A lightweight WordPress plugin for performance, security, cleanup, and everyday tweaks.
67
Score
4
Errors
67
Warnings
+0
Change
Category Scores
Security50
Repo100
Performance100
Maintainability73
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
59
11 issue groups
Security
12
6 issue groups
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$cleanup".10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$cleanup".
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $ids at "DELETE FROM $wpdb->term_relationships WHERE term_taxonomy_id IN (SELECT term_taxonomy_id FROM $wpdb->term_taxonomy WHERE term_id IN ($ids))"3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $ids at "DELETE FROM $wpdb->term_relationships WHERE term_taxonomy_id IN (SELECT term_taxonomy_id FROM $wpdb->term_taxonomy WHERE term_id IN ($ids))"
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['items']3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['items']
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DISABLE_WP_CRON".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DISABLE_WP_CRON".
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_SERVER['REQUEST_URI'] not unslashed before sanitization. Use wp_unslash() or similar2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
$_SERVER['REQUEST_URI'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityABSPATHDetectedWriting files using ABSPATH may be problematic. Consider using wp_upload_dir() instead if storing user data or generated files.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Writing files using ABSPATH may be problematic. Consider using wp_upload_dir() instead if storing user data or generated files.
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".
Show 7 moreShow less
WARNINGSecurityNonce verification recommended1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validated1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER['REQUEST_METHOD']. Check that the array index exists before using it.
ERRORMaintainabilityfile system operations is writable1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORMaintainabilityfile system operations readfile1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: readfile().
ERRORMaintainabilityfile system operations rmdir1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().
ERRORMaintainabilityparse url parse url1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Falcon - Cache, Performance, Security, Cleanup, and Tweaks" is different from the name declared in plugin header "Falcon".
External Connections
Potential connections found in static code analysis.
Outbound calls
33
External assets
0
Incoming endpoints
5
Notable Domains
wpfalcon.pro15 · outbound
elu.to3 · outbound
php-fig.org2 · outbound
elightup.com1 · outbound
getcomposer.org1 · outbound
neil-clarke.com1 · outbound
Platform / Reference Domains
github.com2 · platform/reference
wordpress.org2 · platform/reference
developer.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
s.w.org1 · platform/reference
w3.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints5
wp_ajax_falcon_cleanup_countsauthenticated
wp_ajax
wp_ajax_falcon_import_settingsauthenticated
wp_ajax
wp_ajax_falcon_run_cleanupauthenticated
wp_ajax
wp_ajax_falcon_save_settingsauthenticated
wp_ajax
wp_ajax_falcon_test_smtpauthenticated
wp_ajax
Score History
4 score snapshots
v2.11.2
67
Latest
- Findings
- 71
- Errors
- 4
- Warnings
- 67
- Check
- 2.0.0
v2.11.1
67
Score
- Findings
- 72
- Errors
- 4
- Warnings
- 68
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 67 | 71 | 4 | 67 | v2.11.2 | 2.0.0 |
| 67 | 72 | 4 | 68 | v2.11.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
LiteSpeed Cache35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreImage Optimization – Compress Images and Convert to WebP or AVIF87 scoreLoginizer25 scoreManageWP Worker23 scoreSpeed Optimizer – The All-In-One Performance-Boosting Plugin74 scoreModern Image Formats100 scoreSlim SEO – AI SEO Plugin, Lightweight, Fast & Automated91 score
Author
Issue
Domain
Related
LiteSpeed Cache35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreImage Optimization – Compress Images and Convert to WebP or AVIF87 scoreLoginizer25 scoreManageWP Worker23 scoreSpeed Optimizer – The All-In-One Performance-Boosting Plugin74 scoreModern Image Formats100 scoreSlim SEO – AI SEO Plugin, Lightweight, Fast & Automated91 score
Related Plugins
Modern Image Formats
100k+ active installs
100
Disable Emojis (GDPR friendly)
60k+ active installs
100
Optimization Detective
60k+ active installs
100
Image Placeholders
60k+ active installs
100
Embed Optimizer
50k+ active installs
100
Image Prioritizer
40k+ active installs
100