Events

859 events (filtered). · Last rule pass 13h ago. · 7 open / 4,649 resolved overall.

State: Open Resolved All
Medium code_scan_match Gravity PDF (20k+ installs) Resolved 4mo ago
Sluggravity-forms-pdf-extended
Finding count11
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinvendor_prefixed/league/uri/src/Uri.php585$userinfo = \base64_decode(\substr($server['HTTP_AUTHORIZATION'], 6), \true);medium
base64_decodebuiltinvendor_prefixed/league/uri/src/Uri.php725$res = \base64_decode($data, \true);medium
base64_decodebuiltinvendor_prefixed/league/uri-components/src/Components/DataPath.php184$res = \base64_decode($this->document, \true);medium
base64_decodebuiltinvendor_prefixed/league/uri-components/src/Components/DataPath.php336$data = $this->is_binary_data ? \base64_decode($this->document, \true) : \rawurldecode($this->document);medium
base64_decodebuiltinvendor_prefixed/league/uri-components/src/Components/DataPath.php372return new self($this->formatComponent($this->mimetype, $this->getParameters(), \false, \rawurlencode((string) \base64_decode($this->document, \true))));medium
createfuncbuiltinvendor_prefixed/gravitypdf/querypath/src/Helpers/QueryFilters.php93$function = \create_function('$index, $item', $fn);medium
createfuncbuiltinvendor_prefixed/gravitypdf/querypath/src/Helpers/QueryFilters.php350$fn = \create_function('$index, &$item', $lambda);medium
base64_decodebuiltinvendor_prefixed/gravitypdf/querypath/src/DOMQuery.php381$result = ['mime' => $matches[1] . '/' . $matches[2], 'data' => \base64_decode($matches[3])];medium
base64_decodebuiltinvendor_prefixed/mpdf/mpdf/src/Image/ImageProcessor.php110$data = \base64_decode($v[2]);medium
base64_decodebuiltinvendor_prefixed/mpdf/mpdf/src/CssManager.php215$file = $this->cache->write('_tempCSSidata' . \random_int(1, 10000) . '_' . $i . '.' . $idata[2][$i], \base64_decode($idata[3][$i]));medium
gzinflatebuiltinvendor_prefixed/setasign/fpdi/src/PdfParser/Filter/Flate.php55$data = @\gzinflate(\substr($oData, 2));medium
Resolved sha6990d8251d18ee8b279310a57f39598766c290ec
View raw JSON
{
    "slug": "gravity-forms-pdf-extended",
    "finding_count": 11,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/league/uri/src/Uri.php",
            "line": 585,
            "snippet": "$userinfo = \\base64_decode(\\substr($server['HTTP_AUTHORIZATION'], 6), \\true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/league/uri/src/Uri.php",
            "line": 725,
            "snippet": "$res = \\base64_decode($data, \\true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/league/uri-components/src/Components/DataPath.php",
            "line": 184,
            "snippet": "$res = \\base64_decode($this->document, \\true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/league/uri-components/src/Components/DataPath.php",
            "line": 336,
            "snippet": "$data = $this->is_binary_data ? \\base64_decode($this->document, \\true) : \\rawurldecode($this->document);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/league/uri-components/src/Components/DataPath.php",
            "line": 372,
            "snippet": "return new self($this->formatComponent($this->mimetype, $this->getParameters(), \\false, \\rawurlencode((string) \\base64_decode($this->document, \\true))));",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "vendor_prefixed/gravitypdf/querypath/src/Helpers/QueryFilters.php",
            "line": 93,
            "snippet": "$function = \\create_function('$index, $item', $fn);",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "vendor_prefixed/gravitypdf/querypath/src/Helpers/QueryFilters.php",
            "line": 350,
            "snippet": "$fn = \\create_function('$index, &$item', $lambda);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/gravitypdf/querypath/src/DOMQuery.php",
            "line": 381,
            "snippet": "$result = ['mime' => $matches[1] . '/' . $matches[2], 'data' => \\base64_decode($matches[3])];",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/mpdf/mpdf/src/Image/ImageProcessor.php",
            "line": 110,
            "snippet": "$data = \\base64_decode($v[2]);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor_prefixed/mpdf/mpdf/src/CssManager.php",
            "line": 215,
            "snippet": "$file = $this->cache->write('_tempCSSidata' . \\random_int(1, 10000) . '_' . $i . '.' . $idata[2][$i], \\base64_decode($idata[3][$i]));",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "vendor_prefixed/setasign/fpdi/src/PdfParser/Filter/Flate.php",
            "line": 55,
            "snippet": "$data = @\\gzinflate(\\substr($oData, 2));",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "6990d8251d18ee8b279310a57f39598766c290ec"
}
Medium code_scan_match Twentig Supercharged Block Editor – Blocks, Patterns, Starter Sites, Portfolio (20k+ installs) Resolved 4mo ago
Slugtwentig
Finding count2
Findings
PatternKindFileLineSnippetConfidence
add_footer_scriptioc:code_patterninc/classic/twentytwentyone/front-end.php564function twentig_twentyone_add_footer_script() {medium
add_footer_scriptioc:code_patterninc/classic/twentytwentyone/front-end.php581add_action( 'wp_footer', 'twentig_twentyone_add_footer_script' );medium
Resolved shaa6ba82c73e59f6f8a81610b73098eeecdd930488
View raw JSON
{
    "slug": "twentig",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "add_footer_script",
            "kind": "ioc:code_pattern",
            "file": "inc/classic/twentytwentyone/front-end.php",
            "line": 564,
            "snippet": "function twentig_twentyone_add_footer_script() {",
            "confidence": "medium"
        },
        {
            "pattern": "add_footer_script",
            "kind": "ioc:code_pattern",
            "file": "inc/classic/twentytwentyone/front-end.php",
            "line": 581,
            "snippet": "add_action( 'wp_footer', 'twentig_twentyone_add_footer_script' );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "a6ba82c73e59f6f8a81610b73098eeecdd930488"
}
Medium code_scan_match گرویتی فرم فارسی (20k+ installs) Resolved 4mo ago
Slugpersian-gravity-forms
Finding count2
Findings
PatternKindFileLineSnippetConfidence
backtick_execbuiltinincludes/sms/class-sent-list.php207$sql .= ' WHERE `message` LIKE "%%' . $wpdb->esc_like( $_REQUEST['s'] ) . '%%" OR `reciever` LIKE "%%' . $wpdb->esc_like( $_REQUEST['s'] ) . '%%" OR `sender` LIKE "%%' . $wpdb->esc_like( $_REQUESTmedium
preg_replace_e_modbuiltinincludes/sms/class-wp-sms-integrate-field.php828$final_message = preg_replace( '/%(.*?)%/ime', "\$template_vars['$1']", $string );medium
Resolved sha4c97e671179ed9658e44885a8548a823ed9438c7
View raw JSON
{
    "slug": "persian-gravity-forms",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "backtick_exec",
            "kind": "builtin",
            "file": "includes/sms/class-sent-list.php",
            "line": 207,
            "snippet": "$sql .= ' WHERE `message` LIKE \"%%' . $wpdb->esc_like( $_REQUEST['s'] ) . '%%\" OR `reciever` LIKE \"%%' . $wpdb->esc_like( $_REQUEST['s'] ) . '%%\"  OR `sender` LIKE \"%%' . $wpdb->esc_like( $_REQUEST",
            "confidence": "medium"
        },
        {
            "pattern": "preg_replace_e_mod",
            "kind": "builtin",
            "file": "includes/sms/class-wp-sms-integrate-field.php",
            "line": 828,
            "snippet": "$final_message = preg_replace( '/%(.*?)%/ime', \"\\$template_vars['$1']\", $string );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "4c97e671179ed9658e44885a8548a823ed9438c7"
}
Medium code_scan_match NextScripts: Social Networks Auto-Poster (20k+ installs) Resolved 4mo ago
Slugsocial-networks-auto-poster-facebook-twitter-g
Finding count14
Findings
PatternKindFileLineSnippetConfidence
createfuncbuiltinnxs_functions.php424if (!function_exists('nxs_html_to_utf8')){ function nxs_html_to_utf8X ($data){ var_dump($data); return preg_replace_callback("/\\&\\#([0-9]{3,10})\\;/", create_function ('$matches', ' var_dump($matchemedium
createfuncbuiltininc/nxs_functions_adv.php569} rename($tmpX, $tmpX.='.'.$imgType); register_shutdown_function(create_function('', "@unlink('{$tmpX}');")); file_put_contents($tmpX, $imgData);medium
gzinflatebuiltininc/nxs-http.php229if ( false !== ( $decompressed = @gzinflate( $compressed ) ) ) return $decompressed;medium
gzinflatebuiltininc/nxs-http.php240$decompressed = @gzinflate( substr($gzData, $i, -8) ); if ( false !== $decompressed ) return $decompressed;medium
gzinflatebuiltininc/nxs-http.php242$decompressed = @gzinflate( substr($gzData, 2) ); if ( false !== $decompressed ) return $decompressed;medium
base64_decodebuiltininc-cl/wl.php363<?php if ($options['wlBoardsList']!=''){ $gWLBoards = $options['wlBoardsList']; if ( base64_encode(base64_decode($gWLBoards)) === $gWLBoards) $gWLBoards = base64_decode($gWLBoards);medium
base64_decodebuiltininc-cl/wl.php466<?php if (!empty($ntOpt['wlBoardsList'])){ $gWLBoards = $ntOpt['wlBoardsList']; if ( base64_encode(base64_decode($gWLBoards)) === $gWLBoards) $gWLBoards = base64_decode($gWLBoards);medium
createfuncbuiltininc-cl/ap.api.php40rename($tmp, $tmp.='.png'); register_shutdown_function(create_function('', "unlink('{$tmp}');"));medium
createfuncbuiltininc-cl/vk.api.php28} rename($tmp, $tmp.='.png'); register_shutdown_function(create_function('', "unlink('{$tmp}');")); file_put_contents($tmp, $imgData);medium
createfuncbuiltininc-cl/st.api.php82rename($tmp, $tmp.='.png'); register_shutdown_function(create_function('', "unlink('{$tmp}');"));medium
createfuncbuiltininc-cl/fl.api.php40rename($tmp, $tmp.='.png'); register_shutdown_function(create_function('', "unlink('{$tmp}');"));medium
base64_decodebuiltininc-cl/apis/xmlrpc-client.php298$value = base64_decode($this->_currentTagContents);medium
base64_decodebuiltininc-cl/apis/OAuth.php200$decoded_sig = base64_decode($signature);medium
createfuncbuiltininc-cl/fp.api.php46rename($tmp, $tmp.='.png'); register_shutdown_function(create_function('', "unlink('{$tmp}');"));medium
Resolved shad3aa0472968d6fb4213c920687267aa386b90832
View raw JSON
{
    "slug": "social-networks-auto-poster-facebook-twitter-g",
    "finding_count": 14,
    "findings": [
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "nxs_functions.php",
            "line": 424,
            "snippet": "if (!function_exists('nxs_html_to_utf8')){ function nxs_html_to_utf8X ($data){ var_dump($data); return preg_replace_callback(\"/\\\\&\\\\#([0-9]{3,10})\\\\;/\", create_function ('$matches', ' var_dump($matche",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "inc/nxs_functions_adv.php",
            "line": 569,
            "snippet": "} rename($tmpX, $tmpX.='.'.$imgType);  register_shutdown_function(create_function('', \"@unlink('{$tmpX}');\")); file_put_contents($tmpX, $imgData);",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "inc/nxs-http.php",
            "line": 229,
            "snippet": "if ( false !== ( $decompressed = @gzinflate( $compressed ) ) ) return $decompressed;",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "inc/nxs-http.php",
            "line": 240,
            "snippet": "$decompressed = @gzinflate( substr($gzData, $i, -8) ); if ( false !== $decompressed ) return $decompressed;",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "inc/nxs-http.php",
            "line": 242,
            "snippet": "$decompressed = @gzinflate( substr($gzData, 2) ); if ( false !== $decompressed ) return $decompressed;",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "inc-cl/wl.php",
            "line": 363,
            "snippet": "<?php if ($options['wlBoardsList']!=''){ $gWLBoards = $options['wlBoardsList']; if ( base64_encode(base64_decode($gWLBoards)) === $gWLBoards) $gWLBoards = base64_decode($gWLBoards);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "inc-cl/wl.php",
            "line": 466,
            "snippet": "<?php if (!empty($ntOpt['wlBoardsList'])){ $gWLBoards = $ntOpt['wlBoardsList']; if ( base64_encode(base64_decode($gWLBoards)) === $gWLBoards) $gWLBoards = base64_decode($gWLBoards);",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "inc-cl/ap.api.php",
            "line": 40,
            "snippet": "rename($tmp, $tmp.='.png'); register_shutdown_function(create_function('', \"unlink('{$tmp}');\"));",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "inc-cl/vk.api.php",
            "line": 28,
            "snippet": "} rename($tmp, $tmp.='.png'); register_shutdown_function(create_function('', \"unlink('{$tmp}');\")); file_put_contents($tmp, $imgData);",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "inc-cl/st.api.php",
            "line": 82,
            "snippet": "rename($tmp, $tmp.='.png'); register_shutdown_function(create_function('', \"unlink('{$tmp}');\"));",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "inc-cl/fl.api.php",
            "line": 40,
            "snippet": "rename($tmp, $tmp.='.png'); register_shutdown_function(create_function('', \"unlink('{$tmp}');\"));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "inc-cl/apis/xmlrpc-client.php",
            "line": 298,
            "snippet": "$value = base64_decode($this->_currentTagContents);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "inc-cl/apis/OAuth.php",
            "line": 200,
            "snippet": "$decoded_sig = base64_decode($signature);",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "inc-cl/fp.api.php",
            "line": 46,
            "snippet": "rename($tmp, $tmp.='.png'); register_shutdown_function(create_function('', \"unlink('{$tmp}');\"));",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "d3aa0472968d6fb4213c920687267aa386b90832"
}
Medium code_scan_match WP Custom Admin Interface (30k+ installs) Resolved 4mo ago
Slugwp-custom-admin-interface
Finding count5
Findings
PatternKindFileLineSnippetConfidence
eval_callbuiltinwp-custom-admin-interface.php1,080@eval($stripPhpTags);medium
base64_decodebuiltinwp-custom-admin-interface.php787$extractedSettings = unserialize(base64_decode($settings), array('allowed_classes' => false));medium
base64_decodebuiltinwp-custom-admin-interface.php1,558$topLevelMenuDecoded = json_decode(base64_decode($topLevelMenu),true);medium
base64_decodebuiltinwp-custom-admin-interface.php1,564$subLevelMenuDecoded = json_decode(base64_decode($subLevelMenu),true);medium
base64_decodebuiltinwp-custom-admin-interface.php2,041$toolbarMenuDecoded = json_decode(base64_decode($toolbarMenu));medium
Resolved shaa02bf0a77834ba6b4cd7eb3c22ddbab046783fb9
View raw JSON
{
    "slug": "wp-custom-admin-interface",
    "finding_count": 5,
    "findings": [
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "wp-custom-admin-interface.php",
            "line": 1080,
            "snippet": "@eval($stripPhpTags);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "wp-custom-admin-interface.php",
            "line": 787,
            "snippet": "$extractedSettings = unserialize(base64_decode($settings), array('allowed_classes' => false));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "wp-custom-admin-interface.php",
            "line": 1558,
            "snippet": "$topLevelMenuDecoded = json_decode(base64_decode($topLevelMenu),true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "wp-custom-admin-interface.php",
            "line": 1564,
            "snippet": "$subLevelMenuDecoded = json_decode(base64_decode($subLevelMenu),true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "wp-custom-admin-interface.php",
            "line": 2041,
            "snippet": "$toolbarMenuDecoded = json_decode(base64_decode($toolbarMenu));",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "a02bf0a77834ba6b4cd7eb3c22ddbab046783fb9"
}
Slugwoocommerce-jetpack
Finding count13
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinincludes/class-wcj-cart-abandonment.php284parse_str( base64_decode( urldecode( $token ) ), $token ); //phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decodemedium
gzinflatebuiltinincludes/lib/FPDI/src/PdfParser/Filter/Flate.php48$data = @(\gzinflate(\substr($oData, $tries)));medium
base64_decodebuiltinincludes/lib/tcpdf/tcpdf.php7,700$signature = base64_decode(trim($signature));medium
base64_decodebuiltinincludes/lib/tcpdf/tcpdf.php10,941$signature = base64_decode($signature);medium
base64_decodebuiltinincludes/lib/tcpdf/tcpdf.php19,015$imgsrc = '@'.base64_decode(substr($imgsrc, 1));medium
base64_decodebuiltinincludes/lib/tcpdf/tcpdf.php19,018$imgsrc = '@'.base64_decode($reg[2]);medium
base64_decodebuiltinincludes/lib/tcpdf/tcpdf.php24,427$img = '@'.base64_decode(substr($img, strlen($m[0])));medium
hex_string_longbuiltinincludes/lib/tcpdf/tcpdf.php3,051$msg = "\x50\x6f\x77\x65\x72\x65\x64\x20\x62\x79\x20\x54\x43\x50\x44\x46\x20\x28\x77\x77\x77\x2e\x74\x63\x70\x64\x66\x2e\x6f\x72\x67\x29";medium
hex_string_longbuiltinincludes/lib/tcpdf/tcpdf.php3,052$lnk = "\x68\x74\x74\x70\x3a\x2f\x2f\x77\x77\x77\x2e\x74\x63\x70\x64\x66\x2e\x6f\x72\x67";medium
hex_string_longbuiltinincludes/lib/tcpdf/include/tcpdf_static.php94public static $enc_padding = "\x28\xBF\x4E\x5E\x4E\x75\x8A\x41\x64\x00\x4E\x56\xFF\xFA\x01\x08\x2E\x2E\x00\xB6\xD0\x68\x3E\x80\x2F\x0C\xA9\xFE\x64\x53\x69\x7A";medium
hex_string_longbuiltinincludes/lib/tcpdf/include/tcpdf_static.php128return "\x54\x43\x50\x44\x46\x20".self::getTCPDFVersion()."\x20\x28\x68\x74\x74\x70\x3a\x2f\x2f\x77\x77\x77\x2e\x74\x63\x70\x64\x66\x2e\x6f\x72\x67\x29";medium
base64_decodebuiltinincludes/class-wcj-emails-verification.php287$data = json_decode( base64_decode( sanitize_text_field( wp_unslash( $_GET['wcj_verified_email'] ) ) ), true ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decodemedium
base64_decodebuiltinincludes/class-wcj-emails-verification.php300$data = json_decode( base64_decode( sanitize_text_field( wp_unslash( $_GET['wcj_verify_email'] ) ) ), true ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decodemedium
Resolved sha4fe8309844e974fd105a168aa6b268760022f801
View raw JSON
{
    "slug": "woocommerce-jetpack",
    "finding_count": 13,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/class-wcj-cart-abandonment.php",
            "line": 284,
            "snippet": "parse_str( base64_decode( urldecode( $token ) ), $token ); //phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "includes/lib/FPDI/src/PdfParser/Filter/Flate.php",
            "line": 48,
            "snippet": "$data = @(\\gzinflate(\\substr($oData, $tries)));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/tcpdf.php",
            "line": 7700,
            "snippet": "$signature = base64_decode(trim($signature));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/tcpdf.php",
            "line": 10941,
            "snippet": "$signature = base64_decode($signature);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/tcpdf.php",
            "line": 19015,
            "snippet": "$imgsrc = '@'.base64_decode(substr($imgsrc, 1));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/tcpdf.php",
            "line": 19018,
            "snippet": "$imgsrc = '@'.base64_decode($reg[2]);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/tcpdf.php",
            "line": 24427,
            "snippet": "$img = '@'.base64_decode(substr($img, strlen($m[0])));",
            "confidence": "medium"
        },
        {
            "pattern": "hex_string_long",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/tcpdf.php",
            "line": 3051,
            "snippet": "$msg = \"\\x50\\x6f\\x77\\x65\\x72\\x65\\x64\\x20\\x62\\x79\\x20\\x54\\x43\\x50\\x44\\x46\\x20\\x28\\x77\\x77\\x77\\x2e\\x74\\x63\\x70\\x64\\x66\\x2e\\x6f\\x72\\x67\\x29\";",
            "confidence": "medium"
        },
        {
            "pattern": "hex_string_long",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/tcpdf.php",
            "line": 3052,
            "snippet": "$lnk = \"\\x68\\x74\\x74\\x70\\x3a\\x2f\\x2f\\x77\\x77\\x77\\x2e\\x74\\x63\\x70\\x64\\x66\\x2e\\x6f\\x72\\x67\";",
            "confidence": "medium"
        },
        {
            "pattern": "hex_string_long",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/include/tcpdf_static.php",
            "line": 94,
            "snippet": "public static $enc_padding = \"\\x28\\xBF\\x4E\\x5E\\x4E\\x75\\x8A\\x41\\x64\\x00\\x4E\\x56\\xFF\\xFA\\x01\\x08\\x2E\\x2E\\x00\\xB6\\xD0\\x68\\x3E\\x80\\x2F\\x0C\\xA9\\xFE\\x64\\x53\\x69\\x7A\";",
            "confidence": "medium"
        },
        {
            "pattern": "hex_string_long",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/include/tcpdf_static.php",
            "line": 128,
            "snippet": "return \"\\x54\\x43\\x50\\x44\\x46\\x20\".self::getTCPDFVersion().\"\\x20\\x28\\x68\\x74\\x74\\x70\\x3a\\x2f\\x2f\\x77\\x77\\x77\\x2e\\x74\\x63\\x70\\x64\\x66\\x2e\\x6f\\x72\\x67\\x29\";",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/class-wcj-emails-verification.php",
            "line": 287,
            "snippet": "$data = json_decode( base64_decode( sanitize_text_field( wp_unslash( $_GET['wcj_verified_email'] ) ) ), true ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/class-wcj-emails-verification.php",
            "line": 300,
            "snippet": "$data = json_decode( base64_decode( sanitize_text_field( wp_unslash( $_GET['wcj_verify_email'] ) ) ), true ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "4fe8309844e974fd105a168aa6b268760022f801"
}
Medium code_scan_match Schema – All In One Schema Rich Snippets (30k+ installs) Resolved 4mo ago
Slugall-in-one-schemaorg-rich-snippets
Finding count2
Findings
PatternKindFileLineSnippetConfidence
add_footer_scriptioc:code_patternadmin/index.php12add_action( 'admin_footer', 'add_footer_script' );medium
add_footer_scriptioc:code_patternadmin/index.php1,257function add_footer_script() {medium
Resolved sha92fb5a9baa5a7811220da03f63525d586a20df99
View raw JSON
{
    "slug": "all-in-one-schemaorg-rich-snippets",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "add_footer_script",
            "kind": "ioc:code_pattern",
            "file": "admin/index.php",
            "line": 12,
            "snippet": "add_action( 'admin_footer', 'add_footer_script' );",
            "confidence": "medium"
        },
        {
            "pattern": "add_footer_script",
            "kind": "ioc:code_pattern",
            "file": "admin/index.php",
            "line": 1257,
            "snippet": "function add_footer_script() {",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "92fb5a9baa5a7811220da03f63525d586a20df99"
}
Medium code_scan_match Security Plugin, Firewall & Malware Scanner with Auto Removal (40k+ installs) Resolved 4mo ago
Slugsecurity-malware-firewall
Finding count13
Findings
PatternKindFileLineSnippetConfidence
eval_callbuiltinlib/CleantalkSP/Common/Scanner/HeuristicAnalyser/Modules/Mathematics.php47$math_result = eval('return ' . $expression_string . ';');medium
base64_decodebuiltinlib/CleantalkSP/Common/Scanner/HeuristicAnalyser/Modules/Transformations.php44$data = base64_decode((string)$this->tokens->next2->value);medium
gzinflatebuiltinlib/CleantalkSP/Common/Scanner/HeuristicAnalyser/Modules/Transformations.php52$data = gzinflate((string)$this->tokens->next2->value);medium
eval_callbuiltininc/spbc-settings.php5,017'title' => 'eval()',medium
eval_callbuiltininc/spbc-settings.php5,018'desc' => __('The eval() language construct is very dangerous because it allows execution of arbitrary PHP code. Its use thus is discouraged.', 'security-malware-firewall')medium
eval_callbuiltininc/spbc-settings.php5,022'desc' => __('This function internally performs an eval() and as such has the same security issues as eval().', 'security-malware-firewall')medium
eval_callbuiltininc/spbc-settings.php5,077'title' => 'eval()',medium
eval_callbuiltininc/spbc-settings.php5,078'desc' => __('The eval() language construct is very dangerous because it allows execution of arbitrary PHP code. Its use thus is discouraged.', 'security-malware-firewall')medium
eval_callbuiltininc/spbc-settings.php5,082'desc' => __('This function internally performs an eval() and as such has the same security issues as eval().', 'security-malware-firewall')medium
base64_decodebuiltininc/spbc-settings.php5,065'title' => 'base64_decode()',medium
base64_decodebuiltininc/spbc-settings.php5,125'title' => 'base64_decode()',medium
createfuncbuiltininc/spbc-settings.php5,021'title' => 'create_function()',medium
createfuncbuiltininc/spbc-settings.php5,081'title' => 'create_function()',medium
Resolved sha36d074d34e550dcf8805d7bcc4c5af2fb134d94f
View raw JSON
{
    "slug": "security-malware-firewall",
    "finding_count": 13,
    "findings": [
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "lib/CleantalkSP/Common/Scanner/HeuristicAnalyser/Modules/Mathematics.php",
            "line": 47,
            "snippet": "$math_result = eval('return ' . $expression_string . ';');",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/CleantalkSP/Common/Scanner/HeuristicAnalyser/Modules/Transformations.php",
            "line": 44,
            "snippet": "$data = base64_decode((string)$this->tokens->next2->value);",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "lib/CleantalkSP/Common/Scanner/HeuristicAnalyser/Modules/Transformations.php",
            "line": 52,
            "snippet": "$data = gzinflate((string)$this->tokens->next2->value);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "inc/spbc-settings.php",
            "line": 5017,
            "snippet": "'title' => 'eval()',",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "inc/spbc-settings.php",
            "line": 5018,
            "snippet": "'desc'  => __('The eval() language construct is very dangerous because it allows execution of arbitrary PHP code. Its use thus is discouraged.', 'security-malware-firewall')",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "inc/spbc-settings.php",
            "line": 5022,
            "snippet": "'desc'  => __('This function internally performs an eval() and as such has the same security issues as eval().', 'security-malware-firewall')",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "inc/spbc-settings.php",
            "line": 5077,
            "snippet": "'title' => 'eval()',",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "inc/spbc-settings.php",
            "line": 5078,
            "snippet": "'desc'  => __('The eval() language construct is very dangerous because it allows execution of arbitrary PHP code. Its use thus is discouraged.', 'security-malware-firewall')",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "inc/spbc-settings.php",
            "line": 5082,
            "snippet": "'desc'  => __('This function internally performs an eval() and as such has the same security issues as eval().', 'security-malware-firewall')",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "inc/spbc-settings.php",
            "line": 5065,
            "snippet": "'title' => 'base64_decode()',",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "inc/spbc-settings.php",
            "line": 5125,
            "snippet": "'title' => 'base64_decode()',",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "inc/spbc-settings.php",
            "line": 5021,
            "snippet": "'title' => 'create_function()',",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "inc/spbc-settings.php",
            "line": 5081,
            "snippet": "'title' => 'create_function()',",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "36d074d34e550dcf8805d7bcc4c5af2fb134d94f"
}
Medium code_scan_match Cornerstone (20k+ installs) Resolved 4mo ago
Slugcornerstone
Finding count4
Findings
PatternKindFileLineSnippetConfidence
eval_callbuiltinincludes/class.utilities.php1,075return eval('return isset($arr' . $f_path . ');');medium
eval_callbuiltinincludes/class.utilities.php1,087eval('$item =& $arr' . $this->get_array_path($path) . ';');medium
createfuncbuiltinincludes/class.feeds.php50$cb = create_function('', 'return true;');medium
createfuncbuiltinincludes/class.post.php88$callback = create_function('$post', 'return $post->ID;');medium
Resolved sha8ed67f05e32d0610de68e1d6007cb0fc315b5370
View raw JSON
{
    "slug": "cornerstone",
    "finding_count": 4,
    "findings": [
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "includes/class.utilities.php",
            "line": 1075,
            "snippet": "return eval('return isset($arr' . $f_path . ');');",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "includes/class.utilities.php",
            "line": 1087,
            "snippet": "eval('$item =& $arr' . $this->get_array_path($path) . ';');",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "includes/class.feeds.php",
            "line": 50,
            "snippet": "$cb = create_function('', 'return true;');",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "includes/class.post.php",
            "line": 88,
            "snippet": "$callback = create_function('$post', 'return $post->ID;');",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "8ed67f05e32d0610de68e1d6007cb0fc315b5370"
}
Slugmaster-addons
Finding count3
Findings
PatternKindFileLineSnippetConfidence
createfuncbuiltinlib/markdown.php1,624$this->utf8_strlen = create_function('$text', 'return preg_match_all(medium
base64_decodebuiltininc/classes/twitteroauth/OAuth.php203$decoded_sig = base64_decode($signature);medium
eval_callbuiltininc/admin/widget-builder/class-widget-admin.php877eval('?>' . $html_code . '<?php ;');medium
Resolved sha5ee58de603e5fb1c2e87535af454be33bfb9a0bd
View raw JSON
{
    "slug": "master-addons",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "lib/markdown.php",
            "line": 1624,
            "snippet": "$this->utf8_strlen = create_function('$text', 'return preg_match_all(",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "inc/classes/twitteroauth/OAuth.php",
            "line": 203,
            "snippet": "$decoded_sig = base64_decode($signature);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "inc/admin/widget-builder/class-widget-admin.php",
            "line": 877,
            "snippet": "eval('?>' . $html_code . '<?php ;');",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "5ee58de603e5fb1c2e87535af454be33bfb9a0bd"
}
Medium code_scan_match MapPress – Google Maps, OpenStreetMap & Leaflet (30k+ installs) Resolved 4mo ago
Slugmappress-google-maps-for-wordpress
Finding count1
Findings
PatternKindFileLineSnippetConfidence
Upgradeioc:changelog_phrasereadme.txt88== Upgrade ==low
Resolved shada6efa2069bfe46f3a1498d880e1fc4ac5738724
View raw JSON
{
    "slug": "mappress-google-maps-for-wordpress",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "Upgrade",
            "kind": "ioc:changelog_phrase",
            "file": "readme.txt",
            "line": 88,
            "snippet": "== Upgrade ==",
            "confidence": "low"
        }
    ],
    "resolved_sha": "da6efa2069bfe46f3a1498d880e1fc4ac5738724"
}
Medium code_scan_match BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot (30k+ installs) Resolved 4mo ago
Slugbetterdocs
Finding count8
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinincludes/Dependencies/SuperClosure/Serializer.php93$signature = base64_decode(substr($serialized, 1, 44));medium
eval_callbuiltinincludes/Dependencies/SuperClosure/SerializableClosure.php207@eval("\${$__recursive_reference} = {$__data['code']};");medium
eval_callbuiltinincludes/Dependencies/SuperClosure/SerializableClosure.php210@eval("\$__closure = {$__data['code']};");medium
eval_callbuiltinincludes/Dependencies/PhpParser/PrettyPrinter/Standard.php481return 'eval(' . $this->p($node->expr) . ')';medium
backtick_execbuiltinincludes/Core/WriteWithAI.php339const isPostContent = `<?php echo isset( $_GET[ 'post' ] ) ? esc_html( get_the_content( $_GET[ 'post' ] ) ) : ''; // phpcs:ignore ?>`;medium
backtick_execbuiltinincludes/Core/WriteWithAI.php413let title = `<?php echo isset( $_GET[ 'post' ] ) ? esc_html( get_the_title( $_GET[ 'post' ] ) ) : ''; // phpcs:ignore ?>`;medium
backtick_execbuiltinincludes/Core/WriteWithAI.php418const promtTitle = `<?php echo isset( $_GET[ 'post' ] ) ? esc_html( get_the_title( $_GET[ 'post' ] ) ) : '{Documentation Title}'; // phpcs:ignore ?>`;medium
backtick_execbuiltinincludes/Core/WriteWithAI.php444const isPostContent = `<?php echo isset( $_GET[ 'post' ] ) ? esc_html( get_the_content( $_GET[ 'post' ] ) ) : ''; // phpcs:ignore ?>`;medium
Resolved shab0613aedc2a6e88ca536b899b73d150f88af4811
View raw JSON
{
    "slug": "betterdocs",
    "finding_count": 8,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/Dependencies/SuperClosure/Serializer.php",
            "line": 93,
            "snippet": "$signature = base64_decode(substr($serialized, 1, 44));",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "includes/Dependencies/SuperClosure/SerializableClosure.php",
            "line": 207,
            "snippet": "@eval(\"\\${$__recursive_reference} = {$__data['code']};\");",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "includes/Dependencies/SuperClosure/SerializableClosure.php",
            "line": 210,
            "snippet": "@eval(\"\\$__closure = {$__data['code']};\");",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "includes/Dependencies/PhpParser/PrettyPrinter/Standard.php",
            "line": 481,
            "snippet": "return 'eval(' . $this->p($node->expr) . ')';",
            "confidence": "medium"
        },
        {
            "pattern": "backtick_exec",
            "kind": "builtin",
            "file": "includes/Core/WriteWithAI.php",
            "line": 339,
            "snippet": "const isPostContent = `<?php echo isset( $_GET[ 'post' ] ) ? esc_html( get_the_content( $_GET[ 'post' ] ) ) : ''; // phpcs:ignore                   ?>`;",
            "confidence": "medium"
        },
        {
            "pattern": "backtick_exec",
            "kind": "builtin",
            "file": "includes/Core/WriteWithAI.php",
            "line": 413,
            "snippet": "let title = `<?php echo isset( $_GET[ 'post' ] ) ? esc_html( get_the_title( $_GET[ 'post' ] ) ) : ''; // phpcs:ignore                   ?>`;",
            "confidence": "medium"
        },
        {
            "pattern": "backtick_exec",
            "kind": "builtin",
            "file": "includes/Core/WriteWithAI.php",
            "line": 418,
            "snippet": "const promtTitle = `<?php echo isset( $_GET[ 'post' ] ) ? esc_html( get_the_title( $_GET[ 'post' ] ) ) : '{Documentation Title}'; // phpcs:ignore                   ?>`;",
            "confidence": "medium"
        },
        {
            "pattern": "backtick_exec",
            "kind": "builtin",
            "file": "includes/Core/WriteWithAI.php",
            "line": 444,
            "snippet": "const isPostContent = `<?php echo isset( $_GET[ 'post' ] ) ? esc_html( get_the_content( $_GET[ 'post' ] ) ) : ''; // phpcs:ignore                   ?>`;",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "b0613aedc2a6e88ca536b899b73d150f88af4811"
}
Medium code_scan_match MapGeo – Interactive Geo Maps (30k+ installs) Resolved 4mo ago
Sluginteractive-geo-maps
Finding count1
Findings
PatternKindFileLineSnippetConfidence
add_footer_scriptioc:code_patternsrc/Core.php326public function add_footer_scripts( $value ) {medium
Resolved sha7432ed11673db1bcbf926d805ec906019924332a
View raw JSON
{
    "slug": "interactive-geo-maps",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "add_footer_script",
            "kind": "ioc:code_pattern",
            "file": "src/Core.php",
            "line": 326,
            "snippet": "public function add_footer_scripts( $value ) {",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "7432ed11673db1bcbf926d805ec906019924332a"
}
Medium code_scan_match Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning (30k+ installs) Resolved 4mo ago
Slugwp-simple-firewall
Finding count30
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinsrc/Utilities/Forms/FormParams.php32$raw = \base64_decode( $raw );medium
base64_decodebuiltinsrc/Utilities/Tool/ConvertHtmlToPDF.php23return empty( $res[ 'is_base64' ] ) ? $res[ 'converted_content' ] : \base64_decode( $res[ 'converted_content' ] );medium
gzinflatebuiltinsrc/Modules/Plugin/Lib/Reporting/ReportingController.php58return ( new ConvertHtmlToPDF() )->run( \gzinflate( $report->content ) );medium
base64_decodebuiltinsrc/Modules/LoginGuard/Lib/TwoFactor/Provider/Passkey.php196return $this->verifyAuthResponse( \base64_decode( $otp ) )->success;medium
base64_decodebuiltinsrc/Modules/HackGuard/Lib/FileLocker/Ops/Diff.php44base64_decode( $res[ 'html' ][ 'css_default' ] ),medium
base64_decodebuiltinsrc/Modules/HackGuard/Lib/FileLocker/Ops/Diff.php45base64_decode( $res[ 'html' ][ 'content' ] )medium
base64_decodebuiltinsrc/Modules/HackGuard/Scan/Queue/QueueItemVO.php65$decoded = \base64_decode( $value, true );medium
base64_decodebuiltinsrc/Scans/Afs/Scan.php21$path = \base64_decode( (string)$item, true );medium
base64_decodebuiltinsrc/Scans/Afs/ResultItem.php106$value = \base64_decode( $value );medium
base64_decodebuiltinsrc/Scans/Afs/ScanFromFileMap.php27$fullPath = \base64_decode( $fullPath );medium
base64_decodebuiltinsrc/DBs/Mfa/Ops/Record.php20$value = @\json_decode( @\base64_decode( $value ), true );medium
base64_decodebuiltinsrc/DBs/Malware/Ops/Record.php30$value = \base64_decode( $value );medium
base64_decodebuiltinsrc/DBs/FileLocker/Ops/Record.php25$value = (string)\base64_decode( $value );medium
base64_decodebuiltinsrc/DBs/Snapshots/Ops/Record.php16$value = @\json_decode( @\base64_decode( $value ), true );medium
base64_decodebuiltinsrc/DBs/Rules/Ops/Record.php30$value = @\json_decode( @\base64_decode( (string)$value ), true );medium
Resolved shadd3934f54a053ae11586c9fc6f18fc4b0e2e5599
View raw JSON
{
    "slug": "wp-simple-firewall",
    "finding_count": 30,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/Utilities/Forms/FormParams.php",
            "line": 32,
            "snippet": "$raw = \\base64_decode( $raw );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/Utilities/Tool/ConvertHtmlToPDF.php",
            "line": 23,
            "snippet": "return empty( $res[ 'is_base64' ] ) ? $res[ 'converted_content' ] : \\base64_decode( $res[ 'converted_content' ] );",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "src/Modules/Plugin/Lib/Reporting/ReportingController.php",
            "line": 58,
            "snippet": "return ( new ConvertHtmlToPDF() )->run( \\gzinflate( $report->content ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/Modules/LoginGuard/Lib/TwoFactor/Provider/Passkey.php",
            "line": 196,
            "snippet": "return $this->verifyAuthResponse( \\base64_decode( $otp ) )->success;",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/Modules/HackGuard/Lib/FileLocker/Ops/Diff.php",
            "line": 44,
            "snippet": "base64_decode( $res[ 'html' ][ 'css_default' ] ),",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/Modules/HackGuard/Lib/FileLocker/Ops/Diff.php",
            "line": 45,
            "snippet": "base64_decode( $res[ 'html' ][ 'content' ] )",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/Modules/HackGuard/Scan/Queue/QueueItemVO.php",
            "line": 65,
            "snippet": "$decoded = \\base64_decode( $value, true );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/Scans/Afs/Scan.php",
            "line": 21,
            "snippet": "$path = \\base64_decode( (string)$item, true );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/Scans/Afs/ResultItem.php",
            "line": 106,
            "snippet": "$value = \\base64_decode( $value );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/Scans/Afs/ScanFromFileMap.php",
            "line": 27,
            "snippet": "$fullPath = \\base64_decode( $fullPath );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/DBs/Mfa/Ops/Record.php",
            "line": 20,
            "snippet": "$value = @\\json_decode( @\\base64_decode( $value ), true );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/DBs/Malware/Ops/Record.php",
            "line": 30,
            "snippet": "$value = \\base64_decode( $value );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/DBs/FileLocker/Ops/Record.php",
            "line": 25,
            "snippet": "$value = (string)\\base64_decode( $value );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/DBs/Snapshots/Ops/Record.php",
            "line": 16,
            "snippet": "$value = @\\json_decode( @\\base64_decode( $value ), true );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/DBs/Rules/Ops/Record.php",
            "line": 30,
            "snippet": "$value = @\\json_decode( @\\base64_decode( (string)$value ), true );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "dd3934f54a053ae11586c9fc6f18fc4b0e2e5599"
}
Medium code_scan_match CrawlWP SEO – Complete WordPress SEO Plugin with AI, Indexing & Search Performance (30k+ installs) Resolved 4mo ago
Slugmihdan-index-now
Finding count5
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinvendor-prefixed/google/apiclient/src/Client.php484$payload = \json_decode(\base64_decode($parts[1]), \true);medium
base64_decodebuiltinvendor-prefixed/firebase/php-jwt/src/JWT.php237$key = \base64_decode((string) \end($lines));medium
base64_decodebuiltinvendor-prefixed/firebase/php-jwt/src/JWT.php289$key = \base64_decode((string) \end($lines));medium
base64_decodebuiltinvendor-prefixed/firebase/php-jwt/src/JWT.php361return \base64_decode(self::convertBase64UrlToBase64($input));medium
eval_callbuiltinvendor-prefixed/nesbot/carbon/src/Carbon/Traits/Mixin.php92$context = eval(self::getAnonymousClassCodeForTrait($trait));medium
Resolved sha94701e9c19dfac01c6586da64e6b73e232e98a18
View raw JSON
{
    "slug": "mihdan-index-now",
    "finding_count": 5,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor-prefixed/google/apiclient/src/Client.php",
            "line": 484,
            "snippet": "$payload = \\json_decode(\\base64_decode($parts[1]), \\true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor-prefixed/firebase/php-jwt/src/JWT.php",
            "line": 237,
            "snippet": "$key = \\base64_decode((string) \\end($lines));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor-prefixed/firebase/php-jwt/src/JWT.php",
            "line": 289,
            "snippet": "$key = \\base64_decode((string) \\end($lines));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor-prefixed/firebase/php-jwt/src/JWT.php",
            "line": 361,
            "snippet": "return \\base64_decode(self::convertBase64UrlToBase64($input));",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "vendor-prefixed/nesbot/carbon/src/Carbon/Traits/Mixin.php",
            "line": 92,
            "snippet": "$context = eval(self::getAnonymousClassCodeForTrait($trait));",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "94701e9c19dfac01c6586da64e6b73e232e98a18"
}
Slugeasy-code-manager
Finding count2
Findings
PatternKindFileLineSnippetConfidence
eval_callbuiltinapp/Services/PhpValidator.php288$result = eval($code); // phpcs:ignore Squiz.PHP.Eval.Discouragedmedium
base64_decodebuiltinapp/Hooks/Handlers/AdminMenuHandler.php177$code = base64_decode($snippet['code']);medium
Resolved sha189e84f001c072e6ba91349ea76e6d5a38f8e3d1
View raw JSON
{
    "slug": "easy-code-manager",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "app/Services/PhpValidator.php",
            "line": 288,
            "snippet": "$result = eval($code); // phpcs:ignore Squiz.PHP.Eval.Discouraged",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "app/Hooks/Handlers/AdminMenuHandler.php",
            "line": 177,
            "snippet": "$code = base64_decode($snippet['code']);",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "189e84f001c072e6ba91349ea76e6d5a38f8e3d1"
}
Medium code_scan_match Easy Digital Downloads – eCommerce Payments and Subscriptions made easy (40k+ installs) Resolved 4mo ago
Slugeasy-digital-downloads
Finding count5
Findings
PatternKindFileLineSnippetConfidence
eval_callbuiltinlibraries/Carbon/src/Carbon/Traits/Mixin.php103$context = eval(self::getAnonymousClassCodeForTrait($trait));medium
base64_decodebuiltinsrc/Gateways/Square/Connection.php118$token_json = base64_decode( $encoded_tokens );medium
base64_decodebuiltinincludes/gateways/libs/amazon/IpnHandler.php226$signature = base64_decode($this->getMandatoryField("Signature"));medium
base64_decodebuiltinincludes/deprecated-functions.php501if ( base64_encode( base64_decode( $expire, true ) ) === $expire ) {medium
base64_decodebuiltinincludes/deprecated-functions.php502$expire = base64_decode( $expire ); // If it is a base64 string, decode it. Old expiration dates were in base64medium
Resolved sha11db55284a5947151031b5c69184dc81c1ff5035
View raw JSON
{
    "slug": "easy-digital-downloads",
    "finding_count": 5,
    "findings": [
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "libraries/Carbon/src/Carbon/Traits/Mixin.php",
            "line": 103,
            "snippet": "$context = eval(self::getAnonymousClassCodeForTrait($trait));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "src/Gateways/Square/Connection.php",
            "line": 118,
            "snippet": "$token_json = base64_decode( $encoded_tokens );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/gateways/libs/amazon/IpnHandler.php",
            "line": 226,
            "snippet": "$signature       = base64_decode($this->getMandatoryField(\"Signature\"));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/deprecated-functions.php",
            "line": 501,
            "snippet": "if ( base64_encode( base64_decode( $expire, true ) ) === $expire ) {",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/deprecated-functions.php",
            "line": 502,
            "snippet": "$expire = base64_decode( $expire ); // If it is a base64 string, decode it. Old expiration dates were in base64",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "11db55284a5947151031b5c69184dc81c1ff5035"
}
Medium code_scan_match Media Sync (50k+ installs) Resolved 4mo ago
Slugmedia-sync
Finding count3
Findings
PatternKindFileLineSnippetConfidence
Validate_Path(ioc:code_patternincludes/MediaSync.class.php628$validated_path = self::media_sync_validate_path($absolute_path);medium
Validate_Path(ioc:code_patternincludes/MediaSync.class.php1,011static private function media_sync_validate_path($path)medium
Validate_Path(ioc:code_patternincludes/MediaSync.class.php1,082$sub_dir_validated = self::media_sync_validate_path( self::$upload_dir_path . '/' . $sub_dir );medium
Resolved sha6f1a142d5c8267b605d7c636c3e2650054c7ecd1
View raw JSON
{
    "slug": "media-sync",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "Validate_Path(",
            "kind": "ioc:code_pattern",
            "file": "includes/MediaSync.class.php",
            "line": 628,
            "snippet": "$validated_path = self::media_sync_validate_path($absolute_path);",
            "confidence": "medium"
        },
        {
            "pattern": "Validate_Path(",
            "kind": "ioc:code_pattern",
            "file": "includes/MediaSync.class.php",
            "line": 1011,
            "snippet": "static private function media_sync_validate_path($path)",
            "confidence": "medium"
        },
        {
            "pattern": "Validate_Path(",
            "kind": "ioc:code_pattern",
            "file": "includes/MediaSync.class.php",
            "line": 1082,
            "snippet": "$sub_dir_validated = self::media_sync_validate_path( self::$upload_dir_path . '/' . $sub_dir );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "6f1a142d5c8267b605d7c636c3e2650054c7ecd1"
}
Medium code_scan_match WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content (40k+ installs) Resolved 4mo ago
Slugwp-rss-aggregator
Finding count5
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinv4/src/Handlers/FeedTemplates/RenderTemplateContentHandler.php99$options = json_decode(base64_decode($options), true);medium
createfuncbuiltinv4/includes/libraries/php-markdown/markdown.php1,653$this->utf8_strlen = create_function('$text', 'return preg_match_all(medium
gzinflatebuiltinv4/includes/feed-access.php565if ( ($decompressed = gzinflate( $this->body )) !== false ) {medium
base64_decodebuiltincore/src/Importer/RssImageFinder.php349$imgData = base64_decode( substr( $url, $commaPos + 1 ) );medium
base64_decodebuiltincore/src/IrPost/IrImage.php145$binary = base64_decode( $data );medium
Resolved sha216f5b5e600901e17597145c0447d2af5b71be54
View raw JSON
{
    "slug": "wp-rss-aggregator",
    "finding_count": 5,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "v4/src/Handlers/FeedTemplates/RenderTemplateContentHandler.php",
            "line": 99,
            "snippet": "$options = json_decode(base64_decode($options), true);",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "v4/includes/libraries/php-markdown/markdown.php",
            "line": 1653,
            "snippet": "$this->utf8_strlen = create_function('$text', 'return preg_match_all(",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "v4/includes/feed-access.php",
            "line": 565,
            "snippet": "if ( ($decompressed = gzinflate( $this->body )) !== false ) {",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/src/Importer/RssImageFinder.php",
            "line": 349,
            "snippet": "$imgData = base64_decode( substr( $url, $commaPos + 1 ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/src/IrPost/IrImage.php",
            "line": 145,
            "snippet": "$binary = base64_decode( $data );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "216f5b5e600901e17597145c0447d2af5b71be54"
}
Medium code_scan_match Simple Calendar – Google Calendar Plugin (50k+ installs) Resolved 4mo ago
Sluggoogle-calendar-events
Finding count7
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinthird-party/google/auth/src/Logging/LoggingTrait.php75return ['header' => base64_decode($header), 'token' => base64_decode($token)];medium
base64_decodebuiltinthird-party/google/apiclient/src/Client.php483$payload = json_decode(base64_decode($parts[1]), \true);medium
base64_decodebuiltinthird-party/firebase/php-jwt/src/JWT.php236$key = base64_decode((string) end($lines));medium
base64_decodebuiltinthird-party/firebase/php-jwt/src/JWT.php288$key = base64_decode((string) end($lines));medium
base64_decodebuiltinthird-party/firebase/php-jwt/src/JWT.php360return \base64_decode(self::convertBase64UrlToBase64($input));medium
eval_callbuiltinthird-party/nesbot/carbon/src/Carbon/Traits/Mixin.php91$context = eval(self::getAnonymousClassCodeForTrait($trait));medium
base64_decodebuiltinincludes/feeds/google.php143return base64_decode($id);medium
Resolved sha31c791754f0db4207c4fe1172148e896640ebe00
View raw JSON
{
    "slug": "google-calendar-events",
    "finding_count": 7,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "third-party/google/auth/src/Logging/LoggingTrait.php",
            "line": 75,
            "snippet": "return ['header' => base64_decode($header), 'token' => base64_decode($token)];",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "third-party/google/apiclient/src/Client.php",
            "line": 483,
            "snippet": "$payload = json_decode(base64_decode($parts[1]), \\true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "third-party/firebase/php-jwt/src/JWT.php",
            "line": 236,
            "snippet": "$key = base64_decode((string) end($lines));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "third-party/firebase/php-jwt/src/JWT.php",
            "line": 288,
            "snippet": "$key = base64_decode((string) end($lines));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "third-party/firebase/php-jwt/src/JWT.php",
            "line": 360,
            "snippet": "return \\base64_decode(self::convertBase64UrlToBase64($input));",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "third-party/nesbot/carbon/src/Carbon/Traits/Mixin.php",
            "line": 91,
            "snippet": "$context = eval(self::getAnonymousClassCodeForTrait($trait));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/feeds/google.php",
            "line": 143,
            "snippet": "return base64_decode($id);",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "31c791754f0db4207c4fe1172148e896640ebe00"
}
Medium code_scan_match Seraphinite Accelerator (50k+ installs) Resolved 4mo ago
Slugseraphinite-accelerator
Finding count9
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltincommon.php3,462$settContPrOverride = @json_decode( @base64_decode( $settContPrOverride ), true );medium
base64_decodebuiltincommon.php6,010$prms = @json_decode( @base64_decode( Gen::SanitizeTextData( $prms ) ), true );medium
base64_decodebuiltincommon.php6,141return( Gen::GetArrField( unserialize( ( string )base64_decode( Gen::GetArrField( $sett, array( 'cache', '_vPth' ), '' ) ) ), array( '' ), array() ) );medium
gzinflatebuiltincommon.php3,278case '.deflu': $oiCd = @gzinflate( $oiCd . "\x03\0" ); break;medium
base64_decodebuiltinCmn/Gen.php440$str = base64_decode( $str );medium
base64_decodebuiltinCmn/Gen.php3,923return( @json_decode( @base64_decode( $v ), true ) );medium
base64_decodebuiltinCmn/Plugin.php2,567$opsRes = @json_decode( base64_decode( stripslashes( $opsRes ) ), true );medium
base64_decodebuiltinCmn/Ui.php440return( $encoding == 'base64' ? base64_decode( $data ) : rawurldecode( $data ) );medium
gzinflatebuiltincache_ex.php424case '.deflu': $oiCd = @gzinflate( $oiCd . "\x03\0" ); break;medium
Resolved shab6f5a3fcc05c50f1c232507c9be541afb3620cc6
View raw JSON
{
    "slug": "seraphinite-accelerator",
    "finding_count": 9,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "common.php",
            "line": 3462,
            "snippet": "$settContPrOverride = @json_decode( @base64_decode( $settContPrOverride ), true );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "common.php",
            "line": 6010,
            "snippet": "$prms = @json_decode( @base64_decode( Gen::SanitizeTextData( $prms ) ), true );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "common.php",
            "line": 6141,
            "snippet": "return( Gen::GetArrField( unserialize( ( string )base64_decode( Gen::GetArrField( $sett, array( 'cache', '_vPth' ), '' ) ) ), array( '' ), array() ) );",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "common.php",
            "line": 3278,
            "snippet": "case '.deflu':\t\t$oiCd = @gzinflate( $oiCd . \"\\x03\\0\" ); break;",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Cmn/Gen.php",
            "line": 440,
            "snippet": "$str = base64_decode( $str );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Cmn/Gen.php",
            "line": 3923,
            "snippet": "return( @json_decode( @base64_decode( $v ), true ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Cmn/Plugin.php",
            "line": 2567,
            "snippet": "$opsRes = @json_decode( base64_decode( stripslashes( $opsRes ) ), true );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Cmn/Ui.php",
            "line": 440,
            "snippet": "return( $encoding == 'base64' ? base64_decode( $data ) : rawurldecode( $data ) );",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "cache_ex.php",
            "line": 424,
            "snippet": "case '.deflu':\t\t$oiCd = @gzinflate( $oiCd . \"\\x03\\0\" ); break;",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "b6f5a3fcc05c50f1c232507c9be541afb3620cc6"
}
Medium code_scan_match Export and Import Users and Customers (60k+ installs) Resolved 4mo ago
Slugusers-customers-import-export-for-wp-woocommerce
Finding count2
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinadmin/modules/user/import/import.php488$session_json = base64_decode($meta_array[$key]);medium
eval_callbuiltinadmin/modules/import/import.php1,320$replace[] = eval('return '.$synatx.';');medium
Resolved shaf88202b40cd8cab829020d9f29e13d8951b7fa52
View raw JSON
{
    "slug": "users-customers-import-export-for-wp-woocommerce",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "admin/modules/user/import/import.php",
            "line": 488,
            "snippet": "$session_json = base64_decode($meta_array[$key]);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "admin/modules/import/import.php",
            "line": 1320,
            "snippet": "$replace[] = eval('return '.$synatx.';');",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "f88202b40cd8cab829020d9f29e13d8951b7fa52"
}
Medium code_scan_match Media Library Assistant (70k+ installs) Resolved 4mo ago
Slugmedia-library-assistant
Finding count6
Findings
PatternKindFileLineSnippetConfidence
gzinflatebuiltinincludes/class-mla-data-pdf.php78$decoded = @gzinflate( $encodedData );medium
gzinflatebuiltinincludes/class-mla-data-pdf.php81$decoded = @gzinflate( $stripped );medium
base64_decodebuiltinincludes/class-mla-core.php1,130$data = base64_decode( $mla_item );medium
createfuncbuiltinexamples/plugins/mla-ui-elements-example/mla-ui-elements-example.php1,057$function = @create_function('', 'return ' . $arguments['sort_fields'] . ';' );medium
createfuncbuiltinexamples/plugins/mla-a-z-cloud-example.php537$function = @create_function( '', 'return ' . self::$shortcode_attributes[ $parmkey ] . ';' );medium
createfuncbuiltinexamples/plugins/mla-fixed-values-example.php117$function = @create_function( '', 'return ' . self::$shortcode_attributes[ $parmkey ] . ';' );medium
Resolved shac72b30f229c947df4a8ec9a4496a2fccebbd3094
View raw JSON
{
    "slug": "media-library-assistant",
    "finding_count": 6,
    "findings": [
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "includes/class-mla-data-pdf.php",
            "line": 78,
            "snippet": "$decoded = @gzinflate( $encodedData );",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "includes/class-mla-data-pdf.php",
            "line": 81,
            "snippet": "$decoded = @gzinflate( $stripped );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/class-mla-core.php",
            "line": 1130,
            "snippet": "$data = base64_decode( $mla_item );",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "examples/plugins/mla-ui-elements-example/mla-ui-elements-example.php",
            "line": 1057,
            "snippet": "$function = @create_function('', 'return ' . $arguments['sort_fields'] . ';' );",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "examples/plugins/mla-a-z-cloud-example.php",
            "line": 537,
            "snippet": "$function = @create_function( '', 'return ' . self::$shortcode_attributes[ $parmkey ] . ';' );",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "examples/plugins/mla-fixed-values-example.php",
            "line": 117,
            "snippet": "$function = @create_function( '', 'return ' . self::$shortcode_attributes[ $parmkey ] . ';' );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "c72b30f229c947df4a8ec9a4496a2fccebbd3094"
}
Medium code_scan_match wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin (60k+ installs) Resolved 4mo ago
Slugwpdatatables
Finding count7
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinlib/phpoffice/phpspreadsheet/src/PhpSpreadsheet/Shared/PasswordHasher.php99$saltValue = base64_decode($salt);medium
eval_callbuiltinlib/ezyang/htmlpurifier/library/HTMLPurifier/ConfigSchema/InterchangeBuilder.php182return eval('return array(' . $contents . ');');medium
base64_decodebuiltinlib/ezyang/htmlpurifier/library/HTMLPurifier/URIScheme/data.php78$raw_data = base64_decode($data);medium
eval_callbuiltinlib/ezyang/htmlpurifier/library/HTMLPurifier/VarParser/Native.php30$result = eval("\$var = $expr;");medium
base64_decodebuiltinlib/firebase/php-jwt/src/JWT.php274$key = base64_decode((string) end($lines));medium
base64_decodebuiltinlib/firebase/php-jwt/src/JWT.php334$key = base64_decode((string) end($lines));medium
base64_decodebuiltinlib/firebase/php-jwt/src/JWT.php415return \base64_decode(self::convertBase64UrlToBase64($input));medium
Resolved sha59fc80b97f8e030f8c7862c835715edf534113fd
View raw JSON
{
    "slug": "wpdatatables",
    "finding_count": 7,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/phpoffice/phpspreadsheet/src/PhpSpreadsheet/Shared/PasswordHasher.php",
            "line": 99,
            "snippet": "$saltValue = base64_decode($salt);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "lib/ezyang/htmlpurifier/library/HTMLPurifier/ConfigSchema/InterchangeBuilder.php",
            "line": 182,
            "snippet": "return eval('return array(' . $contents . ');');",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/ezyang/htmlpurifier/library/HTMLPurifier/URIScheme/data.php",
            "line": 78,
            "snippet": "$raw_data = base64_decode($data);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "lib/ezyang/htmlpurifier/library/HTMLPurifier/VarParser/Native.php",
            "line": 30,
            "snippet": "$result = eval(\"\\$var = $expr;\");",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/firebase/php-jwt/src/JWT.php",
            "line": 274,
            "snippet": "$key = base64_decode((string) end($lines));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/firebase/php-jwt/src/JWT.php",
            "line": 334,
            "snippet": "$key = base64_decode((string) end($lines));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/firebase/php-jwt/src/JWT.php",
            "line": 415,
            "snippet": "return \\base64_decode(self::convertBase64UrlToBase64($input));",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "59fc80b97f8e030f8c7862c835715edf534113fd"
}
Slugwebappick-product-feed-for-woocommerce
Finding count3
Findings
PatternKindFileLineSnippetConfidence
gzinflatebuiltinV5/Common/ImportFeed.php44$feed = gzinflate( $data );medium
eval_callbuiltinV5/Template/Custom2Template.php374return eval( $return );medium
eval_callbuiltinV5/Template/Custom2Template.php396return eval( $return );medium
Resolved sha14d99f13ba3278a1976b3518fd7d9f622241ded3
View raw JSON
{
    "slug": "webappick-product-feed-for-woocommerce",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "V5/Common/ImportFeed.php",
            "line": 44,
            "snippet": "$feed = gzinflate( $data );",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "V5/Template/Custom2Template.php",
            "line": 374,
            "snippet": "return eval( $return );",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "V5/Template/Custom2Template.php",
            "line": 396,
            "snippet": "return eval( $return );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "14d99f13ba3278a1976b3518fd7d9f622241ded3"
}
Medium code_scan_match پارسی دیت – Parsi Date (100k+ installs) Resolved 4mo ago
Slugwp-parsidate
Finding count18
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltininc/App/Integration/WooCommerce/wc-gateways/wpp-melli-gateway.php127$key = base64_decode( $key );medium
eval_callbuiltininc/App/Integration/WooCommerce/wc-gateways/lib/class-rsa.php218eval( "\$ret[" . implode( $hash_stack, "][" ) . "] = '{$val[value]}';" );medium
base64_decodebuiltininc/App/Integration/WooCommerce/wc-gateways/lib/class-rsa.php154$this->modulus = RSA::binary_to_number( base64_decode( $xmlObj->Modulus ) );medium
base64_decodebuiltininc/App/Integration/WooCommerce/wc-gateways/lib/class-rsa.php155$this->public_key = RSA::binary_to_number( base64_decode( $xmlObj->Exponent ) );medium
base64_decodebuiltininc/App/Integration/WooCommerce/wc-gateways/lib/class-rsa.php156$this->private_key = RSA::binary_to_number( base64_decode( $xmlObj->D ) );medium
base64_decodebuiltininc/App/Integration/WooCommerce/wc-gateways/lib/class-rsa.php157$this->key_length = strlen( base64_decode( $xmlObj->Modulus ) ) * 8;medium
eval_callbuiltininc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php4,328$this->debug( 'in invoke_method, calling function using eval()' );medium
eval_callbuiltininc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php4,332$this->debug( 'in invoke_method, calling class method using eval()' );medium
eval_callbuiltininc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php4,335$this->debug( 'in invoke_method, calling instance method using eval()' );medium
eval_callbuiltininc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php4,356@eval( $funcCall );medium
eval_callbuiltininc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php8,526eval( $evalStr );medium
eval_callbuiltininc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php8,529eval( "\$proxy = new nusoap_proxy_$r('');" );medium
base64_decodebuiltininc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php7,576return base64_decode( $value );medium
gzinflatebuiltininc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php3,480if ( $degzdata = @gzinflate( $data ) ) {medium
gzinflatebuiltininc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php3,486if ( $degzdata = @gzinflate( $data ) ) {medium
Resolved sha36e2a62e607f3dd1fecd8f37cfbddaa7f650a1ec
View raw JSON
{
    "slug": "wp-parsidate",
    "finding_count": 18,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "inc/App/Integration/WooCommerce/wc-gateways/wpp-melli-gateway.php",
            "line": 127,
            "snippet": "$key        = base64_decode( $key );",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "inc/App/Integration/WooCommerce/wc-gateways/lib/class-rsa.php",
            "line": 218,
            "snippet": "eval( \"\\$ret[\" . implode( $hash_stack, \"][\" ) . \"] = '{$val[value]}';\" );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "inc/App/Integration/WooCommerce/wc-gateways/lib/class-rsa.php",
            "line": 154,
            "snippet": "$this->modulus     = RSA::binary_to_number( base64_decode( $xmlObj->Modulus ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "inc/App/Integration/WooCommerce/wc-gateways/lib/class-rsa.php",
            "line": 155,
            "snippet": "$this->public_key  = RSA::binary_to_number( base64_decode( $xmlObj->Exponent ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "inc/App/Integration/WooCommerce/wc-gateways/lib/class-rsa.php",
            "line": 156,
            "snippet": "$this->private_key = RSA::binary_to_number( base64_decode( $xmlObj->D ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "inc/App/Integration/WooCommerce/wc-gateways/lib/class-rsa.php",
            "line": 157,
            "snippet": "$this->key_length  = strlen( base64_decode( $xmlObj->Modulus ) ) * 8;",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "inc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php",
            "line": 4328,
            "snippet": "$this->debug( 'in invoke_method, calling function using eval()' );",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "inc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php",
            "line": 4332,
            "snippet": "$this->debug( 'in invoke_method, calling class method using eval()' );",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "inc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php",
            "line": 4335,
            "snippet": "$this->debug( 'in invoke_method, calling instance method using eval()' );",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "inc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php",
            "line": 4356,
            "snippet": "@eval( $funcCall );",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "inc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php",
            "line": 8526,
            "snippet": "eval( $evalStr );",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "inc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php",
            "line": 8529,
            "snippet": "eval( \"\\$proxy = new nusoap_proxy_$r('');\" );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "inc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php",
            "line": 7576,
            "snippet": "return base64_decode( $value );",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "inc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php",
            "line": 3480,
            "snippet": "if ( $degzdata = @gzinflate( $data ) ) {",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "inc/App/Integration/WooCommerce/wc-gateways/lib/nusoap.php",
            "line": 3486,
            "snippet": "if ( $degzdata = @gzinflate( $data ) ) {",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "36e2a62e607f3dd1fecd8f37cfbddaa7f650a1ec"
}
Medium code_scan_match Razorpay for WooCommerce (100k+ installs) Resolved 4mo ago
Slugwoo-razorpay
Finding count22
Findings
PatternKindFileLineSnippetConfidence
gzinflatebuiltinrazorpay-sdk/libs/Requests-2.0.4/src/Requests.php941$decoded = @gzinflate($data);medium
gzinflatebuiltinrazorpay-sdk/libs/Requests-2.0.4/src/Requests.php1,044$decompressed = @gzinflate(substr($gz_data, 2));medium
gzinflatebuiltinrazorpay-sdk/libs/Requests-2.0.4/src/Requests.php1,072$decompressed = @gzinflate(substr($gz_data, 30 + $first_file_start));medium
gzinflatebuiltinrazorpay-sdk/libs/Requests-2.0.4/src/Requests.php1,081$decompressed = @gzinflate($gz_data);medium
gzinflatebuiltinrazorpay-sdk/libs/Requests-2.0.4/src/Requests.php1,088$decompressed = @gzinflate(substr($gz_data, 2));medium
gzinflatebuiltinrazorpay-sdk/libs/Requests-2.0.0/src/Requests.php930$decoded = @gzinflate($data);medium
gzinflatebuiltinrazorpay-sdk/libs/Requests-2.0.0/src/Requests.php1,029$decompressed = @gzinflate(substr($gz_data, 2));medium
gzinflatebuiltinrazorpay-sdk/libs/Requests-2.0.0/src/Requests.php1,057$decompressed = @gzinflate(substr($gz_data, 30 + $first_file_start));medium
gzinflatebuiltinrazorpay-sdk/libs/Requests-2.0.0/src/Requests.php1,065$decompressed = @gzinflate($gz_data);medium
gzinflatebuiltinrazorpay-sdk/libs/Requests-2.0.0/src/Requests.php1,072$decompressed = @gzinflate(substr($gz_data, 2));medium
gzinflatebuiltinrazorpay-sdk/libs/Requests-1.6.1/library/Requests.php720elseif (function_exists('gzinflate') && ($decoded = @gzinflate($data)) !== false) {medium
gzinflatebuiltinrazorpay-sdk/libs/Requests-1.6.1/library/Requests.php797if ( false !== ( $decompressed = @gzinflate( substr( $gzData, 2 ) ) ) )medium
gzinflatebuiltinrazorpay-sdk/libs/Requests-1.6.1/library/Requests.php823if ( false !== ( $decompressed = @gzinflate( substr( $gzData, 30 + $first_file_start ) ) ) ) {medium
gzinflatebuiltinrazorpay-sdk/libs/Requests-1.6.1/library/Requests.php830if ( false !== ( $decompressed = @gzinflate( $gzData ) ) ) {medium
gzinflatebuiltinrazorpay-sdk/libs/Requests-1.6.1/library/Requests.php836if ( false !== ( $decompressed = @gzinflate( substr( $gzData, 2 ) ) ) ) {medium
Resolved shad35a1a3e6817b302dda09df2bb4f60799ddb405f
View raw JSON
{
    "slug": "woo-razorpay",
    "finding_count": 22,
    "findings": [
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "razorpay-sdk/libs/Requests-2.0.4/src/Requests.php",
            "line": 941,
            "snippet": "$decoded = @gzinflate($data);",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "razorpay-sdk/libs/Requests-2.0.4/src/Requests.php",
            "line": 1044,
            "snippet": "$decompressed = @gzinflate(substr($gz_data, 2));",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "razorpay-sdk/libs/Requests-2.0.4/src/Requests.php",
            "line": 1072,
            "snippet": "$decompressed     = @gzinflate(substr($gz_data, 30 + $first_file_start));",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "razorpay-sdk/libs/Requests-2.0.4/src/Requests.php",
            "line": 1081,
            "snippet": "$decompressed = @gzinflate($gz_data);",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "razorpay-sdk/libs/Requests-2.0.4/src/Requests.php",
            "line": 1088,
            "snippet": "$decompressed = @gzinflate(substr($gz_data, 2));",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "razorpay-sdk/libs/Requests-2.0.0/src/Requests.php",
            "line": 930,
            "snippet": "$decoded = @gzinflate($data);",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "razorpay-sdk/libs/Requests-2.0.0/src/Requests.php",
            "line": 1029,
            "snippet": "$decompressed = @gzinflate(substr($gz_data, 2));",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "razorpay-sdk/libs/Requests-2.0.0/src/Requests.php",
            "line": 1057,
            "snippet": "$decompressed     = @gzinflate(substr($gz_data, 30 + $first_file_start));",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "razorpay-sdk/libs/Requests-2.0.0/src/Requests.php",
            "line": 1065,
            "snippet": "$decompressed = @gzinflate($gz_data);",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "razorpay-sdk/libs/Requests-2.0.0/src/Requests.php",
            "line": 1072,
            "snippet": "$decompressed = @gzinflate(substr($gz_data, 2));",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "razorpay-sdk/libs/Requests-1.6.1/library/Requests.php",
            "line": 720,
            "snippet": "elseif (function_exists('gzinflate') && ($decoded = @gzinflate($data)) !== false) {",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "razorpay-sdk/libs/Requests-1.6.1/library/Requests.php",
            "line": 797,
            "snippet": "if ( false !== ( $decompressed = @gzinflate( substr( $gzData, 2 ) ) ) )",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "razorpay-sdk/libs/Requests-1.6.1/library/Requests.php",
            "line": 823,
            "snippet": "if ( false !== ( $decompressed = @gzinflate( substr( $gzData, 30 + $first_file_start ) ) ) ) {",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "razorpay-sdk/libs/Requests-1.6.1/library/Requests.php",
            "line": 830,
            "snippet": "if ( false !== ( $decompressed = @gzinflate( $gzData ) ) ) {",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "razorpay-sdk/libs/Requests-1.6.1/library/Requests.php",
            "line": 836,
            "snippet": "if ( false !== ( $decompressed = @gzinflate( substr( $gzData, 2 ) ) ) ) {",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "d35a1a3e6817b302dda09df2bb4f60799ddb405f"
}
Slugnitropack
Finding count12
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinclasses/Feature/AjaxShortcodes.php173$tags = !empty($_POST["tags"]) && is_string($_POST["tags"]) ? json_decode(base64_decode($_POST['tags']), true) : [];medium
base64_decodebuiltinfunctions.php430$url = base64_decode( $_POST["nitroBeaconUrl"] );medium
base64_decodebuiltinfunctions.php431$cookiesJson = ! empty( $_POST["nitroBeaconCookies"] ) ? base64_decode( $_POST["nitroBeaconCookies"] ) : ""; // We need to fall back to empty string to remain backwards compatible. Otherwise cache fmedium
base64_decodebuiltinfunctions.php450$url = base64_decode( $_POST["nitroBeaconUrl"] );medium
base64_decodebuiltinfunctions.php453$np_originalRequestCookies = json_decode( base64_decode( $_POST["nitroBeaconCookies"] ), true );medium
base64_decodebuiltinnitropack-sdk/bootstrap.php143$url = base64_decode($_POST["nitroBeaconUrl"]);medium
base64_decodebuiltinnitropack-sdk/bootstrap.php144$cookiesJson = !empty($_POST["nitroBeaconCookies"]) ? base64_decode($_POST["nitroBeaconCookies"]) : ""; // We need to fall back to empty string to remain backwards compatible. Otherwise cachemedium
base64_decodebuiltinnitropack-sdk/bootstrap.php154$url = base64_decode($_POST["nitroBeaconUrl"]);medium
base64_decodebuiltinnitropack-sdk/bootstrap.php157NitroPack_CookieStore::$cookies = json_decode(base64_decode($_POST["nitroBeaconCookies"]), true);medium
base64_decodebuiltinnitropack-sdk/NitroPack/SDK/Backlog.php174return json_decode(base64_decode($entry), true);medium
eval_callbuiltinnitropack-sdk/NitroPack/SDK/StorageDriver/Redis.php137$this->redis->eval('medium
eval_callbuiltinnitropack-sdk/NitroPack/SDK/StorageDriver/Redis.php231$this->redis->eval('medium
Resolved sha9d96e81abdfd15a7b0cbd257bd7114adb3e18aca
View raw JSON
{
    "slug": "nitropack",
    "finding_count": 12,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "classes/Feature/AjaxShortcodes.php",
            "line": 173,
            "snippet": "$tags = !empty($_POST[\"tags\"]) && is_string($_POST[\"tags\"]) ? json_decode(base64_decode($_POST['tags']), true) : [];",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "functions.php",
            "line": 430,
            "snippet": "$url = base64_decode( $_POST[\"nitroBeaconUrl\"] );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "functions.php",
            "line": 431,
            "snippet": "$cookiesJson = ! empty( $_POST[\"nitroBeaconCookies\"] ) ? base64_decode( $_POST[\"nitroBeaconCookies\"] ) : \"\"; // We need to fall back to empty string to remain backwards compatible. Otherwise cache f",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "functions.php",
            "line": 450,
            "snippet": "$url = base64_decode( $_POST[\"nitroBeaconUrl\"] );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "functions.php",
            "line": 453,
            "snippet": "$np_originalRequestCookies = json_decode( base64_decode( $_POST[\"nitroBeaconCookies\"] ), true );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "nitropack-sdk/bootstrap.php",
            "line": 143,
            "snippet": "$url = base64_decode($_POST[\"nitroBeaconUrl\"]);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "nitropack-sdk/bootstrap.php",
            "line": 144,
            "snippet": "$cookiesJson = !empty($_POST[\"nitroBeaconCookies\"]) ? base64_decode($_POST[\"nitroBeaconCookies\"]) : \"\"; // We need to fall back to empty string to remain backwards compatible. Otherwise cache",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "nitropack-sdk/bootstrap.php",
            "line": 154,
            "snippet": "$url = base64_decode($_POST[\"nitroBeaconUrl\"]);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "nitropack-sdk/bootstrap.php",
            "line": 157,
            "snippet": "NitroPack_CookieStore::$cookies = json_decode(base64_decode($_POST[\"nitroBeaconCookies\"]), true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "nitropack-sdk/NitroPack/SDK/Backlog.php",
            "line": 174,
            "snippet": "return json_decode(base64_decode($entry), true);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "nitropack-sdk/NitroPack/SDK/StorageDriver/Redis.php",
            "line": 137,
            "snippet": "$this->redis->eval('",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "nitropack-sdk/NitroPack/SDK/StorageDriver/Redis.php",
            "line": 231,
            "snippet": "$this->redis->eval('",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "9d96e81abdfd15a7b0cbd257bd7114adb3e18aca"
}
Medium code_scan_match WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel (100k+ installs) Resolved 4mo ago
Slugwp-all-export
Finding count21
Findings
PatternKindFileLineSnippetConfidence
eval_callbuiltinclasses/XMLWriter.php298$values = eval("return " . $filtered . ";");medium
eval_callbuiltinhelpers/wp_all_export_parse_field_name.php7$name = eval("return " . $snippet . ";");medium
eval_callbuiltinlibraries/XmlExportTaxonomy.php385$val = eval('return ' . stripcslashes(str_replace("%%VALUE%%", $val, $fieldCode)) . ';');medium
eval_callbuiltinlibraries/XmlExportCpt.php549$val = eval('return ' . stripcslashes(str_replace("%%VALUE%%", $val, $fieldCode)) . ';');medium
eval_callbuiltinmodels/export/record.php78$exportQuery = eval('return new WP_User_Query(array(' . $this->options['wp_query'] . ', \'offset\' => ' . $this->exported . ', \'number\' => ' . $this->options['records_per_iteration'] . '));');medium
eval_callbuiltinmodels/export/record.php84$exportQuery = eval('return new WP_Comment_Query(array(' . $this->options['wp_query'] . ', \'offset\' => ' . $this->exported . ', \'number\' => ' . $this->options['records_per_iteration'] . '));')medium
eval_callbuiltinmodels/export/record.php95$exportQuery = eval('return new WP_Query(array(' . $this->options['wp_query'] . ', \'offset\' => ' . $this->exported . ', \'posts_per_page\' => ' . $this->options['records_per_iteration'] . '));')medium
base64_string_longbuiltinactions/admin_menu.php8$icon_base64 = "PHN2ZyBjbGFzcz0iaW1nLWZsdWlkIiBpZD0ib3V0cHV0c3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIGhlaWdodD0iMjAiIHdpZHRoPSIyMCIgdmlld0JveD0iMCAwIDQwIDQwIj48cGF0aCBmaWxsPSIjZjBmMGYxmedium
eval_callbuiltinactions/wp_ajax_wpallexport.php72$exportQuery = eval('return new WP_User_Query(array(' . $exportOptions['wp_query'] . ', \'offset\' => ' . $export->exported . ', \'number\' => ' . $posts_per_page . ' ));');medium
eval_callbuiltinactions/wp_ajax_wpallexport.php76$exportQuery = eval('return new WP_Comment_Query(array(' . $exportOptions['wp_query'] . ', \'offset\' => ' . $export->exported . ', \'number\' => ' . $posts_per_page . ' ));');medium
eval_callbuiltinactions/wp_ajax_wpallexport.php86$exportQuery = eval($code);medium
eval_callbuiltinactions/wp_ajax_wpae_filtering_count.php92$totalQuery = eval('return new WP_User_Query(array(' . PMXE_Plugin::$session->get('wp_query') . ', \'offset\' => 0, \'number\' => 10 ));');medium
eval_callbuiltinactions/wp_ajax_wpae_filtering_count.php100$exportQuery = eval('return new WP_User_Query(array(' . PMXE_Plugin::$session->get('wp_query') . ', \'offset\' => 0, \'number\' => 10 ));');medium
eval_callbuiltinactions/wp_ajax_wpae_filtering_count.php108$totalQuery = eval('return new WP_Comment_Query(array(' . PMXE_Plugin::$session->get('wp_query') . ', \'number\' => 10, \'count\' => true ));');medium
eval_callbuiltinactions/wp_ajax_wpae_filtering_count.php114$exportQuery = eval('return new WP_Comment_Query(array(' . PMXE_Plugin::$session->get('wp_query') . '));');medium
Resolved shad29048b55de33e98fe48485dab801b0368ec7f01
View raw JSON
{
    "slug": "wp-all-export",
    "finding_count": 21,
    "findings": [
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "classes/XMLWriter.php",
            "line": 298,
            "snippet": "$values = eval(\"return \" . $filtered . \";\");",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "helpers/wp_all_export_parse_field_name.php",
            "line": 7,
            "snippet": "$name = eval(\"return \" . $snippet . \";\");",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "libraries/XmlExportTaxonomy.php",
            "line": 385,
            "snippet": "$val = eval('return ' . stripcslashes(str_replace(\"%%VALUE%%\", $val, $fieldCode)) . ';');",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "libraries/XmlExportCpt.php",
            "line": 549,
            "snippet": "$val = eval('return ' . stripcslashes(str_replace(\"%%VALUE%%\", $val, $fieldCode)) . ';');",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "models/export/record.php",
            "line": 78,
            "snippet": "$exportQuery = eval('return new WP_User_Query(array(' . $this->options['wp_query'] . ', \\'offset\\' => ' . $this->exported . ', \\'number\\' => ' . $this->options['records_per_iteration'] . '));');",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "models/export/record.php",
            "line": 84,
            "snippet": "$exportQuery = eval('return new WP_Comment_Query(array(' . $this->options['wp_query'] . ', \\'offset\\' => ' . $this->exported . ', \\'number\\' => ' . $this->options['records_per_iteration'] . '));')",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "models/export/record.php",
            "line": 95,
            "snippet": "$exportQuery = eval('return new WP_Query(array(' . $this->options['wp_query'] . ', \\'offset\\' => ' . $this->exported . ', \\'posts_per_page\\' => ' . $this->options['records_per_iteration'] . '));')",
            "confidence": "medium"
        },
        {
            "pattern": "base64_string_long",
            "kind": "builtin",
            "file": "actions/admin_menu.php",
            "line": 8,
            "snippet": "$icon_base64 = \"PHN2ZyBjbGFzcz0iaW1nLWZsdWlkIiBpZD0ib3V0cHV0c3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIGhlaWdodD0iMjAiIHdpZHRoPSIyMCIgdmlld0JveD0iMCAwIDQwIDQwIj48cGF0aCBmaWxsPSIjZjBmMGYx",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "actions/wp_ajax_wpallexport.php",
            "line": 72,
            "snippet": "$exportQuery = eval('return new WP_User_Query(array(' . $exportOptions['wp_query'] . ', \\'offset\\' => ' . $export->exported . ', \\'number\\' => ' . $posts_per_page . ' ));');",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "actions/wp_ajax_wpallexport.php",
            "line": 76,
            "snippet": "$exportQuery = eval('return new WP_Comment_Query(array(' . $exportOptions['wp_query'] . ', \\'offset\\' => ' . $export->exported . ', \\'number\\' => ' . $posts_per_page . ' ));');",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "actions/wp_ajax_wpallexport.php",
            "line": 86,
            "snippet": "$exportQuery = eval($code);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "actions/wp_ajax_wpae_filtering_count.php",
            "line": 92,
            "snippet": "$totalQuery = eval('return new WP_User_Query(array(' . PMXE_Plugin::$session->get('wp_query') . ', \\'offset\\' => 0, \\'number\\' => 10 ));');",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "actions/wp_ajax_wpae_filtering_count.php",
            "line": 100,
            "snippet": "$exportQuery = eval('return new WP_User_Query(array(' . PMXE_Plugin::$session->get('wp_query') . ', \\'offset\\' => 0, \\'number\\' => 10 ));');",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "actions/wp_ajax_wpae_filtering_count.php",
            "line": 108,
            "snippet": "$totalQuery = eval('return new WP_Comment_Query(array(' . PMXE_Plugin::$session->get('wp_query') . ', \\'number\\' => 10, \\'count\\' => true ));');",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "actions/wp_ajax_wpae_filtering_count.php",
            "line": 114,
            "snippet": "$exportQuery = eval('return new WP_Comment_Query(array(' . PMXE_Plugin::$session->get('wp_query') . '));');",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "d29048b55de33e98fe48485dab801b0368ec7f01"
}
Medium code_scan_match Advanced Ads – Ad Manager & AdSense (100k+ installs) Resolved 4mo ago
Slugadvanced-ads
Finding count2
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinincludes/importers/class-ad-inserter.php314$this->ai_options = unserialize( base64_decode( substr( $this->ai_options, 4 ), true ) ); // phpcs:ignoremedium
eval_callbuiltinincludes/ads/class-ad-plain.php36eval( '?>' . $content );medium
Resolved sha2636fb955d93007bf8ef84ca8e7bec325bb6712d
View raw JSON
{
    "slug": "advanced-ads",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/importers/class-ad-inserter.php",
            "line": 314,
            "snippet": "$this->ai_options = unserialize( base64_decode( substr( $this->ai_options, 4 ), true ) ); // phpcs:ignore",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "includes/ads/class-ad-plain.php",
            "line": 36,
            "snippet": "eval( '?>' . $content );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "2636fb955d93007bf8ef84ca8e7bec325bb6712d"
}
Medium code_scan_match Disable XML-RPC-API (100k+ installs) Resolved 4mo ago
Slugdisable-xml-rpc-api
Finding count2
Findings
PatternKindFileLineSnippetConfidence
$allowed_IPsioc:code_patterndisable-xml-rpc-api.php211$allowed_ips = $this->fix_ip('White-list-IPs') . $jp_allowed_ips;medium
$allowed_IPsioc:code_patterndisable-xml-rpc-api.php215' . $allowed_ips . 'medium
Resolved sha03053997a9b3446bce874e681175724f7ae17446
View raw JSON
{
    "slug": "disable-xml-rpc-api",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "disable-xml-rpc-api.php",
            "line": 211,
            "snippet": "$allowed_ips   = $this->fix_ip('White-list-IPs') . $jp_allowed_ips;",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "disable-xml-rpc-api.php",
            "line": 215,
            "snippet": "' . $allowed_ips . '",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "03053997a9b3446bce874e681175724f7ae17446"
}
Medium code_scan_match Social Media Share Buttons & Social Sharing Icons (100k+ installs) Resolved 4mo ago
Slugultimate-social-media-icons
Finding count2
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinhelpers/sfsi_OAuth.php232$decoded_sig = base64_decode($signature);medium
eval_callbuiltinhelpers/linkedin-api/linkedin-api.php125eval($eval);medium
Resolved shab316930cc6ef9c6233cf0088cff101bab3512872
View raw JSON
{
    "slug": "ultimate-social-media-icons",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "helpers/sfsi_OAuth.php",
            "line": 232,
            "snippet": "$decoded_sig = base64_decode($signature);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "helpers/linkedin-api/linkedin-api.php",
            "line": 125,
            "snippet": "eval($eval);",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "b316930cc6ef9c6233cf0088cff101bab3512872"
}
Medium code_scan_match WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets (100k+ installs) Resolved 4mo ago
Slugwp-all-import
Finding count16
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinclasses/handler.php79$session_clear = \maybe_unserialize( base64_decode( $session ) );medium
base64_decodebuiltinclasses/api.php454if ( $file_type == 'images' && base64_encode(base64_decode($url)) == $url && $is_base64_images_allowed ) {medium
base64_decodebuiltinclasses/api.php475$img = @imagecreatefromstring(base64_decode($url));medium
base64_decodebuiltinhelpers/wp_all_import_base64_decode_image.php11return base64_decode($image);medium
base64_decodebuiltinhelpers/wp_all_import_is_base64_encoded.php13$decoded = base64_decode($data, true);medium
eval_callbuiltinhelpers/functions.php80return (eval ("return ($str);")) ? $then : $else;medium
gzinflatebuiltinlibraries/wpaipclzip.lib.php3,584$v_file_content = @gzinflate($v_buffer);medium
gzinflatebuiltinlibraries/wpaipclzip.lib.php3,789$v_file_content = gzinflate($v_buffer);medium
gzinflatebuiltinlibraries/wpaipclzip.lib.php3,890if (($p_string = @gzinflate($v_data)) === false) {medium
base64_decodebuiltinmodels/import/record.php2,451$gallery_images[] = json_decode(base64_decode($img), true);medium
base64_decodebuiltinmodels/import/record.php2,952'image_url' => (base64_encode(base64_decode($url)) == $url && $is_base64_images_allowed) ? '' : $url,medium
base64_decodebuiltinmodels/import/record.php2,962'image_url' => (base64_encode(base64_decode($url)) == $url && $is_base64_images_allowed) ? '' : $url,medium
base64_decodebuiltinmodels/import/record.php3,087'image_url' => (base64_encode(base64_decode($url)) == $url && $is_base64_images_allowed) ? '' : $urlmedium
createfuncbuiltincontrollers/controller/admin.php59$filter = create_function('$str', 'return "http://" == $str || "ftp://" == $str ? "" : $str;');medium
createfuncbuiltinplugin.php831$exception_handler = create_function('$e', 'trigger_error($e->getMessage(), E_USER_ERROR);');medium
Resolved sha5d228a243d81e4fe9cefa0111f81850af74ad9da
View raw JSON
{
    "slug": "wp-all-import",
    "finding_count": 16,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "classes/handler.php",
            "line": 79,
            "snippet": "$session_clear = \\maybe_unserialize( base64_decode( $session ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "classes/api.php",
            "line": 454,
            "snippet": "if ( $file_type == 'images' && base64_encode(base64_decode($url)) == $url && $is_base64_images_allowed ) {",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "classes/api.php",
            "line": 475,
            "snippet": "$img = @imagecreatefromstring(base64_decode($url));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "helpers/wp_all_import_base64_decode_image.php",
            "line": 11,
            "snippet": "return base64_decode($image);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "helpers/wp_all_import_is_base64_encoded.php",
            "line": 13,
            "snippet": "$decoded = base64_decode($data, true);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "helpers/functions.php",
            "line": 80,
            "snippet": "return (eval (\"return ($str);\")) ? $then : $else;",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "libraries/wpaipclzip.lib.php",
            "line": 3584,
            "snippet": "$v_file_content = @gzinflate($v_buffer);",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "libraries/wpaipclzip.lib.php",
            "line": 3789,
            "snippet": "$v_file_content = gzinflate($v_buffer);",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "libraries/wpaipclzip.lib.php",
            "line": 3890,
            "snippet": "if (($p_string = @gzinflate($v_data)) === false) {",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "models/import/record.php",
            "line": 2451,
            "snippet": "$gallery_images[] = json_decode(base64_decode($img), true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "models/import/record.php",
            "line": 2952,
            "snippet": "'image_url' => (base64_encode(base64_decode($url)) == $url && $is_base64_images_allowed) ? '' : $url,",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "models/import/record.php",
            "line": 2962,
            "snippet": "'image_url' => (base64_encode(base64_decode($url)) == $url && $is_base64_images_allowed) ? '' : $url,",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "models/import/record.php",
            "line": 3087,
            "snippet": "'image_url' => (base64_encode(base64_decode($url)) == $url && $is_base64_images_allowed) ? '' : $url",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "controllers/controller/admin.php",
            "line": 59,
            "snippet": "$filter = create_function('$str', 'return \"http://\" == $str || \"ftp://\" == $str ? \"\" : $str;');",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "plugin.php",
            "line": 831,
            "snippet": "$exception_handler = create_function('$e', 'trigger_error($e->getMessage(), E_USER_ERROR);');",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "5d228a243d81e4fe9cefa0111f81850af74ad9da"
}
Medium code_scan_match CloudSecure WP Security (100k+ installs) Resolved 4mo ago
Slugcloudsecure-wp-security
Finding count8
Findings
PatternKindFileLineSnippetConfidence
$allowed_IPsioc:code_patternmodules/restrict-admin-page.php180$allowed_ips = array( '127.0.0.1' );medium
$allowed_IPsioc:code_patternmodules/restrict-admin-page.php184if ( false === in_array( $server_ip, $allowed_ips ) ) {medium
$allowed_IPsioc:code_patternmodules/restrict-admin-page.php185$allowed_ips[] = $server_ip;medium
$allowed_IPsioc:code_patternmodules/restrict-admin-page.php192if ( false === in_array( $client_ip, $allowed_ips ) ) {medium
$allowed_IPsioc:code_patternmodules/restrict-admin-page.php193$allowed_ips[] = $client_ip;medium
$allowed_IPsioc:code_patternmodules/restrict-admin-page.php200if ( false !== filter_var( $tmp_ip, FILTER_VALIDATE_IP ) && false === in_array( $tmp_ip, $allowed_ips ) ) {medium
$allowed_IPsioc:code_patternmodules/restrict-admin-page.php201$allowed_ips[] = $tmp_ip;medium
$allowed_IPsioc:code_patternmodules/restrict-admin-page.php206$htaccess_setting = $this->get_htaccess_settings( $allowed_ips, $allowed_paths );medium
Resolved sha76e02d27fb20b2ee0b060114c879809227849e0f
View raw JSON
{
    "slug": "cloudsecure-wp-security",
    "finding_count": 8,
    "findings": [
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "modules/restrict-admin-page.php",
            "line": 180,
            "snippet": "$allowed_ips = array( '127.0.0.1' );",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "modules/restrict-admin-page.php",
            "line": 184,
            "snippet": "if ( false === in_array( $server_ip, $allowed_ips ) ) {",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "modules/restrict-admin-page.php",
            "line": 185,
            "snippet": "$allowed_ips[] = $server_ip;",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "modules/restrict-admin-page.php",
            "line": 192,
            "snippet": "if ( false === in_array( $client_ip, $allowed_ips ) ) {",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "modules/restrict-admin-page.php",
            "line": 193,
            "snippet": "$allowed_ips[] = $client_ip;",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "modules/restrict-admin-page.php",
            "line": 200,
            "snippet": "if ( false !== filter_var( $tmp_ip, FILTER_VALIDATE_IP ) && false === in_array( $tmp_ip, $allowed_ips ) ) {",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "modules/restrict-admin-page.php",
            "line": 201,
            "snippet": "$allowed_ips[] = $tmp_ip;",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "modules/restrict-admin-page.php",
            "line": 206,
            "snippet": "$htaccess_setting = $this->get_htaccess_settings( $allowed_ips, $allowed_paths );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "76e02d27fb20b2ee0b060114c879809227849e0f"
}
Medium code_scan_match Presto Player (100k+ installs) Resolved 4mo ago
Slugpresto-player
Finding count1
Findings
PatternKindFileLineSnippetConfidence
$allowed_IPsioc:code_patterninc/Files.php14protected $allowed_ips = array();medium
Resolved sha9da2972ac1d313e4a511b4f0e726cbad27981a7f
View raw JSON
{
    "slug": "presto-player",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "inc/Files.php",
            "line": 14,
            "snippet": "protected $allowed_ips = array();",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "9da2972ac1d313e4a511b4f0e726cbad27981a7f"
}
Medium code_scan_match WPML Multilingual & Multicurrency for WooCommerce (100k+ installs) Resolved 4mo ago
Slugwoocommerce-multilingual
Finding count2
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinclasses/urls/class-wcml-xdomain-data.php55$xdomain_data = json_decode( base64_decode( $_GET['xdomain_data'] ), true );medium
eval_callbuiltinaddons/wpml-dependencies/lib/lib/twig/src/Environment.php442eval('?>' . $content);medium
Resolved sha149df05a0b3e713fbfc35fe70c0fd369b75ed482
View raw JSON
{
    "slug": "woocommerce-multilingual",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "classes/urls/class-wcml-xdomain-data.php",
            "line": 55,
            "snippet": "$xdomain_data = json_decode( base64_decode( $_GET['xdomain_data'] ), true );",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "addons/wpml-dependencies/lib/lib/twig/src/Environment.php",
            "line": 442,
            "snippet": "eval('?>' . $content);",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "149df05a0b3e713fbfc35fe70c0fd369b75ed482"
}
Slugfile-manager-advanced
Finding count15
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinapplication/library/php/elFinderVolumeDriver.class.php2,828$content = base64_decode(substr($content, strlen($m[0])));medium
base64_decodebuiltinapplication/library/php/elFinderVolumeDriver.class.php3,951$h = base64_decode(strtr($h, '-_.', '+/='));medium
base64_decodebuiltinapplication/library/php/elFinder.class.php2,007$src = base64_decode($file['file']);medium
base64_decodebuiltinapplication/library/php/elFinder.class.php2,918$data = base64_decode(substr($str, strlen($m[0])));medium
base64_decodebuiltinapplication/library/php/elFinder.class.php4,793$data = unserialize(base64_decode($var));medium
base64_decodebuiltinapplication/library/php/elFinderSession.php205if (($data = base64_decode($data)) !== false) {medium
eval_callbuiltinapplication/class_fma_pure_php_validator.php346@eval( $safe_code );medium
eval_callbuiltinapplication/svg-sanitizer/includes/phpunit/php-code-coverage/src/Filter.php111\strpos($filename, 'eval()\'d code') !== false ||medium
eval_callbuiltinapplication/svg-sanitizer/includes/phpunit/phpunit/src/Framework/TestCase.php1,893eval(medium
eval_callbuiltinapplication/svg-sanitizer/includes/phpunit/phpunit/src/Framework/MockObject/Generator.php1,158eval(self::MOCKED_CLONE_METHOD_WITH_VOID_RETURN_TYPE_TRAIT);medium
eval_callbuiltinapplication/svg-sanitizer/includes/phpunit/phpunit/src/Framework/MockObject/Generator.php1,165eval(self::MOCKED_CLONE_METHOD_WITHOUT_RETURN_TYPE_TRAIT);medium
eval_callbuiltinapplication/svg-sanitizer/includes/phpunit/phpunit/src/Framework/MockObject/Generator.php1,175eval(self::UNMOCKED_CLONE_METHOD_WITH_VOID_RETURN_TYPE_TRAIT);medium
eval_callbuiltinapplication/svg-sanitizer/includes/phpunit/phpunit/src/Framework/MockObject/Generator.php1,182eval(self::UNMOCKED_CLONE_METHOD_WITHOUT_RETURN_TYPE_TRAIT);medium
eval_callbuiltinapplication/svg-sanitizer/includes/phpunit/phpunit/src/Framework/MockObject/MockTrait.php38eval($this->classCode);medium
eval_callbuiltinapplication/svg-sanitizer/includes/phpunit/phpunit/src/Framework/MockObject/MockClass.php45eval($this->classCode);medium
Resolved sha91df8b25be7e4cb134035ccd0fa08cc6887e78db
View raw JSON
{
    "slug": "file-manager-advanced",
    "finding_count": 15,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "application/library/php/elFinderVolumeDriver.class.php",
            "line": 2828,
            "snippet": "$content = base64_decode(substr($content, strlen($m[0])));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "application/library/php/elFinderVolumeDriver.class.php",
            "line": 3951,
            "snippet": "$h = base64_decode(strtr($h, '-_.', '+/='));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "application/library/php/elFinder.class.php",
            "line": 2007,
            "snippet": "$src = base64_decode($file['file']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "application/library/php/elFinder.class.php",
            "line": 2918,
            "snippet": "$data = base64_decode(substr($str, strlen($m[0])));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "application/library/php/elFinder.class.php",
            "line": 4793,
            "snippet": "$data = unserialize(base64_decode($var));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "application/library/php/elFinderSession.php",
            "line": 205,
            "snippet": "if (($data = base64_decode($data)) !== false) {",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "application/class_fma_pure_php_validator.php",
            "line": 346,
            "snippet": "@eval( $safe_code );",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "application/svg-sanitizer/includes/phpunit/php-code-coverage/src/Filter.php",
            "line": 111,
            "snippet": "\\strpos($filename, 'eval()\\'d code') !== false ||",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "application/svg-sanitizer/includes/phpunit/phpunit/src/Framework/TestCase.php",
            "line": 1893,
            "snippet": "eval(",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "application/svg-sanitizer/includes/phpunit/phpunit/src/Framework/MockObject/Generator.php",
            "line": 1158,
            "snippet": "eval(self::MOCKED_CLONE_METHOD_WITH_VOID_RETURN_TYPE_TRAIT);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "application/svg-sanitizer/includes/phpunit/phpunit/src/Framework/MockObject/Generator.php",
            "line": 1165,
            "snippet": "eval(self::MOCKED_CLONE_METHOD_WITHOUT_RETURN_TYPE_TRAIT);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "application/svg-sanitizer/includes/phpunit/phpunit/src/Framework/MockObject/Generator.php",
            "line": 1175,
            "snippet": "eval(self::UNMOCKED_CLONE_METHOD_WITH_VOID_RETURN_TYPE_TRAIT);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "application/svg-sanitizer/includes/phpunit/phpunit/src/Framework/MockObject/Generator.php",
            "line": 1182,
            "snippet": "eval(self::UNMOCKED_CLONE_METHOD_WITHOUT_RETURN_TYPE_TRAIT);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "application/svg-sanitizer/includes/phpunit/phpunit/src/Framework/MockObject/MockTrait.php",
            "line": 38,
            "snippet": "eval($this->classCode);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "application/svg-sanitizer/includes/phpunit/phpunit/src/Framework/MockObject/MockClass.php",
            "line": 45,
            "snippet": "eval($this->classCode);",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "91df8b25be7e4cb134035ccd0fa08cc6887e78db"
}
Medium code_scan_match InfiniteWP Client (200k+ installs) Resolved 4mo ago
Slugiwp-client
Finding count28
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinbackup.class.multicall.php2,817$value = gzinflate (base64_decode(str_replace('**ZIP**', '', $value)));medium
gzinflatebuiltinbackup.class.multicall.php2,817$value = gzinflate (base64_decode(str_replace('**ZIP**', '', $value)));medium
base64_decodebuiltinaddons/file_editor/file_editor.class.php198$fileContent = base64_decode($fileContent);medium
gzinflatebuiltinaddons/file_editor/file_editor.class.php199$fileContent = gzinflate($fileContent);medium
base64_decodebuiltincore.class.php1,103$signature = base64_decode($_GET['signature']);medium
base64_decodebuiltincore.class.php1,106$signature_new = base64_decode($_GET['signature_new']);medium
base64_decodebuiltinlib/Google2/Utils.php42return base64_decode($b64);medium
base64_decodebuiltinlib/Dropbox2/OAuth/Consumer/ConsumerAbstract.php229$code = base64_decode($code);medium
base64_decodebuiltinlib/Dropbox2/OAuth/Storage/Encrypter.php89$cipherText = base64_decode($cipherText);medium
base64_decodebuiltinlib/Google/Utils.php44return base64_decode($b64);medium
gzinflatebuiltinlib/amazon_s3_bwd_comp/sdk.class.php1,239elseif (($uncompressed = gzinflate($body)) !== false)medium
base64_decodebuiltinhelper.class.php341return base64_decode(get_option('iwp_client_public_key'));medium
base64_decodebuiltinhelper.class.php349return base64_decode(get_option('iwp_client_nossl_key'));medium
eval_callbuiltininit.php2,173eval($params['code']);medium
base64_decodebuiltininit.php144$data = trim(base64_decode($request_raw_data));medium
Resolved sha1b79f5bd0cbe360eec44ce8d6d3fc1c39116823a
View raw JSON
{
    "slug": "iwp-client",
    "finding_count": 28,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "backup.class.multicall.php",
            "line": 2817,
            "snippet": "$value = gzinflate (base64_decode(str_replace('**ZIP**', '', $value)));",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "backup.class.multicall.php",
            "line": 2817,
            "snippet": "$value = gzinflate (base64_decode(str_replace('**ZIP**', '', $value)));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "addons/file_editor/file_editor.class.php",
            "line": 198,
            "snippet": "$fileContent = base64_decode($fileContent);",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "addons/file_editor/file_editor.class.php",
            "line": 199,
            "snippet": "$fileContent = gzinflate($fileContent);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core.class.php",
            "line": 1103,
            "snippet": "$signature  = base64_decode($_GET['signature']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core.class.php",
            "line": 1106,
            "snippet": "$signature_new = base64_decode($_GET['signature_new']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/Google2/Utils.php",
            "line": 42,
            "snippet": "return base64_decode($b64);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/Dropbox2/OAuth/Consumer/ConsumerAbstract.php",
            "line": 229,
            "snippet": "$code = base64_decode($code);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/Dropbox2/OAuth/Storage/Encrypter.php",
            "line": 89,
            "snippet": "$cipherText = base64_decode($cipherText);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/Google/Utils.php",
            "line": 44,
            "snippet": "return base64_decode($b64);",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "lib/amazon_s3_bwd_comp/sdk.class.php",
            "line": 1239,
            "snippet": "elseif (($uncompressed = gzinflate($body)) !== false)",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "helper.class.php",
            "line": 341,
            "snippet": "return base64_decode(get_option('iwp_client_public_key'));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "helper.class.php",
            "line": 349,
            "snippet": "return base64_decode(get_option('iwp_client_nossl_key'));",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "init.php",
            "line": 2173,
            "snippet": "eval($params['code']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "init.php",
            "line": 144,
            "snippet": "$data = trim(base64_decode($request_raw_data));",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "1b79f5bd0cbe360eec44ce8d6d3fc1c39116823a"
}
Medium code_scan_match WP Migrate Lite – Migration Made Easy (200k+ installs) Resolved 4mo ago
Slugwp-migrate-db
Finding count4
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinclass/Common/Transfers/Files/PluginHelper.php240$queue_data = json_decode(gzdecode(base64_decode($queue_status)), true);medium
base64_decodebuiltinclass/Common/Sql/Table.php809$state_data['primary_keys'] = base64_decode( trim( $state_data['primary_keys'] ) );medium
base64_decodebuiltinclass/Common/Util/ZipAndEncode.php38return gzdecode(base64_decode($string));medium
gzinflatebuiltinclass/Common/Util/Util.php290return @gzinflate(substr($data, 10, -8));medium
Resolved sha467f2fd6aa40e00c93a143cb46d574fa8574fa2e
View raw JSON
{
    "slug": "wp-migrate-db",
    "finding_count": 4,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/Common/Transfers/Files/PluginHelper.php",
            "line": 240,
            "snippet": "$queue_data   = json_decode(gzdecode(base64_decode($queue_status)), true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/Common/Sql/Table.php",
            "line": 809,
            "snippet": "$state_data['primary_keys'] = base64_decode( trim( $state_data['primary_keys'] ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "class/Common/Util/ZipAndEncode.php",
            "line": 38,
            "snippet": "return gzdecode(base64_decode($string));",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "class/Common/Util/Util.php",
            "line": 290,
            "snippet": "return @gzinflate(substr($data, 10, -8));",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "467f2fd6aa40e00c93a143cb46d574fa8574fa2e"
}
Medium code_scan_match FileOrganizer – WordPress File Manager (200k+ installs) Resolved 4mo ago
Slugfileorganizer
Finding count3
Findings
PatternKindFileLineSnippetConfidence
Validate_Path(ioc:code_patternmain/ajax.php31$path = fileorganizer_validate_path($path) ? $path : $fileorganizer->default_path;medium
Validate_Path(ioc:code_patternmain/settings.php122$verify = fileorganizer_validate_path($path);medium
Validate_Path(ioc:code_patterninit.php382function fileorganizer_validate_path($path) {medium
Resolved shaa428d824ed842dafab3787cc3cfc847dda6fce57
View raw JSON
{
    "slug": "fileorganizer",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "Validate_Path(",
            "kind": "ioc:code_pattern",
            "file": "main/ajax.php",
            "line": 31,
            "snippet": "$path = fileorganizer_validate_path($path) ? $path : $fileorganizer->default_path;",
            "confidence": "medium"
        },
        {
            "pattern": "Validate_Path(",
            "kind": "ioc:code_pattern",
            "file": "main/settings.php",
            "line": 122,
            "snippet": "$verify = fileorganizer_validate_path($path);",
            "confidence": "medium"
        },
        {
            "pattern": "Validate_Path(",
            "kind": "ioc:code_pattern",
            "file": "init.php",
            "line": 382,
            "snippet": "function fileorganizer_validate_path($path) {",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "a428d824ed842dafab3787cc3cfc847dda6fce57"
}
Slugformidable
Finding count1
Findings
PatternKindFileLineSnippetConfidence
$allowed_IPsioc:code_patternclasses/controllers/FrmAntiSpamController.php127* @params string[] $allowed_ips Allowed IP addresses.medium
Resolved sha5f34996c0d4e995eaf0464b027ba656b73e73fdd
View raw JSON
{
    "slug": "formidable",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "classes/controllers/FrmAntiSpamController.php",
            "line": 127,
            "snippet": "* @params string[] $allowed_ips Allowed IP addresses.",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "5f34996c0d4e995eaf0464b027ba656b73e73fdd"
}
Slugpost-smtp
Finding count43
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinPostman/Wizard/NewWizard.php1,525$access_key_id = isset( $this->options_array[ PostSMTPSES\PostSmtpAmazonSesTransport::OPTION_ACCESS_KEY_ID ] ) ? base64_decode( $this->options_array[ PostSMTPSES\PostSmtpAmazonSesTransport::OPmedium
base64_decodebuiltinPostman/Wizard/NewWizard.php1,526$access_key_secret = isset( $this->options_array[ PostSMTPSES\PostSmtpAmazonSesTransport::OPTION_SECRET_ACCESS_KEY ] ) ? base64_decode( $this->options_array[ PostSMTPSES\PostSmtpAmazonSesTransmedium
base64_decodebuiltinPostman/Wizard/NewWizard.php1,572$app_client_id = isset( $options['office365_app_id'] ) ? base64_decode( $options['office365_app_id'] ) : '';medium
base64_decodebuiltinPostman/Wizard/NewWizard.php1,573$app_client_secret = isset( $options['office365_app_password'] ) ? base64_decode( $options['office365_app_password'] ) : '';medium
base64_decodebuiltinPostman/Wizard/NewWizard.php1,804$client_secret = isset( $this->options_array[ ZohoMailPostSMTP\ZohoMailTransport::OPTION_CLIENT_SECRET ] ) ? base64_decode( $this->options_array[ ZohoMailPostSMTP\ZohoMailTransport::OPTION_CLImedium
base64_decodebuiltinPostman/Wizard/NewWizard.php1,943$sanitized['slack_token'] = base64_decode( isset( $options['slack_token'] ) ? $options['slack_token'] : '' );medium
base64_decodebuiltinPostman/Wizard/NewWizard.php1,944$sanitized['pushover_user'] = base64_decode( isset( $options['pushover_user'] ) ? $options['pushover_user'] : '' );medium
base64_decodebuiltinPostman/Wizard/NewWizard.php1,945$sanitized['pushover_token'] = base64_decode( isset( $options['pushover_token'] ) ? $options['pushover_token'] : '' );medium
base64_decodebuiltinPostman/Postman-Mail/libs/vendor_prefixed/google/apiclient/src/Client.php455$payload = \json_decode(\base64_decode($parts[1]), \true);medium
hex_string_longbuiltinPostman/Postman-Mail/Zend-1.12.10/Mime.php399"\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F\x7F\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8A\x8B\x8C\x8D\x8medium
base64_decodebuiltinPostman/Postman-Mail/Zend-1.12.10/Mail/Protocol/Smtp/Auth/Crammd5.php76$challenge = base64_decode($challenge);medium
base64_decodebuiltinPostman/PostmanEmailLogs.php212$decoded = base64_decode( trim( $part_body ), true );medium
base64_decodebuiltinPostman/Extensions/Core/Notifications/PostmanNotifyOptions.php42return base64_decode( $this->options [ self::PUSHOVER_USER ] );medium
base64_decodebuiltinPostman/Extensions/Core/Notifications/PostmanNotifyOptions.php48return base64_decode( $this->options [ self::PUSHOVER_TOKEN ] );medium
base64_decodebuiltinPostman/Extensions/Core/Notifications/PostmanNotifyOptions.php54return base64_decode( $this->options [ self::SLACK_TOKEN ] );medium
Resolved sha1e12571330485faf037da754e7673ce70d81b353
View raw JSON
{
    "slug": "post-smtp",
    "finding_count": 43,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Postman/Wizard/NewWizard.php",
            "line": 1525,
            "snippet": "$access_key_id = isset( $this->options_array[ PostSMTPSES\\PostSmtpAmazonSesTransport::OPTION_ACCESS_KEY_ID ] ) ? base64_decode( $this->options_array[ PostSMTPSES\\PostSmtpAmazonSesTransport::OP",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Postman/Wizard/NewWizard.php",
            "line": 1526,
            "snippet": "$access_key_secret = isset( $this->options_array[ PostSMTPSES\\PostSmtpAmazonSesTransport::OPTION_SECRET_ACCESS_KEY ] ) ? base64_decode( $this->options_array[ PostSMTPSES\\PostSmtpAmazonSesTrans",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Postman/Wizard/NewWizard.php",
            "line": 1572,
            "snippet": "$app_client_id = isset( $options['office365_app_id'] ) ? base64_decode( $options['office365_app_id'] ) : '';",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Postman/Wizard/NewWizard.php",
            "line": 1573,
            "snippet": "$app_client_secret = isset( $options['office365_app_password'] ) ? base64_decode( $options['office365_app_password'] ) : '';",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Postman/Wizard/NewWizard.php",
            "line": 1804,
            "snippet": "$client_secret = isset( $this->options_array[ ZohoMailPostSMTP\\ZohoMailTransport::OPTION_CLIENT_SECRET ] ) ? base64_decode( $this->options_array[ ZohoMailPostSMTP\\ZohoMailTransport::OPTION_CLI",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Postman/Wizard/NewWizard.php",
            "line": 1943,
            "snippet": "$sanitized['slack_token'] = base64_decode( isset( $options['slack_token'] ) ? $options['slack_token'] : '' );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Postman/Wizard/NewWizard.php",
            "line": 1944,
            "snippet": "$sanitized['pushover_user'] = base64_decode( isset( $options['pushover_user'] ) ? $options['pushover_user'] : '' );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Postman/Wizard/NewWizard.php",
            "line": 1945,
            "snippet": "$sanitized['pushover_token'] = base64_decode( isset( $options['pushover_token'] ) ? $options['pushover_token'] : '' );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Postman/Postman-Mail/libs/vendor_prefixed/google/apiclient/src/Client.php",
            "line": 455,
            "snippet": "$payload = \\json_decode(\\base64_decode($parts[1]), \\true);",
            "confidence": "medium"
        },
        {
            "pattern": "hex_string_long",
            "kind": "builtin",
            "file": "Postman/Postman-Mail/Zend-1.12.10/Mime.php",
            "line": 399,
            "snippet": "\"\\x00\\x01\\x02\\x03\\x04\\x05\\x06\\x07\\x08\\x09\\x0A\\x0B\\x0C\\x0D\\x0E\\x0F\\x10\\x11\\x12\\x13\\x14\\x15\\x16\\x17\\x18\\x19\\x1A\\x1B\\x1C\\x1D\\x1E\\x1F\\x7F\\x80\\x81\\x82\\x83\\x84\\x85\\x86\\x87\\x88\\x89\\x8A\\x8B\\x8C\\x8D\\x8",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Postman/Postman-Mail/Zend-1.12.10/Mail/Protocol/Smtp/Auth/Crammd5.php",
            "line": 76,
            "snippet": "$challenge = base64_decode($challenge);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Postman/PostmanEmailLogs.php",
            "line": 212,
            "snippet": "$decoded = base64_decode( trim( $part_body ), true );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Postman/Extensions/Core/Notifications/PostmanNotifyOptions.php",
            "line": 42,
            "snippet": "return base64_decode( $this->options [ self::PUSHOVER_USER ] );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Postman/Extensions/Core/Notifications/PostmanNotifyOptions.php",
            "line": 48,
            "snippet": "return base64_decode( $this->options [ self::PUSHOVER_TOKEN ] );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "Postman/Extensions/Core/Notifications/PostmanNotifyOptions.php",
            "line": 54,
            "snippet": "return base64_decode( $this->options [ self::SLACK_TOKEN ] );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "1e12571330485faf037da754e7673ce70d81b353"
}
Medium code_scan_match Meta pixel for WordPress (400k+ installs) Resolved 4mo ago
Slugofficial-facebook-pixel
Finding count2
Findings
PatternKindFileLineSnippetConfidence
eval_callbuiltinintegration/class-facebookwordpresscontactform7.php85eval(event.detail.apiResponse.fb_pxl_code);medium
base64_decodebuiltincore/class-servereventasynctask.php193base64_decode( // phpcs:ignore WordPress.Security.NonceVerification.Missing, WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode, WordPress.Security.ValidatedSanitizedInput.Mismedium
Resolved sha8fd7544072ab468f45ea34720cd77a2d32f1a428
View raw JSON
{
    "slug": "official-facebook-pixel",
    "finding_count": 2,
    "findings": [
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "integration/class-facebookwordpresscontactform7.php",
            "line": 85,
            "snippet": "eval(event.detail.apiResponse.fb_pxl_code);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "core/class-servereventasynctask.php",
            "line": 193,
            "snippet": "base64_decode( // phpcs:ignore WordPress.Security.NonceVerification.Missing, WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode, WordPress.Security.ValidatedSanitizedInput.Mis",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "8fd7544072ab468f45ea34720cd77a2d32f1a428"
}
Medium code_scan_match Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider (500k+ installs) Resolved 4mo ago
Slugml-slider
Finding count3
Findings
PatternKindFileLineSnippetConfidence
eval_callbuiltinlib/htmlpurifier/library/HTMLPurifier/ConfigSchema/InterchangeBuilder.php182return eval('return array(' . $contents . ');');medium
base64_decodebuiltinlib/htmlpurifier/library/HTMLPurifier/URIScheme/data.php78$raw_data = base64_decode($data);medium
eval_callbuiltinlib/htmlpurifier/library/HTMLPurifier/VarParser/Native.php30$result = eval("\$var = $expr;");medium
Resolved sha7438698b9fc37feca91cb4442de769eb6bda1e7c
View raw JSON
{
    "slug": "ml-slider",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "lib/htmlpurifier/library/HTMLPurifier/ConfigSchema/InterchangeBuilder.php",
            "line": 182,
            "snippet": "return eval('return array(' . $contents . ');');",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/htmlpurifier/library/HTMLPurifier/URIScheme/data.php",
            "line": 78,
            "snippet": "$raw_data = base64_decode($data);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "lib/htmlpurifier/library/HTMLPurifier/VarParser/Native.php",
            "line": 30,
            "snippet": "$result = eval(\"\\$var = $expr;\");",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "7438698b9fc37feca91cb4442de769eb6bda1e7c"
}
Medium code_scan_match Broken Link Checker (500k+ installs) Resolved 4mo ago
Slugbroken-link-checker
Finding count3
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinapp/users/recipients/class-model.php93$key_parts = explode( '_', base64_decode( $key ) );medium
base64_decodebuiltinlegacy/idn/uctc.php204$tmp = base64_decode( $b64 );medium
eval_callbuiltinlegacy/includes/admin/links-page-js.php669eval('data = ' + data);medium
Resolved sha763da2ad922aa5358b1c5720e59ea3e2bf53bdff
View raw JSON
{
    "slug": "broken-link-checker",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "app/users/recipients/class-model.php",
            "line": 93,
            "snippet": "$key_parts = explode( '_', base64_decode( $key ) );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "legacy/idn/uctc.php",
            "line": 204,
            "snippet": "$tmp = base64_decode( $b64 );",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "legacy/includes/admin/links-page-js.php",
            "line": 669,
            "snippet": "eval('data = ' + data);",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "763da2ad922aa5358b1c5720e59ea3e2bf53bdff"
}
Medium code_scan_match TablePress – Tables in WordPress made easy (600k+ installs) Resolved 4mo ago
Slugtablepress
Finding count3
Findings
PatternKindFileLineSnippetConfidence
gzinflatebuiltinlibraries/simplexlsx.class.php275$vZ = gzinflate($vZ);medium
gzinflatebuiltinlibraries/simplexlsx.class.php560$entry['data'] = gzinflate($entry['data']);medium
eval_callbuiltinlibraries/evalmath.class.php529eval( '$stack->push( ' . $function_name . '( $op1 ) );' );medium
Resolved shacb2a7b284c5813a85b32d51461a77dcffb218994
View raw JSON
{
    "slug": "tablepress",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "libraries/simplexlsx.class.php",
            "line": 275,
            "snippet": "$vZ = gzinflate($vZ);",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "libraries/simplexlsx.class.php",
            "line": 560,
            "snippet": "$entry['data'] = gzinflate($entry['data']);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "libraries/evalmath.class.php",
            "line": 529,
            "snippet": "eval( '$stack->push( ' . $function_name . '( $op1 ) );' );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "cb2a7b284c5813a85b32d51461a77dcffb218994"
}
Medium code_scan_match WPvivid — Backup, Migration & Staging (900k+ installs) Resolved 4mo ago
Slugwpvivid-backuprestore
Finding count49
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinincludes/class-wpvivid-migrate.php575$crypt=new WPvivid_crypt(base64_decode($token));medium
base64_decodebuiltinincludes/class-wpvivid-migrate.php728$crypt=new WPvivid_crypt(base64_decode($options[$url]['token']));medium
base64_decodebuiltinincludes/customclass/class-wpvivid-base-dropbox.php234$access_token=base64_decode($this -> access_token);medium
base64_decodebuiltinincludes/customclass/class-wpvivid-base-dropbox.php314$refresh_token=base64_decode($this -> refresh_token);medium
base64_decodebuiltinincludes/customclass/class-wpvivid-google-drive.php647$tmp_refresh_token = base64_decode($tmp_refresh_token);medium
base64_decodebuiltinincludes/customclass/class-wpvivid-google-drive.php872$token['access_token'] = base64_decode($this->options['token']['access_token']);medium
base64_decodebuiltinincludes/customclass/class-wpvivid-google-drive.php894$tmp_refresh_token = base64_decode($tmp_refresh_token);medium
base64_decodebuiltinincludes/customclass/class-wpvivid-amazons3-plus.php704$secret = base64_decode($this->options['secret']);medium
base64_decodebuiltinincludes/customclass/class-wpvivid-amazons3-plus.php731$secret = base64_decode($this->options['secret']);medium
base64_decodebuiltinincludes/customclass/class-wpvivid-send-to-site.php263$crypt=new WPvivid_crypt(base64_decode($this->options['token']));medium
base64_decodebuiltinincludes/customclass/class-wpvivid-send-to-site.php323$crypt=new WPvivid_crypt(base64_decode($this->options['token']));medium
base64_decodebuiltinincludes/customclass/class-wpvivid-send-to-site.php398$crypt=new WPvivid_crypt(base64_decode($this->options['token']));medium
base64_decodebuiltinincludes/customclass/class-wpvivid-send-to-site.php468$crypt=new WPvivid_crypt(base64_decode($this->options['token']));medium
base64_decodebuiltinincludes/customclass/class-wpvivid-send-to-site.php530$crypt = new WPvivid_crypt(base64_decode($option['private_key']));medium
base64_decodebuiltinincludes/customclass/class-wpvivid-send-to-site.php531$body = base64_decode($_POST['wpvivid_content']);medium
Resolved shaaf1d78f2cf75f798bdbac48eaa5ad4d885b79b92
View raw JSON
{
    "slug": "wpvivid-backuprestore",
    "finding_count": 49,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/class-wpvivid-migrate.php",
            "line": 575,
            "snippet": "$crypt=new WPvivid_crypt(base64_decode($token));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/class-wpvivid-migrate.php",
            "line": 728,
            "snippet": "$crypt=new WPvivid_crypt(base64_decode($options[$url]['token']));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/customclass/class-wpvivid-base-dropbox.php",
            "line": 234,
            "snippet": "$access_token=base64_decode($this -> access_token);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/customclass/class-wpvivid-base-dropbox.php",
            "line": 314,
            "snippet": "$refresh_token=base64_decode($this -> refresh_token);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/customclass/class-wpvivid-google-drive.php",
            "line": 647,
            "snippet": "$tmp_refresh_token = base64_decode($tmp_refresh_token);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/customclass/class-wpvivid-google-drive.php",
            "line": 872,
            "snippet": "$token['access_token'] = base64_decode($this->options['token']['access_token']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/customclass/class-wpvivid-google-drive.php",
            "line": 894,
            "snippet": "$tmp_refresh_token = base64_decode($tmp_refresh_token);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/customclass/class-wpvivid-amazons3-plus.php",
            "line": 704,
            "snippet": "$secret = base64_decode($this->options['secret']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/customclass/class-wpvivid-amazons3-plus.php",
            "line": 731,
            "snippet": "$secret = base64_decode($this->options['secret']);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/customclass/class-wpvivid-send-to-site.php",
            "line": 263,
            "snippet": "$crypt=new WPvivid_crypt(base64_decode($this->options['token']));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/customclass/class-wpvivid-send-to-site.php",
            "line": 323,
            "snippet": "$crypt=new WPvivid_crypt(base64_decode($this->options['token']));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/customclass/class-wpvivid-send-to-site.php",
            "line": 398,
            "snippet": "$crypt=new WPvivid_crypt(base64_decode($this->options['token']));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/customclass/class-wpvivid-send-to-site.php",
            "line": 468,
            "snippet": "$crypt=new WPvivid_crypt(base64_decode($this->options['token']));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/customclass/class-wpvivid-send-to-site.php",
            "line": 530,
            "snippet": "$crypt = new WPvivid_crypt(base64_decode($option['private_key']));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/customclass/class-wpvivid-send-to-site.php",
            "line": 531,
            "snippet": "$body = base64_decode($_POST['wpvivid_content']);",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "af1d78f2cf75f798bdbac48eaa5ad4d885b79b92"
}
Medium code_scan_match W3 Total Cache (900k+ installs) Resolved 4mo ago
Slugw3-total-cache
Finding count26
Findings
PatternKindFileLineSnippetConfidence
eval_callbuiltinPgCache_ContentGrabber.php2,139$result = eval( $code ); // phpcs:ignore Generic.PHP.ForbiddenFunctions.Foundmedium
eval_callbuiltinBrowserCache_Page_View_QuickReference.php81<td>Allows unsafe dynamic code evaluation such as Javascript eval()</td>medium
base64_decodebuiltinlib/Google/Utils.php61return base64_decode( $b64 ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decodemedium
base64_decodebuiltinlib/SNS/services/MessageValidator/MessageValidator.php66$incomingSignature = base64_decode($message->get('Signature'));medium
gzinflatebuiltinlib/SNS/sdk.class.php1,349elseif (($uncompressed = gzinflate($body)) !== false)medium
gzinflatebuiltinlib/SNS/sdk.class.php1,379elseif (($uncompressed = gzinflate($body)) !== false)medium
base64_decodebuiltinlib/Nusoap/class.soap_parser.php504return base64_decode($value);medium
eval_callbuiltinlib/Nusoap/class.soapclient.php711eval($evalStr);medium
eval_callbuiltinlib/Nusoap/class.soapclient.php713eval("\$proxy = new nusoap_proxy_$r('');");medium
eval_callbuiltinlib/Nusoap/nusoap.php4,006$this->debug('in invoke_method, calling function using eval()');medium
eval_callbuiltinlib/Nusoap/nusoap.php4,010$this->debug('in invoke_method, calling class method using eval()');medium
eval_callbuiltinlib/Nusoap/nusoap.php4,013$this->debug('in invoke_method, calling instance method using eval()');medium
eval_callbuiltinlib/Nusoap/nusoap.php4,032@eval($funcCall);medium
eval_callbuiltinlib/Nusoap/nusoap.php7,833eval($evalStr);medium
eval_callbuiltinlib/Nusoap/nusoap.php7,835eval("\$proxy = new nusoap_proxy_$r('');");medium
Resolved sha9937c185193605940b4c44ba3e26e48122a85f38
View raw JSON
{
    "slug": "w3-total-cache",
    "finding_count": 26,
    "findings": [
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "PgCache_ContentGrabber.php",
            "line": 2139,
            "snippet": "$result = eval( $code ); // phpcs:ignore Generic.PHP.ForbiddenFunctions.Found",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "BrowserCache_Page_View_QuickReference.php",
            "line": 81,
            "snippet": "<td>Allows unsafe dynamic code evaluation such as Javascript eval()</td>",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/Google/Utils.php",
            "line": 61,
            "snippet": "return base64_decode( $b64 ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/SNS/services/MessageValidator/MessageValidator.php",
            "line": 66,
            "snippet": "$incomingSignature = base64_decode($message->get('Signature'));",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "lib/SNS/sdk.class.php",
            "line": 1349,
            "snippet": "elseif (($uncompressed = gzinflate($body)) !== false)",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "lib/SNS/sdk.class.php",
            "line": 1379,
            "snippet": "elseif (($uncompressed = gzinflate($body)) !== false)",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "lib/Nusoap/class.soap_parser.php",
            "line": 504,
            "snippet": "return base64_decode($value);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "lib/Nusoap/class.soapclient.php",
            "line": 711,
            "snippet": "eval($evalStr);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "lib/Nusoap/class.soapclient.php",
            "line": 713,
            "snippet": "eval(\"\\$proxy = new nusoap_proxy_$r('');\");",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "lib/Nusoap/nusoap.php",
            "line": 4006,
            "snippet": "$this->debug('in invoke_method, calling function using eval()');",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "lib/Nusoap/nusoap.php",
            "line": 4010,
            "snippet": "$this->debug('in invoke_method, calling class method using eval()');",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "lib/Nusoap/nusoap.php",
            "line": 4013,
            "snippet": "$this->debug('in invoke_method, calling instance method using eval()');",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "lib/Nusoap/nusoap.php",
            "line": 4032,
            "snippet": "@eval($funcCall);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "lib/Nusoap/nusoap.php",
            "line": 7833,
            "snippet": "eval($evalStr);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "lib/Nusoap/nusoap.php",
            "line": 7835,
            "snippet": "eval(\"\\$proxy = new nusoap_proxy_$r('');\");",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "9937c185193605940b4c44ba3e26e48122a85f38"
}
Medium code_scan_match Security Optimizer – The All-In-One Protection Plugin (1M+ installs) Resolved 4mo ago
Slugsg-security
Finding count3
Findings
PatternKindFileLineSnippetConfidence
$allowed_IPsioc:code_patterncore/Login_Service/Login_Service.php50$allowed_ips = get_option( 'sg_login_access', array() );medium
$allowed_IPsioc:code_patterncore/Login_Service/Login_Service.php53if ( empty( $allowed_ips ) ) {medium
$allowed_IPsioc:code_patterncore/Login_Service/Login_Service.php57foreach ( $allowed_ips as $allowed_ip ) {medium
Resolved sha024f388c11cad753dee92593cd2661359c030835
View raw JSON
{
    "slug": "sg-security",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "core/Login_Service/Login_Service.php",
            "line": 50,
            "snippet": "$allowed_ips = get_option( 'sg_login_access', array() );",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "core/Login_Service/Login_Service.php",
            "line": 53,
            "snippet": "if ( empty( $allowed_ips ) ) {",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "core/Login_Service/Login_Service.php",
            "line": 57,
            "snippet": "foreach ( $allowed_ips as $allowed_ip ) {",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "024f388c11cad753dee92593cd2661359c030835"
}
Medium code_scan_match Smush – Image Optimization, Compression, Lazy Load, WebP & CDN (1M+ installs) Resolved 4mo ago
Slugwp-smushit
Finding count3
Findings
PatternKindFileLineSnippetConfidence
Validate_Path(ioc:code_patterncore/modules/class-dir.php698private function validate_path( $path_to_check ) {medium
Validate_Path(ioc:code_patterncore/modules/class-dir.php787if ( ! $this->validate_path( dirname( $relative_path ) ) ) {medium
Validate_Path(ioc:code_patterncore/modules/class-dir.php822if ( ! $this->validate_path( $relative_path ) ) {medium
Resolved sha50f97314f22cb954a69ae3c0c09bb564d863f883
View raw JSON
{
    "slug": "wp-smushit",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "Validate_Path(",
            "kind": "ioc:code_pattern",
            "file": "core/modules/class-dir.php",
            "line": 698,
            "snippet": "private function validate_path( $path_to_check ) {",
            "confidence": "medium"
        },
        {
            "pattern": "Validate_Path(",
            "kind": "ioc:code_pattern",
            "file": "core/modules/class-dir.php",
            "line": 787,
            "snippet": "if ( ! $this->validate_path( dirname( $relative_path ) ) ) {",
            "confidence": "medium"
        },
        {
            "pattern": "Validate_Path(",
            "kind": "ioc:code_pattern",
            "file": "core/modules/class-dir.php",
            "line": 822,
            "snippet": "if ( ! $this->validate_path( $relative_path ) ) {",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "50f97314f22cb954a69ae3c0c09bb564d863f883"
}