WP Beacon

Widgetlogic.org

@widgetlogics · wordpress.org profile ↗
Member since
2024-08-01
Location
—
Employer
—
Job title
—
Authored
1 (1 closed)
SVN commit access
1 (1 closed)
Readme contributor
0
Combined install base
100k+ across 1 plugins

Alerts (0)

No open alerts.

Show 6 resolved alerts
Critical code_scan_match Widget Logic Resolved · audit:malicious 6d ago
Slugwidget-logic
Finding count27
Findings
PatternKindFileLineSnippetConfidence
widgetlogic.orgioc:domainwidget_logic.php9Author URI: https://widgetlogic.orghigh
wpconfig_writebuiltinwidget/test-widget-logic.php310run_test_case(29, 'file_get_contents("wp-config.php")', false, true);medium
widgetlogic.orgioc:domainwidget_cfg.php29'base' => getenv_docker('WORDPRESS_PLUGIN_WGL_BASE_URL', 'https://widgetlogic.org')high
WORDPRESS_PLUGIN_WGL_BASE_URLioc:code_patternwidget_cfg.php29'base' => getenv_docker('WORDPRESS_PLUGIN_WGL_BASE_URL', 'https://widgetlogic.org')high
widget_logic_getServiceVersionioc:code_patternwidget_cfg.php18if (!function_exists('widget_logic_getServiceVersion')) {high
widget_logic_getServiceVersionioc:code_patternwidget_cfg.php19function widget_logic_getServiceVersion()high
widget_logic_getServiceVersionioc:code_patternwidget_cfg.php28'ver' => widget_logic_getServiceVersion(),high
widgetlogic.orgioc:domainWidgetLogicAdminConfig.php72* Also you can add our built-in widgets like Live Match and other that can refer to <a href="https://widgetlogic.org">widgetlogic.org</a> data <br/>high
live_match_widgetioc:code_patternblock_widget/index.php7register_logic_live_match_widget_service();medium
remote_enqueuebuiltinwidget.php93wp_register_script( 'widget-logic_live_match_widget', "{$url}{$ver}/js/data.js?t={$t}", array(), '6.0.9', true);medium
widget-logic_live_match_widgetioc:code_patternwidget.php43wp_enqueue_script('widget-logic_live_match_widget');high
widget-logic_live_match_widgetioc:code_patternwidget.php86if (!wp_script_is('widget-logic_live_match_widget', 'registered')) {high
widget-logic_live_match_widgetioc:code_patternwidget.php93wp_register_script( 'widget-logic_live_match_widget', "{$url}{$ver}/js/data.js?t={$t}", array(), '6.0.9', true);high
live_match_widgetioc:code_patternwidget.php4class Widget_Logic_Live_Match_Widget extends WP_Widget {medium
live_match_widgetioc:code_patternwidget.php12'classname' => 'live_match_widget',medium
View raw JSON
{
    "slug": "widget-logic",
    "finding_count": 27,
    "findings": [
        {
            "pattern": "widgetlogic.org",
            "kind": "ioc:domain",
            "file": "widget_logic.php",
            "line": 9,
            "snippet": "Author URI:  https://widgetlogic.org",
            "confidence": "high"
        },
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "widget/test-widget-logic.php",
            "line": 310,
            "snippet": "run_test_case(29, 'file_get_contents(\"wp-config.php\")', false, true);",
            "confidence": "medium"
        },
        {
            "pattern": "widgetlogic.org",
            "kind": "ioc:domain",
            "file": "widget_cfg.php",
            "line": 29,
            "snippet": "'base' => getenv_docker('WORDPRESS_PLUGIN_WGL_BASE_URL', 'https://widgetlogic.org')",
            "confidence": "high"
        },
        {
            "pattern": "WORDPRESS_PLUGIN_WGL_BASE_URL",
            "kind": "ioc:code_pattern",
            "file": "widget_cfg.php",
            "line": 29,
            "snippet": "'base' => getenv_docker('WORDPRESS_PLUGIN_WGL_BASE_URL', 'https://widgetlogic.org')",
            "confidence": "high"
        },
        {
            "pattern": "widget_logic_getServiceVersion",
            "kind": "ioc:code_pattern",
            "file": "widget_cfg.php",
            "line": 18,
            "snippet": "if (!function_exists('widget_logic_getServiceVersion')) {",
            "confidence": "high"
        },
        {
            "pattern": "widget_logic_getServiceVersion",
            "kind": "ioc:code_pattern",
            "file": "widget_cfg.php",
            "line": 19,
            "snippet": "function widget_logic_getServiceVersion()",
            "confidence": "high"
        },
        {
            "pattern": "widget_logic_getServiceVersion",
            "kind": "ioc:code_pattern",
            "file": "widget_cfg.php",
            "line": 28,
            "snippet": "'ver' => widget_logic_getServiceVersion(),",
            "confidence": "high"
        },
        {
            "pattern": "widgetlogic.org",
            "kind": "ioc:domain",
            "file": "WidgetLogicAdminConfig.php",
            "line": 72,
            "snippet": "* Also you can add our built-in widgets like Live Match and other that can refer to <a href=\"https://widgetlogic.org\">widgetlogic.org</a> data <br/>",
            "confidence": "high"
        },
        {
            "pattern": "live_match_widget",
            "kind": "ioc:code_pattern",
            "file": "block_widget/index.php",
            "line": 7,
            "snippet": "register_logic_live_match_widget_service();",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "widget.php",
            "line": 93,
            "snippet": "wp_register_script( 'widget-logic_live_match_widget', \"{$url}{$ver}/js/data.js?t={$t}\", array(), '6.0.9', true);",
            "confidence": "medium"
        },
        {
            "pattern": "widget-logic_live_match_widget",
            "kind": "ioc:code_pattern",
            "file": "widget.php",
            "line": 43,
            "snippet": "wp_enqueue_script('widget-logic_live_match_widget');",
            "confidence": "high"
        },
        {
            "pattern": "widget-logic_live_match_widget",
            "kind": "ioc:code_pattern",
            "file": "widget.php",
            "line": 86,
            "snippet": "if (!wp_script_is('widget-logic_live_match_widget', 'registered')) {",
            "confidence": "high"
        },
        {
            "pattern": "widget-logic_live_match_widget",
            "kind": "ioc:code_pattern",
            "file": "widget.php",
            "line": 93,
            "snippet": "wp_register_script( 'widget-logic_live_match_widget', \"{$url}{$ver}/js/data.js?t={$t}\", array(), '6.0.9', true);",
            "confidence": "high"
        },
        {
            "pattern": "live_match_widget",
            "kind": "ioc:code_pattern",
            "file": "widget.php",
            "line": 4,
            "snippet": "class Widget_Logic_Live_Match_Widget extends WP_Widget {",
            "confidence": "medium"
        },
        {
            "pattern": "live_match_widget",
            "kind": "ioc:code_pattern",
            "file": "widget.php",
            "line": 12,
            "snippet": "'classname' => 'live_match_widget',",
            "confidence": "medium"
        }
    ]
}
Critical new_committer_young_account Widget Logic Resolved · audit:malicious 10d ago
Slugwidget-logic
Committerwidgetlogics
Display nameWidgetlogic.org
Member since2024-08-01
First commit at2024-08-06 08:08:31
Account age at first commit5
Commit count12
Active installs100,000
View raw JSON
{
    "slug": "widget-logic",
    "committer": "widgetlogics",
    "display_name": "Widgetlogic.org",
    "member_since": "2024-08-01",
    "first_commit_at": "2024-08-06 08:08:31",
    "account_age_at_first_commit": 5,
    "commit_count": 12,
    "active_installs": 100000
}
Critical new_committer_young_account Widget Logic Resolved · deduped 10d ago
Slugwidget-logic
Committerwidgetlogics
Display nameWidgetlogic.org
Member since2024-08-01
First commit at2024-08-06 08:08:31
Account age at first commit5
Commit count12
Active installs100,000
View raw JSON
{
    "slug": "widget-logic",
    "committer": "widgetlogics",
    "display_name": "Widgetlogic.org",
    "member_since": "2024-08-01",
    "first_commit_at": "2024-08-06 08:08:31",
    "account_age_at_first_commit": 5,
    "commit_count": 12,
    "active_installs": 100000
}
High version_compare_trap Widget Logic Resolved · audit:malicious 5d ago
Slugwidget-logic
Active traps
Trap versionTrap releasedBlocked byBlocked on
6.022024-08-28 16:44:466.0.32024-09-27 08:54:19
6.072026-01-07 15:33:106.0.92026-01-15 09:43:08
6.082026-01-12 13:03:546.0.92026-01-15 09:43:08
ExplanationPlugin released 6.02 (parses as higher than canonical X.0.N series), then later released 6.0.3 which parses LOWER — users who installed the trap version cannot auto-update to the canonical release.
View raw JSON
{
    "slug": "widget-logic",
    "active_traps": [
        {
            "trap_version": "6.02",
            "trap_released": "2024-08-28 16:44:46",
            "blocked_by": "6.0.3",
            "blocked_on": "2024-09-27 08:54:19"
        },
        {
            "trap_version": "6.07",
            "trap_released": "2026-01-07 15:33:10",
            "blocked_by": "6.0.9",
            "blocked_on": "2026-01-15 09:43:08"
        },
        {
            "trap_version": "6.08",
            "trap_released": "2026-01-12 13:03:54",
            "blocked_by": "6.0.9",
            "blocked_on": "2026-01-15 09:43:08"
        }
    ],
    "explanation": "Plugin released 6.02 (parses as higher than canonical X.0.N series), then later released 6.0.3 which parses LOWER \u2014 users who installed the trap version cannot auto-update to the canonical release."
}
High domain_younger_than_plugin Widget Logic Resolved · no_longer_matches 5d ago
Slugwidget-logic
Domainwidgetlogic.org
Domain sourcec2_http_call
Domain registered at2024-06-06
Plugin earliest commit2008-02-27 17:09:03
Plugin latest release2026-04-14 16:15:34
Gap days5,943
Domain age at release677
Active installs100,000
View raw JSON
{
    "slug": "widget-logic",
    "domain": "widgetlogic.org",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2024-06-06",
    "plugin_earliest_commit": "2008-02-27 17:09:03",
    "plugin_latest_release": "2026-04-14 16:15:34",
    "gap_days": 5943,
    "domain_age_at_release": 677,
    "active_installs": 100000
}
High version_compare_trap Widget Logic Resolved · no_longer_matches 7d ago
Slugwidget-logic
Active traps
Trap versionTrap releasedBlocked byBlocked on
6.022024-08-28 16:44:466.0.32024-09-27 08:54:19
6.072026-01-07 15:33:106.0.92026-01-15 09:43:08
6.082026-01-12 13:03:546.0.92026-01-15 09:43:08
ExplanationPlugin released 6.02 (parses as higher than canonical X.0.N series), then later released 6.0.3 which parses LOWER — users who installed the trap version cannot auto-update to the canonical release.
View raw JSON
{
    "slug": "widget-logic",
    "active_traps": [
        {
            "trap_version": "6.02",
            "trap_released": "2024-08-28 16:44:46",
            "blocked_by": "6.0.3",
            "blocked_on": "2024-09-27 08:54:19"
        },
        {
            "trap_version": "6.07",
            "trap_released": "2026-01-07 15:33:10",
            "blocked_by": "6.0.9",
            "blocked_on": "2026-01-15 09:43:08"
        },
        {
            "trap_version": "6.08",
            "trap_released": "2026-01-12 13:03:54",
            "blocked_by": "6.0.9",
            "blocked_on": "2026-01-15 09:43:08"
        }
    ],
    "explanation": "Plugin released 6.02 (parses as higher than canonical X.0.N series), then later released 6.0.3 which parses LOWER \u2014 users who installed the trap version cannot auto-update to the canonical release."
}

Plugins authored (1)

Plugin Version Installs Last updated Status
Widget Logic ·widget-logic 6.9 100k+ — Closed

SVN commit access (1)

Plugins this account has pushed commits to, reconstructed from plugins.svn.wordpress.org. A new name showing up here on an established plugin is the strongest ownership-transfer signal.

Plugin Primary author Installs Commits First Latest Status
Widget Logic widgetlogics 100k+ 12 1y ago 3mo ago Closed