PluginScore

Supply Chain Issues

Issue Codes

3 normalized finding codes in this category.

Hidden files included

hidden_files

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical

Compressed files included

compressed_files

The plugin package contains nested archives or compressed files.

critical

Obfuscated code detected

obfuscated_code_detected

The plugin contains code that appears intentionally hard to read or review.

critical

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#251Groovy Menu Plugin (Free)231,7292834k+Text Domain Mismatch
#252Groundhogg — CRM, Newsletters, and Marketing Automation231369192k+Non-prefixed global variable
#253Interactive Content – H5P2356538040k+Non Singular String Literal Domain
#254Houzez Property Feed231,4641,5851k+Text Domain Mismatch
#255RealHomes Memberships235162641k+Non Singular String Literal Domain
#256Kadence Blocks — Page Builder Toolkit for Gutenberg Editor23552,127600k+Non-prefixed global variable
#257LLMagnet – AI Visibility & AI SEO for Claude, ChatGPT & More236271,798400Non-prefixed global variable
#258Login With Ajax – Fast Logins, 2FA, Redirects2362352010k+Output is not escaped
#259MailPoet – Newsletters, Email Marketing, and Automation23932718500k+Exception output is not escaped
#260MyWorks Sync for WooCommerce & QuickBooks Online232,2929,1015k+Non-prefixed global variable
#261Simple Newsletter Plugin – Noptin237159310k+Non-prefixed global variable
#262Next Active Directory Integration236832842k+Exception output is not escaped
#263Patchstack – WordPress & Plugins Security2310748950k+Missing nonce verification
#264Post to Google My Business (Google Business Profile)238451,45210k+Non-prefixed global variable
#265Pricing Table by Supsystic231,29944710k+Non Singular String Literal Domain
#266Read More WP235701,3111k+Non-prefixed global variable
#267Revive.so – Bulk Rewrite and Republish Blog Posts23332228700Text Domain Mismatch
#268Security Plugin, Firewall & Malware Scanner with Auto Removal231,20078430k+Output is not escaped
#269SEO Redirection Plugin – 301 Redirect Manager2327272710k+Non-prefixed global variable
#270StreamWeasels Twitch Integration235551,4651k+Non-prefixed global variable
#271Legal Terms and Conditions Popup for User Login and WooCommerce Checkout23524237700Output is not escaped
#272W3 Total Cache23307678900k+Non-prefixed global variable
#273PostFinance Checkout239792141k+Text Domain Mismatch
#274WP All Import – Product Import for WooCommerce231,47520920k+Non Singular String Literal Domain
#275Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning231,11820230k+Missing Translators Comment
#276Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form234195422k+Non-prefixed global variable
#277Yatra – Travel Booking & Tour Operator Software232,2424,047600Non-prefixed global variable
#278Zephyr Project Manager236672,4541k+Non-prefixed global variable
#279Advanced Contact form 7 DB247641,96070k+Non-prefixed global variable
#280BuddyPress Group Email Subscription24513361k+Non-prefixed function
#281Message Filter for Contact Form 7241,0441,5941k+Non-prefixed global variable
#282Business Essentials for Contact Form 7246744038k+Text Domain Mismatch
#283Dynamic Widgets2463181210k+Non-prefixed global variable
#284Fattura2424312333400Output is not escaped
#285FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution2419375380k+Direct Query
#286Connector Wizard (formerly LC Wizard)242494481k+Non-prefixed function
#287Infinite Uploads – Offload Media and Video to Cloud Storage24586722800Direct Query
#288Koko Analytics – Privacy-Friendly WordPress Analytics2416639560k+Short PHP open tag found
#289Mailchimp for WooCommerce24523663200k+Non-prefixed global variable
#290Mailjet Email Marketing2443520610k+Unsafe printing function
#291My Agile Privacy® – CMP, Cookie Consent & Privacy Tools241,1706747k+Text Domain Mismatch
#292Pagar.me para WooCommerce245491165k+Text Domain Mismatch
#293Sailthru for WordPress242392662k+Non-prefixed global variable
#294Servebolt Optimizer241,9586811k+Text Domain Mismatch
#295Smart Variations Images & Swatches for WooCommerce249901,4861k+Non-prefixed global variable
#296Tiered Pricing Table for WooCommerce246061,99010k+Non-prefixed global variable
#297Timber248512820k+Non-prefixed hook name
#298Ultimate Addons for Beaver Builder – Lite242,75148620k+Text Domain Mismatch
#299Ultimate Post Kit Addons for Elementor2418341230k+Missing nonce verification
#300Vimeography: Vimeo Video Gallery WordPress Plugin24982125k+Nonce verification recommended