WP Manifestindependent plugin directory
manifest / integrations / rrze-faudir

RRZE FAUdir WP Registry grade D+. High-severity findings · 3 findingsWP RegistryHigh-severity findings · 3 findingsOpen the reportD+

Plugin zur Darstellung des Personen- und Einrichtungsverzeichnis der FAU in Websites

★ 0stars
v2.6.20latest · 7mo ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/rrze-webteam/rrze-faudir/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Plugin zur Darstellung des Personen- und Einrichtungsverzeichnis der FAU in Websites

Contributors

GNU General Public License (GPL) Version 3

Documentation

See documenation at https://www.wp.rrze.fau.de

Feedback

Filter for external plugins and themes

To get data from the plugin to use in other plugins or themes, the following filters are avaible.

  • rrze_faudir_get_target_url , input: FAUdir identifier, output: URL

    Example usage:

     $url = apply_filters('rrze_faudir_get_target_url', [], $identifier);

    To add own overwrites:

      add_filter('rrze_faudir_get_target_url', function($url, $identifier){
      // z.B. eigene Routing-Logik, Sonderfälle, Tracking-Parameter …
      return $url;
      }, 20, 2);

    Its also possible to make a direct function call in the following ways:

      $url = \RRZE\FAUdir\Filters::get_target_url($identifier);
    
      // or, if wrapper is avaible:
      $url = function_exists('faudir_get_target_url') ? faudir_get_target_url($identifier) : '';
  • rrze_faudir_get_person_array , input: FAUdir identifier, output: Array with person data

    Example usage:

     $person = apply_filters('rrze_faudir_get_person_array', [], $identifier);

    To add own overwrites:

      add_filter('rrze_faudir_get_person_array', function(array $data, string $identifier) {
      return $data;
      }, 20, 2);

    Its also possible to make a direct function call in the following ways:

      $person = \RRZE\FAUdir\Filters::get_person_array($identifier);
    
      // or, if wrapper is avaible:
      $person = function_exists('faudir_get_person_array') ? faudir_get_person_array($identifier) : [];
  • Abhängig vom Theme werden die Filter

    • fau_elemental_copyright_info (beim Theme FAU Elemental )
    • fau_copyright_info (bei allen anderen FAU-Themes)

    gesetzt. Diese enthalten bei der Ausgabe von Personenbildern mit Copyright-Text den jeweiligen text und die Bild-ID

Releases

12 releases.

Tag
Published
v2.6.20 latest
Mar 27, 2026 7mo ago
Mar 16, 2026 7mo ago
Dec 8, 2025 10mo ago
Nov 27, 2025 11mo ago
Sep 17, 2025 1 year ago
Jul 10, 2025 1 year ago
May 15, 2025 1 year ago
May 12, 2025 1 year ago
May 8, 2025 1 year ago
Apr 14, 2025 1 year ago
Mar 31, 2025 1 year ago
Mar 13, 2025 1 year ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

D+ grade

Security

RRZE FAUdir 2.6.20 · audited by WP Registry

High-severity findings.

1 high 2 medium
Audited release
2.6.20
Findings
3
Worst severity
high
Content hash
4ed53791b005f30a609f01bb…

Findings

  • high Missing capability on ajax_create_custom_person

    missing_capability

    rrze_faudir_create_custom_person verifies check_ajax_referer only then wp_insert_post with post_status publish for the person CPT. Any authenticated user who can mint the localized nonce can create published person posts.

    includes/CPT.php:757-782

  • medium clear_cache AJAX missing nonce and capability

    missing_capability

    clear_cache hooked to wp_ajax_rrze_faudir_clear_cache performs DELETE of faudir transients with no check_ajax_referer and no current_user_can. Any logged-in user can flush the cache.

    includes/Settings.php:892-923

  • medium reset_defaults AJAX missing capability

    missing_capability

    reset_defaults verifies nonce then overwrites plugin options to defaults without manage_options check.

    includes/Settings.php:881-889

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.