I don’t use your plugin… but I was wondering what that 225kb certificates file is that’s included in your plugin.
Does that get installed to the database and send out blast spam and emails?? It looks pretty fishy to me.
Here is just a tiny snippet from the questionable file:
";s:7:"attribs";a:0:{}s:8:"xml_base";s:0:"";s:17:"xml_base_explicit";b:0;s:8:"xml_lang";s:0:"";}}}
s:32:"https://purl.org/dc/elements/1.1/";a:1:{s:7:"creator";a:1:{i:0;a:5:{s:4:"data";s:5:"admin";s:7:"attribs";a:0:{}
s:8:"xml_base";s:0:"";s:17:"xml_base_explicit";b:0;s:8:"xml_lang";s:0:"";}}}s:40:"https://purl.org/rss/1.0/modules/content/";a:1:
{s:7:"encoded";a:1:{i:0;a:5:{s:4:"data";s:8147:"<p><a href="https://www.jtpratt.com/where-to-find-free-stock-images-and-photos/">Where to Find Free Stock Images and Photos</a></p><p><img src="https://www.jtpratt.com/wp-content/uploads/2011/11/free-stock-photos-pd-images.jpg" alt="free-stock-photos-pd-images" title="free-stock-photos-pd-images" width="554" height="260" class="alignnone size-full wp-image-2065" /></p>
As an experienced wordpress user, and part-time developer, I’d be pretty cautious of this one…
Can anyone provide me a website who has this plugin installed?