PluginScore

hidden_files

Hidden files included

The plugin package contains hidden files or directories that usually should not ship in a WordPress.org release.

critical weight

Why It Shows Up

Plugin Check found dotfiles, hidden folders, or operating-system metadata in the plugin ZIP.

Why It Matters

Hidden files can leak development metadata, repository configuration, local tooling state, or unexpected content.

How to Fix

  • Exclude dotfiles and local metadata from the release build.
  • Build release ZIPs from a clean export or packaging script.
  • Keep only files required for the plugin to run, document itself, or provide distributed assets.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#351Change Last Modified Date35713k+missing direct file access protection
#352Change Username357104k+Direct Query
#353Payment Gateway Based Fees and Discounts for WooCommerce3525911130k+Text Domain Mismatch
#354Child Pages Shortcode35565k+Non Prefixed Hookname Found
#355CiviCRM Admin Utilities3519871k+Non Prefixed Hookname Found
#356Cloudflare352785200k+Non Prefixed Namespace Found
#357Flexible SSL for CloudFlare3596100k+Output Not Escaped
#358Code Block Pro – Beautiful Syntax Highlighting357410k+badly named files
#359Conditional Widgets3567337k+Output Not Escaped
#360Kit (formerly ConvertKit) for WooCommerce35213184k+Text Domain Mismatch
#361EasyTest – Simplify A/B Testing3597620k+Non Prefixed Variable Found
#362Cookie Information – Cookie Banner with Consent Mode v235185282k+Output Not Escaped
#363Cookie-Script.com356710k+Non Prefixed Class Found
#364Core Framework35706210k+Text Domain Mismatch
#365Counter live visitors for WooCommerce351893910k+Echo Found
#366Create Block Theme3543520k+unlink unlink
#367CrowdSec351301192k+Output Not Escaped
#368Currency per Product for WooCommerce3515162k+Non Prefixed Variable Found
#369Custom 404 Pro3550277k+wp function not compatible with requires wp
#370Custom CSS and JavaScript35389110k+Input Not Sanitized
#371Wbcom Designs – Custom Font Uploader353401233k+Text Domain Mismatch
#372Custom links in Elementor Image Carousel35825k+Text Domain Mismatch
#373Custom Order Numbers for WooCommerce3555420k+Non Prefixed Hookname Found
#374Custom Order Status for WooCommerce35206010k+Non Prefixed Hookname Found
#375Custom Post Type Maker35240866k+Unsafe Printing Function
#376Custom Post Type Permalinks3584200k+register setting Missing
#377Custom Price for WooCommerce35393k+Non Prefixed Variable Found
#378Customizer Backup & Reset358107k+Output Not Escaped
#379DesignSetGo35203134k+Non Prefixed Variable Found
#380Nexi Checkout35453113k+Dynamic Hookname Found
#381Disable and Remove Google Fonts | GDPR & DSGVO friendly35218100k+Missing Translators Comment
#382Disk Usage Sunburst3530349k+Output Not Escaped
#383Potent Donations for WooCommerce3514252k+Missing
#384DOOFINDER Search and Discovery for WP & WooCommerce351511203k+Text Domain Mismatch
#385Duplica – Duplicate Posts, Pages, Custom Posts or Users3514312k+Non Prefixed Variable Found
#386DynamicTags35116162k+Text Domain Mismatch
#387Easy Image Gallery352115k+wp function not compatible with requires wp
#388Easy SwipeBox35157102k+Non Singular String Literal Domain
#389Easy Watermark35825330k+Non Prefixed Variable Found
#390Editorial Calendar3512716020k+Output Not Escaped
#391Gutenberg Blocks Library & Toolkit – Editor Plus3527116k+Text Domain Mismatch
#392Ele Conditions for Elementor35274k+Missing Unslash
#393Elfsight Blocks for Elementor — 80+ Widgets3544432k+Text Domain Mismatch
#394Embed PDF Viewer351220k+Non Prefixed Variable Found
#395Embed Privacy35104110k+slow db query meta key
#396WP Rocket | Simple LoadCSS Preloader357164k+Non Prefixed Variable Found
#397Enlighter – Customizable Syntax Highlighter35501010k+Output Not Escaped
#398Equivalent Mobile Redirect3529172k+Text Domain Mismatch
#399EWWW Image Optimizer352257291m+Direct Query
#400Expire User Passwords353153k+Recommended