WP Beacon

Events

800 events (filtered). · Last rule pass 11h ago. · 4 open / 4,675 resolved overall.

State: Open Resolved All
Severity: All Critical High · 1 Medium Low · 3 Info
Rule: All author_changed author_younger_than_plugin bulk_changelog_reuse bulk_committer_takeover closed_blob_scan closed_plugin_resurrection code_pattern code_scan_delta code_scan_match committer_younger_than_plugin compromised_committer_burst contributor_added domain_younger_than_plugin forum_complaint_cluster manual_audit_seed new_committer_young_account plugin_closed prt_forum_advisory recent_prt_intervention release_after_dormancy update_hijack_shape version_compare_trap
Critical code_pattern WP Slick Slider and Image Carousel (10k+ installs) Malicious 5mo ago
Slugwp-slick-slider-and-image-carousel
Pattern$analytics_endpoint
Kindioc:code_pattern
Version3.7.8.2
Hit count1
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
17
Snippet
public $analytics_endpoint = 'https://analytics.essentialplugin.com';
Explanation—
View raw JSON
{
    "slug": "wp-slick-slider-and-image-carousel",
    "pattern": "$analytics_endpoint",
    "kind": "ioc:code_pattern",
    "version": "3.7.8.2",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}
Critical code_pattern WP Slick Slider and Image Carousel (10k+ installs) Malicious 5mo ago
Slugwp-slick-slider-and-image-carousel
Patternwpos_monthly_cron_hook
Kindioc:code_pattern
Version3.7.8.2
Hit count4
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
69
Snippet
add_action( 'wpos_monthly_cron_hook', array($this, 'wpos_monthly_cron_hook_fn') );
Explanation—
View raw JSON
{
    "slug": "wp-slick-slider-and-image-carousel",
    "pattern": "wpos_monthly_cron_hook",
    "kind": "ioc:code_pattern",
    "version": "3.7.8.2",
    "hit_count": 4,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 69,
        "snippet": "add_action( 'wpos_monthly_cron_hook', array($this, 'wpos_monthly_cron_hook_fn') );"
    },
    "explanation": null
}
Critical code_pattern WP Slick Slider and Image Carousel (10k+ installs) Malicious 5mo ago
Slugwp-slick-slider-and-image-carousel
PatternPlugin Wpos Analytics Data Starts
Kindioc:code_pattern
Version3.7.8.2
Hit count1
First hit
File
wp-slick-image-slider.php
Line
295
Snippet
/* Plugin Wpos Analytics Data Starts */
Explanation—
View raw JSON
{
    "slug": "wp-slick-slider-and-image-carousel",
    "pattern": "Plugin Wpos Analytics Data Starts",
    "kind": "ioc:code_pattern",
    "version": "3.7.8.2",
    "hit_count": 1,
    "first_hit": {
        "file": "wp-slick-image-slider.php",
        "line": 295,
        "snippet": "/* Plugin Wpos Analytics Data Starts */"
    },
    "explanation": null
}
Critical code_pattern Trending/Popular Post Slider and Widget (2k+ installs) Malicious 5mo ago
Slugwp-trending-post-slider-and-widget
Patternanalytics.essentialplugin.com
Kindioc:domain
Version1.8.6.1
Hit count6
First hit
File
wp-trending-post-slider-widget.php
Line
37
Snippet
<p><?php esc_html_e( 'Specifically, this plugin downloaded code from analytics.essentialplugin.com and installed it in your site, while the specific case can differ, we know that they were installin
Explanation—
View raw JSON
{
    "slug": "wp-trending-post-slider-and-widget",
    "pattern": "analytics.essentialplugin.com",
    "kind": "ioc:domain",
    "version": "1.8.6.1",
    "hit_count": 6,
    "first_hit": {
        "file": "wp-trending-post-slider-widget.php",
        "line": 37,
        "snippet": "<p><?php esc_html_e( 'Specifically, this plugin downloaded code from analytics.essentialplugin.com and installed it in your site, while the specific case can differ, we know that they were installin"
    },
    "explanation": null
}
Critical code_pattern Trending/Popular Post Slider and Widget (2k+ installs) Malicious 5mo ago
Slugwp-trending-post-slider-and-widget
Patternunserialize_after_remote_call
Kindbuiltin
Version1.8.6.1
Hit count1
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
696
Snippet
L690: $data = @file_get_contents($url); → L696: $info = @unserialize($data);
Explanationa remote HTTP fetch (`wp_remote_*` / `curl_exec`) is followed by `@unserialize` within the same file — classic PHP Object Injection C2 gadget. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. A real finding regardless of author intent: any plugin that deserializes remote responses without validation is a latent RCE chain if the remote endpoint is ever compromised.
View raw JSON
{
    "slug": "wp-trending-post-slider-and-widget",
    "pattern": "unserialize_after_remote_call",
    "kind": "builtin",
    "version": "1.8.6.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 696,
        "snippet": "L690: $data = @file_get_contents($url);  \u2192  L696: $info = @unserialize($data);"
    },
    "explanation": "a remote HTTP fetch (`wp_remote_*` / `curl_exec`) is followed by `@unserialize` within the same file \u2014 classic PHP Object Injection C2 gadget. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. A real finding regardless of author intent: any plugin that deserializes remote responses without validation is a latent RCE chain if the remote endpoint is ever compromised."
}
Critical code_pattern Trending/Popular Post Slider and Widget (2k+ installs) Malicious 5mo ago
Slugwp-trending-post-slider-and-widget
PatternWpos_Anylc_Admin
Kindioc:code_pattern
Version1.8.6.1
Hit count6
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
15
Snippet
class Wpos_Anylc_Admin {
Explanation—
View raw JSON
{
    "slug": "wp-trending-post-slider-and-widget",
    "pattern": "Wpos_Anylc_Admin",
    "kind": "ioc:code_pattern",
    "version": "1.8.6.1",
    "hit_count": 6,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 15,
        "snippet": "class Wpos_Anylc_Admin {"
    },
    "explanation": null
}
Critical code_pattern Trending/Popular Post Slider and Widget (2k+ installs) Malicious 5mo ago
Slugwp-trending-post-slider-and-widget
Patternwpos_rest_api_init
Kindioc:code_pattern
Version1.8.6.1
Hit count2
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
72
Snippet
add_action( 'rest_api_init', array($this, 'wpos_rest_api_init') );
Explanation—
View raw JSON
{
    "slug": "wp-trending-post-slider-and-widget",
    "pattern": "wpos_rest_api_init",
    "kind": "ioc:code_pattern",
    "version": "1.8.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 72,
        "snippet": "add_action( 'rest_api_init', array($this, 'wpos_rest_api_init') );"
    },
    "explanation": null
}
Critical code_pattern Trending/Popular Post Slider and Widget (2k+ installs) Malicious 5mo ago
Slugwp-trending-post-slider-and-widget
Patternwpos_handle_analytics_request
Kindioc:code_pattern
Version1.8.6.1
Hit count2
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
593
Snippet
'callback' => array( $this, 'wpos_handle_analytics_request' ),
Explanation—
View raw JSON
{
    "slug": "wp-trending-post-slider-and-widget",
    "pattern": "wpos_handle_analytics_request",
    "kind": "ioc:code_pattern",
    "version": "1.8.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 593,
        "snippet": "'callback'            => array( $this, 'wpos_handle_analytics_request' ),"
    },
    "explanation": null
}
Critical code_pattern Trending/Popular Post Slider and Widget (2k+ installs) Malicious 5mo ago
Slugwp-trending-post-slider-and-widget
Patternwpos_get_plugin_version_by_file
Kindioc:code_pattern
Version1.8.6.1
Hit count2
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
657
Snippet
$version = $this->wpos_get_plugin_version_by_file($matching_product['file']);
Explanation—
View raw JSON
{
    "slug": "wp-trending-post-slider-and-widget",
    "pattern": "wpos_get_plugin_version_by_file",
    "kind": "ioc:code_pattern",
    "version": "1.8.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 657,
        "snippet": "$version = $this->wpos_get_plugin_version_by_file($matching_product['file']);"
    },
    "explanation": null
}
Critical code_pattern Trending/Popular Post Slider and Widget (2k+ installs) Malicious 5mo ago
Slugwp-trending-post-slider-and-widget
Patternwpos_process_monthly_data
Kindioc:code_pattern
Version1.8.6.1
Hit count3
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
545
Snippet
$this->wpos_process_monthly_data( $this->analytics_slugs );
Explanation—
View raw JSON
{
    "slug": "wp-trending-post-slider-and-widget",
    "pattern": "wpos_process_monthly_data",
    "kind": "ioc:code_pattern",
    "version": "1.8.6.1",
    "hit_count": 3,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 545,
        "snippet": "$this->wpos_process_monthly_data( $this->analytics_slugs );"
    },
    "explanation": null
}
Critical code_pattern Trending/Popular Post Slider and Widget (2k+ installs) Malicious 5mo ago
Slugwp-trending-post-slider-and-widget
Patternhttps://analytics.essentialplugin.com
Kindioc:url
Version1.8.6.1
Hit count5
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
17
Snippet
public $analytics_endpoint = 'https://analytics.essentialplugin.com';
Explanation—
View raw JSON
{
    "slug": "wp-trending-post-slider-and-widget",
    "pattern": "https://analytics.essentialplugin.com",
    "kind": "ioc:url",
    "version": "1.8.6.1",
    "hit_count": 5,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}
Critical code_pattern Trending/Popular Post Slider and Widget (2k+ installs) Malicious 5mo ago
Slugwp-trending-post-slider-and-widget
Pattern$analytics_endpoint
Kindioc:code_pattern
Version1.8.6.1
Hit count1
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
17
Snippet
public $analytics_endpoint = 'https://analytics.essentialplugin.com';
Explanation—
View raw JSON
{
    "slug": "wp-trending-post-slider-and-widget",
    "pattern": "$analytics_endpoint",
    "kind": "ioc:code_pattern",
    "version": "1.8.6.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}
Critical code_pattern Trending/Popular Post Slider and Widget (2k+ installs) Malicious 5mo ago
Slugwp-trending-post-slider-and-widget
Patternwpos_monthly_cron_hook
Kindioc:code_pattern
Version1.8.6.1
Hit count4
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
69
Snippet
add_action( 'wpos_monthly_cron_hook', array($this, 'wpos_monthly_cron_hook_fn') );
Explanation—
View raw JSON
{
    "slug": "wp-trending-post-slider-and-widget",
    "pattern": "wpos_monthly_cron_hook",
    "kind": "ioc:code_pattern",
    "version": "1.8.6.1",
    "hit_count": 4,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 69,
        "snippet": "add_action( 'wpos_monthly_cron_hook', array($this, 'wpos_monthly_cron_hook_fn') );"
    },
    "explanation": null
}
Critical code_pattern Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions (30k+ installs) Malicious 5mo ago
Slugpopup-anything-on-click
Patternanalytics.essentialplugin.com
Kindioc:domain
Version2.9.1.1
Hit count6
First hit
File
popup-anything-on-click.php
Line
35
Snippet
<p><?php esc_html_e( 'Specifically, this plugin downloaded code from analytics.essentialplugin.com and installed it in your site, while the specific case can differ, we know that they were installin
Explanation—
View raw JSON
{
    "slug": "popup-anything-on-click",
    "pattern": "analytics.essentialplugin.com",
    "kind": "ioc:domain",
    "version": "2.9.1.1",
    "hit_count": 6,
    "first_hit": {
        "file": "popup-anything-on-click.php",
        "line": 35,
        "snippet": "<p><?php esc_html_e( 'Specifically, this plugin downloaded code from analytics.essentialplugin.com and installed it in your site, while the specific case can differ, we know that they were installin"
    },
    "explanation": null
}
Critical code_pattern Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions (30k+ installs) Malicious 5mo ago
Slugpopup-anything-on-click
PatternPlugin Wpos Analytics Data Starts
Kindioc:code_pattern
Version2.9.1.1
Hit count1
First hit
File
popup-anything-on-click.php
Line
342
Snippet
/* Plugin Wpos Analytics Data Starts */
Explanation—
View raw JSON
{
    "slug": "popup-anything-on-click",
    "pattern": "Plugin Wpos Analytics Data Starts",
    "kind": "ioc:code_pattern",
    "version": "2.9.1.1",
    "hit_count": 1,
    "first_hit": {
        "file": "popup-anything-on-click.php",
        "line": 342,
        "snippet": "/* Plugin Wpos Analytics Data Starts */"
    },
    "explanation": null
}
Critical code_pattern Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions (30k+ installs) Malicious 5mo ago
Slugpopup-anything-on-click
Patternunserialize_after_remote_call
Kindbuiltin
Version2.9.1.1
Hit count1
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
696
Snippet
L690: $data = @file_get_contents($url); → L696: $info = @unserialize($data);
Explanationa remote HTTP fetch (`wp_remote_*` / `curl_exec`) is followed by `@unserialize` within the same file — classic PHP Object Injection C2 gadget. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. A real finding regardless of author intent: any plugin that deserializes remote responses without validation is a latent RCE chain if the remote endpoint is ever compromised.
View raw JSON
{
    "slug": "popup-anything-on-click",
    "pattern": "unserialize_after_remote_call",
    "kind": "builtin",
    "version": "2.9.1.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 696,
        "snippet": "L690: $data = @file_get_contents($url);  \u2192  L696: $info = @unserialize($data);"
    },
    "explanation": "a remote HTTP fetch (`wp_remote_*` / `curl_exec`) is followed by `@unserialize` within the same file \u2014 classic PHP Object Injection C2 gadget. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. A real finding regardless of author intent: any plugin that deserializes remote responses without validation is a latent RCE chain if the remote endpoint is ever compromised."
}
Critical code_pattern Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions (30k+ installs) Malicious 5mo ago
Slugpopup-anything-on-click
PatternWpos_Anylc_Admin
Kindioc:code_pattern
Version2.9.1.1
Hit count6
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
15
Snippet
class Wpos_Anylc_Admin {
Explanation—
View raw JSON
{
    "slug": "popup-anything-on-click",
    "pattern": "Wpos_Anylc_Admin",
    "kind": "ioc:code_pattern",
    "version": "2.9.1.1",
    "hit_count": 6,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 15,
        "snippet": "class Wpos_Anylc_Admin {"
    },
    "explanation": null
}
Critical code_pattern Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions (30k+ installs) Malicious 5mo ago
Slugpopup-anything-on-click
Patternwpos_rest_api_init
Kindioc:code_pattern
Version2.9.1.1
Hit count2
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
72
Snippet
add_action( 'rest_api_init', array($this, 'wpos_rest_api_init') );
Explanation—
View raw JSON
{
    "slug": "popup-anything-on-click",
    "pattern": "wpos_rest_api_init",
    "kind": "ioc:code_pattern",
    "version": "2.9.1.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 72,
        "snippet": "add_action( 'rest_api_init', array($this, 'wpos_rest_api_init') );"
    },
    "explanation": null
}
Critical code_pattern Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions (30k+ installs) Malicious 5mo ago
Slugpopup-anything-on-click
Patternwpos_handle_analytics_request
Kindioc:code_pattern
Version2.9.1.1
Hit count2
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
593
Snippet
'callback' => array( $this, 'wpos_handle_analytics_request' ),
Explanation—
View raw JSON
{
    "slug": "popup-anything-on-click",
    "pattern": "wpos_handle_analytics_request",
    "kind": "ioc:code_pattern",
    "version": "2.9.1.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 593,
        "snippet": "'callback'            => array( $this, 'wpos_handle_analytics_request' ),"
    },
    "explanation": null
}
Critical code_pattern Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions (30k+ installs) Malicious 5mo ago
Slugpopup-anything-on-click
Patternwpos_get_plugin_version_by_file
Kindioc:code_pattern
Version2.9.1.1
Hit count2
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
657
Snippet
$version = $this->wpos_get_plugin_version_by_file($matching_product['file']);
Explanation—
View raw JSON
{
    "slug": "popup-anything-on-click",
    "pattern": "wpos_get_plugin_version_by_file",
    "kind": "ioc:code_pattern",
    "version": "2.9.1.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 657,
        "snippet": "$version = $this->wpos_get_plugin_version_by_file($matching_product['file']);"
    },
    "explanation": null
}
Critical code_pattern Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions (30k+ installs) Malicious 5mo ago
Slugpopup-anything-on-click
Patternwpos_process_monthly_data
Kindioc:code_pattern
Version2.9.1.1
Hit count3
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
545
Snippet
$this->wpos_process_monthly_data( $this->analytics_slugs );
Explanation—
View raw JSON
{
    "slug": "popup-anything-on-click",
    "pattern": "wpos_process_monthly_data",
    "kind": "ioc:code_pattern",
    "version": "2.9.1.1",
    "hit_count": 3,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 545,
        "snippet": "$this->wpos_process_monthly_data( $this->analytics_slugs );"
    },
    "explanation": null
}
Critical code_pattern Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions (30k+ installs) Malicious 5mo ago
Slugpopup-anything-on-click
Patternhttps://analytics.essentialplugin.com
Kindioc:url
Version2.9.1.1
Hit count5
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
17
Snippet
public $analytics_endpoint = 'https://analytics.essentialplugin.com';
Explanation—
View raw JSON
{
    "slug": "popup-anything-on-click",
    "pattern": "https://analytics.essentialplugin.com",
    "kind": "ioc:url",
    "version": "2.9.1.1",
    "hit_count": 5,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}
Critical code_pattern Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions (30k+ installs) Malicious 5mo ago
Slugpopup-anything-on-click
Pattern$analytics_endpoint
Kindioc:code_pattern
Version2.9.1.1
Hit count1
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
17
Snippet
public $analytics_endpoint = 'https://analytics.essentialplugin.com';
Explanation—
View raw JSON
{
    "slug": "popup-anything-on-click",
    "pattern": "$analytics_endpoint",
    "kind": "ioc:code_pattern",
    "version": "2.9.1.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}
Critical code_pattern Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions (30k+ installs) Malicious 5mo ago
Slugpopup-anything-on-click
Patternwpos_monthly_cron_hook
Kindioc:code_pattern
Version2.9.1.1
Hit count4
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
69
Snippet
add_action( 'wpos_monthly_cron_hook', array($this, 'wpos_monthly_cron_hook_fn') );
Explanation—
View raw JSON
{
    "slug": "popup-anything-on-click",
    "pattern": "wpos_monthly_cron_hook",
    "kind": "ioc:code_pattern",
    "version": "2.9.1.1",
    "hit_count": 4,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 69,
        "snippet": "add_action( 'wpos_monthly_cron_hook', array($this, 'wpos_monthly_cron_hook_fn') );"
    },
    "explanation": null
}
Critical code_pattern WP News and Scrolling Widgets (10k+ installs) Malicious 5mo ago
Slugsp-news-and-widget
Patternanalytics.essentialplugin.com
Kindioc:domain
Version5.0.6.1
Hit count6
First hit
File
sp-news-and-widget.php
Line
36
Snippet
<p><?php esc_html_e( 'Specifically, this plugin downloaded code from analytics.essentialplugin.com and installed it in your site, while the specific case can differ, we know that they were installin
Explanation—
View raw JSON
{
    "slug": "sp-news-and-widget",
    "pattern": "analytics.essentialplugin.com",
    "kind": "ioc:domain",
    "version": "5.0.6.1",
    "hit_count": 6,
    "first_hit": {
        "file": "sp-news-and-widget.php",
        "line": 36,
        "snippet": "<p><?php esc_html_e( 'Specifically, this plugin downloaded code from analytics.essentialplugin.com and installed it in your site, while the specific case can differ, we know that they were installin"
    },
    "explanation": null
}
Critical code_pattern WP News and Scrolling Widgets (10k+ installs) Malicious 5mo ago
Slugsp-news-and-widget
Patternunserialize_after_remote_call
Kindbuiltin
Version5.0.6.1
Hit count1
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
696
Snippet
L690: $data = @file_get_contents($url); → L696: $info = @unserialize($data);
Explanationa remote HTTP fetch (`wp_remote_*` / `curl_exec`) is followed by `@unserialize` within the same file — classic PHP Object Injection C2 gadget. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. A real finding regardless of author intent: any plugin that deserializes remote responses without validation is a latent RCE chain if the remote endpoint is ever compromised.
View raw JSON
{
    "slug": "sp-news-and-widget",
    "pattern": "unserialize_after_remote_call",
    "kind": "builtin",
    "version": "5.0.6.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 696,
        "snippet": "L690: $data = @file_get_contents($url);  \u2192  L696: $info = @unserialize($data);"
    },
    "explanation": "a remote HTTP fetch (`wp_remote_*` / `curl_exec`) is followed by `@unserialize` within the same file \u2014 classic PHP Object Injection C2 gadget. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. A real finding regardless of author intent: any plugin that deserializes remote responses without validation is a latent RCE chain if the remote endpoint is ever compromised."
}
Critical code_pattern WP News and Scrolling Widgets (10k+ installs) Malicious 5mo ago
Slugsp-news-and-widget
PatternWpos_Anylc_Admin
Kindioc:code_pattern
Version5.0.6.1
Hit count6
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
15
Snippet
class Wpos_Anylc_Admin {
Explanation—
View raw JSON
{
    "slug": "sp-news-and-widget",
    "pattern": "Wpos_Anylc_Admin",
    "kind": "ioc:code_pattern",
    "version": "5.0.6.1",
    "hit_count": 6,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 15,
        "snippet": "class Wpos_Anylc_Admin {"
    },
    "explanation": null
}
Critical code_pattern WP News and Scrolling Widgets (10k+ installs) Malicious 5mo ago
Slugsp-news-and-widget
Patternwpos_rest_api_init
Kindioc:code_pattern
Version5.0.6.1
Hit count2
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
72
Snippet
add_action( 'rest_api_init', array($this, 'wpos_rest_api_init') );
Explanation—
View raw JSON
{
    "slug": "sp-news-and-widget",
    "pattern": "wpos_rest_api_init",
    "kind": "ioc:code_pattern",
    "version": "5.0.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 72,
        "snippet": "add_action( 'rest_api_init', array($this, 'wpos_rest_api_init') );"
    },
    "explanation": null
}
Critical code_pattern WP News and Scrolling Widgets (10k+ installs) Malicious 5mo ago
Slugsp-news-and-widget
Patternwpos_handle_analytics_request
Kindioc:code_pattern
Version5.0.6.1
Hit count2
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
593
Snippet
'callback' => array( $this, 'wpos_handle_analytics_request' ),
Explanation—
View raw JSON
{
    "slug": "sp-news-and-widget",
    "pattern": "wpos_handle_analytics_request",
    "kind": "ioc:code_pattern",
    "version": "5.0.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 593,
        "snippet": "'callback'            => array( $this, 'wpos_handle_analytics_request' ),"
    },
    "explanation": null
}
Critical code_pattern WP News and Scrolling Widgets (10k+ installs) Malicious 5mo ago
Slugsp-news-and-widget
Patternwpos_get_plugin_version_by_file
Kindioc:code_pattern
Version5.0.6.1
Hit count2
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
657
Snippet
$version = $this->wpos_get_plugin_version_by_file($matching_product['file']);
Explanation—
View raw JSON
{
    "slug": "sp-news-and-widget",
    "pattern": "wpos_get_plugin_version_by_file",
    "kind": "ioc:code_pattern",
    "version": "5.0.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 657,
        "snippet": "$version = $this->wpos_get_plugin_version_by_file($matching_product['file']);"
    },
    "explanation": null
}
Critical code_pattern WP News and Scrolling Widgets (10k+ installs) Malicious 5mo ago
Slugsp-news-and-widget
Patternwpos_process_monthly_data
Kindioc:code_pattern
Version5.0.6.1
Hit count3
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
545
Snippet
$this->wpos_process_monthly_data( $this->analytics_slugs );
Explanation—
View raw JSON
{
    "slug": "sp-news-and-widget",
    "pattern": "wpos_process_monthly_data",
    "kind": "ioc:code_pattern",
    "version": "5.0.6.1",
    "hit_count": 3,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 545,
        "snippet": "$this->wpos_process_monthly_data( $this->analytics_slugs );"
    },
    "explanation": null
}
Critical code_pattern WP News and Scrolling Widgets (10k+ installs) Malicious 5mo ago
Slugsp-news-and-widget
Patternhttps://analytics.essentialplugin.com
Kindioc:url
Version5.0.6.1
Hit count5
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
17
Snippet
public $analytics_endpoint = 'https://analytics.essentialplugin.com';
Explanation—
View raw JSON
{
    "slug": "sp-news-and-widget",
    "pattern": "https://analytics.essentialplugin.com",
    "kind": "ioc:url",
    "version": "5.0.6.1",
    "hit_count": 5,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}
Critical code_pattern WP News and Scrolling Widgets (10k+ installs) Malicious 5mo ago
Slugsp-news-and-widget
Pattern$analytics_endpoint
Kindioc:code_pattern
Version5.0.6.1
Hit count1
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
17
Snippet
public $analytics_endpoint = 'https://analytics.essentialplugin.com';
Explanation—
View raw JSON
{
    "slug": "sp-news-and-widget",
    "pattern": "$analytics_endpoint",
    "kind": "ioc:code_pattern",
    "version": "5.0.6.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}
Critical code_pattern WP News and Scrolling Widgets (10k+ installs) Malicious 5mo ago
Slugsp-news-and-widget
Patternwpos_monthly_cron_hook
Kindioc:code_pattern
Version5.0.6.1
Hit count4
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
69
Snippet
add_action( 'wpos_monthly_cron_hook', array($this, 'wpos_monthly_cron_hook_fn') );
Explanation—
View raw JSON
{
    "slug": "sp-news-and-widget",
    "pattern": "wpos_monthly_cron_hook",
    "kind": "ioc:code_pattern",
    "version": "5.0.6.1",
    "hit_count": 4,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 69,
        "snippet": "add_action( 'wpos_monthly_cron_hook', array($this, 'wpos_monthly_cron_hook_fn') );"
    },
    "explanation": null
}
Critical code_pattern WP Logo Showcase Responsive Slider and Carousel (30k+ installs) Malicious 5mo ago
Slugwp-logo-showcase-responsive-slider-slider
Patternanalytics.essentialplugin.com
Kindioc:domain
Version3.8.7.1
Hit count6
First hit
File
logo-showcase.php
Line
35
Snippet
<p><?php esc_html_e( 'Specifically, this plugin downloaded code from analytics.essentialplugin.com and installed it in your site, while the specific case can differ, we know that they were installin
Explanation—
View raw JSON
{
    "slug": "wp-logo-showcase-responsive-slider-slider",
    "pattern": "analytics.essentialplugin.com",
    "kind": "ioc:domain",
    "version": "3.8.7.1",
    "hit_count": 6,
    "first_hit": {
        "file": "logo-showcase.php",
        "line": 35,
        "snippet": "<p><?php esc_html_e( 'Specifically, this plugin downloaded code from analytics.essentialplugin.com and installed it in your site, while the specific case can differ, we know that they were installin"
    },
    "explanation": null
}
Critical code_pattern WP Logo Showcase Responsive Slider and Carousel (30k+ installs) Malicious 5mo ago
Slugwp-logo-showcase-responsive-slider-slider
PatternPlugin Wpos Analytics Data Starts
Kindioc:code_pattern
Version3.8.7.1
Hit count1
First hit
File
logo-showcase.php
Line
309
Snippet
/* Plugin Wpos Analytics Data Starts */
Explanation—
View raw JSON
{
    "slug": "wp-logo-showcase-responsive-slider-slider",
    "pattern": "Plugin Wpos Analytics Data Starts",
    "kind": "ioc:code_pattern",
    "version": "3.8.7.1",
    "hit_count": 1,
    "first_hit": {
        "file": "logo-showcase.php",
        "line": 309,
        "snippet": "/* Plugin Wpos Analytics Data Starts */"
    },
    "explanation": null
}
Critical code_pattern WP Logo Showcase Responsive Slider and Carousel (30k+ installs) Malicious 5mo ago
Slugwp-logo-showcase-responsive-slider-slider
Patternunserialize_after_remote_call
Kindbuiltin
Version3.8.7.1
Hit count1
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
696
Snippet
L690: $data = @file_get_contents($url); → L696: $info = @unserialize($data);
Explanationa remote HTTP fetch (`wp_remote_*` / `curl_exec`) is followed by `@unserialize` within the same file — classic PHP Object Injection C2 gadget. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. A real finding regardless of author intent: any plugin that deserializes remote responses without validation is a latent RCE chain if the remote endpoint is ever compromised.
View raw JSON
{
    "slug": "wp-logo-showcase-responsive-slider-slider",
    "pattern": "unserialize_after_remote_call",
    "kind": "builtin",
    "version": "3.8.7.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 696,
        "snippet": "L690: $data = @file_get_contents($url);  \u2192  L696: $info = @unserialize($data);"
    },
    "explanation": "a remote HTTP fetch (`wp_remote_*` / `curl_exec`) is followed by `@unserialize` within the same file \u2014 classic PHP Object Injection C2 gadget. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. A real finding regardless of author intent: any plugin that deserializes remote responses without validation is a latent RCE chain if the remote endpoint is ever compromised."
}
Critical code_pattern WP Logo Showcase Responsive Slider and Carousel (30k+ installs) Malicious 5mo ago
Slugwp-logo-showcase-responsive-slider-slider
PatternWpos_Anylc_Admin
Kindioc:code_pattern
Version3.8.7.1
Hit count6
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
15
Snippet
class Wpos_Anylc_Admin {
Explanation—
View raw JSON
{
    "slug": "wp-logo-showcase-responsive-slider-slider",
    "pattern": "Wpos_Anylc_Admin",
    "kind": "ioc:code_pattern",
    "version": "3.8.7.1",
    "hit_count": 6,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 15,
        "snippet": "class Wpos_Anylc_Admin {"
    },
    "explanation": null
}
Critical code_pattern WP Logo Showcase Responsive Slider and Carousel (30k+ installs) Malicious 5mo ago
Slugwp-logo-showcase-responsive-slider-slider
Patternwpos_rest_api_init
Kindioc:code_pattern
Version3.8.7.1
Hit count2
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
72
Snippet
add_action( 'rest_api_init', array($this, 'wpos_rest_api_init') );
Explanation—
View raw JSON
{
    "slug": "wp-logo-showcase-responsive-slider-slider",
    "pattern": "wpos_rest_api_init",
    "kind": "ioc:code_pattern",
    "version": "3.8.7.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 72,
        "snippet": "add_action( 'rest_api_init', array($this, 'wpos_rest_api_init') );"
    },
    "explanation": null
}
Critical code_pattern WP Logo Showcase Responsive Slider and Carousel (30k+ installs) Malicious 5mo ago
Slugwp-logo-showcase-responsive-slider-slider
Patternwpos_handle_analytics_request
Kindioc:code_pattern
Version3.8.7.1
Hit count2
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
593
Snippet
'callback' => array( $this, 'wpos_handle_analytics_request' ),
Explanation—
View raw JSON
{
    "slug": "wp-logo-showcase-responsive-slider-slider",
    "pattern": "wpos_handle_analytics_request",
    "kind": "ioc:code_pattern",
    "version": "3.8.7.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 593,
        "snippet": "'callback'            => array( $this, 'wpos_handle_analytics_request' ),"
    },
    "explanation": null
}
Critical code_pattern WP Logo Showcase Responsive Slider and Carousel (30k+ installs) Malicious 5mo ago
Slugwp-logo-showcase-responsive-slider-slider
Patternwpos_get_plugin_version_by_file
Kindioc:code_pattern
Version3.8.7.1
Hit count2
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
657
Snippet
$version = $this->wpos_get_plugin_version_by_file($matching_product['file']);
Explanation—
View raw JSON
{
    "slug": "wp-logo-showcase-responsive-slider-slider",
    "pattern": "wpos_get_plugin_version_by_file",
    "kind": "ioc:code_pattern",
    "version": "3.8.7.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 657,
        "snippet": "$version = $this->wpos_get_plugin_version_by_file($matching_product['file']);"
    },
    "explanation": null
}
Critical code_pattern WP Logo Showcase Responsive Slider and Carousel (30k+ installs) Malicious 5mo ago
Slugwp-logo-showcase-responsive-slider-slider
Patternwpos_process_monthly_data
Kindioc:code_pattern
Version3.8.7.1
Hit count3
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
545
Snippet
$this->wpos_process_monthly_data( $this->analytics_slugs );
Explanation—
View raw JSON
{
    "slug": "wp-logo-showcase-responsive-slider-slider",
    "pattern": "wpos_process_monthly_data",
    "kind": "ioc:code_pattern",
    "version": "3.8.7.1",
    "hit_count": 3,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 545,
        "snippet": "$this->wpos_process_monthly_data( $this->analytics_slugs );"
    },
    "explanation": null
}
Critical code_pattern WP Logo Showcase Responsive Slider and Carousel (30k+ installs) Malicious 5mo ago
Slugwp-logo-showcase-responsive-slider-slider
Patternhttps://analytics.essentialplugin.com
Kindioc:url
Version3.8.7.1
Hit count5
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
17
Snippet
public $analytics_endpoint = 'https://analytics.essentialplugin.com';
Explanation—
View raw JSON
{
    "slug": "wp-logo-showcase-responsive-slider-slider",
    "pattern": "https://analytics.essentialplugin.com",
    "kind": "ioc:url",
    "version": "3.8.7.1",
    "hit_count": 5,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}
Critical code_pattern WP Logo Showcase Responsive Slider and Carousel (30k+ installs) Malicious 5mo ago
Slugwp-logo-showcase-responsive-slider-slider
Pattern$analytics_endpoint
Kindioc:code_pattern
Version3.8.7.1
Hit count1
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
17
Snippet
public $analytics_endpoint = 'https://analytics.essentialplugin.com';
Explanation—
View raw JSON
{
    "slug": "wp-logo-showcase-responsive-slider-slider",
    "pattern": "$analytics_endpoint",
    "kind": "ioc:code_pattern",
    "version": "3.8.7.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}
Critical code_pattern WP Logo Showcase Responsive Slider and Carousel (30k+ installs) Malicious 5mo ago
Slugwp-logo-showcase-responsive-slider-slider
Patternwpos_monthly_cron_hook
Kindioc:code_pattern
Version3.8.7.1
Hit count4
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
69
Snippet
add_action( 'wpos_monthly_cron_hook', array($this, 'wpos_monthly_cron_hook_fn') );
Explanation—
View raw JSON
{
    "slug": "wp-logo-showcase-responsive-slider-slider",
    "pattern": "wpos_monthly_cron_hook",
    "kind": "ioc:code_pattern",
    "version": "3.8.7.1",
    "hit_count": 4,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 69,
        "snippet": "add_action( 'wpos_monthly_cron_hook', array($this, 'wpos_monthly_cron_hook_fn') );"
    },
    "explanation": null
}
Critical code_pattern Testimonial Grid and Testimonial Slider plus Carousel with Rotator Widget (9k+ installs) Malicious 5mo ago
Slugwp-testimonial-with-widget
Patternanalytics.essentialplugin.com
Kindioc:domain
Version3.5.6.1
Hit count6
First hit
File
wp-testimonials.php
Line
34
Snippet
<p><?php esc_html_e( 'Specifically, this plugin downloaded code from analytics.essentialplugin.com and installed it in your site, while the specific case can differ, we know that they were installin
Explanation—
View raw JSON
{
    "slug": "wp-testimonial-with-widget",
    "pattern": "analytics.essentialplugin.com",
    "kind": "ioc:domain",
    "version": "3.5.6.1",
    "hit_count": 6,
    "first_hit": {
        "file": "wp-testimonials.php",
        "line": 34,
        "snippet": "<p><?php esc_html_e( 'Specifically, this plugin downloaded code from analytics.essentialplugin.com and installed it in your site, while the specific case can differ, we know that they were installin"
    },
    "explanation": null
}
Critical code_pattern Testimonial Grid and Testimonial Slider plus Carousel with Rotator Widget (9k+ installs) Malicious 5mo ago
Slugwp-testimonial-with-widget
PatternPlugin Wpos Analytics Data Starts
Kindioc:code_pattern
Version3.5.6.1
Hit count1
First hit
File
wp-testimonials.php
Line
277
Snippet
/* Plugin Wpos Analytics Data Starts */
Explanation—
View raw JSON
{
    "slug": "wp-testimonial-with-widget",
    "pattern": "Plugin Wpos Analytics Data Starts",
    "kind": "ioc:code_pattern",
    "version": "3.5.6.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wp-testimonials.php",
        "line": 277,
        "snippet": "/* Plugin Wpos Analytics Data Starts */"
    },
    "explanation": null
}
Critical code_pattern Testimonial Grid and Testimonial Slider plus Carousel with Rotator Widget (9k+ installs) Malicious 5mo ago
Slugwp-testimonial-with-widget
Patternunserialize_after_remote_call
Kindbuiltin
Version3.5.6.1
Hit count1
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
696
Snippet
L690: $data = @file_get_contents($url); → L696: $info = @unserialize($data);
Explanationa remote HTTP fetch (`wp_remote_*` / `curl_exec`) is followed by `@unserialize` within the same file — classic PHP Object Injection C2 gadget. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. A real finding regardless of author intent: any plugin that deserializes remote responses without validation is a latent RCE chain if the remote endpoint is ever compromised.
View raw JSON
{
    "slug": "wp-testimonial-with-widget",
    "pattern": "unserialize_after_remote_call",
    "kind": "builtin",
    "version": "3.5.6.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 696,
        "snippet": "L690: $data = @file_get_contents($url);  \u2192  L696: $info = @unserialize($data);"
    },
    "explanation": "a remote HTTP fetch (`wp_remote_*` / `curl_exec`) is followed by `@unserialize` within the same file \u2014 classic PHP Object Injection C2 gadget. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. A real finding regardless of author intent: any plugin that deserializes remote responses without validation is a latent RCE chain if the remote endpoint is ever compromised."
}
Critical code_pattern Testimonial Grid and Testimonial Slider plus Carousel with Rotator Widget (9k+ installs) Malicious 5mo ago
Slugwp-testimonial-with-widget
PatternWpos_Anylc_Admin
Kindioc:code_pattern
Version3.5.6.1
Hit count6
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
15
Snippet
class Wpos_Anylc_Admin {
Explanation—
View raw JSON
{
    "slug": "wp-testimonial-with-widget",
    "pattern": "Wpos_Anylc_Admin",
    "kind": "ioc:code_pattern",
    "version": "3.5.6.1",
    "hit_count": 6,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 15,
        "snippet": "class Wpos_Anylc_Admin {"
    },
    "explanation": null
}
Critical code_pattern Testimonial Grid and Testimonial Slider plus Carousel with Rotator Widget (9k+ installs) Malicious 5mo ago
Slugwp-testimonial-with-widget
Patternwpos_rest_api_init
Kindioc:code_pattern
Version3.5.6.1
Hit count2
First hit
File
wpos-analytics/includes/class-anylc-admin.php
Line
72
Snippet
add_action( 'rest_api_init', array($this, 'wpos_rest_api_init') );
Explanation—
View raw JSON
{
    "slug": "wp-testimonial-with-widget",
    "pattern": "wpos_rest_api_init",
    "kind": "ioc:code_pattern",
    "version": "3.5.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 72,
        "snippet": "add_action( 'rest_api_init', array($this, 'wpos_rest_api_init') );"
    },
    "explanation": null
}