PluginScore

update_modification_detected

update modification detected

The plugin appears to include its own update or modification mechanism.

medium weight

Why It Shows Up

Plugin Check found updater code or code that modifies plugin files outside the normal WordPress.org update flow.

Why It Matters

Custom update mechanisms can bypass repository review, surprise site owners, or change executable code after installation.

How to Fix

  • Remove custom updater code from WordPress.org releases when it is not needed.
  • Do not rewrite plugin source files at runtime.
  • If remote updates are intentional outside WordPress.org, document the trust model and protect it with strong validation.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output is not escaped
#2Plugin Check (PCP)012813210k+Exception output is not escaped
#3Block Slider – Responsive Image Slider, Video Slider & Post Slider195551,2913k+Non-prefixed global variable
#4Event Organiser191,10654420k+Text Domain Mismatch
#5Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization191,2952,6799k+Output is not escaped
#6Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#7Scrollsequence – Cinematic Scroll Image Animation Plugin198781,5284k+Non-prefixed global variable
#8SendPress Newsletters192,2931,4222k+Output is not escaped
#9GiveWP – Donation Plugin and Fundraising Platform203,4353,580100k+Output is not escaped
#10Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non-prefixed global variable
#11Remove Add to Cart WooCommerce206161,3784k+Non-prefixed global variable
#12WPJAM Basic203283564k+Output is not escaped
#13Store Locator WordPress212,3721,57210k+Text Domain Mismatch
#14Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21521,959300k+Non-prefixed global variable
#15If-So Dynamic Content – Elementor & All Page Builders Personalization218897257k+Unsafe printing function
#16JCH Optimize219531334k+Output is not escaped
#17Mapster WP Maps213,4402,9033k+Text Domain Mismatch
#18MotoPress Hotel Booking213,0611,03710k+Text Domain Mismatch
#19Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4693,33310k+Non-prefixed global variable
#20Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9185,06510k+Non-prefixed hook name
#21User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor216961,48350k+Nonce verification recommended
#22Five Star Restaurant Reservations – WordPress Booking Plugin211,0991,14710k+Output is not escaped
#23Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non-prefixed global variable
#24Royal Addons for Elementor – Addons and Templates Kit for Elementor2113,0112,530600k+Text Domain Mismatch
#25Pay For Post with WooCommerce219601,4741k+Non-prefixed global variable
#26Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#27WP-Lister Lite for eBay216,6975,1292k+Output is not escaped
#28Frontend Admin by DynamiApps225,9223,20810k+Text Domain Mismatch
#29Advanced Ads – Ad Manager & AdSense22578734100k+Non-prefixed global variable
#30Advanced Classifieds & Directory Pro221,2293,5112k+Non-prefixed global variable
#31Advanced Form Integration — Connect Forms to 200+ Apps225,7714,67810k+wp function not compatible with requires wp
#32Ajax Load More – Infinite Scroll, Load More, & Lazy Load2264159540k+Unsafe printing function
#33All-in-One Video Gallery229112,89220k+Non-prefixed global variable
#34Knowledge Base documentation & wiki plugin – BasePress Docs226711,7672k+Non-prefixed global variable
#35Borderless – Addons and Templates for Elementor224381,3885k+Non-prefixed global variable
#36Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots221,6042,01910k+Direct Query
#37Divi Carousel Lite – 17+ Carousel Module229671,27510k+Non-prefixed global variable
#38Cleanup Action Scheduler225451,3061k+Non-prefixed global variable
#39Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#40Passster – Password Protect Pages and Content225391,41910k+Non-prefixed global variable
#41Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 500+ Patterns, 57 Blocks & Templates222,1674,1757k+Non-prefixed global variable
#42WP Customer Area223,30894110k+Text Domain Mismatch
#43Directorist: AI-Powered Business Directory, Listings & Classified Ads224432,12920k+Non-prefixed global variable
#44E2Pdf – Export Pdf Tool for WordPress221,07583610k+Unsafe printing function
#45EleSpare – News, Magazine and Blog Addons for Elementor227331,42310k+Non-prefixed global variable
#46Events Manager – Calendar, Bookings, Tickets, and more!224,7225,62170k+Output is not escaped
#47Finale Lite – Sales Countdown Timer & Discount for WooCommerce221,0314514k+Output is not escaped
#48Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar221,3211,3713k+Non-prefixed global variable
#49Insert or Embed Articulate Content into WordPress226591,4372k+Non-prefixed global variable
#50InfiniteWP Client222,2861,812200k+Exception output is not escaped