WP Manifestindependent plugin directory

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/jeremycaris/passgrinder/archive/refs/heads/master.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.
PassGrinder Passgrinder is a Wordpress plugin which currently inserts the PassGrinder form via the shortcode, [passgrinder]. To turn off the form title use, [passgrinder showtitle="no"]. Use one password for everything, securely! PassGrinder is a free password generator that is designed to make it easy for you to use strong, unique passwords that you don't have to save or remember (no internet connection required). Enter your master password and PassGrinder generates a twenty-character strong password based on the website URL, domain name, app name, or unique phrase you choose. Every time you enter that master password and phrase, PassGrinder will generate the same strong password. Your PassGrinder password is generated locally in your browser — it is never saved or transmitted online. Try it out, read more, or audit the open-source code at PassGrinder.com. Try it at PassGrinder.com or install the browser extension from the Chrome Web Store. The Problem No security is absolute. Any security can be defeated with enough power, time, and resources. From mechanical locks to Fort Knox, no security is absolute. In a nutshell, it is impossible to keep your password from being crack

Releases

4 releases.

Tag
Published
0.4 latest
Aug 13, 2023 3 years ago
0.3
Mar 30, 2019 7 years ago
0.2
Mar 29, 2019 7 years ago
Mar 17, 2019 7 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

PassGrinder 0.4 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
0.4
Findings
1
Worst severity
low
Content hash
eb337b9d5242192228205ee4…

Findings

  • low nopriv eval_helper has nonce check commented out

    missing_nonce

    Despite the name, eval_helper only reads $_POST['pg-result-pass'] and returns a success JSON message — it does not eval/execute code. Nonce verification is commented out, leaving an unnecessary unauthenticated AJAX noise surface.

    inc/class-passgrinder.php:20-66

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.