{"id":7936055,"date":"2015-02-28T14:42:08","date_gmt":"2015-02-28T14:42:08","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/security-39\/"},"modified":"2016-09-03T01:26:32","modified_gmt":"2016-09-03T01:26:32","slug":"security-39","status":"closed","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/security-39\/","title":{"rendered":"Security?"},"content":{"rendered":"

I tried this plugin, as the general idea behind it is so cool.<\/p>\n

Problem1: I quickly looked at the code and found the php is executed with the “eval” command. That is really scary in many ways: It is a door opener for all sorts of misuse and makes also php bug fixing so very hard.<\/p>\n

Problem2: I installed the plugin (as admin) and re-logged with the role of an editor (lower rights level). I could still access all the plugin’s settings, which was unexpected.
\nSo there seems to be not even a solid rights protection. If WordPress is used not only by the owner but content is maintained also by editors, this missing rights protection would be a no-go for me.<\/p>\n

I gave up at that point. As much as I would like to use it: I stay away from it for now.<\/p>\n

If the security issues are fixed, I would be more than happy to rate this 5 stars.<\/p>\n","protected":false},"template":"","class_list":["post-7936055","topic","type-topic","status-closed","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/7936055","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/7936055\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=7936055"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}