Has a Base64 hack built in

I’m something like 99.44% sure that’s not a hack, at least not a hack in the sense of Bad Things?.

This is the full function.

https://plugins.trac.www.ads-software.com/browser/edit-flow/trunk/common/php/class-module.php#L409

function get_encoded_description( $args = array() ) {
       return base64_encode( maybe_serialize( $args ) );
}

Which by itself doesn’t do anything bad. It gets unencoded using this function.

https://plugins.trac.www.ads-software.com/browser/edit-flow/trunk/common/php/class-module.php#L423

function get_unencoded_description( $string_to_unencode ) {
        return maybe_unserialize( base64_decode( $string_to_unencode ) );
}

Which just decodes the string. If you have something to report then reply back (I’ve only looked at this plugin for 30 seconds) but that alone is harmless.