The main advantage of this widget is random movement of random links and every time they are changing.
37
Score
322
Errors
15
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance98
Maintainability63
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
277
5 issue groups
Maintainability
57
10 issue groups
I18n
1
1 issue group
Performance
1
1 issue group
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" value='$category->cat_ID'>"'.267
- Category
- Security
- Occurrences
- 267
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" value='$category->cat_ID'>"'.
ERRORMaintainabilitystrip tags strip tagsstrip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.30
- Category
- Maintainability
- Occurrences
- 30
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
ERRORMaintainabilityShort PHP open tag foundShort PHP opening tag used with echo; expected "<?php echo $this ..." but found "<?= $this ..."8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
Short PHP opening tag used with echo; expected "<?php echo $this ..." but found "<?= $this ..."
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $ays_array5
- Category
- Security
- Occurrences
- 5
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $ays_array
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilitywp function not compatible with requires wpFunction "get_the_post_thumbnail_url()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 4.0.0.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Function "get_the_post_thumbnail_url()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 4.0.0.
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $ays_array used in $wpdb->get_results()\n$ays_array assigned unsafely at line 127.2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Unescaped parameter $ays_array used in $wpdb->get_results()\n$ays_array assigned unsafely at line 127.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
Show 8 moreShow less
ERRORMaintainabilityNo Explicit Version2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
WARNINGSecurityInterpolated SQL is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $ays_post_category at "term_taxonomy.term_id IN ($ays_post_category) AND "
ERRORMaintainabilityrand rand1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORI18nNon Singular String Literal Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $rand_id
WARNINGPerformancePost Not In exclude1
- Category
- Performance
- Occurrences
- 1
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
ERRORRepo Compliancelicense mismatch1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Your plugin has a different license declared in the readme file and plugin header. Please update your readme with a valid GPL license identifier.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Random Posts and Pages Widget" is different from the name declared in plugin header "Random Posts and Pages".
ERRORMaintainabilityMissing direct file access protection1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
External Connections
Potential connections found in static code analysis.
Outbound calls
17
External assets
0
Incoming endpoints
0
Notable Domains
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
First score snapshot
v2.6.2
37
Latest
- Findings
- 337
- Errors
- 322
- Warnings
- 15
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 37 | 337 | 322 | 15 | v2.6.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Related
WebberZone Top 10 — Popular Posts65 scoreRandom Post Plugin – Redirect URL to Post40 scoreStatify Widget40 scoreLight Views Counter – Fast, Scalable View Counter for High-Traffic Sites89 scoreRandom Post for Widget58 scoreWP Most Popular39 scoreWooCommerce22 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreElementor Website Builder – more than just a page builder35 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 score
Author
Category
Issue
Related
WebberZone Top 10 — Popular Posts65 scoreRandom Post Plugin – Redirect URL to Post40 scoreStatify Widget40 scoreLight Views Counter – Fast, Scalable View Counter for High-Traffic Sites89 scoreRandom Post for Widget58 scoreWP Most Popular39 scoreWooCommerce22 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreElementor Website Builder – more than just a page builder35 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 score
Related Plugins
Light Views Counter – Fast, Scalable View Counter for High-Traffic Sites
2k+ active installs
89
WebberZone Top 10 — Popular Posts
10k+ active installs
65
Random Post for Widget
2k+ active installs
58
Random Post Plugin – Redirect URL to Post
4k+ active installs
40
Statify Widget
4k+ active installs
40
WP Most Popular
2k+ active installs
39