Secure your WordPress site with easy and effective basic authentication. Restrict access, monitor attempts, and enhance security.
46
Score
14
Errors
28
Warnings
+0
Change
Category Scores
Security5
Repo100
Performance100
Maintainability90
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
29
6 issue groups
Maintainability
11
5 issue groups
I18n
2
1 issue group
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_SERVER['HTTP_AUTHORIZATION']10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_SERVER['HTTP_AUTHORIZATION']
WARNINGSecurityRequest data is not unslashed$_SERVER['HTTP_AUTHORIZATION'] not unslashed before sanitization. Use wp_unslash() or similar8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
$_SERVER['HTTP_AUTHORIZATION'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$content_file".5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$content_file".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.5
- Category
- Security
- Occurrences
- 5
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.
ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
Sanitization missing for register_setting().
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORI18nMissing Translators CommentA function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
A function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
Show 2 moreShow less
WARNINGSecurityInput is not validated1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER['PHP_AUTH_PW']. Check that the array index exists before using it.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Easy Basic Authentication – Add basic auth to site or admin area" is different from the name declared in plugin header "Easy Basic Authentication".
External Connections
Potential connections found in static code analysis.
Outbound calls
4
External assets
0
Incoming endpoints
2
Notable Domains
matteoenna.it1 · outbound
Platform / Reference Domains
make.wordpress.org1 · platform/reference
profiles.wordpress.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints2
wp_ajax_easy_basic_authentication_dismiss_noticeauthenticated
wp_ajax
wp_ajax_eba_test_authauthenticated
wp_ajax
Score History
First score snapshot
v4.0.0
46
Latest
- Findings
- 42
- Errors
- 14
- Warnings
- 28
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 46 | 42 | 14 | 28 | v4.0.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreContact Form 769 scoreClassic Editor63 scoreHostinger Tools82 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWPS Hide Login41 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreLogin Security Captcha100 scoreStop XML-RPC Attacks100 score
Author
Category
Issue
Domain
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreContact Form 769 scoreClassic Editor63 scoreHostinger Tools82 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWPS Hide Login41 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreLogin Security Captcha100 scoreStop XML-RPC Attacks100 score
Related Plugins
Login Security Captcha
10k+ active installs
100
Stop XML-RPC Attacks
6k+ active installs
100
Simple Login Log
5k+ active installs
100
Active Directory Integration / LDAP Integration
4k+ active installs
100
Shibboleth
3k+ active installs
100
WP Basic Authentication
2k+ active installs
100