PluginScore

hidden_files

Hidden files included

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical weight

Why It Shows Up

Plugin Check found dotfiles, hidden folders, or operating-system metadata in the plugin ZIP.

Why It Matters

Hidden files can leak development metadata, repository configuration, local tooling state, or unexpected content.

How to Fix

  • Exclude dotfiles and local metadata from the release build.
  • Build release ZIPs from a clean export or packaging script.
  • Keep only files required for the plugin to run, document itself, or provide distributed assets.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#751Scripts To Footer351327k+Text Domain Mismatch
#752Scroll Styler355221900Output is not escaped
#753Search Attributes for WooCommerce35263600Text Domain Mismatch
#754Search Console35622k+Missing Arg Domain
#755Security.txt Manager3510500Hidden files included
#756SEO Data Transporter35752k+Missing direct file access protection
#757SEUR Oficial35252981k+Non-prefixed global variable
#758ShareThis Follow Buttons3519400Non-prefixed global variable
#759ShareThis Reaction Buttons3517600Non-prefixed global variable
#760FlexTable – Data Table Sync with Google Sheets3520784k+Direct Query
#761Shop Page WP3568232k+Unsafe printing function
#762Shopkeeper Extender3514265k+Missing Version
#763ShopMagic Abandoned Cart Recovery for WooCommerce3516232k+Non-prefixed global variable
#764ShopMagic for Google Sheets3589400Non-prefixed global variable
#765ShopMagic – Twilio SMS35210800Non-prefixed global variable
#766Shortcake (Shortcode UI)3593910k+Request data is not unslashed
#767Show/Hide Content at Set Time3517710k+date date
#768Simple CAPTCHA with Cloudflare Turnstile3582148100k+Output is not escaped
#769Simple Definition List Blocks351121k+Hidden files included
#770Simple Export Import for ACF Data3519641k+Request data is not unslashed
#771Simple Header Footer HTML353053k+Output is not escaped
#772Simple History – Track, Log, and Audit WordPress Changes3532122300k+Non-prefixed global variable
#773Simple Image Sizes35537560k+Unsafe printing function
#774Simple Map3510110k+Output is not escaped
#775Simple Popup Block35141500Missing direct file access protection
#776Simple Post Type Permalinks351619k+date date
#777Simple Website Redirect35336k+Discouraged text-domain loading
#778Simple Yearly Archive35102366k+Unsafe printing function
#779Simple YouTube Responsive357583k+wp function not compatible with requires wp
#780Simple Analytics3524201k+Output is not escaped
#781SimpleTOC – Table of Contents Block3510010k+Setting is missing a sanitization callback
#782Sitekit3512283k+Output is not escaped
#783Sky Login Redirect357242k+Non-prefixed hook name
#784Slick Slider353692k+Output is not escaped
#785Slope Widgets35549500Non-prefixed global variable
#786Smart Auto Upload Images – Import External Images35215k+Hidden files included
#787SMNTCS Custom Logo Link354813k+badly named files
#788SMNTCS Deactivate image compression35611k+Hidden files included
#789SMNTCS Disable REST API User Endpoints35807k+Hidden files included
#790SMNTCS Google Webmaster Tools35806k+Hidden files included
#791SMNTCS Quantity Increment Buttons for WooCommerce351522k+Hidden files included
#792WPZOOM Connect: Social Icons Widget, Share Buttons & Click to Chat35283190k+Input is not sanitized
#793Quiz Maker, Poll Maker & Survey Maker by Opinion Stage3542326k+Output is not escaped
#794Social Sharing Plugin – Social Warfare351714320k+Non-prefixed class
#795Sold Out Badge for WooCommerce35548k+Output is not escaped
#796Solid Performance – Your No-Code Caching, Performance, & Page Speed Solution3575614k+Exception output is not escaped
#797Spacious Toolkit354894700Non-prefixed global variable
#798Ray3532500Hidden files included
#799Speedy Page Redirect356101k+Output is not escaped
#800Sprout Invoices – Client Invoicing & Estimates35401,8001k+Non-prefixed hook name