PluginScore

plugin_updater_detected

plugin updater detected

The plugin appears to include its own update or modification mechanism.

medium weight

Why It Shows Up

Plugin Check found updater code or code that modifies plugin files outside the normal WordPress.org update flow.

Why It Matters

Custom update mechanisms can bypass repository review, surprise site owners, or change executable code after installation.

How to Fix

  • Remove custom updater code from WordPress.org releases when it is not needed.
  • Do not rewrite plugin source files at runtime.
  • If remote updates are intentional outside WordPress.org, document the trust model and protect it with strong validation.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#601Pelecard Gateway7629554400Text Domain Mismatch
#602Boxzilla – WordPress Popup Builder7946420k+Non-prefixed global variable
#603Klaviyo792686100k+Non-prefixed function
#604Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder809373210k+Non-prefixed global variable
#605Stream8158080k+Direct Query
#606BlogVault Backup & Staging82532280k+Missing direct file access protection
#607MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall825522200k+Missing direct file access protection
#608The WP Remote WordPress Plugin82512430k+Missing direct file access protection
#609PlugVersions – Easily roll back to previous versions of your plugins.83961k+Request data is not unslashed
#610VK Blocks85794100k+Missing direct file access protection
#611Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More882011640k+Non-prefixed hook name
#612Piotnet Addons For Elementor887442630k+Text Domain Mismatch
#613Three Column Screen Layout90581k+Direct Query
#614Disable WordPress Update Notifications and auto-update Email Notifications9121210k+Nonce verification recommended
#615Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist932410k+Missing Version
#616Disable Auto Update Emails and Block Updates for Plugins, WP Core, and Themes931073k+Missing direct file access protection
#617Meta Box951116500k+Non-prefixed hook name
#618Add-On for Contact Form 7 to Notion9827400Non-prefixed hook name
#619Disable Updates for WordPress Core, Plugins and Themes982310k+Missing direct file access protection
#620Disable All WordPress Updates984610k+trademarked term