Maintainability Issues
Issue Codes
353 normalized finding codes in this category.
Missing direct file access protection
missing_direct_file_access_protection
A PHP file in the plugin can be loaded directly instead of through WordPress.
Non-prefixed global variable
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
The plugin defines a global variable without a plugin-specific prefix.
Non-prefixed hook name
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
The plugin defines a hook name without a plugin-specific prefix.
Non-prefixed function
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
The plugin defines a function without a plugin-specific prefix.
Direct Query
WordPress.DB.DirectDatabaseQuery.DirectQuery
The plugin runs a direct database query instead of using a higher-level WordPress API or cache-aware pattern.
No Caching
WordPress.DB.DirectDatabaseQuery.NoCaching
The plugin runs a direct database query instead of using a higher-level WordPress API or cache-aware pattern.
Missing Version
WordPress.WP.EnqueuedResourceParameters.MissingVersion
A script or stylesheet is loaded without the expected WordPress enqueue metadata.
trademarked term
trademarked_term
The plugin metadata or copy appears to conflict with WordPress.org directory policy expectations.
Non-prefixed class
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound
The plugin defines a class without a plugin-specific prefix.
mismatched plugin name
mismatched_plugin_name
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Not In Footer
WordPress.WP.EnqueuedResourceParameters.NotInFooter
A script or stylesheet is loaded without the expected WordPress enqueue metadata.
wp function not compatible with requires wp
wp_function_not_compatible_with_requires_wp
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Non-prefixed constant
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound
The plugin defines a constant without a plugin-specific prefix.
date date
WordPress.DateTime.RestrictedFunctions.date_date
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
strip tags strip tags
WordPress.WP.AlternativeFunctions.strip_tags_strip_tags
The plugin uses `strip_tags()` where WordPress-specific sanitization is usually clearer.
Dynamic hook name
WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound
The plugin invokes a hook name built from a variable or expression that Plugin Check cannot verify as plugin-prefixed.
error log error log
WordPress.PHP.DevelopmentFunctions.error_log_error_log
Development or debugging behavior appears in code that may run in production.
slow db query meta key
WordPress.DB.SlowDBQuery.slow_db_query_meta_key
A query pattern is likely to be slow on larger WordPress sites.
error log print r
WordPress.PHP.DevelopmentFunctions.error_log_print_r
Development or debugging behavior appears in code that may run in production.
slow db query meta query
WordPress.DB.SlowDBQuery.slow_db_query_meta_query
A query pattern is likely to be slow on larger WordPress sites.
file system operations fclose
WordPress.WP.AlternativeFunctions.file_system_operations_fclose
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
Schema Change
WordPress.DB.DirectDatabaseQuery.SchemaChange
The plugin runs a direct database query instead of using a higher-level WordPress API or cache-aware pattern.
file system operations fopen
WordPress.WP.AlternativeFunctions.file_system_operations_fopen
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
parse url parse url
WordPress.WP.AlternativeFunctions.parse_url_parse_url
The plugin uses raw URL parsing where WordPress URL helpers may be safer or more compatible.
unlink unlink
WordPress.WP.AlternativeFunctions.unlink_unlink
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Discouraged PHP function
Squiz.PHP.DiscouragedFunctions.Discouraged
The plugin uses a PHP or WordPress pattern that coding standards discourage.
Offloaded Content
PluginCheck.CodeAnalysis.Offloading.OffloadedContent
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
slow db query meta value
WordPress.DB.SlowDBQuery.slow_db_query_meta_value
A query pattern is likely to be slow on larger WordPress sites.
missing composer json file
missing_composer_json_file
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Non Enqueued Script
WordPress.WP.EnqueuedResources.NonEnqueuedScript
A script or stylesheet is loaded without the expected WordPress enqueue metadata.
rand rand
WordPress.WP.AlternativeFunctions.rand_rand
The plugin uses a random function that may not be appropriate for the task.
slow db query tax query
WordPress.DB.SlowDBQuery.slow_db_query_tax_query
A query pattern is likely to be slow on larger WordPress sites.
No Explicit Version
WordPress.WP.EnqueuedResourceParameters.NoExplicitVersion
A script or stylesheet is loaded without the expected WordPress enqueue metadata.
file system operations fwrite
WordPress.WP.AlternativeFunctions.file_system_operations_fwrite
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
update modification detected
update_modification_detected
The plugin appears to include its own update or modification mechanism.
No PHP code found
Internal.NoCodeFound
Plugin Check could not fully analyze part of the plugin or encountered an internal scan condition.
Forbidden PHP function found
Generic.PHP.ForbiddenFunctions.Found
The plugin uses a PHP or WordPress pattern that coding standards discourage.
plugin updater detected
plugin_updater_detected
The plugin appears to include its own update or modification mechanism.
trunk stable tag
trunk_stable_tag
Repository metadata is missing, stale, or inconsistent with WordPress.org expectations.
Plugin Directory Write
PluginCheck.CodeAnalysis.WriteFile.PluginDirectoryWrite
The plugin writes files in or near plugin-controlled directories.
curl curl init
WordPress.WP.AlternativeFunctions.curl_curl_init
The plugin uses raw cURL functions instead of the WordPress HTTP API.
badly named files
badly_named_files
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
curl curl exec
WordPress.WP.AlternativeFunctions.curl_curl_exec
The plugin uses raw cURL functions instead of the WordPress HTTP API.
file system operations mkdir
WordPress.WP.AlternativeFunctions.file_system_operations_mkdir
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
file system operations is writable
WordPress.WP.AlternativeFunctions.file_system_operations_is_writable
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
Not Allowed
PluginCheck.CodeAnalysis.Heredoc.NotAllowed
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Non Enqueued Stylesheet
WordPress.WP.EnqueuedResources.NonEnqueuedStylesheet
A script or stylesheet is loaded without the expected WordPress enqueue metadata.
curl curl close
WordPress.WP.AlternativeFunctions.curl_curl_close
The plugin uses raw cURL functions instead of the WordPress HTTP API.
curl curl setopt
WordPress.WP.AlternativeFunctions.curl_curl_setopt
The plugin uses raw cURL functions instead of the WordPress HTTP API.
five star reviews detected
five_star_reviews_detected
The plugin metadata or copy appears to conflict with WordPress.org directory policy expectations.
error log trigger error
WordPress.PHP.DevelopmentFunctions.error_log_trigger_error
Development or debugging behavior appears in code that may run in production.
Offloaded Content
PluginCheck.CodeAnalysis.EnqueuedResourceOffloading.OffloadedContent
A script or stylesheet is loaded without the expected WordPress enqueue metadata.
library core files
library_core_files
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Deprecated parameter: get_terms parameter 2
WordPress.WP.DeprecatedParameters.Get_termsParam2Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
rand mt rand
WordPress.WP.AlternativeFunctions.rand_mt_rand
The plugin uses a random function that may not be appropriate for the task.
error log var export
WordPress.PHP.DevelopmentFunctions.error_log_var_export
Development or debugging behavior appears in code that may run in production.
file system operations fread
WordPress.WP.AlternativeFunctions.file_system_operations_fread
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
upgrade notice limit
upgrade_notice_limit
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
file system operations rmdir
WordPress.WP.AlternativeFunctions.file_system_operations_rmdir
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
rename rename
WordPress.WP.AlternativeFunctions.rename_rename
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
curl curl getinfo
WordPress.WP.AlternativeFunctions.curl_curl_getinfo
The plugin uses raw cURL functions instead of the WordPress HTTP API.
Non-prefixed interface
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedInterfaceFound
The plugin defines a interface without a plugin-specific prefix.
error log debug backtrace
WordPress.PHP.DevelopmentFunctions.error_log_debug_backtrace
Development or debugging behavior appears in code that may run in production.
file system operations chmod
WordPress.WP.AlternativeFunctions.file_system_operations_chmod
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
stable tag mismatch
stable_tag_mismatch
Repository metadata is missing, stale, or inconsistent with WordPress.org expectations.
Short PHP open tag found
Generic.PHP.DisallowShortOpenTag.EchoFound
The plugin contains PHP syntax or file formatting that can cause compatibility problems.
curl curl error
WordPress.WP.AlternativeFunctions.curl_curl_error
The plugin uses raw cURL functions instead of the WordPress HTTP API.
Non-prefixed global variable
WordPress.NamingConventions.PrefixAllGlobals.VariableConstantNameFound
The plugin defines a global variable without a plugin-specific prefix.
file system operations readfile
WordPress.WP.AlternativeFunctions.file_system_operations_readfile
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
prevent path disclosure error reporting
WordPress.PHP.DevelopmentFunctions.prevent_path_disclosure_error_reporting
Development or debugging behavior appears in code that may run in production.
invalid tested upto minor
invalid_tested_upto_minor
Repository metadata is missing, stale, or inconsistent with WordPress.org expectations.
Direct Error Reporting Call
PluginCheck.CodeAnalysis.PHPErrorReporting.DirectErrorReportingCall
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
error log var dump
WordPress.PHP.DevelopmentFunctions.error_log_var_dump
Development or debugging behavior appears in code that may run in production.
Discouraged PHP function
WordPress.WP.DiscouragedFunctions.wp_reset_query_wp_reset_query
The plugin uses a PHP or WordPress pattern that coding standards discourage.
Non-prefixed namespace
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedNamespaceFound
The plugin defines a namespace without a plugin-specific prefix.
application detected
application_detected
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
block api version too low
block_api_version_too_low
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
curl curl errno
WordPress.WP.AlternativeFunctions.curl_curl_errno
The plugin uses raw cURL functions instead of the WordPress HTTP API.
Mixed line endings
Internal.LineEndings.Mixed
The plugin contains PHP syntax or file formatting that can cause compatibility problems.
curl curl setopt array
WordPress.WP.AlternativeFunctions.curl_curl_setopt_array
The plugin uses raw cURL functions instead of the WordPress HTTP API.
invalid plugin name
invalid_plugin_name
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
error log set error handler
WordPress.PHP.DevelopmentFunctions.error_log_set_error_handler
Development or debugging behavior appears in code that may run in production.
unexpected markdown file
unexpected_markdown_file
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
file system operations touch
WordPress.WP.AlternativeFunctions.file_system_operations_touch
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
file system operations fsockopen
WordPress.WP.AlternativeFunctions.file_system_operations_fsockopen
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
timezone change date default timezone set
WordPress.DateTime.RestrictedFunctions.timezone_change_date_default_timezone_set
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Deprecated function: get_page_by_title
WordPress.WP.DeprecatedFunctions.get_page_by_titleFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
ABSPATHDetected
PluginCheck.CodeAnalysis.WriteFile.ABSPATHDetected
The plugin writes files in or near plugin-controlled directories.
Ini Directive Display errors
PluginCheck.CodeAnalysis.PHPErrorReporting.IniDirectiveDisplay_errors
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Short URL found
PluginCheck.CodeAnalysis.ShortURL.Found
The plugin contains a development-only URL, short URL, or local endpoint reference.
file system operations is writeable
WordPress.WP.AlternativeFunctions.file_system_operations_is_writeable
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
Deprecated function: screen_icon
WordPress.WP.DeprecatedFunctions.screen_iconFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Non-prefixed global symbol
WordPress.NamingConventions.PrefixAllGlobals.InvalidPrefixPassed
The plugin defines a global symbol without a plugin-specific prefix.
Direct Integration
PluginCheck.CodeAnalysis.AIProvider.DirectIntegration
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
file system operations fputs
WordPress.WP.AlternativeFunctions.file_system_operations_fputs
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
no stable tag
no_stable_tag
Repository metadata is missing, stale, or inconsistent with WordPress.org expectations.
prevent path disclosure phpinfo
WordPress.PHP.DevelopmentFunctions.prevent_path_disclosure_phpinfo
Development or debugging behavior appears in code that may run in production.
Deprecated parameter: add_option parameter 3
WordPress.WP.DeprecatedParameters.Add_optionParam3Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Discouraged PHP function
WordPress.WP.DiscouragedFunctions.query_posts_query_posts
The plugin uses a PHP or WordPress pattern that coding standards discourage.
Localhost URL found
PluginCheck.CodeAnalysis.Localhost.Found
The plugin contains a development-only URL, short URL, or local endpoint reference.
Non-prefixed trait
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedTraitFound
The plugin defines a trait without a plugin-specific prefix.
github directory
github_directory
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
uninstall missing constant check
uninstall_missing_constant_check
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Deprecated function: seems_utf8
WordPress.WP.DeprecatedFunctions.seems_utf8Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Short PHP open tag found
Generic.PHP.DisallowShortOpenTag.PossibleFound
The plugin contains PHP syntax or file formatting that can cause compatibility problems.
Discouraged WordPress constant usage: TEMPLATEPATH
WordPress.WP.DiscouragedConstants.TEMPLATEPATHUsageFound
The plugin uses a PHP or WordPress pattern that coding standards discourage.
mysql mysqli get server info
WordPress.DB.RestrictedFunctions.mysql_mysqli_get_server_info
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
Deprecated function: wp_get_sites
WordPress.WP.DeprecatedFunctions.wp_get_sitesFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated parameter: wp_upload_bits parameter 2
WordPress.WP.DeprecatedParameters.Wp_upload_bitsParam2Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated parameter: wp_count_terms parameter 2
WordPress.WP.DeprecatedParameters.Wp_count_termsParam2Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
mysql PDO
WordPress.DB.RestrictedClasses.mysql__PDO
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
error log wp debug backtrace summary
WordPress.PHP.DevelopmentFunctions.error_log_wp_debug_backtrace_summary
Development or debugging behavior appears in code that may run in production.
Goto statement found
Generic.PHP.DiscourageGoto.Found
The plugin uses a PHP or WordPress pattern that coding standards discourage.
curl curl reset
WordPress.WP.AlternativeFunctions.curl_curl_reset
The plugin uses raw cURL functions instead of the WordPress HTTP API.
mysql mysqli connect
WordPress.DB.RestrictedFunctions.mysql_mysqli_connect
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
curl curl multi init
WordPress.WP.AlternativeFunctions.curl_curl_multi_init
The plugin uses raw cURL functions instead of the WordPress HTTP API.
curl curl multi add handle
WordPress.WP.AlternativeFunctions.curl_curl_multi_add_handle
The plugin uses raw cURL functions instead of the WordPress HTTP API.
curl curl multi exec
WordPress.WP.AlternativeFunctions.curl_curl_multi_exec
The plugin uses raw cURL functions instead of the WordPress HTTP API.
Discouraged WordPress constant usage: STYLESHEETPATH
WordPress.WP.DiscouragedConstants.STYLESHEETPATHUsageFound
The plugin uses a PHP or WordPress pattern that coding standards discourage.
curl curl multi remove handle
WordPress.WP.AlternativeFunctions.curl_curl_multi_remove_handle
The plugin uses raw cURL functions instead of the WordPress HTTP API.
rand seeding mt srand
WordPress.WP.AlternativeFunctions.rand_seeding_mt_srand
The plugin uses a random function that may not be appropriate for the task.
curl curl multi close
WordPress.WP.AlternativeFunctions.curl_curl_multi_close
The plugin uses raw cURL functions instead of the WordPress HTTP API.
Deprecated function: get_currentuserinfo
WordPress.WP.DeprecatedFunctions.get_currentuserinfoFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
allow unfiltered uploads detected
allow_unfiltered_uploads_detected
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Deprecated function: get_theme_data
WordPress.WP.DeprecatedFunctions.get_theme_dataFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Discouraged WordPress constant usage: PLUGINDIR
WordPress.WP.DiscouragedConstants.PLUGINDIRUsageFound
The plugin uses a PHP or WordPress pattern that coding standards discourage.
curl curl multi getcontent
WordPress.WP.AlternativeFunctions.curl_curl_multi_getcontent
The plugin uses raw cURL functions instead of the WordPress HTTP API.
mysql mysql get server info
WordPress.DB.RestrictedFunctions.mysql_mysql_get_server_info
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli query
WordPress.DB.RestrictedFunctions.mysql_mysqli_query
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
Byte order mark found
Generic.Files.ByteOrderMark.Found
The plugin contains PHP syntax or file formatting that can cause compatibility problems.
Deprecated function: get_current_theme
WordPress.WP.DeprecatedFunctions.get_current_themeFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Backtick operator found
Generic.PHP.BacktickOperator.Found
The plugin uses a PHP or WordPress pattern that coding standards discourage.
mysql mysql query
WordPress.DB.RestrictedFunctions.mysql_mysql_query
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
ai instruction directory
ai_instruction_directory
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Scanner exception
Internal.Exception
Plugin Check could not fully analyze part of the plugin or encountered an internal scan condition.
curl curl multi select
WordPress.WP.AlternativeFunctions.curl_curl_multi_select
The plugin uses raw cURL functions instead of the WordPress HTTP API.
Alternative PHP tag found
Generic.PHP.DisallowAlternativePHPTags.MaybeASPOpenTagFound
The plugin contains PHP syntax or file formatting that can cause compatibility problems.
Alternative PHP tag found
Generic.PHP.DisallowAlternativePHPTags.MaybeASPShortOpenTagFound
The plugin contains PHP syntax or file formatting that can cause compatibility problems.
mysql mysqli close
WordPress.DB.RestrictedFunctions.mysql_mysqli_close
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli
WordPress.DB.RestrictedClasses.mysql__mysqli
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli connect error
WordPress.DB.RestrictedFunctions.mysql_mysqli_connect_error
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli error
WordPress.DB.RestrictedFunctions.mysql_mysqli_error
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
curl curl multi info read
WordPress.WP.AlternativeFunctions.curl_curl_multi_info_read
The plugin uses raw cURL functions instead of the WordPress HTTP API.
Deprecated parameter value found
WordPress.WP.DeprecatedParameterValues.Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
mysql mysql error
WordPress.DB.RestrictedFunctions.mysql_mysql_error
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli free result
WordPress.DB.RestrictedFunctions.mysql_mysqli_free_result
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
rand seeding srand
WordPress.WP.AlternativeFunctions.rand_seeding_srand
The plugin uses a random function that may not be appropriate for the task.
Define WP DEBUG
PluginCheck.CodeAnalysis.PHPErrorReporting.DefineWP_DEBUG
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
mysql mysqli fetch assoc
WordPress.DB.RestrictedFunctions.mysql_mysqli_fetch_assoc
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql connect
WordPress.DB.RestrictedFunctions.mysql_mysql_connect
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
case sensitive files
case_sensitive_files
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
mysql mysql select db
WordPress.DB.RestrictedFunctions.mysql_mysql_select_db
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli num rows
WordPress.DB.RestrictedFunctions.mysql_mysqli_num_rows
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
error log debug print backtrace
WordPress.PHP.DevelopmentFunctions.error_log_debug_print_backtrace
Development or debugging behavior appears in code that may run in production.
Deprecated parameter: get_site_option parameter 3
WordPress.WP.DeprecatedParameters.Get_site_optionParam3Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
mysql mysql close
WordPress.DB.RestrictedFunctions.mysql_mysql_close
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql free result
WordPress.DB.RestrictedFunctions.mysql_mysql_free_result
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql num rows
WordPress.DB.RestrictedFunctions.mysql_mysql_num_rows
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
curl curl file create
WordPress.WP.AlternativeFunctions.curl_curl_file_create
The plugin uses raw cURL functions instead of the WordPress HTTP API.
file system operations chown
WordPress.WP.AlternativeFunctions.file_system_operations_chown
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
file system operations pfsockopen
WordPress.WP.AlternativeFunctions.file_system_operations_pfsockopen
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
Deprecated class: services_json
WordPress.WP.DeprecatedClasses.services_jsonFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_make_content_images_responsive
WordPress.WP.DeprecatedFunctions.wp_make_content_images_responsiveFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_specialchars
WordPress.WP.DeprecatedFunctions.wp_specialcharsFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated parameter: term_description parameter 2
WordPress.WP.DeprecatedParameters.Term_descriptionParam2Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
mysql mysql fetch assoc
WordPress.DB.RestrictedFunctions.mysql_mysql_fetch_assoc
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli fetch array
WordPress.DB.RestrictedFunctions.mysql_mysqli_fetch_array
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
file system operations chgrp
WordPress.WP.AlternativeFunctions.file_system_operations_chgrp
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
Deprecated function: add_contextual_help
WordPress.WP.DeprecatedFunctions.add_contextual_helpFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: register_sidebar_widget
WordPress.WP.DeprecatedFunctions.register_sidebar_widgetFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
mysql mysqli connect errno
WordPress.DB.RestrictedFunctions.mysql_mysqli_connect_errno
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli errno
WordPress.DB.RestrictedFunctions.mysql_mysqli_errno
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli fetch row
WordPress.DB.RestrictedFunctions.mysql_mysqli_fetch_row
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
Deprecated class: services_json_error
WordPress.WP.DeprecatedClasses.services_json_errorFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: current_user_can_for_blog
WordPress.WP.DeprecatedFunctions.current_user_can_for_blogFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: image_resize
WordPress.WP.DeprecatedFunctions.image_resizeFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: register_widget_control
WordPress.WP.DeprecatedFunctions.register_widget_controlFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated parameter: wp_new_user_notification parameter 2
WordPress.WP.DeprecatedParameters.Wp_new_user_notificationParam2Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Ini Directive Error reporting
PluginCheck.CodeAnalysis.PHPErrorReporting.IniDirectiveError_reporting
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
mysql mysql set charset
WordPress.DB.RestrictedFunctions.mysql_mysql_set_charset
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli init
WordPress.DB.RestrictedFunctions.mysql_mysqli_init
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli report
WordPress.DB.RestrictedFunctions.mysql_mysqli_report
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
Deprecated class: wp_http_curl
WordPress.WP.DeprecatedClasses.wp_http_curlFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: add_option_whitelist
WordPress.WP.DeprecatedFunctions.add_option_whitelistFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: get_theme
WordPress.WP.DeprecatedFunctions.get_themeFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: update_usermeta
WordPress.WP.DeprecatedFunctions.update_usermetaFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
mysql mysql errno
WordPress.DB.RestrictedFunctions.mysql_mysql_errno
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql fetch row
WordPress.DB.RestrictedFunctions.mysql_mysql_fetch_row
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli get client info
WordPress.DB.RestrictedFunctions.mysql_mysqli_get_client_info
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli set charset
WordPress.DB.RestrictedFunctions.mysql_mysqli_set_charset
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
Deprecated function: get_settings
WordPress.WP.DeprecatedFunctions.get_settingsFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: get_themes
WordPress.WP.DeprecatedFunctions.get_themesFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: get_userdatabylogin
WordPress.WP.DeprecatedFunctions.get_userdatabyloginFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_htmledit_pre
WordPress.WP.DeprecatedFunctions.wp_htmledit_preFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_no_robots
WordPress.WP.DeprecatedFunctions.wp_no_robotsFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Define WP DEBUG DISPLAY
PluginCheck.CodeAnalysis.PHPErrorReporting.DefineWP_DEBUG_DISPLAY
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
mysql mysql fetch array
WordPress.DB.RestrictedFunctions.mysql_mysql_fetch_array
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql num fields
WordPress.DB.RestrictedFunctions.mysql_mysql_num_fields
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql unbuffered query
WordPress.DB.RestrictedFunctions.mysql_mysql_unbuffered_query
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli affected rows
WordPress.DB.RestrictedFunctions.mysql_mysqli_affected_rows
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli fetch object
WordPress.DB.RestrictedFunctions.mysql_mysqli_fetch_object
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql affected rows
WordPress.DB.RestrictedFunctions.mysql_mysql_affected_rows
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql fetch field
WordPress.DB.RestrictedFunctions.mysql_mysql_fetch_field
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli insert id
WordPress.DB.RestrictedFunctions.mysql_mysqli_insert_id
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli select db
WordPress.DB.RestrictedFunctions.mysql_mysqli_select_db
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
Deprecated function: _inject_theme_attribute_in_block_template_content
WordPress.WP.DeprecatedFunctions._inject_theme_attribute_in_block_template_contentFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: get_user_by_email
WordPress.WP.DeprecatedFunctions.get_user_by_emailFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_remove_targeted_link_rel_filters
WordPress.WP.DeprecatedFunctions.wp_remove_targeted_link_rel_filtersFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
phar files
phar_files
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
mysql mysql data seek
WordPress.DB.RestrictedFunctions.mysql_mysql_data_seek
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql field flags
WordPress.DB.RestrictedFunctions.mysql_mysql_field_flags
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql get client info
WordPress.DB.RestrictedFunctions.mysql_mysql_get_client_info
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql info
WordPress.DB.RestrictedFunctions.mysql_mysql_info
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli get client version
WordPress.DB.RestrictedFunctions.mysql_mysqli_get_client_version
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli next result
WordPress.DB.RestrictedFunctions.mysql_mysqli_next_result
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli num fields
WordPress.DB.RestrictedFunctions.mysql_mysqli_num_fields
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli real connect
WordPress.DB.RestrictedFunctions.mysql_mysqli_real_connect
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
curl curl strerror
WordPress.WP.AlternativeFunctions.curl_curl_strerror
The plugin uses raw cURL functions instead of the WordPress HTTP API.
Deprecated function: delete_usermeta
WordPress.WP.DeprecatedFunctions.delete_usermetaFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: get_blog_list
WordPress.WP.DeprecatedFunctions.get_blog_listFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: get_usermeta
WordPress.WP.DeprecatedFunctions.get_usermetaFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_blacklist_check
WordPress.WP.DeprecatedFunctions.wp_blacklist_checkFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_init_targeted_link_rel_filters
WordPress.WP.DeprecatedFunctions.wp_init_targeted_link_rel_filtersFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_tiny_mce
WordPress.WP.DeprecatedFunctions.wp_tiny_mceFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated parameter: unregister_setting parameter 3
WordPress.WP.DeprecatedParameters.Unregister_settingParam3Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Define WP DEBUG LOG
PluginCheck.CodeAnalysis.PHPErrorReporting.DefineWP_DEBUG_LOG
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
mysql mysql fetch object
WordPress.DB.RestrictedFunctions.mysql_mysql_fetch_object
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql field name
WordPress.DB.RestrictedFunctions.mysql_mysql_field_name
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql get proto info
WordPress.DB.RestrictedFunctions.mysql_mysql_get_proto_info
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql insert id
WordPress.DB.RestrictedFunctions.mysql_mysql_insert_id
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql result
WordPress.DB.RestrictedFunctions.mysql_mysql_result
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli more results
WordPress.DB.RestrictedFunctions.mysql_mysqli_more_results
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli store result
WordPress.DB.RestrictedFunctions.mysql_mysqli_store_result
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
Deprecated function: get_users_of_blog
WordPress.WP.DeprecatedFunctions.get_users_of_blogFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: the_editor
WordPress.WP.DeprecatedFunctions.the_editorFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_richedit_pre
WordPress.WP.DeprecatedFunctions.wp_richedit_preFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Discouraged WordPress constant usage: MUPLUGINDIR
WordPress.WP.DiscouragedConstants.MUPLUGINDIRUsageFound
The plugin uses a PHP or WordPress pattern that coding standards discourage.
case sensitive folders
case_sensitive_folders
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Const WP DEBUG
PluginCheck.CodeAnalysis.PHPErrorReporting.ConstWP_DEBUG
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
Missing required parameter: parse_str_result
PluginCheck.CodeAnalysis.RequiredFunctionParameters.parse_str_resultMissing
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
mysql My SQLi
WordPress.DB.RestrictedClasses.mysql__MySQLi
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql create db
WordPress.DB.RestrictedFunctions.mysql_mysql_create_db
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql db name
WordPress.DB.RestrictedFunctions.mysql_mysql_db_name
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql db query
WordPress.DB.RestrictedFunctions.mysql_mysql_db_query
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql drop db
WordPress.DB.RestrictedFunctions.mysql_mysql_drop_db
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql fetch lengths
WordPress.DB.RestrictedFunctions.mysql_mysql_fetch_lengths
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql field len
WordPress.DB.RestrictedFunctions.mysql_mysql_field_len
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql field seek
WordPress.DB.RestrictedFunctions.mysql_mysql_field_seek
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql get host info
WordPress.DB.RestrictedFunctions.mysql_mysql_get_host_info
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql list dbs
WordPress.DB.RestrictedFunctions.mysql_mysql_list_dbs
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql list fields
WordPress.DB.RestrictedFunctions.mysql_mysql_list_fields
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql list processes
WordPress.DB.RestrictedFunctions.mysql_mysql_list_processes
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql list tables
WordPress.DB.RestrictedFunctions.mysql_mysql_list_tables
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql pconnect
WordPress.DB.RestrictedFunctions.mysql_mysql_pconnect
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql ping
WordPress.DB.RestrictedFunctions.mysql_mysql_ping
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql tablename
WordPress.DB.RestrictedFunctions.mysql_mysql_tablename
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql thread id
WordPress.DB.RestrictedFunctions.mysql_mysql_thread_id
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli fetch field
WordPress.DB.RestrictedFunctions.mysql_mysqli_fetch_field
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli fetch field direct
WordPress.DB.RestrictedFunctions.mysql_mysqli_fetch_field_direct
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli fetch fields
WordPress.DB.RestrictedFunctions.mysql_mysqli_fetch_fields
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli get cache stats
WordPress.DB.RestrictedFunctions.mysql_mysqli_get_cache_stats
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli get client stats
WordPress.DB.RestrictedFunctions.mysql_mysqli_get_client_stats
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli multi query
WordPress.DB.RestrictedFunctions.mysql_mysqli_multi_query
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli prepare
WordPress.DB.RestrictedFunctions.mysql_mysqli_prepare
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqlnd ms dump servers
WordPress.DB.RestrictedFunctions.mysql_mysqlnd_ms_dump_servers
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqlnd ms fabric select global
WordPress.DB.RestrictedFunctions.mysql_mysqlnd_ms_fabric_select_global
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqlnd ms fabric select shard
WordPress.DB.RestrictedFunctions.mysql_mysqlnd_ms_fabric_select_shard
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqlnd ms get last used connection
WordPress.DB.RestrictedFunctions.mysql_mysqlnd_ms_get_last_used_connection
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqlnd qc clear cache
WordPress.DB.RestrictedFunctions.mysql_mysqlnd_qc_clear_cache
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqlnd qc set is select
WordPress.DB.RestrictedFunctions.mysql_mysqlnd_qc_set_is_select
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqlnd qc set storage handler
WordPress.DB.RestrictedFunctions.mysql_mysqlnd_qc_set_storage_handler
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
curl curl copy handle
WordPress.WP.AlternativeFunctions.curl_curl_copy_handle
The plugin uses raw cURL functions instead of the WordPress HTTP API.
curl curl multi errno
WordPress.WP.AlternativeFunctions.curl_curl_multi_errno
The plugin uses raw cURL functions instead of the WordPress HTTP API.
curl curl share errno
WordPress.WP.AlternativeFunctions.curl_curl_share_errno
The plugin uses raw cURL functions instead of the WordPress HTTP API.
curl curl share setopt
WordPress.WP.AlternativeFunctions.curl_curl_share_setopt
The plugin uses raw cURL functions instead of the WordPress HTTP API.
Deprecated function: add_custom_background
WordPress.WP.DeprecatedFunctions.add_custom_backgroundFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: add_object_page
WordPress.WP.DeprecatedFunctions.add_object_pageFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: addslashes_gpc
WordPress.WP.DeprecatedFunctions.addslashes_gpcFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: clean_url
WordPress.WP.DeprecatedFunctions.clean_urlFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: get_alloptions
WordPress.WP.DeprecatedFunctions.get_alloptionsFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: get_author_link
WordPress.WP.DeprecatedFunctions.get_author_linkFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: get_user_id_from_string
WordPress.WP.DeprecatedFunctions.get_user_id_from_stringFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_get_http
WordPress.WP.DeprecatedFunctions.wp_get_httpFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_get_loading_attr_default
WordPress.WP.DeprecatedFunctions.wp_get_loading_attr_defaultFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_load_image
WordPress.WP.DeprecatedFunctions.wp_load_imageFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_targeted_link_rel
WordPress.WP.DeprecatedFunctions.wp_targeted_link_relFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_update_core
WordPress.WP.DeprecatedFunctions.wp_update_coreFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated parameter: is_email parameter 2
WordPress.WP.DeprecatedParameters.Is_emailParam2Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated parameter: register_meta parameter 4
WordPress.WP.DeprecatedParameters.Register_metaParam4Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
mysql PDOStatement
WordPress.DB.RestrictedClasses.mysql__PDOStatement
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql field table
WordPress.DB.RestrictedFunctions.mysql_mysql_field_table
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysql stat
WordPress.DB.RestrictedFunctions.mysql_mysql_stat
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli autocommit
WordPress.DB.RestrictedFunctions.mysql_mysqli_autocommit
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli character set name
WordPress.DB.RestrictedFunctions.mysql_mysqli_character_set_name
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli commit
WordPress.DB.RestrictedFunctions.mysql_mysqli_commit
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli data seek
WordPress.DB.RestrictedFunctions.mysql_mysqli_data_seek
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli driver
WordPress.DB.RestrictedFunctions.mysql_mysqli_driver
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli get proto info
WordPress.DB.RestrictedFunctions.mysql_mysqli_get_proto_info
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli options
WordPress.DB.RestrictedFunctions.mysql_mysqli_options
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli ping
WordPress.DB.RestrictedFunctions.mysql_mysqli_ping
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli real query
WordPress.DB.RestrictedFunctions.mysql_mysqli_real_query
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli ssl set
WordPress.DB.RestrictedFunctions.mysql_mysqli_ssl_set
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli stmt bind param
WordPress.DB.RestrictedFunctions.mysql_mysqli_stmt_bind_param
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli stmt close
WordPress.DB.RestrictedFunctions.mysql_mysqli_stmt_close
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
mysql mysqli stmt execute
WordPress.DB.RestrictedFunctions.mysql_mysqli_stmt_execute
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
curl curl multi setopt
WordPress.WP.AlternativeFunctions.curl_curl_multi_setopt
The plugin uses raw cURL functions instead of the WordPress HTTP API.
curl curl multi strerror
WordPress.WP.AlternativeFunctions.curl_curl_multi_strerror
The plugin uses raw cURL functions instead of the WordPress HTTP API.
curl curl pause
WordPress.WP.AlternativeFunctions.curl_curl_pause
The plugin uses raw cURL functions instead of the WordPress HTTP API.
curl curl wrapper
WordPress.WP.AlternativeFunctions.curl_curl_wrapper
The plugin uses raw cURL functions instead of the WordPress HTTP API.
curl curl wrapper request
WordPress.WP.AlternativeFunctions.curl_curl_wrapper_request
The plugin uses raw cURL functions instead of the WordPress HTTP API.
Deprecated class: wp_http_streams
WordPress.WP.DeprecatedClasses.wp_http_streamsFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: _c
WordPress.WP.DeprecatedFunctions._cFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: _get_path_to_translation_from_lang_dir
WordPress.WP.DeprecatedFunctions._get_path_to_translation_from_lang_dirFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: _rotate_image_resource
WordPress.WP.DeprecatedFunctions._rotate_image_resourceFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: add_utility_page
WordPress.WP.DeprecatedFunctions.add_utility_pageFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: format_to_post
WordPress.WP.DeprecatedFunctions.format_to_postFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: get_author_name
WordPress.WP.DeprecatedFunctions.get_author_nameFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: get_category_children
WordPress.WP.DeprecatedFunctions.get_category_childrenFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: get_post_to_edit
WordPress.WP.DeprecatedFunctions.get_post_to_editFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: get_the_author_firstname
WordPress.WP.DeprecatedFunctions.get_the_author_firstnameFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: get_the_author_lastname
WordPress.WP.DeprecatedFunctions.get_the_author_lastnameFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: get_the_author_nickname
WordPress.WP.DeprecatedFunctions.get_the_author_nicknameFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: get_usernumposts
WordPress.WP.DeprecatedFunctions.get_usernumpostsFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: global_terms_enabled
WordPress.WP.DeprecatedFunctions.global_terms_enabledFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: is_comments_popup
WordPress.WP.DeprecatedFunctions.is_comments_popupFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: is_site_admin
WordPress.WP.DeprecatedFunctions.is_site_adminFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: is_taxonomy
WordPress.WP.DeprecatedFunctions.is_taxonomyFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: is_term
WordPress.WP.DeprecatedFunctions.is_termFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: translate_with_context
WordPress.WP.DeprecatedFunctions.translate_with_contextFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: update_user_status
WordPress.WP.DeprecatedFunctions.update_user_statusFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: user_can_edit_post_comments
WordPress.WP.DeprecatedFunctions.user_can_edit_post_commentsFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_cache_reset
WordPress.WP.DeprecatedFunctions.wp_cache_resetFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_get_duotone_filter_svg
WordPress.WP.DeprecatedFunctions.wp_get_duotone_filter_svgFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_get_user_request_data
WordPress.WP.DeprecatedFunctions.wp_get_user_request_dataFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_img_tag_add_loading_attr
WordPress.WP.DeprecatedFunctions.wp_img_tag_add_loading_attrFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_kses_js_entities
WordPress.WP.DeprecatedFunctions.wp_kses_js_entitiesFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: wp_preload_dialogs
WordPress.WP.DeprecatedFunctions.wp_preload_dialogsFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated parameter: get_the_author parameter 1
WordPress.WP.DeprecatedParameters.Get_the_authorParam1Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated parameter: get_user_option parameter 3
WordPress.WP.DeprecatedParameters.Get_user_optionParam3Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated parameter: get_wp_title_rss parameter 1
WordPress.WP.DeprecatedParameters.Get_wp_title_rssParam1Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated parameter: switch_to_blog parameter 2
WordPress.WP.DeprecatedParameters.Switch_to_blogParam2Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated parameter: the_author parameter 1
WordPress.WP.DeprecatedParameters.The_authorParam1Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated parameter: the_author parameter 2
WordPress.WP.DeprecatedParameters.The_authorParam2Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated parameter: wp_install parameter 5
WordPress.WP.DeprecatedParameters.Wp_installParam5Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Discouraged WordPress constant declaration: PLUGINDIR
WordPress.WP.DiscouragedConstants.PLUGINDIRDeclarationFound
The plugin uses a PHP or WordPress pattern that coding standards discourage.
empty plugin name
empty_plugin_name
Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.
mysql mysqli stmt get result
WordPress.DB.RestrictedFunctions.mysql_mysqli_stmt_get_result
The plugin uses a raw MySQL extension or class instead of WordPress database APIs.
Deprecated function: _get_path_to_translation
WordPress.WP.DeprecatedFunctions._get_path_to_translationFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: post_permalink
WordPress.WP.DeprecatedFunctions.post_permalinkFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated function: user_pass_ok
WordPress.WP.DeprecatedFunctions.user_pass_okFound
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated parameter: get_delete_post_link parameter 2
WordPress.WP.DeprecatedParameters.Get_delete_post_linkParam2Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Deprecated parameter: _wp_post_revision_fields parameter 2
WordPress.WP.DeprecatedParameters._wp_post_revision_fieldsParam2Found
The plugin uses a WordPress API, parameter, class, or value that has been deprecated.
Discouraged WordPress constant declaration: MUPLUGINDIR
WordPress.WP.DiscouragedConstants.MUPLUGINDIRDeclarationFound
The plugin uses a PHP or WordPress pattern that coding standards discourage.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | BulletProof Security | 0 | 5,048 | 4,949 | 20k+ | Output is not escaped | ||
| #2 | Intercom | 0 | 60 | 71 | 6k+ | Non-prefixed function | ||
| #3 | Live Shopping & Shoppable Videos For WooCommerce | 0 | 79 | 174 | 400 | Non-prefixed global variable | ||
| #4 | Plugin Check (PCP) | 0 | 128 | 140 | 10k+ | Non-prefixed global variable | ||
| #5 | Themify Builder | 9 | 5,334 | 2,171 | 5k+ | Text Domain Mismatch | ||
| #6 | JetBackup – Backup, Restore & Migrate | 10 | 1,567 | 156 | 200k+ | Exception output is not escaped | ||
| #7 | 404 Solution | 15 | 582 | 1,532 | 10k+ | Non-prefixed class | ||
| #8 | Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more | 15 | 45 | 166 | 500k+ | Database parameter is not escaped | ||
| #9 | MDTF – Meta Data and Taxonomies Filter | 16 | 1,550 | 1,956 | 1k+ | Non-prefixed global variable | ||
| #10 | AnyComment | 17 | 445 | 449 | 5k+ | Output is not escaped | ||
| #11 | RestroPress – Online Food Ordering System | 17 | 535 | 3,234 | 1k+ | Non-prefixed global variable | ||
| #12 | Efí Bank | 17 | 886 | 553 | 300 | Exception output is not escaped | ||
| #13 | Shopping Cart & eCommerce Store | 17 | 7,492 | 17,554 | 3k+ | Non-prefixed global variable | ||
| #14 | wpForo Forum | 17 | 4,293 | 3,026 | 20k+ | Unsafe printing function | ||
| #15 | WPtouch – Make your WordPress Website Mobile-Friendly | 17 | 1,466 | 325 | 50k+ | Text Domain Mismatch | ||
| #16 | Administrator Z | 18 | 2,061 | 799 | 400 | Output is not escaped | ||
| #17 | Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution | 18 | 1,229 | 923 | 100k+ | Exception output is not escaped | ||
| #18 | JetFormBuilder — Dynamic Blocks Form Builder | 18 | 2,131 | 1,623 | 80k+ | Text Domain Mismatch | ||
| #19 | Pagopar – WooCommerce Gateway | 18 | 530 | 1,215 | 400 | Non-prefixed global variable | ||
| #20 | WPPizza – A Restaurant Plugin | 18 | 4,689 | 2,703 | 1k+ | Text Domain Mismatch | ||
| #21 | Block Slider – Responsive Image Slider, Video Slider & Post Slider | 19 | 555 | 1,291 | 3k+ | Non-prefixed global variable | ||
| #22 | GiveWP – Donation Plugin and Fundraising Platform | 19 | 3,402 | 3,555 | 100k+ | Output is not escaped | ||
| #23 | Go Fetch Jobs (for WP Job Manager) | 19 | 1,410 | 1,741 | 600 | Non-prefixed global variable | ||
| #24 | Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) | 19 | 3,275 | 3,228 | 9k+ | Output is not escaped | ||
| #25 | Matomo Analytics – Powerful, Privacy-First Insights for WordPress | 19 | 1,993 | 892 | 100k+ | Exception output is not escaped | ||
| #26 | Netgsm | 19 | 352 | 348 | 1k+ | Non-prefixed global variable | ||
| #27 | Verified Reviews (Avis Vérifiés) | 19 | 671 | 1,136 | 700 | Non-prefixed global variable | ||
| #28 | Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) | 19 | 530 | 375 | 3m+ | Missing Translators Comment | ||
| #29 | Scrollsequence – Cinematic Scroll Image Animation Plugin | 19 | 878 | 1,528 | 3k+ | Non-prefixed global variable | ||
| #30 | SendPress Newsletters | 19 | 2,293 | 1,422 | 1k+ | Output is not escaped | ||
| #31 | SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments | 19 | 541 | 1,146 | 80k+ | Non-prefixed global variable | ||
| #32 | WP Email Template | 19 | 344 | 345 | 2k+ | Exception output is not escaped | ||
| #33 | WPOSS阿里云对象存储 | 19 | 269 | 315 | 900 | Non-prefixed namespace | ||
| #34 | WPQiNiu七牛云对象存储 | 19 | 138 | 612 | 400 | Non-prefixed global variable | ||
| #35 | AweBooking – Hotel Booking System | 20 | 309 | 514 | 1k+ | Non-prefixed global variable | ||
| #36 | Brizy – Page Builder | 20 | 585 | 726 | 60k+ | Output is not escaped | ||
| #37 | Broadstreet | 20 | 434 | 273 | 800 | Output is not escaped | ||
| #38 | Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) | 20 | 736 | 2,112 | 900 | Non-prefixed global variable | ||
| #39 | Cost Calculator Builder | 20 | 323 | 766 | 20k+ | Non-prefixed global variable | ||
| #40 | SysBasics Customize My Account for WooCommerce – Live My Account Customizer | 20 | 743 | 911 | 7k+ | Non-prefixed global variable | ||
| #41 | Download Monitor | 20 | 423 | 1,367 | 80k+ | Non-prefixed hook name | ||
| #42 | Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More | 20 | 2,878 | 1,988 | 1m+ | Non-prefixed global variable | ||
| #43 | Event Organiser | 20 | 1,104 | 544 | 20k+ | Text Domain Mismatch | ||
| #44 | EventPrime – Events Calendar, Bookings, Tickets & AI | 20 | 846 | 4,224 | 7k+ | Non-prefixed global variable | ||
| #45 | GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership | 20 | 1,832 | 720 | 700 | Non Singular String Literal Domain | ||
| #46 | MBE eShip | 20 | 527 | 740 | 1k+ | Non-prefixed global variable | ||
| #47 | Brevo – Email, SMS, Web Push, Chat, and more. | 20 | 460 | 646 | 100k+ | Request data is not unslashed | ||
| #48 | MAS Videos | 20 | 519 | 1,693 | 1k+ | Non-prefixed global variable | ||
| #49 | Microthemer Lite – Visual Editor to Customize CSS | 20 | 1,004 | 1,699 | 10k+ | Non-prefixed global variable | ||
| #50 | Nimble Page Builder | 20 | 1,591 | 1,684 | 30k+ | Missing Arg Domain |