Add albums, photo, audio/video upload, privacy, sharing, front-end uploads & more. All this works on mobile/tablets devices.
21
Score
363
Errors
647
Warnings
+0
Change
Category Scores
Security0
Repo78
Performance97
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
861
20 issue groups
Security
122
5 issue groups
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "BP_MEDIA_PATH".206
- Category
- Maintainability
- Occurrences
- 206
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "BP_MEDIA_PATH".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$JPEG_Segment_Names".156
- Category
- Maintainability
- Occurrences
- 156
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$JPEG_Segment_Names".
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;94
- Category
- Maintainability
- Occurrences
- 94
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "add_extra_sub_nav".90
- Category
- Maintainability
- Occurrences
- 90
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "add_extra_sub_nav".
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_music_cover_art".89
- Category
- Maintainability
- Occurrences
- 89
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_music_cover_art".
ERRORMaintainabilityfile system operations fcloseFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().56
- Category
- Maintainability
- Occurrences
- 56
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $activity_sql used in $wpdb->get_results()\n$activity_sql assigned unsafely at line 113.44
- Category
- Security
- Occurrences
- 44
- Severity
- warning
Sample message
Unescaped parameter $activity_sql used in $wpdb->get_results()\n$activity_sql assigned unsafely at line 113.
ERRORMaintainabilityfile system operations fopenFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$algorithm'.31
- Category
- Security
- Occurrences
- 31
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$algorithm'.
ERRORMaintainabilityfile system operations fwriteFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().29
- Category
- Maintainability
- Occurrences
- 29
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
Show 15 moreShow less
ERRORMaintainabilityBacktick operator found24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- error
Sample message
Use of the backtick operator is forbidden
ERRORMaintainabilityfile system operations fread23
- Category
- Maintainability
- Occurrences
- 23
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().
ERRORSecurityOutput is not escaped18
- Category
- Security
- Occurrences
- 18
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"[$k]=>\""'.
WARNINGMaintainabilityNon-prefixed class17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "AMFReader".
ERRORSecuritymysql mysql real escape string15
- Category
- Security
- Occurrences
- 15
- Severity
- error
Sample message
Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysql_real_escape_string.
WARNINGSecurityInterpolated SQL is not prepared14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $posts_table at " \tINNER JOIN $posts_table ON ( $posts_table.ID = $table_name.media_id AND $posts_table.post_type = %s )\n
ERRORMaintainabilitywp function not compatible with requires wp13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- error
Sample message
Function "get_sites()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 4.1.0.
WARNINGMaintainabilityslow db query meta key8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
ERRORMaintainabilitymysql mysql query6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysql_query.
WARNINGMaintainabilityslow db query meta value4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
ERRORMaintainabilitylibrary core files4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Library files that are already in the WordPress core are not permitted.
ERRORMaintainabilityfile system operations touch3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: touch().
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "rtMedia for WordPress, BuddyPress and bbPress" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.
WARNINGMaintainabilityDiscouraged PHP function2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The use of function set_time_limit() is discouraged
ERRORMaintainabilitymysql mysql fetch array2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysql_fetch_array.
External Connections
Potential connections found in static code analysis.
Outbound calls
265
External assets
0
Incoming endpoints
35
Notable Domains
rtmedia.io145 · outbound
rt.cx20 · outbound
getid3.org13 · outbound
getid3.sourceforge.net10 · outbound
rtcamp.com5 · outbound
php.net4 · outbound
Platform / Reference Domains
github.com21 · platform/reference
buddypress.trac.wordpress.org2 · platform/reference
wordpress.org2 · platform/reference
bbpress.trac.wordpress.org1 · platform/reference
codex.wordpress.org1 · platform/reference
core.trac.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
profiles.wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_rtmedia_apipublic
wp_ajax
wp_ajax_nopriv_rtmedia_get_templatepublic
wp_ajax
Admin AJAX endpoints33
wp_ajax_bp_media_rt_db_migrationauthenticated
wp_ajax
wp_ajax_delete_uploaded_mediaauthenticated
wp_ajax
wp_ajax_install_godam_hide_admin_noticeauthenticated
wp_ajax
wp_ajax_install_transcoder_hide_admin_noticeauthenticated
wp_ajax
wp_ajax_rt_send_deactivation_feedbackauthenticated
wp_ajax
wp_ajax_rtm_change_activity_privacyauthenticated
wp_ajax
wp_ajax_rtmedia_activity_done_upgradeauthenticated
wp_ajax
wp_ajax_rtmedia_activity_upgradeauthenticated
wp_ajax
wp_ajax_rtmedia_admin_uploadauthenticated
wp_ajax
wp_ajax_rtmedia_apiauthenticated
wp_ajax
wp_ajax_rtmedia_backbone_templateauthenticated
wp_ajax
wp_ajax_rtmedia_cancel_requestauthenticated
wp_ajax
21 more hidden
Score History
2 score snapshots
v4.7.11
21
Latest
- Findings
- 1,010
- Errors
- 363
- Warnings
- 647
- Check
- 2.0.0
v4.7.10
21
Score
- Findings
- 996
- Errors
- 363
- Warnings
- 633
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 21 | 1,010 | 363 | 647 | v4.7.11 | 2.0.0 |
| 21 | 996 | 363 | 633 | v4.7.10 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Non-prefixed constant206 findingsNon-prefixed global variable156 findingsMissing direct file access protection94 findingsNon-prefixed hook name90 findingsNon-prefixed function89 findingsfile system operations fclose56 findingsDatabase parameter is not escaped44 findingsfile system operations fopen32 findings
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreAkismet Anti-spam: Spam Protection35 scoreSafe SVG98 scoreFileBird – WordPress Media Library Folders & File Manager24 scoreNginx Helper71 scorePresto Player35 scoreMedia Cleaner: Clean your WordPress!25 scoreMedia Library Assistant23 score
Author
Issue
Non-prefixed constant206 findingsNon-prefixed global variable156 findingsMissing direct file access protection94 findingsNon-prefixed hook name90 findingsNon-prefixed function89 findingsfile system operations fclose56 findingsDatabase parameter is not escaped44 findingsfile system operations fopen32 findings
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreAkismet Anti-spam: Spam Protection35 scoreSafe SVG98 scoreFileBird – WordPress Media Library Folders & File Manager24 scoreNginx Helper71 scorePresto Player35 scoreMedia Cleaner: Clean your WordPress!25 scoreMedia Library Assistant23 score
Related Plugins
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player
10k+ active installs
100
ResponsiveVoice Text To Speech
7k+ active installs
100
Export Media as ZIP
2k+ active installs
100
Default Featured Image
60k+ active installs
99
Media Library Enable Infinite Scrolling
8k+ active installs
99
Export Media URLs
7k+ active installs
99