Events

1,905 events resolved (filtered). · Last rule pass 19h ago. · 4 open / 4,675 resolved overall.

State: Open Resolved All
Low contributor_added bbPress Contacts (10 installs) Resolved 5mo ago
Slugbbp-contacts
New contributorsdevrix
Active installs10
View raw JSON
{
    "slug": "bbp-contacts",
    "new_contributors": [
        "devrix"
    ],
    "active_installs": 10
}
Low contributor_added Monetize Me (— installs) Resolved 5mo ago
Slugmonetize-me
New contributorsmicrosolutions
Active installs0
View raw JSON
{
    "slug": "monetize-me",
    "new_contributors": [
        "microsolutions"
    ],
    "active_installs": 0
}
Low contributor_added SiaraShield (10 installs) Resolved 5mo ago
Slugsiara-shield
New contributorscybersiara
Active installs10
View raw JSON
{
    "slug": "siara-shield",
    "new_contributors": [
        "cybersiara"
    ],
    "active_installs": 10
}
Low contributor_added bbPress Messages (100 installs) Resolved 5mo ago
Slugbbp-messages
New contributorsdevrix
Active installs100
View raw JSON
{
    "slug": "bbp-messages",
    "new_contributors": [
        "devrix"
    ],
    "active_installs": 100
}
Low contributor_added SMTP for Contact Form 7 (1k+ installs) Resolved 5mo ago
Slugcf7-smtp
New contributorsmemoryshadow
Active installs1,000
View raw JSON
{
    "slug": "cf7-smtp",
    "new_contributors": [
        "memoryshadow"
    ],
    "active_installs": 1000
}
Low contributor_added WP Travel MapQuest (10 installs) Resolved 5mo ago
Slugwp-travel-mapquest
New contributorschhetriuttkrista wen-solutions
Active installs10
View raw JSON
{
    "slug": "wp-travel-mapquest",
    "new_contributors": [
        "chhetriuttkrista",
        "wen-solutions"
    ],
    "active_installs": 10
}
Low code_pattern VK Blocks (100k+ installs) Resolved 5mo ago
Slugvk-blocks
Patternpuc_update_hijack
Kindbuiltin
Version1.118.2
Hit count1
First hit
File
vk-blocks.php
Line
202
Snippet
$vk_blocks_update_checker = YahnisElsts\PluginUpdateChecker\v5\PucFactory::buildUpdateChecker(
Explanationplugin calls `::buildUpdateChecker()` — the factory entry point of the Yahnis Elsts Plugin Update Checker library. A plugin distributed through wordpress.org that registers its own update source is bypassing the Plugin Review Team: every install polls the non-wp.org URL on cron and installs whatever JSON + zip it returns, with full plugin-author permissions. This is the mechanism behind the `anadnet`/quick-pagepost-redirect-plugin compromise (2021) where the author seeded 70,000+ installs through tagged releases and then removed the library from trunk to hide the persistence. Any URL argument pointing away from `downloads.wordpress.org`/`api.wordpress.org` is the hijack signal.
Shapepremium_sibling
Urlhttps://license.vektor-inc.co.jp/check/?action=get_metadata&slug=vk-blocks-pro
Url hostlicense.vektor-inc.co.jp
Slug argvk-blocks-pro
View raw JSON
{
    "slug": "vk-blocks",
    "pattern": "puc_update_hijack",
    "kind": "builtin",
    "version": "1.118.2",
    "hit_count": 1,
    "first_hit": {
        "file": "vk-blocks.php",
        "line": 202,
        "snippet": "$vk_blocks_update_checker = YahnisElsts\\PluginUpdateChecker\\v5\\PucFactory::buildUpdateChecker("
    },
    "explanation": "plugin calls `::buildUpdateChecker()` \u2014 the factory entry point of the Yahnis Elsts Plugin Update Checker library. A plugin distributed through wordpress.org that registers its own update source is bypassing the Plugin Review Team: every install polls the non-wp.org URL on cron and installs whatever JSON + zip it returns, with full plugin-author permissions. This is the mechanism behind the `anadnet`/quick-pagepost-redirect-plugin compromise (2021) where the author seeded 70,000+ installs through tagged releases and then removed the library from trunk to hide the persistence. Any URL argument pointing away from `downloads.wordpress.org`/`api.wordpress.org` is the hijack signal.",
    "shape": "premium_sibling",
    "url": "https://license.vektor-inc.co.jp/check/?action=get_metadata&slug=vk-blocks-pro",
    "url_host": "license.vektor-inc.co.jp",
    "slug_arg": "vk-blocks-pro"
}
Low contributor_added WP Author Profile Box Lite (10 installs) Resolved 5mo ago
Slugwp-author-profile-box-lite
New contributorschhetriuttkrista
Active installs10
View raw JSON
{
    "slug": "wp-author-profile-box-lite",
    "new_contributors": [
        "chhetriuttkrista"
    ],
    "active_installs": 10
}
Low contributor_added WP Travel MapQuest (10 installs) Resolved 5mo ago
Slugwp-travel-mapquest
New contributorswen-solutions chhetriuttkrista
Active installs10
View raw JSON
{
    "slug": "wp-travel-mapquest",
    "new_contributors": [
        "wen-solutions",
        "chhetriuttkrista"
    ],
    "active_installs": 10
}
Low contributor_added Archives by Category and Date (70 installs) Resolved 5mo ago
Slugarchives-by-category-and-date
New contributorschhetriuttkrista
Active installs90
View raw JSON
{
    "slug": "archives-by-category-and-date",
    "new_contributors": [
        "chhetriuttkrista"
    ],
    "active_installs": 90
}
Low contributor_added WP Inventory Manager (1k+ installs) Resolved 5mo ago
Slugwp-inventory-manager
New contributorsliezlcayanan
Active installs1,000
View raw JSON
{
    "slug": "wp-inventory-manager",
    "new_contributors": [
        "liezlcayanan"
    ],
    "active_installs": 1000
}
Low contributor_added Sky Addons for Elementor (2k+ installs) Resolved 5mo ago
Slugsky-elementor-addons
New contributorsmizan42047
Active installs2,000
View raw JSON
{
    "slug": "sky-elementor-addons",
    "new_contributors": [
        "mizan42047"
    ],
    "active_installs": 2000
}
Low contributor_added WP Author Profile Box Lite (10 installs) Resolved 5mo ago
Slugwp-author-profile-box-lite
New contributorschhetriuttkrista
Active installs10
View raw JSON
{
    "slug": "wp-author-profile-box-lite",
    "new_contributors": [
        "chhetriuttkrista"
    ],
    "active_installs": 10
}
Low contributor_added WP Travel MapQuest (10 installs) Resolved 5mo ago
Slugwp-travel-mapquest
New contributorswen-solutions chhetriuttkrista
Active installs10
View raw JSON
{
    "slug": "wp-travel-mapquest",
    "new_contributors": [
        "wen-solutions",
        "chhetriuttkrista"
    ],
    "active_installs": 10
}
Low contributor_added Archives by Category and Date (70 installs) Resolved 5mo ago
Slugarchives-by-category-and-date
New contributorschhetriuttkrista
Active installs90
View raw JSON
{
    "slug": "archives-by-category-and-date",
    "new_contributors": [
        "chhetriuttkrista"
    ],
    "active_installs": 90
}
Low contributor_added WP Inventory Manager (1k+ installs) Resolved 5mo ago
Slugwp-inventory-manager
New contributorsliezlcayanan
Active installs1,000
View raw JSON
{
    "slug": "wp-inventory-manager",
    "new_contributors": [
        "liezlcayanan"
    ],
    "active_installs": 1000
}
Low contributor_added Sky Addons for Elementor (2k+ installs) Resolved 5mo ago
Slugsky-elementor-addons
New contributorsmizan42047
Active installs2,000
View raw JSON
{
    "slug": "sky-elementor-addons",
    "new_contributors": [
        "mizan42047"
    ],
    "active_installs": 2000
}
Low contributor_added WP Travel MapQuest (10 installs) Resolved 5mo ago
Slugwp-travel-mapquest
New contributorswen-solutions chhetriuttkrista
Active installs10
View raw JSON
{
    "slug": "wp-travel-mapquest",
    "new_contributors": [
        "wen-solutions",
        "chhetriuttkrista"
    ],
    "active_installs": 10
}
Low contributor_added WP Author Profile Box Lite (10 installs) Resolved 5mo ago
Slugwp-author-profile-box-lite
New contributorschhetriuttkrista
Active installs10
View raw JSON
{
    "slug": "wp-author-profile-box-lite",
    "new_contributors": [
        "chhetriuttkrista"
    ],
    "active_installs": 10
}
Low contributor_added Archives by Category and Date (70 installs) Resolved 5mo ago
Slugarchives-by-category-and-date
New contributorschhetriuttkrista
Active installs90
View raw JSON
{
    "slug": "archives-by-category-and-date",
    "new_contributors": [
        "chhetriuttkrista"
    ],
    "active_installs": 90
}