WoWonder — What You Should Know
PHP social-network script with repeated backdoor allegations from customers.
What is WoWonder?
WoWonder is a PHP-based social-networking script sold on CodeCanyon by the seller 'DoughouzForest'. The seller account has 9,982+ purchases across 6 products. WoWonder lets buyers stand up a Facebook-style social network for their own community.
Known concerns about WoWonder
- ●Multiple Trustpilot reviewers allege the script contains backdoors that allow the seller to access purchased installations without permission
- ●A reviewer self-identifying as a cybersecurity professional wrote: 'I am associated with cyber security and w9wonder guys have... created and left backdoors in script means they can access your service anytime without your permission.'
- ●Another reviewer reported: 'These scammers have a back door in their script and hacked my site repeatedly blaming it on my host... They cost me millions of dollars as they injected viruses in hundreds of my sites on my server.'
- ●A third: 'Scam site. It has backdoors, and creates automatic accounts on the site to publish ads after you purchase it for a period of time.'
The UltaHost connection
UltaHost markets a dedicated 'Envato Hosting' product specifically targeted at customers who buy WoWonder and other DoughouzForest scripts. Their marketing copy: 'Ultahost beats everything, Get a free setup for any of your Envato scripts with 20X faster servers, We are the Recommended Envato Hosting provider.' The same Doughouz family controls all three layers: the script, the install service, and the hosting infrastructure. This is a structural conflict of interest — we make no allegation about specific intent.