WP Manifestindependent plugin directory
manifest / ecommerce / smarty-very-simple-license-manager

SM - Very Simple License Manager WP Registry grade B. Medium-severity findings · 1 findingWP RegistryMedium-severity findings · 1 findingOpen the reportB

The Very Simple License Manager by Smarty Studio is a WordPress plugin designed for managing software licenses in WordPress

★ 1stars
1.0.2latest · 1 year ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/mnestorov/smarty-very-simple-license-manager/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
SM - Very Simple License Manager - Developed by: Martin Nestorov - Explore more at nestorov.dev - Plugin URI: https://github.com/mnestorov/smarty-very-simple-license-manager Overview The Very Simple License Manager by Smarty Studio is a WordPress plugin designed for managing software licenses. With this plugin, you can create, track, and control licenses for various products, ensuring that only authorized users can access your software. Features - License Management: Create, activate, deactivate, and track software licenses. - API Key Support: Issue and authenticate API keys for client applications. - Custom Post Types: Uses a custom post type for organizing licenses. - REST API Endpoint: Provides an API endpoint to check the license status. - Daily Expiration Check: Automatically checks and updates the status of expired licenses. - Product Taxonomy: Categorize licenses based on associated products. Installation 1. Download and install the plugin from GitHub. 2. Activate the plugin through the WordPress admin panel. 2. Configure the Consumer Key and Consumer Secret in the plugin settings for secure API access. Usage After activating the plugin, use the License Manager

Releases

3 releases.

Tag
Published
1.0.2 latest
Nov 27, 2024 1 year ago
Nov 26, 2024 1 year ago
Nov 24, 2024 1 year ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

SM - Very Simple License Manager 1.0.2 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
1.0.2
Findings
1
Worst severity
medium
Content hash
202f4efe71a4c36d85fdb098…

Findings

  • medium Registration of nopriv key-generation AJAX actions

    missing_auth

    Locator wires wp_ajax_nopriv_vslm_generate_ck_key and wp_ajax_nopriv_vslm_generate_cs_key explicitly, amplifying the missing-auth issue.

    includes/classes/class-smarty-vslm-locator.php:172-175

    Recommendation

    Delete nopriv registrations entirely.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.