Elementor addons with 300+ Elementor widgets, WooCommerce Elementor elements, Elementor templates, Elementor mega menu, Elementor header footer builde …
19
Score
10,340
Errors
360
Warnings
+0
Change
Category Scores
Security0
Repo66
Performance94
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
10,288
3 issue groups
Security
303
10 issue groups
Maintainability
82
10 issue groups
Supply Chain
8
1 issue group
ERRORI18nText Domain MismatchMismatched text domain. Expected 'bdthemes-element-pack-lite' but got "bdthemes-element-pack".10,277
- Category
- I18n
- Occurrences
- 10,277
- Severity
- error
Sample message
Mismatched text domain. Expected 'bdthemes-element-pack-lite' but got "bdthemes-element-pack".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.90
- Category
- Security
- Occurrences
- 90
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_GET['currency'] not unslashed before sanitization. Use wp_unslash() or similar75
- Category
- Security
- Occurrences
- 75
- Severity
- warning
Sample message
$_GET['currency'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['currency']42
- Category
- Security
- Occurrences
- 42
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['currency']
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<div class='ep-option-item {$class} {$widget_used_status}' {$data_type}>"'.32
- Category
- Security
- Occurrences
- 32
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<div class='ep-option-item {$class} {$widget_used_status}' {$data_type}>"'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.31
- Category
- Security
- Occurrences
- 31
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_is_elementor_installed".27
- Category
- Maintainability
- Occurrences
- 27
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_is_elementor_installed".
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$catTable} at LEFT JOIN {$catTable} ON {$catTable}.term_id = {$postCatTable}.term_id\n19
- Category
- Security
- Occurrences
- 19
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$catTable} at LEFT JOIN {$catTable} ON {$catTable}.term_id = {$postCatTable}.term_id\n
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_modules".15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_modules".
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bdt_ep_init_pro".10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bdt_ep_init_pro".
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed class9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "OAuthConsumer".
ERRORI18nMissing Translators Comment9
- Category
- I18n
- Occurrences
- 9
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORSupply ChainCompressed files included8
- Category
- Supply Chain
- Occurrences
- 8
- Severity
- error
Sample message
Compressed files are not permitted.
WARNINGSecurityInput is not validated6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['id']. Check that the array index exists before using it.
WARNINGMaintainabilityMissing Version6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Resource version not set in call to wp_register_script(). This means new versions of the script may not always be loaded due to browser caching.
WARNINGSecurityDatabase parameter is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Unescaped parameter $table_cat used in $wpdb->query()\n$table_cat assigned unsafely at line 167.
WARNINGMaintainabilityDirect Query3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilitySchema Change3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORSecuritySQL query is not prepared3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $table_cat
WARNINGMaintainabilityDynamic hook name3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".
WARNINGPerformancePost Not In post not in3
- Category
- Performance
- Occurrences
- 3
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
ERRORMaintainabilityMissing direct file access protection3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecuritywp redirect wp redirect2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
ERRORI18nUnordered Placeholders Text2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$1s, %2$2s, %3$3s", but got "%1s, %2s, %3s" in 'Showing %1s to %2s of %3s entries'.
External Connections
Potential connections found in static code analysis.
Outbound calls
294
External assets
1
Incoming endpoints
5
Notable Domains
youtu.be125 · outbound
bdthemes.com8 · outbound
youtube.com5 · outbound
feedback.elementpack.pro3 · outbound
api.sigmative.io2 · outbound
dashboard.bdthemes.io1 · outbound
Platform / Reference Domains
wordpress.org1 · platform/reference
External Asset Domains
elementpack.pro147 · asset + outbound
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints5
wp_ajax_element_pack_biggoptiauthenticated
wp_ajax
wp_ajax_element_pack_settings_saveauthenticated
wp_ajax
wp_ajax_ep_admin_api_biggopti_dismissauthenticated
wp_ajax
wp_ajax_ep_fetch_api_biggoptiauthenticated
wp_ajax
wp_ajax_ep_install_pluginauthenticated
wp_ajax
Score History
10 score snapshots
v8.7.14
19
Latest
- Findings
- 10,700
- Errors
- 10,340
- Warnings
- 360
- Check
- 2.0.0
v8.7.13
19
Score
- Findings
- 10,700
- Errors
- 10,340
- Warnings
- 360
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 19 | 10,700 | 10,340 | 360 | v8.7.14 | 2.0.0 |
| 19 | 10,700 | 10,340 | 360 | v8.7.13 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreEssential Addons for Elementor – Popular Elementor Templates & Widgets30 scoreUltimate Addons for Elementor33 scoreElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor62 score
Plugin
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreEssential Addons for Elementor – Popular Elementor Templates & Widgets30 scoreUltimate Addons for Elementor33 scoreElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor62 score
Related Plugins
Turbo Addons Elementor
3k+ active installs
100
Easy Elements for Elementor – Addons & Website Templates
1k+ active installs
100
Header Footer Builder for Elementor
20k+ active installs
99
99
Web Stories Widgets For Elementor
1k+ active installs
99
CBX Map for Google Map & OpenStreetMap
900 active installs
99