WP Manifestindependent plugin directory
manifest / i18n / willow-bts-plugin

Bonnier Willow BTS WP Registry grade B. Medium-severity findings · 1 findingWP RegistryMedium-severity findings · 1 findingOpen the reportB

Willow Bonnier Translation Service plugin

★ 0stars
725composer installs
0.2.22latest · 5 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/benjaminmedia/willow-bts-plugin/archive/refs/heads/master.zip

On Packagist as benjaminmedia/wp-willow-bts:

composer require benjaminmedia/wp-willow-bts
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

A wordpress / willow plugin for handling automatic translations using the external LanguageWire service.

The plugin uses Polylang to have different versions of the same post / page, and uses a service called Bonnier Translation Service (BTS for short) to mediate between Wordpress and LanguageWire.

Important

This plugin is only used on FordelsZonen to translate the articles.

Requirements

  • Wordpress 4.9 or higher
  • PHP 7.1 or higher
  • Polylang
  • Amazon AWS package

Installation / Configuration

Install through composer:

composer require benjaminmedia/wp-willow-bts

OR by using the respository: https://github.com/BenjaminMedia/willow-bts-plugin and copying the contents to the wp-content/plugins folder.

Remember to run

composer install

Before activating the plugin in Wordpress plugin manager.

Plugin settings

The settings for the plugin, can be found in the side menu under: Settings -> Bonnier Willow BTS

Site short handle

This is the key part of the BTS setup.

This handle should be unique pr site, so each site can get the translated articles, they have sent to LanguageWire.

AWS settings

These settings are needed to send data to BTS, as we are using the Simple Notification Service (SNS) from Amazon to exchange data between the systems.

All settings are currently being managed by MartinShi.

Language Wire Settings

These are the settings that are needed internally in Language Wire.

All the settings here are managed by Language Wire, and are most likely different pr site.

Releases

Newest 25 of 31 recorded releases.

Tag
Published
0.2.22 latest
Jun 29, 2021 5 years ago
Jun 22, 2021 5 years ago
Jun 21, 2021 5 years ago
May 17, 2021 5 years ago
May 12, 2021 5 years ago
May 11, 2021 5 years ago
May 11, 2021 5 years ago
May 7, 2021 5 years ago
May 6, 2021 5 years ago
May 6, 2021 5 years ago
May 6, 2021 5 years ago
May 5, 2021 5 years ago
May 4, 2021 5 years ago
May 4, 2021 5 years ago
May 3, 2021 5 years ago
May 3, 2021 5 years ago
May 3, 2021 5 years ago
1.1
May 3, 2021 5 years ago
May 3, 2021 5 years ago
May 3, 2021 5 years ago
Apr 29, 2021 5 years ago
Apr 29, 2021 5 years ago
Apr 29, 2021 5 years ago
Apr 29, 2021 5 years ago
Apr 29, 2021 5 years ago
All releases on GitHub →

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

Bonnier Willow BTS 0.2.22 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
0.2.22
Findings
1
Worst severity
medium
Content hash
f12e49245cc681d4f551b676…

Findings

  • medium Admin metabox translation action checks nonce but not capability

    missing_capability

    initActions handles bts_translate_request_action with wp_verify_nonce only—no current_user_can('edit_post', $postId). Any role that can obtain the metabox nonce can trigger translation for arbitrary post_ID values.

    src/Metabox.php:49-107

    Recommendation

    After nonce verification, require current_user_can('edit_post', (int) $postId).

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.