BP xProfile Location

This plugin works with both BuddyPress and the BuddyBoss Platform. It creates an xProfile Location field type that will use the Google Places API to p …

v5.0.2shanebpUpdated Added 600 installs88% rating0% support resolved
74
Score
7
Errors
24
Warnings
+0
Change

Category Scores

Security57
Repo97
Performance100
Maintainability90

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

31 findings

Security

14

3 issue groups

Maintainability

11

5 issue groups

I18n

5

3 issue groups

Repo Compliance

1

1 issue group

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.10
Category
Security
Occurrences
10
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORI18nText Domain MismatchMismatched text domain. Expected 'bp-xprofile-location' but got 'buddypress'.3
Category
I18n
Occurrences
3
Severity
error

Sample message

Mismatched text domain. Expected 'bp-xprofile-location' but got 'buddypress'.

WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$bp->profile->table_name_data} at "DELETE FROM {$bp->profile->table_name_data} WHERE field_id = %d"2
Category
Security
Occurrences
2
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable {$bp->profile->table_name_data} at "DELETE FROM {$bp->profile->table_name_data} WHERE field_id = %d"

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$html'.2
Category
Security
Occurrences
2
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$html'.

WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WARNINGMaintainabilityMissing VersionResource version not set in call to wp_register_script(). This means new versions of the script may not always be loaded due to browser caching.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Resource version not set in call to wp_register_script(). This means new versions of the script may not always be loaded due to browser caching.

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.1
Category
I18n
Occurrences
1
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Show 2 more
ERRORMaintainabilityMissing direct file access protection1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGRepo Compliancereadme parser warnings no short description present1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

The "Short Description" section is missing. An excerpt was generated from your main plugin description.

External Connections

Potential connections found in static code analysis.

4 domains

Outbound calls

6

External assets

0

Incoming endpoints

0

Notable Domains

buddydev.com2 · outbound
philopress.com2 · outbound
maps.googleapis.com1 · outbound

Platform / Reference Domains

gnu.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Score History

First score snapshot

v5.0.2

74

Latest

Findings
31
Errors
7
Warnings
24
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

32 nodes

Related Plugins