Base64 Obfuscation Used in WordPress Plugin’s Code That Emails Details of Website to Developer
A month ago we discussed what we found when we looked into the use of base64 obfuscation in WordPress plugins in the Plugin Directory to possibly include a check for that in the proactive monitoring of changes made to plugins to try to catch serious vulnerabilities that we do, after that was used in intentionally malicious code in a plugin. That obfuscation is something that would seem to be in violation of the Plugin Directory’s guidelines:
4. Keep your code (mostly) human readable. [Read more]