WP Manifestindependent plugin directory
manifest / ai / wp-kenzyai

Kenzy AI™ Comment Sentiment WP RegistryMedium-severity findings · 2 findingsOpen the reportB

A Free Comment Sentiment Analysis for WordPress Powered by A.I.

by Kenzy AI · github.com/merion-dynamics/wp-kenzyai · website

★ 2stars
1.0.2latest · 5 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/merion-dynamics/wp-kenzyai/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
From the readme github.com/merion-dynamics/wp-kenzyai ↗
Kenzy AI™ Comment Sentiment A Free Comment Sentiment Analysis for WordPress Powered by A.I. About Plugin A free artificial intelligence (A.I.) plugin to analyze and predict the sentiment of comments in either Chinese, English, French, Spanish and Emoji. Negative and neutral comments are placed on hold within your moderation queue, while positive comments are approved and published immediately. Kenzy AI's free API can support upto 1000 comments per day, per account. You may Signup for Free and generate your API key via: + https://account.kenzyai.com/?route=signup You may Download the WordPress Plugin from here: + https://github.com/Merion-Dynamics/wp-kenzyai/archive/master.zip

Releases

3 releases.

Tag
Published
1.0.2 latest
Dec 4, 2020 5 years ago
1.0.1
Nov 28, 2020 5 years ago
1.0.0
Aug 20, 2020 6 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

Kenzy AI™ Comment Sentiment 1.0.1 · audited by WP Registry

Medium-severity findings.

1 medium 1 low
Audited release
1.0.1
Findings
2
Worst severity
medium
Content hash
a7c885b8d1be12a3088f5cee…

Findings

  • medium CSRF on Sentiment API key settings (missing nonce)

    csrf

    api_fp_panel() saves api_the_key via api_string_setting() from $_POST with no wp_nonce_field/check_admin_referer. An attacker can trick a manage_options admin into posting a forged form and overwrite the Kenzy API key (impacting comment auto-approve/hold).

    adminpage.php:3-41

    Recommendation

    Add wp_nonce_field and check_admin_referer (or check_admin_referer) before update_option; keep manage_options gate.

  • low Version mismatch between package slug and plugin header

    version_mismatch

    Package/slug version is 1.0.2 while Plugin header Version is 1.0.1.

    wp-kenzyai.php:5-5

    Recommendation

    Align header Version with released package version.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →