magdev/wp-bnb
1
Fork 0
Code Issues Pull Requests Actions Releases 21 Activity

Security audit and bug fixes (v0.12.0)
All checks were successful
Create Release Package / build-release (push) Successful in 1m37s
Details

Browse Source 
- Complete security audit for WordPress best practices, OWASP Top 10
- Fix Calculator static method calls in API controllers
- Fix EmailNotifier method names in BookingsController
- Fix guest_id type casting in EmailNotifier

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Marco Grätsch
2026-02-04 09:44:23 +01:00
parent a8e0df99d1
commit dbd0f3f788
8 changed files with 117 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
PLAN.md
View File

@@ -211,11 +211,12 @@ This document outlines the implementation plan for the WP BnB Management plugin.
- [x] Order management
- [x] Refund handling
## Phase 12: Security Audit (v0.12.0)
## Phase 12: Security Audit (v0.12.0) - Complete
- [ ] Check for Wordpress best-practices
- [ ] Review the code for OWASP Top 10, including XSS, XSRF, SQLi and other critical threads
- [ ] Test the API-Endpoints against a local live system under <http://localhost:9080/> for common vulnerabilities
- [x] Check for WordPress best-practices
- [x] Review the code for OWASP Top 10, including XSS, CSRF, SQLi and other critical threats
- [x] Test the API-Endpoints against a local live system under <http://localhost:9080/> for common vulnerabilities
- [x] Fix bugs discovered during security audit
## Future Considerations (v1.0.0+)
@@ -360,5 +361,5 @@ The plugin will provide extensive hooks for customization:
| 0.9.0 | Prometheus Metrics | Complete |
| 0.10.0 | API Endpoints | Complete |
| 0.11.0 | WooCommerce Integration | Complete |
| 0.12.0 | Security Audit | TBD |
| 0.12.0 | Security Audit | Complete |
| 1.0.0 | Stable Release | TBD |