WP Manifestindependent plugin directory
manifest / utilities / coronavirus-utilities

Coronavirus Utilities WP RegistryMedium-severity findings · 2 findingsOpen the reportB

Utility and feature plugin for the UCF Coronavirus website.

by UCF Web Communications · github.com/ucf/coronavirus-utilities

★ 0stars
1composer installs
v1.2.0latest · 2 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/ucf/coronavirus-utilities/archive/refs/heads/master.zip

On Packagist as ucf/coronavirus-utilities:

composer require ucf/coronavirus-utilities
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
From the readme github.com/ucf/coronavirus-utilities ↗
Coronavirus Utilities # Utility and feature plugin for the UCF Coronavirus website. Description ## Utility and feature plugin for the UCF Coronavirus website. Documentation ## Head over to the Coronavirus Utilities wiki for detailed information about this plugin, installation instructions, and more. Changelog ## 1.2.0 ### Enhancements: Added cache clearing logic for the ICYMI emails Changed the menu name of the email builder 1.1.3 ### Bug Fixes: Added cache busting for ICYMI email. 1.1.2 ### Enhancements: Added composer file. 1.1.1 ### Enhancements: Modified email "preview" nomenclature throughout email builder tools to more clearly define them as "tests" 1.1.0 ### Enhancements: Added the ability to send weekly email tests from the email builder directly. Added Customizer options for changing the subject line and "from" details for email tests. 1.0.1 ### Bug fixes: Fixed styling for nested list items in WYSIWYG fields in the coronavirus email builder. 1.0.0 ### Initial release Upgrade Notice ## n/a Development ## Note that compiled, minified css files are included within the repo. Changes to these files should be tracked via git (so that users installing

Releases

7 releases.

Tag
Published
v1.2.0 latest
Oct 3, 2024 2 years ago
v1.1.3
Sep 1, 2023 3 years ago
v1.1.2
Mar 21, 2023 3 years ago
v1.1.1
Sep 25, 2020 6 years ago
v1.1.0
Sep 1, 2020 6 years ago
v1.0.1
Aug 3, 2020 6 years ago
v1.0.0
Jul 22, 2020 6 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

Coronavirus Utilities 1.2.0 · audited by WP Registry

Medium-severity findings.

1 medium 1 low
Audited release
1.2.0
Findings
2
Worst severity
medium
Content hash
51e7d20c90a7e1825acedf2a…

Findings

  • medium AJAX instant-send lacks nonce and capability check

    missing_capability

    wp_ajax_instant-send has no check_ajax_referer and no current_user_can. Any authenticated user can trigger a test send of the weekly coronavirus email markup to configured preview recipients.

    includes/email-send-functions.php:150-162

  • low REST weekly email options publicly readable

    information_disclosure

    coronavirus-weekly-email/v1/options uses permissions_callback that returns true. READABLE only; exposes ACF weekly email options (content, images) intended for external email builders. Not a state change; classified low information disclosure / intentional public API.

    includes/api-weekly-email.php:22-39

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →