| Slug | dicebar |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-25 00:00:00 |
| Active installs | 30 |
View raw JSON
{
"slug": "dicebar",
"closed_reason": "temporary",
"closed_date": "2026-10-25 00:00:00",
"active_installs": 30
}| Slug | dicebar |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-25 00:00:00 |
| Active installs | 30 |
{
"slug": "dicebar",
"closed_reason": "temporary",
"closed_date": "2026-10-25 00:00:00",
"active_installs": 30
}| Slug | open-migration-unlimited-site-transfer-backup |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-25 00:00:00 |
| Active installs | 40 |
{
"slug": "open-migration-unlimited-site-transfer-backup",
"closed_reason": "temporary",
"closed_date": "2026-10-25 00:00:00",
"active_installs": 40
}| Slug | wow-ai-product-recommendations |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-10 00:00:00 |
| Active installs | 20 |
{
"slug": "wow-ai-product-recommendations",
"closed_reason": "temporary",
"closed_date": "2026-10-10 00:00:00",
"active_installs": 20
}| Slug | translera |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-25 00:00:00 |
| Active installs | 900 |
{
"slug": "translera",
"closed_reason": "temporary",
"closed_date": "2026-10-25 00:00:00",
"active_installs": 900
}| Slug | wow-pdf-invoices-packing-slips |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-10 00:00:00 |
| Active installs | 200 |
{
"slug": "wow-pdf-invoices-packing-slips",
"closed_reason": "temporary",
"closed_date": "2026-10-10 00:00:00",
"active_installs": 200
}| Slug | wx-subscribe |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-05 00:00:00 |
| Active installs | 10 |
{
"slug": "wx-subscribe",
"closed_reason": "temporary",
"closed_date": "2026-10-05 00:00:00",
"active_installs": 10
}| Slug | wetech-contact-forms-webhook |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-14 00:00:00 |
| Active installs | 20 |
{
"slug": "wetech-contact-forms-webhook",
"closed_reason": "temporary",
"closed_date": "2026-10-14 00:00:00",
"active_installs": 20
}| Slug | web-vitals-tracking |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-05 00:00:00 |
| Active installs | 10 |
{
"slug": "web-vitals-tracking",
"closed_reason": "temporary",
"closed_date": "2026-10-05 00:00:00",
"active_installs": 10
}| Slug | usermorph |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-09-28 00:00:00 |
| Active installs | 10 |
{
"slug": "usermorph",
"closed_reason": "temporary",
"closed_date": "2026-09-28 00:00:00",
"active_installs": 10
}| Slug | social-commerce-by-cedcommerce |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-01 00:00:00 |
| Active installs | 10 |
{
"slug": "social-commerce-by-cedcommerce",
"closed_reason": "temporary",
"closed_date": "2026-10-01 00:00:00",
"active_installs": 10
}| Slug | standwithukraine |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-04 00:00:00 |
| Active installs | 10 |
{
"slug": "standwithukraine",
"closed_reason": "temporary",
"closed_date": "2026-10-04 00:00:00",
"active_installs": 10
}| Slug | storybook-shopify-blog-connector |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-09-28 00:00:00 |
| Active installs | 10 |
{
"slug": "storybook-shopify-blog-connector",
"closed_reason": "temporary",
"closed_date": "2026-09-28 00:00:00",
"active_installs": 10
}| Slug | storybook-shopify-blog-connector |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "storybook-shopify-blog-connector",
"new_contributors": [
"eblocks"
],
"active_installs": 10
}| Slug | pickit |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-09-30 00:00:00 |
| Active installs | 10 |
{
"slug": "pickit",
"closed_reason": "temporary",
"closed_date": "2026-09-30 00:00:00",
"active_installs": 10
}| Slug | pickit |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "pickit",
"new_contributors": [
"integracionespickit"
],
"active_installs": 10
}| Slug | quoteability |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-10-04 00:00:00 |
| Active installs | 10 |
{
"slug": "quoteability",
"closed_reason": "author-request",
"closed_date": "2026-10-04 00:00:00",
"active_installs": 10
}| Slug | mindstien-quick-login |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-09-24 00:00:00 |
| Active installs | 10 |
{
"slug": "mindstien-quick-login",
"closed_reason": "temporary",
"closed_date": "2026-09-24 00:00:00",
"active_installs": 10
}| Slug | mine-metamask |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-09-30 00:00:00 |
| Active installs | 10 |
{
"slug": "mine-metamask",
"closed_reason": "temporary",
"closed_date": "2026-09-30 00:00:00",
"active_installs": 10
}| Slug | gemboards |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-11 00:00:00 |
| Active installs | 20 |
{
"slug": "gemboards",
"closed_reason": "temporary",
"closed_date": "2026-10-11 00:00:00",
"active_installs": 20
}| Slug | byteplugs-login-shop |
|---|---|
| Previous profile | https://profiles.wordpress.org/byteplugs/ |
| Current profile | https://profiles.wordpress.org/nebiron/ |
| Active installs | 0 |
{
"slug": "byteplugs-login-shop",
"previous_profile": "https://profiles.wordpress.org/byteplugs/",
"current_profile": "https://profiles.wordpress.org/nebiron/",
"active_installs": 0
}| Slug | fireems-stats |
|---|---|
| Pattern | puc_update_hijack |
| Kind | builtin |
| Version | 4.0.1 |
| Hit count | 1 |
| First hit |
|
| Explanation | plugin calls `::buildUpdateChecker()` — the factory entry point of the Yahnis Elsts Plugin Update Checker library. A plugin distributed through wordpress.org that registers its own update source is bypassing the Plugin Review Team: every install polls the non-wp.org URL on cron and installs whatever JSON + zip it returns, with full plugin-author permissions. This is the mechanism behind the `anadnet`/quick-pagepost-redirect-plugin compromise (2021) where the author seeded 70,000+ installs through tagged releases and then removed the library from trunk to hide the persistence. Any URL argument pointing away from `downloads.wordpress.org`/`api.wordpress.org` is the hijack signal. |
| Shape | vendor_updater |
| Url | http://upgrade.maltesesolutions.com/fireems-stats/fireems.json |
| Url host | upgrade.maltesesolutions.com |
| Slug arg | fireems-stats |
{
"slug": "fireems-stats",
"pattern": "puc_update_hijack",
"kind": "builtin",
"version": "4.0.1",
"hit_count": 1,
"first_hit": {
"file": "fireems-stats.php",
"line": 67,
"snippet": "$myUpdateChecker = Puc_v4_Factory::buildUpdateChecker('http://upgrade.maltesesolutions.com/fireems-stats/fireems.json', __FILE__, 'fireems-stats');"
},
"explanation": "plugin calls `::buildUpdateChecker()` \u2014 the factory entry point of the Yahnis Elsts Plugin Update Checker library. A plugin distributed through wordpress.org that registers its own update source is bypassing the Plugin Review Team: every install polls the non-wp.org URL on cron and installs whatever JSON + zip it returns, with full plugin-author permissions. This is the mechanism behind the `anadnet`/quick-pagepost-redirect-plugin compromise (2021) where the author seeded 70,000+ installs through tagged releases and then removed the library from trunk to hide the persistence. Any URL argument pointing away from `downloads.wordpress.org`/`api.wordpress.org` is the hijack signal.",
"shape": "vendor_updater",
"url": "http://upgrade.maltesesolutions.com/fireems-stats/fireems.json",
"url_host": "upgrade.maltesesolutions.com",
"slug_arg": "fireems-stats"
}| Slug | customeasy | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Active traps |
| ||||||||
| Explanation | Plugin released 1.01 (parses as higher than canonical X.0.N series), then later released 1.0.2 which parses LOWER — users who installed the trap version cannot auto-update to the canonical release. |
{
"slug": "customeasy",
"active_traps": [
{
"trap_version": "1.01",
"trap_released": "2026-04-21 14:14:18",
"blocked_by": "1.0.2",
"blocked_on": "2026-10-19 14:51:20"
}
],
"explanation": "Plugin released 1.01 (parses as higher than canonical X.0.N series), then later released 1.0.2 which parses LOWER \u2014 users who installed the trap version cannot auto-update to the canonical release."
}| Slug | turisbook-booking-system |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-23 00:00:00 |
| Active installs | 20 |
{
"slug": "turisbook-booking-system",
"closed_reason": "temporary",
"closed_date": "2026-10-23 00:00:00",
"active_installs": 20
}| Slug | snazzy-cacheable-facebook-feed |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-12 00:00:00 |
| Active installs | 30 |
{
"slug": "snazzy-cacheable-facebook-feed",
"closed_reason": "temporary",
"closed_date": "2026-10-12 00:00:00",
"active_installs": 30
}| Slug | copecart-lifterlmsg |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-14 00:00:00 |
| Active installs | 20 |
{
"slug": "copecart-lifterlmsg",
"closed_reason": "temporary",
"closed_date": "2026-10-14 00:00:00",
"active_installs": 20
}| Slug | mail-mage |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-14 00:00:00 |
| Active installs | 30 |
{
"slug": "mail-mage",
"closed_reason": "temporary",
"closed_date": "2026-10-14 00:00:00",
"active_installs": 30
}| Slug | cloud-blocks |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-14 00:00:00 |
| Active installs | 20 |
{
"slug": "cloud-blocks",
"closed_reason": "temporary",
"closed_date": "2026-10-14 00:00:00",
"active_installs": 20
}| Slug | review-schema-markup |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-10-15 00:00:00 |
| Active installs | 20 |
{
"slug": "review-schema-markup",
"closed_reason": "author-request",
"closed_date": "2026-10-15 00:00:00",
"active_installs": 20
}| Slug | review-schema-markup |
|---|---|
| Previous profile | https://profiles.wordpress.org/beatter/ |
| Current profile | https://profiles.wordpress.org/anonymized-8090273/ |
| Active installs | 20 |
{
"slug": "review-schema-markup",
"previous_profile": "https://profiles.wordpress.org/beatter/",
"current_profile": "https://profiles.wordpress.org/anonymized-8090273/",
"active_installs": 20
}| Slug | review-schema-markup |
|---|---|
| New contributors | |
| Active installs | 20 |
{
"slug": "review-schema-markup",
"new_contributors": [
"anonymized-8090273"
],
"active_installs": 20
}| Slug | thesis-footer-tool |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-10-19 00:00:00 |
| Active installs | 30 |
{
"slug": "thesis-footer-tool",
"closed_reason": "author-request",
"closed_date": "2026-10-19 00:00:00",
"active_installs": 30
}| Slug | display-shipping-class-in-cart-woo |
|---|---|
| New contributors | |
| Active installs | 30 |
{
"slug": "display-shipping-class-in-cart-woo",
"new_contributors": [
"nebiron"
],
"active_installs": 30
}| Slug | widget-display-filter |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-14 00:00:00 |
| Active installs | 30 |
{
"slug": "widget-display-filter",
"closed_reason": "temporary",
"closed_date": "2026-10-14 00:00:00",
"active_installs": 30
}| Slug | wc-kmercadopago-gpl |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-10-16 00:00:00 |
| Active installs | 30 |
{
"slug": "wc-kmercadopago-gpl",
"closed_reason": "author-request",
"closed_date": "2026-10-16 00:00:00",
"active_installs": 30
}| Slug | my-envato |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-10-16 00:00:00 |
| Active installs | 30 |
{
"slug": "my-envato",
"closed_reason": "author-request",
"closed_date": "2026-10-16 00:00:00",
"active_installs": 30
}| Slug | multi-vendor-marketplace-b2b-for-wholesalex-dokan |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-10 00:00:00 |
| Active installs | 40 |
{
"slug": "multi-vendor-marketplace-b2b-for-wholesalex-dokan",
"closed_reason": "temporary",
"closed_date": "2026-10-10 00:00:00",
"active_installs": 40
}| Slug | storefront-hooks-customizer |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-10-22 00:00:00 |
| Active installs | 40 |
{
"slug": "storefront-hooks-customizer",
"closed_reason": "author-request",
"closed_date": "2026-10-22 00:00:00",
"active_installs": 40
}| Slug | printaura-woocommerce-api |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-26 00:00:00 |
| Active installs | 90 |
{
"slug": "printaura-woocommerce-api",
"closed_reason": "temporary",
"closed_date": "2026-10-26 00:00:00",
"active_installs": 90
}| Slug | two-factor-sms |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-14 00:00:00 |
| Active installs | 90 |
{
"slug": "two-factor-sms",
"closed_reason": "temporary",
"closed_date": "2026-10-14 00:00:00",
"active_installs": 90
}| Slug | sample-data |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-13 00:00:00 |
| Active installs | 80 |
{
"slug": "sample-data",
"closed_reason": "temporary",
"closed_date": "2026-10-13 00:00:00",
"active_installs": 80
}| Slug | bog-ipay-payment-gateway |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-10-15 00:00:00 |
| Active installs | 70 |
{
"slug": "bog-ipay-payment-gateway",
"closed_reason": "author-request",
"closed_date": "2026-10-15 00:00:00",
"active_installs": 70
}| Slug | https-switcher |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-10-15 00:00:00 |
| Active installs | 50 |
{
"slug": "https-switcher",
"closed_reason": "author-request",
"closed_date": "2026-10-15 00:00:00",
"active_installs": 50
}| Slug | easy-content-manager |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-11 00:00:00 |
| Active installs | 100 |
{
"slug": "easy-content-manager",
"closed_reason": "temporary",
"closed_date": "2026-10-11 00:00:00",
"active_installs": 100
}| Slug | portfolio-manager-lite |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-23 00:00:00 |
| Active installs | 80 |
| Serial offender note | Severity bumped low→medium: author otwthemes has 9 prior security-issue closures on wp.org. |
{
"slug": "portfolio-manager-lite",
"closed_reason": "temporary",
"closed_date": "2026-10-23 00:00:00",
"active_installs": 80,
"serial_offender_note": "Severity bumped low\u2192medium: author otwthemes has 9 prior security-issue closures on wp.org."
}| Slug | ssl-wireless-sms-notification |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-23 00:00:00 |
| Active installs | 70 |
{
"slug": "ssl-wireless-sms-notification",
"closed_reason": "temporary",
"closed_date": "2026-10-23 00:00:00",
"active_installs": 70
}| Slug | comments-not-replied-to |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-10-12 00:00:00 |
| Active installs | 100 |
{
"slug": "comments-not-replied-to",
"closed_reason": "author-request",
"closed_date": "2026-10-12 00:00:00",
"active_installs": 100
}| Slug | coupon-bulker |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-14 00:00:00 |
| Active installs | 100 |
{
"slug": "coupon-bulker",
"closed_reason": "temporary",
"closed_date": "2026-10-14 00:00:00",
"active_installs": 100
}| Slug | bulk-meta-editor |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-10-13 00:00:00 |
| Active installs | 100 |
{
"slug": "bulk-meta-editor",
"closed_reason": "author-request",
"closed_date": "2026-10-13 00:00:00",
"active_installs": 100
}| Slug | wpexperts-square-for-give |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-10-14 00:00:00 |
| Active installs | 100 |
{
"slug": "wpexperts-square-for-give",
"closed_reason": "temporary",
"closed_date": "2026-10-14 00:00:00",
"active_installs": 100
}| Slug | wpexperts-square-for-give |
|---|---|
| New contributors | |
| Active installs | 100 |
{
"slug": "wpexperts-square-for-give",
"new_contributors": [
"saadiqbal"
],
"active_installs": 100
}