WP Beacon

Events

1,071 events resolved (filtered). · Last rule pass 1h ago. · 7 open / 4,649 resolved overall.

State: Open Resolved All
Severity: All Critical High · 5 Medium Low · 2 Info
Rule: All author_changed author_younger_than_plugin bulk_changelog_reuse bulk_committer_takeover closed_blob_scan closed_plugin_resurrection code_pattern code_scan_delta code_scan_match committer_younger_than_plugin compromised_committer_burst contributor_added domain_younger_than_plugin forum_complaint_cluster manual_audit_seed new_committer_young_account plugin_closed prt_forum_advisory recent_prt_intervention release_after_dormancy update_hijack_shape version_compare_trap
High bulk_committer_takeover miniOrange Embed Files for SharePoint/OneDrive (700 installs) Resolved 4mo ago
Committermowpms
Member since2024-11-11
Plugins joined5
Spread days72
Earliest join2024-11-13 10:16:45
Latest join2025-01-24 17:22:53
Combined installs2,400
Sample plugins
SlugActive installsFirst commit at
embed-sharepoint-onedrive-documents8002024-12-16 04:26:59
login-with-azure6002024-12-23 09:33:15
embed-power-bi-reports5002024-12-11 10:47:32
embed-outlook-teams-calendar-events3002025-01-24 17:22:53
object-data-sync-for-salesforce2002024-11-13 10:16:45
View raw JSON
{
    "committer": "mowpms",
    "member_since": "2024-11-11",
    "plugins_joined": 5,
    "spread_days": 72,
    "earliest_join": "2024-11-13 10:16:45",
    "latest_join": "2025-01-24 17:22:53",
    "combined_installs": 2400,
    "sample_plugins": [
        {
            "slug": "embed-sharepoint-onedrive-documents",
            "active_installs": 800,
            "first_commit_at": "2024-12-16 04:26:59"
        },
        {
            "slug": "login-with-azure",
            "active_installs": 600,
            "first_commit_at": "2024-12-23 09:33:15"
        },
        {
            "slug": "embed-power-bi-reports",
            "active_installs": 500,
            "first_commit_at": "2024-12-11 10:47:32"
        },
        {
            "slug": "embed-outlook-teams-calendar-events",
            "active_installs": 300,
            "first_commit_at": "2025-01-24 17:22:53"
        },
        {
            "slug": "object-data-sync-for-salesforce",
            "active_installs": 200,
            "first_commit_at": "2024-11-13 10:16:45"
        }
    ]
}
High compromised_committer_burst Visual Builder (200 installs) Resolved 4mo ago
Slugvisual-builder
Author slugdastan800
Burst start2026-04-29 20:45:53
Burst end2026-04-29 21:19:06
Burst commits36
Burst window minutes90
Tenure days514
Distinct messages2
Avg message length6
Top messageupdate
Top message count33
Prt revert—
ExplanationEstablished author committed 36 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "visual-builder",
    "author_slug": "dastan800",
    "burst_start": "2026-04-29 20:45:53",
    "burst_end": "2026-04-29 21:19:06",
    "burst_commits": 36,
    "burst_window_minutes": 90,
    "tenure_days": 514,
    "distinct_messages": 2,
    "avg_message_length": 6.3,
    "top_message": "update",
    "top_message_count": 33,
    "prt_revert": null,
    "explanation": "Established author committed 36 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High bulk_committer_takeover Recent Posts Widget With Thumbnails (100k+ installs) Resolved 4mo ago
Committerkybernetikservices
Member since2021-01-20
Plugins joined7
Spread days0
Earliest join2021-02-21 18:21:08
Latest join2021-02-21 21:11:21
Combined installs166,300
Sample plugins
SlugActive installsFirst commit at
recent-posts-widget-with-thumbnails100,0002021-02-21 20:27:30
quick-featured-images50,0002021-02-21 20:06:26
definitely-allow-mobile-zooming8,0002021-02-21 18:21:08
speed-contact-bar5,0002021-02-21 20:43:11
ultimate-post-list2,0002021-02-21 20:56:05
widget-visibility-time-scheduler1,0002021-02-21 21:11:21
purify-wp-menues3002021-02-21 19:45:55
View raw JSON
{
    "committer": "kybernetikservices",
    "member_since": "2021-01-20",
    "plugins_joined": 7,
    "spread_days": 0,
    "earliest_join": "2021-02-21 18:21:08",
    "latest_join": "2021-02-21 21:11:21",
    "combined_installs": 166300,
    "sample_plugins": [
        {
            "slug": "recent-posts-widget-with-thumbnails",
            "active_installs": 100000,
            "first_commit_at": "2021-02-21 20:27:30"
        },
        {
            "slug": "quick-featured-images",
            "active_installs": 50000,
            "first_commit_at": "2021-02-21 20:06:26"
        },
        {
            "slug": "definitely-allow-mobile-zooming",
            "active_installs": 8000,
            "first_commit_at": "2021-02-21 18:21:08"
        },
        {
            "slug": "speed-contact-bar",
            "active_installs": 5000,
            "first_commit_at": "2021-02-21 20:43:11"
        },
        {
            "slug": "ultimate-post-list",
            "active_installs": 2000,
            "first_commit_at": "2021-02-21 20:56:05"
        },
        {
            "slug": "widget-visibility-time-scheduler",
            "active_installs": 1000,
            "first_commit_at": "2021-02-21 21:11:21"
        },
        {
            "slug": "purify-wp-menues",
            "active_installs": 300,
            "first_commit_at": "2021-02-21 19:45:55"
        }
    ]
}
High update_hijack_shape Social Share Icons & Social Share Buttons (10k+ installs) Suspicious 4mo ago
Slugultimate-social-media-plus
Shapeplugin_upgrader_install_from_s3
VendorInisev (committers: iclyde, shihabsoft)
Wp org authorinisev
Active installs10,000
Remote urlhttps://shopify-js-bucket.s3.ap-south-1.amazonaws.com/sfsi_worker_premium_installer-0.0.1.zip
Filelibs/controllers/sfsi_buttons_controller.php
Line1,706
Ajax endpointwp_ajax_worker_plugin
Introduced in3.5.4 by socialsharepro 2022-09-20 r2787689
Discovered bywp beacon hunt-updaters (direct_upgrader_install/vendor_unknown)
Audit rationalePlugin admin-AJAX endpoint installs sibling plugin from Inisev-controlled AWS S3 bucket using Plugin_Upgrader::install(). No signature verification, no domain-name validation, hardcoded URL. Single S3 PUT by anyone with bucket IAM access replaces the zip and grants RCE on every site that triggers the install path. Same architectural class as historical js-support-ticket case (Audit #23) but install-via-S3 instead of eval-via-curl. S3 zip is currently 404 but bucket is alive.
View raw JSON
{
    "slug": "ultimate-social-media-plus",
    "shape": "plugin_upgrader_install_from_s3",
    "vendor": "Inisev (committers: iclyde, shihabsoft)",
    "wp_org_author": "inisev",
    "active_installs": 10000,
    "remote_url": "https://shopify-js-bucket.s3.ap-south-1.amazonaws.com/sfsi_worker_premium_installer-0.0.1.zip",
    "file": "libs/controllers/sfsi_buttons_controller.php",
    "line": 1706,
    "ajax_endpoint": "wp_ajax_worker_plugin",
    "introduced_in": "3.5.4 by socialsharepro 2022-09-20 r2787689",
    "discovered_by": "wp beacon hunt-updaters (direct_upgrader_install/vendor_unknown)",
    "audit_rationale": "Plugin admin-AJAX endpoint installs sibling plugin from Inisev-controlled AWS S3 bucket using Plugin_Upgrader::install(). No signature verification, no domain-name validation, hardcoded URL. Single S3 PUT by anyone with bucket IAM access replaces the zip and grants RCE on every site that triggers the install path. Same architectural class as historical js-support-ticket case (Audit #23) but install-via-S3 instead of eval-via-curl. S3 zip is currently 404 but bucket is alive."
}
High bulk_committer_takeover Simple Full Screen Background Image (10k+ installs) Resolved 4mo ago
Committerampmode
Member since2021-09-02
Plugins joined5
Spread days34
Earliest join2023-03-29 21:30:06
Latest join2023-05-03 19:25:11
Combined installs11,500
Sample plugins
SlugActive installsFirst commit at
simple-full-screen-background-image10,0002023-03-29 22:04:50
adsense-in-post-ads-by-oizuled6002023-05-03 19:25:11
conditional-woo-checkout-field4002023-03-29 21:30:06
subscriber-discounts-for-woocommerce3002023-04-04 13:22:09
woo-free-product-sample2002023-04-04 13:08:23
View raw JSON
{
    "committer": "ampmode",
    "member_since": "2021-09-02",
    "plugins_joined": 5,
    "spread_days": 34,
    "earliest_join": "2023-03-29 21:30:06",
    "latest_join": "2023-05-03 19:25:11",
    "combined_installs": 11500,
    "sample_plugins": [
        {
            "slug": "simple-full-screen-background-image",
            "active_installs": 10000,
            "first_commit_at": "2023-03-29 22:04:50"
        },
        {
            "slug": "adsense-in-post-ads-by-oizuled",
            "active_installs": 600,
            "first_commit_at": "2023-05-03 19:25:11"
        },
        {
            "slug": "conditional-woo-checkout-field",
            "active_installs": 400,
            "first_commit_at": "2023-03-29 21:30:06"
        },
        {
            "slug": "subscriber-discounts-for-woocommerce",
            "active_installs": 300,
            "first_commit_at": "2023-04-04 13:22:09"
        },
        {
            "slug": "woo-free-product-sample",
            "active_installs": 200,
            "first_commit_at": "2023-04-04 13:08:23"
        }
    ]
}
High update_hijack_shape JS Help Desk – AI-Powered Support & Ticketing System (7k+ installs) Suspicious 4mo ago
Slugjs-support-ticket
Shapeeval_after_remote_call
Filemodules/proinstaller/controller.php
Line69
Snippet$response = curl_exec($ch); ... eval($response);
Remote urlhttps://setup.joomsky.com/jsticketwp/pro/index.php
Remote url obfuscationbase64-encoded JCONSTINST constant in includes/includer.php:71
Ssl verifyno
VendorJoomSky / rabilal
Active installs8,000
Current response payloadecho Please download new installer from www.joomsky.com
Audit rationaleVendor-shipped permanent eval(remote-PHP) primitive: SSL verification disabled, URL base64-encoded in source. Server response is benign today but the architecture is a fully-armed update-hijack vector affecting 8000 installs.
Discovered bywp beacon hunt-updaters (eval_after_remote_call pattern)
View raw JSON
{
    "slug": "js-support-ticket",
    "shape": "eval_after_remote_call",
    "file": "modules/proinstaller/controller.php",
    "line": 69,
    "snippet": "$response = curl_exec($ch); ... eval($response);",
    "remote_url": "https://setup.joomsky.com/jsticketwp/pro/index.php",
    "remote_url_obfuscation": "base64-encoded JCONSTINST constant in includes/includer.php:71",
    "ssl_verify": false,
    "vendor": "JoomSky / rabilal",
    "active_installs": 8000,
    "current_response_payload": "echo Please download new installer from www.joomsky.com",
    "audit_rationale": "Vendor-shipped permanent eval(remote-PHP) primitive: SSL verification disabled, URL base64-encoded in source. Server response is benign today but the architecture is a fully-armed update-hijack vector affecting 8000 installs.",
    "discovered_by": "wp beacon hunt-updaters (eval_after_remote_call pattern)"
}
High bulk_committer_takeover EU/UK VAT Validation Manager for WooCommerce (7k+ installs) Benign 5mo ago
Committeromardabbas
Member since2019-11-15
Plugins joined7
Spread days8
Earliest join2019-12-17 20:38:31
Latest join2019-12-26 20:35:50
Combined installs21,300
Sample plugins
SlugActive installsFirst commit at
eu-vat-for-woocommerce7,0002019-12-25 15:46:52
payment-gateways-per-product-categories-for-woocommerce5,0002019-12-26 20:35:50
product-quantity-for-woocommerce4,0002019-12-17 20:38:31
export-woocommerce3,0002019-12-24 18:24:44
bulk-price-converter-for-woocommerce1,0002019-12-26 20:35:50
product-xml-feeds-for-woocommerce1,0002019-12-26 20:35:50
msrp-for-woocommerce3002019-12-26 20:35:50
View raw JSON
{
    "committer": "omardabbas",
    "member_since": "2019-11-15",
    "plugins_joined": 7,
    "spread_days": 8,
    "earliest_join": "2019-12-17 20:38:31",
    "latest_join": "2019-12-26 20:35:50",
    "combined_installs": 21300,
    "sample_plugins": [
        {
            "slug": "eu-vat-for-woocommerce",
            "active_installs": 7000,
            "first_commit_at": "2019-12-25 15:46:52"
        },
        {
            "slug": "payment-gateways-per-product-categories-for-woocommerce",
            "active_installs": 5000,
            "first_commit_at": "2019-12-26 20:35:50"
        },
        {
            "slug": "product-quantity-for-woocommerce",
            "active_installs": 4000,
            "first_commit_at": "2019-12-17 20:38:31"
        },
        {
            "slug": "export-woocommerce",
            "active_installs": 3000,
            "first_commit_at": "2019-12-24 18:24:44"
        },
        {
            "slug": "bulk-price-converter-for-woocommerce",
            "active_installs": 1000,
            "first_commit_at": "2019-12-26 20:35:50"
        },
        {
            "slug": "product-xml-feeds-for-woocommerce",
            "active_installs": 1000,
            "first_commit_at": "2019-12-26 20:35:50"
        },
        {
            "slug": "msrp-for-woocommerce",
            "active_installs": 300,
            "first_commit_at": "2019-12-26 20:35:50"
        }
    ]
}
High domain_younger_than_plugin GTM4WP – A Google Tag Manager (GTM) plugin for WordPress (700k+ installs) Resolved 5mo ago
Slugduracelltomi-google-tag-manager
Domainbluhelp.com
Domain sourcec2_http_call
Domain registered at2025-08-10
Plugin earliest commit2013-09-22 17:52:53
Plugin latest release2025-12-15 14:45:45
Gap days4,339
Domain age at release127
Active installs700,000
View raw JSON
{
    "slug": "duracelltomi-google-tag-manager",
    "domain": "bluhelp.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-08-10",
    "plugin_earliest_commit": "2013-09-22 17:52:53",
    "plugin_latest_release": "2025-12-15 14:45:45",
    "gap_days": 4339,
    "domain_age_at_release": 127,
    "active_installs": 700000
}
High domain_younger_than_plugin WP Fastest Cache – WordPress Cache Plugin (1M+ installs) Resolved 5mo ago
Slugwp-fastest-cache
Domainmaxcdn.com
Domain sourcec2_http_call
Domain registered at2025-07-24
Plugin earliest commit2021-10-04 21:09:16
Plugin latest release2026-04-07 18:56:41
Gap days1,388
Domain age at release257
Active installs1,000,000
View raw JSON
{
    "slug": "wp-fastest-cache",
    "domain": "maxcdn.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-07-24",
    "plugin_earliest_commit": "2021-10-04 21:09:16",
    "plugin_latest_release": "2026-04-07 18:56:41",
    "gap_days": 1388,
    "domain_age_at_release": 257,
    "active_installs": 1000000
}
High domain_younger_than_plugin Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder (700k+ installs) Resolved 5mo ago
Slugfluentform
Domainapip.cc
Domain sourcec2_http_call
Domain registered at2024-07-18
Plugin earliest commit2017-12-26 21:18:58
Plugin latest release2026-04-28 04:32:22
Gap days2,395
Domain age at release649
Active installs700,000
View raw JSON
{
    "slug": "fluentform",
    "domain": "apip.cc",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2024-07-18",
    "plugin_earliest_commit": "2017-12-26 21:18:58",
    "plugin_latest_release": "2026-04-28 04:32:22",
    "gap_days": 2395,
    "domain_age_at_release": 649,
    "active_installs": 700000
}
High domain_younger_than_plugin Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode (100k+ installs) Resolved 5mo ago
Slugcookiebot
Domainmaxcdn.com
Domain sourcec2_http_call
Domain registered at2025-07-24
Plugin earliest commit2017-12-22 17:30:12
Plugin latest release2026-04-06 11:11:43
Gap days2,770
Domain age at release256
Active installs100,000
View raw JSON
{
    "slug": "cookiebot",
    "domain": "maxcdn.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-07-24",
    "plugin_earliest_commit": "2017-12-22 17:30:12",
    "plugin_latest_release": "2026-04-06 11:11:43",
    "gap_days": 2770,
    "domain_age_at_release": 256,
    "active_installs": 100000
}
High domain_younger_than_plugin Download Manager (100k+ installs) Resolved 5mo ago
Slugdownload-manager
Domainfakeimg.pl
Domain sourcec2_http_call
Domain registered at2025-05-30
Plugin earliest commit2016-01-08 04:11:42
Plugin latest release2026-04-15 00:06:06
Gap days3,429
Domain age at release320
Active installs100,000
View raw JSON
{
    "slug": "download-manager",
    "domain": "fakeimg.pl",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-05-30",
    "plugin_earliest_commit": "2016-01-08 04:11:42",
    "plugin_latest_release": "2026-04-15 00:06:06",
    "gap_days": 3429,
    "domain_age_at_release": 320,
    "active_installs": 100000
}
High domain_younger_than_plugin The SEO Framework – Fast, Automated, Effortless. (200k+ installs) Resolved 5mo ago
Slugautodescription
Domaindeploytroy.org
Domain sourcec2_http_call
Domain registered at2025-01-14
Plugin earliest commit2015-05-29 20:28:14
Plugin latest release2025-12-10 15:45:19
Gap days3,517
Domain age at release330
Active installs200,000
View raw JSON
{
    "slug": "autodescription",
    "domain": "deploytroy.org",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-01-14",
    "plugin_earliest_commit": "2015-05-29 20:28:14",
    "plugin_latest_release": "2025-12-10 15:45:19",
    "gap_days": 3517,
    "domain_age_at_release": 330,
    "active_installs": 200000
}
High domain_younger_than_plugin Add Category to Pages (20k+ installs) Resolved 5mo ago
Slugadd-category-to-pages
Domainspicewp.com
Domain sourceplugin_uri
Domain registered at2018-04-02
Plugin earliest commit2015-01-13 23:30:54
Plugin latest release2019-10-19 08:37:37
Gap days1,174
Domain age at release565
Active installs20,000
Serial offender noteSeverity bumped medium→high: author aankit has 9 prior security-issue closures on wp.org.
View raw JSON
{
    "slug": "add-category-to-pages",
    "domain": "spicewp.com",
    "domain_source": "plugin_uri",
    "domain_registered_at": "2018-04-02",
    "plugin_earliest_commit": "2015-01-13 23:30:54",
    "plugin_latest_release": "2019-10-19 08:37:37",
    "gap_days": 1174,
    "domain_age_at_release": 565,
    "active_installs": 20000,
    "serial_offender_note": "Severity bumped medium\u2192high: author aankit has 9 prior security-issue closures on wp.org."
}
High domain_younger_than_plugin AMP (400k+ installs) Resolved 5mo ago
Slugamp
Domainfeedbackwp.com
Domain sourcec2_http_call
Domain registered at2023-12-27
Plugin earliest commit2015-10-07 14:34:35
Plugin latest release2025-04-10 16:53:52
Gap days3,002
Domain age at release470
Active installs400,000
View raw JSON
{
    "slug": "amp",
    "domain": "feedbackwp.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2023-12-27",
    "plugin_earliest_commit": "2015-10-07 14:34:35",
    "plugin_latest_release": "2025-04-10 16:53:52",
    "gap_days": 3002,
    "domain_age_at_release": 470,
    "active_installs": 400000
}
High committer_younger_than_plugin WP Shortcode by MyThemeShop (10k+ installs) Resolved 5mo ago
Slugwp-shortcode
Committer slugpratikmts
Committer display namepratikmts
Committer employer—
Committer member since2018-03-05
Committer first commit2018-03-05 13:32:46
Committer commit count4
Plugin listed authormythemeshop
Earliest plugin commit2014-02-26 19:40:38
Plugin age at join days1,467
Committer age at join days0
Active installs10,000
Serial offender noteSeverity bumped medium→high: author mythemeshop has 5 prior security-issue closures on wp.org.
View raw JSON
{
    "slug": "wp-shortcode",
    "committer_slug": "pratikmts",
    "committer_display_name": "pratikmts",
    "committer_employer": null,
    "committer_member_since": "2018-03-05",
    "committer_first_commit": "2018-03-05 13:32:46",
    "committer_commit_count": 4,
    "plugin_listed_author": "mythemeshop",
    "earliest_plugin_commit": "2014-02-26 19:40:38",
    "plugin_age_at_join_days": 1467,
    "committer_age_at_join_days": 0,
    "active_installs": 10000,
    "serial_offender_note": "Severity bumped medium\u2192high: author mythemeshop has 5 prior security-issue closures on wp.org."
}
High committer_younger_than_plugin Page Optimize (200k+ installs) Resolved 5mo ago
Slugpage-optimize
Committer sluga8caustin
Committer display namea8caustin
Committer employer—
Committer member since2023-11-27
Committer first commit2024-10-23 19:36:37
Committer commit count4
Plugin listed authorautomattic
Earliest plugin commit2020-02-21 19:41:06
Plugin age at join days1,705
Committer age at join days331
Active installs200,000
View raw JSON
{
    "slug": "page-optimize",
    "committer_slug": "a8caustin",
    "committer_display_name": "a8caustin",
    "committer_employer": null,
    "committer_member_since": "2023-11-27",
    "committer_first_commit": "2024-10-23 19:36:37",
    "committer_commit_count": 4,
    "plugin_listed_author": "automattic",
    "earliest_plugin_commit": "2020-02-21 19:41:06",
    "plugin_age_at_join_days": 1705,
    "committer_age_at_join_days": 331,
    "active_installs": 200000
}
High committer_younger_than_plugin WooCommerce Tax (formerly WooCommerce Shipping & Tax) (500k+ installs) Resolved 5mo ago
Slugwoocommerce-services
Committer slugfrosso1
Committer display namefrosso1 (a11n)
Committer employer—
Committer member since2020-08-14
Committer first commit2021-01-11 20:57:46
Committer commit count7
Plugin listed authorwoocommerce
Earliest plugin commit2017-01-30 17:13:37
Plugin age at join days1,442
Committer age at join days150
Active installs600,000
View raw JSON
{
    "slug": "woocommerce-services",
    "committer_slug": "frosso1",
    "committer_display_name": "frosso1 (a11n)",
    "committer_employer": null,
    "committer_member_since": "2020-08-14",
    "committer_first_commit": "2021-01-11 20:57:46",
    "committer_commit_count": 7,
    "plugin_listed_author": "woocommerce",
    "earliest_plugin_commit": "2017-01-30 17:13:37",
    "plugin_age_at_join_days": 1442,
    "committer_age_at_join_days": 150,
    "active_installs": 600000
}
High committer_younger_than_plugin WooCommerce (7M+ installs) Resolved 5mo ago
Slugwoocommerce
Committer slugalopezari
Committer display namealopezari
Committer employer—
Committer member since2023-02-17
Committer first commit2023-10-10 20:12:37
Committer commit count12
Plugin listed authorautomattic
Earliest plugin commit2022-02-10 13:36:23
Plugin age at join days607
Committer age at join days235
Active installs7,000,000
View raw JSON
{
    "slug": "woocommerce",
    "committer_slug": "alopezari",
    "committer_display_name": "alopezari",
    "committer_employer": null,
    "committer_member_since": "2023-02-17",
    "committer_first_commit": "2023-10-10 20:12:37",
    "committer_commit_count": 12,
    "plugin_listed_author": "automattic",
    "earliest_plugin_commit": "2022-02-10 13:36:23",
    "plugin_age_at_join_days": 607,
    "committer_age_at_join_days": 235,
    "active_installs": 7000000
}
High committer_younger_than_plugin WooCommerce (7M+ installs) Resolved 5mo ago
Slugwoocommerce
Committer slugnamanorg
Committer display nameNaman
Committer employer—
Committer member since2024-05-16
Committer first commit2024-08-26 14:13:03
Committer commit count6
Plugin listed authorautomattic
Earliest plugin commit2022-02-10 13:36:23
Plugin age at join days928
Committer age at join days102
Active installs7,000,000
View raw JSON
{
    "slug": "woocommerce",
    "committer_slug": "namanorg",
    "committer_display_name": "Naman",
    "committer_employer": null,
    "committer_member_since": "2024-05-16",
    "committer_first_commit": "2024-08-26 14:13:03",
    "committer_commit_count": 6,
    "plugin_listed_author": "automattic",
    "earliest_plugin_commit": "2022-02-10 13:36:23",
    "plugin_age_at_join_days": 928,
    "committer_age_at_join_days": 102,
    "active_installs": 7000000
}
High committer_younger_than_plugin Akismet Anti-spam: Spam Protection (5M+ installs) Resolved 5mo ago
Slugakismet
Committer slugandyperdomo
Committer display nameAndy Perdomo (a11n)
Committer employer—
Committer member since2025-01-07
Committer first commit2025-04-02 00:41:10
Committer commit count11
Plugin listed authorautomattic
Earliest plugin commit2015-04-28 14:50:55
Plugin age at join days3,626
Committer age at join days85
Active installs6,000,000
View raw JSON
{
    "slug": "akismet",
    "committer_slug": "andyperdomo",
    "committer_display_name": "Andy Perdomo (a11n)",
    "committer_employer": null,
    "committer_member_since": "2025-01-07",
    "committer_first_commit": "2025-04-02 00:41:10",
    "committer_commit_count": 11,
    "plugin_listed_author": "automattic",
    "earliest_plugin_commit": "2015-04-28 14:50:55",
    "plugin_age_at_join_days": 3626,
    "committer_age_at_join_days": 85,
    "active_installs": 6000000
}
High committer_younger_than_plugin Jetpack – WP Security, Backup, Speed, & Growth (3M+ installs) Resolved 5mo ago
Slugjetpack
Committer slugveryhappytiger
Committer display nameveryhappytiger (a11n)
Committer employer—
Committer member since2025-01-15
Committer first commit2025-11-11 00:53:25
Committer commit count16
Plugin listed authorautomattic
Earliest plugin commit2024-08-06 16:30:06
Plugin age at join days461
Committer age at join days300
Active installs3,000,000
View raw JSON
{
    "slug": "jetpack",
    "committer_slug": "veryhappytiger",
    "committer_display_name": "veryhappytiger (a11n)",
    "committer_employer": null,
    "committer_member_since": "2025-01-15",
    "committer_first_commit": "2025-11-11 00:53:25",
    "committer_commit_count": 16,
    "plugin_listed_author": "automattic",
    "earliest_plugin_commit": "2024-08-06 16:30:06",
    "plugin_age_at_join_days": 461,
    "committer_age_at_join_days": 300,
    "active_installs": 3000000
}
High domain_younger_than_plugin File Manager (1M+ installs) Resolved 5mo ago
Slugwp-file-manager
Domainoffice-integrator.com
Domain sourcec2_http_call
Domain registered at2019-06-18
Plugin earliest commit2016-08-08 18:38:30
Plugin latest release2020-05-19 11:12:09
Gap days1,043
Domain age at release336
Active installs1,000,000
View raw JSON
{
    "slug": "wp-file-manager",
    "domain": "office-integrator.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2019-06-18",
    "plugin_earliest_commit": "2016-08-08 18:38:30",
    "plugin_latest_release": "2020-05-19 11:12:09",
    "gap_days": 1043,
    "domain_age_at_release": 336,
    "active_installs": 1000000
}
High version_compare_trap Thumbnail Slider With Lightbox (700 installs) Resolved 5mo ago
Slugwp-responsive-slider-with-lightbox
Active traps
Trap versionTrap releasedBlocked byBlocked on
1.0172022-11-24 16:24:341.0.182023-04-25 17:12:51
ExplanationPlugin released 1.017 (parses as higher than canonical X.0.N series), then later released 1.0.18 which parses LOWER — users who installed the trap version cannot auto-update to the canonical release.
View raw JSON
{
    "slug": "wp-responsive-slider-with-lightbox",
    "active_traps": [
        {
            "trap_version": "1.017",
            "trap_released": "2022-11-24 16:24:34",
            "blocked_by": "1.0.18",
            "blocked_on": "2023-04-25 17:12:51"
        }
    ],
    "explanation": "Plugin released 1.017 (parses as higher than canonical X.0.N series), then later released 1.0.18 which parses LOWER \u2014 users who installed the trap version cannot auto-update to the canonical release."
}
High version_compare_trap Page Title Splitter (1k+ installs) Resolved 5mo ago
Slugpage-title-splitter
Active traps
Trap versionTrap releasedBlocked byBlocked on
1.012016-05-20 22:17:091.0.42016-05-20 23:02:52
1.022016-05-20 22:22:001.0.42016-05-20 23:02:52
1.032016-05-20 22:31:361.0.42016-05-20 23:02:52
2.042018-10-05 21:04:302.0.52019-04-21 16:02:13
2.052019-04-21 16:02:132.0.62019-05-12 03:21:39
ExplanationPlugin released 1.01 (parses as higher than canonical X.0.N series), then later released 1.0.4 which parses LOWER — users who installed the trap version cannot auto-update to the canonical release.
View raw JSON
{
    "slug": "page-title-splitter",
    "active_traps": [
        {
            "trap_version": "1.01",
            "trap_released": "2016-05-20 22:17:09",
            "blocked_by": "1.0.4",
            "blocked_on": "2016-05-20 23:02:52"
        },
        {
            "trap_version": "1.02",
            "trap_released": "2016-05-20 22:22:00",
            "blocked_by": "1.0.4",
            "blocked_on": "2016-05-20 23:02:52"
        },
        {
            "trap_version": "1.03",
            "trap_released": "2016-05-20 22:31:36",
            "blocked_by": "1.0.4",
            "blocked_on": "2016-05-20 23:02:52"
        },
        {
            "trap_version": "2.04",
            "trap_released": "2018-10-05 21:04:30",
            "blocked_by": "2.0.5",
            "blocked_on": "2019-04-21 16:02:13"
        },
        {
            "trap_version": "2.05",
            "trap_released": "2019-04-21 16:02:13",
            "blocked_by": "2.0.6",
            "blocked_on": "2019-05-12 03:21:39"
        }
    ],
    "explanation": "Plugin released 1.01 (parses as higher than canonical X.0.N series), then later released 1.0.4 which parses LOWER \u2014 users who installed the trap version cannot auto-update to the canonical release."
}
High version_compare_trap Trace My IP – Visitor IP Tracker, Stats Analytics & Page Views Counter with Email Alerts (1k+ installs) Resolved 5mo ago
Slugtracemyip-visitor-analytics-ip-tracking-control
Active traps
Trap versionTrap releasedBlocked byBlocked on
2.042015-10-24 16:55:162.0.12015-10-24 16:56:25
ExplanationPlugin released 2.04 (parses as higher than canonical X.0.N series), then later released 2.0.1 which parses LOWER — users who installed the trap version cannot auto-update to the canonical release.
View raw JSON
{
    "slug": "tracemyip-visitor-analytics-ip-tracking-control",
    "active_traps": [
        {
            "trap_version": "2.04",
            "trap_released": "2015-10-24 16:55:16",
            "blocked_by": "2.0.1",
            "blocked_on": "2015-10-24 16:56:25"
        }
    ],
    "explanation": "Plugin released 2.04 (parses as higher than canonical X.0.N series), then later released 2.0.1 which parses LOWER \u2014 users who installed the trap version cannot auto-update to the canonical release."
}
High version_compare_trap Resizable Sidebar for the Gutenberg Block Editor (3k+ installs) Resolved 5mo ago
Slugresizable-editor-sidebar
Active traps
Trap versionTrap releasedBlocked byBlocked on
1.022024-07-19 09:54:441.0.42024-07-19 13:19:21
ExplanationPlugin released 1.02 (parses as higher than canonical X.0.N series), then later released 1.0.4 which parses LOWER — users who installed the trap version cannot auto-update to the canonical release.
View raw JSON
{
    "slug": "resizable-editor-sidebar",
    "active_traps": [
        {
            "trap_version": "1.02",
            "trap_released": "2024-07-19 09:54:44",
            "blocked_by": "1.0.4",
            "blocked_on": "2024-07-19 13:19:21"
        }
    ],
    "explanation": "Plugin released 1.02 (parses as higher than canonical X.0.N series), then later released 1.0.4 which parses LOWER \u2014 users who installed the trap version cannot auto-update to the canonical release."
}
High code_scan_delta Membership Plugin – Kadence Memberships (9k+ installs) Resolved 5mo ago
Slugrestrict-content
Previous version3.2.26
Current version3.2.26
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltincore/includes/scripts.php221wp_register_script( 'recaptcha-v2', 'https://www.google.com/recaptcha/api.js', array(), RCP_PLUGIN_VERSION );medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
New finding count1
View raw JSON
{
    "slug": "restrict-content",
    "previous_version": "3.2.26",
    "current_version": "3.2.26",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "core/includes/scripts.php",
            "line": 221,
            "snippet": "wp_register_script( 'recaptcha-v2', 'https://www.google.com/recaptcha/api.js', array(), RCP_PLUGIN_VERSION );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta WP Contact Slider – Contact Form Slider Widget (9k+ installs) Resolved 5mo ago
Slugwp-contact-slider
Previous version2.5.4
Current version2.5.4
New findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltininc/meta-box/inc/fields/datetime.php58wp_register_style( 'jquery-ui-core', "$url/jquery.ui.core.css", array(), '1.8.17' );medium
remote_enqueuebuiltininc/meta-box/inc/fields/datetime.php59wp_register_style( 'jquery-ui-theme', "$url/jquery.ui.theme.css", array(), '1.8.17' );medium
remote_enqueuebuiltininc/meta-box/inc/fields/datetime.php60wp_register_style( 'jquery-ui-datepicker', "$url/jquery.ui.datepicker.css", array( 'jquery-ui-core', 'jquery-ui-theme' ), '1.8.17' );medium
remote_enqueuebuiltininc/meta-box/inc/fields/datetime.php63wp_register_style( 'jquery-ui-slider', "$url/jquery.ui.slider.css", array( 'jquery-ui-core', 'jquery-ui-theme' ), '1.8.17' );medium
remote_enqueuebuiltininc/meta-box/inc/fields/datetime.php64wp_register_style( 'jquery-ui-timepicker', "$url/jquery-ui-timepicker-addon.min.css", array( 'rwmb-date', 'jquery-ui-slider' ), '1.5.0' );medium
remote_enqueuebuiltininc/meta-box/inc/fields/datetime.php67wp_register_script( 'jquery-ui-timepicker', "$url/jquery-ui-timepicker-addon.min.js", array( 'jquery-ui-datepicker', 'jquery-ui-slider' ), '1.5.0', true );medium
remote_enqueuebuiltininc/meta-box/inc/fields/datetime.php68wp_register_script( 'jquery-ui-timepicker-i18n', "$url/jquery-ui-timepicker-addon-i18n.min.js", array( 'jquery-ui-timepicker' ), '1.5.0', true );medium
New finding count7
View raw JSON
{
    "slug": "wp-contact-slider",
    "previous_version": "2.5.4",
    "current_version": "2.5.4",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/datetime.php",
            "line": 58,
            "snippet": "wp_register_style( 'jquery-ui-core', \"$url/jquery.ui.core.css\", array(), '1.8.17' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/datetime.php",
            "line": 59,
            "snippet": "wp_register_style( 'jquery-ui-theme', \"$url/jquery.ui.theme.css\", array(), '1.8.17' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/datetime.php",
            "line": 60,
            "snippet": "wp_register_style( 'jquery-ui-datepicker', \"$url/jquery.ui.datepicker.css\", array( 'jquery-ui-core', 'jquery-ui-theme' ), '1.8.17' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/datetime.php",
            "line": 63,
            "snippet": "wp_register_style( 'jquery-ui-slider', \"$url/jquery.ui.slider.css\", array( 'jquery-ui-core', 'jquery-ui-theme' ), '1.8.17' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/datetime.php",
            "line": 64,
            "snippet": "wp_register_style( 'jquery-ui-timepicker', \"$url/jquery-ui-timepicker-addon.min.css\", array( 'rwmb-date', 'jquery-ui-slider' ), '1.5.0' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/datetime.php",
            "line": 67,
            "snippet": "wp_register_script( 'jquery-ui-timepicker', \"$url/jquery-ui-timepicker-addon.min.js\", array( 'jquery-ui-datepicker', 'jquery-ui-slider' ), '1.5.0', true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/meta-box/inc/fields/datetime.php",
            "line": 68,
            "snippet": "wp_register_script( 'jquery-ui-timepicker-i18n', \"$url/jquery-ui-timepicker-addon-i18n.min.js\", array( 'jquery-ui-timepicker' ), '1.5.0', true );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 7
}
High code_scan_delta Motors – Car Dealership & Classified Listings Plugin (9k+ installs) Resolved 5mo ago
Slugmotors-car-dealership-classified-listings
Previous version1.4.108
Current version1.4.108
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/enqueue.php168wp_register_script( 'stm_grecaptcha', 'https://www.google.com/recaptcha/api.js?onload=stmMotorsCaptcha&render=explicit', array( 'jquery' ), STM_LISTINGS_V, true );medium
Url
https://www.google.com/recaptcha/api.js?onload=stmMotorsCaptcha&render=explicit
Url host
www.google.com
New finding count1
View raw JSON
{
    "slug": "motors-car-dealership-classified-listings",
    "previous_version": "1.4.108",
    "current_version": "1.4.108",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/enqueue.php",
            "line": 168,
            "snippet": "wp_register_script( 'stm_grecaptcha', 'https://www.google.com/recaptcha/api.js?onload=stmMotorsCaptcha&render=explicit', array( 'jquery' ), STM_LISTINGS_V, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?onload=stmMotorsCaptcha&render=explicit",
                "url_host": "www.google.com"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) (9k+ installs) Resolved 5mo ago
Slugleaflet-maps-marker
Previous version3.12.10
Current version3.12.10
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinleaflet-maps-marker.php704wp_register_script( 'leafletmapsmarker-googlemaps-loader', 'https://www.google.com/jsapi'.$google_maps_api_key, array(), 3.7, true);medium
Url
https://www.google.com/jsapi
Url host
www.google.com
New finding count1
View raw JSON
{
    "slug": "leaflet-maps-marker",
    "previous_version": "3.12.10",
    "current_version": "3.12.10",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "leaflet-maps-marker.php",
            "line": 704,
            "snippet": "wp_register_script( 'leafletmapsmarker-googlemaps-loader', 'https://www.google.com/jsapi'.$google_maps_api_key, array(), 3.7, true);",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/jsapi",
                "url_host": "www.google.com"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta Sensei LMS – Online Courses, Quizzes, & Learning (9k+ installs) Resolved 5mo ago
Slugsensei-lms
Previous version4.25.2
Current version4.25.2
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/blocks/class-sensei-blocks.php95wp_register_script( 'sensei-youtube-iframe-api', 'https://www.youtube.com/iframe_api', [], 'unversioned', false );medium
Url
https://www.youtube.com/iframe_api
Url host
www.youtube.com
remote_enqueuebuiltinincludes/blocks/class-sensei-blocks.php96wp_register_script( 'sensei-vimeo-iframe-api', 'https://player.vimeo.com/api/player.js', [], 'unversioned', false );medium
Url
https://player.vimeo.com/api/player.js
Url host
player.vimeo.com
New finding count2
View raw JSON
{
    "slug": "sensei-lms",
    "previous_version": "4.25.2",
    "current_version": "4.25.2",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/blocks/class-sensei-blocks.php",
            "line": 95,
            "snippet": "wp_register_script( 'sensei-youtube-iframe-api', 'https://www.youtube.com/iframe_api', [], 'unversioned', false );",
            "confidence": "medium",
            "details": {
                "url": "https://www.youtube.com/iframe_api",
                "url_host": "www.youtube.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/blocks/class-sensei-blocks.php",
            "line": 96,
            "snippet": "wp_register_script( 'sensei-vimeo-iframe-api', 'https://player.vimeo.com/api/player.js', [], 'unversioned', false );",
            "confidence": "medium",
            "details": {
                "url": "https://player.vimeo.com/api/player.js",
                "url_host": "player.vimeo.com"
            }
        }
    ],
    "new_finding_count": 2
}
High code_scan_delta Analytics Insights – Google Analytics Dashboard for WordPress (10k+ installs) Resolved 5mo ago
Sluganalytics-insights
Previous version6.3.12
Current version6.3.12
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinadmin/setup.php125wp_register_script( 'googlecharts', 'https://www.gstatic.com/charts/loader.js', array(), null );medium
Url
https://www.gstatic.com/charts/loader.js
Url host
www.gstatic.com
remote_enqueuebuiltinadmin/setup.php231wp_register_script( 'googlecharts', 'https://www.gstatic.com/charts/loader.js', array(), null );medium
Url
https://www.gstatic.com/charts/loader.js
Url host
www.gstatic.com
remote_enqueuebuiltinfront/setup.php51wp_register_script( 'googlecharts', 'https://www.gstatic.com/charts/loader.js', array(), null );medium
Url
https://www.gstatic.com/charts/loader.js
Url host
www.gstatic.com
New finding count3
View raw JSON
{
    "slug": "analytics-insights",
    "previous_version": "6.3.12",
    "current_version": "6.3.12",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "admin/setup.php",
            "line": 125,
            "snippet": "wp_register_script( 'googlecharts', 'https://www.gstatic.com/charts/loader.js', array(), null );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "admin/setup.php",
            "line": 231,
            "snippet": "wp_register_script( 'googlecharts', 'https://www.gstatic.com/charts/loader.js', array(), null );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "front/setup.php",
            "line": 51,
            "snippet": "wp_register_script( 'googlecharts', 'https://www.gstatic.com/charts/loader.js', array(), null );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        }
    ],
    "new_finding_count": 3
}
High code_scan_delta Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions (8k+ installs) Resolved 5mo ago
Slugwp-full-stripe-free
Previous version8.4.2
Current version8.4.2
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/wpfs-customer-portal-service.php1,190wp_register_script(self::HANDLE_STRIPE_JS_V_3, 'https://js.stripe.com/v3/', ['jquery']);medium
Url
https://js.stripe.com/v3/
Url host
js.stripe.com
remote_enqueuebuiltinincludes/wpfs-main.php879wp_register_script( self::HANDLE_STRIPE_JS_V_3, 'https://js.stripe.com/v3/', [ 'jquery' ] );medium
Url
https://js.stripe.com/v3/
Url host
js.stripe.com
New finding count2
View raw JSON
{
    "slug": "wp-full-stripe-free",
    "previous_version": "8.4.2",
    "current_version": "8.4.2",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/wpfs-customer-portal-service.php",
            "line": 1190,
            "snippet": "wp_register_script(self::HANDLE_STRIPE_JS_V_3, 'https://js.stripe.com/v3/', ['jquery']);",
            "confidence": "medium",
            "details": {
                "url": "https://js.stripe.com/v3/",
                "url_host": "js.stripe.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/wpfs-main.php",
            "line": 879,
            "snippet": "wp_register_script( self::HANDLE_STRIPE_JS_V_3, 'https://js.stripe.com/v3/', [ 'jquery' ] );",
            "confidence": "medium",
            "details": {
                "url": "https://js.stripe.com/v3/",
                "url_host": "js.stripe.com"
            }
        }
    ],
    "new_finding_count": 2
}
High code_scan_delta PayPal Enterprise Payments (formerly Braintree) for WooCommerce (10k+ installs) Resolved 5mo ago
Slugwoocommerce-gateway-paypal-powered-by-braintree
Previous version3.10.0
Current version3.10.0
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/WC_Gateway_Braintree_Local_Payment.php149wp_register_script( 'braintree-js-client', 'https://js.braintreegateway.com/web/' . $sdk_version . '/js/client.min.js', [], $version, true );medium
Url
https://js.braintreegateway.com/web/
Url host
js.braintreegateway.com
remote_enqueuebuiltinincludes/WC_Gateway_Braintree_Local_Payment.php165wp_register_script( 'braintree-js-local-payments', 'https://js.braintreegateway.com/web/' . $sdk_version . '/js/local-payment.min.js', [ 'braintree-js-client' ], $version, true );medium
Url
https://js.braintreegateway.com/web/
Url host
js.braintreegateway.com
remote_enqueuebuiltinincludes/Google_Pay/Frontend.php65wp_register_script( 'braintree-js-client', 'https://js.braintreegateway.com/web/' . WC_Braintree::BRAINTREE_JS_SDK_VERSION . '/js/client.min.js', array( 'google-pay-js' ), WC_Braintree::VERSION, trumedium
Url
https://js.braintreegateway.com/web/
Url host
js.braintreegateway.com
remote_enqueuebuiltinincludes/Google_Pay/Frontend.php68wp_register_script( 'braintree-js-google-pay', 'https://js.braintreegateway.com/web/' . WC_Braintree::BRAINTREE_JS_SDK_VERSION . '/js/google-payment.min.js', array( 'braintree-js-client' ), WC_Brainmedium
Url
https://js.braintreegateway.com/web/
Url host
js.braintreegateway.com
remote_enqueuebuiltinincludes/WC_Gateway_Braintree_ACH.php130wp_register_script( 'braintree-js-ach', 'https://js.braintreegateway.com/web/' . WC_Braintree::BRAINTREE_JS_SDK_VERSION . '/js/us-bank-account.min.js', [ 'braintree-js-client' ], WC_Braintree::VERSImedium
Url
https://js.braintreegateway.com/web/
Url host
js.braintreegateway.com
remote_enqueuebuiltinincludes/WC_Gateway_Braintree.php425wp_register_script( 'braintree-js-client', 'https://js.braintreegateway.com/web/' . WC_Braintree::BRAINTREE_JS_SDK_VERSION . '/js/client.min.js', array(), WC_Braintree::VERSION, true );medium
Url
https://js.braintreegateway.com/web/
Url host
js.braintreegateway.com
remote_enqueuebuiltinincludes/WC_Gateway_Braintree.php426wp_register_script( 'braintree-js-data-collector', 'https://js.braintreegateway.com/web/' . WC_Braintree::BRAINTREE_JS_SDK_VERSION . '/js/data-collector.min.js', array( 'braintree-js-client' ), WC_Bmedium
Url
https://js.braintreegateway.com/web/
Url host
js.braintreegateway.com
New finding count7
View raw JSON
{
    "slug": "woocommerce-gateway-paypal-powered-by-braintree",
    "previous_version": "3.10.0",
    "current_version": "3.10.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/WC_Gateway_Braintree_Local_Payment.php",
            "line": 149,
            "snippet": "wp_register_script( 'braintree-js-client', 'https://js.braintreegateway.com/web/' . $sdk_version . '/js/client.min.js', [], $version, true );",
            "confidence": "medium",
            "details": {
                "url": "https://js.braintreegateway.com/web/",
                "url_host": "js.braintreegateway.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/WC_Gateway_Braintree_Local_Payment.php",
            "line": 165,
            "snippet": "wp_register_script( 'braintree-js-local-payments', 'https://js.braintreegateway.com/web/' . $sdk_version . '/js/local-payment.min.js', [ 'braintree-js-client' ], $version, true );",
            "confidence": "medium",
            "details": {
                "url": "https://js.braintreegateway.com/web/",
                "url_host": "js.braintreegateway.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/Google_Pay/Frontend.php",
            "line": 65,
            "snippet": "wp_register_script( 'braintree-js-client', 'https://js.braintreegateway.com/web/' . WC_Braintree::BRAINTREE_JS_SDK_VERSION . '/js/client.min.js', array( 'google-pay-js' ), WC_Braintree::VERSION, tru",
            "confidence": "medium",
            "details": {
                "url": "https://js.braintreegateway.com/web/",
                "url_host": "js.braintreegateway.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/Google_Pay/Frontend.php",
            "line": 68,
            "snippet": "wp_register_script( 'braintree-js-google-pay', 'https://js.braintreegateway.com/web/' . WC_Braintree::BRAINTREE_JS_SDK_VERSION . '/js/google-payment.min.js', array( 'braintree-js-client' ), WC_Brain",
            "confidence": "medium",
            "details": {
                "url": "https://js.braintreegateway.com/web/",
                "url_host": "js.braintreegateway.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/WC_Gateway_Braintree_ACH.php",
            "line": 130,
            "snippet": "wp_register_script( 'braintree-js-ach', 'https://js.braintreegateway.com/web/' . WC_Braintree::BRAINTREE_JS_SDK_VERSION . '/js/us-bank-account.min.js', [ 'braintree-js-client' ], WC_Braintree::VERSI",
            "confidence": "medium",
            "details": {
                "url": "https://js.braintreegateway.com/web/",
                "url_host": "js.braintreegateway.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/WC_Gateway_Braintree.php",
            "line": 425,
            "snippet": "wp_register_script( 'braintree-js-client', 'https://js.braintreegateway.com/web/' . WC_Braintree::BRAINTREE_JS_SDK_VERSION . '/js/client.min.js', array(), WC_Braintree::VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://js.braintreegateway.com/web/",
                "url_host": "js.braintreegateway.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/WC_Gateway_Braintree.php",
            "line": 426,
            "snippet": "wp_register_script( 'braintree-js-data-collector', 'https://js.braintreegateway.com/web/' . WC_Braintree::BRAINTREE_JS_SDK_VERSION . '/js/data-collector.min.js', array( 'braintree-js-client' ), WC_B",
            "confidence": "medium",
            "details": {
                "url": "https://js.braintreegateway.com/web/",
                "url_host": "js.braintreegateway.com"
            }
        }
    ],
    "new_finding_count": 7
}
High code_scan_delta Estatik Real Estate Plugin (10k+ installs) Resolved 5mo ago
Slugestatik
Previous version4.3.1
Current version4.3.1
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/classes/class-assets-init.php110wp_register_script( 'es-share-script', 'https://static.addtoany.com/menu/page.js' );medium
Url
https://static.addtoany.com/menu/page.js
Url host
static.addtoany.com
New finding count1
View raw JSON
{
    "slug": "estatik",
    "previous_version": "4.3.1",
    "current_version": "4.3.1",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/classes/class-assets-init.php",
            "line": 110,
            "snippet": "wp_register_script( 'es-share-script', 'https://static.addtoany.com/menu/page.js' );",
            "confidence": "medium",
            "details": {
                "url": "https://static.addtoany.com/menu/page.js",
                "url_host": "static.addtoany.com"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta Mongoose Page Plugin (10k+ installs) Resolved 5mo ago
Slugfacebook-page-feed-graph-api
Previous version1.9.2
Current version1.9.2
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltininc/class-mongoose-page-plugin.php372wp_register_script( 'facebook-page-plugin-sk-hosted', 'https://connect.facebook.net/en_GB/sdk.js#xfbml=1&version=v9.0', array(), '9.0', true );medium
Url
https://connect.facebook.net/en_GB/sdk.js#xfbml=1&version=v9.0
Url host
connect.facebook.net
New finding count1
View raw JSON
{
    "slug": "facebook-page-feed-graph-api",
    "previous_version": "1.9.2",
    "current_version": "1.9.2",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/class-mongoose-page-plugin.php",
            "line": 372,
            "snippet": "wp_register_script( 'facebook-page-plugin-sk-hosted', 'https://connect.facebook.net/en_GB/sdk.js#xfbml=1&version=v9.0', array(), '9.0', true );",
            "confidence": "medium",
            "details": {
                "url": "https://connect.facebook.net/en_GB/sdk.js#xfbml=1&version=v9.0",
                "url_host": "connect.facebook.net"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta Clicky Analytics (10k+ installs) Resolved 5mo ago
Slugclicky-analytics
Previous version2.2.4
Current version2.2.4
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinadmin/setup.php130wp_register_script( 'googlecharts', 'https://www.gstatic.com/charts/loader.js', array(), null );medium
Url
https://www.gstatic.com/charts/loader.js
Url host
www.gstatic.com
remote_enqueuebuiltinadmin/setup.php198wp_register_script( 'googlecharts', 'https://www.gstatic.com/charts/loader.js', array(), null );medium
Url
https://www.gstatic.com/charts/loader.js
Url host
www.gstatic.com
remote_enqueuebuiltinfront/setup.php50wp_register_script( 'googlecharts', 'https://www.gstatic.com/charts/loader.js', array(), null );medium
Url
https://www.gstatic.com/charts/loader.js
Url host
www.gstatic.com
New finding count3
View raw JSON
{
    "slug": "clicky-analytics",
    "previous_version": "2.2.4",
    "current_version": "2.2.4",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "admin/setup.php",
            "line": 130,
            "snippet": "wp_register_script( 'googlecharts', 'https://www.gstatic.com/charts/loader.js', array(), null );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "admin/setup.php",
            "line": 198,
            "snippet": "wp_register_script( 'googlecharts', 'https://www.gstatic.com/charts/loader.js', array(), null );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "front/setup.php",
            "line": 50,
            "snippet": "wp_register_script( 'googlecharts', 'https://www.gstatic.com/charts/loader.js', array(), null );",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        }
    ],
    "new_finding_count": 3
}
High code_scan_delta Sugar Calendar – Events Calendar, Event Tickets, and Events Management Platform (10k+ installs) Resolved 5mo ago
Slugsugar-calendar-lite
Previous version3.11.0
Current version3.11.0
New findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinincludes/admin/assets.php46wp_register_script( 'sugar_calendar_admin_calendar', "{$url}js/sc-calendar.js", $dialog, $ver, false );medium
remote_enqueuebuiltinincludes/admin/assets.php52wp_register_script( 'sugar_calendar_admin_taxonomy', "{$url}js/sc-taxonomy.js", $dialog, $ver, false );medium
remote_enqueuebuiltinincludes/admin/assets.php67wp_register_style( 'sugar_calendar_admin_calendar', "{$url}css/{$path}sc-calendar.css", $deps, $ver, 'all' );medium
remote_enqueuebuiltinincludes/admin/assets.php68wp_register_style( 'sugar_calendar_admin_datepicker', "{$url}css/{$path}sc-datepicker.css", $deps, $ver, 'all' );medium
remote_enqueuebuiltinincludes/admin/assets.php74wp_register_style( 'sugar_calendar_admin_taxonomy', "{$url}css/{$path}sc-taxonomy.css", $wpui, $ver, 'all' );medium
New finding count5
View raw JSON
{
    "slug": "sugar-calendar-lite",
    "previous_version": "3.11.0",
    "current_version": "3.11.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/admin/assets.php",
            "line": 46,
            "snippet": "wp_register_script( 'sugar_calendar_admin_calendar', \"{$url}js/sc-calendar.js\", $dialog, $ver, false );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/admin/assets.php",
            "line": 52,
            "snippet": "wp_register_script( 'sugar_calendar_admin_taxonomy', \"{$url}js/sc-taxonomy.js\", $dialog, $ver, false );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/admin/assets.php",
            "line": 67,
            "snippet": "wp_register_style( 'sugar_calendar_admin_calendar', \"{$url}css/{$path}sc-calendar.css\", $deps, $ver, 'all' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/admin/assets.php",
            "line": 68,
            "snippet": "wp_register_style( 'sugar_calendar_admin_datepicker', \"{$url}css/{$path}sc-datepicker.css\", $deps, $ver, 'all' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/admin/assets.php",
            "line": 74,
            "snippet": "wp_register_style( 'sugar_calendar_admin_taxonomy', \"{$url}css/{$path}sc-taxonomy.css\", $wpui, $ver, 'all' );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 5
}
High code_scan_delta WP User Manager – Registration Form, Login Form, User Profile & Member Directory (10k+ installs) Resolved 5mo ago
Slugwp-user-manager
Previous version2.9.16
Current version2.9.16
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/forms/class-wpum-registration-forms-editor.php102wp_register_script( 'wpum-registration-forms-editor', 'http://localhost:' . $vue_dev_port . '/registration-forms-editor.js', array(), WPUM_VERSION, true );medium
Url
http://localhost:
Url host
localhost
remote_enqueuebuiltinincludes/emails/class-wpum-emails-list.php70wp_register_script( 'wpum-emails-editor', 'http://localhost:' . $vue_dev_port . '/emails.js', array(), WPUM_VERSION, true );medium
Url
http://localhost:
Url host
localhost
remote_enqueuebuiltinincludes/roles/class-wpum-roles-editor.php88wp_register_script( 'wpum-roles-editor', 'http://localhost:' . $vue_dev_port . '/roles-editor.js', array(), WPUM_VERSION, true );medium
Url
http://localhost:
Url host
localhost
remote_enqueuebuiltinincludes/fields/class-wpum-fields-editor.php92wp_register_script( 'wpum-fields-editor', 'http://localhost:' . $vue_dev_port . '/fields-editor.js', array(), WPUM_VERSION, true );medium
Url
http://localhost:
Url host
localhost
New finding count4
View raw JSON
{
    "slug": "wp-user-manager",
    "previous_version": "2.9.16",
    "current_version": "2.9.16",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/forms/class-wpum-registration-forms-editor.php",
            "line": 102,
            "snippet": "wp_register_script( 'wpum-registration-forms-editor', 'http://localhost:' . $vue_dev_port . '/registration-forms-editor.js', array(), WPUM_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "http://localhost:",
                "url_host": "localhost"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/emails/class-wpum-emails-list.php",
            "line": 70,
            "snippet": "wp_register_script( 'wpum-emails-editor', 'http://localhost:' . $vue_dev_port . '/emails.js', array(), WPUM_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "http://localhost:",
                "url_host": "localhost"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/roles/class-wpum-roles-editor.php",
            "line": 88,
            "snippet": "wp_register_script( 'wpum-roles-editor', 'http://localhost:' . $vue_dev_port . '/roles-editor.js', array(), WPUM_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "http://localhost:",
                "url_host": "localhost"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/fields/class-wpum-fields-editor.php",
            "line": 92,
            "snippet": "wp_register_script( 'wpum-fields-editor', 'http://localhost:' . $vue_dev_port . '/fields-editor.js', array(), WPUM_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "http://localhost:",
                "url_host": "localhost"
            }
        }
    ],
    "new_finding_count": 4
}
High code_scan_delta Payment Gateway for PayPal on WooCommerce (10k+ installs) Resolved 5mo ago
Slugwoo-paypal-gateway
Previous version9.0.64
Current version9.0.64
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/gateways/express-checkout-nvp/class-woo-paypal-gateway-express-checkout-helper.php129wp_register_script('wpg-in-context-checkout-js', 'https://www.paypalobjects.com/api/checkout.min.js', array(), null, true);medium
Url
https://www.paypalobjects.com/api/checkout.min.js
Url host
www.paypalobjects.com
New finding count1
View raw JSON
{
    "slug": "woo-paypal-gateway",
    "previous_version": "9.0.64",
    "current_version": "9.0.64",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/gateways/express-checkout-nvp/class-woo-paypal-gateway-express-checkout-helper.php",
            "line": 129,
            "snippet": "wp_register_script('wpg-in-context-checkout-js', 'https://www.paypalobjects.com/api/checkout.min.js', array(), null, true);",
            "confidence": "medium",
            "details": {
                "url": "https://www.paypalobjects.com/api/checkout.min.js",
                "url_host": "www.paypalobjects.com"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta Afterpay Gateway for WooCommerce (10k+ installs) Resolved 5mo ago
Slugafterpay-gateway-for-woocommerce
Previous version3.8.8
Current version3.8.8
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinafterpay-gateway-for-woocommerce.php267wp_register_script( 'square_marketplace_js', "https://{$subdomain}.squarecdn.com/square-marketplace.js", array(), null, true );medium
Url
https://{$subdomain}.squarecdn.com/square-marketplace.js
Url host
{$subdomain}.squarecdn.com
New finding count1
View raw JSON
{
    "slug": "afterpay-gateway-for-woocommerce",
    "previous_version": "3.8.8",
    "current_version": "3.8.8",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "afterpay-gateway-for-woocommerce.php",
            "line": 267,
            "snippet": "wp_register_script( 'square_marketplace_js', \"https://{$subdomain}.squarecdn.com/square-marketplace.js\", array(), null, true );",
            "confidence": "medium",
            "details": {
                "url": "https://{$subdomain}.squarecdn.com/square-marketplace.js",
                "url_host": "{$subdomain}.squarecdn.com"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta YOP Poll (10k+ installs) Resolved 5mo ago
Slugyop-poll
Previous version6.5.40
Current version6.5.40
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinadmin/admin.php766wp_register_script( 'yop-reCaptcha', add_query_arg( $args, 'https://www.google.com/recaptcha/api.js' ), '', null );medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
remote_enqueuebuiltinpublic/public.php56wp_register_script( 'yop-reCaptcha', add_query_arg( $args, 'https://www.google.com/recaptcha/api.js' ), '', null );medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
remote_enqueuebuiltinpublic/public.php70wp_register_script( 'yop-reCaptcha', add_query_arg( $args, 'https://www.google.com/recaptcha/api.js' ), '', null );medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
New finding count3
View raw JSON
{
    "slug": "yop-poll",
    "previous_version": "6.5.40",
    "current_version": "6.5.40",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "admin/admin.php",
            "line": 766,
            "snippet": "wp_register_script( 'yop-reCaptcha', add_query_arg( $args, 'https://www.google.com/recaptcha/api.js' ), '', null );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "public/public.php",
            "line": 56,
            "snippet": "wp_register_script( 'yop-reCaptcha', add_query_arg( $args, 'https://www.google.com/recaptcha/api.js' ), '', null );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "public/public.php",
            "line": 70,
            "snippet": "wp_register_script( 'yop-reCaptcha', add_query_arg( $args, 'https://www.google.com/recaptcha/api.js' ), '', null );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        }
    ],
    "new_finding_count": 3
}
High code_scan_delta Simple Shopping Cart (10k+ installs) Resolved 5mo ago
Slugwordpress-simple-paypal-shopping-cart
Previous version5.2.9
Current version5.2.9
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinwp_shopping_cart.php730wp_register_script( "wpsc-stripe", "https://js.stripe.com/v3/", array( "jquery" ), WP_CART_VERSION );medium
Url
https://js.stripe.com/v3/
Url host
js.stripe.com
New finding count1
View raw JSON
{
    "slug": "wordpress-simple-paypal-shopping-cart",
    "previous_version": "5.2.9",
    "current_version": "5.2.9",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "wp_shopping_cart.php",
            "line": 730,
            "snippet": "wp_register_script( \"wpsc-stripe\", \"https://js.stripe.com/v3/\", array( \"jquery\" ), WP_CART_VERSION );",
            "confidence": "medium",
            "details": {
                "url": "https://js.stripe.com/v3/",
                "url_host": "js.stripe.com"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization (10k+ installs) Resolved 5mo ago
Slugshortpixel-adaptive-images
Previous version3.11.2
Current version3.11.2
New findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinincludes/controllers/short-pixel-ai.class.php847wp_register_script( 'spai-sniper', 'https://' . (SHORTPIXEL_AI_DEBUG ? 'dev.shortpixel.ai' : parse_url($this->get_cdn_url(), PHP_URL_HOST)) . '/assets/js/snip-3.1.min.js', [], SPAI_SNIP_VERSIOmedium
New finding count1
View raw JSON
{
    "slug": "shortpixel-adaptive-images",
    "previous_version": "3.11.2",
    "current_version": "3.11.2",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/controllers/short-pixel-ai.class.php",
            "line": 847,
            "snippet": "wp_register_script( 'spai-sniper', 'https://' . (SHORTPIXEL_AI_DEBUG ? 'dev.shortpixel.ai' : parse_url($this->get_cdn_url(), PHP_URL_HOST)) . '/assets/js/snip-3.1.min.js', [], SPAI_SNIP_VERSIO",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) (10k+ installs) Resolved 5mo ago
Slugbulk-image-alt-text-with-yoast
Previous version2.2.2
Current version2.2.2
New findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltincore/Asset.php18wp_register_style( $name, "{$file}" );medium
New finding count1
View raw JSON
{
    "slug": "bulk-image-alt-text-with-yoast",
    "previous_version": "2.2.2",
    "current_version": "2.2.2",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "core/Asset.php",
            "line": 18,
            "snippet": "wp_register_style( $name, \"{$file}\" );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta wp-Typography (10k+ installs) Resolved 5mo ago
Slugwp-typography
Previous version5.11.0
Current version5.11.0
New findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinincludes/wp-typography/components/class-block-editor.php84\wp_register_script( 'wp-typography-gutenberg-blocks', "{$plugin_url}/{$blocks}.js", $blocks_asset['dependencies'], $blocks_asset['version'], false );medium
remote_enqueuebuiltinincludes/wp-typography/components/class-block-editor.php85\wp_register_script( 'wp-typography-gutenberg-sidebar', "{$plugin_url}/{$sidebar}.js", $sidebar_asset['dependencies'], $sidebar_asset['version'], false );medium
remote_enqueuebuiltinincludes/wp-typography/components/class-block-editor.php86\wp_register_style( 'wp-typography-gutenberg-style', "{$plugin_url}/admin/css/blocks{$suffix}.css", [], $this->api->get_version() );medium
New finding count3
View raw JSON
{
    "slug": "wp-typography",
    "previous_version": "5.11.0",
    "current_version": "5.11.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/wp-typography/components/class-block-editor.php",
            "line": 84,
            "snippet": "\\wp_register_script( 'wp-typography-gutenberg-blocks', \"{$plugin_url}/{$blocks}.js\", $blocks_asset['dependencies'], $blocks_asset['version'], false );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/wp-typography/components/class-block-editor.php",
            "line": 85,
            "snippet": "\\wp_register_script( 'wp-typography-gutenberg-sidebar', \"{$plugin_url}/{$sidebar}.js\", $sidebar_asset['dependencies'], $sidebar_asset['version'], false );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/wp-typography/components/class-block-editor.php",
            "line": 86,
            "snippet": "\\wp_register_style( 'wp-typography-gutenberg-style', \"{$plugin_url}/admin/css/blocks{$suffix}.css\", [], $this->api->get_version() );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 3
}
High code_scan_delta WP Booking System – Booking Calendar (10k+ installs) Resolved 5mo ago
Slugwp-booking-system
Previous version2.0.19.13
Current version2.0.19.13
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinwp-booking-system.php504wp_register_script('google-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), WPBS_VERSION, false);medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
New finding count1
View raw JSON
{
    "slug": "wp-booking-system",
    "previous_version": "2.0.19.13",
    "current_version": "2.0.19.13",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "wp-booking-system.php",
            "line": 504,
            "snippet": "wp_register_script('google-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), WPBS_VERSION, false);",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta SEO Ultimate (10k+ installs) Resolved 5mo ago
Slugseo-ultimate
Previous version7.6.5.9
Current version7.6.5.9
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinplugin/class.seo-ultimate.php1,093wp_register_style('sdf-font-awesome', 'https://netdna.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css', array(), null, 'screen');medium
Url
https://netdna.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css
Url host
netdna.bootstrapcdn.com
New finding count1
View raw JSON
{
    "slug": "seo-ultimate",
    "previous_version": "7.6.5.9",
    "current_version": "7.6.5.9",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "plugin/class.seo-ultimate.php",
            "line": 1093,
            "snippet": "wp_register_style('sdf-font-awesome', 'https://netdna.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css', array(), null, 'screen');",
            "confidence": "medium",
            "details": {
                "url": "https://netdna.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css",
                "url_host": "netdna.bootstrapcdn.com"
            }
        }
    ],
    "new_finding_count": 1
}