Easily create & manage documentation. Reduce support tickets & scale your customer support workload. This simple plugin works with any theme.
23
Score
671
Errors
1,767
Warnings
+1
Change
Category Scores
Security0
Repo91
Performance89
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
1,680
13 issue groups
Security
707
12 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".1,345
- Category
- Maintainability
- Occurrences
- 1,345
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.528
- Category
- Security
- Occurrences
- 528
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_basepress_color_brightness".103
- Category
- Maintainability
- Occurrences
- 103
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_basepress_color_brightness".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.85
- Category
- Security
- Occurrences
- 85
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;63
- Category
- Maintainability
- Occurrences
- 63
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "FS_Admin_Menu_Manager".55
- Category
- Maintainability
- Occurrences
- 55
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "FS_Admin_Menu_Manager".
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_API__ADDRESS".26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_API__ADDRESS".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
ERRORMaintainabilitywp function not compatible with requires wpFunction "get_network()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 4.5.0.19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- error
Sample message
Function "get_network()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 4.5.0.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Show 15 moreShow less
WARNINGSecurityInput is not validated18
- Category
- Security
- Occurrences
- 18
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['form']['css-uri']. Check that the array index exists before using it.
ERRORSecurityUnsafe printing function16
- Category
- Security
- Occurrences
- 16
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityMissing nonce verification15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecuritywp redirect wp redirect8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
WARNINGSecurityRequest data is not unslashed8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
$_GET['s'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityslow db query meta key7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta query7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
ERRORSecurityException output is not escaped7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.
ERRORSecurityLike Wildcards In Query With Placeholder6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
SQL wildcards for a LIKE query should be passed in through a replacement parameter and the variable part of the replacement should be escaped using "esc_like()". Found: LIKE '%%%s%%'.
WARNINGMaintainabilityslow db query tax query6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityNon-prefixed hook name6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "base_fs_loaded".
WARNINGSecurityInput is not sanitized6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['settings']
ERRORMaintainabilitystrip tags strip tags6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
WARNINGSecurityInterpolated SQL is not prepared5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$entry_page} at "SELECT ID, post_title FROM $wpdb->posts WHERE post_type='page' AND ( post_content LIKE %s OR post_content LIKE %s ) AND ID <> {$entry_page};"
ERRORSecurityQuoted Simple Placeholder5
- Category
- Security
- Occurrences
- 5
- Severity
- error
Sample message
Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.
External Connections
Potential connections found in static code analysis.
Outbound calls
191
External assets
2
Incoming endpoints
30
Notable Domains
freemius.com8 · outbound
codesavory.com7 · outbound
php.net6 · outbound
basepresskb.com2 · outbound
benalman.com2 · outbound
checkout.freemius-local.com2 · outbound
Platform / Reference Domains
gnu.org117 · platform/reference
w3.org8 · platform/reference
wordpress.org8 · platform/reference
github.com5 · platform/reference
api.wordpress.org2 · platform/reference
make.wordpress.org2 · platform/reference
core.trac.wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/basepress_kb/v1/kb_categories/REST
register_rest_route
/wp-json/basepress_kb/v1/kb_css_urlREST
register_rest_route
wp_ajax_nopriv_basepress_smart_searchpublic
wp_ajax
wp_ajax_nopriv_basepress_update_viewspublic
wp_ajax
Admin AJAX endpoints26
admin_post_fs_clone_resolutionauthenticated
admin_post
wp_ajax_basepress_db_posts_updateauthenticated
wp_ajax
wp_ajax_basepress_default_theme_saveauthenticated
wp_ajax
wp_ajax_basepress_delete_productauthenticated
wp_ajax
wp_ajax_basepress_delete_sectionauthenticated
wp_ajax
wp_ajax_basepress_get_product_dataauthenticated
wp_ajax
wp_ajax_basepress_get_product_sectionsauthenticated
wp_ajax
wp_ajax_basepress_get_section_dataauthenticated
wp_ajax
wp_ajax_basepress_get_section_listauthenticated
wp_ajax
wp_ajax_basepress_get_sections_filterauthenticated
wp_ajax
wp_ajax_basepress_load_iconsauthenticated
wp_ajax
wp_ajax_basepress_modern_theme_saveauthenticated
wp_ajax
14 more hidden
Score History
2 score snapshots
v2.17.0.3
23
Latest
- Findings
- 2,438
- Errors
- 671
- Warnings
- 1,767
- Check
- 2.0.0
v2.17.0.2
22
Score
- Findings
- 2,438
- Errors
- 671
- Warnings
- 1,767
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 2,438 | 671 | 1,767 | v2.17.0.3 | 2.0.0 |
| 22 | 2,438 | 671 | 1,767 | v2.17.0.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot82 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreEcho Knowledge Base – Documentation, FAQs, Chat & Smart Search27 scoreHelpie FAQ — Accordion, Docs & Knowledge Base54 scoreWP Help40 scoreDocument Gallery29 score
Author
Issue
Domain
Related
BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot82 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreEcho Knowledge Base – Documentation, FAQs, Chat & Smart Search27 scoreHelpie FAQ — Accordion, Docs & Knowledge Base54 scoreWP Help40 scoreDocument Gallery29 score
Related Plugins
100
WP Document Revisions
2k+ active installs
98
DocumentCloud
1k+ active installs
98
Admin Help Docs
500 active installs
97
DocsPress – Online Documentation
400 active installs
97
BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot
30k+ active installs
82