PluginScore

Supply Chain Issues

Issue Codes

3 normalized finding codes in this category.

Hidden files included

hidden_files

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical

Compressed files included

compressed_files

The plugin package contains nested archives or compressed files.

critical

Obfuscated code detected

obfuscated_code_detected

The plugin contains code that appears intentionally hard to read or review.

critical

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output is not escaped
#2Intercom060716k+Non-prefixed function
#3Live Shopping & Shoppable Videos For WooCommerce079174400Non-prefixed global variable
#4Plugin Check (PCP)012813210k+Exception output is not escaped
#5Themify Builder95,2092,1255k+Text Domain Mismatch
#6JetBackup – Backup, Restore & Migrate101,563149200k+Exception output is not escaped
#7Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more1545166500k+Database parameter is not escaped
#8Visual Composer Website Builder168232040k+Non-prefixed global variable
#9MDTF – Meta Data and Taxonomies Filter161,5501,9561k+Non-prefixed global variable
#10AnyComment174454495k+Output is not escaped
#11Efí Bank17886553400Exception output is not escaped
#12wpForo Forum174,0543,03320k+Unsafe printing function
#13WPtouch – Make your WordPress Website Mobile-Friendly171,46632550k+Text Domain Mismatch
#14Prime Slider Addons for Elementor183,501229100k+Text Domain Mismatch
#15JetFormBuilder — Dynamic Blocks Form Builder182,0931,59480k+Text Domain Mismatch
#16Pagopar – WooCommerce Gateway185301,215400Non-prefixed global variable
#17Podlove Podcast Publisher182,3541,4333k+Output is not escaped
#18Property Hive181,9576,0273k+Missing nonce verification
#19Realtyna Organic IDX plugin + WPL Real Estate189303,6362k+Non-prefixed global variable
#20RestroPress – Online Food Ordering System185213,0821k+Non-prefixed global variable
#21Shopping Cart & eCommerce Store185,54117,3973k+Non-prefixed global variable
#22WPPizza – A Restaurant Plugin184,6892,7031k+Text Domain Mismatch
#23Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons1910,340360100k+Text Domain Mismatch
#24Block Slider – Responsive Image Slider, Video Slider & Post Slider195551,2913k+Non-prefixed global variable
#25Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception output is not escaped
#26Go Fetch Jobs (for WP Job Manager)191,4101,741700Non-prefixed global variable
#27AI Infographic Maker191,517599600Output is not escaped
#28Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps)193,2753,2289k+Output is not escaped
#29Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,911877100k+Exception output is not escaped
#30Netgsm193343081k+Setting is missing a sanitization callback
#31Razorpay Payment Button Plugin19486982k+Exception output is not escaped
#32Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195403893m+Missing Translators Comment
#33Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#34Scrollsequence – Cinematic Scroll Image Animation Plugin198781,5284k+Non-prefixed global variable
#35SendPress Newsletters192,2931,4221k+Output is not escaped
#36SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments195281,11980k+Non-prefixed global variable
#37WP Email Template193443452k+Exception output is not escaped
#38WP Import Export Lite1973797940k+Non-prefixed global variable
#39WP Directory Kit191,5262,6212k+Non-prefixed global variable
#40WPOSS阿里云对象存储19269315900Non-prefixed namespace
#41WPQiNiu七牛云对象存储19138612400Non-prefixed global variable
#42AweBooking – Hotel Booking System203095141k+Non-prefixed global variable
#43Brizy – Page Builder2059072170k+Output is not escaped
#44Broadstreet20434273700Output is not escaped
#45Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#46SysBasics Customize My Account for WooCommerce – Live My Account Customizer207439118k+Non-prefixed global variable
#47DMCA Protection Badge204,4252171k+Output is not escaped
#48Download Monitor204231,36280k+Non-prefixed hook name
#49Event Espresso – Event Registration & Ticketing Sales2012,6982,135600Text Domain Mismatch
#50Event Organiser201,10454420k+Text Domain Mismatch