PluginScore

Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin

Add unlimited custom pages to WordPress admin dashboard.

v1.0.9bestweblayoutUpdated Added 400 installs98% rating
Composer custom pageGutenberg admin pageadd admin menucustom admin menucustom admin page
42
Score
472
Errors
181
Warnings
+0
Change

Category Scores

Security20
Repo94
Performance100
Maintainability35

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

653 findings

I18n

464

4 issue groups

Maintainability

158

15 issue groups

Security

28

6 issue groups

ERRORI18nText Domain MismatchMismatched text domain. Expected 'custom-admin-page' but got 'bestwebsoft'.426
Category
I18n
Occurrences
426
Severity
error

Sample message

Mismatched text domain. Expected 'custom-admin-page' but got 'bestwebsoft'.

WordPress.WP.I18n.TextDomainMismatchReference
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "bws_add_buttons".49
Category
Maintainability
Occurrences
49
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "bws_add_buttons".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$bstwbsftwppdtplgns_active_plugins".49
Category
Maintainability
Occurrences
49
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$bstwbsftwppdtplgns_active_plugins".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.33
Category
I18n
Occurrences
33
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WordPress.WP.I18n.MissingTranslatorsCommentReference
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.18
Category
Security
Occurrences
18
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "__CLASS__ . '_additional_import_export_options'".11
Category
Maintainability
Occurrences
11
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "__CLASS__ . '_additional_import_export_options'".

WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WordPress.WP.EnqueuedResourceParameters.MissingVersion
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WordPress.WP.EnqueuedResourceParameters.NotInFooter
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
Show 15 more
WARNINGMaintainabilityNon-prefixed hook name4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bws_shortcode_button_content".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
WARNINGSecurityMissing nonce verification4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
WARNINGMaintainabilityerror log debug backtrace3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

debug_backtrace() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_debug_backtrace
ERRORSecurityOutput is not escaped3
Category
Security
Occurrences
3
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'apply_filters'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
ERRORI18nMissing Arg Domain3
Category
I18n
Occurrences
3
Severity
error

Sample message

Missing $domain parameter in function call to __().

WordPress.WP.I18n.MissingArgDomainReference
WARNINGI18nDiscouraged text-domain loading2
Category
I18n
Occurrences
2
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFoundReference
WARNINGMaintainabilityNon-prefixed class2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "BWS_Admin_Tooltip".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound
WARNINGMaintainabilityNon-prefixed constant2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "BWS_GLOBAL".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound
ERRORMaintainabilityfile system operations rmdir2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().

WordPress.WP.AlternativeFunctions.file_system_operations_rmdir
WARNINGSecurityDatabase parameter is not escaped1
Category
Security
Occurrences
1
Severity
warning

Sample message

Unescaped parameter $table_name used in $wpdb->get_results()

PluginCheck.Security.DirectDB.UnescapedDBParameter
ERRORSecuritySQL query is not prepared1
Category
Security
Occurrences
1
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $table_name

WordPress.DB.PreparedSQL.NotPrepared
WARNINGSecurityInput is not sanitized1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_SESSION['bws_membership_list']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
ERRORMaintainabilityfile system operations is writeable1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writeable().

WordPress.WP.AlternativeFunctions.file_system_operations_is_writeable
ERRORMaintainabilityNo Explicit Version1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_register_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.

WordPress.WP.EnqueuedResourceParameters.NoExplicitVersion
WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Custom Admin Page by BestWebSoft - Configurable WordPress Dashboard Pages Plugin" is different from the name declared in plugin header "Custom Admin Page by BestWebSoft".

mismatched_plugin_nameReference

External Connections

Potential connections found in static code analysis.

10 domains

Outbound calls

178

External assets

0

Incoming endpoints

2

Notable Domains

bestwebsoft.com137 · outbound
support.bestwebsoft.com22 · outbound
jqueryui.com7 · outbound
youtube.com3 · outbound
developer.mozilla.org2 · outbound
php.net1 · outbound

Platform / Reference Domains

codex.wordpress.org2 · platform/reference
wordpress.org2 · platform/reference
gnu.org1 · platform/reference
opensource.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints2
wp_ajax_bws_submit_request_feature_actionauthenticated

wp_ajax

wp_ajax_bws_submit_uninstall_reason_actionauthenticated

wp_ajax

Score History

First score snapshot

v1.0.9

42

Latest

Findings
653
Errors
472
Warnings
181
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

35 nodes

Related

Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreElementor Website Builder – more than just a page builder35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth23 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreBestWebSoft's Like & Share – Posts, Pages and Widget Social Extension plugin for WordPress39 scoreAnalytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress49 scoreContact Form to DB by BestWebSoft – Messages Database Plugin For WordPress24 scoreSMTP by BestWebSoft56 scoreSubscriber by BestWebSoft26 score

Related Plugins

BestWebSoft's Like & Share – Posts, Pages and Widget Social Extension plugin for WordPress

4k+ active installs

39
Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress

1k+ active installs

49
Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress

1k+ active installs

24
SMTP by BestWebSoft

1k+ active installs

56
Subscriber by BestWebSoft

1k+ active installs

26
Visitors Online by BestWebSoft

1k+ active installs

26