PluginScore

Supply Chain Issues

Issue Codes

3 normalized finding codes in this category.

Hidden files included

hidden_files

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical

Compressed files included

compressed_files

The plugin package contains nested archives or compressed files.

critical

Obfuscated code detected

obfuscated_code_detected

The plugin contains code that appears intentionally hard to read or review.

critical

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#301PDF Ink Lite – Free PDF Watermark & Password Protection242265612k+Non-prefixed global variable
#302WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors241685843k+Non-prefixed class
#303weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot242795424k+Non-prefixed global variable
#304wallee24331220400Exception output is not escaped
#305Country Based Payments for WooCommerce245311,2953k+Non-prefixed global variable
#306WP Discourse241031141k+Nonce verification recommended
#307WP Layouts243491463k+Text Domain Mismatch
#308WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce24911,7257k+Non-prefixed hook name
#309YayCurrency – WooCommerce Multi-Currency Switcher243736238k+Text Domain Mismatch
#310Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation241,2113,15230k+Non-prefixed global variable
#311BuddyPress Docs252844217k+Nonce verification recommended
#312SilentShield – Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce)2523521410k+Database parameter is not escaped
#313胖鼠采集(Fat Rat Collect)25630190900Missing Arg Domain
#314Fluid Checkout for WooCommerce – Lite2537084120k+Non-prefixed hook name
#315WP Fast Total Search – The Power of Indexed Search252092911k+Non-prefixed global variable
#316Instantio — Side Cart & One-Page Checkout for WooCommerce25568369700Output is not escaped
#317Qyrr – simply and modern QR-Code creation255311,3132k+Non-prefixed global variable
#318ShopMagic – email automation2522814510k+Exception output is not escaped
#319Themify Event Post253971433k+Output is not escaped
#320Spectra Legacy – Gutenberg Blocks252533,2261m+Non-prefixed global variable
#321Wordfence Login Security2524841860k+Output is not escaped
#322ELEX WooCommerce Google Shopping (Google Product Feed)262262421k+Text Domain Mismatch
#323FlagShip WooCommerce Shipping26495188400Non Singular String Literal Domain
#324Fluent Support – Helpdesk & Customer Support Ticket System269227210k+Direct Query
#325FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.)265944172k+Exception output is not escaped
#326Integrate Razorpay for Contact Form 72615297500curl curl setopt
#327Live Composer – Free WordPress Website Builder261,21142710k+Output is not escaped
#328LoginWP (Formerly Peter's Login Redirect)2640127890k+Output is not escaped
#329Pressidium Cookie Consent262039510k+Exception output is not escaped
#330SP Move Login268812156k+Text Domain Mismatch
#331StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce261254202k+Non-prefixed global variable
#332SV Proven Expert26747380900Output is not escaped
#333Tag Groups is the Advanced Way to Display Your Taxonomy Terms263512323k+Unsafe printing function
#334Visitors Online by BestWebSoft265122691k+Text Domain Mismatch
#335Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails2651325300k+Direct Query
#336Accordions – Responsive Accordion & FAQ Plugin for WordPress275541581k+Text Domain Mismatch
#337Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin272124972k+Non-prefixed global variable
#338Gravity Forms Directory27202457600Non-prefixed global variable
#339Ray Enterprise Translation27876068k+Non-prefixed global variable
#340Login Security Solution272161544k+Output is not escaped
#341MakeCommerce for WooCommerce278264523k+Text Domain Mismatch
#342MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services)271545515k+Non-prefixed global variable
#343Tussendoor – Open RDW27301140600Text Domain Mismatch
#344Packlink PRO for WooCommerce2713216020k+Non-prefixed global variable
#345Sign-up Sheets273253631k+Output is not escaped
#346SV Tracking Manager279681291k+Output is not escaped
#347Wiremo – Product Reviews for WooCommerce27445212700Output is not escaped
#348wp-mpdf271233821k+Non-prefixed global variable
#349WP Chat App27120274100k+Alternative PHP tag found
#350AForms — Form Builder for Price Calculator & Cost Estimation28564953k+Text Domain Mismatch