Allows the modification of META titles, descriptions and keywords for all pages and posts. Also allows for default setting for of META title, descript …
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
135
10 issue groups
I18n
97
3 issue groups
Maintainability
41
12 issue groups
ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: SSEO_TXTDOMAIN89
- Category
- I18n
- Occurrences
- 89
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: SSEO_TXTDOMAIN
ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$content'.33
- Category
- Security
- Occurrences
- 33
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$content'.
WARNINGSecurityMissingProcessing form data without nonce verification.32
- Category
- Security
- Occurrences
- 32
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityMissing Unslash$_POST['sseo_canonical_url'] not unslashed before sanitization. Use wp_unslash() or similar22
- Category
- Security
- Occurrences
- 22
- Severity
- warning
Sample message
$_POST['sseo_canonical_url'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityregister setting MissingSanitization missing for register_setting().21
- Category
- Security
- Occurrences
- 21
- Severity
- error
Sample message
Sanitization missing for register_setting().
WARNINGMaintainabilityNon Prefixed Namespace FoundNamespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "app".17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- warning
Sample message
Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "app".
WARNINGSecurityRecommendedProcessing form data without nonce verification.12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_POST['sseo_nonce']7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['sseo_nonce']
WARNINGMaintainabilityNon Prefixed Hookname FoundHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
Show 15 moreShow less
WARNINGSecuritywp redirect wp redirect5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
WARNINGMaintainabilityDirect Query4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilityunlink unlink2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORMaintainabilityNon Enqueued Script2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Scripts must be registered/enqueued via wp_enqueue_script()
ERRORI18nMissing Translators Comment2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORSecurityUnescaped DBParameter1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Unescaped parameter $qs used in $wpdb->get_results()\n$qs assigned unsafely at line 77.
ERRORSecurityNot Prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $qs
ERRORMaintainabilitydate date1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityNon Prefixed Variable Found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$SimpleSEO".
WARNINGSecurityInput Not Validated1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['post_type']. Check that the array index exists before using it.
ERRORMaintainabilityfile system operations fclose1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fwrite1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilityinvalid plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin name header in your readme is missing or invalid. Please update your readme with a valid plugin name header. Eg: "=== Example Name ==="
Score History
First score snapshot
v2.0.33
36
Latest
- Findings
- 277
- Errors
- 164
- Warnings
- 113
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 36 | 277 | 164 | 113 | v2.0.33 | 2.0.0 |