WP Manifestindependent plugin directory
manifest / media / live2d

Live2D WP RegistryLow-severity findings · 1 findingOpen the reportA- GitLab

WordPress Plugin for Live2D

by Kasai. · gitlab.com/kd-works/web/cms/wordpress/plugins/live2d · website

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitLab with WP-CLI:

wp plugin install https://gitlab.com/kd-works/web/cms/wordpress/plugins/live2d/-/archive/main/live2d-main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme gitlab.com/kd-works/web/cms/wordpress/plugins/live2d ↗

WordPress Live2D Plugin

=== Live2D ===
Author: Kasai.
Tags: live2d
Requires at least: 4.7.4
Tested up to: 4.7.4
Stable tag: 4.7.4
License: GPLv3 or later
License URI: http://www.gnu.org/licenses/gpl-3.0.html

== Description ==
Plugin realy simple right now, just display a live2d model on the page.

To be Implemented Soon ?
* Ability to add/edit/remove models.

== Installation ==
This section describes how to install the plugin and get it working.

e.g.

1. Upload `wp-live2d` folder to the `/wp-content/plugins/` directory
2. Activate the plugin through the 'Plugins' menu in WordPress
3. Re-Activate it through the "Live2D" menu in WordPress
4. Create a Widget for Live2D

Releases

4 releases.

Tag
Published
0.1.7
Dec 19, 2017 8 years ago
0.1.6.6
Dec 15, 2017 8 years ago
0.1.6.5
Dec 14, 2017 8 years ago
0.1.6.2
Dec 14, 2017 8 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

GitLab does not publish per-asset download counts, so this plugin ranks on stars and activity only.

A- grade

Security

Live2D 0.1.6.5 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
0.1.6.5
Findings
1
Worst severity
low
Content hash
fb314783db6a7cc9533cb0f5…

Findings

  • low Settings form POST lacks nonce

    missing_nonce

    settings.php updates live2d_status from $_POST after current_user_can('live2d') but without verifying a nonce, enabling CSRF if any role holds the custom capability.

    settings.php:5-16

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →