Manage Google AdSense ads, banners, ad rotation, sticky widgets, AMP ads, ads.txt, tracking, header and footer code, PHP code, global custom fields
23
Score
4,267
Errors
812
Warnings
-1
Change
Category Scores
Security0
Repo94
Performance87
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
4,537
9 issue groups
Maintainability
291
13 issue groups
I18n
177
3 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <option value='*$client*'>$client</option>\n"'.3,088
- Category
- Security
- Occurrences
- 3,088
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <option value='*$client*'>$client</option>\n"'.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.679
- Category
- Security
- Occurrences
- 679
- Severity
- error
Sample message
All output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.
WARNINGSecurityRequest data is not unslashed$_COOKIE[$ai_cookie_name] not unslashed before sanitization. Use wp_unslash() or similar238
- Category
- Security
- Occurrences
- 238
- Severity
- warning
Sample message
$_COOKIE[$ai_cookie_name] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$ai_cookie_name]232
- Category
- Security
- Occurrences
- 232
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$ai_cookie_name]
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.210
- Category
- Security
- Occurrences
- 210
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityrand randrand() is discouraged. Use the far less predictable wp_rand() instead.138
- Category
- Maintainability
- Occurrences
- 138
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORI18nUnordered Placeholders TextMultiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in 'Warning: only exceptions for %d posts cleared, %d posts still have exceptions'.120
- Category
- I18n
- Occurrences
- 120
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in 'Warning: only exceptions for %d posts cleared, %d posts still have exceptions'.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'ad-inserter' but got 'dst'.35
- Category
- I18n
- Occurrences
- 35
- Severity
- error
Sample message
Mismatched text domain. Expected 'ad-inserter' but got 'dst'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.34
- Category
- Security
- Occurrences
- 34
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityNon Enqueued ScriptScripts must be registered/enqueued via wp_enqueue_script()28
- Category
- Maintainability
- Occurrences
- 28
- Severity
- error
Sample message
Scripts must be registered/enqueued via wp_enqueue_script()
Show 15 moreShow less
WARNINGSecurityInput is not validated26
- Category
- Security
- Occurrences
- 26
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['adsense-client-secret']. Check that the array index exists before using it.
ERRORMaintainabilitydate date25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORSecurityException output is not escaped22
- Category
- Security
- Occurrences
- 22
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Document with ID '{$id}' isn't loaded. Use phpQuery::newDocument(\$html) or phpQuery::newDocumentFile(\$file) first."'.
ERRORI18nMissing Translators Comment22
- Category
- I18n
- Occurrences
- 22
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilityrand mt rand15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
mt_rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORMaintainabilitystrip tags strip tags14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
ERRORMaintainabilityMissing direct file access protection11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityerror log var dump10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
var_dump() found. Debug code should not normally be used in production.
WARNINGMaintainabilityprevent path disclosure error reporting10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
error_reporting() can lead to full path disclosure.
ERRORMaintainabilityparse url parse url9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
WARNINGMaintainabilityDirect Query8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecuritySQL query is not prepared8
- Category
- Security
- Occurrences
- 8
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $block
ERRORMaintainabilityNon Enqueued Stylesheet8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
ERRORMaintainabilityfive star reviews detected7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
Linking directly to 5 stars reviews is not allowed.
External Connections
Potential connections found in static code analysis.
Outbound calls
299
External assets
0
Incoming endpoints
1
Notable Domains
en.wikipedia.org16 · outbound
code.google.com13 · outbound
docs.jquery.com13 · outbound
developer.mozilla.org7 · outbound
msdn.microsoft.com5 · outbound
detectmobilebrowsers.com4 · outbound
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints1
wp_ajax_dst_ajax_authenticated
wp_ajax
Score History
3 score snapshots
v2.8.18
23
Latest
- Findings
- 5,079
- Errors
- 4,267
- Warnings
- 812
- Check
- 2.0.0
v2.8.17
24
Score
- Findings
- 5,072
- Errors
- 4,260
- Warnings
- 812
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 5,079 | 4,267 | 812 | v2.8.18 | 2.0.0 |
| 24 | 5,072 | 4,260 | 812 | v2.8.17 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreWooCommerce21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreGoogle for WooCommerce38 scoreHead, Footer and Post Injections55 scoreAds.txt Manager92 scoreAdvanced Ads – Ad Manager & AdSense25 score
Author
Issue
Domain
Related
Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreWooCommerce21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreGoogle for WooCommerce38 scoreHead, Footer and Post Injections55 scoreAds.txt Manager92 scoreAdvanced Ads – Ad Manager & AdSense25 score
Related Plugins
Quick Adsense
20k+ active installs
100
Quads Ads Manager for Google AdSense
20k+ active installs
99
Reddit for WooCommerce
70k+ active installs
98
Snapchat for WooCommerce
70k+ active installs
98
HBAgency
8k+ active installs
98
Easy Google Adsense and Banner Ads Manager – AdsforWP
1k+ active installs
98