A simple plugin that adds a password reset facility to the WordPress REST API using a code. The process is a two step process:
66
Score
24
Errors
8
Warnings
+0
Change
Category Scores
Security49
Repo83
Performance100
Maintainability85
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
16
7 issue groups
Security
12
2 issue groups
Repo Compliance
4
4 issue groups
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$attempts_string'.10
- Category
- Security
- Occurrences
- 10
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$attempts_string'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "wp_timezone".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "wp_timezone".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$code'.2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$code'.
ERRORMaintainabilitywp function not compatible with requires wpFunction "wp_timezone()" requires WordPress 5.3.0, but your plugin minimum supported version is WordPress 4.6.0.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Function "wp_timezone()" requires WordPress 5.3.0, but your plugin minimum supported version is WordPress 4.6.0.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bdpwd_date_format".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bdpwd_date_format".
ERRORRepo Complianceinvalid licenseYour plugin has an invalid license declared. Please update your readme with a valid SPDX license identifier.1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Your plugin has an invalid license declared. Please update your readme with a valid SPDX license identifier.
WARNINGMaintainabilitymismatched plugin namePlugin name "Password Reset with Code for WordPress REST API" is different from the name declared in plugin header "REST API Password Reset with Code".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Password Reset with Code for WordPress REST API" is different from the name declared in plugin header "REST API Password Reset with Code".
ERRORRepo Complianceoutdated tested upto headerTested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
WARNINGRepo Complianceplugin header nonexistent domain pathThe "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
Show 3 moreShow less
WARNINGRepo Compliancereadme parser warnings no short description present1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Short Description" section is missing. An excerpt was generated from your main plugin description.
WARNINGMaintainabilitytrademarked term1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "Password Reset with Code for WordPress REST API" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.
WARNINGMaintainabilityupgrade notice limit1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The upgrade notice for "0.0.16" exceeds the limit of 300 characters.
External Connections
Potential connections found in static code analysis.
Outbound calls
2
External assets
0
Incoming endpoints
0
Notable Domains
bedevious.co.uk2 · outbound
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
First score snapshot
v0.0.17
66
Latest
- Findings
- 32
- Errors
- 24
- Warnings
- 8
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 66 | 32 | 24 | 8 | v0.0.17 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
JWT Authentication for WP REST API84 scoreClean Login97 scoreREST API Meta Support96 scoreACF to WP-API96 scoreWP API Yoast SEO95 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 score
Author
Issue
Domain
Related
JWT Authentication for WP REST API84 scoreClean Login97 scoreREST API Meta Support96 scoreACF to WP-API96 scoreWP API Yoast SEO95 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 score
Related Plugins
Clean Login
6k+ active installs
97
REST API Meta Support
6k+ active installs
96
ACF to WP-API
400 active installs
96
WP REST API – Pure Taxonomies
400 active installs
96
WP API Yoast SEO
400 active installs
95
JWT Authentication for WP REST API
60k+ active installs
84