WP Manifestindependent plugin directory
manifest / builders / modular-visual-composer-addons

Advanced Visual Composer Addons WP Registry grade B. Medium-severity findings · 1 findingWP RegistryMedium-severity findings · 1 findingOpen the reportB

Add-ons for Visual Composer WordPress plugin

★ 10stars
1.1.4latest · 11 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/sofyansitorus/modular-visual-composer-addons/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Modular-Visual-Composer-Addons

Modular Visual Composer Addons is WordPress plugin as add-ons for Visual Composer WordPress plugin. The plugin has been designed and created as modular for the flexibility to allow each elements can be activated/deactivated from backend, and each elements also can has own settings page.

Features & Elements:

  1. Advanced Google Map
  2. Formidable Form
  3. Text Dropcap
  4. Animated Vertical Timeline (Coming soon)
  5. Animated Fun Fact Counter (Coming soon)

How to install the plugin:

  1. Download the plugin zip file to your desktop.
  2. If downloaded as a zip archive, extract the Plugin folder to your desktop.
  3. With your FTP program, upload the Plugin folder to the wp-content/plugins folder in your WordPress directory online.
  4. Go to Plugins screen and find the newly uploaded Plugin in the list.
  5. Click Activate Plugin to activate it.
  6. Click the AVCA menu to activate/deactivate and change settings for available modules.
  7. That's It, now you will see a new category "AVCA" appear on Visual composer editor panel. Click the AVCA category to use the AVCA elements.

Change Log:

11.06.2015 - ver 1.1.4

  • Bug Fix: Error on module deactivation

11.06.2015 - ver 1.1.2

  • Move admin menu location as submenu of Settings menu
  • Change how to load the modules data and files
  • add custom class input for formidable element

09.06.2015 - ver 1.1.2

  • Add AvcaBase class
  • Add avca_module_activated action hook
  • Add avca_module_deactivated action hook

08.06.2015 - ver 1.1.1

  • Create new element: Text Dropcap

07.06.2015 - ver 1.0.1

  • Remove custom params, as currently not used yet
  • Google Map Custom styling enhancement: Infowindow now can has width and height option
  • Google Map Custom styling enhancement: Infowindow arrow now can be customized for position, color and size

07.06.2015 - ver 1.0.0

  • Create elements as modules, so each elements can be activated/deactivated from backend, each elements also can has own settings page
  • Tweak enqueue script method to enqueue scripts and styles only on page that has shortcode for current module
  • Tweak Google Map Shortcode to enable redirect to url on marker click
  • Added new Element: Formidable form selector

17.03.2015 - ver 0.0.1

  • Prototype

Releases

5 releases.

Tag
Published
1.1.4 latest
Jun 11, 2015 11 years ago
Jun 10, 2015 11 years ago
Jun 8, 2015 11 years ago
Jun 7, 2015 11 years ago
Jun 7, 2015 11 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

Advanced Visual Composer Addons 1.1.4 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
1.1.4
Findings
1
Worst severity
medium
Content hash
6eab2aa4b3ce9b587e2d12ad…

Findings

  • medium Module activate/deactivate lacks capability check (nonce-only)

    missing_capability

    AVCA::admin_init() handles action=activate_module and action=deactivate_module. It verifies wp_verify_nonce against 'activate_module'/'deactivate_module' then calls activate_module()/deactivate_module(), which update_option('avca_modules', …) and may require_once module files. There is no current_user_can('manage_options') (or any capability) in this path. WordPress nonces are per-user: a Subscriber can create a valid nonce for those actions and request /wp-admin/?action=activate_module&module=avca-google-map&_wpnonce=… (admin_init runs on profile and other low-priv admin screens). Observable: avca_modules option changes; modules appear/disappear from the VC shortcode set for the whole site.

    avca.php:113-137

    Recommendation

    Require current_user_can('manage_options') (same as the options page) before activate/deactivate, in addition to the nonce. Prefer admin_post_* handlers with check_admin_referer.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.