Admin Search adds a simple, easy-to-use interface to your WordPress admin site that gives you and your admin users the ability to search across multip …
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
45
7 issue groups
Maintainability
28
10 issue groups
I18n
4
1 issue group
Repo Compliance
1
1 issue group
ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$body_id'.18
- Category
- Security
- Occurrences
- 18
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$body_id'.
WARNINGSecurityInterpolated Not PreparedUse placeholders and $wpdb->prepare(); found interpolated variable $table at "TRUNCATE TABLE $table"9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $table at "TRUNCATE TABLE $table"
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityMissing Unslash$_GET['admin_search_preview'] not unslashed before sanitization. Use wp_unslash() or similar6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
$_GET['admin_search_preview'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityUnescaped DBParameterUnescaped parameter $table used in $wpdb->query()\n$table assigned unsafely at line 2021.5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Unescaped parameter $table used in $wpdb->query()\n$table assigned unsafely at line 2021.
WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_GET['admin_search_preview']4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['admin_search_preview']
ERRORI18nUnordered Placeholders TextMultiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in '%date1% to %date2%'.4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in '%date1% to %date2%'.
ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Show 9 moreShow less
ERRORMaintainabilityFound2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
The "goto" language construct should not be used.
WARNINGSecurityRecommended2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityLike Wildcards In Query1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
SQL wildcards for a LIKE query should be passed in through a replacement parameter. Found: LIKE '\_%%'.
WARNINGMaintainabilityslow db query tax query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityNon Prefixed Variable Found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$admin_results".
WARNINGMaintainabilitywp reset query wp reset query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
wp_reset_query() is discouraged. Use wp_reset_postdata() instead.
ERRORMaintainabilityinvalid tested upto minor1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 7.0.1 The version number should only include major versions 7.0.
WARNINGRepo Compliancereadme parser warnings trimmed short description1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.
ERRORMaintainabilitystable tag mismatch1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched Stable Tag: 1.4.3 != 1.5.0. Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org.
Score History
First score snapshot
v1.5.0
40
Latest
- Findings
- 78
- Errors
- 31
- Warnings
- 47
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 40 | 78 | 31 | 47 | v1.5.0 | 2.0.0 |