WP Manifestindependent plugin directory
manifest / events / easy-wp-events

Easy WP Events WP Registry grade D+. High-severity findings · 2 findingsWP RegistryHigh-severity findings · 2 findingsOpen the reportD+

Create Events and Sell Customizable Tickets

★ 0stars
1.8.0latest · 5 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/justingreerbbi/easy-wp-events/archive/refs/heads/main.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

Simple Event Plugin with custom ticket sales and reporting. Payment Gateway uses Stripe

Description

Simple Event Plugin with custom ticket sales and reporting. Payment Gateway uses Stripe excursively for the time being.

Frequently Asked Questions

A question that someone might have

An answer to that question.

What about foo bar?

Answer to foo bar dilemma.

Screenshots

  1. This screen shot description corresponds to screenshot-1.(png|jpg|jpeg|gif). Note that the screenshot is stored in the /assets directory.
  2. This is the second screen shot

Changelog

Add checkboxes to each ticket item to control if it is a ticket or just an item. Ability to remove/clear all data for an event? This must have password protection to it because it can really mess things up.

1.8.0

  • Updated form zipcode label

1.7.0

  • Removed required requirement for guests field

1.6.0

  • Random Patches

1.5.0

  • seperated items and tickets

1.4.0

  • Updated page container

1.3.0

  • Description bug fixed

1.2.0

  • Added descriptions to tickets
  • Email now lists ticket types with ticket numbers
  • Export contains tickets for order and ticket numbers
  • Bug fixes for charge id's

1.1.0

  • Fixed Data Time Bug
  • Updated Export Data to include Tickets and Ticket Numbers

1.0.1

  • Fixed number formatting
  • Added Ticket Handling

1.0.0

  • Initial Release

Upgrade Notice

1.0.1

Updated

A brief Markdown Example

Ordered list:

  1. Some feature
  2. Another feature
  3. Something else about the plugin

Unordered list:

  • something
  • something else
  • third thing

Here's a link to WordPress and one to Markdown's Syntax Documentation. Titles are optional, naturally.

        "Markdown is what the parser uses to process much of the readme file"

Markdown uses email style notation for blockquotes and I've been told:

Asterisks for emphasis. Double it up for strong.

<?php code(); // goes in backticks ?>

Releases

10 releases.

Tag
Published
1.8.0 latest
Jun 23, 2021 5 years ago
Jun 23, 2021 5 years ago
Jun 21, 2021 5 years ago
Jun 21, 2021 5 years ago
Jun 18, 2021 5 years ago
Jun 18, 2021 5 years ago
Jun 18, 2021 5 years ago
Jun 18, 2021 5 years ago
Jun 18, 2021 5 years ago
Jun 18, 2021 5 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

D+ grade

Security

Easy WP Events 1.8.0 · audited by WP Registry

High-severity findings.

1 high 1 medium
Audited release
1.8.0
Findings
2
Worst severity
high
Content hash
bea958df11e794d03545e31b…

Findings

  • high Event purchase CSV export missing capability and nonce

    missing_capability

    ewp_event_download_event_purchase_history on admin_post_download_event_data only checks is_admin() (true for any admin-post.php request by a logged-in user). Code contains TODO for nonce. Any authenticated user can export order rows including names, emails, addresses for arbitrary event_id.

    includes/metaboxes.php:69-100

  • medium Missing nonce on purchase-history export (CSRF)

    missing_nonce

    Same handler has no check_admin_referer; a crafted link can force a logged-in privileged user to download/exfiltrate CSV if they click it. Combined with weak is_admin gate this is also CSRF against any logged-in user.

    includes/metaboxes.php:70-76

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.