Events

1,086 events (filtered). · Last rule pass 5h ago. · 30 open / 4,683 resolved overall.

State: Open Resolved All
High code_scan_delta Smart Grid-Layout Design for Contact Form 7 (10k+ installs) Resolved 1mo ago
Slugcf7-grid-layout
Previous version4.18.0
Current version4.18.0
New findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinpublic/class-cf7-grid-layout-public.php2,388wp_register_style( 'jquery-nice-select-css', "{$plugin_dir}assets/jquery-nice-select/css/nice-select{$ff}.css", array(), '1.1.0', 'all' );medium
remote_enqueuebuiltinpublic/class-cf7-grid-layout-public.php2,391wp_register_style( 'select2-style', "{$plugin_dir}assets/select2/css/select2.min.css", array(), '4.0.13', 'all' );medium
remote_enqueuebuiltinpublic/class-cf7-grid-layout-public.php2,410wp_register_script( 'jquery-select2', "{$plugin_dir}assets/select2/js/select2.min.js", array( 'jquery' ), '4.0.13', true );medium
remote_enqueuebuiltinpublic/class-cf7-grid-layout-public.php2,414wp_register_script( 'jquery-nice-select', "{$plugin_dir}assets/jquery-nice-select/js/jquery.nice-select.min.js", array( 'jquery' ), '1.1.0', true );medium
New finding count4
View raw JSON
{
    "slug": "cf7-grid-layout",
    "previous_version": "4.18.0",
    "current_version": "4.18.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "public/class-cf7-grid-layout-public.php",
            "line": 2388,
            "snippet": "wp_register_style( 'jquery-nice-select-css', \"{$plugin_dir}assets/jquery-nice-select/css/nice-select{$ff}.css\", array(), '1.1.0', 'all' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "public/class-cf7-grid-layout-public.php",
            "line": 2391,
            "snippet": "wp_register_style( 'select2-style', \"{$plugin_dir}assets/select2/css/select2.min.css\", array(), '4.0.13', 'all' );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "public/class-cf7-grid-layout-public.php",
            "line": 2410,
            "snippet": "wp_register_script( 'jquery-select2', \"{$plugin_dir}assets/select2/js/select2.min.js\", array( 'jquery' ), '4.0.13', true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "public/class-cf7-grid-layout-public.php",
            "line": 2414,
            "snippet": "wp_register_script( 'jquery-nice-select', \"{$plugin_dir}assets/jquery-nice-select/js/jquery.nice-select.min.js\", array( 'jquery' ), '1.1.0', true );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 4
}
High code_scan_delta Social Login, Social Sharing by miniOrange (10k+ installs) Resolved 1mo ago
Slugminiorange-login-openid
Previous version7.9.0
Current version7.9.0
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinview/doc_tab/mo_openid_doc_tab.php11wp_enqueue_script( 'mo_openid_youtube_iframe_api', 'https://www.youtube.com/player_api', array(), MO_OPENID_SOCIAL_LOGIN_VERSION, true );medium
Url
https://www.youtube.com/player_api
Url host
www.youtube.com
New finding count1
View raw JSON
{
    "slug": "miniorange-login-openid",
    "previous_version": "7.9.0",
    "current_version": "7.9.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "view/doc_tab/mo_openid_doc_tab.php",
            "line": 11,
            "snippet": "wp_enqueue_script( 'mo_openid_youtube_iframe_api', 'https://www.youtube.com/player_api', array(), MO_OPENID_SOCIAL_LOGIN_VERSION, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.youtube.com/player_api",
                "url_host": "www.youtube.com"
            }
        }
    ],
    "new_finding_count": 1
}
High compromised_committer_burst WP Travel – Ultimate Travel Booking System, Tour Management Engine (3k+ installs) Resolved 1mo ago
Slugwp-travel
Author slugwptravel
Burst start2026-08-17 06:08:46
Burst end2026-08-17 06:34:35
Burst commits12
Burst window minutes90
Tenure days2,781
Distinct messages3
Avg message length19
Top messageadded updated files
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-08-17 06:08:46",
    "burst_end": "2026-08-17 06:34:35",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2781,
    "distinct_messages": 3,
    "avg_message_length": 18.8,
    "top_message": "added updated files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst MultiParcels Shipping For WooCommerce (4k+ installs) Resolved 1mo ago
Slugmultiparcels-shipping-for-woocommerce
Author slugmultiparcels
Burst start2026-08-17 08:00:42
Burst end2026-08-17 08:05:32
Burst commits13
Burst window minutes90
Tenure days2,762
Distinct messages3
Avg message length37
Top message1.30.37 upload new trunk folder files
Top message count11
Prt revert—
ExplanationEstablished author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "multiparcels-shipping-for-woocommerce",
    "author_slug": "multiparcels",
    "burst_start": "2026-08-17 08:00:42",
    "burst_end": "2026-08-17 08:05:32",
    "burst_commits": 13,
    "burst_window_minutes": 90,
    "tenure_days": 2762,
    "distinct_messages": 3,
    "avg_message_length": 37.4,
    "top_message": "1.30.37 upload new trunk folder files",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst ePayco plugin for WooCommerce (3k+ installs) Resolved 1mo ago
Slugepayco-gateway
Author slugepayco
Burst start2026-08-20 18:26:29
Burst end2026-08-20 18:58:45
Burst commits22
Burst window minutes90
Tenure days1,533
Distinct messages20
Avg message length18
Top messageremove
Top message count3
Prt revert—
ExplanationEstablished author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "epayco-gateway",
    "author_slug": "epayco",
    "burst_start": "2026-08-20 18:26:29",
    "burst_end": "2026-08-20 18:58:45",
    "burst_commits": 22,
    "burst_window_minutes": 90,
    "tenure_days": 1533,
    "distinct_messages": 20,
    "avg_message_length": 18,
    "top_message": "remove",
    "top_message_count": 3,
    "prt_revert": null,
    "explanation": "Established author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst DPD Baltic Shipping (2k+ installs) Resolved 1mo ago
Slugwoo-shipping-dpd-baltic
Author slugdpdbaltics
Burst start2026-08-19 09:32:54
Burst end2026-08-19 09:35:52
Burst commits12
Burst window minutes90
Tenure days2,662
Distinct messages3
Avg message length34
Top message1.2.92 upload trunk folder files2
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "woo-shipping-dpd-baltic",
    "author_slug": "dpdbaltics",
    "burst_start": "2026-08-19 09:32:54",
    "burst_end": "2026-08-19 09:35:52",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2662,
    "distinct_messages": 3,
    "avg_message_length": 34.2,
    "top_message": "1.2.92 upload trunk folder files2",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst bbPress Voting (500 installs) Resolved 1mo ago
Slugbbp-voting
Author slugnatekinkead
Burst start2026-08-13 20:54:54
Burst end2026-08-13 21:31:47
Burst commits16
Burst window minutes90
Tenure days2,957
Distinct messages13
Avg message length22
Top messageUpdating assets
Top message count4
Prt revert—
ExplanationEstablished author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "bbp-voting",
    "author_slug": "natekinkead",
    "burst_start": "2026-08-13 20:54:54",
    "burst_end": "2026-08-13 21:31:47",
    "burst_commits": 16,
    "burst_window_minutes": 90,
    "tenure_days": 2957,
    "distinct_messages": 13,
    "avg_message_length": 22.1,
    "top_message": "Updating assets",
    "top_message_count": 4,
    "prt_revert": null,
    "explanation": "Established author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Login via Yandex – вход через Яндекс ID (100 installs) Resolved 1mo ago
Sluglogin-via-yandex
Author slugdllpl
Burst start2026-08-19 13:24:07
Burst end2026-08-19 13:56:06
Burst commits18
Burst window minutes90
Tenure days675
Distinct messages3
Avg message length16
Top messageRelease version 2.0.0
Top message count11
Prt revert—
ExplanationEstablished author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "login-via-yandex",
    "author_slug": "dllpl",
    "burst_start": "2026-08-19 13:24:07",
    "burst_end": "2026-08-19 13:56:06",
    "burst_commits": 18,
    "burst_window_minutes": 90,
    "tenure_days": 675,
    "distinct_messages": 3,
    "avg_message_length": 15.7,
    "top_message": "Release version 2.0.0",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Custom Recovery Mode Email (100 installs) Resolved 1mo ago
Slugcustom-recovery-mode-email
Author slugjairo.ochoa
Burst start2026-08-12 15:01:03
Burst end2026-08-12 16:15:05
Burst commits20
Burst window minutes90
Tenure days2,420
Distinct messages2
Avg message length13
Top messageRelease 2.0.0
Top message count17
Prt revert—
ExplanationEstablished author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "custom-recovery-mode-email",
    "author_slug": "jairo.ochoa",
    "burst_start": "2026-08-12 15:01:03",
    "burst_end": "2026-08-12 16:15:05",
    "burst_commits": 20,
    "burst_window_minutes": 90,
    "tenure_days": 2420,
    "distinct_messages": 2,
    "avg_message_length": 13,
    "top_message": "Release 2.0.0",
    "top_message_count": 17,
    "prt_revert": null,
    "explanation": "Established author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst No Register & Comments XD (60 installs) Resolved 1mo ago
Slugno-register-comments-xd
Author slugmuhammadalikhizar
Burst start2026-08-18 08:19:09
Burst end2026-08-18 08:46:56
Burst commits12
Burst window minutes90
Tenure days515
Distinct messages3
Avg message length11
Top messageNewer Version
Top message count7
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "no-register-comments-xd",
    "author_slug": "muhammadalikhizar",
    "burst_start": "2026-08-18 08:19:09",
    "burst_end": "2026-08-18 08:46:56",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 515,
    "distinct_messages": 3,
    "avg_message_length": 10.7,
    "top_message": "Newer Version",
    "top_message_count": 7,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High code_scan_delta Job Postings (10k+ installs) Resolved 1mo ago
Slugjob-postings
Previous version2.8.1
Current version2.8.2
New findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltininclude/class-job-dependencies.php32wp_register_style('jp-admin-styles', "{$dir}admin/css/style.css", array() , $ver );medium
remote_enqueuebuiltininclude/class-job-dependencies.php35wp_register_style('jp-admin-colorpicker', "{$dir}admin/css/colorpicker.css", array() , $ver);medium
remote_enqueuebuiltininclude/class-job-dependencies.php39wp_register_script('jquery-autogrow', "{$dir}admin/js/jquery-autogrow.js");medium
remote_enqueuebuiltininclude/class-job-dependencies.php42wp_register_script('jquery-match-height', "{$dir}admin/js/jquery-match-height.js");medium
remote_enqueuebuiltininclude/class-job-dependencies.php45wp_register_style('jp-admin-ui', "{$dir}admin/css/jquery-ui.css");medium
remote_enqueuebuiltininclude/class-job-dependencies.php48wp_register_style('jp-admin-ui-styles', "{$dir}admin/css/jquery-ui.theme.min.css");medium
remote_enqueuebuiltininclude/class-job-dependencies.php53wp_register_script('jp-admin-colorpicker-js', "{$dir}admin/js/colorpicker.js", array('jquery'), $ver );medium
remote_enqueuebuiltininclude/class-job-dependencies.php56wp_register_script('jp-admin-repeater-js', "{$dir}admin/js/jquery.repeater.min.js", array('jquery'), $ver );medium
remote_enqueuebuiltininclude/class-job-dependencies.php61wp_register_script('jp-admin-scripts', "{$dir}admin/js/script.js", array('jquery', 'jquery-autogrow', 'jquery-match-height'), $ver );medium
remote_enqueuebuiltininclude/class-job-dependencies.php84wp_register_script('jp-front-select2', "{$dir}js/select2.min.js", array(), $ver );medium
remote_enqueuebuiltininclude/class-job-dependencies.php97wp_register_script('jp-front-scripts', "{$dir}js/script.js", array(), $ver);medium
remote_enqueuebuiltininclude/class-job-dependencies.php117wp_register_style('jp-front-select2', "{$dir}css/select2.min.css", array(), $ver );medium
remote_enqueuebuiltininclude/class-job-dependencies.php118wp_register_style('jp-front-styles', "{$dir}css/style.css", array(), $ver );medium
New finding count13
View raw JSON
{
    "slug": "job-postings",
    "previous_version": "2.8.1",
    "current_version": "2.8.2",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "include/class-job-dependencies.php",
            "line": 32,
            "snippet": "wp_register_style('jp-admin-styles', \"{$dir}admin/css/style.css\", array() , $ver );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "include/class-job-dependencies.php",
            "line": 35,
            "snippet": "wp_register_style('jp-admin-colorpicker', \"{$dir}admin/css/colorpicker.css\", array() , $ver);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "include/class-job-dependencies.php",
            "line": 39,
            "snippet": "wp_register_script('jquery-autogrow', \"{$dir}admin/js/jquery-autogrow.js\");",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "include/class-job-dependencies.php",
            "line": 42,
            "snippet": "wp_register_script('jquery-match-height', \"{$dir}admin/js/jquery-match-height.js\");",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "include/class-job-dependencies.php",
            "line": 45,
            "snippet": "wp_register_style('jp-admin-ui', \"{$dir}admin/css/jquery-ui.css\");",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "include/class-job-dependencies.php",
            "line": 48,
            "snippet": "wp_register_style('jp-admin-ui-styles', \"{$dir}admin/css/jquery-ui.theme.min.css\");",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "include/class-job-dependencies.php",
            "line": 53,
            "snippet": "wp_register_script('jp-admin-colorpicker-js', \"{$dir}admin/js/colorpicker.js\", array('jquery'), $ver );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "include/class-job-dependencies.php",
            "line": 56,
            "snippet": "wp_register_script('jp-admin-repeater-js', \"{$dir}admin/js/jquery.repeater.min.js\", array('jquery'), $ver );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "include/class-job-dependencies.php",
            "line": 61,
            "snippet": "wp_register_script('jp-admin-scripts', \"{$dir}admin/js/script.js\", array('jquery', 'jquery-autogrow', 'jquery-match-height'), $ver );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "include/class-job-dependencies.php",
            "line": 84,
            "snippet": "wp_register_script('jp-front-select2', \"{$dir}js/select2.min.js\", array(), $ver );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "include/class-job-dependencies.php",
            "line": 97,
            "snippet": "wp_register_script('jp-front-scripts', \"{$dir}js/script.js\", array(), $ver);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "include/class-job-dependencies.php",
            "line": 117,
            "snippet": "wp_register_style('jp-front-select2', \"{$dir}css/select2.min.css\", array(), $ver );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "include/class-job-dependencies.php",
            "line": 118,
            "snippet": "wp_register_style('jp-front-styles', \"{$dir}css/style.css\", array(), $ver );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 13
}
High code_scan_delta YaMaps for WordPress Plugin (10k+ installs) Resolved 1mo ago
Slugyamaps
Previous version0.6.41
Current version0.6.41
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/api.php20wp_register_script( 'YandexMapAPI', 'https://api-maps.yandex.ru/2.1/?lang='.esc_html($maplocale).esc_html($apikey), [], 2.1, true );medium
Url
https://api-maps.yandex.ru/2.1/?lang=
Url host
api-maps.yandex.ru
New finding count1
View raw JSON
{
    "slug": "yamaps",
    "previous_version": "0.6.41",
    "current_version": "0.6.41",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/api.php",
            "line": 20,
            "snippet": "wp_register_script( 'YandexMapAPI', 'https://api-maps.yandex.ru/2.1/?lang='.esc_html($maplocale).esc_html($apikey), [], 2.1, true );",
            "confidence": "medium",
            "details": {
                "url": "https://api-maps.yandex.ru/2.1/?lang=",
                "url_host": "api-maps.yandex.ru"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta Klarna for WooCommerce (20k+ installs) Resolved 1mo ago
Slugklarna-payments-for-woocommerce
Previous version4.11.0
Current version4.13.0
New findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinsrc/ExpressCheckout/Assets.php67wp_register_style( 'kec-cart', "{$this->assets_path}css/kec-cart.css", array(), WC_KLARNA_PAYMENTS_VERSION );medium
remote_enqueuebuiltinsrc/ExpressCheckout/Assets.php69wp_register_style( 'kec-admin', "{$this->assets_path}css/kec-admin.css", array(), WC_KLARNA_PAYMENTS_VERSION );medium
remote_enqueuebuiltinsrc/ExpressCheckout/Assets.php70wp_register_script( 'kec-admin', "{$this->assets_path}js/kec-admin.js", array( 'jquery' ), WC_KLARNA_PAYMENTS_VERSION, true );medium
remote_enqueuebuiltinsrc/ExpressCheckout/Assets.php72wp_register_script( 'kec-cart', "{$this->assets_path}js/kec-cart.js", array( 'jquery', 'klarnapayments' ), WC_KLARNA_PAYMENTS_VERSION, true );medium
remote_enqueuebuiltinsrc/ExpressCheckout/Assets.php73wp_register_script( 'kec-checkout', "{$this->assets_path}js/kec-checkout.js", array( 'jquery', 'klarnapayments' ), WC_KLARNA_PAYMENTS_VERSION, true );medium
New finding count5
View raw JSON
{
    "slug": "klarna-payments-for-woocommerce",
    "previous_version": "4.11.0",
    "current_version": "4.13.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "src/ExpressCheckout/Assets.php",
            "line": 67,
            "snippet": "wp_register_style( 'kec-cart', \"{$this->assets_path}css/kec-cart.css\", array(), WC_KLARNA_PAYMENTS_VERSION );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "src/ExpressCheckout/Assets.php",
            "line": 69,
            "snippet": "wp_register_style( 'kec-admin', \"{$this->assets_path}css/kec-admin.css\", array(), WC_KLARNA_PAYMENTS_VERSION );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "src/ExpressCheckout/Assets.php",
            "line": 70,
            "snippet": "wp_register_script( 'kec-admin', \"{$this->assets_path}js/kec-admin.js\", array( 'jquery' ), WC_KLARNA_PAYMENTS_VERSION, true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "src/ExpressCheckout/Assets.php",
            "line": 72,
            "snippet": "wp_register_script( 'kec-cart', \"{$this->assets_path}js/kec-cart.js\", array( 'jquery', 'klarnapayments' ), WC_KLARNA_PAYMENTS_VERSION, true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "src/ExpressCheckout/Assets.php",
            "line": 73,
            "snippet": "wp_register_script( 'kec-checkout', \"{$this->assets_path}js/kec-checkout.js\", array( 'jquery', 'klarnapayments' ), WC_KLARNA_PAYMENTS_VERSION, true );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 5
}
High compromised_committer_burst WP Travel – Ultimate Travel Booking System, Tour Management Engine (3k+ installs) Resolved 1mo ago
Slugwp-travel
Author slugwptravel
Burst start2026-08-17 06:08:46
Burst end2026-08-17 06:34:35
Burst commits12
Burst window minutes90
Tenure days2,781
Distinct messages3
Avg message length19
Top messageadded updated files
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-08-17 06:08:46",
    "burst_end": "2026-08-17 06:34:35",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2781,
    "distinct_messages": 3,
    "avg_message_length": 18.8,
    "top_message": "added updated files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst MultiParcels Shipping For WooCommerce (4k+ installs) Resolved 1mo ago
Slugmultiparcels-shipping-for-woocommerce
Author slugmultiparcels
Burst start2026-08-17 08:00:42
Burst end2026-08-17 08:05:32
Burst commits13
Burst window minutes90
Tenure days2,762
Distinct messages3
Avg message length37
Top message1.30.37 upload new trunk folder files
Top message count11
Prt revert—
ExplanationEstablished author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "multiparcels-shipping-for-woocommerce",
    "author_slug": "multiparcels",
    "burst_start": "2026-08-17 08:00:42",
    "burst_end": "2026-08-17 08:05:32",
    "burst_commits": 13,
    "burst_window_minutes": 90,
    "tenure_days": 2762,
    "distinct_messages": 3,
    "avg_message_length": 37.4,
    "top_message": "1.30.37 upload new trunk folder files",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst ePayco plugin for WooCommerce (3k+ installs) Resolved 1mo ago
Slugepayco-gateway
Author slugepayco
Burst start2026-08-20 18:26:29
Burst end2026-08-20 18:58:45
Burst commits22
Burst window minutes90
Tenure days1,533
Distinct messages20
Avg message length18
Top messageremove
Top message count3
Prt revert—
ExplanationEstablished author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "epayco-gateway",
    "author_slug": "epayco",
    "burst_start": "2026-08-20 18:26:29",
    "burst_end": "2026-08-20 18:58:45",
    "burst_commits": 22,
    "burst_window_minutes": 90,
    "tenure_days": 1533,
    "distinct_messages": 20,
    "avg_message_length": 18,
    "top_message": "remove",
    "top_message_count": 3,
    "prt_revert": null,
    "explanation": "Established author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst DPD Baltic Shipping (2k+ installs) Resolved 1mo ago
Slugwoo-shipping-dpd-baltic
Author slugdpdbaltics
Burst start2026-08-19 09:32:54
Burst end2026-08-19 09:35:52
Burst commits12
Burst window minutes90
Tenure days2,662
Distinct messages3
Avg message length34
Top message1.2.92 upload trunk folder files2
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "woo-shipping-dpd-baltic",
    "author_slug": "dpdbaltics",
    "burst_start": "2026-08-19 09:32:54",
    "burst_end": "2026-08-19 09:35:52",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2662,
    "distinct_messages": 3,
    "avg_message_length": 34.2,
    "top_message": "1.2.92 upload trunk folder files2",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst bbPress Voting (500 installs) Resolved 1mo ago
Slugbbp-voting
Author slugnatekinkead
Burst start2026-08-13 20:54:54
Burst end2026-08-13 21:31:47
Burst commits16
Burst window minutes90
Tenure days2,957
Distinct messages13
Avg message length22
Top messageUpdating assets
Top message count4
Prt revert—
ExplanationEstablished author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "bbp-voting",
    "author_slug": "natekinkead",
    "burst_start": "2026-08-13 20:54:54",
    "burst_end": "2026-08-13 21:31:47",
    "burst_commits": 16,
    "burst_window_minutes": 90,
    "tenure_days": 2957,
    "distinct_messages": 13,
    "avg_message_length": 22.1,
    "top_message": "Updating assets",
    "top_message_count": 4,
    "prt_revert": null,
    "explanation": "Established author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Login via Yandex – вход через Яндекс ID (100 installs) Resolved 1mo ago
Sluglogin-via-yandex
Author slugdllpl
Burst start2026-08-19 13:24:07
Burst end2026-08-19 13:56:06
Burst commits18
Burst window minutes90
Tenure days675
Distinct messages3
Avg message length16
Top messageRelease version 2.0.0
Top message count11
Prt revert—
ExplanationEstablished author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "login-via-yandex",
    "author_slug": "dllpl",
    "burst_start": "2026-08-19 13:24:07",
    "burst_end": "2026-08-19 13:56:06",
    "burst_commits": 18,
    "burst_window_minutes": 90,
    "tenure_days": 675,
    "distinct_messages": 3,
    "avg_message_length": 15.7,
    "top_message": "Release version 2.0.0",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Custom Recovery Mode Email (100 installs) Resolved 1mo ago
Slugcustom-recovery-mode-email
Author slugjairo.ochoa
Burst start2026-08-12 15:01:03
Burst end2026-08-12 16:15:05
Burst commits20
Burst window minutes90
Tenure days2,420
Distinct messages2
Avg message length13
Top messageRelease 2.0.0
Top message count17
Prt revert—
ExplanationEstablished author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "custom-recovery-mode-email",
    "author_slug": "jairo.ochoa",
    "burst_start": "2026-08-12 15:01:03",
    "burst_end": "2026-08-12 16:15:05",
    "burst_commits": 20,
    "burst_window_minutes": 90,
    "tenure_days": 2420,
    "distinct_messages": 2,
    "avg_message_length": 13,
    "top_message": "Release 2.0.0",
    "top_message_count": 17,
    "prt_revert": null,
    "explanation": "Established author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst No Register & Comments XD (60 installs) Resolved 1mo ago
Slugno-register-comments-xd
Author slugmuhammadalikhizar
Burst start2026-08-18 08:19:09
Burst end2026-08-18 08:46:56
Burst commits12
Burst window minutes90
Tenure days515
Distinct messages3
Avg message length11
Top messageNewer Version
Top message count7
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "no-register-comments-xd",
    "author_slug": "muhammadalikhizar",
    "burst_start": "2026-08-18 08:19:09",
    "burst_end": "2026-08-18 08:46:56",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 515,
    "distinct_messages": 3,
    "avg_message_length": 10.7,
    "top_message": "Newer Version",
    "top_message_count": 7,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High closed_plugin_resurrection Sleekplan – User Feedback, Roadmap & Changelog (10 installs) Resolved 1mo ago
Slugsleekplan
Previously closed reasonsecurity-issue
Author slugsleekplan
Current version1.0.0
Active installs10
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "sleekplan",
    "previously_closed_reason": "security-issue",
    "author_slug": "sleekplan",
    "current_version": "1.0.0",
    "active_installs": 10,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
Slugrankready-ai-llm-seo
Previous profilehttps://profiles.wordpress.org/posimyththemes/
Current profilehttps://profiles.wordpress.org/hmbhq/
Active installs300
View raw JSON
{
    "slug": "rankready-ai-llm-seo",
    "previous_profile": "https://profiles.wordpress.org/posimyththemes/",
    "current_profile": "https://profiles.wordpress.org/hmbhq/",
    "active_installs": 300
}
High closed_plugin_resurrection Frizzly – Social Share Buttons (300 installs) Resolved 1mo ago
Slugfrizzly
Previously closed reasonsecurity-issue
Author slugabhishekfdd
Current version1.1.1
Active installs300
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "frizzly",
    "previously_closed_reason": "security-issue",
    "author_slug": "abhishekfdd",
    "current_version": "1.1.1",
    "active_installs": 300,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High closed_plugin_resurrection DataMentor (200 installs) Resolved 1mo ago
Slugdatamentor
Previously closed reasonsecurity-issue
Author slugauburnforest
Current version1.8.1
Active installs200
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "datamentor",
    "previously_closed_reason": "security-issue",
    "author_slug": "auburnforest",
    "current_version": "1.8.1",
    "active_installs": 200,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High closed_plugin_resurrection Crypto (10 installs) Resolved 1mo ago
Slugcrypto
Previously closed reasonsecurity-issue
Author slugodude
Current version3.0.4
Active installs10
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "crypto",
    "previously_closed_reason": "security-issue",
    "author_slug": "odude",
    "current_version": "3.0.4",
    "active_installs": 10,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
Slugdoublescale
Previous profilehttps://profiles.wordpress.org/vixgrowy/
Current profilehttps://profiles.wordpress.org/samuelgallegos/
Active installs10
View raw JSON
{
    "slug": "doublescale",
    "previous_profile": "https://profiles.wordpress.org/vixgrowy/",
    "current_profile": "https://profiles.wordpress.org/samuelgallegos/",
    "active_installs": 10
}
High closed_plugin_resurrection RootsPersona (400 installs) Resolved 1mo ago
Slugrootspersona
Previously closed reasonsecurity-issue
Author slugurryes
Current version4.1
Active installs400
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "rootspersona",
    "previously_closed_reason": "security-issue",
    "author_slug": "urryes",
    "current_version": "4.1",
    "active_installs": 400,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High closed_plugin_resurrection Pie Forms — Drag & Drop Form Builder (80 installs) Resolved 1mo ago
Slugpie-forms-for-wp
Previously closed reasonsecurity-issue
Author sluggenetechproducts
Current version1.6.3
Active installs90
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "pie-forms-for-wp",
    "previously_closed_reason": "security-issue",
    "author_slug": "genetechproducts",
    "current_version": "1.6.3",
    "active_installs": 90,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High closed_plugin_resurrection Easy Bootstrap Shortcode (6k+ installs) Resolved 1mo ago
Slugeasy-bootstrap-shortcodes
Previously closed reasonsecurity-issue
Author slugoscitas
Current version5.0.2
Active installs6,000
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "easy-bootstrap-shortcodes",
    "previously_closed_reason": "security-issue",
    "author_slug": "oscitas",
    "current_version": "5.0.2",
    "active_installs": 6000,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High closed_plugin_resurrection Blogmentor – Blog Layouts for Elementor (4k+ installs) Resolved 1mo ago
Slugblogmentor
Previously closed reasonsecurity-issue
Author slugauburnforest
Current version1.6.2
Active installs5,000
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "blogmentor",
    "previously_closed_reason": "security-issue",
    "author_slug": "auburnforest",
    "current_version": "1.6.2",
    "active_installs": 5000,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High closed_plugin_resurrection Albo Pretorio On line (800 installs) Resolved 1mo ago
Slugalbo-pretorio-on-line
Previously closed reasonsecurity-issue
Author slugignazios
Current version4.13.0
Active installs800
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "albo-pretorio-on-line",
    "previously_closed_reason": "security-issue",
    "author_slug": "ignazios",
    "current_version": "4.13.0",
    "active_installs": 800,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}