Events

127 events open. · Last rule pass 17h ago. · 127 open / 5,208 resolved overall.

State: Open Resolved All
Low plugin_closed DiceBar — Mobile Bottom Bar, Click to Call & Chat (30 installs) 17h ago
Slugdicebar
Closed reasontemporary
Closed date2026-10-25 00:00:00
Active installs30
View raw JSON
{
    "slug": "dicebar",
    "closed_reason": "temporary",
    "closed_date": "2026-10-25 00:00:00",
    "active_installs": 30
}
Low plugin_closed WX Subscribe (10 installs) 17h ago
Slugwx-subscribe
Closed reasontemporary
Closed date2026-10-05 00:00:00
Active installs10
View raw JSON
{
    "slug": "wx-subscribe",
    "closed_reason": "temporary",
    "closed_date": "2026-10-05 00:00:00",
    "active_installs": 10
}
Low plugin_closed WeTech Contact Forms Webhook (20 installs) 17h ago
Slugwetech-contact-forms-webhook
Closed reasontemporary
Closed date2026-10-14 00:00:00
Active installs20
View raw JSON
{
    "slug": "wetech-contact-forms-webhook",
    "closed_reason": "temporary",
    "closed_date": "2026-10-14 00:00:00",
    "active_installs": 20
}
Low plugin_closed Web Vitals Tracking (10 installs) 17h ago
Slugweb-vitals-tracking
Closed reasontemporary
Closed date2026-10-05 00:00:00
Active installs10
View raw JSON
{
    "slug": "web-vitals-tracking",
    "closed_reason": "temporary",
    "closed_date": "2026-10-05 00:00:00",
    "active_installs": 10
}
Low plugin_closed Social Commerce by CedCommerce (10 installs) 17h ago
Slugsocial-commerce-by-cedcommerce
Closed reasontemporary
Closed date2026-10-01 00:00:00
Active installs10
View raw JSON
{
    "slug": "social-commerce-by-cedcommerce",
    "closed_reason": "temporary",
    "closed_date": "2026-10-01 00:00:00",
    "active_installs": 10
}
Low plugin_closed Stand With Ukraine (10 installs) 17h ago
Slugstandwithukraine
Closed reasontemporary
Closed date2026-10-04 00:00:00
Active installs10
View raw JSON
{
    "slug": "standwithukraine",
    "closed_reason": "temporary",
    "closed_date": "2026-10-04 00:00:00",
    "active_installs": 10
}
Low plugin_closed StoryBook – Shopify Blog Connector (10 installs) 17h ago
Slugstorybook-shopify-blog-connector
Closed reasontemporary
Closed date2026-09-28 00:00:00
Active installs10
View raw JSON
{
    "slug": "storybook-shopify-blog-connector",
    "closed_reason": "temporary",
    "closed_date": "2026-09-28 00:00:00",
    "active_installs": 10
}
Low plugin_closed Pickit (10 installs) 17h ago
Slugpickit
Closed reasontemporary
Closed date2026-09-30 00:00:00
Active installs10
View raw JSON
{
    "slug": "pickit",
    "closed_reason": "temporary",
    "closed_date": "2026-09-30 00:00:00",
    "active_installs": 10
}
Low contributor_added Pickit (10 installs) 17h ago
Slugpickit
New contributorsintegracionespickit
Active installs10
View raw JSON
{
    "slug": "pickit",
    "new_contributors": [
        "integracionespickit"
    ],
    "active_installs": 10
}
Low plugin_closed Quoteability (10 installs) 17h ago
Slugquoteability
Closed reasonauthor-request
Closed date2026-10-04 00:00:00
Active installs10
View raw JSON
{
    "slug": "quoteability",
    "closed_reason": "author-request",
    "closed_date": "2026-10-04 00:00:00",
    "active_installs": 10
}
Low plugin_closed Mindstien Quick Login (10 installs) 17h ago
Slugmindstien-quick-login
Closed reasontemporary
Closed date2026-09-24 00:00:00
Active installs10
View raw JSON
{
    "slug": "mindstien-quick-login",
    "closed_reason": "temporary",
    "closed_date": "2026-09-24 00:00:00",
    "active_installs": 10
}
Low plugin_closed Login and Pay with Metamask (10 installs) 17h ago
Slugmine-metamask
Closed reasontemporary
Closed date2026-09-30 00:00:00
Active installs10
View raw JSON
{
    "slug": "mine-metamask",
    "closed_reason": "temporary",
    "closed_date": "2026-09-30 00:00:00",
    "active_installs": 10
}
Low code_pattern FireEMS Stats (10 installs) 17h ago
Slugfireems-stats
Patternpuc_update_hijack
Kindbuiltin
Version4.0.1
Hit count1
First hit
File
fireems-stats.php
Line
67
Snippet
$myUpdateChecker = Puc_v4_Factory::buildUpdateChecker('http://upgrade.maltesesolutions.com/fireems-stats/fireems.json', __FILE__, 'fireems-stats');
Explanationplugin calls `::buildUpdateChecker()` — the factory entry point of the Yahnis Elsts Plugin Update Checker library. A plugin distributed through wordpress.org that registers its own update source is bypassing the Plugin Review Team: every install polls the non-wp.org URL on cron and installs whatever JSON + zip it returns, with full plugin-author permissions. This is the mechanism behind the `anadnet`/quick-pagepost-redirect-plugin compromise (2021) where the author seeded 70,000+ installs through tagged releases and then removed the library from trunk to hide the persistence. Any URL argument pointing away from `downloads.wordpress.org`/`api.wordpress.org` is the hijack signal.
Shapevendor_updater
Urlhttp://upgrade.maltesesolutions.com/fireems-stats/fireems.json
Url hostupgrade.maltesesolutions.com
Slug argfireems-stats
View raw JSON
{
    "slug": "fireems-stats",
    "pattern": "puc_update_hijack",
    "kind": "builtin",
    "version": "4.0.1",
    "hit_count": 1,
    "first_hit": {
        "file": "fireems-stats.php",
        "line": 67,
        "snippet": "$myUpdateChecker = Puc_v4_Factory::buildUpdateChecker('http://upgrade.maltesesolutions.com/fireems-stats/fireems.json', __FILE__, 'fireems-stats');"
    },
    "explanation": "plugin calls `::buildUpdateChecker()` \u2014 the factory entry point of the Yahnis Elsts Plugin Update Checker library. A plugin distributed through wordpress.org that registers its own update source is bypassing the Plugin Review Team: every install polls the non-wp.org URL on cron and installs whatever JSON + zip it returns, with full plugin-author permissions. This is the mechanism behind the `anadnet`/quick-pagepost-redirect-plugin compromise (2021) where the author seeded 70,000+ installs through tagged releases and then removed the library from trunk to hide the persistence. Any URL argument pointing away from `downloads.wordpress.org`/`api.wordpress.org` is the hijack signal.",
    "shape": "vendor_updater",
    "url": "http://upgrade.maltesesolutions.com/fireems-stats/fireems.json",
    "url_host": "upgrade.maltesesolutions.com",
    "slug_arg": "fireems-stats"
}
Info version_compare_trap CustomEasy (10 installs) 17h ago
Slugcustomeasy
Active traps
Trap versionTrap releasedBlocked byBlocked on
1.012026-04-21 14:14:181.0.22026-10-19 14:51:20
ExplanationPlugin released 1.01 (parses as higher than canonical X.0.N series), then later released 1.0.2 which parses LOWER — users who installed the trap version cannot auto-update to the canonical release.
View raw JSON
{
    "slug": "customeasy",
    "active_traps": [
        {
            "trap_version": "1.01",
            "trap_released": "2026-04-21 14:14:18",
            "blocked_by": "1.0.2",
            "blocked_on": "2026-10-19 14:51:20"
        }
    ],
    "explanation": "Plugin released 1.01 (parses as higher than canonical X.0.N series), then later released 1.0.2 which parses LOWER \u2014 users who installed the trap version cannot auto-update to the canonical release."
}
Low plugin_closed Turisbook Booking System (20 installs) 17h ago
Slugturisbook-booking-system
Closed reasontemporary
Closed date2026-10-23 00:00:00
Active installs20
View raw JSON
{
    "slug": "turisbook-booking-system",
    "closed_reason": "temporary",
    "closed_date": "2026-10-23 00:00:00",
    "active_installs": 20
}
Low plugin_closed Snazzy Social Media Feed (30 installs) 17h ago
Slugsnazzy-cacheable-facebook-feed
Closed reasontemporary
Closed date2026-10-12 00:00:00
Active installs30
View raw JSON
{
    "slug": "snazzy-cacheable-facebook-feed",
    "closed_reason": "temporary",
    "closed_date": "2026-10-12 00:00:00",
    "active_installs": 30
}
Low plugin_closed CopeCart-LifterLMS (20 installs) 17h ago
Slugcopecart-lifterlmsg
Closed reasontemporary
Closed date2026-10-14 00:00:00
Active installs20
View raw JSON
{
    "slug": "copecart-lifterlmsg",
    "closed_reason": "temporary",
    "closed_date": "2026-10-14 00:00:00",
    "active_installs": 20
}
Low plugin_closed Mail Mage (30 installs) 17h ago
Slugmail-mage
Closed reasontemporary
Closed date2026-10-14 00:00:00
Active installs30
View raw JSON
{
    "slug": "mail-mage",
    "closed_reason": "temporary",
    "closed_date": "2026-10-14 00:00:00",
    "active_installs": 30
}
Low plugin_closed Cloud Blocks (20 installs) 17h ago
Slugcloud-blocks
Closed reasontemporary
Closed date2026-10-14 00:00:00
Active installs20
View raw JSON
{
    "slug": "cloud-blocks",
    "closed_reason": "temporary",
    "closed_date": "2026-10-14 00:00:00",
    "active_installs": 20
}
Low plugin_closed Review Schema (20 installs) 17h ago
Slugreview-schema-markup
Closed reasonauthor-request
Closed date2026-10-15 00:00:00
Active installs20
View raw JSON
{
    "slug": "review-schema-markup",
    "closed_reason": "author-request",
    "closed_date": "2026-10-15 00:00:00",
    "active_installs": 20
}
Low contributor_added Review Schema (20 installs) 17h ago
Slugreview-schema-markup
New contributorsanonymized-8090273
Active installs20
View raw JSON
{
    "slug": "review-schema-markup",
    "new_contributors": [
        "anonymized-8090273"
    ],
    "active_installs": 20
}
Low plugin_closed Thesis Footer Tool (30 installs) 17h ago
Slugthesis-footer-tool
Closed reasonauthor-request
Closed date2026-10-19 00:00:00
Active installs30
View raw JSON
{
    "slug": "thesis-footer-tool",
    "closed_reason": "author-request",
    "closed_date": "2026-10-19 00:00:00",
    "active_installs": 30
}
Low plugin_closed Widget Display Filter (30 installs) 17h ago
Slugwidget-display-filter
Closed reasontemporary
Closed date2026-10-14 00:00:00
Active installs30
View raw JSON
{
    "slug": "widget-display-filter",
    "closed_reason": "temporary",
    "closed_date": "2026-10-14 00:00:00",
    "active_installs": 30
}
Low plugin_closed Tools for MercadoPago and WooCommerce (30 installs) 17h ago
Slugwc-kmercadopago-gpl
Closed reasonauthor-request
Closed date2026-10-16 00:00:00
Active installs30
View raw JSON
{
    "slug": "wc-kmercadopago-gpl",
    "closed_reason": "author-request",
    "closed_date": "2026-10-16 00:00:00",
    "active_installs": 30
}
Low plugin_closed My Envato (30 installs) 17h ago
Slugmy-envato
Closed reasonauthor-request
Closed date2026-10-16 00:00:00
Active installs30
View raw JSON
{
    "slug": "my-envato",
    "closed_reason": "author-request",
    "closed_date": "2026-10-16 00:00:00",
    "active_installs": 30
}
Low plugin_closed Storefront Hooks Cutomizer (40 installs) 17h ago
Slugstorefront-hooks-customizer
Closed reasonauthor-request
Closed date2026-10-22 00:00:00
Active installs40
View raw JSON
{
    "slug": "storefront-hooks-customizer",
    "closed_reason": "author-request",
    "closed_date": "2026-10-22 00:00:00",
    "active_installs": 40
}
Low plugin_closed Printaura-Woocommerce (90 installs) 17h ago
Slugprintaura-woocommerce-api
Closed reasontemporary
Closed date2026-10-26 00:00:00
Active installs90
View raw JSON
{
    "slug": "printaura-woocommerce-api",
    "closed_reason": "temporary",
    "closed_date": "2026-10-26 00:00:00",
    "active_installs": 90
}
Low plugin_closed Two Factor SMS (90 installs) 17h ago
Slugtwo-factor-sms
Closed reasontemporary
Closed date2026-10-14 00:00:00
Active installs90
View raw JSON
{
    "slug": "two-factor-sms",
    "closed_reason": "temporary",
    "closed_date": "2026-10-14 00:00:00",
    "active_installs": 90
}
Low plugin_closed Prefill (80 installs) 17h ago
Slugsample-data
Closed reasontemporary
Closed date2026-10-13 00:00:00
Active installs80
View raw JSON
{
    "slug": "sample-data",
    "closed_reason": "temporary",
    "closed_date": "2026-10-13 00:00:00",
    "active_installs": 80
}
Low plugin_closed iPay Payment Gateway (70 installs) 17h ago
Slugbog-ipay-payment-gateway
Closed reasonauthor-request
Closed date2026-10-15 00:00:00
Active installs70
View raw JSON
{
    "slug": "bog-ipay-payment-gateway",
    "closed_reason": "author-request",
    "closed_date": "2026-10-15 00:00:00",
    "active_installs": 70
}
Low plugin_closed Https Switcher (50 installs) 17h ago
Slughttps-switcher
Closed reasonauthor-request
Closed date2026-10-15 00:00:00
Active installs50
View raw JSON
{
    "slug": "https-switcher",
    "closed_reason": "author-request",
    "closed_date": "2026-10-15 00:00:00",
    "active_installs": 50
}
Medium plugin_closed Portfolio Manager Lite (80 installs) 17h ago
Slugportfolio-manager-lite
Closed reasontemporary
Closed date2026-10-23 00:00:00
Active installs80
Serial offender noteSeverity bumped low→medium: author otwthemes has 9 prior security-issue closures on wp.org.
View raw JSON
{
    "slug": "portfolio-manager-lite",
    "closed_reason": "temporary",
    "closed_date": "2026-10-23 00:00:00",
    "active_installs": 80,
    "serial_offender_note": "Severity bumped low\u2192medium: author otwthemes has 9 prior security-issue closures on wp.org."
}
Low plugin_closed SSL Wireless SMS Notification (70 installs) 17h ago
Slugssl-wireless-sms-notification
Closed reasontemporary
Closed date2026-10-23 00:00:00
Active installs70
View raw JSON
{
    "slug": "ssl-wireless-sms-notification",
    "closed_reason": "temporary",
    "closed_date": "2026-10-23 00:00:00",
    "active_installs": 70
}
Low plugin_closed Comments Not Replied To (100 installs) 17h ago
Slugcomments-not-replied-to
Closed reasonauthor-request
Closed date2026-10-12 00:00:00
Active installs100
View raw JSON
{
    "slug": "comments-not-replied-to",
    "closed_reason": "author-request",
    "closed_date": "2026-10-12 00:00:00",
    "active_installs": 100
}
Low plugin_closed Coupon Bulker (100 installs) 17h ago
Slugcoupon-bulker
Closed reasontemporary
Closed date2026-10-14 00:00:00
Active installs100
View raw JSON
{
    "slug": "coupon-bulker",
    "closed_reason": "temporary",
    "closed_date": "2026-10-14 00:00:00",
    "active_installs": 100
}
Low plugin_closed Bulk Meta Editor (100 installs) 17h ago
Slugbulk-meta-editor
Closed reasonauthor-request
Closed date2026-10-13 00:00:00
Active installs100
View raw JSON
{
    "slug": "bulk-meta-editor",
    "closed_reason": "author-request",
    "closed_date": "2026-10-13 00:00:00",
    "active_installs": 100
}
Low plugin_closed WPExperts Square For GiveWP (100 installs) 17h ago
Slugwpexperts-square-for-give
Closed reasontemporary
Closed date2026-10-14 00:00:00
Active installs100
View raw JSON
{
    "slug": "wpexperts-square-for-give",
    "closed_reason": "temporary",
    "closed_date": "2026-10-14 00:00:00",
    "active_installs": 100
}
Low contributor_added WPExperts Square For GiveWP (100 installs) 17h ago
Slugwpexperts-square-for-give
New contributorssaadiqbal
Active installs100
View raw JSON
{
    "slug": "wpexperts-square-for-give",
    "new_contributors": [
        "saadiqbal"
    ],
    "active_installs": 100
}