WP Manifestindependent plugin directory

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/bireme/lis-wp-plugin/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

LIS plugin for WordPress (English)

Introduction

This plugin creates a search interface for the Virtual Health Library LIS (Health Information Locator) information source.

Requirements

Wordpress 3.x

Install

  1. Download the LIS plugin for Wordpress;
  2. Unzip the plugin below the wp-content/plugins folder of your Wordpress instance and rename it to lis;
  3. Activate the LIS plugin through the administration panel of WordPress (dashboard).

For further information on installing plugins please see the Manual Plugin Installation from Wordpress codex site.

Configuration

Go to Settings in the administration panel (dashboard) and click on the newly created LIS item.

  • Service URL is mandatory and is set to https://fi-admin.bvsalud.org by default. It specifies the webservice of FI-ADMIN system;
  • Plugin page is mandatory and is set to lis by default. It defines the URL of the search interface page;
  • Filter query is optional and defines the strategy (a term or expression) to act as a filter for record displaying. For further information on how to fill in this field, please access: How to create a Filter Query on LIS
  • Search form is optional and defines a flag to control the display of the search box in the LIS homepage;
  • Disqus shortname is optional. If used, it requires a code for the integration with the associated comments service Disqus. Notice this requires previous registration within the comments service;
  • Google Analytics code is optional and allows the integration of website analytics services provided by Google. Notice this requires previous registration in Google.

Plugin LIS WordPress (Português)

Introdução

Este plugin cria uma interface de busca para a fonte de informação LIS (Localizador de Informações em Saúde) da Biblioteca Virtual em Saúde.

Requisitos

WordPress 3.x

Instalação

  1. Faça o Download do plugin LIS para Wordpress;
  2. Descompacte o plugin na pasta wp-content/plugins da sua instalação do Wordpress e renomeie-o para lis;
  3. Ative o plugin LIS através do painel de administração do WordPress (dashboard).

Para mais informações sobre a instalação de plugins, consulte o Manual Plugin Installation from Wordpress codex site.

Configuração

Vá até Settings no painel de administração (dashboard) e clique no novo item LIS.

  • Service URL é obrigatório e está definido como https://fi-admin.bvsalud.org por padrão. Ele especifica o webservice do sistema FI-ADMIN;
  • Plugin page é obrigatório e está definido como lis por padrão. Ele define a URL da página da interface de busca;
  • Filter query é opcional e define a estratégia (um termo ou expressão) para atuar como filtro na exibição dos registros. Para mais informações sobre como preencher este campo, acesse: How to create a Filter Query on LIS
  • Search form é opcional e define uma flag para controlar a exibição da caixa de busca na página inicial do LIS;
  • Disqus shortname é opcional. Se utilizado, requer um código para integração com o serviço de comentários Disqus. Observe que isso exige registro prévio no serviço;
  • Google Analytics code é opcional e permite a integração com os serviços de análise de sites fornecidos pelo Google. Observe que isso exige registro prévio no Google.

Releases

5 releases.

Tag
Published
1.4 latest
Oct 9, 2025 1 year ago
1.3
Jun 29, 2021 5 years ago
1.2
Mar 12, 2021 5 years ago
May 27, 2019 7 years ago
Apr 25, 2018 8 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

D+ grade

Security

LIS 1.4 · audited by WP Registry

High-severity findings.

1 high 1 medium
Audited release
1.4
Findings
2
Worst severity
high
Content hash
ef39cd0f93b47b8e22a47cd9…

Findings

  • high Unauthenticated SSRF via directly reachable template/similar.php / related.php

    ssrf

    LIS ships template/similar.php and template/related.php that bootstrap WordPress via include wp-load.php and pass attacker-controlled $_GET[query] into file_get_contents with no allowlist. These files are linked from detail/resource templates as PLUGIN_URL/template/similar.php?query=... and are web-accessible under wp-content/plugins without auth. Allows server-side fetch of internal HTTP endpoints or local files (depending on allow_url_fopen/wrappers) and response parsing into the page.

    template/similar.php:1-8

  • medium Unescaped remote XML titles echoed (XSS after SSRF)

    xss_reflected

    Titles from the fetched XML (ti / ti_*) and lang path segments are echoed without esc_html. An attacker who points query at a host they control can return XML that injects HTML/JS into the response.

    template/similar.php:20-40

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.