PluginScore

Supply Chain Issues

Issue Codes

3 normalized finding codes in this category.

Hidden files included

hidden_files

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical

Compressed files included

compressed_files

The plugin package contains nested archives or compressed files.

critical

Obfuscated code detected

obfuscated_code_detected

The plugin contains code that appears intentionally hard to read or review.

critical

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#901WP Courseware for WooCommerce3555491k+Text Domain Mismatch
#902Custom Payment Gateways for WooCommerce35202313k+Non Singular String Literal Domain
#903Require Login for WooCommerce351062k+wp function not compatible with requires wp
#904Save and Share Cart for WooCommerce3512551600Text Domain Mismatch
#905Title Limit for WooCommerce3541124k+Output is not escaped
#906Abandoned Cart Lite for WooCommerce358416120k+Non-prefixed global variable
#907Data Exchange for WooCommerce and 1C:Enterprise/1С:Предприятие35121k+Hidden files included
#908Call for Price for WooCommerce353318k+Non-prefixed hook name
#909Checkout Terms Conditions Popup for WooCommerce3576301k+Output is not escaped
#910Conversion Tracking for WooCommerce35746120k+Output is not escaped
#911Japanized for WooCommerce3566810k+Non-prefixed class
#912WooCommerce Gateway Affirm352586k+Nonce verification recommended
#913Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing355023640k+Non-prefixed hook name
#914Custom Payment Gateway for WooCommerce3511128k+Missing nonce verification
#915Invoices for WooCommerce355516810k+Non-prefixed global variable
#916PDF Invoices & Packing Slips for WooCommerce3535966300k+Non-prefixed hook name
#917Product Tabs for WooCommerce3519610010k+Text Domain Mismatch
#918Quaderno: Global Tax & Invoicing Automation for WooCommerce35470500Missing nonce verification
#919Stock Manager for WooCommerce3554520k+Non-prefixed global variable
#920Wholesale Suite – B2B, Dynamic Pricing & WooCommerce Wholesale Prices35225220k+Direct Query
#921Wooplatnica352724400Non-prefixed class
#922BulkGate SMS Plugin for WooCommerce3533321k+Output is not escaped
#923Access Areas for WordPress351795400Direct Query
#924WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel354110100k+wp function not compatible with requires wp
#925WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets353522100k+Missing direct file access protection
#926WP API Menus351292k+wp function not compatible with requires wp
#927WP Associate Post R235259863k+Output is not escaped
#928Bitly's WordPress Plugin356232k+Non-prefixed function
#929Category Dropdown by GCS Design3593521k+Output is not escaped
#930WP Change Email Sender3551310k+Non-prefixed namespace
#931WP Compiler3533201k+Output is not escaped
#932WP Content Copy Protection35761110k+Text Domain Mismatch
#933Countdown Block35521k+Hidden files included
#934Custom Body Class353910110k+Non-prefixed global variable
#935WP Dark Mode – Improve Accessibility with AI Powered Dark Theme352016020k+Non-prefixed global variable
#936WP Duplicate Page35445060k+Text Domain Mismatch
#937WP Flexslider35157600Unsafe printing function
#938WP GPX Maps35271004k+Non-prefixed global variable
#939WPGraphQL35108630k+Non-prefixed hook name
#940WP Hydra3510181k+Input is not sanitized
#941WP-KaTeX35148800Missing direct file access protection
#942WP-LESS3516810k+Missing direct file access protection
#943Entryway – WP Login & Logout Redirect3551106k+Text Domain Mismatch
#944WP-Markdown353139400Output is not escaped
#945WP Menu Custom Fields35116600Hidden files included
#946WP Instant Feeds3519126k+Output is not escaped
#947Disable Bulk Smush Limit of Smush Image Optimization35323k+Hidden files included
#948WP Open Street Map35591113k+Input is not validated
#949Parse.ly3515441k+Non-prefixed hook name
#950WP-Persian35144377k+Unsafe printing function