Softaculous

{
    "slug": "pagelayer",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "puc_update_hijack",
            "kind": "builtin",
            "file": "init.php",
            "line": 112,
            "snippet": "$pagelayer_updater = Pagelayer_PucFactory::buildUpdateChecker(PAGELAYER_API.'updates.php?version='.PAGELAYER_VERSION, PAGELAYER_FILE);",
            "confidence": "high",
            "details": {
                "url": null,
                "url_host": null,
                "slug_arg": null
            }
        }
    ],
    "resolved_sha": "fd45de38f3143a71e9b20c52c48c249d9e87cbd1"
}

{
    "slug": "backuply",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "restore_ins.php",
            "line": 3133,
            "snippet": "$config_cont = file_get_contents($data['softpath'] . '/wp-config.php');",
            "confidence": "medium"
        },
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "restore_ins.php",
            "line": 3157,
            "snippet": "file_put_contents($data['softpath'] . '/wp-config.php', $config_cont);",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "a2caafb2f1ee7bc6d29f88cb49d37a59aadbfcb1"
}

{
    "slug": "pagelayer",
    "previous_version": "2.1.0",
    "current_version": "2.1.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "init.php",
            "line": 1492,
            "snippet": "wp_register_script('pagelayer-youtube-script',\"https://www.youtube.com/iframe_api\", array(), PAGELAYER_VERSION, true);",
            "confidence": "medium",
            "details": {
                "url": "https://www.youtube.com/iframe_api",
                "url_host": "www.youtube.com"
            }
        }
    ],
    "new_finding_count": 1
}

{
    "slug": "loginizer",
    "domain": "softwp.net",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2024-12-10",
    "plugin_earliest_commit": "2016-01-27 03:17:31",
    "plugin_latest_release": "2026-04-16 12:05:11",
    "gap_days": 3239,
    "domain_age_at_release": 492,
    "active_installs": 1000000
}

{
    "slug": "softaculous",
    "finding_count": 5,
    "findings": [
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "settings.php",
            "line": 118,
            "snippet": "$allowed_ips = softaculous_optPOST('softaculous_allowed_ips');",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "settings.php",
            "line": 119,
            "snippet": "$_a_ips = explode(',', $allowed_ips);",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "functions.php",
            "line": 2278,
            "snippet": "$allowed_ips = softaculous_get_allowed_ips();",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "functions.php",
            "line": 2282,
            "snippet": "if(!in_array($remote_ip, $allowed_ips)){",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "functions.php",
            "line": 2283,
            "snippet": "$return['error'] = 'Unauthorized Access from an unknown IP '.esc_html($remote_ip).'. Allowed IPs - '.esc_html(implode(',', $allowed_ips)).'!!';",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "753f0f44570e3a59ed7ac4d1385a72b5b2d33169"
}

{
    "slug": "fileorganizer",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "Validate_Path(",
            "kind": "ioc:code_pattern",
            "file": "main/ajax.php",
            "line": 31,
            "snippet": "$path = fileorganizer_validate_path($path) ? $path : $fileorganizer->default_path;",
            "confidence": "medium"
        },
        {
            "pattern": "Validate_Path(",
            "kind": "ioc:code_pattern",
            "file": "main/settings.php",
            "line": 122,
            "snippet": "$verify = fileorganizer_validate_path($path);",
            "confidence": "medium"
        },
        {
            "pattern": "Validate_Path(",
            "kind": "ioc:code_pattern",
            "file": "init.php",
            "line": 382,
            "snippet": "function fileorganizer_validate_path($path) {",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "a428d824ed842dafab3787cc3cfc847dda6fce57"
}