WooCommerce Scheduled Discounts WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

Low-severity findings only.

Audited release

1.2

Findings

1

Worst severity

low

Content hash

37f295098ea3f97fda13be7e… Copy

Findings

• low Product search AJAX missing nonce and capability check

  missing_capability

  wcsd_product_search_callback hooked to wp_ajax_wcsd_product_search returns all matching product IDs/titles with no check_ajax_referer or current_user_can. Limited blast (public catalog often visible) but expands authenticated recon.

  discount-sitiweb.php:126-152

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.