Run your own custom shorcode or 3rd party plugin shorcode anywhere in your forms. <strong>Requires at least: <a href="https://codecanyon.net/item/nexforms-the-ultimate-wordpress-form-builder/7103891?ref=Basix" target="_blank" style="display:block">NEX-Forms v7.5.x</a></strong>
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/js
c501f66000a227cd…
251.0 KB
TXT · package root
21b9245c8674f673…
14.5 KB
JS · assets/js/google-code-prettify
ceb552b49c88d7dc…
13.3 KB
CSS · assets/css
bebd1284693c89f1…
9.2 KB
JS · assets/js
e4273399cc0bc22e…
8.1 KB
HTML · package root
69bd1c50a7c81d24…
6.7 KB
JS · assets/js
8e4f49791e53d839…
3.9 KB
JS · assets/js
1cd02bdd539cb152…
2.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.