Events

{
    "slug": "ultimate-social-media-plus",
    "previous_version": "3.7.1",
    "current_version": "3.7.2",
    "dormancy_days": 430,
    "active_installs": 10000
}

{
    "slug": "remove-dashboard-access-for-non-admins",
    "previous_version": "1.2.1",
    "current_version": "1.3.1",
    "dormancy_days": 538,
    "active_installs": 30000
}

{
    "slug": "login-as-user",
    "new_contributors": [
        "web357"
    ],
    "active_installs": 30000
}

{
    "slug": "woo-paystack",
    "new_contributors": [
        "paystack"
    ],
    "active_installs": 30000
}

{
    "slug": "ocean-custom-sidebar",
    "previous_version": "1.1.4",
    "current_version": "1.1.5",
    "dormancy_days": 365,
    "active_installs": 30000
}

{
    "slug": "woo-variation-gallery",
    "new_contributors": [
        "storepress"
    ],
    "active_installs": 20000
}

{
    "slug": "hide-admin-bar-based-on-user-roles",
    "domain": "creovity.agency",
    "domain_source": "author_uri",
    "domain_registered_at": "2025-03-17",
    "plugin_earliest_commit": "2018-07-12 22:11:36",
    "plugin_latest_release": "2026-04-13 18:20:28",
    "gap_days": 2439,
    "domain_age_at_release": 392,
    "active_installs": 20000
}

{
    "slug": "ocean-stick-anything",
    "previous_version": "2.0.9",
    "current_version": "2.1.0",
    "dormancy_days": 365,
    "active_installs": 20000
}

{
    "slug": "gutena-forms",
    "domain": "gutenaforms.com",
    "domain_source": "author_uri",
    "domain_registered_at": "2025-09-29",
    "plugin_earliest_commit": "2022-08-29 19:22:32",
    "plugin_latest_release": "2026-05-22 13:35:55",
    "gap_days": 1126,
    "domain_age_at_release": 235,
    "active_installs": 20000
}

{
    "slug": "ocean-product-sharing",
    "previous_version": "2.2.1",
    "current_version": "2.2.2",
    "dormancy_days": 365,
    "active_installs": 20000
}

{
    "slug": "wp-paginate",
    "previous_version": "2.2.4",
    "current_version": "2.2.6",
    "dormancy_days": 455,
    "active_installs": 20000
}

{
    "slug": "wp-map-block",
    "domain": "ablocks.pro",
    "domain_source": "author_uri",
    "domain_registered_at": "2024-04-17",
    "plugin_earliest_commit": "2020-08-27 22:09:41",
    "plugin_latest_release": "2025-11-04 13:18:30",
    "gap_days": 1328,
    "domain_age_at_release": 566,
    "active_installs": 20000
}

{
    "slug": "wpdatatables",
    "new_contributors": [
        "ivyforms"
    ],
    "active_installs": 70000
}

{
    "slug": "login-recaptcha",
    "previous_version": "1.7.3",
    "current_version": "1.8.1",
    "dormancy_days": 819,
    "active_installs": 60000
}

{
    "slug": "wp-add-mime-types",
    "previous_version": "3.1.2",
    "current_version": "3.2.0",
    "dormancy_days": 412,
    "active_installs": 50000
}

{
    "slug": "wp-edit",
    "domain": "wpeditpro.com",
    "domain_source": "plugin_uri",
    "domain_registered_at": "2024-06-13",
    "plugin_earliest_commit": "2014-03-23 00:03:13",
    "plugin_latest_release": "2018-10-15 19:59:36",
    "gap_days": 3734,
    "domain_age_at_release": -2067,
    "active_installs": 40000
}

{
    "slug": "wp-simple-firewall",
    "domain": "shldscrty.com",
    "domain_source": "plugin_uri",
    "domain_registered_at": "2024-11-27",
    "plugin_earliest_commit": "2023-07-26 08:24:37",
    "plugin_latest_release": "2026-05-25 13:19:41",
    "gap_days": 489,
    "domain_age_at_release": 544,
    "active_installs": 40000
}

{
    "slug": "oneclick-whatsapp-order",
    "domain": "walterpinem.com",
    "domain_source": "author_uri",
    "domain_registered_at": "2024-09-01",
    "plugin_earliest_commit": "2019-02-04 21:13:06",
    "plugin_latest_release": "2026-05-26 18:19:26",
    "gap_days": 2035,
    "domain_age_at_release": 632,
    "active_installs": 40000
}

{
    "slug": "widget-context",
    "previous_version": "1.3.3",
    "current_version": "1.4.0",
    "dormancy_days": 625,
    "active_installs": 40000
}

{
    "slug": "wp-job-openings",
    "new_contributors": [
        "fathima54321",
        "shilpaashokan94",
        "sruthi89",
        "vivekawsm"
    ],
    "active_installs": 40000
}

{
    "slug": "wp-last-modified-info",
    "domain": "co.in",
    "domain_source": "author_uri",
    "domain_registered_at": "2025-05-28",
    "plugin_earliest_commit": "2018-04-25 23:40:06",
    "plugin_latest_release": "2026-01-30 06:26:01",
    "gap_days": 2589,
    "domain_age_at_release": 247,
    "active_installs": 40000
}

{
    "slug": "wp-sweep",
    "previous_version": "1.1.8",
    "current_version": "1.1.9",
    "dormancy_days": 404,
    "active_installs": 100000
}

{
    "slug": "tuxedo-big-file-uploads",
    "new_contributors": [
        "bww"
    ],
    "active_installs": 100000
}

{
    "slug": "ameliabooking",
    "new_contributors": [
        "ivyforms"
    ],
    "active_installs": 90000
}

{
    "slug": "wp-job-portal",
    "previous_version": "2.5.2",
    "current_version": "2.5.4",
    "new_findings": [
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "modules/resume/tmpl/addresume.inc.php",
            "line": 900,
            "snippet": "eval(document.getElementById('script_' + id).innerHTML);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "modules/postinstallation/model.php",
            "line": 1936,
            "snippet": "$wpjobportal_result = json_decode(base64_decode($return_string),true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "modules/common/model.php",
            "line": 1600,
            "snippet": "$wpjobportal_string_val = base64_decode($wpjobportal_resume_id_string);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "modules/common/model.php",
            "line": 1601,
            "snippet": "$wpjobportal_string_val = base64_decode(strtr($wpjobportal_resume_id_string, '-_', '+/'));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "wp-job-portal.php",
            "line": 727,
            "snippet": "return json_decode(base64_decode($wpjobportal_array));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/lib/oauth_client.php",
            "line": 2314,
            "snippet": "$jwt = base64_decode($response['id_token']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/wpjobportalphplib.php",
            "line": 36,
            "snippet": "$wpjobportal_string = base64_decode($wpjobportal_string);",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 7
}

{
    "slug": "feedwordpress",
    "previous_version": "2025.1211",
    "current_version": "2026.0517",
    "new_findings": [
        {
            "pattern": "Upgrade",
            "kind": "ioc:changelog_phrase",
            "file": "readme.txt",
            "line": 1823,
            "snippet": "upgrade.",
            "confidence": "low"
        }
    ],
    "new_finding_count": 1
}

{
    "slug": "xcloner-backup-and-restore",
    "previous_version": "4.8.6",
    "current_version": "4.8.7",
    "new_findings": [
        {
            "pattern": "Upgrade",
            "kind": "ioc:changelog_phrase",
            "file": "README.txt",
            "line": 59,
            "snippet": "UPGRADE:",
            "confidence": "low"
        },
        {
            "pattern": "Upgrade",
            "kind": "ioc:changelog_phrase",
            "file": "README.txt",
            "line": 139,
            "snippet": "UPGRADE:",
            "confidence": "low"
        }
    ],
    "new_finding_count": 2
}

{
    "slug": "woocommerce-for-japan",
    "previous_version": "2.9.10",
    "current_version": "2.9.13",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/gateways/paidy/class-wc-paidy-apply-receiver.php",
            "line": 163,
            "snippet": "$decoded = base64_decode( (string) $filtered_params[ $field ], true );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 1
}

{
    "slug": "king-addons",
    "previous_version": "51.1.62",
    "current_version": "51.1.64",
    "new_findings": [
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "includes/widgets/Form_Builder/helpers/Upload_Email_File.php",
            "line": 222,
            "snippet": "'/eval\\s*\\(/i',        // eval() function",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/Admin.php",
            "line": 2155,
            "snippet": "$bytes = base64_decode($image_base64);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/extensions/AI_SEO_Tools/Post_Generator_Module.php",
            "line": 457,
            "snippet": "$bytes = base64_decode($b64);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/extensions/Image_Optimizer/Image_Optimizer_Ajax.php",
            "line": 264,
            "snippet": "$decoded = base64_decode($image_data);",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 4
}

{
    "slug": "wp-database-backup",
    "previous_version": "7.10",
    "current_version": "7.11",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/admin/Destination/SFTP/preflight.php",
            "line": 31,
            "snippet": "$wpdbbkp_pkey      = isset( $wpdbbkp_sftp_details['sftp_key'] ) ? base64_decode( $wpdbbkp_sftp_details['sftp_key'] ) : '';",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/admin/Destination/SFTP/sendaway.php",
            "line": 21,
            "snippet": "$wpdbbkp_pkey         = isset( $wpdbbkp_sftp_details['sftp_key'] ) ? base64_decode( $wpdbbkp_sftp_details['sftp_key'] ) : '';",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 2
}

{
    "slug": "zero-bs-crm",
    "previous_version": "6.7.3",
    "current_version": "6.8.0",
    "new_findings": [
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "includes/lib/pclzip-2-8-2/pclzip.lib.php7.php",
            "line": 2428,
            "snippet": "$v_file_content = @gzinflate($v_buffer);",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "includes/lib/pclzip-2-8-2/pclzip.lib.php7.php",
            "line": 2581,
            "snippet": "$v_file_content = gzinflate($v_buffer);",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "includes/lib/pclzip-2-8-2/pclzip.lib.php7.php",
            "line": 2649,
            "snippet": "if (($p_string = @gzinflate($v_data)) === false) {",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/ZeroBSCRM.Encryption.php",
            "line": 24,
            "snippet": "$output = openssl_decrypt(base64_decode($string), $encrypt_method, $key, 0, $iv);",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 4
}

{
    "slug": "wp-simple-firewall",
    "previous_version": "21.2.6",
    "current_version": "22.0.7",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/Modules/HackGuard/Scan/Queue/QueueItemVO.php",
            "line": 63,
            "snippet": "$decoded = \\base64_decode( $value, true );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/Scans/Afs/Scan.php",
            "line": 21,
            "snippet": "$path = \\base64_decode( (string)$item, true );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/Components/CompCons/Login/TwoFactor/Import/SolidSecurityBridge.php",
            "line": 160,
            "snippet": "$decoded = \\base64_decode( \\substr( $storedSecret, 4 ), true );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/league/uri/src/Uri.php",
            "line": 697,
            "snippet": "$userinfo = base64_decode(substr($server['HTTP_AUTHORIZATION'], 6), true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/league/uri/src/Uri.php",
            "line": 877,
            "snippet": "$res = base64_decode($data, true);",
            "confidence": "medium"
        },
        {
            "pattern": "hex_string_long",
            "kind": "builtin",
            "file": "vendor_prefixed/league/uri/src/Uri.php",
            "line": 199,
            "snippet": "private const ASCII = \"\\x20\\x65\\x69\\x61\\x73\\x6E\\x74\\x72\\x6F\\x6C\\x75\\x64\\x5D\\x5B\\x63\\x6D\\x70\\x27\\x0A\\x67\\x7C\\x68\\x76\\x2E\\x66\\x62\\x2C\\x3A\\x3D\\x2D\\x71\\x31\\x30\\x43\\x32\\x2A\\x79\\x78\\x29\\x28\\x4C\\x39\\x41\\",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/thecodingmachine/safe/src/functions.php",
            "line": 15,
            "snippet": "function base64_decode( string $data, bool $strict = false ) :string {",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/thecodingmachine/safe/src/functions.php",
            "line": 17,
            "snippet": "$result = \\base64_decode( $data, $strict );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/beberlei/assert/lib/Assert/Assertion.php",
            "line": 2115,
            "snippet": "if (false === \\base64_decode($value, true)) {",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/spomky-labs/base64url/src/Base64Url.php",
            "line": 49,
            "snippet": "$decoded = base64_decode(strtr($data, '-_', '+/'), true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/spomky-labs/cbor-php/src/Tag/Base64EncodingTag.php",
            "line": 56,
            "snippet": "$result = base64_decode($this->object->getNormalizedData($ignoreTags), true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/spomky-labs/cbor-php/src/Utils.php",
            "line": 52,
            "snippet": "$decoded = base64_decode(strtr($data, '-_', '+/'), true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/fgrosse/phpasn1/lib/ASN1/TemplateParser.php",
            "line": 28,
            "snippet": "return $this->parseBinary(base64_decode($data), $template);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/web-auth/metadata-service/src/SingleMetadata.php",
            "line": 45,
            "snippet": "$json = base64_decode($this->data, true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/web-auth/webauthn-lib/src/PublicKeyCredentialUserEntity.php",
            "line": 66,
            "snippet": "$id = base64_decode($json['id'], true);",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 20
}

{
    "slug": "user-registration",
    "previous_version": "5.1.6",
    "current_version": "5.2.0",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "modules/membership/includes/Admin/Services/PaymentGatewaysWebhookActions.php",
            "line": 90,
            "snippet": "$get_params = base64_decode( sanitize_text_field( wp_unslash( $_GET['ur-membership-return'] ) ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 1
}

{
    "slug": "wpdatatables",
    "previous_version": "6.5.0.6",
    "current_version": "6.5.0.8",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "integrations/ivyforms/ivyforms-integration.php",
            "line": 718,
            "snippet": "return false !== base64_decode( $base64_string, true );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 1
}

{
    "slug": "ultimate-social-media-icons",
    "previous_version": "2.9.7",
    "current_version": "2.9.8",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "helpers/sfsi_OAuth.php",
            "line": 232,
            "snippet": "$decoded_sig = base64_decode($signature);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "helpers/linkedin-api/linkedin-api.php",
            "line": 125,
            "snippet": "eval($eval);",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 2
}

{
    "slug": "official-facebook-pixel",
    "previous_version": "5.0.1",
    "current_version": "5.1.0",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/class-facebookwordpressoptions.php",
            "line": 861,
            "snippet": "return base64_encode( $iv . base64_decode( $encrypted ) ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_encode,WordPress.PHP.DiscouragedPHPFunctions.obfuscation_bas",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/class-facebookwordpressoptions.php",
            "line": 872,
            "snippet": "$raw       = base64_decode( $stored ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 2
}

{
    "slug": "funnel-builder",
    "new_contributors": [
        "teamfunnelkit"
    ],
    "active_installs": 40000
}

{
    "slug": "ithemes-sync",
    "new_contributors": [
        "nexcess"
    ],
    "active_installs": 30000
}

{
    "slug": "wp-job-manager",
    "new_contributors": [
        "jenhooks"
    ],
    "active_installs": 80000
}

{
    "slug": "the-events-calendar",
    "new_contributors": [
        "nexcess"
    ],
    "active_installs": 700000
}

{
    "slug": "facebook-for-woocommerce",
    "new_contributors": [
        "facebook"
    ],
    "active_installs": 500000
}

{
    "slug": "creative-mail-by-constant-contact",
    "new_contributors": [
        "constantcontact"
    ],
    "active_installs": 300000
}

{
    "slug": "stackable-ultimate-gutenberg-blocks",
    "new_contributors": [
        "freemius"
    ],
    "active_installs": 100000
}

{
    "slug": "themify-wc-product-filter",
    "previous_version": "1.5.4",
    "current_version": "1.5.5",
    "dormancy_days": 438,
    "active_installs": 20000
}

{
    "slug": "funnelkit-stripe-woo-payment-gateway",
    "author_slug": "teamfunnelkit",
    "author_display_name": "FunnelKit",
    "author_employer": null,
    "author_member_since": "2026-05-13",
    "earliest_plugin_commit": "2022-11-25 21:07:54",
    "plugin_age_at_author_join": 1264,
    "author_age_now_days": 3,
    "prior_committers": [
        "plugin-master",
        "amans2k",
        "teamwoofunnels"
    ],
    "active_installs": 20000
}

{
    "slug": "funnel-builder",
    "author_slug": "teamfunnelkit",
    "author_display_name": "FunnelKit",
    "author_employer": null,
    "author_member_since": "2026-05-13",
    "earliest_plugin_commit": "2021-10-30 14:53:46",
    "plugin_age_at_author_join": 1655,
    "author_age_now_days": 3,
    "prior_committers": [
        "teamwoofunnels",
        "amans2k"
    ],
    "active_installs": 40000
}

{
    "slug": "cart-for-woocommerce",
    "author_slug": "teamfunnelkit",
    "author_display_name": "FunnelKit",
    "author_employer": null,
    "author_member_since": "2026-05-13",
    "earliest_plugin_commit": "2023-02-09 00:38:22",
    "plugin_age_at_author_join": 1188,
    "author_age_now_days": 3,
    "prior_committers": [
        "plugin-master",
        "amans2k",
        "teamwoofunnels"
    ],
    "active_installs": 30000
}

{
    "slug": "wp-marketing-automations",
    "author_slug": "teamfunnelkit",
    "author_display_name": "FunnelKit",
    "author_employer": null,
    "author_member_since": "2026-05-13",
    "earliest_plugin_commit": "2019-11-13 20:33:47",
    "plugin_age_at_author_join": 2372,
    "author_age_now_days": 3,
    "prior_committers": [
        "plugin-master",
        "amans2k",
        "amrt_tri",
        "teamwoofunnels"
    ],
    "active_installs": 20000
}

{
    "slug": "information-reel",
    "closed_reason": "",
    "closed_date": "2026-05-09 00:00:00",
    "active_installs": 300,
    "serial_offender_note": "Severity bumped low\u2192medium: author gopiplus has 15 prior security-issue closures on wp.org."
}

{
    "slug": "cf7-grid-layout",
    "previous_version": "4.15.8",
    "current_version": "4.16.0",
    "dormancy_days": 694,
    "active_installs": 10000
}