Exit Intent Popup WordPress Plugin · Sep 07, 2026, 11:32 AM UTC
Cleanzip141 entriescrc-verifiedphppngcss
ZIP
1.21 MB
package size
Analysis
6 checks · 1 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
binary executables present
1 found
Package
Plugin header
Name
Exit Intent Popup WordPress Plugin
Version
1.0.3
Version check
Match
package and product page both state 1.0.3
Author
kamleshyadav
Author URI
http://kamleshyadav.in
Project URI
http://kamleshyadav.in
Description
Exit Intent Popup is powerful plugin that allows website owners to easily create and manage exit popups on their WordPress powered website or blog. This plugin will allow you to create separate exit popups on specific posts or pages, or your entire website with the use of global settings.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PEM · includes/CampaignMonitor/class
61e549da012d320a…
242.6 KB
PNG · public/images
ff5dd39b463a4863…
215.2 KB
JPG · admin/images
a05624a6fdbf0ace…
152.8 KB
JPG · public/images
a05624a6fdbf0ace…
152.8 KB
PHP · includes/Benchmark
1a87ba315b243bfe…
111.4 KB
PNG · public/images
acf1b2ca4fa92bb2…
102.3 KB
JPG · public/images
6567eb999736675b…
99.3 KB
GIF · public/images
bdcd0cd7fd077dd3…
75.5 KB
Code signals
5 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request20
atob
Decodes base64 in the browser
Obfuscation4
unserialize
Unsafe when given untrusted input
Deserialization3
eval
Executes a string as code
Code execution2
gzinflate
Decompresses a string in memory
Obfuscation1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.