. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . AnonSec Shell
AnonSec Shell
Server IP : 51.222.206.218  /  Your IP : 18.191.194.2   [ Reverse IP ]
Web Server : Apache
System : Linux srv3.mexxus.com 4.18.0-553.8.1.el8_10.x86_64 #1 SMP Tue Jul 2 07:26:33 EDT 2024 x86_64
User : ottavioc ( 1004)
PHP Version : 8.1.32
Disable Function : exec,passthru,shell_exec,system
Domains : 3 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/ottavioc/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /home/ottavioc/scan.log
/home/ottavioc/public_html/wp-includes/class-IXR.php contains base64decode call.
	                $value = base64_decode($this->_currentTagContents);


/home/ottavioc/public_html/wp-includes/class-feed.php contains base64decode call.
				$data = base64_decode( $data );


/home/ottavioc/public_html/wp-includes/class-smtp.php contains base64decode call.
	                $challenge = base64_decode(substr($this->last_reply, 4));


/home/ottavioc/public_html/wp-includes/class-phpmailer.php contains base64decode call.
	                        $data = base64_decode($data);


/home/ottavioc/public_html/wp-includes/class-wp-customize-widgets.php contains base64decode call.
			$decoded = base64_decode( $value['encoded_serialized_instance'], true );


/home/ottavioc/public_html/wp-includes/random_compat/random_bytes_com_dotnet.php contains base64decode call.
	        $buf .= base64_decode($util->GetRandom($bytes, 0));


/home/ottavioc/public_html/wp-includes/SimplePie/Sanitize.php contains base64decode call.
					$data = base64_decode($data);


/home/ottavioc/public_html/wp-includes/ID3/module.audio.ogg.php contains base64decode call.
						$flac->setStringMode(base64_decode($ThisFileInfo_ogg_comments_raw[$i]['value']));


/home/ottavioc/public_html/wp-includes/ID3/module.audio.ogg.php contains base64decode call.
						$data = base64_decode($ThisFileInfo_ogg_comments_raw[$i]['value']);


/home/ottavioc/public_html/wp-admin/includes/file.php contains base64decode call.
			$expected_raw_md5 = base64_decode( $expected_md5 );


/home/ottavioc/public_html/wp-content/themes/pinpoint/includes/page-builder/composer/lib/shortcodes.php contains eval call.
	                eval("\$param_value = \$".$param['param_name'].";");


/home/ottavioc/public_html/wp-content/themes/pinpoint/includes/page-builder/composer/lib/shortcodes.php contains base64decode call.
	            $param_line .= '<textarea name="'.$param['param_name'].'" class="wpb_vc_param_value wpb-textarea_raw_html '.$param['param_name'].' '.$param['type'].'" rows="16">' . base64_decode($param_value) . '</textarea>';


/home/ottavioc/public_html/wp-content/themes/pinpoint/includes/page-builder/composer/lib/shortcodes.php contains eval call.
	                eval("\$param_value = \$".$param['param_name'].";");


/home/ottavioc/public_html/wp-content/themes/pinpoint/includes/page-builder/composer/lib/shortcodes/accordion.php contains eval call.
	            eval("\$param_value = \$".$param['param_name'].";");


/home/ottavioc/public_html/wp-content/themes/pinpoint/includes/page-builder/composer/lib/shortcodes/tabs.php contains eval call.
	            eval("\$param_value = \$".$param['param_name'].";");


/home/ottavioc/public_html/wp-content/themes/pinpoint/includes/page-builder/composer/lib/shortcodes/raw_content.php contains base64decode call.
	                $output .= '<'.$param['holder'].' class="wpb_vc_param_value ' . $param_name . ' ' . $type . ' ' . $class . '" name="' . $param_name . '">'.htmlentities(base64_decode(strip_tags($value))).'</'.$param['holder'].'><input type="hidden" name="' . $param_name . '_code" class="' . $param_name . '_code" value="' .strip_tags($value) . '" />';


/home/ottavioc/public_html/wp-content/themes/pinpoint/includes/page-builder/composer/lib/shortcodes/raw_content.php contains base64decode call.
	        $content =  base64_decode(strip_tags($content));


/home/ottavioc/public_html/wp-content/themes/pinpoint/includes/page-builder/composer/lib/shortcodes/raw_content.php contains base64decode call.
	        $content =  base64_decode(strip_tags($content));


/home/ottavioc/public_html/wp-content/plugins/gravityformspaypal/class-gf-paypal.php contains base64decode call.
				$str = base64_decode( $str );


/home/ottavioc/public_html/wp-content/plugins/all-in-one-seo-pack/inc/extlib/OAuth.php contains base64decode call.
		    $decoded_sig = base64_decode($signature);


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/sitepress.class.php contains base64decode call.
						$custom_field_name                                                                       = base64_decode( $v );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/menu/troubleshooting.php contains base64decode call.
					$user = unserialize( base64_decode( $_GET[ 'data' ] ) );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/lib/icl_api.php contains base64decode call.
	                        $arr[] = base64_decode(html_entity_decode($e));


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/lib/icl_api.php contains base64decode call.
	                $translation[$c['attr']['type']] = base64_decode($translation[$c['attr']['type']]);


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/inc/translation-management/translation-management.class.php contains base64decode call.
							$cft[ base64_decode( $k ) ] = $v;


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/inc/translation-management/translation-management.class.php contains base64decode call.
	            $data = base64_decode($data);


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/inc/translation-management/translation-management.class.php contains base64decode call.
	                $exp[$k] = base64_decode(trim($e,'"'));


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/inc/translation-management/translation-management.class.php contains base64decode call.
	                $jobs[$k]->post_title = base64_decode($wpdb->get_var($wpdb->prepare("


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/inc/translation-management/translation-management.class.php contains base64decode call.
	                    $jobs[$k]->post_title = base64_decode($wpdb->get_var($wpdb->prepare("


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/inc/translation-management/translation-management.class.php contains base64decode call.
	            $job->original_doc_title = base64_decode($wpdb->get_var($wpdb->prepare("


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/inc/translation-management/translation-management.class.php contains base64decode call.
	                $job->original_doc_title = base64_decode($wpdb->get_var($wpdb->prepare("


/home/ottavioc/public_html/wp-content/plugins/gravityforms/form_display.php contains base64decode call.
				$state = json_decode( base64_decode( $_POST[ "state_{$form_id}" ] ), true );


/home/ottavioc/public_html/wp-content/plugins/gravityforms/form_detail.php contains eval call.
							var r = eval(expr);


/home/ottavioc/public_html/wp-content/plugins/gravityforms/common.php contains eval call.
			$result = preg_match( '/^[0-9 -\/*\(\)]+$/', $formula ) ? eval( "return {$formula};" ) : false;


/home/ottavioc/public_html/wp-content/plugins/gravityforms/common.php contains base64decode call.
				$decrypted_value = trim( mcrypt_decrypt( MCRYPT_RIJNDAEL_256, $key, base64_decode( $text ), MCRYPT_MODE_ECB, mcrypt_create_iv( $iv_size, MCRYPT_RAND ) ) );


/home/ottavioc/public_html/wp-content/plugins/gravityforms/common.php contains base64decode call.
			$decrypted = $db->get_var( $db->prepare('SELECT AES_DECRYPT(%s, %s) AS data', base64_decode( $text ), wp_salt( 'nonce' ) ) );


/home/ottavioc/public_html/wp-content/plugins/gravityforms/includes/addon/class-gf-results.php contains base64decode call.
						$state_array         = json_decode( base64_decode( $state ), true );


/home/ottavioc/public_html/wp-includes/load.php contains base64decode call.
		$userpass = base64_decode( $token );


/home/ottavioc/public_html/wp-includes/class-wp-recovery-mode-cookie-service.php contains base64decode call.
			$cookie = base64_decode( $cookie );


/home/ottavioc/public_html/wp-includes/class-wp-simplepie-sanitize-kses.php contains base64decode call.
				$data = base64_decode( $data );


/home/ottavioc/public_html/wp-includes/class-wp-customize-widgets.php contains base64decode call.
			$decoded = base64_decode( $value['encoded_serialized_instance'], true );


/home/ottavioc/public_html/wp-includes/SimplePie/Sanitize.php contains base64decode call.
					$data = base64_decode($data);


/home/ottavioc/public_html/wp-includes/rest-api/endpoints/class-wp-rest-widget-types-controller.php contains base64decode call.
				$serialized_instance = base64_decode( $request['instance']['encoded'] );


/home/ottavioc/public_html/wp-includes/rest-api/endpoints/class-wp-rest-widgets-controller.php contains base64decode call.
					$serialized_instance = base64_decode( $request['instance']['encoded'] );


/home/ottavioc/public_html/wp-includes/PHPMailer/SMTP.php contains base64decode call.
	                $challenge = base64_decode(substr($this->last_reply, 4));


/home/ottavioc/public_html/wp-includes/PHPMailer/PHPMailer.php contains base64decode call.
	                        $data = base64_decode($match[3]);


/home/ottavioc/public_html/wp-includes/blocks/legacy-widget.php contains base64decode call.
			$serialized_instance = base64_decode( $attributes['instance']['encoded'] );


/home/ottavioc/public_html/wp-includes/random_compat/random_bytes_com_dotnet.php contains base64decode call.
	            $buf .= base64_decode($util->GetRandom($bytes, 0));


/home/ottavioc/public_html/wp-includes/IXR/class-IXR-message.php contains base64decode call.
	                $value = base64_decode($this->_currentTagContents);


/home/ottavioc/public_html/wp-includes/ID3/module.audio.ogg.php contains base64decode call.
						$flac->setStringMode(base64_decode($ThisFileInfo_ogg_comments_raw[$i]['value']));


/home/ottavioc/public_html/wp-includes/ID3/module.audio.ogg.php contains base64decode call.
						$data = base64_decode($ThisFileInfo_ogg_comments_raw[$i]['value']);


/home/ottavioc/public_html/wp-content/uploads/backupbuddy_temp/qk8k953ucg/importbuddy.php contains base64decode call.
							$fileput_result = file_put_contents( ABSPATH . $unpack_file, base64_decode( $buffer ) );


/home/ottavioc/public_html/wp-content/plugins/gravityformspaypal/class-gf-paypal.php contains base64decode call.
				$str = base64_decode( $str );


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/waf.php contains base64decode call.
				$encoded = base64_decode($encoded);


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/waf.php contains base64decode call.
				$encoded = base64_decode($encoded);


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/waf.php contains base64decode call.
								$waf->verifySignedRequest(base64_decode($jsonData['data']['signature']), $jsonData['data']['rules'])


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/waf.php contains base64decode call.
								$waf->updateRuleSet(base64_decode($jsonData['data']['rules']),


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/waf.php contains base64decode call.
								$waf->updateRuleSet(base64_decode($jsonData['data']['rules']),


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/waf.php contains base64decode call.
									$waf->verifySignedRequest(base64_decode($jsonData['data']['signature']), $jsonData['data']['signatures'])


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/waf.php contains base64decode call.
									$waf->setMalwareSignatures(wfWAFUtils::json_decode(base64_decode($jsonData['data']['signatures'])),


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/waf.php contains base64decode call.
										$waf->verifySignedRequest(base64_decode($jsonData['data']['commonStringsSignature']), $jsonData['data']['commonStrings'] . $jsonData['data']['signatureIndexes'])


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/waf.php contains base64decode call.
										$waf->setMalwareSignatureCommonStrings(wfWAFUtils::json_decode(base64_decode($jsonData['data']['commonStrings'])), wfWAFUtils::json_decode(base64_decode($jsonData['data']['signatureIndexes'])));


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/waf.php contains base64decode call.
									$waf->setMalwareSignatures(wfWAFUtils::json_decode(base64_decode($jsonData['data']['signatures'])),


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/waf.php contains base64decode call.
										$waf->setMalwareSignatureCommonStrings(wfWAFUtils::json_decode(base64_decode($jsonData['data']['commonStrings'])), wfWAFUtils::json_decode(base64_decode($jsonData['data']['signatureIndexes'])));


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/xmlrpc.php contains base64decode call.
					$value = base64_decode($this->_currentTagContents);


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/request.php contains base64decode call.
							list($authUser, $authPass) = explode(':', base64_decode($matches[1]), 2);


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/rules.php contains base64decode call.
				return base64_decode($value);


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/storage/mysql.php contains base64decode call.
					(array_key_exists('paramKey', $actionData) ? base64_decode($actionData['paramKey']) : false),


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/storage/mysql.php contains base64decode call.
					(array_key_exists('paramValue', $actionData) ? base64_decode($actionData['paramValue']) : false),


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/storage/mysql.php contains base64decode call.
					(array_key_exists('fullRequest', $actionData) ? base64_decode($actionData['fullRequest']) : ''),


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/storage/file.php contains base64decode call.
							$json[$index] = base64_decode((string) $json[$index]);


/home/ottavioc/public_html/wp-content/plugins/wordfence/vendor/composer/ca-bundle/src/CaBundle.php contains base64decode call.
	$info = openssl_x509_parse(base64_decode('%s'));


/home/ottavioc/public_html/wp-content/plugins/wordfence/modules/login-security/classes/model/crypto/symmetric.php contains base64decode call.
			$iv = base64_decode($encrypted['iv']);


/home/ottavioc/public_html/wp-content/plugins/wordfence/modules/login-security/classes/model/crypto/symmetric.php contains base64decode call.
			$encrypted = base64_decode($encrypted['data']);


/home/ottavioc/public_html/wp-content/plugins/wordfence/modules/login-security/classes/model/crypto/jwt.php contains base64decode call.
			return base64_decode(self::base64url_convert_from($payload));


/home/ottavioc/public_html/wp-content/plugins/wordfence/waf/bootstrap.php contains base64decode call.
					$blockedPrefixes = base64_decode($blockedPrefixes);


/home/ottavioc/public_html/wp-content/plugins/wordfence/waf/wfWAFIPBlocksController.php contains base64decode call.
					if (base64_decode($b['IP']) != $ipNum) {


/home/ottavioc/public_html/wp-content/plugins/wordfence/waf/wfWAFIPBlocksController.php contains base64decode call.
						if (base64_decode($l['IP']) != $ipNum) {


/home/ottavioc/public_html/wp-content/plugins/wordfence/views/waf/options-group-whitelisted.php contains base64decode call.
						<span class="whitelist-display">${WFAD.htmlEscape(WFAD.base64_decode(whitelistedURLParam.path))}</span>


/home/ottavioc/public_html/wp-content/plugins/wordfence/views/waf/options-group-whitelisted.php contains base64decode call.
							   value="${WFAD.htmlEscape(WFAD.base64_decode(whitelistedURLParam.path))}">


/home/ottavioc/public_html/wp-content/plugins/wordfence/views/waf/options-group-whitelisted.php contains base64decode call.
						<span class="whitelist-display">${WFAD.htmlEscape(WFAD.base64_decode(whitelistedURLParam.paramKey))}</span>


/home/ottavioc/public_html/wp-content/plugins/wordfence/views/waf/options-group-whitelisted.php contains base64decode call.
							   type="text" value="${WFAD.htmlEscape(WFAD.base64_decode(whitelistedURLParam.paramKey))}">


/home/ottavioc/public_html/wp-content/plugins/wordfence/views/waf/debug.php contains base64decode call.
		$requestString = base64_decode($hitData->fullRequest);


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wordfenceScanner.php contains eval call.
										'longMsg' => sprintf(/* translators: Malware signature matched text. */ __('This file is a PHP executable file and contains the word "eval" (without quotes) and the word "%s" (without quotes). The eval() function along with an encoding function like the one mentioned are commonly used by hackers to hide their code. If you know about this file you can choose to ignore it to exclude it from future scans. This file was detected because you have enabled HIGH SENSITIVITY scanning. This option is more aggressive than the usual scans, and may cause false positives.', 'wordfence'), '<span class="wf-split-word">' . esc_html($badStringFound) . '</span>'),


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wfUtils.php contains base64decode call.
			$intermediate = base64_decode($intermediate);


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wfJWT.php contains base64decode call.
			$decodedHeader = base64_decode($header);


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wfJWT.php contains base64decode call.
			$decodedBody = base64_decode($body);


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wfJWT.php contains base64decode call.
			$decodedHeader = base64_decode($header);


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wfJWT.php contains base64decode call.
			$decodedBody = base64_decode($body);


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wfJWT.php contains base64decode call.
			return base64_decode(strtr($data, '-_', '+/'));


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wfConfig.php contains base64decode call.
								$path = @base64_decode($entry['path']);


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wfConfig.php contains base64decode call.
								$paramKey = @base64_decode($entry['paramKey']);


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wfLog.php contains base64decode call.
						$actionData[$key] = base64_decode($actionData[$key]);


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wordfenceClass.php contains base64decode call.
				$iwpRequest = json_decode(trim(base64_decode($iwpRequestDataArray[1])), true);


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wordfenceClass.php contains base64decode call.
					$waf->whitelistRuleForParam(base64_decode($_POST['path']), base64_decode($_POST['paramKey']),


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wordfenceClass.php contains base64decode call.
						$paramKey = base64_decode($actionData['paramKey']);


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wordfenceClass.php contains base64decode call.
						$paramValue = base64_decode($actionData['paramValue']);


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wordfenceClass.php contains base64decode call.
										base64_decode($path),


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wordfenceClass.php contains base64decode call.
										base64_decode($paramKey),


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wfActivityReport.php contains base64decode call.
					$paramKey = base64_decode($actionData['paramKey']);


/home/ottavioc/public_html/wp-content/plugins/wordfence/lib/wfActivityReport.php contains base64decode call.
					$paramValue = base64_decode($actionData['paramValue']);


/home/ottavioc/public_html/wp-content/plugins/wordfence/crypto/vendor/paragonie/random_compat/lib/random_bytes_com_dotnet.php contains base64decode call.
	            $buf .= base64_decode((string) $util->GetRandom($bytes, 0));


/home/ottavioc/public_html/wp-content/plugins/gravityforms/common.php contains eval call.
					$result = eval( "return {$formula};" );


/home/ottavioc/public_html/wp-content/plugins/gravityforms/common.php contains base64decode call.
				$decrypted_value = trim( mcrypt_decrypt( $mcrypt_cipher_name, $key, base64_decode( $text ), MCRYPT_MODE_ECB, mcrypt_create_iv( $iv_size, MCRYPT_RAND ) ) );


/home/ottavioc/public_html/wp-content/plugins/gravityforms/common.php contains base64decode call.
				$text_decoded = base64_decode( $text );


/home/ottavioc/public_html/wp-content/plugins/gravityforms/common.php contains base64decode call.
			$decrypted = $db->get_var( $db->prepare( 'SELECT AES_DECRYPT(%s, %s) AS data', base64_decode( $text ), wp_salt( 'nonce' ) ) );


/home/ottavioc/public_html/wp-content/plugins/gravityforms/form_display.php contains base64decode call.
				$state = json_decode( base64_decode( $_POST[ "state_{$form_id}" ] ), true );


/home/ottavioc/public_html/wp-content/plugins/gravityforms/includes/addon/class-gf-results.php contains base64decode call.
						$state_array         = json_decode( base64_decode( $state ), true );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/sitepress.class.php contains base64decode call.
					$custom_field_name    = base64_decode( $v );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/symfony/polyfill-iconv/Iconv.php contains base64decode call.
	                $d = base64_decode($str[$i + 2]);


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/symfony/polyfill-mbstring/Mbstring.php contains base64decode call.
	            $s = base64_decode($s);


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/inc/translation-jobs/jobs/wpml-external-translation-job.class.php contains base64decode call.
				base64_decode( $title_and_name->name )


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/inc/translation-jobs/jobs/wpml-external-translation-job.class.php contains base64decode call.
				: base64_decode( $title_and_name->title ) ) : '';


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/inc/translation-jobs/jobs/wpml-post-translation-job.class.php contains base64decode call.
					'term'        => base64_decode( $term->field_data_translated ),


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/inc/translation-jobs/jobs/wpml-element-translation-job.class.php contains base64decode call.
				$res[ $field->field_type ] = base64_decode( $field->field_data );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/classes/class-wpml-translation-job-factory.php contains base64decode call.
				$post_title = base64_decode( $title );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/classes/ICL-20-migration/class-wpml-tm-icl20-migration-status.php contains base64decode call.
						$raw_settings   = base64_decode( $raw_settings );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/classes/xliff/class-wpml-tm-xliff-frontend.php contains base64decode call.
				$data = json_decode( base64_decode( $_GET['xliff_export_data'] ) );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/classes/xliff/class-wpml-tm-xliff-writer.php contains base64decode call.
						$field_data_translated = base64_decode( $element->field_data_translated );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/classes/xliff/class-wpml-tm-xliff-writer.php contains base64decode call.
						$field_data            = base64_decode( $element->field_data );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/classes/xliff/class-wpml-tm-xliff-writer.php contains base64decode call.
					$strings_to_translate[ $element->tid ] = base64_decode( $element->field_data );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/classes/xliff/class-wpml-tm-validate-html.php contains base64decode call.
			return base64_decode( $matches[1] );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/classes/translation-basket/class-wpml-translation-basket-validation.php contains base64decode call.
							 && $this->encoding_validation->is_base64( base64_decode( $field['data'] ) )


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/classes/translation-basket/class-wpml-translation-basket-validation.php contains base64decode call.
								'content' => base64_decode( $field['data'] ),


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/classes/translation-jobs/class-wpml-tm-field-content-action.php contains base64decode call.
			$decoded = base64_decode( $content );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/classes/translation-jobs/class-wpml-element-translation-package.php contains base64decode call.
					$data = base64_decode( $data );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/classes/translation-jobs/TermMeta.php contains base64decode call.
			return $description ? base64_decode( $description ) : '';


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/wpml/tm/classes/translation-jobs/TermMeta.php contains base64decode call.
				return Utils::insertUnderKeys( $metaKeys, $carry, base64_decode( $row->field_data_translated ) );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/otgs/installer/src/Recommendations/RecommendationsManager.php contains base64decode call.
				$data = json_decode( base64_decode( sanitize_text_field( $_POST['pluginData'] ) ), true );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/otgs/installer/includes/class-otgs-installer-settings.php contains base64decode call.
				$settings = base64_decode( $settings );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/vendor/otgs/installer/includes/class-wp-installer.php contains base64decode call.
			$data = json_decode( base64_decode( sanitize_text_field( $_POST['data'] ) ), true );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/inc/translation-management/translation-management.class.php contains base64decode call.
								$cft[ base64_decode( $k ) ] = $v;


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/inc/translation-management/translation-management.class.php contains base64decode call.
				$data = base64_decode( $data );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/inc/translation-management/translation-management.class.php contains base64decode call.
					$exp[ $k ] = base64_decode( trim( $e, '"' ) );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/addons/wpml-page-builders/classes/Integrations/FusionBuilder/DynamicContent.php contains base64decode call.
			return isset( json_decode( base64_decode( $string ), true )['element_content'] );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/addons/wpml-page-builders/classes/Integrations/FusionBuilder/DynamicContent.php contains base64decode call.
			return json_decode( base64_decode( $string ), true )['element_content'];


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/addons/wpml-page-builders/classes/Integrations/FusionBuilder/FormContent.php contains base64decode call.
			$decoded = json_decode( base64_decode( $string ) );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/addons/wpml-page-builders/classes/Integrations/Cornerstone/Hooks/Editor.php contains base64decode call.
					return (array) json_decode( gzdecode( base64_decode( $request, true ) ), true );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/addons/wpml-page-builders/classes/Integrations/WPBakery/class-wpml-compatibility-plugin-visual-composer.php contains base64decode call.
					$values = rawurldecode( base64_decode( substr( $string, 5 ) ) );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/addons/wpml-page-builders/classes/Integrations/Divi/dynamic-content.php contains base64decode call.
			return json_decode( base64_decode( substr( $string, $start, -$end ) ), true );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/addons/wpml-page-builders/classes/Shared/st/strategy/shortcode/class-wpml-pb-shortcode-encoding.php contains base64decode call.
					$string = html_entity_decode( rawurldecode( base64_decode( strip_tags( $string ) ) ) );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/classes/url-handling/class-wpml-xdomain-data-parser.php contains base64decode call.
					$data         = base64_decode( $xdomain_data_request );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/classes/support/class-wpml-support-info-ui.php contains eval call.
					'label'    => __( 'eval() availability from Suhosin', 'sitepress' ),


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/classes/support/class-wpml-support-info-ui.php contains eval call.
						__( 'The eval() PHP function must be enabled.', 'sitepress' ) => 'https://wpml.org/home/minimum-requirements/?utm_source=plugin&utm_medium=gui&utm_campaign=wpmlcore#eval-usage',


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/classes/utilities/class-wpml-encoding.php contains base64decode call.
						$decoded_data = base64_decode( $decoded_data );


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/lib/twig/src/Environment.php contains eval call.
	                    eval('?>' . $content);


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/lib/twig/src/Test/IntegrationTestCase.php contains eval call.
	            eval('$ret = ' . $condition . ';');


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/lib/twig/src/Test/IntegrationTestCase.php contains eval call.
	            $config = \array_merge(['cache' => \false, 'strict_variables' => \true], $match[2] ? eval($match[2] . ';') : []);


/home/ottavioc/public_html/wp-content/plugins/sitepress-multilingual-cms/lib/twig/src/Test/IntegrationTestCase.php contains eval call.
	                $output = \trim($template->render(eval($match[1] . ';')), "\n ");


/home/ottavioc/public_html/wp-content/plugins/swift-framework/includes/page-builder/shortcodes/media.php contains base64decode call.
	            	$output .= rawurldecode( base64_decode( strip_tags( $style_array ) ) );


/home/ottavioc/public_html/wp-content/plugins/swift-framework/includes/page-builder/shortcodes/raw_content.php contains base64decode call.
	                    $output .= '<' . $param['holder'] . ' class="spb_param_value ' . $param_name . ' ' . $type . ' ' . $class . '" name="' . $param_name . '">' . htmlentities( rawurldecode( base64_decode( strip_tags( $value ) ) ), ENT_COMPAT, 'UTF-8' ) . '</' . $param['holder'] . '><input type="hidden" name="' . $param_name . '_code" class="' . $param_name . '_code" value="' . strip_tags( $value ) . '" />';


/home/ottavioc/public_html/wp-content/plugins/swift-framework/includes/page-builder/shortcodes/raw_content.php contains base64decode call.
	            $content = rawurldecode( base64_decode( strip_tags( $content ) ) );


/home/ottavioc/public_html/wp-content/plugins/swift-framework/includes/page-builder/shortcodes/raw_content.php contains base64decode call.
	                $content = rawurldecode( base64_decode( strip_tags( $content ) ) );


/home/ottavioc/public_html/wp-content/plugins/swift-framework/includes/page-builder/inc/shortcodes.php contains base64decode call.
	                $param_value = htmlentities( rawurldecode( base64_decode( $param_value ) ), ENT_COMPAT, 'UTF-8' );


/home/ottavioc/public_html/wp-content/plugins/swift-framework/includes/page-builder/inc/shortcodes.php contains base64decode call.
	                $param_line .= '<textarea name="' . $param['param_name'] . '" class="spb_param_value spb-textarea_raw_html ' . $param['param_name'] . ' ' . $param['type'] . '" rows="16">' . htmlentities( rawurldecode( base64_decode( $param_value ) ), ENT_COMPAT, 'UTF-8' ) . '</textarea>';


/home/ottavioc/public_html/wp-content/plugins/widget-logic/widget_logic.php contains eval call.
			$show_widget = eval($logic);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/eher/oauth/src/Eher/OAuth/RsaSha1.php contains base64decode call.
	    $decoded_sig = base64_decode($signature);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/Crypt/Base.php contains eval call.
	            eval('$func = function ($_action, &$self, $_text) { ' . $init_crypt . 'if ($_action == "encrypt") { ' . $encrypt . ' } else { ' . $decrypt . ' } };');


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/Crypt/RSA.php contains base64decode call.
	                $key = isset($parts[1]) ? base64_decode($parts[1]) : false;


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/Crypt/RSA.php contains base64decode call.
	                $public = base64_decode(implode('', array_map('trim', array_slice($key, 4, $publicLength))));


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/Crypt/RSA.php contains base64decode call.
	                $private = base64_decode(implode('', array_map('trim', array_slice($key, $publicLength + 5, $privateLength))));


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/Crypt/RSA.php contains base64decode call.
	            $this->current = new Math_BigInteger(base64_decode($this->current), 256);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/Crypt/RSA.php contains base64decode call.
	        $temp = preg_match('#^[a-zA-Z\d/+]*={0,2}$#', $temp) ? base64_decode($temp) : false;


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/File/ASN1.php contains base64decode call.
	                $value = base64_decode($source);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/File/X509.php contains base64decode call.
	                            = base64_encode("\0" . base64_decode(preg_replace('#-.+-|[\r\n]#', '', $cert['tbsCertificate']['subjectPublicKeyInfo']['subjectPublicKey'])));


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/File/X509.php contains base64decode call.
	                $value = base64_decode($value);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/File/X509.php contains base64decode call.
	                    substr(base64_decode($this->currentCert['signature']), 1),


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/File/X509.php contains base64decode call.
	                    substr(base64_decode($this->currentCert['signature']), 1),


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/File/X509.php contains base64decode call.
	                    substr(base64_decode($this->currentCert['signature']), 1),


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/File/X509.php contains base64decode call.
	                    substr(base64_decode($this->currentCert['signature']), 1),


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/File/X509.php contains base64decode call.
	                    chunk_split(base64_encode(substr(base64_decode($key), 1)), 64) .


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/File/X509.php contains base64decode call.
	        $ip = base64_decode($ip);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/File/X509.php contains base64decode call.
	        $ip = base64_decode($ip);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/File/X509.php contains eval call.
	                    eval('return function ($x) { return "\x" . bin2hex($x[0]); };') :


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/File/X509.php contains base64decode call.
	                            = base64_encode("\0" . base64_decode(preg_replace('#-.+-|[\r\n]#', '', $csr['certificationRequestInfo']['subjectPKInfo']['subjectPublicKey'])));


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/File/X509.php contains base64decode call.
	        $temp = preg_match('#^[a-zA-Z\d/+]*={0,2}$#', $temp) ? base64_decode($temp) : false;


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/File/X509.php contains base64decode call.
	                            = base64_encode("\0" . base64_decode(preg_replace('#-.+-|[\r\n]#', '', $spkac['publicKeyAndChallenge']['spki']['subjectPublicKey'])));


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/File/X509.php contains base64decode call.
	                $raw = base64_decode($raw);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/File/X509.php contains base64decode call.
	        $temp = preg_match('#^[a-zA-Z\d/+]*={0,2}$#', $temp) ? base64_decode($temp) : false;


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/kriswallsmith/assetic/src/Assetic/Extension/Twig/TwigFormulaLoader.php contains eval call.
	                $arguments[] = eval('return '.$this->twig->compile($argument).';');


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/yahnis-elsts/plugin-update-checker/Puc/v4p10/Vcs/GitLabApi.php contains base64decode call.
				return base64_decode($response->content);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/vendor/yahnis-elsts/plugin-update-checker/Puc/v4p10/Vcs/GitHubApi.php contains base64decode call.
				return base64_decode($response->content);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/udaddons/updraftplus-addons.php contains base64decode call.
						if (false == ($decompressed = gzuncompress(base64_decode($data)))) continue;


/home/ottavioc/public_html/wp-content/plugins/updraftplus/methods/dropbox.php contains base64decode call.
			$oauth2_id = defined('UPDRAFTPLUS_DROPBOX_CLIENT_ID') ? UPDRAFTPLUS_DROPBOX_CLIENT_ID : base64_decode('dzQxM3o0cWhqejY1Nm5l');


/home/ottavioc/public_html/wp-content/plugins/updraftplus/methods/dropbox.php contains base64decode call.
				$sec = base64_decode($d1);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/methods/dropbox.php contains base64decode call.
				$key = base64_decode($d2);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/methods/googledrive.php contains base64decode call.
				$opts['user_id'] = base64_decode($code['user_id']);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/methods/googledrive.php contains base64decode call.
				$opts['tmp_access_token'] = base64_decode($code['access_token']);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/methods/googledrive.php contains base64decode call.
						$result_body_json = base64_decode($body[0]);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/central/bootstrap.php contains base64decode call.
			$our_keys[$updraft_key_index]['publickey_remote'] = base64_decode($_GET['public_key']);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/central/commands.php contains base64decode call.
			$result = file_put_contents($upload_dir.'/'.$filename, base64_decode($params['data']), FILE_APPEND | LOCK_EX);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/central/modules/posts.php contains base64decode call.
				$image_data = base64_decode($image_data);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/central/modules/analytics.php contains base64decode call.
						'user_id' => base64_decode(urldecode($query['user_id'])),


/home/ottavioc/public_html/wp-content/plugins/updraftplus/central/modules/analytics.php contains base64decode call.
						'access_token' => base64_decode(urldecode($query['access_token']))


/home/ottavioc/public_html/wp-content/plugins/updraftplus/central/modules/analytics.php contains base64decode call.
									$token_response = json_decode(base64_decode($body[0]), true);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/addons/onedrive.php contains base64decode call.
					$result_body_json = base64_decode($body);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/includes/class-remote-send.php contains base64decode call.
			$data = base64_decode($data['data']);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/includes/class-udrpc.php contains base64decode call.
				if (false === ($bundle = base64_decode($bundle))) return array('code' => 'invalid_corrupt', 'data' => 'not_base64');


/home/ottavioc/public_html/wp-content/plugins/updraftplus/includes/class-udrpc.php contains base64decode call.
			$ciphertext = base64_decode($ciphertext);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/includes/class-udrpc.php contains base64decode call.
			$sym_key = base64_decode($sym_key);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/includes/class-udrpc.php contains base64decode call.
			$verified = $rsa->verify($message, base64_decode($signature));


/home/ottavioc/public_html/wp-content/plugins/updraftplus/includes/class-commands.php contains base64decode call.
			$auth_data = json_decode(base64_decode($data['auth_data']), true);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/includes/PEAR/PEAR.php contains eval call.
	            eval('$e = new Exception($this->message, $this->code);throw($e);');


/home/ottavioc/public_html/wp-content/plugins/updraftplus/includes/Google/Utils.php contains base64decode call.
	    return base64_decode($b64);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/includes/Dropbox2/OAuth/Storage/Encrypter.php contains base64decode call.
	        $cipherText = base64_decode($cipherText);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/includes/Dropbox2/OAuth/Consumer/ConsumerAbstract.php contains base64decode call.
	                $code = base64_decode($code);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/includes/Dropbox2/OAuth/Consumer/ConsumerAbstract.php contains base64decode call.
	        $body = json_decode(base64_decode($response['body']));


/home/ottavioc/public_html/wp-content/plugins/updraftplus/includes/WindowsAzure/Blob/Models/ListBlobBlocksResult.php contains base64decode call.
	                $entries[base64_decode($value['Name'])] = $value['Size'];


/home/ottavioc/public_html/wp-content/plugins/updraftplus/includes/WindowsAzure/Common/Internal/Resources.php contains base64decode call.
	    const INVALID_ACCOUNT_KEY_FORMAT = "The provided account key '%s' is not a valid base64 string. It has to pass the check 'base64_decode(<user_account_key>, true)'.";


/home/ottavioc/public_html/wp-content/plugins/updraftplus/includes/WindowsAzure/Common/Internal/StorageServiceSettings.php contains base64decode call.
	                $isValidBase64String = base64_decode($key, true);


/home/ottavioc/public_html/wp-content/plugins/updraftplus/includes/WindowsAzure/Common/Internal/Authentication/TableSharedKeyLiteAuthScheme.php contains base64decode call.
	            hash_hmac('sha256', $signature, base64_decode($this->accountKey), true)


/home/ottavioc/public_html/wp-content/plugins/updraftplus/includes/WindowsAzure/Common/Internal/Authentication/SharedKeyAuthScheme.php contains base64decode call.
	            hash_hmac('sha256', $signature, base64_decode($this->accountKey), true)


/home/ottavioc/public_html/wp-content/plugins/gravityformsstripe/class-gf-stripe.php contains base64decode call.
				$auth_payload = json_decode( base64_decode( rgpost( 'auth_payload' ) ), true );


/home/ottavioc/public_html/wp-content/plugins/gravityformsstripe/class-gf-stripe.php contains base64decode call.
				$str = base64_decode( $str );


/home/ottavioc/public_html/wp-content/plugins/gravityformsstripe/class-gf-stripe.php contains base64decode call.
						$auth_payload = json_decode( base64_decode( $auth_payload['auth_payload'] ), true );


/home/ottavioc/public_html/wp-content/plugins/autoptimize/classes/autoptimizeBase.php contains base64decode call.
	            $filepath = isset( $parts[0] ) ? base64_decode( $parts[0] ) : null;


/home/ottavioc/public_html/wp-content/plugins/autoptimize/classes/autoptimizeBase.php contains base64decode call.
	                    return base64_decode( $matches[1] );


/home/ottavioc/public_html/wp-admin/includes/file.php contains base64decode call.
			$expected_raw_md5 = base64_decode( $expected_md5 );


/home/ottavioc/public_html/wp-admin/includes/file.php contains base64decode call.
			$signature_raw = base64_decode( $signature );


/home/ottavioc/public_html/wp-admin/includes/file.php contains base64decode call.
				$key_raw = base64_decode( $key );



Anon7 - 2022
AnonSec Team