library_core_files
library core files
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Why It Shows Up
The finding matches a WordPress coding-standard or Plugin Check rule for code clarity, compatibility, packaging, or API usage.
Why It Matters
Maintainability findings reduce confidence that the plugin will behave consistently across hosts, WordPress versions, and other plugins.
How to Fix
- Find the exact file and line in the raw scan output.
- Prefer WordPress APIs and standard coding patterns over custom or legacy behavior.
- If the warning is from bundled third-party code, document that separately and avoid modifying vendor files unless necessary.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #451 | MainWP Key Maker | 62 | 3 | 35 | 4k+ | Input is not sanitized | ||
| #452 | Classic Editor and Classic Widgets | 63 | 18 | 41 | 20k+ | Nonce verification recommended | ||
| #453 | Mantenimiento web | 63 | 49 | 15 | 20k+ | Text Domain Mismatch | ||
| #454 | Admin CSS MU | 64 | 30 | 582 | 10k+ | Non-prefixed global variable | ||
| #455 | WP Search with Algolia | 64 | 26 | 16 | 7k+ | Exception output is not escaped | ||
| #456 | QR Code Composer – Automatic QR Code Generator | 65 | 33 | 2 | 3k+ | Output is not escaped | ||
| #457 | Web and WooCommerce Addons for WPBakery Builder | 65 | 497 | 123 | 1k+ | Text Domain Mismatch | ||
| #458 | USPS Simple Shipping for Woocommerce | 65 | 20 | 11 | 8k+ | Exception output is not escaped | ||
| #459 | Debug Log Manager – Conveniently Monitor and Inspect Errors | 66 | 33 | 44 | 10k+ | Input is not validated | ||
| #460 | Product Size Chart For WooCommerce | 66 | 9 | 22 | 6k+ | Non-prefixed hook name | ||
| #461 | GravityExport Lite for Gravity Forms | 67 | 48 | 14 | 10k+ | Output is not escaped | ||
| #462 | Meks Audio Player | 67 | 25 | 7 | 1k+ | Output is not escaped | ||
| #463 | wp-Typography | 67 | 91 | 33 | 20k+ | Missing direct file access protection | ||
| #464 | SKT Page Builder | 68 | 15 | 49 | 2k+ | Missing nonce verification | ||
| #465 | Solid Mail – SMTP email and logging made by SolidWP | 68 | 16 | 17 | 60k+ | Database parameter is not escaped | ||
| #466 | TJ Custom CSS | 69 | 18 | 10 | 8k+ | Output is not escaped | ||
| #467 | Bootstrap Shortcodes | 71 | 21 | 11 | 5k+ | Missing direct file access protection | ||
| #468 | Responsive Blocks – Page Builder for Blocks & Patterns | 72 | 47 | 43 | 4k+ | badly named files | ||
| #469 | Code Snippet DM | 74 | 21 | 2 | 500 | Output is not escaped | ||
| #470 | Markup Markdown | 74 | 18 | 128 | 2k+ | Non-prefixed global variable | ||
| #471 | Post My CF7 Form | 74 | 21 | 168 | 2k+ | Non-prefixed global variable | ||
| #472 | Wonder PDF Embed | 75 | 53 | 1 | 8k+ | badly named files | ||
| #473 | Advanced CSS Editor | 76 | 25 | 6 | 5k+ | Output is not escaped | ||
| #474 | Dicode Icons Pack | 76 | 10 | 13 | 600 | Nonce verification recommended | ||
| #475 | WP AdCenter – Ad Manager & Adsense Ads | 76 | 5 | 71 | 1k+ | Direct Query | ||
| #476 | Custom HTML Block Extension | 77 | 8 | 13 | 7k+ | Missing direct file access protection | ||
| #477 | RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator | 77 | 37 | 282 | 40k+ | Non-prefixed global variable | ||
| #478 | Master QR Code Generator – Fast & Easy QR Code Creator | 77 | 21 | 59 | 400 | Non-prefixed global variable | ||
| #479 | Table Of Contents Block | 77 | 15 | 8 | 10k+ | wp function not compatible with requires wp | ||
| #480 | PRENA – Product Pre-Orders for WooCommerce | 78 | 6 | 29 | 2k+ | Request data is not unslashed | ||
| #481 | Run SQL Query | 78 | 13 | 8 | 600 | Non-prefixed global variable | ||
| #482 | Easy Charts | 80 | 13 | 28 | 1k+ | Non-prefixed global variable | ||
| #483 | GIF Master – Awesome GIFs with Giphy and Tenor | 81 | 7 | 6 | 3k+ | Output is not escaped | ||
| #484 | Zoho Forms – Drag & Drop Form Builder for Websites – Contact Forms, Payment Forms, Order Forms & More | 85 | 16 | 2 | 10k+ | Non Enqueued Script | ||
| #485 | Product Enquiry for WooCommerce (Now with AI Assistant) | 86 | 6 | 146 | 10k+ | Non-prefixed global variable | ||
| #486 | Live News – Responsive News Ticker | 88 | 9 | 9 | 2k+ | Database parameter is not escaped | ||
| #487 | Simple Custom CSS Plugin | 88 | 17 | 5 | 100k+ | wp function not compatible with requires wp | ||
| #488 | CSS | 89 | 10 | 1 | 500 | Missing Arg Domain | ||
| #489 | Link View | 89 | 99 | 5 | 800 | Missing Translators Comment | ||
| #490 | Beehive Analytics – Google Analytics Dashboard | 90 | 611 | 22 | 20k+ | Text Domain Mismatch | ||
| #491 | Cryptocurrency Widgets For Elementor | 90 | 1 | 33 | 1k+ | Non-prefixed global variable | ||
| #492 | «Подсказки» от DaData.ru | 90 | 5 | 5 | 700 | Not In Footer | ||
| #493 | PHP Native Password Hash | 90 | 7 | 6 | 2k+ | Non-prefixed global variable | ||
| #494 | Slider by Soliloquy – Responsive Image Slider for WordPress | 90 | 470 | 29 | 30k+ | Text Domain Mismatch | ||
| #495 | Send Emails with Resend | 93 | 3 | 0 | 900 | Setting is missing a sanitization callback | ||
| #496 | SKT Blocks – Gutenberg based Page Builder | 94 | 14 | 25 | 1k+ | Non-prefixed function | ||
| #497 | Advanced Google reCAPTCHA | 97 | 3 | 15 | 200k+ | Non-prefixed global variable | ||
| #498 | FancyBox Gallery | 97 | 4 | 5 | 400 | Missing Version | ||
| #499 | jQuery Updater | 97 | 8 | 4 | 20k+ | library core files | ||
| #500 | Zone Manager (Zoninator) | 97 | 5 | 2 | 2k+ | Missing direct file access protection |
