WP Manifestindependent plugin directory
manifest / seo / mass-meta-editor

Mass Meta Editor WP RegistryHigh-severity findings · 1 findingOpen the reportC-

This plugin helps you edit Yoast Metadata in bulk. It acts as an improvement to the default Yoast Bulk Editor.

by Lukas von Mateffy · github.com/capevace/mass-meta-editor · website

★ 2stars
2.1.0latest · 9 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/capevace/mass-meta-editor/archive/refs/heads/master.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.
From the readme github.com/capevace/mass-meta-editor ↗
With this plugin you can easily edit SEO metadata, that is provided by the Yoast SEO plugin, in bulk. With this plugin you can easily edit SEO metadata, that is provided by the Yoast SEO plugin, in bulk. It is meant as an improvement/replacement to the bulk editor built into the Yoast SEO plugin. Please note, that this plugin is in no way associated with the Yoast SEO plugin or Yoast BV. 1. Download the plugin and upload the .zip-File it to your WordPress site. 2. The Editor is now available in the Sidebar under Tools/Mass Meta Editor. Updates show up on the WordPress Plugins page automatically, so you'll never need to reinstall the plugin. No. While this plugin requires the Yoast SEO plugin to be used, it is not made in correspondence with Yoast BV. 1. The Meta Editor Re-added preview popup Switched to Vue.js Added Google Preview Initial Release Please upgrade to use the new Google Preview Feature. Initial Version of this plugin

Releases

5 releases.

Tag
Published
2.1.0 latest
Aug 10, 2017 9 years ago
2.0.0
Aug 8, 2017 9 years ago
1.1.0
Aug 7, 2017 9 years ago
1.0.1
Aug 7, 2017 9 years ago
1.0.0
Aug 7, 2017 9 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

C- grade

Security

Mass Meta Editor 2.1.0 · audited by WP Registry

High-severity findings.

1 high
Audited release
2.1.0
Findings
1
Worst severity
high
Content hash
e1838ab7269d6ecb640f8424…

Findings

  • high Unauthenticated POST handler updates Yoast meta without capability checks

    missing_auth

    ymme_post_meta builds prepared INSERT/UPDATE statements from request title/description and post_id with no current_user_can. Combined with the missing permission_callback this is a direct unauthenticated stored SEO injection.

    rest/api.php:81-152

    Recommendation

    Require authentication and edit_post/$post_id (or manage_options) before mutating meta.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →