WP Manifestindependent plugin directory
manifest / analytics / oa-unit-election-statistics

OA Unit Election Statistics WP Registry grade B. Medium-severity findings · 1 findingWP RegistryMedium-severity findings · 1 findingOpen the reportB

WordPress plugin to generate pretty charts and graphs using unit election statistics exported from OA LodgeMaster.

★ 0stars
23release downloads
1.4latest · 7mo ago

Install

Download oa-unit-election-statistics-1.4.zip From the 1.4 release on GitHub, Apr 5, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/mishigamilodge/oa-unit-election-statistics/releases/download/1.4/oa-unit-election-statistics-1.4.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

WordPress plugin to generate pretty charts and graphs using unit election statistics exported from OA LodgeMaster.

See it in action

You can see a live version of this at https://mishigami.org/ue-dashboard/

Installation

This has not yet been uploaded to the WordPress Plugin Directory, which means it will not auto-update. Until that happens, you'll need to check the GitHub page to see if there's a new release. It should update itself once it shows up in the Plugin Directory.

The easy way

  1. Download the zip file from the Releases page on GitHub
  2. upload it to the Plugins screen in the WordPress admin section.
  3. Go to Plugins in the WordPress admin, then Activate the plugin
  4. Go to OA Tools > Upload Inductions Data in the WordPress admin, and follow the instructions there to import data from LodgeMaster.
  5. Create one or more pages for your charts or tables, and put the shortcodes where you want them to show up.

If you want to work on the code

  1. cd into the wp-content/plugins directory within your WordPress installation.
  2. Use git clone to check out the source from GitHub
  3. cd into the new oa-unit-election-statistics folder
  4. Run composer install to install the dependencies.
  5. Go to Plugins in the WordPress admin, then Activate the plugin
  6. Go to OA Tools > Upload Inductions Data in the WordPress admin, and follow the instructions there to import data from LodgeMaster.
  7. Create one or more pages for your charts or tables, and put the shortcodes where you want them to show up.

Usage

Each chart or table is a shortcode. You can place the shortcode wherever you want that chart or table to show up, in pages or in posts. Note that the data will update as you load newer data from LodgeMaster, even if put in a news post with a post date on it.

[oauestats_completion_chart] Generates a horizontal bar chart of all of your chapters with a bar at the bottom for the entire lodge, which shows the percentage of units which are considered to have completed their election within each chapter and the lodge. [oauestats_status_chart] Generates a horizontal bar chart of all of your chapters with a bar at the bottom for the entire lodge, which shows the percentage of units in each election status within each chapter and the lodge. [oauestats_unit_totals] Generates a table separated by chapter listing all of the units who have submitted election reports, listing how many youth were elected, how many adults they're eligible for, how many adults have been nominated so far, and how many adults they can still nominate, with a subtotal for each chapter.

Releases

5 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
1.4 latest
Apr 5, 2026 7mo ago
oa-unit-election-statistics-1.4.zip
9
1.3
Jan 29, 2025 1 year ago
oa-unit-election-statistics-1.3.zip
0
1.2
Oct 30, 2023 3 years ago
oa-unit-election-statistics-1.2.zip
3
1.1
Apr 29, 2023 3 years ago
oa-unit-election-statistics-1.1.zip
6
1.0
Apr 29, 2023 3 years ago
oa-unit-election-statistics-1.0.zip
5
B grade

Security

OA Unit Election Statistics 1.4 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
1.4
Findings
1
Worst severity
medium
Content hash
7462417906952545119d0724…

Findings

  • medium CSRF on inductions data upload (tables truncated and replaced)

    csrf

    oauestats_upload_data() processes uploaded XLSX files whenever both $_FILES fields are present and then TRUNCATEs and repopulates the inductions_data and nominations_data tables and updates oauestats_last_import. The form has no wp_nonce_field and the handler performs no check_admin_referer, so a malicious site can submit a multipart form/fetch with crafted spreadsheets through an authenticated administrator's browser, replacing the lodge's election data shown by the public shortcodes.

    includes/admin-settings.php:55-68,107-115,336-350,370-379

    Recommendation

    Add wp_nonce_field() to the upload form and check_admin_referer() before processing $_FILES.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.