Changeset 3362936 for wpvulnerability/trunk/wpvulnerability-run.php

Timestamp:

09/17/2025 06:49:03 AM (6 months ago)

Author:

JavierCasares

Message:

[4.1.0] - 2025-09-16

Added

• "Never" send notifications.
• Choose notification day and time.
• Configurable cache expiration (1, 6, 12 or 24 hours).
• WP-CLI command to configure cache expiration.
• Constants to set hiding components.
• WP-CLI command to manage hidden components.
• WP-CLI command to configure notification email and period.
• Add notifications for Slack and Teams.
• Disable mail notifications from mails.
• WordPress Playground blueprint (in test).

Changed

• Cache is always the same eveywhere.
• Options for notifications.
• Schedule fields only appear for selected periods.
• Placeholder and conditional display for Slack and Teams notification fields.
• Added links to documentation.

Fixed

• When a plugin is updated, hide the vulnerabilities.
• Display of schedule fields based on period.
• Conditional display for email, Slack, and Teams notification fields.
• When save, there where two saving messages.
• wp_get_update_php_url() for WordPress 5.1.0+ (fallback)
• wp_timezone() for WordPress 5.1.0+ (fallback)
• wp_doing_cron() for WordPress 4.8.0+ (fallback)
• Application Passwords / REST API after WordPress 5.6.0

Compatibility

• WordPress: 4.7 - 6.9
• PHP: 5.6 - 8.4
• WP-CLI: 2.3.0 - 2.11.0

Tests

• PHP Coding Standards: 3.13.4
• WordPress Coding Standards: 3.2.0
• Plugin Check (PCP): 1.6.0
• SonarCloud Code Review
• Amplify Code Check

File:

• wpvulnerability/trunk/wpvulnerability-run.php (modified) (3 diffs)

wpvulnerability/trunk/wpvulnerability-run.php

@@ -158 +158 @@
     // Add wpvulnerability-config option if it does not exist.
     if ( ! $config_key( 'wpvulnerability-config' ) ) {
-        $default_config = array(
-            'emails' => get_bloginfo( 'admin_email' ),
-            'period' => 'weekly',
-        );
-        $add_option( 'wpvulnerability-config', $default_config );
+                                                                $default_config = array(
+                                                                    'emails'        => get_bloginfo( 'admin_email' ),
+                                                                    'period'        => 'weekly',
+                                                                    'day'           => 'monday',
+                                                                    'hour'          => 0,
+                                                                    'minute'        => 0,
+                                                                    'cache'         => 12,
+                                                                    'notify'        => array(
+                                                                        'email' => 'y',
+                                                                        'slack' => 'n',
+                                                                        'teams' => 'n',
+                                                                    ),
+                                                                    'slack_webhook' => '',
+                                                                    'teams_webhook' => '',
+                                                                );
+                                                                $add_option( 'wpvulnerability-config', $default_config );
     }
 
@@ -235 +246 @@
             'sqlite'      => 0,
         );
-        $current_option  = $config_key( 'wpvulnerability-analyze' );
+
+        foreach ( array_keys( $default_analyze ) as $component ) {
+            $constant = 'WPVULNERABILITY_HIDE_' . strtoupper( $component );
+            if ( defined( $constant ) && constant( $constant ) ) {
+                $default_analyze[ $component ] = 1;
+            }
+        }
+        $current_option = $config_key( 'wpvulnerability-analyze' );
 
         if ( false === $current_option ) {
@@ -484 +502 @@
 
     if ( in_array( $type, $valid_types, true ) ) {
+        $constant = 'WPVULNERABILITY_HIDE_' . strtoupper( $type );
+        if ( defined( $constant ) && constant( $constant ) ) {
+            return false;
+        }
+
         return ! ( isset( $wpvulnerability_analyze[ $type ] ) && (int) $wpvulnerability_analyze[ $type ] );
     }