WP Manifestindependent plugin directory

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/bireme/direve-wp-plugin/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

DirEve Plugin for WordPress

Introduction

This plugin creates a search interface for Virtual Health Library Events Directory (DirEve) information source.

Requirements

Wordpress 3.x

Install

  1. Download the DirEve plugin for Wordpress;
  2. Unzip the plugin below the 'wp-content/plugins' folder of your Wordpress instance and rename it to direve;
  3. Activate the DirEve plugin through the administration panel of WordPress (dashboard).

Configuration

Go to Settings in the administration panel (dashboard) and click on the newly created DirEVE item.

  • Plugin page is mandatory and is set to direve by default. It defines the URL of the search interface page;
  • Filter query is optional and defines the strategy (a term or expression) to act as a filter for record displaying;
  • Search form is optional and defines a flag to control the display of the search box in the DirEve homepage;
  • Disqus shortname is optional. If used, it requires a code for the integration with the associated comments service Disqus. Notice this requires previous registration within the comments service;
  • AddThis profile ID is optional and is provided to allow the integration with sharing tools services AddThis. Notice this requires previous registration within the sharing tools service;
  • Google Analytics code is optional and allows the integration of website analytics services provided by Google. Notice this requires previous registration in Google.

Configure RSS feed

To configure the RSS feed, you can also use the following parameters and filters:

  • mode - Filter by event modality. Possible values are in-person, hybrid and online
  • start_date - Filter by start date

Usage example

Filter by event modality:

https://<domain>/<plugin_slug>/events-feed?q=&filter=&mode=online
https://<domain>/<plugin_slug>/events-feed?q=&filter=&mode=online,hibrid

Filter by start date:

https://<domain>/<plugin_slug>/events-feed?q=&filter=&start_date=20230101
https://<domain>/<plugin_slug>/events-feed?q=&filter=&start_date=2023-01-01
https://<domain>/<plugin_slug>/events-feed?q=&filter=&start_date=+2 days
https://<domain>/<plugin_slug>/events-feed?q=&filter=&start_date=+2 weeks
https://<domain>/<plugin_slug>/events-feed?q=&filter=&start_date=+2 months

Filter by event modality and start date:

https://<domain>/<plugin_slug>/events-feed?q=&filter=&mode=online&start_date=20230101

Translations of this document

Español: Instalación del Plugin DirEve para Wordpress

Português: Plugin DirEve para Wordpress

Releases

4 releases.

Tag
Published
1.4.0 latest
Oct 9, 2025 1 year ago
1.2
Mar 12, 2021 5 years ago
May 27, 2019 7 years ago
Apr 25, 2018 8 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

D+ grade

Security

DirEve 1.4.0 · audited by WP Registry

High-severity findings.

1 high 1 medium
Audited release
1.4.0
Findings
2
Worst severity
high
Content hash
56e884731318bd9658f9049e…

Findings

  • high Unauthenticated SSRF via directly reachable template/similar.php / related.php

    ssrf

    DirEve ships template/similar.php and template/related.php that bootstrap WordPress via include wp-load.php and pass attacker-controlled $_GET[query] into file_get_contents with no allowlist. These files are linked from detail/resource templates as PLUGIN_URL/template/similar.php?query=... and are web-accessible under wp-content/plugins without auth. Allows server-side fetch of internal HTTP endpoints or local files (depending on allow_url_fopen/wrappers) and response parsing into the page.

    template/similar.php:1-8

  • medium Unescaped remote XML titles echoed (XSS after SSRF)

    xss_reflected

    Titles from the fetched XML (ti / ti_*) and lang path segments are echoed without esc_html. An attacker who points query at a host they control can return XML that injects HTML/JS into the response.

    template/similar.php:20-40

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.