Replace your old login/registration form with an interactive popup & inline form design
25
Score
183
Errors
521
Warnings
+1
Change
Category Scores
Security0
Repo94
Performance100
Maintainability2
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
591
13 issue groups
I18n
60
6 issue groups
Security
47
6 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active".244
- Category
- Maintainability
- Occurrences
- 244
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active".
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'xoo_as_setting_sidebar_'.$adminObj->helper->slug".166
- Category
- Maintainability
- Occurrences
- 166
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'xoo_as_setting_sidebar_'.$adminObj->helper->slug".
ERRORMaintainabilitywp function not compatible with requires wpFunction "array_is_list()" requires WordPress 6.5.0, but your plugin minimum supported version is WordPress 3.0.1.100
- Category
- Maintainability
- Occurrences
- 100
- Severity
- error
Sample message
Function "array_is_list()" requires WordPress 6.5.0, but your plugin minimum supported version is WordPress 3.0.1.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "xoo_clean".35
- Category
- Maintainability
- Occurrences
- 35
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "xoo_clean".
ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: $this->plugin_slug17
- Category
- I18n
- Occurrences
- 17
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: $this->plugin_slug
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "Xoo_ELPOF_Core".16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Xoo_ELPOF_Core".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['style']'.13
- Category
- Security
- Occurrences
- 13
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['style']'.
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.13
- Category
- I18n
- Occurrences
- 13
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $args['description']10
- Category
- I18n
- Occurrences
- 10
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $args['description']
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed constant8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "XOO_AFF_URL".
ERRORI18nMissing Arg Domain8
- Category
- I18n
- Occurrences
- 8
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORI18nText Domain Mismatch7
- Category
- I18n
- Occurrences
- 7
- Severity
- error
Sample message
Mismatched text domain. Expected 'easy-login-woocommerce' but got "elw-addon-profile".
WARNINGSecurityMissing nonce verification6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validated6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['_wpnonce']. Check that the array index exists before using it.
WARNINGMaintainabilityMissing Version6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
ERRORI18nUnordered Placeholders Text5
- Category
- I18n
- Occurrences
- 5
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in '%s cannot be more than %s.'.
WARNINGMaintainabilityNo PHP code found4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.
WARNINGSecurityRequest data is not unslashed4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
$_GET['tab'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitized3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['xoo_el_reg_pass']
ERRORMaintainabilityMissing direct file access protection3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "Login & Register Forms – Popup, Slider, Profile & WooCommerce" - contains the restricted term "woocommerce" which cannot be used within in your plugin name, unless your plugin name contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your name.
WARNINGMaintainabilityMixed line endings2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
File has mixed line endings; this may cause incorrect results
ERRORMaintainabilityOffloaded Content2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityNot In Footer2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
External Connections
Potential connections found in static code analysis.
Outbound calls
88
External assets
3
Incoming endpoints
10
Notable Domains
docs.xootix.com16 · outbound
demo.xootix.com12 · outbound
xootix.com11 · outbound
farbelous.github.io4 · outbound
jqueryui.com4 · outbound
api.jqueryui.com2 · outbound
Platform / Reference Domains
github.com11 · platform/reference
wordpress.org8 · platform/reference
opensource.org4 · platform/reference
w3.org2 · platform/reference
External Asset Domains
cdn.jsdelivr.net2 · asset
maps.googleapis.com2 · asset + outbound
Incoming Endpoints
wp_ajax_nopriv_xoo_el_code_form_submitpublic
wp_ajax
wp_ajax_nopriv_xoo_el_form_actionpublic
wp_ajax
Admin AJAX endpoints8
wp_ajax_xoo_admin_settings_exportauthenticated
wp_ajax
wp_ajax_xoo_admin_settings_importauthenticated
wp_ajax
wp_ajax_xoo_admin_settings_saveauthenticated
wp_ajax
wp_ajax_xoo_aff_reset_settingsauthenticated
wp_ajax
wp_ajax_xoo_aff_save_settingsauthenticated
wp_ajax
wp_ajax_xoo_el_code_form_submitauthenticated
wp_ajax
wp_ajax_xoo_el_form_actionauthenticated
wp_ajax
wp_ajax_xoo_elpof_update_profileauthenticated
wp_ajax
Score History
12 score snapshots
v4.0.2
25
Latest
- Findings
- 704
- Errors
- 183
- Warnings
- 521
- Check
- 2.0.0
v4.0.1
24
Score
- Findings
- 702
- Errors
- 184
- Warnings
- 518
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 25 | 704 | 183 | 521 | v4.0.2 | 2.0.0 |
| 24 | 702 | 184 | 518 | v4.0.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Non-prefixed global variable244 findingsNon-prefixed hook name166 findingswp function not compatible with requires wp100 findingsNon-prefixed function35 findingsNon Singular String Literal Domain17 findingsNon-prefixed class16 findingsNonce verification recommended15 findingsOutput is not escaped13 findings
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreSide Cart Woocommerce | Woocommerce Cart27 scoreWP-Members Membership Plugin24 scoreUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor21 scoreWP Events Manager27 scoreNew User Approve24 scoreUsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP23 scoreLogin With Ajax – Fast Logins, 2FA, Redirects23 scoreCart Popup for WooCommerce51 score
Author
Category
Issue
Non-prefixed global variable244 findingsNon-prefixed hook name166 findingswp function not compatible with requires wp100 findingsNon-prefixed function35 findingsNon Singular String Literal Domain17 findingsNon-prefixed class16 findingsNonce verification recommended15 findingsOutput is not escaped13 findings
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreSide Cart Woocommerce | Woocommerce Cart27 scoreWP-Members Membership Plugin24 scoreUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor21 scoreWP Events Manager27 scoreNew User Approve24 scoreUsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP23 scoreLogin With Ajax – Fast Logins, 2FA, Redirects23 scoreCart Popup for WooCommerce51 score
Related Plugins
miniOrange OTP Login, Verification and SMS Notifications
5k+ active installs
99
Users Registration Date
2k+ active installs
98
Allow Cyrillic Usernames
600 active installs
98
Clean Login
6k+ active installs
97
WebConnex Form Management
500 active installs
97
Show User Registration Date
900 active installs
96