Connect your site to the Open Social Web and let millions of users follow, share, and interact with your content from Mastodon, Pixelfed, and more.
81
Score
67
Errors
303
Warnings
+0
Change
Category Scores
Security83
Repo97
Performance97
Maintainability54
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
359
5 issue groups
Security
8
1 issue group
Performance
2
1 issue group
Repo Compliance
1
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_comments".260
- Category
- Maintainability
- Occurrences
- 260
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_comments".
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;66
- Category
- Maintainability
- Occurrences
- 66
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "added_post_meta".27
- Category
- Maintainability
- Occurrences
- 27
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "added_post_meta".
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $conditions used in $wpdb->get_results()\n$conditions assigned unsafely at line 263.8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Unescaped parameter $conditions used in $wpdb->get_results()\n$conditions assigned unsafely at line 263.
WARNINGMaintainabilityDiscouraged PHP functionThe use of function set_time_limit() is discouraged5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
The use of function set_time_limit() is discouraged
WARNINGPerformancePost Not In excludeUsing exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.2
- Category
- Performance
- Occurrences
- 2
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
ERRORMaintainabilityPlugin Directory WritePlugin folders are deleted when upgraded. Do not save data to the plugin folder using unzip_file(). Detected usage of constant WP_CONTENT_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using unzip_file(). Detected usage of constant WP_CONTENT_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGRepo Complianceplugin header nonexistent domain pathThe "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
External Connections
Potential connections found in static code analysis.
Outbound calls
300
External assets
0
Incoming endpoints
0
Notable Domains
codeberg.org24 · outbound
docs.joinmastodon.org17 · outbound
w3id.org17 · outbound
joinmastodon.org10 · outbound
joinmobilizon.org8 · outbound
mastodon.social7 · outbound
Platform / Reference Domains
w3.org127 · platform/reference
github.com21 · platform/reference
schema.org8 · platform/reference
wordpress.org3 · platform/reference
developer.wordpress.org1 · platform/reference
opensource.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
5 score snapshots
v9.2.1
81
Latest
- Findings
- 370
- Errors
- 67
- Warnings
- 303
- Check
- 2.0.0
v9.2.0
81
Score
- Findings
- 370
- Errors
- 67
- Warnings
- 303
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 81 | 370 | 67 | 303 | v9.2.1 | 2.0.0 |
| 81 | 370 | 67 | 303 | v9.2.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Category
Issue
Non-prefixed global variable260 findingsMissing direct file access protection66 findingsNon-prefixed hook name27 findingsDatabase parameter is not escaped8 findingsDiscouraged PHP function5 findingsPost Not In exclude2 findingsPlugin Directory Write1 findingplugin header nonexistent domain path1 finding
Domain
Related
WooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreWebSub (FKA. PubSubHubbub)98 scoreWebFinger98 scoreShare on Mastodon96 scoreNodeInfo(2)99 scoreSimple Mastodon Verification99 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreWP Super Cache25 scoreWooCommerce Legacy REST API31 score
Plugin
Author
Category
Issue
Non-prefixed global variable260 findingsMissing direct file access protection66 findingsNon-prefixed hook name27 findingsDatabase parameter is not escaped8 findingsDiscouraged PHP function5 findingsPost Not In exclude2 findingsPlugin Directory Write1 findingplugin header nonexistent domain path1 finding
Domain
Related
WooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreWebSub (FKA. PubSubHubbub)98 scoreWebFinger98 scoreShare on Mastodon96 scoreNodeInfo(2)99 scoreSimple Mastodon Verification99 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreWP Super Cache25 scoreWooCommerce Legacy REST API31 score
Related Plugins
NodeInfo(2)
900 active installs
99
Simple Mastodon Verification
800 active installs
99
WebSub (FKA. PubSubHubbub)
100k+ active installs
98
WebFinger
1k+ active installs
98
Share on Mastodon
1k+ active installs
96
Enable Mastodon Apps
500 active installs
93