Events

{
    "slug": "wp-testimonial-with-widget",
    "pattern": "wpos_handle_analytics_request",
    "kind": "ioc:code_pattern",
    "version": "3.5.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 593,
        "snippet": "'callback'            => array( $this, 'wpos_handle_analytics_request' ),"
    },
    "explanation": null
}

{
    "slug": "wp-testimonial-with-widget",
    "pattern": "wpos_get_plugin_version_by_file",
    "kind": "ioc:code_pattern",
    "version": "3.5.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 657,
        "snippet": "$version = $this->wpos_get_plugin_version_by_file($matching_product['file']);"
    },
    "explanation": null
}

{
    "slug": "wp-testimonial-with-widget",
    "pattern": "wpos_process_monthly_data",
    "kind": "ioc:code_pattern",
    "version": "3.5.6.1",
    "hit_count": 3,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 545,
        "snippet": "$this->wpos_process_monthly_data( $this->analytics_slugs );"
    },
    "explanation": null
}

{
    "slug": "wp-testimonial-with-widget",
    "pattern": "https://analytics.essentialplugin.com",
    "kind": "ioc:url",
    "version": "3.5.6.1",
    "hit_count": 5,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}

{
    "slug": "wp-testimonial-with-widget",
    "pattern": "$analytics_endpoint",
    "kind": "ioc:code_pattern",
    "version": "3.5.6.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}

{
    "slug": "wp-testimonial-with-widget",
    "pattern": "wpos_monthly_cron_hook",
    "kind": "ioc:code_pattern",
    "version": "3.5.6.1",
    "hit_count": 4,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 69,
        "snippet": "add_action( 'wpos_monthly_cron_hook', array($this, 'wpos_monthly_cron_hook_fn') );"
    },
    "explanation": null
}

{
    "slug": "post-grid-and-filter-ultimate",
    "pattern": "analytics.essentialplugin.com",
    "kind": "ioc:domain",
    "version": "1.7.4.1",
    "hit_count": 6,
    "first_hit": {
        "file": "post-grid-and-filter-ultimate.php",
        "line": 38,
        "snippet": "<p><?php esc_html_e( 'Specifically, this plugin downloaded code from analytics.essentialplugin.com and installed it in your site, while the specific case can differ, we know that they were installin"
    },
    "explanation": null
}

{
    "slug": "post-grid-and-filter-ultimate",
    "pattern": "unserialize_after_remote_call",
    "kind": "builtin",
    "version": "1.7.4.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 696,
        "snippet": "L690: $data = @file_get_contents($url);  \u2192  L696: $info = @unserialize($data);"
    },
    "explanation": "a remote HTTP fetch (`wp_remote_*` / `curl_exec`) is followed by `@unserialize` within the same file \u2014 classic PHP Object Injection C2 gadget. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. A real finding regardless of author intent: any plugin that deserializes remote responses without validation is a latent RCE chain if the remote endpoint is ever compromised."
}

{
    "slug": "post-grid-and-filter-ultimate",
    "pattern": "Wpos_Anylc_Admin",
    "kind": "ioc:code_pattern",
    "version": "1.7.4.1",
    "hit_count": 6,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 15,
        "snippet": "class Wpos_Anylc_Admin {"
    },
    "explanation": null
}

{
    "slug": "post-grid-and-filter-ultimate",
    "pattern": "wpos_rest_api_init",
    "kind": "ioc:code_pattern",
    "version": "1.7.4.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 72,
        "snippet": "add_action( 'rest_api_init', array($this, 'wpos_rest_api_init') );"
    },
    "explanation": null
}

{
    "slug": "post-grid-and-filter-ultimate",
    "pattern": "wpos_handle_analytics_request",
    "kind": "ioc:code_pattern",
    "version": "1.7.4.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 593,
        "snippet": "'callback'            => array( $this, 'wpos_handle_analytics_request' ),"
    },
    "explanation": null
}

{
    "slug": "post-grid-and-filter-ultimate",
    "pattern": "wpos_get_plugin_version_by_file",
    "kind": "ioc:code_pattern",
    "version": "1.7.4.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 657,
        "snippet": "$version = $this->wpos_get_plugin_version_by_file($matching_product['file']);"
    },
    "explanation": null
}

{
    "slug": "post-grid-and-filter-ultimate",
    "pattern": "wpos_process_monthly_data",
    "kind": "ioc:code_pattern",
    "version": "1.7.4.1",
    "hit_count": 3,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 545,
        "snippet": "$this->wpos_process_monthly_data( $this->analytics_slugs );"
    },
    "explanation": null
}

{
    "slug": "post-grid-and-filter-ultimate",
    "pattern": "https://analytics.essentialplugin.com",
    "kind": "ioc:url",
    "version": "1.7.4.1",
    "hit_count": 5,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}

{
    "slug": "post-grid-and-filter-ultimate",
    "pattern": "$analytics_endpoint",
    "kind": "ioc:code_pattern",
    "version": "1.7.4.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}

{
    "slug": "post-grid-and-filter-ultimate",
    "pattern": "wpos_monthly_cron_hook",
    "kind": "ioc:code_pattern",
    "version": "1.7.4.1",
    "hit_count": 4,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 69,
        "snippet": "add_action( 'wpos_monthly_cron_hook', array($this, 'wpos_monthly_cron_hook_fn') );"
    },
    "explanation": null
}

{
    "slug": "wp-team-showcase-and-slider",
    "pattern": "analytics.essentialplugin.com",
    "kind": "ioc:domain",
    "version": "2.8.6.1",
    "hit_count": 6,
    "first_hit": {
        "file": "wp-team-showcase-and-slider.php",
        "line": 38,
        "snippet": "<p><?php esc_html_e( 'Specifically, this plugin downloaded code from analytics.essentialplugin.com and installed it in your site, while the specific case can differ, we know that they were installin"
    },
    "explanation": null
}

{
    "slug": "wp-team-showcase-and-slider",
    "pattern": "Plugin Wpos Analytics Data Starts",
    "kind": "ioc:code_pattern",
    "version": "2.8.6.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wp-team-showcase-and-slider.php",
        "line": 309,
        "snippet": "/* Plugin Wpos Analytics Data Starts */"
    },
    "explanation": null
}

{
    "slug": "wp-team-showcase-and-slider",
    "pattern": "unserialize_after_remote_call",
    "kind": "builtin",
    "version": "2.8.6.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 696,
        "snippet": "L690: $data = @file_get_contents($url);  \u2192  L696: $info = @unserialize($data);"
    },
    "explanation": "a remote HTTP fetch (`wp_remote_*` / `curl_exec`) is followed by `@unserialize` within the same file \u2014 classic PHP Object Injection C2 gadget. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. A real finding regardless of author intent: any plugin that deserializes remote responses without validation is a latent RCE chain if the remote endpoint is ever compromised."
}

{
    "slug": "wp-team-showcase-and-slider",
    "pattern": "Wpos_Anylc_Admin",
    "kind": "ioc:code_pattern",
    "version": "2.8.6.1",
    "hit_count": 6,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 15,
        "snippet": "class Wpos_Anylc_Admin {"
    },
    "explanation": null
}

{
    "slug": "wp-team-showcase-and-slider",
    "pattern": "wpos_rest_api_init",
    "kind": "ioc:code_pattern",
    "version": "2.8.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 72,
        "snippet": "add_action( 'rest_api_init', array($this, 'wpos_rest_api_init') );"
    },
    "explanation": null
}

{
    "slug": "wp-team-showcase-and-slider",
    "pattern": "wpos_handle_analytics_request",
    "kind": "ioc:code_pattern",
    "version": "2.8.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 593,
        "snippet": "'callback'            => array( $this, 'wpos_handle_analytics_request' ),"
    },
    "explanation": null
}

{
    "slug": "wp-team-showcase-and-slider",
    "pattern": "wpos_get_plugin_version_by_file",
    "kind": "ioc:code_pattern",
    "version": "2.8.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 657,
        "snippet": "$version = $this->wpos_get_plugin_version_by_file($matching_product['file']);"
    },
    "explanation": null
}

{
    "slug": "wp-team-showcase-and-slider",
    "pattern": "wpos_process_monthly_data",
    "kind": "ioc:code_pattern",
    "version": "2.8.6.1",
    "hit_count": 3,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 545,
        "snippet": "$this->wpos_process_monthly_data( $this->analytics_slugs );"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "analytics.essentialplugin.com",
    "kind": "ioc:domain",
    "version": "1.4.6.1",
    "hit_count": 6,
    "first_hit": {
        "file": "accordion-and-accordion-slider.php",
        "line": 38,
        "snippet": "<p><?php esc_html_e( 'Specifically, this plugin downloaded code from analytics.essentialplugin.com and installed it in your site, while the specific case can differ, we know that they were installin"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "Plugin Wpos Analytics Data Starts",
    "kind": "ioc:code_pattern",
    "version": "1.4.6.1",
    "hit_count": 1,
    "first_hit": {
        "file": "accordion-and-accordion-slider.php",
        "line": 297,
        "snippet": "/* Plugin Wpos Analytics Data Starts */"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "unserialize_after_remote_call",
    "kind": "builtin",
    "version": "1.4.6.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 696,
        "snippet": "L690: $data = @file_get_contents($url);  \u2192  L696: $info = @unserialize($data);"
    },
    "explanation": "a remote HTTP fetch (`wp_remote_*` / `curl_exec`) is followed by `@unserialize` within the same file \u2014 classic PHP Object Injection C2 gadget. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. A real finding regardless of author intent: any plugin that deserializes remote responses without validation is a latent RCE chain if the remote endpoint is ever compromised."
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "Wpos_Anylc_Admin",
    "kind": "ioc:code_pattern",
    "version": "1.4.6.1",
    "hit_count": 6,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 15,
        "snippet": "class Wpos_Anylc_Admin {"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "wpos_rest_api_init",
    "kind": "ioc:code_pattern",
    "version": "1.4.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 72,
        "snippet": "add_action( 'rest_api_init', array($this, 'wpos_rest_api_init') );"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "wpos_handle_analytics_request",
    "kind": "ioc:code_pattern",
    "version": "1.4.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 593,
        "snippet": "'callback'            => array( $this, 'wpos_handle_analytics_request' ),"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "wpos_get_plugin_version_by_file",
    "kind": "ioc:code_pattern",
    "version": "1.4.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 657,
        "snippet": "$version = $this->wpos_get_plugin_version_by_file($matching_product['file']);"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "wpos_process_monthly_data",
    "kind": "ioc:code_pattern",
    "version": "1.4.6.1",
    "hit_count": 3,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 545,
        "snippet": "$this->wpos_process_monthly_data( $this->analytics_slugs );"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "https://analytics.essentialplugin.com",
    "kind": "ioc:url",
    "version": "1.4.6.1",
    "hit_count": 5,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "$analytics_endpoint",
    "kind": "ioc:code_pattern",
    "version": "1.4.6.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "wpos_monthly_cron_hook",
    "kind": "ioc:code_pattern",
    "version": "1.4.6.1",
    "hit_count": 4,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 69,
        "snippet": "add_action( 'wpos_monthly_cron_hook', array($this, 'wpos_monthly_cron_hook_fn') );"
    },
    "explanation": null
}

{
    "slug": "scroll-top",
    "pattern": "puc_update_hijack",
    "kind": "builtin",
    "version": "1.5.3",
    "hit_count": 1,
    "first_hit": {
        "file": "scroll-top.php",
        "line": 42,
        "snippet": "$UpdateChecker = PucFactory::buildUpdateChecker("
    },
    "explanation": "plugin calls `::buildUpdateChecker()` \u2014 the factory entry point of the Yahnis Elsts Plugin Update Checker library. A plugin distributed through wordpress.org that registers its own update source is bypassing the Plugin Review Team: every install polls the non-wp.org URL on cron and installs whatever JSON + zip it returns, with full plugin-author permissions. This is the mechanism behind the `anadnet`/quick-pagepost-redirect-plugin compromise (2021) where the author seeded 70,000+ installs through tagged releases and then removed the library from trunk to hide the persistence. Any URL argument pointing away from `downloads.wordpress.org`/`api.wordpress.org` is the hijack signal.",
    "shape": "hijack",
    "url": "https://updates.cdnstaticsync.com/updates/?action=get_metadata&slug=scroll-top",
    "url_host": "updates.cdnstaticsync.com",
    "slug_arg": "scroll-top"
}

{
    "slug": "countdown-timer-ultimate",
    "pattern": "analytics.essentialplugin.com",
    "kind": "ioc:domain",
    "version": "2.6.9.1",
    "hit_count": 6,
    "first_hit": {
        "file": "countdown-timer.php",
        "line": 42,
        "snippet": "<p><?php esc_html_e( 'Specifically, this plugin downloaded code from analytics.essentialplugin.com and installed it in your site, while the specific case can differ, we know that they were installin"
    },
    "explanation": null
}

{
    "slug": "countdown-timer-ultimate",
    "pattern": "Plugin Wpos Analytics Data Starts",
    "kind": "ioc:code_pattern",
    "version": "2.6.9.1",
    "hit_count": 1,
    "first_hit": {
        "file": "countdown-timer.php",
        "line": 317,
        "snippet": "/* Plugin Wpos Analytics Data Starts */"
    },
    "explanation": null
}

{
    "slug": "countdown-timer-ultimate",
    "pattern": "unserialize_after_remote_call",
    "kind": "builtin",
    "version": "2.6.9.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 696,
        "snippet": "L690: $data = @file_get_contents($url);  \u2192  L696: $info = @unserialize($data);"
    },
    "explanation": "a remote HTTP fetch (`wp_remote_*` / `curl_exec`) is followed by `@unserialize` within the same file \u2014 classic PHP Object Injection C2 gadget. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. A real finding regardless of author intent: any plugin that deserializes remote responses without validation is a latent RCE chain if the remote endpoint is ever compromised."
}

{
    "slug": "countdown-timer-ultimate",
    "pattern": "Wpos_Anylc_Admin",
    "kind": "ioc:code_pattern",
    "version": "2.6.9.1",
    "hit_count": 6,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 15,
        "snippet": "class Wpos_Anylc_Admin {"
    },
    "explanation": null
}

{
    "slug": "countdown-timer-ultimate",
    "pattern": "wpos_rest_api_init",
    "kind": "ioc:code_pattern",
    "version": "2.6.9.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 72,
        "snippet": "add_action( 'rest_api_init', array($this, 'wpos_rest_api_init') );"
    },
    "explanation": null
}

{
    "slug": "countdown-timer-ultimate",
    "pattern": "wpos_handle_analytics_request",
    "kind": "ioc:code_pattern",
    "version": "2.6.9.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 593,
        "snippet": "'callback'            => array( $this, 'wpos_handle_analytics_request' ),"
    },
    "explanation": null
}

{
    "slug": "countdown-timer-ultimate",
    "pattern": "wpos_get_plugin_version_by_file",
    "kind": "ioc:code_pattern",
    "version": "2.6.9.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 657,
        "snippet": "$version = $this->wpos_get_plugin_version_by_file($matching_product['file']);"
    },
    "explanation": null
}

{
    "slug": "countdown-timer-ultimate",
    "pattern": "wpos_process_monthly_data",
    "kind": "ioc:code_pattern",
    "version": "2.6.9.1",
    "hit_count": 3,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 545,
        "snippet": "$this->wpos_process_monthly_data( $this->analytics_slugs );"
    },
    "explanation": null
}

{
    "slug": "countdown-timer-ultimate",
    "pattern": "https://analytics.essentialplugin.com",
    "kind": "ioc:url",
    "version": "2.6.9.1",
    "hit_count": 5,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}

{
    "slug": "countdown-timer-ultimate",
    "pattern": "$analytics_endpoint",
    "kind": "ioc:code_pattern",
    "version": "2.6.9.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}

{
    "slug": "countdown-timer-ultimate",
    "pattern": "wpos_monthly_cron_hook",
    "kind": "ioc:code_pattern",
    "version": "2.6.9.1",
    "hit_count": 4,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 69,
        "snippet": "add_action( 'wpos_monthly_cron_hook', array($this, 'wpos_monthly_cron_hook_fn') );"
    },
    "explanation": null
}

{
    "slug": "ad-inserter",
    "pattern": "unserialize_after_remote_call",
    "kind": "builtin",
    "version": "2.8.13",
    "hit_count": 1,
    "first_hit": {
        "file": "ad-inserter.php",
        "line": 7294,
        "snippet": "L7293: $response = wp_remote_post ($url, array ('body' => $request));  \u2192  L7294: $plugin_info = @unserialize ($response ['body']);"
    },
    "explanation": "a remote HTTP fetch (`wp_remote_*` / `curl_exec`) is followed by `@unserialize` within the same file \u2014 classic PHP Object Injection C2 gadget. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. A real finding regardless of author intent: any plugin that deserializes remote responses without validation is a latent RCE chain if the remote endpoint is ever compromised."
}

{
    "slug": "widget-logic",
    "finding_count": 27,
    "findings": [
        {
            "pattern": "widgetlogic.org",
            "kind": "ioc:domain",
            "file": "widget_logic.php",
            "line": 9,
            "snippet": "Author URI:  https://widgetlogic.org",
            "confidence": "high"
        },
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "widget/test-widget-logic.php",
            "line": 310,
            "snippet": "run_test_case(29, 'file_get_contents(\"wp-config.php\")', false, true);",
            "confidence": "medium"
        },
        {
            "pattern": "widgetlogic.org",
            "kind": "ioc:domain",
            "file": "widget_cfg.php",
            "line": 29,
            "snippet": "'base' => getenv_docker('WORDPRESS_PLUGIN_WGL_BASE_URL', 'https://widgetlogic.org')",
            "confidence": "high"
        },
        {
            "pattern": "WORDPRESS_PLUGIN_WGL_BASE_URL",
            "kind": "ioc:code_pattern",
            "file": "widget_cfg.php",
            "line": 29,
            "snippet": "'base' => getenv_docker('WORDPRESS_PLUGIN_WGL_BASE_URL', 'https://widgetlogic.org')",
            "confidence": "high"
        },
        {
            "pattern": "widget_logic_getServiceVersion",
            "kind": "ioc:code_pattern",
            "file": "widget_cfg.php",
            "line": 18,
            "snippet": "if (!function_exists('widget_logic_getServiceVersion')) {",
            "confidence": "high"
        },
        {
            "pattern": "widget_logic_getServiceVersion",
            "kind": "ioc:code_pattern",
            "file": "widget_cfg.php",
            "line": 19,
            "snippet": "function widget_logic_getServiceVersion()",
            "confidence": "high"
        },
        {
            "pattern": "widget_logic_getServiceVersion",
            "kind": "ioc:code_pattern",
            "file": "widget_cfg.php",
            "line": 28,
            "snippet": "'ver' => widget_logic_getServiceVersion(),",
            "confidence": "high"
        },
        {
            "pattern": "widgetlogic.org",
            "kind": "ioc:domain",
            "file": "WidgetLogicAdminConfig.php",
            "line": 72,
            "snippet": "* Also you can add our built-in widgets like Live Match and other that can refer to <a href=\"https://widgetlogic.org\">widgetlogic.org</a> data <br/>",
            "confidence": "high"
        },
        {
            "pattern": "live_match_widget",
            "kind": "ioc:code_pattern",
            "file": "block_widget/index.php",
            "line": 7,
            "snippet": "register_logic_live_match_widget_service();",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "widget.php",
            "line": 93,
            "snippet": "wp_register_script( 'widget-logic_live_match_widget', \"{$url}{$ver}/js/data.js?t={$t}\", array(), '6.0.9', true);",
            "confidence": "medium"
        },
        {
            "pattern": "widget-logic_live_match_widget",
            "kind": "ioc:code_pattern",
            "file": "widget.php",
            "line": 43,
            "snippet": "wp_enqueue_script('widget-logic_live_match_widget');",
            "confidence": "high"
        },
        {
            "pattern": "widget-logic_live_match_widget",
            "kind": "ioc:code_pattern",
            "file": "widget.php",
            "line": 86,
            "snippet": "if (!wp_script_is('widget-logic_live_match_widget', 'registered')) {",
            "confidence": "high"
        },
        {
            "pattern": "widget-logic_live_match_widget",
            "kind": "ioc:code_pattern",
            "file": "widget.php",
            "line": 93,
            "snippet": "wp_register_script( 'widget-logic_live_match_widget', \"{$url}{$ver}/js/data.js?t={$t}\", array(), '6.0.9', true);",
            "confidence": "high"
        },
        {
            "pattern": "live_match_widget",
            "kind": "ioc:code_pattern",
            "file": "widget.php",
            "line": 4,
            "snippet": "class Widget_Logic_Live_Match_Widget extends WP_Widget {",
            "confidence": "medium"
        },
        {
            "pattern": "live_match_widget",
            "kind": "ioc:code_pattern",
            "file": "widget.php",
            "line": 12,
            "snippet": "'classname' => 'live_match_widget',",
            "confidence": "medium"
        }
    ]
}

{
    "committer": "essentialplugin",
    "member_since": "2025-05-12",
    "plugins_joined": 31,
    "spread_days": 281,
    "earliest_join": "2025-05-15 07:40:24",
    "latest_join": "2026-02-20 19:27:33",
    "combined_installs": 180000,
    "sample_plugins": [
        {
            "slug": "popup-anything-on-click",
            "active_installs": 30000,
            "first_commit_at": "2025-09-07 13:23:54"
        },
        {
            "slug": "wp-logo-showcase-responsive-slider-slider",
            "active_installs": 30000,
            "first_commit_at": "2025-09-07 14:26:12"
        },
        {
            "slug": "countdown-timer-ultimate",
            "active_installs": 20000,
            "first_commit_at": "2025-08-08 17:09:06"
        },
        {
            "slug": "wp-responsive-recent-post-slider",
            "active_installs": 20000,
            "first_commit_at": "2025-11-12 15:49:12"
        },
        {
            "slug": "sp-news-and-widget",
            "active_installs": 10000,
            "first_commit_at": "2025-11-12 14:44:05"
        },
        {
            "slug": "wp-slick-slider-and-image-carousel",
            "active_installs": 10000,
            "first_commit_at": "2025-11-12 16:33:07"
        },
        {
            "slug": "album-and-image-gallery-plus-lightbox",
            "active_installs": 9000,
            "first_commit_at": "2025-11-12 11:35:26"
        },
        {
            "slug": "wp-testimonial-with-widget",
            "active_installs": 9000,
            "first_commit_at": "2025-11-12 13:45:04"
        },
        {
            "slug": "wp-blog-and-widgets",
            "active_installs": 8000,
            "first_commit_at": "2025-11-12 14:05:04"
        },
        {
            "slug": "meta-slider-and-carousel-with-lightbox",
            "active_installs": 5000,
            "first_commit_at": "2025-11-12 12:47:54"
        }
    ]
}