WPIntell

Source evidence

Literal malware

WooCommerce Legacy REST API · review · 2024-04-30T15:56:00+00:00

complaintsentiment
highseverity
1.0relevance
3replies
Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

9 / 38 rows with source links

23.7% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

29 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

review · 1 stars
magneticdud unresolved
I had to uninstall it and remove not once but twice. I don’t like that wordpress is installing this unwanted malware (by definition, since it installs without user confirmation and ignores the previous attempt where i already uninstalled it) I don’t use the rest api but i don’t want to disable it until it’s really needed Hi @magneticdud , I’m sorry to hear you’ve experienced some difficulties. In making this plugin available and implementing automatic installation (via WooCommerce), our intention was only ever to be helpful and minimize disruption for our community of users as we transition away from the Legacy REST API. I’m not sure if there is a single canonical definition of malware but, if there was, I would have thought it would have to contain a strong element of intent to cause harm or perhaps intent to steal information: that definitely is not the case here, even if perhaps there are some flaws in the auto-install logic (and, based on your report here, we’ll definitely explore if we missed something there). Thanks for taking the time to leave a review—and our apologies again if we set off any alarm bells. Hi @magneticdud , you can prevent the plugin from being automatically installed by adding the following code snippet to your site, for example with the Code Snippets plugin : add_filter( 'woocommerce_skip_legacy_rest_api_plugin_auto_install', '__return_true' ); We mentioned this in the plugin autoinstall announcement post , apologies if that wasn’t clear enough. This reply was modified 2 years ago by Néstor Soriano Vilchez . This reply was modified 2 years ago by Néstor Soriano Vilchez . I don’t want to add yet another line in the functions.php, in this way it becomes an unmanageable mess, plus it’s going to slow down the site by some half milliseconds as it has to parse another “useless” line

Comments

3 shown
Barry 2024-04-30T23:03:00+00:00

Hi @magneticdud , I’m sorry to hear you’ve experienced some difficulties. In making this plugin available and implementing automatic installation (via WooCommerce), our intention was only ever to be helpful and minimize disruption for our community of users as we transition away from the Legacy REST API. I’m not sure if there is a single canonical definition of malware but, if there was, I would have thought it would have to contain a strong element of intent to cause harm or perhaps intent to steal information: that definitely is not the case here, even if perhaps there are some flaws in the auto-install logic (and, based on your report here, we’ll definitely explore if we missed something there). Thanks for taking the time to leave a review—and our apologies again if we set off any alarm bells.

Néstor Soriano Vilchez 2024-05-02T07:25:00+00:00

Hi @magneticdud , you can prevent the plugin from being automatically installed by adding the following code snippet to your site, for example with the Code Snippets plugin : add_filter( 'woocommerce_skip_legacy_rest_api_plugin_auto_install', '__return_true' ); We mentioned this in the plugin autoinstall announcement post , apologies if that wasn’t clear enough. This reply was modified 2 years ago by Néstor Soriano Vilchez . This reply was modified 2 years ago by Néstor Soriano Vilchez .

magneticdud 2024-05-16T12:21:00+00:00

I don’t want to add yet another line in the functions.php, in this way it becomes an unmanageable mess, plus it’s going to slow down the site by some half milliseconds as it has to parse another “useless” line