Events

{
    "slug": "funnel-builder",
    "previous_version": "3.15.0.2",
    "current_version": "3.15.0.5",
    "new_findings": [
        {
            "pattern": "add_footer_script",
            "kind": "ioc:code_pattern",
            "file": "modules/checkouts/includes/class-wfacp-template.php",
            "line": 211,
            "snippet": "add_action( 'wp_footer', [ $this, 'add_footer_script' ] );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/thankyou-pages/compatibilities/page-builders/divi/class-wfty-divi-extension.php",
            "line": 69,
            "snippet": "wp_enqueue_style( \"{$this->name}-wfty-divi\", \"{$this->plugin_dir_url}css/divi.css\", [], $this->version );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/thankyou-pages/compatibilities/page-builders/divi/class-wfty-divi-extension.php",
            "line": 71,
            "snippet": "wp_enqueue_script( \"{$this->name}-builder-bundle\", \"{$this->plugin_dir_url}scripts/loader.js\", [ 'react-dom' ], $this->version, true );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 3
}

{
    "slug": "backup-backup",
    "previous_version": "2.1.5.1",
    "current_version": "2.1.5.2",
    "new_findings": [
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "includes/extracter/extract.php",
            "line": 1044,
            "snippet": "$configData = file_get_contents(ABSPATH . 'wp-config.php');",
            "confidence": "medium"
        },
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "includes/extracter/extract.php",
            "line": 1046,
            "snippet": "file_put_contents(ABSPATH . 'wp-config.' . $this->tmptime . '.php', $configData);",
            "confidence": "medium"
        },
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "includes/extracter/extract.php",
            "line": 1489,
            "snippet": "$wpconfig = file_get_contents($abs . DIRECTORY_SEPARATOR . 'wp-config.php');",
            "confidence": "medium"
        },
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "includes/extracter/extract.php",
            "line": 1496,
            "snippet": "file_put_contents($abs . DIRECTORY_SEPARATOR . 'wp-config.php', $wpconfig);",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 4
}

{
    "slug": "latepoint",
    "previous_version": "5.5.1",
    "current_version": "5.6.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "latepoint.php",
            "line": 1520,
            "snippet": "wp_enqueue_script( 'razorpay-checkout', 'https://checkout.razorpay.com/v1/checkout.js', false, null );",
            "confidence": "medium",
            "details": {
                "url": "https://checkout.razorpay.com/v1/checkout.js",
                "url_host": "checkout.razorpay.com"
            }
        }
    ],
    "new_finding_count": 1
}

{
    "slug": "the-plus-addons-for-elementor-page-builder",
    "previous_version": "6.4.14",
    "current_version": "6.4.16",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/widgets/tp_social_embed.php",
            "line": 3471,
            "snippet": "wp_enqueue_script( 'tpae-fb-sdk', 'https://connect.facebook.net/en_US/sdk.js#xfbml=1&version=v3.2', array(), L_THEPLUS_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://connect.facebook.net/en_US/sdk.js#xfbml=1&version=v3.2",
                "url_host": "connect.facebook.net"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/widgets/tp_social_embed.php",
            "line": 3533,
            "snippet": "wp_enqueue_script( 'tpae-fb-sdk', 'https://connect.facebook.net/en_US/sdk.js#xfbml=1&version=v3.2', array(), L_THEPLUS_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://connect.facebook.net/en_US/sdk.js#xfbml=1&version=v3.2",
                "url_host": "connect.facebook.net"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/widgets/tp_social_embed.php",
            "line": 3619,
            "snippet": "wp_enqueue_script( 'tpae-twitter-widgets', 'https://platform.twitter.com/widgets.js', array(), L_THEPLUS_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://platform.twitter.com/widgets.js",
                "url_host": "platform.twitter.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/widgets/tp_social_embed.php",
            "line": 3661,
            "snippet": "wp_enqueue_script( 'tpae-instagram-embed', 'https://www.instagram.com/embed.js', array(), L_THEPLUS_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.instagram.com/embed.js",
                "url_host": "www.instagram.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/widgets/tp_meeting_scheduler.php",
            "line": 629,
            "snippet": "wp_enqueue_script( 'tpae-calendly-widget', 'https://assets.calendly.com/assets/external/widget.js', array(), L_THEPLUS_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://assets.calendly.com/assets/external/widget.js",
                "url_host": "assets.calendly.com"
            }
        }
    ],
    "new_finding_count": 5
}

{
    "slug": "wp-appbox",
    "author_slug": "marcelismus",
    "burst_start": "2026-05-02 14:40:41",
    "burst_end": "2026-05-02 14:45:25",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 1445,
    "distinct_messages": 1,
    "avg_message_length": 7,
    "top_message": "v4.5.13",
    "top_message_count": 12,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

{
    "slug": "wp-appbox",
    "author_slug": "marcelismus",
    "burst_start": "2026-04-26 19:15:18",
    "burst_end": "2026-04-26 19:18:43",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 1439,
    "distinct_messages": 1,
    "avg_message_length": 7,
    "top_message": "v4.5.12",
    "top_message_count": 12,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

{
    "slug": "atomic-elements",
    "previous_profile": "https://profiles.wordpress.org/wpcaliph/",
    "current_profile": "https://profiles.wordpress.org/oyorox/",
    "active_installs": 10
}

{
    "slug": "ultimate-slider-toolkit",
    "previous_profile": "https://profiles.wordpress.org/pawank1/",
    "current_profile": "https://profiles.wordpress.org/mobimint/",
    "active_installs": 10
}

{
    "slug": "mobile-call-now-map-buttons",
    "previously_closed_reason": "security-issue",
    "author_slug": "roimediaworks",
    "current_version": "1.6.2",
    "active_installs": 4000,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

{
    "slug": "wp-inventory-manager",
    "previous_profile": "https://profiles.wordpress.org/liezlcayanan/",
    "current_profile": "https://profiles.wordpress.org/chuck1982/",
    "active_installs": 1000
}

{
    "slug": "bandsintown",
    "previous_profile": "https://profiles.wordpress.org/kwestion505/",
    "current_profile": "https://profiles.wordpress.org/bandsintown/",
    "active_installs": 4000
}

{
    "slug": "wp-appbox",
    "author_slug": "marcelismus",
    "burst_start": "2026-04-26 19:15:18",
    "burst_end": "2026-04-26 19:18:43",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 1439,
    "distinct_messages": 1,
    "avg_message_length": 7,
    "top_message": "v4.5.12",
    "top_message_count": 12,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

{
    "slug": "slingblocks",
    "previous_profile": "https://profiles.wordpress.org/amans2k/",
    "current_profile": "https://profiles.wordpress.org/teamfunnelkit/",
    "active_installs": 6000
}

{
    "slug": "funnel-builder",
    "previous_profile": "https://profiles.wordpress.org/amans2k/",
    "current_profile": "https://profiles.wordpress.org/teamfunnelkit/",
    "active_installs": 40000
}

{
    "slug": "cart-for-woocommerce",
    "previous_profile": "https://profiles.wordpress.org/amans2k/",
    "current_profile": "https://profiles.wordpress.org/teamfunnelkit/",
    "active_installs": 30000
}

{
    "slug": "wp-marketing-automations",
    "previous_profile": "https://profiles.wordpress.org/amans2k/",
    "current_profile": "https://profiles.wordpress.org/teamfunnelkit/",
    "active_installs": 20000
}

{
    "slug": "wp-appbox",
    "author_slug": "marcelismus",
    "burst_start": "2026-04-26 19:15:18",
    "burst_end": "2026-04-26 19:18:43",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 1439,
    "distinct_messages": 1,
    "avg_message_length": 7,
    "top_message": "v4.5.12",
    "top_message_count": 12,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

{
    "slug": "beautify-cursor",
    "previous_profile": "https://profiles.wordpress.org/mmaumio/",
    "current_profile": "https://profiles.wordpress.org/dba6060/",
    "active_installs": 20
}

{
    "slug": "trunkrs-for-woocommerce",
    "previous_profile": "https://profiles.wordpress.org/fean/",
    "current_profile": "https://profiles.wordpress.org/chlododev/",
    "active_installs": 20
}

{
    "slug": "wp-appbox",
    "author_slug": "marcelismus",
    "burst_start": "2026-04-26 19:15:18",
    "burst_end": "2026-04-26 19:18:43",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 1439,
    "distinct_messages": 1,
    "avg_message_length": 7,
    "top_message": "v4.5.12",
    "top_message_count": 12,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

{
    "slug": "zalomeni",
    "previously_closed_reason": "security-issue",
    "author_slug": "vyskoczilova",
    "current_version": "2.0.0",
    "active_installs": 7000,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

{
    "slug": "sola-testimonials",
    "previously_closed_reason": "security-issue",
    "author_slug": "solaplugins",
    "current_version": "3.0.1",
    "active_installs": 300,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

{
    "slug": "category-popular-tags",
    "previous_profile": "https://profiles.wordpress.org/kusimo/",
    "current_profile": "https://profiles.wordpress.org/sidocode/",
    "active_installs": 0
}

{
    "slug": "quick-download-button",
    "previous_profile": "https://profiles.wordpress.org/kusimo/",
    "current_profile": "https://profiles.wordpress.org/sidocode/",
    "active_installs": 2000
}

{
    "slug": "sola-testimonials",
    "previously_closed_reason": "security-issue",
    "author_slug": "solaplugins",
    "current_version": "3.0.1",
    "active_installs": 300,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-05-04 05:42:03",
    "burst_end": "2026-05-04 05:58:28",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 664,
    "distinct_messages": 3,
    "avg_message_length": 19.7,
    "top_message": "adding updated files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

{
    "slug": "nexter-extension",
    "previous_version": "4.6.7",
    "current_version": "4.6.8",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "include/panel-settings/extensions/nexter-ext-adobe-font.php",
            "line": 190,
            "snippet": "wp_enqueue_style( 'nexter-adobe-typekit','https://use.typekit.net/'.esc_attr($font_val['project_id']).'.css', [], NEXTER_EXT_VER );",
            "confidence": "medium",
            "details": {
                "url": "https://use.typekit.net/",
                "url_host": "use.typekit.net"
            }
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "include/panel-settings/class-nxt-panel-ajax-router.php",
            "line": 779,
            "snippet": "L769: $response = wp_remote_post($theme_api_url, $args);  \u2192  L779: $theme_info = @unserialize( $body );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "include/panel-settings/class-nxt-panel-ajax-router.php",
            "line": 871,
            "snippet": "L870: $body = wp_remote_retrieve_body( $response );  \u2192  L871: $plugin_info = @unserialize( $body );",
            "confidence": "high"
        }
    ],
    "new_finding_count": 3
}

{
    "slug": "fx-calculators",
    "previous_profile": "https://profiles.wordpress.org/tarborali/",
    "current_profile": "https://profiles.wordpress.org/tarborlevan/",
    "active_installs": 100
}

{
    "slug": "webability-accessibility-widget",
    "author_slug": "subaigwebability",
    "burst_start": "2026-04-12 03:49:45",
    "burst_end": "2026-04-12 05:18:09",
    "burst_commits": 15,
    "burst_window_minutes": 90,
    "tenure_days": 200,
    "distinct_messages": 13,
    "avg_message_length": 38.4,
    "top_message": "Tag 2.3.1",
    "top_message_count": 3,
    "prt_revert": null,
    "explanation": "Established author committed 15 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

{
    "slug": "invoize",
    "author_slug": "wpsora",
    "burst_start": "2026-05-05 00:06:54",
    "burst_end": "2026-05-05 00:41:07",
    "burst_commits": 16,
    "burst_window_minutes": 90,
    "tenure_days": 194,
    "distinct_messages": 16,
    "avg_message_length": 11.3,
    "top_message": "wrong folder and files",
    "top_message_count": 1,
    "prt_revert": null,
    "explanation": "Established author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

{
    "committer": "wpmaintainer",
    "member_since": "2015-07-02",
    "plugins_joined": 5,
    "spread_days": 0,
    "earliest_join": "2020-12-06 19:57:29",
    "latest_join": "2020-12-06 21:12:40",
    "combined_installs": 2240,
    "sample_plugins": [
        {
            "slug": "raw-html-snippets",
            "active_installs": 2000,
            "first_commit_at": "2020-12-06 21:02:04"
        },
        {
            "slug": "list-children",
            "active_installs": 100,
            "first_commit_at": "2020-12-06 20:19:19"
        },
        {
            "slug": "the-permalinker",
            "active_installs": 100,
            "first_commit_at": "2020-12-06 21:12:40"
        },
        {
            "slug": "append-content",
            "active_installs": 40,
            "first_commit_at": "2020-12-06 19:57:29"
        },
        {
            "slug": "pagerestrict",
            "active_installs": 0,
            "first_commit_at": "2020-12-06 20:41:16"
        }
    ]
}

{
    "committer": "clarionwpdeveloper",
    "member_since": "2016-02-24",
    "plugins_joined": 6,
    "spread_days": 7,
    "earliest_join": "2020-12-23 05:45:21",
    "latest_join": "2020-12-30 06:13:04",
    "combined_installs": 200,
    "sample_plugins": [
        {
            "slug": "admin-post-tag-filter",
            "active_installs": 80,
            "first_commit_at": "2020-12-24 08:24:31"
        },
        {
            "slug": "cpt-custom-page-template",
            "active_installs": 50,
            "first_commit_at": "2020-12-23 08:51:41"
        },
        {
            "slug": "plugin-modification-date",
            "active_installs": 40,
            "first_commit_at": "2020-12-30 06:13:04"
        },
        {
            "slug": "auto-assign-post-category",
            "active_installs": 30,
            "first_commit_at": "2020-12-24 05:16:02"
        },
        {
            "slug": "add-custom-page-template",
            "active_installs": 0,
            "first_commit_at": "2020-12-24 06:51:17"
        },
        {
            "slug": "woo-tabs",
            "active_installs": 0,
            "first_commit_at": "2020-12-23 05:45:21"
        }
    ]
}

{
    "committer": "etivite",
    "member_since": "2011-09-23",
    "plugins_joined": 5,
    "spread_days": 0,
    "earliest_join": "2011-10-27 01:25:54",
    "latest_join": "2011-10-27 04:07:36",
    "combined_installs": 180,
    "sample_plugins": [
        {
            "slug": "buddypress-community-stats",
            "active_installs": 40,
            "first_commit_at": "2011-10-27 03:24:13"
        },
        {
            "slug": "buddypress-edit-activity-stream",
            "active_installs": 40,
            "first_commit_at": "2011-10-27 01:25:54"
        },
        {
            "slug": "buddypress-restrict-group-creation",
            "active_installs": 40,
            "first_commit_at": "2011-10-27 02:42:12"
        },
        {
            "slug": "buddypress-activity-stream-bump-to-top",
            "active_installs": 30,
            "first_commit_at": "2011-10-27 01:58:43"
        },
        {
            "slug": "buddypress-block-activity-stream-types",
            "active_installs": 30,
            "first_commit_at": "2011-10-27 04:07:36"
        }
    ]
}

{
    "committer": "evertiro",
    "member_since": "2017-10-05",
    "plugins_joined": 5,
    "spread_days": 82,
    "earliest_join": "2017-10-28 15:55:40",
    "latest_join": "2018-01-19 08:13:05",
    "combined_installs": 40230,
    "sample_plugins": [
        {
            "slug": "username-changer",
            "active_installs": 40000,
            "first_commit_at": "2017-10-29 08:06:04"
        },
        {
            "slug": "discord-display",
            "active_installs": 100,
            "first_commit_at": "2017-10-28 17:44:44"
        },
        {
            "slug": "edd-external-products",
            "active_installs": 100,
            "first_commit_at": "2017-10-28 18:28:40"
        },
        {
            "slug": "simple-attribution",
            "active_installs": 30,
            "first_commit_at": "2018-01-19 08:13:05"
        },
        {
            "slug": "beacon-for-helpscout",
            "active_installs": 0,
            "first_commit_at": "2017-10-28 15:55:40"
        }
    ]
}

{
    "slug": "metronet-reorder-posts",
    "previous_profile": "https://profiles.wordpress.org/ryanhellyer/",
    "current_profile": "https://profiles.wordpress.org/ronalfy/",
    "active_installs": 10000
}

{
    "slug": "document-emberdder",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/DocumentEmbedder/Api/DropboxApi.php",
            "line": 29,
            "snippet": "wp_enqueue_script('dropbox-picker', 'https://www.dropbox.com/static/api/2/dropins.js');",
            "confidence": "medium",
            "details": {
                "url": "https://www.dropbox.com/static/api/2/dropins.js",
                "url_host": "www.dropbox.com"
            }
        }
    ],
    "resolved_sha": "0285c41760c0b2f6d5286a653a21283a90de281c"
}

{
    "slug": "lead-form-builder",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/front-end.php",
            "line": 26,
            "snippet": "wp_enqueue_script('lfb-captcha','https://www.google.com/recaptcha/api.js?onload=CaptchaCallback&render=explicit');",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?onload=CaptchaCallback&render=explicit",
                "url_host": "www.google.com"
            }
        }
    ],
    "resolved_sha": "c1abc6c1d105144e73f02cae38e95cde6de6d0a9"
}

{
    "slug": "wp-contact-slider",
    "finding_count": 10,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/slider.php",
            "line": 17,
            "snippet": "wp_enqueue_style( 'jquery-ui-core', \"{$url}/jquery.ui.core.css\", array(), '1.8.17' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/slider.php",
            "line": 18,
            "snippet": "wp_enqueue_style( 'jquery-ui-theme', \"{$url}/jquery.ui.theme.css\", array(), '1.8.17' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/slider.php",
            "line": 19,
            "snippet": "wp_enqueue_style( 'jquery-ui-slider', \"{$url}/jquery.ui.slider.css\", array(), '1.8.17' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/datetime.php",
            "line": 58,
            "snippet": "wp_register_style( 'jquery-ui-core', \"$url/jquery.ui.core.css\", array(), '1.8.17' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/datetime.php",
            "line": 59,
            "snippet": "wp_register_style( 'jquery-ui-theme', \"$url/jquery.ui.theme.css\", array(), '1.8.17' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/datetime.php",
            "line": 60,
            "snippet": "wp_register_style( 'jquery-ui-datepicker', \"$url/jquery.ui.datepicker.css\", array( 'jquery-ui-core', 'jquery-ui-theme' ), '1.8.17' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/datetime.php",
            "line": 63,
            "snippet": "wp_register_style( 'jquery-ui-slider', \"$url/jquery.ui.slider.css\", array( 'jquery-ui-core', 'jquery-ui-theme' ), '1.8.17' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/datetime.php",
            "line": 64,
            "snippet": "wp_register_style( 'jquery-ui-timepicker', \"$url/jquery-ui-timepicker-addon.min.css\", array( 'rwmb-date', 'jquery-ui-slider' ), '1.5.0' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/datetime.php",
            "line": 67,
            "snippet": "wp_register_script( 'jquery-ui-timepicker', \"$url/jquery-ui-timepicker-addon.min.js\", array( 'jquery-ui-datepicker', 'jquery-ui-slider' ), '1.5.0', true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/datetime.php",
            "line": 68,
            "snippet": "wp_register_script( 'jquery-ui-timepicker-i18n', \"$url/jquery-ui-timepicker-addon-i18n.min.js\", array( 'jquery-ui-timepicker' ), '1.5.0', true );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "ccd2938043e5488dc09561275d36b47baa1de928"
}

{
    "slug": "classified-listing",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "app/Controllers/Admin/ScriptLoader.php",
            "line": 233,
            "snippet": "wp_register_script( 'rtcl-recaptcha', 'https://www.google.com/recaptcha/api.js?render=' . esc_attr( $misc_settings['recaptcha_site_key'] ) );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?render=",
                "url_host": "www.google.com"
            }
        }
    ],
    "resolved_sha": "3eb8d57d91377bdc2c05bf6f4a1bcdfccdcc0d79"
}

{
    "slug": "login-security-recaptcha",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/class-stlsr-helper.php",
            "line": 128,
            "snippet": "wp_enqueue_script( 'recaptcha-api-v2', 'https://www.google.com/recaptcha/api.js?onload=lsrecaptcha2', array(), null ); // phpcs:ignore WordPress.WP.EnqueuedResourceParameters,PluginCheck.CodeAnalysi",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?onload=lsrecaptcha2",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/class-stlsr-helper.php",
            "line": 238,
            "snippet": "wp_enqueue_script( 'recaptcha-api-v3', ( 'https://www.google.com/recaptcha/api.js?onload=lsrecaptcha3&render=' . esc_attr( $captcha['site_key'] ) . '&badge=' . esc_attr( $captcha['badge'] ) ), array",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?onload=lsrecaptcha3&render=",
                "url_host": "www.google.com"
            }
        }
    ],
    "resolved_sha": "29e2048b69613d231bad0e768c7fb9d70ed95b6a"
}

{
    "slug": "motors-car-dealership-classified-listings",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/enqueue.php",
            "line": 168,
            "snippet": "wp_register_script( 'stm_grecaptcha', 'https://www.google.com/recaptcha/api.js?onload=stmMotorsCaptcha&render=explicit', array( 'jquery' ), STM_LISTINGS_V, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?onload=stmMotorsCaptcha&render=explicit",
                "url_host": "www.google.com"
            }
        }
    ],
    "resolved_sha": "2ebfcc399f86d392bfa210c2ec3fd35fe7434652"
}

{
    "slug": "fathom-analytics",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "fathom-analytics.php",
            "line": 102,
            "snippet": "wp_enqueue_script( 'fathom-snippet', 'https://cdn.usefathom.com/script.js', array(), null, array( 'strategy' => 'defer' ) );",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.usefathom.com/script.js",
                "url_host": "cdn.usefathom.com"
            }
        }
    ],
    "resolved_sha": "98b1a549dac9630b1bd08407138e9cadcccd6b69"
}

{
    "slug": "page-builder-add",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "integrations/form-builder-database/extension.php",
            "line": 278,
            "snippet": "var thisData = eval(selectedForm)",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "integrations/createsend/class/transport.php",
            "line": 60,
            "snippet": "$result = gzinflate(substr($result, 10, -8));",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "a38e1c22dc0468ca3d9da136d937a56de1660cbe",
    "serial_offender_note": "Severity bumped medium\u2192high: author umarbajwa has 5 prior security-issue closures on wp.org."
}

{
    "slug": "eroom-zoom-meetings-webinar",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/item-announcements.php",
            "line": 4,
            "snippet": "wp_enqueue_style( 'stm-item-announcements-styles', 'https://stylemixthemes.com/item-announcements/css/app.css', [], null );",
            "confidence": "medium",
            "details": {
                "url": "https://stylemixthemes.com/item-announcements/css/app.css",
                "url_host": "stylemixthemes.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/item-announcements.php",
            "line": 5,
            "snippet": "wp_enqueue_script( 'stm-item-announcements-app', 'https://stylemixthemes.com/item-announcements/js/app.js', [], null, true );",
            "confidence": "medium",
            "details": {
                "url": "https://stylemixthemes.com/item-announcements/js/app.js",
                "url_host": "stylemixthemes.com"
            }
        }
    ],
    "resolved_sha": "981b065dc18db7f918c4eeb8e4b88455ea95cd07"
}

{
    "slug": "ws-form",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "admin/class-ws-form-admin.php",
            "line": 339,
            "snippet": "wp_enqueue_script('vimeo-player', 'https://player.vimeo.com/api/player.js', array(), $this->version, true);",
            "confidence": "medium",
            "details": {
                "url": "https://player.vimeo.com/api/player.js",
                "url_host": "player.vimeo.com"
            }
        }
    ],
    "resolved_sha": "f4acdb3f7b41d4875f511e98b9fef9aba1843ac2"
}

{
    "slug": "leaflet-maps-marker",
    "finding_count": 4,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "leaflet-maps-marker.php",
            "line": 704,
            "snippet": "wp_register_script( 'leafletmapsmarker-googlemaps-loader', 'https://www.google.com/jsapi'.$google_maps_api_key, array(), 3.7, true);",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/jsapi",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "leaflet-maps-marker.php",
            "line": 709,
            "snippet": "wp_enqueue_script( 'leafletmapsmarker-googlemaps-loader', 'https://www.google.com/jsapi'.$google_maps_api_key, array(), NULL);",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/jsapi",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "leaflet-maps-marker.php",
            "line": 773,
            "snippet": "wp_enqueue_script( 'leafletmapsmarker-googlemaps-loader', 'https://www.google.com/jsapi'.$google_maps_api_key, array(), 3.7, true);",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/jsapi",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "backtick_exec",
            "kind": "builtin",
            "file": "leaflet-list-markers.php",
            "line": 98,
            "snippet": "$wpdb->query( \"UPDATE `$table_name_markers` SET `layer` = \" . intval($_POST['layer']) . \" where `id` IN (\" . $checked_markers . \")\");",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "d7fbe7b93834e7a00db8e577875a51fe3da0eb3e"
}

{
    "slug": "sensei-lms",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/blocks/class-sensei-blocks.php",
            "line": 95,
            "snippet": "wp_register_script( 'sensei-youtube-iframe-api', 'https://www.youtube.com/iframe_api', [], 'unversioned', false );",
            "confidence": "medium",
            "details": {
                "url": "https://www.youtube.com/iframe_api",
                "url_host": "www.youtube.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/blocks/class-sensei-blocks.php",
            "line": 96,
            "snippet": "wp_register_script( 'sensei-vimeo-iframe-api', 'https://player.vimeo.com/api/player.js', [], 'unversioned', false );",
            "confidence": "medium",
            "details": {
                "url": "https://player.vimeo.com/api/player.js",
                "url_host": "player.vimeo.com"
            }
        }
    ],
    "resolved_sha": "af05ce8fc163bcfb7dbc2e2160eabd4a12c6ba71"
}

{
    "slug": "gravity-forms-no-captcha-recaptcha",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "public/class-gf-no-captcha-recaptcha-public.php",
            "line": 247,
            "snippet": "wp_enqueue_script( 'no_captcha_recaptcha_api', 'https://www.google.com/recaptcha/api.js?render=explicit', array(), '', true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?render=explicit",
                "url_host": "www.google.com"
            }
        }
    ],
    "resolved_sha": "8af8cedf99461a165f1702404605896612a97280"
}

{
    "slug": "xagio-seo",
    "finding_count": 4,
    "findings": [
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "modules/rescuecenter/models/xagio_rescue.php",
            "line": 261,
            "snippet": "xagio_file_put_contents(ABSPATH . 'wp-config.php', $t);",
            "confidence": "medium"
        },
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "modules/rescuecenter/models/xagio_rescue.php",
            "line": 263,
            "snippet": "xagio_file_put_contents($xagio_location . 'wp-config.php', $t);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/settings/models/xagio_settings.php",
            "line": 463,
            "snippet": "wp_enqueue_script('recaptcha', 'https://www.google.com/recaptcha/api.js?render=' . esc_html(XAGIO_RECAPTCHA_SITE_KEY), [], '1.0', true);",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?render=",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/settings/models/xagio_settings.php",
            "line": 508,
            "snippet": "wp_enqueue_script('recaptcha', 'https://www.google.com/recaptcha/api.js?render=' . esc_html(XAGIO_RECAPTCHA_SITE_KEY), [], '1.0', true);",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?render=",
                "url_host": "www.google.com"
            }
        }
    ],
    "resolved_sha": "3c1e772c47d7ad091652c6e4bab66079017e61e1"
}

{
    "slug": "analytics-insights",
    "finding_count": 4,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "front/setup.php",
            "line": 51,
            "snippet": "wp_register_script( 'googlecharts', 'https://www.gstatic.com/charts/loader.js', array(), null );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "front/widgets.php",
            "line": 35,
            "snippet": "wp_enqueue_script( 'googlecharts', 'https://www.gstatic.com/charts/loader.js', array(), null );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "admin/setup.php",
            "line": 125,
            "snippet": "wp_register_script( 'googlecharts', 'https://www.gstatic.com/charts/loader.js', array(), null );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "admin/setup.php",
            "line": 231,
            "snippet": "wp_register_script( 'googlecharts', 'https://www.gstatic.com/charts/loader.js', array(), null );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        }
    ],
    "resolved_sha": "4ca149eb015a435f6ba01fdead5c4468daefb33d"
}