WordPress.WP.EnqueuedResources.NonEnqueuedScript
Non Enqueued Script
A script or stylesheet is loaded without the expected WordPress enqueue metadata.
Why It Shows Up
The scan found missing versions, missing footer placement, or scripts/styles printed directly instead of being enqueued.
Why It Matters
Proper enqueueing lets WordPress manage dependencies, versions, placement, caching, and compatibility with other plugins.
How to Fix
- Register or enqueue assets with handles, dependencies, versions, and placement arguments.
- Use a file modification time or plugin version for local asset versions when appropriate.
- Avoid printing script or stylesheet tags directly in templates.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #801 | WP-SWFObject | 60 | 14 | 24 | 1k+ | Deprecated parameter: add_option parameter 3 | ||
| #802 | Widget Click to Chat | 61 | 22 | 4 | 500 | Setting is missing a sanitization callback | ||
| #803 | Wistia WordPress Plugin | 61 | 42 | 12 | 2k+ | Output is not escaped | ||
| #804 | WP YouTube Player | 61 | 14 | 17 | 1k+ | Output is not escaped | ||
| #805 | Nimbata Call Tracking | 62 | 13 | 11 | 400 | Non-prefixed function | ||
| #806 | Mailster Google Analytics | 63 | 26 | 9 | 900 | Output is not escaped | ||
| #807 | Mantenimiento web | 63 | 49 | 15 | 20k+ | Text Domain Mismatch | ||
| #808 | Broadly for WordPress | 64 | 18 | 5 | 500 | Unsafe printing function | ||
| #809 | YaMaps for WordPress Plugin | 64 | 21 | 30 | 10k+ | Non-prefixed global variable | ||
| #810 | Authorizer | 65 | 3 | 54 | 5k+ | Nonce verification recommended | ||
| #811 | Live Chat with Messenger Customer Chat | 65 | 10 | 23 | 3k+ | Input is not sanitized | ||
| #812 | MW WP Form reCAPTCHA | 65 | 11 | 14 | 2k+ | Input is not sanitized | ||
| #813 | Lime Connect (formerly Userlike) – WordPress Live Chat plugin | 65 | 22 | 3 | 900 | Output is not escaped | ||
| #814 | WP Max Submit Protect | 65 | 19 | 12 | 400 | Output is not escaped | ||
| #815 | Social comments by WpDevArt | 66 | 9 | 19 | 8k+ | Missing Version | ||
| #816 | FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration | 66 | 26 | 30 | 6k+ | Missing direct file access protection | ||
| #817 | LeadBack – Callback, Chatbot and Live Chat Widgets for WordPress sites | 66 | 17 | 5 | 600 | Unsafe printing function | ||
| #818 | Affiliates Manager Google reCAPTCHA Integration | 67 | 18 | 10 | 400 | Request data is not unslashed | ||
| #819 | Custom CSS Pro | 67 | 17 | 6 | 7k+ | Output is not escaped | ||
| #820 | onOffice for WP-Websites | 67 | 5 | 507 | 1k+ | Non-prefixed global variable | ||
| #821 | Pinterest Verify Meta Tag | 68 | 20 | 6 | 600 | Output is not escaped | ||
| #822 | SKT Page Builder | 68 | 15 | 49 | 2k+ | Missing nonce verification | ||
| #823 | WiserReview Product Reviews for WooCommerce | 68 | 21 | 110 | 900 | Non-prefixed global variable | ||
| #824 | Easy Auto Reload – Auto Refresh | 69 | 37 | 12 | 1k+ | Text Domain Mismatch | ||
| #825 | Hand Talk | 69 | 34 | 4 | 400 | Output is not escaped | ||
| #826 | PrivacyBee – Datenschutz im Autopilot | 69 | 19 | 27 | 600 | Non-prefixed global variable | ||
| #827 | Shoppable Social Media Galleries by Sauce | 69 | 13 | 13 | 2k+ | Non-prefixed function | ||
| #828 | VWE – Voorheen Autodealers.nl | 69 | 23 | 10 | 500 | curl curl setopt | ||
| #829 | ConvertCalculator: Build Cost, Price, Quotation, ROI Interactive Calculators | 70 | 9 | 12 | 800 | Output is not escaped | ||
| #830 | Simple Site Verify | 70 | 20 | 0 | 900 | Output is not escaped | ||
| #831 | Web Accessibility with Max Access | 71 | 22 | 11 | 800 | curl curl setopt | ||
| #832 | Another Mailchimp Widget | 71 | 28 | 17 | 4k+ | Missing Translators Comment | ||
| #833 | Cresta Social Messenger | 71 | 9 | 10 | 1k+ | Non-prefixed function | ||
| #834 | Chap Secure Password Login | 72 | 13 | 7 | 600 | Input is not validated | ||
| #835 | Templ Optimizer | 72 | 6 | 63 | 1k+ | Direct Query | ||
| #836 | Albacross for WordPress | 73 | 18 | 5 | 1k+ | Text Domain Mismatch | ||
| #837 | ANAC XML Viewer | 73 | 21 | 1 | 1k+ | Output is not escaped | ||
| #838 | AADMY – Add Auto Date Month Year Into Posts | 73 | 30 | 32 | 400 | Non-prefixed function | ||
| #839 | Website Optimization – Plerdy | 73 | 48 | 1 | 1k+ | wp function not compatible with requires wp | ||
| #840 | Google Web Fonts Customizer (GWFC) | 74 | 48 | 4 | 900 | Text Domain Mismatch | ||
| #841 | Cognito Forms | 75 | 13 | 4 | 2k+ | wp function not compatible with requires wp | ||
| #842 | FareHarbor for WordPress | 75 | 18 | 9 | 9k+ | Output is not escaped | ||
| #843 | FluentPlayer – Video Player With Forms & Lead Capture | 75 | 10 | 40 | 1k+ | Database parameter is not escaped | ||
| #844 | Styled Calendar – Customizable, Mobile Responsive Google Calendar Embeds | 75 | 8 | 8 | 1k+ | Exception output is not escaped | ||
| #845 | Ultimate Under Construction | 75 | 22 | 2 | 1k+ | Non Enqueued Script | ||
| #846 | Auction Nudge – Your eBay Listings | 76 | 18 | 6 | 1k+ | Missing direct file access protection | ||
| #847 | Lucky Orange | 76 | 56 | 0 | 2k+ | wp function not compatible with requires wp | ||
| #848 | CodeKit – Custom Codes Editor | 77 | 11 | 29 | 4k+ | Non-prefixed global variable | ||
| #849 | Taggbox – Free Social Media Widgets, Review Badges & Shoppable UGC | 77 | 23 | 113 | 1k+ | Direct Query | ||
| #850 | Frontend Product Editor for WooCommerce | 78 | 76 | 31 | 500 | Text Domain Mismatch |
