Connect WordPress with External APIs and create no-code custom WordPress REST API endpoints to interact with the WordPress database to perform SQL ope …
48
Score
174
Errors
16
Warnings
-11
Change
Category Scores
Security23
Repo88
Performance100
Maintainability59
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
171
7 issue groups
Security
16
4 issue groups
Repo Compliance
3
3 issue groups
ERRORMaintainabilitywp function not compatible with requires wpFunction "current_action()" requires WordPress 3.9.0, but your plugin minimum supported version is WordPress 3.0.1.155
- Category
- Maintainability
- Occurrences
- 155
- Severity
- error
Sample message
Function "current_action()" requires WordPress 3.9.0, but your plugin minimum supported version is WordPress 3.0.1.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $final_get_query used in $wpdb->get_results()\n$final_get_query assigned unsafely at line 132.5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Unescaped parameter $final_get_query used in $wpdb->get_results()\n$final_get_query assigned unsafely at line 132.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $final_get_query5
- Category
- Security
- Occurrences
- 5
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $final_get_query
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 215.3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 215.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'Constants'.3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'Constants'.
WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "Custom API for WP" - contains the restricted term "wp" which cannot be used at all in your plugin name.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "Custom API for WP" - contains the restricted term "wp" which cannot be used at all in your plugin name.
ERRORMaintainabilityLocalhost URL foundDo not use Localhost/127.0.0.1/*.local in your code. Found: http://localhost/2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Do not use Localhost/127.0.0.1/*.local in your code. Found: http://localhost/
Show 4 moreShow less
ERRORMaintainabilitylibrary core files1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Library files that are already in the WordPress core are not permitted.
ERRORRepo Complianceoutdated tested upto header1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 7.0 < 7.1. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
WARNINGRepo Compliancereadme parser warnings too many tags1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
One or more tags were ignored. Please limit your plugin to 5 tags.
WARNINGRepo Compliancereadme parser warnings trimmed short description1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.
External Connections
Potential connections found in static code analysis.
Outbound calls
73
External assets
0
Incoming endpoints
4
Notable Domains
miniorange.com43 · outbound
plugins.miniorange.com9 · outbound
portal.miniorange.com5 · outbound
fontawesome.com2 · outbound
getbootstrap.com2 · outbound
login.xecurify.com1 · outbound
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints4
wp_ajax_mo_caw_enable_disable_apiauthenticated
wp_ajax
wp_ajax_mo_caw_get_api_responseauthenticated
wp_ajax
wp_ajax_mo_caw_get_plugin_version_detailsauthenticated
wp_ajax
wp_ajax_mo_caw_get_table_columnsauthenticated
wp_ajax
Score History
3 score snapshots
v4.8.0
48
Latest
- Findings
- 190
- Errors
- 174
- Warnings
- 16
- Check
- 2.1.0
v4.7.0
59
Score
- Findings
- 189
- Errors
- 173
- Warnings
- 16
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 48 | 190 | 174 | 16 | v4.8.0 | 2.1.0 |
| 59 | 189 | 173 | 16 | v4.7.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More29 scoreWP Consent API86 scoreDisable REST API65 scoreMailgun for WordPress31 scoreMake Connector94 scoreDisable WP REST API93 score
Author
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More29 scoreWP Consent API86 scoreDisable REST API65 scoreMailgun for WordPress31 scoreMake Connector94 scoreDisable WP REST API93 score
Related Plugins
Get Use APIs – JSON Content Importer
5k+ active installs
100
Maps from Yandex for Elementor
7k+ active installs
99
SheetDB – get your Google Spreadsheet data
600 active installs
99
Add-On for Contact Form 7 to Notion
300 active installs
99
WP REST Yoast Meta
1k+ active installs
97
WP-REST-API V2 Menus
3k+ active installs
96