hidden_files
Hidden files included
The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.
Why It Shows Up
Plugin Check found dotfiles, hidden folders, or operating-system metadata in the plugin ZIP.
Why It Matters
Hidden files can leak development metadata, repository configuration, local tooling state, or unexpected content.
How to Fix
- Exclude dotfiles and local metadata from the release build.
- Build release ZIPs from a clean export or packaging script.
- Keep only files required for the plugin to run, document itself, or provide distributed assets.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Updated | Top Issue |
|---|---|---|---|---|---|---|---|
| #601 | WP-Persian | 35 | 144 | 37 | 6k+ | Unsafe Printing Function | |
| #602 | WP Spam Question Filter | 35 | 63 | 30 | 2k+ | Output Not Escaped | |
| #603 | WP Store Locator | 35 | 25 | 14 | 50k+ | wp function not compatible with requires wp | |
| #604 | WP To Top | 35 | 30 | 29 | 1k+ | Non Prefixed Variable Found | |
| #605 | WP Updates Notifier | 35 | 23 | 4 | 30k+ | Missing Translators Comment | |
| #606 | WP-Yomigana | 35 | 17 | 15 | 2k+ | Output Not Escaped | |
| #607 | WPC Badge Management for WooCommerce | 35 | 28 | 129 | 2k+ | Missing | |
| #608 | WP Views Counter | 35 | 81 | 42 | 2k+ | Output Not Escaped | |
| #609 | WPGraphQL for ACF | 35 | 8 | 18 | 10k+ | Output Not Escaped | |
| #610 | WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress | 35 | 74 | 109 | 10k+ | Recommended | |
| #611 | WPZOOM Portfolio Lite – Filterable Portfolio Plugin | 35 | 42 | 92 | 20k+ | Non Prefixed Variable Found | |
| #612 | Video Popup Block – YouTube, Vimeo, TikTok Lightbox by WPZOOM | 35 | 1 | 5 | 10k+ | trademarked term | |
| #613 | Writesonic | 35 | 14 | 16 | 1k+ | Non Prefixed Variable Found | |
| #614 | Yoco Payments | 35 | 2 | 32 | 10k+ | Recommended | |
| #615 | Ziina | 35 | 8 | 19 | 2k+ | wp redirect wp redirect |
