WPMU DEV - Your All-in-One WordPress Platform

{
    "slug": "forminator",
    "active_installs": 600000,
    "critical_matches": 1,
    "high_matches": 0,
    "lookback_days": 90,
    "sample_threads": [
        {
            "title": "Security Check Request: Suspicious PHP File Activity in Uploads Directory",
            "date": "2026-04-21 12:27:31",
            "url": "https://wordpress.org/support/topic/security-check-request-suspicious-php-file-activity-in-uploads-directory/",
            "starter": "lutful islam ahmed",
            "keyword": "malware"
        }
    ],
    "explanation": "Cluster of support-forum threads in the last 90 days containing user-reported attack vocabulary. Critical when any thread mentions explicit compromise terms (hacked / backdoor / admin user added); high when two or more mention symptom-class terms (redirect to spam / vendor alerts)."
}

{
    "slug": "hummingbird-performance",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "admin/class-page.php",
            "line": 309,
            "snippet": "wp_enqueue_script( 'wphb-google-chart', 'https://www.gstatic.com/charts/loader.js', array(), WPHB_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        }
    ],
    "resolved_sha": "37f1590f3affaa19a116fb3f5a890a4105f07dcd"
}

{
    "slug": "forminator",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "library/helpers/helper-core.php",
            "line": 302,
            "snippet": "wp_enqueue_script( 'google-charts', 'https://www.gstatic.com/charts/loader.js', array( 'jquery' ), FORMINATOR_VERSION, false );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "library/modules/polls/front/front-render.php",
            "line": 86,
            "snippet": "wp_enqueue_script( 'google-charts', 'https://www.gstatic.com/charts/loader.js', array( 'jquery' ), '1.0', false );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "library/modules/polls/front/front-render.php",
            "line": 101,
            "snippet": "wp_enqueue_script( 'google-charts', 'https://www.gstatic.com/charts/loader.js', array( 'jquery' ), '1.0', false );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        }
    ],
    "resolved_sha": "72f56ff63a9dd6ad200aa48967fe23afdfbda693"
}

{
    "slug": "wordpress-popup",
    "committer_slug": "diobethray",
    "committer_display_name": "diobethray",
    "committer_employer": null,
    "committer_member_since": "2017-02-23",
    "committer_first_commit": "2017-02-24 03:16:50",
    "committer_commit_count": 32,
    "plugin_listed_author": "wpmudev",
    "earliest_plugin_commit": "2011-05-12 08:09:44",
    "plugin_age_at_join_days": 2114,
    "committer_age_at_join_days": 1,
    "active_installs": 90000
}

{
    "slug": "broken-link-checker",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "app/users/recipients/class-model.php",
            "line": 93,
            "snippet": "$key_parts = explode( '_', base64_decode( $key ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "legacy/idn/uctc.php",
            "line": 204,
            "snippet": "$tmp = base64_decode( $b64 );",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "legacy/includes/admin/links-page-js.php",
            "line": 669,
            "snippet": "eval('data = ' + data);",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "763da2ad922aa5358b1c5720e59ea3e2bf53bdff"
}

{
    "slug": "wp-smushit",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "Validate_Path(",
            "kind": "ioc:code_pattern",
            "file": "core/modules/class-dir.php",
            "line": 698,
            "snippet": "private function validate_path( $path_to_check ) {",
            "confidence": "medium"
        },
        {
            "pattern": "Validate_Path(",
            "kind": "ioc:code_pattern",
            "file": "core/modules/class-dir.php",
            "line": 787,
            "snippet": "if ( ! $this->validate_path( dirname( $relative_path ) ) ) {",
            "confidence": "medium"
        },
        {
            "pattern": "Validate_Path(",
            "kind": "ioc:code_pattern",
            "file": "core/modules/class-dir.php",
            "line": 822,
            "snippet": "if ( ! $this->validate_path( $relative_path ) ) {",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "50f97314f22cb954a69ae3c0c09bb564d863f883"
}

{
    "slug": "wordpress-popup",
    "committer_slug": "ivansvyrskyi",
    "committer_display_name": "Ivan",
    "committer_employer": null,
    "committer_member_since": "2021-08-23",
    "committer_first_commit": "2021-08-23 12:52:17",
    "committer_commit_count": 72,
    "plugin_listed_author": "wpmudev",
    "earliest_plugin_commit": "2011-05-12 08:09:44",
    "plugin_age_at_join_days": 3756,
    "committer_age_at_join_days": 0,
    "active_installs": 90000
}

{
    "committer": "rickjc89",
    "member_since": "2020-04-30",
    "plugins_joined": 6,
    "spread_days": 200,
    "earliest_join": "2020-05-02 12:17:55",
    "latest_join": "2020-11-19 07:10:14",
    "combined_installs": 1960000,
    "sample_plugins": [
        {
            "slug": "wp-smushit",
            "active_installs": 1000000,
            "first_commit_at": "2020-08-31 23:58:45"
        },
        {
            "slug": "forminator",
            "active_installs": 600000,
            "first_commit_at": "2020-05-07 00:04:46"
        },
        {
            "slug": "custom-sidebars",
            "active_installs": 100000,
            "first_commit_at": "2020-11-19 07:10:14"
        },
        {
            "slug": "defender-security",
            "active_installs": 90000,
            "first_commit_at": "2020-09-01 00:20:08"
        },
        {
            "slug": "wordpress-popup",
            "active_installs": 90000,
            "first_commit_at": "2020-05-02 12:17:55"
        },
        {
            "slug": "hummingbird-performance",
            "active_installs": 80000,
            "first_commit_at": "2020-11-03 01:31:36"
        }
    ]
}