PluginScore

Supply Chain Issues

Issue Codes

3 normalized finding codes in this category.

Hidden files included

hidden_files

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical

Compressed files included

compressed_files

The plugin package contains nested archives or compressed files.

critical

Obfuscated code detected

obfuscated_code_detected

The plugin contains code that appears intentionally hard to read or review.

critical

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#201SNS Count Cache229181208k+Non Singular String Literal Domain
#202SSL Zen — SSL Certificate Installer & HTTPS Redirects227511,60510k+Non-prefixed global variable
#203Stylish Price List – Price Table Builder & QR Code Restaurant Menu226746783k+Output is not escaped
#204SVG Flags – Beautiful Scalable Flags For All Countries!227551,2512k+Non-prefixed global variable
#205Swift Performance Lite222,3461,3256k+Text Domain Mismatch
#20610Web Booster – Website speed optimization, Cache & Page Speed optimizer2251360180k+Non-prefixed global variable
#207The Moneytizer227512711k+Text Domain Mismatch
#208Customize Feeds for Twitter22921714k+Non-prefixed global variable
#209Ultimeter227511,3441k+Non-prefixed global variable
#210Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin225222,36740k+Direct Query
#211Uncanny Toolkit for LearnDash2253999420k+Output is not escaped
#212RapidLoad AI – Optimize Web Vitals Automatically2281840700Nonce verification recommended
#213Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links221,0441,79720k+Non-prefixed global variable
#214Welcart e-Commerce2210,37810,93110k+Text Domain Mismatch
#215Walker Core221,3511,436700Non-prefixed global variable
#216Peach Payments Gateway223341431k+Non Singular String Literal Domain
#217Easy Appointment Booking & Scheduling System – Webba Booking Calendar221,6173,3802k+Non-prefixed global variable
#218CoDesigner – All in One Elementor WooCommerce Builder224,1317745k+Text Domain Mismatch
#219Simple Shopping Cart2279653610k+Unsafe printing function
#220WP Easy Pay – Payment and Donation form Builder for Square229101,8351k+Non-prefixed global variable
#221WP Express Checkout (Fast Payments via PayPal & Stripe)225916271k+Output is not escaped
#222File Manager227405201m+Unsafe printing function
#223WP Fusion Lite – Marketing Automation and CRM Integration for WordPress222756835k+Nonce verification recommended
#224WP Umbrella: Update Backup Restore & Monitoring2295796670k+Exception output is not escaped
#225SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher2230824710k+Output is not escaped
#226WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript221642578k+Non-prefixed constant
#227NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce221,3531,4121k+Non-prefixed global variable
#228User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration222911,51620k+Non-prefixed global variable
#229WP-WebAuthn229573962k+Exception output is not escaped
#230WPSSO Core – Complete Schema Markup and Meta Tags221,4074125k+Missing Translators Comment
#231YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception output is not escaped
#232Recipe Cards For Your Food Blog from Zip Recipes221,1261,7311k+Non-prefixed global variable
#233Advanced Ads – Ad Manager & AdSense23559719100k+Non-prefixed global variable
#234AI Engine – The Chatbot, AI Framework & MCP for WordPress23408539100k+error log error log
#235AR for WordPress23151499400Non-prefixed global variable
#236BA Book Everything231,1841,08610k+Output is not escaped
#237Kadence Security – Password, Two Factor Authentication, and Brute Force Protection231,053967700k+Missing Translators Comment
#238BlossomThemes Email Newsletter2333723920k+Output is not escaped
#239BSK PDF Manager231,5766257k+Text Domain Mismatch
#240Geo Controller23914501k+Non-prefixed global variable
#241All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more.237501,35960k+Non-prefixed global variable
#242WPBot – AI ChatBot for Live Support, Lead Generation, AI Services234881,1545k+Non-prefixed global variable
#243Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe239,30926,6391k+Non-prefixed global variable
#244Currency Exchange for WooCommerce23692505500Output is not escaped
#245Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy2317082140k+Non-prefixed global variable
#246Easy Age Verify231,1382,6311k+Non-prefixed global variable
#247Marijuana Age Verify231,1542,6301k+Non-prefixed global variable
#248Error Log Monitor236941,41420k+Non-prefixed global variable
#249Freshdesk (official)23194386900Non-prefixed function
#250Anti-Malware Security and Brute-Force Firewall23543965100k+Output is not escaped