{
  "repository": "wordpress.org/plugins/premmerce-woocommerce-wishlist",
  "commit_source": "release_tag_resolution",
  "tested_releases": {
    "vulnerable": {
      "version": "1.1.11",
      "ref": "premmerce-woocommerce-wishlist.1.1.11",
      "download_url": "https://downloads.wordpress.org/plugin/premmerce-woocommerce-wishlist.1.1.11.zip",
      "zip_sha256": "2558fc6468be240885dc24e3f5dd0566f0ad66adcca684d827a130a0287c39ad",
      "zip_path": "artifacts/premmerce-1.1.11.zip",
      "verified_active_version": "1.1.11 (wp plugin list reported version=1.1.11 during runtime sweep)"
    },
    "fixed": {
      "version": "1.1.12",
      "ref": "premmerce-woocommerce-wishlist.1.1.12",
      "download_url": "https://downloads.wordpress.org/plugin/premmerce-woocommerce-wishlist.1.1.12.zip",
      "zip_sha256": "103cbe3086ce0df927af7488e62f5b655d54094442b6385aeb6969d9068d822d",
      "zip_path": "artifacts/premmerce-1.1.12.zip",
      "verified_active_version": "1.1.12 (wp plugin list reported version=1.1.12 during runtime sweep)"
    },
    "latest": {
      "version": "1.1.13",
      "ref": "premmerce-woocommerce-wishlist.1.1.13",
      "download_url": "https://downloads.wordpress.org/plugin/premmerce-woocommerce-wishlist.1.1.13.zip",
      "zip_sha256": "368066e97ff6a5a4affe46e638a1eb38058587ee8bfd09512daa220fb8bd525f",
      "zip_path": "artifacts/premmerce-1.1.13.zip",
      "verified_active_version": "1.1.13 (wp plugin list reported version=1.1.13 during runtime sweep)"
    }
  },
  "fixed_vs_latest_security_code_identity": {
    "method": "cmp byte comparison of extracted plugin sources",
    "result": "src/Models/WishlistModel.php and src/WishlistStorage.php are byte-identical between 1.1.12 and 1.1.13; src/RestApi/RestApi.php, src/Frontend/Frontend.php, src/Frontend/WishlistFunctions.php, src/Admin/* show only cosmetic whitespace diffs. 1.1.13 changelog lists only WooCommerce-compat and Freemius/SDK bumps, no security change."
  },
  "submitted_target": {
    "target_kind": "wordpress_plugin_release",
    "version": "1.1.11",
    "ref": "premmerce-woocommerce-wishlist.1.1.11",
    "display": "Premmerce Wishlist for WooCommerce 1.1.11 (vulnerable)"
  },
  "variant_target": {
    "target_kind": "wordpress_plugin_release",
    "version": "1.1.12",
    "ref": "premmerce-woocommerce-wishlist.1.1.12",
    "display": "Premmerce Wishlist for WooCommerce 1.1.12 (fixed); 1.1.13 (latest) security-code-identical"
  },
  "runtime_environment": {
    "db": "mariadb:11.4",
    "wordpress": "wordpress:6.7.2-php8.2-apache",
    "woocommerce": "8.9.3",
    "table_prefix": "wp_",
    "admin_user": "sqliadmin"
  },
  "notes": "No git repository is published for this WordPress.org plugin; source identity is established by release-tag resolution from downloads.wordpress.org plus sha256 of the release zips and the version reported by wp-cli at runtime. A bypass was NOT confirmed (negative result), so a single exact tested commit_sha is not required; the exact tested releases are recorded above."
}