WP Manifestindependent plugin directory

Install

Download sdv-store-locator.zip From the 1.10 release on GitLab, Nov 27, 2024

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitLab with WP-CLI:

wp plugin install https://gitlab.com/api/v4/projects/36235260/packages/generic/sdv-store-locator/1.10/sdv-store-locator.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
SDV WP Store Locator The WordPress Plugin SDV Store Locator used for the SDV. Dependencies SDV Vendor Authors and acknowledgment Adrian Suter, adrian.suter@gff.ch Copyright GFF Integrative Kommunikation GmbH License GPLv2 or later Development Staging Always use a staging environment to develop and test things out before releasing. Build a new release 1. Set the new version X.Y in the file comments section as well as in the corresponding constant in sdv-store-locator.php. Commit and push. 2. Add a new repository tag X.Y without writing release notes (a message is allowed). 3. Gitlab CI would automatically create a release asset zip file. 4. Once finished (see pipeline or release section), update the stable version in readme.txt to X.Y and commit and push.

Releases

10 releases.

Tag
Published
Assets
Nov 27, 2024 1 year ago
sdv-store-locator.zip
1.9
Nov 15, 2024 1 year ago
sdv-store-locator.zip
1.8
Nov 15, 2024 1 year ago
sdv-store-locator.zip
1.7
Nov 3, 2024 1 year ago
sdv-store-locator.zip
1.6
Aug 4, 2023 3 years ago
sdv-store-locator.zip
1.5
Jun 20, 2022 4 years ago
sdv-store-locator.zip
1.4
Jun 20, 2022 4 years ago
sdv-store-locator.zip
1.3
Jun 17, 2022 4 years ago
sdv-store-locator.zip
1.2
Jun 15, 2022 4 years ago
sdv-store-locator.zip
1.1
Jun 15, 2022 4 years ago
sdv-store-locator.zip

GitLab does not publish per-asset download counts, so this plugin ranks on stars and activity only.

B grade

Security

SDV Store Locator 1.10 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
1.10
Findings
1
Worst severity
medium
Content hash
e639c7addefaae58cd1b64fe…

Findings

  • medium Unsaintized lat/lng concatenated into remote search URL

    unsafe_input

    store_locator_search AJAX (authenticated and nopriv) takes lat/lng from GET via filter_input without numeric casting and appends them into an external URL. Attackers can inject additional query parameters or malformed values into requests the server makes to directory.vitagate.ch.

    includes/sdv-store-locator/class-search-api.php:14-35

    Recommendation

    Cast lat/lng with floatval/is_numeric checks and reject invalid values. Prefer add_query_arg with validated numbers.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.