WP Manifestindependent plugin directory
manifest / developer / landerflow-pro

LanderFlow Pro 1.0.0 WP RegistryMedium-severity findings · 2 findingsOpen the reportB

LanderFlow Pro is a powerful WordPress developer utility plugin that automates the installation and activation of essential plugins for creating high-converting landing pages. With just one click, it sets up WooCommerce, Elementor, and CartFlows.

by Robiul Awal · github.com/devwitheasy/landerflow-pro · website

★ 0stars
707release downloads
1.0.1latest · 3mo ago

Install

Download landerflow-pro.zip From the 1.0.1 release on GitHub, Jul 19, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/devwitheasy/landerflow-pro/releases/download/1.0.1/landerflow-pro.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/devwitheasy/landerflow-pro ↗

Professional WordPress Developer Utility Plugin for Automated Landing Page Setup

LanderFlow Pro is a powerful WordPress developer utility plugin that automates the installation and activation of essential plugins for creating high-converting landing pages. With just one click, it sets up WooCommerce, Elementor, and CartFlows - the perfect trio for building professional landing pages and sales funnels.

✨ Features

  • 🚀 One-Click Installation - Install and activate all required plugins with a single click
  • 📊 Live Progress Tracking - Real-time AJAX-powered progress bar with status indicators
  • 🎨 Modern UI/UX - Beautiful gradient design with smooth animations
  • ⚡ Auto-Trigger - Automatically starts plugin installation upon activation
  • 🛡️ Smart Error Handling - Detects already installed plugins and handles failures gracefully
  • 🔄 Sequential Processing - Processes plugins one by one to prevent server timeouts
  • 📱 Fully Responsive - Works perfectly on all devices and screen sizes
  • 🎯 Status Dashboard - Visual indicators showing installation progress for each plugin

📋 Requirements

  • WordPress 5.0 or higher
  • PHP 7.2 or higher
  • WordPress administrator privileges

🔌 Required Plugins (Auto-Installed)

Plugin Purpose Repository
🛒 WooCommerce E-commerce platform WordPress.org
⚡ Elementor Drag & drop page builder WordPress.org
🛍️ CartFlows Sales funnel builder WordPress.org

📦 Installation

Method 1: WordPress Admin Panel

  1. Download the plugin zip file
  2. Go to WordPress Admin → Plugins → Add New
  3. Click Upload Plugin
  4. Choose the downloaded zip file
  5. Click Install Now
  6. Activate the plugin
  7. The plugin will automatically start installing required plugins

Method 2: Manual Installation

  1. Download and extract the plugin zip file
  2. Upload the landerflow-pro folder to /wp-content/plugins/ directory
  3. Go to WordPress Admin → Plugins
  4. Find LanderFlow Pro and click Activate
  5. The setup process will begin automatically

Method 3: Git Clone


cd /wp-content/plugins/
git clone https://github.com/yourusername/landerflow-pro.git

Releases

4 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
1.0.1 latest
Jul 19, 2026 3mo ago
landerflow-pro.zip
4
preium_plugin
Apr 30, 2026 6mo ago
pixelyoursite-pro.zip +8 assets
702
pixelyoursite-pro.zip167
pro-elements.zip163
All.in.One.Business.Solution.zip161
SohagOnlineeCommerce.zip74
cartflows-pro.zip66
elementor-pro.zip46
pathao.courier.zip15
SendToSteadFast.zip10
SohagOnlineOrderTrackerPro.zip0
template_json_image
Apr 30, 2026 6mo ago
rupantor-nursery.png +3 assets
46
rupantor-nursery.png31
rupantor-nursery.json10
saree.png5
saree.json0
1.0.0
Apr 29, 2026 6mo ago
landerflow-pro-v-1.0.0.zip
1
B grade

Security

LanderFlow Pro 1.0.0 1.0.1 · audited by WP Registry

Medium-severity findings.

1 medium 1 low
Audited release
1.0.1
Findings
2
Worst severity
medium
Content hash
5589de3b50f153554927109c…

Findings

  • medium ajax_premium_install SSRF via unconstrained zip_url

    ssrf

    lf_premium_install accepts zip_url from POST, passes it through esc_url_raw only, then download_from_cdn() calls wp_remote_get($zip_url, stream→temp zip) with sslverify false and installs the archive. No allowlist of CDN hosts. An install_plugins user (or CSRF against one, if nonce leaks) can force the server to fetch internal/metadata URLs or install a malicious zip. Prefer fixed release URLs from the premium catalog rather than client-supplied URLs.

    landerflow-pro.php:152-175

  • low Plugin inventory AJAX handlers lack capability checks

    missing_capability

    ajax_get_free_plugins, ajax_get_premium_plugins, and ajax_get_all_status only call check_ajax_referer(lf_nonce) with no current_user_can(manage_options|install_plugins). Nonce is localized on the manage_options page, but defense-in-depth capability checks are missing; get_all_status also enumerates installed plugin paths for the free/premium catalogs.

    landerflow-pro.php:61-126

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →