Woocommerce - Simple user-level discount WP Registry grade C-. High-severity findings · 1 findingWP RegistryHigh-severity findings · 1 findingOpen the reportC-

High-severity findings.

Audited release

1.0.0

Findings

1

Worst severity

high

Content hash

2e08c894c255f490b3468ddf… Copy

Findings

• high Customers can self-assign discount tiers on their profile

  missing_capability

  show_user_profile / personal_options_update expose a Customer Type <select> listing every configured discount percentage. save_extra_user_profile_fields only checks current_user_can('edit_user', $user_id), which subscribers pass for their own account, then writes unsanitized $_POST['customer_type'] to user meta. get_users_discount_amount() later applies that meta as a negative cart fee. Any customer can grant themselves the maximum configured discount (financial fraud against the merchant).

  includes/class-woocommerce-simple-user-level-discount-user-settings.php:41-48

  Recommendation

  Only show/save customer_type when current_user_can('manage_woocommerce') or edit_users; never allow a user to set their own discount tier. Sanitize against the known discount keys.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.