Add your custom PHP code snippet from WordPress admin.
58
Score
24
Errors
7
Warnings
+0
Change
Category Scores
Security29
Repo97
Performance100
Maintainability87
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
12
5 issue groups
I18n
10
1 issue group
Maintainability
8
6 issue groups
Repo Compliance
1
1 issue group
ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: DSNP_TEXT10
- Category
- I18n
- Occurrences
- 10
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: DSNP_TEXT
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Sanitization missing for register_setting().
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$disable'.2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$disable'.
ERRORMaintainabilityForbidden PHP function foundThe use of function eval() is forbidden1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The use of function eval() is forbidden
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityPlugin menu slug uses __FILE__Using __FILE__ for menu slugs risks exposing filesystem structure.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Using __FILE__ for menu slugs risks exposing filesystem structure.
ERRORMaintainabilityNo Explicit VersionVersion parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
Show 3 moreShow less
ERRORMaintainabilityinvalid tested upto minor1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 7.0.2 The version number should only include major versions 7.0.
WARNINGRepo Compliancereadme parser warnings too many tags1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
One or more tags were ignored. Please limit your plugin to 5 tags.
ERRORMaintainabilitytrunk stable tag1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Incorrect Stable Tag. It's recommended not to use "Stable Tag: trunk". Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org.
External Connections
Potential connections found in static code analysis.
Outbound calls
6
External assets
0
Incoming endpoints
0
Notable Domains
dessky.com3 · outbound
codemirror.net1 · outbound
Platform / Reference Domains
gnu.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
First score snapshot
v1.1
58
Latest
- Findings
- 31
- Errors
- 24
- Warnings
- 7
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 58 | 31 | 24 | 7 | v1.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Category
Issue
Non Singular String Literal Domain10 findingsUnsafe printing function6 findingsMissing Version3 findingsSetting is missing a sanitization callback2 findingsOutput is not escaped2 findingsForbidden PHP function found1 findingNonce verification recommended1 findingPlugin menu slug uses __FILE__1 finding
Related
WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreClassic Editor63 scoreWooCommerce22 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreWordPress Importer25 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreManageWP Worker23 scoreBreadcrumb NavXT36 scoreThe Events Calendar23 scoreOMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.31 scoreCode Snippets36 score
Plugin
Author
Category
Issue
Non Singular String Literal Domain10 findingsUnsafe printing function6 findingsMissing Version3 findingsSetting is missing a sanitization callback2 findingsOutput is not escaped2 findingsForbidden PHP function found1 findingNonce verification recommended1 findingPlugin menu slug uses __FILE__1 finding
Related
WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreClassic Editor63 scoreWooCommerce22 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreWordPress Importer25 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreManageWP Worker23 scoreBreadcrumb NavXT36 scoreThe Events Calendar23 scoreOMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.31 scoreCode Snippets36 score
Related Plugins
Code Manager
500 active installs
100
WebberZone Snippetz – Header, Body and Footer manager
2k+ active installs
96
88
Code Snippet DM
500 active installs
74
Visual Link Preview
10k+ active installs
66
CodeColorer
1k+ active installs
64