WP Manifestindependent plugin directory
manifest / content / wordpress-content-sections

CODESIGN2 Content Section Plugin WP RegistryMedium-severity findings · 1 findingOpen the reportB

WordPress Plugin to create reusable content section areas

by CODESIGN2 · github.com/codesign2/wordpress-content-sections · website

★ 0stars
2.6.4latest · 9 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/codesign2/wordpress-content-sections/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
From the readme github.com/codesign2/wordpress-content-sections ↗
WordPress-Content-Sections WordPress Plugin to create reusable content section areas This is a simple plugin designed to fulfil rapid prototyping, and consistent central updates of your website content. It's beauty is in it's simplicity and versatility. Usage Shortcode CODE Output Like I said, it's simple Ajax Single Content Section CODE Output All Content Sections Gets a JSON formatted response of all content sections CODE Output Notes uses the filter thecontent so oembed etc should work as well as other plugins affecting thecontent. We do not recommend embedding any CSS in the content (this should be the task of CSS)

Releases

4 releases.

Tag
Published
2.6.4 latest
Aug 13, 2017 9 years ago
2.6.3
Sep 21, 2016 10 years ago
v2.6.2
Dec 13, 2015 10 years ago
v2.6
Dec 13, 2015 10 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

CODESIGN2 Content Section Plugin 2.6.4 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
2.6.4
Findings
1
Worst severity
medium
Content hash
0d6db72b2f51fc799676c6cd…

Findings

  • medium AJAX content section handlers lack capability and nonce checks

    missing_capability

    wp_ajax_get_content_section and wp_ajax_get_content_sections have no current_user_can and no nonce. The CPT is public=false / publicly_queryable=false. Any authenticated user can list all content_section posts (title, author, full the_content HTML) or render one by name via shortcode — content not otherwise front-queryable.

    index.php:28-70

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →