• Resolved mln83

    (@mln83)


    Hi guys,

    I am running some tests om my site. Here is some feedback that you may find useful for WP Project Manager:

    DeprecatedUnsafe/wedevs-project-manager-pro/includes/pro/class/updates.php view source
    screen_icon at line 365:
    <?php screen_icon( 'plugins' ); ?>
    Deprecated 3.8.0 Use get_screen_icon()
    
    wp_remote_post at line 164:
    $response = wp_remote_post( self::api_endpoint . 'activation', $params );
    Potential risk: Medium. Upload or download data from/to any web server. May be used to load malicious code from the external source. You can prevent that using constant WP_HTTP_BLOCK_EXTERNAL or restrict hosts with WP_ACCESSIBLE_HOSTS constant.
    
    wp_remote_post at line 309:
    $response = wp_remote_post( self::api_endpoint . 'update_check', $params );
    Potential risk: Medium. Upload or download data from/to any web server. May be used to load malicious code from the external source. You can prevent that using constant WP_HTTP_BLOCK_EXTERNAL or restrict hosts with WP_ACCESSIBLE_HOSTS constant.

    For a full report, I suggest you take a look at Plugin Inspector – https://www.ads-software.com/plugins/plugin-inspector/

    Best regards,
    Michael

    https://www.ads-software.com/plugins/wedevs-project-manager/

Viewing 1 replies (of 1 total)
  • Plugin Author weDevs

    (@wedevs)

    Hello,

    Thank you for informing us. We will check them and find out the right solution.

    Thank you

Viewing 1 replies (of 1 total)
  • The topic ‘Some feedback from plugin inspector’ is closed to new replies.