{"id":2616,"date":"2016-04-04T14:58:29","date_gmt":"2016-04-04T20:58:29","guid":{"rendered":"http:\/\/www.whitefirdesign.com\/blog\/?p=2616"},"modified":"2016-04-04T14:58:29","modified_gmt":"2016-04-04T20:58:29","slug":"why-does-the-wordpress-plugin-directory-have-rules-if-they-dont-bother-to-enforce-them","status":"publish","type":"post","link":"https:\/\/www.whitefirdesign.com\/blog\/2016\/04\/04\/why-does-the-wordpress-plugin-directory-have-rules-if-they-dont-bother-to-enforce-them\/","title":{"rendered":"Why Does The WordPress Plugin Directory Have Rules If They Don&#8217;t Bother To Enforce Them?"},"content":{"rendered":"<p>When it comes to distribution platforms for software one of the frequent complaints of developers is uneven enforcement of rules and regulations, which makes\u00a0it hard to know what is and isn&#8217;t acceptable. Recently we came across an example of this with Plugin Directory for WordPress:<\/p>\n<p>While dealing with <a href=\"https:\/\/www.pluginvulnerabilities.com\/2016\/04\/04\/reflected-cross-site-scripting-xss-vulnerability-in-wordpress-event-calendar-spider-event-calendar\/\">one of the vulnerabilities<\/a> we recently discovered through our <a href=\"https:\/\/www.pluginvulnerabilities.com\/\">Plugin Vulnerabilities service<\/a>, we were have a bit of issue discussing communicating about the issue\u00a0since it turned out the plugin had two names.<\/p>\n<p>On the Installed Plugins pages in WordPress it is referred to as\u00a0Spider Event Calendar:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2618\" src=\"https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/spider-event-calendar-on-installed-plugins-page.png\" alt=\"spider-event-calendar-on-installed-plugins-page\" width=\"800\" height=\"100\" srcset=\"https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/spider-event-calendar-on-installed-plugins-page.png 800w, https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/spider-event-calendar-on-installed-plugins-page-300x38.png 300w, https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/spider-event-calendar-on-installed-plugins-page-768x96.png 768w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 984px) 61vw, (max-width: 1362px) 45vw, 600px\" \/><\/p>\n<p><a href=\"https:\/\/wordpress.org\/plugins\/spider-event-calendar\/\">On the Plugin Directory<\/a> its name is WordPress Event Calendar:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2619\" src=\"https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/wordpress-event-calendar-on-plugin-directory.png\" alt=\"wordpress-event-calendar-on-plugin-directory\" width=\"800\" height=\"100\" srcset=\"https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/wordpress-event-calendar-on-plugin-directory.png 800w, https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/wordpress-event-calendar-on-plugin-directory-300x38.png 300w, https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/wordpress-event-calendar-on-plugin-directory-768x96.png 768w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 984px) 61vw, (max-width: 1362px) 45vw, 600px\" \/><\/p>\n<p>Okay, actually while the main name is WordPress Event Calendar, you can see that it is referred to by both names in different places:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2620\" src=\"https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/wordpress-event-calendar-on-plugin-directory-full.png\" alt=\"wordpress-event-calendar-on-plugin-directory-full\" width=\"800\" height=\"600\" srcset=\"https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/wordpress-event-calendar-on-plugin-directory-full.png 800w, https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/wordpress-event-calendar-on-plugin-directory-full-300x225.png 300w, https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/wordpress-event-calendar-on-plugin-directory-full-768x576.png 768w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 984px) 61vw, (max-width: 1362px) 45vw, 600px\" \/><\/p>\n<p>It is confusing to say the least and it seems like restricting a plugin to one name would be reasonable thing to do, but what seem to be the bigger issue here was with the fact that using the word WordPress in a plugin&#8217;s name is supposed to be against the rules of the Plugin Directory.<\/p>\n<p>On the\u00a0<a href=\"https:\/\/wordpress.org\/plugins\/about\/guidelines\/\">Detailed Plugin Guidelines page<\/a> it says:<\/p>\n<blockquote><p>Don&#8217;t <a href=\"http:\/\/wordpressfoundation.org\/trademark-policy\/\">violate our trademarks<\/a>. Don&#8217;t use &#8220;wordpress&#8221; in your domain name. Use &#8220;wp&#8221; instead, or better yet, come up with your own original branding! People remember names.<\/p><\/blockquote>\n<p>On the\u00a0<a href=\"https:\/\/wordpress.org\/plugins\/about\/faq\/\">Developer FAQ page<\/a>\u00a0it is put a lot more clearly:<\/p>\n<blockquote>\n<h4 id=\"names-not-permitted\">Are there names you don&#8217;t permit?<\/h4>\n<p>We don&#8217;t allow &#8216;WordPress&#8217; in plugin names as it&#8217;s redundant and somewhat obvious that you&#8217;re a WordPress plugin.<\/p><\/blockquote>\n<p>A little more looking showed that the <a href=\"https:\/\/profiles.wordpress.org\/webdorado\/#content-plugins\">same developer had six plugins with WordPress in the name<\/a>:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2621\" src=\"https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/webdorado-wordpress-plugins.png\" alt=\"webdorado-wordpress-plugins\" width=\"800\" height=\"350\" srcset=\"https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/webdorado-wordpress-plugins.png 800w, https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/webdorado-wordpress-plugins-300x131.png 300w, https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/webdorado-wordpress-plugins-768x336.png 768w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 984px) 61vw, (max-width: 1362px) 45vw, 600px\" \/><\/p>\n<p>All six of those plugins have associated paid plugins.<\/p>\n<p>A\u00a0<a href=\"https:\/\/wordpress.org\/plugins\/search.php?q=wordpress\">search of the Plugin Directory<\/a> shows that these are far from the only ones using WordPress in the name of plugins:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2622\" src=\"https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/plugin-directory-search-results-for-wordpress.png\" alt=\"plugin-directory-search-results-for-wordpress\" width=\"950\" height=\"4548\" srcset=\"https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/plugin-directory-search-results-for-wordpress.png 950w, https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/plugin-directory-search-results-for-wordpress-768x3677.png 768w, https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2016\/04\/plugin-directory-search-results-for-wordpress-214x1024.png 214w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 1362px) 62vw, 840px\" \/><\/p>\n<p>It certainly seems like the Plugin Directory is allowing the word WordPress to be used\u00a0since it is in such wide use and it would be easy to detect its usage in the name of the plugins when getting\u00a0the name of the plugins from their files to show it in the Plugin Directory. If this is the case then the documentation should be updated, otherwise we have just provided the people running the Plugin Directory with an easy way to find a lot plugins that they need to do something about.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>When it comes to distribution platforms for software one of the frequent complaints of developers is uneven enforcement of rules and regulations, which makes\u00a0it hard to know what is and isn&#8217;t acceptable. Recently we came across an example of this with Plugin Directory for WordPress: While dealing with one of the vulnerabilities we recently discovered &hellip; <a href=\"https:\/\/www.whitefirdesign.com\/blog\/2016\/04\/04\/why-does-the-wordpress-plugin-directory-have-rules-if-they-dont-bother-to-enforce-them\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Why Does The WordPress Plugin Directory Have Rules If They Don&#8217;t Bother To Enforce Them?&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[32],"tags":[],"class_list":["post-2616","post","type-post","status-publish","format-standard","hentry","category-wordpress-plugins"],"_links":{"self":[{"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/posts\/2616","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/comments?post=2616"}],"version-history":[{"count":3,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/posts\/2616\/revisions"}],"predecessor-version":[{"id":2624,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/posts\/2616\/revisions\/2624"}],"wp:attachment":[{"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/media?parent=2616"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/categories?post=2616"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/tags?post=2616"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}