allow_unfiltered_uploads_detected
allow unfiltered uploads detected
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Why It Shows Up
The finding matches a WordPress coding-standard or Plugin Check rule for code clarity, compatibility, packaging, or API usage.
Why It Matters
Maintainability findings reduce confidence that the plugin will behave consistently across hosts, WordPress versions, and other plugins.
How to Fix
- Find the exact file and line in the raw scan output.
- Prefer WordPress APIs and standard coding patterns over custom or legacy behavior.
- If the warning is from bundled third-party code, document that separately and avoid modifying vendor files unless necessary.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Plugin Check (PCP) | 0 | 128 | 132 | 10k+ | Exception output is not escaped | ||
| #2 | Store Locator WordPress | 21 | 2,494 | 1,628 | 10k+ | Text Domain Mismatch | ||
| #3 | Cost Calculator Builder | 21 | 322 | 766 | 20k+ | Non-prefixed global variable | ||
| #4 | Modular DS: Monitor, update, and backup multiple websites | 21 | 159 | 82 | 40k+ | Exception output is not escaped | ||
| #5 | User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | 21 | 703 | 1,463 | 40k+ | Missing Translators Comment | ||
| #6 | Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | 23 | 395 | 1,343 | 90k+ | Non-prefixed global variable | ||
| #7 | Houzez Property Feed | 23 | 1,416 | 1,585 | 1k+ | Text Domain Mismatch | ||
| #8 | Hunk Companion | 23 | 2,547 | 687 | 6k+ | Text Domain Mismatch | ||
| #9 | ThemeHunk Customizer | 23 | 3,968 | 582 | 6k+ | Text Domain Mismatch | ||
| #10 | WPMobile.App | 23 | 2,983 | 1,533 | 3k+ | Output is not escaped | ||
| #11 | Media Library Folders | 24 | 889 | 807 | 10k+ | Text Domain Mismatch | ||
| #12 | SecuPress with Simple SSL – Simple and Performant Security | 24 | 1,695 | 1,600 | 40k+ | Non-prefixed global variable | ||
| #13 | WP User Manager – User Profile Builder & Membership | 24 | 787 | 539 | 10k+ | Exception output is not escaped | ||
| #14 | Vayu Blocks – Website Builder for the Gutenberg Block Editor | 25 | 174 | 233 | 1k+ | Text Domain Mismatch | ||
| #15 | Query Monitor | 31 | 44 | 273 | 200k+ | Non-prefixed class | ||
| #16 | Members – Membership & User Role Editor Plugin | 32 | 233 | 259 | 300k+ | Output is not escaped | ||
| #17 | System Dashboard | 32 | 91 | 205 | 900 | Request data is not unslashed | ||
| #18 | Easy Upload Files During Checkout | 33 | 218 | 199 | 500 | Unsafe printing function | ||
| #19 | Zita Site Library for Elementor | 33 | 107 | 135 | 1k+ | Text Domain Mismatch | ||
| #20 | TBThemes Theme Import | 35 | 84 | 48 | 400 | Text Domain Mismatch | ||
| #21 | Roles & Capabilities | 44 | 24 | 79 | 1k+ | Nonce verification recommended | ||
| #22 | Debug This | 52 | 43 | 32 | 2k+ | Missing Translators Comment | ||
| #23 | Export & Import WPBakery Page Builder | 56 | 12 | 20 | 9k+ | Missing nonce verification | ||
| #24 | Stencil | 92 | 6 | 8 | 1k+ | Non-prefixed function | ||
| #25 | UltraAddons for Elementor | 92 | 63 | 2 | 600 | wp function not compatible with requires wp |
