ManageWP

Member since
2015-07-23
Location
Serbia / USA
Employer
Job title
Authored
1
SVN commit access
1
Readme contributor
2
Combined install base
1.5M+ across 3 plugins

Alerts (0)

No open alerts.

Show 1 resolved alert
Medium code_scan_match ManageWP Worker Resolved · code_scan_fp_class_genre_encoding 17d ago
Slugworker
Finding count23
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinsrc/MWP/Http/StreamingResponse.php27return base64_decode($this->content);medium
base64_decodebuiltinsrc/MWP/Worker/Configuration.php23return base64_decode($this->context->optionGet('_worker_public_key'));medium
base64_decodebuiltinsrc/MWP/Worker/Configuration.php43return base64_decode($this->context->optionGet('_worker_nossl_key'));medium
base64_decodebuiltinsrc/MWP/Worker/Request.php203$header = base64_decode($this->getHeader($this->signatureHeaderName));medium
base64_decodebuiltinsrc/MWP/Worker/Request.php225$this->attributes['service_signature'] = base64_decode($this->attributes['service_signature']);medium
base64_decodebuiltinsrc/MWP/Worker/Request.php229$this->attributes['service_signature_v2'] = base64_decode($this->attributes['service_signature_v2']);medium
base64_decodebuiltinsrc/MWP/Worker/Request.php237$this->attributes['no_host_signature'] = base64_decode($this->attributes['no_host_signature']);medium
base64_decodebuiltinsrc/MWP/Worker/Request.php241$this->attributes['no_host_signature_v2'] = base64_decode($this->attributes['no_host_signature_v2']);medium
base64_decodebuiltinsrc/MWP/System/Environment.php105$signature = @base64_decode('Wu8wSnlTaxf3hSGj+6kAY0kP1B9VO3cZ6dTVGda0Ti8cHK/ea1hFqo9nUefppPmrVZrSMrFmkBWeOonHhesJxGUNd3AAd+MF9U8hl5a5H2LiA/IYCBZmWCdnJJrGnD8X0hEV0IEEPSvqK3BA6xzKYfCpi1weCH+BBypmedium
base64_string_longbuiltinsrc/MWP/System/Environment.php105$signature = @base64_decode('Wu8wSnlTaxf3hSGj+6kAY0kP1B9VO3cZ6dTVGda0Ti8cHK/ea1hFqo9nUefppPmrVZrSMrFmkBWeOonHhesJxGUNd3AAd+MF9U8hl5a5H2LiA/IYCBZmWCdnJJrGnD8X0hEV0IEEPSvqK3BA6xzKYfCpi1weCH+BBypmedium
base64_decodebuiltinsrc/MWP/EventListener/MasterRequest/VerifyConnectionInfo.php53$connectionSignature = base64_decode( $data['add_site_signature'] );medium
base64_decodebuiltinsrc/MWP/EventListener/MasterRequest/VerifyConnectionInfo.php54$connectionSignatureV2 = base64_decode( $data['add_site_signature_v2'] );medium
base64_decodebuiltinsrc/MWP/EventListener/MasterRequest/AuthenticateLegacyRequest.php38$givenPublicKey = isset($params['public_key']) ? base64_decode($params['public_key']) : null;medium
base64_decodebuiltinsrc/MWP/EventListener/PublicRequest/AutomaticLogin.php149$signed = base64_decode($request->query['service_sign_v2_algo'] ? $request->query['service_sign_v2'] : $request->query['service_sign']);medium
base64_decodebuiltinsrc/MWP/EventListener/PublicRequest/AutomaticLogin.php154$signed = base64_decode($request->query['signature']);medium
Resolved sha51e4d497b9a1b2d370f4c4247c0d7c6515967ef0
View raw JSON
{
    "slug": "worker",
    "finding_count": 23,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/MWP/Http/StreamingResponse.php",
            "line": 27,
            "snippet": "return base64_decode($this->content);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/MWP/Worker/Configuration.php",
            "line": 23,
            "snippet": "return base64_decode($this->context->optionGet('_worker_public_key'));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/MWP/Worker/Configuration.php",
            "line": 43,
            "snippet": "return base64_decode($this->context->optionGet('_worker_nossl_key'));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/MWP/Worker/Request.php",
            "line": 203,
            "snippet": "$header = base64_decode($this->getHeader($this->signatureHeaderName));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/MWP/Worker/Request.php",
            "line": 225,
            "snippet": "$this->attributes['service_signature'] = base64_decode($this->attributes['service_signature']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/MWP/Worker/Request.php",
            "line": 229,
            "snippet": "$this->attributes['service_signature_v2'] = base64_decode($this->attributes['service_signature_v2']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/MWP/Worker/Request.php",
            "line": 237,
            "snippet": "$this->attributes['no_host_signature'] = base64_decode($this->attributes['no_host_signature']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/MWP/Worker/Request.php",
            "line": 241,
            "snippet": "$this->attributes['no_host_signature_v2'] = base64_decode($this->attributes['no_host_signature_v2']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/MWP/System/Environment.php",
            "line": 105,
            "snippet": "$signature = @base64_decode('Wu8wSnlTaxf3hSGj+6kAY0kP1B9VO3cZ6dTVGda0Ti8cHK/ea1hFqo9nUefppPmrVZrSMrFmkBWeOonHhesJxGUNd3AAd+MF9U8hl5a5H2LiA/IYCBZmWCdnJJrGnD8X0hEV0IEEPSvqK3BA6xzKYfCpi1weCH+BByp",
            "confidence": "medium"
        },
        {
            "pattern": "base64_string_long",
            "kind": "builtin",
            "file": "src/MWP/System/Environment.php",
            "line": 105,
            "snippet": "$signature = @base64_decode('Wu8wSnlTaxf3hSGj+6kAY0kP1B9VO3cZ6dTVGda0Ti8cHK/ea1hFqo9nUefppPmrVZrSMrFmkBWeOonHhesJxGUNd3AAd+MF9U8hl5a5H2LiA/IYCBZmWCdnJJrGnD8X0hEV0IEEPSvqK3BA6xzKYfCpi1weCH+BByp",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/MWP/EventListener/MasterRequest/VerifyConnectionInfo.php",
            "line": 53,
            "snippet": "$connectionSignature       = base64_decode( $data['add_site_signature'] );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/MWP/EventListener/MasterRequest/VerifyConnectionInfo.php",
            "line": 54,
            "snippet": "$connectionSignatureV2     = base64_decode( $data['add_site_signature_v2'] );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/MWP/EventListener/MasterRequest/AuthenticateLegacyRequest.php",
            "line": 38,
            "snippet": "$givenPublicKey    = isset($params['public_key']) ? base64_decode($params['public_key']) : null;",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/MWP/EventListener/PublicRequest/AutomaticLogin.php",
            "line": 149,
            "snippet": "$signed    = base64_decode($request->query['service_sign_v2_algo'] ? $request->query['service_sign_v2'] : $request->query['service_sign']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/MWP/EventListener/PublicRequest/AutomaticLogin.php",
            "line": 154,
            "snippet": "$signed    = base64_decode($request->query['signature']);",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "51e4d497b9a1b2d370f4c4247c0d7c6515967ef0"
}

Plugins authored (1)

Plugin Version Installs Last updated Status
ManageWP Worker ·worker 4.9.33 1M+ 1mo ago Active

SVN commit access (1)

Plugins this account has pushed commits to, reconstructed from plugins.svn.wordpress.org. A new name showing up here on an established plugin is the strongest ownership-transfer signal.

Plugin Primary author Installs Commits First Latest Status
ManageWP Worker managewp 1M+ 13 1y ago 1mo ago Active

Contributor on other plugins (2)

Plugins where this account is listed in the readme contributors (distinct from SVN commit access).

Plugin Primary author Version Installs
Broken Link Checker wpmudev 2.4.8 500k+
Shellshock Check freediver 1.1.0 30