Performance Issues
Issue Codes
3 normalized finding codes in this category.
Post Not In exclude
WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude
The plugin uses a query or runtime pattern that can become expensive on larger sites.
Post Not In post not in
WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_post__not_in
The plugin uses a query or runtime pattern that can become expensive on larger sites.
Suppress Filters suppress filters
WordPressVIPMinimum.Performance.WPQueryParams.SuppressFilters_suppress_filters
The plugin uses a query or runtime pattern that can become expensive on larger sites.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #751 | Automatic YouTube Gallery – Embed Auto-Updating YouTube Video Galleries, Feeds, Playlists & Channels | 34 | 86 | 255 | 9k+ | Direct Query | ||
| #752 | BoldGrid Easy SEO – Simple and Effective SEO | 34 | 149 | 104 | 40k+ | Text Domain Mismatch | ||
| #753 | BuddyPress & BuddyBoss Member Profile Forms | 34 | 154 | 121 | 400 | Text Domain Mismatch | ||
| #754 | Delisho – Recipe Widgets and Blocks | 34 | 60 | 355 | 1k+ | Input is not sanitized | ||
| #755 | Einsatzverwaltung | 34 | 152 | 128 | 1k+ | Output is not escaped | ||
| #756 | Essential Classy Addons for Elementor – 150+ Widgets, Templates & Performance Tools | 34 | 283 | 186 | 500 | Output is not escaped | ||
| #757 | Flexible Subscriptions | 34 | 46 | 258 | 1k+ | Non-prefixed global variable | ||
| #758 | Garden Gnome Package | 34 | 116 | 51 | 4k+ | Text Domain Mismatch | ||
| #759 | Inavii Social Feed – Live Social Proof Gallery | 34 | 532 | 180 | 9k+ | Text Domain Mismatch | ||
| #760 | MPL-Publisher — Ebook & Audiobook Creator | 34 | 489 | 76 | 800 | Text Domain Mismatch | ||
| #761 | PushEngage – Web Push Notifications, WooCommerce Automation & Chat Widget | 34 | 46 | 298 | 9k+ | Missing nonce verification | ||
| #762 | QuadLayers Telegram Button | 34 | 149 | 71 | 1k+ | Text Domain Mismatch | ||
| #763 | RaraTheme Companion | 34 | 430 | 71 | 10k+ | Output is not escaped | ||
| #764 | RTMForm Builder | 34 | 188 | 209 | 30k+ | Text Domain Mismatch | ||
| #765 | Social Integration for BlueSky | 34 | 98 | 147 | 700 | Non-prefixed global variable | ||
| #766 | Ultra Companion – Companion plugin for WPoperation Themes | 34 | 73 | 116 | 1k+ | Missing direct file access protection | ||
| #767 | BjornTech PayPal POS integration for WooCommerce | 34 | 68 | 182 | 700 | Non-prefixed hook name | ||
| #768 | LightStart – Maintenance Mode, Coming Soon and Landing Page Builder | 34 | 42 | 312 | 400k+ | Request data is not unslashed | ||
| #769 | WP Notes Widget | 34 | 217 | 36 | 700 | Output is not escaped | ||
| #770 | WP Ultimate Post Grid | 34 | 114 | 74 | 4k+ | Missing direct file access protection | ||
| #771 | Air WP Sync – Airtable to WordPress | 35 | 37 | 45 | 1k+ | Non-prefixed hook name | ||
| #772 | Authors Widget | 35 | 170 | 19 | 1k+ | Output is not escaped | ||
| #773 | belingoGeo | 35 | 136 | 133 | 1k+ | Output is not escaped | ||
| #774 | BlossomThemes Toolkit | 35 | 347 | 52 | 30k+ | Output is not escaped | ||
| #775 | BotWriter – AI Writer & SEO Content Generator | 35 | 16 | 504 | 3k+ | Direct Query | ||
| #776 | Custom Order Status Manager for WooCommerce | 35 | 630 | 67 | 30k+ | Text Domain Mismatch | ||
| #777 | Registration Options for BuddyPress | 35 | 47 | 132 | 1k+ | Non-prefixed function | ||
| #778 | BSK Forms Blacklist | 35 | 831 | 550 | 1k+ | Output is not escaped | ||
| #779 | Buying Buddy IDX CRM – Real Estate MLS Plugin | 35 | 71 | 240 | 500 | Request data is not unslashed | ||
| #780 | Cache Enabler | 35 | 44 | 75 | 90k+ | Input is not sanitized | ||
| #781 | ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form | 35 | 31 | 188 | 1k+ | Non-prefixed global variable | ||
| #782 | CiviCRM Admin Utilities | 35 | 19 | 87 | 1k+ | Non-prefixed hook name | ||
| #783 | CiviCRM Profile Sync | 35 | 31 | 140 | 500 | Non-prefixed global variable | ||
| #784 | CompressX — AVIF & WebP Converter, Media Replacement | 35 | 26 | 423 | 40k+ | Missing nonce verification | ||
| #785 | Constant Contact Forms | 35 | 41 | 89 | 20k+ | Missing nonce verification | ||
| #786 | CubeWP Framework | 35 | 114 | 71 | 4k+ | wp function not compatible with requires wp | ||
| #787 | Desktop Mode | 35 | 18 | 596 | 2k+ | Direct Query | ||
| #788 | Disable XML-RPC-API | 35 | 444 | 52 | 100k+ | Text Domain Mismatch | ||
| #789 | Easy Post Types and Fields | 35 | 138 | 135 | 1k+ | Text Domain Mismatch | ||
| #790 | Product Bundle Builder for WooCommerce | 35 | 152 | 138 | 6k+ | Text Domain Mismatch | ||
| #791 | Extra Shortcodes | 35 | 35 | 3 | 1k+ | date date | ||
| #792 | WP2Social Auto Publish | 35 | 643 | 215 | 9k+ | Unsafe printing function | ||
| #793 | Pixel Cat – Conversion Pixel Manager | 35 | 253 | 215 | 40k+ | Output is not escaped | ||
| #794 | Give – Divi Donation Modules | 35 | 286 | 12 | 600 | Text Domain Mismatch | ||
| #795 | Glossary | 35 | 169 | 93 | 2k+ | Non Singular String Literal Domain | ||
| #796 | Gum Addon for Elementor | 35 | 660 | 72 | 50k+ | Text Domain Mismatch | ||
| #797 | Social Feed Gallery | 35 | 104 | 52 | 80k+ | Text Domain Mismatch | ||
| #798 | Jetpack VideoPress | 35 | 710 | 241 | 7k+ | Text Domain Mismatch | ||
| #799 | JS Categories List Widget | 35 | 37 | 18 | 1k+ | Non Singular String Literal Domain | ||
| #800 | KBoard 위젯 – 워드프레스 게시판 | 35 | 53 | 32 | 3k+ | Output is not escaped |
