PluginScore

Content Mask

Embed any external content on a Page, Post, or Custom Post Type without the need to use complicated domain forwarding or domain masks.

v1.8.5.5AlexUpdated Added 1k+ installs100% rating
Domain Maskembedlinkmaskredirect
35
Score
50
Errors
350
Warnings
+0
Change

Category Scores

Security17
Repo86
Performance100
Maintainability73

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

400 findings

Maintainability

350

5 issue groups

Security

48

2 issue groups

Supply Chain

2

1 issue group

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_tab".345
Category
Maintainability
Occurrences
345
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_tab".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$attr'.47
Category
Security
Occurrences
47
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$attr'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_query
ERRORSupply ChainHidden files includedHidden files are not permitted.2
Category
Supply Chain
Occurrences
2
Severity
error

Sample message

Hidden files are not permitted.

hidden_files
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "ContentMask".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "ContentMask".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wp_title".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wp_title".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
WARNINGSecuritywp redirect wp redirectwp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.1
Category
Security
Occurrences
1
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WordPress.Security.SafeRedirect.wp_redirect_wp_redirectReference
ERRORMaintainabilitywp function not compatible with requires wpFunction "wp_enqueue_code_editor()" requires WordPress 4.9.0, but your plugin minimum supported version is WordPress 4.7.0.1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Function "wp_enqueue_code_editor()" requires WordPress 4.9.0, but your plugin minimum supported version is WordPress 4.7.0.

wp_function_not_compatible_with_requires_wpReference

External Connections

Potential connections found in static code analysis.

9 domains

Outbound calls

17

External assets

0

Incoming endpoints

1

Notable Domains

xhynk.com5 · outbound
gist.github.com2 · outbound
paypal.me1 · outbound
regex101.com1 · outbound
vergrabber.kingu.pl1 · outbound
whirlocal.io1 · outbound

Platform / Reference Domains

wordpress.org3 · platform/reference
gnu.org2 · platform/reference
codex.wordpress.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints1
wp_ajax_$actionauthenticated

wp_ajax

Score History

2 score snapshots

+0
1007550250Jun 25, 2026, 12:06 AM UTC Score 35/100 Plugin v1.8.5.4 Plugin Check 2.0.0 50 errors, 350 warningsJun 25, 2026, 12:17 AM UTC Score 35/100 Plugin v1.8.5.5 Plugin Check 2.0.0 50 errors, 350 warningsJun 25, 2026Jun 25, 2026

v1.8.5.5

35

Latest

Findings
400
Errors
50
Warnings
350
Check
2.0.0

v1.8.5.4

35

Score

Findings
400
Errors
50
Warnings
350
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

35 nodes

Related Plugins

Bookmark Card

700 active installs

100
Code Embed

10k+ active installs

100
Embed YouTube Block – Fast Loading Videos, Shorts & Playlists

6k+ active installs

100
Extend Link

1k+ active installs

100
Hyperlink Group Block

7k+ active installs

100
Input Mask For Elementor Form Fields

20k+ active installs

100