Plugin Assessment Questionnaire

Plugin Assessment Questionaire

1Basic information

2Inventory of features/functionality

3Security and code quality

4Accessibility

5Support resources

Requestor information
Your Unity ID*
Your Website URL and/or Bulk Agreement ID*
Is there anything we should know about this request?
Do you have a tight deadline? Is there already an open support incident related to this request?
Plugin information
Name of Plugin*
Plugin Author*
Version Submitted For Review*
Plugin URL*

Please enter the URL to the public download page for this theme, or to the GitHub repository where this theme’s code is managed.
When was the plugin last updated?*
MM slash DD slash YYYY
Enter any information available about compatibility or other requirements. Include any known plugin conflicts.
eg. “WordPress Version: 5.3 or higher,” “Requires the Options Framework plugin,” or “Compatible only with PHP version 5.6 or newer.” Leave blank if you don’t have any information about compatibility or other requirements.
Is this plugin Multisite compatible?
- Yes
- No
- Not sure
Demo URL

Is there a public website where we can see a demo of this plugin? Leave blank if you don’t have a demo URL.
Which of the following best describes this plugin?*
- Free plugin from WordPress.org
- Plugin purchased from a third-party vendor (eg. downloaded from ThemeForest)
- Custom-built plugin from a third-party vendor
- Custom-built plugin from a campus web team
What is the pricing structure for this plugin? One time or annual basis? Does the functionality require an additional subscription?
Have you already purchased this plugin?*
- Yes
- No
Are there any restrictions on usage for this plugin?
Is your licensing agreement for this plugin only valid for a limited number of websites? Is this plugin custom to your unit? etc.

Would you like to complete Part 3: Security and code quality*
This part of the questionnaire is optional for you. If you do not complete it, OIT staff will complete it on your behalf. Note: The more information you’re able to submit now, the faster the review process will be completed.
Security and code quality
Some questions in this part may require you to have a local development installation of WordPress in order to run tests on your plugin.

To complete all tests, we recommend:
- Make sure your local dev site is running the latest version of WordPress and a version of PHP with active support (opens in a new tab).
- In your wp-config.php file, be sure to add define('WP_DEBUG', true); to enable error reporting.
- Install WP CLI (opens in a new tab) on your dev site. Help installing WP CLI with MAMP (opens in a new tab).
If you do not already have a local dev site to test with, see Local (opens in a new tab) or MAMP (opens in a new tab) to get started.

If you’re not sure how to do complete any of the items listed below, feel free to skip to the next item. Someone from OIT will fill in the rest.
Is there an entry for this plugin in the WPScan Vulnerability Database?
- Yes
- No
View the WPScan Vulnerability Database (opens in a new tab) and search for your plugin.
URL for entry in the WPScan database
Are there any vulnerabilities labeled as "No known fix"?
- Yes
- No
Output from the "plugcheck" script
plugcheck.sh is a bash script written by Mitch Amiano in the College of Engineering, based on suggestions from the WPCampus community. It checks your theme or plugin for problematic patterns.

Example usage: In the command line from your wp-content/themes directory, run: plugcheck.sh [theme-slug] -v.
Test any custom functionality
- I have tested all custom functionality and am satisfied that it is working as intended.
Refer to the features and functionality documented in Part 2 of this questionnaire.
Additional comments on security and code quality

Plugin Assessment Questionnaire

Plugin Assessment Questionaire

Requestor information

Plugin information

Inventory of features/functionality

Security and code quality

Accessibility

Support resources