Configurable Tag Cloud (CTC)

Display a tag cloud customized with your preferences in the sidebar.

v5.3Keith S.Updated Added 2k+ installs74% rating
39
Score
126
Errors
121
Warnings
+0
Change

Category Scores

Security0
Repo83
Performance94
Maintainability85

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

247 findings

Security

189

6 issue groups

I18n

39

2 issue groups

Maintainability

10

6 issue groups

Performance

6

1 issue group

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$after_title'.45
Category
Security
Occurrences
45
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$after_title'.

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().37
Category
I18n
Occurrences
37
Severity
error

Sample message

Missing $domain parameter in function call to __().

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['ctc-empty']. Check that the array index exists before using it.35
Category
Security
Occurrences
35
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['ctc-empty']. Check that the array index exists before using it.

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.33
Category
Security
Occurrences
33
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['ctc-empty']29
Category
Security
Occurrences
29
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['ctc-empty']

WARNINGSecurityRequest data is not unslashed$_POST['ctc-empty'] not unslashed before sanitization. Use wp_unslash() or similar29
Category
Security
Occurrences
29
Severity
warning

Sample message

$_POST['ctc-empty'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.18
Category
Security
Occurrences
18
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGPerformancePost Not In excludeUsing exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.6
Category
Performance
Occurrences
6
Severity
warning

Sample message

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;5
Category
Maintainability
Occurrences
5
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.2
Category
I18n
Occurrences
2
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

Show 8 more
WARNINGMaintainabilityDeprecated function: register_sidebar_widget1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

register_sidebar_widget() has been deprecated since WordPress version 2.8.0. Use wp_register_sidebar_widget() instead.

WARNINGMaintainabilityDeprecated function: register_widget_control1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

register_widget_control() has been deprecated since WordPress version 2.8.0. Use wp_register_widget_control() instead.

WARNINGMaintainabilityDeprecated parameter: get_terms parameter 21
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The parameter "$args" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Configurable Tag Cloud (CTC)" is different from the name declared in plugin header "Configurable Tag Cloud".

ERRORRepo Complianceno license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License". Please update your readme with a valid GPLv2 (or later) compatible license.

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.1 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

ERRORRepo Complianceplugin header no license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

ERRORMaintainabilitytrunk stable tag1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Incorrect Stable Tag. It's recommended not to use "Stable Tag: trunk". Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org.

Score History

First score snapshot

v5.3

39

Latest

Findings
247
Errors
126
Warnings
121
Check
2.0.0

Related Plugins

Shortcode Widget

10k+ active installs

100
Custom Post Type Widgets

10k+ active installs

99
Essential Widgets

10k+ active installs

99
Featured Image

1k+ active installs

99