github_directory
github directory
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Why It Shows Up
The finding matches a WordPress coding-standard or Plugin Check rule for code clarity, compatibility, packaging, or API usage.
Why It Matters
Maintainability findings reduce confidence that the plugin will behave consistently across hosts, WordPress versions, and other plugins.
How to Fix
- Find the exact file and line in the raw scan output.
- Prefer WordPress APIs and standard coding patterns over custom or legacy behavior.
- If the warning is from bundled third-party code, document that separately and avoid modifying vendor files unless necessary.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Efí Bank | 17 | 886 | 553 | 400 | Exception output is not escaped | ||
| #2 | Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution | 19 | 1,218 | 901 | 100k+ | Exception output is not escaped | ||
| #3 | WP Import Export Lite | 19 | 737 | 979 | 40k+ | Non-prefixed global variable | ||
| #4 | Leaky Paywall | 20 | 322 | 789 | 600 | Nonce verification recommended | ||
| #5 | SpeakOut! Email Petitions | 20 | 850 | 994 | 2k+ | Missing nonce verification | ||
| #6 | School Management System – WPSchoolPress | 20 | 353 | 5,278 | 1k+ | Non-prefixed global variable | ||
| #7 | Kadence Security – Password, Two Factor Authentication, and Brute Force Protection | 21 | 1,060 | 957 | 700k+ | Missing Translators Comment | ||
| #8 | rtMedia for WordPress, BuddyPress and bbPress | 21 | 363 | 647 | 7k+ | Non-prefixed constant | ||
| #9 | Leyka | 21 | 257 | 3,446 | 2k+ | Request data is not unslashed | ||
| #10 | Mooberry Book Manager | 21 | 1,040 | 399 | 1k+ | Text Domain Mismatch | ||
| #11 | Quill Forms | Conversational Multi Step Forms, Surveys & quizzes | 21 | 401 | 369 | 3k+ | Text Domain Mismatch | ||
| #12 | wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin | 21 | 1,812 | 1,432 | 70k+ | Output is not escaped | ||
| #13 | 12 Step Meeting List | 22 | 156 | 593 | 900 | Non-prefixed global variable | ||
| #14 | Passster – Password Protect Pages and Content | 22 | 539 | 1,422 | 10k+ | Non-prefixed global variable | ||
| #15 | Modula Image Gallery – Photo Grid & Video Gallery | 22 | 474 | 437 | 100k+ | Text Domain Mismatch | ||
| #16 | WP-WebAuthn | 22 | 957 | 396 | 2k+ | Exception output is not escaped | ||
| #17 | MyWorks Sync for WooCommerce & QuickBooks Online | 23 | 2,292 | 9,101 | 5k+ | Non-prefixed global variable | ||
| #18 | Salon Booking System – Free Version | 23 | 145 | 613 | 2k+ | Non-prefixed global variable | ||
| #19 | Mailjet Email Marketing | 24 | 435 | 206 | 10k+ | Unsafe printing function | ||
| #20 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar | 24 | 4,063 | 486 | 20k+ | Text Domain Mismatch | ||
| #21 | Timber | 24 | 85 | 128 | 20k+ | Non-prefixed hook name | ||
| #22 | Tutor LMS – Migration Tool | 27 | 139 | 341 | 1k+ | Direct Query | ||
| #23 | Brilliant Web-to-Lead for Salesforce | 28 | 247 | 244 | 2k+ | Text Domain Mismatch | ||
| #24 | BNE Testimonials | 29 | 521 | 102 | 1k+ | Output is not escaped | ||
| #25 | All-in-one contact buttons – WPSHARE247 | 31 | 108 | 113 | 4k+ | Non-prefixed global variable | ||
| #26 | Asgaros Forum | 31 | 167 | 412 | 10k+ | Output is not escaped | ||
| #27 | Export Order Items for WooCommerce | 31 | 100 | 108 | 1k+ | Text Domain Mismatch | ||
| #28 | Mailgun for WordPress | 31 | 144 | 75 | 80k+ | Unsafe printing function | ||
| #29 | Push notification for Mobile and Web app | 31 | 87 | 83 | 400 | Non Singular String Literal Domain | ||
| #30 | Posti Shipping | 32 | 664 | 157 | 1k+ | Text Domain Mismatch | ||
| #31 | jQuery Manager for WordPress | 33 | 86 | 24 | 7k+ | Output is not escaped | ||
| #32 | Shift8 CDN | 34 | 81 | 25 | 500 | Output is not escaped | ||
| #33 | AMIMOTO Plugin Dashboard | 35 | 82 | 82 | 900 | Non Singular String Literal Domain | ||
| #34 | bbPress Notify (No-Spam) | 35 | 62 | 66 | 2k+ | wp function not compatible with requires wp | ||
| #35 | Gutenberg Block for WooCommerce Product Table | 35 | 14 | 4 | 3k+ | Hidden files included | ||
| #36 | Custom Post Type Permalinks | 35 | 8 | 4 | 200k+ | Setting is missing a sanitization callback | ||
| #37 | Customize My Account Page | 35 | 4 | 11 | 400 | Dynamic hook name | ||
| #38 | Easy Watermark | 35 | 82 | 53 | 30k+ | Non-prefixed global variable | ||
| #39 | Elements Hive for Breakdance | 35 | 76 | 25 | 1k+ | Output is not escaped | ||
| #40 | Ever Compare – Products Compare Plugin for WooCommerce | 35 | 2 | 23 | 600 | Non-prefixed global variable | ||
| #41 | HT Form Widget for Elementor and WPForms | 35 | 8 | 9 | 2k+ | Output is not escaped | ||
| #42 | Static Site Exporter | 35 | 52 | 25 | 500 | file system operations mkdir | ||
| #43 | Nobs • Share Buttons | 35 | 314 | 85 | 3k+ | Output is not escaped | ||
| #44 | Repeaters & Relationships Connector with ACF for Elementor | 35 | 6 | 3 | 800 | Missing direct file access protection | ||
| #45 | Simple Definition List Blocks | 35 | 11 | 2 | 1k+ | Hidden files included | ||
| #46 | Sky Login Redirect | 35 | 15 | 20 | 2k+ | Non-prefixed hook name | ||
| #47 | Price by Quantity & Bulk Quantity Discounts for WooCommerce | 35 | 1 | 2 | 1k+ | Hidden files included | ||
| #48 | WP PGP Encrypted Emails | 35 | 63 | 39 | 400 | Output is not escaped | ||
| #49 | Subresource Integrity (SRI) Manager | 35 | 26 | 94 | 900 | Request data is not unslashed | ||
| #50 | Migrate Store: Export and Import WooCommerce Settings | 38 | 37 | 33 | 1k+ | Non-prefixed global variable |
