PixelYourSite WooCommerce Cost of Goods · Sep 07, 2026, 11:10 AM UTC
Cleanzip29 entriescrc-verifiedphpjavascriptcsv
ZIP
0.06 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Plugin header
Name
Cost of Goods by PixelYourSite
Version
1.2.13
Version check
Match
package and product page both state 1.2.13
Author
PixelYourSite
Author URI
http://www.pixelyoursite.com
Project URI
http://www.pixelyoursite.com
Description
Add the Cost of Goods for WooCommerce products and calculate the profit for each order. Use "price minus cost" as Facebook Pixel events value with the PixelYourSite plugin..
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes
a86f8bf5672e41c8…
56.6 KB
PHP · package root
3a30161b5661f7cf…
37.1 KB
JS · assets/js
d46801d9da172f40…
31.1 KB
PHP · includes/reports
d234a1772a689c0e…
19.9 KB
JS · assets/js
4103dca23e0ad7f3…
18.6 KB
PHP · includes/settings
48050d6a44b5548e…
17.6 KB
PHP · includes
65a8c519a5384a82…
15.3 KB
JS · assets/js
46aca7615a317424…
14.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.