Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
6
3 issue groups
Maintainability
5
4 issue groups
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $query used in $wpdb->get_col()\n$query used without escaping.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Unescaped parameter $query used in $wpdb->get_col()\n$query used without escaping.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityprevent path disclosure phpinfophpinfo() can lead to full path disclosure.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
phpinfo() can lead to full path disclosure.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.
WARNINGSecuritywp redirect wp redirectwp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_register_style(). This means new versions of the style may not always be loaded due to browser caching.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Resource version not set in call to wp_register_style(). This means new versions of the style may not always be loaded due to browser caching.
ERRORMaintainabilitywp function not compatible with requires wpFunction "wp_doing_ajax()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.0.0.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Function "wp_doing_ajax()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.0.0.
External Connections
Potential connections found in static code analysis.
Outbound calls
7
External assets
0
Incoming endpoints
2
Notable Domains
Platform / Reference Domains
gnu.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_bvadmpublic
wp_ajax
Admin AJAX endpoints1
wp_ajax_bvadmauthenticated
wp_ajax
Score History
3 score snapshots
v6.72
83
Latest
- Findings
- 11
- Errors
- 4
- Warnings
- 7
- Check
- 2.1.0
v6.65
82
Score
- Findings
- 13
- Errors
- 6
- Warnings
- 7
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 83 | 11 | 4 | 7 | v6.72 | 2.1.0 |
| 82 | 13 | 6 | 7 | v6.65 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Related
BlogVault Backup & Staging83 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreUpdraftPlus: WP Backup & Migration Plugin57 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More20 scoreMigrate Guru – Site Migration & Cloning82 scoreBackup Migration21 scoreSiteGround Migrator35 scorePressable Automated Migration83 score
Author
Issue
Related
BlogVault Backup & Staging83 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreUpdraftPlus: WP Backup & Migration Plugin57 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More20 scoreMigrate Guru – Site Migration & Cloning82 scoreBackup Migration21 scoreSiteGround Migrator35 scorePressable Automated Migration83 score
Related Plugins
Database Collation Fix
1k+ active installs
100
Aruba Migration Tool
600 active installs
100
WING Website Migrator
500 active installs
96
Make Paths Relative
2k+ active installs
95
BlogVault Backup & Staging
80k+ active installs
83
Pressable Automated Migration
4k+ active installs
83