File: /home/ignijdop/ceylonaddictiontours.com/security-report.json
{
"timestamp": "2026-03-17T23:00:32+00:00",
"dry_run": false,
"wordpress_version": "Unknown",
"wp_cli": false,
"root_deleted_count": 0,
"root_deleted_items": [],
"suspicious_files_count": 23,
"suspicious_files": [
"wp-admin\/includes\/file.php",
"wp-admin\/includes\/class-pclzip.php",
"wp-includes\/class-wp-simplepie-sanitize-kses.php",
"wp-includes\/Requests\/src\/Requests.php",
"wp-includes\/Requests\/src\/Transport\/Fsockopen.php",
"wp-includes\/SimplePie\/src\/File.php",
"wp-includes\/SimplePie\/src\/Sanitize.php",
"wp-includes\/SimplePie\/src\/Gzdecode.php",
"wp-includes\/class-wp-customize-widgets.php",
"wp-includes\/PHPMailer\/PHPMailer.php",
"wp-includes\/PHPMailer\/SMTP.php",
"wp-includes\/class-wp-http-encoding.php",
"wp-includes\/ID3\/module.audio.ogg.php",
"wp-includes\/ID3\/getid3.lib.php",
"wp-includes\/ID3\/getid3.php",
"wp-includes\/class-wp-recovery-mode-cookie-service.php",
"wp-includes\/blocks\/legacy-widget.php",
"wp-includes\/rest-api\/endpoints\/class-wp-rest-widget-types-controller.php",
"wp-includes\/rest-api\/endpoints\/class-wp-rest-widgets-controller.php",
"wp-includes\/class-json.php",
"wp-includes\/Text\/Diff\/Engine\/shell.php",
"wp-includes\/load.php",
"wp-includes\/IXR\/class-IXR-message.php"
],
"plugin_suspicious": {
"gtranslate": [
{
"file": "wp-content\/plugins\/gtranslate\/url_addon\/gtranslate-email.php",
"line_number": 15,
"content": "$body = json_encode(array('email-body' => base64_encode(base64_decode($_POST['body'])), 'gt_translate_keys' => array(array('key' => 'email-body', 'format' => 'html-base64encoded'))));"
},
{
"file": "wp-content\/plugins\/gtranslate\/gtranslate.php",
"line_number": 2534,
"content": "$response = base64_decode($response['email-body']);"
},
{
"file": "wp-content\/plugins\/gtranslate\/gtranslate.php",
"line_number": 2633,
"content": "$response = base64_decode($response['email-body']);"
}
],
"litespeed-cache": [
{
"file": "wp-content\/plugins\/litespeed-cache\/src\/cloud-auth-callback.trait.php",
"line_number": 33,
"content": "$sk = base64_decode( $this->_summary['sk_b64'] ); \/\/ phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode"
},
{
"file": "wp-content\/plugins\/litespeed-cache\/src\/cloud-auth-callback.trait.php",
"line_number": 69,
"content": "$cloud_pk = base64_decode( $pk ); \/\/ phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode"
},
{
"file": "wp-content\/plugins\/litespeed-cache\/src\/cloud-auth-callback.trait.php",
"line_number": 75,
"content": "$sk = base64_decode( $this->_summary['sk_b64'] ); \/\/ phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode"
},
{
"file": "wp-content\/plugins\/litespeed-cache\/src\/cloud-auth-callback.trait.php",
"line_number": 141,
"content": "$signature = base64_decode( $signature_b64 ); \/\/ phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode"
},
{
"file": "wp-content\/plugins\/litespeed-cache\/src\/import.preset.cls.php",
"line_number": 215,
"content": "$parsed = \\json_decode(base64_decode($contents), true);"
},
{
"file": "wp-content\/plugins\/litespeed-cache\/src\/import.cls.php",
"line_number": 115,
"content": "$ori_data = \\json_decode(base64_decode($data), true);"
},
{
"file": "wp-content\/plugins\/litespeed-cache\/src\/localization.cls.php",
"line_number": 40,
"content": "$url = base64_decode( $uri ); \/\/ phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode"
},
{
"file": "wp-content\/plugins\/litespeed-cache\/src\/esi.cls.php",
"line_number": 597,
"content": "$unencrypted = base64_decode($req_params);"
}
],
"wp-smushit": [
{
"file": "wp-content\/plugins\/wp-smushit\/core\/smush\/class-smusher.php",
"line_number": 574,
"content": "$data->image = base64_decode( $data->image );"
},
{
"file": "wp-content\/plugins\/wp-smushit\/core\/modules\/class-smush.php",
"line_number": 562,
"content": "$data->image = base64_decode( $data->image );"
}
],
"google-site-kit": [
{
"file": "wp-content\/plugins\/google-site-kit\/includes\/Core\/Storage\/Data_Encryption.php",
"line_number": 90,
"content": "$decoded_value = base64_decode( $raw_value, true );"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Common\/Functions\/Strings.php",
"line_number": 277,
"content": "$str .= \\pack(\\PHP_INT_SIZE == 4 ? 'N' : 'J', $xor ^ eval('return 0b' . $part . ';'));"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Common\/Functions\/Strings.php",
"line_number": 398,
"content": "public static function base64_decode($data)"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Common\/Functions\/Strings.php",
"line_number": 410,
"content": "\/\/ return self::base64_decode(str_replace(['-', '_'], ['+', '\/'], $data));"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/DSA\/Formats\/Keys\/XML.php",
"line_number": 63,
"content": "$value = new \\Google\\Site_Kit_Dependencies\\phpseclib3\\Math\\BigInteger(\\Google\\Site_Kit_Dependencies\\phpseclib3\\Common\\Functions\\Strings::base64_decode($temp->item(0)->nodeValue), 256);"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/Blowfish.php",
"line_number": 33,
"content": "* _encryptBlock() calls are highly optimized through the use of eval(). Among other things,"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/Blowfish.php",
"line_number": 38,
"content": "* assuming 16 rounds (which is what OpenSSH's bcrypt defaults to). The eval()-optimized"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/Blowfish.php",
"line_number": 42,
"content": "* 514.12, which is ~4KB of data. Creating an eval()-optimized _encryptBlock() has an upfront"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/Blowfish.php",
"line_number": 44,
"content": "* data. Conseqeuently, bcrypt does not benefit from the eval()-optimized _encryptBlock()."
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/Common\/Formats\/Keys\/OpenSSH.php",
"line_number": 67,
"content": "$key = \\Google\\Site_Kit_Dependencies\\phpseclib3\\Common\\Functions\\Strings::base64_decode($key);"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/Common\/Formats\/Keys\/OpenSSH.php",
"line_number": 113,
"content": "$key = \\base64_decode($parts[0]);"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/Common\/Formats\/Keys\/OpenSSH.php",
"line_number": 118,
"content": "$key = \\base64_decode($parts[1]);"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/Common\/Formats\/Keys\/PuTTY.php",
"line_number": 180,
"content": "$public = \\Google\\Site_Kit_Dependencies\\phpseclib3\\Common\\Functions\\Strings::base64_decode(\\implode('', \\array_map('trim', \\array_slice($key, 4, $publicLength))));"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/Common\/Formats\/Keys\/PuTTY.php",
"line_number": 224,
"content": "$private = \\Google\\Site_Kit_Dependencies\\phpseclib3\\Common\\Functions\\Strings::base64_decode(\\implode('', \\array_map('trim', \\array_slice($key, $offset, $privateLength))));"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/Common\/SymmetricKey.php",
"line_number": 139,
"content": "* Base value for the eval() implementation $engine switch"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/Common\/SymmetricKey.php",
"line_number": 2925,
"content": "eval('$func = function ($_action, $_text) { ' . $init_crypt . 'if ($_action == \"encrypt\") { ' . $encrypt . ' } else { ' . $decrypt . ' }};');"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/Common\/SymmetricKey.php",
"line_number": 2947,
"content": "* eval()'able string for in-line float to int"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/RSA\/Formats\/Keys\/MSBLOB.php",
"line_number": 76,
"content": "$key = \\Google\\Site_Kit_Dependencies\\phpseclib3\\Common\\Functions\\Strings::base64_decode($key);"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/RSA\/Formats\/Keys\/XML.php",
"line_number": 66,
"content": "$value = new \\Google\\Site_Kit_Dependencies\\phpseclib3\\Math\\BigInteger(\\Google\\Site_Kit_Dependencies\\phpseclib3\\Common\\Functions\\Strings::base64_decode($temp->item(0)->nodeValue), 256);"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/EC\/Formats\/Keys\/PuTTY.php",
"line_number": 85,
"content": "$public = \\Google\\Site_Kit_Dependencies\\phpseclib3\\Common\\Functions\\Strings::base64_decode($public[1]);"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/EC\/Formats\/Keys\/PuTTY.php",
"line_number": 110,
"content": "$public = \\Google\\Site_Kit_Dependencies\\phpseclib3\\Common\\Functions\\Strings::base64_decode($public[1]);"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Crypt\/EC\/Formats\/Keys\/XML.php",
"line_number": 145,
"content": "return \\Google\\Site_Kit_Dependencies\\phpseclib3\\Common\\Functions\\Strings::base64_decode(\\str_replace([\"\\r\", \"\\n\", ' ', \"\\t\"], '', $value));"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Math\/BigInteger\/Engines\/Engine.php",
"line_number": 1050,
"content": "return eval('return function(' . static::class . ' $x) use ($func, $class) {"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Math\/BigInteger\/Engines\/Engine.php",
"line_number": 1057,
"content": "return eval('return function(' . static::class . ' $x) use ($n, $fqengine, $class) {"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Math\/BigInteger\/Engines\/BCMath\/Reductions\/EvalBarrett.php",
"line_number": 57,
"content": "eval('$func = function ($n) { ' . $code . '};');"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Math\/BigInteger\/Engines\/BCMath\/Reductions\/EvalBarrett.php",
"line_number": 92,
"content": "eval('$func = function ($n) { ' . $code . '};');"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Math\/BigInteger\/Engines\/PHP\/Reductions\/EvalBarrett.php",
"line_number": 65,
"content": "eval('$func = function ($x) { ' . $code . '};');"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/Math\/BigInteger\/Engines\/PHP\/Reductions\/EvalBarrett.php",
"line_number": 131,
"content": "eval('$func = function ($n) { ' . $code . '};');"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/File\/X509.php",
"line_number": 468,
"content": "$cert['tbsCertificate']['subjectPublicKeyInfo'] = new \\Google\\Site_Kit_Dependencies\\phpseclib3\\File\\ASN1\\Element(\\base64_decode(\\preg_replace('#-.+-|[\\\\r\\\\n]#', '', $cert['tbsCertificate']['subjectPublicKeyInfo']['subjectPublicKey'])));"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/File\/X509.php",
"line_number": 2026,
"content": "$csr['certificationRequestInfo']['subjectPKInfo'] = new \\Google\\Site_Kit_Dependencies\\phpseclib3\\File\\ASN1\\Element(\\base64_decode(\\preg_replace('#-.+-|[\\\\r\\\\n]#', '', $csr['certificationRequestInfo']['subjectPKInfo']['subjectPublicKey'])));"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/File\/X509.php",
"line_number": 2064,
"content": "$temp = \\preg_match('#^[a-zA-Z\\\\d\/+]*={0,2}$#', $temp) ? \\Google\\Site_Kit_Dependencies\\phpseclib3\\Common\\Functions\\Strings::base64_decode($temp) : \\false;"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/File\/X509.php",
"line_number": 2111,
"content": "$spkac['publicKeyAndChallenge']['spki'] = new \\Google\\Site_Kit_Dependencies\\phpseclib3\\File\\ASN1\\Element(\\base64_decode(\\preg_replace('#-.+-|[\\\\r\\\\n]#', '', $spkac['publicKeyAndChallenge']['spki']['subjectPublicKey'])));"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/File\/X509.php",
"line_number": 3243,
"content": "$publicKey = \\base64_decode(\\preg_replace('#-.+-|[\\\\r\\\\n]#', '', $this->publicKey->toString($format)));"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/phpseclib\/phpseclib\/phpseclib\/File\/ASN1.php",
"line_number": 1356,
"content": "$temp = \\preg_match('#^[a-zA-Z\\\\d\/+]*={0,2}$#', $temp) ? \\Google\\Site_Kit_Dependencies\\phpseclib3\\Common\\Functions\\Strings::base64_decode($temp) : \\false;"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/firebase\/php-jwt\/src\/JWT.php",
"line_number": 233,
"content": "$key = \\base64_decode((string) \\end($lines));"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/firebase\/php-jwt\/src\/JWT.php",
"line_number": 285,
"content": "$key = \\base64_decode((string) \\end($lines));"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/firebase\/php-jwt\/src\/JWT.php",
"line_number": 362,
"content": "return \\base64_decode(self::convertBase64UrlToBase64($input));"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/monolog\/monolog\/src\/Monolog\/Handler\/FingersCrossedHandler.php",
"line_number": 27,
"content": "* You can then have a passthruLevel as well which means that at the end of the request,"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/monolog\/monolog\/src\/Monolog\/Handler\/FingersCrossedHandler.php",
"line_number": 62,
"content": "protected $passthruLevel;"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/monolog\/monolog\/src\/Monolog\/Handler\/FingersCrossedHandler.php",
"line_number": 73,
"content": "* @param int|string $passthruLevel Minimum level to always flush to handler on close, even if strategy not triggered"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/monolog\/monolog\/src\/Monolog\/Handler\/FingersCrossedHandler.php",
"line_number": 75,
"content": "* @phpstan-param Level|LevelName|LogLevel::* $passthruLevel"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/monolog\/monolog\/src\/Monolog\/Handler\/FingersCrossedHandler.php",
"line_number": 78,
"content": "public function __construct($handler, $activationStrategy = null, int $bufferSize = 0, bool $bubble = \\true, bool $stopBuffering = \\true, $passthruLevel = null)"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/monolog\/monolog\/src\/Monolog\/Handler\/FingersCrossedHandler.php",
"line_number": 92,
"content": "if ($passthruLevel !== null) {"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/monolog\/monolog\/src\/Monolog\/Handler\/FingersCrossedHandler.php",
"line_number": 93,
"content": "$this->passthruLevel = \\Google\\Site_Kit_Dependencies\\Monolog\\Logger::toMonologLevel($passthruLevel);"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/monolog\/monolog\/src\/Monolog\/Handler\/FingersCrossedHandler.php",
"line_number": 170,
"content": "if (null !== $this->passthruLevel) {"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/monolog\/monolog\/src\/Monolog\/Handler\/FingersCrossedHandler.php",
"line_number": 171,
"content": "$level = $this->passthruLevel;"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/monolog\/monolog\/src\/Monolog\/Handler\/DeduplicationHandler.php",
"line_number": 79,
"content": "$passthru = null;"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/monolog\/monolog\/src\/Monolog\/Handler\/DeduplicationHandler.php",
"line_number": 82,
"content": "$passthru = $passthru || !$this->isDuplicate($record);"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/monolog\/monolog\/src\/Monolog\/Handler\/DeduplicationHandler.php",
"line_number": 83,
"content": "if ($passthru) {"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/monolog\/monolog\/src\/Monolog\/Handler\/DeduplicationHandler.php",
"line_number": 89,
"content": "if ($passthru === \\true || $passthru === null) {"
},
{
"file": "wp-content\/plugins\/google-site-kit\/third-party\/google\/apiclient\/src\/Client.php",
"line_number": 479,
"content": "$payload = \\json_decode(\\base64_decode($parts[1]), \\true);"
}
],
"advanced-custom-fields": [
{
"file": "wp-content\/plugins\/advanced-custom-fields\/includes\/api\/api-helpers.php",
"line_number": 3772,
"content": "return base64_decode( $data );"
},
{
"file": "wp-content\/plugins\/advanced-custom-fields\/includes\/api\/api-helpers.php",
"line_number": 3779,
"content": "list($encrypted_data, $iv) = explode( '::', base64_decode( $data ), 2 );"
}
]
},
"wp_config_suspicious": [],
"installed_plugins": []
}