TablePress – Tables in WordPress made easy

{
    "slug": "tablepress",
    "finding_count": 3,
    "findings": [
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "libraries/simplexlsx.class.php",
            "line": 275,
            "snippet": "$vZ = gzinflate($vZ);",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "libraries/simplexlsx.class.php",
            "line": 560,
            "snippet": "$entry['data'] = gzinflate($entry['data']);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "libraries/evalmath.class.php",
            "line": 529,
            "snippet": "eval( '$stack->push( ' . $function_name . '( $op1 ) );' );",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "cb2a7b284c5813a85b32d51461a77dcffb218994"
}

{
    "slug": "tablepress",
    "active_installs": 700000,
    "critical_matches": 1,
    "high_matches": 0,
    "lookback_days": 90,
    "sample_threads": [
        {
            "title": "BitDefender Antivirus Flags Malware in Latest Tablepress version",
            "date": "2026-02-22 19:55:12",
            "url": "https://wordpress.org/support/topic/bitdefender-antivirus-flags-malware-in-latest-tablepress-version/",
            "starter": "victor font",
            "keyword": "malware"
        }
    ],
    "explanation": "Cluster of support-forum threads in the last 90 days containing user-reported attack vocabulary. Critical when any thread mentions explicit compromise terms (hacked / backdoor / admin user added); high when two or more mention symptom-class terms (redirect to spam / vendor alerts)."
}