PluginScore

hidden_files

Hidden files included

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical weight

Why It Shows Up

Plugin Check found dotfiles, hidden folders, or operating-system metadata in the plugin ZIP.

Why It Matters

Hidden files can leak development metadata, repository configuration, local tooling state, or unexpected content.

How to Fix

  • Exclude dotfiles and local metadata from the release build.
  • Build release ZIPs from a clean export or packaging script.
  • Keep only files required for the plugin to run, document itself, or provide distributed assets.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#251Laposta Signup Basic28275662k+Output is not escaped
#252Loginfy – Custom Login Page Customizer283383982k+Output is not escaped
#253Podcast Importer SecondLine283561694k+Text Domain Mismatch
#254Redis Object Cache28151103400k+Exception output is not escaped
#255Brilliant Web-to-Lead for Salesforce282472442k+Text Domain Mismatch
#256Praison AI SEO286433061k+Text Domain Mismatch
#257Transliterator – Multilingual and Multi-script Text Conversion283053203k+Output is not escaped
#258Connect Matomo – Analytics Dashboard for WordPress2810010260k+Missing Translators Comment
#259AI Copilot – Content Generator291661611k+wp function not compatible with requires wp
#260Plugin BlueX for WooCommerce294312162k+Text Domain Mismatch
#261CloudSecure WP Security2974350100k+Request data is not unslashed
#262Document Gallery29183988k+Output is not escaped
#263Kits, Templates and Patterns29380915k+Text Domain Mismatch
#264PhastPress29955210k+Exception output is not escaped
#265Recipe Card Blocks Lite2915140810k+Non-prefixed global variable
#266Security Ninja – WordPress Security & Firewall291493477k+Direct Query
#267Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce291462465k+Unsafe printing function
#268Product Carousel Slider & Grid Ultimate for WooCommerce297191226k+Text Domain Mismatch
#269Woostify Sites Library2922919820k+Text Domain Mismatch
#270WP Subscribe2979798k+Non-prefixed class
#271ApplyOnline – Application Form Builder and Manager303542602k+Output is not escaped
#272Contact Form 7 – PayPal & Stripe Add-on303852338k+Unsafe printing function
#273Kargo Takip, Kargo SMS, İlçe Mahalle Sözleşme by Hezarfen30692762k+Non-prefixed global variable
#274Laposta Signup Embed3088191k+Exception output is not escaped
#275Mailrelay303181702k+Text Domain Mismatch
#276Dropify301302522k+Nonce verification recommended
#277zahls.ch Credit Cards, PostFinance and TWINT for WooCommerce301212653k+Non-prefixed global variable
#278ActiveCampaign – The autonomous marketing platform312359840k+Output is not escaped
#279All-in-one contact buttons – WPSHARE247311081134k+Non-prefixed global variable
#280Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter315719650k+Nonce verification recommended
#281Mailgun for WordPress311447880k+Unsafe printing function
#282reCAPTCHA in WP comments form31264608k+Output is not escaped
#283SmartBill Facturare si Gestiune314211645k+Text Domain Mismatch
#284Staatic – Static Site Generator for WordPress314201952k+SQL query is not prepared
#285WPGatsby31125553k+Text Domain Mismatch
#286WP Simple Booking Calendar3133738120k+Output is not escaped
#287Admin Menu Editor32159233300k+Non-prefixed global variable
#288BP Classic326642166k+Unsafe printing function
#289OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.3221164300k+Output is not escaped
#290Post and Page Builder by BoldGrid – Visual Drag and Drop Editor3234825850k+Output is not escaped
#291Simple Ajax Chat – Add a Fast, Secure Chat Box321082662k+Output is not escaped
#292Subscribe2 – Form, Email Subscribers & Newsletters323241010k+Direct Query
#293WP fail2ban – Advanced Security327515360k+Dynamic hook name
#294Arconix Shortcodes331291074k+Output is not escaped
#295CartPops – High Converting Add To Cart Popup For WooCommerce33631884k+Non-prefixed global variable
#296Conekta Payment Gateway33240612k+Text Domain Mismatch
#297GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law3348370300k+Non-prefixed global variable
#298WPZOOM Social Feed Widget & Block3331027860k+Unsafe printing function
#299jQuery Manager for WordPress3386247k+Output is not escaped
#300Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid332741063k+Text Domain Mismatch