PluginScore

CodeColorer

Syntax highlighting for code snippets in posts, comments, and RSS, with inline code, themes, and line numbers.

v0.11.0Dmytro ShteflyukUpdated Added 1k+ installs98% rating
codecommentshighlightingsnippetsyntax
64
Score
65
Errors
266
Warnings
+0
Change

Category Scores

Security50
Repo94
Performance100
Maintainability62

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

331 findings

Maintainability

317

4 issue groups

Security

10

2 issue groups

I18n

3

2 issue groups

Repo Compliance

1

1 issue group

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$a68".265
Category
Maintainability
Occurrences
265
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$a68".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;50
Category
Maintainability
Occurrences
50
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$geshi'.5
Category
Security
Occurrences
5
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$geshi'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.5
Category
Security
Occurrences
5
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WordPress.Security.EscapeOutput.UnsafePrintingFunctionReference
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.2
Category
I18n
Occurrences
2
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WordPress.WP.I18n.MissingTranslatorsCommentReference
WARNINGMaintainabilityerror log trigger errortrigger_error() found. Debug code should not normally be used in production.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

trigger_error() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_trigger_error
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().1
Category
I18n
Occurrences
1
Severity
error

Sample message

Missing $domain parameter in function call to __().

WordPress.WP.I18n.MissingArgDomainReference
ERRORRepo Complianceoutdated tested upto headerTested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

outdated_tested_upto_headerReference
ERRORMaintainabilitywp function not compatible with requires wpFunction "sanitize_textarea_field()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.0.0.1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Function "sanitize_textarea_field()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.0.0.

wp_function_not_compatible_with_requires_wpReference

External Connections

Potential connections found in static code analysis.

85 domains

Outbound calls

299

External assets

0

Incoming endpoints

1

Notable Domains

docs.oracle.com80 · outbound
qbnz.com36 · outbound
autoitscript.com12 · outbound
google.com11 · outbound
kpumuk.info10 · outbound
google.de9 · outbound

Platform / Reference Domains

gnu.org1 · platform/reference
w3.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints1
admin_post_codecolorer_dismiss_noticeauthenticated

admin_post

Score History

First score snapshot

v0.11.0

64

Latest

Findings
331
Errors
65
Warnings
266
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

Advance Custom HTML – Show Live Code, Share Snippets, Embed Code, and Style Them Your Way.

10k+ active installs

100
Code Embed

10k+ active installs

100
Really Simple Disable Comments

400 active installs

100
Simply Disable Comments

6k+ active installs

100
Turn Comments Off

1k+ active installs

100
Block List Updater

4k+ active installs

99