WP Manifestindependent plugin directory
manifest / utilities / rcn_custom_plugin

RCN Custom Plugin WP RegistryMedium-severity findings · 1 findingOpen the reportB

RCN Custom Plugin

by Junaid Bin Jaman · github.com/junaidbinjaman/rcn_custom_plugin · website

★ 1stars
attendee-registrationlatest · 2 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/junaidbinjaman/rcn_custom_plugin/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/junaidbinjaman/rcn_custom_plugin ↗

This is a private plugin developed exclusively for the RCN website. All rights reserved. No one is allowed to make changes to the code without authorization from RCN.

Description

This plugin is designed to enhance the functionality of the RCN website by providing custom features tailored to the specific needs of the organization. It extends the capabilities of the website to better serve its users and stakeholders.

Usage

This plugin is intended for internal use only and should not be shared or distributed outside of the RCN organization. It is tightly integrated with the RCN website and should be used in conjunction with other RCN-specific tools and technologies.

Documentation

The developer documentation for this plugin is available in the GitHub Wiki. Please refer to the Wiki for detailed instructions on how to install, configure, and use the plugin.

License

This plugin is proprietary software developed by RCN and is protected by copyright law. Unauthorized use, distribution, or modification of the code is strictly prohibited.

Contact

For inquiries or assistance regarding the RCN Custom Plugin, please contact RCN support.

Releases

2 releases.

Tag
Published
attendee-registration latest
Jul 16, 2024 2 years ago
v1.0.0
Feb 12, 2024 2 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

RCN Custom Plugin 1.2.0 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
1.2.0
Findings
1
Worst severity
medium
Content hash
e723a5a4433fef506887b5c6…

Findings

  • medium Attendee URL generator AJAX missing capability check

    missing_capability

    ar_admin_url_generator verifies rcn_admin_nonce then generates registration URLs / slots for an order_id without current_user_can. The nonce is localized on admin_enqueue_scripts for the plugin admin script, so lower-priv users who can load that admin screen obtain a usable nonce.

    admin/class-rcn-admin.php:172-207

    Recommendation

    Require current_user_can('manage_woocommerce') or manage_options after nonce verification; only localize nonce on the dedicated admin page for privileged roles.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →