WP Manifestindependent plugin directory
manifest / content / wp-contentunits

WordPress Manual Content Units v2 WP Registry grade B. Medium-severity findings · 1 findingWP RegistryMedium-severity findings · 1 findingOpen the reportB

v2 of our banner plugin yeeeeeeeah

★ 0stars
465composer installs
v2.3latest · 9 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/benjaminmedia/wp-contentunits/archive/refs/heads/master.zip

On Packagist as benjaminmedia/wp-content-units:

composer require benjaminmedia/wp-content-units
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

wp-manual-cu

a plugin that allows you to manually add Specific Content Units to WordPress

Customization

change the width of the container (width between the banners)

.bonnier-banner-container.sticky {
width: 930px;
}

change offset from the top:

.bonnier-banner-container.sticky .banner {
top: 700px;
}

To only change offset on the left/right:

.bonnier-banner-container.sticky .left .banner {
   top: 200px;
}

Shortcode

If you want to manually add a banners somewhere, you can use the shortcode.

[banner sticky="true" cu="xxxxxx" offset="" parent-container=""]

sticky = (bool) If set to true, the banner will remain on screen while scrolling

cu = Content Unit number

offset = top Offset in pixels where the banner will start to be sticky (default = calculates the offset itself)

parent-container = jQuery selector element on which the sticky banner will scroll inside

Releases

Newest 25 of 30 recorded releases.

Tag
Published
v2.3 latest
Oct 31, 2016 9 years ago
Oct 28, 2016 9 years ago
Oct 28, 2016 9 years ago
Oct 28, 2016 9 years ago
Oct 27, 2016 9 years ago
Oct 27, 2016 9 years ago
Oct 27, 2016 9 years ago
Oct 3, 2016 10 years ago
Oct 3, 2016 10 years ago
Aug 10, 2016 10 years ago
Aug 9, 2016 10 years ago
Jul 5, 2016 10 years ago
Jul 5, 2016 10 years ago
Jul 5, 2016 10 years ago
Jul 1, 2016 10 years ago
Jun 27, 2016 10 years ago
Jun 27, 2016 10 years ago
Jun 27, 2016 10 years ago
Jun 21, 2016 10 years ago
Jun 21, 2016 10 years ago
Jun 2, 2016 10 years ago
May 27, 2016 10 years ago
Apr 27, 2016 10 years ago
Apr 27, 2016 10 years ago
Apr 27, 2016 10 years ago
All releases on GitHub →

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

WordPress Manual Content Units v2 2.3 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
2.3
Findings
1
Worst severity
medium
Content hash
cdafd369d18f4c79634a2440…

Findings

  • medium Missing nonce on Manual Content Units settings save

    missing_nonce

    settingsPage() persists every $_POST field (except submit) via update_option('ContentUnit-'.$key) with no wp_nonce_field / check_admin_referer. An admin CSRF can overwrite banner slugs and BCM meta used on the frontend.

    bannerPlugin.php:305-315

    Recommendation

    Verify a settings nonce and capability before updating options; sanitize values.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.