WP Manifestindependent plugin directory
manifest / social / rw-sticky-activity

RW Sticky Activity WP RegistryLow-severity findings · 1 findingOpen the reportA-

by Frank Staude · github.com/rpi-virtuell/rw-sticky-activity · website

★ 0stars
0.0.9latest · 9 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/rpi-virtuell/rw-sticky-activity/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
From the readme github.com/rpi-virtuell/rw-sticky-activity ↗
A plugin to activate plugins and set optons automaticly on new sites rwsiteconfigtranslationpath rwsiteconfiginit rwstickyactivityautoloadregister rwstickyactivityautoloadunregister Answer fix Non-static method added clearfix on sticky activity added DOC link to widget added DOC translation added Forum topic to widget added Forum topic to translation added Forum reply to widget added Forum reply to translation remove widget added sticky list to top of group activity list via bpbeforeactivitypostform hook added jquery for sticky activitys via widget shortcode fix css change css pin in widget filter buddyboss wall activity url preview added ajax widget refresh filter bpactivityexcerptlength to show full text in widget Jquery/CSS Fix. added spinner change widget output First version published

Releases

8 releases.

Tag
Published
0.0.9 latest
Jul 28, 2017 9 years ago
0.0.8
Jun 29, 2016 10 years ago
0.0.7
May 20, 2016 10 years ago
0.0.6
Feb 11, 2016 10 years ago
0.0.5
Feb 11, 2016 10 years ago
0.0.4
Feb 11, 2016 10 years ago
0.0.3
Feb 10, 2016 10 years ago
0.0.2
Feb 10, 2016 10 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

RW Sticky Activity 0.0.9 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
0.0.9
Findings
1
Worst severity
low
Content hash
2cd049dfdcd63f50cd0a4c0b…

Findings

  • low pin_activity/unpin_activity verify nonce only

    missing_capability

    Handlers check pin-activity-nonce but not bp_group_is_admin()/current_user_can. UI only renders for group admins so practical risk is CSRF against a group admin session; defense-in-depth gap.

    inc/RW_Sticky_Activity_Core.php:156-170

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →