WP Manifestindependent plugin directory
manifest / admin / superwp-dashboard-announcement

Superwp Dashboard Announcement WP Registry grade B. Medium-severity findings · 2 findingsWP RegistryMedium-severity findings · 2 findingsOpen the reportB

Superwp Dashboard Announcement is a WordPress plugin that allows you to easily add custom announcements to your WordPress dashboard for all users.

★ 1stars
1.3.05latest · 2 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/thiararapeter/superwp-dashboard-announcement/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Superwp Dashboard Announcement Logo

Superwp Dashboard Announcement is a WordPress plugin that allows you to easily add custom announcements to your WordPress dashboard for all users.

Features

  • Custom Announcements: Display custom announcements on the WordPress dashboard.
  • Customization Options: Customize the title, content, font, size, color, alignment, and background color of the announcement.
  • Collapsible Announcements: Make announcements collapsible for user convenience.
  • User Role Targeting: Display announcements to specific user roles.
  • New Announcement Badge: Include a badge to indicate new announcements.
  • Fonts Integration: Enqueue Fonts for custom font options.

Installation

  1. Go to Plugins in the Admin menu.
  2. Click on Add new.
  3. Search for Superwp Dashboard Announcement and click 'Install Now' or upload superwp-dashboard-announcement.zip.
  4. Click on Activate plugin.

Frequently Asked Questions

  • How do I customize the announcement?: You can customize the announcement in the plugin settings.
  • Can I make the announcement collapsible?: Yes, you can enable the collapsible option in the settings.
  • How do I display the announcement to specific user roles?: Use the plugin settings to target specific user roles.
  • How do I change the duration for the new announcement badge?: Adjust the duration in the plugin settings.
  • How do I enqueue Fonts for the announcement?: Fonts are automatically enqueued based on your font selections in the settings.

Upgrade Notice

  • 1.3.05: Ensure compatibility with the latest WordPress version and benefit from improvements and bug fixes.

Screenshots

  1. Add New Announcement Add New Announcement
  2. Admin Dashboard Widget Display Admin Dashboard Widget Display
  3. Feedback Display Feedback Display
  4. Settings Display Settings Display

Support

If you encounter any issues or have questions regarding SuperWP Dashboard, please don't hesitate to reach out for help. We're here to assist you in resolving problems and answering any inquiries you might have. For immediate assistance:

We aim to provide prompt and effective support to enhance your experience with our dashboard.

Donate

If you find SuperWP Dashboard helpful and would like to support its ongoing development, please consider making a donation. Your support is greatly appreciated and will help maintain and improve the dashboard. Click the link below to contribute:

Donate to Support SuperWP Dashboard Announcement

Developer

Superwp Dashboard Announcement is developed and maintained by Thiarara. For contributions, suggestions, or issues, visit the GitHub repository.

License

This plugin is licensed under the GPLv2 or later. See License for more information.

Releases

3 releases.

Tag
Published
1.3.05 latest
Apr 21, 2024 2 years ago
Apr 13, 2024 2 years ago
Apr 11, 2024 2 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

Superwp Dashboard Announcement 1.3.05 · audited by WP Registry

Medium-severity findings.

1 medium 1 low
Audited release
1.3.05
Findings
2
Worst severity
medium
Content hash
27d95b696f2e2be61a873b58…

Findings

  • medium CSRF: delete all/selected feedback without nonce

    csrf

    superwp_dashboard_announcement_feedback_page handles delete_all_feedback and delete_selected_feedback with manage_options but no wp_verify_nonce/check_admin_referer. An attacker can trick an admin into wiping feedback via a crafted POST.

    core/class-superwp-dashboard-announcement.php:318-336

    Recommendation

    Add check_admin_referer before deleting feedback options.

  • low Dashboard feedback submit missing nonce

    missing_nonce

    Feedback form in the dashboard widget accepts POST submit_feedback and appends to the feedback option without a nonce. Limited blast (stored comments for admins only).

    core/class-superwp-dashboard-announcement.php:278-296

    Recommendation

    Verify a nonce and sanitize reaction/comment fields before update_option.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.