Classified Listing – AI-Powered Classified ads & Business Directory

AI-powered Classified ads & Business Directory plugin for WordPress to build classifieds, listings, real estate & local business directory sites.

v5.5.0RadiusThemeUpdated Added 9k+ installs96% rating93% support resolved
23
Score
155
Errors
2,074
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance93
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

2,229 findings

Security

1,227

10 issue groups

Maintainability

922

12 issue groups

I18n

27

2 issue groups

Performance

5

1 issue group

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_class".703
Category
Maintainability
Occurrences
703
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_class".

WARNINGSecurityRequest data is not unslashed$_COOKIE['wp-resetpass-' . COOKIEHASH] not unslashed before sanitization. Use wp_unslash() or similar431
Category
Security
Occurrences
431
Severity
warning

Sample message

$_COOKIE['wp-resetpass-' . COOKIEHASH] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE['wp-resetpass-' . COOKIEHASH]403
Category
Security
Occurrences
403
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE['wp-resetpass-' . COOKIEHASH]

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.161
Category
Security
Occurrences
161
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES['async-upload']. Check that the array index exists before using it.81
Category
Security
Occurrences
81
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES['async-upload']. Check that the array index exists before using it.

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wp_query_builder_column_builder_' . $this->query_id".69
Category
Maintainability
Occurrences
69
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wp_query_builder_column_builder_' . $this->query_id".

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;61
Category
Maintainability
Occurrences
61
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.57
Category
Security
Occurrences
57
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $db_info['meta_id_field'] used in $wpdb->get_results()\n$db_info['meta_id_field'] used without escaping.41
Category
Security
Occurrences
41
Severity
warning

Sample message

Unescaped parameter $db_info['meta_id_field'] used in $wpdb->get_results()\n$db_info['meta_id_field'] used without escaping.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$container_classes'.26
Category
Security
Occurrences
26
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$container_classes'.

Show 15 more
WARNINGMaintainabilityDirect Query24
Category
Maintainability
Occurrences
24
Severity
warning

Sample message

Use of a direct database call is discouraged.

ERRORI18nMissing Translators Comment22
Category
I18n
Occurrences
22
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGMaintainabilityNo Caching21
Category
Maintainability
Occurrences
21
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGSecurityInterpolated SQL is not prepared17
Category
Security
Occurrences
17
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $placeholders at "DELETE FROM `{$table_name}` WHERE tax_rate_id IN ($placeholders)"

WARNINGMaintainabilityerror log error log12
Category
Maintainability
Occurrences
12
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WARNINGMaintainabilityslow db query meta query8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WARNINGMaintainabilityDynamic hook name7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$id".

WARNINGSecuritywp redirect wp redirect6
Category
Security
Occurrences
6
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

ERRORI18nText Domain Mismatch5
Category
I18n
Occurrences
5
Severity
error

Sample message

Mismatched text domain. Expected 'classified-listing' but got "classified listing".

WARNINGPerformancePost Not In exclude5
Category
Performance
Occurrences
5
Severity
warning

Sample message

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

ERRORMaintainabilityblock api version too low5
Category
Maintainability
Occurrences
5
Severity
error

Sample message

Editor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility.

ERRORSecuritySQL query is not prepared4
Category
Security
Occurrences
4
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $query

WARNINGMaintainabilityerror log print r4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

ERRORMaintainabilityfile system operations fclose4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERRORMaintainabilityunlink unlink4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

External Connections

Potential connections found in static code analysis.

36 domains

Outbound calls

96

External assets

3

Incoming endpoints

100

Notable Domains

paypalobjects.com13 · outbound
paypal.com6 · outbound
php.net3 · outbound
api-3t.paypal.com2 · outbound

Platform / Reference Domains

w3.org6 · platform/reference
core.trac.wordpress.org3 · platform/reference
codex.wordpress.org1 · platform/reference
wordpress.org1 · platform/reference

External Asset Domains

radiustheme.com26 · asset + outbound
google.com4 · asset + outbound
maps.googleapis.com3 · asset + outbound

Incoming Endpoints

/wp-json/rtcl/v1/ai/image/editsREST

register_rest_route

/wp-json/rtcl/v1/receive-payment/REST

register_rest_route

wp_ajax_nopriv_rtcl_ai_quick_searchpublic

wp_ajax

wp_ajax_nopriv_rtcl_ajax_filter_get_sub_terms_htmlpublic

wp_ajax

wp_ajax_nopriv_rtcl_ajax_filter_load_datapublic

wp_ajax

wp_ajax_nopriv_rtcl_ajax_taxonomy_filter_get_sub_level_htmlpublic

wp_ajax

Admin AJAX endpoints50
wp_ajax_cl_toolkits_dismiss_noticeauthenticated

wp_ajax

wp_ajax_rtcl_add_order_noteauthenticated

wp_ajax

wp_ajax_rtcl_admin_settings_filterauthenticated

wp_ajax

wp_ajax_rtcl_admin_settings_filter_removeauthenticated

wp_ajax

wp_ajax_rtcl_admin_settings_filter_remove_itemauthenticated

wp_ajax

wp_ajax_rtcl_admin_settings_filter_update_itemauthenticated

wp_ajax

wp_ajax_rtcl_admin_settings_filter_update_items_orderauthenticated

wp_ajax

wp_ajax_rtcl_admin_settings_filter_update_nameauthenticated

wp_ajax

wp_ajax_rtcl_ai_gallery_image_saveauthenticated

wp_ajax

wp_ajax_rtcl_ai_quick_searchauthenticated

wp_ajax

wp_ajax_rtcl_ajax_add_listing_typeauthenticated

wp_ajax

wp_ajax_rtcl_ajax_checkout_actionauthenticated

wp_ajax

38 more hidden

Score History

2 score snapshots

+0
1007550250Jun 21, 2026, 02:02 AM UTC Score 23/100 Plugin v5.4.4 Plugin Check 2.0.0 155 errors, 1,861 warningsJun 24, 2026, 01:03 PM UTC Score 23/100 Plugin v5.5.0 Plugin Check 2.0.0 155 errors, 2,074 warningsJun 21, 2026Jun 24, 2026

v5.5.0

23

Latest

Findings
2,229
Errors
155
Warnings
2,074
Check
2.0.0

v5.4.4

23

Score

Findings
2,016
Errors
155
Warnings
1,861
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

HivePress Favorites

8k+ active installs

99
HivePress Authentication

1k+ active installs

98
HivePress Messages

7k+ active installs

90
HivePress Reviews

7k+ active installs

90
HivePress Claim Listings

3k+ active installs

89