PluginScore

Supply Chain Issues

Issue Codes

3 normalized finding codes in this category.

Hidden files included

hidden_files

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical

Compressed files included

compressed_files

The plugin package contains nested archives or compressed files.

critical

Obfuscated code detected

obfuscated_code_detected

The plugin contains code that appears intentionally hard to read or review.

critical

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101If-So Dynamic Content – Elementor & All Page Builders Personalization218897257k+Unsafe printing function
#102Imagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF214268621m+Non-prefixed global variable
#103LA-Studio Element Kit for Elementor218,4031,88210k+Text Domain Mismatch
#104Leyka212573,4462k+Request data is not unslashed
#105MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder211,1333,0112k+Non-prefixed global variable
#106Mapster WP Maps213,4402,8943k+Text Domain Mismatch
#107Mergado Pack212,323588700Output is not escaped
#108Modular DS: Monitor, update, and backup multiple websites211598140k+Exception output is not escaped
#109Mooberry Book Manager211,0403991k+Text Domain Mismatch
#110MotoPress Hotel Booking213,0631,03710k+Text Domain Mismatch
#111Oasis Workflow21775575700Text Domain Mismatch
#112OneLogin SAML SSO215073307k+wp function not compatible with requires wp
#113Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1202,9139k+Non-prefixed global variable
#114Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9535,29710k+Non-prefixed hook name
#115User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor217031,46340k+Missing Translators Comment
#116PublishPress Planner – Editorial Calendar, Marketing Content, Kanban Board216038906k+Output is not escaped
#117Quill Forms | Conversational Multi Step Forms, Surveys & quizzes214013693k+Text Domain Mismatch
#118Razorpay for Gravity Forms2141147600Exception output is not escaped
#119Razorpay Quick Payments21399633k+Exception output is not escaped
#120Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#121Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non-prefixed global variable
#122Seamless Donations is Sunset216005142k+Text Domain Mismatch
#123SeatReg213121,637400Missing nonce verification
#124Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#125Accept Stripe Payments2137388420k+Missing nonce verification
#126ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin2119066030k+Non-prefixed global variable
#127Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125643120k+Non-prefixed hook name
#128URL Shortify – Simple and Easy URL Shortener211,5192,68710k+Non-prefixed global variable
#129Buckaroo Woocommerce Payments Plugin216383212k+Exception output is not escaped
#130BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages216681,569800Non-prefixed global variable
#131IS-theme-companion213,5595111k+Non Singular String Literal Domain
#132WebP Express21160427300k+Non-prefixed global variable
#133Wise Chat214705065k+Output is not escaped
#134Paysera Payment Gateway for WooCommerce211,8661957k+Exception output is not escaped
#135Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39730k+Non-prefixed global variable
#136Pay For Post with WooCommerce219601,4741k+Non-prefixed global variable
#137PPOM – Product Addons & Custom Fields for WooCommerce213361,32220k+Non-prefixed global variable
#138Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#139WP Compress – Instant Performance & Speed Optimization213,3673,25310k+Non Singular String Literal Domain
#140WP-Lister Lite for eBay216,6975,1292k+Output is not escaped
#141WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#142wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,8121,43270k+Output is not escaped
#143WPScan – WordPress Security Scanner215272658k+Text Domain Mismatch
#144WebTotem Security211,110213900Text Domain Mismatch
#14512 Step Meeting List22156593900Non-prefixed global variable
#146WP Sessions Time Monitoring Full Automatic228691,529500Non-prefixed global variable
#147Advanced Classifieds & Directory Pro221,2293,5122k+Non-prefixed global variable
#148Ajax Load More – Infinite Scroll, Load More, & Lazy Load2264159530k+Unsafe printing function
#149All-in-One Video Gallery229112,89220k+Non-prefixed global variable
#150Backup Bolt225801,313800Non-prefixed global variable