Warning to all wordpress users using the xxx import plugin
 

I reported it yesterday, and has been since removed from wordpress.org

If any of you used it, please check your users on your system as the plugin does some evil base64 stuff to hide its true intensions.

On plugin activation, it creates an admin account

the person who coded it was amk.network, which i cant find much of this person, so i dont know if they post here.

:helpme

thanks for the heads up! :thumbsup

Thanks for the heads up

thanks for the info....

Why is 'administrator' encoded in set_role? :p

Another reason why you should never use tools/themes/etc for WP that are 'designed' for adult site building.... There's no reason to not use regular WP tools or code it yourself.

Thanks for the heads up
.

never heard of it? What was it? a tube importer?

Probably the CIA again...Wanting ez backdoor access...Realizing most adult webmasters don't have much of a nugget.

yes it was/is an importer, but one that has many eval statements, in it, which connects to multiple domains php (not tubes)

Thanks for the heads up :thumbsup

I do not use it, but thanks for the heads up anyways.

if you want an import plugin, use wp-script.com its prob the best one out there.

You'd think wordpress would scan shit for this sort of thing.

Thank you for the heads up :thumbsup

Why not? Just make sure you take it from a reliable source.

Can it import XML, JSON and HTML sources of an arbitrary format/structure? ;)

I think my point was that you don't need anything that's "designed for adult". Just use regular tools and themes then add some porn.. :upsidedow

never heard of it anyway, what could it import and from where?

Thanks for the warning i still use only several plugins ..

with the plugin directory, they analyze the initial code, so if the code was fine, he could make changes to commit the changes.

with the theme directory its a bit different, each release has to go through the theme review team.

Thanks for the heads up :thumbsup