A profiler to measure the performance of your WordPress plugins and themes.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
284
15 issue groups
Security
217
6 issue groups
I18n
132
4 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$CPTableProfiles".209
- Category
- Maintainability
- Occurrences
- 209
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$CPTableProfiles".
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.94
- Category
- I18n
- Occurrences
- 94
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" $name | {$time}s | {$percent}%\n"'.55
- Category
- Security
- Occurrences
- 55
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" $name | {$time}s | {$percent}%\n"'.
WARNINGSecurityRequest data is not unslashed$_GET['doing_wp_cron'] not unslashed before sanitization. Use wp_unslash() or similar48
- Category
- Security
- Occurrences
- 48
- Severity
- warning
Sample message
$_GET['doing_wp_cron'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.38
- Category
- Security
- Occurrences
- 38
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['doing_wp_cron']38
- Category
- Security
- Occurrences
- 38
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['doing_wp_cron']
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.31
- Category
- Security
- Occurrences
- 31
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nUnordered Placeholders TextMultiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in '%sView example%s'.19
- Category
- I18n
- Occurrences
- 19
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in '%sView example%s'.
ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().11
- Category
- I18n
- Occurrences
- 11
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
Show 15 moreShow less
WARNINGMaintainabilityDiscouraged PHP function8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
ERRORMaintainabilitydate date8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORMaintainabilityfile system operations fopen8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORI18nNon Singular String Literal Text8
- Category
- I18n
- Occurrences
- 8
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $username
WARNINGSecurityInput is not validated7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['post']. Check that the array index exists before using it.
ERRORMaintainabilityfile system operations fclose7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations is writable6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORMaintainabilityfile system operations touch5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: touch().
ERRORMaintainabilityrename rename4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
rename() is discouraged. Use WP_Filesystem::move() to rename a file.
ERRORMaintainabilityfile system operations fwrite3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilityfile system operations mkdir3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
ERRORMaintainabilityPlugin Directory Write2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using file_put_contents(). Detected usage of __FILE__ or __DIR__ magic constant. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGMaintainabilityNon-prefixed constant2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DISABLE_WP_CRON".
WARNINGMaintainabilityNon-prefixed hook name2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "https_local_ssl_verify".
WARNINGMaintainabilityerror log debug backtrace2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
debug_backtrace() found. Debug code should not normally be used in production.
External Connections
Not analyzed yet.
Score History
First score snapshot
v1.9.5
22
Latest
- Findings
- 665
- Errors
- 265
- Warnings
- 400
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 22 | 665 | 265 | 400 | v1.9.5 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Relationship links
Author
Issue
Related
Author
Issue
Related
Related Plugins
2k+ active installs
60k+ active installs
50k+ active installs
60k+ active installs
1k+ active installs
400 active installs