Events

1,061 events resolved (filtered). · Last rule pass 4h ago. · 162 open / 4,489 resolved overall.

State: Open Resolved All
High bulk_committer_takeover Custom Product Tabs for WooCommerce (80k+ installs) Resolved 5mo ago
Committeryikesinc
Member since2010-06-17
Plugins joined5
Spread days0
Earliest join2021-03-08 20:08:45
Latest join2021-03-08 21:25:49
Combined installs112,000
Sample plugins
SlugActive installsFirst commit at
yikes-inc-easy-custom-woocommerce-product-tabs80,0002021-03-08 20:08:45
simple-taxonomy-ordering20,0002021-03-08 20:40:11
wp-rest-api-controller9,0002021-03-08 20:51:44
eu-opt-in-compliance-for-mailchimp2,0002021-03-08 21:16:52
custom-product-tabs-wp-all-import-add-on1,0002021-03-08 21:25:49
View raw JSON
{
    "committer": "yikesinc",
    "member_since": "2010-06-17",
    "plugins_joined": 5,
    "spread_days": 0,
    "earliest_join": "2021-03-08 20:08:45",
    "latest_join": "2021-03-08 21:25:49",
    "combined_installs": 112000,
    "sample_plugins": [
        {
            "slug": "yikes-inc-easy-custom-woocommerce-product-tabs",
            "active_installs": 80000,
            "first_commit_at": "2021-03-08 20:08:45"
        },
        {
            "slug": "simple-taxonomy-ordering",
            "active_installs": 20000,
            "first_commit_at": "2021-03-08 20:40:11"
        },
        {
            "slug": "wp-rest-api-controller",
            "active_installs": 9000,
            "first_commit_at": "2021-03-08 20:51:44"
        },
        {
            "slug": "eu-opt-in-compliance-for-mailchimp",
            "active_installs": 2000,
            "first_commit_at": "2021-03-08 21:16:52"
        },
        {
            "slug": "custom-product-tabs-wp-all-import-add-on",
            "active_installs": 1000,
            "first_commit_at": "2021-03-08 21:25:49"
        }
    ]
}
High bulk_committer_takeover Custom Product Tabs for WooCommerce (80k+ installs) Resolved 5mo ago
Committerjpowersdev
Member since2020-05-07
Plugins joined5
Spread days1
Earliest join2020-12-08 20:47:03
Latest join2020-12-09 20:51:43
Combined installs112,000
Sample plugins
SlugActive installsFirst commit at
yikes-inc-easy-custom-woocommerce-product-tabs80,0002020-12-09 20:51:43
simple-taxonomy-ordering20,0002020-12-09 20:51:13
wp-rest-api-controller9,0002020-12-09 20:51:26
eu-opt-in-compliance-for-mailchimp2,0002020-12-08 20:47:03
custom-product-tabs-wp-all-import-add-on1,0002020-12-09 20:50:29
View raw JSON
{
    "committer": "jpowersdev",
    "member_since": "2020-05-07",
    "plugins_joined": 5,
    "spread_days": 1,
    "earliest_join": "2020-12-08 20:47:03",
    "latest_join": "2020-12-09 20:51:43",
    "combined_installs": 112000,
    "sample_plugins": [
        {
            "slug": "yikes-inc-easy-custom-woocommerce-product-tabs",
            "active_installs": 80000,
            "first_commit_at": "2020-12-09 20:51:43"
        },
        {
            "slug": "simple-taxonomy-ordering",
            "active_installs": 20000,
            "first_commit_at": "2020-12-09 20:51:13"
        },
        {
            "slug": "wp-rest-api-controller",
            "active_installs": 9000,
            "first_commit_at": "2020-12-09 20:51:26"
        },
        {
            "slug": "eu-opt-in-compliance-for-mailchimp",
            "active_installs": 2000,
            "first_commit_at": "2020-12-08 20:47:03"
        },
        {
            "slug": "custom-product-tabs-wp-all-import-add-on",
            "active_installs": 1000,
            "first_commit_at": "2020-12-09 20:50:29"
        }
    ]
}
High bulk_committer_takeover Mailonix – Email Template Customizer for WooCommerce (20k+ installs) Resolved 5mo ago
Committermrt3vn
Member since2015-10-27
Plugins joined7
Spread days14
Earliest join2024-05-06 08:18:12
Latest join2024-05-21 04:26:41
Combined installs47,000
Sample plugins
SlugActive installsFirst commit at
email-template-customizer-for-woo20,0002024-05-09 03:13:37
bulky-bulk-edit-products-for-woo10,0002024-05-21 04:26:41
exmage-wp-image-links7,0002024-05-06 08:18:29
clear-autoptimize-cache-automatically4,0002024-05-06 08:19:05
product-size-chart-for-woo3,0002024-05-06 08:18:12
product-pre-orders-for-woo2,0002024-05-06 08:18:17
bopo-woo-product-bundle-builder1,0002024-05-21 04:26:24
View raw JSON
{
    "committer": "mrt3vn",
    "member_since": "2015-10-27",
    "plugins_joined": 7,
    "spread_days": 14,
    "earliest_join": "2024-05-06 08:18:12",
    "latest_join": "2024-05-21 04:26:41",
    "combined_installs": 47000,
    "sample_plugins": [
        {
            "slug": "email-template-customizer-for-woo",
            "active_installs": 20000,
            "first_commit_at": "2024-05-09 03:13:37"
        },
        {
            "slug": "bulky-bulk-edit-products-for-woo",
            "active_installs": 10000,
            "first_commit_at": "2024-05-21 04:26:41"
        },
        {
            "slug": "exmage-wp-image-links",
            "active_installs": 7000,
            "first_commit_at": "2024-05-06 08:18:29"
        },
        {
            "slug": "clear-autoptimize-cache-automatically",
            "active_installs": 4000,
            "first_commit_at": "2024-05-06 08:19:05"
        },
        {
            "slug": "product-size-chart-for-woo",
            "active_installs": 3000,
            "first_commit_at": "2024-05-06 08:18:12"
        },
        {
            "slug": "product-pre-orders-for-woo",
            "active_installs": 2000,
            "first_commit_at": "2024-05-06 08:18:17"
        },
        {
            "slug": "bopo-woo-product-bundle-builder",
            "active_installs": 1000,
            "first_commit_at": "2024-05-21 04:26:24"
        }
    ]
}
High bulk_committer_takeover Product Import Export for WooCommerce – Import Export Product CSV Suite (80k+ installs) Resolved 5mo ago
Committermujeebur
Member since2017-03-30
Plugins joined7
Spread days61
Earliest join2017-12-07 12:02:35
Latest join2018-02-07 11:37:17
Combined installs278,000
Sample plugins
SlugActive installsFirst commit at
product-import-export-for-woo90,0002017-12-07 17:20:21
print-invoices-packing-slip-labels-for-woocommerce60,0002017-12-07 12:02:35
users-customers-import-export-for-wp-woocommerce60,0002018-01-25 09:52:14
order-import-export-for-woocommerce50,0002018-02-07 11:37:17
express-checkout-paypal-payment-gateway-for-woocommerce8,0002017-12-15 10:59:41
payment-gateway-stripe-and-woocommerce-integration8,0002017-12-08 12:26:32
comments-import-export-woocommerce2,0002017-12-14 06:59:26
View raw JSON
{
    "committer": "mujeebur",
    "member_since": "2017-03-30",
    "plugins_joined": 7,
    "spread_days": 61,
    "earliest_join": "2017-12-07 12:02:35",
    "latest_join": "2018-02-07 11:37:17",
    "combined_installs": 278000,
    "sample_plugins": [
        {
            "slug": "product-import-export-for-woo",
            "active_installs": 90000,
            "first_commit_at": "2017-12-07 17:20:21"
        },
        {
            "slug": "print-invoices-packing-slip-labels-for-woocommerce",
            "active_installs": 60000,
            "first_commit_at": "2017-12-07 12:02:35"
        },
        {
            "slug": "users-customers-import-export-for-wp-woocommerce",
            "active_installs": 60000,
            "first_commit_at": "2018-01-25 09:52:14"
        },
        {
            "slug": "order-import-export-for-woocommerce",
            "active_installs": 50000,
            "first_commit_at": "2018-02-07 11:37:17"
        },
        {
            "slug": "express-checkout-paypal-payment-gateway-for-woocommerce",
            "active_installs": 8000,
            "first_commit_at": "2017-12-15 10:59:41"
        },
        {
            "slug": "payment-gateway-stripe-and-woocommerce-integration",
            "active_installs": 8000,
            "first_commit_at": "2017-12-08 12:26:32"
        },
        {
            "slug": "comments-import-export-woocommerce",
            "active_installs": 2000,
            "first_commit_at": "2017-12-14 06:59:26"
        }
    ]
}
High compromised_committer_burst WP-Appbox (2k+ installs) Resolved 5mo ago
Slugwp-appbox
Author slugmarcelismus
Burst start2026-04-10 11:34:16
Burst end2026-04-10 11:38:03
Burst commits12
Burst window minutes90
Tenure days1,423
Distinct messages1
Avg message length7
Top messagev4.5.11
Top message count12
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-appbox",
    "author_slug": "marcelismus",
    "burst_start": "2026-04-10 11:34:16",
    "burst_end": "2026-04-10 11:38:03",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 1423,
    "distinct_messages": 1,
    "avg_message_length": 7,
    "top_message": "v4.5.11",
    "top_message_count": 12,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst DPD Baltic Shipping (2k+ installs) Resolved 5mo ago
Slugwoo-shipping-dpd-baltic
Author slugdpdbaltics
Burst start2026-03-31 06:07:11
Burst end2026-03-31 06:12:29
Burst commits12
Burst window minutes90
Tenure days2,520
Distinct messages3
Avg message length33
Top message1.2.91 upload trunk folder files
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "woo-shipping-dpd-baltic",
    "author_slug": "dpdbaltics",
    "burst_start": "2026-03-31 06:07:11",
    "burst_end": "2026-03-31 06:12:29",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2520,
    "distinct_messages": 3,
    "avg_message_length": 32.5,
    "top_message": "1.2.91 upload trunk folder files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Contact Form 7 GetResponse Extension (1k+ installs) Resolved 5mo ago
Slugcontact-form-7-getresponse-extension
Author slugwen solutions
Burst start2026-04-23 09:52:55
Burst end2026-04-23 10:01:10
Burst commits14
Burst window minutes90
Tenure days3,926
Distinct messages4
Avg message length18
Top messageadded updated files
Top message count11
Prt revert—
ExplanationEstablished author committed 14 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "contact-form-7-getresponse-extension",
    "author_slug": "wen solutions",
    "burst_start": "2026-04-23 09:52:55",
    "burst_end": "2026-04-23 10:01:10",
    "burst_commits": 14,
    "burst_window_minutes": 90,
    "tenure_days": 3926,
    "distinct_messages": 4,
    "avg_message_length": 18.4,
    "top_message": "added updated files",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 14 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst WP Travel Gutenberg Blocks (800 installs) Resolved 5mo ago
Slugwp-travel-blocks
Author slugwptravel
Burst start2026-04-07 10:25:44
Burst end2026-04-07 10:45:41
Burst commits12
Burst window minutes90
Tenure days2,506
Distinct messages5
Avg message length17
Top messageadded updated files
Top message count6
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-travel-blocks",
    "author_slug": "wptravel",
    "burst_start": "2026-04-07 10:25:44",
    "burst_end": "2026-04-07 10:45:41",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2506,
    "distinct_messages": 5,
    "avg_message_length": 16.5,
    "top_message": "added updated files",
    "top_message_count": 6,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High code_scan_delta Montonio for WooCommerce (10k+ installs) Resolved 5mo ago
Slugmontonio-for-woocommerce
Previous version10.0.0
Current version10.0.1
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinblocks/abstract-montonio-payment-method-block.php94wp_register_script( 'montonio-js-legacy', 'https://public.montonio.com/assets/montonio-js/3.x/montonio.bundle.js', array(), WC_MONTONIO_PLUGIN_VERSION, true );medium
Url
https://public.montonio.com/assets/montonio-js/3.x/montonio.bundle.js
Url host
public.montonio.com
remote_enqueuebuiltinblocks/abstract-montonio-payment-method-block.php95wp_register_script( 'montonio-js', 'https://js.montonio.com/1.x.x/montonio.umd.js', array(), WC_MONTONIO_PLUGIN_VERSION, true );medium
Url
https://js.montonio.com/1.x.x/montonio.umd.js
Url host
js.montonio.com
remote_enqueuebuiltinmontonio.php234wp_register_script( 'montonio-js-legacy', 'https://public.montonio.com/assets/montonio-js/3.x/montonio.bundle.js', array(), WC_MONTONIO_PLUGIN_VERSION, true );medium
Url
https://public.montonio.com/assets/montonio-js/3.x/montonio.bundle.js
Url host
public.montonio.com
remote_enqueuebuiltinmontonio.php235wp_register_script( 'montonio-js', 'https://js.montonio.com/1.x.x/montonio.umd.js', array(), WC_MONTONIO_PLUGIN_VERSION, true );medium
Url
https://js.montonio.com/1.x.x/montonio.umd.js
Url host
js.montonio.com
New finding count4
View raw JSON
{
    "slug": "montonio-for-woocommerce",
    "previous_version": "10.0.0",
    "current_version": "10.0.1",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "blocks/abstract-montonio-payment-method-block.php",
            "line": 94,
            "snippet": "wp_register_script( 'montonio-js-legacy', 'https://public.montonio.com/assets/montonio-js/3.x/montonio.bundle.js', array(), WC_MONTONIO_PLUGIN_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://public.montonio.com/assets/montonio-js/3.x/montonio.bundle.js",
                "url_host": "public.montonio.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "blocks/abstract-montonio-payment-method-block.php",
            "line": 95,
            "snippet": "wp_register_script( 'montonio-js', 'https://js.montonio.com/1.x.x/montonio.umd.js', array(), WC_MONTONIO_PLUGIN_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://js.montonio.com/1.x.x/montonio.umd.js",
                "url_host": "js.montonio.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "montonio.php",
            "line": 234,
            "snippet": "wp_register_script( 'montonio-js-legacy', 'https://public.montonio.com/assets/montonio-js/3.x/montonio.bundle.js', array(), WC_MONTONIO_PLUGIN_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://public.montonio.com/assets/montonio-js/3.x/montonio.bundle.js",
                "url_host": "public.montonio.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "montonio.php",
            "line": 235,
            "snippet": "wp_register_script( 'montonio-js', 'https://js.montonio.com/1.x.x/montonio.umd.js', array(), WC_MONTONIO_PLUGIN_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://js.montonio.com/1.x.x/montonio.umd.js",
                "url_host": "js.montonio.com"
            }
        }
    ],
    "new_finding_count": 4
}
High code_scan_delta Visitor Traffic Real Time Statistics (30k+ installs) Resolved 5mo ago
Slugvisitors-traffic-real-time-statistics
Previous version8.6
Current version8.7
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinoverview.php1,658wp_register_script('ahc_gstatic_js', 'https://www.gstatic.com/charts/loader.js', array(), '1.0.0', true);medium
Url
https://www.gstatic.com/charts/loader.js
Url host
www.gstatic.com
New finding count1
View raw JSON
{
    "slug": "visitors-traffic-real-time-statistics",
    "previous_version": "8.6",
    "current_version": "8.7",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "overview.php",
            "line": 1658,
            "snippet": "wp_register_script('ahc_gstatic_js', 'https://www.gstatic.com/charts/loader.js', array(), '1.0.0', true);",
            "confidence": "medium",
            "details": {
                "url": "https://www.gstatic.com/charts/loader.js",
                "url_host": "www.gstatic.com"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta Brizy – Page Builder (60k+ installs) Resolved 5mo ago
Slugbrizy
Previous version2.8.12
Current version2.8.13
New findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinpublic/main.php146wp_register_script('brizy-react-vendor', "$assets_url/editor/js/react.js", array(), $ver, true);medium
remote_enqueuebuiltinpublic/main.php147wp_register_script('brizy-react-dom-vendor', "$assets_url/editor/js/react-dom.js", array(), $ver, true);medium
remote_enqueuebuiltinpublic/main.php148wp_register_script('brizy-editor-vendor', "$assets_url/editor/js/editor.vendor.min.js", array(), $ver, true);medium
New finding count3
View raw JSON
{
    "slug": "brizy",
    "previous_version": "2.8.12",
    "current_version": "2.8.13",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "public/main.php",
            "line": 146,
            "snippet": "wp_register_script('brizy-react-vendor', \"$assets_url/editor/js/react.js\", array(), $ver, true);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "public/main.php",
            "line": 147,
            "snippet": "wp_register_script('brizy-react-dom-vendor', \"$assets_url/editor/js/react-dom.js\", array(), $ver, true);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "public/main.php",
            "line": 148,
            "snippet": "wp_register_script('brizy-editor-vendor', \"$assets_url/editor/js/editor.vendor.min.js\", array(), $ver, true);",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 3
}
High bulk_committer_takeover Advance Custom HTML – Show Off Code Snippets with Live Preview (10k+ installs) Resolved 5mo ago
Committerbplugins
Member since2024-04-04
Plugins joined7
Spread days76
Earliest join2024-10-16 06:51:55
Latest join2024-12-31 07:23:06
Combined installs31,000
Sample plugins
SlugActive installsFirst commit at
advance-custom-html10,0002024-10-16 06:51:55
document-embedder-addons-for-elementor6,0002024-10-25 06:00:33
button-block5,0002024-10-17 11:48:29
icon-list-block4,0002024-12-17 12:42:28
b-timeline2,0002024-12-31 07:23:06
easy-twitter-feeds2,0002024-12-12 06:04:04
icons-font-loader2,0002024-11-14 11:22:22
View raw JSON
{
    "committer": "bplugins",
    "member_since": "2024-04-04",
    "plugins_joined": 7,
    "spread_days": 76,
    "earliest_join": "2024-10-16 06:51:55",
    "latest_join": "2024-12-31 07:23:06",
    "combined_installs": 31000,
    "sample_plugins": [
        {
            "slug": "advance-custom-html",
            "active_installs": 10000,
            "first_commit_at": "2024-10-16 06:51:55"
        },
        {
            "slug": "document-embedder-addons-for-elementor",
            "active_installs": 6000,
            "first_commit_at": "2024-10-25 06:00:33"
        },
        {
            "slug": "button-block",
            "active_installs": 5000,
            "first_commit_at": "2024-10-17 11:48:29"
        },
        {
            "slug": "icon-list-block",
            "active_installs": 4000,
            "first_commit_at": "2024-12-17 12:42:28"
        },
        {
            "slug": "b-timeline",
            "active_installs": 2000,
            "first_commit_at": "2024-12-31 07:23:06"
        },
        {
            "slug": "easy-twitter-feeds",
            "active_installs": 2000,
            "first_commit_at": "2024-12-12 06:04:04"
        },
        {
            "slug": "icons-font-loader",
            "active_installs": 2000,
            "first_commit_at": "2024-11-14 11:22:22"
        }
    ]
}
High bulk_committer_takeover Advance Custom HTML – Show Off Code Snippets with Live Preview (10k+ installs) Resolved 5mo ago
Committerbplugins
Member since2024-04-04
Plugins joined7
Spread days76
Earliest join2024-10-16 06:51:55
Latest join2024-12-31 07:23:06
Combined installs31,000
Sample plugins
SlugActive installsFirst commit at
advance-custom-html10,0002024-10-16 06:51:55
document-embedder-addons-for-elementor6,0002024-10-25 06:00:33
button-block5,0002024-10-17 11:48:29
icon-list-block4,0002024-12-17 12:42:28
b-timeline2,0002024-12-31 07:23:06
easy-twitter-feeds2,0002024-12-12 06:04:04
icons-font-loader2,0002024-11-14 11:22:22
View raw JSON
{
    "committer": "bplugins",
    "member_since": "2024-04-04",
    "plugins_joined": 7,
    "spread_days": 76,
    "earliest_join": "2024-10-16 06:51:55",
    "latest_join": "2024-12-31 07:23:06",
    "combined_installs": 31000,
    "sample_plugins": [
        {
            "slug": "advance-custom-html",
            "active_installs": 10000,
            "first_commit_at": "2024-10-16 06:51:55"
        },
        {
            "slug": "document-embedder-addons-for-elementor",
            "active_installs": 6000,
            "first_commit_at": "2024-10-25 06:00:33"
        },
        {
            "slug": "button-block",
            "active_installs": 5000,
            "first_commit_at": "2024-10-17 11:48:29"
        },
        {
            "slug": "icon-list-block",
            "active_installs": 4000,
            "first_commit_at": "2024-12-17 12:42:28"
        },
        {
            "slug": "b-timeline",
            "active_installs": 2000,
            "first_commit_at": "2024-12-31 07:23:06"
        },
        {
            "slug": "easy-twitter-feeds",
            "active_installs": 2000,
            "first_commit_at": "2024-12-12 06:04:04"
        },
        {
            "slug": "icons-font-loader",
            "active_installs": 2000,
            "first_commit_at": "2024-11-14 11:22:22"
        }
    ]
}
High bulk_committer_takeover Mailonix – Email Template Customizer for WooCommerce (20k+ installs) Resolved 5mo ago
Committermrt3vn
Member since2015-10-27
Plugins joined6
Spread days14
Earliest join2024-05-06 08:18:12
Latest join2024-05-21 04:26:41
Combined installs46,000
Sample plugins
SlugActive installsFirst commit at
email-template-customizer-for-woo20,0002024-05-09 03:13:37
bulky-bulk-edit-products-for-woo10,0002024-05-21 04:26:41
exmage-wp-image-links7,0002024-05-06 08:18:29
clear-autoptimize-cache-automatically4,0002024-05-06 08:19:05
product-size-chart-for-woo3,0002024-05-06 08:18:12
product-pre-orders-for-woo2,0002024-05-06 08:18:17
View raw JSON
{
    "committer": "mrt3vn",
    "member_since": "2015-10-27",
    "plugins_joined": 6,
    "spread_days": 14,
    "earliest_join": "2024-05-06 08:18:12",
    "latest_join": "2024-05-21 04:26:41",
    "combined_installs": 46000,
    "sample_plugins": [
        {
            "slug": "email-template-customizer-for-woo",
            "active_installs": 20000,
            "first_commit_at": "2024-05-09 03:13:37"
        },
        {
            "slug": "bulky-bulk-edit-products-for-woo",
            "active_installs": 10000,
            "first_commit_at": "2024-05-21 04:26:41"
        },
        {
            "slug": "exmage-wp-image-links",
            "active_installs": 7000,
            "first_commit_at": "2024-05-06 08:18:29"
        },
        {
            "slug": "clear-autoptimize-cache-automatically",
            "active_installs": 4000,
            "first_commit_at": "2024-05-06 08:19:05"
        },
        {
            "slug": "product-size-chart-for-woo",
            "active_installs": 3000,
            "first_commit_at": "2024-05-06 08:18:12"
        },
        {
            "slug": "product-pre-orders-for-woo",
            "active_installs": 2000,
            "first_commit_at": "2024-05-06 08:18:17"
        }
    ]
}
High bulk_committer_takeover Points and Rewards for WooCommerce (7k+ installs) Resolved 5mo ago
Committerwpswings
Member since2021-12-06
Plugins joined5
Spread days0
Earliest join2022-02-03 07:25:47
Latest join2022-02-03 12:03:42
Combined installs24,000
Sample plugins
SlugActive installsFirst commit at
points-and-rewards-for-woocommerce7,0002022-02-03 07:25:47
woo-gift-cards-lite7,0002022-02-03 08:21:30
woo-refund-and-exchange-lite5,0002022-02-03 12:03:42
upsell-order-bump-offer-for-woocommerce3,0002022-02-03 10:02:28
wallet-system-for-woocommerce2,0002022-02-03 08:56:04
View raw JSON
{
    "committer": "wpswings",
    "member_since": "2021-12-06",
    "plugins_joined": 5,
    "spread_days": 0,
    "earliest_join": "2022-02-03 07:25:47",
    "latest_join": "2022-02-03 12:03:42",
    "combined_installs": 24000,
    "sample_plugins": [
        {
            "slug": "points-and-rewards-for-woocommerce",
            "active_installs": 7000,
            "first_commit_at": "2022-02-03 07:25:47"
        },
        {
            "slug": "woo-gift-cards-lite",
            "active_installs": 7000,
            "first_commit_at": "2022-02-03 08:21:30"
        },
        {
            "slug": "woo-refund-and-exchange-lite",
            "active_installs": 5000,
            "first_commit_at": "2022-02-03 12:03:42"
        },
        {
            "slug": "upsell-order-bump-offer-for-woocommerce",
            "active_installs": 3000,
            "first_commit_at": "2022-02-03 10:02:28"
        },
        {
            "slug": "wallet-system-for-woocommerce",
            "active_installs": 2000,
            "first_commit_at": "2022-02-03 08:56:04"
        }
    ]
}
High bulk_committer_takeover Post Grid (30k+ installs) Resolved 5mo ago
Committerpickplugins
Member since2015-07-24
Plugins joined5
Spread days25
Earliest join2016-11-17 03:52:04
Latest join2016-12-12 10:35:28
Combined installs84,000
Sample plugins
SlugActive installsFirst commit at
post-grid30,0002016-12-03 16:51:30
accordions20,0002016-11-28 19:12:43
breadcrumb20,0002016-12-12 10:27:12
woocommerce-products-slider10,0002016-11-17 03:52:04
related-post4,0002016-12-12 10:35:28
View raw JSON
{
    "committer": "pickplugins",
    "member_since": "2015-07-24",
    "plugins_joined": 5,
    "spread_days": 25,
    "earliest_join": "2016-11-17 03:52:04",
    "latest_join": "2016-12-12 10:35:28",
    "combined_installs": 84000,
    "sample_plugins": [
        {
            "slug": "post-grid",
            "active_installs": 30000,
            "first_commit_at": "2016-12-03 16:51:30"
        },
        {
            "slug": "accordions",
            "active_installs": 20000,
            "first_commit_at": "2016-11-28 19:12:43"
        },
        {
            "slug": "breadcrumb",
            "active_installs": 20000,
            "first_commit_at": "2016-12-12 10:27:12"
        },
        {
            "slug": "woocommerce-products-slider",
            "active_installs": 10000,
            "first_commit_at": "2016-11-17 03:52:04"
        },
        {
            "slug": "related-post",
            "active_installs": 4000,
            "first_commit_at": "2016-12-12 10:35:28"
        }
    ]
}
High bulk_committer_takeover My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu) (100k+ installs) Resolved 5mo ago
Committergaldub
Member since2017-07-24
Plugins joined5
Spread days73
Earliest join2018-12-19 16:28:45
Latest join2019-03-03 09:40:10
Combined installs242,000
Sample plugins
SlugActive installsFirst commit at
mystickymenu100,0002019-03-03 09:36:54
folders90,0002018-12-19 16:28:45
mystickyelements40,0002019-03-03 09:40:10
mystickysidebar10,0002019-03-03 09:39:32
wp-subscribe-form2,0002019-02-01 19:20:21
View raw JSON
{
    "committer": "galdub",
    "member_since": "2017-07-24",
    "plugins_joined": 5,
    "spread_days": 73,
    "earliest_join": "2018-12-19 16:28:45",
    "latest_join": "2019-03-03 09:40:10",
    "combined_installs": 242000,
    "sample_plugins": [
        {
            "slug": "mystickymenu",
            "active_installs": 100000,
            "first_commit_at": "2019-03-03 09:36:54"
        },
        {
            "slug": "folders",
            "active_installs": 90000,
            "first_commit_at": "2018-12-19 16:28:45"
        },
        {
            "slug": "mystickyelements",
            "active_installs": 40000,
            "first_commit_at": "2019-03-03 09:40:10"
        },
        {
            "slug": "mystickysidebar",
            "active_installs": 10000,
            "first_commit_at": "2019-03-03 09:39:32"
        },
        {
            "slug": "wp-subscribe-form",
            "active_installs": 2000,
            "first_commit_at": "2019-02-01 19:20:21"
        }
    ]
}
High bulk_committer_takeover Pixel Cat – Conversion Pixel Manager (40k+ installs) Resolved 5mo ago
Committerflippy101
Member since2020-05-12
Plugins joined5
Spread days89
Earliest join2020-05-13 07:29:03
Latest join2020-08-11 04:10:21
Combined installs63,000
Sample plugins
SlugActive installsFirst commit at
facebook-conversion-pixel40,0002020-05-13 07:29:03
easy-pricing-tables10,0002020-08-11 04:10:21
analytics-cat6,0002020-05-26 04:11:46
quiz-cat5,0002020-05-21 07:43:26
mailchimp-wp2,0002020-07-09 04:48:51
View raw JSON
{
    "committer": "flippy101",
    "member_since": "2020-05-12",
    "plugins_joined": 5,
    "spread_days": 89,
    "earliest_join": "2020-05-13 07:29:03",
    "latest_join": "2020-08-11 04:10:21",
    "combined_installs": 63000,
    "sample_plugins": [
        {
            "slug": "facebook-conversion-pixel",
            "active_installs": 40000,
            "first_commit_at": "2020-05-13 07:29:03"
        },
        {
            "slug": "easy-pricing-tables",
            "active_installs": 10000,
            "first_commit_at": "2020-08-11 04:10:21"
        },
        {
            "slug": "analytics-cat",
            "active_installs": 6000,
            "first_commit_at": "2020-05-26 04:11:46"
        },
        {
            "slug": "quiz-cat",
            "active_installs": 5000,
            "first_commit_at": "2020-05-21 07:43:26"
        },
        {
            "slug": "mailchimp-wp",
            "active_installs": 2000,
            "first_commit_at": "2020-07-09 04:48:51"
        }
    ]
}
High compromised_committer_burst WP Travel – Ultimate Travel Booking System, Tour Management Engine (3k+ installs) Resolved 5mo ago
Slugwp-travel
Author slugwptravel
Burst start2026-04-07 06:18:51
Burst end2026-04-07 06:34:03
Burst commits12
Burst window minutes90
Tenure days637
Distinct messages3
Avg message length20
Top messageupload updated files
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-04-07 06:18:51",
    "burst_end": "2026-04-07 06:34:03",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 637,
    "distinct_messages": 3,
    "avg_message_length": 19.6,
    "top_message": "upload updated files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High version_compare_trap TS Poll – Survey, Versus Poll, Image Poll, Video Poll (3k+ installs) Resolved 5mo ago
Slugpoll-wp
Active traps
Trap versionTrap releasedBlocked byBlocked on
2.082022-12-14 13:25:402.0.82022-12-19 11:34:31
ExplanationPlugin released 2.08 (parses as higher than canonical X.0.N series), then later released 2.0.8 which parses LOWER — users who installed the trap version cannot auto-update to the canonical release.
View raw JSON
{
    "slug": "poll-wp",
    "active_traps": [
        {
            "trap_version": "2.08",
            "trap_released": "2022-12-14 13:25:40",
            "blocked_by": "2.0.8",
            "blocked_on": "2022-12-19 11:34:31"
        }
    ],
    "explanation": "Plugin released 2.08 (parses as higher than canonical X.0.N series), then later released 2.0.8 which parses LOWER \u2014 users who installed the trap version cannot auto-update to the canonical release."
}
Sluggamipress
Previous version7.8.6
Current version7.8.7
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinintegrations/vimeo/includes/scripts.php23wp_register_script( 'gamipress-vimeo-api-js', 'https://player.vimeo.com/api/player.js', array( 'jquery' ), GAMIPRESS_VIMEO_VER, true );medium
Url
https://player.vimeo.com/api/player.js
Url host
player.vimeo.com
remote_enqueuebuiltinintegrations/youtube/includes/scripts.php23wp_register_script( 'gamipress-youtube-api-js', 'https://www.youtube.com/iframe_api', array( 'jquery' ), GAMIPRESS_YOUTUBE_VER, true );medium
Url
https://www.youtube.com/iframe_api
Url host
www.youtube.com
New finding count2
View raw JSON
{
    "slug": "gamipress",
    "previous_version": "7.8.6",
    "current_version": "7.8.7",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "integrations/vimeo/includes/scripts.php",
            "line": 23,
            "snippet": "wp_register_script( 'gamipress-vimeo-api-js', 'https://player.vimeo.com/api/player.js', array( 'jquery' ), GAMIPRESS_VIMEO_VER, true );",
            "confidence": "medium",
            "details": {
                "url": "https://player.vimeo.com/api/player.js",
                "url_host": "player.vimeo.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "integrations/youtube/includes/scripts.php",
            "line": 23,
            "snippet": "wp_register_script( 'gamipress-youtube-api-js', 'https://www.youtube.com/iframe_api', array( 'jquery' ), GAMIPRESS_YOUTUBE_VER, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.youtube.com/iframe_api",
                "url_host": "www.youtube.com"
            }
        }
    ],
    "new_finding_count": 2
}
High code_scan_delta MotoPress Hotel Booking (10k+ installs) Resolved 5mo ago
Slugmotopress-hotel-booking-lite
Previous version5.5.2
Current version6.0.0
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/script-managers/public-script-manager.php49wp_register_script( 'mphb-vendor-stripe-library', 'https://js.stripe.com/v3/', null, '3.0', true );medium
Url
https://js.stripe.com/v3/
Url host
js.stripe.com
remote_enqueuebuiltinincludes/script-managers/public-script-manager.php51wp_register_script( 'mphb-vendor-braintree-client-sdk', 'https://js.braintreegateway.com/js/braintree-2.32.1.min.js', null, '2.32.1', true );medium
Url
https://js.braintreegateway.com/js/braintree-2.32.1.min.js
Url host
js.braintreegateway.com
New finding count2
View raw JSON
{
    "slug": "motopress-hotel-booking-lite",
    "previous_version": "5.5.2",
    "current_version": "6.0.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/script-managers/public-script-manager.php",
            "line": 49,
            "snippet": "wp_register_script( 'mphb-vendor-stripe-library', 'https://js.stripe.com/v3/', null, '3.0', true );",
            "confidence": "medium",
            "details": {
                "url": "https://js.stripe.com/v3/",
                "url_host": "js.stripe.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/script-managers/public-script-manager.php",
            "line": 51,
            "snippet": "wp_register_script( 'mphb-vendor-braintree-client-sdk', 'https://js.braintreegateway.com/js/braintree-2.32.1.min.js', null, '2.32.1', true );",
            "confidence": "medium",
            "details": {
                "url": "https://js.braintreegateway.com/js/braintree-2.32.1.min.js",
                "url_host": "js.braintreegateway.com"
            }
        }
    ],
    "new_finding_count": 2
}
High code_scan_delta PDF Poster – Let visitors read PDF's without leaving the page (20k+ installs) Resolved 5mo ago
Slugpdf-poster
Previous version2.5.0
Current version2.5.1
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltininc/Base/EnqueueAssets.php36wp_register_script('adobe-viewer', 'https://acrobatservices.adobe.com/view-sdk/viewer.js', array(), PDFPRO_VER, true);medium
Url
https://acrobatservices.adobe.com/view-sdk/viewer.js
Url host
acrobatservices.adobe.com
remote_enqueuebuiltininc/Base/EnqueueAssets.php39wp_register_script('dropbox-picker', 'https://www.dropbox.com/static/api/2/dropins.js', [], '1.0', true);medium
Url
https://www.dropbox.com/static/api/2/dropins.js
Url host
www.dropbox.com
New finding count2
View raw JSON
{
    "slug": "pdf-poster",
    "previous_version": "2.5.0",
    "current_version": "2.5.1",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/Base/EnqueueAssets.php",
            "line": 36,
            "snippet": "wp_register_script('adobe-viewer', 'https://acrobatservices.adobe.com/view-sdk/viewer.js', array(), PDFPRO_VER, true);",
            "confidence": "medium",
            "details": {
                "url": "https://acrobatservices.adobe.com/view-sdk/viewer.js",
                "url_host": "acrobatservices.adobe.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/Base/EnqueueAssets.php",
            "line": 39,
            "snippet": "wp_register_script('dropbox-picker', 'https://www.dropbox.com/static/api/2/dropins.js', [], '1.0', true);",
            "confidence": "medium",
            "details": {
                "url": "https://www.dropbox.com/static/api/2/dropins.js",
                "url_host": "www.dropbox.com"
            }
        }
    ],
    "new_finding_count": 2
}
High code_scan_delta Klarna for WooCommerce (20k+ installs) Resolved 5mo ago
Slugklarna-payments-for-woocommerce
Previous version4.10.3
Current version4.10.4
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinclasses/class-kp-assets.php441wp_register_script( 'klarna_express_button_library', 'https://x.klarnacdn.net/express-button/v1/lib.js', array(), null, false );medium
Url
https://x.klarnacdn.net/express-button/v1/lib.js
Url host
x.klarnacdn.net
remote_enqueuebuiltindependencies/krokedil/klarna-express-checkout/src/Assets.php67wp_register_style('kec-cart', "{$this->assets_path}css/kec-cart.css", array(), KlarnaExpressCheckout::VERSION);medium—
remote_enqueuebuiltindependencies/krokedil/klarna-express-checkout/src/Assets.php69wp_register_style('kec-admin', "{$this->assets_path}css/kec-admin.css", array(), KlarnaExpressCheckout::VERSION);medium—
remote_enqueuebuiltindependencies/krokedil/klarna-express-checkout/src/Assets.php70wp_register_script('kec-admin', "{$this->assets_path}js/kec-admin.js", array('jquery'), KlarnaExpressCheckout::VERSION, \true);medium—
remote_enqueuebuiltindependencies/krokedil/klarna-express-checkout/src/Assets.php71wp_register_script('kec-cart', "{$this->assets_path}js/kec-cart.js", array('jquery', 'klarnapayments'), KlarnaExpressCheckout::VERSION, \true);medium—
remote_enqueuebuiltindependencies/krokedil/klarna-express-checkout/src/Assets.php72wp_register_script('kec-checkout', "{$this->assets_path}js/kec-checkout.js", array('jquery', 'klarnapayments'), KlarnaExpressCheckout::VERSION, \true);medium—
New finding count6
View raw JSON
{
    "slug": "klarna-payments-for-woocommerce",
    "previous_version": "4.10.3",
    "current_version": "4.10.4",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "classes/class-kp-assets.php",
            "line": 441,
            "snippet": "wp_register_script( 'klarna_express_button_library', 'https://x.klarnacdn.net/express-button/v1/lib.js', array(), null, false );",
            "confidence": "medium",
            "details": {
                "url": "https://x.klarnacdn.net/express-button/v1/lib.js",
                "url_host": "x.klarnacdn.net"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "dependencies/krokedil/klarna-express-checkout/src/Assets.php",
            "line": 67,
            "snippet": "wp_register_style('kec-cart', \"{$this->assets_path}css/kec-cart.css\", array(), KlarnaExpressCheckout::VERSION);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "dependencies/krokedil/klarna-express-checkout/src/Assets.php",
            "line": 69,
            "snippet": "wp_register_style('kec-admin', \"{$this->assets_path}css/kec-admin.css\", array(), KlarnaExpressCheckout::VERSION);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "dependencies/krokedil/klarna-express-checkout/src/Assets.php",
            "line": 70,
            "snippet": "wp_register_script('kec-admin', \"{$this->assets_path}js/kec-admin.js\", array('jquery'), KlarnaExpressCheckout::VERSION, \\true);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "dependencies/krokedil/klarna-express-checkout/src/Assets.php",
            "line": 71,
            "snippet": "wp_register_script('kec-cart', \"{$this->assets_path}js/kec-cart.js\", array('jquery', 'klarnapayments'), KlarnaExpressCheckout::VERSION, \\true);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "dependencies/krokedil/klarna-express-checkout/src/Assets.php",
            "line": 72,
            "snippet": "wp_register_script('kec-checkout', \"{$this->assets_path}js/kec-checkout.js\", array('jquery', 'klarnapayments'), KlarnaExpressCheckout::VERSION, \\true);",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 6
}
High code_scan_delta PowerPress Podcasting plugin by Blubrry (20k+ installs) Resolved 5mo ago
Slugpowerpress
Previous version11.15.17
Current version11.16.0
New findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinpowerpress.php6,122wp_register_style('powerpress-variables', "{$base_url}css/variables{$suffix}.css", [], POWERPRESS_VERSION);medium
PluginAUTHioc:code_patternpowerpress.php71$affectedusernames = ['PluginAUTH', 'PluginGuest', 'Options'];high
add_footer_scriptioc:code_patternpowerpress.php56<?php if(function_exists('add_footer_script')){medium
add_footer_scriptioc:code_patternpowerpress.php57esc_html_e( 'In addition, a function called "add_footer_script" may have been modified/added to the functions.php file in your theme. This will have to be manually checked. Updating to a new vemedium
New finding count4
View raw JSON
{
    "slug": "powerpress",
    "previous_version": "11.15.17",
    "current_version": "11.16.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "powerpress.php",
            "line": 6122,
            "snippet": "wp_register_style('powerpress-variables', \"{$base_url}css/variables{$suffix}.css\", [], POWERPRESS_VERSION);",
            "confidence": "medium"
        },
        {
            "pattern": "PluginAUTH",
            "kind": "ioc:code_pattern",
            "file": "powerpress.php",
            "line": 71,
            "snippet": "$affectedusernames = ['PluginAUTH', 'PluginGuest', 'Options'];",
            "confidence": "high"
        },
        {
            "pattern": "add_footer_script",
            "kind": "ioc:code_pattern",
            "file": "powerpress.php",
            "line": 56,
            "snippet": "<?php   if(function_exists('add_footer_script')){",
            "confidence": "medium"
        },
        {
            "pattern": "add_footer_script",
            "kind": "ioc:code_pattern",
            "file": "powerpress.php",
            "line": 57,
            "snippet": "esc_html_e( 'In addition, a function called \"add_footer_script\" may have been modified/added to the functions.php file in your theme. This will have to be manually checked. Updating to a new ve",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 4
}
Slugsurecart
Previous version4.2.0
Current version4.2.1
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinapp/src/WordPress/Assets/ScriptsService.php167wp_register_script( 'surecart-google-recaptcha', 'https://www.google.com/recaptcha/api.js?render=' . \SureCart::settings()->recaptcha()->getSiteKey(), [], \SureCart::plugin()->version(), true );medium
Url
https://www.google.com/recaptcha/api.js?render=
Url host
www.google.com
remote_enqueuebuiltinapp/src/Controllers/Admin/Settings/Settings.php61wp_register_script( 'suretriggers-sdk', 'https://app.ottokit.com/js/v2/embed.js', array(), '1.0.0', false );medium
Url
https://app.ottokit.com/js/v2/embed.js
Url host
app.ottokit.com
New finding count2
View raw JSON
{
    "slug": "surecart",
    "previous_version": "4.2.0",
    "current_version": "4.2.1",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "app/src/WordPress/Assets/ScriptsService.php",
            "line": 167,
            "snippet": "wp_register_script( 'surecart-google-recaptcha', 'https://www.google.com/recaptcha/api.js?render=' . \\SureCart::settings()->recaptcha()->getSiteKey(), [], \\SureCart::plugin()->version(), true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js?render=",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "app/src/Controllers/Admin/Settings/Settings.php",
            "line": 61,
            "snippet": "wp_register_script( 'suretriggers-sdk', 'https://app.ottokit.com/js/v2/embed.js', array(), '1.0.0', false );",
            "confidence": "medium",
            "details": {
                "url": "https://app.ottokit.com/js/v2/embed.js",
                "url_host": "app.ottokit.com"
            }
        }
    ],
    "new_finding_count": 2
}
High code_scan_delta BackWPup – WordPress Backup & Restore Plugin (400k+ installs) Resolved 5mo ago
Slugbackwpup
Previous version5.6.8
Current version5.6.9
New findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltininc/class-page-restore.php32wp_register_script( 'js-url', "{$path_js}/vendor/url.min.js", [ 'jquery' ], BackWPup::get_plugin_data( 'Version' ), true );medium
New finding count1
View raw JSON
{
    "slug": "backwpup",
    "previous_version": "5.6.8",
    "current_version": "5.6.9",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "inc/class-page-restore.php",
            "line": 32,
            "snippet": "wp_register_script( 'js-url', \"{$path_js}/vendor/url.min.js\", [ 'jquery' ], BackWPup::get_plugin_data( 'Version' ), true );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 1
}
High prt_forum_advisory Social Sharing Plugin – Social Warfare (10k+ installs) Malicious 5mo ago
Slugsocial-warfare
Active installs20,000
Is closedno
Thread count1
Earliest thread2024-06-24 10:26:32
Latest thread2024-06-24 10:26:32
Threads
TitleUrlDateStarterPreview
A Security Message from the Plugin Review Teamhttps://wordpress.org/support/topic/a-security-message-from-the-plugin-review-team/2024-06-24 10:26:32alvaro gómezThe WordPress.org Plugin Review Team was notified that a malicious actor had taken over Social Sharing Plugin – Social Warfare. As a result, versions 4.4.6.4 to 4.4.7.1 of the plugin created users with administrative privileges. The Plugin
ExplanationA wp.org Plugin Review Team member started one or more threads on this plugin's support forum. PRT-initiated threads are typically incident advisories ("A Security Message from the Plugin Review Team") posted only after they have confirmed an issue.
View raw JSON
{
    "slug": "social-warfare",
    "active_installs": 20000,
    "is_closed": false,
    "thread_count": 1,
    "earliest_thread": "2024-06-24 10:26:32",
    "latest_thread": "2024-06-24 10:26:32",
    "threads": [
        {
            "title": "A Security Message from the Plugin Review Team",
            "url": "https://wordpress.org/support/topic/a-security-message-from-the-plugin-review-team/",
            "date": "2024-06-24 10:26:32",
            "starter": "alvaro g\u00f3mez",
            "preview": "The WordPress.org Plugin Review Team was notified that a malicious actor had taken over Social Sharing Plugin \u2013 Social Warfare. As a result, versions 4.4.6.4 to 4.4.7.1 of the plugin created users with administrative privileges. The Plugin "
        }
    ],
    "explanation": "A wp.org Plugin Review Team member started one or more threads on this plugin's support forum. PRT-initiated threads are typically incident advisories (\"A Security Message from the Plugin Review Team\") posted only after they have confirmed an issue."
}
High recent_prt_intervention AI Agent by SiteGround (1M+ installs) Resolved 5mo ago
Slugsg-ai-studio
Active installs50,000
Is closedno
Prt committersplugin-master
First touch2026-04-01 19:16:11
Last touch2026-04-01 19:16:11
Commit count1
Commits sample
CommitterAtMessage
plugin-master2026-04-01 19:16:11Adding SG AI Studio by SiteGround.
Lookback days30
Explanationwp.org Plugin Review Team committer touched this plugin within the last 30 days. PRT commits are confirmation-grade signal: they only happen when wp.org has already triaged the plugin as an incident.
View raw JSON
{
    "slug": "sg-ai-studio",
    "active_installs": 50000,
    "is_closed": false,
    "prt_committers": [
        "plugin-master"
    ],
    "first_touch": "2026-04-01 19:16:11",
    "last_touch": "2026-04-01 19:16:11",
    "commit_count": 1,
    "commits_sample": [
        {
            "committer": "plugin-master",
            "at": "2026-04-01 19:16:11",
            "message": "Adding SG AI Studio by SiteGround."
        }
    ],
    "lookback_days": 30,
    "explanation": "wp.org Plugin Review Team committer touched this plugin within the last 30 days. PRT commits are confirmation-grade signal: they only happen when wp.org has already triaged the plugin as an incident."
}
High version_compare_trap Widget Logic (100k+ installs) Malicious 5mo ago
Slugwidget-logic
Active traps
Trap versionTrap releasedBlocked byBlocked on
6.022024-08-28 16:44:466.0.32024-09-27 08:54:19
6.072026-01-07 15:33:106.0.92026-01-15 09:43:08
6.082026-01-12 13:03:546.0.92026-01-15 09:43:08
ExplanationPlugin released 6.02 (parses as higher than canonical X.0.N series), then later released 6.0.3 which parses LOWER — users who installed the trap version cannot auto-update to the canonical release.
View raw JSON
{
    "slug": "widget-logic",
    "active_traps": [
        {
            "trap_version": "6.02",
            "trap_released": "2024-08-28 16:44:46",
            "blocked_by": "6.0.3",
            "blocked_on": "2024-09-27 08:54:19"
        },
        {
            "trap_version": "6.07",
            "trap_released": "2026-01-07 15:33:10",
            "blocked_by": "6.0.9",
            "blocked_on": "2026-01-15 09:43:08"
        },
        {
            "trap_version": "6.08",
            "trap_released": "2026-01-12 13:03:54",
            "blocked_by": "6.0.9",
            "blocked_on": "2026-01-15 09:43:08"
        }
    ],
    "explanation": "Plugin released 6.02 (parses as higher than canonical X.0.N series), then later released 6.0.3 which parses LOWER \u2014 users who installed the trap version cannot auto-update to the canonical release."
}
High committer_younger_than_plugin Wordfence Security – Firewall, Malware Scan, and Login Security (5M+ installs) Resolved 5mo ago
Slugwordfence
Committer slugwfmatt
Committer display namewfmatt
Committer employer—
Committer member since2014-12-21
Committer first commit2014-12-22 03:10:09
Committer commit count28
Plugin listed authormmaunder
Earliest plugin commit2011-09-04 10:09:14
Plugin age at join days1,204
Committer age at join days1
Active installs5,000,000
View raw JSON
{
    "slug": "wordfence",
    "committer_slug": "wfmatt",
    "committer_display_name": "wfmatt",
    "committer_employer": null,
    "committer_member_since": "2014-12-21",
    "committer_first_commit": "2014-12-22 03:10:09",
    "committer_commit_count": 28,
    "plugin_listed_author": "mmaunder",
    "earliest_plugin_commit": "2011-09-04 10:09:14",
    "plugin_age_at_join_days": 1204,
    "committer_age_at_join_days": 1,
    "active_installs": 5000000
}
High committer_younger_than_plugin WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager (3M+ installs) Resolved 5mo ago
Sluginsert-headers-and-footers
Committer slugdeb255
Committer display nameDave
Committer employer—
Committer member since2017-02-28
Committer first commit2017-03-08 05:20:37
Committer commit count18
Plugin listed authorsmub
Earliest plugin commit2012-07-11 20:38:49
Plugin age at join days1,700
Committer age at join days8
Active installs3,000,000
View raw JSON
{
    "slug": "insert-headers-and-footers",
    "committer_slug": "deb255",
    "committer_display_name": "Dave",
    "committer_employer": null,
    "committer_member_since": "2017-02-28",
    "committer_first_commit": "2017-03-08 05:20:37",
    "committer_commit_count": 18,
    "plugin_listed_author": "smub",
    "earliest_plugin_commit": "2012-07-11 20:38:49",
    "plugin_age_at_join_days": 1700,
    "committer_age_at_join_days": 8,
    "active_installs": 3000000
}
High committer_younger_than_plugin MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) (2M+ installs) Resolved 5mo ago
Sluggoogle-analytics-for-wordpress
Committer slugmicheleam
Committer display namemicheleam
Committer employer—
Committer member since2023-04-11
Committer first commit2023-04-11 16:43:10
Committer commit count24
Plugin listed authorchriscct7
Earliest plugin commit2009-10-27 09:08:42
Plugin age at join days4,914
Committer age at join days0
Active installs2,000,000
View raw JSON
{
    "slug": "google-analytics-for-wordpress",
    "committer_slug": "micheleam",
    "committer_display_name": "micheleam",
    "committer_employer": null,
    "committer_member_since": "2023-04-11",
    "committer_first_commit": "2023-04-11 16:43:10",
    "committer_commit_count": 24,
    "plugin_listed_author": "chriscct7",
    "earliest_plugin_commit": "2009-10-27 09:08:42",
    "plugin_age_at_join_days": 4914,
    "committer_age_at_join_days": 0,
    "active_installs": 2000000
}
High committer_younger_than_plugin MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) (2M+ installs) Resolved 5mo ago
Sluggoogle-analytics-for-wordpress
Committer slugomarreiss
Committer display nameOmar Reiss
Committer employer—
Committer member since2014-10-16
Committer first commit2014-12-10 09:50:35
Committer commit count13
Plugin listed authorchriscct7
Earliest plugin commit2009-10-27 09:08:42
Plugin age at join days1,870
Committer age at join days55
Active installs2,000,000
View raw JSON
{
    "slug": "google-analytics-for-wordpress",
    "committer_slug": "omarreiss",
    "committer_display_name": "Omar Reiss",
    "committer_employer": null,
    "committer_member_since": "2014-10-16",
    "committer_first_commit": "2014-12-10 09:50:35",
    "committer_commit_count": 13,
    "plugin_listed_author": "chriscct7",
    "earliest_plugin_commit": "2009-10-27 09:08:42",
    "plugin_age_at_join_days": 1870,
    "committer_age_at_join_days": 55,
    "active_installs": 2000000
}
High committer_younger_than_plugin CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) (1M+ installs) Resolved 5mo ago
Slugcookie-law-info
Committer slugmarkwt
Committer display namemarkwt
Committer employer—
Committer member since2018-04-27
Committer first commit2018-05-17 10:15:49
Committer commit count25
Plugin listed authorcookieyesdev
Earliest plugin commit2012-05-18 23:23:08
Plugin age at join days2,189
Committer age at join days20
Active installs1,000,000
View raw JSON
{
    "slug": "cookie-law-info",
    "committer_slug": "markwt",
    "committer_display_name": "markwt",
    "committer_employer": null,
    "committer_member_since": "2018-04-27",
    "committer_first_commit": "2018-05-17 10:15:49",
    "committer_commit_count": 25,
    "plugin_listed_author": "cookieyesdev",
    "earliest_plugin_commit": "2012-05-18 23:23:08",
    "plugin_age_at_join_days": 2189,
    "committer_age_at_join_days": 20,
    "active_installs": 1000000
}
High committer_younger_than_plugin Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation (1M+ installs) Resolved 5mo ago
Slugoptinmonster
Committer slugmattawesomemotive
Committer display namemattawesomemotive
Committer employer—
Committer member since2023-04-17
Committer first commit2023-07-26 20:06:51
Committer commit count44
Plugin listed authorsmub
Earliest plugin commit2015-04-23 14:13:00
Plugin age at join days3,016
Committer age at join days100
Active installs1,000,000
View raw JSON
{
    "slug": "optinmonster",
    "committer_slug": "mattawesomemotive",
    "committer_display_name": "mattawesomemotive",
    "committer_employer": null,
    "committer_member_since": "2023-04-17",
    "committer_first_commit": "2023-07-26 20:06:51",
    "committer_commit_count": 44,
    "plugin_listed_author": "smub",
    "earliest_plugin_commit": "2015-04-23 14:13:00",
    "plugin_age_at_join_days": 3016,
    "committer_age_at_join_days": 100,
    "active_installs": 1000000
}
High committer_younger_than_plugin Regenerate Thumbnails (1M+ installs) Resolved 5mo ago
Slugregenerate-thumbnails
Committer sluggikaragia
Committer display nameGiannis
Committer employer—
Committer member since2019-10-18
Committer first commit2020-02-13 08:44:23
Committer commit count4
Plugin listed authorviper007bond
Earliest plugin commit2008-08-27 19:09:20
Plugin age at join days4,186
Committer age at join days118
Active installs1,000,000
View raw JSON
{
    "slug": "regenerate-thumbnails",
    "committer_slug": "gikaragia",
    "committer_display_name": "Giannis",
    "committer_employer": null,
    "committer_member_since": "2019-10-18",
    "committer_first_commit": "2020-02-13 08:44:23",
    "committer_commit_count": 4,
    "plugin_listed_author": "viper007bond",
    "earliest_plugin_commit": "2008-08-27 19:09:20",
    "plugin_age_at_join_days": 4186,
    "committer_age_at_join_days": 118,
    "active_installs": 1000000
}
High committer_younger_than_plugin Google for WooCommerce (800k+ installs) Resolved 5mo ago
Sluggoogle-listings-and-ads
Committer slugmppellicer
Committer display namemppellicer
Committer employer—
Committer member since2021-11-30
Committer first commit2021-11-30 15:13:03
Committer commit count26
Plugin listed authorwoocommerce
Earliest plugin commit2021-05-07 21:05:12
Plugin age at join days206
Committer age at join days0
Active installs900,000
View raw JSON
{
    "slug": "google-listings-and-ads",
    "committer_slug": "mppellicer",
    "committer_display_name": "mppellicer",
    "committer_employer": null,
    "committer_member_since": "2021-11-30",
    "committer_first_commit": "2021-11-30 15:13:03",
    "committer_commit_count": 26,
    "plugin_listed_author": "woocommerce",
    "earliest_plugin_commit": "2021-05-07 21:05:12",
    "plugin_age_at_join_days": 206,
    "committer_age_at_join_days": 0,
    "active_installs": 900000
}
High committer_younger_than_plugin Google for WooCommerce (800k+ installs) Resolved 5mo ago
Sluggoogle-listings-and-ads
Committer slugseuna8c
Committer display nameSeun
Committer employer—
Committer member since2024-10-22
Committer first commit2025-08-05 07:38:02
Committer commit count1
Plugin listed authorwoocommerce
Earliest plugin commit2021-05-07 21:05:12
Plugin age at join days1,550
Committer age at join days287
Active installs900,000
View raw JSON
{
    "slug": "google-listings-and-ads",
    "committer_slug": "seuna8c",
    "committer_display_name": "Seun",
    "committer_employer": null,
    "committer_member_since": "2024-10-22",
    "committer_first_commit": "2025-08-05 07:38:02",
    "committer_commit_count": 1,
    "plugin_listed_author": "woocommerce",
    "earliest_plugin_commit": "2021-05-07 21:05:12",
    "plugin_age_at_join_days": 1550,
    "committer_age_at_join_days": 287,
    "active_installs": 900000
}
High committer_younger_than_plugin WooCommerce PayPal Payments (800k+ installs) Resolved 5mo ago
Slugwoocommerce-paypal-payments
Committer slugeduardoumpierre
Committer display nameeduardoumpierre
Committer employer—
Committer member since2025-02-03
Committer first commit2025-02-04 11:09:19
Committer commit count7
Plugin listed authorwoocommerce
Earliest plugin commit2020-10-09 19:16:20
Plugin age at join days1,578
Committer age at join days1
Active installs800,000
View raw JSON
{
    "slug": "woocommerce-paypal-payments",
    "committer_slug": "eduardoumpierre",
    "committer_display_name": "eduardoumpierre",
    "committer_employer": null,
    "committer_member_since": "2025-02-03",
    "committer_first_commit": "2025-02-04 11:09:19",
    "committer_commit_count": 7,
    "plugin_listed_author": "woocommerce",
    "earliest_plugin_commit": "2020-10-09 19:16:20",
    "plugin_age_at_join_days": 1578,
    "committer_age_at_join_days": 1,
    "active_installs": 800000
}
High committer_younger_than_plugin Sucuri Security – Auditing, Malware Scanner and Security Hardening (600k+ installs) Resolved 5mo ago
Slugsucuri-scanner
Committer slugakresic
Committer display nameakresic
Committer employer—
Committer member since2014-12-01
Committer first commit2014-12-02 15:28:27
Committer commit count6
Plugin listed authorsucuri
Earliest plugin commit2014-03-27 21:51:40
Plugin age at join days249
Committer age at join days1
Active installs600,000
View raw JSON
{
    "slug": "sucuri-scanner",
    "committer_slug": "akresic",
    "committer_display_name": "akresic",
    "committer_employer": null,
    "committer_member_since": "2014-12-01",
    "committer_first_commit": "2014-12-02 15:28:27",
    "committer_commit_count": 6,
    "plugin_listed_author": "sucuri",
    "earliest_plugin_commit": "2014-03-27 21:51:40",
    "plugin_age_at_join_days": 249,
    "committer_age_at_join_days": 1,
    "active_installs": 600000
}
High committer_younger_than_plugin Sucuri Security – Auditing, Malware Scanner and Security Hardening (600k+ installs) Resolved 5mo ago
Slugsucuri-scanner
Committer slugunifiedexp
Committer display nameunifiedexp
Committer employer—
Committer member since2021-03-04
Committer first commit2021-03-17 15:20:07
Committer commit count40
Plugin listed authorsucuri
Earliest plugin commit2014-03-27 21:51:40
Plugin age at join days2,546
Committer age at join days13
Active installs600,000
View raw JSON
{
    "slug": "sucuri-scanner",
    "committer_slug": "unifiedexp",
    "committer_display_name": "unifiedexp",
    "committer_employer": null,
    "committer_member_since": "2021-03-04",
    "committer_first_commit": "2021-03-17 15:20:07",
    "committer_commit_count": 40,
    "plugin_listed_author": "sucuri",
    "earliest_plugin_commit": "2014-03-27 21:51:40",
    "plugin_age_at_join_days": 2546,
    "committer_age_at_join_days": 13,
    "active_installs": 600000
}
High committer_younger_than_plugin Sucuri Security – Auditing, Malware Scanner and Security Hardening (600k+ installs) Resolved 5mo ago
Slugsucuri-scanner
Committer slugycampo
Committer display nameycampo
Committer employer—
Committer member since2018-05-07
Committer first commit2018-05-22 19:44:42
Committer commit count8
Plugin listed authorsucuri
Earliest plugin commit2014-03-27 21:51:40
Plugin age at join days1,516
Committer age at join days15
Active installs600,000
View raw JSON
{
    "slug": "sucuri-scanner",
    "committer_slug": "ycampo",
    "committer_display_name": "ycampo",
    "committer_employer": null,
    "committer_member_since": "2018-05-07",
    "committer_first_commit": "2018-05-22 19:44:42",
    "committer_commit_count": 8,
    "plugin_listed_author": "sucuri",
    "earliest_plugin_commit": "2014-03-27 21:51:40",
    "plugin_age_at_join_days": 1516,
    "committer_age_at_join_days": 15,
    "active_installs": 600000
}
High committer_younger_than_plugin Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder (600k+ installs) Resolved 5mo ago
Slugninja-forms
Committer slugericwindhamsd
Committer display nameericwindhamsd
Committer employer—
Committer member since2017-12-12
Committer first commit2018-07-31 16:12:04
Committer commit count3
Plugin listed authorkstover
Earliest plugin commit2015-03-03 18:25:22
Plugin age at join days1,245
Committer age at join days231
Active installs600,000
View raw JSON
{
    "slug": "ninja-forms",
    "committer_slug": "ericwindhamsd",
    "committer_display_name": "ericwindhamsd",
    "committer_employer": null,
    "committer_member_since": "2017-12-12",
    "committer_first_commit": "2018-07-31 16:12:04",
    "committer_commit_count": 3,
    "plugin_listed_author": "kstover",
    "earliest_plugin_commit": "2015-03-03 18:25:22",
    "plugin_age_at_join_days": 1245,
    "committer_age_at_join_days": 231,
    "active_installs": 600000
}
High committer_younger_than_plugin WooCommerce Tax (formerly WooCommerce Shipping & Tax) (500k+ installs) Resolved 5mo ago
Slugwoocommerce-services
Committer slugbborman22
Committer display namebborman22
Committer employer—
Committer member since2020-10-23
Committer first commit2020-10-28 14:19:49
Committer commit count10
Plugin listed authorwoocommerce
Earliest plugin commit2017-01-30 17:13:37
Plugin age at join days1,366
Committer age at join days5
Active installs600,000
View raw JSON
{
    "slug": "woocommerce-services",
    "committer_slug": "bborman22",
    "committer_display_name": "bborman22",
    "committer_employer": null,
    "committer_member_since": "2020-10-23",
    "committer_first_commit": "2020-10-28 14:19:49",
    "committer_commit_count": 10,
    "plugin_listed_author": "woocommerce",
    "earliest_plugin_commit": "2017-01-30 17:13:37",
    "plugin_age_at_join_days": 1366,
    "committer_age_at_join_days": 5,
    "active_installs": 600000
}
High committer_younger_than_plugin Kirki – Freeform Page Builder, Website Builder & Customizer (500k+ installs) Suspicious 5mo ago
Slugkirki
Committer slugdeployer
Committer display namedeployer.seravo.com
Committer employer—
Committer member since2015-08-08
Committer first commit2016-03-20 19:52:01
Committer commit count2
Plugin listed authorthemeum
Earliest plugin commit2014-05-27 21:36:58
Plugin age at join days662
Committer age at join days225
Active installs500,000
View raw JSON
{
    "slug": "kirki",
    "committer_slug": "deployer",
    "committer_display_name": "deployer.seravo.com",
    "committer_employer": null,
    "committer_member_since": "2015-08-08",
    "committer_first_commit": "2016-03-20 19:52:01",
    "committer_commit_count": 2,
    "plugin_listed_author": "themeum",
    "earliest_plugin_commit": "2014-05-27 21:36:58",
    "plugin_age_at_join_days": 662,
    "committer_age_at_join_days": 225,
    "active_installs": 500000
}
High committer_younger_than_plugin Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more (500k+ installs) Resolved 5mo ago
Slugeasy-wp-smtp
Committer slugsixfingersam
Committer display nameIgnazio Setti
Committer employer—
Committer member since2024-09-23
Committer first commit2024-09-26 08:21:02
Committer commit count8
Plugin listed authorsmub
Earliest plugin commit2013-04-16 18:52:05
Plugin age at join days4,180
Committer age at join days3
Active installs500,000
View raw JSON
{
    "slug": "easy-wp-smtp",
    "committer_slug": "sixfingersam",
    "committer_display_name": "Ignazio Setti",
    "committer_employer": null,
    "committer_member_since": "2024-09-23",
    "committer_first_commit": "2024-09-26 08:21:02",
    "committer_commit_count": 8,
    "plugin_listed_author": "smub",
    "earliest_plugin_commit": "2013-04-16 18:52:05",
    "plugin_age_at_join_days": 4180,
    "committer_age_at_join_days": 3,
    "active_installs": 500000
}