WP Manifestindependent plugin directory
manifest / updates / launchkit-pro

LaunchKit Pro WP Registry grade B. Medium-severity findings · 2 findingsWP RegistryMedium-severity findings · 2 findingsOpen the reportB

Everything you need to Launch, Grow, Market & Monetize with WordPress

★ 0stars
17release downloads
2.13.2latest · 1 year ago

Install

Download launchkit-pro-2.13.2.zip From the 2.13.2 release on GitHub, Apr 24, 2025

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/wplaunchify/launchkit-pro/releases/download/2.13.2/launchkit-pro-2.13.2.zip
Updates itself. It ships its own updater, so new versions appear under Dashboard → Updates.

LaunchKit

Description: Everything you need to Launch, Grow, Market & Monetize with WordPress License: GPLv2 or later License URI: https://www.gnu.org/licenses/gpl-2.0.html

LaunchKit makes it possible for anyone get up and running with a fully functional WordPress business site in just a few minutes.

License

LaunchKit is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or any later version.

LaunchKit is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with LaunchKit.

Description

LaunchKit provides everything everything you need to Launch, Grow, Market & Monetize with WordPress.

  • LaunchKit is free to install and use. Additional premium features & hands-on help are available here

LaunchKit makes it possible for anyone get up and running with a fully functional WordPress business site in just a few minutes.

LaunchKit provides a curated, white-label admin experience for WordPress that makes it possible to launch powerful solutions in minutes instead of hours or days.

LaunchKit offers powerful features by curating the best-in-class WordPress plugins into complementary features.

These features include:

  • Bookings
  • Customer Support
  • eCommerce
  • Events & Ticketing
  • Forms Management
  • Directories
  • Learning Management
  • Membership
  • Marketing Automation
  • Sales Funnels
  • Social Networking
  • Subscriptions
  • ..and more

With just one click you can be up and running with a fully functional business site based on LaunchKit.

Instead of creating Frankenstein Monsters by purchasing and installing random plugins at the flea market, LaunchKit provides you an optimized WordPress admin experience for instant delivery and management of a curated software stack, with expert help for your WordPress "solution" as a whole.

Changelog

04-15-2025 - version 2.13.2

  • Feature - added self hosted and removed github updater so php 7x works

04-09-2025 - version 2.13.1

  • Tweak - added clickwhale notices to be hidden

04-01-2025 - version 2.13.0

  • Tweak - improved license management interface and conditional application

03-17-2025 - version 2.12.1

  • Tweak - improved notifications when plugins require update and different hosts

03-16-2025 - version 2.12.0

  • Feature - added integration to WP plugin installer
  • Feature - improved login and api checkout
  • Feature - improved navigation and update experience

01-07-2025 - version 2.11.9

  • Feature - added fluent boards licensing

12-10-2024 - version 2.11.8

  • Tweak - improved fluentcommunity notices

12-09-2024 - version 2.11.7

  • Tweak - updated fluentcommunity notices

12-07-2024 - version 2.11.6

  • Tweak - removed css hiding fc license page

12-05-2024 - version 2.11.5

  • Tweak - fixed installer for ZipWP.com sandbox use

12-02-2024 - version 2.11.4

  • Tweak - fixed license manager scope to prevent ajax interference formiddable forms

11-30-2024 - version 2.11.3

  • Tweak - restored updater functionality

11-30-2024 - version 2.11.2

  • Tweak - further refined github updater

11-30-2024 - version 2.11.1

  • Tweak - backwards compatiblity for github updater to 7.x

11-26-2024 - version 2.11.0

  • Tweak - restored original github updater file for automatic updates from github

11-16-2024 - version 2.10.2

  • Fix - fixed undefined array key "plugin" in GitHubUpdater.php on line 138

11-13-2024 - version 2.10.1

  • Fix - fixed updater from free plugin due to githubupdloader

11-12-2024 - version 2.10.0

  • Feature - changed plugin name to pro for wp repository version override funtion

11-09-2024 - version 2.0.9

  • Feature - added github hosted repository with automatic plugin updater

11-09-2024 - version 2.0.8

  • Tweak - improved license key management, added FluentCommunity Pro and ACFPro

11-07-2024 - version 2.0.7

  • Fix - updated free features and pro upgrader

10-27-2024 - version 2.0.6

  • Tweak - added select all to the admin features menu

10-20-2024 - version 2.0.5

  • Feature - simplified navigation and setup pages

09-07-2024 - version 2.0.4

  • Feature - added Plugin Cleanup (delete) for all inactive plugins

07-21-2024 - version 2.0.3

  • Feature - added Plugin Manager for activating and deactivating and saving custom plugin recipes

07-03-2024 - version 2.0.2

  • Tweak - added Profile Builder Free and Pro, Simple History

07-03-2024 - version 2.0.1

  • Fix - removed BuddyBoss, BuddyPress, Youzify compatibility functions for conflict with Kadence (to be restored)

07-02-2024 - version 2.0.0

  • Feature - completely revamped interface and features

10-13-2022 - version 1.0.8

  • Tweak - css to hide sales banners in wc my account dash wbcom

08-05-2022 - version 1.0.7

  • Tweak - updated highlighting of plugin description

08-05-2022 - version 1.0.6

  • Tweak - updated styles and descriptions

07-31-2022 - version 1.0.5

  • Tweak - updated admin style and version number tracking

07-26-2022 - version 1.0.4

  • Tweak - updated admin css to include plugin page style options

07-24-2022 - version 1.0.3

  • Tweak - updated launchkit.php to correct callback names for admin sections

07-18-2022 - version 1.0.2

  • Feature - added option to change admin email without confirmation email
  • Feature - added option to remove wplk1 tag and redirect to /cancel-wplk1 page if wplk1 subscription cancelled
  • Tweak - adjusted css for one column checkout

07-10-2022 - version 1.0.1

  • Feature - added custom thank you redirection for three pages with matching product categories (wplk1, wplk3, wplk3)
  • Tweak - added custom css for Blocky theme for one column wc checkout

07-04-2022 - version 1.0.1

  • First Release!

Releases

14 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
2.13.2 latest
Apr 24, 2025 1 year ago
launchkit-pro-2.13.2.zip
9
Apr 9, 2025 1 year ago
tag only
—
Dec 11, 2024 1 year ago
tag only
—
Dec 10, 2024 1 year ago
launchkit-pro.zip
3
Dec 7, 2024 1 year ago
tag only
—
Dec 5, 2024 1 year ago
tag only
—
Dec 2, 2024 1 year ago
launchkit-pro-2.11.4.zip
3
Dec 1, 2024 1 year ago
launchkit-pro.zip
2
Nov 30, 2024 1 year ago
tag only
—
Nov 30, 2024 1 year ago
tag only
—
Nov 26, 2024 1 year ago
tag only
—
Nov 16, 2024 1 year ago
tag only
—
Nov 14, 2024 1 year ago
tag only
—
Nov 11, 2024 1 year ago
tag only
—
B grade

Security

LaunchKit Pro 2.13.2 · audited by WP Registry

Medium-severity findings.

1 medium 1 low
Audited release
2.13.2
Findings
2
Worst severity
medium
Content hash
4f9c7958c8f30628365582af…

Findings

  • medium Plugin installer AJAX missing capability checks beside nonce

    missing_capability

    install_plugin_callback, check_for_updates_callback, install_kadence_theme_callback, install_prime_mover_callback, upload_package_from_url_callback, and related handlers call check_ajax_referer but never current_user_can(install_plugins|manage_options). Nonces are emitted on manage_options UI, but nonce-alone is not an authorization gate; upload_package_from_url also performs wp_remote_get to attacker-supplied URL when nonce is held.

    includes/class-wplk-installer.php:609-690

    Recommendation

    Add current_user_can('install_plugins') / manage_options immediately after nonce verification on every installer AJAX handler; restrict package URL hosts.

  • low launchkit_toggle_notices AJAX has no nonce or capability check

    missing_nonce

    Any authenticated user can POST action=launchkit_toggle_notices and flip the launchkit_hide_notices option. Blast radius is cosmetic admin CSS hiding notices only.

    launchkit.php:667-672

    Recommendation

    Require manage_options and check_ajax_referer before updating the option.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.