WooCommerce PDF Vouchers · Sep 07, 2026, 11:20 AM UTC
Cleanzip686 entriescrc-verifiedphpzpng
ZIP
18.84 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Plugin header
Name
WooCommerce - PDF Vouchers
Version
5.2.5
Version check
Match
package and product page both state 5.2.5
Author
WPWeb
Author URI
https://wpwebelite.com
Project URI
https://wpwebelite.com
Description
With Pdf Vouchers Extension, you can create unlimited vouchers, either for Local Businesses / Local Stores or even online stores. The sky is the limit.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
Z · includes/tcpdf/fonts
c17cdde06e419b03…
1.75 MB
PHP · includes/tcpdf/fonts
6bccd83b4decefda…
1.51 MB
PHP · includes/tcpdf/fonts
776ec3b7b0b94ef9…
1.51 MB
PHP · includes/tcpdf/fonts
cc29a453a89e3021…
1.51 MB
PHP · includes/tcpdf/fonts
5d81733aab405f48…
1.51 MB
TXT · includes/tcpdf/fonts/dejavu-fonts-ttf-2.34
92027bc7c5389e02…
1.38 MB
TXT · includes/tcpdf/fonts/dejavu-fonts-ttf-2.33
7cc471deab9e8ef0…
1.34 MB
PHP · includes/tcpdf
f1bf66eea348dbfd…
885.7 KB
Code signals
5 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation6
gzinflate
Decompresses a string in memory
Obfuscation3
new Function()
Builds a function from a string
Code execution2
eval (JavaScript)
Executes a string as code
Code execution2
curl_exec
Makes an outbound HTTP request
Remote request2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.