github_directory
github directory
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Why It Shows Up
The finding matches a WordPress coding-standard or Plugin Check rule for code clarity, compatibility, packaging, or API usage.
Why It Matters
Maintainability findings reduce confidence that the plugin will behave consistently across hosts, WordPress versions, and other plugins.
How to Fix
- Find the exact file and line in the raw scan output.
- Prefer WordPress APIs and standard coding patterns over custom or legacy behavior.
- If the warning is from bundled third-party code, document that separately and avoid modifying vendor files unless necessary.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Efí Bank | 17 | 886 | 553 | 300 | Exception output is not escaped | ||
| #2 | Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution | 18 | 1,229 | 923 | 100k+ | Exception output is not escaped | ||
| #3 | Quill Forms | Conversational Multi Step Forms, Surveys & quizzes | 20 | 400 | 371 | 3k+ | Text Domain Mismatch | ||
| #4 | School Management System – WPSchoolPress | 20 | 245 | 5,285 | 1k+ | Non-prefixed global variable | ||
| #5 | Kadence Security – Password, Two Factor Authentication, and Brute Force Protection | 21 | 1,060 | 959 | 700k+ | Missing Translators Comment | ||
| #6 | Leyka | 21 | 257 | 3,446 | 2k+ | Request data is not unslashed | ||
| #7 | Mooberry Book Manager | 21 | 1,040 | 399 | 1k+ | Text Domain Mismatch | ||
| #8 | WP Import Export Lite | 21 | 556 | 331 | 40k+ | Exception output is not escaped | ||
| #9 | wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin | 21 | 1,829 | 1,534 | 60k+ | Output is not escaped | ||
| #10 | Modula Image Gallery – Photo Grid & Video Gallery | 22 | 507 | 437 | 100k+ | Text Domain Mismatch | ||
| #11 | Salon Booking System – Appointment Booking for Salons, Barbershops & Spas | 22 | 209 | 802 | 2k+ | Non-prefixed global variable | ||
| #12 | SpeakOut! Email Petitions | 22 | 849 | 998 | 2k+ | Missing nonce verification | ||
| #13 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | Exception output is not escaped | ||
| #14 | MyWorks Sync for WooCommerce & QuickBooks Online | 23 | 2,292 | 9,101 | 5k+ | Non-prefixed global variable | ||
| #15 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar | 24 | 4,060 | 486 | 20k+ | Text Domain Mismatch | ||
| #16 | Timber | 24 | 85 | 128 | 20k+ | Non-prefixed hook name | ||
| #17 | Cart PDF for WooCommerce | 24 | 553 | 193 | 1k+ | Exception output is not escaped | ||
| #18 | Mailjet Email Marketing | 25 | 430 | 206 | 10k+ | Unsafe printing function | ||
| #19 | Tutor LMS – Migration Tool | 27 | 123 | 523 | 1k+ | Direct Query | ||
| #20 | Brilliant Web-to-Lead for Salesforce | 28 | 247 | 244 | 2k+ | Text Domain Mismatch | ||
| #21 | BNE Testimonials | 29 | 521 | 102 | 1k+ | Output is not escaped | ||
| #22 | All-in-one contact buttons – WPSHARE247 | 31 | 108 | 113 | 3k+ | Non-prefixed global variable | ||
| #23 | Asgaros Forum | 31 | 167 | 412 | 10k+ | Output is not escaped | ||
| #24 | Export Order Items for WooCommerce | 31 | 100 | 108 | 1k+ | Text Domain Mismatch | ||
| #25 | Mailgun for WordPress | 31 | 144 | 75 | 80k+ | Unsafe printing function | ||
| #26 | Push notification for Mobile and Web app | 31 | 87 | 83 | 400 | Non Singular String Literal Domain | ||
| #27 | Posti Shipping | 32 | 652 | 157 | 1k+ | Text Domain Mismatch | ||
| #28 | jQuery Manager for WordPress | 33 | 86 | 24 | 7k+ | Output is not escaped | ||
| #29 | Shift8 CDN | 34 | 81 | 25 | 500 | Output is not escaped | ||
| #30 | AMIMOTO Plugin Dashboard | 35 | 82 | 82 | 900 | Non Singular String Literal Domain | ||
| #31 | bbPress Notify (No-Spam) | 35 | 62 | 66 | 2k+ | wp function not compatible with requires wp | ||
| #32 | Gutenberg Block for WooCommerce Product Table | 35 | 14 | 4 | 3k+ | Hidden files included | ||
| #33 | Custom Post Type Permalinks | 35 | 8 | 4 | 200k+ | Setting is missing a sanitization callback | ||
| #34 | Customize My Account Page | 35 | 4 | 11 | 400 | Dynamic hook name | ||
| #35 | Easy Watermark | 35 | 82 | 53 | 30k+ | Non-prefixed global variable | ||
| #36 | Elements Hive for Breakdance | 35 | 76 | 25 | 1k+ | Output is not escaped | ||
| #37 | Ever Compare – Products Compare Plugin for WooCommerce | 35 | 2 | 26 | 600 | Non-prefixed global variable | ||
| #38 | HT Form Widget for Elementor and WPForms | 35 | 8 | 9 | 2k+ | Output is not escaped | ||
| #39 | Static Site Exporter | 35 | 53 | 26 | 400 | file system operations mkdir | ||
| #40 | Nobs • Share Buttons | 35 | 314 | 85 | 3k+ | Output is not escaped | ||
| #41 | Repeaters & Relationships Connector with ACF for Elementor | 35 | 6 | 3 | 900 | Missing direct file access protection | ||
| #42 | Simple Definition List Blocks | 35 | 11 | 2 | 1k+ | Hidden files included | ||
| #43 | Price by Quantity & Bulk Quantity Discounts for WooCommerce | 35 | 1 | 2 | 1k+ | Hidden files included | ||
| #44 | WP PGP Encrypted Emails | 35 | 63 | 39 | 400 | Output is not escaped | ||
| #45 | Subresource Integrity (SRI) Manager | 35 | 26 | 94 | 900 | Request data is not unslashed | ||
| #46 | Migrate Store: Export and Import WooCommerce Settings | 38 | 37 | 33 | 1k+ | Non-prefixed global variable | ||
| #47 | SureFeedback Client Site | 59 | 47 | 24 | 5k+ | Text Domain Mismatch | ||
| #48 | Secondary Product Image for WooCommerce | 62 | 16 | 26 | 2k+ | Output is not escaped | ||
| #49 | Add to Cart Text Changer and Customize Button, Add Custom Icon | 65 | 87 | 18 | 2k+ | Text Domain Mismatch | ||
| #50 | AADMY – Add Auto Date Month Year Into Posts | 73 | 30 | 32 | 400 | Non-prefixed function |
