WP Manifestindependent plugin directory
manifest / seo / ajdwp-seo-checklist

AJDWP-SEO-Checklist WP RegistryHigh-severity findings · 1 findingOpen the reportC-

List of necessary SEO techniques as a checklist for WordPress posts and pages.

by Arash Javadi · github.com/arash12javadi/ajdwp-seo-checklist · website

★ 0stars
250131latest · 1 year ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/arash12javadi/ajdwp-seo-checklist/archive/refs/heads/AJDWP.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Releases

2 releases.

Tag
Published
250131 latest
Jan 31, 2025 1 year ago
250127
Jan 27, 2025 1 year ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

C- grade

Security

AJDWP-SEO-Checklist 250131 · audited by WP Registry

High-severity findings.

1 high
Audited release
250131
Findings
1
Worst severity
high
Content hash
8384f2025feea36ab2a0810b…

Findings

  • high Unauthenticated post meta write via nopriv save_seo_checklist

    wp_ajax_nopriv_save_seo_checklist accepts post_id and checklist JSON and calls update_post_meta without nonce or capability checks. Any visitor can overwrite _seo_checklist on any post. Sibling authenticated handlers also lack nonce/cap checks.

    AJDWP-SEO-Checklist.php:563-573

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →