Speed up your WordPress site with a persistent object cache, powered by OPcache. An efficient alternative to Redis and Memcached.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
428
9 issue groups
Maintainability
334
14 issue groups
I18n
20
2 issue groups
ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$act'.173
- Category
- Security
- Occurrences
- 173
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$act'.
WARNINGSecurityRecommendedProcessing form data without nonce verification.95
- Category
- Security
- Occurrences
- 95
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$DOCKET_CACHE_CODESTUB_FALSE".86
- Category
- Maintainability
- Occurrences
- 86
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$DOCKET_CACHE_CODESTUB_FALSE".
WARNINGMaintainabilityNon Prefixed Hookname FoundHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "docketcache/action/cleanuppost".64
- Category
- Maintainability
- Occurrences
- 64
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "docketcache/action/cleanuppost".
WARNINGSecurityMissing Unslash$_GET['action'] not unslashed before sanitization. Use wp_unslash() or similar59
- Category
- Security
- Occurrences
- 59
- Severity
- warning
Sample message
$_GET['action'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.40
- Category
- Maintainability
- Occurrences
- 40
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_FILES['dcimportfile']39
- Category
- Security
- Occurrences
- 39
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['dcimportfile']
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.33
- Category
- Maintainability
- Occurrences
- 33
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().31
- Category
- Maintainability
- Occurrences
- 31
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityMissingProcessing form data without nonce verification.22
- Category
- Security
- Occurrences
- 22
- Severity
- warning
Sample message
Processing form data without nonce verification.
Show 15 moreShow less
ERRORMaintainabilityfile system operations is writable20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORSecurityNot Prepared17
- Category
- Security
- Occurrences
- 17
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $dbname
WARNINGMaintainabilityNon Prefixed Function Found16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "wp_cache_add".
ERRORMaintainabilitywp function not compatible with requires wp14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- error
Sample message
Function "wp_cache_flush_group()" requires WordPress 6.1.0, but your plugin minimum supported version is WordPress 5.4.0.
ERRORSecurityUnescaped DBParameter13
- Category
- Security
- Occurrences
- 13
- Severity
- error
Sample message
Unescaped parameter $key used in $wpdb->query()\n$key assigned unsafely at line 258.
ERRORMaintainabilitydate date12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORI18nMissing Arg Domain10
- Category
- I18n
- Occurrences
- 10
- Severity
- error
Sample message
Missing $domain parameter in function call to esc_html__().
ERRORI18nNon Singular String Literal Text10
- Category
- I18n
- Occurrences
- 10
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: _n('%1$s memory of %2$s file', '%1$s memory of %2$s files', $opcache->dcfiles, 'docket-cache')
WARNINGSecurityInterpolated Not Prepared6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$key} at "DELETE FROM `{$wpdb->options}` WHERE `option_name`='_site_transient_timeout_{$key}'"
WARNINGMaintainabilityerror log var export5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
var_export() found. Debug code should not normally be used in production.
WARNINGMaintainabilityNon Prefixed Constant Found4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DISABLE_NAG_NOTICES".
WARNINGSecurityInput Not Validated4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['vcache']. Check that the array index exists before using it.
WARNINGMaintainabilityDiscouraged3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The use of function set_time_limit() is discouraged
ERRORMaintainabilityfile system operations fclose3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
Score History
First score snapshot
v26.04.04
25
Latest
- Findings
- 814
- Errors
- 333
- Warnings
- 481
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 25 | 814 | 333 | 481 | v26.04.04 | 2.0.0 |