Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools

{
    "slug": "woocommerce-jetpack",
    "finding_count": 13,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/class-wcj-cart-abandonment.php",
            "line": 284,
            "snippet": "parse_str( base64_decode( urldecode( $token ) ), $token ); //phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "includes/lib/FPDI/src/PdfParser/Filter/Flate.php",
            "line": 48,
            "snippet": "$data = @(\\gzinflate(\\substr($oData, $tries)));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/tcpdf.php",
            "line": 7700,
            "snippet": "$signature = base64_decode(trim($signature));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/tcpdf.php",
            "line": 10941,
            "snippet": "$signature = base64_decode($signature);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/tcpdf.php",
            "line": 19015,
            "snippet": "$imgsrc = '@'.base64_decode(substr($imgsrc, 1));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/tcpdf.php",
            "line": 19018,
            "snippet": "$imgsrc = '@'.base64_decode($reg[2]);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/tcpdf.php",
            "line": 24427,
            "snippet": "$img = '@'.base64_decode(substr($img, strlen($m[0])));",
            "confidence": "medium"
        },
        {
            "pattern": "hex_string_long",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/tcpdf.php",
            "line": 3051,
            "snippet": "$msg = \"\\x50\\x6f\\x77\\x65\\x72\\x65\\x64\\x20\\x62\\x79\\x20\\x54\\x43\\x50\\x44\\x46\\x20\\x28\\x77\\x77\\x77\\x2e\\x74\\x63\\x70\\x64\\x66\\x2e\\x6f\\x72\\x67\\x29\";",
            "confidence": "medium"
        },
        {
            "pattern": "hex_string_long",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/tcpdf.php",
            "line": 3052,
            "snippet": "$lnk = \"\\x68\\x74\\x74\\x70\\x3a\\x2f\\x2f\\x77\\x77\\x77\\x2e\\x74\\x63\\x70\\x64\\x66\\x2e\\x6f\\x72\\x67\";",
            "confidence": "medium"
        },
        {
            "pattern": "hex_string_long",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/include/tcpdf_static.php",
            "line": 94,
            "snippet": "public static $enc_padding = \"\\x28\\xBF\\x4E\\x5E\\x4E\\x75\\x8A\\x41\\x64\\x00\\x4E\\x56\\xFF\\xFA\\x01\\x08\\x2E\\x2E\\x00\\xB6\\xD0\\x68\\x3E\\x80\\x2F\\x0C\\xA9\\xFE\\x64\\x53\\x69\\x7A\";",
            "confidence": "medium"
        },
        {
            "pattern": "hex_string_long",
            "kind": "builtin",
            "file": "includes/lib/tcpdf/include/tcpdf_static.php",
            "line": 128,
            "snippet": "return \"\\x54\\x43\\x50\\x44\\x46\\x20\".self::getTCPDFVersion().\"\\x20\\x28\\x68\\x74\\x74\\x70\\x3a\\x2f\\x2f\\x77\\x77\\x77\\x2e\\x74\\x63\\x70\\x64\\x66\\x2e\\x6f\\x72\\x67\\x29\";",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/class-wcj-emails-verification.php",
            "line": 287,
            "snippet": "$data = json_decode( base64_decode( sanitize_text_field( wp_unslash( $_GET['wcj_verified_email'] ) ) ), true ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/class-wcj-emails-verification.php",
            "line": 300,
            "snippet": "$data = json_decode( base64_decode( sanitize_text_field( wp_unslash( $_GET['wcj_verify_email'] ) ) ), true ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "4fe8309844e974fd105a168aa6b268760022f801"
}

{
    "slug": "woocommerce-jetpack",
    "active_installs": 30000,
    "critical_matches": 1,
    "high_matches": 0,
    "lookback_days": 90,
    "sample_threads": [
        {
            "title": "Hacked website",
            "date": "2026-02-10 12:12:26",
            "url": "https://wordpress.org/support/topic/hacked-website-14/",
            "starter": "c-tomoe",
            "keyword": "hacked"
        }
    ],
    "explanation": "Cluster of support-forum threads in the last 90 days containing user-reported attack vocabulary. Critical when any thread mentions explicit compromise terms (hacked / backdoor / admin user added); high when two or more mention symptom-class terms (redirect to spam / vendor alerts)."
}

{
    "slug": "woocommerce-jetpack",
    "committer_slug": "ronyp",
    "committer_display_name": "ronyp",
    "committer_employer": null,
    "committer_member_since": "2020-06-02",
    "committer_first_commit": "2021-01-29 07:23:22",
    "committer_commit_count": 200,
    "plugin_listed_author": "pluggabl",
    "earliest_plugin_commit": "2015-07-04 12:38:21",
    "plugin_age_at_join_days": 2035,
    "committer_age_at_join_days": 241,
    "active_installs": 30000
}

{
    "slug": "woocommerce-jetpack",
    "domain": "varktech.com",
    "domain_source": "c2_http_call",
    "domain_registered_at": "2025-06-13",
    "plugin_earliest_commit": "2015-07-04 12:38:21",
    "plugin_latest_release": "2026-04-15 05:58:03",
    "gap_days": 3631,
    "domain_age_at_release": 306,
    "active_installs": 30000
}