Stop Spammers Classic

stop-spammer-registrations-plugin · by webguyio · wordpress.org ↗ · SVN ↗
Acquired by Web Guy (webguyio) on 2017-01-01. Previously owned by Keith P. Graham (2010-2017), then bhadaway. New committers from that team's naming convention are expected and will not fire takeover events. source ↗
Active installs
30k+
Current version
2026.3
Added
2010-08-10
Last updated
2026-02-24 (2mo ago)
First seen by beacon
1mo ago
Total downloads
2,593,869

Alerts (0)

No open alerts.

Show 4 resolved alerts
High code_scan_match Resolved · code_scan_fp_class_vendor_cdn_enqueue 2026-05-05 12:09:52 (17d ago)
Slugstop-spammer-registrations-plugin
Finding count23
Findings
PatternKindFileLineSnippetConfidenceDetails
base64_decodebuiltinclasses/ss_challenge.php101$_POST = unserialize( base64_decode( $kp ), ['allowed_classes' => false] );medium
base64_decodebuiltinclasses/ss_challenge.php133$_POST = unserialize( base64_decode( $kp ), ['allowed_classes' => false] );medium
base64_decodebuiltinclasses/ss_challenge.php196$_POST = unserialize( base64_decode( $kp ), ['allowed_classes' => false] );medium
base64_decodebuiltinclasses/ss_challenge.php220$_POST = unserialize( base64_decode( $kp ), ['allowed_classes' => false] );medium
remote_enqueuebuiltinstop-spammer-registrations-new.php852$html = wp_enqueue_script( 'ss-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), '1', true, array( 'async' => true, 'defer' => true ) );medium
Url
https://www.google.com/recaptcha/api.js
Url host
www.google.com
remote_enqueuebuiltinstop-spammer-registrations-new.php860$html = wp_enqueue_script( 'ss-hcaptcha', 'https://hcaptcha.com/1/api.js', array(), '1', true, array( 'async' => true, 'defer' => true ) );medium
Url
https://hcaptcha.com/1/api.js
Url host
hcaptcha.com
remote_enqueuebuiltinstop-spammer-registrations-new.php867$html = wp_enqueue_script( 'ss-solvemedia', 'https://api-secure.solvemedia.com/papi/challenge.script?k=' . $solvmediaapivchallenge, array(), '1', true, array( 'async' => true, 'defer' => true ) );medium
Url
https://api-secure.solvemedia.com/papi/challenge.script?k=
Url host
api-secure.solvemedia.com
eval_callbuiltinsettings/ss_diagnostics.php585'eval(',medium
eval_callbuiltinsettings/ss_diagnostics.php586'eval (',medium
eval_callbuiltinsettings/ss_diagnostics.php658'eval(',medium
eval_callbuiltinsettings/ss_diagnostics.php659'eval (',medium
eval_callbuiltinsettings/ss_diagnostics.php733'eval(',medium
eval_callbuiltinsettings/ss_diagnostics.php734'eval (',medium
eval_callbuiltinsettings/ss_diagnostics.php803'eval(',medium
eval_callbuiltinsettings/ss_diagnostics.php804'eval (',medium
Resolved shaefe94668dcec4af86e49ad418c715c4f2a50fb6c
View raw JSON
{
    "slug": "stop-spammer-registrations-plugin",
    "finding_count": 23,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "classes/ss_challenge.php",
            "line": 101,
            "snippet": "$_POST = unserialize( base64_decode( $kp ), ['allowed_classes' => false] );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "classes/ss_challenge.php",
            "line": 133,
            "snippet": "$_POST = unserialize( base64_decode( $kp ), ['allowed_classes' => false] );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "classes/ss_challenge.php",
            "line": 196,
            "snippet": "$_POST = unserialize( base64_decode( $kp ), ['allowed_classes' => false] );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "classes/ss_challenge.php",
            "line": 220,
            "snippet": "$_POST = unserialize( base64_decode( $kp ), ['allowed_classes' => false] );",
            "confidence": "medium"
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "stop-spammer-registrations-new.php",
            "line": 852,
            "snippet": "$html = wp_enqueue_script( 'ss-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), '1', true, array( 'async' => true, 'defer' => true ) );",
            "confidence": "medium",
            "details": {
                "url": "https://www.google.com/recaptcha/api.js",
                "url_host": "www.google.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "stop-spammer-registrations-new.php",
            "line": 860,
            "snippet": "$html = wp_enqueue_script( 'ss-hcaptcha', 'https://hcaptcha.com/1/api.js', array(), '1', true, array( 'async' => true, 'defer' => true ) );",
            "confidence": "medium",
            "details": {
                "url": "https://hcaptcha.com/1/api.js",
                "url_host": "hcaptcha.com"
            }
        },
        {
            "pattern": "remote_enqueue",
            "kind": "builtin",
            "file": "stop-spammer-registrations-new.php",
            "line": 867,
            "snippet": "$html = wp_enqueue_script( 'ss-solvemedia', 'https://api-secure.solvemedia.com/papi/challenge.script?k=' . $solvmediaapivchallenge, array(), '1', true, array( 'async' => true, 'defer' => true ) );",
            "confidence": "medium",
            "details": {
                "url": "https://api-secure.solvemedia.com/papi/challenge.script?k=",
                "url_host": "api-secure.solvemedia.com"
            }
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "settings/ss_diagnostics.php",
            "line": 585,
            "snippet": "'eval(',",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "settings/ss_diagnostics.php",
            "line": 586,
            "snippet": "'eval (',",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "settings/ss_diagnostics.php",
            "line": 658,
            "snippet": "'eval(',",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "settings/ss_diagnostics.php",
            "line": 659,
            "snippet": "'eval (',",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "settings/ss_diagnostics.php",
            "line": 733,
            "snippet": "'eval(',",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "settings/ss_diagnostics.php",
            "line": 734,
            "snippet": "'eval (',",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "settings/ss_diagnostics.php",
            "line": 803,
            "snippet": "'eval(',",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "settings/ss_diagnostics.php",
            "line": 804,
            "snippet": "'eval (',",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "efe94668dcec4af86e49ad418c715c4f2a50fb6c"
}
Medium bulk_committer_takeover Resolved · no_longer_matches 2026-05-02 11:14:38 (20d ago)
Committerwebguyio
Member since2025-09-01
Plugins joined7
Spread days183
Earliest join2025-09-01 02:10:34
Latest join2026-03-03 23:24:12
Combined installs39,200
Sample plugins
SlugActive installsFirst commit at
stop-spammer-registrations-plugin30,0002025-10-13 21:50:11
site-favicon5,0002025-09-01 02:16:24
canonical-link2,0002025-09-01 02:11:45
change-table-prefix1,0002026-03-03 23:24:12
blank8002025-09-01 02:11:27
auto-tagger-for-amazon3002025-09-01 02:10:34
simplesocial1002025-09-01 03:32:28
View raw JSON
{
    "committer": "webguyio",
    "member_since": "2025-09-01",
    "plugins_joined": 7,
    "spread_days": 183,
    "earliest_join": "2025-09-01 02:10:34",
    "latest_join": "2026-03-03 23:24:12",
    "combined_installs": 39200,
    "sample_plugins": [
        {
            "slug": "stop-spammer-registrations-plugin",
            "active_installs": 30000,
            "first_commit_at": "2025-10-13 21:50:11"
        },
        {
            "slug": "site-favicon",
            "active_installs": 5000,
            "first_commit_at": "2025-09-01 02:16:24"
        },
        {
            "slug": "canonical-link",
            "active_installs": 2000,
            "first_commit_at": "2025-09-01 02:11:45"
        },
        {
            "slug": "change-table-prefix",
            "active_installs": 1000,
            "first_commit_at": "2026-03-03 23:24:12"
        },
        {
            "slug": "blank",
            "active_installs": 800,
            "first_commit_at": "2025-09-01 02:11:27"
        },
        {
            "slug": "auto-tagger-for-amazon",
            "active_installs": 300,
            "first_commit_at": "2025-09-01 02:10:34"
        },
        {
            "slug": "simplesocial",
            "active_installs": 100,
            "first_commit_at": "2025-09-01 03:32:28"
        }
    ]
}
Medium bulk_committer_takeover Resolved · no_longer_matches 2026-04-30 05:37:27 (22d ago)
Committerwebguyio
Member since2025-09-01
Plugins joined5
Spread days183
Earliest join2025-09-01 02:11:27
Latest join2026-03-03 23:24:12
Combined installs38,800
Sample plugins
SlugActive installsFirst commit at
stop-spammer-registrations-plugin30,0002025-10-13 21:50:11
site-favicon5,0002025-09-01 02:16:24
canonical-link2,0002025-09-01 02:11:45
change-table-prefix1,0002026-03-03 23:24:12
blank8002025-09-01 02:11:27
View raw JSON
{
    "committer": "webguyio",
    "member_since": "2025-09-01",
    "plugins_joined": 5,
    "spread_days": 183,
    "earliest_join": "2025-09-01 02:11:27",
    "latest_join": "2026-03-03 23:24:12",
    "combined_installs": 38800,
    "sample_plugins": [
        {
            "slug": "stop-spammer-registrations-plugin",
            "active_installs": 30000,
            "first_commit_at": "2025-10-13 21:50:11"
        },
        {
            "slug": "site-favicon",
            "active_installs": 5000,
            "first_commit_at": "2025-09-01 02:16:24"
        },
        {
            "slug": "canonical-link",
            "active_installs": 2000,
            "first_commit_at": "2025-09-01 02:11:45"
        },
        {
            "slug": "change-table-prefix",
            "active_installs": 1000,
            "first_commit_at": "2026-03-03 23:24:12"
        },
        {
            "slug": "blank",
            "active_installs": 800,
            "first_commit_at": "2025-09-01 02:11:27"
        }
    ]
}
Critical new_committer_young_account Resolved · no_longer_matches 2026-04-23 19:21:30 (29d ago)
Slugstop-spammer-registrations-plugin
Committerwebguyio
Display nameWeb Guy
Member since2025-09-01
First commit at2025-10-13 21:50:11
Account age at first commit42
Commit count16
Active installs30,000
View raw JSON
{
    "slug": "stop-spammer-registrations-plugin",
    "committer": "webguyio",
    "display_name": "Web Guy",
    "member_since": "2025-09-01",
    "first_commit_at": "2025-10-13 21:50:11",
    "account_age_at_first_commit": 42,
    "commit_count": 16,
    "active_installs": 30000
}

SVN committers (6)

Accounts with actual commit access to stop-spammer-registrations-plugin on plugins.svn.wordpress.org, reconstructed from svn log. This is the list that matters for ownership changes — not the readme contributors.

Committer Member since Commits First commit Latest commit
bhadaway 119 2017-05-07 · r1652270 2024-05-20 · r3089408
trumani 2014-03-24 31 2020-01-13 · r2226241 2023-09-13 · r2966124
Keith P. Graham 2009-09-29 28 2010-08-10 · r273938 2017-05-09 · r1653637
Web Guy Young account 2025-09-01 16 2025-10-13 · r3377746 2026-02-24 · r3468886
Mortgage Calculator 2021-01-11 6 2024-04-18 · r3073236 2024-07-06 · r3113608
plugin-master 2007-03-09 1 2010-08-10 · r273893 2010-08-10 · r273893

Readme contributors (2)

Names the plugin's readme declares as contributors. A soft signal — anyone can be listed. The SVN access column is the ground-truth cross-reference: does this contributor actually commit code?

Contributor Member since SVN access Status
Keith P. Graham 2009-09-29 28 commits Active
Web Guy 2025-09-01 16 commits Active