hidden_files
Hidden files included
The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.
Why It Shows Up
Plugin Check found dotfiles, hidden folders, or operating-system metadata in the plugin ZIP.
Why It Matters
Hidden files can leak development metadata, repository configuration, local tooling state, or unexpected content.
How to Fix
- Exclude dotfiles and local metadata from the release build.
- Build release ZIPs from a clean export or packaging script.
- Keep only files required for the plugin to run, document itself, or provide distributed assets.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #851 | Sola Payment Gateway for WooCommerce | 35 | 107 | 116 | 700 | Missing Translators Comment | ||
| #852 | WP Courseware for WooCommerce | 35 | 55 | 49 | 1k+ | Text Domain Mismatch | ||
| #853 | Custom Payment Gateways for WooCommerce | 35 | 202 | 31 | 3k+ | Non Singular String Literal Domain | ||
| #854 | Require Login for WooCommerce | 35 | 10 | 6 | 2k+ | wp function not compatible with requires wp | ||
| #855 | Save and Share Cart for WooCommerce | 35 | 125 | 51 | 600 | Text Domain Mismatch | ||
| #856 | Title Limit for WooCommerce | 35 | 41 | 12 | 4k+ | Output is not escaped | ||
| #857 | Abandoned Cart Lite for WooCommerce | 35 | 84 | 161 | 20k+ | Non-prefixed global variable | ||
| #858 | Data Exchange for WooCommerce and 1C:Enterprise/1С:Предприятие | 35 | 1 | 2 | 1k+ | Hidden files included | ||
| #859 | Call for Price for WooCommerce | 35 | 5 | 37 | 8k+ | Non-prefixed hook name | ||
| #860 | Checkout Terms Conditions Popup for WooCommerce | 35 | 76 | 30 | 1k+ | Output is not escaped | ||
| #861 | Conversion Tracking for WooCommerce | 35 | 74 | 61 | 20k+ | Output is not escaped | ||
| #862 | WooCommerce Gateway Affirm | 35 | 2 | 58 | 6k+ | Nonce verification recommended | ||
| #863 | Custom Payment Gateway for WooCommerce | 35 | 11 | 12 | 8k+ | Missing nonce verification | ||
| #864 | Invoices for WooCommerce | 35 | 55 | 168 | 10k+ | Non-prefixed global variable | ||
| #865 | PDF Invoices & Packing Slips for WooCommerce | 35 | 35 | 965 | 300k+ | Non-prefixed hook name | ||
| #866 | Quaderno: Global Tax & Invoicing Automation for WooCommerce | 35 | 4 | 70 | 500 | Missing nonce verification | ||
| #867 | Stock Manager for WooCommerce | 35 | 5 | 45 | 20k+ | Non-prefixed global variable | ||
| #868 | Wholesale Suite – B2B, Dynamic Pricing & WooCommerce Wholesale Prices | 35 | 22 | 52 | 20k+ | Direct Query | ||
| #869 | Wooplatnica | 35 | 27 | 24 | 400 | Non-prefixed class | ||
| #870 | BulkGate SMS Plugin for WooCommerce | 35 | 33 | 32 | 1k+ | Output is not escaped | ||
| #871 | Access Areas for WordPress | 35 | 17 | 95 | 400 | Direct Query | ||
| #872 | WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel | 35 | 41 | 10 | 100k+ | wp function not compatible with requires wp | ||
| #873 | WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets | 35 | 35 | 20 | 100k+ | Missing direct file access protection | ||
| #874 | WP API Menus | 35 | 12 | 9 | 2k+ | wp function not compatible with requires wp | ||
| #875 | WP Associate Post R2 | 35 | 259 | 86 | 3k+ | Output is not escaped | ||
| #876 | Bitly's WordPress Plugin | 35 | 6 | 23 | 2k+ | Non-prefixed function | ||
| #877 | Category Dropdown by GCS Design | 35 | 93 | 52 | 1k+ | Output is not escaped | ||
| #878 | WP Change Email Sender | 35 | 5 | 13 | 10k+ | Non-prefixed namespace | ||
| #879 | WP Compiler | 35 | 33 | 20 | 1k+ | Output is not escaped | ||
| #880 | WP Content Copy Protection | 35 | 76 | 11 | 10k+ | Text Domain Mismatch | ||
| #881 | Countdown Block | 35 | 5 | 2 | 1k+ | Hidden files included | ||
| #882 | Custom Body Class | 35 | 39 | 101 | 10k+ | Non-prefixed global variable | ||
| #883 | WP Dark Mode – Improve Accessibility with AI Powered Dark Theme | 35 | 20 | 160 | 20k+ | Non-prefixed global variable | ||
| #884 | WP Duplicate Page | 35 | 44 | 50 | 60k+ | Text Domain Mismatch | ||
| #885 | WP Flexslider | 35 | 15 | 7 | 600 | Unsafe printing function | ||
| #886 | WP GPX Maps | 35 | 27 | 100 | 4k+ | Non-prefixed global variable | ||
| #887 | WPGraphQL | 35 | 10 | 86 | 30k+ | Non-prefixed hook name | ||
| #888 | WP Hydra | 35 | 10 | 18 | 1k+ | Input is not sanitized | ||
| #889 | WP-KaTeX | 35 | 14 | 8 | 800 | Missing direct file access protection | ||
| #890 | WP-LESS | 35 | 16 | 8 | 10k+ | Missing direct file access protection | ||
| #891 | WP Login and Logout Redirect | 35 | 16 | 6 | 6k+ | Text Domain Mismatch | ||
| #892 | WP-Markdown | 35 | 31 | 39 | 400 | Output is not escaped | ||
| #893 | WP Menu Custom Fields | 35 | 11 | 6 | 700 | Hidden files included | ||
| #894 | WP Instant Feeds | 35 | 19 | 12 | 6k+ | Output is not escaped | ||
| #895 | Disable Bulk Smush Limit of Smush Image Optimization | 35 | 3 | 2 | 3k+ | Hidden files included | ||
| #896 | WP Open Street Map | 35 | 59 | 111 | 3k+ | Input is not validated | ||
| #897 | Parse.ly | 35 | 15 | 44 | 1k+ | Non-prefixed hook name | ||
| #898 | WP-Persian | 35 | 144 | 37 | 7k+ | Unsafe printing function | ||
| #899 | WP PGP Encrypted Emails | 35 | 63 | 39 | 400 | Output is not escaped | ||
| #900 | WP Post Nav | 35 | 73 | 242 | 400 | Non-prefixed global variable |
