Performance Issues
Issue Codes
3 normalized finding codes in this category.
Post Not In exclude
WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude
The plugin uses a query or runtime pattern that can become expensive on larger sites.
Post Not In post not in
WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_post__not_in
The plugin uses a query or runtime pattern that can become expensive on larger sites.
Suppress Filters suppress filters
WordPressVIPMinimum.Performance.WPQueryParams.SuppressFilters_suppress_filters
The plugin uses a query or runtime pattern that can become expensive on larger sites.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #801 | Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) | 35 | 266 | 127 | 5k+ | Output is not escaped | ||
| #802 | MainWP Child Reports | 35 | 49 | 116 | 100k+ | Non-prefixed hook name | ||
| #803 | Restaurant Menu – Food Ordering System – Table Reservation | 35 | 317 | 186 | 8k+ | Unsafe printing function | ||
| #804 | Mini Cart for WooCommerce – Add a Stylish Sliding Cart | 35 | 42 | 160 | 600 | Non-prefixed global variable | ||
| #805 | More Widgets | 35 | 55 | 15 | 1k+ | Output is not escaped | ||
| #806 | Image Refresh | 35 | 4 | 6 | 900 | Dynamic hook name | ||
| #807 | NewsPlugin | 35 | 84 | 53 | 400 | Text Domain Mismatch | ||
| #808 | Orderable – Restaurant & Food Ordering System | 35 | 12 | 324 | 5k+ | Non-prefixed global variable | ||
| #809 | Post Content Shortcodes | 35 | 205 | 56 | 2k+ | Output is not escaped | ||
| #810 | PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) | 35 | 6 | 56 | 80k+ | Post Not In exclude | ||
| #811 | Product Prices by User Roles for WooCommerce | 35 | 12 | 19 | 1k+ | Non-prefixed hook name | ||
| #812 | Random Post on Refresh | 35 | 3 | 8 | 500 | Non-prefixed hook name | ||
| #813 | RPS Image Gallery | 35 | 88 | 16 | 700 | Output is not escaped | ||
| #814 | Internal Links Manager | 35 | 188 | 121 | 10k+ | Output is not escaped | ||
| #815 | Shipping Zones by Drawing for WooCommerce | 35 | 278 | 95 | 600 | Text Domain Mismatch | ||
| #816 | Shopkeeper Extender | 35 | 14 | 26 | 5k+ | Missing Version | ||
| #817 | Simple Yearly Archive | 35 | 102 | 36 | 6k+ | Unsafe printing function | ||
| #818 | Sitekit | 35 | 122 | 8 | 3k+ | Output is not escaped | ||
| #819 | Slick Slider | 35 | 36 | 9 | 2k+ | Output is not escaped | ||
| #820 | Spectra Blocks – AI Website Builder for the Block Editor | 35 | 241 | 1,276 | 10k+ | Non-prefixed global variable | ||
| #821 | Spots | 35 | 195 | 49 | 800 | Output is not escaped | ||
| #822 | StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More | 35 | 524 | 600 | Non-prefixed global variable | |||
| #823 | Starter Sites & Templates by Neve | 35 | 28 | 88 | 100k+ | Non-prefixed hook name | ||
| #824 | Advance Product Search- Voice & Ajax Search for WooCommerce | 35 | 125 | 92 | 9k+ | Text Domain Mismatch | ||
| #825 | Themify Shortcodes | 35 | 36 | 16 | 7k+ | Output is not escaped | ||
| #826 | Ultimate Post List | 35 | 186 | 84 | 2k+ | Missing Arg Domain | ||
| #827 | Void Elementor Post Grid Addon for Elementor Page builder | 35 | 189 | 93 | 3k+ | Text Domain Mismatch | ||
| #828 | ShipStation Live Rates for WooCommerce | 35 | 402 | 73 | 900 | Non Singular String Literal Domain | ||
| #829 | wePOS – Point Of Sale (POS) for WooCommerce & Dokan | 35 | 47 | 66 | 2k+ | Output is not escaped | ||
| #830 | All-in-One Addons for Elementor – WidgetKit | 35 | 60 | 311 | 8k+ | Non-prefixed global variable | ||
| #831 | Call for Price for WooCommerce | 35 | 3 | 31 | 8k+ | Non-prefixed hook name | ||
| #832 | Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing | 35 | 50 | 236 | 40k+ | Non-prefixed hook name | ||
| #833 | Access Areas for WordPress | 35 | 17 | 95 | 400 | Direct Query | ||
| #834 | Category Dropdown by GCS Design | 35 | 93 | 52 | 1k+ | Output is not escaped | ||
| #835 | WP Content Copy Protection | 35 | 76 | 11 | 10k+ | Text Domain Mismatch | ||
| #836 | WP Flexslider | 35 | 15 | 7 | 600 | Unsafe printing function | ||
| #837 | WP Geo | 35 | 180 | 84 | 900 | Output is not escaped | ||
| #838 | WP Post Nav | 35 | 73 | 242 | 400 | Non-prefixed global variable | ||
| #839 | Subresource Integrity (SRI) Manager | 35 | 26 | 94 | 900 | Request data is not unslashed | ||
| #840 | WPFront User Role Editor | 35 | 333 | 578 | 30k+ | Output is not escaped | ||
| #841 | WPGraphQL IDE | 35 | 38 | 18 | 1k+ | Text Domain Mismatch | ||
| #842 | WPZOOM Addons for Elementor – Starter Templates & Widgets | 35 | 160 | 130 | 20k+ | Output is not escaped | ||
| #843 | WPZOOM Portfolio Lite – Filterable Portfolio Plugin | 35 | 42 | 92 | 20k+ | Non-prefixed global variable | ||
| #844 | xili-tidy-tags | 35 | 224 | 157 | 1k+ | Output is not escaped | ||
| #845 | YML for Yandex Market | 35 | 18 | 288 | 10k+ | Non-prefixed global variable | ||
| #846 | Product Labels For Woocommerce (Sale Badges) | 36 | 90 | 48 | 10k+ | Output is not escaped | ||
| #847 | SOOZ – AI for SEO – Bulk Generate Focus Keyphrases, Metadata, Alt Text (SEO Autopilot) | 36 | 4 | 342 | 2k+ | Nonce verification recommended | ||
| #848 | Black Widgets For Elementor | 36 | 2,608 | 19 | 800 | Text Domain Mismatch | ||
| #849 | BlockStrap Page Builder – Bootstrap Blocks | 36 | 81 | 89 | 2k+ | Missing direct file access protection | ||
| #850 | WOLF – WordPress Posts Bulk Editor and Manager Professional | 36 | 1 | 574 | 4k+ | Request data is not unslashed |
