WP Manifestindependent plugin directory
manifest / analytics / disciple-tools-advanced-metrics

Disciple.Tools - Advanced Metrics WP RegistryHigh-severity findings · 1 findingOpen the reportC-

Add advanced metrics to your Disciple.Tools system.

by discipletools · github.com/discipletools/disciple-tools-advanced-metrics · website

★ 0stars
25release downloads
1.1.3latest · 3 years ago

Install

Download disciple-tools-advanced-metrics.zip From the 1.1.3 release on GitHub, Aug 23, 2023

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/discipletools/disciple-tools-advanced-metrics/releases/download/1.1.3/disciple-tools-advanced-metrics.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.
From the readme github.com/discipletools/disciple-tools-advanced-metrics ↗
Disciple.Tools - Advanced Metrics This plugin is an expansion pack of metrics and insights to add to the current Disciple Tools system. Purpose To give a grab back of insights and advanced metrics that can be turned on or off according to value to the project. Usage Requirements - Disciple.Tools Theme installed on a Wordpress Server Installing - Install as a standard Disciple.Tools/Wordpress plugin in the system Admin/Plugins area. - Requires the user role of Administrator. Contribution Contributions welcome. You can report issues and bugs in the Issues section of the repo. You can present ideas in the Discussions section of the repo. And code contributions are welcome using the Pull Request system for git. For a more details on contribution see the contribution guidelines.

Releases

5 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
1.1.3 latest
Aug 23, 2023 3 years ago
disciple-tools-advanced-metrics.zip
8
1.1.2
Jun 27, 2023 3 years ago
disciple-tools-advanced-metrics.zip
3
1.1.1
Jun 27, 2023 3 years ago
disciple-tools-advanced-metrics.zip
5
1.1
Jun 21, 2023 3 years ago
disciple-tools-advanced-metrics.zip
3
1.0
Jun 9, 2023 3 years ago
disciple-tools-advanced-metrics.zip
6
C- grade

Security

Disciple.Tools - Advanced Metrics 1.1.3 · audited by WP Registry

High-severity findings.

1 high
Audited release
1.1.3
Findings
1
Worst severity
high
Content hash
0f825232a639debd600d02a9…

Findings

  • high Advanced Metrics REST endpoints missing permission_callback

    missing_permission_callback

    Thirteen register_rest_route calls under disciple-tools-advanced-metrics/v1 omit permission_callback (some have it commented out). Without a callback, WordPress treats the route as publicly callable. Endpoints such as get_groups_data, get_contacts_corr_data, and get_gender_ratio expose aggregated contact/group metrics including gender and member counts.

    rest-api/rest-api.php:74-136

    Recommendation

    Set permission_callback to has_permission() (access_contacts / view_project_metrics) on every route.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →