WP Manifestindependent plugin directory
manifest / integrations / rrze-search

RRZE Search WP RegistryMedium-severity findings · 1 findingOpen the reportB

Erweiterung der lokalen Sitesearch von WordPress um flexibel anpassbare weitere Suchen. Basiert auf dem Theme FAU Einrichtungen der Universität Erlangen-Nürnberg

by Tollwerk & RRZE · github.com/rrze-webteam/rrze-search · website

★ 0stars
1.0.4latest · 5mo ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/rrze-webteam/rrze-search/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/rrze-webteam/rrze-search ↗

Adds additional search engines to the wordpress default search.

Download

GitHub-Repo: https://github.com/RRZE-Webteam/rrze-search

Author

RRZE-Webteam , http://www.rrze.fau.de

GNU General Public License (GPL) Version 3

Purpose

Implements additional Search Engine resources in the form of an Adapter Class, which extends Foundational Classes. That is to say, that the Google Foundational class enabled the use of the Google Customer Search feature and the Adapter classes hold information in utilization, i.e. Name, Labels and API Keys and IDs.

Dependencies

This plugin was optimized for the FAU Einrichtungen theme (https://github.com/RRZE-Webteam/FAU-Einrichtungen).

Add Additional Search Engine Resources

  • Duplicate SearchEngine-Class.php from RRZESearch\Infrastructure\Engines\Templates
  • Refactor the ClassName
  • Duplicate SearchEngine-Adapter.php from the same directory.
  • Refactor the AdapterClassName
  • Update query function according to its Search Engine's requirements.

Releases

5 releases.

Tag
Published
1.0.4 latest
May 22, 2026 5mo ago
1.0.3
Dec 2, 2025 10mo ago
1.0.2
Nov 20, 2025 11mo ago
1.0.1
Nov 19, 2025 11mo ago
1.0.0
Oct 24, 2025 12mo ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

RRZE Search 1.0.4 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
1.0.4
Findings
1
Worst severity
medium
Content hash
bfc1d1d2cfb9bbf3c32c5524…

Findings

  • medium Missing capability and nonce on resourceRemoval AJAX

    missing_capability

    resourceRemoval is registered as wp_ajax_resourceRemoval and updates rrze_search_settings (removes a resource) with no check_ajax_referer and no current_user_can. Any authenticated user can strip configured search engines/resources.

    includes/Infrastructure/Settings/SettingsApi.php:218-245

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →