PluginScore

update_modification_detected

update modification detected

The plugin appears to include its own update or modification mechanism.

medium weight

Why It Shows Up

Plugin Check found updater code or code that modifies plugin files outside the normal WordPress.org update flow.

Why It Matters

Custom update mechanisms can bypass repository review, surprise site owners, or change executable code after installation.

How to Fix

  • Remove custom updater code from WordPress.org releases when it is not needed.
  • Do not rewrite plugin source files at runtime.
  • If remote updates are intentional outside WordPress.org, document the trust model and protect it with strong validation.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output is not escaped
#2Plugin Check (PCP)012813210k+Exception output is not escaped
#3RestroPress – Online Food Ordering System175243,1551k+Non-prefixed global variable
#4WPPizza – A Restaurant Plugin184,6892,7031k+Text Domain Mismatch
#5Block Slider – Responsive Image Slider, Video Slider & Post Slider195551,2913k+Non-prefixed global variable
#6Go Fetch Jobs (for WP Job Manager)191,4101,741700Non-prefixed global variable
#7Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#8Scrollsequence – Cinematic Scroll Image Animation Plugin198781,5284k+Non-prefixed global variable
#9SendPress Newsletters192,2931,4221k+Output is not escaped
#10WPJAM Basic193253464k+Output is not escaped
#11AweBooking – Hotel Booking System203095141k+Non-prefixed global variable
#12Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#13Event Espresso – Event Registration & Ticketing Sales2012,6982,135600Text Domain Mismatch
#14Event Organiser201,10454420k+Text Domain Mismatch
#15GiveWP – Donation Plugin and Fundraising Platform203,4113,559100k+Output is not escaped
#16Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non-prefixed global variable
#17Shipping for Nova Poshta20598923500Output is not escaped
#18Remove Add to Cart WooCommerce206161,3784k+Non-prefixed global variable
#19Events Manager – OpenStreetMaps20559444700Output is not escaped
#20Store Locator WordPress212,4941,62810k+Text Domain Mismatch
#21Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots211,6212,03310k+Direct Query
#22SMS Extension for Contact Form 7217201,387400Non-prefixed global variable
#23Daily Prayer Time219471,7801k+Non-prefixed global variable
#24Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21522,063300k+Non-prefixed global variable
#25Frontend Dashboard21384945500Non-prefixed function
#26Mapster WP Maps213,4402,8943k+Text Domain Mismatch
#27Modular DS: Monitor, update, and backup multiple websites211598240k+Exception output is not escaped
#28Mooberry Book Manager211,0403991k+Text Domain Mismatch
#29MotoPress Hotel Booking213,0671,03710k+Text Domain Mismatch
#30Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4783,33710k+Non-prefixed global variable
#31Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9535,29710k+Non-prefixed hook name
#32User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor217031,46340k+Missing Translators Comment
#33Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#34Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non-prefixed global variable
#35Royal Addons for Elementor – Addons and Templates Kit for Elementor2113,0112,530600k+Text Domain Mismatch
#36URL Shortify – Simple and Easy URL Shortener211,5112,66910k+Non-prefixed global variable
#37BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages216681,569800Non-prefixed global variable
#38WooCommerce211,3436,2127m+Non-prefixed global variable
#39Pay For Post with WooCommerce219581,4771k+Non-prefixed global variable
#40Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#41WebTotem Security211,110213900Text Domain Mismatch
#42WP Sessions Time Monitoring Full Automatic228691,529500Non-prefixed global variable
#43Advanced Classifieds & Directory Pro221,2293,5122k+Non-prefixed global variable
#44Ajax Load More – Infinite Scroll, Load More, & Lazy Load2264159230k+Unsafe printing function
#45All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos229122,88520k+Non-prefixed global variable
#46Backup Bolt225801,313800Non-prefixed global variable
#47Knowledge Base documentation & wiki plugin – BasePress Docs226711,7672k+Non-prefixed global variable
#48Borderless – Addons and Templates for Elementor224381,3885k+Non-prefixed global variable
#49Cleanup Action Scheduler225451,3061k+Non-prefixed global variable
#50Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8541,26950k+Text Domain Mismatch