PluginScore

plugin_updater_detected

plugin updater detected

The plugin appears to include its own update or modification mechanism.

medium weight

Why It Shows Up

Plugin Check found updater code or code that modifies plugin files outside the normal WordPress.org update flow.

Why It Matters

Custom update mechanisms can bypass repository review, surprise site owners, or change executable code after installation.

How to Fix

  • Remove custom updater code from WordPress.org releases when it is not needed.
  • Do not rewrite plugin source files at runtime.
  • If remote updates are intentional outside WordPress.org, document the trust model and protect it with strong validation.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Plugin Check (PCP)012813210k+Exception output is not escaped
#2JetBackup – Backup, Restore & Migrate101,563149200k+Exception output is not escaped
#3RestroPress – Online Food Ordering System185213,0821k+Non-prefixed global variable
#4WPPizza – A Restaurant Plugin184,6892,7031k+Text Domain Mismatch
#5Block Slider – Responsive Image Slider, Video Slider & Post Slider195551,2913k+Non-prefixed global variable
#6Go Fetch Jobs (for WP Job Manager)191,4101,741700Non-prefixed global variable
#7Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,911877100k+Exception output is not escaped
#8Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#9Scrollsequence – Cinematic Scroll Image Animation Plugin198781,5284k+Non-prefixed global variable
#10SendPress Newsletters192,2931,4222k+Output is not escaped
#11AweBooking – Hotel Booking System203095141k+Non-prefixed global variable
#12Brizy – Page Builder2058972070k+Output is not escaped
#13Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#14Event Espresso – Event Registration & Ticketing Sales2012,6982,135600Text Domain Mismatch
#15Event Organiser201,10454420k+Text Domain Mismatch
#16GiveWP – Donation Plugin and Fundraising Platform203,4323,575100k+Output is not escaped
#17Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization201,2972,6809k+Output is not escaped
#18Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non-prefixed global variable
#19Shipping for Nova Poshta20598923500Output is not escaped
#20Remove Add to Cart WooCommerce206161,3784k+Non-prefixed global variable
#21Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF20557541100k+Output is not escaped
#22Events Manager – OpenStreetMaps20559444700Output is not escaped
#23Web Directory Free20808174400Missing direct file access protection
#24WPJAM Basic203283564k+Output is not escaped
#25Store Locator WordPress212,3721,57210k+Text Domain Mismatch
#26SMS Extension for Contact Form 7217201,387400Non-prefixed global variable
#27Daily Prayer Time219471,7801k+Non-prefixed global variable
#28Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21521,959300k+Non-prefixed global variable
#29If-So Dynamic Content – Elementor & All Page Builders Personalization218897257k+Unsafe printing function
#30Mapster WP Maps213,4402,9033k+Text Domain Mismatch
#31Modular DS: Monitor, update, and backup multiple websites211598140k+Exception output is not escaped
#32Mooberry Book Manager211,0403991k+Text Domain Mismatch
#33MotoPress Hotel Booking213,0611,03710k+Text Domain Mismatch
#34Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4693,33310k+Non-prefixed global variable
#35Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9185,06510k+Non-prefixed hook name
#36User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor216961,48350k+Nonce verification recommended
#37Five Star Restaurant Reservations – WordPress Booking Plugin211,0991,14710k+Output is not escaped
#38Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non-prefixed global variable
#39Royal Addons for Elementor – Addons and Templates Kit for Elementor2113,0112,530600k+Text Domain Mismatch
#40BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages216681,569900Non-prefixed global variable
#41Pay For Post with WooCommerce219601,4741k+Non-prefixed global variable
#42WP-Lister Lite for eBay216,6975,1292k+Output is not escaped
#43WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#44Frontend Admin by DynamiApps225,9223,20810k+Text Domain Mismatch
#45WP Sessions Time Monitoring Full Automatic228691,529500Non-prefixed global variable
#46Advanced Classifieds & Directory Pro221,2293,5112k+Non-prefixed global variable
#47Advanced Form Integration — Connect Forms to 200+ Apps225,7714,67810k+wp function not compatible with requires wp
#48Ajax Load More – Infinite Scroll, Load More, & Lazy Load2264159540k+Unsafe printing function
#49All-in-One Video Gallery229112,89220k+Non-prefixed global variable
#50Backup Bolt225801,313800Non-prefixed global variable