phpwatch / wordpress-security-advisories
WordPress 安全公告 https://php.watch/articles/WordPress-Security-Advisories
dev-master
2020-07-01 08:53 UTC
Conflicts
- johnpbloch/wordpress: >=5.4,<5.4.2 || >=5.3,<5.3.1 || >=5.2,<5.2.5 || >=5.1,<5.1.4 || >=5.0,<5.0.8 || >=4.9,<4.9.13 || >=4.8,<4.8.12 || >=4.7,<4.7.16 || >=4.6,<4.6.17 || >=4.5,<4.5.20 || >=4.4,<4.4.21 || >=4.3,<4.3.22 || >=4.2,<4.2.26 || >=4.1,<4.1.29 || >=4.0,<4.0.29 || >=3.9,<3.9.30 || >=3.8,<3.8.32 || >=3.7,<3.7.32 || <3.7
- roots/wordpress: >=5.4,<5.4.2 || >=5.3,<5.3.1 || >=5.2,<5.2.5 || >=5.1,<5.1.4 || >=5.0,<5.0.8 || >=4.9,<4.9.13 || >=4.8,<4.8.12 || >=4.7,<4.7.16 || >=4.6,<4.6.17 || >=4.5,<4.5.20 || >=4.4,<4.4.21 || >=4.3,<4.3.22 || >=4.2,<4.2.26 || >=4.1,<4.1.29 || >=4.0,<4.0.29 || >=3.9,<3.9.30 || >=3.8,<3.8.32 || >=3.7,<3.7.32 || <3.7
- wpackagist-plugin/2j-slideshow: <1.3.40
- wpackagist-plugin/abstract-submission: <=0.6
- wpackagist-plugin/advanced-ads: <1.17.4
- wpackagist-plugin/all-in-one-wp-migration: <7.15
- wpackagist-plugin/appointment-booking-calendar: <1.3.35
- wpackagist-plugin/async-javascript: <2.20.02.27
- wpackagist-plugin/auth0: <3.11.3
- wpackagist-plugin/awesome-support: <=5.8.0
- wpackagist-plugin/batchmove: <=1.5
- wpackagist-plugin/bbp-members-only: >=1,<1.3.1
- wpackagist-plugin/bbpress-login-register-links-on-forum-topic-pages: >=2,<2.8.5
- wpackagist-plugin/blogtopdf: <=1.0.2
- wpackagist-plugin/brizy: <1.0.114
- wpackagist-plugin/buddypress-component-stats: <=1.0
- wpackagist-plugin/calculated-fields-form: <1.0.355
- wpackagist-plugin/cardgate: <3.1.16
- wpackagist-plugin/chained-quiz: <1.1.8.2
- wpackagist-plugin/clean-and-simple-contact-form-by-meg-nicholas: <=4.7.0
- wpackagist-plugin/cm-pop-up-banners: <1.4.11
- wpackagist-plugin/code-snippets: <2.14.0
- wpackagist-plugin/computer-repair-shop: <2.0
- wpackagist-plugin/contact-form-7: >=5.0,<5.0.4
- wpackagist-plugin/contextual-adminbar-color: <0.3
- wpackagist-plugin/conversation-watson: <0.8.21
- wpackagist-plugin/cookie-law-info: <1.8.3
- wpackagist-plugin/cookiebot: <3.6.1
- wpackagist-plugin/custom-post-type-ui: <1.7.4
- wpackagist-plugin/custom-registration-form-builder-with-submission-manager: <4.6.0.4
- wpackagist-plugin/custom-searchable-data-entry-system: <=1.7.1
- wpackagist-plugin/data-tables-generator-by-supsystic: <1.9.92
- wpackagist-plugin/donorbox-donation-form: >=7.1,<7.1.2
- wpackagist-plugin/duplicator: <1.3.28
- wpackagist-plugin/easy-property-listings: <3.4
- wpackagist-plugin/elementor: <2.9.8
- wpackagist-plugin/envira-gallery-lite: <1.7.7
- wpackagist-plugin/events-manager: <5.9.7.2
- wpackagist-plugin/export-users: <=1.4.2
- wpackagist-plugin/featured-image-from-url: <2.7.8
- wpackagist-plugin/flamingo: <2.1.1
- wpackagist-plugin/flexible-checkout-fields: <2.3.2
- wpackagist-plugin/font-awesome: <4.0.0-rc17
- wpackagist-plugin/gallery-images-ape: >=2.0,<2.0.7
- wpackagist-plugin/gboutique: <=1.3
- wpackagist-plugin/gdpr-cookie-compliance: >=4.0,<4.0.3
- wpackagist-plugin/htaccess: <1.8.2
- wpackagist-plugin/idx-broker-platinum: <2.6.2
- wpackagist-plugin/import-users-from-csv-with-meta: <1.15.0.1
- wpackagist-plugin/jetpack: >=7.9,<7.9.1
- wpackagist-plugin/learnpress: <3.2.6.8
- wpackagist-plugin/lifterlms: <3.37.15
- wpackagist-plugin/miniorange-saml-20-single-sign-on: <4.8.84
- wpackagist-plugin/modern-events-calendar-lite: >=5,<5.1.8 || >=4,<4.9.5
- wpackagist-plugin/modula-best-grid-gallery: <2.2.5
- wpackagist-plugin/mstore-api: <2.0.0
- wpackagist-plugin/newsletter: <6.5.4
- wpackagist-plugin/ninja-forms: <3.4.24.1
- wpackagist-plugin/order-import-export-for-woocommerce: <1.6.1
- wpackagist-plugin/order-xml-file-export-import-for-woocommerce: <1.3.1
- wpackagist-plugin/participants-database: <1.9.5.6
- wpackagist-plugin/photo-gallery: <1.5.46
- wpackagist-plugin/popup-builder: <3.65.2
- wpackagist-plugin/portfolio-filter-gallery: <1.1.3
- wpackagist-plugin/post-pdf-export: <=1.0.1
- wpackagist-plugin/postie: <=1.9.40
- wpackagist-plugin/pricing-table-by-supsystic: <1.8.2
- wpackagist-plugin/product-import-export-for-woo: <1.7.5
- wpackagist-plugin/product-lister-walmart: <=1.0.1
- wpackagist-plugin/product-reviews-import-export-for-woocommerce: <1.3.3
- wpackagist-plugin/profile-builder: <3.1.1
- wpackagist-plugin/rencontre: >=3,<3.2.3
- wpackagist-plugin/resim-ara: <=1.0
- wpackagist-plugin/responsive-add-ons: <2.2.6
- wpackagist-plugin/search-meter: <2.13.2
- wpackagist-plugin/seo-by-rank-math: <1.0.41
- wpackagist-plugin/sitepress-multilingual-cms: <4.3.7
- wpackagist-plugin/strong-testimonials: <2.40.1
- wpackagist-plugin/testimonial-free: <2.2.0
- wpackagist-plugin/themegrill-demo-importer: <1.6.3
- wpackagist-plugin/tutor: <1.5.3
- wpackagist-plugin/ultimate-faqs: <1.8.30
- wpackagist-plugin/ultimate-member: <2.1.3
- wpackagist-plugin/users-customers-import-export-for-wp-woocommerce: <1.3.9
- wpackagist-plugin/videos-on-admin-dashboard: <1.1.4
- wpackagist-plugin/wd-google-maps: <1.0.64
- wpackagist-plugin/web-portal-lite-client-portal-secure-file-sharing-private-messaging: <=1.1.1
- wpackagist-plugin/woocommerce-conversion-tracking: <2.0.6
- wpackagist-plugin/wordpress-database-reset: <3.15
- wpackagist-plugin/wp-accessibility: <1.7.0
- wpackagist-plugin/wp-advanced-search: <3.3.7
- wpackagist-plugin/wp-central: <1.5.2
- wpackagist-plugin/wp-ds-faq-plus: <1.4.2
- wpackagist-plugin/wp-ecommerce-shop-styling: <=2.9.1
- wpackagist-plugin/wp-file-upload: <4.13.1
- wpackagist-plugin/wp-security-audit-log: <4.0.2
- wpackagist-plugin/wp-simple-spreadsheet-fetcher-for-google: <0.3.7
- wpackagist-plugin/wpforms-lite: <1.5.9
- wpackagist-plugin/wps-hide-login: <1.5.5
- wpackagist-plugin/wpvivid-backuprestore: <0.9.36
- wpackagist-plugin/xml-file-export-import-for-stampscom-and-woocommerce: <1.1.9
- wpackagist-theme/fruitful: <3.8.2
This package is auto-updated.
Last update: 2024-08-29 05:28:36 UTC
README
受Roave/SecurityAdvisories启发,此包旨在提供对安装已知的WordPress核心包、插件和主题的基本保护。
这是一个元包,这意味着它不会向您的应用程序添加任何功能代码。此文件是一个纯JSON文件,其中包含一个包冲突列表,该列表指示composer阻止安装已知漏洞包。
要使用此功能,请将此包添加到您的composer设置中
composer require --dev phpwatch/wordpress-security-advisories:dev-master
添加此包后,如果您尝试require
具有已知漏洞的包,它将被阻止。
添加新包
请提交PR。请参阅编写自己的conflict
规则时WordPress核心包的规则。包需要按字母顺序排列。前两行保留给WordPress核心,然后是插件,最后是主题。使用空行有意地分隔核心、插件和主题。
我打算将此列表保留在wordpress.org上托管的包(因此可在wpackagist
上找到)。对于在其他地方托管的企业插件和主题,我建议您提供自己的更新端点。
协调安全发布
如果您想发布您的插件的安全漏洞,并希望协调更新列表,请不要创建PR/issue。相反,请通过SECURITY.md
文件中提到的详细信息与我联系。