Skip to content

Uninstall Method Not Working #732

@PluginVulnerabilities

Description

@PluginVulnerabilities

When WordPress plugins are uninstalled, they are supposed to “clear out any plugin options and/or settings specific to the plugin, and/or other database entities such as tables.” The plugin currently implements one of the two methods to handle that, an uninstall.php file. But in testing we do of plugins used by our customers, deleting a fresh install of the plugin currently leaves behind four options: kadence_blocks_schema_version, kadenceblocks_data_settings, stellarwp_telemetry, and stellarwp_telemetry_last_send.

Looking at the uninstall.php file, it doesn't handle removing anything specific to the plugin, and it calls a function in another file to clear out the stellarwp_telemetry options, which doesn't function properly. In the relevant function, maybe_remove_optin_option(), in the file /vendor/vendor-prefixed/stellarwp/telemetry/src/Telemetry/Uninstall.php, the options only get removed if the code that is commented as "All plugins have been removed, the token should be the only item in the array" is true. The only item in the array in our testing was plugins, not token.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions