This plugin helps twelve step recovery programs list their meetings. It standardizes addresses, and displays results in a searchable list and map.
22
Score
156
Errors
593
Warnings
+0
Change
Category Scores
Security0
Repo81
Performance97
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
418
10 issue groups
Maintainability
302
14 issue groups
I18n
3
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_tsml_timezone_matches".152
- Category
- Maintainability
- Occurrences
- 152
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_tsml_timezone_matches".
WARNINGSecurityRequest data is not unslashed$_GET['address'] not unslashed before sanitization. Use wp_unslash() or similar112
- Category
- Security
- Occurrences
- 112
- Severity
- warning
Sample message
$_GET['address'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES['tsml_import']['error']95
- Category
- Security
- Occurrences
- 95
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['tsml_import']['error']
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.94
- Category
- Security
- Occurrences
- 94
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES['tsml_import']['error']. Check that the array index exists before using it.52
- Category
- Security
- Occurrences
- 52
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES['tsml_import']['error']. Check that the array index exists before using it.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;35
- Category
- Maintainability
- Occurrences
- 35
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitywp function not compatible with requires wpFunction "block_footer_area()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 3.2.0.35
- Category
- Maintainability
- Occurrences
- 35
- Severity
- error
Sample message
Function "block_footer_area()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 3.2.0.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$entry['info']'.20
- Category
- Security
- Occurrences
- 20
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$entry['info']'.
Show 15 moreShow less
ERRORSecurityUnsafe printing function12
- Category
- Security
- Occurrences
- 12
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityMissing nonce verification11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilitydate date10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORSecuritySQL query is not prepared9
- Category
- Security
- Occurrences
- 9
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $location_ids
ERRORSecurityDatabase parameter is not escaped7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
Unescaped parameter $location_ids used in $wpdb->query()\n$location_ids assigned unsafely at line 699.
WARNINGSecuritywp redirect wp redirect6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
WARNINGMaintainabilityslow db query meta key4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
ERRORMaintainabilitystrip tags strip tags4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
ERRORI18nNon Singular String Literal Text3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: sprintf('Index of %s Meetings', $tsml_programs[$tsml_program]['name'])
ERRORMaintainabilityOffloaded Content2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityslow db query meta query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityslow db query meta value2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGMaintainabilityslow db query tax query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityNon-prefixed class2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Walker_Districts_Dropdown".
WARNINGMaintainabilityerror log print r2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
External Connections
Potential connections found in static code analysis.
Outbound calls
65
External assets
4
Incoming endpoints
18
Notable Domains
google.com4 · outbound
jqueryui.com4 · outbound
zoom.us4 · outbound
code4recovery.org2 · outbound
maps.google.com2 · outbound
mediarealm.com.au2 · outbound
Platform / Reference Domains
w3.org7 · platform/reference
github.com6 · platform/reference
schema.org2 · platform/reference
wordpress.org2 · platform/reference
developer.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
images.unsplash.com2 · asset
unpkg.com2 · asset
Incoming Endpoints
/wp-json/tsml/meetingsREST
register_rest_route
wp_ajax_nopriv_meeting_guidepublic
wp_ajax
wp_ajax_nopriv_meetingspublic
wp_ajax
wp_ajax_nopriv_tsml_feedbackpublic
wp_ajax
wp_ajax_nopriv_tsml_geocodepublic
wp_ajax
wp_ajax_nopriv_tsml_typeaheadpublic
wp_ajax
Admin AJAX endpoints12
wp_ajax_contactsauthenticated
wp_ajax
wp_ajax_csvauthenticated
wp_ajax
wp_ajax_meeting_guideauthenticated
wp_ajax
wp_ajax_meetingsauthenticated
wp_ajax
wp_ajax_tsml_addressauthenticated
wp_ajax
wp_ajax_tsml_feedbackauthenticated
wp_ajax
wp_ajax_tsml_geocodeauthenticated
wp_ajax
wp_ajax_tsml_geocodesauthenticated
wp_ajax
wp_ajax_tsml_groupsauthenticated
wp_ajax
wp_ajax_tsml_importauthenticated
wp_ajax
wp_ajax_tsml_locationsauthenticated
wp_ajax
wp_ajax_tsml_typeaheadauthenticated
wp_ajax
Score History
2 score snapshots
v3.19.16
22
Latest
- Findings
- 749
- Errors
- 156
- Warnings
- 593
- Check
- 2.0.0
v3.19.15
22
Score
- Findings
- 749
- Errors
- 156
- Warnings
- 593
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 22 | 749 | 156 | 593 | v3.19.16 | 2.0.0 |
| 22 | 749 | 156 | 593 | v3.19.15 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorIssueDomainRelated
Relationship links
Author
Issue
Non-prefixed global variable152 findingsRequest data is not unslashed112 findingsInput is not sanitized95 findingsNonce verification recommended94 findingsInput is not validated52 findingsMissing direct file access protection35 findingswp function not compatible with requires wp35 findingsDirect Query25 findings
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 score
Author
Issue
Non-prefixed global variable152 findingsRequest data is not unslashed112 findingsInput is not sanitized95 findingsNonce verification recommended94 findingsInput is not validated52 findingsMissing direct file access protection35 findingswp function not compatible with requires wp35 findingsDirect Query25 findings
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 score