ACF Recent Posts Widget

ACF Recent Posts Widget (ACFRPW) is a WordPress plugin which adds a custom, extended Recent Posts Widget - with ACF and Meta Keys support

v5.9.3magicodersUpdated Added 500 installs100% rating
39
Score
260
Errors
16
Warnings
+0
Change

Category Scores

Security0
Repo91
Performance98
Maintainability77

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

276 findings

Security

240

3 issue groups

Maintainability

24

9 issue groups

I18n

9

4 issue groups

Repo Compliance

2

2 issue groups

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['after_title']'.230
Category
Security
Occurrences
230
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['after_title']'.

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.8
Category
Security
Occurrences
8
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityMissing VersionResource version not set in call to wp_register_script(). This means new versions of the script may not always be loaded due to browser caching.4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Resource version not set in call to wp_register_script(). This means new versions of the script may not always be loaded due to browser caching.

ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $label4
Category
I18n
Occurrences
4
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $label

WARNINGMaintainabilityslow db query meta valueDetected usage of meta_value, possible slow query.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

WARNINGMaintainabilityslow db query tax queryDetected usage of tax_query, possible slow query.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().2
Category
Security
Occurrences
2
Severity
error

Sample message

Sanitization missing for register_setting().

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().2
Category
I18n
Occurrences
2
Severity
error

Sample message

Missing $domain parameter in function call to __().

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.2
Category
I18n
Occurrences
2
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Show 9 more
WARNINGMaintainabilityupgrade notice limit2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

The upgrade notice for "4.1.3" exceeds the limit of 300 characters.

WARNINGMaintainabilityslow db query meta key1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

ERRORMaintainabilitydate date1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORI18nDeprecated parameter: load_plugin_textdomain parameter 21
Category
I18n
Occurrences
1
Severity
error

Sample message

The parameter "FALSE" at position #2 of load_plugin_textdomain() has been deprecated since WordPress version 2.7.0. Use "" instead.

WARNINGMaintainabilityNot In Footer1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WARNINGPerformancePost Not In post not in1
Category
Performance
Occurrences
1
Severity
warning

Sample message

Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

ERRORMaintainabilityinvalid plugin name1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Plugin name header in your readme is missing or invalid. Please update your readme with a valid plugin name header. Eg: "=== Example Name ==="

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.2 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

WARNINGRepo Compliancereadme parser warnings too many tags1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

One or more tags were ignored. Please limit your plugin to 5 tags.

External Connections

Potential connections found in static code analysis.

11 domains

Outbound calls

14

External assets

0

Incoming endpoints

0

Notable Domains

placehold.it2 · outbound
aquagraphite.com1 · outbound
docs.jquery.com1 · outbound
jquery.org1 · outbound
jqueryui.com1 · outbound
magicoders.com1 · outbound

Platform / Reference Domains

codex.wordpress.org2 · platform/reference
github.com2 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Score History

First score snapshot

v5.9.3

39

Latest

Findings
276
Errors
260
Warnings
16
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

ACF Field For CF7

10k+ active installs

99
Default Post Author

1k+ active installs

99
Essential Widgets

10k+ active installs

99