PluginScore

Delisho – Recipe Widgets and Blocks

Delisho includes 12+ Elementor Widgets and 4 Gutenberg blocks for WP Delicious plugin to create a beautiful and SEO-friendly food blog.

v1.1.6WP DeliciousUpdated Added 1k+ installs0% rating
cookingelementorfoodrecipeswidgets
34
Score
60
Errors
355
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance70
Maintainability62

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

415 findings

Security

252

6 issue groups

Maintainability

117

8 issue groups

Performance

44

2 issue groups

I18n

1

1 issue group

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['all_term_id']113
Category
Security
Occurrences
113
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['all_term_id']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGSecurityRequest data is not unslashed$_POST['all_term_id'] not unslashed before sanitization. Use wp_unslash() or similar111
Category
Security
Occurrences
111
Severity
warning

Sample message

$_POST['all_term_id'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
WARNINGMaintainabilityslow db query tax queryDetected usage of tax_query, possible slow query.28
Category
Maintainability
Occurrences
28
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_tax_query
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.27
Category
Maintainability
Occurrences
27
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

WordPress.WP.EnqueuedResourceParameters.MissingVersion
WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.22
Category
Maintainability
Occurrences
22
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_key
WARNINGPerformancePost Not In post not inUsing exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.22
Category
Performance
Occurrences
22
Severity
warning

Sample message

Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_post__not_in
ERRORPerformanceSuppress Filters suppress filtersSetting `suppress_filters` to `true` is prohibited.22
Category
Performance
Occurrences
22
Severity
error

Sample message

Setting `suppress_filters` to `true` is prohibited.

WordPressVIPMinimum.Performance.WPQueryParams.SuppressFilters_suppress_filters
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.18
Category
Maintainability
Occurrences
18
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_error_log
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$output'.17
Category
Security
Occurrences
17
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$output'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;12
Category
Maintainability
Occurrences
12
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
Show 8 more
ERRORMaintainabilityblock api version too low8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

Editor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility.

block_api_version_too_lowReference
WARNINGSecurityInput is not validated5
Category
Security
Occurrences
5
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['nonce']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGSecurityNonce verification recommended4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGSecurityMissing nonce verification2
Category
Security
Occurrences
2
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
WARNINGI18nDiscouraged text-domain loading1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFoundReference
WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Delisho - Recipe Widgets and Blocks" is different from the name declared in plugin header "Delisho".

mismatched_plugin_nameReference
WARNINGMaintainabilitymissing composer json file1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The "/vendor" directory using composer exists, but "composer.json" file is missing.

missing_composer_json_fileReference
ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.8 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

outdated_tested_upto_headerReference

External Connections

Potential connections found in static code analysis.

14 domains

Outbound calls

178

External assets

0

Incoming endpoints

21

Notable Domains

wpdelicious.com71 · outbound
wpdeliciousdemo.com44 · outbound
blossomthemes.com8 · outbound
blossomthemesdemo.com7 · outbound
php-fig.org2 · outbound
swiperjs.com2 · outbound

Platform / Reference Domains

w3.org35 · platform/reference
github.com3 · platform/reference
gnu.org1 · platform/reference
wordpress.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

/wp-json/drwidgetsblocks/v1/save_block_css/REST

register_rest_route

wp_ajax_nopriv_dr_widgets_blocks_recipe_paginationpublic

wp_ajax

wp_ajax_nopriv_dr_widgets_blocks_recipe_pagination_twopublic

wp_ajax

wp_ajax_nopriv_dr_widgets_blocks_recipe_post_list_onepublic

wp_ajax

wp_ajax_nopriv_dr_widgets_blocks_recipe_post_list_threepublic

wp_ajax

wp_ajax_nopriv_dr_widgets_blocks_recipe_post_list_twopublic

wp_ajax

Admin AJAX endpoints15
wp_ajax_dr_widgets_blocks_get_block_settingsauthenticated

wp_ajax

wp_ajax_dr_widgets_blocks_get_fonts_listauthenticated

wp_ajax

wp_ajax_dr_widgets_blocks_get_image_sizesauthenticated

wp_ajax

wp_ajax_dr_widgets_blocks_get_latest_changelogauthenticated

wp_ajax

wp_ajax_dr_widgets_blocks_get_recipe_postsauthenticated

wp_ajax

wp_ajax_dr_widgets_blocks_get_widget_settingsauthenticated

wp_ajax

wp_ajax_dr_widgets_blocks_recipe_paginationauthenticated

wp_ajax

wp_ajax_dr_widgets_blocks_recipe_pagination_twoauthenticated

wp_ajax

wp_ajax_dr_widgets_blocks_recipe_post_list_oneauthenticated

wp_ajax

wp_ajax_dr_widgets_blocks_recipe_post_list_threeauthenticated

wp_ajax

wp_ajax_dr_widgets_blocks_recipe_post_list_twoauthenticated

wp_ajax

wp_ajax_dr_widgets_blocks_save_block_settingsauthenticated

wp_ajax

3 more hidden

Score History

First score snapshot

v1.1.6

34

Latest

Findings
415
Errors
60
Warnings
355
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

Easy Elements for Elementor – Addons & Website Templates

1k+ active installs

100
Input Mask For Elementor Form Fields

20k+ active installs

100
Language Switcher for Elementor & Polylang

400 active installs

100
MarqueeAll – Elementor Marquee for Image, Text, Post Grid, Testimonial, Cryptocurrency & News Ticker 🌀

1k+ active installs

100
Popup for Elementor

700 active installs

100
Animation Pack

800 active installs

99