WP Advanced Math Captcha

wp-advanced-math-captcha · by lulub5592 · wordpress.org ↗ · SVN ↗
This plugin is closed on wordpress.org. Closed 2026-04-07.
Active installs
6k+
Current version
2.1.9.1
Added
Last updated
First seen by beacon
10d ago
Total downloads

Audits (1)

Malicious Audit #25 baseline 2.1.8 → head 2.1.9.1 7h ago

Two distinct supply-chain attack chains in a single 6,000-install plugin, both operated by SiteGuarding (siteguarding.com) through two anonymous wp.org committer accounts. wp.org Plugin Review Team (PRT, plugin-master) closed the plugin on 2026-04-07 and stripped the older payload, but the second chain (forced-install of a sibling plugin) remains live in trunk on every existing install.

Read full audit →

Alerts (0)

No open alerts.

Show 1 resolved alert
Medium recent_prt_intervention Resolved · audit:malicious 2026-05-02 20:04:59 (8h ago)
Slugwp-advanced-math-captcha
Active installs6,000
Is closedyes
Prt committersplugin-master
First touch2026-04-07 08:39:22
Last touch2026-04-07 08:39:22
Commit count1
Commits sample
CommitterAtMessage
plugin-master2026-04-07 08:39:22Updating wp-advanced-math-captcha
Lookback days30
Explanationwp.org Plugin Review Team committer touched this plugin within the last 30 days. PRT commits are confirmation-grade signal: they only happen when wp.org has already triaged the plugin as an incident.
View raw JSON
{
    "slug": "wp-advanced-math-captcha",
    "active_installs": 6000,
    "is_closed": true,
    "prt_committers": [
        "plugin-master"
    ],
    "first_touch": "2026-04-07 08:39:22",
    "last_touch": "2026-04-07 08:39:22",
    "commit_count": 1,
    "commits_sample": [
        {
            "committer": "plugin-master",
            "at": "2026-04-07 08:39:22",
            "message": "Updating wp-advanced-math-captcha"
        }
    ],
    "lookback_days": 30,
    "explanation": "wp.org Plugin Review Team committer touched this plugin within the last 30 days. PRT commits are confirmation-grade signal: they only happen when wp.org has already triaged the plugin as an incident."
}

SVN committers (2)

Accounts with actual commit access to wp-advanced-math-captcha on plugins.svn.wordpress.org, reconstructed from svn log. This is the list that matters for ownership changes — not the readme contributors.

Committer Member since Commits First commit Latest commit
lulub5592 28 2020-12-03 · r2430898 2025-11-16 · r3396781
plugin-master 2007-03-09 2 2020-11-27 · r2427504 2026-04-07 · r3500482

Readme contributors (1)

Names the plugin's readme declares as contributors. A soft signal — anyone can be listed. The SVN access column is the ground-truth cross-reference: does this contributor actually commit code?

Contributor Member since SVN access Status
lulub5592 28 commits Active

Versions (17 most recent)

Version Released Download
2.1.9.1 2026-04-07 · 25d ago
2.1.9 2025-11-16 · 5mo ago
2.1.8 2025-07-15 · 9mo ago
2.1.7 2025-05-29 · 11mo ago
2.1.6 2025-05-22 · 11mo ago
2.1.5 2025-05-20 · 11mo ago
2.1.4 2025-05-15 · 11mo ago
2.1.3 2025-05-08 · 11mo ago
2.1.2 2025-04-17 · 1y ago
2.1.1 2025-03-17 · 1y ago
2.1 2025-03-15 · 1y ago
2.0.01 2025-03-15 · 1y ago
2.0 2025-03-02 · 1y ago
1.2.20 2024-12-05 · 1y ago
1.2.15 2021-03-15 · 5y ago
1.2.12 2021-03-09 · 5y ago
1.2.11 2021-03-09 · 5y ago