Adimara Request a Tailor WP Registry grade C-. High-severity findings · 1 findingWP RegistryHigh-severity findings · 1 findingOpen the reportC-

High-severity findings.

Audited release

1.1.0

Findings

1

Worst severity

high

Content hash

7ceeeefa0b9badb683d6571b… Copy

Findings

• high Unauthenticated REST permission bypass and reflected XSS in request-tailor response

  xss_reflected

  ADM_RAT_REST::get_permission() returns true for any unauthenticated caller and only verifies a nonce when the user is already logged in. The POST handler then concatenates request values (product id, security token, delete flag, alert text) into a <script> block echoed to the client. An unauthenticated attacker can invoke adm_rat/v1/measurement/request_tailor/ and receive attacker-controlled JavaScript, and can toggle 'request tailor' cart flags without a valid nonce.

  includes/api/class-adm-rat-rest.php:54-155

  Recommendation

  Require a valid nonce for all callers (including logged-out). Escape all values interpolated into JavaScript (esc_js / wp_json_encode). Prefer wp_send_json_* instead of echoing raw script tags. Do not call unserialize helpers on attacker-controlled POST bodies.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.