Fast. Flexible. Forward-thinking solution for real estate agents using WordPress. Built for scale, listing management and works with any theme.
52
Score
22
Errors
63
Warnings
+3
Change
Category Scores
Security27
Repo91
Performance80
Maintainability75
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Performance
34
3 issue groups
Maintainability
28
10 issue groups
Security
20
6 issue groups
Repo Compliance
2
2 issue groups
WARNINGPerformancePost Not In excludeUsing exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.30
- Category
- Performance
- Occurrences
- 30
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[WP_SESSION_COOKIE]7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[WP_SESSION_COOKIE]
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $available_loc_query used in $wpdb->get_col()\n$available_loc_query assigned unsafely at line 1265.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Unescaped parameter $available_loc_query used in $wpdb->get_col()\n$available_loc_query assigned unsafely at line 1265.
WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$field'.4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$field'.
ERRORMaintainabilityDeprecated parameter: get_terms parameter 2The parameter "$args" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
The parameter "$args" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
WARNINGSecurityRequest data is not unslashed$_COOKIE[WP_SESSION_COOKIE] not unslashed before sanitization. Use wp_unslash() or similar3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_COOKIE[WP_SESSION_COOKIE] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGPerformancePost Not In post not inUsing exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.3
- Category
- Performance
- Occurrences
- 3
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
Show 12 moreShow less
WARNINGMaintainabilityNo Caching2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilityplugin updater detected2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: class EPL_SL_Plugin_Updater
WARNINGMaintainabilityupdate modification detected2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
WARNINGMaintainabilityslow db query meta key1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta value1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGSecurityMissing nonce verification1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityNonce verification recommended1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORPerformanceSuppress Filters suppress filters1
- Category
- Performance
- Occurrences
- 1
- Severity
- error
Sample message
Setting `suppress_filters` to `true` is prohibited.
ERRORMaintainabilityinvalid tested upto minor1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 7.0.2 The version number should only include major versions 7.0.
WARNINGRepo Complianceplugin header invalid domain path1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must start with forward slash.
ERRORRepo Complianceplugin header no license1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
External Connections
Potential connections found in static code analysis.
Outbound calls
260
External assets
0
Incoming endpoints
19
Notable Domains
easypropertylistings.com.au41 · outbound
php.net22 · outbound
codex.easypropertylistings.com.au12 · outbound
jqueryui.com4 · outbound
maps.googleapis.com3 · outbound
xdsoft.net3 · outbound
Platform / Reference Domains
opensource.org132 · platform/reference
codex.wordpress.org8 · platform/reference
developer.wordpress.org3 · platform/reference
github.com3 · platform/reference
w3.org3 · platform/reference
gnu.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_epl_contact_capture_actionpublic
wp_ajax
wp_ajax_nopriv_epl_search_listingpublic
wp_ajax
wp_ajax_nopriv_epl_update_default_viewpublic
wp_ajax
Admin AJAX endpoints16
wp_ajax_contact_tags_updateauthenticated
wp_ajax
wp_ajax_epl_contact_capture_actionauthenticated
wp_ajax
wp_ajax_epl_contact_category_updateauthenticated
wp_ajax
wp_ajax_epl_contact_get_activity_tableauthenticated
wp_ajax
wp_ajax_epl_contact_get_listing_tableauthenticated
wp_ajax
wp_ajax_epl_contact_tag_removeauthenticated
wp_ajax
wp_ajax_epl_images_save_orderauthenticated
wp_ajax
wp_ajax_epl_images_unattachauthenticated
wp_ajax
wp_ajax_epl_search_contactauthenticated
wp_ajax
wp_ajax_epl_search_contact_listingauthenticated
wp_ajax
wp_ajax_epl_search_listingauthenticated
wp_ajax
wp_ajax_epl_search_userauthenticated
wp_ajax
4 more hidden
Score History
2 score snapshots
v3.5.25
52
Latest
- Findings
- 85
- Errors
- 22
- Warnings
- 63
- Check
- 2.0.0
v3.5.24
49
Score
- Findings
- 126
- Errors
- 60
- Warnings
- 66
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 52 | 85 | 22 | 63 | v3.5.25 | 2.0.0 |
| 49 | 126 | 60 | 66 | v3.5.24 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Post Not In exclude30 findingsMissing direct file access protection9 findingsInput is not sanitized7 findingsDatabase parameter is not escaped4 findingsslow db query meta query4 findingsOutput is not escaped4 findingsDeprecated parameter: get_terms parameter 24 findingsRequest data is not unslashed3 findings
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWooCommerce22 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreAdvanced Custom Fields (ACF®)23 scoreGoogle for WooCommerce37 scoreDirectorist: AI-Powered Business Directory, Listings & Classified Ads22 scoreAdvanced Queries86 scoreBA Book Everything23 scoreBusiness Directory Plugin – Easy Listing Directories for WordPress23 score
Author
Issue
Post Not In exclude30 findingsMissing direct file access protection9 findingsInput is not sanitized7 findingsDatabase parameter is not escaped4 findingsslow db query meta query4 findingsOutput is not escaped4 findingsDeprecated parameter: get_terms parameter 24 findingsRequest data is not unslashed3 findings
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWooCommerce22 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreAdvanced Custom Fields (ACF®)23 scoreGoogle for WooCommerce37 scoreDirectorist: AI-Powered Business Directory, Listings & Classified Ads22 scoreAdvanced Queries86 scoreBA Book Everything23 scoreBusiness Directory Plugin – Easy Listing Directories for WordPress23 score
Related Plugins
HivePress Favorites
7k+ active installs
99
WPCasa Advanced Search
600 active installs
99
HivePress Authentication
1k+ active installs
98
ERE Colors – Essential Real Estate Add-On
1k+ active installs
92
ERE Similar Properties – Essential Real Estate Add-On
1k+ active installs
91
HivePress Reviews
7k+ active installs
90