PluginCheck.CodeAnalysis.ShortURL.Found

Short URL found

The plugin contains a development-only URL, short URL, or local endpoint reference.

medium weight

Why It Shows Up

Plugin Check found localhost references, short URLs, or offloaded content references that may not be appropriate in a distributed plugin.

Why It Matters

Local or opaque URLs can break for users, hide the true destination, or make repository review harder.

How to Fix

  • Remove localhost and private-network URLs before release.
  • Use full, transparent URLs for external resources.
  • Bundle required assets locally when WordPress.org expects them to ship with the plugin.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Backup Migration219811,09380k+Non-prefixed global variable
#2Comet Cache2185724520k+Output is not escaped
#3Cost Calculator Builder2132276630k+Non-prefixed global variable
#4MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder211,1333,0112k+Non-prefixed global variable
#5Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125542520k+Non-prefixed hook name
#6Buckaroo Woocommerce Payments Plugin215843262k+Exception output is not escaped
#7WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#8ANAC XML Bandi di Gara22294244600Output is not escaped
#9Better WordPress Minify224124848k+Non Singular String Literal Domain
#10Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#11Employee Spotlight – Team Member Showcase & Meet the Team Plugin22247689400Non-prefixed hook name
#12Insert or Embed Articulate Content into WordPress226591,4372k+Non-prefixed global variable
#13MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6252,45810k+Output is not escaped
#14Motors – Car Dealership & Classified Listings Plugin225,3405,9599k+Text Domain Mismatch
#15PagBank / PagSeguro Connect para WooCommerce225047574k+Non-prefixed global variable
#16NextScripts: Social Networks Auto-Poster222,4081,13330k+Output is not escaped
#17NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce221,3531,4122k+Non-prefixed global variable
#18WP-WebAuthn229573962k+Exception output is not escaped
#19WPSSO Core – Complete Schema Markup and Meta Tags221,4074125k+Missing Translators Comment
#20YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception output is not escaped
#21Church Admin231,6434,202900Direct Query
#22EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder233561,5152k+Non-prefixed global variable
#23Flexmls® IDX Plugin231,2689571k+Output is not escaped
#24MasterStudy LMS WordPress Plugin – for Online Courses and Education231,4194,87510k+Non-prefixed global variable
#25MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar234,06548820k+Text Domain Mismatch
#26Next Active Directory Integration236832842k+Exception output is not escaped
#27Redirection23523457100k+Non-prefixed global variable
#28Request a Quote – Quote Forms for Any WordPress Site232401,0991k+Non-prefixed hook name
#29Revive.so – Bulk Rewrite and Republish Blog Posts233322281k+Text Domain Mismatch
#30Schema231,17324540k+Text Domain Mismatch
#31W3 Total Cache23307678900k+Non-prefixed global variable
#32Customer Support Ticket System & Helpdesk231,7191,464400Text Domain Mismatch
#33WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel231,1583,64220k+Interpolated SQL is not prepared
#34Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces242,2483,33810k+slow db query meta key
#35EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more246691,550100k+Output is not escaped
#36Simple Calendar – Google Calendar Plugin242,05359250k+Missing direct file access protection
#37Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System245898972k+Non-prefixed global variable
#38EU VAT Assistant for WooCommerce241,7424955k+Non Singular String Literal Domain
#39Appointment Hour Booking – Booking Calendar252611,25410k+Non-prefixed global variable
#40DecaLog259432361k+Exception output is not escaped
#41Site Kit by Google – Analytics, Search Console, AdSense, Speed251,3042425m+Missing direct file access protection
#42MaxButtons – Create buttons2562640470k+Output is not escaped
#43Media Cloud Sync251,0952741k+Exception output is not escaped
#44Social Media Share Buttons & Social Sharing Icons252,4331,383100k+Unsafe printing function
#45Social Share Icons & Social Share Buttons252,3651,35710k+Output is not escaped
#46WP Time Slots Booking Form254391,1371k+Non-prefixed global variable
#47Video Gallery – YouTube Gallery, Playlist & Video Grid252751,0662k+Non-prefixed hook name
#48Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty26113671400k+Non-prefixed global variable
#49FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.)265944172k+Exception output is not escaped
#50User Submitted Posts – Enable Users to Submit Posts from the Front End2669939610k+Text Domain Mismatch