PluginScore

PluginCheck.CodeAnalysis.Heredoc.NotAllowed

Not Allowed

Plugin Check reported a maintainability issue that can make the plugin harder to review, run, or update.

medium weight

Why It Shows Up

The finding matches a WordPress coding-standard or Plugin Check rule for code clarity, compatibility, packaging, or API usage.

Why It Matters

Maintainability findings reduce confidence that the plugin will behave consistently across hosts, WordPress versions, and other plugins.

How to Fix

  • Find the exact file and line in the raw scan output.
  • Prefer WordPress APIs and standard coding patterns over custom or legacy behavior.
  • If the warning is from bundled third-party code, document that separately and avoid modifying vendor files unless necessary.

References

WordPress Coding Standards

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#201WP Helper Premium243,9081,5151k+Text Domain Mismatch
#202WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content241,77739440k+Text Domain Mismatch
#203WP-Stateless – Google Cloud Storage241,0364824k+Non Singular String Literal Domain
#204Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress242,5812,109100k+Output is not escaped
#205WP User Manager – User Profile Builder & Membership2478753910k+Exception output is not escaped
#206WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100)244821892k+Output is not escaped
#207Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation241,2113,15230k+Non-prefixed global variable
#208AliExpress Dropshipping Plugin for WooCommerce Stores255507285k+Text Domain Mismatch
#209All 404 Redirect to Homepage25140301200k+date date
#210Booking for Appointments and Events Calendar – Amelia251,48748090k+Exception output is not escaped
#211BlockSpare – Gutenberg Post Grid Blocks for News, Magazine & Blog Websites251,3271,71410k+Non-prefixed global variable
#212Booking Package251,7033,97710k+Missing nonce verification
#213Breeze Cache25218800400k+Non-prefixed global variable
#214Broken Link Checker25727600500k+Output is not escaped
#215PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus253621,586100k+Non-prefixed global variable
#216SilentShield – Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce)2523521410k+Database parameter is not escaped
#217GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real Time256141,43140k+Non-prefixed global variable
#218Colissimo shipping methods for WooCommerce251,75555710k+Text Domain Mismatch
#219DecaLog259432361k+Exception output is not escaped
#220WEB-Translation – eTranslation Multilingual252171,057400Non-prefixed function
#221FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler253234997k+Non-prefixed global variable
#222Genesis Club Lite25513317900Output is not escaped
#223WPBruiser {no- Captcha anti-Spam}2564625910k+Non Singular String Literal Domain
#224Site Kit by Google – Analytics, Search Console, AdSense, Speed251,3042425m+Missing direct file access protection
#225Hardcore Google Fonts Localizer25331261800Text Domain Mismatch
#226Index WP MySQL For Speed2525025550k+Output is not escaped
#227IP Locator25482211600Text Domain Mismatch
#228MaxButtons – Create buttons2562640470k+Output is not escaped
#229Media Cleaner: Clean your WordPress!2515139190k+Direct Query
#230Media Cloud Sync251,0952741k+Exception output is not escaped
#231Create251,6377646k+Text Domain Mismatch
#232Nexter Extension – Security, Performance, Code Snippets & Site Toolkit2519871210k+Nonce verification recommended
#233NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar2525740040k+Non-prefixed hook name
#234Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content256811,513300k+Non-prefixed global variable
#235PDF Importer for WPForms25332329400Non-prefixed global variable
#236Quttera ThreatSign – Web Malware Scanner for WordPress2533447110k+Non-prefixed global variable
#237BerqWP – All-In-One Optimization for Core Web Vitals, Cache, CDN, Images, CSS & JavaScript251985014k+Non-prefixed global variable
#238TablePress – Tables in WordPress made easy258472,174600k+Non-prefixed global variable
#239Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor256911,58150k+Non-prefixed global variable
#240Vayu Blocks – Website Builder for the Gutenberg Block Editor251742331k+Text Domain Mismatch
#241VikAppointments Services Booking Calendar259,7535,207500Output is not escaped
#242VikBooking Hotel Booking Engine & PMS2513,2448,3148k+Output is not escaped
#243VikRentCar Car Rental Management System255,5375,0484k+Non-prefixed global variable
#244VikRestaurants Table Reservations and Take-Away2511,6444,932600Output is not escaped
#245weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot252795184k+Non-prefixed global variable
#246Wordfence Login Security2524841870k+Output is not escaped
#247WordPress Importer252381102m+Output is not escaped
#248WP 2FA – Two-factor authentication for WordPress25283716100k+Non-prefixed global variable
#249WP Coupons and Deals – WordPress Coupon Plugin259141,4601k+Non-prefixed global variable
#250WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards251,4311,27010k+Output is not escaped