How many vulnerabilities does UploadSleuth – Media Audit & Cleanup have?

The audit found 56 findings: 0 critical, 3 high, 26 medium severity.

Should I use UploadSleuth – Media Audit & Cleanup?

Based on the latest audit (grade B, risk HIGH), review the 56 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

UploadSleuth – Media Audit & Cleanup

Q: Is UploadSleuth – Media Audit & Cleanup secure?

WP HealthKit's independent audit rates UploadSleuth – Media Audit & Cleanup overall risk as HIGH with a report-card grade of B.

Audited at release

v1.0.2WordPress PluginAudited 18 days ago

Find files that may be unused in WordPress uploads, spot missing Media Library files, and safely review, quarantine, back up, or delete them.

HIGH

Total Findings

Security Grade

Security Findings

Critical0

High3

Medium26

Low5

Info22

Executive Summary

Is UploadSleuth – Media Audit & Cleanup secure? In WP HealthKit's independent 2026 audit, UploadSleuth – Media Audit & Cleanup received an overall risk of HIGH and a report-card grade of B across 56 findings (0 critical, 3 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

PHP CompatibilityPerformanceCoding StandardsType SafetyPlugin ConflictsHook WiringAccessibilityPlugin LifecycleSecurityTheme StandardscompatibilityWordPress CompatibilityDependencies

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![UploadSleuth – Media Audit & Cleanup security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/upload-sleuth)](https://wphealthkit.com/directory/upload-sleuth)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

PHP CompatibilityPerformanceCoding StandardsType SafetyPlugin ConflictsHook WiringAccessibilityPlugin LifecycleSecurityTheme StandardscompatibilityWordPress CompatibilityDependencies

UploadSleuth – Media Audit & Cleanup

Security Findings

Executive Summary

Security Report Card

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

PHP Compatibility

Categories with Findings