WP Manifestindependent plugin directory

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/jessepearson/woocommerce-support-helper/archive/refs/heads/trunk.zip
Updates itself. It ships its own updater, so new versions appear under Dashboard → Updates.

WooCommerce Support Helper

Description

This is still a work in progress, so please take caution when using.

This plugin is for WooCommerce Support. It's aim is to allow Happiness Engineers to install it and copy settings from WooCommerce to import into their store or to share in GitHub reports efficiently.

Features

Export and import shipping settings

  • Exports and imports shipping zones. When importing, it will add additional shipping zones with (imported) in the name.
  • Exports and imports shipping methods included in the zones.
  • Export includes main shipping method settings, and it will overwrite any settings in the store. Example, if FedEx is installed, it will overwrite the data in the store with the imported data like API keys, etc.
  • Exports and imports shipping classes. On import, it will add to what already exists. If a class with the same name is found, it is skipped. These have to be brought over or Flat Rate and Table Rates do not work.
  • Exports and imports Table Rate settings and table rates themselves.

Export and import payment gateway settings

  • Will export settings for payment gateways in use.
  • When importing it overwrites any existing settings.

Export and import settings tabs

Export and import (overwrite) settings for:

  • General settings tab.
  • Product settings tab.
  • Tax settings tab - tax rates not included due to they have their own csv export and import.
  • Accounts & Privacy settings tab.

Installation

  1. Download the .zip file.
  2. Go to Plugins > Add New and choose Upload at the top.
  3. Upload the .zip file and activate.

Usage

After installing & activating the plugin:

  1. Go to WooCommerce > Support Helper.
  2. Use the tool you'd like.

Releases

5 releases.

Tag
Published
1.1.3 latest
Oct 6, 2020 6 years ago
Oct 6, 2020 6 years ago
Oct 6, 2020 6 years ago
Sep 30, 2020 6 years ago
Sep 29, 2020 6 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

C- grade

Security

WooCommerce Support Helper 1.1.3 · audited by WP Registry

High-severity findings.

1 high
Audited release
1.1.3
Findings
1
Worst severity
high
Content hash
db5cb6f8ce9de06f3646904d…

Findings

  • high Privilege escalation: support tools run with nonce only (no capability)

    missing_capability

    WCSH_Tools::catch_requests hooks init and, when $_GET['page']==='woocommerce-support-helper', dispatches delete_shipping_zones / import_settings / confirm_import / export_settings after wp_verify_nonce($_POST['_wpnonce'], $_POST['action']) only. There is no current_user_can('manage_options') (or manage_woocommerce). The admin submenu is restricted to manage_options for rendering, but any authenticated (or unauthenticated) principal can create a nonce for those action names and POST to a URL that includes the page query argument, deleting all shipping zones or importing settings.

    includes/class-wcsh-tools.php:260-280

    Recommendation

    Require current_user_can('manage_options') (or manage_woocommerce) in catch_requests before dispatching; do not rely on nonce alone.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.