PluginScore

Supply Chain Issues

Issue Codes

3 normalized finding codes in this category.

Hidden files included

hidden_files

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical

Compressed files included

compressed_files

The plugin package contains nested archives or compressed files.

critical

Obfuscated code detected

obfuscated_code_detected

The plugin contains code that appears intentionally hard to read or review.

critical

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#551Change Last Modified Date35713k+Missing direct file access protection
#552Change Username357104k+Direct Query
#553Payment Gateway Based Fees and Discounts for WooCommerce35246830k+Non-prefixed hook name
#554Child Pages Shortcode35565k+Non-prefixed hook name
#555CHP Ads Block Detector3510835900Output is not escaped
#556CiviCRM Admin Utilities3519871k+Non-prefixed hook name
#557CiviCRM Profile Sync3531140500Non-prefixed global variable
#558Cloudflare352885200k+Non-prefixed namespace
#559Flexible SSL for CloudFlare3596100k+Output is not escaped
#560Code Block Pro – Beautiful Syntax Highlighting357410k+badly named files
#561Code Prettify35731k+wp function not compatible with requires wp
#562Conditional Menus35922860k+Text Domain Mismatch
#563Conditional Widgets3567337k+Output is not escaped
#564Content Mask35503501k+Non-prefixed global variable
#565Kit (formerly ConvertKit) for WooCommerce35213184k+Text Domain Mismatch
#566EasyTest – Simplify A/B Testing3597610k+Non-prefixed global variable
#567GDPR Cookie Consent Notice Box3546171k+Output is not escaped
#568Cookie Information – Cookie Banner with Consent Mode v235185282k+Output is not escaped
#569Cookie-Script.com356710k+Non-prefixed class
#570Core Framework35706210k+Text Domain Mismatch
#571Cost of Goods: Product Cost & Profit Calculator for WooCommerce3521299k+Missing Translators Comment
#572Counter live visitors for WooCommerce35189396k+Short PHP open tag found
#573Create Block Theme3543520k+unlink unlink
#574CrowdSec351301192k+Output is not escaped
#575Cryptex | E-Mail Address Protection356210900Output is not escaped
#576Currency Converter351044400Output is not escaped
#577Currency per Product for WooCommerce3546242k+Text Domain Mismatch
#578Currency Switcher for WooCommerce3516661800Text Domain Mismatch
#579Custom 404 Pro3550277k+wp function not compatible with requires wp
#580Custom CSS and JavaScript35389110k+Input is not sanitized
#581Additional Custom Emails & Recipients for WooCommerce35102k+Hidden files included
#582Wbcom Designs – Custom Font Uploader353401233k+Text Domain Mismatch
#583Custom JavaScript Editor35823400Missing Version
#584Custom links in Elementor Image Carousel35825k+Text Domain Mismatch
#585Custom Order Numbers for WooCommerce3563220k+Non-prefixed hook name
#586Custom Order Status for WooCommerce35415510k+Non-prefixed hook name
#587Custom Post Type Maker35240866k+Unsafe printing function
#588Custom Post Type Permalinks3584200k+Setting is missing a sanitization callback
#589Custom Price for WooCommerce35393k+Non-prefixed global variable
#590Customize My Account Page35411400Dynamic hook name
#591Customizer Backup & Reset358107k+Output is not escaped
#592Dadevarzan WordPress Common355671700Text Domain Mismatch
#593DarkLooks – Dark Mode Switcher For WordPress3519521900Text Domain Mismatch
#594DesignSetGo35705k+Hidden files included
#595Nexi Checkout35453083k+Dynamic hook name
#596Dintero Checkout for WooCommerce Payment Methods355848600Text Domain Mismatch
#597Disable and Remove Google Fonts | GDPR & DSGVO friendly352111100k+Missing Translators Comment
#598Disk Usage Sunburst3530349k+Output is not escaped
#599Dokan Invoice3593500Missing Translators Comment
#600Potent Donations for WooCommerce3514252k+Missing nonce verification