WP Manifestindependent plugin directory
manifest / content / wordpress-pagination-plugin

Page-Links Plus WP RegistryHigh-severity findings · 1 findingOpen the reportC-

WordPress pagination plugin. Paginate content easily & efficiently. | Page-Links Plus

by Studio Hyperset, Inc. · github.com/studiohyperset/wordpress-pagination-plugin · website

★ 0stars
2.5.3latest · 7 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/studiohyperset/wordpress-pagination-plugin/archive/refs/heads/master.zip
Updates itself. It ships its own updater, so new versions appear under Dashboard → Updates.
From the readme github.com/studiohyperset/wordpress-pagination-plugin ↗
WordPress pagination plugin. Paginate content easily and efficiently. Check out the Page-Links Plus Demo » [vimeo http://vimeo.com/109187562] PLP @ GitHub 1. Install and activate the basic Page-Links Plus plugin. (If you're unfamiliar with installing WordPress plugins, please read this page from the Codex). 2. You'll see a new top-level admin menu titled "Page-Links Plus" where you can manage plugin settings. Try a fully-functioning demo here: http://demo.pagelinksplus.com/wp-login.php. See the GitHub project wiki. = 2.5.4 (9/21/20) Bug fixes. = 2.5 (5/13/19) PLP is now 100% free. = 2.4.2 (7/10/18) Changed the way PLP handles updates (custom SVN server GitHub releases) Allow users to exempt page

Releases

6 releases.

Tag
Published
2.5.3 latest
May 13, 2019 7 years ago
2.5.2
May 13, 2019 7 years ago
2.5.1
Aug 17, 2018 8 years ago
2.5
Aug 17, 2018 8 years ago
2.4.2
Jul 10, 2018 8 years ago
2.4.1
Jul 9, 2018 8 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

C- grade

Security

Page-Links Plus 2.5.3 · audited by WP Registry

High-severity findings.

1 high
Audited release
2.5.3
Findings
1
Worst severity
high
Content hash
21b63afc02a375a9cce349f5…

Findings

  • high Unauthenticated AJAX discloses arbitrary post content including non-public statuses

    information_disclosure

    plp_load_next_page is registered on wp_ajax_nopriv_plp_load_page. It does get_post((int)$_POST['current_post']) with no post_status, post_password, or current_user_can check, then echoes apply_filters('the_content', ...) / the_content(). Unauthenticated callers can retrieve draft, private, and password-protected post bodies by ID. No nonce present.

    addons/pagination-styles/pagination-styles-functions.php:30-31,309-369

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →