A profiler to measure the performance of your WordPress plugins and themes.
22
Score
265
Errors
400
Warnings
+0
Change
Category Scores
Security0
Repo83
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
284
15 issue groups
Security
217
6 issue groups
I18n
132
4 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$CPTableProfiles".209
- Category
- Maintainability
- Occurrences
- 209
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$CPTableProfiles".
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.94
- Category
- I18n
- Occurrences
- 94
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" $name | {$time}s | {$percent}%\n"'.55
- Category
- Security
- Occurrences
- 55
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" $name | {$time}s | {$percent}%\n"'.
WARNINGSecurityRequest data is not unslashed$_GET['doing_wp_cron'] not unslashed before sanitization. Use wp_unslash() or similar48
- Category
- Security
- Occurrences
- 48
- Severity
- warning
Sample message
$_GET['doing_wp_cron'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.38
- Category
- Security
- Occurrences
- 38
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['doing_wp_cron']38
- Category
- Security
- Occurrences
- 38
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['doing_wp_cron']
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.31
- Category
- Security
- Occurrences
- 31
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nUnordered Placeholders TextMultiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in '%sView example%s'.19
- Category
- I18n
- Occurrences
- 19
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in '%sView example%s'.
ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().11
- Category
- I18n
- Occurrences
- 11
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
Show 15 moreShow less
WARNINGMaintainabilityDiscouraged PHP function8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
ERRORMaintainabilitydate date8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORMaintainabilityfile system operations fopen8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORI18nNon Singular String Literal Text8
- Category
- I18n
- Occurrences
- 8
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $username
WARNINGSecurityInput is not validated7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['post']. Check that the array index exists before using it.
ERRORMaintainabilityfile system operations fclose7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations is writable6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORMaintainabilityfile system operations touch5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: touch().
ERRORMaintainabilityrename rename4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
rename() is discouraged. Use WP_Filesystem::move() to rename a file.
ERRORMaintainabilityfile system operations fwrite3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilityfile system operations mkdir3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
ERRORMaintainabilityPlugin Directory Write2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using file_put_contents(). Detected usage of __FILE__ or __DIR__ magic constant. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGMaintainabilityNon-prefixed constant2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DISABLE_WP_CRON".
WARNINGMaintainabilityNon-prefixed hook name2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "https_local_ssl_verify".
WARNINGMaintainabilityerror log debug backtrace2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
debug_backtrace() found. Debug code should not normally be used in production.
External Connections
Not analyzed yet.
Score History
First score snapshot
v1.9.5
22
Latest
- Findings
- 665
- Errors
- 265
- Warnings
- 400
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 22 | 665 | 265 | 400 | v1.9.5 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Author
Issue
Related
LiteSpeed Cache35 scoreWooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreImage Optimization – Compress Images and Convert to WebP or AVIF87 scoreManageWP Worker23 scoreSpeed Optimizer – The All-In-One Performance-Boosting Plugin73 score
Author
Issue
Related
LiteSpeed Cache35 scoreWooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreImage Optimization – Compress Images and Convert to WebP or AVIF87 scoreManageWP Worker23 scoreSpeed Optimizer – The All-In-One Performance-Boosting Plugin73 score
Related Plugins
Modern Image Formats
100k+ active installs
100
Disable Emojis (GDPR friendly)
60k+ active installs
100
Optimization Detective
60k+ active installs
100
Image Placeholders
60k+ active installs
100
Embed Optimizer
50k+ active installs
100
SQLite Object Cache
10k+ active installs
100