WP Manifestindependent plugin directory
manifest / social / buddypress-vip-go

BuddyPress VIP Go WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

Ensure BuddyPress media functionality works correctly on WordPress VIP

★ 2stars
452composer installs
1.0.12latest · 8mo ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/automattic/buddypress-vip-go/archive/refs/heads/develop.zip

On Packagist as automattic/buddypress-vip-go:

composer require automattic/buddypress-vip-go
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

BuddyPress for VIP Go

Makes BuddyPress' media work with WordPress VIP's hosting.

Description

This plugin ensures BuddyPress media functionality works correctly on WordPress VIP's hosting environment by:

  • Routing all media uploads through VIP's secure file system, bypassing WordPress's default upload directory
  • Implementing VIP's security model for file access control and permissions
  • Optimizing media delivery through VIP's CDN and caching infrastructure
  • Ensuring proper integration with VIP's file storage and retrieval services

The plugin is essential for any BuddyPress site running on WordPress VIP, as it ensures media uploads, avatars, and other BuddyPress media features work reliably and securely in the VIP environment.

Implementation

Through the use of this plugin, profile and cover images are handled differently than the default.

Profile and cover images for users and groups are stored in user and group metadata.

  • vipbp-avatars stores user avatars. It contains serialised data of four crop values, ui_width, URL, and filename keys.
  • vipbp-user-cover contains only a serialised URL key and value.
  • vipbp-group-avatars stores group avatars. It contains serialised data of four crop values, ui_width, URL, and filename keys.
  • vipbp-group-cover contains only a serialised URL key and value.

Webcam captures for user profiles are handled in the same way.

For cropping, instead of creating a new image, we store the cropping coordinates and later let the Files Service dynamically crop the image on-demand via Photon-like query parameters.

Deleting files is handled by deleting the meta data, and then calling wp_delete_file() with the previously stored URL.

Additional Integrations

  • Temporary directories created for group video uploads are cleaned up using WordPress's WP_Filesystem via a custom override. This ensures compatibility and security on VIP Go, replacing the default BuddyPress temp directory removal logic.
  • After a video is moved to a group album, the plugin flushes the BuddyPress media cache to ensure that any cached media data is immediately updated. This is handled automatically via a custom action hook.

Installation

  1. Upload the buddypress-vip-go folder to the /wp-content/plugins/ directory
  2. Activate this plugin before activating BuddyPress to avoid fatal errors during BuddyPress initialisation
  3. Activate BuddyPress
  4. No additional configuration is required

Changelog

See CHANGELOG.md for a complete list of changes.

License

This plugin is licensed under the GPLv2 or later. See LICENSE for details.

Releases

13 releases.

Tag
Published
1.0.12 latest
Jan 27, 2026 8mo ago
Jan 26, 2026 8mo ago
Jan 23, 2026 9mo ago
Jan 21, 2026 9mo ago
Jan 12, 2026 9mo ago
Dec 16, 2025 10mo ago
Dec 16, 2025 10mo ago
Jul 7, 2025 1 year ago
Jun 24, 2025 1 year ago
May 6, 2025 1 year ago
May 6, 2025 1 year ago
Apr 29, 2025 1 year ago
Apr 29, 2025 1 year ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A grade

Security

BuddyPress VIP Go 1.0.12 · audited by WP Registry

No security issues found.

Audited release
1.0.12
Findings
none
Worst severity
—
Content hash
fb153c0ddd894190a56a9256…

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.