WP Manifestindependent plugin directory
manifest / events / wp-element451-events

Element451 Events WP RegistryMedium-severity findings · 1 findingOpen the reportB

Wordpress Plugin - Element451 Events

by Spark451.com · github.com/spark451inc/wp-element451-events · website

★ 1stars
1.0.7latest · 1 year ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/spark451inc/wp-element451-events/archive/refs/heads/master.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.
Readme github.com/spark451inc/wp-element451-events ↗

Plugin Name

Here is a short description of the plugin. This should be no more than 150 characters. No markup here.

Description

This is Element451 Events plugin created by Spark451.com.

Installation

Instructions are detailed in plugin settings. For any additional information, contact your Element451 support team.

Changelog

1.0.7

  • Accessibility updates for event cards

1.0.6

  • Do not enqueue scripts if one of required keys are missing

1.0.5

  • Remove ACF from dependencies (it is required to re-enter all the data in settings)

1.0.3

  • Fix render issue

1.0.2

  • Update logic for featured events

1.0.1

  • Test auto-update feature

1.0.0

  • Initial commit

Releases

5 releases.

Tag
Published
1.0.7 latest
May 12, 2025 1 year ago
1.0.6
Apr 15, 2025 1 year ago
1.0.5
Oct 19, 2024 2 years ago
1.0.2
Aug 22, 2023 3 years ago
1.0.1
Aug 14, 2023 3 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

Element451 Events 1.0.7 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
1.0.7
Findings
1
Worst severity
medium
Content hash
e0daf927e937ed6b8fefe778…

Findings

  • medium Element451 settings save missing nonce (CSRF)

    csrf

    sp451_element_events_settings_page_html checks manage_options then, on sp451_save_settings POST, updates API key options without wp_nonce_field / check_admin_referer. An attacker can CSRF an admin into overwriting Element451 keys.

    spark451-element-events.php:112-118

    Recommendation

    Add wp_nonce_field and verify with check_admin_referer before updating options.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →