| Slug | empik-for-woocommerce |
|---|---|
| New contributors | |
| Active installs | 400 |
View raw JSON
{
"slug": "empik-for-woocommerce",
"new_contributors": [
"empik"
],
"active_installs": 400
}| Slug | empik-for-woocommerce |
|---|---|
| New contributors | |
| Active installs | 400 |
{
"slug": "empik-for-woocommerce",
"new_contributors": [
"empik"
],
"active_installs": 400
}| Slug | wp-postviews-plus |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-06-29 00:00:00 |
| Active installs | 400 |
{
"slug": "wp-postviews-plus",
"closed_reason": "author-request",
"closed_date": "2026-06-29 00:00:00",
"active_installs": 400
}| Slug | opal-woo-custom-product-variation |
|---|---|
| Pattern | puc_update_hijack |
| Kind | builtin |
| Version | 1.3.5 |
| Hit count | 1 |
| First hit |
|
| Explanation | plugin calls `::buildUpdateChecker()` — the factory entry point of the Yahnis Elsts Plugin Update Checker library. A plugin distributed through wordpress.org that registers its own update source is bypassing the Plugin Review Team: every install polls the non-wp.org URL on cron and installs whatever JSON + zip it returns, with full plugin-author permissions. This is the mechanism behind the `anadnet`/quick-pagepost-redirect-plugin compromise (2021) where the author seeded 70,000+ installs through tagged releases and then removed the library from trunk to hide the persistence. Any URL argument pointing away from `downloads.wordpress.org`/`api.wordpress.org` is the hijack signal. |
| Shape | vendor_updater |
| Url | http://source.wpopal.com/plugins/opal/opal-woo-custom-product-variation.json |
| Url host | source.wpopal.com |
| Slug arg | opal-woo-custom-product-variation |
{
"slug": "opal-woo-custom-product-variation",
"pattern": "puc_update_hijack",
"kind": "builtin",
"version": "1.3.5",
"hit_count": 1,
"first_hit": {
"file": "opal-woo-custom-product-variation.php",
"line": 65,
"snippet": "Puc_v4_Factory::buildUpdateChecker("
},
"explanation": "plugin calls `::buildUpdateChecker()` \u2014 the factory entry point of the Yahnis Elsts Plugin Update Checker library. A plugin distributed through wordpress.org that registers its own update source is bypassing the Plugin Review Team: every install polls the non-wp.org URL on cron and installs whatever JSON + zip it returns, with full plugin-author permissions. This is the mechanism behind the `anadnet`/quick-pagepost-redirect-plugin compromise (2021) where the author seeded 70,000+ installs through tagged releases and then removed the library from trunk to hide the persistence. Any URL argument pointing away from `downloads.wordpress.org`/`api.wordpress.org` is the hijack signal.",
"shape": "vendor_updater",
"url": "http://source.wpopal.com/plugins/opal/opal-woo-custom-product-variation.json",
"url_host": "source.wpopal.com",
"slug_arg": "opal-woo-custom-product-variation"
}| Slug | yydevelopment-accessibility |
|---|---|
| New contributors | |
| Active installs | 900 |
{
"slug": "yydevelopment-accessibility",
"new_contributors": [
"yochay22"
],
"active_installs": 900
}| Slug | phone-button |
|---|---|
| New contributors | |
| Active installs | 700 |
{
"slug": "phone-button",
"new_contributors": [
"yochay22"
],
"active_installs": 700
}| Slug | photo-swipe |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-06-29 00:00:00 |
| Active installs | 1,000 |
{
"slug": "photo-swipe",
"closed_reason": "temporary",
"closed_date": "2026-06-29 00:00:00",
"active_installs": 1000
}| Slug | fast-chat-button |
|---|---|
| New contributors | |
| Active installs | 1,000 |
{
"slug": "fast-chat-button",
"new_contributors": [
"yochay22"
],
"active_installs": 1000
}| Slug | show-all-pages-url |
|---|---|
| New contributors | |
| Active installs | 1,000 |
{
"slug": "show-all-pages-url",
"new_contributors": [
"yochay22"
],
"active_installs": 1000
}| Slug | mobile-contact-line |
|---|---|
| New contributors | |
| Active installs | 1,000 |
{
"slug": "mobile-contact-line",
"new_contributors": [
"yochay22"
],
"active_installs": 1000
}| Slug | advanced-301-and-302-redirect |
|---|---|
| New contributors | |
| Active installs | 1,000 |
{
"slug": "advanced-301-and-302-redirect",
"new_contributors": [
"yochay22"
],
"active_installs": 1000
}| Slug | easy-form-builder |
|---|---|
| New contributors | |
| Active installs | 1,000 |
{
"slug": "easy-form-builder",
"new_contributors": [
"6arshid"
],
"active_installs": 1000
}| Slug | page-post-notes |
|---|---|
| New contributors | |
| Active installs | 1,000 |
{
"slug": "page-post-notes",
"new_contributors": [
"yochay22"
],
"active_installs": 1000
}| Slug | upload-svg |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-06-28 00:00:00 |
| Active installs | 1,000 |
{
"slug": "upload-svg",
"closed_reason": "temporary",
"closed_date": "2026-06-28 00:00:00",
"active_installs": 1000
}| Slug | eventer |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-06-29 00:00:00 |
| Active installs | 1,000 |
{
"slug": "eventer",
"closed_reason": "temporary",
"closed_date": "2026-06-29 00:00:00",
"active_installs": 1000
}| Slug | cdekdelivery |
|---|---|
| New contributors | |
| Active installs | 2,000 |
{
"slug": "cdekdelivery",
"new_contributors": [
"au777"
],
"active_installs": 2000
}| Slug | back-to-the-top-button |
|---|---|
| New contributors | |
| Active installs | 4,000 |
{
"slug": "back-to-the-top-button",
"new_contributors": [
"yochay22"
],
"active_installs": 4000
}| Slug | payu-india |
|---|---|
| Closed reason | temporary |
| Closed date | 2026-06-29 00:00:00 |
| Active installs | 7,000 |
{
"slug": "payu-india",
"closed_reason": "temporary",
"closed_date": "2026-06-29 00:00:00",
"active_installs": 7000
}| Slug | core-diet |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-06-18 00:00:00 |
| Active installs | 20 |
{
"slug": "core-diet",
"closed_reason": "author-request",
"closed_date": "2026-06-18 00:00:00",
"active_installs": 20
}| Slug | meetpure-events |
|---|---|
| New contributors | |
| Active installs | 0 |
{
"slug": "meetpure-events",
"new_contributors": [
"meetpure"
],
"active_installs": 0
}| Slug | native-seo-meta-tags |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-06-17 00:00:00 |
| Active installs | 10 |
{
"slug": "native-seo-meta-tags",
"closed_reason": "author-request",
"closed_date": "2026-06-17 00:00:00",
"active_installs": 10
}| Slug | techvoot-app-firebase |
|---|---|
| Closed reason | — |
| Closed date | 2026-06-23 00:00:00 |
| Active installs | 20 |
{
"slug": "techvoot-app-firebase",
"closed_reason": "",
"closed_date": "2026-06-23 00:00:00",
"active_installs": 20
}| Slug | rentmy-online-rental-shop |
|---|---|
| Closed reason | — |
| Closed date | 2026-06-21 00:00:00 |
| Active installs | 20 |
{
"slug": "rentmy-online-rental-shop",
"closed_reason": "",
"closed_date": "2026-06-21 00:00:00",
"active_installs": 20
}| Slug | polanger-videohub-lite |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "polanger-videohub-lite",
"new_contributors": [
"polanger"
],
"active_installs": 10
}| Slug | noindexer |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-06-17 00:00:00 |
| Active installs | 80 |
{
"slug": "noindexer",
"closed_reason": "author-request",
"closed_date": "2026-06-17 00:00:00",
"active_installs": 80
}| Slug | nutrition-info-woocommerce |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "nutrition-info-woocommerce",
"new_contributors": [
"alexcm13",
"matiasquero"
],
"active_installs": 10
}| Slug | jeowp |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "jeowp",
"new_contributors": [
"infoamazonia"
],
"active_installs": 10
}| Slug | discourage-search-engines-by-url |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-06-25 00:00:00 |
| Active installs | 80 |
{
"slug": "discourage-search-engines-by-url",
"closed_reason": "author-request",
"closed_date": "2026-06-25 00:00:00",
"active_installs": 80
}| Slug | canadian-gst-calculator |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "canadian-gst-calculator",
"new_contributors": [
"calculatorsworld"
],
"active_installs": 10
}| Slug | cc-ontario-tax-calculator |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "cc-ontario-tax-calculator",
"new_contributors": [
"calculatorsworld"
],
"active_installs": 10
}| Slug | advanced-testimonial |
|---|---|
| New contributors | |
| Active installs | 0 |
{
"slug": "advanced-testimonial",
"new_contributors": [
"devmonowar"
],
"active_installs": 0
}| Slug | general-slider |
|---|---|
| New contributors | |
| Active installs | 0 |
{
"slug": "general-slider",
"new_contributors": [
"devmonowar"
],
"active_installs": 0
}| Slug | structure-viewer |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "structure-viewer",
"new_contributors": [
"engrmzh"
],
"active_installs": 10
}| Slug | atom-featured-image |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "atom-featured-image",
"new_contributors": [
"henningstummer"
],
"active_installs": 10
}| Slug | io-engagement-analytics |
|---|---|
| Closed reason | — |
| Closed date | 2026-06-25 00:00:00 |
| Active installs | 20 |
{
"slug": "io-engagement-analytics",
"closed_reason": "",
"closed_date": "2026-06-25 00:00:00",
"active_installs": 20
}| Slug | image-sizes-on-demand |
|---|---|
| Closed reason | — |
| Closed date | 2026-06-18 00:00:00 |
| Active installs | 20 |
{
"slug": "image-sizes-on-demand",
"closed_reason": "",
"closed_date": "2026-06-18 00:00:00",
"active_installs": 20
}| Slug | avalon23-products-filter-for-woocommerce |
|---|---|
| Closed reason | — |
| Closed date | 2026-06-18 00:00:00 |
| Active installs | 20 |
{
"slug": "avalon23-products-filter-for-woocommerce",
"closed_reason": "",
"closed_date": "2026-06-18 00:00:00",
"active_installs": 20
}| Slug | pointalize-faq-markup |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-06-23 00:00:00 |
| Active installs | 20 |
{
"slug": "pointalize-faq-markup",
"closed_reason": "author-request",
"closed_date": "2026-06-23 00:00:00",
"active_installs": 20
}| Slug | top-bar-notification-sticky-banners |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-06-19 00:00:00 |
| Active installs | 20 |
{
"slug": "top-bar-notification-sticky-banners",
"closed_reason": "author-request",
"closed_date": "2026-06-19 00:00:00",
"active_installs": 20
}| Slug | motordesk |
|---|---|
| Closed reason | — |
| Closed date | 2026-06-18 00:00:00 |
| Active installs | 20 |
{
"slug": "motordesk",
"closed_reason": "",
"closed_date": "2026-06-18 00:00:00",
"active_installs": 20
}| Slug | advanced-contact-form-7-compact-db |
|---|---|
| Closed reason | — |
| Closed date | 2026-06-18 00:00:00 |
| Active installs | 30 |
{
"slug": "advanced-contact-form-7-compact-db",
"closed_reason": "",
"closed_date": "2026-06-18 00:00:00",
"active_installs": 30
}| Slug | basic-optimization |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "basic-optimization",
"new_contributors": [
"microsolutions"
],
"active_installs": 10
}| Slug | wuunder-for-woocommerce |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-06-17 00:00:00 |
| Active installs | 20 |
{
"slug": "wuunder-for-woocommerce",
"closed_reason": "author-request",
"closed_date": "2026-06-17 00:00:00",
"active_installs": 20
}| Slug | sumtics |
|---|---|
| New contributors | |
| Active installs | 60 |
{
"slug": "sumtics",
"new_contributors": [
"apselo"
],
"active_installs": 60
}| Slug | newscred-publishing |
|---|---|
| Closed reason | — |
| Closed date | 2026-06-21 00:00:00 |
| Active installs | 30 |
{
"slug": "newscred-publishing",
"closed_reason": "",
"closed_date": "2026-06-21 00:00:00",
"active_installs": 30
}| Slug | newscred-publishing |
|---|---|
| New contributors | |
| Active installs | 30 |
{
"slug": "newscred-publishing",
"new_contributors": [
"newscred"
],
"active_installs": 30
}| Slug | interactive-real-estate |
|---|---|
| New contributors | |
| Active installs | 50 |
{
"slug": "interactive-real-estate",
"new_contributors": [
"freemius"
],
"active_installs": 50
}| Slug | draply |
|---|---|
| New contributors | |
| Active installs | 30 |
{
"slug": "draply",
"new_contributors": [
"sma163"
],
"active_installs": 30
}| Slug | chatolia |
|---|---|
| Closed reason | author-request |
| Closed date | 2026-06-16 00:00:00 |
| Active installs | 30 |
{
"slug": "chatolia",
"closed_reason": "author-request",
"closed_date": "2026-06-16 00:00:00",
"active_installs": 30
}| Slug | premium-addons-for-kingcomposer |
|---|---|
| Closed reason | — |
| Closed date | 2026-06-25 00:00:00 |
| Active installs | 60 |
{
"slug": "premium-addons-for-kingcomposer",
"closed_reason": "",
"closed_date": "2026-06-25 00:00:00",
"active_installs": 60
}| Slug | kargo-takip |
|---|---|
| Closed reason | — |
| Closed date | 2026-06-18 00:00:00 |
| Active installs | 50 |
{
"slug": "kargo-takip",
"closed_reason": "",
"closed_date": "2026-06-18 00:00:00",
"active_installs": 50
}