WP Manifestindependent plugin directory
manifest / content / aione-app-builder

Aione App Builder WP RegistryHigh-severity findings · 1 findingOpen the reportC-

Aione Application Builder Wordpress Plugin

by OXO Solutions® · github.com/oxosolutions/aione-app-builder · website

★ 2stars
2.1.0.0latest · 3 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/oxosolutions/aione-app-builder/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Releases

7 releases.

Tag
Published
2.1.0.0 latest
May 20, 2023 3 years ago
2.0.0.0
Jul 26, 2021 5 years ago
1.9.0.0
Jul 6, 2021 5 years ago
1.8.0.0
May 27, 2021 5 years ago
1.5.0.0
Jun 21, 2019 7 years ago
1.4.0.0
Dec 9, 2018 7 years ago
1.1.0.0
Sep 8, 2018 8 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

C- grade

Security

Aione App Builder 2.1.0.0 · audited by WP Registry

High-severity findings.

1 high
Audited release
2.1.0.0
Findings
1
Worst severity
high
Content hash
72fcd1fb0898da5757f21cc8…

Findings

  • high AJAX delete component/template/taxonomy without capability or nonce

    missing_capability

    aione_ajax_delete_* callbacks run on wp_ajax_ only but nonce verification is commented out and no current_user_can gate exists. Any logged-in user can delete CPT/template/taxonomy option data.

    admin/class-component-edit.php:2213-2231

    Recommendation

    Restore nonce checks and require manage_options before mutating AIONE_OPTION_* options.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →