Author: quttera – WP Beacon

Alerts (0)

No open alerts.

Show 1 resolved alert

Medium code_scan_match Quttera ThreatSign – Web Malware Scanner for WordPress Resolved · code_scan_fp_class_genre_encoding 17d ago

Slug quttera-web-malware-scanner

Finding count 7

Findings

Pattern	Kind	File	Line	Snippet	Confidence
`base64_decode`	`builtin`	`external_scan_page.php`	16	`$cache_json = base64_decode($cache_encoded);`	`medium`
`base64_decode`	`builtin`	`qtrSettings.php`	1,148	`$value = base64_decode($encoded_value, true);`	`medium`
`base64_decode`	`builtin`	`qtrAjaxHandler.php`	857	`$cache_json = base64_decode($cache_encoded);`	`medium`
`base64_decode`	`builtin`	`qtrPatternsDb.php`	112	$step1 = base64_decode($body);	`medium`
`hex_string_long`	`builtin`	`qtrMimetype.php`	37	array("helpfile", "\x49\x6e\x6e\x6f\x20\x53\x65\x74\x75\x70\x20\x55\x6e\x69\x6e\x73\x74\x61\x6c\x6c\x20\x4c\x6f\x67", 0, ".chm")	`medium`
`base64_decode`	`builtin`	`dashboard.php`	151	`$cache_json = base64_decode($cache_encoded);`	`medium`
`eval_call`	`builtin`	`qtrExternalScanReport.php`	292	`str_contains($s, 'eval(') \|\|`	`medium`

Resolved sha 9720fd5631ce311f068b3ef9c61d7a9854b704fa

View raw JSON

{
    "slug": "quttera-web-malware-scanner",
    "finding_count": 7,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "external_scan_page.php",
            "line": 16,
            "snippet": "$cache_json = base64_decode($cache_encoded);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "qtrSettings.php",
            "line": 1148,
            "snippet": "$value = base64_decode($encoded_value, true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "qtrAjaxHandler.php",
            "line": 857,
            "snippet": "$cache_json = base64_decode($cache_encoded);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "qtrPatternsDb.php",
            "line": 112,
            "snippet": "$step1  = base64_decode($body);",
            "confidence": "medium"
        },
        {
            "pattern": "hex_string_long",
            "kind": "builtin",
            "file": "qtrMimetype.php",
            "line": 37,
            "snippet": "array(\"helpfile\", \"\\x49\\x6e\\x6e\\x6f\\x20\\x53\\x65\\x74\\x75\\x70\\x20\\x55\\x6e\\x69\\x6e\\x73\\x74\\x61\\x6c\\x6c\\x20\\x4c\\x6f\\x67\", 0, \".chm\")",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "dashboard.php",
            "line": 151,
            "snippet": "$cache_json = base64_decode($cache_encoded);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "qtrExternalScanReport.php",
            "line": 292,
            "snippet": "str_contains($s, 'eval(') ||",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "9720fd5631ce311f068b3ef9c61d7a9854b704fa"
}

Plugins authored (1)

Plugin	Version	Installs	Last updated	Status
Quttera ThreatSign – Web Malware Scanner for WordPress ·`quttera-web-malware-scanner`	4.1.0.2	10k+	18d ago	Active

SVN commit access (1)

Plugins this account has pushed commits to, reconstructed from plugins.svn.wordpress.org. A new name showing up here on an established plugin is the strongest ownership-transfer signal.

Plugin	Primary author	Installs	Commits	First	Latest	Status
Quttera ThreatSign – Web Malware Scanner for WordPress	quttera	10k+	2	2y ago	18d ago	Active