A straight-forward multilingual plugin. No more double-digit custom DB tables or hidden HTML comments that could cause you headaches later on.
39
Score
30
Errors
139
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance92
Maintainability77
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
112
7 issue groups
Maintainability
50
7 issue groups
Performance
6
2 issue groups
Repo Compliance
1
1 issue group
WARNINGSecurityRequest data is not unslashed$_GET['action'] not unslashed before sanitization. Use wp_unslash() or similar34
- Category
- Security
- Occurrences
- 34
- Severity
- warning
Sample message
$_GET['action'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['action']33
- Category
- Security
- Occurrences
- 33
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['action']
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;27
- Category
- Maintainability
- Occurrences
- 27
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.24
- Category
- Security
- Occurrences
- 24
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "get_the_excerpt".10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "get_the_excerpt".
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_REQUEST['page']. Check that the array index exists before using it.8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_REQUEST['page']. Check that the array index exists before using it.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $in_string at "SELECT ID, post_name, post_parent FROM %i LEFT JOIN %i AS postmeta ON ID = postmeta.post_id AND meta_key = '_locale' WHERE post_name IN ($in_string) AND (post_type = %s OR post_type = 'attachment') AND (meta_value LIKE %s OR meta_id IS NULL)"4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $in_string at "SELECT ID, post_name, post_parent FROM %i LEFT JOIN %i AS postmeta ON ID = postmeta.post_id AND meta_key = '_locale' WHERE post_name IN ($in_string) AND (post_type = %s OR post_type = 'attachment') AND (meta_value LIKE %s OR meta_id IS NULL)"
Show 7 moreShow less
WARNINGPerformancePost Not In exclude4
- Category
- Performance
- Occurrences
- 4
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
ERRORSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Unescaped parameter $in_string used in $wpdb->get_results()\n$in_string assigned unsafely at line 224.
WARNINGPerformancePost Not In post not in2
- Category
- Performance
- Occurrences
- 2
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilityslow db query meta key1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta value1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGMaintainabilityNot In Footer1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORRepo Complianceplugin header unsupported plugin name1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
The "Plugin Name" header in the plugin file is not valid. It needs to contain at least 5 latin letters (a-Z) and/or numbers. This is necessary because the initial plugin slug is generated from the name.
External Connections
Not analyzed yet.
Score History
First score snapshot
v3.9.2
39
Latest
- Findings
- 169
- Errors
- 30
- Warnings
- 139
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 39 | 169 | 30 | 139 | v3.9.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Plugin
Author
Issue
Related
Contact Form 769 scoreRedux Framework100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreClassic Editor63 scoreLoco Translate27 scoreLoginizer25 scoreTranslate WordPress with GTranslate32 scorePolylang26 scoreFlamingo40 scoreAdmin Menu Editor32 score
Plugin
Author
Issue
Related
Contact Form 769 scoreRedux Framework100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreClassic Editor63 scoreLoco Translate27 scoreLoginizer25 scoreTranslate WordPress with GTranslate32 scorePolylang26 scoreFlamingo40 scoreAdmin Menu Editor32 score
Related Plugins
Redux Framework
900k+ active installs
100
Simply Show Hooks
2k+ active installs
100
Default Admin Color Scheme
800 active installs
100
Flexible Layout Preview Image for ACF
700 active installs
100
PufferDesk
0 active installs
100
Simple Admin Language Change
10k+ active installs
99