WP Manifestindependent plugin directory
manifest / updates / testup

TESTUP WP RegistryMedium-severity findings · 1 findingOpen the reportB

Clone site into testup directory and show it only with access from specific IP address. Swap site with it on publish.

by synchro_vision · github.com/synchrovision/testup

★ 0stars
0.0.4-alphalatest · 1 year ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/synchrovision/testup/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Releases

5 releases.

Tag
Published
0.0.4-alpha latest
Aug 11, 2025 1 year ago
0.0.3-alpha
Nov 16, 2023 2 years ago
0.0.2-alpha
Oct 14, 2021 5 years ago
0.0.1-alpha
Oct 13, 2021 5 years ago
0.0.0-alpha
Oct 13, 2021 5 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

TESTUP 0.0.3-alpha · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
0.0.3-alpha
Findings
1
Worst severity
medium
Content hash
28ecb47b6a524ed42ec7b15f…

Findings

  • medium Database password passed on shell command line

    information_disclosure

    get_db_connection_clause embeds -p%s password into argv visible in process listings.

    testup.php:50-55

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →