compressed_files
Compressed files included
The plugin package contains nested archives or compressed files.
Why It Shows Up
Plugin Check found ZIP, TAR, GZ, or similar compressed files inside the plugin package.
Why It Matters
Nested archives hide code from normal review and can increase supply-chain risk or bloat the release.
How to Fix
- Do not ship backup archives, vendor source archives, or release ZIPs inside the plugin.
- Extract required assets into normal files or fetch optional data through documented runtime flows.
- Review packaging scripts so archives are not copied into the release by accident.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #51 | Themify Icons | 35 | 33 | 12 | 3k+ | Output is not escaped | ||
| #52 | Themify Shortcodes | 35 | 36 | 16 | 7k+ | Output is not escaped | ||
| #53 | WC Cancel Order | 35 | 52 | 122 | 5k+ | Non-prefixed hook name | ||
| #54 | All-in-One Addons for Elementor – WidgetKit | 35 | 60 | 311 | 8k+ | Non-prefixed global variable | ||
| #55 | Japanized for WooCommerce | 35 | 6 | 68 | 10k+ | Non-prefixed class | ||
| #56 | Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing | 35 | 50 | 237 | 40k+ | Non-prefixed hook name | ||
| #57 | WP Change Email Sender | 35 | 5 | 13 | 10k+ | Non-prefixed namespace | ||
| #58 | Entryway – WP Login & Logout Redirect | 35 | 51 | 10 | 6k+ | Text Domain Mismatch | ||
| #59 | WP Server Health Stats | 35 | 64 | 30 | 9k+ | Output is not escaped | ||
| #60 | WPCore Plugin Manager | 35 | 118 | 38 | 9k+ | Text Domain Mismatch |
