Admin Search

Admin Search adds a simple, easy-to-use interface to your WordPress admin site that gives you and your admin users the ability to search across multip …

v1.5.0Andrew StichburyUpdated Added 1k+ installs90% rating
40
Score
31
Errors
47
Warnings
+0
Change

Category Scores

Security0
Repo97
Performance100
Maintainability76

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

78 findings

Security

45

7 issue groups

Maintainability

28

10 issue groups

I18n

4

1 issue group

Repo Compliance

1

1 issue group

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$body_id'.18
Category
Security
Occurrences
18
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$body_id'.

WARNINGSecurityInterpolated Not PreparedUse placeholders and $wpdb->prepare(); found interpolated variable $table at "TRUNCATE TABLE $table"9
Category
Security
Occurrences
9
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $table at "TRUNCATE TABLE $table"

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGSecurityMissing Unslash$_GET['admin_search_preview'] not unslashed before sanitization. Use wp_unslash() or similar6
Category
Security
Occurrences
6
Severity
warning

Sample message

$_GET['admin_search_preview'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityUnescaped DBParameterUnescaped parameter $table used in $wpdb->query()\n$table assigned unsafely at line 2021.5
Category
Security
Occurrences
5
Severity
warning

Sample message

Unescaped parameter $table used in $wpdb->query()\n$table assigned unsafely at line 2021.

WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_GET['admin_search_preview']4
Category
Security
Occurrences
4
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['admin_search_preview']

ERRORI18nUnordered Placeholders TextMultiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in '%date1% to %date2%'.4
Category
I18n
Occurrences
4
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in '%date1% to %date2%'.

ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Show 9 more
ERRORMaintainabilityFound2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

The "goto" language construct should not be used.

WARNINGSecurityRecommended2
Category
Security
Occurrences
2
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORSecurityLike Wildcards In Query1
Category
Security
Occurrences
1
Severity
error

Sample message

SQL wildcards for a LIKE query should be passed in through a replacement parameter. Found: LIKE '\_%%'.

WARNINGMaintainabilityslow db query tax query1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

WARNINGMaintainabilityNon Prefixed Variable Found1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$admin_results".

WARNINGMaintainabilitywp reset query wp reset query1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

wp_reset_query() is discouraged. Use wp_reset_postdata() instead.

ERRORMaintainabilityinvalid tested upto minor1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Tested up to: 7.0.1 The version number should only include major versions 7.0.

WARNINGRepo Compliancereadme parser warnings trimmed short description1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.

ERRORMaintainabilitystable tag mismatch1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Mismatched Stable Tag: 1.4.3 != 1.5.0. Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org.

Score History

First score snapshot

v1.5.0

40

Latest

Findings
78
Errors
31
Warnings
47
Check
2.0.0

Related Plugins

PufferDesk

0 active installs

100
Simply Show Hooks

2k+ active installs

100
Disable Search

40k+ active installs

99
Hide WP Admin Notifications

1k+ active installs

99
One Click Close Comments

4k+ active installs

99