WP Manifestindependent plugin directory
manifest / developer / wpg-environment-info

WPG Environment Info WP RegistryLow-severity findings · 2 findingsOpen the reportA-

Add environment informations to your wp-admin bar

by Pierre Dargham, Globalis Media Systems · github.com/wp-globalis-tools/wpg-environment-info · website

★ 1stars
0.3.7latest · 8 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/wp-globalis-tools/wpg-environment-info/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Releases

15 releases.

Tag
Published
0.3.7 latest
Apr 20, 2018 8 years ago
0.3.6
Apr 19, 2018 8 years ago
0.3.5
Apr 19, 2018 8 years ago
0.3.4
Apr 19, 2018 8 years ago
0.3.3
Feb 20, 2018 8 years ago
0.3.2
Dec 20, 2017 8 years ago
0.3.1
Dec 20, 2017 8 years ago
0.3.0
Dec 20, 2017 8 years ago
0.2.6
Dec 20, 2017 8 years ago
0.2.5
Dec 20, 2017 8 years ago
0.2.4
Dec 20, 2017 8 years ago
0.2.3
Dec 20, 2017 8 years ago
0.2.2
Dec 20, 2017 8 years ago
0.2.1
Dec 20, 2017 8 years ago
0.2.0
Dec 20, 2017 8 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

WPG Environment Info 0.3.1 · audited by WP Registry

Low-severity findings only.

2 low
Audited release
0.3.1
Findings
2
Worst severity
low
Content hash
6e8d5a162b4ec7714be211c9…

Findings

  • low Version mismatch between package and plugin header

    version_mismatch

    Slug wpg-environment-info-0.3.7 vs header Version: 0.3.1.

    wpg-environment-info.php:10-10

    Recommendation

    Align header Version with release tag.

  • low Admin bar discloses server IP/hostname to administrators

    information_disclosure

    For manage_options users, the admin bar displays $_SERVER['SERVER_ADDR'] and gethostbyaddr result. Low impact operational disclosure.

    wpg-environment-info.php:117-129

    Recommendation

    Make server IP display opt-in via constant/filter if not needed in production admin bars.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →