Adminify – White Label, Admin Menu Editor, Login Customizer

Customize the WordPress admin area with white-label branding, a drag-and-drop menu editor, login page designer, media folders, and security tools.

v4.2.14Liton ArefinUpdated Added 7k+ installs86% rating100% support resolved
25
Score
546
Errors
1,370
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance98
Maintainability0

Top Issues by Category

maintainability1,386
security528
i18n1
performance1

Issues Details

1,916 issues found in latest scan

WARNING1,087
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".

ERROR517
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.

WARNING100
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;_fs_text&quot;.

WARNING94
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FS_API__ADDRESS&quot;.

WARNING55
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FS_Admin_Menu_Manager&quot;.

ERROR17
wp_function_not_compatible_with_requires_wp

Function "current_datetime()" requires WordPress 5.3.0, but your plugin minimum supported version is WordPress 5.0.0.

WARNING10
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;admin_footer-{$hook_suffix}&quot;.

ERROR7
WordPress.Security.EscapeOutput.ExceptionNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.

WARNING5
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING4
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNING3
WordPress.WP.EnqueuedResourceParameters.MissingVersion

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNING2
WordPress.DB.DirectDatabaseQuery.SchemaChange

Attempting a database schema change is discouraged.

WARNING2
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_POST[&#039;options&#039;]

ERROR2
plugin_updater_detected

Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: class FS_Plugin_Updater

WARNING2
update_modification_detected

Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins

ERROR1
PluginCheck.CodeAnalysis.WriteFile.PluginDirectoryWrite

Plugin folders are deleted when upgraded. Do not save data to the plugin folder using copy(). Detected usage of constant WP_PLUGIN_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.

ERROR1
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 608.

WARNING1
WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;{$module_type}_update_check_locales&quot;.

WARNING1
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedInterfaceFound

Interfaces declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FS_I_Garbage_Collector&quot;.

WARNING1
WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp_redirect() found. Using wp_safe_redirect(), along with the &quot;allowed_redirect_hosts&quot; filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WARNING1
WordPress.WP.EnqueuedResourceParameters.NotInFooter

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERROR1
WordPress.WP.I18n.NoEmptyStrings

The $text text string should have translatable content. Found: ''

WARNING1
WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

WARNING1
missing_composer_json_file

The &quot;/vendor&quot; directory using composer exists, but &quot;composer.json&quot; file is missing.

Latest Snapshot

Findings

1,916

Errors

546

Warnings

1,370

Score History

First score snapshot

First scan completed

v4.2.14 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

v4.2.14

25

Latest

Findings
1,916
Errors
546
Warnings
1,370
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins