PluginScore

update_modification_detected

update modification detected

The plugin appears to include its own update or modification mechanism.

medium weight

Why It Shows Up

Plugin Check found updater code or code that modifies plugin files outside the normal WordPress.org update flow.

Why It Matters

Custom update mechanisms can bypass repository review, surprise site owners, or change executable code after installation.

How to Fix

  • Remove custom updater code from WordPress.org releases when it is not needed.
  • Do not rewrite plugin source files at runtime.
  • If remote updates are intentional outside WordPress.org, document the trust model and protect it with strong validation.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#301XT Floating Cart for WooCommerce241,2492,0234k+Non-prefixed global variable
#302Premmerce Permalink Manager for WooCommerce246331,33550k+Non-prefixed global variable
#303Product Attachment for WooCommerce241,2331,7777k+Non-prefixed global variable
#304NextMove Lite – Thank You Page for WooCommerce2491685710k+Non-prefixed global variable
#305Country Based Payments for WooCommerce245311,2953k+Non-prefixed global variable
#306WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce247611,612900Non-prefixed global variable
#307AI ChatBot for eCommerce – WoowBot24145528900Request data is not unslashed
#308Yoast SEO – Advanced SEO with real-time guidance and built-in AI2415938610m+Non-prefixed global variable
#309WP Contact Slider – Contact Form Slider Widget241,3552,5899k+Non-prefixed global variable
#310WP Frontend Delete Account245371,3784k+Non-prefixed global variable
#311WP Meta and Date Remover246651,31490k+Non-prefixed global variable
#312WP Notification Bell247361,591700Non-prefixed global variable
#313WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars248611,57310k+Non-prefixed global variable
#314WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content241,77739440k+Text Domain Mismatch
#315WP School Calendar241,3611,721400Non-prefixed global variable
#316Dynamic Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode249062,003900Non-prefixed global variable
#317WP Travel Engine – Tour Booking Plugin – Tour Operator Software242,0125,68920k+Non-prefixed global variable
#318WP User Manager – User Profile Builder & Membership2478753910k+Exception output is not escaped
#319WP Voting Contest Lite24259258400Text Domain Mismatch
#320WPAdverts – Classifieds Plugin241,3084964k+Output is not escaped
#321WPeMatico RSS Feed Fetcher241,37858710k+Output is not escaped
#322WPGSI: Spreadsheet Integration247841,5872k+Non-prefixed global variable
#323WPIDE – File Manager & Code Editor246101,38640k+Non-prefixed global variable
#324YITH WooCommerce Gift Cards244361,53410k+Non-prefixed global variable
#325YITH WooCommerce Product Add-Ons244602,06920k+Non-prefixed global variable
#326YITH WooCommerce Subscription244391,5387k+Non-prefixed global variable
#327YITH WooCommerce Waitlist244201,5003k+Non-prefixed global variable
#328YITH WooCommerce Wishlist244481,486400k+Non-prefixed global variable
#329YITH WooCommerce Product Gallery & Image Zoom244181,49020k+Non-prefixed global variable
#330Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation241,2113,15230k+Non-prefixed global variable
#331Adminify – White Label, Admin Menu Editor, Login Customizer255461,3707k+Non-prefixed global variable
#332AF Companion – Starter Sites, Speed Booster & Growth Suite for Professional Publishing256651,48610k+Non-prefixed global variable
#333ATUM WooCommerce Inventory Management and Stock Tracking252,6381,30410k+Non Singular String Literal Domain
#334Beaver Builder Page Builder – Drag and Drop Website Builder254,4631,819100k+Text Domain Mismatch
#335BlockSpare – Gutenberg Post Grid Blocks for News, Magazine & Blog Websites251,3271,71410k+Non-prefixed global variable
#336Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid2524385450k+Non-prefixed global variable
#337Bookit — Booking & Appointment Calendar255651,4584k+Non-prefixed global variable
#338Online Scheduling and Appointment Booking System – Bookly253,52887060k+Text Domain Mismatch
#339GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real Time256141,43140k+Non-prefixed global variable
#340CheckoutWC Lite251,3998523k+Text Domain Mismatch
#341Admin Columns25613995100k+Non-prefixed namespace
#342Coinbase Business Gateway for WooCommerce255691,317800Non-prefixed global variable
#343Conditional Payment Methods for WooCommerce255481,3981k+Non-prefixed global variable
#344Contact Form DB Divi255331,2993k+Non-prefixed global variable
#345Coupon Creator256984121k+Output is not escaped
#346CSS & JavaScript Toolbox2515561710k+Non-prefixed class
#347DecaLog259432361k+Exception output is not escaped
#348Docket Cache – Object Cache Accelerator2533348120k+Output is not escaped
#349Show Eventbrite Events – Event Feed for Eventbrite255951,525900Non-prefixed global variable
#350F4 Post Tree255361,332500Non-prefixed global variable