PluginScore

hidden_files

Hidden files included

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical weight

Why It Shows Up

Plugin Check found dotfiles, hidden folders, or operating-system metadata in the plugin ZIP.

Why It Matters

Hidden files can leak development metadata, repository configuration, local tooling state, or unexpected content.

How to Fix

  • Exclude dotfiles and local metadata from the release build.
  • Build release ZIPs from a clean export or packaging script.
  • Keep only files required for the plugin to run, document itself, or provide distributed assets.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#101All-in-One Video Gallery229112,89220k+Non Prefixed Variable Found
#102Booking for Appointments and Events Calendar – Amelia221,48948090k+Exception Not Escaped
#103Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots221,6042,01910k+Direct Query
#104Better WordPress Minify224124848k+Non Singular String Literal Domain
#105Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms2249329510k+Text Domain Mismatch
#106Divi Carousel Lite – 17+ Carousel Module229671,27510k+Non Prefixed Variable Found
#107Cleanup Action Scheduler225451,3061k+Non Prefixed Variable Found
#108Code Profiler – WordPress Performance Profiling and Debugging Made Easy222654008k+Non Prefixed Variable Found
#109Passster – Password Protect Pages and Content225391,41910k+Non Prefixed Variable Found
#110Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 500+ Patterns, 57 Blocks & Templates222,1674,1757k+Non Prefixed Variable Found
#111SysBasics Customize My Account for WooCommerce – Dashboard, Endpoints, Avatar & Menu Manager227038418k+Non Prefixed Variable Found
#112Directorist: AI-Powered Business Directory, Listings & Classified Ads224432,12920k+Non Prefixed Variable Found
#113E2Pdf – Export Pdf Tool for WordPress221,07583610k+Unsafe Printing Function
#114Estatik Real Estate Plugin223,04932510k+Text Domain Mismatch
#115Events Manager – Calendar, Bookings, Tickets, and more!224,7225,62170k+Output Not Escaped
#116File Manager Pro – Filester22565391100k+Missing Unslash
#117FireBox Popups – Increase Sales and Grow Your Email List221538127k+Non Prefixed Variable Found
#118Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder22409236700k+Text Domain Mismatch
#119Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar221,3211,3713k+Non Prefixed Variable Found
#120Five Star Restaurant Menu and Food Ordering227526095k+Output Not Escaped
#121Anti-Malware Security and Brute-Force Firewall22544965100k+Output Not Escaped
#122Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms221,03772220k+Unsafe Printing Function
#123IMPress for IDX Broker221,0856367k+Text Domain Mismatch
#124InfiniteWP Client222,2861,812200k+Exception Not Escaped
#125Import WP – Export and Import CSV and XML files to WordPress225803304k+Exception Not Escaped
#126MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6192,45310k+Output Not Escaped
#127Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider22207323500k+Non Prefixed Variable Found
#128Modula Image Gallery – Photo Grid & Video Gallery22474436100k+Text Domain Mismatch
#129Newsletters222,9682,2482k+Text Domain Mismatch
#130NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2652,065100k+Non Prefixed Variable Found
#131NinjaScanner – Virus & Malware scan2259655130k+Non Prefixed Variable Found
#132WP OAuth Server (OAuth Authentication)221893473k+Non Prefixed Function Found
#133oik224891802k+Non Singular String Literal Domain
#134Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#135Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non Prefixed Variable Found
#136Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non Prefixed Variable Found
#137Pronamic Pay222581,0773k+Non Prefixed Variable Found
#138PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe Printing Function
#139Quick Contact Form222606231k+Non Prefixed Function Found
#140RabbitLoader Cache: Optimize your Website for Speed222411632k+Output Not Escaped
#141Salon Booking System – Free Version226506193k+missing direct file access protection
#142ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044799300k+Non Prefixed Variable Found
#143Simple Job Board226341,35510k+Non Prefixed Variable Found
#144SNS Count Cache229181208k+Non Singular String Literal Domain
#145SSL Zen — SSL Certificate Installer & HTTPS Redirects227791,57510k+Non Prefixed Variable Found
#146Stylish Price List – Price Table Builder & QR Code Restaurant Menu226746783k+Output Not Escaped
#147SVG Flags – Beautiful Scalable Flags For All Countries!227551,2512k+Non Prefixed Variable Found
#14810Web Booster – Website speed optimization, Cache & Page Speed optimizer2251360180k+Non Prefixed Variable Found
#149The Moneytizer227512711k+Text Domain Mismatch
#150Customize Feeds for Twitter22921714k+Non Prefixed Variable Found