PluginScore

update_modification_detected

update modification detected

The plugin appears to include its own update or modification mechanism.

medium weight

Why It Shows Up

Plugin Check found updater code or code that modifies plugin files outside the normal WordPress.org update flow.

Why It Matters

Custom update mechanisms can bypass repository review, surprise site owners, or change executable code after installation.

How to Fix

  • Remove custom updater code from WordPress.org releases when it is not needed.
  • Do not rewrite plugin source files at runtime.
  • If remote updates are intentional outside WordPress.org, document the trust model and protect it with strong validation.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output is not escaped
#2Plugin Check (PCP)012814010k+Non-prefixed global variable
#3RestroPress – Online Food Ordering System175353,2341k+Non-prefixed global variable
#4wpForo Forum174,2933,02620k+Unsafe printing function
#5WPPizza – A Restaurant Plugin184,6892,7031k+Text Domain Mismatch
#6Block Slider – Responsive Image Slider, Video Slider & Post Slider195551,2913k+Non-prefixed global variable
#7GiveWP – Donation Plugin and Fundraising Platform193,4023,555100k+Output is not escaped
#8Go Fetch Jobs (for WP Job Manager)191,4101,741600Non-prefixed global variable
#9Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,993892100k+Exception output is not escaped
#10Scrollsequence – Cinematic Scroll Image Animation Plugin198781,5283k+Non-prefixed global variable
#11SendPress Newsletters192,2931,4221k+Output is not escaped
#12AweBooking – Hotel Booking System203095141k+Non-prefixed global variable
#13Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#14Event Organiser201,10454420k+Text Domain Mismatch
#15Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non-prefixed global variable
#16Shipping for Nova Poshta20598923400Output is not escaped
#17Remove Add to Cart WooCommerce206161,3784k+Non-prefixed global variable
#18Membership Plugin – Kadence Memberships205,0893,0059k+Text Domain Mismatch
#19Restrict User Access – Ultimate Membership & Content Protection209771,84810k+Non-prefixed global variable
#20Events Manager – OpenStreetMaps20559444600Output is not escaped
#21Backup Migration219991,08180k+Non-prefixed global variable
#22Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots211,6732,17910k+Direct Query
#23Event Espresso – Event Registration & Ticketing Sales2112,7102,136600Text Domain Mismatch
#24Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21562,148300k+Non-prefixed global variable
#25JCH Optimize212,2922774k+Output is not escaped
#26King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder211,8493,90410k+Non-prefixed global variable
#27Mapster WP Maps213,5943,0203k+Text Domain Mismatch
#28Modular DS: Monitor, update, and backup multiple websites211998240k+Exception output is not escaped
#29Mooberry Book Manager211,0403991k+Text Domain Mismatch
#30MultiParcels Shipping For WooCommerce212454264k+Request data is not unslashed
#31Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4363,34510k+Non-prefixed global variable
#32Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9945,33110k+Non-prefixed hook name
#33Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#34Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non-prefixed global variable
#35Royal Addons for Elementor – Addons and Templates Kit for Elementor2112,9982,344600k+Text Domain Mismatch
#36URL Shortify – Simple and Easy URL Shortener211,5092,73710k+Non-prefixed global variable
#37BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages216681,569800Non-prefixed global variable
#38Pay For Post with WooCommerce219581,4771k+Non-prefixed global variable
#39Wordfence Security – Firewall, Malware Scan, and Login Security211,8933,2925m+Output is not escaped
#40Frontend Admin by DynamiApps225,9433,2328k+Text Domain Mismatch
#41WP Sessions Time Monitoring Full Automatic228691,529500Non-prefixed global variable
#42Advanced Classifieds & Directory Pro221,2293,5132k+Non-prefixed global variable
#43Ajax Load More – Infinite Scroll, Load More, & Lazy Load2264159230k+Unsafe printing function
#44All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos229112,89720k+Non-prefixed global variable
#45Backup Bolt225801,313800Non-prefixed global variable
#46WPBot – AI ChatBot for Live Support, Lead Generation, WordPress Automation, AI Services221721,7255k+Non-prefixed global variable
#47Cleanup Action Scheduler225451,3061k+Non-prefixed global variable
#48Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8541,26940k+Text Domain Mismatch
#49Cozy Blocks – Website Builder for Block Editor | 59 Gutenberg Blocks, 700+ Patterns, 50+ Templates222,6314,5996k+Non-prefixed global variable
#50Daily Prayer Time229701,7911k+Non-prefixed global variable