Author: safetydev – WP Beacon

Alerts (0)

No open alerts.

Show 1 resolved alert

Medium recent_prt_intervention WP Install From Web Resolved · audited_malicious 19d ago

Slug	wp-plugin-management
Committer	safetydev
First commit at	2020-07-02 21:57:27
Active installs	100
Prt committer	`frantorres`
Clean commit at	2026-04-16 09:46:56
Stripped	`activation hook flipped install→delete + admin notice`
Payload	`siteguarding_tools.php v1.7 (2020-03-20)`
Explanation	Closed-on-clean SiteGuarding burner: wp.org PRT (frantorres) force-pushed a cleaning commit at closure that stripped the backdoor payload (activation hook flipped install→delete + admin notice). Pre-clean trunk ships a SiteGuarding backdoor dropper. Found via clean-on-closure hunt 2026-06-14.

View raw JSON

{
    "slug": "wp-plugin-management",
    "committer": "safetydev",
    "first_commit_at": "2020-07-02 21:57:27",
    "active_installs": 100,
    "prt_committer": "frantorres",
    "clean_commit_at": "2026-04-16 09:46:56",
    "stripped": "activation hook flipped install\u2192delete + admin notice",
    "payload": "siteguarding_tools.php v1.7 (2020-03-20)",
    "explanation": "Closed-on-clean SiteGuarding burner: wp.org PRT (frantorres) force-pushed a cleaning commit at closure that stripped the backdoor payload (activation hook flipped install\u2192delete + admin notice). Pre-clean trunk ships a SiteGuarding backdoor dropper. Found via clean-on-closure hunt 2026-06-14."
}

Plugins authored (1)

Plugin	Version	Installs	Last updated	Status
WP Install From Web ·`wp-plugin-management`	1.10.1.1	100	—	Closed

SVN commit access (1)

Plugins this account has pushed commits to, reconstructed from plugins.svn.wordpress.org. A new name showing up here on an established plugin is the strongest ownership-transfer signal.

Plugin	Primary author	Installs	Commits	First	Latest	Status
WP Install From Web	safetydev	100	13	5y ago	1y ago	Closed