WP Manifestindependent plugin directory
manifest / themes / wpcoupon-demo-import

Wp Coupon Demo Import WP RegistryMedium-severity findings · 1 findingOpen the reportB

Import your content, widgets and theme settings with one click for Coupon WP theme.

by Shrimp2t · github.com/famethemes/wpcoupon-demo-import · website

★ 0stars
v1.0.1latest · 10 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/famethemes/wpcoupon-demo-import/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Releases

2 releases.

Tag
Published
v1.0.1 latest
Jul 26, 2016 10 years ago
v1.0.0
May 26, 2016 10 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

Wp Coupon Demo Import 1.0.1 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
1.0.1
Findings
1
Worst severity
medium
Content hash
77f97716b4873ca76f4f8068…

Findings

  • medium Demo import AJAX missing capability check

    missing_capability

    wp_ajax_c_demo_import_content verifies wpc_demo_import nonce then runs full XML/options/widget import with no current_user_can('manage_options'). Any authenticated user possessing the nonce can overwrite site content and options.

    import.php:56-78

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →