A lightweight WordPress plugin for performance, security, cleanup, and everyday tweaks.
62
Score
47
Errors
66
Warnings
-7
Change
Category Scores
Security50
Repo97
Performance100
Maintainability48
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
100
17 issue groups
Security
12
6 issue groups
Repo Compliance
1
1 issue group
ERRORMaintainabilityShort PHP open tag foundShort PHP opening tag used with echo; expected "<?php echo esc_attr ..." but found "<?= esc_attr ..."26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- error
Sample message
Short PHP opening tag used with echo; expected "<?php echo esc_attr ..." but found "<?= esc_attr ..."
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().19
- Category
- Maintainability
- Occurrences
- 19
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$counts".8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$counts".
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $ids at "DELETE FROM $wpdb->term_relationships WHERE term_taxonomy_id IN (SELECT term_taxonomy_id FROM $wpdb->term_taxonomy WHERE term_id IN ($ids))"3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $ids at "DELETE FROM $wpdb->term_relationships WHERE term_taxonomy_id IN (SELECT term_taxonomy_id FROM $wpdb->term_taxonomy WHERE term_id IN ($ids))"
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['items']3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['items']
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DISABLE_WP_CRON".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DISABLE_WP_CRON".
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_SERVER['REQUEST_URI'] not unslashed before sanitization. Use wp_unslash() or similar2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
$_SERVER['REQUEST_URI'] not unslashed before sanitization. Use wp_unslash() or similar
Show 14 moreShow less
ERRORMaintainabilityfive star reviews detected2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Linking directly to 5 stars reviews is not allowed.
WARNINGMaintainabilityABSPATHDetected1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Writing files using ABSPATH may be problematic. Consider using wp_upload_dir() instead if storing user data or generated files.
WARNINGMaintainabilityDynamic hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".
WARNINGSecurityNonce verification recommended1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validated1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER['REQUEST_METHOD']. Check that the array index exists before using it.
ERRORMaintainabilityfile system operations is writable1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORMaintainabilityfile system operations readfile1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: readfile().
ERRORMaintainabilityfile system operations rmdir1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().
ERRORMaintainabilityparse url parse url1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORMaintainabilityinvalid tested upto minor1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 7.0.1 The version number should only include major versions 7.0.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Falcon - WordPress Optimizations & Tweaks" is different from the name declared in plugin header "Falcon".
WARNINGMaintainabilitymissing composer json file1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The "/vendor" directory using composer exists, but "composer.json" file is missing.
WARNINGRepo Complianceplugin header nonexistent domain path1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
WARNINGMaintainabilitytrademarked term1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "Falcon - WordPress Optimizations & Tweaks" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.
External Connections
Potential connections found in static code analysis.
Outbound calls
33
External assets
0
Incoming endpoints
5
Notable Domains
wpfalcon.pro15 · outbound
elu.to3 · outbound
php-fig.org2 · outbound
elightup.com1 · outbound
getcomposer.org1 · outbound
neil-clarke.com1 · outbound
Platform / Reference Domains
github.com2 · platform/reference
wordpress.org2 · platform/reference
developer.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
s.w.org1 · platform/reference
w3.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints5
wp_ajax_falcon_cleanup_countsauthenticated
wp_ajax
wp_ajax_falcon_import_settingsauthenticated
wp_ajax
wp_ajax_falcon_run_cleanupauthenticated
wp_ajax
wp_ajax_falcon_save_settingsauthenticated
wp_ajax
wp_ajax_falcon_test_smtpauthenticated
wp_ajax
Score History
2 score snapshots
v2.11.0
62
Latest
- Findings
- 113
- Errors
- 47
- Warnings
- 66
- Check
- 2.0.0
v2.10.1
69
Score
- Findings
- 50
- Errors
- 29
- Warnings
- 21
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 62 | 113 | 47 | 66 | v2.11.0 | 2.0.0 |
| 69 | 50 | 29 | 21 | v2.10.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreLoco Translate27 scoreMeta Box95 scorePixelYourSite – Your smart PIXEL (TAG) & API Manager24 scoreHappy Addons for Elementor22 scoreLiteSpeed Cache35 scoreJetpack – WP Security, Backup, Speed, & Growth22 score
Author
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreLoco Translate27 scoreMeta Box95 scorePixelYourSite – Your smart PIXEL (TAG) & API Manager24 scoreHappy Addons for Elementor22 scoreLiteSpeed Cache35 scoreJetpack – WP Security, Backup, Speed, & Growth22 score
Related Plugins
Redux Framework
900k+ active installs
100
Modern Image Formats
100k+ active installs
100
Disable Emojis (GDPR friendly)
60k+ active installs
100
Image Placeholders
60k+ active installs
100
Optimization Detective
60k+ active installs
100
Embed Optimizer
50k+ active installs
100