WP Manifestindependent plugin directory
manifest / content / zume-coaching-checklist

Zúme - Coaching Checklist WP RegistryLow-severity findings · 1 findingOpen the reportA-

This plugin adds a coaching checklist that by default aligns with Zúme.Training's list of skills and concepts that all disciple-makers should be trained to implement. This allows coaches to assess progress of each point across the H-O-S-T (Hear, Obey, Share, Train) progression.

by zumeproject · github.com/zumeproject/zume-coaching-checklist · website

★ 0stars
43release downloads
≈10active sites
0.7latest · 4 years ago

Install

Download zume-coaching-checklist.zip From the 0.7 release on GitHub, Dec 15, 2021

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/zumeproject/zume-coaching-checklist/releases/download/0.7/zume-coaching-checklist.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.
Readme github.com/zumeproject/zume-coaching-checklist ↗

Plugin Banner

Zúme - Coaching Checklist

Purpose

This plugin adds a coaching checklist that by default aligns with Zúme.Training's list of skills and concepts that all disciple-makers should be trained to implement. This allows coaches to assess progress of each point across the H-O-S-T (Hear, Obey, Share, Train) progression.

Visit Zúme Training for more information:

https://zume.training/coaching-checklist/

Screenshot

list

Releases

7 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
0.7 latest
Dec 15, 2021 4 years ago
zume-coaching-checklist.zip
9
0.6
Nov 24, 2021 4 years ago
zume-coaching-checklist.zip
7
0.5
Nov 22, 2021 4 years ago
zume-coaching-checklist.zip
5
0.4
Nov 22, 2021 4 years ago
zume-coaching-checklist.zip
6
0.3
Nov 22, 2021 4 years ago
zume-coaching-checklist.zip
6
0.2
Nov 22, 2021 4 years ago
zume-coaching-checklist.zip
5
0.1
Nov 18, 2021 4 years ago
zume-coaching-checklist.zip
5

Active-site estimate ≈10 comes from the median of recent superseded releases. Method.

A- grade

Security

Zúme - Coaching Checklist 0.7 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
0.7
Findings
1
Worst severity
low
Content hash
96ac6468f263d98949dd1766…

Findings

  • low Notice-dismiss AJAX writes arbitrary dismissed-* options without capability

    missing_capability

    dt_hook_ajax_notice_handler verifies nonce wp_rest_dismiss then update_option('dismissed-' . sanitize_text_field($_POST['type']), true) with no current_user_can. Any logged-in user can mint that nonce and set arbitrary dismissed-* options. Consequence is limited to notice suppression / option pollution.

    zume-coaching-checklist.php:211-217

    Recommendation

    Restrict to manage_options and allowlist known notice type keys.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →