Clean database by deleting orphaned data such as 'revisions', 'expired transients', optimize database and more...
30
Score
173
Errors
479
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability23
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
340
9 issue groups
Maintainability
304
15 issue groups
I18n
2
1 issue group
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $col at "SELECT $col FROM $tbl WHERE $idCol IN ($ids_placeholder)"145
- Category
- Security
- Occurrences
- 145
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $col at "SELECT $col FROM $tbl WHERE $idCol IN ($ids_placeholder)"
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.127
- Category
- Maintainability
- Occurrences
- 127
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().125
- Category
- Maintainability
- Occurrences
- 125
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $check_sql92
- Category
- Security
- Occurrences
- 92
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $check_sql
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $lookup_table used in $wpdb->query()\n$lookup_table assigned unsafely at line 214.38
- Category
- Security
- Occurrences
- 38
- Severity
- warning
Sample message
Unescaped parameter $lookup_table used in $wpdb->query()\n$lookup_table assigned unsafely at line 214.
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $postmeta used in $wpdb->get_var()\n$postmeta assigned unsafely at line 582.36
- Category
- Security
- Occurrences
- 36
- Severity
- error
Sample message
Unescaped parameter $postmeta used in $wpdb->get_var()\n$postmeta assigned unsafely at line 582.
WARNINGSecurityUnfinished PrepareReplacement variables found, but no valid placeholders found in the query.13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
ERRORMaintainabilityfile system operations fcloseFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fwriteFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
WARNINGSecurityReplacements Wrong NumberIncorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.
Show 15 moreShow less
ERRORMaintainabilitydate date7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityslow db query meta key4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityNon-prefixed constant4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_CHMOD_DIR".
ERRORSecurityOutput is not escaped4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$phrase1'.
WARNINGMaintainabilitySchema Change3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORMaintainabilityrename rename3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
rename() is discouraged. Use WP_Filesystem::move() to rename a file.
ERRORMaintainabilitywp function not compatible with requires wp3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Function "wp_autoload_values_to_autoload()" requires WordPress 6.6.0, but your plugin minimum supported version is WordPress 5.0.0.
WARNINGMaintainabilityNon-prefixed hook name2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "plugin_locale".
WARNINGSecurityNonce verification recommended2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
$_SERVER['REQUEST_URI'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityfile system operations fopen2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations rmdir2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().
ERRORMaintainabilityunlink unlink2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORI18nMissing Arg Domain2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGMaintainabilityupdate modification detected2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_core
External Connections
Potential connections found in static code analysis.
Outbound calls
11
External assets
0
Incoming endpoints
0
Notable Domains
sigmaplugin.com6 · outbound
api.sigmaplugin.com1 · outbound
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
2 score snapshots
v4.2.0
30
Latest
- Findings
- 652
- Errors
- 173
- Warnings
- 479
- Check
- 2.0.0
v4.1.1
30
Score
- Findings
- 603
- Errors
- 164
- Warnings
- 439
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 30 | 652 | 173 | 479 | v4.2.0 | 2.0.0 |
| 30 | 603 | 164 | 439 | v4.1.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreLiteSpeed Cache35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreImage Optimization – Compress Images and Convert to WebP or AVIF87 scoreManageWP Worker23 score
Author
Issue
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreLiteSpeed Cache35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreImage Optimization – Compress Images and Convert to WebP or AVIF87 scoreManageWP Worker23 score
Related Plugins
Modern Image Formats
100k+ active installs
100
Disable Emojis (GDPR friendly)
60k+ active installs
100
Image Placeholders
60k+ active installs
100
Optimization Detective
60k+ active installs
100
Embed Optimizer
50k+ active installs
100
SQLite Object Cache
10k+ active installs
100