Securely connect your clients’ sites to the Automattic for Agencies Sites Dashboard. Manage your sites from one place and see what needs attention.
54
Score
341
Errors
189
Warnings
+1
Change
Category Scores
Security34
Repo100
Performance97
Maintainability52
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
332
1 issue group
Maintainability
149
11 issue groups
Security
47
2 issue groups
Performance
2
1 issue group
ERRORI18nText Domain MismatchMismatched text domain. Expected 'automattic-for-agencies-client' but got 'jetpack-admin-ui'.332
- Category
- I18n
- Occurrences
- 332
- Severity
- error
Sample message
Mismatched text domain. Expected 'automattic-for-agencies-client' but got 'jetpack-admin-ui'.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.54
- Category
- Maintainability
- Occurrences
- 54
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $custom_table_name used in $wpdb->get_row()\n$custom_table_name assigned unsafely at line 614.41
- Category
- Security
- Occurrences
- 41
- Severity
- warning
Sample message
Unescaped parameter $custom_table_name used in $wpdb->get_row()\n$custom_table_name assigned unsafely at line 614.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().37
- Category
- Maintainability
- Occurrences
- 37
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'pre_update_jetpack_option_' . $name".26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'pre_update_jetpack_option_' . $name".
WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta valueDetected usage of meta_value, possible slow query.9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Invalid field name: $field is not allowed"'.6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Invalid field name: $field is not allowed"'.
WARNINGMaintainabilityDiscouraged PHP functionThe use of function ini_set() is discouraged5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGPerformancePost Not In excludeUsing exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.2
- Category
- Performance
- Occurrences
- 2
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
Show 5 moreShow less
ERRORMaintainabilityMissing direct file access protection2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityupdate modification detected2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins
WARNINGMaintainabilityNon-prefixed constant1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "XMLRPC_REQUEST".
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Automattic For Agencies Client" is different from the name declared in plugin header "Automattic for Agencies Client".
ERRORMaintainabilityplugin updater detected1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins
External Connections
Potential connections found in static code analysis.
Outbound calls
119
External assets
0
Incoming endpoints
49
Notable Domains
jetpack.com12 · outbound
wp.me8 · outbound
wordpress.com7 · outbound
public-api.wordpress.com4 · outbound
pixel.wp.com3 · outbound
automattic.com2 · outbound
Platform / Reference Domains
github.com40 · platform/reference
w3.org8 · platform/reference
core.trac.wordpress.org5 · platform/reference
plugins.trac.wordpress.org4 · platform/reference
wordpress.org3 · platform/reference
codex.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/jetpack/v4/connectionREST
register_rest_route
/wp-json/jetpack/v4/connection/authorize_urlREST
register_rest_route
/wp-json/jetpack/v4/connection/checkREST
register_rest_route
/wp-json/jetpack/v4/connection/dataREST
register_rest_route
/wp-json/jetpack/v4/connection/ownerREST
register_rest_route
/wp-json/jetpack/v4/connection/pluginsREST
register_rest_route
Admin AJAX endpoints6
wp_ajax_edit-theme-plugin-fileauthenticated
wp_ajax
admin_post_jetpack_invite_user_to_wpcomauthenticated
admin_post
admin_post_jetpack_resend_invite_user_to_wpcomauthenticated
admin_post
admin_post_jetpack_revoke_invite_user_to_wpcomauthenticated
admin_post
wp_ajax_health-check-jetpack-connection-healthauthenticated
wp_ajax
wp_ajax_jetpack_tracksauthenticated
wp_ajax
Score History
2 score snapshots
v0.9.0
54
Latest
- Findings
- 530
- Errors
- 341
- Warnings
- 189
- Check
- 2.0.0
v0.8.0
53
Score
- Findings
- 433
- Errors
- 249
- Warnings
- 184
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 54 | 530 | 341 | 189 | v0.9.0 | 2.0.0 |
| 53 | 433 | 249 | 184 | v0.8.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
WooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAll-in-One WP Migration and Backup34 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreWP Super Cache25 scoreMainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites38 scoreWooCommerce Legacy REST API31 score
Author
Issue
Domain
Related
WooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAll-in-One WP Migration and Backup34 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreWP Super Cache25 scoreMainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites38 scoreWooCommerce Legacy REST API31 score
Related Plugins
Default Admin Color Scheme
800 active installs
100
PufferDesk
0 active installs
100
Customize Admin
3k+ active installs
99
Hide WP Admin Notifications
3k+ active installs
99
Glow: maintenance & support management for agencies
700 active installs
99
Add Dashboard Columns
400 active installs
99