hidden_files
Hidden files included
The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.
Why It Shows Up
Plugin Check found dotfiles, hidden folders, or operating-system metadata in the plugin ZIP.
Why It Matters
Hidden files can leak development metadata, repository configuration, local tooling state, or unexpected content.
How to Fix
- Exclude dotfiles and local metadata from the release build.
- Build release ZIPs from a clean export or packaging script.
- Keep only files required for the plugin to run, document itself, or provide distributed assets.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Updated | Top Issue |
|---|---|---|---|---|---|---|---|
| #301 | Google Analytics Opt-Out | 35 | 34 | 7 | 5k+ | Output Not Escaped | |
| #302 | Groups | 35 | 1 | 1 | 10k+ | Non Prefixed Interface Found | |
| #303 | Ultimate Addons for Elementor | 35 | 70 | 226 | 2m+ | Non Prefixed Hookname Found | |
| #304 | Heartbeat Control | 35 | 27 | 18 | 80k+ | Missing Arg Domain | |
| #305 | Highlighting Code Block | 35 | 30 | 3 | 10k+ | Output Not Escaped | |
| #306 | HookMeUp for WooCommerce | 35 | 59 | 29 | 10k+ | Output Not Escaped | |
| #307 | Hyve Lite – AI Chatbot, ChatGPT-Powered Conversational Support | 35 | 1 | 40 | 7k+ | Direct Query | |
| #308 | Image Widget | 35 | 165 | 31 | 100k+ | Output Not Escaped | |
| #309 | ImageMagick Engine | 35 | 63 | 29 | 60k+ | Unsafe Printing Function | |
| #310 | Imsanity | 35 | 32 | 29 | 200k+ | Direct Query | |
| #311 | Inspiro Starter Sites – 20+ Free Demo Templates for Gutenberg & Elementor | 35 | 6 | 200 | 10k+ | Non Prefixed Variable Found | |
| #312 | Japanese font for WordPress(Previously: Japanese Font for TinyMCE) | 35 | 11 | 37 | 10k+ | Non Prefixed Variable Found | |
| #313 | JetStyleManager for Gutenberg | 35 | 20 | 64 | 20k+ | Recommended | |
| #314 | JWT Auth – WordPress JSON Web Token Authentication | 35 | 14 | 18 | 6k+ | Output Not Escaped | |
| #315 | Kaya QR Code Generator | 35 | 193 | 40 | 20k+ | Non Singular String Literal Domain | |
| #316 | Kustom Checkout for WooCommerce | 35 | 82 | 497 | 10k+ | Dynamic Hookname Found | |
| #317 | Klarna Order Management for WooCommerce | 35 | 22 | 37 | 10k+ | Non Prefixed Hookname Found | |
| #318 | LiteSpeed Cache | 35 | 286 | 893 | 7m+ | Non Prefixed Variable Found | |
| #319 | Log in with Google | 35 | 5 | 17 | 6k+ | Non Prefixed Variable Found | |
| #320 | LottieFiles | 35 | 8 | 1 | 7k+ | hidden files | |
| #321 | Map Block for Google Maps | 35 | 6 | 5 | 20k+ | hidden files | |
| #322 | Media Library Downloader | 35 | 21 | 16 | 4k+ | Output Not Escaped | |
| #323 | MetaSlider Gallery – Image Gallery, Lightbox Galleries, Modal Windows | 35 | 157 | 49 | 10k+ | Output Not Escaped | |
| #324 | MotoPress Hotel Booking Styles & Templates | 35 | 37 | 19 | 10k+ | block api version too low | |
| #325 | myPOS Checkout | 35 | 151 | 8 | 4k+ | Text Domain Mismatch | |
| #326 | NS Cloner – Site Copier | 35 | 29 | 16 | 7k+ | missing direct file access protection | |
| #327 | Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts | 35 | 41 | 8 | 200k+ | missing direct file access protection | |
| #328 | Newsletters, Email Marketing, SMS and Popups by Omnisend | 35 | 5 | 2 | 100k+ | Non Prefixed Hookname Found | |
| #329 | Email Marketing for WooCommerce by Omnisend | 35 | 15 | 21 | 50k+ | Non Prefixed Function Found | |
| #330 | Order Delivery Date for WooCommerce | 35 | 2,060 | 73 | 10k+ | wp function not compatible with requires wp | |
| #331 | Orderable – Restaurant & Food Ordering System | 35 | 12 | 324 | 5k+ | Non Prefixed Variable Found | |
| #332 | OSM Map Widget for Elementor | 35 | 183 | 14 | 9k+ | Text Domain Mismatch | |
| #333 | Page Visits Counter – Lite | 35 | 28 | 35 | 5k+ | Output Not Escaped | |
| #334 | Pearl – Header Builder | 35 | 7 | 283 | 5k+ | Non Prefixed Variable Found | |
| #335 | Pochipp | 35 | 27 | 102 | 20k+ | Non Prefixed Variable Found | |
| #336 | Pods Alternative Cache | 35 | 1 | 0 | 5k+ | hidden files | |
| #337 | PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) | 35 | 6 | 56 | 80k+ | Post Not In exclude | |
| #338 | Print, PDF, Email by PrintFriendly | 35 | 220 | 29 | 20k+ | Unsafe Printing Function | |
| #339 | Product Blocks for WooCommerce | 35 | 4 | 3 | 4k+ | slow db query tax query | |
| #340 | Product Input Fields for WooCommerce | 35 | 18 | 84 | 4k+ | Non Prefixed Function Found | |
| #341 | Ninjalytics: Sales Reports & Order Export for WooCommerce and EDD | 35 | 15 | 30 | 6k+ | Non Prefixed Variable Found | |
| #342 | Really Simple Google Tag Manager (GTM) | 35 | 115 | 15 | 4k+ | Text Domain Mismatch | |
| #343 | Remove Dashboard Access | 35 | 16 | 23 | 30k+ | wp function not compatible with requires wp | |
| #344 | Reveal IDs | 35 | 23 | 13 | 40k+ | Output Not Escaped | |
| #345 | RS CSV Importer Media Add-On | 35 | 4 | 1 | 4k+ | hidden files | |
| #346 | s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions | 35 | 24 | 5 | 8k+ | missing direct file access protection | |
| #347 | Scripts To Footer | 35 | 13 | 2 | 7k+ | Text Domain Mismatch | |
| #348 | FlexTable – Data Table Sync with Google Sheets | 35 | 20 | 78 | 4k+ | Direct Query | |
| #349 | Shopkeeper Extender | 35 | 14 | 26 | 5k+ | Missing Version | |
| #350 | Shortcake (Shortcode UI) | 35 | 9 | 39 | 10k+ | Missing Unslash |
