WP Manifestindependent plugin directory
manifest / updates / famethemes-helper

FameThemes Helper WP RegistryMedium-severity findings · 1 findingOpen the reportB

Enable auto update for famethemes's themes and plugins

by FameThemes · github.com/famethemes/famethemes-helper · website

★ 0stars
v1.1.0latest · 3 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/famethemes/famethemes-helper/archive/refs/heads/master.zip
Updates itself. It ships its own updater, so new versions appear under Dashboard → Updates.
Readme github.com/famethemes/famethemes-helper ↗

This is your one-stop-spot for activating your licenses.

Description

This plugin help you manage FameThemes licenses

Installation

  1. Upload the plugin files to the /wp-content/plugins/ directory, or install the plugin through the WordPress plugins screen directly.
  2. Activate the plugin through the 'Plugins' screen in WordPress
  3. Go to Customizer to see addition sections + feature settings.

Frequently Asked Questions

Changelog

1.1.0

  • Initial release

Releases

3 releases.

Tag
Published
v1.1.0 latest
Nov 7, 2022 3 years ago
v1.0.2
Aug 4, 2016 10 years ago
v1.0.0
Aug 2, 2016 10 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

FameThemes Helper 1.1.0 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
1.1.0
Findings
1
Worst severity
medium
Content hash
0f76342ac05a2aacb8044b18…

Findings

  • medium Missing capability on fame_helper_api AJAX

    missing_capability

    wp_ajax_fame_helper_api verifies a nonce then calls enable_auto_update/disable_auto_update against the FameThemes API without current_user_can(). Any authenticated user who obtains the fame-helper nonce can toggle auto-updates for licenses.

    helper.php:48-72

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →