BlockMeister – Block Pattern Builder

Visually create custom block patterns. No coding skills needed! Categorize them easily and use keywords for easy discoverability.

v3.1.12BlockMeisterUpdated Added 1k+ installs100% rating
24
Score
580
Errors
1,405
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

1,985 findings

Maintainability

1,306

14 issue groups

Security

644

9 issue groups

I18n

19

2 issue groups

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".1,081
Category
Maintainability
Occurrences
1,081
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" #tag-{$default_term_id} strong::after { content: '{$default_suffix}'; } "'.534
Category
Security
Occurrences
534
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" #tag-{$default_term_id} strong::after { content: '{$default_suffix}'; } "'.

WARNINGMaintainabilityNon Prefixed Function FoundFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_fs_text".99
Category
Maintainability
Occurrences
99
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_fs_text".

WARNINGMaintainabilityNon Prefixed Class FoundClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "FS_Admin_Menu_Manager".54
Category
Maintainability
Occurrences
54
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "FS_Admin_Menu_Manager".

WARNINGSecurityRecommendedProcessing form data without nonce verification.51
Category
Security
Occurrences
51
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon Prefixed Constant FoundGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_API__ADDRESS".26
Category
Maintainability
Occurrences
26
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_API__ADDRESS".

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_FILES['file']20
Category
Security
Occurrences
20
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES['file']

WARNINGSecurityMissing Unslash$_GET['category'] not unslashed before sanitization. Use wp_unslash() or similar19
Category
Security
Occurrences
19
Severity
warning

Sample message

$_GET['category'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().14
Category
I18n
Occurrences
14
Severity
error

Sample message

Missing $domain parameter in function call to __().

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.13
Category
Maintainability
Occurrences
13
Severity
warning

Sample message

Use of a direct database call is discouraged.

Show 15 more
WARNINGMaintainabilityNo Caching12
Category
Maintainability
Occurrences
12
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORSecurityException Not Escaped7
Category
Security
Occurrences
7
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.

WARNINGSecurityMissing6
Category
Security
Occurrences
6
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORI18nMissing Translators Comment5
Category
I18n
Occurrences
5
Severity
error

Sample message

A function call to _n() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERRORMaintainabilitybadly named files5
Category
Maintainability
Occurrences
5
Severity
error

Sample message

File and folder names must not contain spaces or special characters.

WARNINGMaintainabilityNon Prefixed Hookname Found3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "blockmeister_license_loaded".

WARNINGSecurityInput Not Validated3
Category
Security
Occurrences
3
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES['file']. Check that the array index exists before using it.

WARNINGMaintainabilityMissing Version3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

ERRORSecurityUnescaped DBParameter2
Category
Security
Occurrences
2
Severity
error

Sample message

Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 608.

WARNINGMaintainabilitySchema Change2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WARNINGMaintainabilityslow db query meta key2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WARNINGMaintainabilityslow db query meta value2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

WARNINGSecuritywp redirect wp redirect2
Category
Security
Occurrences
2
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

ERRORMaintainabilitystrip tags strip tags2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

ERRORMaintainabilitymissing direct file access protection2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Score History

First score snapshot

v3.1.12

24

Latest

Findings
1,985
Errors
580
Warnings
1,405
Check
2.0.0

Related Plugins

Breadcrumb Block

3k+ active installs

100
Counting Number Block

2k+ active installs

100
Crowdsignal Forms

200k+ active installs

100
Hyperlink Group Block

7k+ active installs

100
Shortcode Redirect

10k+ active installs

100