HT Menu Pro – WordPress Mega Menu Builder for Elementor
File type
ZIP archive
File size
4.85 MB (5,080,897 bytes)
Uncompressed size
8.19 MB
Oldest file
2026-11-09 09:30
Newest file
2026-11-09 09:30
Archive contents
Contained entries
195
Files
164
Directories
31
Distinct types
17
Analysis history
Last analysis
Nov 09, 2026, 06:52 AM UTC
Engine
ClamAV 1.5.4
Signature database
v28115
Product ID
#139505
Archive contents
195 entries · 17 types
Directories15.9%31
CSS19.5%38
PNG16.4%32
PHP11.3%22
JPEG8.2%16
JavaScript7.2%14
SVG3.6%7
WOFF3.6%7
TTF3.6%7
EOT3.6%7
WOFF22.6%5
No Ext1.5%3
OTF1%2
JSON0.5%1
Text0.5%1
POT0.5%1
GIF0.5%1
Largest files
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
SVG · assets/lib/font-awesome/webfonts
eaf0f3d0cadad17e…
829.2 KB
SVG · assets/lib/font-awesome/webfonts
36b51fbe6b875875…
692.1 KB
SVG · include/admin/assets/fonts
ad6157926c1622ba…
434.0 KB
SVG · assets/lib/font-awesome/fonts
ad6157926c1622ba…
434.0 KB
JPG · include/admin/assets/images
b6fe7e88bf936036…
313.0 KB
JPG · include/admin/assets/images
efec7c9d6abbc263…
285.6 KB
JPG · include/admin/assets/images
c8cf07c5cc0653ef…
260.0 KB
JPG · include/admin/assets/images
e74e564e68bcce37…
218.8 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization4
create_function
Removed in PHP 8; builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.