WP Manifestindependent plugin directory
manifest / analytics / csanalytics

CSAnalytics WP RegistryHigh-severity findings · 1 findingOpen the reportC-

by LeadsNearby · github.com/leadsnearby/csanalytics · website

★ 0stars
3.3.4latest · 6 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/leadsnearby/csanalytics/archive/refs/heads/master.zip
Updates itself. It ships its own updater, so new versions appear under Dashboard → Updates.
Readme github.com/leadsnearby/csanalytics ↗

=== CSAnalytics === Tags: LeadsNearby, Metrics, Analytics Requires at least: 4.0 Tested up to: 5.2.4 License URI: http://LeadsNearby.com

LeadsNearby Success Metrics is a powerful plugin that leverage's analytics, and complex calculations to provide the most comprehensive metrics available to companies.

Description

LeadsNearby Success Metrics is a powerful plugin that leverage's analytics, and complex calculations to provide the most comprehensive metrics available to companies.

Installation

Upload the entire clipit-coupons folder to the /wp-content/plugins/ directory. Activate the plugin through the \\'Plugins\\' menu in WordPress.

Releases

18 releases.

Tag
Published
3.3.4 latest
Feb 21, 2020 6 years ago
3.3.3
Nov 12, 2019 6 years ago
3.3.2
Sep 16, 2019 7 years ago
3.3.1
Sep 6, 2019 7 years ago
3.3.0
Aug 8, 2019 7 years ago
3.2.1
Jan 3, 2019 7 years ago
3.2.0
Jan 3, 2019 7 years ago
3.1.2
Dec 12, 2018 7 years ago
3.1.1
Dec 12, 2018 7 years ago
3.1.0
Dec 12, 2018 7 years ago
3.0.5
Dec 12, 2018 7 years ago
3.0.3
Nov 5, 2018 7 years ago
3.0.2
Oct 26, 2018 8 years ago
3.0.1
Mar 8, 2018 8 years ago
3.0
Nov 30, 2017 8 years ago
2.9
Nov 30, 2017 8 years ago
2.8
Nov 30, 2017 8 years ago
2.7
Nov 30, 2017 8 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

C- grade

Security

CSAnalytics 3.3.4 · audited by WP Registry

High-severity findings.

1 high
Audited release
3.3.4
Findings
1
Worst severity
high
Content hash
b4da9f8ef415a682052513b3…

Findings

  • high Direct-access PHP scripts are unnecessary attack surface

    unnecessary_attack_surface

    Dozens of standalone scripts under lib/data and lib/csv-json bypass the WP request lifecycle (no capability, no nonce, no REST permission_callback). Prefer admin-ajax/REST with auth.

    lib/data/:1

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →