Adds breadcrumb navigation showing the visitor's path to their current location.
37
Score
100
Errors
110
Warnings
+1
Change
Category Scores
Security0
Repo100
Performance100
Maintainability61
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
112
8 issue groups
I18n
51
2 issue groups
Security
47
6 issue groups
ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: $this->identifier50
- Category
- I18n
- Occurrences
- 50
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: $this->identifier
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bcn_add_post_type_arg".39
- Category
- Maintainability
- Occurrences
- 39
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bcn_add_post_type_arg".
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;27
- Category
- Maintainability
- Occurrences
- 27
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$extras_escaped'.22
- Category
- Security
- Occurrences
- 22
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$extras_escaped'.
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->unique_prefix . '_after_settings_tab_general'".15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->unique_prefix . '_after_settings_tab_general'".
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$breadcrumb_navxt".11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$breadcrumb_navxt".
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "bcn_display".9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "bcn_display".
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "bcn_admin".8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "bcn_admin".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES[$this->unique_prefix . '_admin_import_file']['tmp_name']6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES[$this->unique_prefix . '_admin_import_file']['tmp_name']
Show 6 moreShow less
WARNINGSecurityNonce verification recommended3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_POST[$this->unique_prefix . '_options'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityerror log var export2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
var_export() found. Debug code should not normally be used in production.
WARNINGMaintainabilityerror log set error handler1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
set_error_handler() found. Debug code should not normally be used in production.
WARNINGSecurityInput is not validated1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['uid']. Check that the array index exists before using it.
ERRORI18nText Domain Mismatch1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched text domain. Expected 'breadcrumb-navxt' but got 'mtekk_adminKit'.
External Connections
Potential connections found in static code analysis.
Outbound calls
22
External assets
0
Incoming endpoints
1
Notable Domains
mtekk.us6 · outbound
paypal.com1 · outbound
Platform / Reference Domains
schema.org9 · platform/reference
wordpress.org2 · platform/reference
codex.wordpress.org1 · platform/reference
trac.mu.wordpress.org1 · platform/reference
translate.wordpress.org1 · platform/reference
w3.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints1
wp_ajax_mtekk_admin_message_dismissauthenticated
wp_ajax
Score History
2 score snapshots
v7.5.2
37
Latest
- Findings
- 210
- Errors
- 100
- Warnings
- 110
- Check
- 2.1.0
v7.5.1
36
Score
- Findings
- 213
- Errors
- 102
- Warnings
- 111
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 37 | 210 | 100 | 110 | v7.5.2 | 2.1.0 |
| 36 | 213 | 102 | 111 | v7.5.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Related
Crowdsignal Forms100 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAdvanced Custom Fields (ACF®)23 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention24 scoreManageWP Worker23 scoreThe Events Calendar23 scoreOMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.31 scoreCMP – Coming Soon & Maintenance Plugin by NiteoThemes25 scoreSpectra Legacy – Gutenberg Blocks25 score
Plugin
Author
Issue
Related
Crowdsignal Forms100 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAdvanced Custom Fields (ACF®)23 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention24 scoreManageWP Worker23 scoreThe Events Calendar23 scoreOMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.31 scoreCMP – Coming Soon & Maintenance Plugin by NiteoThemes25 scoreSpectra Legacy – Gutenberg Blocks25 score
Related Plugins
Crowdsignal Forms
200k+ active installs
100
The Icon Block
40k+ active installs
100
Embed PDF Viewer
20k+ active installs
100
Advance Custom HTML – Show Off Code Snippets with Live Preview
10k+ active installs
100
Shortcode Redirect
10k+ active installs
100
Carousel Block – Showcase Images in Elegant Sliding Displays
7k+ active installs
100