Countdown builder - Customizable Countdown Timer
29
Score
1,735
Errors
143
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance96
Maintainability28
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
1,008
5 issue groups
Security
761
12 issue groups
Maintainability
100
8 issue groups
ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: YCD_TEXT_DOMAIN896
- Category
- I18n
- Occurrences
- 896
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: YCD_TEXT_DOMAIN
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.588
- Category
- Security
- Occurrences
- 588
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;58
- Category
- Maintainability
- Occurrences
- 58
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$this->prefix[$id][$name]"'.51
- Category
- Security
- Occurrences
- 51
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$this->prefix[$id][$name]"'.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().51
- Category
- I18n
- Occurrences
- 51
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.48
- Category
- Security
- Occurrences
- 48
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $attributes['label']39
- Category
- I18n
- Occurrences
- 39
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $attributes['label']
WARNINGSecurityRequest data is not unslashed$_GET['duplicate_nonce'] not unslashed before sanitization. Use wp_unslash() or similar26
- Category
- Security
- Occurrences
- 26
- Severity
- warning
Sample message
$_GET['duplicate_nonce'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORI18nText Domain MismatchMismatched text domain. Expected 'countdown-builder' but got 'easy-digital-downloads'.20
- Category
- I18n
- Occurrences
- 20
- Severity
- error
Sample message
Mismatched text domain. Expected 'countdown-builder' but got 'easy-digital-downloads'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['duplicate_nonce']15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['duplicate_nonce']
Show 15 moreShow less
WARNINGMaintainabilityNo PHP code found12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.
WARNINGSecurityInput is not validated10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['post']. Check that the array index exists before using it.
ERRORMaintainabilitydate date9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityDirect Query8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecuritySQL query is not prepared7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $newsLettersQuery
WARNINGSecurityMissing nonce verification5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecuritywp redirect wp redirect4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
ERRORSecurityDatabase parameter is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Unescaped parameter $newsLettersQuery used in $wpdb->query()\n$newsLettersQuery assigned unsafely at line 128.
ERRORMaintainabilitywp function not compatible with requires wp3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Function "get_sites()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 3.8.0.
ERRORSecurityQuoted Simple Placeholder2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: "%s".
WARNINGSecurityInput is not validated or sanitized2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized, non-validated input variable _SERVER: "://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]"
ERRORI18nNo Empty Strings2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
The $text text string should have translatable content. Found: ''
ERRORMaintainabilityShort PHP open tag found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Short PHP opening tag used with echo; expected "<?php echo esc_attr ..." but found "<?= esc_attr ..."
ERRORMaintainabilityOffloaded Content1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.
External Connections
Not analyzed yet.
Score History
First score snapshot
v3.0.8
29
Latest
- Findings
- 1,878
- Errors
- 1,735
- Warnings
- 143
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 29 | 1,878 | 1,735 | 143 | v3.0.8 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Author
Issue
Non Singular String Literal Domain896 findingsUnsafe printing function588 findingsMissing direct file access protection58 findingsOutput is not escaped51 findingsMissing Arg Domain51 findingsNonce verification recommended48 findingsNon Singular String Literal Text39 findingsRequest data is not unslashed26 findings
Related
Coming Soon & Maintenance Mode by Colorlib100 scoreCountdown Block81 scoreClassic Editor63 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreWordPress Importer25 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreManageWP Worker23 scoreBreadcrumb NavXT36 scoreThe Events Calendar23 scoreWP-PageNavi36 score
Author
Issue
Non Singular String Literal Domain896 findingsUnsafe printing function588 findingsMissing direct file access protection58 findingsOutput is not escaped51 findingsMissing Arg Domain51 findingsNonce verification recommended48 findingsNon Singular String Literal Text39 findingsRequest data is not unslashed26 findings
Related
Coming Soon & Maintenance Mode by Colorlib100 scoreCountdown Block81 scoreClassic Editor63 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreWordPress Importer25 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreManageWP Worker23 scoreBreadcrumb NavXT36 scoreThe Events Calendar23 scoreWP-PageNavi36 score
Related Plugins
Coming Soon & Maintenance Mode by Colorlib
5k+ active installs
100
Event Countdown for The Events Calendar
3k+ active installs
100
Countdown Timer Block – build urgency for events and launches
2k+ active installs
100
WPC Product Timer for WooCommerce
3k+ active installs
95
Countdown Block
4k+ active installs
81
Countdown
400 active installs
63