Clever Mega Menu for Visual Composer

Fully control over WordPress navigation menus with ease of visual editing from Visual Composer.

v1.0.1zootemplateUpdated Added 1k+ installs66% rating
38
Score
500
Errors
87
Warnings
+0
Change

Category Scores

Security0
Repo89
Performance93
Maintainability77

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

587 findings

Security

550

10 issue groups

Maintainability

19

10 issue groups

I18n

13

4 issue groups

Performance

3

1 issue group

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"/* INPUT NOT FOUND scss $v */\n"'.464
Category
Security
Occurrences
464
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"/* INPUT NOT FOUND scss $v */\n"'.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.31
Category
Security
Occurrences
31
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.12
Category
Security
Occurrences
12
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES['clever-mega-menu-import-data']['error']12
Category
Security
Occurrences
12
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES['clever-mega-menu-import-data']['error']

WARNINGSecurityRequest data is not unslashed$_GET['p'] not unslashed before sanitization. Use wp_unslash() or similar12
Category
Security
Occurrences
12
Severity
warning

Sample message

$_GET['p'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.9
Category
Security
Occurrences
9
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to _e().9
Category
I18n
Occurrences
9
Severity
error

Sample message

Missing $domain parameter in function call to _e().

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "scss_formatter".6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "scss_formatter".

ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$msg: $loc"'.4
Category
Security
Occurrences
4
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$msg: $loc"'.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Use of a direct database call is discouraged.

Show 15 more
ERRORPerformanceSuppress Filters suppress filters3
Category
Performance
Occurrences
3
Severity
error

Sample message

Setting `suppress_filters` to `true` is prohibited.

WARNINGMaintainabilityNo Caching2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORMaintainabilitydate date2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGSecurityPlugin menu slug uses __FILE__2
Category
Security
Occurrences
2
Severity
warning

Sample message

Using __FILE__ for menu slugs risks exposing filesystem structure.

WARNINGSecuritywp redirect wp redirect2
Category
Security
Occurrences
2
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WARNINGSecurityInput is not validated2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES['clever-mega-menu-import-data']['error']. Check that the array index exists before using it.

ERRORI18nMissing Translators Comment2
Category
I18n
Occurrences
2
Severity
error

Sample message

A function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGI18nDiscouraged text-domain loading1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNINGMaintainabilityNon-prefixed hook name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "vc_base_build_shortcodes_custom_css".

ERRORMaintainabilityfile system operations fwrite1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

ERRORMaintainabilityfile system operations mkdir1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

ERRORMaintainabilityunlink unlink1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

ERRORI18nUnordered Placeholders Text1
Category
I18n
Occurrences
1
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'Select a menu theme or %screate a new one%s.'.

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Clever Mega Menu for Visual Composer" is different from the name declared in plugin header "Clever Mega Menu".

ERRORMaintainabilityMissing direct file access protection1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

External Connections

Potential connections found in static code analysis.

8 domains

Outbound calls

36

External assets

0

Incoming endpoints

1

Notable Domains

zootemplate.com2 · outbound
doc.zootemplate.com1 · outbound
leafo.net1 · outbound

Platform / Reference Domains

developer.wordpress.org22 · platform/reference
github.com2 · platform/reference
opensource.org2 · platform/reference
w3.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints1
wp_ajax_save_clever_menu_itemauthenticated

wp_ajax

Score History

First score snapshot

v1.0.1

38

Latest

Findings
587
Errors
500
Warnings
87
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

33 nodes

Related Plugins

99
EasyMega

6k+ active installs

93
Ollie Menu Designer

3k+ active installs

91