Ultimate Addons for WPBakery Page Builder · Sep 07, 2026, 08:06 AM UTC
Cleanzip940 entriescrc-verifiedcssphpjavascript
ZIP
9.51 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Plugin header
Name
Ultimate Addons for WPBakery Page Builder
Version
3.21.6
Version check
Match
package and product page both state 3.21.6
Author
Brainstorm Force
Author URI
https://www.brainstormforce.com
Project URI
https://brainstormforce.com/demos/ultimate
Description
Includes WPBakery Page Builder premium addon elements like Icon, Info Box, Interactive Banner, Flip Box, * Info List & Counter. Best of all - provides A Font Icon Manager allowing users to upload / delete custom icon fonts.
License
GPL version 2 or later - http://www.gnu.org/licenses/old-licenses/gpl-2.0.html
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · build
…
3.96 MB
JSON · assets/fonts
324c8a8457449a57…
635.2 KB
SVG · assets/fonts
40823ea3d2516d0d…
473.4 KB
CSS · assets/min-css
b9fe361ea84b58d6…
449.9 KB
CSS · assets/min-css
ed777743787c2134…
449.7 KB
PNG · admin/imagesa
8bf76492ea13faeb…
419.2 KB
PNG · admin/imagesa
273998fbfb3f6912…
418.4 KB
PNG · admin/imagesa
a332b450245c7812…
418.2 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution22
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation7
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.