WP Manifestindependent plugin directory
manifest / seo / weareedit-site-engine

* weareedit.io Site Engine WP Registry grade D+. High-severity findings · 3 findingsWP RegistryHigh-severity findings · 3 findingsOpen the reportD+

Custom WordPress plugin powering weareedit.io — SEO + GEO + brand + design + ops

★ 0stars
56release downloads
v1.5.869latest · 1mo ago

Install

Download weareedit-site-engine-1.5.869.zip From the v1.5.869 release on GitHub, Sep 10, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/danieldevera/weareedit-site-engine/releases/download/v1.5.869/weareedit-site-engine-1.5.869.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

Custom WordPress plugin powering weareedit.io — SEO + GEO + brand + design + ops, all in one place.

What it does

Search-engine optimisation (SEO)

  • Schema.org JSON-LD (Organization, EducationalOrganization, Course, Person, AggregateRating, BreadcrumbList)
  • Meta tags, Open Graph, Twitter Cards, canonical URLs, hreflang
  • Sitemap generation
  • Image lazy-loading + alt text fallbacks
  • Analytics deduplication, script deferral

Generative-engine optimisation (GEO / LLMs)

  • /llms.txt generation
  • AI crawler robots.txt rules (GPTBot, ClaudeBot, PerplexityBot, etc.)
  • Wikidata-linked Person + Organization schema (Daniel Devera Q139907903, EDIT. Q139907765)

Brand & design

  • Homepage hero typography rewrite (H1 + pink/teal accent dots, H2 sub-text, "Other" tagline)
  • CTA hover animations (3-layer sequenced sweep)
  • DGERT badge integration (clickable, links to verified .gov.pt registry)
  • Site-wide CSS overrides via output buffer

Content & integrations

  • Google Reviews → visible badge + AggregateRating schema
  • /criticas-google/ virtual page rendered from review data
  • HTML rewrites via output buffer (DGERT badge, course pages, course schema enrichment)
  • WP Rocket cache integration (auto-flush on plugin update)

One-time data fixes

  • Rank Math noindex cleanup (Videos page, FAQs page)
  • robots.txt regeneration with AI-crawler rules

Installation (manual, one-time)

  1. WP Admin → Plugins → Adicionar novo → Carregar plugin
  2. Upload the latest weareedit-site-engine-X.Y.Z.zip from Releases
  3. Activate

Auto-updates (from v1.5.55 onwards)

This plugin polls its GitHub repository for new releases via Plugin Update Checker. After the initial manual install of v1.5.55+, every future release shows up as a one-click update in WP Admin.

After the update applies, WP Rocket page cache + minified assets are flushed automatically — no manual cache clear needed.

Release ritual

  1. Bump Version: in weareedit-site-engine.php and the WEAREDIT_SITE_ENGINE_VERSION constant
  2. Append a section to CHANGELOG.md
  3. Commit + tag + push:
    git add -A
    git commit -m "v1.5.XX — short summary"
    git tag v1.5.XX
    git push origin main --tags
  4. The release.yml GitHub Action builds the zip and attaches it to the GitHub release automatically
  5. WP Admin shows "Atualização disponível" within ~12h (or click "Verificar atualizações" on the plugin row)

Repository layout

weareedit-site-engine/
├── weareedit-site-engine.php  # Bootstrap, PUC registration, cache-clear hook
├── includes/                  # All modules (one class per file)
│   ├── class-meta-tags.php
│   ├── class-output-buffer.php
│   ├── class-structured-data.php
│   └── ... (~25 classes)
├── assets/                    # DGERT badge images, admin CSS/JS, etc.
├── vendor/
│   └── plugin-update-checker/ # YahnisElsts/plugin-update-checker v5.5 (MIT)
├── .github/workflows/
│   └── release.yml            # Auto-build zip on `v*` tag push
├── README.md
├── CHANGELOG.md
└── .gitignore

Backward compatibility

The plugin was previously called EDIT. SEO Fix. Renamed to weareedit.io Site Engine at v1.5.55 to better reflect its scope. WP options, AJAX action names, .htaccess markers, and JS asset handles still use the edit_seo_fix_* prefix to preserve existing live-site state. Internal PHP function names, constants, and the plugin folder use weareedit_site_engine_* / WEAREDIT_SITE_ENGINE_*.

License

GPL-2.0+ (matches WordPress core). PUC library bundled under its MIT license — see vendor/plugin-update-checker/license.txt.

Releases

Newest 25 of 60 recorded releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v1.5.869 latest
Sep 10, 2026 1mo ago
weareedit-site-engine-1.5.869.zip
3
Jul 5, 2026 4mo ago
weareedit-site-engine-1.5.868.zip
4
Jul 5, 2026 4mo ago
weareedit-site-engine-1.5.867.zip
1
Jul 4, 2026 4mo ago
weareedit-site-engine-1.5.866.zip
1
Jul 4, 2026 4mo ago
weareedit-site-engine-1.5.865.zip
2
Jul 4, 2026 4mo ago
weareedit-site-engine-1.5.864.zip
1
Jul 3, 2026 4mo ago
weareedit-site-engine-1.5.863.zip
1
Jul 2, 2026 4mo ago
weareedit-site-engine-1.5.862.zip
1
Jul 2, 2026 4mo ago
weareedit-site-engine-1.5.861.zip
1
Jul 2, 2026 4mo ago
weareedit-site-engine-1.5.860.zip
1
Jul 2, 2026 4mo ago
weareedit-site-engine-1.5.859.zip
0
Jun 30, 2026 4mo ago
weareedit-site-engine-1.5.858.zip
1
Jun 27, 2026 4mo ago
weareedit-site-engine-1.5.857.zip
1
Jun 26, 2026 4mo ago
weareedit-site-engine-1.5.856.zip
1
Jun 26, 2026 4mo ago
weareedit-site-engine-1.5.855.zip
1
Jun 26, 2026 4mo ago
weareedit-site-engine-1.5.854.zip
1
Jun 25, 2026 4mo ago
weareedit-site-engine-1.5.853.zip
1
Jun 25, 2026 4mo ago
weareedit-site-engine-1.5.852.zip
1
Jun 25, 2026 4mo ago
weareedit-site-engine-1.5.851.zip
1
Jun 25, 2026 4mo ago
weareedit-site-engine-1.5.850.zip
1
Jun 25, 2026 4mo ago
weareedit-site-engine-1.5.849.zip
1
Jun 25, 2026 4mo ago
weareedit-site-engine-1.5.848.zip
1
Jun 25, 2026 4mo ago
weareedit-site-engine-1.5.847.zip
0
Jun 25, 2026 4mo ago
weareedit-site-engine-1.5.846.zip
1
Jun 24, 2026 4mo ago
weareedit-site-engine-1.5.845.zip
1
All releases on GitHub →
D+ grade

Security

* weareedit.io Site Engine 1.5.869 · audited by WP Registry

High-severity findings.

1 high 2 medium
Audited release
1.5.869
Findings
3
Worst severity
high
Content hash
87b4fc2338f646fb4272a65e…

Findings

  • high Hardcoded Augment feedback secret enables unauthenticated note CRUD

    hardcoded_credentials

    EDIT_Augment_Feedback::SECRET is the literal string augment-2026-preview, embedded in PHP and injected into front-end JS. REST routes under edit-augment/v1/notes use permission_callback __return_true; POST/PUT/DELETE only check hash_equals against this constant. Anyone reading the plugin (or page HTML) can create, edit, or delete shared feedback notes in option edit_augment_notes.

    includes/class-augment-feedback.php:27-106

    Recommendation

    Disable FEEDBACK_ENABLED for production, or derive a per-site secret (e.g. from wp_salt) stored in options and never ship a fixed default; require authentication for mutating routes.

  • medium Unauthenticated GET lists all Augment feedback notes without secret

    information_disclosure

    list_notes() returns array_values(get_option(edit_augment_notes)) with no secret or capability check while permission_callback is __return_true. Unauthenticated callers can read all team feedback text/authors.

    includes/class-augment-feedback.php:39-56

    Recommendation

    Apply the same secret (or login) gate to GET, or disable the feedback layer when not in an authenticated preview context.

  • medium Predictable product preview token shipped in plugin data file

    predictable_token

    Product config includes/data/products/agentic-ai.php sets preview_token to agentic-2026-preview. EDIT_Product_Launch::authorized() grants access to /{slug}-preview/ when the GET preview param matches. The token is guessable from source and unlocks unpublished marketing pages.

    includes/data/products/agentic-ai.php:16-16

    Recommendation

    Generate a high-entropy per-site token outside the repo (option/env) and rotate; do not commit static preview secrets.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.