Accordion and Accordion Slider

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "analytics.essentialplugin.com",
    "kind": "ioc:domain",
    "version": "1.4.6.1",
    "hit_count": 6,
    "first_hit": {
        "file": "accordion-and-accordion-slider.php",
        "line": 38,
        "snippet": "<p><?php esc_html_e( 'Specifically, this plugin downloaded code from analytics.essentialplugin.com and installed it in your site, while the specific case can differ, we know that they were installin"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "Plugin Wpos Analytics Data Starts",
    "kind": "ioc:code_pattern",
    "version": "1.4.6.1",
    "hit_count": 1,
    "first_hit": {
        "file": "accordion-and-accordion-slider.php",
        "line": 297,
        "snippet": "/* Plugin Wpos Analytics Data Starts */"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "unserialize_after_remote_call",
    "kind": "builtin",
    "version": "1.4.6.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 696,
        "snippet": "L690: $data = @file_get_contents($url);  \u2192  L696: $info = @unserialize($data);"
    },
    "explanation": "a remote HTTP fetch (`wp_remote_*` / `curl_exec`) is followed by `@unserialize` within the same file \u2014 classic PHP Object Injection C2 gadget. The error-suppressed form is the tell: legit code wants to know when deserialize fails; attackers suppress so malformed gadgets do not leak. A real finding regardless of author intent: any plugin that deserializes remote responses without validation is a latent RCE chain if the remote endpoint is ever compromised."
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "Wpos_Anylc_Admin",
    "kind": "ioc:code_pattern",
    "version": "1.4.6.1",
    "hit_count": 6,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 15,
        "snippet": "class Wpos_Anylc_Admin {"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "wpos_rest_api_init",
    "kind": "ioc:code_pattern",
    "version": "1.4.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 72,
        "snippet": "add_action( 'rest_api_init', array($this, 'wpos_rest_api_init') );"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "wpos_handle_analytics_request",
    "kind": "ioc:code_pattern",
    "version": "1.4.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 593,
        "snippet": "'callback'            => array( $this, 'wpos_handle_analytics_request' ),"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "wpos_get_plugin_version_by_file",
    "kind": "ioc:code_pattern",
    "version": "1.4.6.1",
    "hit_count": 2,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 657,
        "snippet": "$version = $this->wpos_get_plugin_version_by_file($matching_product['file']);"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "wpos_process_monthly_data",
    "kind": "ioc:code_pattern",
    "version": "1.4.6.1",
    "hit_count": 3,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 545,
        "snippet": "$this->wpos_process_monthly_data( $this->analytics_slugs );"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "https://analytics.essentialplugin.com",
    "kind": "ioc:url",
    "version": "1.4.6.1",
    "hit_count": 5,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "$analytics_endpoint",
    "kind": "ioc:code_pattern",
    "version": "1.4.6.1",
    "hit_count": 1,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 17,
        "snippet": "public $analytics_endpoint\t= 'https://analytics.essentialplugin.com';"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "pattern": "wpos_monthly_cron_hook",
    "kind": "ioc:code_pattern",
    "version": "1.4.6.1",
    "hit_count": 4,
    "first_hit": {
        "file": "wpos-analytics/includes/class-anylc-admin.php",
        "line": 69,
        "snippet": "add_action( 'wpos_monthly_cron_hook', array($this, 'wpos_monthly_cron_hook_fn') );"
    },
    "explanation": null
}

{
    "slug": "accordion-and-accordion-slider",
    "committer": "essentialplugin",
    "display_name": "essentialplugin",
    "member_since": "2025-05-12",
    "first_commit_at": "2025-05-15 07:40:24",
    "account_age_at_first_commit": 3,
    "commit_count": 5,
    "active_installs": 2000
}

{
    "slug": "accordion-and-accordion-slider",
    "committer": "essentialplugin",
    "display_name": "essentialplugin",
    "member_since": "2025-05-12",
    "first_commit_at": "2025-05-15 07:40:24",
    "account_age_at_first_commit": 3,
    "commit_count": 5,
    "active_installs": 2000
}

{
    "slug": "accordion-and-accordion-slider",
    "committer": "essentialplugin",
    "display_name": "Essential Plugin",
    "member_since": "2025-05-12",
    "first_commit_at": "2025-05-15 07:40:24",
    "account_age_at_first_commit": 3,
    "commit_count": 5,
    "active_installs": 2000
}

{
    "committer": "essentialplugin",
    "member_since": "2025-05-12",
    "plugins_joined": 31,
    "spread_days": 281,
    "earliest_join": "2025-05-15 07:40:24",
    "latest_join": "2026-02-20 19:27:33",
    "combined_installs": 0,
    "sample_plugins": [
        {
            "slug": "accordion-and-accordion-slider",
            "active_installs": 0,
            "first_commit_at": "2025-05-15 07:40:24"
        },
        {
            "slug": "album-and-image-gallery-plus-lightbox",
            "active_installs": 0,
            "first_commit_at": "2025-11-12 11:35:26"
        },
        {
            "slug": "audio-player-with-playlist-ultimate",
            "active_installs": 0,
            "first_commit_at": "2026-02-19 18:05:14"
        },
        {
            "slug": "blog-designer-for-post-and-widget",
            "active_installs": 0,
            "first_commit_at": "2025-11-12 11:38:56"
        },
        {
            "slug": "countdown-timer-ultimate",
            "active_installs": 0,
            "first_commit_at": "2025-08-08 17:09:06"
        },
        {
            "slug": "featured-post-creative",
            "active_installs": 0,
            "first_commit_at": "2025-11-12 12:25:18"
        },
        {
            "slug": "footer-mega-grid-columns",
            "active_installs": 0,
            "first_commit_at": "2026-02-19 18:46:54"
        },
        {
            "slug": "hero-banner-ultimate",
            "active_installs": 0,
            "first_commit_at": "2025-06-19 15:32:40"
        },
        {
            "slug": "html5-videogallery-plus-player",
            "active_installs": 0,
            "first_commit_at": "2025-11-12 14:01:15"
        },
        {
            "slug": "meta-slider-and-carousel-with-lightbox",
            "active_installs": 0,
            "first_commit_at": "2025-11-12 12:47:54"
        }
    ]
}