update_modification_detected
update modification detected
The plugin appears to include its own update or modification mechanism.
Why It Shows Up
Plugin Check found updater code or code that modifies plugin files outside the normal WordPress.org update flow.
Why It Matters
Custom update mechanisms can bypass repository review, surprise site owners, or change executable code after installation.
How to Fix
- Remove custom updater code from WordPress.org releases when it is not needed.
- Do not rewrite plugin source files at runtime.
- If remote updates are intentional outside WordPress.org, document the trust model and protect it with strong validation.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #651 | Cloudways Site Manager | 91 | 14 | 7 | 20k+ | wp function not compatible with requires wp | ||
| #652 | Disable WordPress Update Notifications and auto-update Email Notifications | 91 | 2 | 12 | 10k+ | Nonce verification recommended | ||
| #653 | Disable Auto Update Emails and Block Updates for Plugins, WP Core, and Themes | 93 | 10 | 7 | 4k+ | Missing direct file access protection | ||
| #654 | Meta for WooCommerce | 94 | 2 | 140 | 400k+ | Non-prefixed hook name | ||
| #655 | Live Chat Plugin for WooCommerce – LiveChat | 95 | 62 | 10 | 1k+ | Text Domain Mismatch | ||
| #656 | Meta Box | 95 | 12 | 16 | 500k+ | Non-prefixed hook name | ||
| #657 | LiveChat – Live Chat Plugin for WP Websites | 95 | 62 | 9 | 10k+ | Text Domain Mismatch | ||
| #658 | Disable All WordPress Updates | 96 | 4 | 14 | 10k+ | Non-prefixed constant | ||
| #659 | Tooltip for Gravity Forms | 96 | 23 | 10 | 900 | Text Domain Mismatch | ||
| #660 | Disable WP Theme Updates Advance | 97 | 5 | 3 | 500 | date date | ||
| #661 | Remote Website Management by Watchful | 97 | 4 | 12 | 3k+ | Direct Query | ||
| #662 | WordPress Beta Tester | 97 | 1 | 15 | 2k+ | Non-prefixed hook name | ||
| #663 | Auto Submenu | 98 | 2 | 2 | 2k+ | Missing direct file access protection | ||
| #664 | Auto Update Plugins | 98 | 1 | 6 | 1k+ | trademarked term | ||
| #665 | Auto Updates | 98 | 2 | 2 | 1k+ | Missing direct file access protection | ||
| #666 | Disable Updates for WordPress Core, Plugins and Themes | 98 | 2 | 3 | 10k+ | Missing direct file access protection | ||
| #667 | Enable CORS | 98 | 10 | 2 | 6k+ | Missing direct file access protection | ||
| #668 | CoCart – Headless REST API for WooCommerce | 99 | 26 | 1k+ | Non-prefixed global variable | |||
| #669 | Plugin Report | 99 | 5 | 1k+ | trademarked term | |||
| #670 | Update Control | 100 | 2 | 4k+ | unexpected markdown file |
