ImageLinks – Interactive Image for WordPress · Sep 08, 2026, 11:42 PM UTC
Cleanzip423 entriescrc-verifiedjavascriptphpjson
ZIP
2.40 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Plugin header
Name
ImageLinks
Version
1.6.0
Version check
Match
package and product page both state 1.6.0
Author
Avirtum
Author URI
https://1.envato.market/QJXRz
Project URI
https://avirtum.com/imagelinks-wordpress-plugin
Description
ImageLinks allows you to easily create an interactive image for your site that empowers publishers and bloggers to create more engaging content by adding rich media links to photos. Use this plugin to create interactive news photography, infographics, imagemaps, floormaps and shoppable product cata…
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/js/lib/ace
602a848a481b72ce…
1.56 MB
JS · assets/js/lib/ace
6c1bbb53dfc98355…
461.5 KB
SVG · assets/fonts
ad6157926c1622ba…
434.0 KB
JS · assets/js/lib/ace
868ab7e4a2efef19…
353.8 KB
JS · assets/js/lib/ace
b0b22d37197a66b4…
227.8 KB
JS · assets/js/lib/ace
3ede1844dd14d3f7…
225.2 KB
JS · assets/js/lib/ace
1f35cf1982faca20…
212.3 KB
JS · assets/js/lib/ace
825ff9c5f610f66a…
186.2 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization10
new Function()
Builds a function from a string
Code execution3
eval (JavaScript)
Executes a string as code
Code execution3
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.