WP Manifestindependent plugin directory
manifest / ai / replicate

Replicate WP Registry grade C-. High-severity findings · 1 findingWP RegistryHigh-severity findings · 1 findingOpen the reportC-

★ 0stars
19release downloads
≈10active sites
v0.3.0latest · 1 year ago

Install

Download replicate.zip From the v0.3.0 release on GitHub, Jan 23, 2025

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/arunsathiya/replicate/releases/download/v0.3.0/replicate.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Example block scaffolded with Create Block tool. This is the long description. No limit, and you can use Markdown (as well as in the following sections). For backwards compatibility, if this section is missing, the full length of the short description will be used, and Markdown parsed. This section describes how to install the plugin and get it working. e.g. 1. Upload the plugin files to the /wp-content/plugins/replicate directory, or install the plugin through the WordPress plugins screen directly. 1. Activate the plugin through the 'Plugins' screen in WordPress An answer to that question. Answer to foo bar dilemma. 1. This screen shot description corresponds to screenshot-1.(png|jpg|jpeg|gif). Note that the screenshot is taken from the /assets directory or the directory that contains the stable readme.txt (tags or trunk). Screenshots in the /assets directory take precedence. For example, /assets/screenshot-1.png would win over /tags/4.3/screenshot-1.png (or jpg, jpeg, gif). 2. This is the second screen shot Release You may provide arbitrary sections, in the same format as the ones above. This may be of use for extremely complicated plugins where more information needs

Releases

3 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v0.3.0 latest
Jan 23, 2025 1 year ago
replicate.zip
9
Jan 17, 2025 1 year ago
replicate.zip
5
Jan 17, 2025 1 year ago
replicate.zip
5

Active-site estimate ≈10 comes from the median of recent superseded releases. Method.

C- grade

Security

Replicate 0.2.0 · audited by WP Registry

High-severity findings.

1 high
Audited release
0.2.0
Findings
1
Worst severity
high
Content hash
0083255ded2506ed76fb4395…

Findings

  • high Logged-in users can abuse Replicate API without capability check

    missing_capability

    register_rest_route permission_callback only returns is_user_logged_in(). handle_replicate_request then uses get_option(replicate_api_key) to call Replicate. Any Subscriber can generate images and exhaust paid credits.

    replicate.php:25-66

    Recommendation

    Require a capability such as edit_posts or a dedicated replicate_generate cap, plus rate limits.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.