WP Manifestindependent plugin directory
manifest / seo / academedia-redirection-importer

Redirection importer WP RegistryMedium-severity findings · 1 findingOpen the reportB

Let's import some redirections

by Pär Henriksson, academedia · github.com/academedia-paer/academedia-redirection-importer · website

★ 0stars
494composer installs
1.0latest · 7 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/academedia-paer/academedia-redirection-importer/archive/refs/heads/master.zip

On Packagist as academedia/academedia-redirection-importer:

composer require academedia/academedia-redirection-importer
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
From the readme github.com/academedia-paer/academedia-redirection-importer ↗
academedia-redirection-importer

Releases

4 releases.

Tag
Published
1.0 latest
Oct 11, 2019 7 years ago
0.3
Oct 11, 2019 7 years ago
v0.2
Oct 10, 2019 7 years ago
0.1
Oct 10, 2019 7 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

Redirection importer 0.0 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
0.0
Findings
1
Worst severity
medium
Content hash
a963ad6f9f9b98ebf049af00…

Findings

  • medium Hardcoded Google Maps API key in admin enqueue

    hardcoded_credentials

    A Google Maps/API key is embedded in the admin_enqueue_scripts URL and will be exposed to anyone who can load wp-admin scripts for this page.

    redirection-importer.php:14-16

    Recommendation

    Load the key from options/env with API restrictions; rotate the exposed key.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →