PluginScore

update_modification_detected

update modification detected

The plugin appears to include its own update or modification mechanism.

medium weight

Why It Shows Up

Plugin Check found updater code or code that modifies plugin files outside the normal WordPress.org update flow.

Why It Matters

Custom update mechanisms can bypass repository review, surprise site owners, or change executable code after installation.

How to Fix

  • Remove custom updater code from WordPress.org releases when it is not needed.
  • Do not rewrite plugin source files at runtime.
  • If remote updates are intentional outside WordPress.org, document the trust model and protect it with strong validation.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output is not escaped
#2Plugin Check (PCP)012813210k+Exception output is not escaped
#3RestroPress – Online Food Ordering System175243,1551k+Non-prefixed global variable
#4Dynamic Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode179222,014900Non-prefixed global variable
#5WPPizza – A Restaurant Plugin184,6892,7031k+Text Domain Mismatch
#6Block Slider – Responsive Image Slider, Video Slider & Post Slider195551,2913k+Non-prefixed global variable
#7Go Fetch Jobs (for WP Job Manager)191,4101,741700Non-prefixed global variable
#8Membership Plugin – Kadence Memberships195,0832,9829k+Text Domain Mismatch
#9Scrollsequence – Cinematic Scroll Image Animation Plugin198781,5284k+Non-prefixed global variable
#10SendPress Newsletters192,2931,4221k+Output is not escaped
#11WPJAM Basic193253464k+Output is not escaped
#12AweBooking – Hotel Booking System203095141k+Non-prefixed global variable
#13Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#14Event Espresso – Event Registration & Ticketing Sales2012,6982,135600Text Domain Mismatch
#15Event Organiser201,10454420k+Text Domain Mismatch
#16GiveWP – Donation Plugin and Fundraising Platform203,4103,554100k+Output is not escaped
#17Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non-prefixed global variable
#18Shipping for Nova Poshta20598923500Output is not escaped
#19Remove Add to Cart WooCommerce206161,3784k+Non-prefixed global variable
#20Events Manager – OpenStreetMaps20559444700Output is not escaped
#21Store Locator WordPress212,4941,62810k+Text Domain Mismatch
#22Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots211,6212,03810k+Direct Query
#23SMS Extension for Contact Form 7217201,387400Non-prefixed global variable
#24Daily Prayer Time219471,7801k+Non-prefixed global variable
#25Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21522,063300k+Non-prefixed global variable
#26Frontend Dashboard21384945500Non-prefixed function
#27Mapster WP Maps213,4402,8943k+Text Domain Mismatch
#28Modular DS: Monitor, update, and backup multiple websites211918240k+Exception output is not escaped
#29Mooberry Book Manager211,0403991k+Text Domain Mismatch
#30MotoPress Hotel Booking213,0671,03710k+Text Domain Mismatch
#31Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4783,33710k+Non-prefixed global variable
#32Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9535,29710k+Non-prefixed hook name
#33User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor217031,46340k+Missing Translators Comment
#34Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#35Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non-prefixed global variable
#36Royal Addons for Elementor – Addons and Templates Kit for Elementor2113,0162,440600k+Text Domain Mismatch
#37URL Shortify – Simple and Easy URL Shortener211,5112,66910k+Non-prefixed global variable
#38BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages216681,569800Non-prefixed global variable
#39WooCommerce211,3436,2127m+Non-prefixed global variable
#40Pay For Post with WooCommerce219581,4771k+Non-prefixed global variable
#41Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#42WebTotem Security211,110213800Text Domain Mismatch
#43WP Sessions Time Monitoring Full Automatic228691,529500Non-prefixed global variable
#44Advanced Classifieds & Directory Pro221,2293,5122k+Non-prefixed global variable
#45Ajax Load More – Infinite Scroll, Load More, & Lazy Load2264159230k+Unsafe printing function
#46All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos229122,88520k+Non-prefixed global variable
#47Backup Bolt225801,313800Non-prefixed global variable
#48Knowledge Base documentation & wiki plugin – BasePress Docs226711,7672k+Non-prefixed global variable
#49Borderless – Addons and Templates for Elementor224381,3885k+Non-prefixed global variable
#50Cleanup Action Scheduler225451,3061k+Non-prefixed global variable