Composer · packagist.org

roots/wordpress-full

Php Base64 Eval Chain, Php Assert String Exec, Php Shell With Decode +2 more

Why PkgRadar flagged 4.9.31

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`4.9.31`	High risk	82	2026-08-12
`4.7.35`	High risk	87	2026-08-12
`4.8.30`	High risk	87	2026-08-12
`5.2.26`	High risk	97	2026-08-12
`5.1.24`	High risk	97	2026-08-12
`5.0.27`	High risk	82	2026-08-12
`5.5.20`	High risk	67	2026-08-12
`5.3.23`	High risk	97	2026-08-12
`5.4.21`	High risk	97	2026-08-12
`5.6.19`	High risk	77	2026-08-12
`5.8.15`	High risk	77	2026-08-12
`5.7.17`	High risk	77	2026-08-12
`6.0.14`	High risk	77	2026-08-12
`5.9.16`	High risk	77	2026-08-12
`6.1.12`	High risk	77	2026-08-12

Block this in CI

PkgRadar gates roots/wordpress-full (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer roots/[email protected]