Adds collaborative Docs to BuddyPress.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
471
10 issue groups
Maintainability
142
11 issue groups
I18n
70
3 issue groups
Performance
2
1 issue group
ERRORSecurityUnsafe Printing FunctionAll output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.119
- Category
- Security
- Occurrences
- 119
- Severity
- error
Sample message
All output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.
WARNINGSecurityRecommendedProcessing form data without nonce verification.119
- Category
- Security
- Occurrences
- 119
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityMissingProcessing form data without nonce verification.71
- Category
- Security
- Occurrences
- 71
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityMissing Unslash$_COOKIE['bp-docs-last-docs-directory'] not unslashed before sanitization. Use wp_unslash() or similar68
- Category
- Security
- Occurrences
- 68
- Severity
- warning
Sample message
$_COOKIE['bp-docs-last-docs-directory'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_COOKIE['bp-docs-last-docs-directory']65
- Category
- Security
- Occurrences
- 65
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE['bp-docs-last-docs-directory']
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.64
- Category
- I18n
- Occurrences
- 64
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;41
- Category
- Maintainability
- Occurrences
- 41
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitywp function not compatible with requires wpFunction "_prime_post_caches()" requires WordPress 3.4.0, but your plugin minimum supported version is WordPress 3.3.0.31
- Category
- Maintainability
- Occurrences
- 31
- Severity
- error
Sample message
Function "_prime_post_caches()" requires WordPress 3.4.0, but your plugin minimum supported version is WordPress 3.3.0.
WARNINGSecurityInput Not ValidatedDetected usage of a possibly undefined superglobal array index: $_POST['existing-or-new-folder']. Check that the array index exists before using it.17
- Category
- Security
- Occurrences
- 17
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['existing-or-new-folder']. Check that the array index exists before using it.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
Show 15 moreShow less
WARNINGMaintainabilityNo Caching14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityMissing Version14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
WARNINGMaintainabilityslow db query tax query9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityNot In Footer7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORSecurityNot Prepared4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $check_sql
WARNINGMaintainabilityGet terms Param2Found4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
The parameter "array(\n\t\t\t'fields' => 'ids',\n\t\t)" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
ERRORI18nText Domain Mismatch4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
Mismatched text domain. Expected 'buddypress-docs' but got 'bp-docs'.
ERRORSecurityregister setting Missing3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Sanitization missing for register_setting().
WARNINGSecurityInterpolated Not Prepared3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $exclude_sql at "SELECT ID FROM $wpdb->posts WHERE post_type = %s AND ID NOT IN $exclude_sql"
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "BuddyPress Docs" - contains the restricted term "buddypress" and cannot be used to begin your plugin name. We disallow the use of certain terms in ways that are abused, or potentially infringe on and/or are misleading with regards to trademarks. You may use the term "buddypress" elsewhere in your plugin name, such as "... for buddypress".
ERRORMaintainabilityFound2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
The use of function _wp_post_revision_fields() is forbidden
WARNINGSecuritywp redirect wp redirect2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
ERRORMaintainabilityNo Explicit Version2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
ERRORI18nUnordered Placeholders Text2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'Migrated %s of %s Docs. Migrating....'.
WARNINGPerformancePost Not In post not in2
- Category
- Performance
- Occurrences
- 2
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
Score History
First score snapshot
v2.2.7
25
Latest
- Findings
- 705
- Errors
- 284
- Warnings
- 421
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 25 | 705 | 284 | 421 | v2.2.7 | 2.0.0 |