WordPress.WP.EnqueuedResources.NonEnqueuedScript
Non Enqueued Script
A script or stylesheet is loaded without the expected WordPress enqueue metadata.
Why It Shows Up
The scan found missing versions, missing footer placement, or scripts/styles printed directly instead of being enqueued.
Why It Matters
Proper enqueueing lets WordPress manage dependencies, versions, placement, caching, and compatibility with other plugins.
How to Fix
- Register or enqueue assets with handles, dependencies, versions, and placement arguments.
- Use a file modification time or plugin version for local asset versions when appropriate.
- Avoid printing script or stylesheet tags directly in templates.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #701 | MembershipWorks – Membership, Events & Directory | 40 | 41 | 29 | 2k+ | Output is not escaped | ||
| #702 | My Social Feeds – Social Feeds Embedder Plugin for WP | 40 | 8 | 77 | 400 | Request data is not unslashed | ||
| #703 | No CAPTCHA reCAPTCHA | 40 | 112 | 26 | 4k+ | Text Domain Mismatch | ||
| #704 | Post Tiles | 40 | 46 | 5 | 400 | Output is not escaped | ||
| #705 | AdFlow – Easy Google AdSense Integration | 40 | 150 | 9 | 3k+ | Unsafe printing function | ||
| #706 | CPS | Age Verification | 40 | 127 | 35 | 900 | Unsafe printing function | ||
| #707 | Tealium | 40 | 73 | 19 | 600 | Unsafe printing function | ||
| #708 | Timed Content | 40 | 76 | 63 | 5k+ | Unsafe printing function | ||
| #709 | Timeline History | 40 | 31 | 17 | 500 | Output is not escaped | ||
| #710 | UsersWP – ReCaptcha | 40 | 80 | 17 | 3k+ | Text Domain Mismatch | ||
| #711 | Visual Editor Custom Buttons | 40 | 30 | 48 | 4k+ | Output is not escaped | ||
| #712 | Preview E-mails for WooCommerce | 40 | 35 | 37 | 30k+ | Unsafe printing function | ||
| #713 | Easy PayPal & Stripe Buy Now Button | 40 | 388 | 96 | 10k+ | Unsafe printing function | ||
| #714 | Ad Auto Insert H | 41 | 496 | 15 | 1k+ | Non Singular String Literal Domain | ||
| #715 | Amazon Link Engine | 41 | 38 | 17 | 2k+ | Output is not escaped | ||
| #716 | Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO) | 41 | 16 | 37 | 1k+ | Missing nonce verification | ||
| #717 | Buzzsprout Podcasting | 41 | 75 | 13 | 5k+ | Non Singular String Literal Domain | ||
| #718 | CF7 Invisible reCAPTCHA | 41 | 19 | 52 | 7k+ | Request data is not unslashed | ||
| #719 | clickskeks.at Cookiebanner | 41 | 21 | 18 | 500 | Unsafe printing function | ||
| #720 | Disqus Conditional Load | 41 | 38 | 14 | 3k+ | Output is not escaped | ||
| #721 | Embed Chessboard | 41 | 103 | 9 | 600 | Text Domain Mismatch | ||
| #722 | Image Editor by Pixo | 41 | 118 | 71 | 800 | Output is not escaped | ||
| #723 | Import external attachments | 41 | 18 | 26 | 2k+ | Output is not escaped | ||
| #724 | Mollie Forms | 41 | 14 | 565 | 3k+ | Request data is not unslashed | ||
| #725 | Preload LCP Image | 41 | 110 | 31 | 4k+ | Unsafe printing function | ||
| #726 | Send link to friend | 41 | 81 | 47 | 400 | Output is not escaped | ||
| #727 | SnapScan Payment Gateway | 41 | 33 | 30 | 700 | Output is not escaped | ||
| #728 | tarteaucitron.io | 41 | 44 | 92 | 10k+ | Output is not escaped | ||
| #729 | Feedback Company | 41 | 63 | 36 | 800 | Output is not escaped | ||
| #730 | 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 | 42 | 17 | 38 | 2k+ | Input is not sanitized | ||
| #731 | Chartbeat | 42 | 33 | 18 | 1k+ | Output is not escaped | ||
| #732 | CookieHub – Cookie Consent Banner (DSGVO, CCPA, RGPD and GDPR compliance) | 42 | 33 | 49 | 3k+ | Output is not escaped | ||
| #733 | UniConsent Cookie Consent CMP – Consent Manager | 42 | 128 | 17 | 1k+ | Unsafe printing function | ||
| #734 | WP Widget Clipboard – Duplicate widgets intuitively | 42 | 51 | 19 | 800 | Output is not escaped | ||
| #735 | Theme Test Drive | 43 | 39 | 16 | 7k+ | Output is not escaped | ||
| #736 | WP Mail Log | 43 | 40 | 29 | 10k+ | Text Domain Mismatch | ||
| #737 | Buttonizer – Live Chat, AI Chatbot, Call, Chat, Contact Button | 44 | 24 | 71 | 50k+ | Non-prefixed constant | ||
| #738 | Currency Converter Widget | 44 | 37 | 6 | 3k+ | Unsafe printing function | ||
| #739 | Narrative Publisher | 44 | 28 | 37 | 1k+ | Text Domain Mismatch | ||
| #740 | Hyper Cache | 45 | 36 | 100 | 8k+ | Non-prefixed global variable | ||
| #741 | Outdooractive Embed | 45 | 70 | 18 | 400 | Text Domain Mismatch | ||
| #742 | WP Global Site Tag | 45 | 48 | 9 | 7k+ | Output is not escaped | ||
| #743 | Delete Multiple Themes | 46 | 39 | 5 | 1k+ | Text Domain Mismatch | ||
| #744 | GetAutoSEO AI Tool | 46 | 10 | 250 | 1k+ | Direct Query | ||
| #745 | StockPack – Stock photos from Unsplash, Adobe Stock and more | 46 | 35 | 51 | 6k+ | Nonce verification recommended | ||
| #746 | KCSG Kartra Pages | 47 | 30 | 16 | 500 | Heredoc Output Not Escaped | ||
| #747 | Post Status Notifications | 47 | 98 | 41 | 1k+ | Text Domain Mismatch | ||
| #748 | Advanced Custom Fields – Location Field add-on | 48 | 51 | 6 | 900 | Output is not escaped | ||
| #749 | Convertful – Your Ultimate On-Site Conversion Tool | 48 | 15 | 34 | 3k+ | wp function not compatible with requires wp | ||
| #750 | Seznam Webmaster | 48 | 47 | 8 | 700 | Output is not escaped |
