Events

1,086 events (filtered). · Last rule pass 5h ago. · 30 open / 4,683 resolved overall.

State: Open Resolved All
High compromised_committer_burst WP Travel – Ultimate Travel Booking System, Tour Management Engine (3k+ installs) Resolved 29d ago
Slugwp-travel
Author slugwptravel
Burst start2026-08-17 06:08:46
Burst end2026-08-17 06:34:35
Burst commits12
Burst window minutes90
Tenure days2,781
Distinct messages3
Avg message length19
Top messageadded updated files
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-08-17 06:08:46",
    "burst_end": "2026-08-17 06:34:35",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2781,
    "distinct_messages": 3,
    "avg_message_length": 18.8,
    "top_message": "added updated files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst MultiParcels Shipping For WooCommerce (4k+ installs) Resolved 29d ago
Slugmultiparcels-shipping-for-woocommerce
Author slugmultiparcels
Burst start2026-08-17 08:00:42
Burst end2026-08-17 08:05:32
Burst commits13
Burst window minutes90
Tenure days2,762
Distinct messages3
Avg message length37
Top message1.30.37 upload new trunk folder files
Top message count11
Prt revert—
ExplanationEstablished author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "multiparcels-shipping-for-woocommerce",
    "author_slug": "multiparcels",
    "burst_start": "2026-08-17 08:00:42",
    "burst_end": "2026-08-17 08:05:32",
    "burst_commits": 13,
    "burst_window_minutes": 90,
    "tenure_days": 2762,
    "distinct_messages": 3,
    "avg_message_length": 37.4,
    "top_message": "1.30.37 upload new trunk folder files",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst ePayco plugin for WooCommerce (3k+ installs) Resolved 29d ago
Slugepayco-gateway
Author slugepayco
Burst start2026-08-20 18:26:29
Burst end2026-08-20 18:58:45
Burst commits22
Burst window minutes90
Tenure days1,533
Distinct messages20
Avg message length18
Top messageremove
Top message count3
Prt revert—
ExplanationEstablished author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "epayco-gateway",
    "author_slug": "epayco",
    "burst_start": "2026-08-20 18:26:29",
    "burst_end": "2026-08-20 18:58:45",
    "burst_commits": 22,
    "burst_window_minutes": 90,
    "tenure_days": 1533,
    "distinct_messages": 20,
    "avg_message_length": 18,
    "top_message": "remove",
    "top_message_count": 3,
    "prt_revert": null,
    "explanation": "Established author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst DPD Baltic Shipping (2k+ installs) Resolved 29d ago
Slugwoo-shipping-dpd-baltic
Author slugdpdbaltics
Burst start2026-08-19 09:32:54
Burst end2026-08-19 09:35:52
Burst commits12
Burst window minutes90
Tenure days2,662
Distinct messages3
Avg message length34
Top message1.2.92 upload trunk folder files2
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "woo-shipping-dpd-baltic",
    "author_slug": "dpdbaltics",
    "burst_start": "2026-08-19 09:32:54",
    "burst_end": "2026-08-19 09:35:52",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2662,
    "distinct_messages": 3,
    "avg_message_length": 34.2,
    "top_message": "1.2.92 upload trunk folder files2",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst bbPress Voting (500 installs) Resolved 29d ago
Slugbbp-voting
Author slugnatekinkead
Burst start2026-08-13 20:54:54
Burst end2026-08-13 21:31:47
Burst commits16
Burst window minutes90
Tenure days2,957
Distinct messages13
Avg message length22
Top messageUpdating assets
Top message count4
Prt revert—
ExplanationEstablished author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "bbp-voting",
    "author_slug": "natekinkead",
    "burst_start": "2026-08-13 20:54:54",
    "burst_end": "2026-08-13 21:31:47",
    "burst_commits": 16,
    "burst_window_minutes": 90,
    "tenure_days": 2957,
    "distinct_messages": 13,
    "avg_message_length": 22.1,
    "top_message": "Updating assets",
    "top_message_count": 4,
    "prt_revert": null,
    "explanation": "Established author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Login via Yandex – вход через Яндекс ID (100 installs) Resolved 29d ago
Sluglogin-via-yandex
Author slugdllpl
Burst start2026-08-19 13:24:07
Burst end2026-08-19 13:56:06
Burst commits18
Burst window minutes90
Tenure days675
Distinct messages3
Avg message length16
Top messageRelease version 2.0.0
Top message count11
Prt revert—
ExplanationEstablished author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "login-via-yandex",
    "author_slug": "dllpl",
    "burst_start": "2026-08-19 13:24:07",
    "burst_end": "2026-08-19 13:56:06",
    "burst_commits": 18,
    "burst_window_minutes": 90,
    "tenure_days": 675,
    "distinct_messages": 3,
    "avg_message_length": 15.7,
    "top_message": "Release version 2.0.0",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Custom Recovery Mode Email (100 installs) Resolved 29d ago
Slugcustom-recovery-mode-email
Author slugjairo.ochoa
Burst start2026-08-12 15:01:03
Burst end2026-08-12 16:15:05
Burst commits20
Burst window minutes90
Tenure days2,420
Distinct messages2
Avg message length13
Top messageRelease 2.0.0
Top message count17
Prt revert—
ExplanationEstablished author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "custom-recovery-mode-email",
    "author_slug": "jairo.ochoa",
    "burst_start": "2026-08-12 15:01:03",
    "burst_end": "2026-08-12 16:15:05",
    "burst_commits": 20,
    "burst_window_minutes": 90,
    "tenure_days": 2420,
    "distinct_messages": 2,
    "avg_message_length": 13,
    "top_message": "Release 2.0.0",
    "top_message_count": 17,
    "prt_revert": null,
    "explanation": "Established author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst No Register & Comments XD (60 installs) Resolved 29d ago
Slugno-register-comments-xd
Author slugmuhammadalikhizar
Burst start2026-08-18 08:19:09
Burst end2026-08-18 08:46:56
Burst commits12
Burst window minutes90
Tenure days515
Distinct messages3
Avg message length11
Top messageNewer Version
Top message count7
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "no-register-comments-xd",
    "author_slug": "muhammadalikhizar",
    "burst_start": "2026-08-18 08:19:09",
    "burst_end": "2026-08-18 08:46:56",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 515,
    "distinct_messages": 3,
    "avg_message_length": 10.7,
    "top_message": "Newer Version",
    "top_message_count": 7,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Speed Analyzer – Speed Test & Performance Audit (100 installs) Resolved 29d ago
Slugspeed-analyzer
Author slugdalibord
Burst start2026-08-31 08:09:43
Burst end2026-08-31 08:15:52
Burst commits26
Burst window minutes90
Tenure days452
Distinct messages4
Avg message length7
Top message1.18.6
Top message count23
Prt revert—
ExplanationEstablished author committed 26 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "speed-analyzer",
    "author_slug": "dalibord",
    "burst_start": "2026-08-31 08:09:43",
    "burst_end": "2026-08-31 08:15:52",
    "burst_commits": 26,
    "burst_window_minutes": 90,
    "tenure_days": 452,
    "distinct_messages": 4,
    "avg_message_length": 6.5,
    "top_message": "1.18.6",
    "top_message_count": 23,
    "prt_revert": null,
    "explanation": "Established author committed 26 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High closed_plugin_resurrection Surbma | MiniCRM Shortcode (10 installs) Resolved 29d ago
Slugsurbma-minicrm-shortcode
Previously closed reasonsecurity-issue
Author slugsurbma
Current version2.0.1
Active installs10
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "surbma-minicrm-shortcode",
    "previously_closed_reason": "security-issue",
    "author_slug": "surbma",
    "current_version": "2.0.1",
    "active_installs": 10,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High compromised_committer_burst WP Travel – Ultimate Travel Booking System, Tour Management Engine (3k+ installs) Resolved 1mo ago
Slugwp-travel
Author slugwptravel
Burst start2026-08-17 06:08:46
Burst end2026-08-17 06:34:35
Burst commits12
Burst window minutes90
Tenure days2,781
Distinct messages3
Avg message length19
Top messageadded updated files
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-08-17 06:08:46",
    "burst_end": "2026-08-17 06:34:35",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2781,
    "distinct_messages": 3,
    "avg_message_length": 18.8,
    "top_message": "added updated files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst MultiParcels Shipping For WooCommerce (4k+ installs) Resolved 1mo ago
Slugmultiparcels-shipping-for-woocommerce
Author slugmultiparcels
Burst start2026-08-17 08:00:42
Burst end2026-08-17 08:05:32
Burst commits13
Burst window minutes90
Tenure days2,762
Distinct messages3
Avg message length37
Top message1.30.37 upload new trunk folder files
Top message count11
Prt revert—
ExplanationEstablished author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "multiparcels-shipping-for-woocommerce",
    "author_slug": "multiparcels",
    "burst_start": "2026-08-17 08:00:42",
    "burst_end": "2026-08-17 08:05:32",
    "burst_commits": 13,
    "burst_window_minutes": 90,
    "tenure_days": 2762,
    "distinct_messages": 3,
    "avg_message_length": 37.4,
    "top_message": "1.30.37 upload new trunk folder files",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst ePayco plugin for WooCommerce (3k+ installs) Resolved 1mo ago
Slugepayco-gateway
Author slugepayco
Burst start2026-08-20 18:26:29
Burst end2026-08-20 18:58:45
Burst commits22
Burst window minutes90
Tenure days1,533
Distinct messages20
Avg message length18
Top messageremove
Top message count3
Prt revert—
ExplanationEstablished author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "epayco-gateway",
    "author_slug": "epayco",
    "burst_start": "2026-08-20 18:26:29",
    "burst_end": "2026-08-20 18:58:45",
    "burst_commits": 22,
    "burst_window_minutes": 90,
    "tenure_days": 1533,
    "distinct_messages": 20,
    "avg_message_length": 18,
    "top_message": "remove",
    "top_message_count": 3,
    "prt_revert": null,
    "explanation": "Established author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst DPD Baltic Shipping (2k+ installs) Resolved 1mo ago
Slugwoo-shipping-dpd-baltic
Author slugdpdbaltics
Burst start2026-08-19 09:32:54
Burst end2026-08-19 09:35:52
Burst commits12
Burst window minutes90
Tenure days2,662
Distinct messages3
Avg message length34
Top message1.2.92 upload trunk folder files2
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "woo-shipping-dpd-baltic",
    "author_slug": "dpdbaltics",
    "burst_start": "2026-08-19 09:32:54",
    "burst_end": "2026-08-19 09:35:52",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2662,
    "distinct_messages": 3,
    "avg_message_length": 34.2,
    "top_message": "1.2.92 upload trunk folder files2",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst bbPress Voting (500 installs) Resolved 1mo ago
Slugbbp-voting
Author slugnatekinkead
Burst start2026-08-13 20:54:54
Burst end2026-08-13 21:31:47
Burst commits16
Burst window minutes90
Tenure days2,957
Distinct messages13
Avg message length22
Top messageUpdating assets
Top message count4
Prt revert—
ExplanationEstablished author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "bbp-voting",
    "author_slug": "natekinkead",
    "burst_start": "2026-08-13 20:54:54",
    "burst_end": "2026-08-13 21:31:47",
    "burst_commits": 16,
    "burst_window_minutes": 90,
    "tenure_days": 2957,
    "distinct_messages": 13,
    "avg_message_length": 22.1,
    "top_message": "Updating assets",
    "top_message_count": 4,
    "prt_revert": null,
    "explanation": "Established author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Login via Yandex – вход через Яндекс ID (100 installs) Resolved 1mo ago
Sluglogin-via-yandex
Author slugdllpl
Burst start2026-08-19 13:24:07
Burst end2026-08-19 13:56:06
Burst commits18
Burst window minutes90
Tenure days675
Distinct messages3
Avg message length16
Top messageRelease version 2.0.0
Top message count11
Prt revert—
ExplanationEstablished author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "login-via-yandex",
    "author_slug": "dllpl",
    "burst_start": "2026-08-19 13:24:07",
    "burst_end": "2026-08-19 13:56:06",
    "burst_commits": 18,
    "burst_window_minutes": 90,
    "tenure_days": 675,
    "distinct_messages": 3,
    "avg_message_length": 15.7,
    "top_message": "Release version 2.0.0",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Custom Recovery Mode Email (100 installs) Resolved 1mo ago
Slugcustom-recovery-mode-email
Author slugjairo.ochoa
Burst start2026-08-12 15:01:03
Burst end2026-08-12 16:15:05
Burst commits20
Burst window minutes90
Tenure days2,420
Distinct messages2
Avg message length13
Top messageRelease 2.0.0
Top message count17
Prt revert—
ExplanationEstablished author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "custom-recovery-mode-email",
    "author_slug": "jairo.ochoa",
    "burst_start": "2026-08-12 15:01:03",
    "burst_end": "2026-08-12 16:15:05",
    "burst_commits": 20,
    "burst_window_minutes": 90,
    "tenure_days": 2420,
    "distinct_messages": 2,
    "avg_message_length": 13,
    "top_message": "Release 2.0.0",
    "top_message_count": 17,
    "prt_revert": null,
    "explanation": "Established author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst No Register & Comments XD (60 installs) Resolved 1mo ago
Slugno-register-comments-xd
Author slugmuhammadalikhizar
Burst start2026-08-18 08:19:09
Burst end2026-08-18 08:46:56
Burst commits12
Burst window minutes90
Tenure days515
Distinct messages3
Avg message length11
Top messageNewer Version
Top message count7
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "no-register-comments-xd",
    "author_slug": "muhammadalikhizar",
    "burst_start": "2026-08-18 08:19:09",
    "burst_end": "2026-08-18 08:46:56",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 515,
    "distinct_messages": 3,
    "avg_message_length": 10.7,
    "top_message": "Newer Version",
    "top_message_count": 7,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}