NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization

nitropack · by nitropack · wordpress.org ↗ · SVN ↗
Active installs
100k+
Current version
1.19.4
Added
2019-08-29
Last updated
2026-04-21 (1mo ago)
First seen by beacon
1mo ago
Total downloads
4,839,211

Alerts (0)

No open alerts.

Show 1 resolved alert
Medium code_scan_match Resolved · code_scan_fp_class_genre_encoding 2026-05-05 11:42:09 (17d ago)
Slugnitropack
Finding count12
Findings
PatternKindFileLineSnippetConfidence
base64_decodebuiltinclasses/Feature/AjaxShortcodes.php173$tags = !empty($_POST["tags"]) && is_string($_POST["tags"]) ? json_decode(base64_decode($_POST['tags']), true) : [];medium
base64_decodebuiltinfunctions.php430$url = base64_decode( $_POST["nitroBeaconUrl"] );medium
base64_decodebuiltinfunctions.php431$cookiesJson = ! empty( $_POST["nitroBeaconCookies"] ) ? base64_decode( $_POST["nitroBeaconCookies"] ) : ""; // We need to fall back to empty string to remain backwards compatible. Otherwise cache fmedium
base64_decodebuiltinfunctions.php450$url = base64_decode( $_POST["nitroBeaconUrl"] );medium
base64_decodebuiltinfunctions.php453$np_originalRequestCookies = json_decode( base64_decode( $_POST["nitroBeaconCookies"] ), true );medium
base64_decodebuiltinnitropack-sdk/bootstrap.php143$url = base64_decode($_POST["nitroBeaconUrl"]);medium
base64_decodebuiltinnitropack-sdk/bootstrap.php144$cookiesJson = !empty($_POST["nitroBeaconCookies"]) ? base64_decode($_POST["nitroBeaconCookies"]) : ""; // We need to fall back to empty string to remain backwards compatible. Otherwise cachemedium
base64_decodebuiltinnitropack-sdk/bootstrap.php154$url = base64_decode($_POST["nitroBeaconUrl"]);medium
base64_decodebuiltinnitropack-sdk/bootstrap.php157NitroPack_CookieStore::$cookies = json_decode(base64_decode($_POST["nitroBeaconCookies"]), true);medium
base64_decodebuiltinnitropack-sdk/NitroPack/SDK/Backlog.php174return json_decode(base64_decode($entry), true);medium
eval_callbuiltinnitropack-sdk/NitroPack/SDK/StorageDriver/Redis.php137$this->redis->eval('medium
eval_callbuiltinnitropack-sdk/NitroPack/SDK/StorageDriver/Redis.php231$this->redis->eval('medium
Resolved sha9d96e81abdfd15a7b0cbd257bd7114adb3e18aca
View raw JSON
{
    "slug": "nitropack",
    "finding_count": 12,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "classes/Feature/AjaxShortcodes.php",
            "line": 173,
            "snippet": "$tags = !empty($_POST[\"tags\"]) && is_string($_POST[\"tags\"]) ? json_decode(base64_decode($_POST['tags']), true) : [];",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "functions.php",
            "line": 430,
            "snippet": "$url = base64_decode( $_POST[\"nitroBeaconUrl\"] );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "functions.php",
            "line": 431,
            "snippet": "$cookiesJson = ! empty( $_POST[\"nitroBeaconCookies\"] ) ? base64_decode( $_POST[\"nitroBeaconCookies\"] ) : \"\"; // We need to fall back to empty string to remain backwards compatible. Otherwise cache f",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "functions.php",
            "line": 450,
            "snippet": "$url = base64_decode( $_POST[\"nitroBeaconUrl\"] );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "functions.php",
            "line": 453,
            "snippet": "$np_originalRequestCookies = json_decode( base64_decode( $_POST[\"nitroBeaconCookies\"] ), true );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "nitropack-sdk/bootstrap.php",
            "line": 143,
            "snippet": "$url = base64_decode($_POST[\"nitroBeaconUrl\"]);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "nitropack-sdk/bootstrap.php",
            "line": 144,
            "snippet": "$cookiesJson = !empty($_POST[\"nitroBeaconCookies\"]) ? base64_decode($_POST[\"nitroBeaconCookies\"]) : \"\"; // We need to fall back to empty string to remain backwards compatible. Otherwise cache",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "nitropack-sdk/bootstrap.php",
            "line": 154,
            "snippet": "$url = base64_decode($_POST[\"nitroBeaconUrl\"]);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "nitropack-sdk/bootstrap.php",
            "line": 157,
            "snippet": "NitroPack_CookieStore::$cookies = json_decode(base64_decode($_POST[\"nitroBeaconCookies\"]), true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "nitropack-sdk/NitroPack/SDK/Backlog.php",
            "line": 174,
            "snippet": "return json_decode(base64_decode($entry), true);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "nitropack-sdk/NitroPack/SDK/StorageDriver/Redis.php",
            "line": 137,
            "snippet": "$this->redis->eval('",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "nitropack-sdk/NitroPack/SDK/StorageDriver/Redis.php",
            "line": 231,
            "snippet": "$this->redis->eval('",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "9d96e81abdfd15a7b0cbd257bd7114adb3e18aca"
}

SVN committers (2)

Accounts with actual commit access to nitropack on plugins.svn.wordpress.org, reconstructed from svn log. This is the list that matters for ownership changes — not the readme contributors.

Committer Member since Commits First commit Latest commit
NitroPack 2019-05-27 128 2019-08-29 · r2147908 2026-04-21 · r3511511
plugin-master 2007-03-09 1 2019-08-26 · r2145894 2019-08-26 · r2145894

Readme contributors (1)

Names the plugin's readme declares as contributors. A soft signal — anyone can be listed. The SVN access column is the ground-truth cross-reference: does this contributor actually commit code?

Contributor Member since SVN access Status
NitroPack 2019-05-27 128 commits Active

Versions (76 most recent)

Version Released Download
1.19.4 2026-04-21 · 1mo ago zip
1.19.3 2026-03-18 · 2mo ago zip
1.19.2 2026-03-18 · 2mo ago zip
1.19.1 2026-03-04 · 2mo ago zip
1.19.0 2026-02-10 · 3mo ago zip
1.18.9 2026-01-20 · 4mo ago zip
1.18.8 2025-12-10 · 5mo ago zip
1.18.7 2025-11-11 · 6mo ago zip
1.18.6 2025-11-10 · 6mo ago zip
1.18.5 2025-09-02 · 8mo ago zip
1.18.4 2025-08-01 · 9mo ago zip
1.18.3 2025-07-23 · 10mo ago zip
1.18.2 2025-07-23 · 10mo ago zip
1.18.1 2025-05-12 · 1y ago zip
1.18.0 2025-03-18 · 1y ago zip
1.17.9 2025-03-07 · 1y ago zip
1.17.8 2025-03-06 · 1y ago zip
1.17.7 2025-03-06 · 1y ago zip
1.17.6 2024-12-20 · 1y ago zip
1.17.0 2024-09-18 · 1y ago zip
1.16.8 2024-08-16 · 1y ago zip
1.16.7 2024-08-08 · 1y ago zip
1.16.6 2024-08-07 · 1y ago zip
1.16.5 2024-08-07 · 1y ago zip
1.16.4 2024-07-24 · 1y ago zip
1.16.3 2024-07-15 · 1y ago zip
1.16.2 2024-07-08 · 1y ago zip
1.16.1 2024-07-08 · 1y ago zip
1.16.0 2024-07-08 · 1y ago zip
1.15.3 2024-06-24 · 1y ago zip
1.15.2 2024-06-10 · 1y ago zip
1.15.1 2024-06-04 · 1y ago zip
1.15.0 2024-06-04 · 1y ago zip
1.14.0 2024-04-25 · 2y ago zip
1.13.0 2024-03-13 · 2y ago zip
1.12.0 2024-02-29 · 2y ago zip
1.11.0 2024-01-22 · 2y ago zip
1.10.4 2023-12-01 · 2y ago zip
1.10.3 2023-11-14 · 2y ago zip
1.10.2 2023-11-10 · 2y ago zip
1.10.1 2023-11-08 · 2y ago zip
1.10.0 2023-11-07 · 2y ago zip
1.9.2 2023-10-27 · 2y ago zip
1.9.1 2023-09-30 · 2y ago zip
1.9.0 2023-09-25 · 2y ago zip
1.8.3 2023-08-21 · 2y ago zip
1.8.1 2023-07-14 · 2y ago zip
1.8.0 2023-07-10 · 2y ago zip
1.7.1 2023-04-28 · 3y ago zip
1.7.0 2023-04-28 · 3y ago zip
1.6.1 2023-03-14 · 3y ago zip
1.6.0 2023-03-14 · 3y ago zip
1.5.19 2023-01-18 · 3y ago zip
1.5.18 2023-01-09 · 3y ago zip
1.5.17 2022-10-13 · 3y ago zip
1.5.16 2022-09-22 · 3y ago zip
1.5.15 2022-08-08 · 3y ago zip
1.5.14 2022-07-31 · 3y ago zip
1.5.13 2022-07-29 · 3y ago zip
1.5.12 2022-05-07 · 4y ago zip
1.5.11 2022-04-26 · 4y ago zip
1.5.10 2022-04-04 · 4y ago zip
1.5.9 2022-02-14 · 4y ago zip
1.5.8 2021-11-11 · 4y ago zip
1.5.7 2021-08-17 · 4y ago zip
1.5.6 2021-08-13 · 4y ago zip
1.5.5 2021-08-12 · 4y ago zip
1.5.4 2021-03-26 · 5y ago zip
1.5.3 2021-03-26 · 5y ago zip
1.5.2 2021-02-18 · 5y ago zip
1.5.1 2021-02-10 · 5y ago zip
1.5.0 2021-02-03 · 5y ago zip
1.4.1 2020-12-31 · 5y ago zip
1.4.0 2020-12-02 · 5y ago zip
1.3.19 2020-11-14 · 5y ago zip
1.3.20 2020-11-14 · 5y ago zip