Bard Extra

Adds One Click Demo Import functionality for Bard theme.

v1.2.8WP RoyalUpdated Added 700 installs0% rating
36
Score
159
Errors
75
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance100
Maintainability58

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

234 findings

Security

115

6 issue groups

I18n

77

3 issue groups

Maintainability

41

16 issue groups

ERRORI18nText Domain MismatchMismatched text domain. Expected 'bard-extra' but got 'wordpress-importer'.57
Category
I18n
Occurrences
57
Severity
error

Sample message

Mismatched text domain. Expected 'bard-extra' but got 'wordpress-importer'.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$error'.56
Category
Security
Occurrences
56
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$error'.

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['bardxtra_plugin_checked']. Check that the array index exists before using it.15
Category
Security
Occurrences
15
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['bardxtra_plugin_checked']. Check that the array index exists before using it.

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.15
Category
I18n
Occurrences
15
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.14
Category
Security
Occurrences
14
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.10
Category
Security
Occurrences
10
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['imported_authors']10
Category
Security
Occurrences
10
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['imported_authors']

WARNINGSecurityRequest data is not unslashed$_POST['imported_authors'] not unslashed before sanitization. Use wp_unslash() or similar10
Category
Security
Occurrences
10
Severity
warning

Sample message

$_POST['imported_authors'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "import_allow_create_users".9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "import_allow_create_users".

ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.7
Category
Maintainability
Occurrences
7
Severity
error

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

Show 15 more
WARNINGMaintainabilityNon-prefixed class5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Bardxtra_Options".

ERRORI18nUnordered Placeholders Text5
Category
I18n
Occurrences
5
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in '%s “%s” already exists.'.

WARNINGMaintainabilityDirect Query3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Use of a direct database call is discouraged.

ERRORMaintainabilitywp function not compatible with requires wp3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Function "wp_slash_strings_only()" requires WordPress 5.3.0, but your plugin minimum supported version is WordPress 4.6.0.

WARNINGMaintainabilityDiscouraged PHP function2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

The use of function set_time_limit() is discouraged

WARNINGMaintainabilityNo Caching2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGMaintainabilityNon-prefixed constant2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "IMPORT_DEBUG".

WARNINGMaintainabilityNon-prefixed global variable1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$class_wp_importer".

ERRORMaintainabilityfile system operations chmod1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().

ERRORMaintainabilityfile system operations fclose1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERRORMaintainabilityfile system operations fopen1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

WARNINGMaintainabilityMissing Version1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

WARNINGMaintainabilityNot In Footer1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERRORMaintainabilitybadly named files1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File and folder names must not contain spaces or special characters.

ERRORMaintainabilityMissing direct file access protection1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

External Connections

Potential connections found in static code analysis.

5 domains

Outbound calls

14

External assets

0

Incoming endpoints

8

Notable Domains

wp-royal.com4 · outbound
purl.org2 · outbound
tools.ietf.org2 · outbound

Platform / Reference Domains

wordpress.org5 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints8
wp_ajax_bardxtra_contact_from_7_activationauthenticated

wp_ajax

wp_ajax_bardxtra_elementor_activationauthenticated

wp_ajax

wp_ajax_bardxtra_import_xmlauthenticated

wp_ajax

wp_ajax_bardxtra_instagram_feed_activationauthenticated

wp_ajax

wp_ajax_bardxtra_recent_posts_activationauthenticated

wp_ajax

wp_ajax_bardxtra_remove_instagram_widgetauthenticated

wp_ajax

wp_ajax_bardxtra_royal_elementor_addons_activationauthenticated

wp_ajax

wp_ajax_bardxtra_wysija_newsletter_activationauthenticated

wp_ajax

Score History

First score snapshot

v1.2.8

36

Latest

Findings
234
Errors
159
Warnings
75
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

27 nodes

Related Plugins