In any online website, hackers and unscrupulous users will try and attack your website. Whether it is trying to attack your website by brute forcing …
21
Score
300
Errors
323
Warnings
+0
Change
Category Scores
Security0
Repo71
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
417
11 issue groups
Maintainability
152
13 issue groups
I18n
12
1 issue group
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Database support is turned on in Securimage, but the chosen extension $pdo_extension is not loaded in PHP."'.82
- Category
- Security
- Occurrences
- 82
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Database support is turned on in Securimage, but the chosen extension $pdo_extension is not loaded in PHP."'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['distortion']68
- Category
- Security
- Occurrences
- 68
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['distortion']
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.58
- Category
- Security
- Occurrences
- 58
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityRequest data is not unslashed$_GET['distortion'] not unslashed before sanitization. Use wp_unslash() or similar52
- Category
- Security
- Occurrences
- 52
- Severity
- warning
Sample message
$_GET['distortion'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['distortion']. Check that the array index exists before using it.51
- Category
- Security
- Occurrences
- 51
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['distortion']. Check that the array index exists before using it.
ERRORMaintainabilityrand mt randmt_rand() is discouraged. Use the far less predictable wp_rand() instead.50
- Category
- Maintainability
- Occurrences
- 50
- Severity
- error
Sample message
mt_rand() is discouraged. Use the far less predictable wp_rand() instead.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.37
- Category
- Security
- Occurrences
- 37
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityerror log trigger errortrigger_error() found. Debug code should not normally be used in production.25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.25
- Category
- Security
- Occurrences
- 25
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $currTime at "DELETE FROM $table WHERE last_attempt < '$currTime'"15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $currTime at "DELETE FROM $table WHERE last_attempt < '$currTime'"
Show 15 moreShow less
ERRORSecurityException output is not escaped15
- Category
- Security
- Occurrences
- 15
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Error generating audio captcha on letter '$letter': "'.
WARNINGMaintainabilityDirect Query12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
ERRORI18nMissing Arg Domain12
- Category
- I18n
- Occurrences
- 12
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGMaintainabilityNo Caching11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityDatabase parameter is not escaped10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Unescaped parameter $table used in $wpdb->get_results()\n$table assigned unsafely at line 158.
ERRORMaintainabilityfile system operations fclose10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityMissing direct file access protection7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitydate date6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORMaintainabilityfile system operations fread6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().
ERRORMaintainabilityfile system operations fwrite5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilityBacktick operator found4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Use of the backtick operator is forbidden
WARNINGSecurityInput is not validated or sanitized4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a non-sanitized, non-validated input variable _SERVER: "<br /><br /><em>IP Address:</em> {$_SERVER['REMOTE_ADDR']}<br />"
ERRORMaintainabilityrand rand4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORMaintainabilitymysql PDO3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: \PDO.
External Connections
Not analyzed yet.
Score History
First score snapshot
v1.4.2
21
Latest
- Findings
- 623
- Errors
- 300
- Warnings
- 323
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 21 | 623 | 300 | 323 | v1.4.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Plugin
Author
Issue
Related
Akismet Anti-spam: Spam Protection35 scoreReally Simple CAPTCHA98 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreContact Form 769 scoreClassic Editor63 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAntispam Bee80 scoreSiteGuard WP Plugin24 scoreCF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 724 scoreAdvanced Google reCAPTCHA97 scoreLogin Security Captcha100 score
Plugin
Author
Issue
Related
Akismet Anti-spam: Spam Protection35 scoreReally Simple CAPTCHA98 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreContact Form 769 scoreClassic Editor63 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAntispam Bee80 scoreSiteGuard WP Plugin24 scoreCF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 724 scoreAdvanced Google reCAPTCHA97 scoreLogin Security Captcha100 score
Related Plugins
Login Security Captcha
10k+ active installs
100
DS CF7 Math Captcha
10k+ active installs
100
Kitgenix CAPTCHA for Cloudflare Turnstile
600 active installs
100
Block List Updater
4k+ active installs
99
BotBlocker Security – Firewall & Bot Protection
3k+ active installs
99
Really Simple CAPTCHA
300k+ active installs
98