WP Manifestindependent plugin directory
manifest / ai / easysql-wp

EasySQL WP Registry grade B. Medium-severity findings · 1 findingWP RegistryMedium-severity findings · 1 findingOpen the reportB

Official WordPress Plugin for EasySQL — Natural-language to SQL directly inside your WordPress dashboard.

★ 0stars
5release downloads
v1.0.0latest · 1mo ago

Install

Download easysql-wp.zip From the v1.0.0 release on GitHub, Sep 4, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/clearsoft-net/easysql-wp/releases/download/v1.0.0/easysql-wp.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

EasySQL Logo

EasySQL WordPress Plugin

Official WordPress Plugin for EasySQL · A Clearsoft Product

CI Status WordPress Version PHP Version License Website Company


Bring the power of natural-language database queries directly into your WordPress admin dashboard. Ask questions about WooCommerce orders, user registrations, custom post types, or analytics in plain English (or Portuguese, Spanish, etc.), and EasySQL will generate and safely execute the SQL query to deliver instant answers, data tables, and interactive charts.

Key Features

  • 💬 Ask in Natural Language: Type questions like "How many WooCommerce orders were completed last week?" or "Top 5 most viewed posts this month".
  • 📊 Interactive Data Visualizations: Automatic bar charts, line graphs, and pie charts rendered with Chart.js.
  • 🔍 SQL Transparency: Inspect the exact SQL query generated before or alongside the results.
  • 🛡️ Safe Local Execution: Database schema is synced securely, and queries run directly against your WordPress database using $wpdb.
  • ⚡ History & Submenu Navigation: Quickly access past questions, copy generated SQL, or adjust API settings.

Requirements

  • WordPress: 5.6 or later
  • PHP: 8.2 or later
  • EasySQL Account & API Key: Get one at easysql.net

Installation

Option 1: Manual Installation (Release ZIP)

  1. Download the latest release from the Releases page.
  2. Unzip and upload the easysql-wp folder to your /wp-content/plugins/ directory.
  3. Activate EasySQL from the Plugins screen in your WordPress admin dashboard.
  4. Go to EasySQL → Settings and enter your API Key.

Option 2: Composer (Bedrock / Roots)

If you manage your WordPress site with Composer:

composer require clearsoft/easysql-wp

Configuration

Navigate to EasySQL → Settings in your WordPress admin panel:

Field Description
API Key Your EasySQL API key from easysql.net.
Endpoint URL Read-only by default (https://api.easysql.net/v1).
Timeout Request timeout in seconds (1–300, default: 30).

To configure the endpoint programmatically via wp-config.php:

define( 'EASYSQL_ENDPOINT', 'https://api.easysql.net/v1' );
define( 'EASYSQL_API_KEY', 'your-api-key-here' ); // Optional fallback

Use the Test Connection button on the Settings screen to verify your API credentials.


REST API Reference

The plugin provides authenticated REST endpoints (requires manage_options capability and a valid X-WP-Nonce header):

Method Route Description
POST /wp-json/easysql/v1/query Ask a natural-language question against a connector.
GET /wp-json/easysql/v1/test-connection Ping the EasySQL API to verify credentials.

Example Request

curl -X POST https://example.com/wp-json/easysql/v1/query \
  -H "Content-Type: application/json" \
  -H "X-WP-Nonce: <nonce>" \
  -d '{
    "connector_id": "conn_abc123",
    "question": "How many users registered in the last 30 days?"
  }'

Development & Contributing

Contributions are welcome! Please review our Contributing Guidelines for setup instructions and code standards.

git clone https://github.com/Clearsoft-net/easysql-wp.git
cd easysql-wp
composer install
composer test       # run PHPUnit tests
composer lint       # check WordPress Coding Standards (WPCS)
composer lint:fix   # auto-fix style issues

License

This project is open source and licensed under the MIT License.

Maintained by Clearsoft.

Releases

2 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v1.0.0 latest
Sep 4, 2026 1mo ago
easysql-wp.zip
5
Aug 6, 2026 2mo ago
tag only
—
B grade

Security

EasySQL 1.0.0 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
1.0.0
Findings
1
Worst severity
medium
Content hash
93374fe27aa1a00863dba86c…

Findings

  • medium Remote-generated SQL executed locally without statement whitelist

    unsafe_input

    When the EasySQL API returns needs_local_execution + sql_generated, run_local_sql() passes that string to $wpdb->get_results with no SELECT-only / multi-statement guard. Routes require manage_options, but a compromised API key/endpoint or hostile API response can run arbitrary SQL in the WordPress DB context as an admin tool trust-boundary failure.

    src/QueryService.php:134-215

    Recommendation

    Allowlist single SELECT/SHOW/EXPLAIN statements, reject stacked queries and writes, and pin/verify the API endpoint.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.