Cryout Serious Theme Settings

This plugin is designed to inter-operate with our Mantra, Parabola, Tempera, Nirvana themes to enable their settings pages.

v0.5.17CryoutCreationsUpdated Added 40k+ installs86% rating
40
Score
332
Errors
51
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance100
Maintainability77

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

383 findings

Security

227

5 issue groups

I18n

133

2 issue groups

Maintainability

22

6 issue groups

Repo Compliance

1

1 issue group

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <label id='$id' for='$id$id' class='images presets $checkedClass'><input "'.134
Category
Security
Occurrences
134
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <label id='$id' for='$id$id' class='images presets $checkedClass'><input "'.

ERRORI18nText Domain MismatchMismatched text domain. Expected 'cryout-theme-settings' but got "nirvana".125
Category
I18n
Occurrences
125
Severity
error

Sample message

Mismatched text domain. Expected 'cryout-theme-settings' but got "nirvana".

ERRORSecurityUnsafe Printing FunctionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.57
Category
Security
Occurrences
57
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_FILES[&#039;import&#039;]16
Category
Security
Occurrences
16
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES[&#039;import&#039;]

WARNINGSecurityInput Not ValidatedDetected usage of a possibly undefined superglobal array index: $_FILES[&#039;import&#039;][&#039;tmp_name&#039;]. Check that the array index exists before using it.12
Category
Security
Occurrences
12
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES[&#039;import&#039;][&#039;tmp_name&#039;]. Check that the array index exists before using it.

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$cryout_theme_settings&quot;.9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$cryout_theme_settings&quot;.

WARNINGSecurityMissing Unslash$_POST[&#039;mantra-export&#039;] not unslashed before sanitization. Use wp_unslash() or similar8
Category
Security
Occurrences
8
Severity
warning

Sample message

$_POST[&#039;mantra-export&#039;] not unslashed before sanitization. Use wp_unslash() or similar

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.8
Category
I18n
Occurrences
8
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGMaintainabilityNon Prefixed Hookname FoundHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;import_upload_size_limit&quot;.4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;import_upload_size_limit&quot;.

Show 4 more
ERRORMaintainabilitytimezone change date default timezone set3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Using date_default_timezone_set() and similar isn't allowed, instead use WP internal timezone support.

WARNINGMaintainabilityNon Prefixed Class Found1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;Cryout_Theme_Settings&quot;.

WARNINGMaintainabilityNot In Footer1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

Score History

First score snapshot

v0.5.17

40

Latest

Findings
383
Errors
332
Warnings
51
Check
2.0.0

Related Plugins

Gantry 5 Framework

7k+ active installs

100
Generate Child Theme

9k+ active installs

100
PufferDesk

0 active installs

100
Simply Show Hooks

2k+ active installs

100
Hide WP Admin Notifications

1k+ active installs

99
One Click Close Comments

4k+ active installs

99