PluginScore

Supply Chain Issues

Issue Codes

3 normalized finding codes in this category.

Hidden files included

hidden_files

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical

Compressed files included

compressed_files

The plugin package contains nested archives or compressed files.

critical

Obfuscated code detected

obfuscated_code_detected

The plugin contains code that appears intentionally hard to read or review.

critical

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#801SEO Data Transporter35752k+Missing direct file access protection
#802SEUR Oficial35252981k+Non-prefixed global variable
#803ShareThis Follow Buttons3519400Non-prefixed global variable
#804ShareThis Reaction Buttons3517600Non-prefixed global variable
#805FlexTable – Data Table Sync with Google Sheets3520784k+Direct Query
#806Shop Page WP3568232k+Unsafe printing function
#807Shopkeeper Extender3514265k+Missing Version
#808ShopMagic Abandoned Cart Recovery for WooCommerce3516232k+Non-prefixed global variable
#809ShopMagic for Google Sheets3589400Non-prefixed global variable
#810ShopMagic – Twilio SMS35210800Non-prefixed global variable
#811Shortcake (Shortcode UI)3593910k+Request data is not unslashed
#812Show/Hide Content at Set Time3517710k+date date
#813Simple CAPTCHA with Cloudflare Turnstile3582148100k+Output is not escaped
#814Simple Definition List Blocks351121k+Hidden files included
#815Simple Export Import for ACF Data3519641k+Request data is not unslashed
#816Simple Header Footer HTML353053k+Output is not escaped
#817Simple History – Track, Log, and Audit WordPress Changes3532122300k+Non-prefixed global variable
#818Simple Image Sizes35537560k+Unsafe printing function
#819Simple Map3510110k+Output is not escaped
#820Simple Popup Block35141500Missing direct file access protection
#821Simple Post Type Permalinks351619k+date date
#822Simple Website Redirect35335k+Discouraged text-domain loading
#823Simple Yearly Archive35102366k+Unsafe printing function
#824Simple YouTube Responsive357583k+wp function not compatible with requires wp
#825Simple Analytics3525201k+Output is not escaped
#826SimpleTOC – Table of Contents Block3510010k+Setting is missing a sanitization callback
#827Sitekit3512283k+Output is not escaped
#828Sky Login Redirect357242k+Non-prefixed hook name
#829Slick Slider353692k+Output is not escaped
#830Slope Widgets35549500Non-prefixed global variable
#831Smart Auto Upload Images – Import External Images35215k+Hidden files included
#832SMNTCS Custom Logo Link354813k+badly named files
#833SMNTCS Deactivate image compression35611k+Hidden files included
#834SMNTCS Disable REST API User Endpoints35807k+Hidden files included
#835SMNTCS Google Webmaster Tools35806k+Hidden files included
#836SMNTCS Quantity Increment Buttons for WooCommerce351522k+Hidden files included
#837WPZOOM Connect: Social Icons Widget, Share Buttons & Click to Chat35283190k+Input is not sanitized
#838Quiz Maker, Poll Maker & Survey Maker by Opinion Stage3542326k+Output is not escaped
#839Social Sharing Plugin – Social Warfare351714320k+Non-prefixed class
#840Sold Out Badge for WooCommerce35548k+Output is not escaped
#841Solid Performance – Your No-Code Caching, Performance, & Page Speed Solution3575614k+Exception output is not escaped
#842Spacious Toolkit354894700Non-prefixed global variable
#843Ray3532500Hidden files included
#844Spectra Blocks – AI Website Builder for the Block Editor352411,27610k+Non-prefixed global variable
#845Speedy Page Redirect356101k+Output is not escaped
#846Sprout Invoices – Client Invoicing & Estimates35401,8001k+Non-prefixed hook name
#847SrbTransLatin – Serbian Latinisation3511282k+Non-prefixed global variable
#848SSL Insecure Content Fixer352860100k+Input is not sanitized
#849Steady for WordPress35613600Non-prefixed global variable
#850Sticky Social Link354921k+Output is not escaped