WP Manifestindependent plugin directory
manifest / integrations / mautic-youtube-logger

Mautic Youtube Logger WP RegistryHigh-severity findings · 1 findingOpen the reportC-

Register Youtube plays on Mautic

by Powertic · github.com/powerticmkt/mautic-youtube-logger

★ 15stars
1.0.5latest · 8 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/powerticmkt/mautic-youtube-logger/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/powerticmkt/mautic-youtube-logger ↗

Register Youtube plays on Mautic

Download Wordpress Plugin

You can download the latest version o Mautic Youtube Logger Plugin here:

Download Plugin

Install on the same way you install any Wordpress plugin ;)

Using the Shortcode

This plugin provides a simple shortcode where you pass 3 parameters:

-videoId: The youtube Video ID.

So the ID is NpEaa2P7qZI on this URL: https://www.youtube.com/embed/NpEaa2P7qZI?enablejsapi=1

-mauticUrl: Full URL of your mautic

-height: Height in pixels of Youtube Player

So you can use this shortcode:

[mautic_youtube videoId="NpEaa2P7qZI" mauticUrl="https://mkt.powertic.com"]

The height params is optional with "500px" default value.

How it Works

This script tracks youtube plays and logs to Mautic Pixel Tracking with:

  • Video ID
  • Video URL
  • Video Title

Also add a tag with videoID suffixed with "_end" if lead watch entire video:

youtube_NpEaa2P7qZI for who watched NpEaa2P7qZI video

youtube_NpEaa2P7qZI_end for who watched NpEaa2P7qZI until end

See Mautic Lead Timeline entry

Example

Releases

4 releases.

Tag
Published
1.0.5 latest
Nov 11, 2017 8 years ago
1.0.4
Nov 11, 2017 8 years ago
1.0.3
Nov 11, 2017 8 years ago
1.0.2
Nov 11, 2017 8 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

C- grade

Security

Mautic Youtube Logger 1.0.5 · audited by WP Registry

High-severity findings.

1 high
Audited release
1.0.5
Findings
1
Worst severity
high
Content hash
4dbab2758d169ef1935b3360…

Findings

  • high Unescaped shortcode attributes cause stored XSS in iframe and inline script

    xss_stored

    mautic_youtube() copies $atts['mauticurl'], $atts['videoid'], and $atts['height'] into an HTML iframe and inline JavaScript via a heredoc with no esc_attr/esc_js/esc_url. A user who can insert the shortcode (Author/Contributor depending on site caps) can inject script-breaking payloads that execute for every visitor viewing the content.

    plugin.php:10-55

    Recommendation

    Sanitize with sanitize_text_field/esc_url_raw on input and escape with esc_attr/esc_js on output; restrict videoid to [A-Za-z0-9_-].

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →