Boxzilla – WordPress Popup Builder

Create WordPress popup and slide-in boxes for forms, offers, notices, and calls to action

v3.4.10Danny van KootenUpdated Added 20k+ installs96% rating
59
Score
5
Errors
73
Warnings
+0
Change

Category Scores

Security34
Repo100
Performance100
Maintainability77

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

78 findings

Maintainability

56

9 issue groups

Security

22

5 issue groups

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$admins".34
Category
Maintainability
Occurrences
34
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$admins".

WARNINGSecurityRecommendedProcessing form data without nonce verification.8
Category
Security
Occurrences
8
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGSecurityMissingProcessing form data without nonce verification.5
Category
Security
Occurrences
5
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_POST['boxzilla_box']4
Category
Security
Occurrences
4
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['boxzilla_box']

WARNINGSecurityMissing Unslash$_POST['boxzilla_box'] not unslashed before sanitization. Use wp_unslash() or similar4
Category
Security
Occurrences
4
Severity
warning

Sample message

$_POST['boxzilla_box'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORMaintainabilitywp function not compatible with requires wpFunction "wp_doing_ajax()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.6.0.3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Function "wp_doing_ajax()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.6.0.

WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WARNINGMaintainabilityupdate modification detectedPlugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins

Show 4 more
ERRORSecurityOutput Not Escaped1
Category
Security
Occurrences
1
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$box'.

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Boxzilla - WordPress Popup Builder" is different from the name declared in plugin header "Boxzilla".

ERRORMaintainabilityplugin updater detected1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins

WARNINGMaintainabilitytrademarked term1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "Boxzilla - WordPress Popup Builder" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.

Score History

First score snapshot

v3.4.10

59

Latest

Findings
78
Errors
5
Warnings
73
Check
2.0.0

Related Plugins