Benign wordpress Download

accesspress-social-icons 1.8.2

Opens directory with PHP opendirHTML form declares the POST method

SHA-256a7bde819464b9dea94cecd331297d02b9595b112e2eb80fc24ecfc5630904115

URLhttps://downloads.wordpress.org/plugin/accesspress-social-icons.1.8.2.zip

Evidence

Reads PHP query parameters via $_GET lines 48–53

21… in_footer_text( $text ){
           $link = 'https://wordpress.org/support/plugin/accesspress-social-icons/reviews/#new-post';
           $pro_link = 'https://accesspressthemes.com/wordpress-plugins/accesspress-social-icons-pro/';
          if(isset( $_GET[ 'page' ] )){
          if($_GET[ 'page' ] == 'aps-social-add' || $_GET[ 'page' ] == 'aps-social' ||
          $_GET[ 'pa …

Sends a WordPress HTTP redirect lines 62–66

37… ' ] ) && $_GET[ 'page' ] == 'aps-doclinks' ) {
              wp_redirect( 'https://accesspressthemes.com/documentation/accesspress-social-icons/' );
              exit();
          }
          if ( isset( $_GET[ 'page' ] ) && $_GET …

Code embeds cleartext HTTP URL literal lines 74–76

14…    $new_links = array(
                  'demo' => '<a href="http://demo.accesspressthemes.com/wordpress-plugins/accesspress-social-icons" target="_blank"><span class="dashicons dashicons-welcome-view-site"></span>Live Demo</a>',
                  'doc' => '<a h …

Reads PHP form parameters via $_POST lines 209–213

38… b
      function aps_add_new_set() {
          if (isset($_POST['aps_add_set_nonce'], $_POST['aps_icon_set_submit']) && wp_verify_nonce($_POST['aps_add_set_nonce'], 'aps_add_new_set')) {
              include_once('inc/backend/save-set.php');
          } el …

Handles a WordPress nonce parameter lines 218–228

31… pre format
      function print_array($array) {
          echo "<pre>";
          print_r($array);
          echo "</pre>";
      }
224
      //Icon set delete section
      function aps_delete_action() {
          if (isset($_GET['action'], $_GET['_wpnonce']) && wp_verify_nonce($_GET['_wpnonce'], 'aps-delete-nonce')) {
              include_once('inc/backend/delete-icon-set.php' …

Showing the top 5 files — 4 more files (25 regions) not shown.

No evidence locations were recorded for this file. Raw result