Agile Store Locator is a WordPress store locator and store finder for where-to-buy pages, with free no-key maps and native Google Maps.
25
Score
3,348
Errors
1,834
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance96
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
2,578
4 issue groups
Security
1,326
10 issue groups
Maintainability
1,194
11 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'agile-store-locator' but got "asl_locator".2,504
- Category
- I18n
- Occurrences
- 2,504
- Severity
- error
Sample message
Mismatched text domain. Expected 'agile-store-locator' but got "asl_locator".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_ct".347
- Category
- Maintainability
- Occurrences
- 347
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_ct".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.289
- Category
- Maintainability
- Occurrences
- 289
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.288
- Category
- Security
- Occurrences
- 288
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().265
- Category
- Maintainability
- Occurrences
- 265
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"' $selected>"'.235
- Category
- Security
- Occurrences
- 235
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"' $selected>"'.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $args183
- Category
- Security
- Occurrences
- 183
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $args
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $attr_ids at " WHERE id IN ($attr_ids)"132
- Category
- Security
- Occurrences
- 132
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $attr_ids at " WHERE id IN ($attr_ids)"
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.127
- Category
- Security
- Occurrences
- 127
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilitywp function not compatible with requires wpFunction "has_shortcode()" requires WordPress 3.6.0, but your plugin minimum supported version is WordPress 3.3.2.103
- Category
- Maintainability
- Occurrences
- 103
- Severity
- error
Sample message
Function "has_shortcode()" requires WordPress 3.6.0, but your plugin minimum supported version is WordPress 3.3.2.
Show 15 moreShow less
WARNINGSecurityRequest data is not unslashed95
- Category
- Security
- Occurrences
- 95
- Severity
- warning
Sample message
$_GET[$attr_name] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitized88
- Category
- Security
- Occurrences
- 88
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE['asl-lang']
ERRORSecurityDatabase parameter is not escaped86
- Category
- Security
- Occurrences
- 86
- Severity
- error
Sample message
Unescaped parameter $attr_name used in $wpdb->get_col()\n$attr_name assigned unsafely at line 244.
WARNINGSecurityDatabase parameter is not escaped52
- Category
- Security
- Occurrences
- 52
- Severity
- warning
Sample message
Unescaped parameter $prefix used in $wpdb->get_results()
ERRORMaintainabilitybadly named files51
- Category
- Maintainability
- Occurrences
- 51
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
WARNINGMaintainabilityNon-prefixed hook name44
- Category
- Maintainability
- Occurrences
- 44
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "asl_admin_custom_field_section".
WARNINGSecurityInput is not validated40
- Category
- Security
- Occurrences
- 40
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES['files']. Check that the array index exists before using it.
ERRORI18nMissing Arg Domain33
- Category
- I18n
- Occurrences
- 33
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGMaintainabilitySchema Change29
- Category
- Maintainability
- Occurrences
- 29
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORMaintainabilityMissing direct file access protection28
- Category
- Maintainability
- Occurrences
- 28
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORI18nNon Singular String Literal Text23
- Category
- I18n
- Occurrences
- 23
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $aRow->country
ERRORMaintainabilitystrip tags strip tags19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
ERRORI18nMissing Translators Comment18
- Category
- I18n
- Occurrences
- 18
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilityNon-prefixed constant11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "ALLOW_UNFILTERED_UPLOADS".
ERRORMaintainabilitydate date8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
External Connections
Potential connections found in static code analysis.
Outbound calls
283
External assets
6
Incoming endpoints
11
Notable Domains
agilestorelocator.com118 · outbound
agilelogix.com19 · outbound
momentjs.com18 · outbound
localise.biz10 · outbound
policies.google.com8 · outbound
youtube.com6 · outbound
Platform / Reference Domains
w3.org24 · platform/reference
github.com15 · platform/reference
opensource.org4 · platform/reference
wordpress.org3 · platform/reference
schema.org2 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
cdn.agilestorelocator.com11 · asset + outbound
192.168.100.62 · asset + outbound
flagcdn.com2 · asset + outbound
fonts.googleapis.com1 · asset
youtube-nocookie.com1 · asset
Incoming Endpoints
wp_ajax_nopriv_asl_approve_storepublic
wp_ajax
wp_ajax_nopriv_asl_load_storespublic
wp_ajax
wp_ajax_nopriv_asl_nominatim_searchpublic
wp_ajax
wp_ajax_nopriv_asl_search_logpublic
wp_ajax
Admin AJAX endpoints7
wp_ajax_asl_ajax_handlerauthenticated
wp_ajax
wp_ajax_asl_approve_storeauthenticated
wp_ajax
wp_ajax_asl_load_storesauthenticated
wp_ajax
wp_ajax_asl_nominatim_searchauthenticated
wp_ajax
wp_ajax_asl_search_internal_pagesauthenticated
wp_ajax
wp_ajax_asl_search_logauthenticated
wp_ajax
wp_ajax_asl_submit_deactivation_feedbackauthenticated
wp_ajax
Score History
13 score snapshots
v1.8.6
25
Latest
- Findings
- 5,182
- Errors
- 3,348
- Warnings
- 1,834
- Check
- 2.1.0
v1.8.5
25
Score
- Findings
- 5,079
- Errors
- 3,260
- Warnings
- 1,819
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 25 | 5,182 | 3,348 | 1,834 | v1.8.6 | 2.1.0 |
| 25 | 5,079 | 3,260 | 1,819 | v1.8.5 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
API KEY for Google Maps94 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreWP Go Maps – Google Map, OpenStreetMap, Leaflet Map25 scoreiframe74 score
Author
Category
Issue
Domain
Related
API KEY for Google Maps94 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreWP Go Maps – Google Map, OpenStreetMap, Leaflet Map25 scoreiframe74 score
Related Plugins
Maps Widget for Google Maps
30k+ active installs
99
Simple Shortcode for Google Maps
3k+ active installs
98
WP Go Maps Block
3k+ active installs
98
API KEY for Google Maps
40k+ active installs
94
Flexible Map
7k+ active installs
85
Pronamic Google Maps
1k+ active installs
85