SecuPress with Simple SSL – Simple and Performant Security

{
    "slug": "secupress",
    "previous_version": "2.7.1",
    "current_version": "2.7.1",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "free/functions/common.php",
            "line": 1667,
            "snippet": "$decoded = base64_decode( $data );",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "free/functions/common.php",
            "line": 1673,
            "snippet": "$inflated = gzinflate( $decoded );",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 2
}

{
    "slug": "secupress",
    "author_slug": "SecuPress",
    "burst_start": "2026-09-15 14:37:42",
    "burst_end": "2026-09-15 15:26:28",
    "burst_commits": 20,
    "burst_window_minutes": 90,
    "tenure_days": 251,
    "distinct_messages": 1,
    "avg_message_length": 5,
    "top_message": "V 2.7",
    "top_message_count": 20,
    "prt_revert": null,
    "explanation": "Established author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}