WP Manifestindependent plugin directory
manifest / media / sit-update-s3-buckets

SIT update S3 buckets WP RegistryLow-severity findings · 1 findingOpen the reportA-

Primitivní plugin pro aktualizaci cest v databázi po přesunu na novou S3

by SIT:Jaroslav Dvořák · github.com/sitmpcz/sit-update-s3-buckets

★ 0stars
308composer installs
1.0.5latest · 3 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/sitmpcz/sit-update-s3-buckets/archive/refs/heads/main.zip

On Packagist as sitmpcz/sit-update-s3-buckets:

composer require sitmpcz/sit-update-s3-buckets
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
From the readme github.com/sitmpcz/sit-update-s3-buckets ↗
sit-update-s3-buckets Primitivní plugin pro aktualizaci cest v databázi po přesunu na novou S3

Releases

6 releases.

Tag
Published
1.0.5 latest
Oct 20, 2023 3 years ago
1.0.4
Oct 19, 2023 3 years ago
1.0.3
Oct 19, 2023 3 years ago
1.0.2
Oct 19, 2023 3 years ago
1.0.1
Oct 19, 2023 3 years ago
1.0
Oct 19, 2023 3 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

SIT update S3 buckets 1.0.5 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.0.5
Findings
1
Worst severity
low
Content hash
c2500c8ebe29a9baece94f06…

Findings

  • low Unprepared LIKE uses option value in SQL

    unsafe_input

    old_bucket from get_option is interpolated into LIKE '%{$old_bucket}%'. Admin-only and option is sanitized via settings API, but should use prepare/esc_like.

    sit-update-bucket.php:118-119

    Recommendation

    Use $wpdb->prepare with '%' . $wpdb->esc_like( $old_bucket ) . '%'.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →