Enhanced WordPress editor blocks for Gutenberg, including core Block Extensions and Site Addons for your WordPress site and WooCommerce online store
30
Score
69
Errors
205
Warnings
+0
Change
Category Scores
Security0
Repo89
Performance100
Maintainability32
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
227
18 issue groups
Security
43
6 issue groups
I18n
1
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$alignment".146
- Category
- Maintainability
- Occurrences
- 146
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$alignment".
ERRORMaintainabilityblock api version too lowEditor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility.24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- error
Sample message
Editor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility.
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$block_wrapper_attributes'.12
- Category
- Security
- Occurrences
- 12
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$block_wrapper_attributes'.
ERRORMaintainabilitywp function not compatible with requires wpFunction "get_block_wrapper_attributes()" requires WordPress 5.6.0, but your plugin minimum supported version is WordPress 5.0.0.12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- error
Sample message
Function "get_block_wrapper_attributes()" requires WordPress 5.6.0, but your plugin minimum supported version is WordPress 5.0.0.
WARNINGSecurityRequest data is not unslashed$_GET['blockons-notice-id'] not unslashed before sanitization. Use wp_unslash() or similar11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
$_GET['blockons-notice-id'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['nonce']7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['nonce']
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
Show 15 moreShow less
WARNINGSecurityInput is not validated5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['blockons-notice-id']. Check that the array index exists before using it.
ERRORMaintainabilitydate date2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGSecurityMissing nonce verification2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityparse url parse url2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORMaintainabilityForbidden PHP function found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The use of function move_uploaded_file() is forbidden
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
ERRORMaintainabilityOffloaded Content1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Found call to wp_register_style() with external resource. Offloading styles to your servers or any remote service is disallowed.
WARNINGMaintainabilityslow db query meta key1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta value1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGMaintainabilityNon-prefixed hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "searchform_url".
WARNINGMaintainabilityerror log print r1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
ERRORMaintainabilityfile system operations chmod1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: chmod().
ERRORMaintainabilityfile system operations rmdir1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().
ERRORMaintainabilityunlink unlink1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Blockons - Gutenberg blocks for WordPress and WooCommerce websites" is different from the name declared in plugin header "Blockons".
External Connections
Potential connections found in static code analysis.
Outbound calls
282
External assets
2
Incoming endpoints
16
Notable Domains
blockons.com36 · outbound
dom.spec.whatwg.org7 · outbound
php.net6 · outbound
reactjs.org6 · outbound
animate.style5 · outbound
developer.mozilla.org5 · outbound
Platform / Reference Domains
github.com51 · platform/reference
gnu.org48 · platform/reference
w3.org42 · platform/reference
make.wordpress.org8 · platform/reference
wordpress.org7 · platform/reference
opensource.org5 · platform/reference
api.wordpress.org2 · platform/reference
core.trac.wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/blcns/v1/settingsREST
register_rest_route
/wp-json/blcns/v1/block-patternsREST
register_rest_route
/wp-json/blcns/v1/deleteREST
register_rest_route
/wp-json/blcns/v1/get-api-keyREST
register_rest_route
/wp-json/blcns/v1/post-typesREST
register_rest_route
/wp-json/blcns/v1/post/(?P<id>\d+)REST
register_rest_route
Admin AJAX endpoints4
admin_post_fs_clone_resolutionauthenticated
admin_post
wp_ajax_blockons_clear_cart_noticesauthenticated
wp_ajax
wp_ajax_fs_dismiss_notice_action_{$ajax_action_suffix}authenticated
wp_ajax
wp_ajax_fs_toggle_debug_modeauthenticated
wp_ajax
Score History
First score snapshot
v1.2.19
30
Latest
- Findings
- 274
- Errors
- 69
- Warnings
- 205
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 30 | 274 | 69 | 205 | v1.2.19 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Non-prefixed global variable146 findingsblock api version too low24 findingserror log error log15 findingsOutput is not escaped12 findingswp function not compatible with requires wp12 findingsRequest data is not unslashed11 findingsMissing direct file access protection10 findingsInput is not sanitized7 findings
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreWooCommerce21 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scorePage Builder Gutenberg Blocks – CoBlocks50 scoreSmash Balloon Social Post Feed – Simple Social Feeds for WordPress25 scoreClassic Editor63 scoreClassic Widgets97 scoreAdvanced Editor Tools41 score
Author
Category
Issue
Non-prefixed global variable146 findingsblock api version too low24 findingserror log error log15 findingsOutput is not escaped12 findingswp function not compatible with requires wp12 findingsRequest data is not unslashed11 findingsMissing direct file access protection10 findingsInput is not sanitized7 findings
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreWooCommerce21 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scorePage Builder Gutenberg Blocks – CoBlocks50 scoreSmash Balloon Social Post Feed – Simple Social Feeds for WordPress25 scoreClassic Editor63 scoreClassic Widgets97 scoreAdvanced Editor Tools41 score
Related Plugins
Crowdsignal Forms
200k+ active installs
100
eRecht24 Legal Texts
50k+ active installs
100
Shortcode Redirect
10k+ active installs
100
Timeline Block For Gutenberg
9k+ active installs
100
No Gutenberg? – Choose Where to Use the Block Editor or the Classic Editor
9k+ active installs
100
Hyperlink Group Block
7k+ active installs
100