Supply Chain Issues
Issue Codes
3 normalized finding codes in this category.
Hidden files included
hidden_files
The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.
Compressed files included
compressed_files
The plugin package contains nested archives or compressed files.
Obfuscated code detected
obfuscated_code_detected
The plugin contains code that appears intentionally hard to read or review.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #951 | WP-Persian | 35 | 144 | 37 | 7k+ | Unsafe printing function | ||
| #952 | WP PGP Encrypted Emails | 35 | 63 | 39 | 400 | Output is not escaped | ||
| #953 | WP Post Nav | 35 | 73 | 242 | 400 | Non-prefixed global variable | ||
| #954 | WP Post Series | 35 | 10 | 9 | 600 | Non-prefixed global variable | ||
| #955 | WP Site Verification tool | 35 | 34 | 37 | 1k+ | Non-prefixed global variable | ||
| #956 | WP Spam Question Filter | 35 | 63 | 30 | 2k+ | Output is not escaped | ||
| #957 | Subresource Integrity (SRI) Manager | 35 | 26 | 94 | 900 | Request data is not unslashed | ||
| #958 | WP Store Locator | 35 | 26 | 14 | 50k+ | wp function not compatible with requires wp | ||
| #959 | WP To Top | 35 | 30 | 29 | 1k+ | Non-prefixed global variable | ||
| #960 | WP Updates Notifier | 35 | 23 | 4 | 30k+ | Missing Translators Comment | ||
| #961 | WP-Yomigana | 35 | 17 | 15 | 2k+ | Output is not escaped | ||
| #962 | WPC Badge Management for WooCommerce | 35 | 13 | 81 | 2k+ | Missing nonce verification | ||
| #963 | WPCore Plugin Manager | 35 | 118 | 38 | 9k+ | Text Domain Mismatch | ||
| #964 | WP Views Counter | 35 | 81 | 42 | 2k+ | Output is not escaped | ||
| #965 | WPGraphQL for ACF | 35 | 6 | 18 | 10k+ | Output is not escaped | ||
| #966 | WPGraphQL IDE | 35 | 38 | 18 | 1k+ | Text Domain Mismatch | ||
| #967 | Memory Meter | 35 | 2 | 3 | 600 | Request data is not unslashed | ||
| #968 | WPZOOM Beaver Builder Templates | 35 | 3 | 5 | 900 | trademarked term | ||
| #969 | WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress | 35 | 74 | 109 | 10k+ | Nonce verification recommended | ||
| #970 | WPZOOM Portfolio Lite – Filterable Portfolio Plugin | 35 | 42 | 92 | 20k+ | Non-prefixed global variable | ||
| #971 | Video Popup Block – YouTube, Vimeo, TikTok Lightbox by WPZOOM | 35 | 1 | 5 | 10k+ | trademarked term | ||
| #972 | Writesonic | 35 | 14 | 16 | 1k+ | Non-prefixed global variable | ||
| #973 | WSB HUB3 | 35 | 36 | 109 | 1k+ | Missing nonce verification | ||
| #974 | XT Event Widget for Social Events | 35 | 1 | 9 | 800 | Non-prefixed class | ||
| #975 | Comment Experience by Progress Planner | 35 | 135 | 8 | 500 | Text Domain Mismatch | ||
| #976 | Yoco Payments | 35 | 2 | 32 | 10k+ | Nonce verification recommended | ||
| #977 | ZI Hide Featured Image | 35 | 8 | 3 | 700 | Hidden files included | ||
| #978 | Ziina | 35 | 4 | 25 | 2k+ | Input is not sanitized |
