So Mystical pointed out earlier today in chat that a spammer was recently able to post a spam image to Meta Stack Exchange in a question, even though (if I recall correctly) the spammer only had 1 reputation:
How did this spam user manage to get in an image?
https://meta.stackexchange.com/questions/234670/health-insurance
According to Can 10-rep users post images?, user's cannot upload images until they earn 10 rep.
So is there some kind of bug that allows spammers (or non-spamming regular users) with only 1 rep to upload images?