Educare – Students & Result Management System

No. 1 Academic Students & Result Management system for WordPress. Educare helps you effortlessly publish and manage student results online.

v1.6.3FixBDUpdated Added 800 installs92% rating
28
Score
1,114
Errors
1,043
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance100
Maintainability16

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

2,157 findings

Security

1,445

11 issue groups

I18n

490

4 issue groups

Maintainability

208

10 issue groups

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.370
Category
Security
Occurrences
370
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$active_search_form'.322
Category
Security
Occurrences
322
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$active_search_form'.

ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $Class292
Category
I18n
Occurrences
292
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $Class

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.217
Category
Security
Occurrences
217
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGSecurityRequest data is not unslashed$_GET['action_for'] not unslashed before sanitization. Use wp_unslash() or similar158
Category
Security
Occurrences
158
Severity
warning

Sample message

$_GET['action_for'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.123
Category
I18n
Occurrences
123
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES['csv_file']['error']. Check that the array index exists before using it.90
Category
Security
Occurrences
90
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES['csv_file']['error']. Check that the array index exists before using it.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.86
Category
Maintainability
Occurrences
86
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().79
Category
Maintainability
Occurrences
79
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.71
Category
Security
Occurrences
71
Severity
warning

Sample message

Processing form data without nonce verification.

Show 15 more
WARNINGSecurityInput is not sanitized69
Category
Security
Occurrences
69
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES['csv_file']['name']

ERRORI18nMissing Arg Domain68
Category
I18n
Occurrences
68
Severity
error

Sample message

Missing $domain parameter in function call to __().

WARNINGSecurityInterpolated SQL is not prepared67
Category
Security
Occurrences
67
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $all_status_query at "SELECT COUNT(*) FROM $table $all_status_query"

ERRORSecurityDatabase parameter is not escaped31
Category
Security
Occurrences
31
Severity
error

Sample message

Unescaped parameter $get_marks used in $wpdb->get_row()\n$get_marks assigned unsafely at line 158.

ERRORSecuritySQL query is not prepared27
Category
Security
Occurrences
27
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $educare_students

WARNINGSecurityDatabase parameter is not escaped23
Category
Security
Occurrences
23
Severity
warning

Sample message

Unescaped parameter $edb used in $wpdb->query()\n$edb assigned unsafely at line 259.

ERRORMaintainabilityMissing direct file access protection9
Category
Maintainability
Occurrences
9
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityNon-prefixed global variable7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Variable variable which could potentially override an imported global variable detected. Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$field_key".

WARNINGMaintainabilityMissing Version7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

ERRORI18nUnordered Placeholders Text7
Category
I18n
Occurrences
7
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in 'Page %d Of %d'.

WARNINGMaintainabilitySchema Change6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Attempting a database schema change is discouraged.

ERRORMaintainabilitydate date5
Category
Maintainability
Occurrences
5
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGMaintainabilityNon-prefixed function4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_educare_dashboard_widgets".

ERRORMaintainabilityNo Explicit Version3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_style; This means that the WordPress core version will be used which is not recommended for plugin or theme development.

WARNINGMaintainabilityerror log error log2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

External Connections

Potential connections found in static code analysis.

9 domains

Outbound calls

70

External assets

2

Incoming endpoints

21

Notable Domains

fixbd.com24 · outbound
getbootstrap.com2 · outbound
fixbd.net1 · outbound
popper.js.org1 · outbound

Platform / Reference Domains

github.com27 · platform/reference
wordpress.org5 · platform/reference
gnu.org4 · platform/reference
w3.org2 · platform/reference

External Asset Domains

google.com6 · asset + outbound

Incoming Endpoints

wp_ajax_nopriv_educare_change_eventpublic

wp_ajax

wp_ajax_nopriv_educare_results_formpublic

wp_ajax

Admin AJAX endpoints18
wp_ajax_educare_process_marksauthenticated

wp_ajax

wp_ajax_dismiss_educare_renewal_noticeauthenticated

wp_ajax

wp_ajax_educare_activate_licenseauthenticated

wp_ajax

wp_ajax_educare_change_eventauthenticated

wp_ajax

wp_ajax_educare_classauthenticated

wp_ajax

wp_ajax_educare_crud_resultsauthenticated

wp_ajax

wp_ajax_educare_deactivate_licenseauthenticated

wp_ajax

wp_ajax_educare_dismiss_noticeauthenticated

wp_ajax

wp_ajax_educare_get_data_from_studentsauthenticated

wp_ajax

wp_ajax_educare_proccess_grade_systemauthenticated

wp_ajax

wp_ajax_educare_proccess_promote_studentsauthenticated

wp_ajax

wp_ajax_educare_process_contentauthenticated

wp_ajax

6 more hidden

Score History

First score snapshot

v1.6.3

28

Latest

Findings
2,157
Errors
1,114
Warnings
1,043
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

33 nodes

Related Plugins

PowerPack for LearnDash

1k+ active installs

97
Resume Builder

1k+ active installs

74
LearnPress – Course Wishlist

20k+ active installs

56