Grab Image WP Registry grade C-. High-severity findings · 1 findingWP RegistryHigh-severity findings · 1 findingOpen the reportC-

High-severity findings.

Audited release

3.5

Findings

1

Worst severity

high

Content hash

973478d26aecd8b0a702084a… Copy

Findings

• high Plugin forces ALLOW_UNFILTERED_UPLOADS true

  insecure_config

  At load time the plugin defines ALLOW_UNFILTERED_UPLOADS as true, disabling WordPress file-type restrictions for uploads/sideloads initiated while the plugin is active.

  grab-image.php:14-14

  Recommendation

  Do not define ALLOW_UNFILTERED_UPLOADS; rely on WordPress mime checks.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.