C\u002Fbutton>\n    \u003C\u002Fp>\n\u003C\u002Fdiv>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To strip out the div container and h3 heading, you would add the following filters to the \u003Ccode>functions.php\u003C\u002Fcode> file in your theme:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>remove_action( 'wpua_before_avatar', 'wpua_do_before_avatar' );\nremove_action( 'wpua_after_avatar', 'wpua_do_after_avatar' );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>To add your own wrapper, you could create something like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>function my_before_avatar() {\n    echo '\u003Cdiv id=\"my-avatar\">';\n}\nadd_action( 'wpua_before_avatar', 'my_before_avatar' );\n\nfunction my_after_avatar() {\n    echo '\u003C\u002Fdiv>';\n}\nadd_action( 'wpua_after_avatar', 'my_after_avatar' );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>This would output:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cdiv id=\"my-avatar\">\n    \u003Cinput type=\"hidden\" name=\"wp-user-avatar\" id=\"wp-user-avatar\" value=\"{attachmentID}\" \u002F>\n    \u003Cp id=\"wpua-add-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-add\" name=\"wpua-add\">Edit Image\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-preview\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        \u003Cspan class=\"description\">Original Size\u003C\u002Fspan>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-thumbnail\">\n        \u003Cimg src=\"{imageURL}\" alt=\"\" \u002F>\n        \u003Cspan class=\"description\">Thumbnail\u003C\u002Fspan>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-remove-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-remove\" name=\"wpua-remove\">Default Avatar\u003C\u002Fbutton>\n    \u003C\u002Fp>\n    \u003Cp id=\"wpua-undo-button\">\n        \u003Cbutton type=\"button\" class=\"button\" id=\"wpua-undo\" name=\"wpua-undo\">Undo\u003C\u002Fbutton>\n    \u003C\u002Fp>\n\u003C\u002Fdiv>\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Use any image from your WordPress Media Library as a custom user avatar or user profile picture. Add your own Default Avatar.",100000,490816,94,41,"2026-01-12T00:58:00.000Z","6.9.4","4.0","",[20,58,59,23,60],"bbpress","gravatar","users","https:\u002F\u002Fonedesigns.com\u002Fplugins\u002Fone-user-avatar\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-user-avatar.2.5.4.zip",99,2,"2021-09-20 00:00:00",{"slug":67,"name":68,"version":69,"author":70,"author_profile":71,"description":72,"short_description":73,"active_installs":49,"downloaded":74,"rating":75,"num_ratings":76,"last_updated":77,"tested_up_to":54,"requires_at_least":78,"requires_php":79,"tags":80,"homepage":82,"download_link":83,"security_score":84,"vuln_count":85,"unpatched_count":28,"last_vuln_date":86,"fetched_at":30},"simple-local-avatars","Simple Local Avatars","2.8.6","10up","https:\u002F\u002Fprofiles.wordpress.org\u002F10up\u002F","\u003Cp>Adds an avatar upload field to user profiles if the current user has media permissions. Generates requested sizes on demand just like Gravatar! Simple and lightweight.\u003C\u002Fp>\n\u003Cp>Just edit a user profile, and scroll down to the new “Avatar” field. The plug-in will take care of cropping and sizing!\u003C\u002Fp>\n\u003Col>\n\u003Cli>Stores avatars in the “uploads” folder where all of your other media is kept.\u003C\u002Fli>\n\u003Cli>Has a simple, native interface.\u003C\u002Fli>\n\u003Cli>Fully supports Gravatar and default avatars if no local avatar is set for the user – but also allows you turn off Gravatar.\u003C\u002Fli>\n\u003Cli>Generates the requested avatar size on demand (and stores the new size for efficiency), so it looks great, just like Gravatar!\u003C\u002Fli>\n\u003Cli>Lets you decide whether lower privilege users (subscribers, contributors) can upload their own avatar.\u003C\u002Fli>\n\u003Cli>Enables rating of local avatars, just like Gravatar.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Support Level\u003C\u002Fh3>\n\u003Cp>Simple Local Avatars’ support level is marked as \u003Ccode>stable\u003C\u002Fcode>.  10up is not planning to develop any new features for this, but will still respond to bug reports and security concerns.  We welcome PRs, but any that include new features should be small and easy to integrate and should not include breaking changes.  We otherwise intend to keep this tested up to the most recent version of WordPress.\u003C\u002Fp>\n","Adds an avatar upload field to user profiles. Generates requested sizes on demand just like Gravatar!",2395990,92,89,"2026-02-17T19:34:00.000Z","6.6","7.4",[20,59,23,81,60],"user-photos","https:\u002F\u002F10up.com\u002Fplugins\u002Fsimple-local-avatars-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-local-avatars.2.8.6.zip",93,6,"2025-08-11 18:20:29",{"slug":88,"name":89,"version":90,"author":91,"author_profile":92,"description":93,"short_description":94,"active_installs":95,"downloaded":96,"rating":75,"num_ratings":97,"last_updated":98,"tested_up_to":99,"requires_at_least":100,"requires_php":101,"tags":102,"homepage":105,"download_link":106,"security_score":107,"vuln_count":108,"unpatched_count":28,"last_vuln_date":109,"fetched_at":30},"metronet-profile-picture","User Profile Picture","2.6.3","Cozmoslabs","https:\u002F\u002Fprofiles.wordpress.org\u002Fcozmoslabs\u002F","\u003Cp>\u003Cstrong>User Profile Picture is no longer under active development, but will continue to work as is. We have integrated the current functionality in \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fprofile-builder\u002F\" rel=\"ugc\">Profile Builder\u003C\u002Fa> where it will actively be maintained, and we recommend migrating to it.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Set or remove a custom profile image for a user using the standard WordPress media upload tool.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.cozmoslabs.com\u002Fuser-profile-picture\u002F\" rel=\"nofollow ugc\">View Documentation and Examples\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F9icnOWWZUpA?version=3&rel=0&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>Users must have the ability to upload images (typically author role or greater). You can use the plugin \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fprofile-builder\u002F\" rel=\"ugc\">Profile Builder\u003C\u002Fa> to allow other roles (e.g. subscribers) the ability to upload images.\u003C\u002Fp>\n\u003Cp>A template tag is supplied for outputting to a theme and the option to override a user’s default avatar is also available.\u003C\u002Fp>\n\u003Ch3>Documentation and Feedback\u003C\u002Fh3>\n\u003Cp>See the documentation on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmadalinungureanu\u002Fuser-profile-picture\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>Please \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fmetronet-profile-picture\u002Freviews\u002F#new-post\" rel=\"ugc\">Rate the Plugin\u003C\u002Fa>.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n","Set a custom profile image (avatar) for a user using the standard WordPress media upload tool.",40000,1023099,59,"2024-07-18T13:11:00.000Z","6.6.5","4.6","5.6",[20,103,59,104,60],"blocks","user-profile","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmetronet-profile-picture\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmetronet-profile-picture.2.6.3.zip",91,1,"2024-06-20 00:00:00",{"slug":111,"name":112,"version":113,"author":114,"author_profile":115,"description":116,"short_description":117,"active_installs":11,"downloaded":118,"rating":51,"num_ratings":52,"last_updated":119,"tested_up_to":120,"requires_at_least":17,"requires_php":56,"tags":121,"homepage":122,"download_link":123,"security_score":75,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"basic-user-avatars","Basic User Avatars","1.0.9","Jared Atchison","https:\u002F\u002Fprofiles.wordpress.org\u002Fjaredatch\u002F","\u003Ch4>Add an avatar upload field on frontend pages and Edit Profile screen so users can add a custom profile picture.\u003C\u002Fh4>\n\u003Cp>Community and Membership sites on WordPress use this plugin as a lightweight solution for custom user avatars. The plugin is compatible with bbPress, as well as many popular plugins with frontend user registration and profile management features.\u003C\u002Fp>\n\u003Cp>Admins can upload a user’s avatar on the Edit User admin screen.\u003C\u002Fp>\n\u003Cp>Basic User Avatars also supports front-end avatar management for sites that want to keep users out of the dashboard. To use this feature, add the shortcode \u003Ccode>[basic-user-avatars]\u003C\u002Fcode> to any page in your WordPress site. We recommended placing this shortcode on another logged-in account type page, such as the WooCommerce My Account page, the Membership Account page, or any other front-end profile edit form.\u003C\u002Fp>\n\u003Cp>The Avatar Upload form is automatically added to the bbPress User Profile > Edit frontend page.\u003C\u002Fp>\n\u003Cp>If you do not want your users to be able to update their avatar, navigate to Settings > Discussion and locate the “Local Avatar Permissions” setting. Check this box to only allow users with file upload capabilities to upload local avatars (Author role and above).\u003C\u002Fp>\n\u003Ch4>Seamlessly Migrate from WP User Avatar Plugin\u003C\u002Fh4>\n\u003Cp>Version 1.0.5 includes a feature to automatically convert avatars formerly loaded through the WP User Avatar plugin. This means that you can disable WP User Avatar, activate Basic User Avatars, and have a seamless transition for existing avatars in your site. Be sure to update any avatar upload form that used the \u003Ccode>[avatar_upload]\u003C\u002Fcode> shortcode to use the shortcode: \u003Ccode>[basic-user-avatars]\u003C\u002Fcode>.\u003C\u002Fp>\n","Add an avatar upload field on frontend pages and Edit Profile screen so users can add a custom profile picture.",195768,"2024-11-15T14:46:00.000Z","6.7.5",[20,59,23,104,60],"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbasic-user-avatars\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbasic-user-avatars.1.0.9.zip",{"slug":125,"name":126,"version":127,"author":128,"author_profile":129,"description":130,"short_description":131,"active_installs":11,"downloaded":132,"rating":133,"num_ratings":134,"last_updated":135,"tested_up_to":54,"requires_at_least":55,"requires_php":136,"tags":137,"homepage":140,"download_link":141,"security_score":142,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"simple-user-avatar","Simple User Avatar","4.8","Matteo Manna","https:\u002F\u002Fprofiles.wordpress.org\u002Fmatteomanna\u002F","\u003Cp>This plugin simplifies the life of WordPress users.\u003Cbr \u002F>\nNow users can add or remove their avatar simply using images from his Media Library. Simple to use, no additional functions required. Plugin available on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FMatteoManna\u002FSimple-User-Avatar\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>.\u003C\u002Fp>\n","Simple User Avatar helps users to add or remove their avatar using images from his Media Library.",217845,88,19,"2026-02-06T10:09:00.000Z","7.3",[20,59,138,139,24],"media-library","picture","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsimple-user-avatar\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-user-avatar.4.8.zip",100,{"attackSurface":144,"codeSignals":248,"taintFlows":270,"riskAssessment":312,"analyzedAt":319},{"hooks":145,"ajaxHandlers":236,"restRoutes":245,"shortcodes":246,"cronEvents":247,"entryPointCount":64,"unprotectedCount":64},[146,152,157,159,162,167,172,176,180,183,187,191,193,197,201,205,209,212,216,220,223,227,231],{"type":147,"name":148,"callback":149,"file":150,"line":151},"action","user_profile_update_errors","wp_user_avatars_file_extension_error","wp-user-avatars\\includes\\common.php",40,{"type":153,"name":154,"callback":155,"file":150,"line":156},"filter","upload_size_limit","wp_user_avatars_upload_size_limit",50,{"type":147,"name":148,"callback":149,"file":150,"line":158},77,{"type":147,"name":148,"callback":160,"file":150,"line":161},"wp_user_avatars_generic_error",80,{"type":147,"name":163,"callback":164,"file":165,"line":166},"admin_init","wp_user_avatars_register_settings","wp-user-avatars\\includes\\hooks.php",15,{"type":153,"name":168,"callback":169,"priority":170,"file":165,"line":171},"map_meta_cap","wp_user_avatars_meta_caps",10,18,{"type":147,"name":173,"callback":174,"file":165,"line":175},"admin_enqueue_scripts","wp_user_avatars_admin_enqueue_scripts",21,{"type":147,"name":177,"callback":178,"file":165,"line":179},"show_user_profile","wp_user_avatars_edit_user_profile",24,{"type":147,"name":181,"callback":178,"file":165,"line":182},"edit_user_profile",25,{"type":147,"name":184,"callback":185,"file":165,"line":186},"user_edit_form_tag","wp_user_avatars_user_edit_form_tag",26,{"type":147,"name":188,"callback":189,"file":165,"line":190},"personal_options_update","wp_user_avatars_edit_user_profile_update",27,{"type":147,"name":192,"callback":189,"file":165,"line":34},"edit_user_profile_update",{"type":153,"name":194,"callback":195,"file":165,"line":196},"avatar_defaults","wp_user_avatars_avatar_defaults",31,{"type":153,"name":198,"callback":199,"file":165,"line":200},"option_avatar_default","wp_user_avatars_option_avatar_default",34,{"type":153,"name":202,"callback":203,"file":165,"line":204},"pre_update_option_avatar_default","wp_user_avatars_update_option_avatar_default",35,{"type":153,"name":206,"callback":207,"priority":170,"file":165,"line":208},"get_avatar_url","wp_user_avatars_filter_get_avatar_url",38,{"type":153,"name":206,"callback":210,"file":165,"line":211},"wp_user_avatars_maybe_use_local_mystery_person",39,{"type":147,"name":213,"callback":214,"file":165,"line":215},"admin_action_remove-wp-user-avatars","wp_user_avatars_action_remove_avatars",44,{"type":147,"name":217,"callback":218,"priority":170,"file":165,"line":219},"wp_user_profiles_add_meta_boxes","wp_user_profiles_add_avatar_meta_box",47,{"type":147,"name":221,"callback":174,"file":165,"line":222},"wp_user_profiles_do_admin_head",48,{"type":147,"name":224,"callback":225,"priority":64,"file":165,"line":226},"init","wp_user_profiles_unhook_legacy_fields",49,{"type":147,"name":163,"callback":228,"file":229,"line":230},"closure","wp-user-avatars\\includes\\sponsor.php",17,{"type":147,"name":232,"callback":233,"file":234,"line":235},"plugins_loaded","_wp_user_avatars","wp-user-avatars.php",46,[237,242],{"action":238,"nopriv":239,"callback":240,"hasNonce":239,"hasCapCheck":239,"file":165,"line":241},"assign_wp_user_avatars_media",false,"wp_user_avatars_ajax_assign_media",42,{"action":243,"nopriv":239,"callback":214,"hasNonce":239,"hasCapCheck":239,"file":165,"line":244},"remove_wp_user_avatars",43,[],[],[],{"dangerousFunctions":249,"sqlUsage":250,"outputEscaping":252,"fileOperations":108,"externalRequests":28,"nonceChecks":267,"capabilityChecks":268,"bundledLibraries":269},[],{"prepared":28,"raw":28,"locations":251},[],{"escaped":166,"rawEcho":253,"locations":254},5,[255,259,261,263,265],{"file":256,"line":257,"context":258},"wp-user-avatars\\includes\\admin.php",73,"raw output",{"file":256,"line":260,"context":258},200,{"file":262,"line":215,"context":258},"wp-user-avatars\\includes\\ajax.php",{"file":262,"line":264,"context":258},82,{"file":150,"line":266,"context":258},616,3,8,[],[271,289,299],{"entryPoint":272,"graph":273,"unsanitizedCount":28,"severity":288},"wp_user_avatars_action_remove_avatars (wp-user-avatars\\includes\\ajax.php:19)",{"nodes":274,"edges":285},[275,280],{"id":276,"type":277,"label":278,"file":262,"line":279},"n0","source","$_GET",32,{"id":281,"type":282,"label":283,"file":262,"line":215,"wp_function":284},"n1","sink","echo() [XSS]","echo",[286],{"from":276,"to":281,"sanitized":287},true,"low",{"entryPoint":290,"graph":291,"unsanitizedCount":28,"severity":288},"wp_user_avatars_ajax_assign_media (wp-user-avatars\\includes\\ajax.php:54)",{"nodes":292,"edges":297},[293,296],{"id":276,"type":277,"label":294,"file":262,"line":295},"$_POST",63,{"id":281,"type":282,"label":283,"file":262,"line":264,"wp_function":284},[298],{"from":276,"to":281,"sanitized":287},{"entryPoint":300,"graph":301,"unsanitizedCount":28,"severity":288},"\u003Cajax> (wp-user-avatars\\includes\\ajax.php:0)",{"nodes":302,"edges":309},[303,304,305,307],{"id":276,"type":277,"label":278,"file":262,"line":279},{"id":281,"type":282,"label":283,"file":262,"line":215,"wp_function":284},{"id":306,"type":277,"label":294,"file":262,"line":295},"n2",{"id":308,"type":282,"label":283,"file":262,"line":264,"wp_function":284},"n3",[310,311],{"from":276,"to":281,"sanitized":287},{"from":306,"to":308,"sanitized":287},{"summary":313,"deductions":314},"The wp-user-avatars plugin v1.4.1 demonstrates a generally positive security posture, with no recorded critical or high-severity vulnerabilities in its history. The code analysis shows strong practices like the complete absence of raw SQL queries and a high percentage of properly escaped output.  Furthermore, there are no critical or high-severity taint flows identified, suggesting a good effort in handling user-provided data. The plugin also incorporates nonce and capability checks, which are fundamental security measures.\n\nHowever, significant concerns arise from the identified attack surface. The presence of two AJAX handlers, both lacking authentication checks, presents a clear risk. This means that any unauthenticated user could potentially interact with these handlers, leading to unintended actions or information disclosure if not properly secured within the handler logic itself. While no specific vulnerabilities are currently known or have been historically recorded, this lack of protection on entry points is a weakness that could be exploited by attackers.\n\nIn conclusion, while the plugin benefits from good coding practices regarding data handling and has a clean vulnerability history, the unprotected AJAX endpoints are a notable security weakness. Addressing these unprotected entry points should be a priority to further strengthen the plugin's overall security.",[315,317],{"reason":316,"points":170},"Unprotected AJAX handlers",{"reason":318,"points":85},"Low percentage of properly escaped output","2026-03-16T17:29:23.767Z",{"wat":321,"direct":331},{"assetPaths":322,"generatorPatterns":326,"scriptPaths":327,"versionParams":328},[323,324,325],"\u002Fwp-content\u002Fplugins\u002Fwp-user-avatars\u002Fassets\u002Fcss\u002Fuser-avatars-rtl.css","\u002Fwp-content\u002Fplugins\u002Fwp-user-avatars\u002Fassets\u002Fcss\u002Fuser-avatars.css","\u002Fwp-content\u002Fplugins\u002Fwp-user-avatars\u002Fassets\u002Fjs\u002Fuser-avatars.js",[],[],[329,330],"wp-user-avatars\u002Fassets\u002Fcss\u002Fuser-avatars.css?ver=","wp-user-avatars\u002Fassets\u002Fjs\u002Fuser-avatars.js?ver=",{"cssClasses":332,"htmlComments":336,"htmlAttributes":337,"restEndpoints":343,"jsGlobals":344,"shortcodeOutput":346},[333,334,335],"wp-user-avatars-photo","wp-user-avatars-actions","wp-user-avatars-media",[],[338,339,340,341,342],"id=\"wp-user-avatars-user-settings\"","id=\"wp-user-avatars-photo\"","id=\"wp-user-avatars-actions\"","id=\"wp-user-avatars\"","id=\"wp-user-avatars-media\"",[],[345],"i10n_WPUserAvatars",[]]