WP Manifestindependent plugin directory
manifest / utilities / cta-floating-button-worpdress

CTA Floating Button WP RegistryLow-severity findings · 1 findingOpen the reportA-

A plugin for WordPress that show a floating button on website pages (CTA)

by Alireza Sadi · github.com/alireza-sadi/cta-floating-button-worpdress · website

★ 1stars
v1.2latest · 3 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/alireza-sadi/cta-floating-button-worpdress/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
From the readme github.com/alireza-sadi/cta-floating-button-worpdress ↗
floting-button-plugin A plugin for WordPress that show a floating button on website pages (CTA)

Releases

2 releases.

Tag
Published
v1.2 latest
Aug 11, 2023 3 years ago
v1.0
Aug 11, 2023 3 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

CTA Floating Button 1.2 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.2
Findings
1
Worst severity
low
Content hash
937402e8c86f0b5422bb2308…

Findings

  • low Unescaped option values in admin settings fields

    missing_escaping

    link_address and color inputs echo stored option values into HTML attributes without esc_attr. Only manageable via manage_options Settings API. Frontend output uses esc_attr.

    floating-button-plugin.php:146-158

    Recommendation

    Use esc_attr() when printing option values into attributes.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →