library_core_files
library core files
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Why It Shows Up
The finding matches a WordPress coding-standard or Plugin Check rule for code clarity, compatibility, packaging, or API usage.
Why It Matters
Maintainability findings reduce confidence that the plugin will behave consistently across hosts, WordPress versions, and other plugins.
How to Fix
- Find the exact file and line in the raw scan output.
- Prefer WordPress APIs and standard coding patterns over custom or legacy behavior.
- If the warning is from bundled third-party code, document that separately and avoid modifying vendor files unless necessary.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #401 | Manual Image Crop | 40 | 178 | 61 | 8k+ | Output is not escaped | ||
| #402 | Modal Window – create popup modal window | 40 | 4 | 170 | 10k+ | Non-prefixed global variable | ||
| #403 | Random Banner | 40 | 59 | 125 | 1k+ | Output is not escaped | ||
| #404 | Visual Builder for Contact Form 7 | 40 | 20 | 43 | 500 | Output is not escaped | ||
| #405 | WP Meteor Website Speed Optimization Addon | 40 | 34 | 19 | 20k+ | Output is not escaped | ||
| #406 | Conditional Fields for Contact Form 7 | 41 | 106 | 53 | 100k+ | Output is not escaped | ||
| #407 | CMS Tree Page View – Reorder Pages with a Drag-and-Drop Tree | 41 | 121 | 96 | 50k+ | Unsafe printing function | ||
| #408 | Hash Form – Drag & Drop Form Builder | 41 | 9 | 275 | 3k+ | Non-prefixed global variable | ||
| #409 | Highcompress Image Compressor | 41 | 106 | 69 | 600 | Text Domain Mismatch | ||
| #410 | Central Color Palette | 41 | 73 | 33 | 10k+ | Output is not escaped | ||
| #411 | MS Custom Login | 41 | 117 | 6 | 900 | Unsafe printing function | ||
| #412 | Pods – Custom Content Types and Fields | 41 | 5 | 233 | 100k+ | Direct Query | ||
| #413 | Web Accessibility (formally known as Ally) – WCAG Scanning, Guided Fixes, Usability Widget | 41 | 47 | 38 | 500k+ | Output is not escaped | ||
| #414 | Prismatic | 42 | 61 | 29 | 2k+ | Output is not escaped | ||
| #415 | Schema – All In One Schema Rich Snippets | 43 | 601 | 188 | 30k+ | Text Domain Mismatch | ||
| #416 | AMP | 43 | 63 | 362 | 400k+ | Non-prefixed hook name | ||
| #417 | Post Carousel Slider for Elementor | 43 | 133 | 23 | 3k+ | Text Domain Mismatch | ||
| #418 | Cyberpret – Calculettes | 44 | 41 | 17 | 500 | Output is not escaped | ||
| #419 | Debug Bar Console | 44 | 23 | 9 | 1k+ | Missing Arg Domain | ||
| #420 | Narrative Publisher | 44 | 28 | 37 | 1k+ | Text Domain Mismatch | ||
| #421 | Evergreen Countdown Timer | 45 | 193 | 35 | 2k+ | wp function not compatible with requires wp | ||
| #422 | ARI Stream Quiz – WordPress Quizzes Builder | 46 | 21 | 239 | 2k+ | Non-prefixed global variable | ||
| #423 | Product Slider, Product Grid, Product Masonry | 49 | 55 | 144 | 10k+ | wp function not compatible with requires wp | ||
| #424 | Page Builder Gutenberg Blocks – CoBlocks | 50 | 167 | 36 | 300k+ | block api version too low | ||
| #425 | User Activity Tracking and Log | 50 | 30 | 263 | 2k+ | Non-prefixed global variable | ||
| #426 | FakerPress | 53 | 66 | 152 | 10k+ | Non-prefixed global variable | ||
| #427 | RDFa Breadcrumb | 53 | 27 | 13 | 600 | Output is not escaped | ||
| #428 | Simple Masonry Layout | 53 | 28 | 28 | 1k+ | Output is not escaped | ||
| #429 | Ultimate Gift Cards for WooCommerce | 53 | 4 | 450 | 7k+ | Non-prefixed global variable | ||
| #430 | WP Call Button – Easy Click to Call Button for WordPress | 54 | 21 | 38 | 40k+ | Non-prefixed global variable | ||
| #431 | WebinarPress – Webinar System for WordPress | 54 | 61 | 499 | 900 | Non-prefixed global variable | ||
| #432 | Gutenify – Visual Site Builder Blocks & Site Templates | 55 | 66 | 40 | 5k+ | Missing Arg Domain | ||
| #433 | LoginPress | wp-login Custom Login Page Customizer | 55 | 125 | 308 | 200k+ | Non-prefixed function | ||
| #434 | Karma Music Player by Kadar | 56 | 47 | 9 | 700 | Output is not escaped | ||
| #435 | Blog Time | 57 | 38 | 6 | 600 | Output is not escaped | ||
| #436 | Simple CSS | 57 | 22 | 13 | 80k+ | Missing Version | ||
| #437 | Custom API for WP | 59 | 173 | 16 | 1k+ | wp function not compatible with requires wp | ||
| #438 | FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses | 59 | 41 | 14 | 8k+ | Exception output is not escaped | ||
| #439 | JetSticky For Elementor | 59 | 13 | 38 | 30k+ | Nonce verification recommended | ||
| #440 | Product Labels, Quick View, Buy Now, Pre-Orders, Frequently Bought Together & More for WooCommerce – Merchant | 60 | 11 | 740 | 9k+ | Non-prefixed global variable | ||
| #441 | Simple Owl Carousel | 60 | 23 | 13 | 500 | Missing Translators Comment | ||
| #442 | Stratum Widgets for Elementor | 60 | 66 | 366 | 20k+ | Non-prefixed global variable | ||
| #443 | WP Blog Post Layouts | 60 | 36 | 249 | 10k+ | Non-prefixed global variable | ||
| #444 | jQuery Lightbox | 61 | 22 | 3 | 1k+ | Output is not escaped | ||
| #445 | Reorder Posts – Quick Post Type and Page Ordering | 61 | 10 | 23 | 10k+ | Request data is not unslashed | ||
| #446 | MainWP Key Maker | 62 | 3 | 35 | 4k+ | Input is not sanitized | ||
| #447 | Classic Editor and Classic Widgets | 63 | 19 | 41 | 20k+ | Nonce verification recommended | ||
| #448 | Mantenimiento web | 63 | 49 | 15 | 20k+ | Text Domain Mismatch | ||
| #449 | Admin CSS MU | 64 | 30 | 582 | 10k+ | Non-prefixed global variable | ||
| #450 | WP Search with Algolia | 64 | 27 | 16 | 7k+ | Missing direct file access protection |
