Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
132
8 issue groups
Maintainability
97
14 issue groups
I18n
26
3 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$after_title'.65
- Category
- Security
- Occurrences
- 65
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$after_title'.
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "ALLOW_ALL_EXTERNAL_SITES".33
- Category
- Maintainability
- Occurrences
- 33
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "ALLOW_ALL_EXTERNAL_SITES".
ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: YIW_TEXT_DOMAIN22
- Category
- I18n
- Occurrences
- 22
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: YIW_TEXT_DOMAIN
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET[$property]21
- Category
- Security
- Occurrences
- 21
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET[$property]
WARNINGSecurityRequest data is not unslashed$_GET[$property] not unslashed before sanitization. Use wp_unslash() or similar21
- Category
- Security
- Occurrences
- 21
- Severity
- warning
Sample message
$_GET[$property] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_SERVER['DOCUMENT_ROOT']. Check that the array index exists before using it.17
- Category
- Security
- Occurrences
- 17
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER['DOCUMENT_ROOT']. Check that the array index exists before using it.
ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "YIW_add_featured".10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "YIW_add_featured".
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityBacktick operator foundUse of the backtick operator is forbidden6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
Use of the backtick operator is forbidden
Show 15 moreShow less
ERRORMaintainabilityfile system operations fclose5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations touch5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: touch().
ERRORMaintainabilityfile system operations fopen4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityMissing direct file access protection4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed global variable3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$ALLOWED_SITES".
WARNINGSecurityMissing nonce verification3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nNon Singular String Literal Text3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $this->description
WARNINGMaintainabilityNon-prefixed class2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Featured_posts".
ERRORSecurityUnsafe printing function2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityNonce verification recommended2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilitycurl curl close2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
ERRORSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Unescaped parameter $queryStr used in $wpdb->get_results()\n$queryStr assigned unsafely at line 259.
WARNINGMaintainabilityDiscouraged PHP function1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilityDirect Query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
External Connections
Potential connections found in static code analysis.
Outbound calls
14
External assets
0
Incoming endpoints
0
Notable Domains
code.google.com3 · outbound
binarymoon.co.uk1 · outbound
cutycapt.svn.sourceforge.net1 · outbound
en.yourinspirationweb.com1 · outbound
markmaunder.com1 · outbound
yourinspirationweb.com1 · outbound
Platform / Reference Domains
codex.wordpress.org3 · platform/reference
gnu.org2 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
First score snapshot
v1.5.2
24
Latest
- Findings
- 280
- Errors
- 158
- Warnings
- 122
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 280 | 158 | 122 | v1.5.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Issue
Domain
Related
Header and Footer Scripts99 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreRegenerate Thumbnails82 scoreForce Regenerate Thumbnails35 scoreGenerateBlocks97 scorePost Duplicator60 score
Issue
Domain
Related
Header and Footer Scripts99 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreRegenerate Thumbnails82 scoreForce Regenerate Thumbnails35 scoreGenerateBlocks97 scorePost Duplicator60 score
Related Plugins
Gallery with thumbnail slider
3k+ active installs
100
Custom Posts Per Page Reloaded
700 active installs
100
Header and Footer Scripts
200k+ active installs
99
Essential Widgets
10k+ active installs
99
Translation with DeepL API
4k+ active installs
99
Thumbnail Upscale
3k+ active installs
99