Events

800 events (filtered). · Last rule pass 11h ago. · 4 open / 4,675 resolved overall.

State: Open Resolved All
Critical code_scan_delta Ocean Extra (500k+ installs) Resolved 5mo ago
Slugocean-extra
Previous version2.5.5
Current version2.5.5
New findings
PatternKindFileLineSnippetConfidence
unserialize_after_remote_callbuiltinincludes/panel/classes/importers/class-settings-importer.php25L24: $raw = file_get_contents( $file ); → L25: $data = @unserialize( $raw, [ 'allowed_classes' => false ] );high
unserialize_after_remote_callbuiltinincludes/onboarding/class/importer/theme-settings.php38L32: $raw = file_get_contents( $file ); → L38: $data = @unserialize( $raw, [ 'allowed_classes' => false ] );high
unserialize_after_remote_callbuiltinincludes/themepanel/theme-panel.php434L433: $raw = file_get_contents( $file ); → L434: $data = @unserialize( $raw, [ 'allowed_classes' => false ] );high
New finding count3
View raw JSON
{
    "slug": "ocean-extra",
    "previous_version": "2.5.5",
    "current_version": "2.5.5",
    "new_findings": [
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "includes/panel/classes/importers/class-settings-importer.php",
            "line": 25,
            "snippet": "L24: $raw  = file_get_contents( $file );  \u2192  L25: $data = @unserialize( $raw, [ 'allowed_classes' => false ]  );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "includes/onboarding/class/importer/theme-settings.php",
            "line": 38,
            "snippet": "L32: $raw = file_get_contents( $file );  \u2192  L38: $data = @unserialize( $raw, [ 'allowed_classes' => false ] );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "includes/themepanel/theme-panel.php",
            "line": 434,
            "snippet": "L433: $raw  = file_get_contents( $file );  \u2192  L434: $data = @unserialize( $raw, [ 'allowed_classes' => false ]  );",
            "confidence": "high"
        }
    ],
    "new_finding_count": 3
}
Critical code_scan_delta PixelYourSite – Your smart PIXEL (TAG) & API Manager (400k+ installs) Resolved 5mo ago
Slugpixelyoursite
Previous version11.2.0.4
Current version11.2.0.4
New findings
PatternKindFileLineSnippetConfidence
unserialize_after_remote_callbuiltinincludes/class-plugin-updater.php401L393: $request = wp_remote_post( $this->api_url, → L401: $request->sections = maybe_unserialize( $request->sections );high
unserialize_after_remote_callbuiltinincludes/class-plugin-updater.php405L393: $request = wp_remote_post( $this->api_url, → L405: $request->banners = maybe_unserialize( $request->banners );high
unserialize_after_remote_callbuiltinincludes/class-plugin-updater.php463L454: $request = wp_remote_post( $this->api_url, → L463: $version_info->sections = maybe_unserialize( $version_info->sections );high
New finding count3
View raw JSON
{
    "slug": "pixelyoursite",
    "previous_version": "11.2.0.4",
    "current_version": "11.2.0.4",
    "new_findings": [
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "includes/class-plugin-updater.php",
            "line": 401,
            "snippet": "L393: $request    = wp_remote_post( $this->api_url,  \u2192  L401: $request->sections = maybe_unserialize( $request->sections );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "includes/class-plugin-updater.php",
            "line": 405,
            "snippet": "L393: $request    = wp_remote_post( $this->api_url,  \u2192  L405: $request->banners = maybe_unserialize( $request->banners );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "includes/class-plugin-updater.php",
            "line": 463,
            "snippet": "L454: $request    = wp_remote_post( $this->api_url,  \u2192  L463: $version_info->sections = maybe_unserialize( $version_info->sections );",
            "confidence": "high"
        }
    ],
    "new_finding_count": 3
}
Slugninja-forms
Previous version3.14.2
Current version3.14.2
New findings
PatternKindFileLineSnippetConfidence
unserialize_after_remote_callbuiltinincludes/Admin/Menus/ImportExport.php128L111: $import = file_get_contents( $_FILES[ 'nf_import_fields' ][ 'tmp_name' ] ); → L128: $return = unserialize($serializedValue,['allowed_classes'=>false]);high
unserialize_after_remote_callbuiltinincludes/Integrations/EDD/EDD_SL_Plugin_Updater.php426L419: $request = wp_remote_post( $this->api_url, array( 'timeout' => 15, 'sslverify' => $ve → L426: $request->sections = maybe_unserialize( $request->sections );high
unserialize_after_remote_callbuiltinincludes/Integrations/EDD/EDD_SL_Plugin_Updater.php432L419: $request = wp_remote_post( $this->api_url, array( 'timeout' => 15, 'sslverify' => $ve → L432: $request->banners = maybe_unserialize( $request->banners );high
unserialize_after_remote_callbuiltinincludes/Integrations/EDD/EDD_SL_Plugin_Updater.php436L419: $request = wp_remote_post( $this->api_url, array( 'timeout' => 15, 'sslverify' => $ve → L436: $request->icons = maybe_unserialize( $request->icons );high
unserialize_after_remote_callbuiltinincludes/Integrations/EDD/EDD_SL_Plugin_Updater.php494L486: $request = wp_remote_post( $this->api_url, array( 'timeout' => 15, 'sslverify' => $v → L494: $version_info->sections = maybe_unserialize( $version_info->sections );high
New finding count5
View raw JSON
{
    "slug": "ninja-forms",
    "previous_version": "3.14.2",
    "current_version": "3.14.2",
    "new_findings": [
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "includes/Admin/Menus/ImportExport.php",
            "line": 128,
            "snippet": "L111: $import = file_get_contents( $_FILES[ 'nf_import_fields' ][ 'tmp_name' ] );  \u2192  L128: $return = unserialize($serializedValue,['allowed_classes'=>false]);",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "includes/Integrations/EDD/EDD_SL_Plugin_Updater.php",
            "line": 426,
            "snippet": "L419: $request    = wp_remote_post( $this->api_url, array( 'timeout' => 15, 'sslverify' => $ve  \u2192  L426: $request->sections = maybe_unserialize( $request->sections );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "includes/Integrations/EDD/EDD_SL_Plugin_Updater.php",
            "line": 432,
            "snippet": "L419: $request    = wp_remote_post( $this->api_url, array( 'timeout' => 15, 'sslverify' => $ve  \u2192  L432: $request->banners = maybe_unserialize( $request->banners );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "includes/Integrations/EDD/EDD_SL_Plugin_Updater.php",
            "line": 436,
            "snippet": "L419: $request    = wp_remote_post( $this->api_url, array( 'timeout' => 15, 'sslverify' => $ve  \u2192  L436: $request->icons = maybe_unserialize( $request->icons );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "includes/Integrations/EDD/EDD_SL_Plugin_Updater.php",
            "line": 494,
            "snippet": "L486: $request    = wp_remote_post( $this->api_url, array( 'timeout' => 15, 'sslverify' => $v  \u2192  L494: $version_info->sections = maybe_unserialize( $version_info->sections );",
            "confidence": "high"
        }
    ],
    "new_finding_count": 5
}
Slugpopup-maker
Previous version1.22.0
Current version1.22.0
New findings
PatternKindFileLineSnippetConfidence
unserialize_after_remote_callbuiltinclasses/Extension/Updater.php670L652: $request = wp_remote_get(// Uses wp_remote_post() in EDD Sample. → L670: $request->sections = maybe_unserialize( $request->sections );high
unserialize_after_remote_callbuiltinclasses/Extension/Updater.php676L667: $request = json_decode( wp_remote_retrieve_body( $request ) ); → L676: $request->banners = maybe_unserialize( $request->banners );high
unserialize_after_remote_callbuiltinclasses/Extension/Updater.php680L667: $request = json_decode( wp_remote_retrieve_body( $request ) ); → L680: $request->icons = maybe_unserialize( $request->icons );high
New finding count3
View raw JSON
{
    "slug": "popup-maker",
    "previous_version": "1.22.0",
    "current_version": "1.22.0",
    "new_findings": [
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "classes/Extension/Updater.php",
            "line": 670,
            "snippet": "L652: $request = wp_remote_get(// Uses wp_remote_post() in EDD Sample.  \u2192  L670: $request->sections = maybe_unserialize( $request->sections );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "classes/Extension/Updater.php",
            "line": 676,
            "snippet": "L667: $request = json_decode( wp_remote_retrieve_body( $request ) );  \u2192  L676: $request->banners = maybe_unserialize( $request->banners );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "classes/Extension/Updater.php",
            "line": 680,
            "snippet": "L667: $request = json_decode( wp_remote_retrieve_body( $request ) );  \u2192  L680: $request->icons = maybe_unserialize( $request->icons );",
            "confidence": "high"
        }
    ],
    "new_finding_count": 3
}
Critical code_scan_delta Polylang (800k+ installs) Resolved 5mo ago
Slugpolylang
Previous version3.8.2
Current version3.8.2
New findings
PatternKindFileLineSnippetConfidence
unserialize_after_remote_callbuiltinsrc/install/plugin-updater.php635L617: $request = wp_remote_post( → L635: $request->sections = maybe_unserialize( $request->sections );high
unserialize_after_remote_callbuiltinsrc/install/plugin-updater.php641L632: $request = json_decode( wp_remote_retrieve_body( $request ) ); → L641: $request->banners = maybe_unserialize( $request->banners );high
unserialize_after_remote_callbuiltinsrc/install/plugin-updater.php645L632: $request = json_decode( wp_remote_retrieve_body( $request ) ); → L645: $request->icons = maybe_unserialize( $request->icons );high
New finding count3
View raw JSON
{
    "slug": "polylang",
    "previous_version": "3.8.2",
    "current_version": "3.8.2",
    "new_findings": [
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "src/install/plugin-updater.php",
            "line": 635,
            "snippet": "L617: $request = wp_remote_post(  \u2192  L635: $request->sections = maybe_unserialize( $request->sections );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "src/install/plugin-updater.php",
            "line": 641,
            "snippet": "L632: $request = json_decode( wp_remote_retrieve_body( $request ) );  \u2192  L641: $request->banners = maybe_unserialize( $request->banners );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "src/install/plugin-updater.php",
            "line": 645,
            "snippet": "L632: $request = json_decode( wp_remote_retrieve_body( $request ) );  \u2192  L645: $request->icons = maybe_unserialize( $request->icons );",
            "confidence": "high"
        }
    ],
    "new_finding_count": 3
}
Critical code_scan_delta W3 Total Cache (900k+ installs) Resolved 5mo ago
Slugw3-total-cache
Previous version2.9.4
Current version2.9.4
New findings
PatternKindFileLineSnippetConfidence
unserialize_after_remote_callbuiltinlib/Minify/Minify/Cache/File.php148L146: $data = @file_get_contents($path . '_meta'); → L148: $data = @unserialize($data);high
unserialize_after_remote_callbuiltinlib/Minify/Minify/Cache/File.php295L291: $data = @file_get_contents($full_path); → L295: $data = @unserialize($data);high
New finding count2
View raw JSON
{
    "slug": "w3-total-cache",
    "previous_version": "2.9.4",
    "current_version": "2.9.4",
    "new_findings": [
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "lib/Minify/Minify/Cache/File.php",
            "line": 148,
            "snippet": "L146: $data = @file_get_contents($path . '_meta');  \u2192  L148: $data = @unserialize($data);",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "lib/Minify/Minify/Cache/File.php",
            "line": 295,
            "snippet": "L291: $data = @file_get_contents($full_path);  \u2192  L295: $data = @unserialize($data);",
            "confidence": "high"
        }
    ],
    "new_finding_count": 2
}
Critical code_scan_delta Widgets for Google Reviews (1M+ installs) Resolved 5mo ago
Slugwp-reviews-plugin-for-google
Previous version13.2.9
Current version13.2.9
New findings
PatternKindFileLineSnippetConfidence
unserialize_after_remote_callbuiltintrustindex-plugin.class.php7,088L7078: $wpResponse = wp_remote_post( → L7088: $wpRepoResponse = unserialize(wp_remote_retrieve_body($wpResponse));high
New finding count1
View raw JSON
{
    "slug": "wp-reviews-plugin-for-google",
    "previous_version": "13.2.9",
    "current_version": "13.2.9",
    "new_findings": [
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "trustindex-plugin.class.php",
            "line": 7088,
            "snippet": "L7078: $wpResponse = wp_remote_post(  \u2192  L7088: $wpRepoResponse = unserialize(wp_remote_retrieve_body($wpResponse));",
            "confidence": "high"
        }
    ],
    "new_finding_count": 1
}
Critical code_scan_delta Complianz GDPR/CCPA Cookie Consent Banner (1M+ installs) Resolved 5mo ago
Slugcomplianz-gdpr
Previous version7.4.6
Current version7.4.6
New findings
PatternKindFileLineSnippetConfidence
unserialize_after_remote_callbuiltinupgrade/upgrade-to-pro.php285L279: $request = wp_remote_post( $this->api_url, array( 'timeout' => 15, 'sslverify' => tr → L285: $request->sections = maybe_unserialize( $request->sections );high
unserialize_after_remote_callbuiltinupgrade/upgrade-to-pro.php291L279: $request = wp_remote_post( $this->api_url, array( 'timeout' => 15, 'sslverify' => tr → L291: $request->banners = maybe_unserialize( $request->banners );high
unserialize_after_remote_callbuiltinupgrade/upgrade-to-pro.php295L279: $request = wp_remote_post( $this->api_url, array( 'timeout' => 15, 'sslverify' => tr → L295: $request->icons = maybe_unserialize( $request->icons );high
New finding count3
View raw JSON
{
    "slug": "complianz-gdpr",
    "previous_version": "7.4.6",
    "current_version": "7.4.6",
    "new_findings": [
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "upgrade/upgrade-to-pro.php",
            "line": 285,
            "snippet": "L279: $request    = wp_remote_post( $this->api_url, array( 'timeout' => 15, 'sslverify' => tr  \u2192  L285: $request->sections = maybe_unserialize( $request->sections );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "upgrade/upgrade-to-pro.php",
            "line": 291,
            "snippet": "L279: $request    = wp_remote_post( $this->api_url, array( 'timeout' => 15, 'sslverify' => tr  \u2192  L291: $request->banners = maybe_unserialize( $request->banners );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "upgrade/upgrade-to-pro.php",
            "line": 295,
            "snippet": "L279: $request    = wp_remote_post( $this->api_url, array( 'timeout' => 15, 'sslverify' => tr  \u2192  L295: $request->icons = maybe_unserialize( $request->icons );",
            "confidence": "high"
        }
    ],
    "new_finding_count": 3
}
Critical code_scan_delta MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) (2M+ installs) Resolved 5mo ago
Sluggoogle-analytics-for-wordpress
Previous version10.1.3
Current version10.1.3
New findings
PatternKindFileLineSnippetConfidence
unserialize_after_remote_callbuiltinincludes/gutenberg/headline-tool/phpinsight/lib/PHPInsight/Sentiment.php230L229: $temp = file_get_contents( $fn ); → L230: $words = unserialize( trim( $temp ) );high
unserialize_after_remote_callbuiltinincludes/gutenberg/headline-tool/phpinsight/lib/PHPInsight/Sentiment.php360L359: $temp = file_get_contents( $fn ); → L360: $words = unserialize( trim( $temp ) );high
New finding count2
View raw JSON
{
    "slug": "google-analytics-for-wordpress",
    "previous_version": "10.1.3",
    "current_version": "10.1.3",
    "new_findings": [
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "includes/gutenberg/headline-tool/phpinsight/lib/PHPInsight/Sentiment.php",
            "line": 230,
            "snippet": "L229: $temp  = file_get_contents( $fn );  \u2192  L230: $words = unserialize( trim( $temp ) );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "includes/gutenberg/headline-tool/phpinsight/lib/PHPInsight/Sentiment.php",
            "line": 360,
            "snippet": "L359: $temp  = file_get_contents( $fn );  \u2192  L360: $words = unserialize( trim( $temp ) );",
            "confidence": "high"
        }
    ],
    "new_finding_count": 2
}
Critical code_scan_delta Essential Addons for Elementor – Popular Elementor Templates & Widgets (1M+ installs) Resolved 5mo ago
Slugessential-addons-for-elementor-lite
Previous version6.6.2
Current version6.6.2
New findings
PatternKindFileLineSnippetConfidence
unserialize_after_remote_callbuiltinincludes/Classes/WPDeveloper_Plugin_Installer.php76L57: $response = wp_remote_post( → L76: return unserialize(wp_remote_retrieve_body($response));high
New finding count1
View raw JSON
{
    "slug": "essential-addons-for-elementor-lite",
    "previous_version": "6.6.2",
    "current_version": "6.6.2",
    "new_findings": [
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "includes/Classes/WPDeveloper_Plugin_Installer.php",
            "line": 76,
            "snippet": "L57: $response = wp_remote_post(  \u2192  L76: return unserialize(wp_remote_retrieve_body($response));",
            "confidence": "high"
        }
    ],
    "new_finding_count": 1
}
Critical code_scan_delta UpdraftPlus: WP Backup & Migration Plugin (4M+ installs) Resolved 5mo ago
Slugupdraftplus
Previous version1.26.3
Current version1.26.3
New findings
PatternKindFileLineSnippetConfidence
unserialize_after_remote_callbuiltinbackup.php3,604L3604: $var = $updraftplus->unserialize(file_get_contents($cache_file_base.'-info.tmp')); → L3604: $var = $updraftplus->unserialize(file_get_contents($cache_file_base.'-info.tmp'));high
New finding count1
View raw JSON
{
    "slug": "updraftplus",
    "previous_version": "1.26.3",
    "current_version": "1.26.3",
    "new_findings": [
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "backup.php",
            "line": 3604,
            "snippet": "L3604: $var = $updraftplus->unserialize(file_get_contents($cache_file_base.'-info.tmp'));  \u2192  L3604: $var = $updraftplus->unserialize(file_get_contents($cache_file_base.'-info.tmp'));",
            "confidence": "high"
        }
    ],
    "new_finding_count": 1
}
Critical code_scan_delta Jetpack – WP Security, Backup, Speed, & Growth (3M+ installs) Resolved 5mo ago
Slugjetpack
Previous version15.7.1
Current version15.7.1
New findings
PatternKindFileLineSnippetConfidence
unserialize_after_remote_callbuiltinjetpack_vendor/automattic/jetpack-waf/src/class-waf-stats.php151L137: $body = json_decode( wp_remote_retrieve_body( $response ) ); → L151: return maybe_unserialize( get_option( 'jetpack_protect_global_stats' ) );high
unserialize_after_remote_callbuiltinjson-endpoints/jetpack/class.jetpack-json-api-themes-install-endpoint.php170L169: $response = wp_remote_post( $url, $args ); → L170: $theme_data = unserialize( $response['body'] ); // phpcs:ignore WordPress.PHP.Discouraghigh
New finding count2
View raw JSON
{
    "slug": "jetpack",
    "previous_version": "15.7.1",
    "current_version": "15.7.1",
    "new_findings": [
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "jetpack_vendor/automattic/jetpack-waf/src/class-waf-stats.php",
            "line": 151,
            "snippet": "L137: $body = json_decode( wp_remote_retrieve_body( $response ) );  \u2192  L151: return maybe_unserialize( get_option( 'jetpack_protect_global_stats' ) );",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "json-endpoints/jetpack/class.jetpack-json-api-themes-install-endpoint.php",
            "line": 170,
            "snippet": "L169: $response   = wp_remote_post( $url, $args );  \u2192  L170: $theme_data = unserialize( $response['body'] ); // phpcs:ignore WordPress.PHP.Discourag",
            "confidence": "high"
        }
    ],
    "new_finding_count": 2
}
Slugwpforms-lite
Previous version1.10.0.4
Current version1.10.0.4
New findings
PatternKindFileLineSnippetConfidence
unserialize_after_remote_callbuiltinvendor_prefixed/ezyang/htmlpurifier/library/HTMLPurifier/DefinitionCache/Serializer.php71L71: return \unserialize(\file_get_contents($file)); → L71: return \unserialize(\file_get_contents($file));high
unserialize_after_remote_callbuiltinvendor_prefixed/ezyang/htmlpurifier/library/HTMLPurifier/ConfigSchema.php69L68: $contents = \file_get_contents(\WPForms\Vendor\HTMLPURIFIER_PREFIX . '/HTMLPurifie → L69: $r = \unserialize($contents);high
unserialize_after_remote_callbuiltinvendor_prefixed/ezyang/htmlpurifier/library/HTMLPurifier/EntityLookup.php27L27: $this->table = \unserialize(\file_get_contents($file)); → L27: $this->table = \unserialize(\file_get_contents($file));high
New finding count3
View raw JSON
{
    "slug": "wpforms-lite",
    "previous_version": "1.10.0.4",
    "current_version": "1.10.0.4",
    "new_findings": [
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "vendor_prefixed/ezyang/htmlpurifier/library/HTMLPurifier/DefinitionCache/Serializer.php",
            "line": 71,
            "snippet": "L71: return \\unserialize(\\file_get_contents($file));  \u2192  L71: return \\unserialize(\\file_get_contents($file));",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "vendor_prefixed/ezyang/htmlpurifier/library/HTMLPurifier/ConfigSchema.php",
            "line": 69,
            "snippet": "L68: $contents = \\file_get_contents(\\WPForms\\Vendor\\HTMLPURIFIER_PREFIX . '/HTMLPurifie  \u2192  L69: $r = \\unserialize($contents);",
            "confidence": "high"
        },
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "vendor_prefixed/ezyang/htmlpurifier/library/HTMLPurifier/EntityLookup.php",
            "line": 27,
            "snippet": "L27: $this->table = \\unserialize(\\file_get_contents($file));  \u2192  L27: $this->table = \\unserialize(\\file_get_contents($file));",
            "confidence": "high"
        }
    ],
    "new_finding_count": 3
}
Slugpopup-anything-on-click
Previous version2.9.1.1
Current version2.9.1.1
New findings
PatternKindFileLineSnippetConfidence
unserialize_after_remote_callbuiltinwpos-analytics/includes/class-anylc-admin.php696L690: $data = @file_get_contents($url); → L696: $info = @unserialize($data);high
New finding count1
View raw JSON
{
    "slug": "popup-anything-on-click",
    "previous_version": "2.9.1.1",
    "current_version": "2.9.1.1",
    "new_findings": [
        {
            "pattern": "unserialize_after_remote_call",
            "kind": "builtin",
            "file": "wpos-analytics/includes/class-anylc-admin.php",
            "line": 696,
            "snippet": "L690: $data = @file_get_contents($url);  \u2192  L696: $info = @unserialize($data);",
            "confidence": "high"
        }
    ],
    "new_finding_count": 1
}
Critical author_younger_than_plugin ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor (1M+ installs) Resolved 5mo ago
Slugelementskit-lite
Author slugroxnor
Author display nameRoxnor
Author employerRoxnor
Author member since2025-08-04
Earliest plugin commit2019-07-05 17:37:33
Plugin age at author join2,221
Author age now days263
Prior committersplugin-master ataurr wpmet xpeedstudio
Active installs2,000,000
View raw JSON
{
    "slug": "elementskit-lite",
    "author_slug": "roxnor",
    "author_display_name": "Roxnor",
    "author_employer": "Roxnor",
    "author_member_since": "2025-08-04",
    "earliest_plugin_commit": "2019-07-05 17:37:33",
    "plugin_age_at_author_join": 2221,
    "author_age_now_days": 263,
    "prior_committers": [
        "plugin-master",
        "ataurr",
        "wpmet",
        "xpeedstudio"
    ],
    "active_installs": 2000000
}
Slugmetform
Author slugroxnor
Author display nameRoxnor
Author employerRoxnor
Author member since2025-08-04
Earliest plugin commit2019-08-27 22:31:06
Plugin age at author join2,168
Author age now days263
Prior committersplugin-master ataurr wpmet xpeedstudio
Active installs600,000
View raw JSON
{
    "slug": "metform",
    "author_slug": "roxnor",
    "author_display_name": "Roxnor",
    "author_employer": "Roxnor",
    "author_member_since": "2025-08-04",
    "earliest_plugin_commit": "2019-08-27 22:31:06",
    "plugin_age_at_author_join": 2168,
    "author_age_now_days": 263,
    "prior_committers": [
        "plugin-master",
        "ataurr",
        "wpmet",
        "xpeedstudio"
    ],
    "active_installs": 600000
}
Slugshopengine
Author slugroxnor
Author display nameRoxnor
Author employerRoxnor
Author member since2025-08-04
Earliest plugin commit2021-03-18 19:10:43
Plugin age at author join1,599
Author age now days263
Prior committersplugin-master ataurr wpmet xpeedstudio
Active installs100,000
View raw JSON
{
    "slug": "shopengine",
    "author_slug": "roxnor",
    "author_display_name": "Roxnor",
    "author_employer": "Roxnor",
    "author_member_since": "2025-08-04",
    "earliest_plugin_commit": "2021-03-18 19:10:43",
    "plugin_age_at_author_join": 1599,
    "author_age_now_days": 263,
    "prior_committers": [
        "plugin-master",
        "ataurr",
        "wpmet",
        "xpeedstudio"
    ],
    "active_installs": 100000
}
Critical new_committer_young_account Portugal States (Distritos) for WooCommerce (5k+ installs) Resolved 5mo ago
Slugportugal-states-distritos-for-woocommerce
Committernakedcatplugins
Display nameNaked Cat Plugins
Member since2025-04-10
First commit at2025-04-14 08:01:58
Account age at first commit4
Commit count16
Active installs5,000
View raw JSON
{
    "slug": "portugal-states-distritos-for-woocommerce",
    "committer": "nakedcatplugins",
    "display_name": "Naked Cat Plugins",
    "member_since": "2025-04-10",
    "first_commit_at": "2025-04-14 08:01:58",
    "account_age_at_first_commit": 4,
    "commit_count": 16,
    "active_installs": 5000
}
Critical new_committer_young_account UpsellWP – Upsell and Related Products Offers for WooCommerce (5k+ installs) Resolved 5mo ago
Slugcheckout-upsell-and-order-bumps
Committerupsellwpdev
Display nameupsellwpdev
Member since2024-07-02
First commit at2024-07-17 05:00:37
Account age at first commit15
Commit count33
Active installs5,000
View raw JSON
{
    "slug": "checkout-upsell-and-order-bumps",
    "committer": "upsellwpdev",
    "display_name": "upsellwpdev",
    "member_since": "2024-07-02",
    "first_commit_at": "2024-07-17 05:00:37",
    "account_age_at_first_commit": 15,
    "commit_count": 33,
    "active_installs": 5000
}
Critical new_committer_young_account Site Favicon (5k+ installs) Resolved 5mo ago
Slugsite-favicon
Committerwebguyio
Display nameWeb Guy
Member since2025-09-01
First commit at2025-09-01 02:16:24
Account age at first commit0
Commit count3
Active installs5,000
View raw JSON
{
    "slug": "site-favicon",
    "committer": "webguyio",
    "display_name": "Web Guy",
    "member_since": "2025-09-01",
    "first_commit_at": "2025-09-01 02:16:24",
    "account_age_at_first_commit": 0,
    "commit_count": 3,
    "active_installs": 5000
}
Critical new_committer_young_account NIF (Num. de Contribuinte Português) for WooCommerce (5k+ installs) Resolved 5mo ago
Slugnif-num-de-contribuinte-portugues-for-woocommerce
Committernakedcatplugins
Display nameNaked Cat Plugins
Member since2025-04-10
First commit at2025-04-14 07:40:08
Account age at first commit4
Commit count10
Active installs5,000
View raw JSON
{
    "slug": "nif-num-de-contribuinte-portugues-for-woocommerce",
    "committer": "nakedcatplugins",
    "display_name": "Naked Cat Plugins",
    "member_since": "2025-04-10",
    "first_commit_at": "2025-04-14 07:40:08",
    "account_age_at_first_commit": 4,
    "commit_count": 10,
    "active_installs": 5000
}
Critical bulk_committer_takeover Getwid – Gutenberg Blocks (50k+ installs) Resolved 5mo ago
Committerjetmonsters
Member since2021-10-08
Plugins joined11
Spread days26
Earliest join2021-10-27 13:11:42
Latest join2021-11-22 23:25:34
Combined installs198,000
Sample plugins
SlugActive installsFirst commit at
getwid50,0002021-10-27 14:13:09
jetsticky-for-elementor30,0002021-11-16 12:56:44
mp-timetable30,0002021-10-28 14:48:12
stratum30,0002021-10-27 13:11:42
jetwidgets-for-elementor10,0002021-11-18 11:56:55
motopress-hotel-booking-lite10,0002021-11-11 09:25:29
mphb-elementor10,0002021-11-22 23:16:49
mphb-styles10,0002021-11-22 23:25:34
jetwoo-widgets-for-elementor8,0002021-11-18 12:01:50
another-mailchimp-widget5,0002021-11-22 22:37:15
View raw JSON
{
    "committer": "jetmonsters",
    "member_since": "2021-10-08",
    "plugins_joined": 11,
    "spread_days": 26,
    "earliest_join": "2021-10-27 13:11:42",
    "latest_join": "2021-11-22 23:25:34",
    "combined_installs": 198000,
    "sample_plugins": [
        {
            "slug": "getwid",
            "active_installs": 50000,
            "first_commit_at": "2021-10-27 14:13:09"
        },
        {
            "slug": "jetsticky-for-elementor",
            "active_installs": 30000,
            "first_commit_at": "2021-11-16 12:56:44"
        },
        {
            "slug": "mp-timetable",
            "active_installs": 30000,
            "first_commit_at": "2021-10-28 14:48:12"
        },
        {
            "slug": "stratum",
            "active_installs": 30000,
            "first_commit_at": "2021-10-27 13:11:42"
        },
        {
            "slug": "jetwidgets-for-elementor",
            "active_installs": 10000,
            "first_commit_at": "2021-11-18 11:56:55"
        },
        {
            "slug": "motopress-hotel-booking-lite",
            "active_installs": 10000,
            "first_commit_at": "2021-11-11 09:25:29"
        },
        {
            "slug": "mphb-elementor",
            "active_installs": 10000,
            "first_commit_at": "2021-11-22 23:16:49"
        },
        {
            "slug": "mphb-styles",
            "active_installs": 10000,
            "first_commit_at": "2021-11-22 23:25:34"
        },
        {
            "slug": "jetwoo-widgets-for-elementor",
            "active_installs": 8000,
            "first_commit_at": "2021-11-18 12:01:50"
        },
        {
            "slug": "another-mailchimp-widget",
            "active_installs": 5000,
            "first_commit_at": "2021-11-22 22:37:15"
        }
    ]
}
Critical new_committer_young_account Plugin Compatibility Checker (9k+ installs) Resolved 5mo ago
Slugplugin-compatibility-checker
Committercompatshield
Display namecompatshield
Member since2025-09-09
First commit at2025-10-02 07:55:29
Account age at first commit23
Commit count12
Active installs8,000
View raw JSON
{
    "slug": "plugin-compatibility-checker",
    "committer": "compatshield",
    "display_name": "compatshield",
    "member_since": "2025-09-09",
    "first_commit_at": "2025-10-02 07:55:29",
    "account_age_at_first_commit": 23,
    "commit_count": 12,
    "active_installs": 8000
}
Slugmultibanco-ifthen-software-gateway-for-woocommerce
Committernakedcatplugins
Display nameNaked Cat Plugins
Member since2025-04-10
First commit at2025-04-12 12:11:29
Account age at first commit2
Commit count26
Active installs8,000
View raw JSON
{
    "slug": "multibanco-ifthen-software-gateway-for-woocommerce",
    "committer": "nakedcatplugins",
    "display_name": "Naked Cat Plugins",
    "member_since": "2025-04-10",
    "first_commit_at": "2025-04-12 12:11:29",
    "account_age_at_first_commit": 2,
    "commit_count": 26,
    "active_installs": 8000
}
Critical new_committer_young_account Document Embedder Addons for Elementor – Embed Documents in Elementor Websites (6k+ installs) Resolved 5mo ago
Slugdocument-embedder-addons-for-elementor
Committerhazrath
Display namehazrath
Member since2025-12-02
First commit at2025-12-02 10:16:08
Account age at first commit0
Commit count28
Active installs6,000
View raw JSON
{
    "slug": "document-embedder-addons-for-elementor",
    "committer": "hazrath",
    "display_name": "hazrath",
    "member_since": "2025-12-02",
    "first_commit_at": "2025-12-02 10:16:08",
    "account_age_at_first_commit": 0,
    "commit_count": 28,
    "active_installs": 6000
}
Critical new_committer_young_account Advance Custom HTML – Show Off Code Snippets with Live Preview (10k+ installs) Resolved 5mo ago
Slugadvance-custom-html
Committertaninrahman
Display nameTanin Rahman
Member since2025-01-25
First commit at2025-01-26 04:46:28
Account age at first commit1
Commit count37
Active installs10,000
View raw JSON
{
    "slug": "advance-custom-html",
    "committer": "taninrahman",
    "display_name": "Tanin Rahman",
    "member_since": "2025-01-25",
    "first_commit_at": "2025-01-26 04:46:28",
    "account_age_at_first_commit": 1,
    "commit_count": 37,
    "active_installs": 10000
}
Critical new_committer_young_account Raptive Ads (6k+ installs) Resolved 5mo ago
Slugadthrive-ads
Committerraptive
Display nameRaptive
Member since2025-04-18
First commit at2025-04-22 19:46:11
Account age at first commit4
Commit count16
Active installs6,000
View raw JSON
{
    "slug": "adthrive-ads",
    "committer": "raptive",
    "display_name": "Raptive",
    "member_since": "2025-04-18",
    "first_commit_at": "2025-04-22 19:46:11",
    "account_age_at_first_commit": 4,
    "commit_count": 16,
    "active_installs": 6000
}
Critical new_committer_young_account Create (6k+ installs) Resolved 5mo ago
Slugmediavine-create
Committermischiefmarmot
Display namemischiefmarmot
Member since2025-08-06
First commit at2025-10-30 13:06:18
Account age at first commit85
Commit count38
Active installs6,000
View raw JSON
{
    "slug": "mediavine-create",
    "committer": "mischiefmarmot",
    "display_name": "mischiefmarmot",
    "member_since": "2025-08-06",
    "first_commit_at": "2025-10-30 13:06:18",
    "account_age_at_first_commit": 85,
    "commit_count": 38,
    "active_installs": 6000
}
Critical new_committer_young_account MainWP Key Maker (4k+ installs) Resolved 5mo ago
Slugmainwp-key-maker
Committerthanghoang
Display namethanghoang
Member since2024-06-27
First commit at2024-06-27 12:31:45
Account age at first commit0
Commit count10
Active installs5,000
View raw JSON
{
    "slug": "mainwp-key-maker",
    "committer": "thanghoang",
    "display_name": "thanghoang",
    "member_since": "2024-06-27",
    "first_commit_at": "2024-06-27 12:31:45",
    "account_age_at_first_commit": 0,
    "commit_count": 10,
    "active_installs": 5000
}
Critical new_committer_young_account Easy Appointments (10k+ installs) Resolved 5mo ago
Slugeasy-appointments
Committereasyappointments
Display nameEasy Appointments
Member since2025-01-25
First commit at2025-01-28 10:58:28
Account age at first commit3
Commit count62
Active installs10,000
View raw JSON
{
    "slug": "easy-appointments",
    "committer": "easyappointments",
    "display_name": "Easy Appointments",
    "member_since": "2025-01-25",
    "first_commit_at": "2025-01-28 10:58:28",
    "account_age_at_first_commit": 3,
    "commit_count": 62,
    "active_installs": 10000
}
Critical domain_younger_than_plugin Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more (500k+ installs) Resolved 5mo ago
Slugeasy-wp-smtp
Domaineasywpsmtpapi.com
Domain sourcec2_http_call
Domain registered at2024-10-01
Plugin earliest commit2013-04-16 18:52:05
Plugin latest release2026-04-01 13:24:50
Gap days4,185
Domain age at release547
Active installs500,000
View raw JSON
{
    "slug": "easy-wp-smtp",
    "domain": "easywpsmtpapi.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2024-10-01",
    "plugin_earliest_commit": "2013-04-16 18:52:05",
    "plugin_latest_release": "2026-04-01 13:24:50",
    "gap_days": 4185,
    "domain_age_at_release": 547,
    "active_installs": 500000
}
Critical domain_younger_than_plugin LightStart – Maintenance Mode, Coming Soon and Landing Page Builder (400k+ installs) Resolved 5mo ago
Slugwp-maintenance-mode
Domainthemeisle.link
Domain sourcec2_http_call
Domain registered at2025-05-13
Plugin earliest commit2010-02-25 12:09:07
Plugin latest release2026-04-06 09:39:25
Gap days5,555
Domain age at release328
Active installs500,000
View raw JSON
{
    "slug": "wp-maintenance-mode",
    "domain": "themeisle.link",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-05-13",
    "plugin_earliest_commit": "2010-02-25 12:09:07",
    "plugin_latest_release": "2026-04-06 09:39:25",
    "gap_days": 5555,
    "domain_age_at_release": 328,
    "active_installs": 500000
}
Critical domain_younger_than_plugin AMP (400k+ installs) Resolved 5mo ago
Slugamp
Domainfeedbackwp.com
Domain sourcec2_http_call
Domain registered at2023-12-27
Plugin earliest commit2015-10-07 14:34:35
Plugin latest release2025-04-10 16:53:52
Gap days3,002
Domain age at release470
Active installs400,000
View raw JSON
{
    "slug": "amp",
    "domain": "feedbackwp.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2023-12-27",
    "plugin_earliest_commit": "2015-10-07 14:34:35",
    "plugin_latest_release": "2025-04-10 16:53:52",
    "gap_days": 3002,
    "domain_age_at_release": 470,
    "active_installs": 400000
}
Critical domain_younger_than_plugin Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE (300k+ installs) Resolved 5mo ago
Slugotter-blocks
Domainthemeisle.link
Domain sourcec2_http_call
Domain registered at2025-05-13
Plugin earliest commit2018-10-16 23:15:10
Plugin latest release2026-04-01 13:09:05
Gap days2,400
Domain age at release323
Active installs300,000
View raw JSON
{
    "slug": "otter-blocks",
    "domain": "themeisle.link",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-05-13",
    "plugin_earliest_commit": "2018-10-16 23:15:10",
    "plugin_latest_release": "2026-04-01 13:09:05",
    "gap_days": 2400,
    "domain_age_at_release": 323,
    "active_installs": 300000
}
Critical domain_younger_than_plugin ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) (300k+ installs) Resolved 5mo ago
Sluggoogle-analytics-dashboard-for-wp
Domainexactmetrics-translations.com
Domain sourcec2_http_call
Domain registered at2025-01-06
Plugin earliest commit2014-07-09 06:06:05
Plugin latest release2026-04-22 16:28:26
Gap days3,833
Domain age at release471
Active installs300,000
View raw JSON
{
    "slug": "google-analytics-dashboard-for-wp",
    "domain": "exactmetrics-translations.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-01-06",
    "plugin_earliest_commit": "2014-07-09 06:06:05",
    "plugin_latest_release": "2026-04-22 16:28:26",
    "gap_days": 3833,
    "domain_age_at_release": 471,
    "active_installs": 300000
}
Critical domain_younger_than_plugin Redirection for Contact Form 7 (200k+ installs) Resolved 5mo ago
Slugwpcf7-redirect
Domainthemeisle.link
Domain sourcec2_http_call
Domain registered at2025-05-13
Plugin earliest commit2017-08-11 20:54:47
Plugin latest release2026-03-16 13:45:57
Gap days2,831
Domain age at release307
Active installs200,000
View raw JSON
{
    "slug": "wpcf7-redirect",
    "domain": "themeisle.link",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-05-13",
    "plugin_earliest_commit": "2017-08-11 20:54:47",
    "plugin_latest_release": "2026-03-16 13:45:57",
    "gap_days": 2831,
    "domain_age_at_release": 307,
    "active_installs": 200000
}
Critical domain_younger_than_plugin Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More (100k+ installs) Resolved 5mo ago
Slugthemeisle-companion
Domainthemeisle.link
Domain sourcec2_http_call
Domain registered at2025-05-13
Plugin earliest commit2016-11-07 23:25:27
Plugin latest release2025-12-05 07:52:32
Gap days3,108
Domain age at release206
Active installs100,000
View raw JSON
{
    "slug": "themeisle-companion",
    "domain": "themeisle.link",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-05-13",
    "plugin_earliest_commit": "2016-11-07 23:25:27",
    "plugin_latest_release": "2025-12-05 07:52:32",
    "gap_days": 3108,
    "domain_age_at_release": 206,
    "active_installs": 100000
}
Critical domain_younger_than_plugin Menu Icons by Themeisle – Add Icons to Navigation Menus (100k+ installs) Resolved 5mo ago
Slugmenu-icons
Domainthemeisle.link
Domain sourcec2_http_call
Domain registered at2025-05-13
Plugin earliest commit2014-02-19 07:04:03
Plugin latest release2026-04-23 12:06:30
Gap days4,100
Domain age at release345
Active installs100,000
View raw JSON
{
    "slug": "menu-icons",
    "domain": "themeisle.link",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-05-13",
    "plugin_earliest_commit": "2014-02-19 07:04:03",
    "plugin_latest_release": "2026-04-23 12:06:30",
    "gap_days": 4100,
    "domain_age_at_release": 345,
    "active_installs": 100000
}
Critical domain_younger_than_plugin Starter Sites & Templates by Neve (100k+ installs) Resolved 5mo ago
Slugtemplates-patterns-collection
Domainthemeisle.link
Domain sourcec2_http_call
Domain registered at2025-05-13
Plugin earliest commit2020-07-27 19:07:48
Plugin latest release2026-04-23 13:16:22
Gap days1,750
Domain age at release345
Active installs100,000
View raw JSON
{
    "slug": "templates-patterns-collection",
    "domain": "themeisle.link",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-05-13",
    "plugin_earliest_commit": "2020-07-27 19:07:48",
    "plugin_latest_release": "2026-04-23 13:16:22",
    "gap_days": 1750,
    "domain_age_at_release": 345,
    "active_installs": 100000
}
Critical domain_younger_than_plugin OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. (300k+ installs) Resolved 5mo ago
Slughost-webfonts-local
Domainyour-cdn.com
Domain sourcec2_http_call
Domain registered at2024-08-25
Plugin earliest commit2019-02-10 19:17:52
Plugin latest release2026-04-13 17:08:35
Gap days2,022
Domain age at release596
Active installs300,000
View raw JSON
{
    "slug": "host-webfonts-local",
    "domain": "your-cdn.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2024-08-25",
    "plugin_earliest_commit": "2019-02-10 19:17:52",
    "plugin_latest_release": "2026-04-13 17:08:35",
    "gap_days": 2022,
    "domain_age_at_release": 596,
    "active_installs": 300000
}
Critical domain_younger_than_plugin GTM4WP – A Google Tag Manager (GTM) plugin for WordPress (700k+ installs) Resolved 5mo ago
Slugduracelltomi-google-tag-manager
Domain51coolpad.com
Domain sourcec2_http_call
Domain registered at2025-04-08
Plugin earliest commit2013-09-22 17:52:53
Plugin latest release2025-12-15 14:45:45
Gap days4,215
Domain age at release251
Active installs700,000
View raw JSON
{
    "slug": "duracelltomi-google-tag-manager",
    "domain": "51coolpad.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-04-08",
    "plugin_earliest_commit": "2013-09-22 17:52:53",
    "plugin_latest_release": "2025-12-15 14:45:45",
    "gap_days": 4215,
    "domain_age_at_release": 251,
    "active_installs": 700000
}
Critical domain_younger_than_plugin GTM4WP – A Google Tag Manager (GTM) plugin for WordPress (700k+ installs) Resolved 5mo ago
Slugduracelltomi-google-tag-manager
Domainmuseui.com
Domain sourcec2_http_call
Domain registered at2024-06-13
Plugin earliest commit2013-09-22 17:52:53
Plugin latest release2025-12-15 14:45:45
Gap days3,916
Domain age at release550
Active installs700,000
View raw JSON
{
    "slug": "duracelltomi-google-tag-manager",
    "domain": "museui.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2024-06-13",
    "plugin_earliest_commit": "2013-09-22 17:52:53",
    "plugin_latest_release": "2025-12-15 14:45:45",
    "gap_days": 3916,
    "domain_age_at_release": 550,
    "active_installs": 700000
}
Critical domain_younger_than_plugin GTM4WP – A Google Tag Manager (GTM) plugin for WordPress (700k+ installs) Resolved 5mo ago
Slugduracelltomi-google-tag-manager
Domainn-keitai.com
Domain sourcec2_http_call
Domain registered at2024-02-04
Plugin earliest commit2013-09-22 17:52:53
Plugin latest release2025-12-15 14:45:45
Gap days3,786
Domain age at release680
Active installs700,000
View raw JSON
{
    "slug": "duracelltomi-google-tag-manager",
    "domain": "n-keitai.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2024-02-04",
    "plugin_earliest_commit": "2013-09-22 17:52:53",
    "plugin_latest_release": "2025-12-15 14:45:45",
    "gap_days": 3786,
    "domain_age_at_release": 680,
    "active_installs": 700000
}
Critical domain_younger_than_plugin GTM4WP – A Google Tag Manager (GTM) plugin for WordPress (700k+ installs) Resolved 5mo ago
Slugduracelltomi-google-tag-manager
Domainpanasonicbox.com
Domain sourcec2_http_call
Domain registered at2025-09-29
Plugin earliest commit2013-09-22 17:52:53
Plugin latest release2025-12-15 14:45:45
Gap days4,389
Domain age at release77
Active installs700,000
View raw JSON
{
    "slug": "duracelltomi-google-tag-manager",
    "domain": "panasonicbox.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-09-29",
    "plugin_earliest_commit": "2013-09-22 17:52:53",
    "plugin_latest_release": "2025-12-15 14:45:45",
    "gap_days": 4389,
    "domain_age_at_release": 77,
    "active_installs": 700000
}
Critical new_committer_young_account SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent (10k+ installs) Resolved 5mo ago
Slugsupportcandy
Committerpsmplugins
Display namePSM Plugins
Member since2025-05-28
First commit at2025-07-14 06:57:39
Account age at first commit47
Commit count18
Active installs10,000
View raw JSON
{
    "slug": "supportcandy",
    "committer": "psmplugins",
    "display_name": "PSM Plugins",
    "member_since": "2025-05-28",
    "first_commit_at": "2025-07-14 06:57:39",
    "account_age_at_first_commit": 47,
    "commit_count": 18,
    "active_installs": 10000
}
Critical new_committer_young_account Simple Like Page – Fast & Privacy-Friendly Page Embeds (10k+ installs) Resolved 5mo ago
Slugsimple-facebook-plugin
Committerilliaonline
Display nameIllia Kopturov
Member since2024-03-13
First commit at2024-05-24 22:14:05
Account age at first commit72
Commit count3
Active installs10,000
View raw JSON
{
    "slug": "simple-facebook-plugin",
    "committer": "illiaonline",
    "display_name": "Illia Kopturov",
    "member_since": "2024-03-13",
    "first_commit_at": "2024-05-24 22:14:05",
    "account_age_at_first_commit": 72,
    "commit_count": 3,
    "active_installs": 10000
}
Critical new_committer_young_account ClickCease Click Fraud Protection (10k+ installs) Resolved 5mo ago
Slugclickcease-click-fraud-protection
Committereranfl
Display nameeranfl
Member since2024-10-20
First commit at2025-01-12 17:31:29
Account age at first commit84
Commit count3
Active installs10,000
View raw JSON
{
    "slug": "clickcease-click-fraud-protection",
    "committer": "eranfl",
    "display_name": "eranfl",
    "member_since": "2024-10-20",
    "first_commit_at": "2025-01-12 17:31:29",
    "account_age_at_first_commit": 84,
    "commit_count": 3,
    "active_installs": 10000
}
Critical new_committer_young_account Cookie-Script.com (10k+ installs) Resolved 5mo ago
Slugcookie-script-com
Committercsarturas
Display namecsarturas
Member since2025-12-01
First commit at2025-12-10 10:37:27
Account age at first commit9
Commit count4
Active installs10,000
View raw JSON
{
    "slug": "cookie-script-com",
    "committer": "csarturas",
    "display_name": "csarturas",
    "member_since": "2025-12-01",
    "first_commit_at": "2025-12-10 10:37:27",
    "account_age_at_first_commit": 9,
    "commit_count": 4,
    "active_installs": 10000
}
Critical domain_younger_than_plugin Ultimate Addons for Elementor – Widgets, Templates, WooCommerce & Header Footer Builder (2M+ installs) Resolved 5mo ago
Slugheader-footer-elementor
Domainottokit.com
Domain sourcec2_http_call
Domain registered at2025-01-10
Plugin earliest commit2017-03-13 23:22:11
Plugin latest release2026-04-14 08:36:12
Gap days2,859
Domain age at release459
Active installs2,000,000
View raw JSON
{
    "slug": "header-footer-elementor",
    "domain": "ottokit.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-01-10",
    "plugin_earliest_commit": "2017-03-13 23:22:11",
    "plugin_latest_release": "2026-04-14 08:36:12",
    "gap_days": 2859,
    "domain_age_at_release": 459,
    "active_installs": 2000000
}
Critical domain_younger_than_plugin CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 (300k+ installs) Resolved 5mo ago
Slugcontact-form-7-honeypot
Domaincf7apps.com
Domain sourceplugin_uri
Domain registered at2024-11-28
Plugin earliest commit2011-06-28 12:09:39
Plugin latest release2026-04-23 05:02:22
Gap days4,901
Domain age at release511
Active installs300,000
View raw JSON
{
    "slug": "contact-form-7-honeypot",
    "domain": "cf7apps.com",
    "domain_source": "plugin_uri",
    "domain_registered_at": "2024-11-28",
    "plugin_earliest_commit": "2011-06-28 12:09:39",
    "plugin_latest_release": "2026-04-23 05:02:22",
    "gap_days": 4901,
    "domain_age_at_release": 511,
    "active_installs": 300000
}