WP Manifestindependent plugin directory
manifest / forms / wp-gforms-s3-upload

Frc Gravity Forms S3 Upload WP RegistryLow-severity findings · 2 findingsOpen the reportA-

gforms s3 uploads

by Janne Aalto / Frantic Oy · github.com/frc/wp-gforms-s3-upload

★ 1stars
18kcomposer installs
0.4.4latest · 5 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/frc/wp-gforms-s3-upload/archive/refs/heads/master.zip

On Packagist as frc/wp-gforms-s3-upload:

composer require frc/wp-gforms-s3-upload
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/frc/wp-gforms-s3-upload ↗

frc-gforms-s3-upload

use with Gravity Forms and WP Offload S3 Lite

Releases

7 releases.

Tag
Published
0.4.4 latest
Oct 30, 2020 5 years ago
0.4.3
Mar 25, 2020 6 years ago
0.4.2
Dec 18, 2019 6 years ago
0.4.1
Dec 17, 2019 6 years ago
0.4
Dec 17, 2019 6 years ago
0.3
Dec 17, 2019 6 years ago
0.2
Oct 15, 2018 8 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

Frc Gravity Forms S3 Upload 0.4.3 · audited by WP Registry

Low-severity findings only.

2 low
Audited release
0.4.3
Findings
2
Worst severity
low
Content hash
5428398edbf2531c627c3990…

Findings

  • low Version mismatch between distribution slug and plugin header

    version_mismatch

    The package slug is wp-gforms-s3-upload-0.4.4 and the registry hash version is 0.4.3; the main file header also declares Version: 0.4.3. Mismatched versioning complicates patch tracking.

    frcGformsS3Upload.php:3-12

    Recommendation

    Align slug, header Version, and release tags; republish a clearly versioned build.

  • low Plugin appears unmaintained (Tested up to WordPress 4.4.2)

    unmaintained

    Header claims Tested up to: 4.4.2 with Requires at least: 4.0 and no Update URI. Running on modern WordPress/Gravity Forms increases compatibility and latent-security risk even though no concrete exploitable sink was found in the two PHP files.

    frcGformsS3Upload.php:11-12

    Recommendation

    Replace with a maintained GF↔S3 integration or fork and re-test against current WordPress and Gravity Forms.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →