Sejoli - Joint Venture WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

Low-severity findings only.

Audited release

1.2.3

Findings

1

Worst severity

low

Content hash

ac335262864e84aa3595389f… Copy

Findings

• low Unescaped $_GET['user_id'] in admin JV single-data partial

  xss_reflected

  admin/partials/jv/single-data.php echoes $_GET['user_id'] into hidden input without esc_attr. Page is admin-only (JV menus typically manage_options/sejoli caps). Admin self-XSS / low impact; AJAX JSON handlers use current_user_can checks.

  admin/partials/jv/single-data.php:24-24

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.