AI Content Writing Assistant - Content Writer, ChatGPT, Image Generator All in One generates high-quality, unique content and stunning images with jus …
26
Score
1,069
Errors
516
Warnings
+0
Change
Category Scores
Security0
Repo85
Performance100
Maintainability17
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
857
10 issue groups
I18n
578
3 issue groups
Maintainability
129
12 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'ai-content-writing-assistant' but got "ai-writing-assistant".572
- Category
- I18n
- Occurrences
- 572
- Severity
- error
Sample message
Mismatched text domain. Expected 'ai-content-writing-assistant' but got "ai-writing-assistant".
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.343
- Category
- Security
- Occurrences
- 343
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.281
- Category
- Security
- Occurrences
- 281
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$current_user_avatar'.97
- Category
- Security
- Occurrences
- 97
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$current_user_avatar'.
WARNINGSecurityRequest data is not unslashed$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar90
- Category
- Security
- Occurrences
- 90
- Severity
- warning
Sample message
$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$category".36
- Category
- Maintainability
- Occurrences
- 36
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$category".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.31
- Category
- Security
- Occurrences
- 31
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;22
- Category
- Maintainability
- Occurrences
- 22
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Show 15 moreShow less
WARNINGMaintainabilityDiscouraged PHP function8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilityNon-prefixed function8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "ai_writing_assistant".
ERRORMaintainabilityOffloaded Content4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
ERRORSecuritySQL query is not prepared4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
WARNINGSecurityInput is not sanitized4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['formData']
WARNINGSecurityInterpolated SQL is not prepared3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$id} at "SELECT post_id FROM {$wpdb->prefix}ai_writing_assistant_sceduled_posts WHERE id='{$id}'"
WARNINGMaintainabilityNon-prefixed class3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "AI_Writing_Assistant_Menu".
ERRORMaintainabilitycurl curl setopt3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityDeprecated parameter: get_terms parameter 23
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
The parameter "array( 'hide_empty' => false, 'parent'=> $term->term_id)" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
ERRORI18nMissing Arg Domain3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORI18nNon Singular String Literal Text3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: 'Choose the size of the image you want to generate with <a href="https://openai.com/dall-e-2/">' . __("DALL-E", "ai-writing-assistant") .'</a>.'
WARNINGSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Unescaped parameter $this->settingsKey used in $wpdb->query()
ERRORMaintainabilitydate date2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityNon-prefixed hook name2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "after_aiwa_single_generation_tinymce".
WARNINGSecurityInput is not validated2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_REQUEST['rc_nonce']. Check that the array index exists before using it.
External Connections
Potential connections found in static code analysis.
Outbound calls
142
External assets
3
Incoming endpoints
23
Notable Domains
en.wikipedia.org12 · outbound
yandex.com12 · outbound
api.openai.com5 · outbound
apple.com4 · outbound
platform.openai.com3 · outbound
beta.openai.com2 · outbound
Platform / Reference Domains
w3.org38 · platform/reference
wordpress.org6 · platform/reference
github.com1 · platform/reference
gnu.org1 · platform/reference
validator.w3.org1 · platform/reference
External Asset Domains
myrecorp.com17 · asset + outbound
fonts.googleapis.com1 · asset
Incoming Endpoints
wp_ajax_nopriv_aiwa_notice_has_clickedpublic
wp_ajax
Admin AJAX endpoints22
wp_ajax_ai_writing_assistant_ai_dataauthenticated
wp_ajax
wp_ajax_ai_writing_assistant_save_settingsauthenticated
wp_ajax
wp_ajax_aiwa_add_scheduled_postauthenticated
wp_ajax
wp_ajax_aiwa_chatting_with_gptauthenticated
wp_ajax
wp_ajax_aiwa_check_is_scheduled_image_generatedauthenticated
wp_ajax
wp_ajax_aiwa_delete_scheduled_postauthenticated
wp_ajax
wp_ajax_aiwa_generate_ai_responseauthenticated
wp_ajax
wp_ajax_aiwa_generate_imageauthenticated
wp_ajax
wp_ajax_aiwa_generate_variation_imagesauthenticated
wp_ajax
wp_ajax_aiwa_notice_has_clickedauthenticated
wp_ajax
wp_ajax_aiwa_prompt_based_generationauthenticated
wp_ajax
wp_ajax_aiwa_rating_box_closedauthenticated
wp_ajax
10 more hidden
Score History
First score snapshot
v1.1.7
26
Latest
- Findings
- 1,585
- Errors
- 1,069
- Warnings
- 516
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 26 | 1,585 | 1,069 | 516 | v1.1.7 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Text Domain Mismatch572 findingsUnsafe printing function343 findingsMissing nonce verification281 findingsOutput is not escaped97 findingsRequest data is not unslashed90 findingsNon-prefixed global variable36 findingsNonce verification recommended31 findingsMissing direct file access protection22 findings
Domain
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreDuplicate Page40 scoreAdvanced Custom Fields (ACF®)23 scoreWordPress Importer25 scoreAll in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)92 scoreAI Agent by SiteGround54 scoreOne Click Demo Import38 scoreAI Engine – The Chatbot, AI Framework & MCP for WordPress23 score
Author
Issue
Text Domain Mismatch572 findingsUnsafe printing function343 findingsMissing nonce verification281 findingsOutput is not escaped97 findingsRequest data is not unslashed90 findingsNon-prefixed global variable36 findingsNonce verification recommended31 findingsMissing direct file access protection22 findings
Domain
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreDuplicate Page40 scoreAdvanced Custom Fields (ACF®)23 scoreWordPress Importer25 scoreAll in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)92 scoreAI Agent by SiteGround54 scoreOne Click Demo Import38 scoreAI Engine – The Chatbot, AI Framework & MCP for WordPress23 score
Related Plugins
AI Puffer – Chat. Create. Automate. (formerly AI Power)
10k+ active installs
100
Easy MCP AI – Connector for Claude, ChatGPT & SEO Data
6k+ active installs
100
Catch Themes Demo Import
5k+ active installs
100
JSM Non-Breaking Space (nbsp) for French Content
1k+ active installs
100
VigIA – AI Visibility, Analytics & Control
1k+ active installs
100
Share Buttons & AI-powered Summaries
1k+ active installs
100