Events

1,086 events (filtered). · Last rule pass 8h ago. · 30 open / 4,683 resolved overall.

State: Open Resolved All
High code_scan_match Schema & Structured Data for WP & AMP (100k+ installs) Resolved 4mo ago
Slugschema-and-structured-data-for-wp
Finding count1
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinmodules/reviews/class-saswp-reviews-form.php255wp_enqueue_script( 'saswp-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), SASWP_VERSION, true);medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
Resolved sha150b2927885f91917dd4686bd5f94a395ebf8aef
View raw JSON
{
    "slug": "schema-and-structured-data-for-wp",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/reviews/class-saswp-reviews-form.php",
            "line": 255,
            "snippet": "wp_enqueue_script( 'saswp-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), SASWP_VERSION, true);",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        }
    ],
    "resolved_sha": "150b2927885f91917dd4686bd5f94a395ebf8aef"
}
High code_scan_match Simple CAPTCHA with Cloudflare Turnstile (200k+ installs) Resolved 4mo ago
Slugsimple-cloudflare-turnstile
Finding count2
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltininc/failsafe.php38wp_enqueue_script('cfturnstile-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), null, $defer);medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
remote_enqueuebuiltininc/integrations/other/elementor.php51wp_enqueue_script('cfturnstile-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), null, $defer);medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
Resolved sha04067a208d866030901fe6792578700a8995218a
View raw JSON
{
    "slug": "simple-cloudflare-turnstile",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/failsafe.php",
            "line": 38,
            "snippet": "wp_enqueue_script('cfturnstile-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), null, $defer);",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/integrations/other/elementor.php",
            "line": 51,
            "snippet": "wp_enqueue_script('cfturnstile-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), null, $defer);",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        }
    ],
    "resolved_sha": "04067a208d866030901fe6792578700a8995218a"
}
High code_scan_match Brevo – Email, SMS, Web Push, Chat, and more. (100k+ installs) Resolved 4mo ago
Slugmailin
Finding count1
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinsendinblue.php525wp_register_style('sib-font-face', 'https://designsystem.brevo.com/designsystem/component/face/ba05798091ad5d7562c3.css', false, 'ba05798091ad5d7562c3');medium
Url
https://designsystem.brevo.com/designsystem/component/face/ba05798091ad5d7562c3.css
Url host
designsystem.brevo.com
Resolved sha2f9ab8a11da8a40366ef5f23eb1c5a42d7944994
View raw JSON
{
    "slug": "mailin",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "sendinblue.php",
            "line": 525,
            "snippet": "wp_register_style('sib-font-face', 'https://designsystem.brevo.com/designsystem/component/face/ba05798091ad5d7562c3.css', false, 'ba05798091ad5d7562c3');",
            "confidence": "medium",
            "details": {
                "url": "https://designsystem.brevo.com/designsystem/component/face/ba05798091ad5d7562c3.css",
                "url_host": "designsystem.brevo.com"
            }
        }
    ],
    "resolved_sha": "2f9ab8a11da8a40366ef5f23eb1c5a42d7944994"
}
High code_scan_match Crowdsignal Dashboard – Polls, Surveys & more (200k+ installs) Resolved 4mo ago
Slugpolldaddy
Finding count10
Findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinpolldaddy.php504wp_enqueue_script( 'polls', "{$this->base_url}js/polldaddy.js", array( 'jquery', 'jquery-ui-sortable', 'jquery-form', 'wp-components' ), $this->version );medium
remote_enqueuebuiltinpolldaddy.php505wp_enqueue_script( 'polls-common', "{$this->base_url}js/common.js", array(), $this->version );medium
remote_enqueuebuiltinpolldaddy.php833wp_enqueue_script( 'polls-style', "{$this->base_url}js/poll-style-picker.js", array( 'polls', 'polls-common' ), $this->version );medium
remote_enqueuebuiltinpolldaddy.php841wp_enqueue_script( 'polls-style', "{$this->base_url}js/style-editor.js", array( 'polls', 'polls-common' ), $this->version );medium
remote_enqueuebuiltinpolldaddy.php842wp_enqueue_script( 'polls-style-color', "{$this->base_url}js/jscolor.js", array(), $this->version );medium
remote_enqueuebuiltinpolldaddy.php843wp_enqueue_style( 'polls', "{$this->base_url}css/style-editor.css", array(), $this->version );medium
remote_enqueuebuiltinpolldaddy.php859wp_enqueue_script( 'rating-text-color', "{$this->base_url}js/jscolor.js", array(), $this->version );medium
remote_enqueuebuiltinpolldaddy.php860wp_enqueue_script( 'ratings', "{$this->base_url}js/rating.js", array(), $this->version );medium
remote_enqueuebuiltinpolldaddy.php866wp_enqueue_style( 'polldaddy', "{$this->base_url}css/polldaddy.css", array(), $this->version );medium
remote_enqueuebuiltinpolldaddy.php875wp_enqueue_style( 'polls-rtl', "{$this->base_url}css/polldaddy-rtl.css", array( 'global', 'wp-admin' ), $this->version );medium
Resolved sha85b4c354ae8f8c4333621b9123b90446ee1eaa55
View raw JSON
{
    "slug": "polldaddy",
    "finding_count": 10,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "polldaddy.php",
            "line": 504,
            "snippet": "wp_enqueue_script( 'polls', \"{$this->base_url}js/polldaddy.js\", array( 'jquery', 'jquery-ui-sortable', 'jquery-form', 'wp-components' ), $this->version );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "polldaddy.php",
            "line": 505,
            "snippet": "wp_enqueue_script( 'polls-common', \"{$this->base_url}js/common.js\", array(), $this->version );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "polldaddy.php",
            "line": 833,
            "snippet": "wp_enqueue_script( 'polls-style', \"{$this->base_url}js/poll-style-picker.js\", array( 'polls', 'polls-common' ), $this->version );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "polldaddy.php",
            "line": 841,
            "snippet": "wp_enqueue_script( 'polls-style', \"{$this->base_url}js/style-editor.js\", array( 'polls', 'polls-common' ), $this->version );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "polldaddy.php",
            "line": 842,
            "snippet": "wp_enqueue_script( 'polls-style-color', \"{$this->base_url}js/jscolor.js\", array(), $this->version );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "polldaddy.php",
            "line": 843,
            "snippet": "wp_enqueue_style( 'polls', \"{$this->base_url}css/style-editor.css\", array(), $this->version );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "polldaddy.php",
            "line": 859,
            "snippet": "wp_enqueue_script( 'rating-text-color', \"{$this->base_url}js/jscolor.js\", array(), $this->version );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "polldaddy.php",
            "line": 860,
            "snippet": "wp_enqueue_script( 'ratings', \"{$this->base_url}js/rating.js\", array(), $this->version );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "polldaddy.php",
            "line": 866,
            "snippet": "wp_enqueue_style( 'polldaddy', \"{$this->base_url}css/polldaddy.css\", array(), $this->version );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "polldaddy.php",
            "line": 875,
            "snippet": "wp_enqueue_style( 'polls-rtl', \"{$this->base_url}css/polldaddy-rtl.css\", array( 'global', 'wp-admin' ), $this->version );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "85b4c354ae8f8c4333621b9123b90446ee1eaa55"
}
High code_scan_match Crowdsignal Forms (200k+ installs) Resolved 4mo ago
Slugcrowdsignal-forms
Finding count2
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/admin/class-crowdsignal-forms-settings.php77wp_enqueue_script( 'videopress', 'https://videopress.com/videopress-iframe.js', array(), '1.0', false );medium
Url
https://videopress.com/videopress-iframe.js
Url host
videopress.com
remote_enqueuebuiltinincludes/admin/class-crowdsignal-forms-setup.php71wp_enqueue_script( 'videopress', 'https://videopress.com/videopress-iframe.js', array(), '1.0', false );medium
Url
https://videopress.com/videopress-iframe.js
Url host
videopress.com
Resolved sha0d4e2944421c337090bd69cc19b93fa3ef3f0245
View raw JSON
{
    "slug": "crowdsignal-forms",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/admin/class-crowdsignal-forms-settings.php",
            "line": 77,
            "snippet": "wp_enqueue_script( 'videopress', 'https://videopress.com/videopress-iframe.js', array(), '1.0', false );",
            "confidence": "medium",
            "details": {
                "url": "https://videopress.com/videopress-iframe.js",
                "url_host": "videopress.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/admin/class-crowdsignal-forms-setup.php",
            "line": 71,
            "snippet": "wp_enqueue_script( 'videopress', 'https://videopress.com/videopress-iframe.js', array(), '1.0', false );",
            "confidence": "medium",
            "details": {
                "url": "https://videopress.com/videopress-iframe.js",
                "url_host": "videopress.com"
            }
        }
    ],
    "resolved_sha": "0d4e2944421c337090bd69cc19b93fa3ef3f0245"
}
High code_scan_match Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder (200k+ installs) Resolved 4mo ago
Slugsupreme-modules-for-divi
Finding count2
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinpublic/class-dsm-supreme-modules-for-divi-public.php178wp_register_script( 'dsm-twitter-embed', 'https://platform.twitter.com/widgets.js', array(), DSM_VERSION, true );medium
Url
https://platform.twitter.com/widgets.js
Url host
platform.twitter.com
remote_enqueuebuiltinpublic/class-dsm-supreme-modules-for-divi-public.php184wp_register_script( 'dsm-facebook', esc_url( 'https://connect.facebook.net/' . $facebook_lang . '/sdk.js#xfbml=1&version=v15.0' . $facebook_app_id ), array(), false, true );medium
Url
https://connect.facebook.net/
Url host
connect.facebook.net
Resolved shacb4ede9727a85d02d2809bc9c6e2dbf9b6723490
View raw JSON
{
    "slug": "supreme-modules-for-divi",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "public/class-dsm-supreme-modules-for-divi-public.php",
            "line": 178,
            "snippet": "wp_register_script( 'dsm-twitter-embed', 'https://platform.twitter.com/widgets.js', array(), DSM_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://platform.twitter.com/widgets.js",
                "url_host": "platform.twitter.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "public/class-dsm-supreme-modules-for-divi-public.php",
            "line": 184,
            "snippet": "wp_register_script( 'dsm-facebook', esc_url( 'https://connect.facebook.net/' . $facebook_lang . '/sdk.js#xfbml=1&version=v15.0' . $facebook_app_id ), array(), false, true );",
            "confidence": "medium",
            "details": {
                "url": "https://connect.facebook.net/",
                "url_host": "connect.facebook.net"
            }
        }
    ],
    "resolved_sha": "cb4ede9727a85d02d2809bc9c6e2dbf9b6723490"
}
High code_scan_match iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more (200k+ installs) Resolved 4mo ago
Slugiubenda-cookie-law-solution
Finding count1
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinviews/frontpage.php75wp_enqueue_script( 'iubenda-quick-generator-loader', 'https://cdn.iubenda.com/quick_generator/loader.js', array(), iubenda()->version, false );medium
Url
https://cdn.iubenda.com/quick_generator/loader.js
Url host
cdn.iubenda.com
Resolved shaa3c264b8857c0ca2986254d8da0c0d04144af3cf
View raw JSON
{
    "slug": "iubenda-cookie-law-solution",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "views/frontpage.php",
            "line": 75,
            "snippet": "wp_enqueue_script( 'iubenda-quick-generator-loader', 'https://cdn.iubenda.com/quick_generator/loader.js', array(), iubenda()->version, false );",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.iubenda.com/quick_generator/loader.js",
                "url_host": "cdn.iubenda.com"
            }
        }
    ],
    "resolved_sha": "a3c264b8857c0ca2986254d8da0c0d04144af3cf"
}
High code_scan_match Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts (200k+ installs) Resolved 4mo ago
Slugolympus-google-fonts
Finding count1
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/class-ogf-typekit.php351wp_enqueue_style( 'typekit-' . $clean_id, 'https://use.typekit.com/' . $clean_id . '.css', array(), OGF_VERSION );medium
Url
https://use.typekit.com/
Url host
use.typekit.com
Resolved sha42e23f93fe04ad018898ba18da35644c442b11bd
View raw JSON
{
    "slug": "olympus-google-fonts",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/class-ogf-typekit.php",
            "line": 351,
            "snippet": "wp_enqueue_style( 'typekit-' . $clean_id, 'https://use.typekit.com/' . $clean_id . '.css', array(), OGF_VERSION );",
            "confidence": "medium",
            "details": {
                "url": "https://use.typekit.com/",
                "url_host": "use.typekit.com"
            }
        }
    ],
    "resolved_sha": "42e23f93fe04ad018898ba18da35644c442b11bd"
}
High code_scan_match TikTok (200k+ installs) Resolved 4mo ago
Slugtiktok-for-business
Finding count1
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinadmin/Tt4b_Menu_Class.php219wp_register_script( 'tt4b_cdn', 'https://sf-ttmp.ttcdn-row.com/obj/ttastatic-sg/tiktok-business-plugin/tbp_external_platform-v2.3.11.js', '', 'v1', false );medium
Url
https://sf-ttmp.ttcdn-row.com/obj/ttastatic-sg/tiktok-business-plugin/tbp_external_platform-v2.3.11.js
Url host
sf-ttmp.ttcdn-row.com
Resolved shab9d5058f8338c4edc5afa33499d26299cf4eba72
View raw JSON
{
    "slug": "tiktok-for-business",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "admin/Tt4b_Menu_Class.php",
            "line": 219,
            "snippet": "wp_register_script( 'tt4b_cdn', 'https://sf-ttmp.ttcdn-row.com/obj/ttastatic-sg/tiktok-business-plugin/tbp_external_platform-v2.3.11.js', '', 'v1', false );",
            "confidence": "medium",
            "details": {
                "url": "https://sf-ttmp.ttcdn-row.com/obj/ttastatic-sg/tiktok-business-plugin/tbp_external_platform-v2.3.11.js",
                "url_host": "sf-ttmp.ttcdn-row.com"
            }
        }
    ],
    "resolved_sha": "b9d5058f8338c4edc5afa33499d26299cf4eba72"
}
High code_scan_match Advanced Google reCAPTCHA (200k+ installs) Resolved 4mo ago
Slugadvanced-google-recaptcha
Finding count2
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinlibs/functions.php555wp_enqueue_script('wpcaptcha-recaptcha', 'https://www.google.com/recaptcha/api.js', array('jquery'), self::$version, true);medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
remote_enqueuebuiltinlibs/functions.php557wp_enqueue_script('wpcaptcha-recaptcha', 'https://www.google.com/recaptcha/api.js?onload=wpcaptcha_captcha&render=' . esc_html($options['captcha_site_key']), array('jquery'), self::$versiomedium
Url
https://www.google.com/recaptcha/api.js?onload=wpcaptcha_captcha&render=
Url host
www.google.com
Resolved sha9182a123b2f86d17b62ca54962b55f70d4d4dbc5
View raw JSON
{
    "slug": "advanced-google-recaptcha",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "libs/functions.php",
            "line": 555,
            "snippet": "wp_enqueue_script('wpcaptcha-recaptcha', 'https://www.google.com/recaptcha/api.js', array('jquery'), self::$version, true);",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "libs/functions.php",
            "line": 557,
            "snippet": "wp_enqueue_script('wpcaptcha-recaptcha', 'https://www.google.com/recaptcha/api.js?onload=wpcaptcha_captcha&render=' . esc_html($options['captcha_site_key']), array('jquery'), self::$versio",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?onload=wpcaptcha_captcha&render=",
                "url_host": "www.google.com"
            }
        }
    ],
    "resolved_sha": "9182a123b2f86d17b62ca54962b55f70d4d4dbc5"
}
High code_scan_match LoginPress | wp-login Custom Login Page Customizer (200k+ installs) Resolved 4mo ago
Slugloginpress
Finding count2
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinclasses/customizer/class-loginpress-customizer.php203wp_enqueue_script( 'loginpress-yt-iframe', 'https://www.youtube.com/iframe_api', array(), LOGINPRESS_VERSION, true );medium
Url
https://www.youtube.com/iframe_api
Url host
www.youtube.com
remote_enqueuebuiltinloginpress.php570wp_enqueue_script( 'youtube-api', 'https://www.youtube.com/iframe_api', array(), LOGINPRESS_VERSION, true );medium
Url
https://www.youtube.com/iframe_api
Url host
www.youtube.com
Resolved sha5a99dacbe48e60ca7b3a3bc0dca491195a42f58e
View raw JSON
{
    "slug": "loginpress",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "classes/customizer/class-loginpress-customizer.php",
            "line": 203,
            "snippet": "wp_enqueue_script( 'loginpress-yt-iframe', 'https://www.youtube.com/iframe_api', array(), LOGINPRESS_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.youtube.com/iframe_api",
                "url_host": "www.youtube.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "loginpress.php",
            "line": 570,
            "snippet": "wp_enqueue_script( 'youtube-api', 'https://www.youtube.com/iframe_api', array(), LOGINPRESS_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.youtube.com/iframe_api",
                "url_host": "www.youtube.com"
            }
        }
    ],
    "resolved_sha": "5a99dacbe48e60ca7b3a3bc0dca491195a42f58e"
}
High code_scan_match HubSpot All-In-One Marketing – Forms, Popups, Live Chat (200k+ installs) Resolved 4mo ago
Slugleadin
Finding count4
Findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinpublic/class-assetsmanager.php59wp_enqueue_script( self::APP_EMBEDDER, "$embed_domain/integrated-app-embedder/v1.js", array(), LEADIN_PLUGIN_VERSION, true );medium
remote_enqueuebuiltinpublic/class-assetsmanager.php82wp_enqueue_script( self::APP_EMBEDDER, "$embed_domain/integrated-app-embedder/v1.js", array(), LEADIN_PLUGIN_VERSION, true );medium
remote_enqueuebuiltinpublic/class-assetsmanager.php153wp_enqueue_script( self::APP_EMBEDDER, "$embed_domain/integrated-app-embedder/v1.js", array(), LEADIN_PLUGIN_VERSION, true );medium
remote_enqueuebuiltinpublic/class-assetsmanager.php178wp_enqueue_script( self::APP_EMBEDDER, "$embed_domain/integrated-app-embedder/v1.js", array(), LEADIN_PLUGIN_VERSION, true );medium
Resolved sha3dc682cbb446d3f4af0917f58f817ec56948c9a4
View raw JSON
{
    "slug": "leadin",
    "finding_count": 4,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "public/class-assetsmanager.php",
            "line": 59,
            "snippet": "wp_enqueue_script( self::APP_EMBEDDER, \"$embed_domain/integrated-app-embedder/v1.js\", array(), LEADIN_PLUGIN_VERSION, true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "public/class-assetsmanager.php",
            "line": 82,
            "snippet": "wp_enqueue_script( self::APP_EMBEDDER, \"$embed_domain/integrated-app-embedder/v1.js\", array(), LEADIN_PLUGIN_VERSION, true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "public/class-assetsmanager.php",
            "line": 153,
            "snippet": "wp_enqueue_script( self::APP_EMBEDDER, \"$embed_domain/integrated-app-embedder/v1.js\", array(), LEADIN_PLUGIN_VERSION, true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "public/class-assetsmanager.php",
            "line": 178,
            "snippet": "wp_enqueue_script( self::APP_EMBEDDER, \"$embed_domain/integrated-app-embedder/v1.js\", array(), LEADIN_PLUGIN_VERSION, true );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "3dc682cbb446d3f4af0917f58f817ec56948c9a4"
}
Slugpretty-link
Finding count1
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinapp/controllers/PrliAppController.php566wp_enqueue_script('google-visualization-api', 'https://www.gstatic.com/charts/loader.js', null, PRLI_VERSION);medium
Url
https://www.gstatic.com/charts/loader.js
Url host
www.gstatic.com
Resolved shaac2a438547c07df520e083af1c07be4fc73fe09a
View raw JSON
{
    "slug": "pretty-link",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "app/controllers/PrliAppController.php",
            "line": 566,
            "snippet": "wp_enqueue_script('google-visualization-api', 'https://www.gstatic.com/charts/loader.js', null, PRLI_VERSION);",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        }
    ],
    "resolved_sha": "ac2a438547c07df520e083af1c07be4fc73fe09a"
}
High code_scan_match WP Go Maps – Google Map, OpenStreetMap, Leaflet Map (300k+ installs) Resolved 4mo ago
Slugwp-google-maps
Finding count3
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/compat/class.pro-10-compatibility.php273wp_enqueue_style('datatables', 'https://cdn.datatables.net/1.12.1/css/jquery.dataTables.min.css');medium
Url
https://cdn.datatables.net/1.12.1/css/jquery.dataTables.min.css
Url host
cdn.datatables.net
remote_enqueuebuiltinincludes/compat/class.pro-10-compatibility.php275wp_enqueue_script('datatables-responsive', 'https://cdn.datatables.net/responsive/2.3.0/js/dataTables.responsive.min.js', array('datatables'), false, false);medium
Url
https://cdn.datatables.net/responsive/2.3.0/js/dataTables.responsive.min.js
Url host
cdn.datatables.net
remote_enqueuebuiltinincludes/compat/class.pro-10-compatibility.php276wp_enqueue_style('datatables-responsive', 'https://cdn.datatables.net/responsive/2.3.0/css/responsive.dataTables.min.css');medium
Url
https://cdn.datatables.net/responsive/2.3.0/css/responsive.dataTables.min.css
Url host
cdn.datatables.net
Resolved sha9dd1c9542a6e31573db479cf534014cfe19602aa
View raw JSON
{
    "slug": "wp-google-maps",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/compat/class.pro-10-compatibility.php",
            "line": 273,
            "snippet": "wp_enqueue_style('datatables', 'https://cdn.datatables.net/1.12.1/css/jquery.dataTables.min.css');",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.datatables.net/1.12.1/css/jquery.dataTables.min.css",
                "url_host": "cdn.datatables.net"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/compat/class.pro-10-compatibility.php",
            "line": 275,
            "snippet": "wp_enqueue_script('datatables-responsive', 'https://cdn.datatables.net/responsive/2.3.0/js/dataTables.responsive.min.js', array('datatables'), false, false);",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.datatables.net/responsive/2.3.0/js/dataTables.responsive.min.js",
                "url_host": "cdn.datatables.net"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/compat/class.pro-10-compatibility.php",
            "line": 276,
            "snippet": "wp_enqueue_style('datatables-responsive', 'https://cdn.datatables.net/responsive/2.3.0/css/responsive.dataTables.min.css');",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.datatables.net/responsive/2.3.0/css/responsive.dataTables.min.css",
                "url_host": "cdn.datatables.net"
            }
        }
    ],
    "resolved_sha": "9dd1c9542a6e31573db479cf534014cfe19602aa"
}
Slugpassword-protected
Finding count2
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinadmin/class-recaptcha.php490wp_enqueue_script( 'pp-recaptcha-api-v2', esc_url( 'https://www.google.com/recaptcha/api.js' ), array(), null );medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
remote_enqueuebuiltinadmin/class-recaptcha.php543wp_enqueue_script( 'recaptcha-api-v3', ( 'https://www.google.com/recaptcha/api.js?onload=pprecaptcha&render=' . esc_attr( $grecaptcha_v3_site_key ) . '&badge=' . esc_attr( $grecaptcha_v3_badge ) ),medium
Url
https://www.google.com/recaptcha/api.js?onload=pprecaptcha&render=
Url host
www.google.com
Resolved sha0ff2111d097e3582f32d47ab153bb1e849b5ea8b
View raw JSON
{
    "slug": "password-protected",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "admin/class-recaptcha.php",
            "line": 490,
            "snippet": "wp_enqueue_script( 'pp-recaptcha-api-v2', esc_url( 'https://www.google.com/recaptcha/api.js' ), array(), null );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "admin/class-recaptcha.php",
            "line": 543,
            "snippet": "wp_enqueue_script( 'recaptcha-api-v3', ( 'https://www.google.com/recaptcha/api.js?onload=pprecaptcha&render=' . esc_attr( $grecaptcha_v3_site_key ) . '&badge=' . esc_attr( $grecaptcha_v3_badge ) ),",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?onload=pprecaptcha&render=",
                "url_host": "www.google.com"
            }
        }
    ],
    "resolved_sha": "0ff2111d097e3582f32d47ab153bb1e849b5ea8b"
}
Slugwoo-cart-abandonment-recovery
Finding count1
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinadmin/inc/wcar-admin.php109wp_enqueue_script( $handle . '-ottokit-integration', 'https://app.suretriggers.com/js/v2/embed.js', [], CARTFLOWS_CA_VER, true );medium
Url
https://app.suretriggers.com/js/v2/embed.js
Url host
app.suretriggers.com
Resolved shaac15fab30bd97f5c64ae66afaa9f72b11be32eb5
View raw JSON
{
    "slug": "woo-cart-abandonment-recovery",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "admin/inc/wcar-admin.php",
            "line": 109,
            "snippet": "wp_enqueue_script( $handle . '-ottokit-integration', 'https://app.suretriggers.com/js/v2/embed.js', [], CARTFLOWS_CA_VER, true );",
            "confidence": "medium",
            "details": {
                "url": "https://app.suretriggers.com/js/v2/embed.js",
                "url_host": "app.suretriggers.com"
            }
        }
    ],
    "resolved_sha": "ac15fab30bd97f5c64ae66afaa9f72b11be32eb5"
}
High code_scan_match Duplicate Post (300k+ installs) Resolved 4mo ago
Slugcopy-delete-posts
Finding count26
Findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltincopy-delete-posts.php218wp_enqueue_style('cdp-css-global', "{$cdp_plug_url}/assets/css/cdp-global{$min}.css", '', $ver);medium
remote_enqueuebuiltincopy-delete-posts.php219wp_enqueue_script('cdp-js-global', "{$cdp_plug_url}/assets/js/cdp-global{$min}.js", ['jquery'], $ver, true);medium
remote_enqueuebuiltincopy-delete-posts.php221wp_enqueue_style('cdp-css-select', "{$cdp_plug_url}/assets/css/cdp-select{$min}.css", '', $ver);medium
remote_enqueuebuiltincopy-delete-posts.php222wp_enqueue_script('cdp-js-select', "{$cdp_plug_url}/assets/js/cdp-select{$min}.js", '', $ver, true);medium
remote_enqueuebuiltincopy-delete-posts.php223wp_enqueue_style('cdp-tooltips-css', "{$cdp_plug_url}/assets/css/cdp.tooltip{$min}.css", '', $ver);medium
remote_enqueuebuiltincopy-delete-posts.php224wp_enqueue_script('cdp-tooltips', "{$cdp_plug_url}/assets/js/cdp.tooltip{$min}.js", '', $ver, true);medium
remote_enqueuebuiltincopy-delete-posts.php232wp_enqueue_style('cdp-editor', "{$cdp_plug_url}/assets/css/cdp-editor{$min}.css", '', $ver);medium
remote_enqueuebuiltincopy-delete-posts.php240wp_enqueue_style('cdp-css', "{$cdp_plug_url}/assets/css/cdp{$min}.css", '', $ver);medium
remote_enqueuebuiltincopy-delete-posts.php241wp_enqueue_style('cdp-css-user', "{$cdp_plug_url}/assets/css/cdp-user{$min}.css", '', $ver);medium
remote_enqueuebuiltincopy-delete-posts.php242wp_enqueue_script('cdp-icPagination', "{$cdp_plug_url}/assets/js/cdp-icPagination{$min}.js", '', $ver);medium
remote_enqueuebuiltincopy-delete-posts.php243wp_enqueue_script('cdp', "{$cdp_plug_url}/assets/js/cdp{$min}.js", '', $ver, true);medium
remote_enqueuebuiltincopy-delete-posts.php245wp_enqueue_script('cdp-modal', "{$cdp_plug_url}/assets/js/cdp-modal{$min}.js", '', $ver, true);medium
remote_enqueuebuiltincopy-delete-posts.php247wp_enqueue_script('cdp-bulk', "{$cdp_plug_url}/assets/js/cdp-bulk{$min}.js", '', $ver, true);medium
remote_enqueuebuiltincopy-delete-posts.php270wp_enqueue_style('cdp-css-global', "{$cdp_plug_url}/assets/css/cdp-global{$min}.css", '', $ver);medium
remote_enqueuebuiltincopy-delete-posts.php271wp_enqueue_script('cdp-js-global', "{$cdp_plug_url}/assets/js/cdp-global{$min}.js", ['jquery'], $ver, true);medium
Resolved sha20d30f8b12409f417db88c678f1fbf9096ba82b6
View raw JSON
{
    "slug": "copy-delete-posts",
    "finding_count": 26,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "copy-delete-posts.php",
            "line": 218,
            "snippet": "wp_enqueue_style('cdp-css-global', \"{$cdp_plug_url}/assets/css/cdp-global{$min}.css\", '', $ver);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "copy-delete-posts.php",
            "line": 219,
            "snippet": "wp_enqueue_script('cdp-js-global', \"{$cdp_plug_url}/assets/js/cdp-global{$min}.js\", ['jquery'], $ver, true);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "copy-delete-posts.php",
            "line": 221,
            "snippet": "wp_enqueue_style('cdp-css-select', \"{$cdp_plug_url}/assets/css/cdp-select{$min}.css\", '', $ver);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "copy-delete-posts.php",
            "line": 222,
            "snippet": "wp_enqueue_script('cdp-js-select', \"{$cdp_plug_url}/assets/js/cdp-select{$min}.js\", '', $ver, true);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "copy-delete-posts.php",
            "line": 223,
            "snippet": "wp_enqueue_style('cdp-tooltips-css', \"{$cdp_plug_url}/assets/css/cdp.tooltip{$min}.css\", '', $ver);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "copy-delete-posts.php",
            "line": 224,
            "snippet": "wp_enqueue_script('cdp-tooltips', \"{$cdp_plug_url}/assets/js/cdp.tooltip{$min}.js\", '', $ver, true);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "copy-delete-posts.php",
            "line": 232,
            "snippet": "wp_enqueue_style('cdp-editor', \"{$cdp_plug_url}/assets/css/cdp-editor{$min}.css\", '', $ver);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "copy-delete-posts.php",
            "line": 240,
            "snippet": "wp_enqueue_style('cdp-css', \"{$cdp_plug_url}/assets/css/cdp{$min}.css\", '', $ver);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "copy-delete-posts.php",
            "line": 241,
            "snippet": "wp_enqueue_style('cdp-css-user', \"{$cdp_plug_url}/assets/css/cdp-user{$min}.css\", '', $ver);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "copy-delete-posts.php",
            "line": 242,
            "snippet": "wp_enqueue_script('cdp-icPagination', \"{$cdp_plug_url}/assets/js/cdp-icPagination{$min}.js\", '', $ver);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "copy-delete-posts.php",
            "line": 243,
            "snippet": "wp_enqueue_script('cdp', \"{$cdp_plug_url}/assets/js/cdp{$min}.js\", '', $ver, true);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "copy-delete-posts.php",
            "line": 245,
            "snippet": "wp_enqueue_script('cdp-modal', \"{$cdp_plug_url}/assets/js/cdp-modal{$min}.js\", '', $ver, true);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "copy-delete-posts.php",
            "line": 247,
            "snippet": "wp_enqueue_script('cdp-bulk', \"{$cdp_plug_url}/assets/js/cdp-bulk{$min}.js\", '', $ver, true);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "copy-delete-posts.php",
            "line": 270,
            "snippet": "wp_enqueue_style('cdp-css-global', \"{$cdp_plug_url}/assets/css/cdp-global{$min}.css\", '', $ver);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "copy-delete-posts.php",
            "line": 271,
            "snippet": "wp_enqueue_script('cdp-js-global', \"{$cdp_plug_url}/assets/js/cdp-global{$min}.js\", ['jquery'], $ver, true);",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "20d30f8b12409f417db88c678f1fbf9096ba82b6"
}
High code_scan_match SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz (500k+ installs) Resolved 4mo ago
Slugsureforms
Finding count7
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltininc/fields/inlinebutton-markup.php195wp_enqueue_script( 'srfm-google-recaptchaV3', 'https://www.google.com/recaptcha/api.js?render=' . $this->google_captcha_site_key, [], null, true ); // phpcs:ignore WordPress.WP.EnqueuedResourcemedium
Url
https://www.google.com/recaptcha/api.js?render=
Url host
www.google.com
remote_enqueuebuiltininc/fields/inlinebutton-markup.php199wp_enqueue_script( 'google-recaptcha', 'https://www.google.com/recaptcha/api.js', [], SRFM_VER, true );medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
remote_enqueuebuiltininc/fields/inlinebutton-markup.php203wp_enqueue_script( 'google-recaptcha-invisible', 'https://www.google.com/recaptcha/api.js?onload=recaptchaCallback&render=explicit', [ SRFM_SLUG . '-form-submit' ], SRFM_VER, true );medium
Url
https://www.google.com/recaptcha/api.js?onload=recaptchaCallback&render=explicit
Url host
www.google.com
remote_enqueuebuiltininc/fields/inlinebutton-markup.php227wp_enqueue_script( 'hcaptcha', 'https://js.hcaptcha.com/1/api.js', [], null, [ 'strategy' => 'defer' ] ); // phpcs:ignore WordPress.WP.EnqueuedResourceParameters.MissingVersionmedium
Url
https://js.hcaptcha.com/1/api.js
Url host
js.hcaptcha.com
remote_enqueuebuiltininc/generate-form-markup.php697wp_enqueue_script( 'hcaptcha', 'https://js.hcaptcha.com/1/api.js', [], null, [ 'strategy' => 'defer' ] ); // phpcs:ignore WordPress.WP.EnqueuedResourceParameters.MissingVersionmedium
Url
https://js.hcaptcha.com/1/api.js
Url host
js.hcaptcha.com
remote_enqueuebuiltininc/generate-form-markup.php724wp_enqueue_script( 'google-recaptcha', 'https://www.google.com/recaptcha/api.js', [], SRFM_VER, true );medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
remote_enqueuebuiltininc/generate-form-markup.php731wp_enqueue_script( 'google-recaptcha-invisible', 'https://www.google.com/recaptcha/api.js?onload=recaptchaCallback&render=explicit', [ SRFM_SLUG . '-form-submit' ], SRFM_VER, true );medium
Url
https://www.google.com/recaptcha/api.js?onload=recaptchaCallback&render=explicit
Url host
www.google.com
Resolved shaec4326bedbbd9bcb55587f305519346678432ee1
View raw JSON
{
    "slug": "sureforms",
    "finding_count": 7,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/fields/inlinebutton-markup.php",
            "line": 195,
            "snippet": "wp_enqueue_script( 'srfm-google-recaptchaV3', 'https://www.google.com/recaptcha/api.js?render=' . $this->google_captcha_site_key, [], null, true ); // phpcs:ignore WordPress.WP.EnqueuedResource",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?render=",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/fields/inlinebutton-markup.php",
            "line": 199,
            "snippet": "wp_enqueue_script( 'google-recaptcha', 'https://www.google.com/recaptcha/api.js', [], SRFM_VER, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/fields/inlinebutton-markup.php",
            "line": 203,
            "snippet": "wp_enqueue_script( 'google-recaptcha-invisible', 'https://www.google.com/recaptcha/api.js?onload=recaptchaCallback&render=explicit', [ SRFM_SLUG . '-form-submit' ], SRFM_VER, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?onload=recaptchaCallback&render=explicit",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/fields/inlinebutton-markup.php",
            "line": 227,
            "snippet": "wp_enqueue_script( 'hcaptcha', 'https://js.hcaptcha.com/1/api.js', [], null, [ 'strategy' => 'defer' ] ); // phpcs:ignore WordPress.WP.EnqueuedResourceParameters.MissingVersion",
            "confidence": "medium",
            "details": {
                "url": "https://js.hcaptcha.com/1/api.js",
                "url_host": "js.hcaptcha.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/generate-form-markup.php",
            "line": 697,
            "snippet": "wp_enqueue_script( 'hcaptcha', 'https://js.hcaptcha.com/1/api.js', [], null, [ 'strategy' => 'defer' ] ); // phpcs:ignore WordPress.WP.EnqueuedResourceParameters.MissingVersion",
            "confidence": "medium",
            "details": {
                "url": "https://js.hcaptcha.com/1/api.js",
                "url_host": "js.hcaptcha.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/generate-form-markup.php",
            "line": 724,
            "snippet": "wp_enqueue_script( 'google-recaptcha', 'https://www.google.com/recaptcha/api.js', [], SRFM_VER, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/generate-form-markup.php",
            "line": 731,
            "snippet": "wp_enqueue_script( 'google-recaptcha-invisible', 'https://www.google.com/recaptcha/api.js?onload=recaptchaCallback&render=explicit', [ SRFM_SLUG . '-form-submit' ], SRFM_VER, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?onload=recaptchaCallback&render=explicit",
                "url_host": "www.google.com"
            }
        }
    ],
    "resolved_sha": "ec4326bedbbd9bcb55587f305519346678432ee1"
}
High code_scan_match BackWPup – WordPress Backup & Restore Plugin (400k+ installs) Resolved 4mo ago
Slugbackwpup
Finding count1
Findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltininc/class-page-restore.php32wp_register_script( 'js-url', "{$path_js}/vendor/url.min.js", [ 'jquery' ], BackWPup::get_plugin_data( 'Version' ), true );medium
Resolved shad0f4adb95b85deb9152a4e39718e39c2acde4b41
View raw JSON
{
    "slug": "backwpup",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/class-page-restore.php",
            "line": 32,
            "snippet": "wp_register_script( 'js-url', \"{$path_js}/vendor/url.min.js\", [ 'jquery' ], BackWPup::get_plugin_data( 'Version' ), true );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "d0f4adb95b85deb9152a4e39718e39c2acde4b41"
}
High code_scan_match Meta Box – A Framework for Dynamic Websites (500k+ installs) Resolved 4mo ago
Slugmeta-box
Finding count16
Findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinsrc/Dashboard/Dashboard.php100wp_enqueue_style( 'meta-box-dashboard', "$this->assets_url/css/dashboard.css", [], filemtime( __DIR__ . '/assets/css/dashboard.css' ) );medium
remote_enqueuebuiltinsrc/Dashboard/Dashboard.php101wp_enqueue_style( 'featherlight', "$this->assets_url/css/featherlight.min.css", [], '1.7.14' );medium
remote_enqueuebuiltinsrc/Dashboard/Dashboard.php102wp_enqueue_script( 'featherlight', "$this->assets_url/js/featherlight.min.js", [ 'jquery' ], '1.7.14', true );medium
remote_enqueuebuiltinsrc/Dashboard/Dashboard.php103wp_enqueue_script( 'meta-box-dashboard', "$this->assets_url/js/dashboard.js", [ 'featherlight' ], filemtime( __DIR__ . '/assets/js/dashboard.js' ), true );medium
remote_enqueuebuiltininc/fields/slider.php10wp_register_style( 'jquery-ui-core', "$url/core.css", [], '1.13.2' );medium
remote_enqueuebuiltininc/fields/slider.php13wp_register_style( 'jquery-ui-theme', "$url/theme.css", [], '1.13.2' );medium
remote_enqueuebuiltininc/fields/slider.php16wp_register_style( 'jquery-ui-slider', "$url/slider.css", [ 'jquery-ui-core', 'jquery-ui-theme' ], '1.13.2' );medium
remote_enqueuebuiltininc/fields/datetime.php54wp_register_style( 'jquery-ui-core', "$url/core.css", [], '1.13.2' );medium
remote_enqueuebuiltininc/fields/datetime.php57wp_register_style( 'jquery-ui-theme', "$url/theme.css", [], '1.13.2' );medium
remote_enqueuebuiltininc/fields/datetime.php60wp_register_style( 'jquery-ui-datepicker', "$url/datepicker.css", [ 'jquery-ui-core', 'jquery-ui-theme' ], '1.13.2' );medium
remote_enqueuebuiltininc/fields/datetime.php63wp_register_style( 'jquery-ui-slider', "$url/slider.css", [ 'jquery-ui-core', 'jquery-ui-theme' ], '1.13.2' );medium
remote_enqueuebuiltininc/fields/datetime.php67wp_register_style( 'jquery-ui-timepicker', "$url/jquery-ui-timepicker-addon.min.css", [ 'rwmb-date', 'jquery-ui-slider' ], '1.6.3' );medium
remote_enqueuebuiltininc/fields/datetime.php75wp_register_script( 'jquery-ui-timepicker', "$url/jquery-ui-timepicker-addon.min.js", [ 'jquery-ui-datepicker', 'jquery-ui-slider' ], '1.6.3', true );medium
remote_enqueuebuiltininc/fields/datetime.php76wp_register_script( 'jquery-ui-timepicker-slider', "$url/jquery-ui-sliderAccess.js", [ 'jquery-ui-datepicker', 'jquery-ui-slider' ], '0.3', true );medium
remote_enqueuebuiltininc/fields/datetime.php77wp_register_script( 'jquery-ui-timepicker-i18n', "$url/jquery-ui-timepicker-addon-i18n.min.js", [ 'jquery-ui-timepicker' ], '1.6.3', true );medium
Resolved sha03232568398e416204a8c7fdedf633be902799b5
View raw JSON
{
    "slug": "meta-box",
    "finding_count": 16,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "src/Dashboard/Dashboard.php",
            "line": 100,
            "snippet": "wp_enqueue_style( 'meta-box-dashboard', \"$this->assets_url/css/dashboard.css\", [], filemtime( __DIR__ . '/assets/css/dashboard.css' ) );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "src/Dashboard/Dashboard.php",
            "line": 101,
            "snippet": "wp_enqueue_style( 'featherlight', \"$this->assets_url/css/featherlight.min.css\", [], '1.7.14' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "src/Dashboard/Dashboard.php",
            "line": 102,
            "snippet": "wp_enqueue_script( 'featherlight', \"$this->assets_url/js/featherlight.min.js\", [ 'jquery' ], '1.7.14', true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "src/Dashboard/Dashboard.php",
            "line": 103,
            "snippet": "wp_enqueue_script( 'meta-box-dashboard', \"$this->assets_url/js/dashboard.js\", [ 'featherlight' ], filemtime( __DIR__ . '/assets/js/dashboard.js' ), true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/fields/slider.php",
            "line": 10,
            "snippet": "wp_register_style( 'jquery-ui-core', \"$url/core.css\", [], '1.13.2' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/fields/slider.php",
            "line": 13,
            "snippet": "wp_register_style( 'jquery-ui-theme', \"$url/theme.css\", [], '1.13.2' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/fields/slider.php",
            "line": 16,
            "snippet": "wp_register_style( 'jquery-ui-slider', \"$url/slider.css\", [ 'jquery-ui-core', 'jquery-ui-theme' ], '1.13.2' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/fields/datetime.php",
            "line": 54,
            "snippet": "wp_register_style( 'jquery-ui-core', \"$url/core.css\", [], '1.13.2' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/fields/datetime.php",
            "line": 57,
            "snippet": "wp_register_style( 'jquery-ui-theme', \"$url/theme.css\", [], '1.13.2' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/fields/datetime.php",
            "line": 60,
            "snippet": "wp_register_style( 'jquery-ui-datepicker', \"$url/datepicker.css\", [ 'jquery-ui-core', 'jquery-ui-theme' ], '1.13.2' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/fields/datetime.php",
            "line": 63,
            "snippet": "wp_register_style( 'jquery-ui-slider', \"$url/slider.css\", [ 'jquery-ui-core', 'jquery-ui-theme' ], '1.13.2' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/fields/datetime.php",
            "line": 67,
            "snippet": "wp_register_style( 'jquery-ui-timepicker', \"$url/jquery-ui-timepicker-addon.min.css\", [ 'rwmb-date', 'jquery-ui-slider' ], '1.6.3' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/fields/datetime.php",
            "line": 75,
            "snippet": "wp_register_script( 'jquery-ui-timepicker', \"$url/jquery-ui-timepicker-addon.min.js\", [ 'jquery-ui-datepicker', 'jquery-ui-slider' ], '1.6.3', true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/fields/datetime.php",
            "line": 76,
            "snippet": "wp_register_script( 'jquery-ui-timepicker-slider', \"$url/jquery-ui-sliderAccess.js\", [ 'jquery-ui-datepicker', 'jquery-ui-slider' ], '0.3', true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/fields/datetime.php",
            "line": 77,
            "snippet": "wp_register_script( 'jquery-ui-timepicker-i18n', \"$url/jquery-ui-timepicker-addon-i18n.min.js\", [ 'jquery-ui-timepicker' ], '1.6.3', true );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "03232568398e416204a8c7fdedf633be902799b5"
}
High code_scan_match Kadence Blocks — Page Builder Toolkit for Gutenberg Editor (600k+ installs) Resolved 4mo ago
Slugkadence-blocks
Finding count3
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/blocks/class-kadence-blocks-form-block.php806wp_register_script( 'kadence-blocks-google-recaptcha-v3', 'https://www.google.com/recaptcha/api.js?render=' . esc_attr( $recaptcha_site_key ) . $recaptcha_lang, array(), KADENCE_BLOCKS_VERSION, truemedium
Url
https://www.google.com/recaptcha/api.js?render=
Url host
www.google.com
remote_enqueuebuiltinincludes/blocks/class-kadence-blocks-form-block.php809wp_register_script( 'kadence-blocks-google-recaptcha-v2', 'https://www.google.com/recaptcha/api.js?render=explicit&onload=kbOnloadV2Callback' . $recaptcha_lang, array( 'jquery' ), KADENCE_BLOCKS_VERmedium
Url
https://www.google.com/recaptcha/api.js?render=explicit&onload=kbOnloadV2Callback
Url host
www.google.com
remote_enqueuebuiltinincludes/blocks/form/class-kadence-blocks-captcha-block.php189wp_register_script( 'kadence-blocks-hcaptcha', 'https://js.hcaptcha.com/1/api.js', [], null, true );medium
Url
https://js.hcaptcha.com/1/api.js
Url host
js.hcaptcha.com
Resolved sha056754224617b076103298d42bde3bbfbfc781d4
View raw JSON
{
    "slug": "kadence-blocks",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/blocks/class-kadence-blocks-form-block.php",
            "line": 806,
            "snippet": "wp_register_script( 'kadence-blocks-google-recaptcha-v3', 'https://www.google.com/recaptcha/api.js?render=' . esc_attr( $recaptcha_site_key ) . $recaptcha_lang, array(), KADENCE_BLOCKS_VERSION, true",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?render=",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/blocks/class-kadence-blocks-form-block.php",
            "line": 809,
            "snippet": "wp_register_script( 'kadence-blocks-google-recaptcha-v2', 'https://www.google.com/recaptcha/api.js?render=explicit&onload=kbOnloadV2Callback' . $recaptcha_lang, array( 'jquery' ), KADENCE_BLOCKS_VER",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?render=explicit&onload=kbOnloadV2Callback",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/blocks/form/class-kadence-blocks-captcha-block.php",
            "line": 189,
            "snippet": "wp_register_script( 'kadence-blocks-hcaptcha', 'https://js.hcaptcha.com/1/api.js', [], null, true );",
            "confidence": "medium",
            "details": {
                "url": "https://js.hcaptcha.com/1/api.js",
                "url_host": "js.hcaptcha.com"
            }
        }
    ],
    "resolved_sha": "056754224617b076103298d42bde3bbfbfc781d4"
}
Slugninja-forms
Finding count3
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/Display/Render.php848wp_enqueue_script('nf-google-recaptcha', 'https://www.google.com/recaptcha/api.js?hl=' . $recaptcha_lang . '&onload=nfRenderRecaptcha&render=explicit', array( 'jquery', 'nf-front-end-deps'medium
Url
https://www.google.com/recaptcha/api.js?hl=
Url host
www.google.com
remote_enqueuebuiltinincludes/Display/Render.php856wp_enqueue_script('nf-hcaptcha', 'https://js.hcaptcha.com/1/api.js?render=explicit', array( 'jquery', 'nf-front-end-deps' ), null, TRUE );medium
Url
https://js.hcaptcha.com/1/api.js?render=explicit
Url host
js.hcaptcha.com
remote_enqueuebuiltinincludes/Actions/Recaptcha.php306wp_enqueue_script('nf-google-recaptcha', 'https://www.google.com/recaptcha/api.js?hl=' . $recaptcha_lang . '&render=' . $this->site_key, array('jquery'), '3.0', true);medium
Url
https://www.google.com/recaptcha/api.js?hl=
Url host
www.google.com
Resolved sha856dd54305420a550a8a0aee0f62a442431e1a80
View raw JSON
{
    "slug": "ninja-forms",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/Display/Render.php",
            "line": 848,
            "snippet": "wp_enqueue_script('nf-google-recaptcha', 'https://www.google.com/recaptcha/api.js?hl=' . $recaptcha_lang . '&onload=nfRenderRecaptcha&render=explicit', array( 'jquery', 'nf-front-end-deps'",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?hl=",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/Display/Render.php",
            "line": 856,
            "snippet": "wp_enqueue_script('nf-hcaptcha', 'https://js.hcaptcha.com/1/api.js?render=explicit', array( 'jquery', 'nf-front-end-deps' ), null, TRUE );",
            "confidence": "medium",
            "details": {
                "url": "https://js.hcaptcha.com/1/api.js?render=explicit",
                "url_host": "js.hcaptcha.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/Actions/Recaptcha.php",
            "line": 306,
            "snippet": "wp_enqueue_script('nf-google-recaptcha', 'https://www.google.com/recaptcha/api.js?hl=' . $recaptcha_lang . '&render=' . $this->site_key, array('jquery'), '3.0', true);",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?hl=",
                "url_host": "www.google.com"
            }
        }
    ],
    "resolved_sha": "856dd54305420a550a8a0aee0f62a442431e1a80"
}
Slugmetform
Finding count2
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinplugin.php429wp_register_script('recaptcha-v2', 'https://google.com/recaptcha/api.js?render=explicit', [], null, true);medium
Url
https://google.com/recaptcha/api.js?render=explicit
Url host
google.com
remote_enqueuebuiltinplugin.php432wp_register_script('recaptcha-v3', 'https://www.google.com/recaptcha/api.js?render=' . $this->global_settings['mf_recaptcha_site_key_v3'], [], $this->version(), false);medium
Url
https://www.google.com/recaptcha/api.js?render=
Url host
www.google.com
Resolved sha7b22a9465ab114605fe3dcd8ab2c6d1646d45c5d
View raw JSON
{
    "slug": "metform",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "plugin.php",
            "line": 429,
            "snippet": "wp_register_script('recaptcha-v2', 'https://google.com/recaptcha/api.js?render=explicit', [], null, true);",
            "confidence": "medium",
            "details": {
                "url": "https://google.com/recaptcha/api.js?render=explicit",
                "url_host": "google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "plugin.php",
            "line": 432,
            "snippet": "wp_register_script('recaptcha-v3', 'https://www.google.com/recaptcha/api.js?render=' . $this->global_settings['mf_recaptcha_site_key_v3'], [], $this->version(), false);",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?render=",
                "url_host": "www.google.com"
            }
        }
    ],
    "resolved_sha": "7b22a9465ab114605fe3dcd8ab2c6d1646d45c5d"
}
High code_scan_match Forminator Forms – Contact Form, Payment Form & Custom Form Builder (600k+ installs) Resolved 4mo ago
Slugforminator
Finding count3
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinlibrary/helpers/helper-core.php302wp_enqueue_script( 'google-charts', 'https://www.gstatic.com/charts/loader.js', array( 'jquery' ), FORMINATOR_VERSION, false );medium
Url
https://www.gstatic.com/charts/loader.js
Url host
www.gstatic.com
remote_enqueuebuiltinlibrary/modules/polls/front/front-render.php86wp_enqueue_script( 'google-charts', 'https://www.gstatic.com/charts/loader.js', array( 'jquery' ), '1.0', false );medium
Url
https://www.gstatic.com/charts/loader.js
Url host
www.gstatic.com
remote_enqueuebuiltinlibrary/modules/polls/front/front-render.php101wp_enqueue_script( 'google-charts', 'https://www.gstatic.com/charts/loader.js', array( 'jquery' ), '1.0', false );medium
Url
https://www.gstatic.com/charts/loader.js
Url host
www.gstatic.com
Resolved sha72f56ff63a9dd6ad200aa48967fe23afdfbda693
View raw JSON
{
    "slug": "forminator",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "library/helpers/helper-core.php",
            "line": 302,
            "snippet": "wp_enqueue_script( 'google-charts', 'https://www.gstatic.com/charts/loader.js', array( 'jquery' ), FORMINATOR_VERSION, false );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "library/modules/polls/front/front-render.php",
            "line": 86,
            "snippet": "wp_enqueue_script( 'google-charts', 'https://www.gstatic.com/charts/loader.js', array( 'jquery' ), '1.0', false );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "library/modules/polls/front/front-render.php",
            "line": 101,
            "snippet": "wp_enqueue_script( 'google-charts', 'https://www.gstatic.com/charts/loader.js', array( 'jquery' ), '1.0', false );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        }
    ],
    "resolved_sha": "72f56ff63a9dd6ad200aa48967fe23afdfbda693"
}
High code_scan_match Backuply – Backup, Restore, Migrate and Clone (600k+ installs) Resolved 4mo ago
Slugbackuply
Finding count2
Findings
PatternKindFileLineSnippetConfidence
wpconfig_writebuiltinrestore_ins.php3,133$config_cont = file_get_contents($data['softpath'] . '/wp-config.php');medium
wpconfig_writebuiltinrestore_ins.php3,157file_put_contents($data['softpath'] . '/wp-config.php', $config_cont);medium
Resolved shaa2caafb2f1ee7bc6d29f88cb49d37a59aadbfcb1
View raw JSON
{
    "slug": "backuply",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "restore_ins.php",
            "line": 3133,
            "snippet": "$config_cont = file_get_contents($data['softpath'] . '/wp-config.php');",
            "confidence": "medium"
        },
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "restore_ins.php",
            "line": 3157,
            "snippet": "file_put_contents($data['softpath'] . '/wp-config.php', $config_cont);",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "a2caafb2f1ee7bc6d29f88cb49d37a59aadbfcb1"
}
Slugfluentform
Finding count1
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinapp/Modules/Payments/PaymentMethods/Stripe/StripeHandler.php145wp_enqueue_script('stripe_elements', 'https://js.stripe.com/v3/', array('jquery'), '3.0', true);medium
Url
https://js.stripe.com/v3/
Url host
js.stripe.com
Resolved sha5a600146365db9ac75dca5328b6fc3e3b70c0f91
View raw JSON
{
    "slug": "fluentform",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "app/Modules/Payments/PaymentMethods/Stripe/StripeHandler.php",
            "line": 145,
            "snippet": "wp_enqueue_script('stripe_elements', 'https://js.stripe.com/v3/', array('jquery'), '3.0', true);",
            "confidence": "medium",
            "details": {
                "url": "https://js.stripe.com/v3/",
                "url_host": "js.stripe.com"
            }
        }
    ],
    "resolved_sha": "5a600146365db9ac75dca5328b6fc3e3b70c0f91"
}
Slugmainwp-child
Finding count47
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinclass/class-mainwp-child-ithemes-security.php422$update_settings = isset( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] ) ), true ) : ''; // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- base64_emedium
base64_decodebuiltinclass/class-mainwp-child-ithemes-security.php671$data = isset( $_POST['data'] ) ? json_decode( base64_decode( wp_unslash( $_POST['data'] ) ), true ) : array(); // phpcs:ignore WordPress.Security.NonceVerification,WordPress.Security.Vmedium
base64_decodebuiltinclass/class-mainwp-child-timecapsule.php1,655$data = isset( $_POST['data'] ) ? json_decode( base64_decode( wp_unslash( $_POST['data'] ) ), true ) : array(); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized,Wormedium
base64_decodebuiltinclass/class-mainwp-wordpress-seo.php112$file_url = ! empty( $_POST['file_url'] ) ? sanitize_text_field( base64_decode( wp_unslash( $_POST['file_url'] ) ) ) : ''; // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions, Wordmedium
base64_decodebuiltinclass/class-mainwp-wordpress-seo.php136$settings = ! empty( $_POST['settings'] ) ? base64_decode( wp_unslash( $_POST['settings'] ) ) : ''; // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions,WordPress.Security.ValidatedSamedium
wpconfig_writebuiltinclass/class-mainwp-clone-install.php280$wpConfig = file_get_contents( ABSPATH . 'wp-config.php' ); //phpcs:ignore WordPress.WP.AlternativeFunctionsmedium
wpconfig_writebuiltinclass/class-mainwp-clone-install.php285MainWP_Helper::file_put_contents( ABSPATH . 'wp-config.php', $wpConfig ); //phpcs:ignore WordPress.WP.AlternativeFunctionsmedium
base64_decodebuiltinclass/class-mainwp-child-users.php547$new_password = isset( $_POST['new_password'] ) ? base64_decode( wp_unslash( $_POST['new_password'] ) ) : ''; //phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized, Wordmedium
base64_decodebuiltinclass/class-mainwp-child-users.php607$new_user = isset( $_POST['new_user'] ) ? json_decode( base64_decode( wp_unslash( $_POST['new_user'] ) ), true ) : ''; //phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSmedium
base64_decodebuiltinclass/class-mainwp-connect.php518$auth = static::connect_verify( $func . $nonce, base64_decode( $signature ), base64_decode( get_option( 'mainwp_child_pubkey' ) ), $algo ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFuncmedium
base64_decodebuiltinclass/class-mainwp-child-keys-manager.php163$encodedValue = base64_decode( $encodedValue ); //phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- safe.medium
base64_decodebuiltinclass/class-mainwp-child-keys-manager.php177$encryptedValue = base64_decode( $encodedValue ); //phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- safe.medium
base64_decodebuiltinclass/class-mainwp-child-pagespeed.php276$settings = isset( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] ) ), true ) : array(); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions,WordPress.Secumedium
base64_decodebuiltinclass/class-mainwp-child-wordfence.php1,551$settings = isset( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] )), true ) : array(); // phpcs:ignore -- custom fix to pass through security rules of Dreammedium
base64_decodebuiltinclass/class-mainwp-child-wp-rocket.php937$options = isset( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] ) ), true ) : ''; //phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitizmedium
Resolved sha8d6aa3845211ae7d39a690c5ef44bbea01e5837a
View raw JSON
{
    "slug": "mainwp-child",
    "finding_count": 47,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-ithemes-security.php",
            "line": 422,
            "snippet": "$update_settings = isset( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] ) ), true ) : ''; // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions  -- base64_e",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-ithemes-security.php",
            "line": 671,
            "snippet": "$data        = isset( $_POST['data'] ) ? json_decode( base64_decode( wp_unslash( $_POST['data'] ) ), true ) : array(); // phpcs:ignore WordPress.Security.NonceVerification,WordPress.Security.V",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-timecapsule.php",
            "line": 1655,
            "snippet": "$data = isset( $_POST['data'] ) ? json_decode( base64_decode( wp_unslash( $_POST['data'] ) ), true ) : array(); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized,Wor",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-wordpress-seo.php",
            "line": 112,
            "snippet": "$file_url       = ! empty( $_POST['file_url'] ) ? sanitize_text_field( base64_decode( wp_unslash( $_POST['file_url'] ) ) ) : ''; // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions, Word",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-wordpress-seo.php",
            "line": 136,
            "snippet": "$settings = ! empty( $_POST['settings'] ) ? base64_decode( wp_unslash( $_POST['settings'] ) ) : ''; // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions,WordPress.Security.ValidatedSa",
            "confidence": "medium"
        },
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "class/class-mainwp-clone-install.php",
            "line": 280,
            "snippet": "$wpConfig = file_get_contents( ABSPATH . 'wp-config.php' ); //phpcs:ignore WordPress.WP.AlternativeFunctions",
            "confidence": "medium"
        },
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "class/class-mainwp-clone-install.php",
            "line": 285,
            "snippet": "MainWP_Helper::file_put_contents( ABSPATH . 'wp-config.php', $wpConfig ); //phpcs:ignore WordPress.WP.AlternativeFunctions",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-users.php",
            "line": 547,
            "snippet": "$new_password = isset( $_POST['new_password'] ) ? base64_decode( wp_unslash( $_POST['new_password'] ) ) : '';  //phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized, Word",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-users.php",
            "line": 607,
            "snippet": "$new_user      = isset( $_POST['new_user'] ) ? json_decode( base64_decode( wp_unslash( $_POST['new_user'] ) ), true ) : '';  //phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotS",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-connect.php",
            "line": 518,
            "snippet": "$auth = static::connect_verify( $func . $nonce, base64_decode( $signature ), base64_decode( get_option( 'mainwp_child_pubkey' ) ), $algo ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunc",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-keys-manager.php",
            "line": 163,
            "snippet": "$encodedValue = base64_decode( $encodedValue ); //phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- safe.",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-keys-manager.php",
            "line": 177,
            "snippet": "$encryptedValue = base64_decode( $encodedValue ); //phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- safe.",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-pagespeed.php",
            "line": 276,
            "snippet": "$settings = isset( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] ) ), true ) : array(); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions,WordPress.Secu",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-wordfence.php",
            "line": 1551,
            "snippet": "$settings = isset( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] )), true ) : array(); // phpcs:ignore -- custom fix to pass through security rules of Dream",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/class-mainwp-child-wp-rocket.php",
            "line": 937,
            "snippet": "$options = isset( $_POST['settings'] ) ? json_decode( base64_decode( wp_unslash( $_POST['settings'] ) ), true ) : '';  //phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitiz",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "8d6aa3845211ae7d39a690c5ef44bbea01e5837a"
}
High code_scan_match WooCommerce Stripe Payment Gateway (700k+ installs) Resolved 4mo ago
Slugwoocommerce-gateway-stripe
Finding count3
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/payment-methods/class-wc-stripe-upe-payment-gateway.php472wp_register_script( 'stripe', 'https://js.stripe.com/clover/stripe.js', [], null, true );medium
Url
https://js.stripe.com/clover/stripe.js
Url host
js.stripe.com
remote_enqueuebuiltinincludes/payment-methods/class-wc-stripe-express-checkout-element.php398wp_register_script( 'stripe', 'https://js.stripe.com/clover/stripe.js', '', null, true );medium
Url
https://js.stripe.com/clover/stripe.js
Url host
js.stripe.com
remote_enqueuebuiltinincludes/abstracts/abstract-wc-stripe-payment-gateway.php2,219wp_register_script( 'stripe', 'https://js.stripe.com/clover/stripe.js', [], null, true );medium
Url
https://js.stripe.com/clover/stripe.js
Url host
js.stripe.com
Resolved shadbbdeb60b4d3e9142473ec8c32fc572198e3af51
View raw JSON
{
    "slug": "woocommerce-gateway-stripe",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/payment-methods/class-wc-stripe-upe-payment-gateway.php",
            "line": 472,
            "snippet": "wp_register_script( 'stripe', 'https://js.stripe.com/clover/stripe.js', [], null, true );",
            "confidence": "medium",
            "details": {
                "url": "https://js.stripe.com/clover/stripe.js",
                "url_host": "js.stripe.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/payment-methods/class-wc-stripe-express-checkout-element.php",
            "line": 398,
            "snippet": "wp_register_script( 'stripe', 'https://js.stripe.com/clover/stripe.js', '', null, true );",
            "confidence": "medium",
            "details": {
                "url": "https://js.stripe.com/clover/stripe.js",
                "url_host": "js.stripe.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/abstracts/abstract-wc-stripe-payment-gateway.php",
            "line": 2219,
            "snippet": "wp_register_script( 'stripe', 'https://js.stripe.com/clover/stripe.js', [], null, true );",
            "confidence": "medium",
            "details": {
                "url": "https://js.stripe.com/clover/stripe.js",
                "url_host": "js.stripe.com"
            }
        }
    ],
    "resolved_sha": "dbbdeb60b4d3e9142473ec8c32fc572198e3af51"
}
High code_scan_match Kadence Security – Password, Two Factor Authentication, and Brute Force Protection (700k+ installs) Resolved 4mo ago
Slugbetter-wp-security
Finding count1
Findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinlib/icon-fonts/init.php44wp_enqueue_style( 'ithemes-icon-font', "$url/icon-fonts.css" );medium
Resolved sha639e942e709ff22d93f34e1b8d356e1f1a5a7b31
View raw JSON
{
    "slug": "better-wp-security",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "lib/icon-fonts/init.php",
            "line": 44,
            "snippet": "wp_enqueue_style( 'ithemes-icon-font', \"$url/icon-fonts.css\" );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "639e942e709ff22d93f34e1b8d356e1f1a5a7b31"
}
High code_scan_match GTM4WP – A Google Tag Manager (GTM) plugin for WordPress (700k+ installs) Resolved 4mo ago
Slugduracelltomi-google-tag-manager
Finding count40
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinintegration/vimeo.php15wp_enqueue_script( 'gtm4wp-vimeo-api', 'https://player.vimeo.com/api/player.js', array(), '1.0', $in_footer );medium
Url
https://player.vimeo.com/api/player.js
Url host
player.vimeo.com
hardcoded_ip_urlbuiltinintegration/whichbrowser/data/profiles.php647'http://112.74.195.169/upload/xmlfiles/STUDIO_X8_HD.XML' => [ 'BLU', 'Studio X8 HD', 'Android', DeviceType::MOBILE ],high—
hardcoded_ip_urlbuiltinintegration/whichbrowser/data/profiles.php699'http://221.176.65.117/uaprof/CMDC_M601.xml' => [ 'China Mobile', 'M601', 'Android', DeviceType::TABLET ],high—
hardcoded_ip_urlbuiltinintegration/whichbrowser/data/profiles.php701'http://221.176.65.117/uaprof/CMCC-M812.xml' => [ 'China Mobile Device', 'and M812', 'Android', DeviceType::MOBILE ],high—
hardcoded_ip_urlbuiltinintegration/whichbrowser/data/profiles.php702'http://221.176.65.117/uaprof/M821.xml' => [ 'China Mobile Device', 'and M821', 'Android', DeviceType::MOBILE ],high—
hardcoded_ip_urlbuiltinintegration/whichbrowser/data/profiles.php703'http://221.176.65.117/uaprof/M823.xml' => [ 'China Mobile Device', 'and M823', 'Android', DeviceType::MOBILE ],high—
hardcoded_ip_urlbuiltinintegration/whichbrowser/data/profiles.php722'http://122.200.68.229/docs/mini3ix.xml' => [ 'Dell', 'Mini 3ix', 'Android', DeviceType::MOBILE ],high—
hardcoded_ip_urlbuiltinintegration/whichbrowser/data/profiles.php754'http://211.42.201.70/ua_profile/FLY-2040i.xml' => [ 'Fly', '2040', null, DeviceType::MOBILE ],high—
hardcoded_ip_urlbuiltinintegration/whichbrowser/data/profiles.php755'http://211.42.201.70/ua_profile/FLY-2040L.xml' => [ 'Fly', '2040', null, DeviceType::MOBILE ],high—
hardcoded_ip_urlbuiltinintegration/whichbrowser/data/profiles.php758'http://211.42.201.70/ua_profile/Fly-E300.xml' => [ 'Fly', 'E300', null, DeviceType::MOBILE ],high—
hardcoded_ip_urlbuiltinintegration/whichbrowser/data/profiles.php814'http://211.42.201.70/ua_profile/Fly-LX610.xml' => [ 'Fly', 'LX610', null, DeviceType::MOBILE ],high—
hardcoded_ip_urlbuiltinintegration/whichbrowser/data/profiles.php817'http://211.42.201.70/ua_profile/FLY-MX200i.xml' => [ 'Fly', 'MX200', null, DeviceType::MOBILE ],high—
hardcoded_ip_urlbuiltinintegration/whichbrowser/data/profiles.php818'http://211.42.201.70/ua_profile/FLY-MX230.xml' => [ 'Fly', 'MX230', null, DeviceType::MOBILE ],high—
hardcoded_ip_urlbuiltinintegration/whichbrowser/data/profiles.php819'http://211.42.201.70/ua_profile/FLY-MX300.xml' => [ 'Fly', 'MX300', null, DeviceType::MOBILE ],high—
hardcoded_ip_urlbuiltinintegration/whichbrowser/data/profiles.php820'http://211.42.201.70/ua_profile/FLY-MX330.xml' => [ 'Fly', 'MX330', null, DeviceType::MOBILE ],high—
Resolved sha485c7d71dd677a92eac4c39fc5f796c0f484958f
View raw JSON
{
    "slug": "duracelltomi-google-tag-manager",
    "finding_count": 40,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "integration/vimeo.php",
            "line": 15,
            "snippet": "wp_enqueue_script( 'gtm4wp-vimeo-api', 'https://player.vimeo.com/api/player.js', array(), '1.0', $in_footer );",
            "confidence": "medium",
            "details": {
                "url": "https://player.vimeo.com/api/player.js",
                "url_host": "player.vimeo.com"
            }
        },
        {
            "pattern": "hardcoded_ip_url",
            "kind": "builtin",
            "file": "integration/whichbrowser/data/profiles.php",
            "line": 647,
            "snippet": "'http://112.74.195.169/upload/xmlfiles/STUDIO_X8_HD.XML'                                              => [ 'BLU', 'Studio X8 HD', 'Android', DeviceType::MOBILE ],",
            "confidence": "high"
        },
        {
            "pattern": "hardcoded_ip_url",
            "kind": "builtin",
            "file": "integration/whichbrowser/data/profiles.php",
            "line": 699,
            "snippet": "'http://221.176.65.117/uaprof/CMDC_M601.xml'                                                          => [ 'China Mobile', 'M601', 'Android', DeviceType::TABLET ],",
            "confidence": "high"
        },
        {
            "pattern": "hardcoded_ip_url",
            "kind": "builtin",
            "file": "integration/whichbrowser/data/profiles.php",
            "line": 701,
            "snippet": "'http://221.176.65.117/uaprof/CMCC-M812.xml'                                                          => [ 'China Mobile Device', 'and M812', 'Android', DeviceType::MOBILE ],",
            "confidence": "high"
        },
        {
            "pattern": "hardcoded_ip_url",
            "kind": "builtin",
            "file": "integration/whichbrowser/data/profiles.php",
            "line": 702,
            "snippet": "'http://221.176.65.117/uaprof/M821.xml'                                                               => [ 'China Mobile Device', 'and M821', 'Android', DeviceType::MOBILE ],",
            "confidence": "high"
        },
        {
            "pattern": "hardcoded_ip_url",
            "kind": "builtin",
            "file": "integration/whichbrowser/data/profiles.php",
            "line": 703,
            "snippet": "'http://221.176.65.117/uaprof/M823.xml'                                                               => [ 'China Mobile Device', 'and M823', 'Android', DeviceType::MOBILE ],",
            "confidence": "high"
        },
        {
            "pattern": "hardcoded_ip_url",
            "kind": "builtin",
            "file": "integration/whichbrowser/data/profiles.php",
            "line": 722,
            "snippet": "'http://122.200.68.229/docs/mini3ix.xml'                                                              => [ 'Dell', 'Mini 3ix', 'Android', DeviceType::MOBILE ],",
            "confidence": "high"
        },
        {
            "pattern": "hardcoded_ip_url",
            "kind": "builtin",
            "file": "integration/whichbrowser/data/profiles.php",
            "line": 754,
            "snippet": "'http://211.42.201.70/ua_profile/FLY-2040i.xml'                                                       => [ 'Fly', '2040', null, DeviceType::MOBILE ],",
            "confidence": "high"
        },
        {
            "pattern": "hardcoded_ip_url",
            "kind": "builtin",
            "file": "integration/whichbrowser/data/profiles.php",
            "line": 755,
            "snippet": "'http://211.42.201.70/ua_profile/FLY-2040L.xml'                                                       => [ 'Fly', '2040', null, DeviceType::MOBILE ],",
            "confidence": "high"
        },
        {
            "pattern": "hardcoded_ip_url",
            "kind": "builtin",
            "file": "integration/whichbrowser/data/profiles.php",
            "line": 758,
            "snippet": "'http://211.42.201.70/ua_profile/Fly-E300.xml'                                                        => [ 'Fly', 'E300', null, DeviceType::MOBILE ],",
            "confidence": "high"
        },
        {
            "pattern": "hardcoded_ip_url",
            "kind": "builtin",
            "file": "integration/whichbrowser/data/profiles.php",
            "line": 814,
            "snippet": "'http://211.42.201.70/ua_profile/Fly-LX610.xml'                                                       => [ 'Fly', 'LX610', null, DeviceType::MOBILE ],",
            "confidence": "high"
        },
        {
            "pattern": "hardcoded_ip_url",
            "kind": "builtin",
            "file": "integration/whichbrowser/data/profiles.php",
            "line": 817,
            "snippet": "'http://211.42.201.70/ua_profile/FLY-MX200i.xml'                                                      => [ 'Fly', 'MX200', null, DeviceType::MOBILE ],",
            "confidence": "high"
        },
        {
            "pattern": "hardcoded_ip_url",
            "kind": "builtin",
            "file": "integration/whichbrowser/data/profiles.php",
            "line": 818,
            "snippet": "'http://211.42.201.70/ua_profile/FLY-MX230.xml'                                                       => [ 'Fly', 'MX230', null, DeviceType::MOBILE ],",
            "confidence": "high"
        },
        {
            "pattern": "hardcoded_ip_url",
            "kind": "builtin",
            "file": "integration/whichbrowser/data/profiles.php",
            "line": 819,
            "snippet": "'http://211.42.201.70/ua_profile/FLY-MX300.xml'                                                       => [ 'Fly', 'MX300', null, DeviceType::MOBILE ],",
            "confidence": "high"
        },
        {
            "pattern": "hardcoded_ip_url",
            "kind": "builtin",
            "file": "integration/whichbrowser/data/profiles.php",
            "line": 820,
            "snippet": "'http://211.42.201.70/ua_profile/FLY-MX330.xml'                                                       => [ 'Fly', 'MX330', null, DeviceType::MOBILE ],",
            "confidence": "high"
        }
    ],
    "resolved_sha": "485c7d71dd677a92eac4c39fc5f796c0f484958f"
}
High code_scan_match WooCommerce PayPal Payments (800k+ installs) Resolved 4mo ago
Slugwoocommerce-paypal-payments
Finding count2
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinmodules/ppcp-fraud-protection/src/Recaptcha/Recaptcha.php83wp_enqueue_script('ppcp-recaptcha', 'https://www.google.com/recaptcha/api.js?render=' . esc_attr($this->integration->get_option('site_key_v3')), array(), $this->asset_version, \true);medium
Url
https://www.google.com/recaptcha/api.js?render=
Url host
www.google.com
remote_enqueuebuiltinmodules/ppcp-settings/src/Service/ScriptDataHandler.php92wp_enqueue_script('ppcp-paylater-configurator-lib', 'https://www.paypalobjects.com/merchant-library/merchant-configurator.js', array('wp-i18n'), $script_asset_file['version'], \true);medium
Url
https://www.paypalobjects.com/merchant-library/merchant-configurator.js
Url host
www.paypalobjects.com
Resolved shaf3b70bf7cdab0447af3c5a98b7d72ab32aef52d1
View raw JSON
{
    "slug": "woocommerce-paypal-payments",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/ppcp-fraud-protection/src/Recaptcha/Recaptcha.php",
            "line": 83,
            "snippet": "wp_enqueue_script('ppcp-recaptcha', 'https://www.google.com/recaptcha/api.js?render=' . esc_attr($this->integration->get_option('site_key_v3')), array(), $this->asset_version, \\true);",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?render=",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/ppcp-settings/src/Service/ScriptDataHandler.php",
            "line": 92,
            "snippet": "wp_enqueue_script('ppcp-paylater-configurator-lib', 'https://www.paypalobjects.com/merchant-library/merchant-configurator.js', array('wp-i18n'), $script_asset_file['version'], \\true);",
            "confidence": "medium",
            "details": {
                "url": "https://www.paypalobjects.com/merchant-library/merchant-configurator.js",
                "url_host": "www.paypalobjects.com"
            }
        }
    ],
    "resolved_sha": "f3b70bf7cdab0447af3c5a98b7d72ab32aef52d1"
}
High code_scan_match Smart Slider 3 (800k+ installs) Resolved 4mo ago
Slugsmart-slider-3
Finding count77
Findings
PatternKindFileLineSnippetConfidence
gzinflatebuiltinnextend/library/libraries/zip/reader.php142$data = gzinflate($data);medium
base64_string_longbuiltinnextend/library/libraries/zip/reader.php114$centralDirectoryData = unpack('vmadeversion/vextractversion/vflag/vcompressmethod/vmodtime/vmoddate/Vcrc/Vcompressedsize/Vuncompressedsize/vfilenamelength/vextrafieldlength/vcommentlengthmedium
base64_decodebuiltinnextend/library/libraries/base64.php13return base64_decode($data);medium
base64_string_longbuiltinlibrary/smartslider/plugins/widget/bullet/bullet.php62new N2ElementStyle($thumbnail, 'widget-bullet-thumbnail-style', n2_('Style'), 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siYmFja2dyb3VuZGNvbG9yIjoiMDAwMDAwODAiLCJwYWRkaW5nIjoiM3wqfDN8KnwzfCp8M3wqfHB4Imedium
base64_string_longbuiltinlibrary/smartslider/plugins/widgetthumbnail/default/default.php18'widget-thumbnail-style-bar' => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siYmFja2dyb3VuZGNvbG9yIjoiMjQyNDI0ZmYiLCJwYWRkaW5nIjoiM3wqfDN8KnwzfCp8M3wqfHB4IiwiYm94c2hhZG93IjoiMHwqfDB8Kmedium
base64_string_longbuiltinlibrary/smartslider/plugins/widgetthumbnail/default/default.php19'widget-thumbnail-style-slides' => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siYmFja2dyb3VuZGNvbG9yIjoiMDAwMDAwMDAiLCJwYWRkaW5nIjoiMHwqfDB8KnwwfCp8MHwqfHB4IiwiYm94c2hhZG93IjoiMHwqfDB8Kmedium
base64_string_longbuiltinlibrary/smartslider/plugins/widgetthumbnail/default/default.php26'widget-thumbnail-title-style' => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siYmFja2dyb3VuZGNvbG9yIjoiMDAwMDAwYWIiLCJwYWRkaW5nIjoiM3wqfDEwfCp8M3wqfDEwfCp8cHgiLCJib3hzaGFkb3ciOiIwfCp8Mmedium
base64_string_longbuiltinlibrary/smartslider/plugins/widgetthumbnail/default/default.php28'widget-thumbnail-title-font' => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siY29sb3IiOiJmZmZmZmZmZiIsInNpemUiOiIxMnx8cHgiLCJ0c2hhZG93IjoiMHwqfDB8KnwwfCp8MDAwMDAwYWIiLCJhZm9udCI6Ik1vbmedium
base64_string_longbuiltinlibrary/smartslider/plugins/widgetthumbnail/default/default.php30'widget-thumbnail-description-font' => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siY29sb3IiOiJmZmZmZmZmZiIsInNpemUiOiIxMnx8cHgiLCJ0c2hhZG93IjoiMHwqfDB8KnwwfCp8MDAwMDAwYWIiLCJhZm9udCI6Ik1vbmedium
base64_string_longbuiltinlibrary/smartslider/plugins/widgetarrow/image/image.php21'widget-arrow-style' => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siYmFja2dyb3VuZGNvbG9yIjoiMDAwMDAwYWIiLCJwYWRkaW5nIjoiMjB8KnwxMHwqfDIwfCp8MTB8KnxweCIsImJveHNoYWRvdyI6IjB8Knwwmedium
base64_string_longbuiltinlibrary/smartslider/plugins/widgetarrow/image/image.php291'widget-arrow-style' => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siYmFja2dyb3VuZGNvbG9yIjoiMDAwMDAwYWIiLCJwYWRkaW5nIjoiMnwqfDJ8KnwyfCp8MnwqfHB4IiwiYm94c2hhZG93IjoiMHwqfDB8KnwwfCp8MHmedium
base64_string_longbuiltinlibrary/smartslider/plugins/widgetbar/horizontal/horizontal.php17'widget-bar-style' => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siYmFja2dyb3VuZGNvbG9yIjoiMDAwMDAwYWIiLCJwYWRkaW5nIjoiNXwqfDIwfCp8NXwqfDIwfCp8cHgiLCJib3hzaGFkb3ciOiIwfCp8MHwqfDB8KnwwfCmedium
base64_string_longbuiltinlibrary/smartslider/plugins/widgetbar/horizontal/horizontal.php19'widget-bar-font-title' => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siY29sb3IiOiJmZmZmZmZmZiIsInNpemUiOiIxNHx8cHgiLCJ0c2hhZG93IjoiMHwqfDB8KnwwfCp8MDAwMDAwYzciLCJhZm9udCI6Ik1vbnRzZXJyYXQiLCmedium
base64_string_longbuiltinlibrary/smartslider/plugins/widgetbar/horizontal/horizontal.php21'widget-bar-font-description' => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siY29sb3IiOiJmZmZmZmZmZiIsInNpemUiOiIxNHx8cHgiLCJ0c2hhZG93IjoiMHwqfDB8KnwwfCp8MDAwMDAwYzciLCJhZm9udCI6Ik1vbnRzZXJyYXQiLCmedium
base64_string_longbuiltinlibrary/smartslider/plugins/widgetbar/horizontal/horizontal.php201'widget-bar-style' => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siYmFja2dyb3VuZGNvbG9yIjoiMDAwMDAwYWIiLCJwYWRkaW5nIjoiMjB8KnwyMHwqfDIwfCp8MjB8KnxweCIsImJveHNoYWRvdyI6IjB8KnwwfCp8MHwqfDBmedium
Resolved sha317b1c44350209e244b6fe5213671b55e1a3a374
View raw JSON
{
    "slug": "smart-slider-3",
    "finding_count": 77,
    "findings": [
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "nextend/library/libraries/zip/reader.php",
            "line": 142,
            "snippet": "$data = gzinflate($data);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_string_long",
            "kind": "builtin",
            "file": "nextend/library/libraries/zip/reader.php",
            "line": 114,
            "snippet": "$centralDirectoryData = unpack('vmadeversion/vextractversion/vflag/vcompressmethod/vmodtime/vmoddate/Vcrc/Vcompressedsize/Vuncompressedsize/vfilenamelength/vextrafieldlength/vcommentlength",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "nextend/library/libraries/base64.php",
            "line": 13,
            "snippet": "return base64_decode($data);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_string_long",
            "kind": "builtin",
            "file": "library/smartslider/plugins/widget/bullet/bullet.php",
            "line": 62,
            "snippet": "new N2ElementStyle($thumbnail, 'widget-bullet-thumbnail-style', n2_('Style'), 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siYmFja2dyb3VuZGNvbG9yIjoiMDAwMDAwODAiLCJwYWRkaW5nIjoiM3wqfDN8KnwzfCp8M3wqfHB4I",
            "confidence": "medium"
        },
        {
            "pattern": "base64_string_long",
            "kind": "builtin",
            "file": "library/smartslider/plugins/widgetthumbnail/default/default.php",
            "line": 18,
            "snippet": "'widget-thumbnail-style-bar'               => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siYmFja2dyb3VuZGNvbG9yIjoiMjQyNDI0ZmYiLCJwYWRkaW5nIjoiM3wqfDN8KnwzfCp8M3wqfHB4IiwiYm94c2hhZG93IjoiMHwqfDB8K",
            "confidence": "medium"
        },
        {
            "pattern": "base64_string_long",
            "kind": "builtin",
            "file": "library/smartslider/plugins/widgetthumbnail/default/default.php",
            "line": 19,
            "snippet": "'widget-thumbnail-style-slides'            => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siYmFja2dyb3VuZGNvbG9yIjoiMDAwMDAwMDAiLCJwYWRkaW5nIjoiMHwqfDB8KnwwfCp8MHwqfHB4IiwiYm94c2hhZG93IjoiMHwqfDB8K",
            "confidence": "medium"
        },
        {
            "pattern": "base64_string_long",
            "kind": "builtin",
            "file": "library/smartslider/plugins/widgetthumbnail/default/default.php",
            "line": 26,
            "snippet": "'widget-thumbnail-title-style'             => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siYmFja2dyb3VuZGNvbG9yIjoiMDAwMDAwYWIiLCJwYWRkaW5nIjoiM3wqfDEwfCp8M3wqfDEwfCp8cHgiLCJib3hzaGFkb3ciOiIwfCp8M",
            "confidence": "medium"
        },
        {
            "pattern": "base64_string_long",
            "kind": "builtin",
            "file": "library/smartslider/plugins/widgetthumbnail/default/default.php",
            "line": 28,
            "snippet": "'widget-thumbnail-title-font'              => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siY29sb3IiOiJmZmZmZmZmZiIsInNpemUiOiIxMnx8cHgiLCJ0c2hhZG93IjoiMHwqfDB8KnwwfCp8MDAwMDAwYWIiLCJhZm9udCI6Ik1vb",
            "confidence": "medium"
        },
        {
            "pattern": "base64_string_long",
            "kind": "builtin",
            "file": "library/smartslider/plugins/widgetthumbnail/default/default.php",
            "line": 30,
            "snippet": "'widget-thumbnail-description-font'        => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siY29sb3IiOiJmZmZmZmZmZiIsInNpemUiOiIxMnx8cHgiLCJ0c2hhZG93IjoiMHwqfDB8KnwwfCp8MDAwMDAwYWIiLCJhZm9udCI6Ik1vb",
            "confidence": "medium"
        },
        {
            "pattern": "base64_string_long",
            "kind": "builtin",
            "file": "library/smartslider/plugins/widgetarrow/image/image.php",
            "line": 21,
            "snippet": "'widget-arrow-style'                    => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siYmFja2dyb3VuZGNvbG9yIjoiMDAwMDAwYWIiLCJwYWRkaW5nIjoiMjB8KnwxMHwqfDIwfCp8MTB8KnxweCIsImJveHNoYWRvdyI6IjB8Knww",
            "confidence": "medium"
        },
        {
            "pattern": "base64_string_long",
            "kind": "builtin",
            "file": "library/smartslider/plugins/widgetarrow/image/image.php",
            "line": 291,
            "snippet": "'widget-arrow-style'              => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siYmFja2dyb3VuZGNvbG9yIjoiMDAwMDAwYWIiLCJwYWRkaW5nIjoiMnwqfDJ8KnwyfCp8MnwqfHB4IiwiYm94c2hhZG93IjoiMHwqfDB8KnwwfCp8MH",
            "confidence": "medium"
        },
        {
            "pattern": "base64_string_long",
            "kind": "builtin",
            "file": "library/smartslider/plugins/widgetbar/horizontal/horizontal.php",
            "line": 17,
            "snippet": "'widget-bar-style'            => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siYmFja2dyb3VuZGNvbG9yIjoiMDAwMDAwYWIiLCJwYWRkaW5nIjoiNXwqfDIwfCp8NXwqfDIwfCp8cHgiLCJib3hzaGFkb3ciOiIwfCp8MHwqfDB8KnwwfC",
            "confidence": "medium"
        },
        {
            "pattern": "base64_string_long",
            "kind": "builtin",
            "file": "library/smartslider/plugins/widgetbar/horizontal/horizontal.php",
            "line": 19,
            "snippet": "'widget-bar-font-title'       => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siY29sb3IiOiJmZmZmZmZmZiIsInNpemUiOiIxNHx8cHgiLCJ0c2hhZG93IjoiMHwqfDB8KnwwfCp8MDAwMDAwYzciLCJhZm9udCI6Ik1vbnRzZXJyYXQiLC",
            "confidence": "medium"
        },
        {
            "pattern": "base64_string_long",
            "kind": "builtin",
            "file": "library/smartslider/plugins/widgetbar/horizontal/horizontal.php",
            "line": 21,
            "snippet": "'widget-bar-font-description' => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siY29sb3IiOiJmZmZmZmZmZiIsInNpemUiOiIxNHx8cHgiLCJ0c2hhZG93IjoiMHwqfDB8KnwwfCp8MDAwMDAwYzciLCJhZm9udCI6Ik1vbnRzZXJyYXQiLC",
            "confidence": "medium"
        },
        {
            "pattern": "base64_string_long",
            "kind": "builtin",
            "file": "library/smartslider/plugins/widgetbar/horizontal/horizontal.php",
            "line": 201,
            "snippet": "'widget-bar-style'           => 'eyJuYW1lIjoiU3RhdGljIiwiZGF0YSI6W3siYmFja2dyb3VuZGNvbG9yIjoiMDAwMDAwYWIiLCJwYWRkaW5nIjoiMjB8KnwyMHwqfDIwfCp8MjB8KnxweCIsImJveHNoYWRvdyI6IjB8KnwwfCp8MHwqfDB",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "317b1c44350209e244b6fe5213671b55e1a3a374"
}
High code_scan_match Widgets for Google Reviews (1M+ installs) Resolved 4mo ago
Slugwp-reviews-plugin-for-google
Finding count7
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltintrustindex-plugin.class.php6,095wp_enqueue_style('trustindex-widget-preview-'.$fileName, "https://cdn.trustindex.io/assets/widget-presetted-css/v2/$fileName", [], true);medium
Url
https://cdn.trustindex.io/assets/widget-presetted-css/v2/$fileName
Url host
cdn.trustindex.io
remote_enqueuebuiltintrustindex-plugin.class.php6,146wp_enqueue_script('trustindex-loader-js', 'https://cdn.trustindex.io/loader.js', [], true, [medium
Url
https://cdn.trustindex.io/loader.js
Url host
cdn.trustindex.io
remote_enqueuebuiltinwp-reviews-plugin-for-google.php81wp_register_script('trustindex-loader-js', 'https://cdn.trustindex.io/loader.js', [], true, [medium
Url
https://cdn.trustindex.io/loader.js
Url host
cdn.trustindex.io
remote_enqueuebuiltintabs/free-widget-configurator.php476wp_enqueue_style('trustindex-widget-preview-css', 'https://cdn.trustindex.io/assets/ti-preview-box.css', [], true);medium
Url
https://cdn.trustindex.io/assets/ti-preview-box.css
Url host
cdn.trustindex.io
remote_enqueuebuiltintabs/my-reviews.php142wp_enqueue_style('trustindex-widget-css', 'https://cdn.trustindex.io/assets/widget-presetted-css/4-light-background.css', [], true);medium
Url
https://cdn.trustindex.io/assets/widget-presetted-css/4-light-background.css
Url host
cdn.trustindex.io
remote_enqueuebuiltintabs/my-reviews.php143wp_enqueue_script('trustindex-review-js', 'https://cdn.trustindex.io/assets/js/trustindex-review.js', [], true, true);medium
Url
https://cdn.trustindex.io/assets/js/trustindex-review.js
Url host
cdn.trustindex.io
remote_enqueuebuiltintabs/rate-us.php3wp_enqueue_script('trustindex-js', 'https://cdn.trustindex.io/loader.js', [], true, true);medium
Url
https://cdn.trustindex.io/loader.js
Url host
cdn.trustindex.io
Resolved sha309145b6a734c63580269341f73ef50d4fc86122
View raw JSON
{
    "slug": "wp-reviews-plugin-for-google",
    "finding_count": 7,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "trustindex-plugin.class.php",
            "line": 6095,
            "snippet": "wp_enqueue_style('trustindex-widget-preview-'.$fileName, \"https://cdn.trustindex.io/assets/widget-presetted-css/v2/$fileName\", [], true);",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.trustindex.io/assets/widget-presetted-css/v2/$fileName",
                "url_host": "cdn.trustindex.io"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "trustindex-plugin.class.php",
            "line": 6146,
            "snippet": "wp_enqueue_script('trustindex-loader-js', 'https://cdn.trustindex.io/loader.js', [], true, [",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.trustindex.io/loader.js",
                "url_host": "cdn.trustindex.io"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "wp-reviews-plugin-for-google.php",
            "line": 81,
            "snippet": "wp_register_script('trustindex-loader-js', 'https://cdn.trustindex.io/loader.js', [], true, [",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.trustindex.io/loader.js",
                "url_host": "cdn.trustindex.io"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "tabs/free-widget-configurator.php",
            "line": 476,
            "snippet": "wp_enqueue_style('trustindex-widget-preview-css', 'https://cdn.trustindex.io/assets/ti-preview-box.css', [], true);",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.trustindex.io/assets/ti-preview-box.css",
                "url_host": "cdn.trustindex.io"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "tabs/my-reviews.php",
            "line": 142,
            "snippet": "wp_enqueue_style('trustindex-widget-css', 'https://cdn.trustindex.io/assets/widget-presetted-css/4-light-background.css', [], true);",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.trustindex.io/assets/widget-presetted-css/4-light-background.css",
                "url_host": "cdn.trustindex.io"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "tabs/my-reviews.php",
            "line": 143,
            "snippet": "wp_enqueue_script('trustindex-review-js', 'https://cdn.trustindex.io/assets/js/trustindex-review.js', [], true, true);",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.trustindex.io/assets/js/trustindex-review.js",
                "url_host": "cdn.trustindex.io"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "tabs/rate-us.php",
            "line": 3,
            "snippet": "wp_enqueue_script('trustindex-js', 'https://cdn.trustindex.io/loader.js', [], true, true);",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.trustindex.io/loader.js",
                "url_host": "cdn.trustindex.io"
            }
        }
    ],
    "resolved_sha": "309145b6a734c63580269341f73ef50d4fc86122"
}
High code_scan_match Translate WordPress with GTranslate (900k+ installs) Resolved 4mo ago
Sluggtranslate
Finding count2
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltingtranslate.php197wp_enqueue_script('gt_widget_script_' . $unique_id, 'https://cdn.gtranslate.net/widgets/latest/base.js', array(), '', true);medium
Url
https://cdn.gtranslate.net/widgets/latest/base.js
Url host
cdn.gtranslate.net
remote_enqueuebuiltingtranslate.php352wp_enqueue_script('gt_widget_script_' . $unique_id, 'https://cdn.gtranslate.net/widgets/latest/' . $widget_short_name . '.js', array(), '', true);medium
Url
https://cdn.gtranslate.net/widgets/latest/
Url host
cdn.gtranslate.net
Resolved shad4527ef57c6098b18be5856be349feb439955344
View raw JSON
{
    "slug": "gtranslate",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "gtranslate.php",
            "line": 197,
            "snippet": "wp_enqueue_script('gt_widget_script_' . $unique_id, 'https://cdn.gtranslate.net/widgets/latest/base.js', array(), '', true);",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.gtranslate.net/widgets/latest/base.js",
                "url_host": "cdn.gtranslate.net"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "gtranslate.php",
            "line": 352,
            "snippet": "wp_enqueue_script('gt_widget_script_' . $unique_id, 'https://cdn.gtranslate.net/widgets/latest/' . $widget_short_name . '.js', array(), '', true);",
            "confidence": "medium",
            "details": {
                "url": "https://cdn.gtranslate.net/widgets/latest/",
                "url_host": "cdn.gtranslate.net"
            }
        }
    ],
    "resolved_sha": "d4527ef57c6098b18be5856be349feb439955344"
}
High code_scan_match Cookie Compliance for WordPress – Cookie Consent, GDPR & CCPA (800k+ installs) Resolved 4mo ago
Slugcookie-notice
Finding count3
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/welcome.php119wp_enqueue_script( 'cookie-notice-braintree-client', 'https://js.braintreegateway.com/web/3.71.0/js/client.min.js', [], null, false );medium
Url
https://js.braintreegateway.com/web/3.71.0/js/client.min.js
Url host
js.braintreegateway.com
remote_enqueuebuiltinincludes/welcome.php120wp_enqueue_script( 'cookie-notice-braintree-hostedfields', 'https://js.braintreegateway.com/web/3.71.0/js/hosted-fields.min.js', [], null, false );medium
Url
https://js.braintreegateway.com/web/3.71.0/js/hosted-fields.min.js
Url host
js.braintreegateway.com
remote_enqueuebuiltinincludes/welcome.php121wp_enqueue_script( 'cookie-notice-braintree-paypal', 'https://js.braintreegateway.com/web/3.71.0/js/paypal-checkout.min.js', [], null, false );medium
Url
https://js.braintreegateway.com/web/3.71.0/js/paypal-checkout.min.js
Url host
js.braintreegateway.com
Resolved sha964b90725ad6475b5a32fb8dddad0b170f173aae
View raw JSON
{
    "slug": "cookie-notice",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/welcome.php",
            "line": 119,
            "snippet": "wp_enqueue_script( 'cookie-notice-braintree-client', 'https://js.braintreegateway.com/web/3.71.0/js/client.min.js', [], null, false );",
            "confidence": "medium",
            "details": {
                "url": "https://js.braintreegateway.com/web/3.71.0/js/client.min.js",
                "url_host": "js.braintreegateway.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/welcome.php",
            "line": 120,
            "snippet": "wp_enqueue_script( 'cookie-notice-braintree-hostedfields', 'https://js.braintreegateway.com/web/3.71.0/js/hosted-fields.min.js', [], null, false );",
            "confidence": "medium",
            "details": {
                "url": "https://js.braintreegateway.com/web/3.71.0/js/hosted-fields.min.js",
                "url_host": "js.braintreegateway.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/welcome.php",
            "line": 121,
            "snippet": "wp_enqueue_script( 'cookie-notice-braintree-paypal', 'https://js.braintreegateway.com/web/3.71.0/js/paypal-checkout.min.js', [], null, false );",
            "confidence": "medium",
            "details": {
                "url": "https://js.braintreegateway.com/web/3.71.0/js/paypal-checkout.min.js",
                "url_host": "js.braintreegateway.com"
            }
        }
    ],
    "resolved_sha": "964b90725ad6475b5a32fb8dddad0b170f173aae"
}
High code_scan_match Custom Post Type UI (1M+ installs) Resolved 4mo ago
Slugcustom-post-type-ui
Finding count2
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltininc/utility.php450wp_enqueue_style( 'cptui-emailoctopus', 'https://emailoctopus.com/bundles/emailoctopuslist/css/formEmbed.css' ); // phpcs:ignoremedium
Url
https://emailoctopus.com/bundles/emailoctopuslist/css/formEmbed.css
Url host
emailoctopus.com
remote_enqueuebuiltininc/utility.php452wp_enqueue_script( 'cptui-emailoctopus-js', 'https://emailoctopus.com/bundles/emailoctopuslist/js/1.4/formEmbed.js', [ 'jquery' ], '', true ); // phpcs:ignoremedium
Url
https://emailoctopus.com/bundles/emailoctopuslist/js/1.4/formEmbed.js
Url host
emailoctopus.com
Resolved shad073b2e9c15bfdb5ca0de39abeccb14bd649e01e
View raw JSON
{
    "slug": "custom-post-type-ui",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/utility.php",
            "line": 450,
            "snippet": "wp_enqueue_style( 'cptui-emailoctopus', 'https://emailoctopus.com/bundles/emailoctopuslist/css/formEmbed.css' ); // phpcs:ignore",
            "confidence": "medium",
            "details": {
                "url": "https://emailoctopus.com/bundles/emailoctopuslist/css/formEmbed.css",
                "url_host": "emailoctopus.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/utility.php",
            "line": 452,
            "snippet": "wp_enqueue_script( 'cptui-emailoctopus-js', 'https://emailoctopus.com/bundles/emailoctopuslist/js/1.4/formEmbed.js', [ 'jquery' ], '', true ); // phpcs:ignore",
            "confidence": "medium",
            "details": {
                "url": "https://emailoctopus.com/bundles/emailoctopuslist/js/1.4/formEmbed.js",
                "url_host": "emailoctopus.com"
            }
        }
    ],
    "resolved_sha": "d073b2e9c15bfdb5ca0de39abeccb14bd649e01e"
}
High code_scan_match WP Fastest Cache – WordPress Cache Plugin (1M+ installs) Resolved 4mo ago
Slugwp-fastest-cache
Finding count2
Findings
PatternKindFileLineSnippetConfidence
wpconfig_writebuiltininc/admin.php381if($wp_config = @file_get_contents(ABSPATH."wp-config.php")){medium
wpconfig_writebuiltininc/admin.php384if(!@file_put_contents(ABSPATH."wp-config.php", $wp_config)){medium
Resolved shabd19d41004740fb12b65cb53ac8924a49f3b732b
View raw JSON
{
    "slug": "wp-fastest-cache",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "inc/admin.php",
            "line": 381,
            "snippet": "if($wp_config = @file_get_contents(ABSPATH.\"wp-config.php\")){",
            "confidence": "medium"
        },
        {
            "pattern": "wpconfig_write",
            "kind": "builtin",
            "file": "inc/admin.php",
            "line": 384,
            "snippet": "if(!@file_put_contents(ABSPATH.\"wp-config.php\", $wp_config)){",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "bd19d41004740fb12b65cb53ac8924a49f3b732b"
}
High code_scan_match Essential Addons for Elementor – Popular Elementor Templates & Widgets (1M+ installs) Resolved 4mo ago
Slugessential-addons-for-elementor-lite
Finding count2
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/Elements/Login_Register.php6,182wp_register_script('eael-recaptcha-v3', "https://www.recaptcha.net/recaptcha/api.js?{$recaptcha_api_args1}", false, EAEL_PLUGIN_VERSION, false);medium
Url
https://www.recaptcha.net/recaptcha/api.js?{$recaptcha_api_args1}
Url host
www.recaptcha.net
remote_enqueuebuiltinincludes/Traits/Enqueue.php48wp_register_script('eael-recaptcha', "https://www.recaptcha.net/recaptcha/api.js?{$recaptcha_api_args}", false, EAEL_PLUGIN_VERSION, false);medium
Url
https://www.recaptcha.net/recaptcha/api.js?{$recaptcha_api_args}
Url host
www.recaptcha.net
Resolved sha0c014dc1fa52f91db5cd9e472c5a7d140a7d9ae9
View raw JSON
{
    "slug": "essential-addons-for-elementor-lite",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/Elements/Login_Register.php",
            "line": 6182,
            "snippet": "wp_register_script('eael-recaptcha-v3', \"https://www.recaptcha.net/recaptcha/api.js?{$recaptcha_api_args1}\", false, EAEL_PLUGIN_VERSION, false);",
            "confidence": "medium",
            "details": {
                "url": "https://www.recaptcha.net/recaptcha/api.js?{$recaptcha_api_args1}",
                "url_host": "www.recaptcha.net"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/Traits/Enqueue.php",
            "line": 48,
            "snippet": "wp_register_script('eael-recaptcha', \"https://www.recaptcha.net/recaptcha/api.js?{$recaptcha_api_args}\", false, EAEL_PLUGIN_VERSION, false);",
            "confidence": "medium",
            "details": {
                "url": "https://www.recaptcha.net/recaptcha/api.js?{$recaptcha_api_args}",
                "url_host": "www.recaptcha.net"
            }
        }
    ],
    "resolved_sha": "0c014dc1fa52f91db5cd9e472c5a7d140a7d9ae9"
}
Sluginsert-headers-and-footers
Finding count4
Findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinincludes/generator/class-wpcode-generator-style.php280$enqueue = 'true' === $styles_enqueue[ $key ] ? "wp_enqueue_style( '$style' );" : '';medium
remote_enqueuebuiltinincludes/generator/class-wpcode-generator-style.php285wp_register_style( '$style', '$styles_urls[$key]', {$this->array_to_code_string($dependencies)}, '$styles_versions[$key]'$media );medium
remote_enqueuebuiltinincludes/generator/class-wpcode-generator-script.php279$enqueue = 'true' === $scripts_enqueue[ $key ] ? "wp_enqueue_script( '$script_name' );" : '';medium
remote_enqueuebuiltinincludes/generator/class-wpcode-generator-script.php283wp_register_script( '$script_name', '$scripts_urls[$key]', {$this->array_to_code_string($dependencies)}, '$scripts_versions[$key]', $scripts_locations[$key] );medium
Resolved shace01147183d9a621f4f1d3b4cd7d4447fd5f1257
View raw JSON
{
    "slug": "insert-headers-and-footers",
    "finding_count": 4,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/generator/class-wpcode-generator-style.php",
            "line": 280,
            "snippet": "$enqueue      = 'true' === $styles_enqueue[ $key ] ? \"wp_enqueue_style( '$style' );\" : '';",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/generator/class-wpcode-generator-style.php",
            "line": 285,
            "snippet": "wp_register_style( '$style', '$styles_urls[$key]', {$this->array_to_code_string($dependencies)}, '$styles_versions[$key]'$media );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/generator/class-wpcode-generator-script.php",
            "line": 279,
            "snippet": "$enqueue      = 'true' === $scripts_enqueue[ $key ] ? \"wp_enqueue_script( '$script_name' );\" : '';",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/generator/class-wpcode-generator-script.php",
            "line": 283,
            "snippet": "wp_register_script( '$script_name', '$scripts_urls[$key]', {$this->array_to_code_string($dependencies)}, '$scripts_versions[$key]', $scripts_locations[$key] );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "ce01147183d9a621f4f1d3b4cd7d4447fd5f1257"
}
High compromised_committer_burst Invoize – PDF Invoices, Packing Slips, Quotations & WooCommerce Invoicing (30 installs) Resolved 4mo ago
Sluginvoize
Author slugwpsora
Burst start2026-05-05 00:06:54
Burst end2026-05-05 00:41:07
Burst commits16
Burst window minutes90
Tenure days194
Distinct messages16
Avg message length11
Top messagewrong folder and files
Top message count1
Prt revert—
ExplanationEstablished author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "invoize",
    "author_slug": "wpsora",
    "burst_start": "2026-05-05 00:06:54",
    "burst_end": "2026-05-05 00:41:07",
    "burst_commits": 16,
    "burst_window_minutes": 90,
    "tenure_days": 194,
    "distinct_messages": 16,
    "avg_message_length": 11.3,
    "top_message": "wrong folder and files",
    "top_message_count": 1,
    "prt_revert": null,
    "explanation": "Established author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High bulk_committer_takeover Checkout Address AutoFill For WooCommerce (300 installs) Resolved 5mo ago
Committertripathytanmay
Member since2021-01-14
Plugins joined6
Spread days33
Earliest join2021-02-12 05:17:20
Latest join2021-03-17 08:05:22
Combined installs800
Sample plugins
SlugActive installsFirst commit at
checkout-address-autofill-for-woocommerce4002021-02-26 10:26:34
catalog-mode-for-woocommerce3002021-02-17 07:29:48
coupon-by-roles-for-woocommerce1002021-02-17 13:20:58
integrate-caldera-forms-salesforce02021-02-17 10:54:44
woo-mailchimp-newsletter-discount02021-03-17 08:05:22
zetamatic-integration-hubspot-caldera-forms02021-02-12 05:17:20
View raw JSON
{
    "committer": "tripathytanmay",
    "member_since": "2021-01-14",
    "plugins_joined": 6,
    "spread_days": 33,
    "earliest_join": "2021-02-12 05:17:20",
    "latest_join": "2021-03-17 08:05:22",
    "combined_installs": 800,
    "sample_plugins": [
        {
            "slug": "checkout-address-autofill-for-woocommerce",
            "active_installs": 400,
            "first_commit_at": "2021-02-26 10:26:34"
        },
        {
            "slug": "catalog-mode-for-woocommerce",
            "active_installs": 300,
            "first_commit_at": "2021-02-17 07:29:48"
        },
        {
            "slug": "coupon-by-roles-for-woocommerce",
            "active_installs": 100,
            "first_commit_at": "2021-02-17 13:20:58"
        },
        {
            "slug": "integrate-caldera-forms-salesforce",
            "active_installs": 0,
            "first_commit_at": "2021-02-17 10:54:44"
        },
        {
            "slug": "woo-mailchimp-newsletter-discount",
            "active_installs": 0,
            "first_commit_at": "2021-03-17 08:05:22"
        },
        {
            "slug": "zetamatic-integration-hubspot-caldera-forms",
            "active_installs": 0,
            "first_commit_at": "2021-02-12 05:17:20"
        }
    ]
}
High bulk_committer_takeover Code Embed (10k+ installs) Resolved 5mo ago
Committercodedart
Member since2015-08-23
Plugins joined5
Spread days52
Earliest join2016-02-01 17:07:40
Latest join2016-03-25 12:58:59
Combined installs12,800
Sample plugins
SlugActive installsFirst commit at
simple-embed-code10,0002016-02-01 17:07:40
artiss-currency-converter1,0002016-03-08 13:24:12
artiss-transient-cleaner1,0002016-02-27 14:40:12
plugins-list8002016-03-24 14:53:30
wp-readme-parser02016-03-25 12:58:59
Triage note 2026 05 03codedart is a legacy handle of David Artiss (now @dartiss). All slugs are artiss-* family; his own original plugins.
View raw JSON
{
    "committer": "codedart",
    "member_since": "2015-08-23",
    "plugins_joined": 5,
    "spread_days": 52,
    "earliest_join": "2016-02-01 17:07:40",
    "latest_join": "2016-03-25 12:58:59",
    "combined_installs": 12800,
    "sample_plugins": [
        {
            "slug": "simple-embed-code",
            "active_installs": 10000,
            "first_commit_at": "2016-02-01 17:07:40"
        },
        {
            "slug": "artiss-currency-converter",
            "active_installs": 1000,
            "first_commit_at": "2016-03-08 13:24:12"
        },
        {
            "slug": "artiss-transient-cleaner",
            "active_installs": 1000,
            "first_commit_at": "2016-02-27 14:40:12"
        },
        {
            "slug": "plugins-list",
            "active_installs": 800,
            "first_commit_at": "2016-03-24 14:53:30"
        },
        {
            "slug": "wp-readme-parser",
            "active_installs": 0,
            "first_commit_at": "2016-03-25 12:58:59"
        }
    ],
    "triage_note_2026_05_03": "codedart is a legacy handle of David Artiss (now @dartiss). All slugs are artiss-* family; his own original plugins."
}
High bulk_committer_takeover underConstruction (40k+ installs) Resolved 5mo ago
Committernoahkagan
Member since2014-09-15
Plugins joined7
Spread days58
Earliest join2015-05-07 19:53:05
Latest join2015-07-05 15:51:40
Combined installs74,000
Sample plugins
SlugActive installsFirst commit at
underconstruction40,0002015-07-05 15:51:40
social-media-widget30,0002015-06-10 04:22:35
mail-subscribe-list3,0002015-05-09 15:45:46
simple-popup-plugin1,0002015-05-08 22:58:45
google-analyticator02015-05-13 05:01:09
social-popup02015-05-07 19:53:05
wp-google-fonts02015-06-02 21:43:44
Triage note 2026 05 03Noah Kagan / AppSumo Sumo Group 2015 plugin acquisitions; underconstruction has since transferred again to @grimmdude. Historical handoff, no malicious code.
View raw JSON
{
    "committer": "noahkagan",
    "member_since": "2014-09-15",
    "plugins_joined": 7,
    "spread_days": 58,
    "earliest_join": "2015-05-07 19:53:05",
    "latest_join": "2015-07-05 15:51:40",
    "combined_installs": 74000,
    "sample_plugins": [
        {
            "slug": "underconstruction",
            "active_installs": 40000,
            "first_commit_at": "2015-07-05 15:51:40"
        },
        {
            "slug": "social-media-widget",
            "active_installs": 30000,
            "first_commit_at": "2015-06-10 04:22:35"
        },
        {
            "slug": "mail-subscribe-list",
            "active_installs": 3000,
            "first_commit_at": "2015-05-09 15:45:46"
        },
        {
            "slug": "simple-popup-plugin",
            "active_installs": 1000,
            "first_commit_at": "2015-05-08 22:58:45"
        },
        {
            "slug": "google-analyticator",
            "active_installs": 0,
            "first_commit_at": "2015-05-13 05:01:09"
        },
        {
            "slug": "social-popup",
            "active_installs": 0,
            "first_commit_at": "2015-05-07 19:53:05"
        },
        {
            "slug": "wp-google-fonts",
            "active_installs": 0,
            "first_commit_at": "2015-06-02 21:43:44"
        }
    ],
    "triage_note_2026_05_03": "Noah Kagan / AppSumo Sumo Group 2015 plugin acquisitions; underconstruction has since transferred again to @grimmdude. Historical handoff, no malicious code."
}
High bulk_committer_takeover BlogVault Backup & Staging (80k+ installs) Resolved 5mo ago
Committerrrv4813
Member since2016-12-01
Plugins joined5
Spread days36
Earliest join2016-12-28 06:15:16
Latest join2017-02-02 23:29:04
Combined installs101,000
Sample plugins
SlugActive installsFirst commit at
blogvault-real-time-backup80,0002017-02-02 23:29:04
bv-cloudways-automated-migration20,0002017-02-02 18:37:46
bv-pantheon-migration1,0002017-02-02 18:45:07
savvii-wp-migrate02016-12-28 06:15:16
wp-site-migrate02017-02-02 18:33:19
Triage note 2026 05 03rrv4813 = BlogVault team member. All slugs are bv-* / blogvault-* internal portfolio. Same-company contributor add.
View raw JSON
{
    "committer": "rrv4813",
    "member_since": "2016-12-01",
    "plugins_joined": 5,
    "spread_days": 36,
    "earliest_join": "2016-12-28 06:15:16",
    "latest_join": "2017-02-02 23:29:04",
    "combined_installs": 101000,
    "sample_plugins": [
        {
            "slug": "blogvault-real-time-backup",
            "active_installs": 80000,
            "first_commit_at": "2017-02-02 23:29:04"
        },
        {
            "slug": "bv-cloudways-automated-migration",
            "active_installs": 20000,
            "first_commit_at": "2017-02-02 18:37:46"
        },
        {
            "slug": "bv-pantheon-migration",
            "active_installs": 1000,
            "first_commit_at": "2017-02-02 18:45:07"
        },
        {
            "slug": "savvii-wp-migrate",
            "active_installs": 0,
            "first_commit_at": "2016-12-28 06:15:16"
        },
        {
            "slug": "wp-site-migrate",
            "active_installs": 0,
            "first_commit_at": "2017-02-02 18:33:19"
        }
    ],
    "triage_note_2026_05_03": "rrv4813 = BlogVault team member. All slugs are bv-* / blogvault-* internal portfolio. Same-company contributor add."
}
High bulk_committer_takeover All in One SEO Pack Importer (500 installs) Resolved 5mo ago
Committerpbaylies
Member since2011-05-02
Plugins joined5
Spread days0
Earliest join2012-12-13 16:30:54
Latest join2012-12-13 20:20:30
Combined installs800
Sample plugins
SlugActive installsFirst commit at
all-in-one-seo-pack-importer5002012-12-13 19:52:52
display-name-author-permalink2002012-12-13 20:09:12
ft-calendar1002012-12-13 18:59:36
moderate-selected-posts02012-12-13 20:20:30
simplemap02012-12-13 16:30:54
Triage note 2026 05 03Peter Baylies (Purcado dev), 2012 oldtimer cohort. All 5 plugins committed same day = original portfolio publication on wp.org account creation.
View raw JSON
{
    "committer": "pbaylies",
    "member_since": "2011-05-02",
    "plugins_joined": 5,
    "spread_days": 0,
    "earliest_join": "2012-12-13 16:30:54",
    "latest_join": "2012-12-13 20:20:30",
    "combined_installs": 800,
    "sample_plugins": [
        {
            "slug": "all-in-one-seo-pack-importer",
            "active_installs": 500,
            "first_commit_at": "2012-12-13 19:52:52"
        },
        {
            "slug": "display-name-author-permalink",
            "active_installs": 200,
            "first_commit_at": "2012-12-13 20:09:12"
        },
        {
            "slug": "ft-calendar",
            "active_installs": 100,
            "first_commit_at": "2012-12-13 18:59:36"
        },
        {
            "slug": "moderate-selected-posts",
            "active_installs": 0,
            "first_commit_at": "2012-12-13 20:20:30"
        },
        {
            "slug": "simplemap",
            "active_installs": 0,
            "first_commit_at": "2012-12-13 16:30:54"
        }
    ],
    "triage_note_2026_05_03": "Peter Baylies (Purcado dev), 2012 oldtimer cohort. All 5 plugins committed same day = original portfolio publication on wp.org account creation."
}
High manual_audit_seed WP Antivirus Site Protection (by SiteGuarding.com) (4k+ installs) Malicious 5mo ago
Slugwp-antivirus-site-protection
ReasonAnchor for audit #27 — SiteGuarding 27-plugin portfolio (2013-2020 era), wp.org mass-closed 2020-05-04 → 2020-06-05. Connected to audit #25 (lulub5592 burner) and #26 (dalielsam burner) via SafetyBis Ltd / DRAFIELO LIMITED corporate trail and shared C2 infrastructure (siteguarding.com, cmsplughub.com NS = NS1.SITEGUARDING.COM). Manually seeded for portfolio-level audit linkage.
Linked audits25 26
Portfolio size27
Portfolio install base4690+
View raw JSON
{
    "slug": "wp-antivirus-site-protection",
    "reason": "Anchor for audit #27 \u2014 SiteGuarding 27-plugin portfolio (2013-2020 era), wp.org mass-closed 2020-05-04 \u2192 2020-06-05. Connected to audit #25 (lulub5592 burner) and #26 (dalielsam burner) via SafetyBis Ltd / DRAFIELO LIMITED corporate trail and shared C2 infrastructure (siteguarding.com, cmsplughub.com NS = NS1.SITEGUARDING.COM). Manually seeded for portfolio-level audit linkage.",
    "linked_audits": [
        25,
        26
    ],
    "portfolio_size": 27,
    "portfolio_install_base": "4690+"
}
High code_scan_match Jetpack – WP Security, Backup, Speed, & Growth (3M+ installs) Resolved 5mo ago
Slugjetpack
Finding count8
Findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinextensions/blocks/pinterest/pinterest.php241wp_enqueue_script( 'pinterest-pinit', 'https://assets.pinterest.com/js/pinit.js', array(), JETPACK__VERSION, true );medium
Url
https://assets.pinterest.com/js/pinit.js
Url host
assets.pinterest.com
remote_enqueuebuiltinextensions/blocks/tock/tock.php51wp_enqueue_script( 'tock-widget', 'https://www.exploretock.com/tock.js', array(), JETPACK__VERSION, true );medium
Url
https://www.exploretock.com/tock.js
Url host
www.exploretock.com
remote_enqueuebuiltinextensions/blocks/eventbrite/eventbrite.php121wp_enqueue_script( 'eventbrite-widget', 'https://www.eventbrite.com/static/widgets/eb_widgets.js', array(), JETPACK__VERSION, true );medium
Url
https://www.eventbrite.com/static/widgets/eb_widgets.js
Url host
www.eventbrite.com
remote_enqueuebuiltinextensions/blocks/eventbrite/eventbrite.php210wp_enqueue_script( 'eventbrite-widget', 'https://www.eventbrite.com/static/widgets/eb_widgets.js', array(), JETPACK__VERSION, true );medium
Url
https://www.eventbrite.com/static/widgets/eb_widgets.js
Url host
www.eventbrite.com
remote_enqueuebuiltinextensions/blocks/calendly/calendly.php87wp_enqueue_style( 'jetpack-calendly-external-css', 'https://assets.calendly.com/assets/external/widget.css', null, JETPACK__VERSION );medium
Url
https://assets.calendly.com/assets/external/widget.css
Url host
assets.calendly.com
remote_enqueuebuiltinmodules/videopress/shortcode.php176wp_register_script( 'videopress', 'https://v0.wordpress.com/js/videopress.js', array( 'jquery', 'swfobject' ), '1.09', false );medium
Url
https://v0.wordpress.com/js/videopress.js
Url host
v0.wordpress.com
remote_enqueuebuiltinmodules/shortcodes/tweet.php174wp_register_script( 'twitter-widgets', 'https://platform.twitter.com/widgets.js', array(), JETPACK__VERSION, true );medium
Url
https://platform.twitter.com/widgets.js
Url host
platform.twitter.com
remote_enqueuebuiltinmodules/gravatar-hovercards.php273wp_enqueue_script( 'grofiles-cards', 'https://secure.gravatar.com/js/gprofiles.js', array(), GROFILES__CACHE_BUSTER, true );medium
Url
https://secure.gravatar.com/js/gprofiles.js
Url host
secure.gravatar.com
Triage note 2026 05 03jetpack: remote_enqueue matches are intentional widget integrations (pinterest, eventbrite, calendly, twitter, gravatar, videopress). Automattic-owned, intentional vendor JS embeds.
View raw JSON
{
    "slug": "jetpack",
    "finding_count": 8,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "extensions/blocks/pinterest/pinterest.php",
            "line": 241,
            "snippet": "wp_enqueue_script( 'pinterest-pinit', 'https://assets.pinterest.com/js/pinit.js', array(), JETPACK__VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://assets.pinterest.com/js/pinit.js",
                "url_host": "assets.pinterest.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "extensions/blocks/tock/tock.php",
            "line": 51,
            "snippet": "wp_enqueue_script( 'tock-widget', 'https://www.exploretock.com/tock.js', array(), JETPACK__VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.exploretock.com/tock.js",
                "url_host": "www.exploretock.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "extensions/blocks/eventbrite/eventbrite.php",
            "line": 121,
            "snippet": "wp_enqueue_script( 'eventbrite-widget', 'https://www.eventbrite.com/static/widgets/eb_widgets.js', array(), JETPACK__VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.eventbrite.com/static/widgets/eb_widgets.js",
                "url_host": "www.eventbrite.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "extensions/blocks/eventbrite/eventbrite.php",
            "line": 210,
            "snippet": "wp_enqueue_script( 'eventbrite-widget', 'https://www.eventbrite.com/static/widgets/eb_widgets.js', array(), JETPACK__VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.eventbrite.com/static/widgets/eb_widgets.js",
                "url_host": "www.eventbrite.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "extensions/blocks/calendly/calendly.php",
            "line": 87,
            "snippet": "wp_enqueue_style( 'jetpack-calendly-external-css', 'https://assets.calendly.com/assets/external/widget.css', null, JETPACK__VERSION );",
            "confidence": "medium",
            "details": {
                "url": "https://assets.calendly.com/assets/external/widget.css",
                "url_host": "assets.calendly.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/videopress/shortcode.php",
            "line": 176,
            "snippet": "wp_register_script( 'videopress', 'https://v0.wordpress.com/js/videopress.js', array( 'jquery', 'swfobject' ), '1.09', false );",
            "confidence": "medium",
            "details": {
                "url": "https://v0.wordpress.com/js/videopress.js",
                "url_host": "v0.wordpress.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/shortcodes/tweet.php",
            "line": 174,
            "snippet": "wp_register_script( 'twitter-widgets', 'https://platform.twitter.com/widgets.js', array(), JETPACK__VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://platform.twitter.com/widgets.js",
                "url_host": "platform.twitter.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "modules/gravatar-hovercards.php",
            "line": 273,
            "snippet": "wp_enqueue_script( 'grofiles-cards', 'https://secure.gravatar.com/js/gprofiles.js', array(), GROFILES__CACHE_BUSTER, true );",
            "confidence": "medium",
            "details": {
                "url": "https://secure.gravatar.com/js/gprofiles.js",
                "url_host": "secure.gravatar.com"
            }
        }
    ],
    "triage_note_2026_05_03": "jetpack: remote_enqueue matches are intentional widget integrations (pinterest, eventbrite, calendly, twitter, gravatar, videopress). Automattic-owned, intentional vendor JS embeds."
}
High code_scan_match Rank Math SEO – AI SEO Tools to Dominate SEO Rankings (4M+ installs) Resolved 5mo ago
Slugseo-by-rank-math
Finding count2
Findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinincludes/3rdparty/divi/class-divi.php113wp_register_script( 'rm-react', "{$path}react{$suffix}.js", [ 'wp-polyfill', 'react' ], '16.13.1', true );medium
remote_enqueuebuiltinincludes/3rdparty/divi/class-divi.php114wp_register_script( 'rm-react-dom', "{$path}react-dom{$suffix}.js", [ 'rm-react', 'react-dom' ], '16.13.1', true );medium
Triage note 2026 05 03seo-by-rank-math: remote_enqueue uses templated $path variable for local React script registration; no remote URL.
View raw JSON
{
    "slug": "seo-by-rank-math",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/3rdparty/divi/class-divi.php",
            "line": 113,
            "snippet": "wp_register_script( 'rm-react', \"{$path}react{$suffix}.js\", [ 'wp-polyfill', 'react' ], '16.13.1', true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/3rdparty/divi/class-divi.php",
            "line": 114,
            "snippet": "wp_register_script( 'rm-react-dom', \"{$path}react-dom{$suffix}.js\", [ 'rm-react', 'react-dom' ], '16.13.1', true );",
            "confidence": "medium"
        }
    ],
    "triage_note_2026_05_03": "seo-by-rank-math: remote_enqueue uses templated $path variable for local React script registration; no remote URL."
}
High code_scan_match Wordfence Security – Firewall, Malware Scan, and Login Security (5M+ installs) Resolved 5mo ago
Slugwordfence
Finding count37
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinlib/wfActivityReport.php592$paramKey = base64_decode($actionData['paramKey']);medium
base64_decodebuiltinlib/wfActivityReport.php593$paramValue = base64_decode($actionData['paramValue']);medium
base64_decodebuiltinlib/wfUtils.php3,791$intermediate = base64_decode($intermediate);medium
base64_decodebuiltinlib/wfJWT.php21$decodedHeader = base64_decode($header);medium
base64_decodebuiltinlib/wfJWT.php32$decodedBody = base64_decode($body);medium
base64_decodebuiltinlib/wfJWT.php91$decodedHeader = base64_decode($header);medium
base64_decodebuiltinlib/wfJWT.php107$decodedBody = base64_decode($body);medium
base64_decodebuiltinlib/wfJWT.php179return base64_decode(strtr($data, '-_', '+/'));medium
base64_decodebuiltinlib/wordfenceURLHoover.php604$skipList = new wfBinaryList(base64_decode(wfConfig::get('wfsbskip', '')));medium
base64_decodebuiltinlib/wfLog.php1,356$actionData[$key] = base64_decode($actionData[$key]);medium
base64_decodebuiltinlib/wordfenceClass.php1,182$iwpRequest = json_decode(trim(base64_decode($iwpRequestDataArray[1])), true);medium
base64_decodebuiltinlib/wordfenceClass.php7,588$waf->whitelistRuleForParam(base64_decode($_POST['path']), base64_decode($_POST['paramKey']),medium
base64_decodebuiltinlib/wordfenceClass.php8,116$paramKey = base64_decode($actionData['paramKey']);medium
base64_decodebuiltinlib/wordfenceClass.php8,117$paramValue = base64_decode($actionData['paramValue']);medium
base64_decodebuiltinlib/wordfenceClass.php8,356$value['path'] = base64_decode($path);medium
Triage note 2026 05 03wordfence: 37 base64_decode hits, all in legitimate JWT decode (lib/wfJWT.php), activity-report parameters, URL hoover skip-list. Standard security-plugin internals.
View raw JSON
{
    "slug": "wordfence",
    "finding_count": 37,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/wfActivityReport.php",
            "line": 592,
            "snippet": "$paramKey = base64_decode($actionData['paramKey']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/wfActivityReport.php",
            "line": 593,
            "snippet": "$paramValue = base64_decode($actionData['paramValue']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/wfUtils.php",
            "line": 3791,
            "snippet": "$intermediate = base64_decode($intermediate);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/wfJWT.php",
            "line": 21,
            "snippet": "$decodedHeader = base64_decode($header);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/wfJWT.php",
            "line": 32,
            "snippet": "$decodedBody = base64_decode($body);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/wfJWT.php",
            "line": 91,
            "snippet": "$decodedHeader = base64_decode($header);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/wfJWT.php",
            "line": 107,
            "snippet": "$decodedBody = base64_decode($body);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/wfJWT.php",
            "line": 179,
            "snippet": "return base64_decode(strtr($data, '-_', '+/'));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/wordfenceURLHoover.php",
            "line": 604,
            "snippet": "$skipList = new wfBinaryList(base64_decode(wfConfig::get('wfsbskip', '')));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/wfLog.php",
            "line": 1356,
            "snippet": "$actionData[$key] = base64_decode($actionData[$key]);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/wordfenceClass.php",
            "line": 1182,
            "snippet": "$iwpRequest = json_decode(trim(base64_decode($iwpRequestDataArray[1])), true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/wordfenceClass.php",
            "line": 7588,
            "snippet": "$waf->whitelistRuleForParam(base64_decode($_POST['path']), base64_decode($_POST['paramKey']),",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/wordfenceClass.php",
            "line": 8116,
            "snippet": "$paramKey = base64_decode($actionData['paramKey']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/wordfenceClass.php",
            "line": 8117,
            "snippet": "$paramValue = base64_decode($actionData['paramValue']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/wordfenceClass.php",
            "line": 8356,
            "snippet": "$value['path'] = base64_decode($path);",
            "confidence": "medium"
        }
    ],
    "triage_note_2026_05_03": "wordfence: 37 base64_decode hits, all in legitimate JWT decode (lib/wfJWT.php), activity-report parameters, URL hoover skip-list. Standard security-plugin internals."
}
High manual_audit_seed Web Image Optimization X (100 installs) Malicious 5mo ago
Slugimage-optimizer-x
ReasonC2 sibling of wp-advanced-math-captcha audit #25 — CMSPlughubAPI_LicenseValidator.php ships side-channel update endpoint at api.cmsplughub.com (NS = NS1.SITEGUARDING.COM). Manually seeded for audit linkage.
Linked audit25
View raw JSON
{
    "slug": "image-optimizer-x",
    "reason": "C2 sibling of wp-advanced-math-captcha audit #25 \u2014 CMSPlughubAPI_LicenseValidator.php ships side-channel update endpoint at api.cmsplughub.com (NS = NS1.SITEGUARDING.COM). Manually seeded for audit linkage.",
    "linked_audit": 25
}