hidden_files
Hidden files included
The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.
Why It Shows Up
Plugin Check found dotfiles, hidden folders, or operating-system metadata in the plugin ZIP.
Why It Matters
Hidden files can leak development metadata, repository configuration, local tooling state, or unexpected content.
How to Fix
- Exclude dotfiles and local metadata from the release build.
- Build release ZIPs from a clean export or packaging script.
- Keep only files required for the plugin to run, document itself, or provide distributed assets.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #901 | WP Post Series | 35 | 10 | 9 | 600 | Non-prefixed global variable | ||
| #902 | WP Site Verification tool | 35 | 34 | 37 | 1k+ | Non-prefixed global variable | ||
| #903 | WP Spam Question Filter | 35 | 63 | 30 | 2k+ | Output is not escaped | ||
| #904 | Subresource Integrity (SRI) Manager | 35 | 26 | 94 | 900 | Request data is not unslashed | ||
| #905 | WP Store Locator | 35 | 26 | 14 | 50k+ | wp function not compatible with requires wp | ||
| #906 | WP To Top | 35 | 30 | 29 | 1k+ | Non-prefixed global variable | ||
| #907 | WP Updates Notifier | 35 | 23 | 4 | 30k+ | Missing Translators Comment | ||
| #908 | WP-Yomigana | 35 | 17 | 15 | 2k+ | Output is not escaped | ||
| #909 | WPC Badge Management for WooCommerce | 35 | 13 | 81 | 2k+ | Missing nonce verification | ||
| #910 | WP Views Counter | 35 | 81 | 42 | 2k+ | Output is not escaped | ||
| #911 | WPGraphQL for ACF | 35 | 6 | 18 | 10k+ | Output is not escaped | ||
| #912 | WPGraphQL IDE | 35 | 38 | 18 | 1k+ | Text Domain Mismatch | ||
| #913 | Memory Meter | 35 | 2 | 3 | 600 | Request data is not unslashed | ||
| #914 | WPZOOM Beaver Builder Templates | 35 | 3 | 5 | 900 | trademarked term | ||
| #915 | WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress | 35 | 74 | 109 | 10k+ | Nonce verification recommended | ||
| #916 | WPZOOM Portfolio Lite – Filterable Portfolio Plugin | 35 | 42 | 92 | 20k+ | Non-prefixed global variable | ||
| #917 | Video Popup Block – YouTube, Vimeo, TikTok Lightbox by WPZOOM | 35 | 1 | 5 | 10k+ | trademarked term | ||
| #918 | Writesonic | 35 | 14 | 16 | 1k+ | Non-prefixed global variable | ||
| #919 | WSB HUB3 | 35 | 36 | 109 | 1k+ | Missing nonce verification | ||
| #920 | XT Event Widget for Social Events | 35 | 3 | 55 | 900 | Non-prefixed global variable | ||
| #921 | Comment Experience by Progress Planner | 35 | 135 | 8 | 500 | Text Domain Mismatch | ||
| #922 | Yoco Payments | 35 | 2 | 32 | 10k+ | Nonce verification recommended | ||
| #923 | ZI Hide Featured Image | 35 | 8 | 3 | 700 | Hidden files included | ||
| #924 | Ziina | 35 | 10 | 25 | 2k+ | Input is not sanitized |
