Monitor every change on your WordPress site — who did what, when, and where it came from — for a complete audit trail and stronger security.
39
Score
31
Errors
82
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability71
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
58
9 issue groups
Security
51
9 issue groups
I18n
4
1 issue group
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $additions10
- Category
- Security
- Occurrences
- 10
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $additions
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $table used in $wpdb->get_results()\n$table assigned unsafely at line 138.7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Unescaped parameter $table used in $wpdb->get_results()\n$table assigned unsafely at line 138.
WARNINGSecurityRequest data is not unslashed$_GET['aal-record-action'] not unslashed before sanitization. Use wp_unslash() or similar7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
$_GET['aal-record-action'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$table} at "ALTER TABLE `{$table}` "5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$table} at "ALTER TABLE `{$table}` "
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['aal-record-action']5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['aal-record-action']
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $action4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $action
Show 9 moreShow less
ERRORSecurityDatabase parameter is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Unescaped parameter $role_where used in $wpdb->get_col()\n$role_where assigned unsafely at line 313.
WARNINGSecurityInput is not validated3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_REQUEST['id_base']. Check that the array index exists before using it.
WARNINGMaintainabilitySchema Change2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGMaintainabilityerror log debug backtrace2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
debug_backtrace() found. Debug code should not normally be used in production.
WARNINGMaintainabilityupdate modification detected2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_themes
ERRORMaintainabilitywp function not compatible with requires wp2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Function "wp_admin_notice()" requires WordPress 6.4.0, but your plugin minimum supported version is WordPress 6.2.0.
WARNINGMaintainabilityDiscouraged PHP function1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The use of function set_time_limit() is discouraged
WARNINGSecuritywp redirect wp redirect1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
ERRORMaintainabilityfile system operations fclose1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
External Connections
Potential connections found in static code analysis.
Outbound calls
3
External assets
0
Incoming endpoints
3
Notable Domains
activitylog.io2 · outbound
grinninggecko.com1 · outbound
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints3
admin_post_aal_run_db_upgradeauthenticated
admin_post
wp_ajax_aal_promotion_campaignauthenticated
wp_ajax
wp_ajax_aal_promotion_dismissauthenticated
wp_ajax
Score History
8 score snapshots
v2.15.0
39
Latest
- Findings
- 113
- Errors
- 31
- Warnings
- 82
- Check
- 2.1.0
v2.14.1
39
Score
- Findings
- 121
- Errors
- 32
- Warnings
- 89
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 39 | 113 | 31 | 82 | v2.15.0 | 2.1.0 |
| 39 | 121 | 32 | 89 | v2.14.1 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Related
Elementor Website Builder – more than just a page builder39 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreHostinger Tools82 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention24 scoreImage Optimization – Compress Images and Convert to WebP or AVIF87 score
Author
Issue
Related
Elementor Website Builder – more than just a page builder39 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreHostinger Tools82 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention24 scoreImage Optimization – Compress Images and Convert to WebP or AVIF87 score
Related Plugins
User Role Editor
700k+ active installs
100
Stop User Enumeration
50k+ active installs
100
Login Security Captcha
10k+ active installs
100
Stop XML-RPC Attacks
6k+ active installs
100
Dam Spam
3k+ active installs
100
Compromise Scanner for wp2shell
3k+ active installs
100