Events

1,086 events (filtered). · Last rule pass 6h ago. · 30 open / 4,683 resolved overall.

State: Open Resolved All

Severity: All Critical High · 3 Medium · 3 Low · 24 Info

High committer_younger_than_plugin Sucuri Security – Auditing, Malware Scanner and Security Hardening (600k+ installs) Resolved 3mo ago

Slug	sucuri-scanner
Committer slug	`strimbu_cosmin`
Committer display name	`strimbu_cosmin`
Committer employer	—
Committer member since	2013-07-30
Committer first commit	2013-07-30 16:25:35
Committer commit count	8
Plugin listed author	`sucuri`
Earliest plugin commit	2011-11-18 16:09:12
Plugin age at join days	620
Committer age at join days	0
Active installs	600,000

View raw JSON

{
    "slug": "sucuri-scanner",
    "committer_slug": "strimbu_cosmin",
    "committer_display_name": "strimbu_cosmin",
    "committer_employer": null,
    "committer_member_since": "2013-07-30",
    "committer_first_commit": "2013-07-30 16:25:35",
    "committer_commit_count": 8,
    "plugin_listed_author": "sucuri",
    "earliest_plugin_commit": "2011-11-18 16:09:12",
    "plugin_age_at_join_days": 620,
    "committer_age_at_join_days": 0,
    "active_installs": 600000
}

High committer_younger_than_plugin WooCommerce (7M+ installs) Resolved 3mo ago

Slug	woocommerce
Committer slug	`athomo`
Committer display name	`athomo`
Committer employer	—
Committer member since	2024-01-25
Committer first commit	2024-04-29 15:46:36
Committer commit count	7
Plugin listed author	`automattic`
Earliest plugin commit	2011-09-05 12:09:19
Plugin age at join days	4,620
Committer age at join days	95
Active installs	7,000,000

View raw JSON

{
    "slug": "woocommerce",
    "committer_slug": "athomo",
    "committer_display_name": "athomo",
    "committer_employer": null,
    "committer_member_since": "2024-01-25",
    "committer_first_commit": "2024-04-29 15:46:36",
    "committer_commit_count": 7,
    "plugin_listed_author": "automattic",
    "earliest_plugin_commit": "2011-09-05 12:09:19",
    "plugin_age_at_join_days": 4620,
    "committer_age_at_join_days": 95,
    "active_installs": 7000000
}

High committer_younger_than_plugin Yoast SEO – Advanced SEO with real-time guidance and built-in AI (10M+ installs) Resolved 3mo ago

Slug	wordpress-seo
Committer slug	`linh.pham`
Committer display name	`linh.pham`
Committer employer	—
Committer member since	2013-04-23
Committer first commit	2013-04-23 17:30:16
Committer commit count	2
Plugin listed author	`yoast`
Earliest plugin commit	2009-01-02 10:09:08
Plugin age at join days	1,572
Committer age at join days	0
Active installs	10,000,000

View raw JSON

{
    "slug": "wordpress-seo",
    "committer_slug": "linh.pham",
    "committer_display_name": "linh.pham",
    "committer_employer": null,
    "committer_member_since": "2013-04-23",
    "committer_first_commit": "2013-04-23 17:30:16",
    "committer_commit_count": 2,
    "plugin_listed_author": "yoast",
    "earliest_plugin_commit": "2009-01-02 10:09:08",
    "plugin_age_at_join_days": 1572,
    "committer_age_at_join_days": 0,
    "active_installs": 10000000
}

High compromised_committer_burst Local Business Schema (JSON-LD) Lite (3k+ installs) Resolved 3mo ago

Slug	wpspeed-localbusiness-schema
Author slug	bestseogr
Burst start	2026-06-15 16:40:52
Burst end	2026-06-15 17:01:14
Burst commits	14
Burst window minutes	90
Tenure days	3,170
Distinct messages	9
Avg message length	18
Top message	`New 3.3.2 is Live!`
Top message count	4
Prt revert	—
Explanation	Established author committed 14 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "wpspeed-localbusiness-schema",
    "author_slug": "bestseogr",
    "burst_start": "2026-06-15 16:40:52",
    "burst_end": "2026-06-15 17:01:14",
    "burst_commits": 14,
    "burst_window_minutes": 90,
    "tenure_days": 3170,
    "distinct_messages": 9,
    "avg_message_length": 18.2,
    "top_message": "New 3.3.2 is Live!",
    "top_message_count": 4,
    "prt_revert": null,
    "explanation": "Established author committed 14 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High compromised_committer_burst SysBasics Customize My Account for WooCommerce – Live My Account Customizer (7k+ installs) Resolved 3mo ago

Slug	customize-my-account-for-woocommerce
Author slug	phppoet
Burst start	2026-06-06 10:54:03
Burst end	2026-06-06 12:22:06
Burst commits	15
Burst window minutes	90
Tenure days	1,912
Distinct messages	10
Avg message length	8
Top message	`sdfsdfsd`
Top message count	4
Prt revert	—
Explanation	Established author committed 15 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "customize-my-account-for-woocommerce",
    "author_slug": "phppoet",
    "burst_start": "2026-06-06 10:54:03",
    "burst_end": "2026-06-06 12:22:06",
    "burst_commits": 15,
    "burst_window_minutes": 90,
    "tenure_days": 1912,
    "distinct_messages": 10,
    "avg_message_length": 7.5,
    "top_message": "sdfsdfsd",
    "top_message_count": 4,
    "prt_revert": null,
    "explanation": "Established author committed 15 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High compromised_committer_burst WP Travel – Ultimate Travel Booking System, Tour Management Engine (3k+ installs) Resolved 3mo ago

Slug	wp-travel
Author slug	wptravel
Burst start	2026-06-23 06:08:52
Burst end	2026-06-23 06:35:38
Burst commits	21
Burst window minutes	90
Tenure days	2,726
Distinct messages	4
Avg message length	19
Top message	`added updated files`
Top message count	17
Prt revert	—
Explanation	Established author committed 21 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-06-23 06:08:52",
    "burst_end": "2026-06-23 06:35:38",
    "burst_commits": 21,
    "burst_window_minutes": 90,
    "tenure_days": 2726,
    "distinct_messages": 4,
    "avg_message_length": 18.6,
    "top_message": "added updated files",
    "top_message_count": 17,
    "prt_revert": null,
    "explanation": "Established author committed 21 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High compromised_committer_burst MultiParcels Shipping For WooCommerce (4k+ installs) Resolved 3mo ago

Slug	multiparcels-shipping-for-woocommerce
Author slug	multiparcels
Burst start	2026-06-15 08:17:01
Burst end	2026-06-15 09:42:46
Burst commits	23
Burst window minutes	90
Tenure days	2,699
Distinct messages	12
Avg message length	19
Top message	`30.26 version with js`
Top message count	10
Prt revert	—
Explanation	Established author committed 23 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "multiparcels-shipping-for-woocommerce",
    "author_slug": "multiparcels",
    "burst_start": "2026-06-15 08:17:01",
    "burst_end": "2026-06-15 09:42:46",
    "burst_commits": 23,
    "burst_window_minutes": 90,
    "tenure_days": 2699,
    "distinct_messages": 12,
    "avg_message_length": 18.5,
    "top_message": "30.26 version with js",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 23 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High compromised_committer_burst Visual Builder (200 installs) Resolved 3mo ago

Slug	visual-builder
Author slug	dastan800
Burst start	2026-06-08 19:57:05
Burst end	2026-06-08 20:14:33
Burst commits	19
Burst window minutes	90
Tenure days	554
Distinct messages	2
Avg message length	6
Top message	`update`
Top message count	18
Prt revert	—
Explanation	Established author committed 19 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "visual-builder",
    "author_slug": "dastan800",
    "burst_start": "2026-06-08 19:57:05",
    "burst_end": "2026-06-08 20:14:33",
    "burst_commits": 19,
    "burst_window_minutes": 90,
    "tenure_days": 554,
    "distinct_messages": 2,
    "avg_message_length": 6.2,
    "top_message": "update",
    "top_message_count": 18,
    "prt_revert": null,
    "explanation": "Established author committed 19 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High compromised_committer_burst Purchase Redirect for WooCommerce (100 installs) Resolved 3mo ago

Slug	purchase-redirect-for-woocommerce
Author slug	healomax
Burst start	2026-06-28 16:15:13
Burst end	2026-06-28 17:08:48
Burst commits	12
Burst window minutes	90
Tenure days	893
Distinct messages	8
Avg message length	11
Top message	`Readme 1.1.0`
Top message count	4
Prt revert	—
Explanation	Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "purchase-redirect-for-woocommerce",
    "author_slug": "healomax",
    "burst_start": "2026-06-28 16:15:13",
    "burst_end": "2026-06-28 17:08:48",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 893,
    "distinct_messages": 8,
    "avg_message_length": 10.9,
    "top_message": "Readme 1.1.0",
    "top_message_count": 4,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High compromised_committer_burst Speed Analyzer – Speed Test & Performance Audit (100 installs) Resolved 3mo ago

Slug	speed-analyzer
Author slug	dalibord
Burst start	2026-06-23 15:36:35
Burst end	2026-06-23 15:52:02
Burst commits	25
Burst window minutes	90
Tenure days	384
Distinct messages	3
Avg message length	10
Top message	`v. 1.18.4`
Top message count	23
Prt revert	—
Explanation	Established author committed 25 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "speed-analyzer",
    "author_slug": "dalibord",
    "burst_start": "2026-06-23 15:36:35",
    "burst_end": "2026-06-23 15:52:02",
    "burst_commits": 25,
    "burst_window_minutes": 90,
    "tenure_days": 384,
    "distinct_messages": 3,
    "avg_message_length": 10,
    "top_message": "v. 1.18.4",
    "top_message_count": 23,
    "prt_revert": null,
    "explanation": "Established author committed 25 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High compromised_committer_burst WRN Pricing Rules for WooCommerce (50 installs) Resolved 3mo ago

Slug	wr-price-list-for-woocommerce
Author slug	webreadynow
Burst start	2026-06-09 20:58:18
Burst end	2026-06-09 21:17:52
Burst commits	25
Burst window minutes	90
Tenure days	2,455
Distinct messages	8
Avg message length	25
Top message	Pushing plugin version 1.1.0
Top message count	13
Prt revert	—
Explanation	Established author committed 25 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "wr-price-list-for-woocommerce",
    "author_slug": "webreadynow",
    "burst_start": "2026-06-09 20:58:18",
    "burst_end": "2026-06-09 21:17:52",
    "burst_commits": 25,
    "burst_window_minutes": 90,
    "tenure_days": 2455,
    "distinct_messages": 8,
    "avg_message_length": 24.6,
    "top_message": "Pushing  plugin version 1.1.0",
    "top_message_count": 13,
    "prt_revert": null,
    "explanation": "Established author committed 25 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High compromised_committer_burst Smalk AI Analytics (40 installs) Resolved 3mo ago

Slug	smalk-ai-analytics
Author slug	smalker001
Burst start	2026-06-14 09:24:42
Burst end	2026-06-14 10:07:33
Burst commits	31
Burst window minutes	90
Tenure days	459
Distinct messages	2
Avg message length	11
Top message	`new_version`
Top message count	17
Prt revert	—
Explanation	Established author committed 31 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "smalk-ai-analytics",
    "author_slug": "smalker001",
    "burst_start": "2026-06-14 09:24:42",
    "burst_end": "2026-06-14 10:07:33",
    "burst_commits": 31,
    "burst_window_minutes": 90,
    "tenure_days": 459,
    "distinct_messages": 2,
    "avg_message_length": 11,
    "top_message": "new_version",
    "top_message_count": 17,
    "prt_revert": null,
    "explanation": "Established author committed 31 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High closed_plugin_resurrection Show Me The Cookies (400 installs) Resolved 3mo ago

Slug	show-me-the-cookies
Previously closed reason	`security-issue`
Author slug	versluis
Current version	`1.2`
Active installs	600
Explanation	Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.

View raw JSON

{
    "slug": "show-me-the-cookies",
    "previously_closed_reason": "security-issue",
    "author_slug": "versluis",
    "current_version": "1.2",
    "active_installs": 600,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

High author_changed Secure Your Admin (10 installs) Resolved 3mo ago

Slug	secure-your-admin
Previous profile	https://profiles.wordpress.org/k2klettern/
Current profile	https://profiles.wordpress.org/anonymized-14411924/
Active installs	10

View raw JSON

{
    "slug": "secure-your-admin",
    "previous_profile": "https://profiles.wordpress.org/k2klettern/",
    "current_profile": "https://profiles.wordpress.org/anonymized-14411924/",
    "active_installs": 10
}

High author_changed RevCanonical (10 installs) Resolved 3mo ago

Slug	revcanonical
Previous profile	https://profiles.wordpress.org/whomwah/
Current profile	https://profiles.wordpress.org/anonymized-1757117/
Active installs	10

View raw JSON

{
    "slug": "revcanonical",
    "previous_profile": "https://profiles.wordpress.org/whomwah/",
    "current_profile": "https://profiles.wordpress.org/anonymized-1757117/",
    "active_installs": 10
}

High closed_plugin_resurrection Flow-Flow Social Streams (8k+ installs) Resolved 3mo ago

Slug	flow-flow-social-streams
Previously closed reason	`security-issue`
Author slug	`looks_awesome`
Current version	`5.0.2`
Active installs	8,000
Explanation	Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.

View raw JSON

{
    "slug": "flow-flow-social-streams",
    "previously_closed_reason": "security-issue",
    "author_slug": "looks_awesome",
    "current_version": "5.0.2",
    "active_installs": 8000,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

High author_changed Atomic Slider Addons for Elementor (10 installs) Resolved 3mo ago

Slug	atomic-slider
Previous profile	https://profiles.wordpress.org/wpcaliph/
Current profile	https://profiles.wordpress.org/oyorox/
Active installs	0

View raw JSON

{
    "slug": "atomic-slider",
    "previous_profile": "https://profiles.wordpress.org/wpcaliph/",
    "current_profile": "https://profiles.wordpress.org/oyorox/",
    "active_installs": 0
}

High author_changed PubPla AI Help Center (— installs) Resolved 3mo ago

Slug	hamelp
Previous profile	https://profiles.wordpress.org/takahashi_fumiki/
Current profile	https://profiles.wordpress.org/tarosky/
Active installs	0

View raw JSON

{
    "slug": "hamelp",
    "previous_profile": "https://profiles.wordpress.org/takahashi_fumiki/",
    "current_profile": "https://profiles.wordpress.org/tarosky/",
    "active_installs": 0
}

High author_changed Fale Hafez (10 installs) Resolved 3mo ago

Slug	fale-hafez
Previous profile	https://profiles.wordpress.org/ejtem/
Current profile	https://profiles.wordpress.org/6arshid/
Active installs	10

View raw JSON

{
    "slug": "fale-hafez",
    "previous_profile": "https://profiles.wordpress.org/ejtem/",
    "current_profile": "https://profiles.wordpress.org/6arshid/",
    "active_installs": 10
}

High author_changed Development Assistant (10 installs) Resolved 3mo ago

Slug	development-assistant
Previous profile	https://profiles.wordpress.org/omgpress/
Current profile	https://profiles.wordpress.org/dpripa/
Active installs	10

View raw JSON

{
    "slug": "development-assistant",
    "previous_profile": "https://profiles.wordpress.org/omgpress/",
    "current_profile": "https://profiles.wordpress.org/dpripa/",
    "active_installs": 10
}

High committer_younger_than_plugin The Events Calendar (600k+ installs) Resolved 3mo ago

Slug	the-events-calendar
Committer slug	`patriciahillebrandt`
Committer display name	`patriciahillebrandt`
Committer employer	—
Committer member since	2017-04-07
Committer first commit	2017-11-01 14:52:47
Committer commit count	1
Plugin listed author	`stellarwp`
Earliest plugin commit	2009-12-17 14:09:39
Plugin age at join days	2,876
Committer age at join days	208
Active installs	700,000

View raw JSON

{
    "slug": "the-events-calendar",
    "committer_slug": "patriciahillebrandt",
    "committer_display_name": "patriciahillebrandt",
    "committer_employer": null,
    "committer_member_since": "2017-04-07",
    "committer_first_commit": "2017-11-01 14:52:47",
    "committer_commit_count": 1,
    "plugin_listed_author": "stellarwp",
    "earliest_plugin_commit": "2009-12-17 14:09:39",
    "plugin_age_at_join_days": 2876,
    "committer_age_at_join_days": 208,
    "active_installs": 700000
}

High committer_younger_than_plugin Sucuri Security – Auditing, Malware Scanner and Security Hardening (600k+ installs) Resolved 3mo ago

Slug	sucuri-scanner
Committer slug	`yorman`
Committer display name	`yorman`
Committer employer	—
Committer member since	2013-08-19
Committer first commit	2013-08-19 19:40:44
Committer commit count	459
Plugin listed author	`sucuri`
Earliest plugin commit	2011-11-18 16:09:12
Plugin age at join days	640
Committer age at join days	0
Active installs	600,000

View raw JSON

{
    "slug": "sucuri-scanner",
    "committer_slug": "yorman",
    "committer_display_name": "yorman",
    "committer_employer": null,
    "committer_member_since": "2013-08-19",
    "committer_first_commit": "2013-08-19 19:40:44",
    "committer_commit_count": 459,
    "plugin_listed_author": "sucuri",
    "earliest_plugin_commit": "2011-11-18 16:09:12",
    "plugin_age_at_join_days": 640,
    "committer_age_at_join_days": 0,
    "active_installs": 600000
}

High committer_younger_than_plugin Gutenberg (400k+ installs) Resolved 3mo ago

Slug	gutenberg
Committer slug	`gutenbergplugin`
Committer display name	`gutenbergplugin`
Committer employer	—
Committer member since	2021-01-04
Committer first commit	2021-01-06 17:30:19
Committer commit count	674
Plugin listed author	`wordpressdotorg`
Earliest plugin commit	2017-06-16 09:30:07
Plugin age at join days	1,300
Committer age at join days	2
Active installs	300,000

View raw JSON

{
    "slug": "gutenberg",
    "committer_slug": "gutenbergplugin",
    "committer_display_name": "gutenbergplugin",
    "committer_employer": null,
    "committer_member_since": "2021-01-04",
    "committer_first_commit": "2021-01-06 17:30:19",
    "committer_commit_count": 674,
    "plugin_listed_author": "wordpressdotorg",
    "earliest_plugin_commit": "2017-06-16 09:30:07",
    "plugin_age_at_join_days": 1300,
    "committer_age_at_join_days": 2,
    "active_installs": 300000
}

High committer_younger_than_plugin Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA (200k+ installs) Resolved 3mo ago

Slug	cleantalk-spam-protect
Committer slug	`sartemd174`
Committer display name	`Artyom Davydov`
Committer employer	—
Committer member since	2016-11-17
Committer first commit	2017-05-16 06:47:32
Committer commit count	99
Plugin listed author	`cleantalk`
Earliest plugin commit	2012-05-18 10:07:35
Plugin age at join days	1,823
Committer age at join days	180
Active installs	200,000

View raw JSON

{
    "slug": "cleantalk-spam-protect",
    "committer_slug": "sartemd174",
    "committer_display_name": "Artyom Davydov",
    "committer_employer": null,
    "committer_member_since": "2016-11-17",
    "committer_first_commit": "2017-05-16 06:47:32",
    "committer_commit_count": 99,
    "plugin_listed_author": "cleantalk",
    "earliest_plugin_commit": "2012-05-18 10:07:35",
    "plugin_age_at_join_days": 1823,
    "committer_age_at_join_days": 180,
    "active_installs": 200000
}

High committer_younger_than_plugin WPML Multilingual & Multicurrency for WooCommerce (100k+ installs) Resolved 3mo ago

Slug	woocommerce-multilingual
Committer slug	`sergey.r`
Committer display name	`sergey.r`
Committer employer	—
Committer member since	2014-07-10
Committer first commit	2015-03-03 13:16:22
Committer commit count	168
Plugin listed author	`amirhelzer`
Earliest plugin commit	2012-02-06 10:56:47
Plugin age at join days	1,121
Committer age at join days	236
Active installs	100,000

View raw JSON

{
    "slug": "woocommerce-multilingual",
    "committer_slug": "sergey.r",
    "committer_display_name": "sergey.r",
    "committer_employer": null,
    "committer_member_since": "2014-07-10",
    "committer_first_commit": "2015-03-03 13:16:22",
    "committer_commit_count": 168,
    "plugin_listed_author": "amirhelzer",
    "earliest_plugin_commit": "2012-02-06 10:56:47",
    "plugin_age_at_join_days": 1121,
    "committer_age_at_join_days": 236,
    "active_installs": 100000
}

High committer_younger_than_plugin Yoast SEO – Advanced SEO with real-time guidance and built-in AI (10M+ installs) Resolved 3mo ago

Slug	wordpress-seo
Committer slug	`omarreiss`
Committer display name	`Omar Reiss`
Committer employer	—
Committer member since	2014-10-16
Committer first commit	2015-02-17 09:09:21
Committer commit count	34
Plugin listed author	`yoast`
Earliest plugin commit	2009-01-02 10:09:08
Plugin age at join days	2,236
Committer age at join days	124
Active installs	10,000,000

View raw JSON

{
    "slug": "wordpress-seo",
    "committer_slug": "omarreiss",
    "committer_display_name": "Omar Reiss",
    "committer_employer": null,
    "committer_member_since": "2014-10-16",
    "committer_first_commit": "2015-02-17 09:09:21",
    "committer_commit_count": 34,
    "plugin_listed_author": "yoast",
    "earliest_plugin_commit": "2009-01-02 10:09:08",
    "plugin_age_at_join_days": 2236,
    "committer_age_at_join_days": 124,
    "active_installs": 10000000
}

High committer_younger_than_plugin WooCommerce (7M+ installs) Resolved 3mo ago

Slug	woocommerce
Committer slug	`claudiulodro`
Committer display name	`Claudiu Lodromanean`
Committer employer	—
Committer member since	2016-10-10
Committer first commit	2017-04-28 18:32:35
Committer commit count	9
Plugin listed author	`automattic`
Earliest plugin commit	2011-09-05 12:09:19
Plugin age at join days	2,062
Committer age at join days	200
Active installs	7,000,000

View raw JSON

{
    "slug": "woocommerce",
    "committer_slug": "claudiulodro",
    "committer_display_name": "Claudiu Lodromanean",
    "committer_employer": null,
    "committer_member_since": "2016-10-10",
    "committer_first_commit": "2017-04-28 18:32:35",
    "committer_commit_count": 9,
    "plugin_listed_author": "automattic",
    "earliest_plugin_commit": "2011-09-05 12:09:19",
    "plugin_age_at_join_days": 2062,
    "committer_age_at_join_days": 200,
    "active_installs": 7000000
}

High committer_younger_than_plugin WooCommerce (7M+ installs) Resolved 3mo ago

Slug	woocommerce
Committer slug	`peterfabian1000`
Committer display name	`Peter Fabian`
Committer employer	—
Committer member since	2017-10-30
Committer first commit	2018-05-23 15:30:10
Committer commit count	30
Plugin listed author	`automattic`
Earliest plugin commit	2011-09-05 12:09:19
Plugin age at join days	2,452
Committer age at join days	205
Active installs	7,000,000

View raw JSON

{
    "slug": "woocommerce",
    "committer_slug": "peterfabian1000",
    "committer_display_name": "Peter Fabian",
    "committer_employer": null,
    "committer_member_since": "2017-10-30",
    "committer_first_commit": "2018-05-23 15:30:10",
    "committer_commit_count": 30,
    "plugin_listed_author": "automattic",
    "earliest_plugin_commit": "2011-09-05 12:09:19",
    "plugin_age_at_join_days": 2452,
    "committer_age_at_join_days": 205,
    "active_installs": 7000000
}

High committer_younger_than_plugin Akismet Anti-spam: Spam Protection (5M+ installs) Resolved 3mo ago

Slug	akismet
Committer slug	`lessbloat`
Committer display name	`Dave Martin (lessbloat)`
Committer employer	—
Committer member since	2010-09-10
Committer first commit	2010-09-22 21:57:21
Committer commit count	29
Plugin listed author	`automattic`
Earliest plugin commit	2005-10-20 08:57:41
Plugin age at join days	1,798
Committer age at join days	12
Active installs	6,000,000

View raw JSON

{
    "slug": "akismet",
    "committer_slug": "lessbloat",
    "committer_display_name": "Dave Martin (lessbloat)",
    "committer_employer": null,
    "committer_member_since": "2010-09-10",
    "committer_first_commit": "2010-09-22 21:57:21",
    "committer_commit_count": 29,
    "plugin_listed_author": "automattic",
    "earliest_plugin_commit": "2005-10-20 08:57:41",
    "plugin_age_at_join_days": 1798,
    "committer_age_at_join_days": 12,
    "active_installs": 6000000
}

High compromised_committer_burst SysBasics Customize My Account for WooCommerce – Live My Account Customizer (7k+ installs) Resolved 3mo ago

Slug	customize-my-account-for-woocommerce
Author slug	phppoet
Burst start	2026-06-06 10:54:03
Burst end	2026-06-06 12:22:06
Burst commits	15
Burst window minutes	90
Tenure days	1,912
Distinct messages	10
Avg message length	8
Top message	`sdfsdfsd`
Top message count	4
Prt revert	—
Explanation	Established author committed 15 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "customize-my-account-for-woocommerce",
    "author_slug": "phppoet",
    "burst_start": "2026-06-06 10:54:03",
    "burst_end": "2026-06-06 12:22:06",
    "burst_commits": 15,
    "burst_window_minutes": 90,
    "tenure_days": 1912,
    "distinct_messages": 10,
    "avg_message_length": 7.5,
    "top_message": "sdfsdfsd",
    "top_message_count": 4,
    "prt_revert": null,
    "explanation": "Established author committed 15 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High compromised_committer_burst WP Travel – Ultimate Travel Booking System, Tour Management Engine (3k+ installs) Resolved 3mo ago

Slug	wp-travel
Author slug	wptravel
Burst start	2026-06-23 06:08:52
Burst end	2026-06-23 06:35:38
Burst commits	21
Burst window minutes	90
Tenure days	2,726
Distinct messages	4
Avg message length	19
Top message	`added updated files`
Top message count	17
Prt revert	—
Explanation	Established author committed 21 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-06-23 06:08:52",
    "burst_end": "2026-06-23 06:35:38",
    "burst_commits": 21,
    "burst_window_minutes": 90,
    "tenure_days": 2726,
    "distinct_messages": 4,
    "avg_message_length": 18.6,
    "top_message": "added updated files",
    "top_message_count": 17,
    "prt_revert": null,
    "explanation": "Established author committed 21 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High compromised_committer_burst MultiParcels Shipping For WooCommerce (4k+ installs) Resolved 3mo ago

Slug	multiparcels-shipping-for-woocommerce
Author slug	multiparcels
Burst start	2026-06-15 08:17:01
Burst end	2026-06-15 09:42:46
Burst commits	23
Burst window minutes	90
Tenure days	2,699
Distinct messages	12
Avg message length	19
Top message	`30.26 version with js`
Top message count	10
Prt revert	—
Explanation	Established author committed 23 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "multiparcels-shipping-for-woocommerce",
    "author_slug": "multiparcels",
    "burst_start": "2026-06-15 08:17:01",
    "burst_end": "2026-06-15 09:42:46",
    "burst_commits": 23,
    "burst_window_minutes": 90,
    "tenure_days": 2699,
    "distinct_messages": 12,
    "avg_message_length": 18.5,
    "top_message": "30.26 version with js",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 23 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High compromised_committer_burst Visual Builder (200 installs) Resolved 3mo ago

Slug	visual-builder
Author slug	dastan800
Burst start	2026-06-08 19:57:05
Burst end	2026-06-08 20:14:33
Burst commits	19
Burst window minutes	90
Tenure days	554
Distinct messages	2
Avg message length	6
Top message	`update`
Top message count	18
Prt revert	—
Explanation	Established author committed 19 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "visual-builder",
    "author_slug": "dastan800",
    "burst_start": "2026-06-08 19:57:05",
    "burst_end": "2026-06-08 20:14:33",
    "burst_commits": 19,
    "burst_window_minutes": 90,
    "tenure_days": 554,
    "distinct_messages": 2,
    "avg_message_length": 6.2,
    "top_message": "update",
    "top_message_count": 18,
    "prt_revert": null,
    "explanation": "Established author committed 19 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High compromised_committer_burst Purchase Redirect for WooCommerce (100 installs) Resolved 3mo ago

Slug	purchase-redirect-for-woocommerce
Author slug	healomax
Burst start	2026-06-28 16:15:13
Burst end	2026-06-28 17:08:48
Burst commits	12
Burst window minutes	90
Tenure days	893
Distinct messages	8
Avg message length	11
Top message	`Readme 1.1.0`
Top message count	4
Prt revert	—
Explanation	Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "purchase-redirect-for-woocommerce",
    "author_slug": "healomax",
    "burst_start": "2026-06-28 16:15:13",
    "burst_end": "2026-06-28 17:08:48",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 893,
    "distinct_messages": 8,
    "avg_message_length": 10.9,
    "top_message": "Readme 1.1.0",
    "top_message_count": 4,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High compromised_committer_burst Speed Analyzer – Speed Test & Performance Audit (100 installs) Resolved 3mo ago

Slug	speed-analyzer
Author slug	dalibord
Burst start	2026-06-23 15:36:35
Burst end	2026-06-23 15:52:02
Burst commits	25
Burst window minutes	90
Tenure days	384
Distinct messages	3
Avg message length	10
Top message	`v. 1.18.4`
Top message count	23
Prt revert	—
Explanation	Established author committed 25 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "speed-analyzer",
    "author_slug": "dalibord",
    "burst_start": "2026-06-23 15:36:35",
    "burst_end": "2026-06-23 15:52:02",
    "burst_commits": 25,
    "burst_window_minutes": 90,
    "tenure_days": 384,
    "distinct_messages": 3,
    "avg_message_length": 10,
    "top_message": "v. 1.18.4",
    "top_message_count": 23,
    "prt_revert": null,
    "explanation": "Established author committed 25 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High compromised_committer_burst WRN Pricing Rules for WooCommerce (50 installs) Resolved 3mo ago

Slug	wr-price-list-for-woocommerce
Author slug	webreadynow
Burst start	2026-06-09 20:58:18
Burst end	2026-06-09 21:17:52
Burst commits	25
Burst window minutes	90
Tenure days	2,455
Distinct messages	8
Avg message length	25
Top message	Pushing plugin version 1.1.0
Top message count	13
Prt revert	—
Explanation	Established author committed 25 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "wr-price-list-for-woocommerce",
    "author_slug": "webreadynow",
    "burst_start": "2026-06-09 20:58:18",
    "burst_end": "2026-06-09 21:17:52",
    "burst_commits": 25,
    "burst_window_minutes": 90,
    "tenure_days": 2455,
    "distinct_messages": 8,
    "avg_message_length": 24.6,
    "top_message": "Pushing  plugin version 1.1.0",
    "top_message_count": 13,
    "prt_revert": null,
    "explanation": "Established author committed 25 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High compromised_committer_burst Smalk AI Analytics (40 installs) Resolved 3mo ago

Slug	smalk-ai-analytics
Author slug	smalker001
Burst start	2026-06-14 09:24:42
Burst end	2026-06-14 10:07:33
Burst commits	31
Burst window minutes	90
Tenure days	459
Distinct messages	2
Avg message length	11
Top message	`new_version`
Top message count	17
Prt revert	—
Explanation	Established author committed 31 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "smalk-ai-analytics",
    "author_slug": "smalker001",
    "burst_start": "2026-06-14 09:24:42",
    "burst_end": "2026-06-14 10:07:33",
    "burst_commits": 31,
    "burst_window_minutes": 90,
    "tenure_days": 459,
    "distinct_messages": 2,
    "avg_message_length": 11,
    "top_message": "new_version",
    "top_message_count": 17,
    "prt_revert": null,
    "explanation": "Established author committed 31 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}

High bulk_committer_takeover Select All Categories and Taxonomies, Change Checkbox to Radio Buttons (3k+ installs) Resolved 3mo ago

Committer

mooveagency

Member since

2015-01-07

Plugins joined

Spread days

Earliest join

2018-08-16 10:20:26

Latest join

2018-10-10 07:34:59

Combined installs

8,060

Sample plugins

Slug	Active installs	First commit at
select-all-categories-and-taxonomies-change-checkbox-to-radio-buttons	3,000	2018-08-16 10:20:26
user-activity-tracking-and-log	3,000	2018-08-24 14:10:44
import-xml-feed	2,000	2018-08-16 11:32:36
redirect-404-to-parent	60	2018-08-16 11:24:57
contact-form-check-tester	0	2018-10-10 07:34:59
post-protection-and-registration-wall	0	2018-08-16 12:27:18

View raw JSON

{
    "committer": "mooveagency",
    "member_since": "2015-01-07",
    "plugins_joined": 6,
    "spread_days": 54,
    "earliest_join": "2018-08-16 10:20:26",
    "latest_join": "2018-10-10 07:34:59",
    "combined_installs": 8060,
    "sample_plugins": [
        {
            "slug": "select-all-categories-and-taxonomies-change-checkbox-to-radio-buttons",
            "active_installs": 3000,
            "first_commit_at": "2018-08-16 10:20:26"
        },
        {
            "slug": "user-activity-tracking-and-log",
            "active_installs": 3000,
            "first_commit_at": "2018-08-24 14:10:44"
        },
        {
            "slug": "import-xml-feed",
            "active_installs": 2000,
            "first_commit_at": "2018-08-16 11:32:36"
        },
        {
            "slug": "redirect-404-to-parent",
            "active_installs": 60,
            "first_commit_at": "2018-08-16 11:24:57"
        },
        {
            "slug": "contact-form-check-tester",
            "active_installs": 0,
            "first_commit_at": "2018-10-10 07:34:59"
        },
        {
            "slug": "post-protection-and-registration-wall",
            "active_installs": 0,
            "first_commit_at": "2018-08-16 12:27:18"
        }
    ]
}

High bulk_committer_takeover addthis (— installs) Resolved 3mo ago

Committer

arnavarro

Member since

—

Plugins joined

Spread days

Earliest join

2017-11-28 19:17:45

Latest join

2017-11-28 19:39:51

Combined installs

Sample plugins

Slug	Active installs	First commit at
addthis	0	2017-11-28 19:17:45
addthis-all	0	2017-11-28 19:35:08
addthis-follow	0	2017-11-28 19:26:19
addthis-related-posts	0	2017-11-28 19:30:01
addthis-smart-layers	0	2017-11-28 19:39:51

View raw JSON

{
    "committer": "arnavarro",
    "member_since": null,
    "plugins_joined": 5,
    "spread_days": 0,
    "earliest_join": "2017-11-28 19:17:45",
    "latest_join": "2017-11-28 19:39:51",
    "combined_installs": 0,
    "sample_plugins": [
        {
            "slug": "addthis",
            "active_installs": 0,
            "first_commit_at": "2017-11-28 19:17:45"
        },
        {
            "slug": "addthis-all",
            "active_installs": 0,
            "first_commit_at": "2017-11-28 19:35:08"
        },
        {
            "slug": "addthis-follow",
            "active_installs": 0,
            "first_commit_at": "2017-11-28 19:26:19"
        },
        {
            "slug": "addthis-related-posts",
            "active_installs": 0,
            "first_commit_at": "2017-11-28 19:30:01"
        },
        {
            "slug": "addthis-smart-layers",
            "active_installs": 0,
            "first_commit_at": "2017-11-28 19:39:51"
        }
    ]
}

High author_changed Alt Text & Image SEO — ALTification (20 installs) Resolved 3mo ago

Slug	altification
Previous profile	https://profiles.wordpress.org/robskinn/
Current profile	https://profiles.wordpress.org/afinestudio/
Active installs	20

View raw JSON

{
    "slug": "altification",
    "previous_profile": "https://profiles.wordpress.org/robskinn/",
    "current_profile": "https://profiles.wordpress.org/afinestudio/",
    "active_installs": 20
}

High author_changed Verdix Reviews (— installs) Resolved 3mo ago

Slug	verdix-reviews
Previous profile	https://profiles.wordpress.org/rebelcode/
Current profile	https://profiles.wordpress.org/jeangalea/
Active installs	0

View raw JSON

{
    "slug": "verdix-reviews",
    "previous_profile": "https://profiles.wordpress.org/rebelcode/",
    "current_profile": "https://profiles.wordpress.org/jeangalea/",
    "active_installs": 0
}

High closed_plugin_resurrection Style Manager (400 installs) Resolved 3mo ago

Slug	style-manager
Previously closed reason	`security-issue`
Author slug	pixelgrade
Current version	`2.3.0`
Active installs	400
Explanation	Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.

View raw JSON

{
    "slug": "style-manager",
    "previously_closed_reason": "security-issue",
    "author_slug": "pixelgrade",
    "current_version": "2.3.0",
    "active_installs": 400,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

High closed_plugin_resurrection Simply Show Hooks (1k+ installs) Malicious 3mo ago

Slug	simply-show-hooks
Previously closed reason	`security-issue`
Author slug	stuartobrien
Current version	`1.3.0`
Active installs	2,000
Explanation	Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.

View raw JSON

{
    "slug": "simply-show-hooks",
    "previously_closed_reason": "security-issue",
    "author_slug": "stuartobrien",
    "current_version": "1.3.0",
    "active_installs": 2000,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

High closed_plugin_resurrection HotelRunner Booking Widget (100 installs) Resolved 3mo ago

Slug	hotelrunner
Previously closed reason	`security-issue`
Author slug	integrationshotelrunner
Current version	`1.7`
Active installs	100
Explanation	Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.

View raw JSON

{
    "slug": "hotelrunner",
    "previously_closed_reason": "security-issue",
    "author_slug": "integrationshotelrunner",
    "current_version": "1.7",
    "active_installs": 100,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

High closed_plugin_resurrection Copy Move Posts (400 installs) Resolved 3mo ago

Slug	copy-move-posts
Previously closed reason	`security-issue`
Author slug	ujjavaljani
Current version	`1.7`
Active installs	400
Explanation	Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue — verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced.

View raw JSON

{
    "slug": "copy-move-posts",
    "previously_closed_reason": "security-issue",
    "author_slug": "ujjavaljani",
    "current_version": "1.7",
    "active_installs": 400,
    "explanation": "Plugin was previously closed by wp.org for a security issue and has now been reopened. Reopens of security-closed plugins are rare and typically indicate the original author fixed the issue \u2014 verify the current committer set matches the pre-closure state, and diff the current trunk against the pre-closure version to confirm no new payload was introduced."
}

High author_changed Ezone Pay (— installs) Resolved 3mo ago

Slug	ezone-pay
Previous profile	https://profiles.wordpress.org/anastaleb/
Current profile	https://profiles.wordpress.org/ezonepay/
Active installs	0

View raw JSON

{
    "slug": "ezone-pay",
    "previous_profile": "https://profiles.wordpress.org/anastaleb/",
    "current_profile": "https://profiles.wordpress.org/ezonepay/",
    "active_installs": 0
}

High author_changed TubeBay – YouTube Product Video Gallery & Embeds for WooCommerce (— installs) Resolved 3mo ago

Slug	tubebay
Previous profile	https://profiles.wordpress.org/sankarsan/
Current profile	https://profiles.wordpress.org/wpanchorbay/
Active installs	0

View raw JSON

{
    "slug": "tubebay",
    "previous_profile": "https://profiles.wordpress.org/sankarsan/",
    "current_profile": "https://profiles.wordpress.org/wpanchorbay/",
    "active_installs": 0
}

High author_changed Easy Subscribe (1k+ installs) Resolved 3mo ago

Slug	easy-subscribe
Previous profile	https://profiles.wordpress.org/marinmatosevic/
Current profile	https://profiles.wordpress.org/devnethr/
Active installs	700

View raw JSON

{
    "slug": "easy-subscribe",
    "previous_profile": "https://profiles.wordpress.org/marinmatosevic/",
    "current_profile": "https://profiles.wordpress.org/devnethr/",
    "active_installs": 700
}

High author_changed Custom Contact Forms (6k+ installs) Resolved 3mo ago

Slug	custom-contact-forms
Previous profile	https://profiles.wordpress.org/tlovett1/
Current profile	https://profiles.wordpress.org/outlawgt/
Active installs	6,000

View raw JSON

{
    "slug": "custom-contact-forms",
    "previous_profile": "https://profiles.wordpress.org/tlovett1/",
    "current_profile": "https://profiles.wordpress.org/outlawgt/",
    "active_installs": 6000
}

High compromised_committer_burst AIO Tools (All in One Tools) (100 installs) Resolved 3mo ago

Slug	aio-tools
Author slug	shostvn
Burst start	2026-06-02 07:54:22
Burst end	2026-06-02 08:02:57
Burst commits	14
Burst window minutes	90
Tenure days	1,834
Distinct messages	2
Avg message length	10
Top message	`= 3.0.7 =`
Top message count	13
Prt revert	—
Explanation	Established author committed 14 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.

View raw JSON

{
    "slug": "aio-tools",
    "author_slug": "shostvn",
    "burst_start": "2026-06-02 07:54:22",
    "burst_end": "2026-06-02 08:02:57",
    "burst_commits": 14,
    "burst_window_minutes": 90,
    "tenure_days": 1834,
    "distinct_messages": 2,
    "avg_message_length": 9.6,
    "top_message": "= 3.0.7 =",
    "top_message_count": 13,
    "prt_revert": null,
    "explanation": "Established author committed 14 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}