Allows you to easily find the custom fields (including hidden custom fields) and their values for a post, page or custom post type post.
75
Score
9
Errors
3
Warnings
+0
Change
Category Scores
Security55
Repo100
Performance100
Maintainability97
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
9
4 issue groups
I18n
2
1 issue group
Maintainability
1
1 issue group
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$post'.6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$post'.
ERRORI18nMissing Translators CommentA function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
A function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['_wpnonce']1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['_wpnonce']
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['_wpnonce']. Check that the array index exists before using it.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['_wpnonce']. Check that the array index exists before using it.
WARNINGSecurityRequest data is not unslashed$_POST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
$_POST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
External Connections
Not analyzed yet.
Score History
First score snapshot
v0.4
75
Latest
- Findings
- 12
- Errors
- 9
- Warnings
- 3
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 75 | 12 | 9 | 3 | v0.4 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Author
Category
Issue
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreYoast Duplicate Post70 scoreAdvanced Custom Fields (ACF®)23 scoreMeta Box95 scoreCheckout Field Editor (Checkout Manager) for WooCommerce41 score
Author
Category
Issue
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreYoast Duplicate Post70 scoreAdvanced Custom Fields (ACF®)23 scoreMeta Box95 scoreCheckout Field Editor (Checkout Manager) for WooCommerce41 score
Related Plugins
CubeWP Framework
4k+ active installs
100
MB Elementor Integration
2k+ active installs
99
Repeaterly – ACF Repeater, Flexible Content & Dynamic Tags for Elementor
500 active installs
99
Ajax Load More for Advanced Custom Fields
2k+ active installs
98
MB FacetWP Integration
700 active installs
98
MB Yoast SEO Integration
600 active installs
98