CF7 Form Testing WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

Low-severity findings only.

Audited release

2.5

Findings

1

Worst severity

low

Content hash

6b69e44eddd8970deae1861b… Copy

Findings

• low Public REST discloses CF7 testing mode option

  missing_permission_callback

  register_rest_route without permission_callback returns get_option('cf7_form_testing_mode') as boolean. Low-impact information disclosure of a feature flag.

  cf7-form-testing.php:70-80

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.