Elmastudio Yoko WordPress Theme · Sep 10, 2026, 08:53 AM UTC
Cleanzip83 entriescrc-verifiedphppomo
ZIP
2.36 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Theme header
Name
Yoko
Version
1.2.4
Version check
Match
package and product page both state 1.2.4
Author
Elmastudio
Author URI
https://www.elmastudio.de/en
Project URI
https://www.elmastudio.de/en/themes/yoko
Description
Yoko is a modern three-column blog theme. A responsive layout optimizes the theme for mobile devices like tablet pcs and modern smartphones (the layout switches to a two- or one-column layout depending on the screen size the theme is viewed on). To make your blog post more flexible you can use diff…
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JPG · images/headers
4419a2b979812ac5…
479.0 KB
JPG · images/headers
7a4da04d51a45907…
405.3 KB
JPG · images/headers
96e818b5af6e1620…
348.6 KB
JPG · images/headers
7b5a682d50130b2a…
318.9 KB
JPG · images/headers
206f25f0d87f5c65…
316.1 KB
PNG · package root
2b85327fe91127ed…
141.7 KB
JPG · images/headers
19d9a4970828be5c…
136.9 KB
JPG · images/headers
d9da1a9d3da206b8…
37.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
create_function
Removed in PHP 8; builds a function from a string
Code execution1
Referenced hosts
6 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.