Events

{
    "slug": "e-invoice-for-myinvois-lhdn",
    "previous_profile": "https://profiles.wordpress.org/webimpian/",
    "current_profile": "https://profiles.wordpress.org/bayarcash/",
    "active_installs": 0
}

{
    "slug": "bcl-payment-link",
    "previous_profile": "https://profiles.wordpress.org/webimpian/",
    "current_profile": "https://profiles.wordpress.org/bayarcash/",
    "active_installs": 10
}

{
    "slug": "bayarcash-givewp",
    "previous_profile": "https://profiles.wordpress.org/webimpian/",
    "current_profile": "https://profiles.wordpress.org/bayarcash/",
    "active_installs": 20
}

{
    "slug": "sumtics",
    "previous_profile": "https://profiles.wordpress.org/aethonic/",
    "current_profile": "https://profiles.wordpress.org/apselo/",
    "active_installs": 60
}

{
    "slug": "n8n-chatbot",
    "previous_profile": "https://profiles.wordpress.org/aethonic/",
    "current_profile": "https://profiles.wordpress.org/apselo/",
    "active_installs": 200
}

{
    "slug": "bayarcash-wc",
    "previous_profile": "https://profiles.wordpress.org/webimpian/",
    "current_profile": "https://profiles.wordpress.org/bayarcash/",
    "active_installs": 700
}

{
    "slug": "fluent-affiliate",
    "previous_profile": "https://profiles.wordpress.org/techjewel/",
    "current_profile": "https://profiles.wordpress.org/wpmanageninja/",
    "active_installs": 1000
}

{
    "slug": "fluent-community",
    "previous_profile": "https://profiles.wordpress.org/techjewel/",
    "current_profile": "https://profiles.wordpress.org/wpmanageninja/",
    "active_installs": 8000
}

{
    "slug": "fluent-security",
    "previous_profile": "https://profiles.wordpress.org/techjewel/",
    "current_profile": "https://profiles.wordpress.org/wpmanageninja/",
    "active_installs": 10000
}

{
    "slug": "fluent-support",
    "previous_profile": "https://profiles.wordpress.org/techjewel/",
    "current_profile": "https://profiles.wordpress.org/wpmanageninja/",
    "active_installs": 10000
}

{
    "slug": "fluent-booking",
    "previous_profile": "https://profiles.wordpress.org/techjewel/",
    "current_profile": "https://profiles.wordpress.org/wpmanageninja/",
    "active_installs": 20000
}

{
    "slug": "easy-code-manager",
    "previous_profile": "https://profiles.wordpress.org/techjewel/",
    "current_profile": "https://profiles.wordpress.org/wpmanageninja/",
    "active_installs": 50000
}

{
    "slug": "ninja-tables",
    "previous_profile": "https://profiles.wordpress.org/techjewel/",
    "current_profile": "https://profiles.wordpress.org/wpmanageninja/",
    "active_installs": 80000
}

{
    "slug": "fluent-crm",
    "previous_profile": "https://profiles.wordpress.org/techjewel/",
    "current_profile": "https://profiles.wordpress.org/wpmanageninja/",
    "active_installs": 80000
}

{
    "slug": "fluentform",
    "previous_profile": "https://profiles.wordpress.org/techjewel/",
    "current_profile": "https://profiles.wordpress.org/wpmanageninja/",
    "active_installs": 700000
}

{
    "slug": "fluent-smtp",
    "previous_profile": "https://profiles.wordpress.org/techjewel/",
    "current_profile": "https://profiles.wordpress.org/wpmanageninja/",
    "active_installs": 600000
}

{
    "slug": "ghostonix-buttons",
    "previous_profile": "https://profiles.wordpress.org/ghostonixllc/",
    "current_profile": "https://profiles.wordpress.org/ghostonix/",
    "active_installs": 0
}

{
    "slug": "memory-health",
    "previous_profile": "https://profiles.wordpress.org/thewebcitizencom/",
    "current_profile": "https://profiles.wordpress.org/snappaguy/",
    "active_installs": 0
}

{
    "slug": "stylish-order-form-builder",
    "previously_closed_reason": "security-issue",
    "author_slug": "hayyatapps",
    "current_version": "2.0",
    "active_installs": 20,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

{
    "slug": "list-mixcloud",
    "previously_closed_reason": "security-issue",
    "author_slug": "shmuel83",
    "current_version": "2.0",
    "active_installs": 400,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

{
    "slug": "eyewear-prescription-form",
    "previously_closed_reason": "security-issue",
    "author_slug": "dugudlabs",
    "current_version": "7.0.4",
    "active_installs": 10,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

{
    "slug": "chartivio",
    "previous_profile": "https://profiles.wordpress.org/rachanapaudel26/",
    "current_profile": "https://profiles.wordpress.org/aarati24/",
    "active_installs": 0
}

{
    "slug": "secure-forms",
    "previous_profile": "https://profiles.wordpress.org/bww/",
    "current_profile": "https://profiles.wordpress.org/sagar7337/",
    "active_installs": 10
}

{
    "slug": "unauthorised-login-redirect",
    "previous_profile": "https://profiles.wordpress.org/rsimpson/",
    "current_profile": "https://profiles.wordpress.org/rsdotscot/",
    "active_installs": 100
}

{
    "slug": "ravpage",
    "previous_profile": "https://profiles.wordpress.org/matiskiba/",
    "current_profile": "https://profiles.wordpress.org/responderproducts/",
    "active_installs": 300
}

{
    "slug": "website-openclosed-toggle",
    "previous_profile": "https://profiles.wordpress.org/rsimpson/",
    "current_profile": "https://profiles.wordpress.org/rsdotscot/",
    "active_installs": 500
}

{
    "slug": "responder",
    "previous_profile": "https://profiles.wordpress.org/tomerkcs/",
    "current_profile": "https://profiles.wordpress.org/responderproducts/",
    "active_installs": 3000
}

{
    "slug": "cls-lcp-issues-fix",
    "committer": "roshellco",
    "first_commit_at": "2021-10-18 22:43:59",
    "tier": "A",
    "mechanism": "remote-PHP download (siteguarding.com/ext/vitals \u2192 core.web.vitals.php) + wp-config.php include_once persistence (marker FD5503D3B128) + webanalyze/ dir; cmsplughub.com links + str_replace-obfuscated chat domain",
    "active_installs": 0,
    "explanation": "SiteGuarding burner-fleet member surfaced by the closed-plugin blob scan (2026-06-15). Tier A. remote-PHP download (siteguarding.com/ext/vitals \u2192 core.web.vitals.php) + wp-config.php include_once persistence (marker FD5503D3B128) + webanalyze/ dir; cmsplughub.com links + str_replace-obfuscated chat domain"
}

{
    "slug": "code-quality-control-tool",
    "committer": "nickclarkweb",
    "first_commit_at": "2022-04-22 17:58:17",
    "tier": "A",
    "mechanism": "wp-config.php include_once(error_logger.php) persistence (marker A8E15CA27213) + remote-management admin UI (manage/delete themes+plugins) + safetybis.com C2",
    "active_installs": 0,
    "explanation": "SiteGuarding burner-fleet member surfaced by the closed-plugin blob scan (2026-06-15). Tier A. wp-config.php include_once(error_logger.php) persistence (marker A8E15CA27213) + remote-management admin UI (manage/delete themes+plugins) + safetybis.com C2"
}

{
    "slug": "magex-ai-bot-defender",
    "committer": "viktoriasantos",
    "first_commit_at": "2025-11-21 17:03:44",
    "tier": "B",
    "mechanism": "undisclosed phone-home/AI-proxy to safetybis.com/api/index.php + writes md5(domain).html validation tokens to ABSPATH+wp-content; no in-plugin RCE sink",
    "active_installs": 0,
    "explanation": "SiteGuarding burner-fleet member surfaced by the closed-plugin blob scan (2026-06-15). Tier B. undisclosed phone-home/AI-proxy to safetybis.com/api/index.php + writes md5(domain).html validation tokens to ABSPATH+wp-content; no in-plugin RCE sink"
}

{
    "slug": "prismix-core",
    "previous_profile": "https://profiles.wordpress.org/shakvaro/",
    "current_profile": "https://profiles.wordpress.org/devshakil/",
    "active_installs": 0
}

{
    "slug": "dominoguard-security",
    "previous_profile": "https://profiles.wordpress.org/digitalwebtutor/",
    "current_profile": "https://profiles.wordpress.org/dominopress/",
    "active_installs": 0
}

{
    "slug": "milosubscriptions",
    "previous_profile": "https://profiles.wordpress.org/w7sdev/",
    "current_profile": "https://profiles.wordpress.org/milosubscriptions/",
    "active_installs": 0
}

{
    "slug": "adslastica",
    "previous_profile": "https://profiles.wordpress.org/hockyfan/",
    "current_profile": "https://profiles.wordpress.org/digidepot/",
    "active_installs": 0
}

{
    "slug": "layouts-for-elementor",
    "previously_closed_reason": "security-issue",
    "author_slug": "giraphix",
    "current_version": "1.12.2",
    "active_installs": 1000,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

{
    "slug": "igit-related-posts-with-thumb-images-after-posts",
    "previously_closed_reason": "security-issue",
    "author_slug": "phpaddicted",
    "current_version": "5.0",
    "active_installs": 100,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

{
    "slug": "copypress-rest-api",
    "previously_closed_reason": "security-issue",
    "author_slug": "copypressdev",
    "current_version": "1.3",
    "active_installs": 90,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

{
    "slug": "wp-performance-security",
    "previous_profile": "https://profiles.wordpress.org/imaginarymedia/",
    "current_profile": "https://profiles.wordpress.org/jmrcodes/",
    "active_installs": 30
}

{
    "slug": "bulk-edit-post-title",
    "previous_profile": "https://profiles.wordpress.org/dominopress/",
    "current_profile": "https://profiles.wordpress.org/digitalwebtutor/",
    "active_installs": 100
}

{
    "slug": "unauthorised-login-redirect",
    "previous_profile": "https://profiles.wordpress.org/rsimpson/",
    "current_profile": "https://profiles.wordpress.org/rsdotscot/",
    "active_installs": 100
}

{
    "slug": "ravpage",
    "previous_profile": "https://profiles.wordpress.org/matiskiba/",
    "current_profile": "https://profiles.wordpress.org/responderproducts/",
    "active_installs": 300
}

{
    "slug": "ultimate-image-gallery",
    "previous_profile": "https://profiles.wordpress.org/wdraihan/",
    "current_profile": "https://profiles.wordpress.org/atplugins/",
    "active_installs": 400
}

{
    "slug": "website-openclosed-toggle",
    "previous_profile": "https://profiles.wordpress.org/rsimpson/",
    "current_profile": "https://profiles.wordpress.org/rsdotscot/",
    "active_installs": 500
}

{
    "slug": "responder",
    "previous_profile": "https://profiles.wordpress.org/tomerkcs/",
    "current_profile": "https://profiles.wordpress.org/responderproducts/",
    "active_installs": 3000
}

{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-05-20 05:42:07",
    "burst_end": "2026-05-20 06:07:42",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 680,
    "distinct_messages": 3,
    "avg_message_length": 19.5,
    "top_message": "adding updated files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

{
    "slug": "epayco-gateway",
    "author_slug": "epayco",
    "burst_start": "2026-06-02 19:04:18",
    "burst_end": "2026-06-02 19:25:12",
    "burst_commits": 13,
    "burst_window_minutes": 90,
    "tenure_days": 1454,
    "distinct_messages": 13,
    "avg_message_length": 17.5,
    "top_message": "Eliminar rama trunk",
    "top_message_count": 1,
    "prt_revert": null,
    "explanation": "Established author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

{
    "slug": "smalk-ai-analytics",
    "author_slug": "smalker001",
    "burst_start": "2026-06-03 17:31:43",
    "burst_end": "2026-06-03 18:06:37",
    "burst_commits": 15,
    "burst_window_minutes": 90,
    "tenure_days": 449,
    "distinct_messages": 2,
    "avg_message_length": 11,
    "top_message": "new_version",
    "top_message_count": 9,
    "prt_revert": null,
    "explanation": "Established author committed 15 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

{
    "slug": "user-access-blocker",
    "author_slug": "eliyahna",
    "burst_start": "2026-06-01 20:40:18",
    "burst_end": "2026-06-01 20:49:36",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 322,
    "distinct_messages": 12,
    "avg_message_length": 14.8,
    "top_message": "remove old readme",
    "top_message_count": 1,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

{
    "slug": "syncfields",
    "previously_closed_reason": "security-issue",
    "author_slug": "pjfc",
    "current_version": "4.1",
    "active_installs": 40,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

{
    "slug": "mementor-core",
    "previously_closed_reason": "security-issue",
    "author_slug": "mvirik",
    "current_version": "3.0.0",
    "active_installs": 10,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}