WP Manifestindependent plugin directory
manifest / content / advanced-study-bible-wordpress-plugin

IQBible Advanced Study Bible WP Registry grade B. Medium-severity findings · 2 findingsWP RegistryMedium-severity findings · 2 findingsOpen the reportB

Advanced Study Bible WordPress plugin with Strong’s numbers, cross-references, and integrated IQ Bible API for powerful scripture search and study.

★ 2stars
80release downloads
v1.0.0-beta-24latest · 1 year ago

Install

Download iqbible-advanced-study-bible-wordpress-plugin.zip From the v1.0.0-beta-24 release on GitHub, Aug 15, 2025

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/iq-bible/advanced-study-bible-wordpress-plugin/releases/download/v1.0.0-beta-24/iqbible-advanced-study-bible-wordpress-plugin.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

# IQBible Advanced Study Bible WordPress Open Source Plugin

Description

Embed a comprehensive, interactive Bible study experience directly into your WordPress site with the IQBible Study Bible Plugin. This open-source plugin leverages the powerful IQ Bible API to fetch and display a wide range of Bible-related data dynamically.

Offer your visitors the ability to read multiple Bible versions, perform searches, listen to audio narrations, explore cross-references, look up definitions and Strong's numbers, generate reading plans, browse topics, discover Bible stories, and much more – all seamlessly integrated within your existing WordPress theme.

The plugin includes essential settings for API configuration and caching, utilizes AJAX for a smooth user experience, and provides a simple shortcode for easy implementation. Registered users can benefit from personalized features like saving notes and bookmarking verses.

Features (Current Version - v1.0.0-beta-x)

  • Bible Reading:
    • Access multiple Bible versions (API dependent).
    • Easy navigation through Books, Chapters, and Verses.
    • Display Book Introductions providing context, author, date, and theological insights.
  • Study Tools:
    • Cross References: Quickly find related verses for deeper study.
    • Strong's Concordance: View original Hebrew/Greek words linked to Strong's numbers and their definitions (for supported versions like KJV).
    • Original Language: Display the underlying Hebrew or Greek text for a verse (API dependent).
    • Biblical Definitions: Look up definitions of biblical terms using integrated dictionaries (e.g., Smith's Bible Dictionary).
  • Search:
    • Perform full-text searches within the selected Bible version.
    • Highlight search terms within the results.
  • Audio Narration:
    • Listen to audio recordings of Bible chapters (availability varies by version and API).
  • Reading Plans:
    • Generate customizable Bible reading plans based on duration, start date, and desired sections (OT/NT/All).
    • Option to download or print the generated plan.
  • Topical Index:
    • Browse scriptures related to common biblical topics.
  • Bible Stories:
    • Explore a list of key Bible stories with direct links to the relevant passages.
  • Multi-language Support:
    • Plugin interface is internationalized (translatable).
    • Supports fetching Bible versions and book names in different languages (dependent on IQ Bible API capabilities).
  • User Personalization (Requires User Registration/Login):
    • Notes: Create, save, edit, and delete personal study notes.
    • Bookmarks: Save favorite or important verses for easy retrieval.
  • Configuration:
    • Admin settings page to enter your IQ Bible API key.
    • Option to enable/disable API result caching (using WordPress Transients).
    • Manual cache clearing button.
    • Site language selection for API requests (where applicable).

Installation

  1. Download: Download the latest release .zip.
  2. Upload via WP Admin:
    • Log in to your WordPress admin area.
    • Navigate to Plugins > Add New.
    • Click the Upload Plugin button.
    • Choose the downloaded .zip file and click Install Now.
    • Activate the plugin after installation.
  3. Upload via FTP/SFTP:
    • Unzip the downloaded file.
    • Upload the entire iqbible-study-bible (or similar name) folder to the /wp-content/plugins/ directory on your server.
    • Log in to your WordPress admin area.
    • Navigate to Plugins > Installed Plugins.
    • Activate the 'IQBible Advanced Study Bible' plugin.

Configuration

  1. Get API Key: You need an API key from the IQ Bible API provider on RapidAPI.
    • Navigate to the IQ Bible API page on RapidAPI.
    • Subscribe to a suitable plan (check for free tiers if available).
    • Find your API key (X-RapidAPI-Key) in your RapidAPI dashboard.
  2. Enter API Key in WordPress:
    • In your WordPress admin area, navigate to Settings > IQBible Settings (or wherever the plugin settings page is located).
    • Paste your RapidAPI Key into the designated field.
    • Configure other settings like caching and default language as needed.
    • Save the settings.

Usage

  • Shortcode: Place the shortcode [iqbible_advanced] on any page or post where you want the full Bible study application to appear. The plugin will render the interactive interface there.

Contributing

This is a brand-maintained plugin. We do not accept public pull requests at this time.

If you'd like to help improve the plugin, you can:

  • Report bugs
  • Suggest features

Please use the GitHub Issues page for all feedback.

License

This plugin is licensed under the GPL v2 or later.

Support

For bug reports or support, please open an issue on the GitHub Issues page.

Releases

18 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
Aug 15, 2025 1 year ago
iqbible-advanced-study-bible-wordpress-plugin.zip
49
Aug 9, 2025 1 year ago
iqbible-advanced-study-bible-wordpress-plugin.zip
4
Aug 9, 2025 1 year ago
iqbible-advanced-study-bible-wordpress-plugin.zip
2
Aug 9, 2025 1 year ago
iqbible-advanced-study-bible-wordpress-plugin.zip
1
Aug 9, 2025 1 year ago
iqbible-advanced-study-bible-wordpress-plugin.zip
1
Aug 9, 2025 1 year ago
iqbible-advanced-study-bible-wordpress-plugin.zip
0
Aug 8, 2025 1 year ago
iqbible-advanced-study-bible-wordpress-plugin.zip
4
Aug 8, 2025 1 year ago
iqbible-advanced-study-bible-wordpress-plugin.zip
3
Aug 7, 2025 1 year ago
iqbible-advanced-study-bible-wordpress-plugin.zip
2
Aug 7, 2025 1 year ago
iqbible-advanced-study-bible-wordpress-plugin.zip
3
Aug 7, 2025 1 year ago
iqbible-advanced-study-bible-wordpress-plugin.zip
0
Aug 7, 2025 1 year ago
iqbible-advanced-study-bible-wordpress-plugin.zip
0
Aug 7, 2025 1 year ago
iqbible-advanced-study-bible-wordpress-plugin.zip
2
Aug 7, 2025 1 year ago
iqbible-advanced-study-bible-wordpress-plugin.zip
9
Jul 14, 2025 1 year ago
tag only
—
Jul 13, 2025 1 year ago
tag only
—
Jul 13, 2025 1 year ago
tag only
—
Apr 19, 2025 1 year ago
tag only
—
B grade

Security

IQBible Advanced Study Bible 1.0.0-beta-24 · audited by WP Registry

Medium-severity findings.

1 medium 1 low
Audited release
1.0.0-beta-24
Findings
2
Worst severity
medium
Content hash
82fd0cd2d5853b833d15e127…

Findings

  • medium Unauthenticated AJAX overwrites the site-wide Bible language transient

    missing_auth

    iq_bible_update_language_and_clear_cache_handler is registered for both wp_ajax_ and wp_ajax_nopriv_. The only gate is check_ajax_referer('iqbible_ajax_nonce'). That nonce is created in iq_bible_api_enqueue_assets() and localized onto every frontend page (no shortcode/is_singular guard), and for uid 0 it is shared across all logged-out visitors. The handler then set_transient('iqbible_language', sanitize_text_field($_POST['language']), DAY_IN_SECONDS) and deletes iqbible_books_{old_language}. There is no current_user_can, no per-user cookie/user_meta, and no allowlist. iq_bible_get_current_language() and the [iqbible_advanced] shortcode (GetStories → iqbible_stories_by_verse) read that same global transient for every visitor. Observable consequence: an unauthenticated POST to admin-ajax.php with action=iq_bible_update_language_and_clear_cache can switch or break book names, stories, and related API fetches for the whole site for 24 hours (invalid language yields empty book lists). Fix: store language in a cookie or user meta; if a site default is required, restrict writes to manage_options and validate against a known language list; do not register nopriv for a global transient write.

    includes/functions.php:1953-1977

    Recommendation

    Do not use a site-wide transient for a visitor preference. Persist language in a cookie (guests) or user meta (logged-in users). If a site-wide default is needed, allow only manage_options to change it and validate against an allowlist. Remove the nopriv action from any handler that writes shared state. Restrict script localization / nonce output to pages that actually render [iqbible_advanced].

  • low RapidAPI key and full API responses are logged on every request

    debug_code

    iq_bible_api_get_data() always error_log()s get_option('iq_bible_api_key'), the RapidAPI URL, and print_r of the decoded JSON. The function runs on [iqbible_advanced] (GetInfo/GetStories) and on every public AJAX Bible call, with no WP_DEBUG guard. On hosts that send PHP logs to wp-content/debug.log (WP_DEBUG_LOG) or otherwise web-accessible log files, the third-party API key and response bodies become recoverable. Observable consequence: key theft enables RapidAPI quota/billing abuse against the site owner’s RapidAPI subscription; not a direct site RCE.

    includes/functions.php:53-57,83,112

    Recommendation

    Remove production error_log of secrets and full API bodies. If logging is needed for support, gate it behind WP_DEBUG and never print the RapidAPI key.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.