PluginScore

hidden_files

Hidden files included

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical weight

Why It Shows Up

Plugin Check found dotfiles, hidden folders, or operating-system metadata in the plugin ZIP.

Why It Matters

Hidden files can leak development metadata, repository configuration, local tooling state, or unexpected content.

How to Fix

  • Exclude dotfiles and local metadata from the release build.
  • Build release ZIPs from a clean export or packaging script.
  • Keep only files required for the plugin to run, document itself, or provide distributed assets.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1202,9139k+Non-prefixed global variable
#102Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9535,29710k+Non-prefixed hook name
#103User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor217031,46340k+Missing Translators Comment
#104PublishPress Planner – Editorial Calendar, Marketing Content, Kanban Board216038906k+Output is not escaped
#105Quill Forms | Conversational Multi Step Forms, Surveys & quizzes214013703k+Text Domain Mismatch
#106Razorpay for Gravity Forms2141147600Exception output is not escaped
#107Razorpay Quick Payments21399632k+Exception output is not escaped
#108Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#109Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non-prefixed global variable
#110Seamless Donations is Sunset216005142k+Text Domain Mismatch
#111SeatReg213121,637400Missing nonce verification
#112Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#113Accept Stripe Payments2137389220k+Missing nonce verification
#114ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin2119066030k+Non-prefixed global variable
#115Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125643120k+Non-prefixed hook name
#116Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin211,0742,97840k+Direct Query
#117URL Shortify – Simple and Easy URL Shortener211,5072,66510k+Non-prefixed global variable
#118Buckaroo Woocommerce Payments Plugin216383212k+Exception output is not escaped
#119BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages216681,569800Non-prefixed global variable
#120WebP Express21160427300k+Non-prefixed global variable
#121Wise Chat214705065k+Output is not escaped
#122Paysera Payment Gateway for WooCommerce211,8681967k+Exception output is not escaped
#123Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39330k+Non-prefixed global variable
#124Pay For Post with WooCommerce219581,4771k+Non-prefixed global variable
#125PPOM – Product Addons & Custom Fields for WooCommerce213361,31920k+Non-prefixed global variable
#126Wordfence Security – Firewall, Malware Scan, and Login Security211,8183,2365m+Output is not escaped
#127WP-Lister Lite for eBay216,7015,1322k+Output is not escaped
#128WP phpMyAdmin214,5286,43540k+Missing Arg Domain
#129wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,8121,43270k+Output is not escaped
#130WPScan – WordPress Security Scanner215272658k+Text Domain Mismatch
#131WebTotem Security211,110213800Text Domain Mismatch
#13212 Step Meeting List22156593900Non-prefixed global variable
#133Advanced Classifieds & Directory Pro221,2293,5122k+Non-prefixed global variable
#134Ajax Load More – Infinite Scroll, Load More, & Lazy Load2264159230k+Unsafe printing function
#135All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos229122,88520k+Non-prefixed global variable
#136Backup Bolt225801,313800Non-prefixed global variable
#137Better WordPress Minify224124847k+Non Singular String Literal Domain
#138Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms2249329510k+Text Domain Mismatch
#139CartFlows – Funnel Builder & Checkout Plugin for WooCommerce22460656200k+Text Domain Mismatch
#140Cleanup Action Scheduler225451,3061k+Non-prefixed global variable
#141Code Profiler – WordPress Performance Profiling and Debugging Made Easy222654008k+Non-prefixed global variable
#142Accept PayPal Payments using Contact Form 722359127600Text Domain Mismatch
#143Passster – Password Protect Pages and Content225391,42210k+Non-prefixed global variable
#144Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates222,3924,2906k+Non-prefixed global variable
#145Directorist: AI-Powered Business Directory, Listings & Classified Ads225602,20220k+Non-prefixed global variable
#146E2Pdf – Export Pdf Tool for WordPress221,08184710k+Unsafe printing function
#147Ebook Store224101,054700Non-prefixed global variable
#148Estatik Real Estate Plugin223,08432510k+Text Domain Mismatch
#149Events Manager – Calendar, Bookings, Tickets, and more!224,7165,69070k+Output is not escaped
#150File Manager Pro – Filester22566391100k+Request data is not unslashed