Bullion – Forex Broker & Trading WordPress Theme · Sep 07, 2026, 07:20 AM UTC
Cleanzip580 entriescrc-verifiedpngphpjavascript
ZIP
11.82 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Theme header
Name
Bullion
Version
1.3
Version check
Match
package and product page both state 1.3
Author
Themekalia
Author URI
http://themeforest.net/user/themekalia
Project URI
https://jan.coderdemo.com/newwp/bullion
Description
Bullion – Construction & Architecture WordPress Theme suitable for various types of professional Construction, Industrial, Manufacturing, Factory, Company, Small Scale Industry, Business, and Engineering websites. This Theme is specially designed for those who want to start their Industrial website.
Requires PHP
7.0
Tested up to
6.5
License
This theme or plugin is comprised of two parts. (1) the PHP code and integrated HTML are licensed under the General Public License (GPL). You will find a copy of the GPL in the same directory as this text file. (2) All other parts, but not limited to the CSS code, images, and design are licensed ac…
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · thirdparty/plugins
…
5.18 MB
XML · content
…
2.35 MB
PNG · images/shape
8873c39e1650afe6…
1005.3 KB
JS · js
7b747c28dbc53030…
447.1 KB
PNG · images/shape
738d063256053991…
442.1 KB
TTF · fonts
6d53c706f3b7178c…
388.4 KB
PNG · images/shape
49ba9472f91533e4…
374.3 KB
PNG · package root
faa3e5d7c74b2dab…
313.5 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.