Atomic Edge Security – Firewall, Malware Scan and Login Security

WordPress firewall with cloud WAF rules, malware scanning, 2FA, vulnerability checks, IP blocking, and real-time security logs.

v2.9.0shift8Updated Added 600 installs100% rating
40
Score
12
Errors
184
Warnings
+0
Change

Category Scores

Security3
Repo100
Performance100
Maintainability69

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

196 findings

Maintainability

152

13 issue groups

Security

39

6 issue groups

I18n

5

2 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_cdn_url".138
Category
Maintainability
Occurrences
138
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_cdn_url".

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.24
Category
Security
Occurrences
24
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $table_sql used in $wpdb->get_results()\n$table_sql assigned unsafely at line 1970.6
Category
Security
Occurrences
6
Severity
warning

Sample message

Unescaped parameter $table_sql used in $wpdb->get_results()\n$table_sql assigned unsafely at line 1970.

ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $table_sql4
Category
Security
Occurrences
4
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $table_sql

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.4
Category
I18n
Occurrences
4
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $placeholders at " SET status = 'done', updated_at = %s WHERE id IN ($placeholders)"2
Category
Security
Occurrences
2
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $placeholders at " SET status = 'done', updated_at = %s WHERE id IN ($placeholders)"

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$nc_user'.2
Category
Security
Occurrences
2
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$nc_user'.

WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNINGMaintainabilityDiscouraged PHP functionThe use of function set_time_limit() is discouraged1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The use of function set_time_limit() is discouraged

Show 11 more
WARNINGMaintainabilityDirect Query1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo Caching1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGMaintainabilitySchema Change1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WARNINGMaintainabilityslow db query meta key1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WARNINGMaintainabilityslow db query meta value1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

ERRORMaintainabilitydate date1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGMaintainabilityNon-prefixed hook name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "login_redirect".

WARNINGMaintainabilityerror log var export1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

var_export() found. Debug code should not normally be used in production.

WARNINGSecurityInput is not sanitized1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['password']

ERRORMaintainabilityfile system operations fclose1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Atomic Edge Security - Firewall, Malware Scan and Login Security" is different from the name declared in plugin header "Atomic Edge Security".

External Connections

Potential connections found in static code analysis.

14 domains

Outbound calls

34

External assets

0

Incoming endpoints

43

Notable Domains

cve.org3 · outbound
wordfence.com3 · outbound
atomicedge.io2 · outbound
cdn.atomicedge.io2 · outbound
cdn.example.com2 · outbound

Platform / Reference Domains

github.com4 · platform/reference
api.wordpress.org1 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints43
wp_ajax_atomicedge_2fa_cancel_enrollmentauthenticated

wp_ajax

wp_ajax_atomicedge_2fa_disableauthenticated

wp_ajax

wp_ajax_atomicedge_2fa_get_statusauthenticated

wp_ajax

wp_ajax_atomicedge_2fa_regenerate_codesauthenticated

wp_ajax

wp_ajax_atomicedge_2fa_start_enrollmentauthenticated

wp_ajax

wp_ajax_atomicedge_2fa_verify_enrollmentauthenticated

wp_ajax

wp_ajax_atomicedge_add_ip_blacklistauthenticated

wp_ajax

wp_ajax_atomicedge_add_ip_whitelistauthenticated

wp_ajax

wp_ajax_atomicedge_block_ipauthenticated

wp_ajax

wp_ajax_atomicedge_cancel_scanauthenticated

wp_ajax

wp_ajax_atomicedge_clear_cacheauthenticated

wp_ajax

wp_ajax_atomicedge_clear_minify_cacheauthenticated

wp_ajax

31 more hidden

Score History

First score snapshot

v2.9.0

40

Latest

Findings
196
Errors
12
Warnings
184
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related

Related Plugins