Adds warning message to WordPress Plugin Directory pages when plugins are from developer we have released security advisories for.

Latest Version

Version
1.0.32
Update
January 8, 2024
Size
9.98KiB
Developer
Category
Users
436
Rating
5 ★
Manifest Version
3
Web Store Status
Languages Support
English (United States)
See more
Permissions
See more

Plugin Vulnerabilities Extension

One of the little understood realities of security issues with WordPress plugins is that the insecurity of them is not evenly spread across those plugins. Instead, many developers are properly securing their plugins and others get them properly secured when alerted they haven’t done that, while other plugin developers either are unable or unwilling to properly secure their plugins. With the latter group, among the issues we have seen, are developers who have introduced new serious vulnerabilities that are substantially similar to vulnerabilities that they know have been exploited in their plugins.

In situations where we become aware of developers who have shown that inability or unwillingness to properly secure their plugin, we are releasing advisories to warn customers of our service and the wider WordPress community of the risk of utilizing those developers' plugins. This extension adds a notice on the pages of the WordPress Plugin Directory for the plugins from those developers.
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx",\t"name":"Plugin Vulnerabilities",\t"description":"Adds warning message to WordPress Plugin Directory pages when plugins are from developer we have released security advisories for.",\t"version":"1.0.32",\t"manifest_version":3,\t"content_scripts": [ \t{ \t\t"matches": ["https://*.wordpress.org/plugins/*","https://*.wordpress.org/support/plugin/*"], \t\t"js": ["content-script.js"] \t}\t],\t"icons" : {\t"16" : "icon16.png",\t"48" : "icon48.png",\t"128" : "icon128.png"\t},\t"homepage_url": "https://www.pluginvulnerabilities.com/security-advisories-on-wordpress-plugin-developers/?pk_campaign=Chrome"}
Read more