Favorites for any post type. Easily add favoriting/liking, wishlists, or any other similar functionality using the developer-friendly API.
39
Score
187
Errors
123
Warnings
+2
Change
Category Scores
Security0
Repo97
Performance100
Maintainability70
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
238
9 issue groups
Maintainability
70
10 issue groups
I18n
1
1 issue group
Repo Compliance
1
1 issue group
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.140
- Category
- Security
- Occurrences
- 140
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.37
- Category
- Security
- Occurrences
- 37
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$attrs".34
- Category
- Maintainability
- Occurrences
- 34
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$attrs".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$anonymous_label'.30
- Category
- Security
- Occurrences
- 30
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$anonymous_label'.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "get_anonymous_users_who_favourited_post".18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "get_anonymous_users_who_favourited_post".
WARNINGSecurityRequest data is not unslashed$_COOKIE['simplefavorites'] not unslashed before sanitization. Use wp_unslash() or similar12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
$_COOKIE['simplefavorites'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE['simplefavorites']6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE['simplefavorites']
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().5
- Category
- Security
- Occurrences
- 5
- Severity
- error
Sample message
Sanitization missing for register_setting().
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['postid']. Check that the array index exists before using it.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['postid']. Check that the array index exists before using it.
Show 11 moreShow less
WARNINGMaintainabilityNon-prefixed hook name3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "the_content".
WARNINGSecurityNonce verification recommended3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilitywp function not compatible with requires wp3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Function "get_the_permalink()" requires WordPress 3.9.0, but your plugin minimum supported version is WordPress 3.8.0.
WARNINGMaintainabilityNot In Footer2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGMaintainabilityDirect Query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecuritySQL query is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
ERRORMaintainabilitystrip tags strip tags1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
ERRORI18nText Domain Mismatch1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched text domain. Expected 'favorites' but got 'sscblog'.
WARNINGRepo Compliancereadme parser warnings too many tags1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
One or more tags were ignored. Please limit your plugin to 5 tags.
WARNINGMaintainabilityupgrade notice limit1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The upgrade notice for "1.2.0" exceeds the limit of 300 characters.
External Connections
Potential connections found in static code analysis.
Outbound calls
7
External assets
0
Incoming endpoints
12
Notable Domains
Platform / Reference Domains
github.com3 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_favorites_arraypublic
wp_ajax
wp_ajax_nopriv_favorites_clearpublic
wp_ajax
wp_ajax_nopriv_favorites_cookie_consentpublic
wp_ajax
wp_ajax_nopriv_favorites_favoritepublic
wp_ajax
wp_ajax_nopriv_favorites_listpublic
wp_ajax
wp_ajax_nopriv_favorites_totalcountpublic
wp_ajax
Admin AJAX endpoints6
wp_ajax_favorites_arrayauthenticated
wp_ajax
wp_ajax_favorites_clearauthenticated
wp_ajax
wp_ajax_favorites_cookie_consentauthenticated
wp_ajax
wp_ajax_favorites_favoriteauthenticated
wp_ajax
wp_ajax_favorites_listauthenticated
wp_ajax
wp_ajax_favorites_totalcountauthenticated
wp_ajax
Score History
2 score snapshots
v2.3.7
39
Latest
- Findings
- 310
- Errors
- 187
- Warnings
- 123
- Check
- 2.0.0
v2.3.6
37
Score
- Findings
- 325
- Errors
- 204
- Warnings
- 121
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 39 | 310 | 187 | 123 | v2.3.7 | 2.0.0 |
| 37 | 325 | 204 | 121 | v2.3.6 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Related
HivePress Favorites99 scoreI Recommend This – Love/Like Button for WordPress Posts87 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreNested Pages27 scoreComments Like Dislike41 score
Plugin
Author
Issue
Related
HivePress Favorites99 scoreI Recommend This – Love/Like Button for WordPress Posts87 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreNested Pages27 scoreComments Like Dislike41 score
Related Plugins
Bookmark Card
700 active installs
100
HivePress Favorites
8k+ active installs
99
CBX Bookmark & Favorite
1k+ active installs
99
I Recommend This – Love/Like Button for WordPress Posts
5k+ active installs
87
Admin Bookmarks
500 active installs
76
FireCask Like & Share Button
400 active installs
54