Events

1,086 events (filtered). · Last rule pass 7h ago. · 30 open / 4,683 resolved overall.

State: Open Resolved All
High closed_plugin_resurrection Total Sales Counts for WooCommerce (700 installs) Resolved 4mo ago
Slugwoo-total-sales
Previously closed reasonsecurity-issue
Author slugshivashankerbhatta
Current version4.1.0
Active installs700
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "woo-total-sales",
    "previously_closed_reason": "security-issue",
    "author_slug": "shivashankerbhatta",
    "current_version": "4.1.0",
    "active_installs": 700,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High closed_plugin_resurrection UpMenu – Online ordering for restaurants (30 installs) Resolved 4mo ago
Slugupmenu
Previously closed reasonsecurity-issue
Author slugupmenu
Current version3.2
Active installs20
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "upmenu",
    "previously_closed_reason": "security-issue",
    "author_slug": "upmenu",
    "current_version": "3.2",
    "active_installs": 20,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High closed_plugin_resurrection Kevin's Plugin (50 installs) Resolved 4mo ago
Slugkevins-plugin
Previously closed reasonsecurity-issue
Author slugkevmimcc
Current version2.0.1
Active installs40
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "kevins-plugin",
    "previously_closed_reason": "security-issue",
    "author_slug": "kevmimcc",
    "current_version": "2.0.1",
    "active_installs": 40,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High closed_plugin_resurrection Eleblog – Elementor Blog And Magazine Addons (1k+ installs) Resolved 4mo ago
Slugele-blog
Previously closed reasonsecurity-issue
Author slugsmarettheme
Current version1.9
Active installs1,000
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "ele-blog",
    "previously_closed_reason": "security-issue",
    "author_slug": "smarettheme",
    "current_version": "1.9",
    "active_installs": 1000,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High closed_plugin_resurrection Catch Popup (30 installs) Resolved 4mo ago
Slugcatch-popup
Previously closed reasonsecurity-issue
Author slugmaheshmaharjan
Current version2.0
Active installs20
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "catch-popup",
    "previously_closed_reason": "security-issue",
    "author_slug": "maheshmaharjan",
    "current_version": "2.0",
    "active_installs": 20,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High closed_plugin_resurrection Alpha Blocks (— installs) Resolved 4mo ago
Slugalpha-blocks
Previously closed reasonsecurity-issue
Author slugrobiulawal40
Current version1.5.0
Active installs0
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "alpha-blocks",
    "previously_closed_reason": "security-issue",
    "author_slug": "robiulawal40",
    "current_version": "1.5.0",
    "active_installs": 0,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High closed_plugin_resurrection Auto Tag Creator (1k+ installs) Resolved 4mo ago
Slugauto-tag-creator
Previously closed reasonsecurity-issue
Author slugecreateinfotech
Current version1.0.3
Active installs1,000
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "auto-tag-creator",
    "previously_closed_reason": "security-issue",
    "author_slug": "ecreateinfotech",
    "current_version": "1.0.3",
    "active_installs": 1000,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High domain_younger_than_plugin When Last Login (50k+ installs) Resolved 4mo ago
Slugwhen-last-login
Domainwhenlastlogin.com
Domain sourceplugin_uri
Domain registered at2025-04-03
Plugin earliest commit2016-07-15 00:38:39
Plugin latest release2025-12-03 08:51:13
Gap days3,183
Domain age at release244
Active installs50,000
View raw JSON
{
    "slug": "when-last-login",
    "domain": "whenlastlogin.com",
    "domain_source": "plugin_uri",
    "domain_registered_at": "2025-04-03",
    "plugin_earliest_commit": "2016-07-15 00:38:39",
    "plugin_latest_release": "2025-12-03 08:51:13",
    "gap_days": 3183,
    "domain_age_at_release": 244,
    "active_installs": 50000
}
High code_scan_delta Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin (3k+ installs) Resolved 4mo ago
Slugmajestic-support
Previous version1.1.3
Current version1.1.7
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinmodules/majesticsupport/tpls/userregister.php5wp_enqueue_script( 'majesticsupport-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), '1.0.0', true );medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
remote_enqueuebuiltinmodules/majesticsupport/tpls/userregister.php153wp_enqueue_script( 'majesticsupport-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), '1.0.0', true );medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
remote_enqueuebuiltinmodules/ticket/tpls/addticket.php4wp_enqueue_script( 'majesticsupport-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), '1.0.0', true );medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
New finding count3
View raw JSON
{
    "slug": "majestic-support",
    "previous_version": "1.1.3",
    "current_version": "1.1.7",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/majesticsupport/tpls/userregister.php",
            "line": 5,
            "snippet": "wp_enqueue_script( 'majesticsupport-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), '1.0.0', true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/majesticsupport/tpls/userregister.php",
            "line": 153,
            "snippet": "wp_enqueue_script( 'majesticsupport-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), '1.0.0', true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/ticket/tpls/addticket.php",
            "line": 4,
            "snippet": "wp_enqueue_script( 'majesticsupport-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), '1.0.0', true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        }
    ],
    "new_finding_count": 3
}
High code_scan_delta Like Button Rating ♥ LikeBtn (4k+ installs) Resolved 4mo ago
Sluglikebtn-like-button
Previous version2.6.59
Current version2.6.60
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinlikebtn_like_button.php3,218wp_enqueue_script('likebtn-graph', 'https://likebtn.com/js/graph.js', array(), LIKEBTN_VERSION);medium
Url
https://likebtn.com/js/graph.js
Url host
likebtn.com
remote_enqueuebuiltinincludes/tab_votes.php98wp_enqueue_script('likebtn-graph', 'https://likebtn.com/js/graph.js', array(), LIKEBTN_VERSION);medium
Url
https://likebtn.com/js/graph.js
Url host
likebtn.com
New finding count2
View raw JSON
{
    "slug": "likebtn-like-button",
    "previous_version": "2.6.59",
    "current_version": "2.6.60",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "likebtn_like_button.php",
            "line": 3218,
            "snippet": "wp_enqueue_script('likebtn-graph', 'https://likebtn.com/js/graph.js', array(), LIKEBTN_VERSION);",
            "confidence": "medium",
            "details": {
                "url": "https://likebtn.com/js/graph.js",
                "url_host": "likebtn.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/tab_votes.php",
            "line": 98,
            "snippet": "wp_enqueue_script('likebtn-graph', 'https://likebtn.com/js/graph.js', array(), LIKEBTN_VERSION);",
            "confidence": "medium",
            "details": {
                "url": "https://likebtn.com/js/graph.js",
                "url_host": "likebtn.com"
            }
        }
    ],
    "new_finding_count": 2
}
High code_scan_delta JS Help Desk – AI-Powered Support & Ticketing System (7k+ installs) Suspicious 4mo ago
Slugjs-support-ticket
Previous version3.0.8
Current version3.1.0
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinmodules/jssupportticket/tpls/userregister.php5wp_enqueue_script( 'ticket-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), jssupportticket::$_config['productversion'], true );medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
remote_enqueuebuiltinmodules/jssupportticket/tpls/userregister.php142wp_enqueue_script( 'ticket-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), jssupportticket::$_config['productversion'], true );medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
remote_enqueuebuiltinmodules/ticket/tpls/addticket.php5wp_enqueue_script( 'ticket-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), jssupportticket::$_config['productversion'], true );medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
New finding count3
View raw JSON
{
    "slug": "js-support-ticket",
    "previous_version": "3.0.8",
    "current_version": "3.1.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/jssupportticket/tpls/userregister.php",
            "line": 5,
            "snippet": "wp_enqueue_script( 'ticket-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), jssupportticket::$_config['productversion'], true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/jssupportticket/tpls/userregister.php",
            "line": 142,
            "snippet": "wp_enqueue_script( 'ticket-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), jssupportticket::$_config['productversion'], true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/ticket/tpls/addticket.php",
            "line": 5,
            "snippet": "wp_enqueue_script( 'ticket-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), jssupportticket::$_config['productversion'], true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        }
    ],
    "new_finding_count": 3
}
High code_scan_delta Notibar – Notification Bar for WordPress (8k+ installs) Resolved 4mo ago
Slugnotibar
Previous version2.1.9
Current version3.1.0
New findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinrecommended-modules/filebird-dashboard-widget/main.php129wp_register_script( "{$this->plugin_prefix}-dashboard-widget", $this->plugin_dir_url . 'assets/js/script.js', array( 'jquery' ), '1.0', true );medium
remote_enqueuebuiltinrecommended-modules/filebird-dashboard-widget/main.php139wp_enqueue_script( "{$this->plugin_prefix}-dashboard-widget" );medium
remote_enqueuebuiltinrecommended-modules/filebird-sidebar-popup/main.php150wp_register_script( "{$this->plugin_prefix}-sidebar-popup", $this->plugin_dir_url . 'assets/js/script.js', array( 'jquery' ), '1.0', true );medium
remote_enqueuebuiltinrecommended-modules/filebird-sidebar-popup/main.php161wp_enqueue_script( "{$this->plugin_prefix}-sidebar-popup" );medium
remote_enqueuebuiltinrecommended-modules/filebird-plugins-page-notification/main.php99wp_register_script( "{$this->plugin_prefix}_plugins_page_notification", $this->plugin_dir_url . 'assets/js/script.js', array( 'jquery' ), '1.0', true );medium
remote_enqueuebuiltinrecommended-modules/filebird-plugins-page-notification/main.php109wp_enqueue_script( "{$this->plugin_prefix}_plugins_page_notification" );medium
New finding count6
View raw JSON
{
    "slug": "notibar",
    "previous_version": "2.1.9",
    "current_version": "3.1.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "recommended-modules/filebird-dashboard-widget/main.php",
            "line": 129,
            "snippet": "wp_register_script( \"{$this->plugin_prefix}-dashboard-widget\", $this->plugin_dir_url . 'assets/js/script.js', array( 'jquery' ), '1.0', true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "recommended-modules/filebird-dashboard-widget/main.php",
            "line": 139,
            "snippet": "wp_enqueue_script( \"{$this->plugin_prefix}-dashboard-widget\" );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "recommended-modules/filebird-sidebar-popup/main.php",
            "line": 150,
            "snippet": "wp_register_script( \"{$this->plugin_prefix}-sidebar-popup\", $this->plugin_dir_url . 'assets/js/script.js', array( 'jquery' ), '1.0', true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "recommended-modules/filebird-sidebar-popup/main.php",
            "line": 161,
            "snippet": "wp_enqueue_script( \"{$this->plugin_prefix}-sidebar-popup\" );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "recommended-modules/filebird-plugins-page-notification/main.php",
            "line": 99,
            "snippet": "wp_register_script( \"{$this->plugin_prefix}_plugins_page_notification\", $this->plugin_dir_url . 'assets/js/script.js', array( 'jquery' ), '1.0', true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "recommended-modules/filebird-plugins-page-notification/main.php",
            "line": 109,
            "snippet": "wp_enqueue_script( \"{$this->plugin_prefix}_plugins_page_notification\" );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 6
}
High code_scan_delta FunnelKit – Funnel Builder for WooCommerce Checkout (30k+ installs) Resolved 4mo ago
Slugfunnel-builder
Previous version3.15.0.2
Current version3.15.0.5
New findings
PatternKindFileLineSnippetConfidence
add_footer_scriptioc:code_patternmodules/checkouts/includes/class-wfacp-template.php211add_action( 'wp_footer', [ $this, 'add_footer_script' ] );medium
remote_enqueuebuiltinmodules/thankyou-pages/compatibilities/page-builders/divi/class-wfty-divi-extension.php69wp_enqueue_style( "{$this->name}-wfty-divi", "{$this->plugin_dir_url}css/divi.css", [], $this->version );medium
remote_enqueuebuiltinmodules/thankyou-pages/compatibilities/page-builders/divi/class-wfty-divi-extension.php71wp_enqueue_script( "{$this->name}-builder-bundle", "{$this->plugin_dir_url}scripts/loader.js", [ 'react-dom' ], $this->version, true );medium
New finding count3
View raw JSON
{
    "slug": "funnel-builder",
    "previous_version": "3.15.0.2",
    "current_version": "3.15.0.5",
    "new_findings": [
        {
            "pattern": "add_footer_script",
            "kind": "ioc:code_pattern",
            "file": "modules/checkouts/includes/class-wfacp-template.php",
            "line": 211,
            "snippet": "add_action( 'wp_footer', [ $this, 'add_footer_script' ] );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/thankyou-pages/compatibilities/page-builders/divi/class-wfty-divi-extension.php",
            "line": 69,
            "snippet": "wp_enqueue_style( \"{$this->name}-wfty-divi\", \"{$this->plugin_dir_url}css/divi.css\", [], $this->version );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/thankyou-pages/compatibilities/page-builders/divi/class-wfty-divi-extension.php",
            "line": 71,
            "snippet": "wp_enqueue_script( \"{$this->name}-builder-bundle\", \"{$this->plugin_dir_url}scripts/loader.js\", [ 'react-dom' ], $this->version, true );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 3
}
High code_scan_delta Backup Migration (80k+ installs) Resolved 4mo ago
Slugbackup-backup
Previous version2.1.5.1
Current version2.1.5.2
New findings
PatternKindFileLineSnippetConfidence
wpconfig_writebuiltinincludes/extracter/extract.php1,044$configData = file_get_contents(ABSPATH . 'wp-config.php');medium
wpconfig_writebuiltinincludes/extracter/extract.php1,046file_put_contents(ABSPATH . 'wp-config.' . $this->tmptime . '.php', $configData);medium
wpconfig_writebuiltinincludes/extracter/extract.php1,489$wpconfig = file_get_contents($abs . DIRECTORY_SEPARATOR . 'wp-config.php');medium
wpconfig_writebuiltinincludes/extracter/extract.php1,496file_put_contents($abs . DIRECTORY_SEPARATOR . 'wp-config.php', $wpconfig);medium
New finding count4
View raw JSON
{
    "slug": "backup-backup",
    "previous_version": "2.1.5.1",
    "current_version": "2.1.5.2",
    "new_findings": [
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "includes/extracter/extract.php",
            "line": 1044,
            "snippet": "$configData = file_get_contents(ABSPATH . 'wp-config.php');",
            "confidence": "medium"
        },
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "includes/extracter/extract.php",
            "line": 1046,
            "snippet": "file_put_contents(ABSPATH . 'wp-config.' . $this->tmptime . '.php', $configData);",
            "confidence": "medium"
        },
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "includes/extracter/extract.php",
            "line": 1489,
            "snippet": "$wpconfig = file_get_contents($abs . DIRECTORY_SEPARATOR . 'wp-config.php');",
            "confidence": "medium"
        },
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "includes/extracter/extract.php",
            "line": 1496,
            "snippet": "file_put_contents($abs . DIRECTORY_SEPARATOR . 'wp-config.php', $wpconfig);",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 4
}
High code_scan_delta Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress (100k+ installs) Resolved 4mo ago
Sluglatepoint
Previous version5.5.1
Current version5.6.0
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinlatepoint.php1,520wp_enqueue_script( 'razorpay-checkout', 'https://checkout.razorpay.com/v1/checkout.js', false, null );medium
Url
https://checkout.razorpay.com/v1/checkout.js
Url host
checkout.razorpay.com
New finding count1
View raw JSON
{
    "slug": "latepoint",
    "previous_version": "5.5.1",
    "current_version": "5.6.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "latepoint.php",
            "line": 1520,
            "snippet": "wp_enqueue_script( 'razorpay-checkout', 'https://checkout.razorpay.com/v1/checkout.js', false, null );",
            "confidence": "medium",
            "details": {
                "url": "https://checkout.razorpay.com/v1/checkout.js",
                "url_host": "checkout.razorpay.com"
            }
        }
    ],
    "new_finding_count": 1
}
Slugthe-plus-addons-for-elementor-page-builder
Previous version6.4.14
Current version6.4.16
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinmodules/widgets/tp_social_embed.php3,471wp_enqueue_script( 'tpae-fb-sdk', 'https://connect.facebook.net/en_US/sdk.js#xfbml=1&version=v3.2', array(), L_THEPLUS_VERSION, true );medium
Url
https://connect.facebook.net/en_US/sdk.js#xfbml=1&version=v3.2
Url host
connect.facebook.net
remote_enqueuebuiltinmodules/widgets/tp_social_embed.php3,533wp_enqueue_script( 'tpae-fb-sdk', 'https://connect.facebook.net/en_US/sdk.js#xfbml=1&version=v3.2', array(), L_THEPLUS_VERSION, true );medium
Url
https://connect.facebook.net/en_US/sdk.js#xfbml=1&version=v3.2
Url host
connect.facebook.net
remote_enqueuebuiltinmodules/widgets/tp_social_embed.php3,619wp_enqueue_script( 'tpae-twitter-widgets', 'https://platform.twitter.com/widgets.js', array(), L_THEPLUS_VERSION, true );medium
Url
https://platform.twitter.com/widgets.js
Url host
platform.twitter.com
remote_enqueuebuiltinmodules/widgets/tp_social_embed.php3,661wp_enqueue_script( 'tpae-instagram-embed', 'https://www.instagram.com/embed.js', array(), L_THEPLUS_VERSION, true );medium
Url
https://www.instagram.com/embed.js
Url host
www.instagram.com
remote_enqueuebuiltinmodules/widgets/tp_meeting_scheduler.php629wp_enqueue_script( 'tpae-calendly-widget', 'https://assets.calendly.com/assets/external/widget.js', array(), L_THEPLUS_VERSION, true );medium
Url
https://assets.calendly.com/assets/external/widget.js
Url host
assets.calendly.com
New finding count5
View raw JSON
{
    "slug": "the-plus-addons-for-elementor-page-builder",
    "previous_version": "6.4.14",
    "current_version": "6.4.16",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/widgets/tp_social_embed.php",
            "line": 3471,
            "snippet": "wp_enqueue_script( 'tpae-fb-sdk', 'https://connect.facebook.net/en_US/sdk.js#xfbml=1&version=v3.2', array(), L_THEPLUS_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://connect.facebook.net/en_US/sdk.js#xfbml=1&version=v3.2",
                "url_host": "connect.facebook.net"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/widgets/tp_social_embed.php",
            "line": 3533,
            "snippet": "wp_enqueue_script( 'tpae-fb-sdk', 'https://connect.facebook.net/en_US/sdk.js#xfbml=1&version=v3.2', array(), L_THEPLUS_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://connect.facebook.net/en_US/sdk.js#xfbml=1&version=v3.2",
                "url_host": "connect.facebook.net"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/widgets/tp_social_embed.php",
            "line": 3619,
            "snippet": "wp_enqueue_script( 'tpae-twitter-widgets', 'https://platform.twitter.com/widgets.js', array(), L_THEPLUS_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://platform.twitter.com/widgets.js",
                "url_host": "platform.twitter.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/widgets/tp_social_embed.php",
            "line": 3661,
            "snippet": "wp_enqueue_script( 'tpae-instagram-embed', 'https://www.instagram.com/embed.js', array(), L_THEPLUS_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.instagram.com/embed.js",
                "url_host": "www.instagram.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/widgets/tp_meeting_scheduler.php",
            "line": 629,
            "snippet": "wp_enqueue_script( 'tpae-calendly-widget', 'https://assets.calendly.com/assets/external/widget.js', array(), L_THEPLUS_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://assets.calendly.com/assets/external/widget.js",
                "url_host": "assets.calendly.com"
            }
        }
    ],
    "new_finding_count": 5
}
High compromised_committer_burst WP-Appbox (2k+ installs) Resolved 4mo ago
Slugwp-appbox
Author slugmarcelismus
Burst start2026-05-02 14:40:41
Burst end2026-05-02 14:45:25
Burst commits12
Burst window minutes90
Tenure days1,445
Distinct messages1
Avg message length7
Top messagev4.5.13
Top message count12
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-appbox",
    "author_slug": "marcelismus",
    "burst_start": "2026-05-02 14:40:41",
    "burst_end": "2026-05-02 14:45:25",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 1445,
    "distinct_messages": 1,
    "avg_message_length": 7,
    "top_message": "v4.5.13",
    "top_message_count": 12,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst WP-Appbox (2k+ installs) Resolved 4mo ago
Slugwp-appbox
Author slugmarcelismus
Burst start2026-04-26 19:15:18
Burst end2026-04-26 19:18:43
Burst commits12
Burst window minutes90
Tenure days1,439
Distinct messages1
Avg message length7
Top messagev4.5.12
Top message count12
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-appbox",
    "author_slug": "marcelismus",
    "burst_start": "2026-04-26 19:15:18",
    "burst_end": "2026-04-26 19:18:43",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 1439,
    "distinct_messages": 1,
    "avg_message_length": 7,
    "top_message": "v4.5.12",
    "top_message_count": 12,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High closed_plugin_resurrection Mobile Call Now & Map Buttons (4k+ installs) Resolved 4mo ago
Slugmobile-call-now-map-buttons
Previously closed reasonsecurity-issue
Author slugroimediaworks
Current version1.6.2
Active installs4,000
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "mobile-call-now-map-buttons",
    "previously_closed_reason": "security-issue",
    "author_slug": "roimediaworks",
    "current_version": "1.6.2",
    "active_installs": 4000,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High compromised_committer_burst WP-Appbox (2k+ installs) Resolved 4mo ago
Slugwp-appbox
Author slugmarcelismus
Burst start2026-04-26 19:15:18
Burst end2026-04-26 19:18:43
Burst commits12
Burst window minutes90
Tenure days1,439
Distinct messages1
Avg message length7
Top messagev4.5.12
Top message count12
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-appbox",
    "author_slug": "marcelismus",
    "burst_start": "2026-04-26 19:15:18",
    "burst_end": "2026-04-26 19:18:43",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 1439,
    "distinct_messages": 1,
    "avg_message_length": 7,
    "top_message": "v4.5.12",
    "top_message_count": 12,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
Slugcart-for-woocommerce
Previous profilehttps://profiles.wordpress.org/amans2k/
Current profilehttps://profiles.wordpress.org/teamfunnelkit/
Active installs30,000
View raw JSON
{
    "slug": "cart-for-woocommerce",
    "previous_profile": "https://profiles.wordpress.org/amans2k/",
    "current_profile": "https://profiles.wordpress.org/teamfunnelkit/",
    "active_installs": 30000
}
Slugwp-marketing-automations
Previous profilehttps://profiles.wordpress.org/amans2k/
Current profilehttps://profiles.wordpress.org/teamfunnelkit/
Active installs20,000
View raw JSON
{
    "slug": "wp-marketing-automations",
    "previous_profile": "https://profiles.wordpress.org/amans2k/",
    "current_profile": "https://profiles.wordpress.org/teamfunnelkit/",
    "active_installs": 20000
}
High compromised_committer_burst WP-Appbox (2k+ installs) Resolved 4mo ago
Slugwp-appbox
Author slugmarcelismus
Burst start2026-04-26 19:15:18
Burst end2026-04-26 19:18:43
Burst commits12
Burst window minutes90
Tenure days1,439
Distinct messages1
Avg message length7
Top messagev4.5.12
Top message count12
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-appbox",
    "author_slug": "marcelismus",
    "burst_start": "2026-04-26 19:15:18",
    "burst_end": "2026-04-26 19:18:43",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 1439,
    "distinct_messages": 1,
    "avg_message_length": 7,
    "top_message": "v4.5.12",
    "top_message_count": 12,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst WP-Appbox (2k+ installs) Resolved 4mo ago
Slugwp-appbox
Author slugmarcelismus
Burst start2026-04-26 19:15:18
Burst end2026-04-26 19:18:43
Burst commits12
Burst window minutes90
Tenure days1,439
Distinct messages1
Avg message length7
Top messagev4.5.12
Top message count12
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-appbox",
    "author_slug": "marcelismus",
    "burst_start": "2026-04-26 19:15:18",
    "burst_end": "2026-04-26 19:18:43",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 1439,
    "distinct_messages": 1,
    "avg_message_length": 7,
    "top_message": "v4.5.12",
    "top_message_count": 12,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High closed_plugin_resurrection Zalomení (6k+ installs) Resolved 4mo ago
Slugzalomeni
Previously closed reasonsecurity-issue
Author slugvyskoczilova
Current version2.0.0
Active installs7,000
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "zalomeni",
    "previously_closed_reason": "security-issue",
    "author_slug": "vyskoczilova",
    "current_version": "2.0.0",
    "active_installs": 7000,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High closed_plugin_resurrection Super Testimonials (300 installs) Resolved 4mo ago
Slugsola-testimonials
Previously closed reasonsecurity-issue
Author slugsolaplugins
Current version3.0.1
Active installs300
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "sola-testimonials",
    "previously_closed_reason": "security-issue",
    "author_slug": "solaplugins",
    "current_version": "3.0.1",
    "active_installs": 300,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High closed_plugin_resurrection Super Testimonials (300 installs) Resolved 4mo ago
Slugsola-testimonials
Previously closed reasonsecurity-issue
Author slugsolaplugins
Current version3.0.1
Active installs300
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "sola-testimonials",
    "previously_closed_reason": "security-issue",
    "author_slug": "solaplugins",
    "current_version": "3.0.1",
    "active_installs": 300,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}