PluginScore

Supply Chain Issues

Issue Codes

3 normalized finding codes in this category.

Hidden files included

hidden_files

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical

Compressed files included

compressed_files

The plugin package contains nested archives or compressed files.

critical

Obfuscated code detected

obfuscated_code_detected

The plugin contains code that appears intentionally hard to read or review.

critical

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output is not escaped
#2Intercom060716k+Non-prefixed function
#3Live Shopping & Shoppable Videos For WooCommerce079174400Non-prefixed global variable
#4Plugin Check (PCP)012814010k+Non-prefixed global variable
#5Themify Builder95,3292,1715k+Text Domain Mismatch
#6JetBackup – Backup, Restore & Migrate101,563149200k+Exception output is not escaped
#7404 Solution155311,50710k+Non-prefixed class
#8Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more1545166500k+Database parameter is not escaped
#9Visual Composer Website Builder168232040k+Non-prefixed global variable
#10MDTF – Meta Data and Taxonomies Filter161,5501,9561k+Non-prefixed global variable
#11AnyComment174454495k+Output is not escaped
#12RestroPress – Online Food Ordering System175273,1891k+Non-prefixed global variable
#13Efí Bank17886553400Exception output is not escaped
#14Dynamic Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode179222,014900Non-prefixed global variable
#15wpForo Forum174,3063,02620k+Unsafe printing function
#16WPtouch – Make your WordPress Website Mobile-Friendly171,46632550k+Text Domain Mismatch
#17Administrator Z182,061799400Output is not escaped
#18Pagopar – WooCommerce Gateway185301,215400Non-prefixed global variable
#19Property Hive181,9576,0273k+Missing nonce verification
#20Shopping Cart & eCommerce Store185,37317,4663k+Non-prefixed global variable
#21WPPizza – A Restaurant Plugin184,6892,7031k+Text Domain Mismatch
#22Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons1910,340360100k+Text Domain Mismatch
#23Block Slider – Responsive Image Slider, Video Slider & Post Slider195551,2913k+Non-prefixed global variable
#24Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,227892100k+Exception output is not escaped
#25Go Fetch Jobs (for WP Job Manager)191,4101,741700Non-prefixed global variable
#26AI Infographic Maker191,383599600Output is not escaped
#27JetFormBuilder — Dynamic Blocks Form Builder192,1031,60580k+Text Domain Mismatch
#28Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps)193,2753,2289k+Output is not escaped
#29Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,900877100k+Exception output is not escaped
#30Netgsm193343081k+Setting is missing a sanitization callback
#31Razorpay Payment Button Plugin19486982k+Exception output is not escaped
#32Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195363793m+Missing Translators Comment
#33Membership Plugin – Kadence Memberships195,0832,9829k+Text Domain Mismatch
#34Scrollsequence – Cinematic Scroll Image Animation Plugin198781,5283k+Non-prefixed global variable
#35SendPress Newsletters192,2931,4221k+Output is not escaped
#36SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments195331,14980k+Non-prefixed global variable
#37WP Email Template193443452k+Exception output is not escaped
#38WP Import Export Lite1973797940k+Non-prefixed global variable
#39WP Directory Kit191,5022,6412k+Non-prefixed global variable
#40WPOSS阿里云对象存储19269315900Non-prefixed namespace
#41WPQiNiu七牛云对象存储19138612400Non-prefixed global variable
#42AweBooking – Hotel Booking System203095141k+Non-prefixed global variable
#43Brizy – Page Builder2058672670k+Output is not escaped
#44Broadstreet20434273700Output is not escaped
#45Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#46SysBasics Customize My Account for WooCommerce – Live My Account Customizer207439118k+Non-prefixed global variable
#47Download Monitor204231,36480k+Non-prefixed hook name
#48Event Espresso – Event Registration & Ticketing Sales2012,6982,135600Text Domain Mismatch
#49Event Organiser201,10454420k+Text Domain Mismatch
#50GiveWP – Donation Plugin and Fundraising Platform203,4103,554100k+Output is not escaped