Super Store Finder for WordPress (Google Maps Store Locator) · Oct 29, 2026, 06:33 AM UTC
Cleanzip139 entriescrc-verifiedphpjavascriptpng
ZIP
12.46 MB
package size
Analysis
6 checks · 1 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
1 potentially unwanted
Suspicious
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Plugin header
Name
Super Store Finder WordPress
Version
7.11
Version check
Match
package and product page both state 7.11
Author
Joe Iz
Author URI
http://www.superstorefinder.net
Project URI
http://www.superstorefinder.net
Description
Super Store Finder WordPress is a WordPress Store Finder plugin with Google Maps API v3 that allows customers to locate your stores easily. Packed with Geo Location, Google Street View and Google Maps Direction your customers will never be lost again getting to your locations. The store finder will…
Super Store Finder for WordPress (Google Maps Store Locator)
File type
ZIP archive
File size
12.46 MB (13,070,116 bytes)
Uncompressed size
21.01 MB
Oldest file
2024-05-21 10:49
Newest file
2026-08-28 14:00
Archive contents
Contained entries
139
Files
121
Directories
18
Distinct types
17
Analysis history
Last analysis
Oct 29, 2026, 06:33 AM UTC
Engine
ClamAV 1.5.4
Signature database
v28115
Product ID
#199931
Archive contents
139 entries · 17 types
Directories12.9%18
PHP30.2%42
JavaScript15.1%21
PNG15.1%21
PO8.6%12
CSS5.8%8
GIF2.9%4
CSV2.2%3
INC1.4%2
SVG0.7%1
Icon0.7%1
WOFF0.7%1
WOFF20.7%1
TTF0.7%1
EOT0.7%1
OTF0.7%1
DAT0.7%1
Largest files
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
DAT · js
…
17.81 MB
PHP · package root
64b774411c00ea38…
339.7 KB
SVG · fonts
beed91f60f61e115…
306.6 KB
CSS · css
bf8f2e04da13d7da…
177.5 KB
JS · js/plugins
2ba0f3c26d78ddd0…
174.7 KB
TTF · fonts
9e540a087924a6e6…
119.2 KB
PHP · js
e887452188627584…
106.3 KB
JS · js
8bb25715e259a00c…
93.6 KB
Code signals
5 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution3
curl_exec
Makes an outbound HTTP request
Remote request3
create_function
Removed in PHP 8; builds a function from a string
Code execution3
unserialize
Unsafe when given untrusted input
Deserialization3
shell_exec
Runs an operating-system command
System command1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.