PluginScore

update_modification_detected

update modification detected

The plugin appears to include its own update or modification mechanism.

medium weight

Why It Shows Up

Plugin Check found updater code or code that modifies plugin files outside the normal WordPress.org update flow.

Why It Matters

Custom update mechanisms can bypass repository review, surprise site owners, or change executable code after installation.

How to Fix

  • Remove custom updater code from WordPress.org releases when it is not needed.
  • Do not rewrite plugin source files at runtime.
  • If remote updates are intentional outside WordPress.org, document the trust model and protect it with strong validation.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output Not Escaped
#2Plugin Check (PCP)012813210k+Exception Not Escaped
#3Block Slider – Responsive Image Slider, Video Slider & Post Slider195551,2913k+Non Prefixed Variable Found
#4Event Organiser191,10654420k+Text Domain Mismatch
#5Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization191,2952,6799k+Output Not Escaped
#6Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#7Scrollsequence – Cinematic Scroll Image Animation Plugin198781,5284k+Non Prefixed Variable Found
#8GiveWP – Donation Plugin and Fundraising Platform203,4353,580100k+Output Not Escaped
#9Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non Prefixed Variable Found
#10Remove Add to Cart WooCommerce206161,3784k+Non Prefixed Variable Found
#11WPJAM Basic203283564k+Output Not Escaped
#12Store Locator WordPress212,3721,57210k+Text Domain Mismatch
#13Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21521,959300k+Non Prefixed Variable Found
#14If-So Dynamic Content – Elementor & All Page Builders Personalization218897257k+Unsafe Printing Function
#15JCH Optimize219531334k+Output Not Escaped
#16Mapster WP Maps213,4402,9033k+Text Domain Mismatch
#17MotoPress Hotel Booking213,0611,03710k+Text Domain Mismatch
#18Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4693,33310k+Non Prefixed Variable Found
#19Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9185,06510k+Non Prefixed Hookname Found
#20User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor216961,48350k+Recommended
#21Five Star Restaurant Reservations – WordPress Booking Plugin211,0991,14710k+Output Not Escaped
#22Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non Prefixed Variable Found
#23Royal Addons for Elementor – Addons and Templates Kit for Elementor2113,0112,530600k+Text Domain Mismatch
#24Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output Not Escaped
#25Frontend Admin by DynamiApps225,9223,20810k+Text Domain Mismatch
#26Advanced Ads – Ad Manager & AdSense22578734100k+Non Prefixed Variable Found
#27Advanced Form Integration — Connect Forms to 200+ Apps225,7714,67810k+wp function not compatible with requires wp
#28Ajax Load More – Infinite Scroll, Load More, & Lazy Load2264159540k+Unsafe Printing Function
#29All-in-One Video Gallery229112,89220k+Non Prefixed Variable Found
#30Borderless – Addons and Templates for Elementor224381,3885k+Non Prefixed Variable Found
#31Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots221,6042,01910k+Direct Query
#32Divi Carousel Lite – 17+ Carousel Module229671,27510k+Non Prefixed Variable Found
#33Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#34Passster – Password Protect Pages and Content225391,41910k+Non Prefixed Variable Found
#35Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 500+ Patterns, 57 Blocks & Templates222,1674,1757k+Non Prefixed Variable Found
#36WP Customer Area223,30894110k+Text Domain Mismatch
#37Directorist: AI-Powered Business Directory, Listings & Classified Ads224432,12920k+Non Prefixed Variable Found
#38E2Pdf – Export Pdf Tool for WordPress221,07583610k+Unsafe Printing Function
#39EleSpare – News, Magazine and Blog Addons for Elementor227331,42310k+Non Prefixed Variable Found
#40Events Manager – Calendar, Bookings, Tickets, and more!224,7225,62170k+Output Not Escaped
#41Finale Lite – Sales Countdown Timer & Discount for WooCommerce221,0314514k+Output Not Escaped
#42Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar221,3211,3713k+Non Prefixed Variable Found
#43InfiniteWP Client222,2861,812200k+Exception Not Escaped
#44Custom Login Page Customizer – Login Designer225881,45530k+Non Prefixed Variable Found
#45Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non Prefixed Variable Found
#46Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non Prefixed Variable Found
#47PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe Printing Function
#48Restrict User Access – Ultimate Membership & Content Protection229771,84010k+Non Prefixed Variable Found
#49SSL Zen — SSL Certificate Installer & HTTPS Redirects227791,57510k+Non Prefixed Variable Found
#5010Web Booster – Website speed optimization, Cache & Page Speed optimizer2251360180k+Non Prefixed Variable Found