Supply Chain Issues
Issue Codes
3 normalized finding codes in this category.
Hidden files included
hidden_files
The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.
Compressed files included
compressed_files
The plugin package contains nested archives or compressed files.
Obfuscated code detected
obfuscated_code_detected
The plugin contains code that appears intentionally hard to read or review.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #751 | Pochipp | 35 | 27 | 102 | 20k+ | Non-prefixed global variable | ||
| #752 | Pods Alternative Cache | 35 | 1 | 0 | 5k+ | Hidden files included | ||
| #753 | Post Content Shortcodes | 35 | 205 | 56 | 2k+ | Output is not escaped | ||
| #754 | Post Draft Preview | 35 | 49 | 69 | 700 | Text Domain Mismatch | ||
| #755 | Post Meta Data Manager | 35 | 30 | 112 | 1k+ | Non-prefixed global variable | ||
| #756 | Post Password Token | 35 | 132 | 38 | 600 | Text Domain Mismatch | ||
| #757 | Posts Table with Search & Sort | 35 | 143 | 33 | 3k+ | Text Domain Mismatch | ||
| #758 | PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) | 35 | 6 | 56 | 80k+ | Post Not In exclude | ||
| #759 | Powerful Posts Per Page (PPPP) | 35 | 4 | 1 | 1k+ | Hidden files included | ||
| #760 | Pre-Publish Checklist | 35 | 7 | 2 | 1k+ | Missing direct file access protection | ||
| #761 | Presto Player | 35 | 37 | 78 | 100k+ | Missing Arg Domain | ||
| #762 | PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links | 35 | 1 | 5 | 200k+ | Database parameter is not escaped | ||
| #763 | Product Prices by User Roles for WooCommerce | 35 | 12 | 19 | 1k+ | Non-prefixed hook name | ||
| #764 | Print, PDF & Email by PrintFriendly | 35 | 1 | 5 | 20k+ | Not In Footer | ||
| #765 | Product Blocks for WooCommerce | 35 | 4 | 3 | 4k+ | slow db query tax query | ||
| #766 | Product Delivery Date for WooCommerce – Lite | 35 | 171 | 27 | 1k+ | Text Domain Mismatch | ||
| #767 | Product Input Fields for WooCommerce | 35 | 18 | 84 | 4k+ | Non-prefixed function | ||
| #768 | Min Max Step Quantity Limits Manager for WooCommerce | 35 | 67 | 158 | 3k+ | Non-prefixed global variable | ||
| #769 | Ninjalytics: Sales Reports & Order Export for WooCommerce and EDD | 35 | 6 | 32 | 6k+ | Non-prefixed global variable | ||
| #770 | Product XML Feed Manager for WooCommerce – Google Shopping, Social Sites, Skroutz & More | 35 | 1 | 0 | 1k+ | Hidden files included | ||
| #771 | Pronamic Client | 35 | 111 | 48 | 700 | Output is not escaped | ||
| #772 | Protect the Children! | 35 | 2 | 34 | 1k+ | Missing nonce verification | ||
| #773 | Publitio | 35 | 47 | 26 | 400 | curl curl setopt | ||
| #774 | Push7 | 35 | 45 | 17 | 700 | Short PHP open tag found | ||
| #775 | Quran multilanguage Text & Audio | 35 | 177 | 166 | 500 | Output is not escaped | ||
| #776 | Random Post on Refresh | 35 | 3 | 8 | 500 | Non-prefixed hook name | ||
| #777 | Flutterwave WooCommerce | 35 | 7 | 20 | 2k+ | Non-prefixed class | ||
| #778 | ReactPress – Create React App for WordPress | 35 | 26 | 43 | 3k+ | Request data is not unslashed | ||
| #779 | Real Time Validation for Gravity Forms | 35 | 185 | 30 | 2k+ | Output is not escaped | ||
| #780 | Really Simple Google Tag Manager (GTM) | 35 | 115 | 15 | 4k+ | Text Domain Mismatch | ||
| #781 | Remove Admin Toolbar | 35 | 13 | 7 | 600 | Missing direct file access protection | ||
| #782 | Remove Dashboard Access | 35 | 16 | 23 | 30k+ | wp function not compatible with requires wp | ||
| #783 | Repeaters & Relationships Connector with ACF for Elementor | 35 | 6 | 3 | 700 | Missing direct file access protection | ||
| #784 | Reseller Store | 35 | 53 | 34 | 1k+ | Output is not escaped | ||
| #785 | Restrict Elementor Widgets, Columns and Sections | 35 | 18 | 53 | 500 | Non-prefixed function | ||
| #786 | Reveal IDs | 35 | 23 | 13 | 40k+ | Output is not escaped | ||
| #787 | ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema | 35 | 14 | 20 | 7k+ | error log error log | ||
| #788 | RICG Responsive Images | 35 | 29 | 25 | 2k+ | wp function not compatible with requires wp | ||
| #789 | RichText Extension | 35 | 25 | 4 | 900 | Output is not escaped | ||
| #790 | Robots.txt rewrite | 35 | 56 | 19 | 1k+ | Output is not escaped | ||
| #791 | RPS Image Gallery | 35 | 88 | 16 | 700 | Output is not escaped | ||
| #792 | RS CSV Importer Media Add-On | 35 | 4 | 1 | 4k+ | Hidden files included | ||
| #793 | Taxonomy Tags to Checkboxes | 35 | 2 | 0 | 1k+ | Hidden files included | ||
| #794 | s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions | 35 | 24 | 5 | 8k+ | Missing direct file access protection | ||
| #795 | Schedule Content Block | 35 | 2 | 3 | 400 | Discouraged text-domain loading | ||
| #796 | Scripts To Footer | 35 | 13 | 2 | 7k+ | Text Domain Mismatch | ||
| #797 | Scroll Styler | 35 | 52 | 21 | 900 | Output is not escaped | ||
| #798 | Search Attributes for WooCommerce | 35 | 26 | 3 | 600 | Text Domain Mismatch | ||
| #799 | Search Console | 35 | 6 | 2 | 2k+ | Missing Arg Domain | ||
| #800 | Security.txt Manager | 35 | 1 | 0 | 600 | Hidden files included |
