Softaculous

softaculous · by softaculous · wordpress.org ↗ · SVN ↗
Active installs
10k+
Current version
2.2.7
Added
2024-04-10
Last updated
2025-08-06 (9mo ago)
First seen by beacon
1mo ago
Total downloads
109,474

Alerts (0)

No open alerts.

Show 1 resolved alert
Medium code_scan_match Resolved · code_scan_fp_class_security_ip_allowlist 2026-05-05 12:54:01 (17d ago)
Slugsoftaculous
Finding count5
Findings
PatternKindFileLineSnippetConfidence
$allowed_IPsioc:code_patternsettings.php118$allowed_ips = softaculous_optPOST('softaculous_allowed_ips');medium
$allowed_IPsioc:code_patternsettings.php119$_a_ips = explode(',', $allowed_ips);medium
$allowed_IPsioc:code_patternfunctions.php2,278$allowed_ips = softaculous_get_allowed_ips();medium
$allowed_IPsioc:code_patternfunctions.php2,282if(!in_array($remote_ip, $allowed_ips)){medium
$allowed_IPsioc:code_patternfunctions.php2,283$return['error'] = 'Unauthorized Access from an unknown IP '.esc_html($remote_ip).'. Allowed IPs - '.esc_html(implode(',', $allowed_ips)).'!!';medium
Resolved sha753f0f44570e3a59ed7ac4d1385a72b5b2d33169
View raw JSON
{
    "slug": "softaculous",
    "finding_count": 5,
    "findings": [
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "settings.php",
            "line": 118,
            "snippet": "$allowed_ips = softaculous_optPOST('softaculous_allowed_ips');",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "settings.php",
            "line": 119,
            "snippet": "$_a_ips = explode(',', $allowed_ips);",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "functions.php",
            "line": 2278,
            "snippet": "$allowed_ips = softaculous_get_allowed_ips();",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "functions.php",
            "line": 2282,
            "snippet": "if(!in_array($remote_ip, $allowed_ips)){",
            "confidence": "medium"
        },
        {
            "pattern": "$allowed_IPs",
            "kind": "ioc:code_pattern",
            "file": "functions.php",
            "line": 2283,
            "snippet": "$return['error'] = 'Unauthorized Access from an unknown IP '.esc_html($remote_ip).'. Allowed IPs - '.esc_html(implode(',', $allowed_ips)).'!!';",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "753f0f44570e3a59ed7ac4d1385a72b5b2d33169"
}

SVN committers (2)

Accounts with actual commit access to softaculous on plugins.svn.wordpress.org, reconstructed from svn log. This is the list that matters for ownership changes — not the readme contributors.

Committer Member since Commits First commit Latest commit
Softaculous 2010-01-09 15 2024-04-10 · r3068213 2025-08-06 · r3340369
plugin-master 2007-03-09 1 2024-02-25 · r3040874 2024-02-25 · r3040874

Readme contributors (2)

Names the plugin's readme declares as contributors. A soft signal — anyone can be listed. The SVN access column is the ground-truth cross-reference: does this contributor actually commit code?

Contributor Member since SVN access Status
Softaculous 2010-01-09 15 commits Active
pagelayer 2019-04-04 Active

Versions (5 most recent)

Version Released Download
2.2.7 2025-08-06 · 9mo ago zip
2.2.4 2025-08-01 · 9mo ago zip
2.2.2 2025-04-15 · 1y ago zip
2.2.1 2025-04-15 · 1y ago zip
2.0.7 2024-08-22 · 1y ago zip