Simple SEO

Allows the modification of META titles, descriptions and keywords for all pages and posts. Also allows for default setting for of META title, descript …

v2.0.33David ColeUpdated Added 10k+ installs94% rating
36
Score
164
Errors
113
Warnings
+0
Change

Category Scores

Security0
Repo88
Performance100
Maintainability62

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

277 findings

Security

135

10 issue groups

I18n

97

3 issue groups

Maintainability

41

12 issue groups

ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: SSEO_TXTDOMAIN89
Category
I18n
Occurrences
89
Severity
error

Sample message

The $domain parameter must be a single text string literal. Found: SSEO_TXTDOMAIN

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$content'.33
Category
Security
Occurrences
33
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$content'.

WARNINGSecurityMissingProcessing form data without nonce verification.32
Category
Security
Occurrences
32
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityMissing Unslash$_POST['sseo_canonical_url'] not unslashed before sanitization. Use wp_unslash() or similar22
Category
Security
Occurrences
22
Severity
warning

Sample message

$_POST['sseo_canonical_url'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORSecurityregister setting MissingSanitization missing for register_setting().21
Category
Security
Occurrences
21
Severity
error

Sample message

Sanitization missing for register_setting().

WARNINGMaintainabilityNon Prefixed Namespace FoundNamespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "app".17
Category
Maintainability
Occurrences
17
Severity
warning

Sample message

Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "app".

WARNINGSecurityRecommendedProcessing form data without nonce verification.12
Category
Security
Occurrences
12
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_POST['sseo_nonce']7
Category
Security
Occurrences
7
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['sseo_nonce']

WARNINGMaintainabilityNon Prefixed Hookname FoundHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().6
Category
I18n
Occurrences
6
Severity
error

Sample message

Missing $domain parameter in function call to __().

Show 15 more
WARNINGSecuritywp redirect wp redirect5
Category
Security
Occurrences
5
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WARNINGMaintainabilityDirect Query4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo Caching4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORMaintainabilityunlink unlink2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

ERRORMaintainabilityNon Enqueued Script2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Scripts must be registered/enqueued via wp_enqueue_script()

ERRORI18nMissing Translators Comment2
Category
I18n
Occurrences
2
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERRORSecurityUnescaped DBParameter1
Category
Security
Occurrences
1
Severity
error

Sample message

Unescaped parameter $qs used in $wpdb->get_results()\n$qs assigned unsafely at line 77.

ERRORSecurityNot Prepared1
Category
Security
Occurrences
1
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $qs

ERRORMaintainabilitydate date1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGMaintainabilityNon Prefixed Variable Found1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$SimpleSEO".

WARNINGSecurityInput Not Validated1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['post_type']. Check that the array index exists before using it.

ERRORMaintainabilityfile system operations fclose1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERRORMaintainabilityfile system operations fopen1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

ERRORMaintainabilityfile system operations fwrite1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

ERRORMaintainabilityinvalid plugin name1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Plugin name header in your readme is missing or invalid. Please update your readme with a valid plugin name header. Eg: "=== Example Name ==="

Score History

First score snapshot

v2.0.33

36

Latest

Findings
277
Errors
164
Warnings
113
Check
2.0.0

Related Plugins

wp_head() cleaner

2k+ active installs

100
REST API Meta Support

7k+ active installs

96
Smart Custom Fields

50k+ active installs

95
SEO SIMPLE PACK

100k+ active installs

90
Codevyne SEO Meta Keywords

4k+ active installs

89