WP Manifestindependent plugin directory
manifest / users / open-badges-framework

Open Badges Framework WP Registry grade C-. High-severity findings · 1 findingWP RegistryHigh-severity findings · 1 findingOpen the reportC-

A WordPress plugin for issuer language badges

★ 2stars
1.0.1latest · 8 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/my-language-skills/open-badges-framework/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Open Badges Framework A WordPress plugin for open badges BadgrAPI Status - In development, restructure of stored data into the requierd format for the new API. - Checks for Token if created and valid. - Checks for Issuer if created and entityid is valid. - Checks for BadgeClass if created. - Checks for Assertion if exists for same user. - All requests are done and checked for sending badges to Badgr Backpack. - Link to new API site changed, to create new account. - Badges are updated for each state for the user. - get-the-badge page (from email) changes on the context. Assumptions - Account for issuer in badgr europe server exists. - If token json file doens't exists, then it means that token was never created. requesting for first time. Creates new file in installation to store the token details. - If token json file exists it must be uploaded to accordinate location in the installation. - If Recipient of badge doesn't have a Badgr account, the badge will be awarder. just waiting the user to activate it when the account is

Releases

18 releases.

Tag
Published
1.0.1 latest
Aug 13, 2018 8 years ago
Aug 2, 2018 8 years ago
May 10, 2018 8 years ago
Mar 7, 2018 8 years ago
Oct 31, 2017 8 years ago
Sep 1, 2017 9 years ago
Aug 30, 2017 9 years ago
0.6
Aug 23, 2017 9 years ago
Aug 15, 2017 9 years ago
Aug 10, 2017 9 years ago
Aug 9, 2017 9 years ago
0.5
Aug 9, 2017 9 years ago
Aug 3, 2017 9 years ago
0.4
Jul 26, 2017 9 years ago
0.3
Jul 25, 2017 9 years ago
0.2
Jul 10, 2017 9 years ago
0.1
Jun 14, 2017 9 years ago
Jun 5, 2017 9 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

C- grade

Security

Open Badges Framework 1.0.1 · audited by WP Registry

High-severity findings.

1 high
Audited release
1.0.1
Findings
1
Worst severity
high
Content hash
c950144357db9f0fdfdeb64b…

Findings

  • high Unauthenticated ajaxSendBadge can issue badges/emails

    missing_auth

    ajaxSendBadge accepts badge/field/level/receivers from POST and calls SendBadge::send() with no capability or nonce check. Send() itself does not verify current_user_can. Unauthenticated users can trigger badge issuance/email to arbitrary receivers.

    inc/Ajax/SendBadgeAjax.php:188-208

    Recommendation

    Gate send on teacher/admin capabilities and a valid nonce; do not register nopriv for ajaxSendBadge.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.