plugin_header_invalid_license
plugin header invalid license
The plugin's license metadata is missing, invalid, or inconsistent.
Why It Shows Up
Plugin Check found license information that does not match WordPress.org expectations across the plugin header, readme, or bundled files.
Why It Matters
Clear license metadata helps users and repository reviewers understand whether the plugin can be distributed and modified.
How to Fix
- Declare the license in the plugin header and readme.
- Use a valid SPDX-style license name or a WordPress.org-accepted GPL-compatible license.
- Keep bundled third-party library licenses intact and compatible.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | WP Email Template | 19 | 344 | 345 | 2k+ | Exception output is not escaped | ||
| #2 | FlagShip WooCommerce Shipping | 26 | 495 | 188 | 400 | Non Singular String Literal Domain | ||
| #3 | Laposta Signup Basic | 28 | 278 | 77 | 2k+ | Output is not escaped | ||
| #4 | Media Hygiene: Remove or Delete Unused Images and More! | 28 | 654 | 309 | 4k+ | Non Singular String Literal Domain | ||
| #5 | Email Inquiry & Cart Options for WooCommerce | 28 | 181 | 273 | 800 | Output is not escaped | ||
| #6 | Product Sort and Display for WooCommerce | 28 | 190 | 229 | 2k+ | Output is not escaped | ||
| #7 | pCloud WP Backup | 29 | 121 | 74 | 1k+ | Exception output is not escaped | ||
| #8 | BrightEdge Autopilot | 30 | 107 | 31 | 500 | curl curl setopt | ||
| #9 | Laposta Signup Embed | 30 | 88 | 19 | 1k+ | Exception output is not escaped | ||
| #10 | Staatic – Static Site Generator for WordPress | 30 | 449 | 234 | 3k+ | SQL query is not prepared | ||
| #11 | AC's Loan Calculator | 32 | 246 | 187 | 400 | Unsafe printing function | ||
| #12 | DJ-Accessibility – Accessibility Plugin | 33 | 370 | 48 | 3k+ | Text Domain Mismatch | ||
| #13 | Split Test For Elementor | 33 | 98 | 134 | 3k+ | Non-prefixed global variable | ||
| #14 | Wonder Slider Lite | 33 | 273 | 187 | 8k+ | Output is not escaped | ||
| #15 | AJAX Heartbeat Tool | 35 | 6 | 1 | 300 | Hidden files included | ||
| #16 | Cloudflare | 35 | 28 | 85 | 200k+ | Non-prefixed namespace | ||
| #17 | Sticky Social Link | 35 | 49 | 2 | 1k+ | Output is not escaped | ||
| #18 | Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring | 35 | 47 | 102 | 800 | Non-prefixed global variable | ||
| #19 | WP Spam Question Filter | 35 | 63 | 30 | 2k+ | Output is not escaped | ||
| #20 | Awin – Advertiser Tracking for WooCommerce | 36 | 45 | 39 | 1k+ | Non Singular String Literal Domain | ||
| #21 | Carousel Ultimate | 36 | 450 | 284 | 800 | Text Domain Mismatch | ||
| #22 | One Click Order Re-Order | 38 | 139 | 63 | 1k+ | Non Singular String Literal Domain | ||
| #23 | SimpleShop | 38 | 48 | 48 | 1k+ | date date | ||
| #24 | Rollbar | 39 | 75 | 14 | 400 | Output is not escaped | ||
| #25 | Clover Payments for WooCommerce | 42 | 25 | 15 | 2k+ | Exception output is not escaped | ||
| #26 | SurveyJS: Drag & Drop Form Builder | 48 | 2 | 126 | 500 | Missing Version | ||
| #27 | Advanced Custom Fields – Taxonomy Field add-on | 50 | 57 | 4 | 1k+ | Non Singular String Literal Domain | ||
| #28 | Customize Tawk.to Widget | 50 | 21 | 28 | 500 | Request data is not unslashed | ||
| #29 | Veeqo for WooCommerce | 50 | 30 | 17 | 800 | Missing direct file access protection | ||
| #30 | Trustpilot Reviews | 51 | 14 | 52 | 30k+ | Missing nonce verification | ||
| #31 | Comment Form WP – Customize Default Comment Form | 61 | 39 | 7 | 600 | Output is not escaped | ||
| #32 | AAM Protected Media Files | 62 | 13 | 10 | 500 | Direct Query | ||
| #33 | Live Chat with Messenger Customer Chat | 65 | 10 | 23 | 3k+ | Input is not sanitized | ||
| #34 | ミエルカヒートマップ タグマネージャー | 68 | 9 | 11 | 800 | Input is not validated | ||
| #35 | WP referrer spam blacklist (fight 2040+ Referrer Spammers in (Google/Matomo) Analytics) | 69 | 9 | 24 | 700 | Non-prefixed constant | ||
| #36 | QuadMenu – Divi Mega Menu | 78 | 17 | 2 | 1k+ | Text Domain Mismatch | ||
| #37 | Mammoth .docx converter | 83 | 11 | 0 | 20k+ | Output is not escaped | ||
| #38 | Microsoft Azure Storage for WordPress | 86 | 25 | 26 | 2k+ | Missing Translators Comment | ||
| #39 | Emoji Settings | 88 | 4 | 5 | 2k+ | Input is not sanitized | ||
| #40 | Draft – Tailwind CSS for WordPress. | 88 | 10 | 5 | 600 | Text Domain Mismatch | ||
| #41 | Széchenyi 2020 Logo | 89 | 140 | 9 | 1k+ | Text Domain Mismatch | ||
| #42 | Widget Instance | 94 | 7 | 11 | 500 | Non-prefixed global variable | ||
| #43 | Zotabox – 20+ Promotional Sales tools to boost your subscribers and sales | 94 | 12 | 8 | 500 | wp function not compatible with requires wp | ||
| #44 | Blank | 96 | 6 | 0 | 800 | Missing direct file access protection | ||
| #45 | Hide Google reCAPTCHA Logo | 97 | 3 | 2 | 500 | Non-prefixed global variable | ||
| #46 | Site Favicon | 97 | 3 | 0 | 5k+ | invalid license |
