Events

1,086 events (filtered). · Last rule pass 7h ago. · 30 open / 4,683 resolved overall.

State: Open Resolved All
High closed_plugin_resurrection Meta Display Block (— installs) Resolved 3mo ago
Slugmeta-display-block
Previously closed reasonsecurity-issue
Author slugbhargavbhandari90
Current version1.0.1
Active installs0
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "meta-display-block",
    "previously_closed_reason": "security-issue",
    "author_slug": "bhargavbhandari90",
    "current_version": "1.0.1",
    "active_installs": 0,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High closed_plugin_resurrection Catch Duplicate Switcher (50 installs) Resolved 3mo ago
Slugcatch-duplicate-switcher
Previously closed reasonsecurity-issue
Author slugcatchthemes
Current version2.2
Active installs40
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "catch-duplicate-switcher",
    "previously_closed_reason": "security-issue",
    "author_slug": "catchthemes",
    "current_version": "2.2",
    "active_installs": 40,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High domain_younger_than_plugin Hide My WP Ghost – Security & Firewall (100k+ installs) Resolved 3mo ago
Slughide-my-wp
Domaincrawlbrain.com
Domain sourcec2_http_call
Domain registered at2026-04-14
Plugin earliest commit2022-06-28 09:26:23
Plugin latest release2026-06-02 13:29:53
Gap days1,385
Domain age at release49
Active installs100,000
View raw JSON
{
    "slug": "hide-my-wp",
    "domain": "crawlbrain.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2026-04-14",
    "plugin_earliest_commit": "2022-06-28 09:26:23",
    "plugin_latest_release": "2026-06-02 13:29:53",
    "gap_days": 1385,
    "domain_age_at_release": 49,
    "active_installs": 100000
}
High domain_younger_than_plugin Ad Inserter – Ad Manager & AdSense Ads (300k+ installs) Resolved 3mo ago
Slugad-inserter
Domainwinup.network
Domain sourcec2_http_call
Domain registered at2024-11-23
Plugin earliest commit2021-06-27 15:35:01
Plugin latest release2026-05-30 07:55:31
Gap days1,244
Domain age at release553
Active installs300,000
View raw JSON
{
    "slug": "ad-inserter",
    "domain": "winup.network",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2024-11-23",
    "plugin_earliest_commit": "2021-06-27 15:35:01",
    "plugin_latest_release": "2026-05-30 07:55:31",
    "gap_days": 1244,
    "domain_age_at_release": 553,
    "active_installs": 300000
}
High compromised_committer_burst WP Travel – Ultimate Travel Booking System, Tour Management Engine (3k+ installs) Resolved 3mo ago
Slugwp-travel
Author slugwptravel
Burst start2026-05-20 05:42:07
Burst end2026-05-20 06:07:42
Burst commits12
Burst window minutes90
Tenure days680
Distinct messages3
Avg message length20
Top messageadding updated files
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-05-20 05:42:07",
    "burst_end": "2026-05-20 06:07:42",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 680,
    "distinct_messages": 3,
    "avg_message_length": 19.5,
    "top_message": "adding updated files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst ePayco plugin for WooCommerce (3k+ installs) Resolved 3mo ago
Slugepayco-gateway
Author slugepayco
Burst start2026-06-02 19:04:18
Burst end2026-06-02 19:25:12
Burst commits13
Burst window minutes90
Tenure days1,454
Distinct messages13
Avg message length18
Top messageEliminar rama trunk
Top message count1
Prt revert—
ExplanationEstablished author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "epayco-gateway",
    "author_slug": "epayco",
    "burst_start": "2026-06-02 19:04:18",
    "burst_end": "2026-06-02 19:25:12",
    "burst_commits": 13,
    "burst_window_minutes": 90,
    "tenure_days": 1454,
    "distinct_messages": 13,
    "avg_message_length": 17.5,
    "top_message": "Eliminar rama trunk",
    "top_message_count": 1,
    "prt_revert": null,
    "explanation": "Established author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Smalk AI Analytics (40 installs) Resolved 3mo ago
Slugsmalk-ai-analytics
Author slugsmalker001
Burst start2026-06-03 17:31:43
Burst end2026-06-03 18:06:37
Burst commits15
Burst window minutes90
Tenure days449
Distinct messages2
Avg message length11
Top messagenew_version
Top message count9
Prt revert—
ExplanationEstablished author committed 15 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "smalk-ai-analytics",
    "author_slug": "smalker001",
    "burst_start": "2026-06-03 17:31:43",
    "burst_end": "2026-06-03 18:06:37",
    "burst_commits": 15,
    "burst_window_minutes": 90,
    "tenure_days": 449,
    "distinct_messages": 2,
    "avg_message_length": 11,
    "top_message": "new_version",
    "top_message_count": 9,
    "prt_revert": null,
    "explanation": "Established author committed 15 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst User Access Blocker (60 installs) Resolved 3mo ago
Sluguser-access-blocker
Author slugeliyahna
Burst start2026-06-01 20:40:18
Burst end2026-06-01 20:49:36
Burst commits12
Burst window minutes90
Tenure days322
Distinct messages12
Avg message length15
Top messageremove old readme
Top message count1
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "user-access-blocker",
    "author_slug": "eliyahna",
    "burst_start": "2026-06-01 20:40:18",
    "burst_end": "2026-06-01 20:49:36",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 322,
    "distinct_messages": 12,
    "avg_message_length": 14.8,
    "top_message": "remove old readme",
    "top_message_count": 1,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High code_scan_delta Monek Checkout (40 installs) Resolved 3mo ago
Slugmonek-checkout
Previous version4.0.5
Current version4.1.0
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinBlocks/Monek_Blocks.php41wp_register_script($sdkHandle, 'https://checkout-js.monek.com/monek-checkout.iife.js', [], null, true);medium
Url
https://checkout-js.monek.com/monek-checkout.iife.js
Url host
checkout-js.monek.com
New finding count1
View raw JSON
{
    "slug": "monek-checkout",
    "previous_version": "4.0.5",
    "current_version": "4.1.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "Blocks/Monek_Blocks.php",
            "line": 41,
            "snippet": "wp_register_script($sdkHandle, 'https://checkout-js.monek.com/monek-checkout.iife.js', [], null, true);",
            "confidence": "medium",
            "details": {
                "url": "https://checkout-js.monek.com/monek-checkout.iife.js",
                "url_host": "checkout-js.monek.com"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta BaseCloud Shield (50 installs) Resolved 3mo ago
Slugbasecloud-shield
Previous version1.4.5
Current version2.0.4
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinbasecloud-shield.php374wp_enqueue_script('bcshield-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), null, true);medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
remote_enqueuebuiltinbasecloud-shield.php383wp_enqueue_script('bcshield-recaptcha', 'https://www.google.com/recaptcha/api.js?render=' . rawurlencode($site_key), array(), null, true);medium
Url
https://www.google.com/recaptcha/api.js?render=
Url host
www.google.com
New finding count2
View raw JSON
{
    "slug": "basecloud-shield",
    "previous_version": "1.4.5",
    "current_version": "2.0.4",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "basecloud-shield.php",
            "line": 374,
            "snippet": "wp_enqueue_script('bcshield-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), null, true);",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "basecloud-shield.php",
            "line": 383,
            "snippet": "wp_enqueue_script('bcshield-recaptcha', 'https://www.google.com/recaptcha/api.js?render=' . rawurlencode($site_key), array(), null, true);",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?render=",
                "url_host": "www.google.com"
            }
        }
    ],
    "new_finding_count": 2
}
High code_scan_delta Linkz.ai – Automatic link previews on hover (70 installs) Resolved 3mo ago
Sluglinkz-ai
Previous version1.3.0
Current version1.4.0
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltininit.php94wp_enqueue_script('linkz-website-script', 'https://js.linkz.ai/?key=' . rawurlencode($userId), array(), LINKZ_VERSION, true);medium
Url
https://js.linkz.ai/?key=
Url host
js.linkz.ai
New finding count1
View raw JSON
{
    "slug": "linkz-ai",
    "previous_version": "1.3.0",
    "current_version": "1.4.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "init.php",
            "line": 94,
            "snippet": "wp_enqueue_script('linkz-website-script', 'https://js.linkz.ai/?key=' . rawurlencode($userId), array(), LINKZ_VERSION, true);",
            "confidence": "medium",
            "details": {
                "url": "https://js.linkz.ai/?key=",
                "url_host": "js.linkz.ai"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta Wallet Up – Cash App, Venmo, PayPal, Zelle & QR Code Payments (200 installs) Resolved 3mo ago
Slugwallet-up
Previous version5.5.15
Current version5.7.1
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinsrc/Core/Assets/AssetManager.php140wp_enqueue_script('stripe-js', 'https://js.stripe.com/v3/', [], null, true);medium
Url
https://js.stripe.com/v3/
Url host
js.stripe.com
New finding count1
View raw JSON
{
    "slug": "wallet-up",
    "previous_version": "5.5.15",
    "current_version": "5.7.1",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "src/Core/Assets/AssetManager.php",
            "line": 140,
            "snippet": "wp_enqueue_script('stripe-js', 'https://js.stripe.com/v3/', [], null, true);",
            "confidence": "medium",
            "details": {
                "url": "https://js.stripe.com/v3/",
                "url_host": "js.stripe.com"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta Free 1-Click WordPress Migration (300 installs) Resolved 3mo ago
Slug1-click-migration
Previous version2.6.1
Current version3.1.5
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinone-click-migration.php204wp_enqueue_script( 'ocm_paypal_js', add_query_arg( $paypal_args, 'https://www.paypal.com/sdk/js'), array(),null);medium
Url
https://www.paypal.com/sdk/js
Url host
www.paypal.com
preg_replace_e_modbuiltininc/db/class-ocm-search-replace-db.php932$string = preg_replace( "/([\340-\357])([\200-\277])([\200-\277])/e",medium—
preg_replace_e_modbuiltininc/db/class-ocm-search-replace-db.php937$string = preg_replace( "/([\300-\337])([\200-\277])/e",medium—
New finding count3
View raw JSON
{
    "slug": "1-click-migration",
    "previous_version": "2.6.1",
    "current_version": "3.1.5",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "one-click-migration.php",
            "line": 204,
            "snippet": "wp_enqueue_script( 'ocm_paypal_js', add_query_arg( $paypal_args, 'https://www.paypal.com/sdk/js'), array(),null);",
            "confidence": "medium",
            "details": {
                "url": "https://www.paypal.com/sdk/js",
                "url_host": "www.paypal.com"
            }
        },
        {
            "pattern": "preg_replace_e_mod",
            "kind": "builtin",
            "file": "inc/db/class-ocm-search-replace-db.php",
            "line": 932,
            "snippet": "$string = preg_replace( \"/([\\340-\\357])([\\200-\\277])([\\200-\\277])/e\",",
            "confidence": "medium"
        },
        {
            "pattern": "preg_replace_e_mod",
            "kind": "builtin",
            "file": "inc/db/class-ocm-search-replace-db.php",
            "line": 937,
            "snippet": "$string = preg_replace( \"/([\\300-\\337])([\\200-\\277])/e\",",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 3
}
High code_scan_delta Merchant Center Reviews for WooCommerce (800 installs) Resolved 3mo ago
Slugmerchant-center-reviews-for-woocommerce
Previous version1.0.8
Current version1.0.9
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinmerchant-center-reviews-for-woocommerce.php1,070wp_enqueue_script('google-merchant-widget', 'https://www.gstatic.com/shopping/merchant/merchantwidget.js', array(), null, false);medium
Url
https://www.gstatic.com/shopping/merchant/merchantwidget.js
Url host
www.gstatic.com
New finding count1
View raw JSON
{
    "slug": "merchant-center-reviews-for-woocommerce",
    "previous_version": "1.0.8",
    "current_version": "1.0.9",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "merchant-center-reviews-for-woocommerce.php",
            "line": 1070,
            "snippet": "wp_enqueue_script('google-merchant-widget', 'https://www.gstatic.com/shopping/merchant/merchantwidget.js', array(), null, false);",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/shopping/merchant/merchantwidget.js",
                "url_host": "www.gstatic.com"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta Contact Form to Chat Apps | Click to Chat to Order – FormyChat (3k+ installs) Resolved 3mo ago
Slugsocial-contact-form
Previous version2.15.4
Current version2.15.5
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/public/class-assets.php65wp_enqueue_script( 'formychat-recaptcha', 'https://www.google.com/recaptcha/api.js?render=' . esc_attr( $recaptcha_site_key ), [], null, true );medium
Url
https://www.google.com/recaptcha/api.js?render=
Url host
www.google.com
remote_enqueuebuiltinincludes/public/class-assets.php67wp_enqueue_script( 'formychat-recaptcha', 'https://www.google.com/recaptcha/api.js?onload=formychatRecaptchaOnload&render=explicit', [], null, true );medium
Url
https://www.google.com/recaptcha/api.js?onload=formychatRecaptchaOnload&render=explicit
Url host
www.google.com
New finding count2
View raw JSON
{
    "slug": "social-contact-form",
    "previous_version": "2.15.4",
    "current_version": "2.15.5",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/public/class-assets.php",
            "line": 65,
            "snippet": "wp_enqueue_script( 'formychat-recaptcha', 'https://www.google.com/recaptcha/api.js?render=' . esc_attr( $recaptcha_site_key ), [], null, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?render=",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/public/class-assets.php",
            "line": 67,
            "snippet": "wp_enqueue_script( 'formychat-recaptcha', 'https://www.google.com/recaptcha/api.js?onload=formychatRecaptchaOnload&render=explicit', [], null, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?onload=formychatRecaptchaOnload&render=explicit",
                "url_host": "www.google.com"
            }
        }
    ],
    "new_finding_count": 2
}
High code_scan_delta ElementInvader Addons for Elementor (3k+ installs) Resolved 3mo ago
Slugelementinvader-addons-for-elementor
Previous version1.4.4
Current version1.4.5
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinviews/form/fields/recaptcha.php23wp_enqueue_script( 'google-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), null, true );medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
New finding count1
View raw JSON
{
    "slug": "elementinvader-addons-for-elementor",
    "previous_version": "1.4.4",
    "current_version": "1.4.5",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "views/form/fields/recaptcha.php",
            "line": 23,
            "snippet": "wp_enqueue_script( 'google-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), null, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta Link Whisper Free (30k+ installs) Resolved 3mo ago
Sluglink-whisper
Previous version0.9.4
Current version0.9.5
New findings
PatternKindFileLineSnippetConfidenceDetails
base64_decodebuiltincore/Wpil/Editor/Oxygen.php110$content .= base64_decode($args->original->$key) . "\n";medium—
base64_decodebuiltincore/Wpil/ClickTracker.php268$url = esc_url_raw(base64_decode($_POST['url']));medium—
base64_decodebuiltincore/Wpil/Error.php1,333$anchor = (isset($_POST['anchor']) && !empty($_POST['anchor'])) ? wp_kses(base64_decode($_POST['anchor']), 'post') : '';medium—
base64_decodebuiltincore/Wpil/Error.php1,365$anchor = (isset($_POST['anchor']) && !empty($_POST['anchor'])) ? wp_kses(base64_decode($_POST['anchor']), 'post') : '';medium—
base64_decodebuiltincore/Wpil/Report.php2,211$decoded_url = base64_decode(urldecode(wp_unslash($_GET['ret_url'])), true);medium—
base64_decodebuiltincore/Wpil/Settings.php3,327$ignore_words = sanitize_textarea_field(stripslashes(trim(base64_decode($_POST['ignore_words']))));medium—
base64_decodebuiltincore/Wpil/Toolbox.php111$raw_value = base64_decode($raw_value, true);medium—
base64_decodebuiltincore/Wpil/Toolbox.php508$data = base64_decode($data);medium—
base64_decodebuiltincore/Wpil/Toolbox.php570$data = base64_decode($data);medium—
remote_enqueuebuiltincore/Wpil/Base.php851wp_enqueue_script('stripe-js', 'https://js.stripe.com/v3/', [], null, true);medium
Url
https://js.stripe.com/v3/
Url host
js.stripe.com
remote_enqueuebuiltincore/Wpil/Base.php872wp_enqueue_script('stripe-js', 'https://js.stripe.com/v3/', [], null, true);medium
Url
https://js.stripe.com/v3/
Url host
js.stripe.com
base64_decodebuiltincore/Wpil/LinkMapping.php408$context = base64_decode($dat->context);medium—
base64_decodebuiltincore/Wpil/LinkMapping.php409$sentence = strip_tags(base64_decode($dat->context));medium—
base64_decodebuiltincore/Wpil/TargetKeyword.php1,623$keyword_data = unserialize(gzinflate(base64_decode($keyword_data)));medium—
base64_decodebuiltincore/Wpil/TargetKeyword.php1,816$keyword_data = unserialize(gzinflate(base64_decode($keyword_data)));medium—
New finding count33
View raw JSON
{
    "slug": "link-whisper",
    "previous_version": "0.9.4",
    "current_version": "0.9.5",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/Wpil/Editor/Oxygen.php",
            "line": 110,
            "snippet": "$content .= base64_decode($args->original->$key) . \"\\n\";",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/Wpil/ClickTracker.php",
            "line": 268,
            "snippet": "$url = esc_url_raw(base64_decode($_POST['url']));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/Wpil/Error.php",
            "line": 1333,
            "snippet": "$anchor = (isset($_POST['anchor']) && !empty($_POST['anchor'])) ? wp_kses(base64_decode($_POST['anchor']), 'post') : '';",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/Wpil/Error.php",
            "line": 1365,
            "snippet": "$anchor = (isset($_POST['anchor']) && !empty($_POST['anchor'])) ? wp_kses(base64_decode($_POST['anchor']), 'post') : '';",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/Wpil/Report.php",
            "line": 2211,
            "snippet": "$decoded_url = base64_decode(urldecode(wp_unslash($_GET['ret_url'])), true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/Wpil/Settings.php",
            "line": 3327,
            "snippet": "$ignore_words = sanitize_textarea_field(stripslashes(trim(base64_decode($_POST['ignore_words']))));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/Wpil/Toolbox.php",
            "line": 111,
            "snippet": "$raw_value = base64_decode($raw_value, true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/Wpil/Toolbox.php",
            "line": 508,
            "snippet": "$data = base64_decode($data);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/Wpil/Toolbox.php",
            "line": 570,
            "snippet": "$data = base64_decode($data);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "core/Wpil/Base.php",
            "line": 851,
            "snippet": "wp_enqueue_script('stripe-js', 'https://js.stripe.com/v3/', [], null, true);",
            "confidence": "medium",
            "details": {
                "url": "https://js.stripe.com/v3/",
                "url_host": "js.stripe.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "core/Wpil/Base.php",
            "line": 872,
            "snippet": "wp_enqueue_script('stripe-js', 'https://js.stripe.com/v3/', [], null, true);",
            "confidence": "medium",
            "details": {
                "url": "https://js.stripe.com/v3/",
                "url_host": "js.stripe.com"
            }
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/Wpil/LinkMapping.php",
            "line": 408,
            "snippet": "$context = base64_decode($dat->context);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/Wpil/LinkMapping.php",
            "line": 409,
            "snippet": "$sentence = strip_tags(base64_decode($dat->context));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/Wpil/TargetKeyword.php",
            "line": 1623,
            "snippet": "$keyword_data = unserialize(gzinflate(base64_decode($keyword_data)));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/Wpil/TargetKeyword.php",
            "line": 1816,
            "snippet": "$keyword_data = unserialize(gzinflate(base64_decode($keyword_data)));",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 33
}
High code_scan_delta WP Duplicate Page (60k+ installs) Resolved 3mo ago
Slugwp-duplicate-page
Previous version1.8.2
Current version1.8.4
New findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinrecommended-modules/filebird-dashboard-widget/main.php129wp_register_script( "{$this->plugin_prefix}-dashboard-widget", $this->plugin_dir_url . 'assets/js/script.js', array( 'jquery' ), '1.0', true );medium
remote_enqueuebuiltinrecommended-modules/filebird-dashboard-widget/main.php139wp_enqueue_script( "{$this->plugin_prefix}-dashboard-widget" );medium
remote_enqueuebuiltinrecommended-modules/filebird-sidebar-popup/main.php150wp_register_script( "{$this->plugin_prefix}-sidebar-popup", $this->plugin_dir_url . 'assets/js/script.js', array( 'jquery' ), '1.0', true );medium
remote_enqueuebuiltinrecommended-modules/filebird-sidebar-popup/main.php161wp_enqueue_script( "{$this->plugin_prefix}-sidebar-popup" );medium
remote_enqueuebuiltinrecommended-modules/filebird-plugins-page-notification/main.php99wp_register_script( "{$this->plugin_prefix}_plugins_page_notification", $this->plugin_dir_url . 'assets/js/script.js', array( 'jquery' ), '1.0', true );medium
remote_enqueuebuiltinrecommended-modules/filebird-plugins-page-notification/main.php109wp_enqueue_script( "{$this->plugin_prefix}_plugins_page_notification" );medium
New finding count6
View raw JSON
{
    "slug": "wp-duplicate-page",
    "previous_version": "1.8.2",
    "current_version": "1.8.4",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "recommended-modules/filebird-dashboard-widget/main.php",
            "line": 129,
            "snippet": "wp_register_script( \"{$this->plugin_prefix}-dashboard-widget\", $this->plugin_dir_url . 'assets/js/script.js', array( 'jquery' ), '1.0', true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "recommended-modules/filebird-dashboard-widget/main.php",
            "line": 139,
            "snippet": "wp_enqueue_script( \"{$this->plugin_prefix}-dashboard-widget\" );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "recommended-modules/filebird-sidebar-popup/main.php",
            "line": 150,
            "snippet": "wp_register_script( \"{$this->plugin_prefix}-sidebar-popup\", $this->plugin_dir_url . 'assets/js/script.js', array( 'jquery' ), '1.0', true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "recommended-modules/filebird-sidebar-popup/main.php",
            "line": 161,
            "snippet": "wp_enqueue_script( \"{$this->plugin_prefix}-sidebar-popup\" );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "recommended-modules/filebird-plugins-page-notification/main.php",
            "line": 99,
            "snippet": "wp_register_script( \"{$this->plugin_prefix}_plugins_page_notification\", $this->plugin_dir_url . 'assets/js/script.js', array( 'jquery' ), '1.0', true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "recommended-modules/filebird-plugins-page-notification/main.php",
            "line": 109,
            "snippet": "wp_enqueue_script( \"{$this->plugin_prefix}_plugins_page_notification\" );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 6
}
High code_scan_delta WP Go Maps – Google Map, OpenStreetMap, Leaflet Map (300k+ installs) Resolved 3mo ago
Slugwp-google-maps
Previous version10.0.10
Current version10.1.00
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/compat/class.pro-10-compatibility.php273wp_enqueue_style('datatables', 'https://cdn.datatables.net/1.12.1/css/jquery.dataTables.min.css');medium
Url
https://cdn.datatables.net/1.12.1/css/jquery.dataTables.min.css
Url host
cdn.datatables.net
remote_enqueuebuiltinincludes/compat/class.pro-10-compatibility.php275wp_enqueue_script('datatables-responsive', 'https://cdn.datatables.net/responsive/2.3.0/js/dataTables.responsive.min.js', array('datatables'), false, false);medium
Url
https://cdn.datatables.net/responsive/2.3.0/js/dataTables.responsive.min.js
Url host
cdn.datatables.net
remote_enqueuebuiltinincludes/compat/class.pro-10-compatibility.php276wp_enqueue_style('datatables-responsive', 'https://cdn.datatables.net/responsive/2.3.0/css/responsive.dataTables.min.css');medium
Url
https://cdn.datatables.net/responsive/2.3.0/css/responsive.dataTables.min.css
Url host
cdn.datatables.net
New finding count3
View raw JSON
{
    "slug": "wp-google-maps",
    "previous_version": "10.0.10",
    "current_version": "10.1.00",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/compat/class.pro-10-compatibility.php",
            "line": 273,
            "snippet": "wp_enqueue_style('datatables', 'https://cdn.datatables.net/1.12.1/css/jquery.dataTables.min.css');",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.datatables.net/1.12.1/css/jquery.dataTables.min.css",
                "url_host": "cdn.datatables.net"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/compat/class.pro-10-compatibility.php",
            "line": 275,
            "snippet": "wp_enqueue_script('datatables-responsive', 'https://cdn.datatables.net/responsive/2.3.0/js/dataTables.responsive.min.js', array('datatables'), false, false);",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.datatables.net/responsive/2.3.0/js/dataTables.responsive.min.js",
                "url_host": "cdn.datatables.net"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/compat/class.pro-10-compatibility.php",
            "line": 276,
            "snippet": "wp_enqueue_style('datatables-responsive', 'https://cdn.datatables.net/responsive/2.3.0/css/responsive.dataTables.min.css');",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.datatables.net/responsive/2.3.0/css/responsive.dataTables.min.css",
                "url_host": "cdn.datatables.net"
            }
        }
    ],
    "new_finding_count": 3
}
Slugformidable
Previous version6.30
Current version6.31
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinpaypal/controllers/FrmPayPalLiteActionsController.php1,345wp_register_script( 'apple-pay-sdk', 'https://applepay.cdn-apple.com/jsapi/1.latest/apple-pay-sdk.js', array(), null, false );medium
Url
https://applepay.cdn-apple.com/jsapi/1.latest/apple-pay-sdk.js
Url host
applepay.cdn-apple.com
New finding count1
View raw JSON
{
    "slug": "formidable",
    "previous_version": "6.30",
    "current_version": "6.31",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "paypal/controllers/FrmPayPalLiteActionsController.php",
            "line": 1345,
            "snippet": "wp_register_script( 'apple-pay-sdk', 'https://applepay.cdn-apple.com/jsapi/1.latest/apple-pay-sdk.js', array(), null, false );",
            "confidence": "medium",
            "details": {
                "url": "https://applepay.cdn-apple.com/jsapi/1.latest/apple-pay-sdk.js",
                "url_host": "applepay.cdn-apple.com"
            }
        }
    ],
    "new_finding_count": 1
}
High compromised_committer_burst Max Mega Menu (300k+ installs) Resolved 4mo ago
Slugmegamenu
Author slugmegamenu
Burst start2026-05-26 09:48:31
Burst end2026-05-26 11:00:09
Burst commits12
Burst window minutes90
Tenure days594
Distinct messages11
Avg message length29
Top messageUpdate version to 3.10
Top message count2
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "megamenu",
    "author_slug": "megamenu",
    "burst_start": "2026-05-26 09:48:31",
    "burst_end": "2026-05-26 11:00:09",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 594,
    "distinct_messages": 11,
    "avg_message_length": 29.3,
    "top_message": "Update version to 3.10",
    "top_message_count": 2,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst CHIP for WooCommerce (4k+ installs) Resolved 4mo ago
Slugchip-for-woocommerce
Author slugwanzulnet
Burst start2026-05-19 06:38:24
Burst end2026-05-19 07:52:58
Burst commits12
Burst window minutes90
Tenure days1,250
Distinct messages7
Avg message length23
Top messageUpdate trunk to 2.0.5 for testing
Top message count4
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "chip-for-woocommerce",
    "author_slug": "wanzulnet",
    "burst_start": "2026-05-19 06:38:24",
    "burst_end": "2026-05-19 07:52:58",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 1250,
    "distinct_messages": 7,
    "avg_message_length": 22.5,
    "top_message": "Update trunk to 2.0.5 for testing",
    "top_message_count": 4,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Module Control for Jetpack (1k+ installs) Resolved 4mo ago
Slugjetpack-module-control
Author slugravanh
Burst start2026-05-25 09:18:04
Burst end2026-05-25 10:46:34
Burst commits13
Burst window minutes90
Tenure days4,041
Distinct messages12
Avg message length10
Top messagetry again
Top message count2
Prt revert—
ExplanationEstablished author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "jetpack-module-control",
    "author_slug": "ravanh",
    "burst_start": "2026-05-25 09:18:04",
    "burst_end": "2026-05-25 10:46:34",
    "burst_commits": 13,
    "burst_window_minutes": 90,
    "tenure_days": 4041,
    "distinct_messages": 12,
    "avg_message_length": 10.4,
    "top_message": "try again",
    "top_message_count": 2,
    "prt_revert": null,
    "explanation": "Established author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst The Cache Purger (1k+ installs) Resolved 4mo ago
Slugthe-cache-purger
Author slugkevp75
Burst start2026-05-20 11:33:55
Burst end2026-05-20 12:43:15
Burst commits18
Burst window minutes90
Tenure days1,684
Distinct messages18
Avg message length19
Top messageadd sqlite object cache support; upgrade fastly; upgrade action scheduler; upgrade fields;
Top message count1
Prt revert—
ExplanationEstablished author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "the-cache-purger",
    "author_slug": "kevp75",
    "burst_start": "2026-05-20 11:33:55",
    "burst_end": "2026-05-20 12:43:15",
    "burst_commits": 18,
    "burst_window_minutes": 90,
    "tenure_days": 1684,
    "distinct_messages": 18,
    "avg_message_length": 18.9,
    "top_message": "add sqlite object cache support; upgrade fastly; upgrade action scheduler; upgrade fields;",
    "top_message_count": 1,
    "prt_revert": null,
    "explanation": "Established author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst WPSOLR — One plugin. All the best search & recommendation engines. (30 installs) Resolved 4mo ago
Slugwpsolr-free
Author slugwpsolr
Burst start2026-05-13 11:15:11
Burst end2026-05-13 12:27:34
Burst commits12
Burst window minutes90
Tenure days1,109
Distinct messages1
Avg message length4
Top message24.4
Top message count12
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wpsolr-free",
    "author_slug": "wpsolr",
    "burst_start": "2026-05-13 11:15:11",
    "burst_end": "2026-05-13 12:27:34",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 1109,
    "distinct_messages": 1,
    "avg_message_length": 4,
    "top_message": "24.4",
    "top_message_count": 12,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI (500 installs) Resolved 4mo ago
Sluggptranslate
Author slugjohn dagelmore
Burst start2026-05-23 17:45:57
Burst end2026-05-23 18:07:25
Burst commits12
Burst window minutes90
Tenure days275
Distinct messages2
Avg message length12
Top message2.32.5 trunk
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "gptranslate",
    "author_slug": "john dagelmore",
    "burst_start": "2026-05-23 17:45:57",
    "burst_end": "2026-05-23 18:07:25",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 275,
    "distinct_messages": 2,
    "avg_message_length": 11.7,
    "top_message": "2.32.5 trunk",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Partita Iva per Fattura Elettronica (200 installs) Resolved 4mo ago
Slugpartita-iva-per-fattura-elettronica
Author slugblacklotusconsulting
Burst start2026-05-22 16:17:30
Burst end2026-05-22 16:25:46
Burst commits13
Burst window minutes90
Tenure days1,365
Distinct messages5
Avg message length14
Top message1.4.0 Version
Top message count9
Prt revert—
ExplanationEstablished author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "partita-iva-per-fattura-elettronica",
    "author_slug": "blacklotusconsulting",
    "burst_start": "2026-05-22 16:17:30",
    "burst_end": "2026-05-22 16:25:46",
    "burst_commits": 13,
    "burst_window_minutes": 90,
    "tenure_days": 1365,
    "distinct_messages": 5,
    "avg_message_length": 13.5,
    "top_message": "1.4.0 Version",
    "top_message_count": 9,
    "prt_revert": null,
    "explanation": "Established author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Purchase Redirect for WooCommerce (100 installs) Resolved 4mo ago
Slugpurchase-redirect-for-woocommerce
Author slughealomax
Burst start2026-05-14 14:29:06
Burst end2026-05-14 15:58:47
Burst commits13
Burst window minutes90
Tenure days848
Distinct messages9
Avg message length10
Top messageNew Readme
Top message count5
Prt revert—
ExplanationEstablished author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "purchase-redirect-for-woocommerce",
    "author_slug": "healomax",
    "burst_start": "2026-05-14 14:29:06",
    "burst_end": "2026-05-14 15:58:47",
    "burst_commits": 13,
    "burst_window_minutes": 90,
    "tenure_days": 848,
    "distinct_messages": 9,
    "avg_message_length": 10.1,
    "top_message": "New Readme",
    "top_message_count": 5,
    "prt_revert": null,
    "explanation": "Established author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst AIO Tools (All in One Tools) (100 installs) Resolved 4mo ago
Slugaio-tools
Author slugshostvn
Burst start2026-05-25 09:51:52
Burst end2026-05-25 10:21:50
Burst commits18
Burst window minutes90
Tenure days1,826
Distinct messages4
Avg message length10
Top message= 3.0.5 =
Top message count13
Prt revert—
ExplanationEstablished author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "aio-tools",
    "author_slug": "shostvn",
    "burst_start": "2026-05-25 09:51:52",
    "burst_end": "2026-05-25 10:21:50",
    "burst_commits": 18,
    "burst_window_minutes": 90,
    "tenure_days": 1826,
    "distinct_messages": 4,
    "avg_message_length": 10.1,
    "top_message": "= 3.0.5 =",
    "top_message_count": 13,
    "prt_revert": null,
    "explanation": "Established author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Reinvent WP Text to Speech (50 installs) Resolved 4mo ago
Slugnatural-text-to-speech
Author slugreinventwp
Burst start2026-05-19 12:28:36
Burst end2026-05-19 13:07:43
Burst commits12
Burst window minutes90
Tenure days294
Distinct messages9
Avg message length32
Top messageDeploying version 3.0.5 - readme
Top message count2
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "natural-text-to-speech",
    "author_slug": "reinventwp",
    "burst_start": "2026-05-19 12:28:36",
    "burst_end": "2026-05-19 13:07:43",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 294,
    "distinct_messages": 9,
    "avg_message_length": 31.8,
    "top_message": "Deploying version 3.0.5 - readme",
    "top_message_count": 2,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Nekto Core (60 installs) Resolved 4mo ago
Slugnekto-core
Author slugwpnekto
Burst start2026-04-29 21:32:55
Burst end2026-04-29 21:38:30
Burst commits14
Burst window minutes90
Tenure days188
Distinct messages2
Avg message length6
Top messageupdate
Top message count13
Prt revert—
ExplanationEstablished author committed 14 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "nekto-core",
    "author_slug": "wpnekto",
    "burst_start": "2026-04-29 21:32:55",
    "burst_end": "2026-04-29 21:38:30",
    "burst_commits": 14,
    "burst_window_minutes": 90,
    "tenure_days": 188,
    "distinct_messages": 2,
    "avg_message_length": 6.3,
    "top_message": "update",
    "top_message_count": 13,
    "prt_revert": null,
    "explanation": "Established author committed 14 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
Slugsendgrail
Previous profilehttps://profiles.wordpress.org/wpperformly/
Current profilehttps://profiles.wordpress.org/brighterfox/
Active installs0
View raw JSON
{
    "slug": "sendgrail",
    "previous_profile": "https://profiles.wordpress.org/wpperformly/",
    "current_profile": "https://profiles.wordpress.org/brighterfox/",
    "active_installs": 0
}