WP CTA – Call Now Button, Sticky Button & Call to Action Builder

WordPress Call To Action builder that creates sticky buttons, call now buttons and CTAs to boost clicks, increase sales and generate leads.

v2.3.0Blend MediaUpdated Added 2k+ installs88% rating
36
Score
1
Errors
433
Warnings
+0
Change

Category Scores

Security4
Repo94
Performance100
Maintainability50

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

434 findings

Maintainability

400

12 issue groups

Security

33

9 issue groups

Repo Compliance

1

1 issue group

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$CTA_Query".280
Category
Maintainability
Occurrences
280
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$CTA_Query".

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.45
Category
Maintainability
Occurrences
45
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().43
Category
Maintainability
Occurrences
43
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGMaintainabilityMixedFile has mixed line endings; this may cause incorrect results17
Category
Maintainability
Occurrences
17
Severity
warning

Sample message

File has mixed line endings; this may cause incorrect results

WARNINGSecurityRecommendedProcessing form data without nonce verification.12
Category
Security
Occurrences
12
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInterpolated Not PreparedUse placeholders and $wpdb->prepare(); found interpolated variable $placeholders at "DELETE FROM {$wpdb->sticky_cta_options} WHERE option_name IN ($placeholders)"5
Category
Security
Occurrences
5
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $placeholders at "DELETE FROM {$wpdb->sticky_cta_options} WHERE option_name IN ($placeholders)"

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_FILES['cta-import']['tmp_name']4
Category
Security
Occurrences
4
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES['cta-import']['tmp_name']

WARNINGSecurityInput Not ValidatedDetected usage of a possibly undefined superglobal array index: $_FILES['cta-import']['tmp_name']. Check that the array index exists before using it.4
Category
Security
Occurrences
4
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES['cta-import']['tmp_name']. Check that the array index exists before using it.

WARNINGMaintainabilitySchema ChangeAttempting a database schema change is discouraged.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

Show 12 more
WARNINGSecurityUnfinished Prepare2
Category
Security
Occurrences
2
Severity
warning

Sample message

Replacement variables found, but no valid placeholders found in the query.

WARNINGMaintainabilityNon Prefixed Function Found2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "get_easy_sticky_sidebar".

WARNINGMaintainabilityNon Prefixed Hookname Found2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "after_appsero_license_section".

WARNINGSecuritywp redirect wp redirect2
Category
Security
Occurrences
2
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WARNINGSecurityMissing Unslash2
Category
Security
Occurrences
2
Severity
warning

Sample message

$_POST['SSuprydp_content_option_text'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilitytrademarked term2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "WP CTA - Call Now Button, Sticky Button & Call to Action Builder" - contains the restricted term "wp" which cannot be used at all in your plugin name.

WARNINGSecurityUnescaped DBParameter1
Category
Security
Occurrences
1
Severity
warning

Sample message

Unescaped parameter $table_name used in $wpdb->get_var()

WARNINGMaintainabilityDynamic Hookname Found1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->client->slug . '_tracker_data'".

WARNINGMaintainabilityerror log print r1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

WARNINGSecurityMissing1
Category
Security
Occurrences
1
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityMissing Version1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

Score History

First score snapshot

v2.3.0

36

Latest

Findings
434
Errors
1
Warnings
433
Check
2.0.0

Related Plugins