iPanorama 360° – Virtual Tour Builder · Sep 08, 2026, 08:02 AM UTC
Cleanzip607 entriescrc-verifiedjavascriptsvgphp
ZIP
3.05 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Plugin header
Name
iPanorama 360 - Advanced Virtual Tour Builder
Version
1.9.1
Version check
Match
package and product page both state 1.9.1
Author
Avirtum
Author URI
https://1.envato.market/avirtum
Project URI
https://1.envato.market/getipanorama360
Description
iPanorama 360 is the WordPress plugin out there that lets you create excellent virtual tours for clients from directly inside the WordPress admin in seconds. The plugin supports markers for providing information about any part of the scene or for navigation to other rooms/areas. With powerful toolt…
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/js/lib/ace
5dc440c4b35f8c68…
1.56 MB
JS · assets/js/lib/ipanorama
e200c0aa674485cc…
595.2 KB
JS · assets/js/lib/ace
a33c8f0a040e95fb…
466.9 KB
JS · assets/js/lib/ace
1a7b40c7d05ca0b7…
462.5 KB
SVG · assets/fonts
ad6157926c1622ba…
434.0 KB
JS · assets/js/lib/ace
adf37dc54d042dcb…
357.9 KB
JS · assets/js/lib/ace
d40905b2ea6a55ec…
323.8 KB
JS · assets/js/lib/ace
4a34d7931e8b594b…
228.2 KB
Code signals
5 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization13
new Function()
Builds a function from a string
Code execution4
eval (JavaScript)
Executes a string as code
Code execution3
atob
Decodes base64 in the browser
Obfuscation2
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.