WP Manifestindependent plugin directory
manifest / admin / lnb-white-label

LeadsNearby White Label WP RegistryMedium-severity findings · 1 findingOpen the reportB

Brands the Wordpress Backend for LeadsNearby

by LeadsNearby · github.com/leadsnearby/lnb-white-label · website

★ 0stars
2.4.1latest · 7 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/leadsnearby/lnb-white-label/archive/refs/heads/master.zip
Updates itself. It ships its own updater, so new versions appear under Dashboard → Updates.
Readme github.com/leadsnearby/lnb-white-label ↗

LeadNearby White Label Plugin

Brands the Wordpress Backend for LeadsNearby

1/8/17 - Bug Fix

12/21/17

  • Rewrote the ReCaptcha functionality. Now includes a back end panel with enabled/disable and API Keys
  • Also switched the location of the domain validation.

Releases

12 releases.

Tag
Published
2.4.1 latest
Nov 26, 2018 7 years ago
2.4.0
Nov 26, 2018 7 years ago
2.3.1
Jan 8, 2018 8 years ago
2.3.0
Dec 21, 2017 8 years ago
2.2.3
Sep 25, 2017 9 years ago
2.2.2
Sep 22, 2017 9 years ago
2.2.1
Sep 22, 2017 9 years ago
2.2.0
Sep 21, 2017 9 years ago
2.1.5
Mar 31, 2017 9 years ago
2.1.0
Mar 31, 2017 9 years ago
2.0.0
Mar 22, 2017 9 years ago
1.0.0
Mar 21, 2017 9 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

LeadsNearby White Label 2.4.1 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
2.4.1
Findings
1
Worst severity
medium
Content hash
1dfbeca433ace774df99c90f…

Findings

  • medium Missing nonce on reCaptcha settings save

    csrf

    menu_page processes $_POST['submit'] and update_option for wl-recaptcha-enabled/captcha_api_key/captcha_site_key with no check_admin_referer. Page is manage_options-gated for viewing, but a CSRF request from an admin session can flip captcha config or plant attacker keys.

    recaptcha/menu_page.php:21-35

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →