Smub

1 linked audits · 0 IOCs catalogued · 5M+ headline-plugin installs · first seen 2026-08-11 · last activity 2026-08-11

Audits in this campaign

Suspicious

Audit #52 WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More — 5M+ installs

Verdict: SUSPICIOUS — not malware. WPForms Lite 2.0 ships an Onboarding/Setup Wizard that mints an administrator-bound session token, auto-POSTs it (with the site's REST base URL) to a vendor-controlled SPA at https://wpformsapi.com/setupw…

baseline 1.10.2.1 → head 2.0.0.3 1mo ago