LearnDash LMS – Groups Plus · Aug 30, 2026, 05:52 AM UTC
Cleanzip212 entriescrc-verifiedjavascriptpngjson
ZIP
0.60 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,035 signatures · db v28107
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Plugin header
Name
LearnDash LMS - Groups Plus
Version
2.2.2
Version check
Match
package and product page both state 2.2.2
Author
LearnDash
Author URI
https://www.learndash.com
Project URI
https://www.learndash.com/extensions/groups-plus
Description
Create Groups Plus without the need to sell them. This plugin manages LearnDash native Groups in the web site. Let your client organizations do all the organizational management work and view their details reports.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · src
d87293cfd495f26b…
162.4 KB
PHP · src
e883a1791b058454…
144.5 KB
PHP · src/Module/WooCommerce
e465d455d8561d2c…
83.0 KB
POT · languages
fbab5c9ed2506333…
79.9 KB
JS · build/library
af0e8aca94d74e5b…
76.1 KB
PHP · src/Module/WooCommerce
03355929d16e62c6…
73.1 KB
PHP · src/resources/templates/team-member
db35f8211c034cc9…
70.6 KB
CSS · build/library
29eb4c41a0fbf439…
58.0 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
unserialize
Unsafe when given untrusted input
Deserialization1
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.