WP Manifestindependent plugin directory
manifest / users / sejoli-reward

Sejoli - Reward WP RegistryLow-severity findings · 1 findingOpen the reportA-

Reward system for Sejoli - a Membership WordPress plugin

by Ridwan Arifandi · github.com/orangerdev/sejoli-reward · website

★ 0stars
1.2.8latest · 1 year ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/orangerdev/sejoli-reward/archive/refs/heads/master.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

Releases

4 releases.

Tag
Published
1.2.8 latest
May 17, 2025 1 year ago
1.2.5
May 14, 2024 2 years ago
1.2.2
Mar 25, 2024 2 years ago
1.2.1
Nov 29, 2023 2 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

Sejoli - Reward 1.2.8 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.2.8
Findings
1
Worst severity
low
Content hash
e587ddd3a22a033f02b7c988…

Findings

  • low Unescaped $_GET['user_id'] in admin single-user-point partial

    xss_reflected

    admin/partials/single-user-point.php echoes $_GET['user_id'] without esc_attr in admin context. AJAX admin handlers verify nonces.

    admin/partials/single-user-point.php:20-20

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →