PluginCheck.CodeAnalysis.ShortURL.Found
Short URL found
The plugin contains a development-only URL, short URL, or local endpoint reference.
Why It Shows Up
Plugin Check found localhost references, short URLs, or offloaded content references that may not be appropriate in a distributed plugin.
Why It Matters
Local or opaque URLs can break for users, hide the true destination, or make repository review harder.
How to Fix
- Remove localhost and private-network URLs before release.
- Use full, transparent URLs for external resources.
- Bundle required assets locally when WordPress.org expects them to ship with the plugin.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #51 | Addon Elements for Elementor (formerly Elementor Addon Elements) | 27 | 4,065 | 103 | 90k+ | Text Domain Mismatch | ||
| #52 | Church Content – Sermons, Events and More | 27 | 134 | 410 | 4k+ | Non-prefixed function | ||
| #53 | Duplicate Post | 27 | 447 | 274 | 300k+ | Unsafe printing function | ||
| #54 | Content Pilot – Autoblogging & Affiliate Marketing Suite | 27 | 299 | 269 | 900 | Output is not escaped | ||
| #55 | Reviews and Rating – Google Reviews | 28 | 343 | 219 | 20k+ | Text Domain Mismatch | ||
| #56 | Connect Matomo – Analytics Dashboard for WordPress | 28 | 100 | 102 | 60k+ | Missing Translators Comment | ||
| #57 | Ultimate Auction for WooCommerce – Excellent WP Auction Plugin | 29 | 52 | 523 | 2k+ | Non-prefixed global variable | ||
| #58 | Edwiser Bridge – WordPress Moodle Integration | 30 | 4 | 669 | 4k+ | Non-prefixed hook name | ||
| #59 | Urvanov Syntax Highlighter | 30 | 221 | 87 | 3k+ | Output is not escaped | ||
| #60 | AI ChatBot with ChatGPT and Content Generator by AYS | 31 | 170 | 378 | 400 | Non-prefixed global variable | ||
| #61 | Pop-up | 31 | 103 | 91 | 10k+ | Output is not escaped | ||
| #62 | WP125 | 31 | 178 | 184 | 3k+ | Unsafe printing function | ||
| #63 | Subscribe2 – Form, Email Subscribers & Newsletters | 32 | 32 | 410 | 10k+ | Direct Query | ||
| #64 | Background Per Page | 33 | 80 | 56 | 700 | Text Domain Mismatch | ||
| #65 | Chartify – WordPress Chart Plugin | 33 | 76 | 411 | 3k+ | Non-prefixed global variable | ||
| #66 | EchBay Phonering Alo | 33 | 74 | 47 | 1k+ | Output is not escaped | ||
| #67 | Video Gallery – YouTube Playlist, Channel Gallery by YotuWP | 33 | 278 | 101 | 20k+ | Missing Arg Domain | ||
| #68 | Buckets | 34 | 68 | 76 | 500 | Output is not escaped | ||
| #69 | Featured Video Plus | 34 | 99 | 105 | 10k+ | Non-prefixed global variable | ||
| #70 | Image Slider | 35 | 192 | 95 | 4k+ | Output is not escaped | ||
| #71 | Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE | 35 | 131 | 41 | 300k+ | Missing direct file access protection | ||
| #72 | WPD Beaver Builder Additions | 35 | 406 | 35 | 600 | Non Singular String Literal Domain | ||
| #73 | AddToAny Share Buttons | 37 | 123 | 164 | 300k+ | Unsafe printing function | ||
| #74 | Orders Tracking for WooCommerce | 37 | 7 | 312 | 10k+ | Request data is not unslashed | ||
| #75 | Polaroid Gallery | 38 | 105 | 20 | 1k+ | Unsafe printing function | ||
| #76 | SCSS WP Editor | 38 | 111 | 40 | 900 | Exception output is not escaped | ||
| #77 | Lucky Wheel for WooCommerce – Spin a Sale | 39 | 12 | 153 | 1k+ | Request data is not unslashed | ||
| #78 | WP Realtime Sitemap | 39 | 46 | 41 | 10k+ | Output is not escaped | ||
| #79 | Bulk Add Terms | 40 | 74 | 27 | 800 | Text Domain Mismatch | ||
| #80 | Page Comments Off Please | 40 | 17 | 29 | 1k+ | Nonce verification recommended | ||
| #81 | Responsive Gallery Grid | 40 | 90 | 14 | 4k+ | Output is not escaped | ||
| #82 | Additional Variation Images Gallery for WooCommerce | 40 | 60 | 129 | 20k+ | Non-prefixed global variable | ||
| #83 | Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO) | 41 | 175 | 26 | 100k+ | Unsafe printing function | ||
| #84 | Avatar Manager | 41 | 29 | 41 | 5k+ | Unsafe printing function | ||
| #85 | DigitalOcean Spaces Sync | 41 | 80 | 8 | 500 | Text Domain Mismatch | ||
| #86 | HTML Editor Syntax Highlighter | 42 | 30 | 21 | 50k+ | Output is not escaped | ||
| #87 | WPB Custom Tab Manager for WooCommerce – Add, Edit & Reorder Tabs | 42 | 95 | 32 | 500 | Output is not escaped | ||
| #88 | AMP | 43 | 63 | 362 | 400k+ | Non-prefixed hook name | ||
| #89 | Customize Tawk.to Widget | 50 | 21 | 28 | 500 | Request data is not unslashed | ||
| #90 | Head Meta Data | 55 | 19 | 42 | 10k+ | Non-prefixed function | ||
| #91 | Themeflection Numbers – Number Counter and Animated Numbers | 55 | 224 | 73 | 3k+ | Text Domain Mismatch | ||
| #92 | Export & Import WPBakery Page Builder | 56 | 12 | 20 | 9k+ | Missing nonce verification | ||
| #93 | Search Exclude | 57 | 73 | 40 | 50k+ | Text Domain Mismatch | ||
| #94 | Responsive Select Menu | 58 | 29 | 27 | 3k+ | Output is not escaped | ||
| #95 | RevivePress – Keep your Old Content Evergreen | 59 | 27 | 46 | 5k+ | date date | ||
| #96 | GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor | 61 | 9 | 119 | 70k+ | Non-prefixed global variable | ||
| #97 | Wistia WordPress Plugin | 61 | 42 | 12 | 2k+ | Output is not escaped | ||
| #98 | Image Hover Effects – Elementor Addon | 64 | 117 | 7 | 40k+ | Text Domain Mismatch | ||
| #99 | Faire for WooCommerce | 68 | 4 | 86 | 800 | Direct Query | ||
| #100 | Thank You Page for WooCommerce | 68 | 6 | 27 | 10k+ | Non-prefixed global variable |
