Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search

A fully featured, easy-to-use documentation plugin with AI chat, search, FAQs, and quizzes. Build beautiful knowledge bases, docs, and wikis.

v17.211.0echopluginsUpdated 2026-06-10Added Jan 10, 201710k+ installs98% rating100% support resolved
27
Score
289
Errors
751
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance98
Maintainability12

Top Issues by Category

security508
maintainability474
i18n44

Issues Details

1,040 issues found in latest scan

ERROR208
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$article_class_escaped'.

WARNING134
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$args".

WARNING107
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING106
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNING76
WordPress.DB.PreparedSQL.InterpolatedNotPrepared

Use placeholders and $wpdb->prepare(); found interpolated variable $column at "SELECT $column FROM $this->table_name WHERE $this->primary_key = %s LIMIT 1;"

WARNING50
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

WARNING44
WordPress.WP.EnqueuedResourceParameters.NotInFooter

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERROR44
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNING38
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_COOKIE[$key] not unslashed before sanitization. Use wp_unslash() or similar

WARNING35
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "elay_block_config".

WARNING31
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $messages_table used in $wpdb->get_var()

WARNING29
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_COOKIE[$key]

WARNING23
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

WARNING23
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_COOKIE[$key]. Check that the array index exists before using it.

ERROR16
WordPress.DB.PreparedSQL.NotPrepared

Use placeholders and $wpdb->prepare(); found $column

ERROR12
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $sql used in $wpdb->get_col()\n$sql assigned unsafely at line 842.

WARNING9
WordPress.DB.DirectDatabaseQuery.SchemaChange

Attempting a database schema change is discouraged.

ERROR8
wp_function_not_compatible_with_requires_wp

Function "get_block_template()" requires WordPress 5.8.0, but your plugin minimum supported version is WordPress 5.3.0.

WARNING7
Squiz.PHP.DiscouragedFunctions.Discouraged

The use of function set_time_limit() is discouraged

WARNING7
WordPress.DB.SlowDBQuery.slow_db_query_tax_query

Detected usage of tax_query, possible slow query.

WARNING6
WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".

WARNING4
WordPress.DB.SlowDBQuery.slow_db_query_meta_key

Detected usage of meta_key, possible slow query.

WARNING4
WordPress.WP.EnqueuedResourceParameters.MissingVersion

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

WARNING3
WordPress.PHP.DevelopmentFunctions.error_log_print_r

print_r() found. Debug code should not normally be used in production.

WARNING2
WordPress.DB.PreparedSQLPlaceholders.UnfinishedPrepare

Replacement variables found, but no valid placeholders found in the query.

Latest Snapshot

Findings

1,040

Errors

289

Warnings

751

Score History

First score snapshot

First scan completed Jun 20, 2026

v17.211.0 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v17.211.0

27

Latest

Findings
1,040
Errors
289
Warnings
751
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins