WP Manifestindependent plugin directory
manifest / content / address

Address WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

WordPress plugin - gather & display address & contact data

★ 0stars
21composer installs
v1.0.0-beta.2latest · 9 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/csknk/address/archive/refs/heads/master.zip

On Packagist as carawebs/address:

composer require carawebs/address
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Address WordPress Plugin Work in Progress. Use at your own risk. Adds an option page to add Physical address data to the options table of the database. Builds the address data into a HTML block that is properly marked up according to schema.org. Uses the WP Plugin Boilerplate. Installation 1. Clone this repo to the /wp-content/plugins/ directory 2. Activate the plugin through the 'Plugins' menu in WordPress 3. Add address data to your site: Dashboard Settings Address & Contact 4. Place in your templates 5. Use the shortcode [address] in the content area Available Filters |Filter Hook|Value |Variables| |----|----|----| |'carawebsaddressopendiv'|''|-| |'carawebsaddressbusinessname'|'' . $businessname . ''|$businessname| |'carawebsaddressline1'|'' . $addressline1 . ''|$addressline1| |'carawebsaddressline2'|'' . $addressline2 . ''|$addressline2| |'carawebsaddresstown'|'' . $town . ''|$town| |'carawebsaddresscounty'|'' . $address['county'] . ''|$county| |'carawebsaddresscountry'|'' . $country . ''|$country| |'carawebsaddresspostcode'|'' . $postcode . ''|$postcode| |'carawebsaddressclosediv'|''|-| Example Filter The 'carawebsaddressbusinessname' filter receives two parameters

Releases

2 releases.

Tag
Published
v1.0.0-beta.2 latest
Jan 16, 2017 9 years ago
Dec 6, 2016 9 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

Address 1.0.0 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.0.0
Findings
1
Worst severity
low
Content hash
bc0957412b374fe538e06a9f…

Findings

  • low County address field echoed without esc_html in frontend builder

    missing_escaping

    In get_the_address(), most fields use esc_html into local variables, but the county branch concatenates the raw $address['county'] option into HTML. Only administrators can save the option via options.php, so this is defense-in-depth / stored XSS risk if an admin account is compromised or a filter injects markup.

    public/class-address-public.php:235-238

    Recommendation

    Echo the already-escaped $county variable (or esc_html( $address['county'] )) inside the markup.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.