HEX
Server: LiteSpeed
System: Linux business177.web-hosting.com 4.18.0-553.80.1.lve.el8.x86_64 #1 SMP Wed Oct 22 19:29:36 UTC 2025 x86_64
User: ignijdop (1302)
PHP: 8.2.30
Disabled: NONE
Upload Files
File: //home/ignijdop/uniquetripper.com/security-report.json
{
    "timestamp": "2026-03-18T05:30:21+00:00",
    "dry_run": false,
    "wordpress_version": "Unknown",
    "wp_cli": false,
    "root_deleted_count": 0,
    "root_deleted_items": [],
    "suspicious_files_count": 23,
    "suspicious_files": [
        "wp-admin\/includes\/file.php",
        "wp-admin\/includes\/class-pclzip.php",
        "wp-includes\/class-wp-simplepie-sanitize-kses.php",
        "wp-includes\/Requests\/src\/Requests.php",
        "wp-includes\/Requests\/src\/Transport\/Fsockopen.php",
        "wp-includes\/SimplePie\/src\/File.php",
        "wp-includes\/SimplePie\/src\/Sanitize.php",
        "wp-includes\/SimplePie\/src\/Gzdecode.php",
        "wp-includes\/class-wp-customize-widgets.php",
        "wp-includes\/PHPMailer\/PHPMailer.php",
        "wp-includes\/PHPMailer\/SMTP.php",
        "wp-includes\/class-wp-http-encoding.php",
        "wp-includes\/ID3\/module.audio.ogg.php",
        "wp-includes\/ID3\/getid3.lib.php",
        "wp-includes\/ID3\/getid3.php",
        "wp-includes\/class-wp-recovery-mode-cookie-service.php",
        "wp-includes\/blocks\/legacy-widget.php",
        "wp-includes\/rest-api\/endpoints\/class-wp-rest-widget-types-controller.php",
        "wp-includes\/rest-api\/endpoints\/class-wp-rest-widgets-controller.php",
        "wp-includes\/class-json.php",
        "wp-includes\/Text\/Diff\/Engine\/shell.php",
        "wp-includes\/load.php",
        "wp-includes\/IXR\/class-IXR-message.php"
    ],
    "plugin_suspicious": {
        "easy-wp-smtp": [
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/inc\/deprecated\/class-easywpsmtp-admin.php",
                "line_number": 359,
                "content": "<input id=\"swpsmtp_allowed_domains\" type=\"text\" name=\"swpsmtp_allowed_domains\" value=\"<?php echo esc_attr( EasyWPSMTP_Utils::base64_decode_maybe( $swpsmtp_options['allowed_domains'] ) ); ?>\" <?php echo ( isset( $swpsmtp_options['enable_domain_check'] ) && ( $swpsmtp_options['enable_domain_check'] ) ) ? '' : ' disabled'; ?> \/>"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/inc\/deprecated\/class-easywpsmtp-utils.php",
                "line_number": 27,
                "content": "public static function base64_decode_maybe( $str ) {"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/inc\/deprecated\/class-easywpsmtp-utils.php",
                "line_number": 29,
                "content": "return base64_decode( $str ); \/\/phpcs:ignore"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/inc\/deprecated\/class-easywpsmtp-utils.php",
                "line_number": 31,
                "content": "if ( mb_detect_encoding( $str ) === mb_detect_encoding( base64_decode( base64_encode( base64_decode( $str ) ) ) ) ) { \/\/phpcs:ignore"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/inc\/deprecated\/class-easywpsmtp-utils.php",
                "line_number": 32,
                "content": "$str = base64_decode( $str ); \/\/phpcs:ignore"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/inc\/deprecated\/Cryptor.php",
                "line_number": 120,
                "content": "$raw = base64_decode( $in );"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/inc\/deprecated\/class-easywpsmtp.php",
                "line_number": 351,
                "content": "fpassthru( $logfile );"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/inc\/deprecated\/class-easywpsmtp.php",
                "line_number": 520,
                "content": "if ( EasyWPSMTP_Utils::base64_decode_maybe( $this->opts['allowed_domains'] ) === $this->opts['allowed_domains'] ) {"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/src\/Tasks\/Meta.php",
                "line_number": 522,
                "content": "\/\/ phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/src\/Tasks\/Meta.php",
                "line_number": 523,
                "content": "$decoded = base64_decode( $meta->data );"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/src\/Helpers\/Crypto.php",
                "line_number": 33,
                "content": "return base64_decode( $secret_key ); \/\/ phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/src\/Helpers\/Crypto.php",
                "line_number": 116,
                "content": "$decoded = base64_decode( $encrypted ); \/\/ phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/src\/Migrations\/DeprecatedOptionsConverter.php",
                "line_number": 99,
                "content": "$converted['general']['domain_check_allowed_domains'] = EasyWPSMTP_Utils::base64_decode_maybe( $old_options['allowed_domains'] );"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/src\/Migrations\/DeprecatedOptionsConverter.php",
                "line_number": 150,
                "content": "\/\/ phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/src\/Migrations\/DeprecatedOptionsConverter.php",
                "line_number": 151,
                "content": "$decoded_pass = base64_decode( $temp_password );"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/src\/Migrations\/DeprecatedOptionsConverter.php",
                "line_number": 158,
                "content": "\/\/ phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/src\/Migrations\/DeprecatedOptionsConverter.php",
                "line_number": 164,
                "content": "\/\/ phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/src\/Migrations\/DeprecatedOptionsConverter.php",
                "line_number": 165,
                "content": "$password = base64_decode( $temp_password );"
            },
            {
                "file": "wp-content\/plugins\/easy-wp-smtp\/vendor_prefixed\/symfony\/polyfill-mbstring\/Mbstring.php",
                "line_number": 95,
                "content": "$s = \\base64_decode($s);"
            }
        ],
        "litespeed-cache": [
            {
                "file": "wp-content\/plugins\/litespeed-cache\/src\/cloud-auth-callback.trait.php",
                "line_number": 33,
                "content": "$sk = base64_decode( $this->_summary['sk_b64'] ); \/\/ phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode"
            },
            {
                "file": "wp-content\/plugins\/litespeed-cache\/src\/cloud-auth-callback.trait.php",
                "line_number": 69,
                "content": "$cloud_pk = base64_decode( $pk ); \/\/ phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode"
            },
            {
                "file": "wp-content\/plugins\/litespeed-cache\/src\/cloud-auth-callback.trait.php",
                "line_number": 75,
                "content": "$sk = base64_decode( $this->_summary['sk_b64'] ); \/\/ phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode"
            },
            {
                "file": "wp-content\/plugins\/litespeed-cache\/src\/cloud-auth-callback.trait.php",
                "line_number": 141,
                "content": "$signature = base64_decode( $signature_b64 ); \/\/ phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode"
            },
            {
                "file": "wp-content\/plugins\/litespeed-cache\/src\/import.preset.cls.php",
                "line_number": 215,
                "content": "$parsed = \\json_decode(base64_decode($contents), true);"
            },
            {
                "file": "wp-content\/plugins\/litespeed-cache\/src\/import.cls.php",
                "line_number": 115,
                "content": "$ori_data = \\json_decode(base64_decode($data), true);"
            },
            {
                "file": "wp-content\/plugins\/litespeed-cache\/src\/localization.cls.php",
                "line_number": 40,
                "content": "$url = base64_decode( $uri ); \/\/ phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode"
            },
            {
                "file": "wp-content\/plugins\/litespeed-cache\/src\/esi.cls.php",
                "line_number": 597,
                "content": "$unencrypted = base64_decode($req_params);"
            }
        ],
        "advanced-custom-fields": [
            {
                "file": "wp-content\/plugins\/advanced-custom-fields\/includes\/api\/api-helpers.php",
                "line_number": 3772,
                "content": "return base64_decode( $data );"
            },
            {
                "file": "wp-content\/plugins\/advanced-custom-fields\/includes\/api\/api-helpers.php",
                "line_number": 3779,
                "content": "list($encrypted_data, $iv) = explode( '::', base64_decode( $data ), 2 );"
            }
        ]
    },
    "wp_config_suspicious": [],
    "installed_plugins": []
}