PluginScore

Supply Chain Issues

Issue Codes

3 normalized finding codes in this category.

Hidden files included

hidden_files

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical

Compressed files included

compressed_files

The plugin package contains nested archives or compressed files.

critical

Obfuscated code detected

obfuscated_code_detected

The plugin contains code that appears intentionally hard to read or review.

critical

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#151Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots221,6102,01810k+Direct Query
#152Better WordPress Minify224124848k+Non Singular String Literal Domain
#153Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms2249329510k+Text Domain Mismatch
#154Cleanup Action Scheduler225451,3061k+Non-prefixed global variable
#155Code Profiler – WordPress Performance Profiling and Debugging Made Easy222654008k+Non-prefixed global variable
#156Accept PayPal Payments using Contact Form 722359127600Text Domain Mismatch
#157Passster – Password Protect Pages and Content225391,41910k+Non-prefixed global variable
#158Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates222,1754,2107k+Non-prefixed global variable
#159Directorist: AI-Powered Business Directory, Listings & Classified Ads225492,17720k+Non-prefixed global variable
#160E2Pdf – Export Pdf Tool for WordPress221,08284710k+Unsafe printing function
#161Ebook Store224161,057700Non-prefixed global variable
#162Estatik Real Estate Plugin223,04932510k+Text Domain Mismatch
#163Events Manager – Calendar, Bookings, Tickets, and more!224,7135,66070k+Output is not escaped
#164File Manager Pro – Filester22566391100k+Request data is not unslashed
#165FireBox Popups – Increase Sales and Grow Your Email List221578267k+Non-prefixed global variable
#166Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder22407236700k+Text Domain Mismatch
#167Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar221,3211,3713k+Non-prefixed global variable
#168Five Star Restaurant Menu and Food Ordering227526095k+Output is not escaped
#169Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms221,03172220k+Unsafe printing function
#170Hesabfa Accounting22467718400Text Domain Mismatch
#171IMPress for IDX Broker221,0856366k+Text Domain Mismatch
#172The Innovative Form Builder – IvyForms22750309600Exception output is not escaped
#173InfiniteWP Client222,2861,812200k+Exception output is not escaped
#174Import WP – Export and Import CSV and XML files to WordPress225803304k+Exception output is not escaped
#175JCH Optimize221,1451364k+Output is not escaped
#176Jim Soft Swiss QR Invoice22263392400Non-prefixed global variable
#177MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6252,45810k+Output is not escaped
#178MapSVG – Vector maps, Image maps, Google Maps22179931k+Missing direct file access protection
#179Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider22207323500k+Non-prefixed global variable
#180Modula Image Gallery – Photo Grid & Video Gallery22474436100k+Text Domain Mismatch
#181myCred Addons – Ultimate myCred Modules To Support WordPress Gamification and Loyalty Rewards222,3441,320400Output is not escaped
#182Newsletters222,9682,2482k+Text Domain Mismatch
#183NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2722,063100k+Non-prefixed global variable
#184NinjaScanner – Virus & Malware scan2259655130k+Non-prefixed global variable
#185WP OAuth Server (OAuth Authentication)221893473k+Non-prefixed function
#186oik224891802k+Non Singular String Literal Domain
#187Packeta228013338k+Exception output is not escaped
#188PDF Builder for WPForms22321266900SQL query is not prepared
#189Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#190Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non-prefixed global variable
#191Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non-prefixed global variable
#192Pronamic Pay222581,0772k+Non-prefixed global variable
#193PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe printing function
#194Quick Contact Form222606231k+Non-prefixed function
#195RabbitLoader Cache: Optimize your Website for Speed222411632k+Output is not escaped
#196Salon Booking System – Free Version226556202k+Missing direct file access protection
#197Sellsy22586490400Non Singular String Literal Domain
#198Seraphinite Accelerator2259525550k+Output is not escaped
#199ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044800300k+Non-prefixed global variable
#200Simple Job Board226341,35510k+Non-prefixed global variable