WP Manifestindependent plugin directory
manifest / integrations / daartads-wp

افزونه نمایش تبلیغات دارت ادز WP RegistryMedium-severity findings · 2 findingsOpen the reportB

Daart Ads plugin for WordPress

by Daart Agency - تیم فنی آژانس تبلیغات دارت · github.com/daart-agency/daartads-wp · website

★ 0stars
33release downloads
≈10active sites
1.1.0latest · 3 years ago

Install

Download Daart.Ads.V1.1.zip From the 1.1.0 release on GitHub, Feb 5, 2023

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/daart-agency/daartads-wp/releases/download/1.1.0/Daart.Ads.V1.1.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/daart-agency/daartads-wp ↗

DaartAds WordPress Plugin

This plugin enables you to use the DaartAds APIs on your WordPress website..

Installation

Using WordPress library

This plugin may be found in the WordPress library.

  • Farsi / Persian WordPress

    نصب بر روی وردپرس فارسی
    افزونه ها > افزودن > در بخش جست و جو میتوانید دارت ادز یا Daart Ads را جستجو کنید و شروع به نصب پلاگین کنید.

  • English WordPress

    Plugins > Add New > Search for Daart Ads > Install

Manual Installation:

  1. Download the most recent release from GitHub's right side.
  2. Navigate to the WordPress Plugins Page.
  3. Click On Add New.
  4. Click On Upload.
  5. Upload the GitHub release you already downloaded.
  6. Activate plugin.

Activation:

  • Farsi / Persian

    برای فعال سازی افزونه بر روی منوی دارت ادز در وردپرس خود کلیک کنید و توکن دریافتی از دارت ادز را در داخل کادر توکن وارد کنید. در صورتی که توکن شما معتبر باشد افزونه فعال میشود.

  • English

    Click on the DaartAds menu in your WordPress and input the token you were given by DaartAds in the token box to activate the plugin.
The plugin will become active if your token is legitimate.

Usage

  • Farsi / Persian

    در بخشی که میخواهید تبلیغات را نمایش دهید، کد کوتاه زیر را کپی کرده و در آن بخش قرار دهید.
    از جدول زیر نیز برای انتخاب سایز تبلیغ استفاده کنید.

  • English : Copy the following short code and paste it in the spot where you wish to show advertising.

[daart-ads adsize="CHOSEN_SIZE"]

AdSize

SizeID Width * Height
1 720 * 480
2 728 * 90
3 480 * 320
4 492 * 328
5 468 * 60
6 360 * 240
7 320 * 100
8 320 * 50
9 300 * 250
10 295 * 98
11 160 * 600

Releases

4 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
1.1.0 latest
Feb 5, 2023 3 years ago
Daart.Ads.V1.1.zip
8
1.0.1-final
Dec 23, 2022 3 years ago
Daart-Ads.V1.0.1.Final.zip
9
1.0.1
Dec 21, 2022 3 years ago
Daart-Ads.V1.0.1.zip
6
1.0.0
Dec 17, 2022 3 years ago
Daart-Ads.zip
10

Active-site estimate ≈10 comes from the median of recent superseded releases. Method.

B grade

Security

افزونه نمایش تبلیغات دارت ادز 1.0.1 · audited by WP Registry

Medium-severity findings.

2 medium
Audited release
1.0.1
Findings
2
Worst severity
medium
Content hash
2e0794644021fee8404ddd4b…

Findings

  • medium admin_post token save lacks capability check

    missing_capability

    wp_save_token_daart is hooked only to admin_post_daart_form_submit (logged-in) but never calls current_user_can. Any authenticated user (Subscriber+) can POST daart-key / renew_key to create, overwrite, or delete the daart_ads_token option, hijacking or disabling site ads. The settings menu requires the administrator capability, but the handler does not re-check.

    daartads.php:74-95

  • medium admin_post token save missing nonce (CSRF)

    missing_nonce

    Neither the admin form (daart-ads-admin.php) nor wp_save_token_daart verifies a nonce. A cross-site request from any logged-in victim of any role can set or delete daart_ads_token via admin-post.php?action=daart_form_submit.

    daartads.php:74-95

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →