plugin_updater_detected
plugin updater detected
The plugin appears to include its own update or modification mechanism.
Why It Shows Up
Plugin Check found updater code or code that modifies plugin files outside the normal WordPress.org update flow.
Why It Matters
Custom update mechanisms can bypass repository review, surprise site owners, or change executable code after installation.
How to Fix
- Remove custom updater code from WordPress.org releases when it is not needed.
- Do not rewrite plugin source files at runtime.
- If remote updates are intentional outside WordPress.org, document the trust model and protect it with strong validation.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #401 | TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder | 25 | 705 | 1,587 | 10k+ | Non-prefixed global variable | ||
| #402 | TrueBooker – Appointment Booking and Scheduler System | 25 | 529 | 2,746 | 600 | Non-prefixed global variable | ||
| #403 | Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor | 25 | 691 | 1,581 | 50k+ | Non-prefixed global variable | ||
| #404 | 3D viewer by Visody | 25 | 832 | 1,322 | 1k+ | Non-prefixed global variable | ||
| #405 | WC Disable Zoom / Lightbox features | 25 | 529 | 1,297 | 700 | Non-prefixed global variable | ||
| #406 | Product Customer List for WooCommerce | 25 | 610 | 1,334 | 9k+ | Non-prefixed global variable | ||
| #407 | Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins | 25 | 907 | 1,418 | 10k+ | Non-prefixed global variable | ||
| #408 | Digital Goods (Checkout Field Editor) for WooCommerce Checkout | 25 | 539 | 1,479 | 3k+ | Non-prefixed global variable | ||
| #409 | Dynamic Pricing and Discount Rules for WooCommerce | 25 | 531 | 1,569 | 600 | Non-prefixed global variable | ||
| #410 | Flat Rate Shipping Method for WooCommerce | 25 | 1,242 | 1,778 | 5k+ | Non-prefixed global variable | ||
| #411 | WP 2FA – Two-factor authentication for WordPress | 25 | 283 | 716 | 100k+ | Non-prefixed global variable | ||
| #412 | WP Coupons and Deals – WordPress Coupon Plugin | 25 | 914 | 1,460 | 1k+ | Non-prefixed global variable | ||
| #413 | WP Review Slider | 25 | 1,186 | 2,279 | 6k+ | Non-prefixed global variable | ||
| #414 | WP Google Review Slider | 25 | 1,367 | 2,584 | 30k+ | Non-prefixed global variable | ||
| #415 | WP Encryption – No.1 HTTPS plugin & One Click Free SSL Cert, HTTPS Redirect, Security | 25 | 727 | 1,554 | 50k+ | Non-prefixed global variable | ||
| #416 | WP Popups – WordPress Popup builder | 25 | 440 | 342 | 30k+ | Output is not escaped | ||
| #417 | WP Statistics – Simple, privacy-friendly Google Analytics alternative | 25 | 610 | 2,465 | 600k+ | Non-prefixed global variable | ||
| #418 | WP TripAdvisor Review Slider | 25 | 1,053 | 2,577 | 8k+ | Non-prefixed global variable | ||
| #419 | Team Members Showcase | 25 | 591 | 1,494 | 4k+ | Non-prefixed global variable | ||
| #420 | YT Player – Embed and Customize Video Players | 25 | 3,163 | 261 | 1k+ | Output is not escaped | ||
| #421 | Bangladeshi Payments Mobile – QR Code & Transaction Reports | 26 | 535 | 1,280 | 1k+ | Non-prefixed global variable | ||
| #422 | Conditional Logic for Woo Product Add-ons | 26 | 575 | 1,352 | 500 | Non-prefixed global variable | ||
| #423 | Ditty – Responsive News Tickers, Sliders, and Lists | 26 | 561 | 484 | 30k+ | Output is not escaped | ||
| #424 | Easy Post Views Count | 26 | 534 | 1,180 | 2k+ | Non-prefixed global variable | ||
| #425 | FlagShip WooCommerce Shipping | 26 | 495 | 188 | 400 | Non Singular String Literal Domain | ||
| #426 | Hide Admin Bar Based on User Roles | 26 | 549 | 1,345 | 20k+ | Non-prefixed global variable | ||
| #427 | Kadence Central – Site Management, Backups, Security, and Reporting | 26 | 462 | 213 | 30k+ | Text Domain Mismatch | ||
| #428 | Paytium: Mollie payment forms & donations | 26 | 506 | 551 | 3k+ | Unsafe printing function | ||
| #429 | Polylang | 26 | 36 | 564 | 800k+ | Non-prefixed hook name | ||
| #430 | Post List Designer – Category Post, Recent Post, Post List | 26 | 542 | 1,320 | 1k+ | Non-prefixed global variable | ||
| #431 | Premmerce User Roles | 26 | 597 | 1,357 | 600 | Non-prefixed global variable | ||
| #432 | Role Based Pricing for Woo by Meow Crew | 26 | 548 | 1,354 | 2k+ | Non-prefixed global variable | ||
| #433 | Carousel, Recent Post Slider and Banner Slider | 26 | 528 | 1,409 | 8k+ | Non-prefixed global variable | ||
| #434 | StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart | 26 | 125 | 420 | 2k+ | Non-prefixed global variable | ||
| #435 | Theater for WordPress | 26 | 348 | 344 | 600 | Output is not escaped | ||
| #436 | Premmerce SEO for WooCommerce | 26 | 550 | 1,285 | 1k+ | Non-prefixed global variable | ||
| #437 | Set Price Note (Units, Offers, Editions) for WooCommerce | 26 | 596 | 1,307 | 800 | Non-prefixed global variable | ||
| #438 | Shipping Method Display Style for WooCommerce | 26 | 529 | 1,308 | 2k+ | Non-prefixed global variable | ||
| #439 | Church Content – Sermons, Events and More | 27 | 134 | 410 | 4k+ | Non-prefixed function | ||
| #440 | Divi Collage | 27 | 516 | 1,183 | 700 | Non-prefixed global variable | ||
| #441 | Cyrlitera – Transliteration of Links and File Names | 27 | 453 | 204 | 40k+ | Output is not escaped | ||
| #442 | Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin | 27 | 122 | 135 | 3k+ | Non-prefixed global variable | ||
| #443 | Extra Product Options for WooCommerce | 27 | 548 | 1,342 | 600 | Non-prefixed global variable | ||
| #444 | Foxtool All-in-One: Contact chat button, Custom login, Media optimize images | 27 | 1,629 | 360 | 7k+ | Unsafe printing function | ||
| #445 | HM Multiple Roles | 27 | 537 | 1,287 | 1k+ | Non-prefixed global variable | ||
| #446 | Liza Widget For Spotify and Elementor | 27 | 609 | 1,287 | 1k+ | Non-prefixed global variable | ||
| #447 | Nextend Social Login and Register | 27 | 1,668 | 243 | 200k+ | Output is not escaped | ||
| #448 | Tussendoor – Open RDW | 27 | 301 | 140 | 600 | Text Domain Mismatch | ||
| #449 | PublishPress Permissions: Control User Access for Posts, Pages, Categories, Tags | 27 | 424 | 323 | 10k+ | Missing Translators Comment | ||
| #450 | Restrict for Elementor | 27 | 530 | 1,223 | 900 | Non-prefixed global variable |