| Slug | recaptcha-protected-downloads |
|---|---|
| New contributors | |
| Active installs | 10 |
View raw JSON
{
"slug": "recaptcha-protected-downloads",
"new_contributors": [
"devrix"
],
"active_installs": 10
}| Slug | recaptcha-protected-downloads |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "recaptcha-protected-downloads",
"new_contributors": [
"devrix"
],
"active_installs": 10
}| Slug | bbp-contacts |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "bbp-contacts",
"new_contributors": [
"devrix"
],
"active_installs": 10
}| Slug | bbp-mentions-email-notifications |
|---|---|
| New contributors | |
| Active installs | 50 |
{
"slug": "bbp-mentions-email-notifications",
"new_contributors": [
"devrix"
],
"active_installs": 50
}| Slug | blockish |
|---|---|
| New contributors | |
| Active installs | 0 |
{
"slug": "blockish",
"new_contributors": [
"mizan42047"
],
"active_installs": 0
}| Slug | monetize-me |
|---|---|
| New contributors | |
| Active installs | 0 |
{
"slug": "monetize-me",
"new_contributors": [
"microsolutions"
],
"active_installs": 0
}| Slug | siara-shield |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "siara-shield",
"new_contributors": [
"cybersiara"
],
"active_installs": 10
}| Slug | bbp-messages |
|---|---|
| New contributors | |
| Active installs | 100 |
{
"slug": "bbp-messages",
"new_contributors": [
"devrix"
],
"active_installs": 100
}| Slug | utm-manager |
|---|---|
| New contributors | |
| Active installs | 100 |
{
"slug": "utm-manager",
"new_contributors": [
"beautifulplugins"
],
"active_installs": 100
}| Slug | greet-bubble |
|---|---|
| New contributors | |
| Active installs | 200 |
{
"slug": "greet-bubble",
"new_contributors": [
"faysal61",
"shshakib2001",
"tamimaziz"
],
"active_installs": 200
}| Slug | cf7-smtp |
|---|---|
| New contributors | |
| Active installs | 1,000 |
{
"slug": "cf7-smtp",
"new_contributors": [
"memoryshadow"
],
"active_installs": 1000
}| Slug | gsheetconnector-for-core-lite |
|---|---|
| New contributors | |
| Active installs | 0 |
{
"slug": "gsheetconnector-for-core-lite",
"new_contributors": [
"abdullah17",
"gsheetconnector"
],
"active_installs": 0
}| Slug | gofactox-e-invoicing-for-woocommerce |
|---|---|
| New contributors | |
| Active installs | 0 |
{
"slug": "gofactox-e-invoicing-for-woocommerce",
"new_contributors": [
"freemius"
],
"active_installs": 0
}| Slug | sugar-calendar-bookings-scheduling-appointments-lite |
|---|---|
| New contributors | |
| Active installs | 20 |
{
"slug": "sugar-calendar-bookings-scheduling-appointments-lite",
"new_contributors": [
"smub"
],
"active_installs": 20
}| Slug | wp-travel-mapquest |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "wp-travel-mapquest",
"new_contributors": [
"chhetriuttkrista",
"wen-solutions"
],
"active_installs": 10
}| Slug | archive-master |
|---|---|
| New contributors | |
| Active installs | 100 |
{
"slug": "archive-master",
"new_contributors": [
"shahreyar46"
],
"active_installs": 100
}| Slug | vk-blocks |
|---|---|
| Pattern | puc_update_hijack |
| Kind | builtin |
| Version | 1.118.2 |
| Hit count | 1 |
| First hit |
|
| Explanation | plugin calls `::buildUpdateChecker()` — the factory entry point of the Yahnis Elsts Plugin Update Checker library. A plugin distributed through wordpress.org that registers its own update source is bypassing the Plugin Review Team: every install polls the non-wp.org URL on cron and installs whatever JSON + zip it returns, with full plugin-author permissions. This is the mechanism behind the `anadnet`/quick-pagepost-redirect-plugin compromise (2021) where the author seeded 70,000+ installs through tagged releases and then removed the library from trunk to hide the persistence. Any URL argument pointing away from `downloads.wordpress.org`/`api.wordpress.org` is the hijack signal. |
| Shape | premium_sibling |
| Url | https://license.vektor-inc.co.jp/check/?action=get_metadata&slug=vk-blocks-pro |
| Url host | license.vektor-inc.co.jp |
| Slug arg | vk-blocks-pro |
{
"slug": "vk-blocks",
"pattern": "puc_update_hijack",
"kind": "builtin",
"version": "1.118.2",
"hit_count": 1,
"first_hit": {
"file": "vk-blocks.php",
"line": 202,
"snippet": "$vk_blocks_update_checker = YahnisElsts\\PluginUpdateChecker\\v5\\PucFactory::buildUpdateChecker("
},
"explanation": "plugin calls `::buildUpdateChecker()` \u2014 the factory entry point of the Yahnis Elsts Plugin Update Checker library. A plugin distributed through wordpress.org that registers its own update source is bypassing the Plugin Review Team: every install polls the non-wp.org URL on cron and installs whatever JSON + zip it returns, with full plugin-author permissions. This is the mechanism behind the `anadnet`/quick-pagepost-redirect-plugin compromise (2021) where the author seeded 70,000+ installs through tagged releases and then removed the library from trunk to hide the persistence. Any URL argument pointing away from `downloads.wordpress.org`/`api.wordpress.org` is the hijack signal.",
"shape": "premium_sibling",
"url": "https://license.vektor-inc.co.jp/check/?action=get_metadata&slug=vk-blocks-pro",
"url_host": "license.vektor-inc.co.jp",
"slug_arg": "vk-blocks-pro"
}| Slug | gsheetconnector-for-core-lite |
|---|---|
| New contributors | |
| Active installs | 0 |
{
"slug": "gsheetconnector-for-core-lite",
"new_contributors": [
"abdullah17",
"gsheetconnector"
],
"active_installs": 0
}| Slug | gofactox-e-invoicing-for-woocommerce |
|---|---|
| New contributors | |
| Active installs | 0 |
{
"slug": "gofactox-e-invoicing-for-woocommerce",
"new_contributors": [
"freemius"
],
"active_installs": 0
}| Slug | wp-author-profile-box-lite |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "wp-author-profile-box-lite",
"new_contributors": [
"chhetriuttkrista"
],
"active_installs": 10
}| Slug | sugar-calendar-bookings-scheduling-appointments-lite |
|---|---|
| New contributors | |
| Active installs | 20 |
{
"slug": "sugar-calendar-bookings-scheduling-appointments-lite",
"new_contributors": [
"smub"
],
"active_installs": 20
}| Slug | wp-travel-mapquest |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "wp-travel-mapquest",
"new_contributors": [
"wen-solutions",
"chhetriuttkrista"
],
"active_installs": 10
}| Slug | funnelkit-payment-gateway-square-for-woocommerce |
|---|---|
| New contributors | |
| Active installs | 40 |
{
"slug": "funnelkit-payment-gateway-square-for-woocommerce",
"new_contributors": [
"teamwoofunnels"
],
"active_installs": 40
}| Slug | archive-master |
|---|---|
| New contributors | |
| Active installs | 100 |
{
"slug": "archive-master",
"new_contributors": [
"shahreyar46"
],
"active_installs": 100
}| Slug | boltaudit |
|---|---|
| New contributors | |
| Active installs | 100 |
{
"slug": "boltaudit",
"new_contributors": [
"halalbrains"
],
"active_installs": 100
}| Slug | archives-by-category-and-date |
|---|---|
| New contributors | |
| Active installs | 90 |
{
"slug": "archives-by-category-and-date",
"new_contributors": [
"chhetriuttkrista"
],
"active_installs": 90
}| Slug | funnelkit-payment-gateway-paypal-for-woocommerce |
|---|---|
| New contributors | |
| Active installs | 70 |
{
"slug": "funnelkit-payment-gateway-paypal-for-woocommerce",
"new_contributors": [
"supportfunnelkit"
],
"active_installs": 70
}| Slug | wp-inventory-manager |
|---|---|
| New contributors | |
| Active installs | 1,000 |
{
"slug": "wp-inventory-manager",
"new_contributors": [
"liezlcayanan"
],
"active_installs": 1000
}| Slug | send-users-email |
|---|---|
| New contributors | |
| Active installs | 5,000 |
{
"slug": "send-users-email",
"new_contributors": [
"freemius"
],
"active_installs": 5000
}| Slug | sky-elementor-addons |
|---|---|
| New contributors | |
| Active installs | 2,000 |
{
"slug": "sky-elementor-addons",
"new_contributors": [
"mizan42047"
],
"active_installs": 2000
}| Slug | gsheetconnector-for-core-lite |
|---|---|
| New contributors | |
| Active installs | 0 |
{
"slug": "gsheetconnector-for-core-lite",
"new_contributors": [
"abdullah17",
"gsheetconnector"
],
"active_installs": 0
}| Slug | gofactox-e-invoicing-for-woocommerce |
|---|---|
| New contributors | |
| Active installs | 0 |
{
"slug": "gofactox-e-invoicing-for-woocommerce",
"new_contributors": [
"freemius"
],
"active_installs": 0
}| Slug | wp-author-profile-box-lite |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "wp-author-profile-box-lite",
"new_contributors": [
"chhetriuttkrista"
],
"active_installs": 10
}| Slug | sugar-calendar-bookings-scheduling-appointments-lite |
|---|---|
| New contributors | |
| Active installs | 20 |
{
"slug": "sugar-calendar-bookings-scheduling-appointments-lite",
"new_contributors": [
"smub"
],
"active_installs": 20
}| Slug | wp-travel-mapquest |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "wp-travel-mapquest",
"new_contributors": [
"wen-solutions",
"chhetriuttkrista"
],
"active_installs": 10
}| Slug | funnelkit-payment-gateway-square-for-woocommerce |
|---|---|
| New contributors | |
| Active installs | 40 |
{
"slug": "funnelkit-payment-gateway-square-for-woocommerce",
"new_contributors": [
"teamwoofunnels"
],
"active_installs": 40
}| Slug | archive-master |
|---|---|
| New contributors | |
| Active installs | 100 |
{
"slug": "archive-master",
"new_contributors": [
"shahreyar46"
],
"active_installs": 100
}| Slug | boltaudit |
|---|---|
| New contributors | |
| Active installs | 100 |
{
"slug": "boltaudit",
"new_contributors": [
"halalbrains"
],
"active_installs": 100
}| Slug | archives-by-category-and-date |
|---|---|
| New contributors | |
| Active installs | 90 |
{
"slug": "archives-by-category-and-date",
"new_contributors": [
"chhetriuttkrista"
],
"active_installs": 90
}| Slug | funnelkit-payment-gateway-paypal-for-woocommerce |
|---|---|
| New contributors | |
| Active installs | 70 |
{
"slug": "funnelkit-payment-gateway-paypal-for-woocommerce",
"new_contributors": [
"supportfunnelkit"
],
"active_installs": 70
}| Slug | wp-inventory-manager |
|---|---|
| New contributors | |
| Active installs | 1,000 |
{
"slug": "wp-inventory-manager",
"new_contributors": [
"liezlcayanan"
],
"active_installs": 1000
}| Slug | send-users-email |
|---|---|
| New contributors | |
| Active installs | 5,000 |
{
"slug": "send-users-email",
"new_contributors": [
"freemius"
],
"active_installs": 5000
}| Slug | sky-elementor-addons |
|---|---|
| New contributors | |
| Active installs | 2,000 |
{
"slug": "sky-elementor-addons",
"new_contributors": [
"mizan42047"
],
"active_installs": 2000
}| Slug | gsheetconnector-for-core-lite |
|---|---|
| New contributors | |
| Active installs | 0 |
{
"slug": "gsheetconnector-for-core-lite",
"new_contributors": [
"abdullah17",
"gsheetconnector"
],
"active_installs": 0
}| Slug | gofactox-e-invoicing-for-woocommerce |
|---|---|
| New contributors | |
| Active installs | 0 |
{
"slug": "gofactox-e-invoicing-for-woocommerce",
"new_contributors": [
"freemius"
],
"active_installs": 0
}| Slug | wp-travel-mapquest |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "wp-travel-mapquest",
"new_contributors": [
"wen-solutions",
"chhetriuttkrista"
],
"active_installs": 10
}| Slug | sugar-calendar-bookings-scheduling-appointments-lite |
|---|---|
| New contributors | |
| Active installs | 20 |
{
"slug": "sugar-calendar-bookings-scheduling-appointments-lite",
"new_contributors": [
"smub"
],
"active_installs": 20
}| Slug | wp-author-profile-box-lite |
|---|---|
| New contributors | |
| Active installs | 10 |
{
"slug": "wp-author-profile-box-lite",
"new_contributors": [
"chhetriuttkrista"
],
"active_installs": 10
}| Slug | funnelkit-payment-gateway-square-for-woocommerce |
|---|---|
| New contributors | |
| Active installs | 40 |
{
"slug": "funnelkit-payment-gateway-square-for-woocommerce",
"new_contributors": [
"teamwoofunnels"
],
"active_installs": 40
}| Slug | funnelkit-payment-gateway-paypal-for-woocommerce |
|---|---|
| New contributors | |
| Active installs | 70 |
{
"slug": "funnelkit-payment-gateway-paypal-for-woocommerce",
"new_contributors": [
"supportfunnelkit"
],
"active_installs": 70
}| Slug | archives-by-category-and-date |
|---|---|
| New contributors | |
| Active installs | 90 |
{
"slug": "archives-by-category-and-date",
"new_contributors": [
"chhetriuttkrista"
],
"active_installs": 90
}