WordPress Feed for Facebook Dynamic Ads · Sep 07, 2026, 01:01 PM UTC
Cleanzip39 entriescrc-verifiedphpjavascriptcss
ZIP
0.26 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Plugin header
Name
WordPress Feed for Facebook Dynamic Ads
Version
1.0.4.1
Version check
Match
package and product page both state 1.0.4.1
Author
PixelYourSite
Author URI
https://www.pixelyoursite.com
Project URI
https://www.pixelyoursite.com
Description
Create an XML auto-updated feed with your blog posts and use it to upload your posts into a Facebook Product Catalog. This will help you do Dynamic Ads for your blog content.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
TXT · inc
6b6d5485349c1a9e…
432.4 KB
GIF · assets/img
db40a5ddf3876734…
125.0 KB
JS · assets/js
3b8af6338a757717…
115.6 KB
PHP · inc
b2307a502bd8791f…
81.0 KB
PHP · package root
8a78cf991804f0bb…
55.9 KB
PHP · inc
f7681936a921cae9…
40.8 KB
PHP · inc
91bc714985fe8af7…
37.6 KB
JS · assets/js
72d758d44dece90e…
37.5 KB
Code signals
5 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization16
eval (JavaScript)
Executes a string as code
Code execution1
create_function
Removed in PHP 8; builds a function from a string
Code execution1
eval
Executes a string as code
Code execution1
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
9 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.