blaminhor

{
    "slug": "blaminhor-essentials",
    "previous_version": "2.5.11",
    "current_version": "2.7.5",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "modules/login-security/lib/webauthn/src/WebAuthn.php",
            "line": 683,
            "snippet": "$rawPk = \\base64_decode($pkParts[1]);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "modules/login-security/lib/webauthn/src/Binary/ByteBuffer.php",
            "line": 289,
            "snippet": "return \\base64_decode(\\strtr($data, '-_', '+/') . \\str_repeat('=', 3 - (3 + \\strlen($data)) % 4));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "modules/login-security/lib/webauthn/src/Attestation/Format/AndroidSafetyNet.php",
            "line": 64,
            "snippet": "$this->_x5c = \\base64_decode($header->x5c[0]);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "modules/login-security/lib/webauthn/src/Attestation/Format/AndroidSafetyNet.php",
            "line": 69,
            "snippet": "$this->_x5c_chain[] = \\base64_decode($header->x5c[$i]);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "modules/login-security/lib/webauthn/src/Attestation/Format/AndroidSafetyNet.php",
            "line": 149,
            "snippet": "return \\base64_decode(\\strtr($data, '-_', '+/') . \\str_repeat('=', 3 - (3 + \\strlen($data)) % 4));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "modules/login-security/includes/class-login-2fa-webauthn.php",
            "line": 445,
            "snippet": "$raw = base64_decode( $stored, true ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode -- Restoring raw bytes we stored ourselves.",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "modules/login-security/includes/class-login-2fa-webauthn.php",
            "line": 491,
            "snippet": "$raw = base64_decode( $data, true ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode -- Decoding browser-supplied binary, not code.",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "modules/domain-changer/includes/class-domain-change-journal.php",
            "line": 169,
            "snippet": "$decoded = base64_decode( $value, true ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode -- Binary-safe JSON transport.",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "modules/backup/includes/class-backup-remote-sftp.php",
            "line": 391,
            "snippet": "$blob  = isset( $parts[1] ) ? base64_decode( $parts[1], true ) : false; // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode -- Decoding an SSH public key blob, not obfusc",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/functions.php",
            "line": 125,
            "snippet": "$decoded = base64_decode( substr( $data, 3 ), true ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode -- Decoding base64-stored AES-256-GCM output back to raw bytes,",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 10
}

{
    "slug": "blaminhor-essentials",
    "previous_version": "2.3.0",
    "current_version": "2.5.5",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "modules/events-calendar/includes/class-events-access.php",
            "line": 361,
            "snippet": "$decoded = base64_decode( strtr( $data, '-_', '+/' ), true );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 1
}