PluginScore

compressed_files

Compressed files included

The plugin package contains nested archives or compressed files.

critical weight

Why It Shows Up

Plugin Check found ZIP, TAR, GZ, or similar compressed files inside the plugin package.

Why It Matters

Nested archives hide code from normal review and can increase supply-chain risk or bloat the release.

How to Fix

  • Do not ship backup archives, vendor source archives, or release ZIPs inside the plugin.
  • Extract required assets into normal files or fetch optional data through documented runtime flows.
  • Review packaging scripts so archives are not copied into the release by accident.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Themify Builder95,3342,1715k+Text Domain Mismatch
#2MDTF – Meta Data and Taxonomies Filter161,5501,9561k+Non-prefixed global variable
#3WPtouch – Make your WordPress Website Mobile-Friendly171,46632550k+Text Domain Mismatch
#4WPPizza – A Restaurant Plugin184,6892,7031k+Text Domain Mismatch
#5Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps)193,2753,2289k+Output is not escaped
#6Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195303753m+Missing Translators Comment
#7Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non-prefixed global variable
#8Feeds for YouTube (YouTube video, channel, and gallery plugin)21503995100k+Output is not escaped
#9PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI)21502821300Missing direct file access protection
#10Trace My IP – Visitor IP Tracker, Stats Analytics & Page Views Counter with Email Alerts218713381k+wp function not compatible with requires wp
#11Visual Composer Website Builder217332040k+Non-prefixed global variable
#12Peach Payments Gateway213351441k+Non Singular String Literal Domain
#13IS-theme-companion213,5595111k+Non Singular String Literal Domain
#14WP Sessions Time Monitoring Full Automatic228691,529500Non-prefixed global variable
#15WPBot – AI ChatBot for Live Support, Lead Generation, WordPress Automation, AI Services221681,7135k+Non-prefixed global variable
#16Seraphinite Accelerator2258724350k+Output is not escaped
#17Swift Performance Lite222,3461,3256k+Text Domain Mismatch
#18BA Book Everything231,1931,08610k+Output is not escaped
#19BlossomThemes Email Newsletter2333723920k+Output is not escaped
#20Revive.so – Bulk Rewrite and Republish Blog Posts23332228600Text Domain Mismatch
#21PostFinance Checkout231,001221900Text Domain Mismatch
#22Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation241,2113,15230k+Non-prefixed global variable
#23Themify Event Post253901463k+Output is not escaped
#24Kadence Starter Templates — Predesigned Website Templates29311215200k+Missing Arg Domain
#25Themify Popup292291088k+Text Domain Mismatch
#26Themify – WooCommerce Product Filter2959114620k+Output is not escaped
#27Themify Portfolio Post302178030k+Text Domain Mismatch
#28Themify Store Locator31237125400Text Domain Mismatch
#29WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters3221744360k+wp function not compatible with requires wp
#30Ad Invalid Click Protector (AICP)35784510k+Text Domain Mismatch
#31Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons3584100k+Compressed files included
#32Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons3592100k+Compressed files included
#33Lord of the Files: Enhanced Upload Security3561421k+Non-prefixed global variable
#34Block Comment Spam Bots353117800Output is not escaped
#35BSK Forms Blacklist358315501k+Output is not escaped
#36Conditional Menus35936860k+Text Domain Mismatch
#37Currency Switcher for WooCommerce3518660700Text Domain Mismatch
#38Dadevarzan WordPress Common355671600Text Domain Mismatch
#39DMCA Website Protection Badge35321k+Compressed files included
#40Metadata Viewer35211500Non-prefixed global variable
#41Pixel Gallery Addons for Elementor35814k+Compressed files included
#42Presto Player354297100k+Missing Arg Domain
#43Quran multilanguage Text & Audio35177166500Output is not escaped
#44ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema3586357k+Unsafe printing function
#45ShopBuilder – WooCommerce Builder For Elementor355045810k+Non-prefixed global variable
#46Themify Audio Dock35229900Non-prefixed global variable
#47Themify Icons3533123k+Output is not escaped
#48Themify Shortcodes3536167k+Output is not escaped
#49Ultimate Post Kit – Elementor Post Grid, Post Carousel, Post Slider & Blog Layout Widgets359130k+Compressed files included
#50Cincopa video and media plug-in35125941k+Text Domain Mismatch