Adds warning message to WordPress Plugin Directory pages when plugins are from developer we have released security advisories for.

Latest Version

Version
1.0.32
Update
January 8, 2024
Size
9.98KiB
Developer
Category
Users
436
Rating
5 ★
Manifest Version
3
Web Store Status
Languages Support
English (United States)
See more
Permissions
See more

Plugin Vulnerabilities Extension

One of the little understood realities of security issues with WordPress plugins is that the insecurity of them is not evenly spread across those plugins. Instead, many developers are properly securing their plugins and others get them properly secured when alerted they haven’t done that, while other plugin developers either are unable or unwilling to properly secure their plugins. With the latter group, among the issues we have seen, are developers who have introduced new serious vulnerabilities that are substantially similar to vulnerabilities that they know have been exploited in their plugins.

In situations where we become aware of developers who have shown that inability or unwillingness to properly secure their plugin, we are releasing advisories to warn customers of our service and the wider WordPress community of the risk of utilizing those developers' plugins. This extension adds a notice on the pages of the WordPress Plugin Directory for the plugins from those developers.
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx","name":"Plugin Vulnerabilities","description":"Adds warning message to WordPress Plugin Directory pages when plugins are from developer we have released security advisories for.","version":"1.0.32","manifest_version":3,"content_scripts": [ { "matches": ["https://*.wordpress.org/plugins/*","https://*.wordpress.org/support/plugin/*"], "js": ["content-script.js"] }],"icons" : {"16" : "icon16.png","48" : "icon48.png","128" : "icon128.png"},"homepage_url": "https://www.pluginvulnerabilities.com/security-advisories-on-wordpress-plugin-developers/?pk_campaign=Chrome"}
Read more

Similar Extensions

icon

Vulners Web Scanner Extension · Productivity 436 20 ★ 534KiB

icon

Bishop Vulnerability Scanner Extension · Developer Tools 436 12 ★ 198KiB

icon

Breakbot Extension · Developer Tools 436 5 ★ 141KiB

icon

Input hidden Monitor Extension · Developer Tools 436 0 ★ 36.05KiB

icon

should-i-trust Extension · Productivity 436 0 ★ 367KiB

icon

OWASP Penetration Testing Kit Extension · Developer Tools 436 43 ★ 7.14MiB

icon

Tracy Extension · Developer Tools 436 2 ★ 899KiB

icon

Evil Console Extension · Developer Tools 436 0 ★ 1.76MiB

icon

Admin tools Extension · Developer Tools 436 1 ★ 62.79KiB

icon

ZoomEye Tools Extension · Developer Tools 436 6 ★ 583KiB

icon

Cyber Web Tools Extension · Developer Tools 436 6 ★ 340KiB

icon

YesWeHack VDP Finder Extension · Productivity 436 2 ★ 88.31KiB

icon

CounterXSS Extension · Accessibility 436 3 ★ 98.96KiB

icon

Investigate with Lacework Extension · Productivity 436 0 ★ 17.45KiB

icon

Perceptual image analysis Extension · Productivity 436 1 ★ 78.98KiB

icon

Display Access Keys Extension · Accessibility 436 3 ★ 6.56KiB

icon

Pulsedive Threat Intelligence Extension · Productivity 436 30 ★ 18.48MiB

icon

Dev Playground Extension · Developer Tools 436 2 ★ 288KiB

icon

h4ck3r Extension · Developer Tools 436 1 ★ 178KiB

icon

OSIRIS: OSINT Reputation Intelligent Search Extension · Productivity 436 2 ★ 10.79KiB

icon

Scripter debugger extension Extension · Developer Tools 436 2 ★ 1.04MiB

icon

Hack-Tools Extension · Developer Tools 436 27 ★ 1.61MiB

icon

Untrusted Types for DevTools Extension · Developer Tools 436 3 ★ 39.16KiB

icon

LiveScriptConsole Extension · Developer Tools 436 2 ★ 388KiB

User reviews

icon

Trone (ID: 00000028560881c1) Voted 5 ★ - Updated 09/14/2022 This extension just displayed a warning on a plugin page in the WordPress repository -- which is exactly what it's supposed to do. A link was included for more information. Thanks to the devs for making this available! If possible, it would be great if you could make similar warnings appear when we find plugins in our dashboards, before installation. That would save us from needing to check the repository page for warnings.