WP Manifestindependent plugin directory
manifest / forms / perseo-feedback-system

Perseo Feedback System WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

The Perseo Feedback System is an open-source plugin for WordPress sites. It adds a feedback prompt to your pages, asking users a question of your choice with two simple buttons. You can set the options within the "Perseo Feedback" settings menu that appears after plugin activation.

★ 4stars
v.1.1.1latest · 2 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/giovannimanetti11/perseo-feedback-system/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Perseo Feedback System for WordPress

Description

The Perseo Feedback System is an open-source plugin for WordPress websites. It adds a feedback prompt to your pages, asking users a question of your choice with two simple buttons. After users have clicked the button, a textarea is shown to collect a comment which is saved in the database once the send button is clicked. You can set the options within the "Perseo Feedback" settings menu that appears after plugin activation.

The feedback prompt appears 5 seconds after the page has loaded, providing a non-intrusive way of gathering user feedback.

Installation

  1. Download the zip file of the plugin from this repository.
  2. Go to the WordPress admin dashboard, navigate to 'Plugins > Add New > Upload Plugin', and upload the zip file.
  3. Activate the plugin through the 'Plugins' menu in WordPress.
  4. The feedback prompt will now appear on your site.

Usage

The Perseo Feedback System works automatically once activated. All feedback responses from users are stored in a new database table called 'perseo_feedback'. Statistics are displayed in the related plugin's menu within WordPress.

How to contribute

Contributions are what make the open-source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated. If you have suggestions for how we could improve, or want to contribute to the development, please fork the repository and create a pull request.

Support my work

If you like this plugin and find it useful, consider supporting me by making a donation. Your donation will help me to maintain and improve this plugin.

Privacy

Perseo Feedback System stores feedback responses from users in the WordPress database in a table called 'perseo_feedback'. The stored data includes the user's response to the feedback prompt, the timestamp of the response, the URL where the feedback was given, the IP address, and user agent. This data is not shared with any third parties.

License

This project is licensed under the MIT License. See the LICENSE file for more details.

Authors

Releases

3 releases.

Tag
Published
v.1.1.1 latest
Jun 18, 2024 2 years ago
Jan 18, 2024 2 years ago
May 28, 2023 3 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

Perseo Feedback System 1.1.1 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.1.1
Findings
1
Worst severity
low
Content hash
98dcb7a155a8593e763975ea…

Findings

  • low Unauthenticated feedback REST/AJAX inserts without rate limit

    dos

    perseo/v1/feedback uses __return_true and nopriv AJAX. wp_rest nonce works for uid 0. Inserts into wp_perseo_feedback can be flooded; admin UI escapes comments (not stored XSS).

    perseo-feedback-system.php:33-38

    Recommendation

    Add rate limiting/captcha; drop redundant nopriv AJAX if unused.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.