WP Manifestindependent plugin directory
manifest / ecommerce / litheskateboards-woocommerce-customizations

Litheskateboards Woocommerce customizations WP RegistryMedium-severity findings · 1 findingOpen the reportB

A custom plugin to add some JS, CSS and PHP functions for Woocommerce customizations

by Alex Moise · github.com/alexmoise/litheskateboards-woocommerce-customizations · website

★ 1stars
v1.5.17latest · 5 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/alexmoise/litheskateboards-woocommerce-customizations/archive/refs/heads/master.zip
Updates itself. It ships its own updater, so new versions appear under Dashboard → Updates.
Readme github.com/alexmoise/litheskateboards-woocommerce-customizations ↗

A custom plugin to add some JS, CSS and PHP functions for Woocommerce customizations. Main goals are: 1. have product options displayed as buttons in product popup and in single product page, 2. have the last option (Payment Plan) show up only after selecting a Width corresponding to a Model, 3. jump directly to checkout after selecting the last option (Payment Plan). Works based on Quick View WooCommerce by XootiX for popup, on WooCommerce Variation Price Hints by Wisslogic for price calculations and also on WC Variations Radio Buttons for transforming selects into buttons.

Releases

2 releases.

Tag
Published
v1.5.17 latest
Nov 26, 2020 5 years ago
v1.5.14
Nov 8, 2020 5 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

Litheskateboards Woocommerce customizations 1.5.17 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
1.5.17
Findings
1
Worst severity
medium
Content hash
ce146949385ec42b8d7f54c9…

Findings

  • medium Unescaped get_option molswc_product_options_table_header_text on product page

    missing_escaping

    form-board.php echoes get_option('molswc_product_options_table_header_text') into the product variations table label without esc_html. The option is written via the Lithe Shop Options settings page (manage_options). Combined with any admin XSS or compromised admin it becomes stored frontend XSS; also fails basic escaping hygiene on a customer-facing template.

    template/woocommerce/single-product/add-to-cart/form-board.php:24-24

    Recommendation

    echo esc_html( get_option(...) ); sanitize on save.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →