WP Manifestindependent plugin directory
manifest / content / contentxpress-article-importer

ContentXpress Article Importer WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

Enhanced version of the ContentXpress Article Importer by Publishers Printing Company.

★ 0stars
2.3.0latest · 5 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/wenderhost/contentxpress-article-importer/archive/refs/heads/master.zip
Updates itself. It ships its own updater, so new versions appear under Dashboard → Updates.

This is a WordPress plugin for importing articles from ContentXPress. It is a fork of the original ContentXpress Article Importer developed by the Publishers Printing Company.

New features:

  • Uses <dc:creator prism:role="author"> data as the post author
  • Imports <RTF:Terms> as post tags
  • Imports <prism:coverDisplayDate> as a custom taxnomy
  • Assigns proper date to the post by parsing the date from the <dc:identifier> field
  • Imports <prism:section> as a category
  • Adds article images to the top of the content as a [gallery]

Changelog

2.3.0

  • Documenting the need to keep the PHP session open inside lib/fns/preview.php. Otherwise, if you close it, the plugin is not able to import from the ContentXpress API. At some point in the future, I'd advise we fix the plugin to not require leaving the session open, but at this point, I'm simply documenting the requirement so as not to break the plugin in the future by using session_write_close() in lib/fns/preview.php.

2.2.4

  • Bugfix: Closing session in lib/views/previews.php.

2.2.3

  • Bugfix: Updating article import to assign new posts to existing authors

2.2.2

  • Echoing import status during form handling
  • Add nonce checking to form handling

2.2.1

  • Allow updates via the WordPress Update interface

2.2.0

  • Utilizing WP_Async_Task for article imports
  • Adding admin_notices to alert the user when a batch of articles has completed importing
  • Adding a "Check All" option to set imported posts to "Publish"
  • Updating new author email to match site domain
  • BUGFIX: Fixing original developers' code so that the "Displaying X - X+ of Y" displays correctly

2.1.4

  • BUGFIX: Original code doesn't handle duplicate article titles, they get overwritten. Updating code to create unique article titles for "News" and "Events".
  • Updating default gallery shortcode to: [gallery link="file" type="slideshow" autostart="false"]

2.1.3

  • Initializing $sub_heading variable in WPActions::createPost()
  • Updates to package build process

2.1.2

  • Importing <p prism:class="deck">...</p> as a custom field called sub_heading

2.1.1

  • Adjusted WPActions::uploadMedia to generate unique filenames for each image attachment

2.1.0

  • Initial release with New Features listed above

Releases

10 releases.

Tag
Published
2.3.0 latest
Oct 19, 2021 5 years ago
Feb 8, 2018 8 years ago
Dec 30, 2016 9 years ago
Dec 30, 2016 9 years ago
Dec 30, 2016 9 years ago
Dec 30, 2016 9 years ago
Dec 30, 2016 9 years ago
Dec 30, 2016 9 years ago
Dec 30, 2016 9 years ago
Dec 30, 2016 9 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

ContentXpress Article Importer 2.3.0 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
2.3.0
Findings
1
Worst severity
low
Content hash
ad6f82d8c52e621428b9960c…

Findings

  • low Import list AJAX handlers lack capability and nonce checks

    missing_capability

    wp_ajax_contentXpressImporter_contentStoreList and wp_ajax_contentXpressImporter_defaultPostType mutate $_SESSION import state from POST without check_ajax_referer or current_user_can. Impact is limited to the caller's PHP session (not shared site content), but any logged-in user can invoke the handlers. Background async path correctly uses check_ajax_referer.

    lib/fns/contentStoreList.php:41-68

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.