PluginScore

hidden_files

Hidden files included

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical weight

Why It Shows Up

Plugin Check found dotfiles, hidden folders, or operating-system metadata in the plugin ZIP.

Why It Matters

Hidden files can leak development metadata, repository configuration, local tooling state, or unexpected content.

How to Fix

  • Exclude dotfiles and local metadata from the release build.
  • Build release ZIPs from a clean export or packaging script.
  • Keep only files required for the plugin to run, document itself, or provide distributed assets.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#51Smart Grid-Layout Design for Contact Form 7211,12673410k+Output Not Escaped
#52Comet Cache2185724520k+Output Not Escaped
#53Cost Calculator Builder2132276530k+Non Prefixed Variable Found
#54Free Downloads WooCommerce214303594k+Output Not Escaped
#55Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output Not Escaped
#56Envo Extra2187860020k+Text Domain Mismatch
#57eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams211864379k+Non Prefixed Variable Found
#58EventPrime – Events Calendar, Bookings and Tickets218724,2977k+Non Prefixed Variable Found
#59Feeds for YouTube (YouTube video, channel, and gallery plugin)21558978100k+Output Not Escaped
#60FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#61Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21521,959300k+Non Prefixed Variable Found
#62Campaign Monitor for WordPress213864612k+Non Prefixed Variable Found
#63If-So Dynamic Content – Elementor & All Page Builders Personalization218897257k+Unsafe Printing Function
#64Imagify: Optimize Images for Top Speed (Compress & Convert to WebP/AVIF)214208611m+Non Prefixed Variable Found
#65JCH Optimize219531334k+Output Not Escaped
#66LA-Studio Element Kit for Elementor218,3901,96410k+Text Domain Mismatch
#67MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder211,1333,0112k+Non Prefixed Variable Found
#68Mapster WP Maps213,4402,9033k+Text Domain Mismatch
#69Modular DS: Monitor, update, and backup multiple websites211618140k+Exception Not Escaped
#70MotoPress Hotel Booking213,0611,03710k+Text Domain Mismatch
#71OneLogin SAML SSO215083307k+wp function not compatible with requires wp
#72Packeta218023338k+Exception Not Escaped
#73Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1732,9839k+Non Prefixed Variable Found
#74Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9185,06510k+Non Prefixed Hookname Found
#75User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor216961,48350k+Recommended
#76PublishPress Planner – Editorial Calendar, Marketing Content, Kanban Board216038906k+Output Not Escaped
#77Razorpay Quick Payments21399633k+Exception Not Escaped
#78Five Star Restaurant Reservations – WordPress Booking Plugin211,0991,14710k+Output Not Escaped
#79Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non Prefixed Variable Found
#80Seamless Donations is Sunset216005142k+Text Domain Mismatch
#81Smart Forms – when you need more than just a contact form217765745k+Output Not Escaped
#82Accept Stripe Payments2137388220k+Missing
#83ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin2119066030k+Non Prefixed Variable Found
#84Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125542520k+Non Prefixed Hookname Found
#85Buckaroo Woocommerce Payments Plugin215633262k+Exception Not Escaped
#86WebP Express21160427300k+Non Prefixed Variable Found
#87Wise Chat214705065k+Output Not Escaped
#88Paysera Payment Gateway for WooCommerce211,8661957k+Exception Not Escaped
#89Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39530k+Non Prefixed Variable Found
#90Pay For Post with WooCommerce219601,4741k+Non Prefixed Variable Found
#91PPOM – Product Addons & Custom Fields for WooCommerce213361,32520k+Non Prefixed Variable Found
#92Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output Not Escaped
#93WP-Lister Lite for eBay216,6975,1292k+Output Not Escaped
#94WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#95wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,8141,46170k+Output Not Escaped
#96Premium Packages – Sell Digital Products Securely212,7652,4443k+Output Not Escaped
#97WPScan – WordPress Security Scanner215272658k+Text Domain Mismatch
#98Advanced Ads – Ad Manager & AdSense22578734100k+Non Prefixed Variable Found
#99Advanced Classifieds & Directory Pro221,2293,5112k+Non Prefixed Variable Found
#100Ajax Load More – Infinite Scroll, Load More, & Lazy Load2264159540k+Unsafe Printing Function