WP Manifestindependent plugin directory
manifest / integrations / fflassist-license-manager

FFLAssist License Manager WP RegistryMedium-severity findings · 1 findingOpen the reportB

This contains FFL License Manager functionality for FFLAssist. It should remain activated.

by Cap Web Solutions · github.com/freshysupport/fflassist-license-manager · website

★ 0stars
1.1.6latest · 11mo ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/freshysupport/fflassist-license-manager/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
From the readme github.com/freshysupport/fflassist-license-manager ↗
fflassist-license-manager

Releases

8 releases.

Tag
Published
1.1.6 latest
Nov 5, 2025 11mo ago
1.1.5
Apr 1, 2025 1 year ago
1.1.4
Mar 24, 2025 1 year ago
1.1.3
Mar 5, 2025 1 year ago
1.1.1
Feb 27, 2025 1 year ago
1.1.0
Feb 19, 2025 1 year ago
1.0.2
Jan 28, 2025 1 year ago
1.0.1
Nov 19, 2024 1 year ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

FFLAssist License Manager 1.1.6 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
1.1.6
Findings
1
Worst severity
medium
Content hash
e225662dfff54d3dae45f1d7…

Findings

  • medium License search/modify AJAX missing capability and nonce

    missing_capability

    wp_ajax_capweb_search_license and wp_ajax_capweb_modify_license return FFL license details for any authenticated user with no current_user_can or nonce checks.

    lib/functions/cb-license-modify.php:13-53

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →