WP Manifestindependent plugin directory
manifest / content / disciple-tools-crm

Disciple.Tools - CRM Plugin WP RegistryLow-severity findings · 1 findingOpen the reportA-

by discipletools · github.com/discipletools/disciple-tools-crm · website

★ 0stars
22release downloads
≈10active sites
2023.04.14.1latest · 3 years ago

Install

Download disciple-tools-crm.zip From the 2023.04.14.1 release on GitHub, Apr 14, 2023

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/discipletools/disciple-tools-crm/releases/download/2023.04.14.1/disciple-tools-crm.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.
Readme github.com/discipletools/disciple-tools-crm ↗

readme format:

Plugin Banner

Disciple.Tools - CRM

Let Disciple.Tools be used more as a traditional CRM than a Follow-Up system

Purpose

Provide Fields and Workflows more suited for a simple crm contact.

Usage

Will Do

  • Adds CRM Contact Type
  • Upgrades Subassigned Fields with Reason

Will Not Do

Requirements

  • Disciple.Tools Theme installed on a Wordpress Server

Installing

  • Install as a standard Disciple.Tools/Wordpress plugin in the system Admin/Plugins area.
  • Requires the user role of Administrator.

Contribution

Contributions welcome. You can report issues and bugs in the Issues section of the repo. You can present ideas in the Discussions section of the repo. And code contributions are welcome using the Pull Request system for git. For a more details on contribution see the contribution guidelines.

Screenshots

screenshot

Releases

3 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
2023.04.14.1 latest
Apr 14, 2023 3 years ago
disciple-tools-crm.zip
9
2023.04.14
Apr 14, 2023 3 years ago
disciple-tools-crm.zip
6
0.1
Oct 14, 2021 5 years ago
disciple-tools-crm.zip
7

Active-site estimate ≈10 comes from the median of recent superseded releases. Method.

A- grade

Security

Disciple.Tools - CRM Plugin 2023.04.14.1 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
2023.04.14.1
Findings
1
Worst severity
low
Content hash
8d9c5564018087062643e5f3…

Findings

  • low Notice-dismiss AJAX lacks capability check

    missing_capability

    dt_hook_ajax_notice_handler is hooked to wp_ajax_dismissed_notice_handler, verifies check_ajax_referer('wp_rest_dismiss'), then update_option('dismissed-'.$type, true) with attacker-influenced type and no current_user_can. Blast radius is dismissing admin notices (cosmetic).

    disciple-tools-crm.php:246-253

    Recommendation

    Require current_user_can('manage_options') or manage_dt, and allowlist the type values.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →