Allows you to easily find the custom fields (including hidden custom fields) and their values for a post, page or custom post type post.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
9
4 issue groups
I18n
2
1 issue group
Maintainability
1
1 issue group
ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$post'.6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$post'.
ERRORI18nMissing Translators CommentA function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
A function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_POST['_wpnonce']1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['_wpnonce']
WARNINGSecurityInput Not ValidatedDetected usage of a possibly undefined superglobal array index: $_POST['_wpnonce']. Check that the array index exists before using it.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['_wpnonce']. Check that the array index exists before using it.
WARNINGSecurityMissing Unslash$_POST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
$_POST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Score History
First score snapshot
v0.4
75
Latest
- Findings
- 12
- Errors
- 9
- Warnings
- 3
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 75 | 12 | 9 | 3 | v0.4 | 2.0.0 |
Related Plugins
2k+ active installs
2k+ active installs
4k+ active installs
1k+ active installs
5k+ active installs
2k+ active installs