Translate WordPress into 200+ languages. AI translation plugin for multilingual websites — WooCommerce, SEO, hreflang, Google Translate.
27
Score
159
Errors
298
Warnings
+1
Change
Category Scores
Security0
Repo100
Performance100
Maintainability8
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
258
10 issue groups
Maintainability
172
12 issue groups
I18n
9
3 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$add_url".81
- Category
- Maintainability
- Occurrences
- 81
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$add_url".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['seo_quality']77
- Category
- Security
- Occurrences
- 77
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['seo_quality']
WARNINGSecurityRequest data is not unslashed$_GET['seo_quality'] not unslashed before sanitization. Use wp_unslash() or similar68
- Category
- Security
- Occurrences
- 68
- Severity
- warning
Sample message
$_GET['seo_quality'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().45
- Category
- Security
- Occurrences
- 45
- Severity
- error
Sample message
Sanitization missing for register_setting().
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_SERVER['DOCUMENT_ROOT']. Check that the array index exists before using it.36
- Category
- Security
- Occurrences
- 36
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER['DOCUMENT_ROOT']. Check that the array index exists before using it.
ERRORMaintainabilitywp function not compatible with requires wpFunction "get_sitemap_url()" requires WordPress 5.5.1, but your plugin minimum supported version is WordPress 4.0.0.32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- error
Sample message
Function "get_sitemap_url()" requires WordPress 5.5.1, but your plugin minimum supported version is WordPress 4.0.0.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;28
- Category
- Maintainability
- Occurrences
- 28
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$ct_notice_style'.14
- Category
- Security
- Occurrences
- 14
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$ct_notice_style'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityOffloaded ContentFound call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.
Show 15 moreShow less
WARNINGSecurityNonce verification recommended5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityShort PHP open tag found4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Short PHP opening tag used with echo; expected "<?php echo esc_attr ..." but found "<?= esc_attr ..."
ERRORMaintainabilityPlugin Directory Write4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using file_put_contents(). Detected usage of __FILE__ or __DIR__ magic constant. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGMaintainabilityNon-prefixed constant4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "API_AUTH_TOKEN".
ERRORMaintainabilitycurl curl setopt4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGMaintainabilityNon-prefixed hook name3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "cachify_flush_cache".
WARNINGMaintainabilityerror log debug backtrace3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
debug_backtrace() found. Debug code should not normally be used in production.
ERRORSecurityException output is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Method $name not found in class "'.
ERRORI18nMissing Arg Domain3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORI18nMissing Translators Comment3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORI18nText Domain Mismatch3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
Mismatched text domain. Expected 'conveythis-translate' but got 'conveythis'.
WARNINGMaintainabilityNon-prefixed class2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "JSLikeHTMLElement".
WARNINGMaintainabilityerror log trigger error2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
WARNINGSecuritywp redirect wp redirect2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
WARNINGSecurityInput is not validated or sanitized2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized, non-validated input variable _SERVER: "://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]"
External Connections
Potential connections found in static code analysis.
Outbound calls
123
External assets
1
Incoming endpoints
16
Notable Domains
app.conveythis.com26 · outbound
conveythis.com13 · outbound
api.conveythis.com5 · outbound
dev-api-1.conveythis.com3 · outbound
dev-api-2.conveythis.com3 · outbound
dev-api-3.conveythis.com3 · outbound
Platform / Reference Domains
github.com11 · platform/reference
opensource.org11 · platform/reference
w3.org9 · platform/reference
wordpress.org4 · platform/reference
External Asset Domains
ajax.googleapis.com1 · asset
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints16
admin_post_conveythis_add_seo_glossary_termauthenticated
admin_post
admin_post_conveythis_clear_seo_quality_logauthenticated
admin_post
admin_post_conveythis_dismiss_seo_quality_eventauthenticated
admin_post
admin_post_conveythis_dismiss_structured_data_noticeauthenticated
admin_post
admin_post_conveythis_seo_warmupauthenticated
admin_post
admin_post_conveythis_seo_warmup_skipauthenticated
admin_post
wp_ajax_check_dnsauthenticated
wp_ajax
wp_ajax_conveythis_clear_all_cacheauthenticated
wp_ajax
wp_ajax_conveythis_clear_translate_cacheauthenticated
wp_ajax
wp_ajax_conveythis_diagnose_trailing_slashauthenticated
wp_ajax
wp_ajax_conveythis_dismiss_all_cacheauthenticated
wp_ajax
wp_ajax_conveythis_parse_sitemapauthenticated
wp_ajax
4 more hidden
Score History
2 score snapshots
v270.6
27
Latest
- Findings
- 457
- Errors
- 159
- Warnings
- 298
- Check
- 2.0.0
v270.5
26
Score
- Findings
- 456
- Errors
- 159
- Warnings
- 297
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 27 | 457 | 159 | 298 | v270.6 | 2.0.0 |
| 26 | 456 | 159 | 297 | v270.5 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Non-prefixed global variable81 findingsInput is not sanitized77 findingsRequest data is not unslashed68 findingsSetting is missing a sanitization callback45 findingsInput is not validated36 findingswp function not compatible with requires wp32 findingsMissing direct file access protection28 findingsOutput is not escaped14 findings
Domain
Related
Contact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreLoco Translate27 scoreTranslate WordPress with GTranslate32 scorePolylang26 scoreTranslatePress – Translate Multilingual sites with AI Translation25 scoreCyr-To-Lat54 score
Author
Category
Issue
Non-prefixed global variable81 findingsInput is not sanitized77 findingsRequest data is not unslashed68 findingsSetting is missing a sanitization callback45 findingsInput is not validated36 findingswp function not compatible with requires wp32 findingsMissing direct file access protection28 findingsOutput is not escaped14 findings
Domain
Related
Contact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreLoco Translate27 scoreTranslate WordPress with GTranslate32 scorePolylang26 scoreTranslatePress – Translate Multilingual sites with AI Translation25 scoreCyr-To-Lat54 score
Related Plugins
AI Translation For TranslatePress
10k+ active installs
100
100
Automatic Translator with Google Translate
2k+ active installs
100
Language Switcher for Elementor & Polylang
400 active installs
100
Simple Admin Language Change
10k+ active installs
99
Language Fallback
5k+ active installs
99