WP Manifestindependent plugin directory
manifest / media / trds-mp3-listing

TRDS MP3 Listing WP Registry grade B. Medium-severity findings · 2 findingsWP RegistryMedium-severity findings · 2 findingsOpen the reportB

The TRDS MP3 Listing is a WordPress plugin that allows you to create and manage a listing of MP3 audio files on your website. This plugin simplifies the process of showcasing audio content, providing users with easy access to download and share MP3 files via social media.

★ 1stars
13release downloads
v1.2.8latest · 2mo ago

Install

Download mp3-listing-plugin.v1.2.5.zip From the v1.2.5 release on GitHub, May 3, 2025

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/wikiwyrhead/trds-mp3-listing/releases/download/v1.2.5/mp3-listing-plugin.v1.2.5.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

TRDS MP3 Listing Plugin

A WordPress plugin for managing and displaying MP3 files with social sharing and download capabilities.

Version 1.2.8

Latest Updates

  • Search now finds matching MP3s across every playlist and pagination page
  • Fixed numbered series searches and search reset pagination
  • Scoped listing and Load More state to each shortcode instance
  • Improved search functionality efficiency
  • Fixed playlist filtering during search
  • Enhanced social media sharing dropdown behavior
  • Optimized load more functionality

Features

  • Upload and manage MP3 files
  • Social media sharing (Facebook, Twitter, LinkedIn, Reddit, WhatsApp, Email)
  • Download tracking
  • Customizable colors for buttons and titles
  • Playlist management
  • Responsive audio player
  • Efficient search functionality
  • Load more pagination

Installation

  1. Download the plugin
  2. Upload to your WordPress plugins directory
  3. Activate the plugin
  4. Configure settings under MP3 Files > Settings

Usage

Use the shortcode [mp3_listing] to display the MP3 listing on any page or post.

Changelog

1.2.8

  • Expanded MP3 keyword search across all playlists and pagination pages
  • Kept normal browsing and cleared-search results scoped to the page's playlist

1.2.7

  • Fixed numbered lesson searches such as (01)
  • Restored the first page when clearing a search
  • Fixed search on small playlists and pages with multiple listings
  • Prevented duplicate Load More requests

1.2.6

  • Excluded internal MP3 records from front-end site search results

1.2.5

  • Improved search functionality efficiency
  • Fixed playlist filtering during search
  • Enhanced social media sharing dropdown behavior
  • Optimized load more functionality

1.2.4

  • Fixed social media sharing dropdown issues
  • Improved playlist management
  • Enhanced security features

1.2.3

  • Added playlist support
  • Improved UI/UX
  • Fixed minor bugs

1.2.2

  • Added support for both logged-in and logged-out users
  • Improved AJAX handling
  • Enhanced error handling

1.2.1

  • Added color customization options
  • Improved mobile responsiveness
  • Fixed download tracking

1.2.0

  • Added social media sharing
  • Improved audio player
  • Enhanced security features

1.1.0

  • Initial release with basic functionality
  • MP3 upload and management
  • Download tracking
  • Basic audio player

Support

For support, please open an issue on the GitHub repository.

License

GPLv2 or later

Releases

8 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v1.2.8 latest
Aug 25, 2026 2mo ago
tag only
—
Aug 25, 2026 2mo ago
tag only
—
Aug 22, 2026 2mo ago
tag only
—
May 3, 2025 1 year ago
mp3-listing-plugin.v1.2.5.zip
7
May 3, 2025 1 year ago
mp3-listing-plugin-v1.2.4.zip
2
Apr 3, 2025 1 year ago
mp3-listing-plugin-v1.2.3.zip
4
Feb 22, 2025 1 year ago
tag only
—
Oct 9, 2024 2 years ago
tag only
—
B grade

Security

TRDS MP3 Listing 1.2.5 · audited by WP Registry

Medium-severity findings.

2 medium
Audited release
1.2.5
Findings
2
Worst severity
medium
Content hash
6f53aa02b96d7e303502dd2c…

Findings

  • medium Track order AJAX missing capability and nonce

    missing_capability

    mp3_update_track_order is hooked to wp_ajax_mp3_update_track_order and updates playlist_order_{playlist_id} post meta for arbitrary track IDs from $_POST without check_ajax_referer/wp_verify_nonce and without current_user_can (e.g. manage_options or edit_post). Any authenticated user (Subscriber+) can reorder tracks across playlists. Sibling handlers (mp3_remove_from_playlist, load_more) do implement nonce and/or caps.

    mp3-listing-plugin.php:249-264

  • medium Track order AJAX missing CSRF nonce

    missing_nonce

    Same mp3_update_track_order handler performs state-changing post_meta writes with no wp_verify_nonce/check_ajax_referer, enabling CSRF against any logged-in victim browser as well as direct authenticated abuse.

    mp3-listing-plugin.php:249-264

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.