WordPress.org

{
    "slug": "health-check",
    "active_installs": 300000,
    "critical_matches": 1,
    "high_matches": 0,
    "lookback_days": 90,
    "sample_threads": [
        {
            "title": "ross Site Scripting (XSS) vulnerability",
            "date": "2026-04-16 07:08:46",
            "url": "https://wordpress.org/support/topic/ross-site-scripting-xss-vulnerability/",
            "starter": "memt-network",
            "keyword": "hacked"
        }
    ],
    "explanation": "Cluster of support-forum threads in the last 90 days containing user-reported attack vocabulary. Critical when any thread mentions explicit compromise terms (hacked / backdoor / admin user added); high when two or more mention symptom-class terms (redirect to spam / vendor alerts)."
}

{
    "slug": "gutenberg",
    "committer_slug": "ntsekouras",
    "committer_display_name": "Nik Tsekouras",
    "committer_employer": null,
    "committer_member_since": "2020-05-09",
    "committer_first_commit": "2020-12-02 13:48:30",
    "committer_commit_count": 3,
    "plugin_listed_author": "wordpressdotorg",
    "earliest_plugin_commit": "2017-06-16 09:30:07",
    "plugin_age_at_join_days": 1265,
    "committer_age_at_join_days": 207,
    "active_installs": 300000
}

{
    "slug": "gutenberg",
    "committer_slug": "gutenbergplugin",
    "committer_display_name": "gutenbergplugin",
    "committer_employer": null,
    "committer_member_since": "2021-01-04",
    "committer_first_commit": "2021-01-06 17:30:19",
    "committer_commit_count": 674,
    "plugin_listed_author": "wordpressdotorg",
    "earliest_plugin_commit": "2017-06-16 09:30:07",
    "plugin_age_at_join_days": 1300,
    "committer_age_at_join_days": 2,
    "active_installs": 300000
}

{
    "slug": "ai",
    "new_contributors": [
        "dkotter",
        "jeffpaul"
    ],
    "active_installs": 20000
}

{
    "slug": "theme-check",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "checks/class-bad-things-check.php",
            "line": 34,
            "snippet": "'/(?<![_|a-z0-9|\\.])eval\\s?\\(/i' => __( 'eval() is not allowed.', 'theme-check' ),",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "checks/class-bad-things-check.php",
            "line": 37,
            "snippet": "'/base64_decode/'                => __( 'base64_decode() is not allowed', 'theme-check' ),",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "9e34e8835b18df99112a85e4eaec4a8fa043d640"
}

{
    "slug": "classic-editor",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "Upgrade",
            "kind": "ioc:changelog_phrase",
            "file": "readme.txt",
            "line": 72,
            "snippet": "* Fixed condition for displaying of the after upgrade notice on the \"What's New\" screen. Shown when the classic editor is selected and users cannot switch editors.",
            "confidence": "low"
        }
    ],
    "triage_note_2026_05_03": "classic-editor: single Upgrade hit on \"after upgrade notice\" text. Automattic-owned classic editor compatibility plugin."
}