WP Manifestindependent plugin directory
manifest / integrations / kcworks-on-wp

KCWorks on WP WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

WordPress plugin for displaying results of queries from KCWorks

★ 0stars
32release downloads
1.3.1latest · 4mo ago

Install

Download kcworks-on-wp.zip From the 1.3.1 release on GitHub, Jun 11, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/mesh-research/kcworks-on-wp/releases/download/1.3.1/kcworks-on-wp.zip

On Packagist as mesh-research/kcworks-on-wp:

composer require mesh-research/kcworks-on-wp
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Display bibliographies from KCWorks on pages, posts, and sites

Description

This is a WordPress plugin for displaying bibliographies of works from KCWorks on WordPress pages, posts, and sites.

Installation

Zip File / GitHub

Releases page on GitHub: https://github.com/MESH-Research/kcworks-on-wp/releases

  1. Visit this plugin's Releases page on GitHub.
  2. Download the zip file of the latest stable release.
  3. Visit the admin area of your WordPress installation.
  4. On the Plugins screen, click the "Add New Plugin" button.
  5. Click the "Upload Plugin" button.
  6. Choose the zip file that was previously downloaded.
  7. Click the "Install Now" button.

Composer

Package page on Packagist: https://packagist.org/packages/mesh-research/kcworks-on-wp

  1. Open a command line in your WordPress project's directory
  2. Run composer require mesh-research/kcworks-on-wp
  3. Run composer install
  4. Navigate to the plugin directory (/wp-content/plugins/kcworks-on-wp)
  5. Run npm i
  6. Run npm run build

More information about using Composer: https://getcomposer.org/doc/01-basic-usage.md#introduction https://getcomposer.org/doc/03-cli.md#require-r

Changelog

Visit GitHub tagged releases for changelog: https://github.com/MESH-Research/kcworks-on-wp/tags

1.0.0

Project renamed from kcworks-wp-plugin to kcworks-on-wp

0.2.0

  • Initial tagged release

Releases

12 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
1.3.1 latest
Jun 11, 2026 4mo ago
kcworks-on-wp.zip
2
Apr 14, 2026 6mo ago
kcworks-on-wp.zip
0
Nov 18, 2025 11mo ago
kcworks-on-wp.zip
4
Nov 6, 2025 11mo ago
kcworks-on-wp.zip
3
Nov 5, 2025 11mo ago
kcworks-on-wp.zip
1
Oct 31, 2025 11mo ago
kcworks-on-wp.zip
4
Oct 29, 2025 11mo ago
kcworks-on-wp.zip
1
Oct 22, 2025 1 year ago
kcworks.zip
1
Oct 9, 2025 1 year ago
kcworks.zip
1
Oct 7, 2025 1 year ago
kcworks.zip
8
Sep 29, 2025 1 year ago
kcworks.zip
4
Sep 24, 2025 1 year ago
kcworks.zip
3
A- grade

Security

KCWorks on WP 1.3.1 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.3.1
Findings
1
Worst severity
low
Content hash
3c87455758aea4572014f1fb…

Findings

  • low Unauthenticated fixed-host API proxy

    unnecessary_attack_surface

    Public REST route proxies GET to https://works.hcommons.org/api/... using request params in the path/query. Host is fixed (not classic SSRF) but provides unauthenticated open proxy/amplification.

    kcworks-on-wp-api.php:5-37

    Recommendation

    Add rate limiting and optionally require a logged-in user or application password; validate collectionId charset.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.