Member search and member directories for BuddyPress and the BuddyBoss Platform.
36
Score
321
Errors
85
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance100
Maintainability60
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
318
10 issue groups
Maintainability
52
11 issue groups
I18n
34
4 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" [$key] => $value\n"'.212
- Category
- Security
- Occurrences
- 212
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" [$key] => $value\n"'.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.29
- Category
- Security
- Occurrences
- 29
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.19
- Category
- I18n
- Occurrences
- 19
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$cookie]15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$cookie]
WARNINGSecurityRequest data is not unslashed$_COOKIE[$cookie] not unslashed before sanitization. Use wp_unslash() or similar14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
$_COOKIE[$cookie] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['container']. Check that the array index exists before using it.11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['container']. Check that the array index exists before using it.
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().8
- Category
- I18n
- Occurrences
- 8
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
Show 15 moreShow less
ERRORSecuritySQL query is not prepared7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $format
WARNINGSecurityMissing nonce verification7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityDatabase parameter is not escaped6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
Unescaped parameter $query used in $wpdb->get_col()\n$query assigned unsafely at line 120.
WARNINGMaintainabilityDirect Query6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not prepared6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$f->code} at "DATE({$f->code}) > %s"
ERRORMaintainabilityparse url parse url6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORI18nText Domain Mismatch6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
Mismatched text domain. Expected 'bp-profile-search' but got 'buddyboss'.
WARNINGMaintainabilityNot In Footer3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGMaintainabilityslow db query meta key2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
ERRORMaintainabilityOffloaded Content1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Found call to wp_enqueue_style() with external resource. Offloading styles to your servers or any remote service is disallowed.
WARNINGMaintainabilityslow db query meta query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityerror log print r1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
WARNINGMaintainabilityMissing Version1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
External Connections
Not analyzed yet.
Score History
First score snapshot
v5.9
36
Latest
- Findings
- 406
- Errors
- 321
- Warnings
- 85
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 36 | 406 | 321 | 85 | v5.9 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Author
Issue
Output is not escaped212 findingsUnsafe printing function29 findingsMissing Translators Comment19 findingsMissing direct file access protection16 findingsInput is not sanitized15 findingsRequest data is not unslashed14 findingsNonce verification recommended11 findingsInput is not validated11 findings
Related
Classic Editor63 scoreWooCommerce21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreIvory Search – WordPress Search Plugin24 scoreRelevanssi – A Better Search32 scoreSearch & Replace36 scoreSearch Regex76 score
Author
Issue
Output is not escaped212 findingsUnsafe printing function29 findingsMissing Translators Comment19 findingsMissing direct file access protection16 findingsInput is not sanitized15 findingsRequest data is not unslashed14 findingsNonce verification recommended11 findingsInput is not validated11 findings
Related
Classic Editor63 scoreWooCommerce21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreIvory Search – WordPress Search Plugin24 scoreRelevanssi – A Better Search32 scoreSearch & Replace36 scoreSearch Regex76 score
Related Plugins
Shortcodes Finder
4k+ active installs
100
Magnify – Suggestive Search Plugin
3k+ active installs
100
Disable Search
40k+ active installs
99
HivePress Favorites
8k+ active installs
99
Search Analytics for WP
3k+ active installs
99
Improving Search Form Accessibility
700 active installs
99