WP Beacon

mainwp

@mainwp · wordpress.org profile ↗
Member since
2013-08-11
Location
—
Employer
MainWP
Job title
—
Authored
4
SVN commit access
4
Readme contributor
0
Combined install base
823k+ across 4 plugins

Alerts (1)

Medium code_scan_delta MainWP Dashboard: Self-hosted WordPress Management for Agencies 2d ago
Slugmainwp
Previous version6.2
Current version6.2.1
New findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinclass/class-mainwp-connect.php483$sign_success = MainWP_Connect_Lib::connect_sign( $sign_value, $signature, base64_decode( $website->privkey ), $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctionsmedium
base64_decodebuiltinclass/class-mainwp-connect.php487$sign_success = static::connect_sign( $sign_value, $signature, base64_decode( $website->privkey ), $alg, $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- bamedium
base64_decodebuiltinclass/class-mainwp-connect.php538$sign_success_v2 = MainWP_Connect_Lib::connect_sign( $sign_value_v2, $signature_v2, base64_decode( $website->privkey ), $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPmedium
base64_decodebuiltinclass/class-mainwp-connect.php541$sign_success_v2 = static::connect_sign( $sign_value_v2, $signature_v2, base64_decode( $website->privkey ), $alg, $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctimedium
base64_decodebuiltinclass/class-mainwp-connect.php629$sign_success = MainWP_Connect_Lib::connect_sign( $sign_value, $signature, base64_decode( $website->privkey ), $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions --medium
base64_decodebuiltinclass/class-mainwp-connect.php633$sign_success = static::connect_sign( $sign_value, $signature, base64_decode( $website->privkey ), $alg, $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- base64medium
base64_decodebuiltinclass/class-mainwp-connect.php637$sign_success = static::connect_sign( $sign_value, $signature, base64_decode( $website->privkey ), $alg, $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- bamedium
base64_decodebuiltinclass/class-mainwp-connect.php672$sign_success_v2 = MainWP_Connect_Lib::connect_sign( $sign_value_v2, $signature_v2, base64_decode( $website->privkey ), $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPmedium
base64_decodebuiltinclass/class-mainwp-connect.php675$sign_success_v2 = static::connect_sign( $sign_value_v2, $signature_v2, base64_decode( $website->privkey ), $alg, $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctimedium
base64_decodebuiltinclass/class-mainwp-connect.php679$sign_success_v2 = static::connect_sign( $sign_value_v2, $signature_v2, base64_decode( $website->privkey ), $alg, $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFumedium
base64_decodebuiltinclass/class-mainwp-connect.php757$sign_success = MainWP_Connect_Lib::connect_sign( $sign_value, $signature, base64_decode( $website->privkey ), $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctionsmedium
base64_decodebuiltinclass/class-mainwp-connect.php761$sign_success = static::connect_sign( $sign_value, $signature, base64_decode( $website->privkey ), $alg, $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- bamedium
base64_decodebuiltinclass/class-mainwp-connect.php811$sign_success_v2 = MainWP_Connect_Lib::connect_sign( $sign_value_v2, $signature_v2, base64_decode( $website->privkey ), $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPmedium
base64_decodebuiltinclass/class-mainwp-connect.php815$sign_success_v2 = static::connect_sign( $sign_value_v2, $signature_v2, base64_decode( $website->privkey ), $alg, $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctimedium
base64_decodebuiltinclass/class-mainwp-premium-update.php470$information = MainWP_System_Utility::get_child_response( base64_decode( $results[1] ) ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- base64_encode used for backwards compatibilitmedium
New finding count15
View raw JSON
{
    "slug": "mainwp",
    "previous_version": "6.2",
    "current_version": "6.2.1",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 483,
            "snippet": "$sign_success = MainWP_Connect_Lib::connect_sign( $sign_value, $signature, base64_decode( $website->privkey ), $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 487,
            "snippet": "$sign_success = static::connect_sign( $sign_value, $signature, base64_decode( $website->privkey ), $alg, $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- ba",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 538,
            "snippet": "$sign_success_v2 = MainWP_Connect_Lib::connect_sign( $sign_value_v2, $signature_v2, base64_decode( $website->privkey ), $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHP",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 541,
            "snippet": "$sign_success_v2 = static::connect_sign( $sign_value_v2, $signature_v2, base64_decode( $website->privkey ), $alg, $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFuncti",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 629,
            "snippet": "$sign_success = MainWP_Connect_Lib::connect_sign( $sign_value, $signature, base64_decode( $website->privkey ), $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions --",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 633,
            "snippet": "$sign_success = static::connect_sign( $sign_value, $signature, base64_decode( $website->privkey ), $alg, $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- base64",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 637,
            "snippet": "$sign_success = static::connect_sign( $sign_value, $signature, base64_decode( $website->privkey ), $alg, $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- ba",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 672,
            "snippet": "$sign_success_v2 = MainWP_Connect_Lib::connect_sign( $sign_value_v2, $signature_v2, base64_decode( $website->privkey ), $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHP",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 675,
            "snippet": "$sign_success_v2 = static::connect_sign( $sign_value_v2, $signature_v2, base64_decode( $website->privkey ), $alg, $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFuncti",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 679,
            "snippet": "$sign_success_v2 = static::connect_sign( $sign_value_v2, $signature_v2, base64_decode( $website->privkey ), $alg, $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFu",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 757,
            "snippet": "$sign_success = MainWP_Connect_Lib::connect_sign( $sign_value, $signature, base64_decode( $website->privkey ), $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 761,
            "snippet": "$sign_success = static::connect_sign( $sign_value, $signature, base64_decode( $website->privkey ), $alg, $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- ba",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 811,
            "snippet": "$sign_success_v2 = MainWP_Connect_Lib::connect_sign( $sign_value_v2, $signature_v2, base64_decode( $website->privkey ), $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHP",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 815,
            "snippet": "$sign_success_v2 = static::connect_sign( $sign_value_v2, $signature_v2, base64_decode( $website->privkey ), $alg, $website->id ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFuncti",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-premium-update.php",
            "line": 470,
            "snippet": "$information = MainWP_System_Utility::get_child_response( base64_decode( $results[1] ) ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- base64_encode used for backwards compatibilit",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 15
}
Show 7 resolved alerts
Critical new_committer_young_account MainWP Key Maker Resolved · no_longer_matches 5mo ago
Slugmainwp-key-maker
Committerthanghoang
Display namethanghoang
Member since2024-06-27
First commit at2024-06-27 12:31:45
Account age at first commit0
Commit count10
Active installs5,000
View raw JSON
{
    "slug": "mainwp-key-maker",
    "committer": "thanghoang",
    "display_name": "thanghoang",
    "member_since": "2024-06-27",
    "first_commit_at": "2024-06-27 12:31:45",
    "account_age_at_first_commit": 0,
    "commit_count": 10,
    "active_installs": 5000
}
Critical new_committer_young_account MainWP Child Reports Resolved · no_longer_matches 5mo ago
Slugmainwp-child-reports
Committerthanghoang
Display namethanghoang
Member since2024-06-27
First commit at2024-07-16 11:37:50
Account age at first commit19
Commit count29
Active installs100,000
View raw JSON
{
    "slug": "mainwp-child-reports",
    "committer": "thanghoang",
    "display_name": "thanghoang",
    "member_since": "2024-06-27",
    "first_commit_at": "2024-07-16 11:37:50",
    "account_age_at_first_commit": 19,
    "commit_count": 29,
    "active_installs": 100000
}
Critical new_committer_young_account MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites Resolved · audit:benign 5mo ago
Slugmainwp-child
Committerthanghoang
Display namethanghoang
Member since2024-06-27
First commit at2024-07-09 16:51:02
Account age at first commit12
Commit count92
Active installs700,000
View raw JSON
{
    "slug": "mainwp-child",
    "committer": "thanghoang",
    "display_name": "thanghoang",
    "member_since": "2024-06-27",
    "first_commit_at": "2024-07-09 16:51:02",
    "account_age_at_first_commit": 12,
    "commit_count": 92,
    "active_installs": 700000
}
High code_scan_match MainWP Dashboard: Self-hosted WordPress Management for Agencies Resolved · code_scan_fp_class_genre_encoding 5mo ago
Slugmainwp
Finding count52
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinpage/page-mainwp-bulk-add.php14$information = unserialize( base64_decode( $result ) );medium
base64_decodebuiltinpage/page-mainwp-themes.php881$themes = unserialize( base64_decode( $results[1] ) );medium
base64_decodebuiltinpage/page-mainwp-plugins.php911$plugins = unserialize( base64_decode( $results[1] ) );medium
base64_decodebuiltinpage/page-mainwp-user.php868$users = unserialize( base64_decode( $results[1] ) );medium
base64_decodebuiltinpage/page-mainwp-post.php745$posts = unserialize( base64_decode( $results[1] ) );medium
base64_decodebuiltinpage/page-mainwp-post.php973$posts = unserialize( base64_decode( $results[1] ) );medium
base64_decodebuiltinpage/page-mainwp-post.php1,078$selected_sites = unserialize( base64_decode( get_post_meta( $id, '_selected_sites', true ) ) );medium
base64_decodebuiltinpage/page-mainwp-post.php1,079$selected_groups = unserialize( base64_decode( get_post_meta( $id, '_selected_groups', true ) ) );medium
base64_decodebuiltinpage/page-mainwp-post.php1,082$post_category = base64_decode( get_post_meta( $id, '_categories', true ) );medium
base64_decodebuiltinpage/page-mainwp-post.php1,084$post_tags = base64_decode( get_post_meta( $id, '_tags', true ) );medium
base64_decodebuiltinpage/page-mainwp-post.php1,085$post_slug = base64_decode( get_post_meta( $id, '_slug', true ) );medium
base64_decodebuiltinpage/page-mainwp-post.php1,291$cats = unserialize( base64_decode( $result ) );medium
base64_decodebuiltinpage/page-mainwp-post.php1,334$selected_cats = unserialize( base64_decode( $opt ) );medium
base64_decodebuiltinpage/page-mainwp-post.php1,339$selected_cats = unserialize( base64_decode( $opt[ $prefix ]['selected_cats'] ) );medium
base64_decodebuiltinpage/page-mainwp-post.php1,431$new_post = maybe_unserialize( base64_decode( $post_data['new_post'] ) );medium
Resolved sha236399a6b0d61d9b7cc8037012fc6f606b43fc50
View raw JSON
{
    "slug": "mainwp",
    "finding_count": 52,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "page/page-mainwp-bulk-add.php",
            "line": 14,
            "snippet": "$information = unserialize( base64_decode( $result ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "page/page-mainwp-themes.php",
            "line": 881,
            "snippet": "$themes = unserialize( base64_decode( $results[1] ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "page/page-mainwp-plugins.php",
            "line": 911,
            "snippet": "$plugins = unserialize( base64_decode( $results[1] ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "page/page-mainwp-user.php",
            "line": 868,
            "snippet": "$users = unserialize( base64_decode( $results[1] ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "page/page-mainwp-post.php",
            "line": 745,
            "snippet": "$posts = unserialize( base64_decode( $results[1] ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "page/page-mainwp-post.php",
            "line": 973,
            "snippet": "$posts = unserialize( base64_decode( $results[1] ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "page/page-mainwp-post.php",
            "line": 1078,
            "snippet": "$selected_sites  = unserialize( base64_decode( get_post_meta( $id, '_selected_sites', true ) ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "page/page-mainwp-post.php",
            "line": 1079,
            "snippet": "$selected_groups = unserialize( base64_decode( get_post_meta( $id, '_selected_groups', true ) ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "page/page-mainwp-post.php",
            "line": 1082,
            "snippet": "$post_category = base64_decode( get_post_meta( $id, '_categories', true ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "page/page-mainwp-post.php",
            "line": 1084,
            "snippet": "$post_tags   = base64_decode( get_post_meta( $id, '_tags', true ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "page/page-mainwp-post.php",
            "line": 1085,
            "snippet": "$post_slug   = base64_decode( get_post_meta( $id, '_slug', true ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "page/page-mainwp-post.php",
            "line": 1291,
            "snippet": "$cats                         = unserialize( base64_decode( $result ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "page/page-mainwp-post.php",
            "line": 1334,
            "snippet": "$selected_cats = unserialize( base64_decode( $opt ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "page/page-mainwp-post.php",
            "line": 1339,
            "snippet": "$selected_cats = unserialize( base64_decode( $opt[ $prefix ]['selected_cats'] ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "page/page-mainwp-post.php",
            "line": 1431,
            "snippet": "$new_post            = maybe_unserialize( base64_decode( $post_data['new_post'] ) );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "236399a6b0d61d9b7cc8037012fc6f606b43fc50"
}
High code_scan_match MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites Resolved · code_scan_fp_class_genre_encoding 5mo ago
Slugmainwp-child
Finding count47
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinclass/class-mainwp-child-ithemes-security.php422$update_settings = isset( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] ) ), true ) : ''; // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- base64_emedium
base64_decodebuiltinclass/class-mainwp-child-ithemes-security.php671$data = isset( $_POST['data'] ) ? json_decode( base64_decode( wp_unslash( $_POST['data'] ) ), true ) : array(); // phpcs:ignore WordPress.Security.NonceVerification,WordPress.Security.Vmedium
base64_decodebuiltinclass/class-mainwp-child-timecapsule.php1,655$data = isset( $_POST['data'] ) ? json_decode( base64_decode( wp_unslash( $_POST['data'] ) ), true ) : array(); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized,Wormedium
base64_decodebuiltinclass/class-mainwp-wordpress-seo.php112$file_url = ! empty( $_POST['file_url'] ) ? sanitize_text_field( base64_decode( wp_unslash( $_POST['file_url'] ) ) ) : ''; // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions, Wordmedium
base64_decodebuiltinclass/class-mainwp-wordpress-seo.php136$settings = ! empty( $_POST['settings'] ) ? base64_decode( wp_unslash( $_POST['settings'] ) ) : ''; // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions,WordPress.Security.ValidatedSamedium
wpconfig_writebuiltinclass/class-mainwp-clone-install.php280$wpConfig = file_get_contents( ABSPATH . 'wp-config.php' ); //phpcs:ignore WordPress.WP.AlternativeFunctionsmedium
wpconfig_writebuiltinclass/class-mainwp-clone-install.php285MainWP_Helper::file_put_contents( ABSPATH . 'wp-config.php', $wpConfig ); //phpcs:ignore WordPress.WP.AlternativeFunctionsmedium
base64_decodebuiltinclass/class-mainwp-child-users.php547$new_password = isset( $_POST['new_password'] ) ? base64_decode( wp_unslash( $_POST['new_password'] ) ) : ''; //phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized, Wordmedium
base64_decodebuiltinclass/class-mainwp-child-users.php607$new_user = isset( $_POST['new_user'] ) ? json_decode( base64_decode( wp_unslash( $_POST['new_user'] ) ), true ) : ''; //phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSmedium
base64_decodebuiltinclass/class-mainwp-connect.php518$auth = static::connect_verify( $func . $nonce, base64_decode( $signature ), base64_decode( get_option( 'mainwp_child_pubkey' ) ), $algo ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFuncmedium
base64_decodebuiltinclass/class-mainwp-child-keys-manager.php163$encodedValue = base64_decode( $encodedValue ); //phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- safe.medium
base64_decodebuiltinclass/class-mainwp-child-keys-manager.php177$encryptedValue = base64_decode( $encodedValue ); //phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- safe.medium
base64_decodebuiltinclass/class-mainwp-child-pagespeed.php276$settings = isset( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] ) ), true ) : array(); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions,WordPress.Secumedium
base64_decodebuiltinclass/class-mainwp-child-wordfence.php1,551$settings = isset( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] )), true ) : array(); // phpcs:ignore -- custom fix to pass through security rules of Dreammedium
base64_decodebuiltinclass/class-mainwp-child-wp-rocket.php937$options = isset( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] ) ), true ) : ''; //phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitizmedium
Resolved sha8d6aa3845211ae7d39a690c5ef44bbea01e5837a
View raw JSON
{
    "slug": "mainwp-child",
    "finding_count": 47,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-ithemes-security.php",
            "line": 422,
            "snippet": "$update_settings = isset( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] ) ), true ) : ''; // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions  -- base64_e",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-ithemes-security.php",
            "line": 671,
            "snippet": "$data        = isset( $_POST['data'] ) ? json_decode( base64_decode( wp_unslash( $_POST['data'] ) ), true ) : array(); // phpcs:ignore WordPress.Security.NonceVerification,WordPress.Security.V",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-timecapsule.php",
            "line": 1655,
            "snippet": "$data = isset( $_POST['data'] ) ? json_decode( base64_decode( wp_unslash( $_POST['data'] ) ), true ) : array(); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized,Wor",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-wordpress-seo.php",
            "line": 112,
            "snippet": "$file_url       = ! empty( $_POST['file_url'] ) ? sanitize_text_field( base64_decode( wp_unslash( $_POST['file_url'] ) ) ) : ''; // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions, Word",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-wordpress-seo.php",
            "line": 136,
            "snippet": "$settings = ! empty( $_POST['settings'] ) ? base64_decode( wp_unslash( $_POST['settings'] ) ) : ''; // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions,WordPress.Security.ValidatedSa",
            "confidence": "medium"
        },
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "class/class-mainwp-clone-install.php",
            "line": 280,
            "snippet": "$wpConfig = file_get_contents( ABSPATH . 'wp-config.php' ); //phpcs:ignore WordPress.WP.AlternativeFunctions",
            "confidence": "medium"
        },
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "class/class-mainwp-clone-install.php",
            "line": 285,
            "snippet": "MainWP_Helper::file_put_contents( ABSPATH . 'wp-config.php', $wpConfig ); //phpcs:ignore WordPress.WP.AlternativeFunctions",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-users.php",
            "line": 547,
            "snippet": "$new_password = isset( $_POST['new_password'] ) ? base64_decode( wp_unslash( $_POST['new_password'] ) ) : '';  //phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized, Word",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-users.php",
            "line": 607,
            "snippet": "$new_user      = isset( $_POST['new_user'] ) ? json_decode( base64_decode( wp_unslash( $_POST['new_user'] ) ), true ) : '';  //phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotS",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 518,
            "snippet": "$auth = static::connect_verify( $func . $nonce, base64_decode( $signature ), base64_decode( get_option( 'mainwp_child_pubkey' ) ), $algo ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunc",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-keys-manager.php",
            "line": 163,
            "snippet": "$encodedValue = base64_decode( $encodedValue ); //phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- safe.",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-keys-manager.php",
            "line": 177,
            "snippet": "$encryptedValue = base64_decode( $encodedValue ); //phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- safe.",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-pagespeed.php",
            "line": 276,
            "snippet": "$settings = isset( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] ) ), true ) : array(); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions,WordPress.Secu",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-wordfence.php",
            "line": 1551,
            "snippet": "$settings = isset( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] )), true ) : array(); // phpcs:ignore -- custom fix to pass through security rules of Dream",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-wp-rocket.php",
            "line": 937,
            "snippet": "$options = isset( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] ) ), true ) : '';  //phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitiz",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "8d6aa3845211ae7d39a690c5ef44bbea01e5837a"
}
Medium code_scan_delta MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites Resolved · code_scan_fp_reviewed_benign 16d ago
Slugmainwp-child
Previous version6.2
Current version6.2
New findings
PatternKindFileLineSnippetConfidence
eval_callbuiltinclass/class-mainwp-child-misc.php942eval( $code ); // phpcs:ignore Squiz.PHP.Eval, Generic.PHP.ForbiddenFunctions.Found -- Executes an already authorized stored Code Snippets definition under the authenticated Child callablemedium
base64_decodebuiltinclass/class-mainwp-child-branding.php229$settings = isset( $_POST['settings'] ) && is_string( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] ), true ), true ) : null; // phpcs:ignore WordPremedium
base64_decodebuiltinclass/class-mainwp-connect.php579$auth = static::connect_verify( $data, base64_decode( $signature ), base64_decode( get_option( 'mainwp_child_pubkey' ) ), $algo ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions --medium
New finding count3
View raw JSON
{
    "slug": "mainwp-child",
    "previous_version": "6.2",
    "current_version": "6.2",
    "new_findings": [
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "class/class-mainwp-child-misc.php",
            "line": 942,
            "snippet": "eval( $code ); // phpcs:ignore Squiz.PHP.Eval, Generic.PHP.ForbiddenFunctions.Found -- Executes an already authorized stored Code Snippets definition under the authenticated Child callable",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-branding.php",
            "line": 229,
            "snippet": "$settings    = isset( $_POST['settings'] ) && is_string( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] ), true ), true ) : null; // phpcs:ignore WordPre",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 579,
            "snippet": "$auth = static::connect_verify( $data, base64_decode( $signature ), base64_decode( get_option( 'mainwp_child_pubkey' ) ), $algo ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions --",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 3
}
Medium code_scan_delta MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites Resolved · fp_base64_benign_data_handling 1mo ago
Slugmainwp-child
Previous version6.1.4
Current version6.1.8
New findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinclass/class-mainwp-child-updraft-plus-backups.php1,300$decoded_options = base64_decode( $encoded_options, true ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- Base64 is used for HTTP encoding compatibility.medium
New finding count1
View raw JSON
{
    "slug": "mainwp-child",
    "previous_version": "6.1.4",
    "current_version": "6.1.8",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-updraft-plus-backups.php",
            "line": 1300,
            "snippet": "$decoded_options = base64_decode( $encoded_options, true ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- Base64 is used for HTTP encoding compatibility.",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 1
}

Plugins authored (4)

Plugin Version Installs Last updated Status
MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites ·mainwp-child 6.2.1 700k+ 3d ago Active
MainWP Child Reports ·mainwp-child-reports 2.3.1 100k+ 1mo ago Active
MainWP Dashboard: Self-hosted WordPress Management for Agencies ·mainwp 6.2.1 20k+ 3d ago Active
MainWP Key Maker ·mainwp-key-maker 1.3 3k+ 1mo ago Active

SVN commit access (4)

Plugins this account has pushed commits to, reconstructed from plugins.svn.wordpress.org. A new name showing up here on an established plugin is the strongest ownership-transfer signal.

Plugin Primary author Installs Commits First Latest Status
MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites mainwp 700k+ 516 13y ago 2y ago Active
MainWP Dashboard: Self-hosted WordPress Management for Agencies mainwp 20k+ 475 12y ago 2y ago Active
MainWP Child Reports mainwp 100k+ 97 11y ago 2y ago Active
MainWP Key Maker mainwp 3k+ 33 10y ago 2y ago Active