WP Manifestindependent plugin directory
manifest / themes / cx-footer-customizer

Canvas Extension - Footer Customizer WP Registry grade B. Medium-severity findings · 1 findingWP RegistryMedium-severity findings · 1 findingOpen the reportB

Footer Widget Manager Canvas Extension

★ 1stars
2.0.1latest · 10 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/pootlepress/cx-footer-customizer/archive/refs/heads/master.zip
Updates itself. It ships its own updater, so new versions appear under Dashboard → Updates.

cx-footer-widget-manager

Canvas Extensions - Footer Widget Manager

Instructions

  1. Install zip file as a plugin (not a theme)
  2. Footer Widget Manager will be turned on automatically, but you can see the options under 'Canvas Extensions' in the Canvas Theme Options

Versions

10.12.2014 - Version 2.0.1

  • Fix - styles and javascript interfering with other extensions

12.11.2014 - Version 2.0

  • New - Sticky footer options for footer widget area and footer on desktop and mobile
  • New - footer drop shadow options
  • Tweak - solve woo options add issue to make compatible with WooThemes Child Themes

v1.1 - ability to update within WordPress

v1.0.5 - fix php warning and add woo_options_add issue

v1.0.4 - Fix "Footer Widget Border" setting to 0px results in a border width of 1px. (issue #16)

v1.0.3 - Re-Added Footer Widget Background Colour

v1.0.2 - Remove footer widget area settings that are already in Canvas - Full width options

v1.0.1 - Footer Widget Border issue fixed (#15)

v1.0.0 - First release!

v0.1.2 - Fixed background colour blank if no colour chosen issue, fixed full-width issue, fixed text colour option issue.

v0.1.1 - Fixed widget background colour issue; Fixed widget padding issue; Added various footer widget options

v0.1.0 - Initial release

Releases

2 releases.

Tag
Published
2.0.1 latest
Oct 17, 2016 10 years ago
2.0
Dec 10, 2014 11 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

Canvas Extension - Footer Customizer 2.0 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
2.0
Findings
1
Worst severity
medium
Content hash
d9c1b1b9cd0cc633fb04828c…

Findings

  • medium Remote plugin info unserialized without validation

    unsafe_unserialize

    getRemote_information() POSTs to the configured update_path and passes the response body through PHP unserialize(). A compromised or MITM'd update endpoint can return a malicious serialized object graph (object injection). Prefer JSON with json_decode, or at least unserialize(..., ['allowed_classes' => false]).

    classes/class-pootlepress-updater.php:126-133

    Recommendation

    Replace unserialize with json_decode, or use unserialize with allowed_classes => false and validate the structure.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.