Events

1,086 events (filtered). · Last rule pass 6h ago. · 30 open / 4,683 resolved overall.

State: Open Resolved All
Slugmaster-addons
Previous profilehttps://profiles.wordpress.org/litonice13/
Current profilehttps://profiles.wordpress.org/pixarlabs/
Active installs30,000
View raw JSON
{
    "slug": "master-addons",
    "previous_profile": "https://profiles.wordpress.org/litonice13/",
    "current_profile": "https://profiles.wordpress.org/pixarlabs/",
    "active_installs": 30000
}
High author_changed HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates (400k+ installs) Resolved 1mo ago
Slughappy-elementor-addons
Previous profilehttps://profiles.wordpress.org/thehappymonster/
Current profilehttps://profiles.wordpress.org/leevio/
Active installs400,000
View raw JSON
{
    "slug": "happy-elementor-addons",
    "previous_profile": "https://profiles.wordpress.org/thehappymonster/",
    "current_profile": "https://profiles.wordpress.org/leevio/",
    "active_installs": 400000
}
High compromised_committer_burst MultiParcels Shipping For WooCommerce (4k+ installs) Resolved 1mo ago
Slugmultiparcels-shipping-for-woocommerce
Author slugmultiparcels
Burst start2026-07-16 07:46:52
Burst end2026-07-16 07:54:59
Burst commits13
Burst window minutes90
Tenure days2,730
Distinct messages5
Avg message length35
Top message1.30.34 upload trunk folder files
Top message count9
Prt revert—
ExplanationEstablished author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "multiparcels-shipping-for-woocommerce",
    "author_slug": "multiparcels",
    "burst_start": "2026-07-16 07:46:52",
    "burst_end": "2026-07-16 07:54:59",
    "burst_commits": 13,
    "burst_window_minutes": 90,
    "tenure_days": 2730,
    "distinct_messages": 5,
    "avg_message_length": 34.6,
    "top_message": "1.30.34 upload trunk folder files",
    "top_message_count": 9,
    "prt_revert": null,
    "explanation": "Established author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst MultiParcels Shipping For WooCommerce (4k+ installs) Resolved 1mo ago
Slugmultiparcels-shipping-for-woocommerce
Author slugmultiparcels
Burst start2026-07-08 06:20:50
Burst end2026-07-08 07:26:38
Burst commits14
Burst window minutes90
Tenure days2,722
Distinct messages6
Avg message length29
Top message1.30.31 upload new folder files
Top message count9
Prt revert—
ExplanationEstablished author committed 14 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "multiparcels-shipping-for-woocommerce",
    "author_slug": "multiparcels",
    "burst_start": "2026-07-08 06:20:50",
    "burst_end": "2026-07-08 07:26:38",
    "burst_commits": 14,
    "burst_window_minutes": 90,
    "tenure_days": 2722,
    "distinct_messages": 6,
    "avg_message_length": 29.1,
    "top_message": "1.30.31 upload new folder files",
    "top_message_count": 9,
    "prt_revert": null,
    "explanation": "Established author committed 14 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst WP Travel – Ultimate Travel Booking System, Tour Management Engine (3k+ installs) Resolved 2mo ago
Slugwp-travel
Author slugwptravel
Burst start2026-07-06 05:10:43
Burst end2026-07-06 05:25:01
Burst commits12
Burst window minutes90
Tenure days2,739
Distinct messages3
Avg message length19
Top messageadded updated files
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-07-06 05:10:43",
    "burst_end": "2026-07-06 05:25:01",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2739,
    "distinct_messages": 3,
    "avg_message_length": 19.1,
    "top_message": "added updated files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst SMSA Shipping (official) (300 installs) Resolved 2mo ago
Slugsmsa-shipping-official
Author slugsmsaexpress
Burst start2026-07-24 16:02:41
Burst end2026-07-24 16:34:58
Burst commits34
Burst window minutes90
Tenure days1,933
Distinct messages6
Avg message length13
Top messagereplaced
Top message count15
Prt revert—
ExplanationEstablished author committed 34 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "smsa-shipping-official",
    "author_slug": "smsaexpress",
    "burst_start": "2026-07-24 16:02:41",
    "burst_end": "2026-07-24 16:34:58",
    "burst_commits": 34,
    "burst_window_minutes": 90,
    "tenure_days": 1933,
    "distinct_messages": 6,
    "avg_message_length": 12.9,
    "top_message": "replaced",
    "top_message_count": 15,
    "prt_revert": null,
    "explanation": "Established author committed 34 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Printcart Store – Web to Print Product Designer for WooCommerce (80 installs) Resolved 2mo ago
Slugprintcart-integration
Author slugprintcart
Burst start2026-07-02 07:35:36
Burst end2026-07-02 08:10:43
Burst commits19
Burst window minutes90
Tenure days1,474
Distinct messages19
Avg message length38
Top messageauth write test - old token
Top message count1
Prt revert—
ExplanationEstablished author committed 19 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "printcart-integration",
    "author_slug": "printcart",
    "burst_start": "2026-07-02 07:35:36",
    "burst_end": "2026-07-02 08:10:43",
    "burst_commits": 19,
    "burst_window_minutes": 90,
    "tenure_days": 1474,
    "distinct_messages": 19,
    "avg_message_length": 38.2,
    "top_message": "auth write test - old token",
    "top_message_count": 1,
    "prt_revert": null,
    "explanation": "Established author committed 19 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst GeoGuard WP – GRC (30 installs) Resolved 2mo ago
Slugrestrict-admin-login-by-country-grc
Author slugrobertutzu
Burst start2026-07-24 11:38:36
Burst end2026-07-24 13:04:17
Burst commits14
Burst window minutes90
Tenure days388
Distinct messages9
Avg message length15
Top messageNew version
Top message count3
Prt revert—
ExplanationEstablished author committed 14 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "restrict-admin-login-by-country-grc",
    "author_slug": "robertutzu",
    "burst_start": "2026-07-24 11:38:36",
    "burst_end": "2026-07-24 13:04:17",
    "burst_commits": 14,
    "burst_window_minutes": 90,
    "tenure_days": 388,
    "distinct_messages": 9,
    "avg_message_length": 15.1,
    "top_message": "New version",
    "top_message_count": 3,
    "prt_revert": null,
    "explanation": "Established author committed 14 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst WP Travel – Ultimate Travel Booking System, Tour Management Engine (3k+ installs) Resolved 2mo ago
Slugwp-travel
Author slugwptravel
Burst start2026-06-29 11:40:43
Burst end2026-06-29 12:00:03
Burst commits12
Burst window minutes90
Tenure days2,732
Distinct messages3
Avg message length19
Top messageadded updated files
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-06-29 11:40:43",
    "burst_end": "2026-06-29 12:00:03",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2732,
    "distinct_messages": 3,
    "avg_message_length": 18.8,
    "top_message": "added updated files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst MultiParcels Shipping For WooCommerce (4k+ installs) Resolved 2mo ago
Slugmultiparcels-shipping-for-woocommerce
Author slugmultiparcels
Burst start2026-07-02 09:46:45
Burst end2026-07-02 09:59:48
Burst commits14
Burst window minutes90
Tenure days2,716
Distinct messages5
Avg message length9
Top message29 real
Top message count10
Prt revert—
ExplanationEstablished author committed 14 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "multiparcels-shipping-for-woocommerce",
    "author_slug": "multiparcels",
    "burst_start": "2026-07-02 09:46:45",
    "burst_end": "2026-07-02 09:59:48",
    "burst_commits": 14,
    "burst_window_minutes": 90,
    "tenure_days": 2716,
    "distinct_messages": 5,
    "avg_message_length": 9.1,
    "top_message": "29 real",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 14 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Contact Form 7 GetResponse Extension (1k+ installs) Resolved 2mo ago
Slugcontact-form-7-getresponse-extension
Author slugwptravel
Burst start2026-07-13 09:59:32
Burst end2026-07-13 10:03:04
Burst commits13
Burst window minutes90
Tenure days2,544
Distinct messages3
Avg message length20
Top messageadding updated files
Top message count11
Prt revert—
ExplanationEstablished author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "contact-form-7-getresponse-extension",
    "author_slug": "wptravel",
    "burst_start": "2026-07-13 09:59:32",
    "burst_end": "2026-07-13 10:03:04",
    "burst_commits": 13,
    "burst_window_minutes": 90,
    "tenure_days": 2544,
    "distinct_messages": 3,
    "avg_message_length": 19.5,
    "top_message": "adding updated files",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst BOX NOW Delivery Croatia + Slovenia (800 installs) Resolved 2mo ago
Slugbox-now-delivery-croatia
Author slugivanbebek
Burst start2026-07-21 07:14:33
Burst end2026-07-21 08:04:19
Burst commits14
Burst window minutes90
Tenure days924
Distinct messages7
Avg message length10
Top messageNew version
Top message count7
Prt revert—
ExplanationEstablished author committed 14 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "box-now-delivery-croatia",
    "author_slug": "ivanbebek",
    "burst_start": "2026-07-21 07:14:33",
    "burst_end": "2026-07-21 08:04:19",
    "burst_commits": 14,
    "burst_window_minutes": 90,
    "tenure_days": 924,
    "distinct_messages": 7,
    "avg_message_length": 10.4,
    "top_message": "New version",
    "top_message_count": 7,
    "prt_revert": null,
    "explanation": "Established author committed 14 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Shipping Labels for DHL eCommerce APAC (100 installs) Resolved 2mo ago
Slugdhl-ecommerce-apac
Author slugdhlecommerceasia
Burst start2026-07-13 08:36:01
Burst end2026-07-13 09:46:15
Burst commits15
Burst window minutes90
Tenure days1,210
Distinct messages9
Avg message length38
Top messageUpdated README installation instructions and added setup guide link.
Top message count2
Prt revert—
ExplanationEstablished author committed 15 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "dhl-ecommerce-apac",
    "author_slug": "dhlecommerceasia",
    "burst_start": "2026-07-13 08:36:01",
    "burst_end": "2026-07-13 09:46:15",
    "burst_commits": 15,
    "burst_window_minutes": 90,
    "tenure_days": 1210,
    "distinct_messages": 9,
    "avg_message_length": 37.5,
    "top_message": "Updated README installation instructions and added setup guide link.",
    "top_message_count": 2,
    "prt_revert": null,
    "explanation": "Established author committed 15 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
Slugwholesale-engine
Previous profilehttps://profiles.wordpress.org/hasandev/
Current profilehttps://profiles.wordpress.org/pluginshift/
Active installs0
View raw JSON
{
    "slug": "wholesale-engine",
    "previous_profile": "https://profiles.wordpress.org/hasandev/",
    "current_profile": "https://profiles.wordpress.org/pluginshift/",
    "active_installs": 0
}
High closed_plugin_resurrection WP Dropzone (70 installs) Resolved 2mo ago
Slugwp-dropzone
Previously closed reasonsecurity-issue
Author slugnazsabuz
Current version1.1.2
Active installs80
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "wp-dropzone",
    "previously_closed_reason": "security-issue",
    "author_slug": "nazsabuz",
    "current_version": "1.1.2",
    "active_installs": 80,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High closed_plugin_resurrection Mediamatic – Media Library Folders (1k+ installs) Resolved 2mo ago
Slugmediamatic
Previously closed reasonsecurity-issue
Author slugplugincraft
Current version3.1
Active installs1,000
ExplanationPlugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.
View raw JSON
{
    "slug": "mediamatic",
    "previously_closed_reason": "security-issue",
    "author_slug": "plugincraft",
    "current_version": "3.1",
    "active_installs": 1000,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}
High code_scan_delta Home Affordability Calculator (80 installs) Resolved 2mo ago
Slughome-affordability-calculator
Previous version1.3
Current version1.4
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/class-happs-haff-plugin.php1,339wp_register_script( 'happs-haff-highcharts', 'https://code.highcharts.com/highcharts.js', array(), null, true );medium
Url
https://code.highcharts.com/highcharts.js
Url host
code.highcharts.com
New finding count1
View raw JSON
{
    "slug": "home-affordability-calculator",
    "previous_version": "1.3",
    "current_version": "1.4",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/class-happs-haff-plugin.php",
            "line": 1339,
            "snippet": "wp_register_script( 'happs-haff-highcharts', 'https://code.highcharts.com/highcharts.js', array(), null, true );",
            "confidence": "medium",
            "details": {
                "url": "https://code.highcharts.com/highcharts.js",
                "url_host": "code.highcharts.com"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta Moyasar (900 installs) Resolved 2mo ago
Slugmoyasar
Previous version8.2.1
Current version8.3.1
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinincludes/blocks/class-moyasar-blocks.php97wp_register_script( 'moyasar_apple_pay_sdk', 'https://applepay.cdn-apple.com/jsapi/1.latest/apple-pay-sdk.js', array(), null, true );medium
Url
https://applepay.cdn-apple.com/jsapi/1.latest/apple-pay-sdk.js
Url host
applepay.cdn-apple.com
remote_enqueuebuiltinincludes/blocks/class-moyasar-blocks.php103wp_register_script( 'moyasar_samsung_pay_sdk', 'https://img.mpay.samsung.com/gsmpi/sdk/samsungpay_web_sdk.js', array(), null, true );medium
Url
https://img.mpay.samsung.com/gsmpi/sdk/samsungpay_web_sdk.js
Url host
img.mpay.samsung.com
New finding count2
View raw JSON
{
    "slug": "moyasar",
    "previous_version": "8.2.1",
    "current_version": "8.3.1",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/blocks/class-moyasar-blocks.php",
            "line": 97,
            "snippet": "wp_register_script( 'moyasar_apple_pay_sdk', 'https://applepay.cdn-apple.com/jsapi/1.latest/apple-pay-sdk.js', array(), null, true );",
            "confidence": "medium",
            "details": {
                "url": "https://applepay.cdn-apple.com/jsapi/1.latest/apple-pay-sdk.js",
                "url_host": "applepay.cdn-apple.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/blocks/class-moyasar-blocks.php",
            "line": 103,
            "snippet": "wp_register_script( 'moyasar_samsung_pay_sdk', 'https://img.mpay.samsung.com/gsmpi/sdk/samsungpay_web_sdk.js', array(), null, true );",
            "confidence": "medium",
            "details": {
                "url": "https://img.mpay.samsung.com/gsmpi/sdk/samsungpay_web_sdk.js",
                "url_host": "img.mpay.samsung.com"
            }
        }
    ],
    "new_finding_count": 2
}
High code_scan_delta DMCA Website Protection Badge (1k+ installs) Resolved 2mo ago
Slugdmca-badge
Previous version2.2.0
Current version2.3.0
New findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinclasses/class-plugin.php2,518wp_enqueue_script("{$this->plugin_name}_colorpicker", plugins_url("{$this->plugin_slug}/js/colorpicker.js", $this->plugin_slug), array('jquery'), $version, false);medium
remote_enqueuebuiltinclasses/class-plugin.php2,519wp_enqueue_style("{$this->plugin_name}_colorpicker", plugins_url("{$this->plugin_slug}/css/colorpicker.css", $this->plugin_slug), array(), $version);medium
remote_enqueuebuiltinclasses/class-plugin.php2,521wp_enqueue_style("{$this->plugin_name}_fontAwesome", plugins_url("{$this->plugin_slug}/css/font-awesome.min.css", $this->plugin_slug), array(), $version);medium
remote_enqueuebuiltinlibraries/sidecar/classes/class-admin-page.php1,003wp_enqueue_style( "{$plugin->plugin_name}_admin_styles", plugins_url( $localfile, $plugin->plugin_file ), array(), '1.0' );medium
New finding count4
View raw JSON
{
    "slug": "dmca-badge",
    "previous_version": "2.2.0",
    "current_version": "2.3.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "classes/class-plugin.php",
            "line": 2518,
            "snippet": "wp_enqueue_script(\"{$this->plugin_name}_colorpicker\", plugins_url(\"{$this->plugin_slug}/js/colorpicker.js\", $this->plugin_slug), array('jquery'), $version, false);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "classes/class-plugin.php",
            "line": 2519,
            "snippet": "wp_enqueue_style(\"{$this->plugin_name}_colorpicker\", plugins_url(\"{$this->plugin_slug}/css/colorpicker.css\", $this->plugin_slug), array(), $version);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "classes/class-plugin.php",
            "line": 2521,
            "snippet": "wp_enqueue_style(\"{$this->plugin_name}_fontAwesome\", plugins_url(\"{$this->plugin_slug}/css/font-awesome.min.css\", $this->plugin_slug), array(), $version);",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "libraries/sidecar/classes/class-admin-page.php",
            "line": 1003,
            "snippet": "wp_enqueue_style( \"{$plugin->plugin_name}_admin_styles\", plugins_url( $localfile, $plugin->plugin_file ), array(), '1.0' );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 4
}
High code_scan_delta Chatra Live Chat + ChatBot + Cart Saver (2k+ installs) Resolved 2mo ago
Slugchatra-live-chat
Previous version1.0.12
Current version1.0.13
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinchatra.php87wp_enqueue_script('chatra-widget', 'https://call.chatra.io/chatra.js', array(), '1.0.13', true);medium
Url
https://call.chatra.io/chatra.js
Url host
call.chatra.io
New finding count1
View raw JSON
{
    "slug": "chatra-live-chat",
    "previous_version": "1.0.12",
    "current_version": "1.0.13",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "chatra.php",
            "line": 87,
            "snippet": "wp_enqueue_script('chatra-widget', 'https://call.chatra.io/chatra.js', array(), '1.0.13', true);",
            "confidence": "medium",
            "details": {
                "url": "https://call.chatra.io/chatra.js",
                "url_host": "call.chatra.io"
            }
        }
    ],
    "new_finding_count": 1
}
High code_scan_delta CheckoutWC Lite – Conversion optimized WooCommerce checkout (2k+ installs) Resolved 2mo ago
Slugcheckoutwc-lite
Previous version11.1.4
Current version11.3.0
New findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinincludes/Admin/Pages/PageController.php65wp_enqueue_style( 'objectiv-cfw-admin-global-styles', "{$front}/{$manifest['chunks']['admin-global-styles']['file']}", [], $manifest['chunks']['admin-global-styles']['hash'] );medium
remote_enqueuebuiltinincludes/Admin/Pages/PageController.php74wp_enqueue_style( 'objectiv-cfw-admin-styles', "{$front}/{$manifest['chunks']['admin-styles']['file']}", [ 'wc-components', 'wp-components' ], $manifest['chunks']['admin-styles']['hash'] );medium
New finding count2
View raw JSON
{
    "slug": "checkoutwc-lite",
    "previous_version": "11.1.4",
    "current_version": "11.3.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/Admin/Pages/PageController.php",
            "line": 65,
            "snippet": "wp_enqueue_style( 'objectiv-cfw-admin-global-styles', \"{$front}/{$manifest['chunks']['admin-global-styles']['file']}\", [], $manifest['chunks']['admin-global-styles']['hash'] );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "includes/Admin/Pages/PageController.php",
            "line": 74,
            "snippet": "wp_enqueue_style( 'objectiv-cfw-admin-styles', \"{$front}/{$manifest['chunks']['admin-styles']['file']}\", [ 'wc-components', 'wp-components' ], $manifest['chunks']['admin-styles']['hash'] );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 2
}
High code_scan_delta Democracy Poll (7k+ installs) Resolved 2mo ago
Slugdemocracy-poll
Previous version6.4.0
Current version6.5.0
New findings
PatternKindFileLineSnippetConfidence
remote_enqueuebuiltinclasses/Poll_Utils.php59wp_enqueue_script( $handle, "$plugin->url/assets/js/democracy.min.js", [], $plugin->ver, [medium
remote_enqueuebuiltinclasses/Admin/Admin_Page.php73wp_enqueue_script( self::ASSETS_ID, "{$this->plugin->url}/assets/admin/admin.js", [ 'jquery' ], $this->plugin->ver, true );medium
remote_enqueuebuiltinclasses/Admin/Admin_Page.php74wp_enqueue_style( self::ASSETS_ID, "{$this->plugin->url}/assets/admin/admin.css", [], $this->plugin->ver );medium
New finding count3
View raw JSON
{
    "slug": "democracy-poll",
    "previous_version": "6.4.0",
    "current_version": "6.5.0",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "classes/Poll_Utils.php",
            "line": 59,
            "snippet": "wp_enqueue_script( $handle, \"$plugin->url/assets/js/democracy.min.js\", [], $plugin->ver, [",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "classes/Admin/Admin_Page.php",
            "line": 73,
            "snippet": "wp_enqueue_script( self::ASSETS_ID, \"{$this->plugin->url}/assets/admin/admin.js\", [ 'jquery' ], $this->plugin->ver, true );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "classes/Admin/Admin_Page.php",
            "line": 74,
            "snippet": "wp_enqueue_style( self::ASSETS_ID, \"{$this->plugin->url}/assets/admin/admin.css\", [], $this->plugin->ver );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 3
}
High code_scan_delta MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar (20k+ installs) Resolved 2mo ago
Slugmp3-music-player-by-sonaar
Previous version5.12
Current version5.13.1
New findings
PatternKindFileLineSnippetConfidenceDetails
remote_enqueuebuiltinadmin/class-sonaar-music-setup-wizard.php99wp_enqueue_script( 'youtube-api', 'https://www.youtube.com/iframe_api', array(), null, true );medium
Url
https://www.youtube.com/iframe_api
Url host
www.youtube.com
New finding count1
View raw JSON
{
    "slug": "mp3-music-player-by-sonaar",
    "previous_version": "5.12",
    "current_version": "5.13.1",
    "new_findings": [
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "admin/class-sonaar-music-setup-wizard.php",
            "line": 99,
            "snippet": "wp_enqueue_script( 'youtube-api', 'https://www.youtube.com/iframe_api', array(), null, true );",
            "confidence": "medium",
            "details": {
                "url": "https://www.youtube.com/iframe_api",
                "url_host": "www.youtube.com"
            }
        }
    ],
    "new_finding_count": 1
}
High compromised_committer_burst WP Travel – Ultimate Travel Booking System, Tour Management Engine (3k+ installs) Resolved 2mo ago
Slugwp-travel
Author slugwptravel
Burst start2026-06-29 11:40:43
Burst end2026-06-29 12:00:03
Burst commits12
Burst window minutes90
Tenure days2,732
Distinct messages3
Avg message length19
Top messageadded updated files
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-06-29 11:40:43",
    "burst_end": "2026-06-29 12:00:03",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2732,
    "distinct_messages": 3,
    "avg_message_length": 18.8,
    "top_message": "added updated files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}