Youzer (Youzify) – Buddypress Community & User Profile · Sep 07, 2026, 12:21 PM UTC
Cleanzip927 entriescrc-verifiedphppngjavascript
ZIP
3.62 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Plugin header
Name
Youzify
Version
3.6.1
Version check
Match
package and product page both state 3.6.1
Author
KaineLabs
Author URI
https://www.kainelabs.com
Project URI
https://youzify.com
Description
Youzify is a WordPress Community, Social Network and User Profiles management solution with a Secure Membership System, Front-end Account Settings, Powerful Admin Panel, Many Header Styles, +20 Profile Widgets, 16 Color Schemes, Advanced Author Widgets, Fully Responsive Design, Extremely Customizab…
Youzer (Youzify) – Buddypress Community & User Profile
File type
ZIP archive
File size
3.62 MB (3,798,470 bytes)
Uncompressed size
13.80 MB
Oldest file
2023-07-09 18:51
Newest file
2026-01-15 15:32
Archive contents
Contained entries
927
Files
832
Directories
95
Distinct types
19
Analysis history
Last analysis
Sep 07, 2026, 12:21 PM UTC
Engine
ClamAV 1.5.4
Signature database
v28115
Product ID
#1218
Archive contents
927 entries · 19 types
Directories10.2%95
PHP52.8%489
PNG12.7%118
JavaScript11.9%110
CSS7.4%69
PO1.1%10
MO1.1%10
SVG0.6%6
WOFF20.4%4
TTF0.4%4
Markdown0.3%3
GIF0.2%2
Text0.1%1
HTML0.1%1
XML0.1%1
POT0.1%1
MP30.1%1
No Ext0.1%1
OGG0.1%1
Largest files
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PO · languages
3b17ec610aeaccfa…
570.9 KB
PO · languages
2c20629ef2c02da1…
568.4 KB
PO · languages
e27509f8350877a3…
567.5 KB
PO · languages
c63aaae72eb1074b…
535.6 KB
PO · languages
686353da46f649b2…
527.4 KB
PO · languages
a0ad9174444d2ea8…
485.9 KB
PO · languages
51478fc58de6001f…
473.7 KB
PO · languages
6ab4f75bdd968774…
473.1 KB
Code signals
5 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization11
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation7
file_get_contents(url)
Fetches a remote URL
Remote request7
curl_exec
Makes an outbound HTTP request
Remote request3
eval
Executes a string as code
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.