| Slug | ninja-job-board |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-29 00:00:00 |
| Active installs | 100 |
View raw JSON
{
"slug": "ninja-job-board",
"closed_reason": "temporary",
"closed_date": "2026-10-29 00:00:00",
"active_installs": 100
}| Slug | ninja-job-board |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-29 00:00:00 |
| Active installs | 100 |
{
"slug": "ninja-job-board",
"closed_reason": "temporary",
"closed_date": "2026-10-29 00:00:00",
"active_installs": 100
}| Slug | fluent-smtp |
|---|---|
| Pattern | unserialize_after_remote_call |
| Kind | builtin |
| Version | 2.2.95 |
| Hit count | 1 |
| First hit |
|
| Explanation | a remote HTTP fetch (`wp_remote_*`/`curl_exec`/`file_get_contents`) is followed by `@unserialize` within the same file — classic PHP Object Injection C2 gadget used by EP and most WP supply-chain backdoors. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. |
{
"slug": "fluent-smtp",
"pattern": "unserialize_after_remote_call",
"kind": "builtin",
"version": "2.2.95",
"hit_count": 1,
"first_hit": {
"file": "app/Services/NotificationHelper.php",
"line": 328,
"snippet": "L312: $body = wp_remote_retrieve_body($response); \u2192 L328: $sendingTo = self::unserialize(Arr::get($logData, 'to'));"
},
"explanation": "a remote HTTP fetch (`wp_remote_*`/`curl_exec`/`file_get_contents`) is followed by `@unserialize` within the same file \u2014 classic PHP Object Injection C2 gadget used by EP and most WP supply-chain backdoors. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak."
}| Slug | fluent-smtp | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Previous version | 2.2.95 | ||||||||||||
| Current version | 2.2.95 | ||||||||||||
| New findings |
| ||||||||||||
| New finding count | 1 |
{
"slug": "fluent-smtp",
"previous_version": "2.2.95",
"current_version": "2.2.95",
"new_findings": [
{
"pattern": "unserialize_after_remote_call",
"kind": "builtin",
"file": "app/Services/NotificationHelper.php",
"line": 328,
"snippet": "L312: $body = wp_remote_retrieve_body($response); \u2192 L328: $sendingTo = self::unserialize(Arr::get($logData, 'to'));",
"confidence": "high"
}
],
"new_finding_count": 1
}| Slug | fluent-affiliate |
|---|---|
| Previous profile | https://profiles.wordpress.org/techjewel/ |
| Current profile | https://profiles.wordpress.org/wpmanageninja/ |
| Active installs | 1,000 |
{
"slug": "fluent-affiliate",
"previous_profile": "https://profiles.wordpress.org/techjewel/",
"current_profile": "https://profiles.wordpress.org/wpmanageninja/",
"active_installs": 1000
}| Slug | fluent-community |
|---|---|
| Previous profile | https://profiles.wordpress.org/techjewel/ |
| Current profile | https://profiles.wordpress.org/wpmanageninja/ |
| Active installs | 8,000 |
{
"slug": "fluent-community",
"previous_profile": "https://profiles.wordpress.org/techjewel/",
"current_profile": "https://profiles.wordpress.org/wpmanageninja/",
"active_installs": 8000
}| Slug | fluent-security |
|---|---|
| Previous profile | https://profiles.wordpress.org/techjewel/ |
| Current profile | https://profiles.wordpress.org/wpmanageninja/ |
| Active installs | 10,000 |
{
"slug": "fluent-security",
"previous_profile": "https://profiles.wordpress.org/techjewel/",
"current_profile": "https://profiles.wordpress.org/wpmanageninja/",
"active_installs": 10000
}| Slug | fluent-support |
|---|---|
| Previous profile | https://profiles.wordpress.org/techjewel/ |
| Current profile | https://profiles.wordpress.org/wpmanageninja/ |
| Active installs | 10,000 |
{
"slug": "fluent-support",
"previous_profile": "https://profiles.wordpress.org/techjewel/",
"current_profile": "https://profiles.wordpress.org/wpmanageninja/",
"active_installs": 10000
}| Slug | fluent-booking |
|---|---|
| Previous profile | https://profiles.wordpress.org/techjewel/ |
| Current profile | https://profiles.wordpress.org/wpmanageninja/ |
| Active installs | 20,000 |
{
"slug": "fluent-booking",
"previous_profile": "https://profiles.wordpress.org/techjewel/",
"current_profile": "https://profiles.wordpress.org/wpmanageninja/",
"active_installs": 20000
}| Slug | easy-code-manager |
|---|---|
| Previous profile | https://profiles.wordpress.org/techjewel/ |
| Current profile | https://profiles.wordpress.org/wpmanageninja/ |
| Active installs | 50,000 |
{
"slug": "easy-code-manager",
"previous_profile": "https://profiles.wordpress.org/techjewel/",
"current_profile": "https://profiles.wordpress.org/wpmanageninja/",
"active_installs": 50000
}| Slug | ninja-tables |
|---|---|
| Previous profile | https://profiles.wordpress.org/techjewel/ |
| Current profile | https://profiles.wordpress.org/wpmanageninja/ |
| Active installs | 80,000 |
{
"slug": "ninja-tables",
"previous_profile": "https://profiles.wordpress.org/techjewel/",
"current_profile": "https://profiles.wordpress.org/wpmanageninja/",
"active_installs": 80000
}| Slug | fluent-crm |
|---|---|
| Previous profile | https://profiles.wordpress.org/techjewel/ |
| Current profile | https://profiles.wordpress.org/wpmanageninja/ |
| Active installs | 80,000 |
{
"slug": "fluent-crm",
"previous_profile": "https://profiles.wordpress.org/techjewel/",
"current_profile": "https://profiles.wordpress.org/wpmanageninja/",
"active_installs": 80000
}| Slug | fluentform |
|---|---|
| Previous profile | https://profiles.wordpress.org/techjewel/ |
| Current profile | https://profiles.wordpress.org/wpmanageninja/ |
| Active installs | 700,000 |
{
"slug": "fluentform",
"previous_profile": "https://profiles.wordpress.org/techjewel/",
"current_profile": "https://profiles.wordpress.org/wpmanageninja/",
"active_installs": 700000
}| Slug | fluent-smtp |
|---|---|
| Previous profile | https://profiles.wordpress.org/techjewel/ |
| Current profile | https://profiles.wordpress.org/wpmanageninja/ |
| Active installs | 600,000 |
{
"slug": "fluent-smtp",
"previous_profile": "https://profiles.wordpress.org/techjewel/",
"current_profile": "https://profiles.wordpress.org/wpmanageninja/",
"active_installs": 600000
}| Slug | fluentform | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Finding count | 1 | ||||||||||||||
| Findings |
| ||||||||||||||
| Resolved sha | 5a600146365db9ac75dca5328b6fc3e3b70c0f91 |
{
"slug": "fluentform",
"finding_count": 1,
"findings": [
{
"pattern": "remote_enqueue",
"kind": "builtin",
"file": "app/Modules/Payments/PaymentMethods/Stripe/StripeHandler.php",
"line": 145,
"snippet": "wp_enqueue_script('stripe_elements', 'https://js.stripe.com/v3/', array('jquery'), '3.0', true);",
"confidence": "medium",
"details": {
"url": "https://js.stripe.com/v3/",
"url_host": "js.stripe.com"
}
}
],
"resolved_sha": "5a600146365db9ac75dca5328b6fc3e3b70c0f91"
}| Slug | fluentform |
|---|---|
| Domain | apip.cc |
| Domain source | c2_http_call |
| Domain registered at | 2024-07-18 |
| Plugin earliest commit | 2017-12-26 21:18:58 |
| Plugin latest release | 2026-04-28 04:32:22 |
| Gap days | 2,395 |
| Domain age at release | 649 |
| Active installs | 700,000 |
{
"slug": "fluentform",
"domain": "apip.cc",
"domain_source": "c2_http_call",
"domain_registered_at": "2024-07-18",
"plugin_earliest_commit": "2017-12-26 21:18:58",
"plugin_latest_release": "2026-04-28 04:32:22",
"gap_days": 2395,
"domain_age_at_release": 649,
"active_installs": 700000
}| Slug | fluentforms-pdf | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Previous version | 2.2.0 | ||||||||||||
| Current version | 2.2.0 | ||||||||||||
| New findings |
| ||||||||||||
| New finding count | 1 |
{
"slug": "fluentforms-pdf",
"previous_version": "2.2.0",
"current_version": "2.2.0",
"new_findings": [
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "Modules/FluentForms/FluentFormsIntegration.php",
"line": 1063,
"snippet": "$rawSubmission = isset($_REQUEST['submission_id']) ? Protector::decrypt(base64_decode($_REQUEST['submission_id'])) : '';",
"confidence": "medium"
}
],
"new_finding_count": 1
}| Slug | easy-code-manager | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Previous version | 10.55 | ||||||||||||
| Current version | 10.56 | ||||||||||||
| New findings |
| ||||||||||||
| New finding count | 1 |
{
"slug": "easy-code-manager",
"previous_version": "10.55",
"current_version": "10.56",
"new_findings": [
{
"pattern": "eval_call",
"kind": "builtin",
"file": "app/Services/PhpValidator.php",
"line": 317,
"snippet": "if (strpos($throwable->getFile(), \"eval()'d code\") !== false) {",
"confidence": "medium"
}
],
"new_finding_count": 1
}| Slug | fluentforms-pdf | ||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Finding count | 7 | ||||||||||||||||||||||||||||||||||||||||||||||||
| Findings |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| Resolved sha | 7690dd9e853c73e4d3536b3266c149ab13b7aa69 |
{
"slug": "fluentforms-pdf",
"finding_count": 7,
"findings": [
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "Modules/FluentForms/FluentFormsIntegration.php",
"line": 1021,
"snippet": "$feedId = isset($_REQUEST['id']) ? intval(Protector::decrypt(base64_decode($_REQUEST['id']))) : 0;",
"confidence": "medium"
},
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "Modules/FluentForms/FluentFormsIntegration.php",
"line": 1023,
"snippet": "$submissionId = isset($_REQUEST['submission_id']) ? intval(Protector::decrypt(base64_decode($_REQUEST['submission_id']))) : 0;",
"confidence": "medium"
},
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "vendor-prefixed/mpdf/mpdf/src/Image/ImageProcessor.php",
"line": 152,
"snippet": "$data = base64_decode($v[2]);",
"confidence": "medium"
},
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "vendor-prefixed/mpdf/mpdf/src/CssManager.php",
"line": 253,
"snippet": "$file = $this->cache->write('_tempCSSidata' . random_int(1, 10000) . '_' . $i . '.' . $idata[2][$i], base64_decode($idata[3][$i]));",
"confidence": "medium"
},
{
"pattern": "gzinflate",
"kind": "builtin",
"file": "vendor-prefixed/setasign/fpdi/src/PdfParser/Filter/Flate.php",
"line": 61,
"snippet": "$data = @(gzinflate(substr($oData, 2)));",
"confidence": "medium"
},
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "Classes/Controller/GlobalPdfManager.php",
"line": 1012,
"snippet": "$feedId = isset($_REQUEST['id']) ? intval(Protector::decrypt(base64_decode($_REQUEST['id']))) : 0;",
"confidence": "medium"
},
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "Classes/Controller/GlobalPdfManager.php",
"line": 1014,
"snippet": "$submissionId = isset($_REQUEST['submission_id']) ? intval(Protector::decrypt(base64_decode($_REQUEST['submission_id']))) : 0;",
"confidence": "medium"
}
],
"resolved_sha": "7690dd9e853c73e4d3536b3266c149ab13b7aa69"
}| Slug | easy-code-manager | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Finding count | 2 | ||||||||||||||||||
| Findings |
| ||||||||||||||||||
| Resolved sha | 189e84f001c072e6ba91349ea76e6d5a38f8e3d1 |
{
"slug": "easy-code-manager",
"finding_count": 2,
"findings": [
{
"pattern": "eval_call",
"kind": "builtin",
"file": "app/Services/PhpValidator.php",
"line": 288,
"snippet": "$result = eval($code); // phpcs:ignore Squiz.PHP.Eval.Discouraged",
"confidence": "medium"
},
{
"pattern": "base64_decode",
"kind": "builtin",
"file": "app/Hooks/Handlers/AdminMenuHandler.php",
"line": 177,
"snippet": "$code = base64_decode($snippet['code']);",
"confidence": "medium"
}
],
"resolved_sha": "189e84f001c072e6ba91349ea76e6d5a38f8e3d1"
}Plugins this account has pushed commits to, reconstructed from plugins.svn.wordpress.org. A new name showing up here on an established plugin is the strongest ownership-transfer signal.
| Plugin | Primary author | Installs | Commits | First | Latest | Status |
|---|---|---|---|---|---|---|
| FluentCart – Online Store Builder & eCommerce Checkout | wpmanageninja | 9k+ | 5 | 1y ago | 1y ago | Active |
| Fluent PDF Generator | wpmanageninja | 20k+ | 3 | 6y ago | 5y ago | Active |
| Fluent Connect – Connect ThriveCart with your WordPress and FluentCRM | wpmanageninja | 500 | 2 | 5y ago | 3y ago | Active |
| Ninja Job Board – Ultimate WordPress Job Board Plugin | wpmanageninja | 100 | 2 | 7y ago | 7y ago | Closed |
Plugins where this account is listed in the readme contributors (distinct from SVN commit access).