Elmastudio Piha WordPress Theme · Sep 10, 2026, 08:53 AM UTC
Cleanzip165 entriescrc-verifiedphppngjpeg
ZIP
0.40 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Theme header
Name
Piha
Version
1.0.4
Version check
Match
package and product page both state 1.0.4
Author
Elmastudio
Author URI
http://www.elmastudio.de/wordpress-themes
Project URI
http://www.elmastudio.de/wordpress-themes/piha
Description
Piha is a modern blog theme with responsive web design. So you don't need to install any extra plugin to make your theme available on mobile devices like tablet pcs and smartphones. The theme also features the WordPress posts format using modern icons to label a specific format. You can also custom…
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
XML · assets/demo
07f5724579a564f1…
410.8 KB
CSS · package root
e8ebf5f9dcdfde26…
71.6 KB
PNG · package root
51ab4ed9278901d9…
71.5 KB
PHP · package root
b07ddb8644f51ae3…
47.6 KB
JPG · images/backgrounds
f874fdd80c2484e0…
40.7 KB
JPG · images/headers
5e381ca48c28a7fe…
40.1 KB
JPG · images/backgrounds
3eef8328cc719403…
35.6 KB
JPG · images/headers
2b61b19884d6876c…
31.5 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
create_function
Removed in PHP 8; builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.