Cloak, organise and track affiliate links in WordPress, with server-side click tracking and conversion data across 450+ networks.
39
Score
23
Errors
113
Warnings
+3
Change
Category Scores
Security0
Repo100
Performance100
Maintainability70
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
65
10 issue groups
Security
65
9 issue groups
I18n
6
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$browser".26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$browser".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.21
- Category
- Security
- Occurrences
- 21
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES['file']['name']14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['file']['name']
ERRORMaintainabilitywp function not compatible with requires wpFunction "esc_xml()" requires WordPress 5.5.0, but your plugin minimum supported version is WordPress 4.0.0.14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- error
Sample message
Function "esc_xml()" requires WordPress 5.5.0, but your plugin minimum supported version is WordPress 4.0.0.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'af_link_report_tab_' . $this->get_current_tab()".13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'af_link_report_tab_' . $this->get_current_tab()".
WARNINGSecurityRequest data is not unslashed$_GET['end_date'] not unslashed before sanitization. Use wp_unslash() or similar11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
$_GET['end_date'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES['file']['name']. Check that the array index exists before using it.7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES['file']['name']. Check that the array index exists before using it.
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $field['description']6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $field['description']
WARNINGMaintainabilityslow db query tax queryDetected usage of tax_query, possible slow query.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
Show 10 moreShow less
WARNINGSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Unescaped parameter $expression used in $wpdb->get_results()\n$expression assigned unsafely at line 167.
ERRORMaintainabilityMissing direct file access protection2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityDirect Query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $table_name at "TRUNCATE TABLE $table_name"
WARNINGMaintainabilityslow db query meta query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityNon-prefixed class1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "RandomColor".
WARNINGMaintainabilityNon-prefixed function1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "AFL_PRO".
ERRORSecurityOutput is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$class'.
WARNINGSecuritywp redirect wp redirect1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
External Connections
Potential connections found in static code analysis.
Outbound calls
84
External assets
0
Incoming endpoints
1
Notable Domains
hexmen.com14 · outbound
jqplot.com12 · outbound
affiliatelinkswp.com6 · outbound
codecanyon.net6 · outbound
stackoverflow.com5 · outbound
kendsnyder.com3 · outbound
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints1
wp_ajax_af_link_additional_settingsauthenticated
wp_ajax
Score History
2 score snapshots
v3.3.0
39
Latest
- Findings
- 136
- Errors
- 23
- Warnings
- 113
- Check
- 2.0.0
v3.2.1
36
Score
- Findings
- 162
- Errors
- 26
- Warnings
- 136
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 39 | 136 | 23 | 113 | v3.3.0 | 2.0.0 |
| 36 | 162 | 26 | 136 | v3.2.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Non-prefixed global variable26 findingsNonce verification recommended21 findingsInput is not sanitized14 findingswp function not compatible with requires wp14 findingsNon-prefixed hook name13 findingsRequest data is not unslashed11 findingsMissing nonce verification7 findingsInput is not validated7 findings
Domain
Related
URL Shortify – Simple and Easy URL Shortener21 scoreEasy Affiliate Links30 scoreLasso Lite – Affiliate Link Manager & Product Displays23 scoreLinkCentral – URL shortener, Affiliate Links & Custom Link Shortener with Link Tracking89 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreAffiliate Sales in Google Analytics and other tools35 score
Author
Category
Issue
Non-prefixed global variable26 findingsNonce verification recommended21 findingsInput is not sanitized14 findingswp function not compatible with requires wp14 findingsNon-prefixed hook name13 findingsRequest data is not unslashed11 findingsMissing nonce verification7 findingsInput is not validated7 findings
Domain
Related
URL Shortify – Simple and Easy URL Shortener21 scoreEasy Affiliate Links30 scoreLasso Lite – Affiliate Link Manager & Product Displays23 scoreLinkCentral – URL shortener, Affiliate Links & Custom Link Shortener with Link Tracking89 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreAffiliate Sales in Google Analytics and other tools35 score
Related Plugins
89
Easy Affiliate Links
7k+ active installs
30
Lasso Lite – Affiliate Link Manager & Product Displays
4k+ active installs
23
URL Shortify – Simple and Easy URL Shortener
10k+ active installs
21