PluginScore

Supply Chain Issues

Issue Codes

3 normalized finding codes in this category.

Hidden files included

hidden_files

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical

Compressed files included

compressed_files

The plugin package contains nested archives or compressed files.

critical

Obfuscated code detected

obfuscated_code_detected

The plugin contains code that appears intentionally hard to read or review.

critical

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#701Mail Queue35251171k+Direct Query
#702Maintenance Switch351259700Non-prefixed function
#703Map Block for Google Maps356520k+Hidden files included
#704Mark Posts3530341k+Output is not escaped
#705MathML Block351021k+Hidden files included
#706Media Credit3528351k+Non-prefixed global variable
#707Media Library Downloader3521164k+Output is not escaped
#708MeetingHub – Webinar & Meeting Plugin for Zoom, Google Meet, Webex, Microsoft Teams, & Jitsi Meet3533289400Non-prefixed global variable
#709Menu Item Duplicator35302k+Hidden files included
#710Metadata Viewer35211400Non-prefixed global variable
#711Mighty Pros & Cons35126800Text Domain Mismatch
#712Mini Cart for WooCommerce – Add a Stylish Sliding Cart3542160600Non-prefixed global variable
#713SAML IDP (Identity Provider) – Login with Website Users3513326600Non-prefixed global variable
#714Modal Guten Block35632k+Hidden files included
#715Modern Images WP35103400Missing Translators Comment
#716MONEI Payments for WooCommerce351565500Non-prefixed hook name
#717More Widgets3555151k+Output is not escaped
#718mosparo Integration35114301900Missing nonce verification
#719AI Product Search for WooCommerce – Motive Commerce Search357082400Missing direct file access protection
#720MotoPress Hotel Booking Styles & Templates35371910k+block api version too low
#721Hide from Search35583k+Missing direct file access protection
#722Image Refresh3546900Dynamic hook name
#723My Eyes Are Up Here357122k+Missing nonce verification
#724myPOS Checkout3515184k+Text Domain Mismatch
#725Never Let Me Go353447400Non-prefixed global variable
#726NewsPlugin358453400Text Domain Mismatch
#727Nginx Cache Controller3579961k+Text Domain Mismatch
#728Noted!355221k+Non-prefixed global variable
#729NS Cloner – Site Cloner and Multisite Duplicator3529167k+Missing direct file access protection
#730Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts35418200k+Missing direct file access protection
#731Newsletters, Email Marketing, SMS and Popups by Omnisend3542100k+Hidden files included
#732Email Marketing for WooCommerce by Omnisend35122140k+Non-prefixed function
#733ONet Regenerate Thumbnails35190641k+Text Domain Mismatch
#734Out of the Block: OpenStreetMap3594800Missing direct file access protection
#735OPcache Reset3597400Non-prefixed function
#736Order Delivery Date for WooCommerce352,0757310k+wp function not compatible with requires wp
#737Order Minimum/Maximum Amount Limits for WooCommerce3516010k+Missing Translators Comment
#738Orderable – Restaurant & Food Ordering System35123245k+Non-prefixed global variable
#739OSM Map Widget for Elementor35183149k+Text Domain Mismatch
#740OtFm Gutenberg Spoiler – (or FAQ) collapse block3569600trademarked term
#741Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE3513141300k+Missing direct file access protection
#742Page Visits Counter – Lite3528355k+Output is not escaped
#743Paytrail for WooCommerce3528463k+Non-prefixed global variable
#744Pearl – Header Builder3572835k+Non-prefixed global variable
#745Permissions Editor for Ninja Forms352961k+Output is not escaped
#746Phone Orders for WooCommerce3512291k+Non-prefixed hook name
#747Pie Calendar – Events Calendar Made Simple3583531k+Text Domain Mismatch
#748Piwik PRO352233k+Output is not escaped
#749Pixeline's Email Protector35775800Unsafe printing function
#750Plausible Analytics352446110k+Exception output is not escaped