Some feedback from plugin inspector
-
Hi guys,
I am running some tests om my site. Here is some feedback that you may find useful for WP Project Manager:
DeprecatedUnsafe/wedevs-project-manager-pro/includes/pro/class/updates.php view source screen_icon at line 365: <?php screen_icon( 'plugins' ); ?> Deprecated 3.8.0 Use get_screen_icon() wp_remote_post at line 164: $response = wp_remote_post( self::api_endpoint . 'activation', $params ); Potential risk: Medium. Upload or download data from/to any web server. May be used to load malicious code from the external source. You can prevent that using constant WP_HTTP_BLOCK_EXTERNAL or restrict hosts with WP_ACCESSIBLE_HOSTS constant. wp_remote_post at line 309: $response = wp_remote_post( self::api_endpoint . 'update_check', $params ); Potential risk: Medium. Upload or download data from/to any web server. May be used to load malicious code from the external source. You can prevent that using constant WP_HTTP_BLOCK_EXTERNAL or restrict hosts with WP_ACCESSIBLE_HOSTS constant.
For a full report, I suggest you take a look at Plugin Inspector – https://www.ads-software.com/plugins/plugin-inspector/
Best regards,
Michaelhttps://www.ads-software.com/plugins/wedevs-project-manager/
Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
- The topic ‘Some feedback from plugin inspector’ is closed to new replies.