Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam, eaque ipsa quae ab illo inventore …
18
Score
2,061
Errors
799
Warnings
+0
Change
Category Scores
Security0
Repo58
Performance93
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
1,636
11 issue groups
Maintainability
679
11 issue groups
I18n
417
3 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"::: CRON DONE WITH $items items and saved log, URL from: $url_from \r\n"'.1,040
- Category
- Security
- Occurrences
- 1,040
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"::: CRON DONE WITH $items items and saved log, URL from: $url_from \r\n"'.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().246
- Category
- I18n
- Occurrences
- 246
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORMaintainabilityShort PHP open tag foundShort PHP opening tag used with echo; expected "<?php echo $atts ..." but found "<?= $atts ..."165
- Category
- Maintainability
- Occurrences
- 165
- Severity
- error
Sample message
Short PHP opening tag used with echo; expected "<?php echo $atts ..." but found "<?= $atts ..."
ERRORI18nText Domain MismatchMismatched text domain. Expected 'administrator-z' but got "elementor-pro".161
- Category
- I18n
- Occurrences
- 161
- Severity
- error
Sample message
Mismatched text domain. Expected 'administrator-z' but got "elementor-pro".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.130
- Category
- Security
- Occurrences
- 130
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$key".127
- Category
- Maintainability
- Occurrences
- 127
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$key".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET[$_field]114
- Category
- Security
- Occurrences
- 114
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET[$_field]
WARNINGSecurityRequest data is not unslashed$_GET[$_field] not unslashed before sanitization. Use wp_unslash() or similar114
- Category
- Security
- Occurrences
- 114
- Severity
- warning
Sample message
$_GET[$_field] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityHeredoc Output Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found interpolation in unescaped heredoc.95
- Category
- Security
- Occurrences
- 95
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found interpolation in unescaped heredoc.
ERRORMaintainabilityNot AllowedUse of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead90
- Category
- Maintainability
- Occurrences
- 90
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
Show 15 moreShow less
ERRORMaintainabilityMissing direct file access protection80
- Category
- Maintainability
- Occurrences
- 80
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed hook name51
- Category
- Maintainability
- Occurrences
- 51
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "WoocommerceOrderItem_display".
WARNINGMaintainabilityDirect Query49
- Category
- Maintainability
- Occurrences
- 49
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGSecurityMissing nonce verification49
- Category
- Security
- Occurrences
- 49
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNo Caching44
- Category
- Maintainability
- Occurrences
- 44
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInput is not validated32
- Category
- Security
- Occurrences
- 32
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['vnp_ResponseCode']. Check that the array index exists before using it.
WARNINGMaintainabilityerror log print r25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
ERRORMaintainabilityrand rand20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
WARNINGSecurityInterpolated SQL is not prepared16
- Category
- Security
- Occurrences
- 16
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $placeholders at url IN ($placeholders) AND\r\n
ERRORSecuritySQL query is not prepared16
- Category
- Security
- Occurrences
- 16
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $oldid
ERRORSecurityUnsafe printing function16
- Category
- Security
- Occurrences
- 16
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORMaintainabilitycurl curl setopt16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORSecuritySetting is missing a sanitization callback14
- Category
- Security
- Occurrences
- 14
- Severity
- error
Sample message
Sanitization missing for register_setting().
ERRORMaintainabilityparse url parse url12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORI18nMissing Translators Comment10
- Category
- I18n
- Occurrences
- 10
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
External Connections
Potential connections found in static code analysis.
Outbound calls
298
External assets
2
Incoming endpoints
0
Notable Domains
developer.mozilla.org107 · outbound
en.wikipedia.org63 · outbound
leafletjs.com16 · outbound
stackoverflow.com6 · outbound
caniuse.com4 · outbound
openstreetmap.org4 · outbound
Platform / Reference Domains
w3.org29 · platform/reference
github.com17 · platform/reference
gnu.org1 · platform/reference
plugins.svn.wordpress.org1 · platform/reference
External Asset Domains
code.jquery.com2 · asset + outbound
ajax.googleapis.com1 · asset
Incoming Endpoints
No public endpoints detected.
Score History
First score snapshot
v2026.06.03
18
Latest
- Findings
- 2,860
- Errors
- 2,061
- Warnings
- 799
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 18 | 2,860 | 2,061 | 799 | v2026.06.03 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
Hostinger Tools82 scoreRewrite Rules Inspector58 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce22 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreAdmin and Site Enhancements (ASE)23 score
Plugin
Author
Issue
Domain
Related
Hostinger Tools82 scoreRewrite Rules Inspector58 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce22 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreAdmin and Site Enhancements (ASE)23 score
Related Plugins
Glow: maintenance & support management for agencies
700 active installs
99
Certify – Certificate Management & Verification
500 active installs
94
Post Meta Inspector
2k+ active installs
83
Hostinger Tools
3m+ active installs
82
Discontinued Product Stock Status for WooCommerce
500 active installs
72
Rewrite Rules Inspector
10k+ active installs
58