Add advanced custom search to your WordPress site. Search custom post types, taxonomies, and custom fields with full control over results.
30
Score
454
Errors
228
Warnings
+0
Change
Category Scores
Security0
Repo91
Performance100
Maintainability32
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
438
4 issue groups
Maintainability
171
13 issue groups
Security
66
8 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'custom-search-plugin' but got 'bestwebsoft'.402
- Category
- I18n
- Occurrences
- 402
- Severity
- error
Sample message
Mismatched text domain. Expected 'custom-search-plugin' but got 'bestwebsoft'.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_cstmsrch_admin_menu".52
- Category
- Maintainability
- Occurrences
- 52
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_cstmsrch_admin_menu".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$bstwbsftwppdtplgns_active_plugins".50
- Category
- Maintainability
- Occurrences
- 50
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$bstwbsftwppdtplgns_active_plugins".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.34
- Category
- Security
- Occurrences
- 34
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.31
- Category
- I18n
- Occurrences
- 31
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "__CLASS__ . '_additional_import_export_options'".11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "__CLASS__ . '_additional_import_export_options'".
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
Show 15 moreShow less
ERRORSecuritySQL query is not prepared8
- Category
- Security
- Occurrences
- 8
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $custom_fields_placeholders
WARNINGSecurityInput is not sanitized8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_REQUEST['cstmsrch_fields_array']
WARNINGSecurityRequest data is not unslashed7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
$_REQUEST['cstmsrch_fields_array'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityMissing nonce verification4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityerror log debug backtrace3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
debug_backtrace() found. Debug code should not normally be used in production.
ERRORI18nMissing Arg Domain3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGI18nDiscouraged text-domain loading2
- Category
- I18n
- Occurrences
- 2
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
ERRORSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Unescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 217.
WARNINGSecurityUnfinished Prepare2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityNon-prefixed class2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "BWS_Admin_Tooltip".
WARNINGMaintainabilityNon-prefixed constant2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "BWS_GLOBAL".
ERRORMaintainabilityfile system operations rmdir2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().
ERRORMaintainabilityMissing direct file access protection2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilitytrademarked term2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "Custom Search by BestWebSoft - WordPress Custom Search Plugin" - contains the restricted term "plugin" which cannot be used at all in your plugin name.
WARNINGSecurityReplacements Wrong Number1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 2 replacement parameters, expected 1.
External Connections
Potential connections found in static code analysis.
Outbound calls
161
External assets
1
Incoming endpoints
2
Notable Domains
bestwebsoft.com82 · outbound
jqueryui.com34 · outbound
support.bestwebsoft.com22 · outbound
api.jqueryui.com5 · outbound
jquery.org5 · outbound
youtube.com3 · outbound
Platform / Reference Domains
wordpress.org2 · platform/reference
codex.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
opensource.org1 · platform/reference
External Asset Domains
cse.google.com2 · asset + outbound
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints2
wp_ajax_bws_submit_request_feature_actionauthenticated
wp_ajax
wp_ajax_bws_submit_uninstall_reason_actionauthenticated
wp_ajax
Score History
First score snapshot
v1.52
30
Latest
- Findings
- 682
- Errors
- 454
- Warnings
- 228
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 30 | 682 | 454 | 228 | v1.52 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scorereCaptcha by BestWebSoft29 scoreContact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress28 scoreSitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin25 scoreCaptcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms22 score
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scorereCaptcha by BestWebSoft29 scoreContact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress28 scoreSitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin25 scoreCaptcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms22 score
Related Plugins
reCaptcha by BestWebSoft
100k+ active installs
29
Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress
30k+ active installs
28
Sitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin
20k+ active installs
25
22
Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress
10k+ active installs
24
PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin
9k+ active installs
25