OrderBumps: Checkout Offers · Sep 08, 2026, 08:44 AM UTC
Cleanzip475 entriescrc-verifiedphpsvgjavascript
ZIP
1.47 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Plugin header
Name
FunnelKit Order Bumps
Version
1.26.0
Version check
Match
package and product page both state 1.26.0
Author
Funnelkit
Author URI
https://funnelkit.com
Project URI
https://funnelkit.com
Description
Use Order Bumps to make last minute pre-purchase offers. Let user upgrade their order with a single click. Control visibility by setting rules. Super Easy to customize Bump designs.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · admin/includes/vuejs
c6e14c4316349c1b…
171.9 KB
CSS · admin/assets/css
c5f1f9c47f98d4f8…
122.5 KB
POT · woofunnels/languages
edb57dcbcb3177d8…
114.5 KB
PHP · includes/skins-classes
a4601525a08e11cb…
110.0 KB
JPG · assets/img
2e64dddad02b681e…
108.2 KB
JPG · assets/img
2e64dddad02b681e…
108.2 KB
JPG · assets/img
03612114e30a8d39…
104.6 KB
JPG · assets/img
69202b74d7eeebb0…
100.3 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution3
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.