<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="//www.olasilik.org/main-sitemap.xsl"?>
<sitemapindex xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
	<sitemap>
		<loc>https://www.olasilik.org/post-sitemap.xml</loc>
		<lastmod>2025-01-19T21:54:37+00:00</lastmod>
	</sitemap>
	<sitemap>
		<loc>https://www.olasilik.org/page-sitemap.xml</loc>
		<lastmod>2024-12-20T01:10:33+00:00</lastmod>
	</sitemap>
	<sitemap>
		<loc>https://www.olasilik.org/category-sitemap.xml</loc>
		<lastmod>2025-01-19T21:54:37+00:00</lastmod>
	</sitemap>
</sitemapindex>
<!-- XML Sitemap generated by Rank Math SEO Plugin (c) Rank Math - rankmath.com -->
<!-- Served from cache in 0,001 second(s) (Memory usage: 1,59 KB) -->
<!-- Array
(
    [0] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'ai1wm_backups_path' LIMIT 1
            [1] => 0.00036501884460449
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/all-in-one-wp-migration/all-in-one-wp-migration.php'), require_once('/plugins/all-in-one-wp-migration/constants.php'), get_option
            [3] => 1789820096.3953
            [4] => Array
                (
                )

        )

    [1] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'CookieLawInfo-0.9' LIMIT 1
            [1] => 0.00088882446289062
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/cookie-law-info/cookie-law-info.php'), cky_is_legacy, get_option
            [3] => 1789820096.498
            [4] => Array
                (
                )

        )

    [2] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = '_site_transient_timeout__cky_first_time_install' LIMIT 1
            [1] => 0.00063180923461914
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/cookie-law-info/cookie-law-info.php'), require_once('/plugins/cookie-law-info/lite/loader.php'), CookieYes\Lite\Includes\CLI->__construct, CookieYes\Lite\Includes\CLI->define_admin_hooks, CookieYes\Lite\Admin\Admin->__construct, CookieYes\Lite\Admin\Admin->load_modules, CookieYes\Lite\Includes\Modules->__construct, CookieYes\Lite\Admin\Modules\Settings\Settings->init, CookieYes\Lite\Admin\Modules\Settings\Settings->load_default, cky_first_time_install, get_site_transient, wp_cache_get, WP_Object_Cache->get, WP_Object_Cache->_transient_get, get_site_option, get_network_option, get_option
            [3] => 1789820096.563
            [4] => Array
                (
                )

        )

    [3] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = '_site_transient__cky_first_time_install' LIMIT 1
            [1] => 0.00028300285339355
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/cookie-law-info/cookie-law-info.php'), require_once('/plugins/cookie-law-info/lite/loader.php'), CookieYes\Lite\Includes\CLI->__construct, CookieYes\Lite\Includes\CLI->define_admin_hooks, CookieYes\Lite\Admin\Admin->__construct, CookieYes\Lite\Admin\Admin->load_modules, CookieYes\Lite\Includes\Modules->__construct, CookieYes\Lite\Admin\Modules\Settings\Settings->init, CookieYes\Lite\Admin\Modules\Settings\Settings->load_default, cky_first_time_install, get_site_transient, wp_cache_get, WP_Object_Cache->get, WP_Object_Cache->_transient_get, get_site_option, get_network_option, get_option
            [3] => 1789820096.5639
            [4] => Array
                (
                )

        )

    [4] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'cky_first_time_activated_plugin' LIMIT 1
            [1] => 0.00027799606323242
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/cookie-law-info/cookie-law-info.php'), require_once('/plugins/cookie-law-info/lite/loader.php'), CookieYes\Lite\Includes\CLI->__construct, CookieYes\Lite\Includes\CLI->define_admin_hooks, CookieYes\Lite\Admin\Admin->__construct, CookieYes\Lite\Admin\Admin->load_modules, CookieYes\Lite\Includes\Modules->__construct, CookieYes\Lite\Admin\Modules\Settings\Settings->init, CookieYes\Lite\Admin\Modules\Settings\Settings->load_default, cky_first_time_install, get_option
            [3] => 1789820096.5644
            [4] => Array
                (
                )

        )

    [5] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = '_transient_timeout_imunify_security_rules_1789819917_4049500' LIMIT 1
            [1] => 0.0004119873046875
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/imunify-security/imunify-security.php'), CloudLinux\Imunify\App\Plugin->init, CloudLinux\Imunify\App\Plugin->coreSetup, CloudLinux\Imunify\App\Defender\RuleProvider->loadRules, get_transient, wp_cache_get, WP_Object_Cache->get, WP_Object_Cache->_transient_get, get_option
            [3] => 1789820096.7653
            [4] => Array
                (
                )

        )

    [6] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = '_transient_imunify_security_rules_1789819917_4049500' LIMIT 1
            [1] => 0.00030612945556641
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/imunify-security/imunify-security.php'), CloudLinux\Imunify\App\Plugin->init, CloudLinux\Imunify\App\Plugin->coreSetup, CloudLinux\Imunify\App\Defender\RuleProvider->loadRules, get_transient, wp_cache_get, WP_Object_Cache->get, WP_Object_Cache->_transient_get, get_option
            [3] => 1789820096.766
            [4] => Array
                (
                )

        )

    [7] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'active_sitewide_plugins' LIMIT 1
            [1] => 0.00035285949707031
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/imunify-security/imunify-security.php'), CloudLinux\Imunify\App\Plugin->init, CloudLinux\Imunify\App\Plugin->coreSetup, CloudLinux\Imunify\App\Defender\RuleProvider->loadRules, CloudLinux\Imunify\App\Defender\RuleProvider->getRelevantRules, CloudLinux\Imunify\App\Defender\RuleProvider->getTargetInfo, CloudLinux\Imunify\App\Defender\RuleProvider->loadPlugins, get_site_option, get_network_option, get_option
            [3] => 1789820096.9084
            [4] => Array
                (
                )

        )

    [8] => Array
        (
            [0] => INSERT INTO `wpat_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_timeout_imunify_security_rules_1789819917_4049500', '1789841697', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`)
            [1] => 0.00058388710021973
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/imunify-security/imunify-security.php'), CloudLinux\Imunify\App\Plugin->init, CloudLinux\Imunify\App\Plugin->coreSetup, CloudLinux\Imunify\App\Defender\RuleProvider->loadRules, set_transient, wp_cache_set, WP_Object_Cache->set, WP_Object_Cache->_transient_set, add_option
            [3] => 1789820097.1388
            [4] => Array
                (
                )

        )

    [9] => Array
        (
            [0] => SHOW FULL COLUMNS FROM `wpat_options`
            [1] => 0.0010228157043457
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/imunify-security/imunify-security.php'), CloudLinux\Imunify\App\Plugin->init, CloudLinux\Imunify\App\Plugin->coreSetup, CloudLinux\Imunify\App\Defender\RuleProvider->loadRules, set_transient, wp_cache_set, WP_Object_Cache->set, WP_Object_Cache->_transient_set, add_option
            [3] => 1789820097.1409
            [4] => Array
                (
                )

        )

    [10] => Array
        (
            [0] => INSERT INTO `wpat_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_imunify_security_rules_1789819917_4049500', 'a:2:{s:7:\"version\";s:8:\"0.1308.1\";s:5:\"rules\";a:39:{s:41:\"RULE-CAMPAIGN-FAKEPLUGIN-INSTALL-BLOCK-01\";a:12:{s:3:\"cve\";s:36:\"CAMPAIGN-FAKEPLUGIN-INSTALL-BLOCK-01\";s:11:\"description\";s:615:\"Blocks upload of known fake-plugin archives at the WordPress plugin\ninstall endpoint. Seed slugs are confirmed malicious backdoor-dropper\nplugins (wp_org_exists=false, shared payload generator signature) that\ninstall further payloads when activated. Fires on the plugin upload\nstep before the zip is extracted, preventing backdoor deployment via\nstolen or compromised admin credentials. The slug denylist should be\nupdated as new IOC slugs are identified via the malware research\npipeline. This rule covers the HTTP install vector; on-disk detection\nis handled by AiBolit recognizers via the malware-team pipeline.\n\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:9;s:4:\"tags\";a:6:{i:0;s:19:\"fake-plugin-install\";i:1;s:15:\"post-compromise\";i:2;s:7:\"dropper\";i:3;s:21:\"php-bkdr-wpplugin-mal\";i:4;s:22:\"admin-credential-abuse\";i:5;s:16:\"wpplugin1-family\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:13:\"<=999.999.999\";s:6:\"method\";s:4:\"POST\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:3:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:24:\"~^/wp-admin/update\\.php~\";}i:1;a:3:{s:4:\"name\";s:11:\"ARGS:action\";s:4:\"type\";s:6:\"equals\";s:5:\"value\";s:13:\"upload-plugin\";}i:2;a:3:{s:4:\"name\";s:20:\"FILES:pluginzip:name\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:75:\"~^(platformist-quadendpointer|theme-js-wpcode|framework-triappment)\\.zip$~i\";}}}s:36:\"RULE-CAMPAIGN-SC-REST-CMD-CHANNEL-01\";a:11:{s:3:\"cve\";s:29:\"CAMPAIGN-2026-W37-SC-REST-CMD\";s:11:\"description\";s:1049:\"Detects the SC framework REST command channel. SC v2.8.1 registers an\nunauthenticated REST route at /wp-json/<slug>/v1/cmd with Ed25519 request signing,\ncarrying fifteen commands including exec, install_plugin, create_user and inject_js.\nSlugs are generated as a plausible multi-word WordPress feature name plus a four-hex\nsuffix. Observed fleet-wide over seven days: cors-handler-b1fd, cors-handler-1a0f,\nheartbeat-controller-22dc, heartbeat-controller-23cb, shortcode-renderer-f1a4,\ncomment-spam-filter-26e6, image-compression-service-f283, http-request-handler-c12d,\ndeferred-script-loader-9703, post-meta-indexer-5959, admin-bar-optimizer-29c3,\nthumbnail-regenerator-dea4, rest-api-cache-6702, login-throttle-service-eee8. Two base\nnames recurring under different hex suffixes is what confirms generation rather than\nhand-picking. The mandatory four-hex tail on a multi-word prefix is the false-positive\nfloor: other /v1/cmd routes seen in the same window (wab, cg, vs-admin, wpcli-bridge,\nwp-update) do not match and are deliberately excluded.\n\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:9;s:4:\"tags\";a:4:{i:0;s:15:\"post-compromise\";i:1;s:8:\"backdoor\";i:2;s:15:\"command-channel\";i:3;s:21:\"core-fs-path-coverage\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:13:\"<=999.999.999\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:1:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:91:\"~(?:^/wp-json|(?:^|&|\\?)rest_route=)/[a-z0-9]+(?:-[a-z0-9]+)+-[0-9a-f]{4}/v1/cmd([/?&]|$)~i\";}}}s:37:\"RULE-CAMPAIGN-SC-ROGUE-ADMIN-LOGIN-01\";a:12:{s:3:\"cve\";s:32:\"CAMPAIGN-2026-W37-SC-ROGUE-ADMIN\";s:11:\"description\";s:848:\"Detects login attempts using the SC framework\'s generated administrator\naccounts. The framework creates hidden admin users and the operator then authenticates\nwith them normally, so the credential is valid and nothing upstream objects. Observed\nshapes: administrator_<6 hex>, adm_<10 hex>, admin_<10 hex>, backup_<10 digits>,\nindependently documented across ten incident cases by the DEFA case series and\nconfirmed in production at 34,767 wp-login POSTs across 4,199 domains in three days.\nPasswords accompanying them are per-site 24-hex-character strings rather than\ndictionary guesses, which distinguishes this from ordinary brute-force traffic. No\nlegitimate WordPress installation generates usernames of this shape, and the existing\nModSec rule 77433257 does not cover them - it matches usr_<6-10 hex>, a different\nmalware family\'s convention.\n\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:8.5;s:4:\"tags\";a:4:{i:0;s:15:\"post-compromise\";i:1;s:11:\"rogue-admin\";i:2;s:16:\"credential-abuse\";i:3;s:19:\"core-param-coverage\";}s:4:\"mode\";s:4:\"pass\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:13:\"<=999.999.999\";s:6:\"method\";s:4:\"POST\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:2:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:25:\"~/wp-login\\.php([?#]|$)~i\";}i:1;a:3:{s:4:\"name\";s:8:\"ARGS:log\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:86:\"~^(?:administrator_[0-9a-f]{6}|adm_[0-9a-f]{10}|admin_[0-9a-f]{10}|backup_[0-9]{10})$~\";}}}s:28:\"RULE-CAMPAIGN-SCPB-BEACON-01\";a:11:{s:3:\"cve\";s:29:\"CAMPAIGN-2026-W37-SCPB-BEACON\";s:11:\"description\";s:626:\"Detects the client-side beacon of the sc_pb/sc_c mass-implant campaign.\nThe injected page script polls the site root with sc_pb=<13-digit millisecond\nepoch> as a cache-buster; the implanted mu-plugin answers the request and drives\nan outbound cURL call to the operator infrastructure through the WordPress HTTP\nAPI. 100% of observed values are exactly 13 digits. Production one-day window\n2026-09-08: 502,159 requests across 23,186 domains and 3,482 servers, of which\n98.1% also execute a campaign-shaped dropper file. Zero occurrences fleet-wide\nbefore 2026-09-01. Starts in pass mode pending the false-positive floor check.\n\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:8;s:4:\"tags\";a:4:{i:0;s:15:\"post-compromise\";i:1;s:6:\"beacon\";i:2;s:13:\"mass-campaign\";i:3;s:19:\"core-param-coverage\";}s:4:\"mode\";s:4:\"pass\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:13:\"<=999.999.999\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:1:{i:0;a:3:{s:4:\"name\";s:10:\"ARGS:sc_pb\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:13:\"~^[0-9]{13}$~\";}}}s:36:\"RULE-CAMPAIGN-SCPB-CANARY-MONITOR-01\";a:12:{s:3:\"cve\";s:33:\"CAMPAIGN-2026-W37-SCPB-IMPLANT-ID\";s:11:\"description\";s:83:\"Samples SC canary checks carrying sc_c and _r on directory or WordPress login URLs.\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:1;s:4:\"tags\";a:4:{i:0;s:7:\"monitor\";i:1;s:25:\"post-compromise-signature\";i:2;s:21:\"infection-unconfirmed\";i:3;s:19:\"sampled-observation\";}s:4:\"mode\";s:4:\"pass\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:13:\"<=999.999.999\";s:6:\"method\";s:3:\"GET\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:5:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:176:\"~\\A/(?:[^/?#\\r\\n]+/)*(?:wp-login\\.php)?\\?(?=(?:[^&]*&)*sc_c=[0-9a-f]{16}(?:&|\\z))(?=(?:[^&]*&)*_r=[0-9]{6}(?:&|\\z))[A-Za-z0-9_-]+=[^?&#\\r\\n]*(?:&[A-Za-z0-9_-]+=[^?&#\\r\\n]*)*\\z~\";}i:1;a:3:{s:4:\"name\";s:26:\"REQUEST_HEADERS:User-Agent\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:18:\"~^WordPress/[0-9]~\";}i:2;a:3:{s:4:\"name\";s:9:\"ARGS:sc_c\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:18:\"~\\A[0-9a-f]{16}\\z~\";}i:3;a:3:{s:4:\"name\";s:7:\"ARGS:_r\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:14:\"~\\A[0-9]{6}\\z~\";}i:4;a:2:{s:4:\"type\";s:13:\"probabilistic\";s:5:\"value\";s:6:\"0.0005\";}}}s:40:\"RULE-CAMPAIGN-SCPB-HIDDEN-DIR-MONITOR-01\";a:11:{s:3:\"cve\";s:33:\"CAMPAIGN-2026-W37-SCPB-HIDDEN-DIR\";s:11:\"description\";s:925:\"Monitors direct HTTP access to the campaign hidden payload directory\nwp-content/.sc_<8 hex>/. No WordPress distribution, plugin or theme ships a\ndot-prefixed directory under wp-content, so the path cannot resolve on a clean\ninstallation and every hit is attacker or researcher traffic by construction\n(zero false-positive floor). The directory holds the implant module set\n(.g_/.gr_/.gs_/.gm_/.gv_/.gk_/.gl_/.gsu_ plus own_<8hex>.php and the\ncore_<8hex>.php kill switch) and the implant writes its own .htaccess there,\nso a probe is likely denied before PHP executes. That is why PHP-layer\ntelemetry records nothing on this surface and why a request-layer rule is the\ninstrument that can answer whether it is probed at all. Ships pass with\nblock_policy: never_block — it is a monitor by design, and the release\npipeline must not auto-promote it into an enforcing rule on the strength of\na zero-false-positive record alone.\n\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:2;s:4:\"tags\";a:5:{i:0;s:21:\"post-compromise-probe\";i:1;s:27:\"filesystem-planted-backdoor\";i:2;s:16:\"hidden-directory\";i:3;s:7:\"monitor\";i:4;s:21:\"core-fs-path-coverage\";}s:4:\"mode\";s:4:\"pass\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:13:\"<=999.999.999\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:1:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:32:\"~/wp-content/\\.sc_[0-9a-f]{8}/~i\";}}}s:32:\"RULE-CAMPAIGN-SCPB-IMPLANT-ID-01\";a:11:{s:3:\"cve\";s:33:\"CAMPAIGN-2026-W37-SCPB-IMPLANT-ID\";s:11:\"description\";s:750:\"Detects the per-site implant identifier of the sc_pb/sc_c mass-implant\ncampaign. The implanted loader answers requests carrying sc_c=<16 lowercase hex>\non / and /wp-login.php. The value is constant per victim host (one distinct\nvalue per domain across a full production day), which makes it an implant ID\nrather than a cache-buster. This parameter had zero occurrences fleet-wide\nbefore 2026-09-01 and reached 45,986 distinct domains by 2026-09-08, a growth\nshape no legitimately-distributed plugin produces. Starts in pass mode so the\nrelease pipeline can confirm the false-positive floor before promotion.\nThis rule does NOT remediate the compromise; it severs one implant control\nchannel and routes the host to filesystem-integrity investigation.\n\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:8.5;s:4:\"tags\";a:4:{i:0;s:15:\"post-compromise\";i:1;s:23:\"implant-control-channel\";i:2;s:13:\"mass-campaign\";i:3;s:19:\"core-param-coverage\";}s:4:\"mode\";s:4:\"pass\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:13:\"<=999.999.999\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:1:{i:0;a:3:{s:4:\"name\";s:9:\"ARGS:sc_c\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:16:\"~^[0-9a-f]{16}$~\";}}}s:42:\"RULE-CAMPAIGN-SCPB-IMPLANT-ID-COMPANION-01\";a:11:{s:3:\"cve\";s:33:\"CAMPAIGN-2026-W37-SCPB-IMPLANT-ID\";s:11:\"description\";s:245:\"Relaxed sampling sibling of RULE-CAMPAIGN-SCPB-IMPLANT-ID-01. Matches\nany sc_c value regardless of shape so that operator rotation of the identifier\nformat (length or alphabet) is visible as companion>0 while primary=0. Never\npromoted to block.\n\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:1;s:4:\"tags\";a:2:{i:0;s:17:\"companion-sampler\";i:1;s:13:\"mass-campaign\";}s:4:\"mode\";s:4:\"pass\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:13:\"<=999.999.999\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:1:{i:0;a:2:{s:4:\"name\";s:9:\"ARGS:sc_c\";s:4:\"type\";s:6:\"exists\";}}}s:38:\"RULE-CAMPAIGN-SCPB-LOOPBACK-MONITOR-01\";a:12:{s:3:\"cve\";s:29:\"CAMPAIGN-2026-W37-SCPB-BEACON\";s:11:\"description\";s:60:\"Samples SC loopback checks carrying sc_pb on directory URLs.\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:1;s:4:\"tags\";a:4:{i:0;s:7:\"monitor\";i:1;s:25:\"post-compromise-signature\";i:2;s:21:\"infection-unconfirmed\";i:3;s:19:\"sampled-observation\";}s:4:\"mode\";s:4:\"pass\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:13:\"<=999.999.999\";s:6:\"method\";s:3:\"GET\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:4:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:122:\"~\\A/(?:[^/?#\\r\\n]+/)*\\?(?=(?:[^&]*&)*sc_pb=[0-9]{13}(?:&|\\z))[A-Za-z0-9_-]+=[^?&#\\r\\n]*(?:&[A-Za-z0-9_-]+=[^?&#\\r\\n]*)*\\z~\";}i:1;a:3:{s:4:\"name\";s:26:\"REQUEST_HEADERS:User-Agent\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:18:\"~^WordPress/[0-9]~\";}i:2;a:3:{s:4:\"name\";s:10:\"ARGS:sc_pb\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:15:\"~\\A[0-9]{13}\\z~\";}i:3;a:2:{s:4:\"type\";s:13:\"probabilistic\";s:5:\"value\";s:6:\"0.0005\";}}}s:33:\"RULE-CAMPAIGN-SCPB-WLH-CHANNEL-01\";a:11:{s:3:\"cve\";s:26:\"CAMPAIGN-2026-W37-SCPB-WLH\";s:11:\"description\";s:404:\"Detects the secondary wlh_sc / wlhck control parameters of the same\nimplant family. Observed alongside sc_c on the same hosts with fixed value\nlengths (wlhck exactly 8 characters, wlh_sc exactly 12). Production one-day\nwindow 2026-09-08: 136,494 requests / 2,858 domains (wlhck) and 45,367 requests\n/ 1,716 domains (wlh_sc). Smaller footprint than sc_c, treated as the same\noperator on a second channel.\n\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:7.5;s:4:\"tags\";a:4:{i:0;s:15:\"post-compromise\";i:1;s:23:\"implant-control-channel\";i:2;s:13:\"mass-campaign\";i:3;s:19:\"core-param-coverage\";}s:4:\"mode\";s:4:\"pass\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:13:\"<=999.999.999\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:1:{i:0;a:3:{s:4:\"name\";s:19:\"ARGS:/wlh_sc|wlhck/\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:35:\"~^[0-9A-Za-z]{8}([0-9A-Za-z]{4})?$~\";}}}s:43:\"RULE-CAMPAIGN-SERVICE-WORKER-FETCH-PROBE-01\";a:11:{s:3:\"cve\";s:42:\"CAMPAIGN-2026-W37-SERVICE-WORKER-TELEMETRY\";s:11:\"description\";s:757:\"Telemetry-only sampler. Browsers send the request header\n\"Service-Worker: script\" on service-worker registration and on the periodic\nupdate fetch, so this rule records which WordPress-served URLs are being\nregistered as service workers. A rogue service worker gives an attacker\npersistent client-side MITM on every subsequent navigation, and the\nregistration URL is not otherwise recoverable from any Imunify telemetry\nstream today. Sampling is capped at 1 request in 200 because legitimate PWA\nplugins (SuperPWA, Webpushr, Firebase messaging, PWA for WP) register service\nworkers on 11,598 distinct domains per day; the header alone is not a\ncompromise signal, it is the collection surface that makes rogue registrations\nfindable. Never promoted to block.\n\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:1;s:4:\"tags\";a:3:{i:0;s:9:\"telemetry\";i:1;s:14:\"service-worker\";i:2;s:23:\"client-side-persistence\";}s:4:\"mode\";s:4:\"pass\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:13:\"<=999.999.999\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:2:{i:0;a:3:{s:4:\"name\";s:30:\"REQUEST_HEADERS:Service-Worker\";s:4:\"type\";s:6:\"equals\";s:5:\"value\";s:6:\"script\";}i:1;a:2:{s:4:\"type\";s:13:\"probabilistic\";s:5:\"value\";s:5:\"0.005\";}}}s:38:\"RULE-CAMPAIGN-WP-EDITOR-AUTH-COOKIE-02\";a:12:{s:3:\"cve\";s:29:\"CAMPAIGN-2026-WP-EDITOR-ABUSE\";s:11:\"description\";s:100:\"Block WordPress core editor writes that select an administrator and create an authentication cookie.\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:9;s:4:\"tags\";a:4:{i:0;s:26:\"authenticated-editor-abuse\";i:1;s:23:\"authentication-backdoor\";i:2;s:15:\"post-compromise\";i:3;s:25:\"wordpress-core-entrypoint\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:13:\"<=999.999.999\";s:6:\"method\";s:4:\"POST\";s:11:\"ajax_action\";s:22:\"edit-theme-plugin-file\";s:10:\"conditions\";a:3:{i:0;a:3:{s:4:\"name\";s:13:\"ARGS:/^file$/\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:9:\"~\\.php$~i\";}i:1;a:3:{s:4:\"name\";s:15:\"ARGS:newcontent\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:18:\"~<\\?(?:php\\b|=)?~i\";}i:2;a:3:{s:4:\"name\";s:15:\"ARGS:newcontent\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:846:\"~(?is)(?=.*\\$[A-Za-z_]\\w*(?:\\s|/\\*.*?\\*/|(?:\\/\\/|#)[^\\r\\n]*(?:\\r?\\n|$))*=(?:\\s|/\\*.*?\\*/|(?:\\/\\/|#)[^\\r\\n]*(?:\\r?\\n|$))*\\bget_users(?:\\s|/\\*.*?\\*/|(?:\\/\\/|#)[^\\r\\n]*(?:\\r?\\n|$))*\\((?=[^;]{0,512}\\b(?:role|roles)\\b[^;]{0,512}\\badministrator\\b))(?=.*\\bwp_set_current_user(?:\\s|/\\*.*?\\*/|(?:\\/\\/|#)[^\\r\\n]*(?:\\r?\\n|$))*\\((?:\\s|/\\*.*?\\*/|(?:\\/\\/|#)[^\\r\\n]*(?:\\r?\\n|$))*\\$[A-Za-z_]\\w*(?:\\s|/\\*.*?\\*/|(?:\\/\\/|#)[^\\r\\n]*(?:\\r?\\n|$))*(?:\\[\\s*\\d+\\s*\\])?(?:\\s|/\\*.*?\\*/|(?:\\/\\/|#)[^\\r\\n]*(?:\\r?\\n|$))*->(?:\\s|/\\*.*?\\*/|(?:\\/\\/|#)[^\\r\\n]*(?:\\r?\\n|$))*ID\\b)(?=.*\\bwp_set_auth_cookie(?:\\s|/\\*.*?\\*/|(?:\\/\\/|#)[^\\r\\n]*(?:\\r?\\n|$))*\\((?:\\s|/\\*.*?\\*/|(?:\\/\\/|#)[^\\r\\n]*(?:\\r?\\n|$))*\\$[A-Za-z_]\\w*(?:\\s|/\\*.*?\\*/|(?:\\/\\/|#)[^\\r\\n]*(?:\\r?\\n|$))*(?:\\[\\s*\\d+\\s*\\])?(?:\\s|/\\*.*?\\*/|(?:\\/\\/|#)[^\\r\\n]*(?:\\r?\\n|$))*->(?:\\s|/\\*.*?\\*/|(?:\\/\\/|#)[^\\r\\n]*(?:\\r?\\n|$))*ID\\b)~\";}}}s:43:\"RULE-CAMPAIGN-WP-EDITOR-REQUEST-CALLABLE-01\";a:12:{s:3:\"cve\";s:29:\"CAMPAIGN-2026-WP-EDITOR-ABUSE\";s:11:\"description\";s:111:\"Block WordPress core editor writes that extract request variables and invoke an attacker-selected PHP callable.\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:9;s:4:\"tags\";a:4:{i:0;s:26:\"authenticated-editor-abuse\";i:1;s:12:\"php-backdoor\";i:2;s:15:\"post-compromise\";i:3;s:25:\"wordpress-core-entrypoint\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:13:\"<=999.999.999\";s:6:\"method\";s:4:\"POST\";s:11:\"ajax_action\";s:22:\"edit-theme-plugin-file\";s:10:\"conditions\";a:3:{i:0;a:3:{s:4:\"name\";s:13:\"ARGS:/^file$/\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:9:\"~\\.php$~i\";}i:1;a:3:{s:4:\"name\";s:15:\"ARGS:newcontent\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:18:\"~<\\?(?:php\\b|=)?~i\";}i:2;a:3:{s:4:\"name\";s:15:\"ARGS:newcontent\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:347:\"~(?is)(?=.*\\bextract(?:\\s|/\\*.*?\\*/|(?:\\/\\/|#)[^\\r\\n]*(?:\\r?\\n|$))*\\((?:\\s|/\\*.*?\\*/|(?:\\/\\/|#)[^\\r\\n]*(?:\\r?\\n|$))*\\$_(?:REQUEST|GET|POST)\\b)(?=.*(?:\\$[A-Za-z_]\\w*|\\bcall_user_func|\\$_(?:REQUEST|GET|POST)\\s*\\[\\s*[\\x22\\x27][A-Za-z_]\\w*[\\x22\\x27]\\s*\\]|\\$\\{\\s*[\\x22\\x27][A-Za-z_]\\w*[\\x22\\x27]\\s*\\})(?:\\s|/\\*.*?\\*/|(?:\\/\\/|#)[^\\r\\n]*(?:\\r?\\n|$))*\\()~\";}}}s:38:\"RULE-CAMPAIGN-WPCONFIG-BACKUP-EXFIL-01\";a:11:{s:3:\"cve\";s:30:\"CAMPAIGN-WPCONFIG-BACKUP-EXFIL\";s:11:\"description\";s:1030:\"Block credential-harvesting recon for wp-config.php derivatives — editor\nswap files (.swp/.swo/.un~/~), operator backups (.bak/.old/.save/.orig),\nand archive/rename artefacts (.zip/.txt/.1/.copy).  WordPress core ships\nexactly one wp-config.php and never a suffixed sibling, so a request for\n`wp-config.php<suffix>` is attacker traffic by construction — the same\nzero-FP-floor reasoning as RULE-CAMPAIGN-MAINT-INDEX-01.  A hit that\nreturns 200 leaks DB credentials and AUTH_KEY salts verbatim.\n\nEvidence (ClickHouse `incident`, full day 2026-08-20, `plugin_id=\'modsec\'`):\n2,154,801 matching requests across 32,887 distinct servers and 2,106\ndistinct URI variants.  Of those, 1,282,803 (59.5%) were NOT denied by any\nexisting rule — this rule closes that pass-through gap.  100% of matching\nrows are `modsec`, i.e. server-side observations that the behaviour exists\nat scale; this is not a measurement of WP-engine coverage.  The surface\ncarries no wp-rules coverage today: `wp-config` appears 0 times in\ninitial-rules.yaml.\n\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:7;s:4:\"tags\";a:5:{i:0;s:19:\"credential-exposure\";i:1;s:17:\"config-disclosure\";i:2;s:5:\"recon\";i:3;s:15:\"unauthenticated\";i:4;s:13:\"zero-fp-floor\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:3:\">=0\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:1:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:35:\"~^[^?#]*/\\.?wp-config\\.php[^/?#]+~i\";}}}s:24:\"RULE-CAMPAIGN-WPMATES-01\";a:12:{s:3:\"cve\";s:19:\"CAMPAIGN-WPMATES-01\";s:11:\"description\";s:441:\"Blocks requests to /wp-mates.php, a documented planted-backdoor filename\nnot present in WordPress core or any tracked legitimate plugin or theme\ndistribution. Any HTTP request to this path is a post-compromise callback\nprobe from a threat actor confirming the backdoor remains reachable. The\nfile must be removed from the filesystem and admin credentials rotated;\nthis rule blocks the probe but does not remediate the underlying\ncompromise.\n\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:9;s:4:\"tags\";a:5:{i:0;s:21:\"post-compromise-probe\";i:1;s:22:\"dropper-survival-check\";i:2;s:27:\"filesystem-planted-backdoor\";i:3;s:21:\"core-fs-path-coverage\";i:4;s:17:\"wp-mates-backdoor\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:13:\"<=999.999.999\";s:6:\"method\";s:3:\"GET\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:1:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:23:\"~^/wp-mates\\.php($|\\?)~\";}}}s:22:\"RULE-CVE-2024-10222-01\";a:11:{s:3:\"cve\";s:14:\"CVE-2024-10222\";s:11:\"description\";s:95:\"SVG Support <=2.5.10 stored XSS via unsanitized SVG file upload through REST API media endpoint\";s:8:\"cve_link\";s:47:\"https://nvd.nist.gov/vuln/detail/CVE-2024-10222\";s:8:\"severity\";d:6.4;s:4:\"tags\";a:5:{i:0;s:3:\"xss\";i:1;s:10:\"stored-xss\";i:2;s:11:\"file-upload\";i:3;s:3:\"svg\";i:4;s:8:\"rest-api\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:11:\"svg-support\";s:8:\"versions\";s:8:\"<=2.5.10\";s:6:\"action\";s:13:\"rest_api_init\";s:10:\"conditions\";a:3:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:59:\"~(?:^/wp-json|(?:^|&|\\?)rest_route=)/wp/v2/media(?:/|\\?|$)~\";}i:1;a:3:{s:4:\"name\";s:15:\"FILES:file:name\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:9:\"~\\.svg$~i\";}i:2;a:3:{s:4:\"name\";s:18:\"FILES:file:content\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:123:\"~<script[\\s/>]|\\bon(?:load|error|click|mouseover|focus|mouseenter)\\s*=|javascript\\s*:|xlink:href\\s*=\\s*[\"\']?\\s*javascript~i\";}}}s:22:\"RULE-CVE-2024-10942-01\";a:11:{s:3:\"cve\";s:14:\"CVE-2024-10942\";s:11:\"description\";s:90:\"All in One WP Migration <=7.89 unauthenticated PHP object injection via backup file import\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:7.5;s:4:\"tags\";a:0:{}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:23:\"all-in-one-wp-migration\";s:8:\"versions\";s:6:\"<=7.89\";s:11:\"ajax_action\";s:12:\"ai1wm_import\";s:10:\"conditions\";a:1:{i:0;a:3:{s:4:\"name\";s:20:\"FILES:import:content\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:15:\"~[OCa]:[0-9]+:~\";}}}s:21:\"RULE-CVE-2026-1319-01\";a:12:{s:3:\"cve\";s:13:\"CVE-2026-1319\";s:11:\"description\";s:100:\"Robin Image Optimizer <=2.0.2 reflected XSS via id parameter in wio_ng_reoptimize_image AJAX handler\";s:8:\"cve_link\";s:46:\"https://nvd.nist.gov/vuln/detail/CVE-2026-1319\";s:8:\"severity\";d:6.4;s:4:\"tags\";a:3:{i:0;s:3:\"xss\";i:1;s:13:\"reflected-xss\";i:2;s:4:\"ajax\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:21:\"robin-image-optimizer\";s:8:\"versions\";s:7:\"<=2.0.2\";s:6:\"method\";s:4:\"POST\";s:11:\"ajax_action\";s:23:\"wio_ng_reoptimize_image\";s:10:\"conditions\";a:1:{i:0;a:2:{s:4:\"name\";s:7:\"ARGS:id\";s:4:\"type\";s:9:\"detectXSS\";}}}s:21:\"RULE-CVE-2026-1319-02\";a:12:{s:3:\"cve\";s:13:\"CVE-2026-1319\";s:11:\"description\";s:97:\"Robin Image Optimizer <=2.0.2 reflected XSS via id parameter in wio_ng_restore_image AJAX handler\";s:8:\"cve_link\";s:46:\"https://nvd.nist.gov/vuln/detail/CVE-2026-1319\";s:8:\"severity\";d:6.4;s:4:\"tags\";a:3:{i:0;s:3:\"xss\";i:1;s:13:\"reflected-xss\";i:2;s:4:\"ajax\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:21:\"robin-image-optimizer\";s:8:\"versions\";s:7:\"<=2.0.2\";s:6:\"method\";s:4:\"POST\";s:11:\"ajax_action\";s:20:\"wio_ng_restore_image\";s:10:\"conditions\";a:1:{i:0;a:2:{s:4:\"name\";s:7:\"ARGS:id\";s:4:\"type\";s:9:\"detectXSS\";}}}s:21:\"RULE-CVE-2026-1841-01\";a:12:{s:3:\"cve\";s:13:\"CVE-2026-1841\";s:11:\"description\";s:94:\"PixelYourSite <=11.2.0 stored XSS via unsanitized pys_source request parameter during checkout\";s:8:\"cve_link\";s:46:\"https://nvd.nist.gov/vuln/detail/CVE-2026-1841\";s:8:\"severity\";d:7.2;s:4:\"tags\";a:3:{i:0;s:3:\"xss\";i:1;s:10:\"stored-xss\";i:2;s:15:\"unauthenticated\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:13:\"pixelyoursite\";s:8:\"versions\";s:8:\"<=11.2.0\";s:6:\"method\";s:4:\"POST\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:1:{i:0;a:2:{s:4:\"name\";s:15:\"ARGS:pys_source\";s:4:\"type\";s:9:\"detectXSS\";}}}s:21:\"RULE-CVE-2026-1841-02\";a:12:{s:3:\"cve\";s:13:\"CVE-2026-1841\";s:11:\"description\";s:95:\"PixelYourSite <=11.2.0 stored XSS via unsanitized pys_landing request parameter during checkout\";s:8:\"cve_link\";s:46:\"https://nvd.nist.gov/vuln/detail/CVE-2026-1841\";s:8:\"severity\";d:7.2;s:4:\"tags\";a:3:{i:0;s:3:\"xss\";i:1;s:10:\"stored-xss\";i:2;s:15:\"unauthenticated\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:13:\"pixelyoursite\";s:8:\"versions\";s:8:\"<=11.2.0\";s:6:\"method\";s:4:\"POST\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:1:{i:0;a:3:{s:4:\"name\";s:16:\"ARGS:pys_landing\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:26:\"~<[a-zA-Z/!]|javascript:~i\";}}}s:22:\"RULE-CVE-2026-19949-01\";a:11:{s:3:\"cve\";s:14:\"CVE-2026-19949\";s:11:\"description\";s:171:\"All-in-One WP Migration and Backup <=7.109 unauthenticated SQL injection via archive restore due to unescaped backslash-terminated quoted values in ai1wm_import processing\";s:8:\"cve_link\";s:47:\"https://nvd.nist.gov/vuln/detail/CVE-2026-19949\";s:8:\"severity\";d:8.8;s:4:\"tags\";a:3:{i:0;s:13:\"sql-injection\";i:1;s:15:\"unauthenticated\";i:2;s:15:\"archive-restore\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:23:\"all-in-one-wp-migration\";s:8:\"versions\";s:7:\"<=7.109\";s:11:\"ajax_action\";s:12:\"ai1wm_import\";s:10:\"conditions\";a:1:{i:0;a:3:{s:4:\"name\";s:4:\"ARGS\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:14:\"~(?:\\\\\'){20,}~\";}}}s:22:\"RULE-CVE-2026-22440-01\";a:11:{s:3:\"cve\";s:14:\"CVE-2026-22440\";s:11:\"description\";s:0:\"\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:7.1;s:4:\"tags\";a:0:{}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:7:\">=1.0.0\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:2:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:60:\"~^(?:/(?:index\\.php)?(?:\\?|$)|/(?:archive|blog)(?:/|\\?|$))~i\";}i:1;a:3:{s:4:\"name\";s:25:\"ARGS:/^(?:s|q|redirect)$/\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:95:\"~(?:<script[\\s/>]|on(?:error|load|click|mouse(?:over|down|up)|focus|blur)\\s*=|javascript\\s*:)~i\";}}}s:22:\"RULE-CVE-2026-27072-01\";a:12:{s:3:\"cve\";s:14:\"CVE-2026-27072\";s:11:\"description\";s:86:\"PixelYourSite <=11.2.0.1 Stored XSS via pys_head parameter in HeadFooter save_meta_box\";s:8:\"cve_link\";s:47:\"https://nvd.nist.gov/vuln/detail/CVE-2026-27072\";s:8:\"severity\";d:7.1;s:4:\"tags\";a:3:{i:0;s:3:\"xss\";i:1;s:10:\"stored-xss\";i:2;s:9:\"post-meta\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:13:\"pixelyoursite\";s:8:\"versions\";s:10:\"<=11.2.0.1\";s:6:\"method\";s:4:\"POST\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:3:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:22:\"~^/wp-admin/post\\.php~\";}i:1;a:2:{s:4:\"name\";s:13:\"ARGS:pys_head\";s:4:\"type\";s:6:\"exists\";}i:2;a:2:{s:4:\"type\";s:18:\"missing_capability\";s:5:\"value\";s:15:\"unfiltered_html\";}}}s:22:\"RULE-CVE-2026-27072-02\";a:12:{s:3:\"cve\";s:14:\"CVE-2026-27072\";s:11:\"description\";s:88:\"PixelYourSite <=11.2.0.1 Stored XSS via pys_footer parameter in HeadFooter save_meta_box\";s:8:\"cve_link\";s:47:\"https://nvd.nist.gov/vuln/detail/CVE-2026-27072\";s:8:\"severity\";d:7.1;s:4:\"tags\";a:3:{i:0;s:3:\"xss\";i:1;s:10:\"stored-xss\";i:2;s:9:\"post-meta\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:13:\"pixelyoursite\";s:8:\"versions\";s:10:\"<=11.2.0.1\";s:6:\"method\";s:4:\"POST\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:3:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:22:\"~^/wp-admin/post\\.php~\";}i:1;a:2:{s:4:\"name\";s:15:\"ARGS:pys_footer\";s:4:\"type\";s:6:\"exists\";}i:2;a:2:{s:4:\"type\";s:18:\"missing_capability\";s:5:\"value\";s:15:\"unfiltered_html\";}}}s:22:\"RULE-CVE-2026-28048-01\";a:11:{s:3:\"cve\";s:14:\"CVE-2026-28048\";s:11:\"description\";s:84:\"FlashMart Theme <=2.0.15 unauthenticated local file inclusion via template parameter\";s:8:\"cve_link\";s:47:\"https://nvd.nist.gov/vuln/detail/CVE-2026-28048\";s:8:\"severity\";d:8.1;s:4:\"tags\";a:3:{i:0;s:20:\"local-file-inclusion\";i:1;s:14:\"path-traversal\";i:2;s:15:\"unauthenticated\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:5:\">=5.0\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:1:{i:0;a:3:{s:4:\"name\";s:18:\"ARGS:flashtemplate\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:59:\"~(?:\\.\\.[\\/]|wp-config\\.php|/etc/passwd|\\.htaccess|\\.env)~i\";}}}s:22:\"RULE-CVE-2026-32461-01\";a:11:{s:3:\"cve\";s:14:\"CVE-2026-32461\";s:11:\"description\";s:89:\"Really Simple SSL <=9.5.7 missing authorization on rsssl_force_confirm_email AJAX handler\";s:8:\"cve_link\";s:47:\"https://nvd.nist.gov/vuln/detail/CVE-2026-32461\";s:8:\"severity\";d:5.3;s:4:\"tags\";a:2:{i:0;s:21:\"missing-authorization\";i:1;s:21:\"broken-access-control\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:17:\"really-simple-ssl\";s:8:\"versions\";s:7:\"<=9.5.7\";s:11:\"ajax_action\";s:25:\"rsssl_force_confirm_email\";s:10:\"conditions\";a:1:{i:0;a:2:{s:4:\"type\";s:18:\"missing_capability\";s:5:\"value\";s:14:\"manage_options\";}}}s:22:\"RULE-CVE-2026-32461-02\";a:11:{s:3:\"cve\";s:14:\"CVE-2026-32461\";s:11:\"description\";s:95:\"Really Simple SSL <=9.5.7 missing authorization on rsssl_resend_verification_email AJAX handler\";s:8:\"cve_link\";s:47:\"https://nvd.nist.gov/vuln/detail/CVE-2026-32461\";s:8:\"severity\";d:5.3;s:4:\"tags\";a:2:{i:0;s:21:\"missing-authorization\";i:1;s:21:\"broken-access-control\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:17:\"really-simple-ssl\";s:8:\"versions\";s:7:\"<=9.5.7\";s:11:\"ajax_action\";s:31:\"rsssl_resend_verification_email\";s:10:\"conditions\";a:1:{i:0;a:2:{s:4:\"type\";s:18:\"missing_capability\";s:5:\"value\";s:14:\"manage_options\";}}}s:21:\"RULE-CVE-2026-3722-01\";a:11:{s:3:\"cve\";s:13:\"CVE-2026-3722\";s:11:\"description\";s:118:\"Auto Image Attributes From Filename With Bulk Updater <=4.9 stored XSS via _wp_attachment_image_alt on attachment edit\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:6.4;s:4:\"tags\";a:0:{}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:53:\"auto-image-attributes-from-filename-with-bulk-updater\";s:8:\"versions\";s:5:\"<=4.9\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:3:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:22:\"~^/wp-admin/post\\.php~\";}i:1;a:3:{s:4:\"name\";s:29:\"ARGS:_wp_attachment_image_alt\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:129:\"~(?:<\\s*script[\\s/>]|on(?:error|load|mouseover|click|focus|blur)\\s*=|javascript\\s*:|data\\s*:(?!\\s*(?:image|audio|video|font)/))~i\";}i:2;a:2:{s:4:\"type\";s:18:\"missing_capability\";s:5:\"value\";s:15:\"unfiltered_html\";}}}s:21:\"RULE-CVE-2026-3722-02\";a:11:{s:3:\"cve\";s:13:\"CVE-2026-3722\";s:11:\"description\";s:104:\"Auto Image Attributes From Filename With Bulk Updater <=4.9 stored XSS via post_title on attachment edit\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:6.4;s:4:\"tags\";a:0:{}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:53:\"auto-image-attributes-from-filename-with-bulk-updater\";s:8:\"versions\";s:5:\"<=4.9\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:3:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:22:\"~^/wp-admin/post\\.php~\";}i:1;a:3:{s:4:\"name\";s:15:\"ARGS:post_title\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:129:\"~(?:<\\s*script[\\s/>]|on(?:error|load|mouseover|click|focus|blur)\\s*=|javascript\\s*:|data\\s*:(?!\\s*(?:image|audio|video|font)/))~i\";}i:2;a:2:{s:4:\"type\";s:18:\"missing_capability\";s:5:\"value\";s:15:\"unfiltered_html\";}}}s:21:\"RULE-CVE-2026-3722-03\";a:11:{s:3:\"cve\";s:13:\"CVE-2026-3722\";s:11:\"description\";s:108:\"Auto Image Attributes From Filename With Bulk Updater <=4.9 stored XSS via REST API alt_text on media update\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:6.4;s:4:\"tags\";a:0:{}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:53:\"auto-image-attributes-from-filename-with-bulk-updater\";s:8:\"versions\";s:5:\"<=4.9\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:3:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:59:\"~(?:^/wp-json|(?:^|&|\\?)rest_route=)/wp/v2/media(?:/|\\?|$)~\";}i:1;a:3:{s:4:\"name\";s:13:\"ARGS:alt_text\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:129:\"~(?:<\\s*script[\\s/>]|on(?:error|load|mouseover|click|focus|blur)\\s*=|javascript\\s*:|data\\s*:(?!\\s*(?:image|audio|video|font)/))~i\";}i:2;a:2:{s:4:\"type\";s:18:\"missing_capability\";s:5:\"value\";s:15:\"unfiltered_html\";}}}s:22:\"RULE-CVE-2026-76549-01\";a:11:{s:3:\"cve\";s:14:\"CVE-2026-76549\";s:11:\"description\";s:112:\"UpdraftPlus <1.26.7 CSRF on direct backup-restore dispatch via admin.php?page=updraftplus&action=updraft_restore\";s:8:\"cve_link\";s:47:\"https://nvd.nist.gov/vuln/detail/CVE-2026-76549\";s:8:\"severity\";d:5.9;s:4:\"tags\";a:3:{i:0;s:4:\"csrf\";i:1;s:21:\"missing-authorization\";i:2;s:14:\"backup-restore\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:11:\"updraftplus\";s:8:\"versions\";s:7:\"<1.26.7\";s:6:\"action\";s:10:\"admin_init\";s:10:\"conditions\";a:4:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:23:\"~^/wp-admin/admin\\.php~\";}i:1;a:3:{s:4:\"name\";s:9:\"ARGS:page\";s:4:\"type\";s:6:\"equals\";s:5:\"value\";s:11:\"updraftplus\";}i:2;a:3:{s:4:\"name\";s:11:\"ARGS:action\";s:4:\"type\";s:6:\"equals\";s:5:\"value\";s:15:\"updraft_restore\";}i:3;a:2:{s:4:\"type\";s:18:\"missing_capability\";s:5:\"value\";s:14:\"manage_options\";}}}s:22:\"RULE-CVE-2026-76549-02\";a:11:{s:3:\"cve\";s:14:\"CVE-2026-76549\";s:11:\"description\";s:130:\"UpdraftPlus <1.26.7 CSRF on direct backup-restore-continue dispatch via admin.php?page=updraftplus&action=updraft_restore_continue\";s:8:\"cve_link\";s:47:\"https://nvd.nist.gov/vuln/detail/CVE-2026-76549\";s:8:\"severity\";d:5.9;s:4:\"tags\";a:3:{i:0;s:4:\"csrf\";i:1;s:21:\"missing-authorization\";i:2;s:14:\"backup-restore\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:11:\"updraftplus\";s:8:\"versions\";s:7:\"<1.26.7\";s:6:\"action\";s:10:\"admin_init\";s:10:\"conditions\";a:4:{i:0;a:3:{s:4:\"name\";s:11:\"REQUEST_URI\";s:4:\"type\";s:5:\"regex\";s:5:\"value\";s:23:\"~^/wp-admin/admin\\.php~\";}i:1;a:3:{s:4:\"name\";s:9:\"ARGS:page\";s:4:\"type\";s:6:\"equals\";s:5:\"value\";s:11:\"updraftplus\";}i:2;a:3:{s:4:\"name\";s:11:\"ARGS:action\";s:4:\"type\";s:6:\"equals\";s:5:\"value\";s:24:\"updraft_restore_continue\";}i:3;a:2:{s:4:\"type\";s:18:\"missing_capability\";s:5:\"value\";s:14:\"manage_options\";}}}s:22:\"RULE-CVE-2026-81766-01\";a:11:{s:3:\"cve\";s:14:\"CVE-2026-81766\";s:11:\"description\";s:147:\"Really Simple Security <9.8.0 subsite administrator privilege escalation via unauthorized plugin install in rsp_upgrade_install_plugin AJAX handler\";s:8:\"cve_link\";s:47:\"https://nvd.nist.gov/vuln/detail/CVE-2026-81766\";s:8:\"severity\";d:6.6;s:4:\"tags\";a:4:{i:0;s:21:\"missing-authorization\";i:1;s:20:\"privilege-escalation\";i:2;s:9:\"multisite\";i:3;s:19:\"plugin-installation\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:17:\"really-simple-ssl\";s:8:\"versions\";s:6:\"<9.8.0\";s:11:\"ajax_action\";s:26:\"rsp_upgrade_install_plugin\";s:10:\"conditions\";a:2:{i:0;a:2:{s:4:\"name\";s:18:\"ARGS:download_link\";s:4:\"type\";s:6:\"exists\";}i:1;a:2:{s:4:\"type\";s:18:\"missing_capability\";s:5:\"value\";s:15:\"install_plugins\";}}}s:22:\"RULE-CVE-2026-81766-02\";a:11:{s:3:\"cve\";s:14:\"CVE-2026-81766\";s:11:\"description\";s:151:\"Really Simple Security <9.8.0 subsite administrator privilege escalation via unauthorized plugin activation in rsp_upgrade_activate_plugin AJAX handler\";s:8:\"cve_link\";s:47:\"https://nvd.nist.gov/vuln/detail/CVE-2026-81766\";s:8:\"severity\";d:6.6;s:4:\"tags\";a:4:{i:0;s:21:\"missing-authorization\";i:1;s:20:\"privilege-escalation\";i:2;s:9:\"multisite\";i:3;s:17:\"plugin-activation\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:17:\"really-simple-ssl\";s:8:\"versions\";s:6:\"<9.8.0\";s:11:\"ajax_action\";s:27:\"rsp_upgrade_activate_plugin\";s:10:\"conditions\";a:2:{i:0;a:2:{s:4:\"name\";s:11:\"ARGS:plugin\";s:4:\"type\";s:6:\"exists\";}i:1;a:2:{s:4:\"type\";s:18:\"missing_capability\";s:5:\"value\";s:16:\"activate_plugins\";}}}s:22:\"RULE-CVE-2026-89080-01\";a:11:{s:3:\"cve\";s:14:\"CVE-2026-89080\";s:11:\"description\";s:168:\"Really Simple Security <9.8.1 missing authorization on change_method_to_email AJAX handler allows resetting another user\'s completed 2FA enrolment via user_id parameter\";s:8:\"cve_link\";s:47:\"https://nvd.nist.gov/vuln/detail/CVE-2026-89080\";s:8:\"severity\";d:7.5;s:4:\"tags\";a:4:{i:0;s:21:\"authentication-bypass\";i:1;s:21:\"missing-authorization\";i:2;s:25:\"two-factor-authentication\";i:3;s:4:\"idor\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:17:\"really-simple-ssl\";s:8:\"versions\";s:6:\"<9.8.1\";s:11:\"ajax_action\";s:22:\"change_method_to_email\";s:10:\"conditions\";a:2:{i:0;a:2:{s:4:\"name\";s:12:\"ARGS:user_id\";s:4:\"type\";s:6:\"exists\";}i:1;a:2:{s:4:\"type\";s:18:\"missing_capability\";s:5:\"value\";s:10:\"edit_users\";}}}s:22:\"RULE-CVE-2026-89080-02\";a:11:{s:3:\"cve\";s:14:\"CVE-2026-89080\";s:11:\"description\";s:171:\"Really Simple Security <9.8.1 missing authorization on resend_email_code_profile AJAX handler allows resetting another user\'s completed 2FA enrolment via user_id parameter\";s:8:\"cve_link\";s:47:\"https://nvd.nist.gov/vuln/detail/CVE-2026-89080\";s:8:\"severity\";d:7.5;s:4:\"tags\";a:4:{i:0;s:21:\"authentication-bypass\";i:1;s:21:\"missing-authorization\";i:2;s:25:\"two-factor-authentication\";i:3;s:4:\"idor\";}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:6:\"plugin\";s:4:\"slug\";s:17:\"really-simple-ssl\";s:8:\"versions\";s:6:\"<9.8.1\";s:11:\"ajax_action\";s:25:\"resend_email_code_profile\";s:10:\"conditions\";a:2:{i:0;a:2:{s:4:\"name\";s:12:\"ARGS:user_id\";s:4:\"type\";s:6:\"exists\";}i:1;a:2:{s:4:\"type\";s:18:\"missing_capability\";s:5:\"value\";s:10:\"edit_users\";}}}s:14:\"TEST-HEARTBEAT\";a:11:{s:3:\"cve\";s:14:\"TEST-HEARTBEAT\";s:11:\"description\";s:0:\"\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:0.1;s:4:\"tags\";a:0:{}s:4:\"mode\";s:4:\"pass\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:7:\">=1.0.0\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:1:{i:0;a:2:{s:4:\"type\";s:13:\"probabilistic\";s:5:\"value\";s:6:\"0.0002\";}}}s:9:\"TEST-RULE\";a:11:{s:3:\"cve\";s:8:\"TEST-CVE\";s:11:\"description\";s:0:\"\";s:8:\"cve_link\";s:0:\"\";s:8:\"severity\";d:2;s:4:\"tags\";a:0:{}s:4:\"mode\";s:5:\"block\";s:6:\"target\";s:4:\"core\";s:4:\"slug\";s:0:\"\";s:8:\"versions\";s:7:\">=1.0.0\";s:6:\"action\";s:4:\"init\";s:10:\"conditions\";a:1:{i:0;a:3:{s:4:\"name\";s:14:\"ARGS:test-rule\";s:4:\"type\";s:6:\"equals\";s:5:\"value\";s:36:\"b3d45e60-53a5-4959-b911-5178baaef7ac\";}}}}}', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`)
            [1] => 0.0018689632415771
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/imunify-security/imunify-security.php'), CloudLinux\Imunify\App\Plugin->init, CloudLinux\Imunify\App\Plugin->coreSetup, CloudLinux\Imunify\App\Defender\RuleProvider->loadRules, set_transient, wp_cache_set, WP_Object_Cache->set, WP_Object_Cache->_transient_set, add_option
            [3] => 1789820097.1434
            [4] => Array
                (
                )

        )

    [11] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = '_transient_timeout_imunify_disabled_rules' LIMIT 1
            [1] => 0.00032210350036621
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/imunify-security/imunify-security.php'), CloudLinux\Imunify\App\Plugin->init, CloudLinux\Imunify\App\Plugin->coreSetup, CloudLinux\Imunify\App\Defender\Defender->processRules, CloudLinux\Imunify\App\Defender\Defender->isRuleDisabled, CloudLinux\Imunify\App\Defender\DisabledRulesManager->isRuleDisabled, CloudLinux\Imunify\App\Defender\DisabledRulesManager->getDisabledRules, get_transient, wp_cache_get, WP_Object_Cache->get, WP_Object_Cache->_transient_get, get_option
            [3] => 1789820097.172
            [4] => Array
                (
                )

        )

    [12] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = '_transient_imunify_disabled_rules' LIMIT 1
            [1] => 0.00023889541625977
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/imunify-security/imunify-security.php'), CloudLinux\Imunify\App\Plugin->init, CloudLinux\Imunify\App\Plugin->coreSetup, CloudLinux\Imunify\App\Defender\Defender->processRules, CloudLinux\Imunify\App\Defender\Defender->isRuleDisabled, CloudLinux\Imunify\App\Defender\DisabledRulesManager->isRuleDisabled, CloudLinux\Imunify\App\Defender\DisabledRulesManager->getDisabledRules, get_transient, wp_cache_get, WP_Object_Cache->get, WP_Object_Cache->_transient_get, get_option
            [3] => 1789820097.1726
            [4] => Array
                (
                )

        )

    [13] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'pys_gtm' LIMIT 1
            [1] => 0.00042605400085449
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/pixelyoursite/facebook-pixel-master.php'), require_once('/plugins/pixelyoursite/pixelyoursite.php'), require_once('/plugins/pixelyoursite/modules/google_gtm/gtm.php'), PixelYourSite\GTM, PixelYourSite\GTM::instance, PixelYourSite\GTM->__construct, PixelYourSite\GTM->enabled, PixelYourSite\Settings->getOption, PixelYourSite\Settings->maybeLoad, get_option
            [3] => 1789820097.4832
            [4] => Array
                (
                )

        )

    [14] => Array
        (
            [0] => SELECT option_name, option_value FROM wpat_options WHERE option_name LIKE 'wbcr_io_%'
            [1] => 0.00046706199645996
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/robin-image-optimizer/robin-image-optimizer.php'), WRIO_Plugin->__construct, Wbcr_Factory480_Plugin->__construct, Wbcr_Factory480_Plugin->init_plugin_notices, WBCR\Factory_480\Notices->__construct, Wbcr_Factory480_Base->getPopulateOption, Wbcr_Factory480_Base->getOption, Wbcr_Factory480_Base->loadAllOptions
            [3] => 1789820097.5934
            [4] => Array
                (
                )

        )

    [15] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'uninstall_plugins' LIMIT 1
            [1] => 0.00037217140197754
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/totalpoll/plugin.php'), TotalPollSetup->__construct, TotalPollSetup->load, TotalPollVendors\TotalCore\Application->bootstrap, register_uninstall_hook, get_option
            [3] => 1789820097.8118
            [4] => Array
                (
                )

        )

    [16] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'marketing' LIMIT 1
            [1] => 0.00044703483581543
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/totalsurvey/plugin.php'), TotalSurveyVendors\TotalSuite\Foundation\WordPress\Plugin::instance, TotalSurveyVendors\TotalSuite\Foundation\WordPress\Plugin->bootstrap, TotalSurvey\Plugin->registerRoutes, TotalSurveyVendors\TotalSuite\Foundation\WordPress\Rest\Router->__call, call_user_func_array, TotalSurveyVendors\TotalSuite\Foundation\WordPress\Rest\Router->add, TotalSurveyVendors\TotalSuite\Foundation\WordPress\Rest\ActionResolver->resolve, TotalSurveyVendors\TotalSuite\Foundation\WordPress\Rest\ActionResolver->createInstance, ReflectionClass->newInstanceArgs, TotalSurveyVendors\TotalSuite\Foundation\WordPress\Actions\Marketing\NPS->__construct, TotalSurveyVendors\TotalSuite\Foundation\WordPress\Options->withKey, TotalSurveyVendors\TotalSuite\Foundation\WordPress\Options->__construct, TotalSurveyVendors\TotalSuite\Foundation\WordPress\Options->refresh, get_option
            [3] => 1789820098.1086
            [4] => Array
                (
                )

        )

    [17] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'updraft_restore_in_progress' LIMIT 1
            [1] => 0.0003058910369873
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/updraftplus/updraftplus.php'), UpdraftPlus->block_updates_during_restore_progress, UpdraftPlus->check_restore_progress, get_site_option, get_network_option, get_option
            [3] => 1789820098.2066
            [4] => Array
                (
                )

        )

    [18] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'wpel-network-settings' LIMIT 1
            [1] => 0.00026988983154297
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wp-external-links/wp-external-links.php'), wpel_init, WPRun_Base_1x0x0::create, WPRun_Base_1x0x0->__construct, WPEL_Plugin->init, WPEL_Plugin->create_components, WPRun_Base_1x0x0::create, WPRun_Base_1x0x0->__construct, WPEL_Network_Fields->init, FWP_Settings_Section_Base_1x0x0->init, FWP_Settings_Section_Base_1x0x0->set_option_values, FWP_Settings_Section_Base_1x0x0->get_saved_values, get_option
            [3] => 1789820098.2259
            [4] => Array
                (
                )

        )

    [19] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'wpel-network-admin-settings' LIMIT 1
            [1] => 0.00017094612121582
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wp-external-links/wp-external-links.php'), wpel_init, WPRun_Base_1x0x0::create, WPRun_Base_1x0x0->__construct, WPEL_Plugin->init, WPEL_Plugin->create_components, WPRun_Base_1x0x0::create, WPRun_Base_1x0x0->__construct, WPEL_Network_Admin_Fields->init, FWP_Settings_Section_Base_1x0x0->init, FWP_Settings_Section_Base_1x0x0->set_option_values, FWP_Settings_Section_Base_1x0x0->get_saved_values, get_option
            [3] => 1789820098.2281
            [4] => Array
                (
                )

        )

    [20] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'wpel-exit-confirmation-settings' LIMIT 1
            [1] => 0.00020289421081543
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wp-external-links/wp-external-links.php'), wpel_init, WPRun_Base_1x0x0::create, WPRun_Base_1x0x0->__construct, WPEL_Plugin->init, WPEL_Plugin->create_components, WPRun_Base_1x0x0::create, WPRun_Base_1x0x0->__construct, WPEL_Exit_Confirmation_Fields->init, FWP_Settings_Section_Base_1x0x0->init, FWP_Settings_Section_Base_1x0x0->set_option_values, FWP_Settings_Section_Base_1x0x0->get_saved_values, get_option
            [3] => 1789820098.2361
            [4] => Array
                (
                )

        )

    [21] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'jetpack_premium_analytics_enabled' LIMIT 1
            [1] => 0.00031089782714844
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Jetpack->configure, Jetpack::is_premium_analytics_enabled, get_option
            [3] => 1789820098.341
            [4] => Array
                (
                )

        )

    [22] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'jetpack_offline_mode' LIMIT 1
            [1] => 0.00046420097351074
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Jetpack->configure, Jetpack->run_initialize_tracking_action, do_action('jetpack_initialize_tracking'), WP_Hook->do_action, WP_Hook->apply_filters, Jetpack->initialize_tracking, Automattic\Jetpack\Tracking->should_enable_tracking, Automattic\Jetpack\Status->is_offline_mode, get_option
            [3] => 1789820098.3563
            [4] => Array
                (
                )

        )

    [23] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'wpcode_settings' LIMIT 1
            [1] => 0.00026488304138184
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, WPCode_Auto_Insert->load_types, require_once('/plugins/insert-headers-and-footers/includes/auto-insert/class-wpcode-auto-insert-everywhere.php'), WPCode_Auto_Insert_Type->__construct, WPCode_Settings->get_option, WPCode_Settings->get_options, WPCode_Settings->load_options, get_option
            [3] => 1789820098.4378
            [4] => Array
                (
                )

        )

    [24] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'jetpack_sync_error_idc' LIMIT 1
            [1] => 0.0017809867858887
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\Jetpack\Config->on_plugins_loaded, Automattic\Jetpack\Config->ensure_feature, Automattic\Jetpack\Config->enable_sync, Automattic\Jetpack\Sync\Main::configure, Automattic\Jetpack\Sync\Actions::sync_allowed, Automattic\Jetpack\Status->in_safe_mode, Automattic\Jetpack\Identity_Crisis::validate_sync_error_idc_option, Jetpack_Options::get_option, Jetpack_Options::get_option_from_database, get_option
            [3] => 1789820098.4831
            [4] => Array
                (
                )

        )

    [25] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'rsssl_encryption_keys_set' LIMIT 1
            [1] => 0.00051307678222656
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, RSSSL, REALLY_SIMPLE_SSL::instance, REALLY_SIMPLE_SSL->includes, require_once('/plugins/really-simple-ssl/functions.php'), rsssl_set_encryption_key, get_site_option, get_network_option, get_option
            [3] => 1789820098.5544
            [4] => Array
                (
                )

        )

    [26] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'redirection_version' LIMIT 1
            [1] => 0.00032305717468262
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Redirection::init, Redirection->__construct, Redirection->can_start, Red_Database_Status->__construct, Red_Database_Status->needs_installing, Red_Database_Status->get_old_version, get_option
            [3] => 1789820098.6089
            [4] => Array
                (
                )

        )

    [27] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'tie_instagram_feed_account' LIMIT 1
            [1] => 0.00029897689819336
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, tielabs_instagram_feed, TieLabs_Instagram_Feed::instance, TieLabs_Instagram_Account->__construct, TieLabs_Instagram_Account->get, get_option
            [3] => 1789820098.6145
            [4] => Array
                (
                )

        )

    [28] => Array
        (
            [0] => SELECT autoload FROM wpat_options WHERE option_name = '_transient_rocket_check_key_errors'
            [1] => 0.00038409233093262
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, rocket_init, WP_Rocket\Plugin->load, rocket_valid_key, delete_transient, wp_cache_delete, WP_Object_Cache->delete, WP_Object_Cache->_transient_del, delete_option
            [3] => 1789820098.6485
            [4] => Array
                (
                )

        )

    [29] => Array
        (
            [0] => SELECT autoload FROM wpat_options WHERE option_name = '_transient_rocket_cloudflare_is_api_keys_valid'
            [1] => 0.00048995018005371
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, rocket_init, WP_Rocket\Plugin->load, WP_Rocket\Engine\Container\Container->get, WP_Rocket\Engine\Container\ServiceProvider\ServiceProviderAggregate->register, WP_Rocket\Addon\ServiceProvider->register, WP_Rocket\Addon\ServiceProvider->addon_cloudflare, delete_transient, wp_cache_delete, WP_Object_Cache->delete, WP_Object_Cache->_transient_del, delete_option
            [3] => 1789820098.7036
            [4] => Array
                (
                )

        )

    [30] => Array
        (
            [0] => SELECT autoload FROM wpat_options WHERE option_name = '_transient_rocket_check_key_errors'
            [1] => 0.00049996376037598
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, rocket_init, rocket_valid_key, delete_transient, wp_cache_delete, WP_Object_Cache->delete, WP_Object_Cache->_transient_del, delete_option
            [3] => 1789820098.8419
            [4] => Array
                (
                )

        )

    [31] => Array
        (
            [0] => SELECT autoload FROM wpat_options WHERE option_name = '_transient_rocket_check_key_errors'
            [1] => 0.00024104118347168
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, rocket_init, rocket_valid_key, delete_transient, wp_cache_delete, WP_Object_Cache->delete, WP_Object_Cache->_transient_del, delete_option
            [3] => 1789820098.845
            [4] => Array
                (
                )

        )

    [32] => Array
        (
            [0] => SELECT autoload FROM wpat_options WHERE option_name = '_transient_rocket_check_key_errors'
            [1] => 0.00020599365234375
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, rocket_init, rocket_valid_key, delete_transient, wp_cache_delete, WP_Object_Cache->delete, WP_Object_Cache->_transient_del, delete_option
            [3] => 1789820098.8464
            [4] => Array
                (
                )

        )

    [33] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'rsssl_le_certificate_generated_by_rsssl' LIMIT 1
            [1] => 0.00031805038452148
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, rsssl_le_schedule_cron, get_option
            [3] => 1789820098.8468
            [4] => Array
                (
                )

        )

    [34] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'rsssl_ssl_activation_active' LIMIT 1
            [1] => 0.0010139942169189
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, rsssl_multisite_schedule_cron, get_site_option, get_network_option, get_option
            [3] => 1789820098.8669
            [4] => Array
                (
                )

        )

    [35] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'jetpack_sync_non_blocking' LIMIT 1
            [1] => 0.0014488697052002
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\Jetpack\Sync\Main::on_plugins_loaded_late, get_option
            [3] => 1789820098.9205
            [4] => Array
                (
                )

        )

    [36] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = '_transient_timeout_jetpack_connection_active_plugins_refresh' LIMIT 1
            [1] => 0.0007929801940918
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\Jetpack\Connection\Plugin_Storage::configure, Automattic\Jetpack\Connection\Plugin_Storage::maybe_update_active_connected_plugins, get_transient, wp_cache_get, WP_Object_Cache->get, WP_Object_Cache->_transient_get, get_option
            [3] => 1789820098.9232
            [4] => Array
                (
                )

        )

    [37] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = '_transient_jetpack_connection_active_plugins_refresh' LIMIT 1
            [1] => 0.0011680126190186
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\Jetpack\Connection\Plugin_Storage::configure, Automattic\Jetpack\Connection\Plugin_Storage::maybe_update_active_connected_plugins, get_transient, wp_cache_get, WP_Object_Cache->get, WP_Object_Cache->_transient_get, get_option
            [3] => 1789820098.9241
            [4] => Array
                (
                )

        )

    [38] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'rank_math_google_oauth_tokens' LIMIT 1
            [1] => 0.00036001205444336
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('after_setup_theme'), WP_Hook->do_action, WP_Hook->apply_filters, RankMath\Module\Manager->load_modules, RankMath\Module\Manager->load_module, RankMath\Module\Manager->load_module_common, RankMath\Analytics\Analytics_Common->__construct, RankMath\Analytics\Analytics_Stats->__construct, RankMath\Helper::can_add_frontend_stats, RankMath\Google\Authentication::is_authorized, RankMath\Google\Authentication::tokens, get_option
            [3] => 1789820099.1956
            [4] => Array
                (
                )

        )

    [39] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'rank_math_google_analytic_profile' LIMIT 1
            [1] => 0.00035190582275391
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('after_setup_theme'), WP_Hook->do_action, WP_Hook->apply_filters, RankMath\Module\Manager->load_modules, RankMath\Module\Manager->load_module, RankMath\Module\Manager->load_module_common, RankMath\Analytics\Analytics_Common->__construct, RankMath\Analytics\Workflow\Jobs::get, RankMath\Analytics\Workflow\Jobs->hooks, RankMath\Google\Console::is_console_connected, get_option
            [3] => 1789820099.2052
            [4] => Array
                (
                )

        )

    [40] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'googlesitekit_dashboard_sharing' LIMIT 1
            [1] => 0.0003209114074707
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, Google\Site_Kit\Plugin->Google\Site_Kit\{closure}, Google\Site_Kit\Core\Assets\Assets->register, current_user_can, user_can, WP_User->has_cap, map_meta_cap, apply_filters('map_meta_cap'), WP_Hook->apply_filters, Google\Site_Kit\Core\Permissions\Permissions->Google\Site_Kit\Core\Permissions\{closure}, Google\Site_Kit\Core\Permissions\Permissions->map_meta_capabilities, Google\Site_Kit\Core\Permissions\Permissions->check_view_splash_capability, Google\Site_Kit\Core\Permissions\Permissions->user_has_shared_role, Google\Site_Kit\Core\Modules\Module_Sharing_Settings->get_all_shared_roles, Google\Site_Kit\Core\Modules\Module_Sharing_Settings->get, Google\Site_Kit\Core\Storage\Setting->get, Google\Site_Kit\Core\Storage\Options->get, get_option
            [3] => 1789820099.4344
            [4] => Array
                (
                )

        )

    [41] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'googlesitekit_ads_settings' LIMIT 1
            [1] => 0.00015997886657715
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, Google\Site_Kit\Plugin->Google\Site_Kit\{closure}, Google\Site_Kit\Core\Assets\Assets->register, current_user_can, user_can, WP_User->has_cap, map_meta_cap, apply_filters('map_meta_cap'), WP_Hook->apply_filters, Google\Site_Kit\Core\Permissions\Permissions->Google\Site_Kit\Core\Permissions\{closure}, Google\Site_Kit\Core\Permissions\Permissions->map_meta_capabilities, Google\Site_Kit\Core\Permissions\Permissions->check_view_splash_capability, Google\Site_Kit\Core\Permissions\Permissions->user_has_shared_role, Google\Site_Kit\Core\Modules\Module_Sharing_Settings->get_all_shared_roles, Google\Site_Kit\Core\Modules\Module_Sharing_Settings->get, Google\Site_Kit\Core\Storage\Setting->get, Google\Site_Kit\Core\Storage\Options->get, get_option, apply_filters('default_option_googlesitekit_dashboard_sharing'), WP_Hook->apply_filters, Google\Site_Kit\Core\Modules\Modules->Google\Site_Kit\Core\Util\{closure}, Google\Site_Kit\Core\Modules\Modules->populate_default_shared_ownership_module_settings, Google\Site_Kit\Core\Modules\Modules->get_shared_ownership_modules, Google\Site_Kit\Core\Modules\Modules->get_shareable_modules, Google\Site_Kit\Core\Modules\Modules->get_connected_modules, array_filter, Google\Site_Kit\Core\Modules\Modules->Google\Site_Kit\Core\Modules\{closure}, Google\Site_Kit\Core\Modules\Modules->is_module_connected, Google\Site_Kit\Modules\Ads->is_connected, Google\Site_Kit\Core\Storage\Setting->get, Google\Site_Kit\Core\Storage\Options->get, get_option
            [3] => 1789820099.435
            [4] => Array
                (
                )

        )

    [42] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'googlesitekit_conversion_tracking' LIMIT 1
            [1] => 0.00028705596923828
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, Google\Site_Kit\Plugin->Google\Site_Kit\{closure}, Google\Site_Kit\Core\Conversion_Tracking\Conversion_Tracking->register, Google\Site_Kit\Core\Conversion_Tracking\Conversion_Tracking_Settings->is_conversion_tracking_enabled, Google\Site_Kit\Core\Storage\Setting->get, Google\Site_Kit\Core\Storage\Options->get, get_option
            [3] => 1789820099.5012
            [4] => Array
                (
                )

        )

    [43] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'googlesitekit_analytics-4_audience_settings' LIMIT 1
            [1] => 0.0075170993804932
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, Google\Site_Kit\Plugin->Google\Site_Kit\{closure}, Google\Site_Kit\Core\Email_Reporting\Email_Reporting->__construct, Google\Site_Kit\Core\Email_Reporting\Email_Report_Section_Builder->__construct, Google\Site_Kit\Modules\Analytics_4\Email_Reporting\Report_Data_Builder->__construct, Google\Site_Kit\Modules\Analytics_4\Email_Reporting\Audience_Config->get_available_audience_display_map, Google\Site_Kit\Core\Storage\Setting->get, Google\Site_Kit\Core\Storage\Options->get, get_option
            [3] => 1789820099.5341
            [4] => Array
                (
                )

        )

    [44] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'googlesitekit_email_reporting' LIMIT 1
            [1] => 0.00029206275939941
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, Google\Site_Kit\Plugin->Google\Site_Kit\{closure}, Google\Site_Kit\Core\Email_Reporting\Email_Reporting->register, Google\Site_Kit\Core\Email_Reporting\Email_Reporting_Settings->is_email_reporting_enabled, Google\Site_Kit\Core\Storage\Setting->get, Google\Site_Kit\Core\Storage\Options->get, get_option
            [3] => 1789820099.566
            [4] => Array
                (
                )

        )

    [45] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'mcp_jwt_secret' LIMIT 1
            [1] => 0.00027298927307129
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, WPMedia\MCP\OAuth\Auth\SecretManager::ensure_secret, WPMedia\MCP\OAuth\Auth\SecretManager::get_secret, get_option
            [3] => 1789820099.6591
            [4] => Array
                (
                )

        )

    [46] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = '_site_transient_timeout_wp_theme_files_patterns-8ca2058914b24235f2db08312a4f579f' LIMIT 1
            [1] => 0.00022602081298828
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, _register_theme_block_patterns, WP_Theme->get_block_patterns, WP_Theme->get_pattern_cache, get_site_transient, wp_cache_get, WP_Object_Cache->get, WP_Object_Cache->_transient_get, get_site_option, get_network_option, get_option
            [3] => 1789820099.757
            [4] => Array
                (
                )

        )

    [47] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = '_site_transient_wp_theme_files_patterns-8ca2058914b24235f2db08312a4f579f' LIMIT 1
            [1] => 0.00024890899658203
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, _register_theme_block_patterns, WP_Theme->get_block_patterns, WP_Theme->get_pattern_cache, get_site_transient, wp_cache_get, WP_Object_Cache->get, WP_Object_Cache->_transient_get, get_site_option, get_network_option, get_option
            [3] => 1789820099.7573
            [4] => Array
                (
                )

        )

    [48] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'can_compress_scripts' LIMIT 1
            [1] => 0.00016307830810547
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, register_qm_collectors_debug_bar, Debug_Bar->__construct, Debug_Bar->enqueue, wp_register_script, wp_scripts, WP_Scripts->__construct, WP_Scripts->init, do_action_ref_array('wp_default_scripts'), WP_Hook->do_action, WP_Hook->apply_filters, wp_default_packages, wp_register_tinymce_scripts, script_concat_settings, get_site_option, get_network_option, get_option
            [3] => 1789820099.7597
            [4] => Array
                (
                )

        )

    [49] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'rank_math_connect_data' LIMIT 1
            [1] => 0.00018405914306641
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, RankMath\Tracking->hooks, RankMath\Tracking->init_user_data, RankMath\Tracking->get_user_email, RankMath\Admin\Admin_Helper::get_registration_data, get_option
            [3] => 1789820099.7706
            [4] => Array
                (
                )

        )

    [50] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'medium_crop' LIMIT 1
            [1] => 0.00017094612121582
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, yarpp_init, YARPP->__construct, yarpp_get_image_sizes, get_option
            [3] => 1789820099.7866
            [4] => Array
                (
                )

        )

    [51] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'large_crop' LIMIT 1
            [1] => 0.00018310546875
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, yarpp_init, YARPP->__construct, yarpp_get_image_sizes, get_option
            [3] => 1789820099.7869
            [4] => Array
                (
                )

        )

    [52] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'jetpack_portfolio' LIMIT 1
            [1] => 0.0001380443572998
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\Jetpack\Classic_Theme_Helper\Jetpack_Portfolio::init, Automattic\Jetpack\Classic_Theme_Helper\Jetpack_Portfolio->__construct, get_option
            [3] => 1789820099.7886
            [4] => Array
                (
                )

        )

    [53] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'tie_ver_19659555' LIMIT 1
            [1] => 0.0001990795135498
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, tie_theme_update_db, get_option
            [3] => 1789820099.8107
            [4] => Array
                (
                )

        )

    [54] => Array
        (
            [0] => SELECT option_value FROM wpat_options WHERE option_name = 'wpmedia_mcp_oauth_rewrite_version' LIMIT 1
            [1] => 0.00014400482177734
            [2] => require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, WPMedia\MCP\OAuth\Bootstrap->maybe_flush_rewrite_rules, WPMedia\MCP\OAuth\Bootstrap->needs_rewrite_flush, get_option
            [3] => 1789820099.8148
            [4] => Array
                (
                )

        )

)
 -->