WP Manifestindependent plugin directory
manifest / content / route-pages-wordpress

Trufi Route Pages WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

Trufi Route Pages for Wordpress

★ 1stars
13release downloads
≈10active sites
v0.9.2latest · 1 year ago

Install

Download trufi-maps.zip From the v0.9.1 release on GitHub, Jun 7, 2024

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/trufi-association/route-pages-wordpress/releases/download/v0.9.1/trufi-maps.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Trufi Route Pages is a Wordpress plugin developed by The Trufi Association to complement the Trufi mobile application. It allows Wordpress to receive a URL request containing a route ID and name and display it as a post. The plugin also generates a dynamic sitemap.xml based on route information from the openGraphql API.

About The Trufi Association

We are a non-profit NGO founded by a group of German and Bolivian volunteers in 2019. Our mission is to transform mobility in cities with open source apps and open data solutions that enable innovation. We help cities realize a public transport app, even in places where transport is unregulated.

Plugin Information

Installation

  1. Compress the plugin files in a .zip file named TrufiApi-maps.
  2. Use the regular Wordpress plugin installation process to install the .zip file.
  3. Navigate to Wordpress administration and then configuration.
  4. Set the required values for this plugin, such as the Graphql server URL.
    1. If your are using OpenTripPlanner v1, the Graphql URL might be something like https://yourotp.example.com/otp/routers/default/index/graphql
    2. You need to create a new empty base page for the routes

Testing

You can test if the plugin works by accessing the URL path /wp-sitemap-routes-1.xml of your page.

Contributing

We appreciate all contributions! If you're interested in contributing, please see our contributing guidelines.

License

This project is licensed under the GPL v2 License - see the LICENSE file for details.

Contact

For more information, you can reach us through our website.

Releases

3 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v0.9.2 latest
Aug 12, 2025 1 year ago
tag only
—
Jun 7, 2024 2 years ago
trufi-maps.zip
9
Jun 7, 2024 2 years ago
trufi-maps.zip
4

Active-site estimate ≈10 comes from the median of recent superseded releases. Method.

A- grade

Security

Trufi Route Pages 0.9.1 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
0.9.1
Findings
1
Worst severity
low
Content hash
6d164d246020dc8e2c21de00…

Findings

  • low clear_trufi_caches missing capability check

    missing_capability

    admin_post_clear_trufi_caches verifies clear_trufi_caches nonce then deletes route transients and redirects, but never calls current_user_can(manage_options). Any authenticated user who obtains the nonce (e.g. via XSS elsewhere) can flush caches; defense-in-depth requires an explicit capability check.

    admin/transient-cache-clear.php:20-31

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.