Take control of every 404 on your site — redirect visitors to a custom page or URL, log what broke, and get notified when it matters.
Category Scores
Top Issues by Category
maintainability52
security20
supply_chain4
Issues Details
77 issues found in latest scan
Function "get_sites()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 3.0.1.
Unescaped parameter $helpers->table_logs used in $wpdb->get_col()\n$helpers->table_logs used without escaping.
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Attempting a database schema change is discouraged.
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Could not find WordPress test suite at '{$_tests_dir}'."'.
| Code | Type | Message | Count |
|---|---|---|---|
| wp_function_not_compatible_with_requires_wp | ERROR | Function "get_sites()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 3.0.1. | 34 |
| PluginCheck.Security.DirectDB.UnescapedDBParameter | WARNING | Unescaped parameter $helpers->table_logs used in $wpdb->get_col()\n$helpers->table_logs used without escaping. | 19 |
| missing_direct_file_access_protection | ERROR | PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit; | 8 |
| WordPress.DB.DirectDatabaseQuery.SchemaChange | WARNING | Attempting a database schema change is discouraged. | 7 |
| hidden_files | ERROR | Hidden files are not permitted. | 4 |
| application_detected | ERROR | Application files are not permitted. | 2 |
| PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound | WARNING | load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed. | 1 |
| PluginCheck.CodeAnalysis.Offloading.OffloadedContent | ERROR | Offloading images, js, css, and other scripts to your servers or any remote service is disallowed. | 1 |
| WordPress.Security.EscapeOutput.OutputNotEscaped | ERROR | All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Could not find WordPress test suite at '{$_tests_dir}'."'. | 1 |
Latest Snapshot
Findings
77
Errors
50
Warnings
27
Score History
First score snapshot
First scan completed Jun 21, 2026
v3.15.1 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2
Jun 21, 2026
v3.15.1
35
Latest
- Findings
- 77
- Errors
- 50
- Warnings
- 27
- Plugin Check
- 2.0.0
- Model
- 2026.06-mvp-static-v2
| Scan | Score | Findings | Errors | Warnings | Plugin | Plugin Check | Model |
|---|---|---|---|---|---|---|---|
| Jun 21, 2026Latest | 35 | 77 | 50 | 27 | v3.15.1 | 2.0.0 | 2026.06-mvp-static-v2 |
