FeedWordPress

FeedWordPress syndicates content from feeds you choose into your WordPress weblog.

v2026.0517C. JohnsonUpdated 2026-05-18Added Nov 21, 20079k+ installs84% rating
24
Score
496
Errors
319
Warnings
+0
Change

Category Scores

Security0
Repo91
Performance100
Maintainability0

Top Issues by Category

i18n399
maintainability296
security72

Issues Details

815 issues found in latest scan

ERROR367
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to __().

WARNING57
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_s".

WARNING55
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$N".

ERROR33
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING28
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING27
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNING24
WordPress.DB.PreparedSQL.InterpolatedNotPrepared

Use placeholders and $wpdb->prepare(); found interpolated variable $author at \t\t\tOR TRIM(LCASE(user_login)) = TRIM(LCASE('$author'))\n

WARNING23
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "app_publish_post".

ERROR22
WordPress.WP.I18n.NonSingularStringLiteralText

The $text parameter must be a single text string literal. Found: " second"\n . ( ( 1 == $crash_dt ) ? "" : "s" )

WARNING19
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DEFAULT_SYNDICATION_CATEGORY".

ERROR13
PluginCheck.Security.DirectDB.UnescapedDBParameter

Unescaped parameter $field used in $wpdb->get_var()\n$field used without escaping.

ERROR10
WordPress.DateTime.RestrictedFunctions.date_date

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNING10
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_FILES['opml_upload']['name']

ERROR10
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERROR9
WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

WARNING8
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "FeedFinder".

WARNING8
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_FILES['opml_upload']['tmp_name']. Check that the array index exists before using it.

WARNING8
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_SERVER['REQUEST_METHOD'] not unslashed before sanitization. Use wp_unslash() or similar

WARNING7
WordPress.PHP.DevelopmentFunctions.error_log_trigger_error

trigger_error() found. Debug code should not normally be used in production.

ERROR6
wp_function_not_compatible_with_requires_wp

Function "esc_xml()" requires WordPress 5.5.0, but your plugin minimum supported version is WordPress 4.5.0.

WARNING5
WordPress.DB.SlowDBQuery.slow_db_query_meta_key

Detected usage of meta_key, possible slow query.

WARNING5
WordPress.DB.SlowDBQuery.slow_db_query_meta_value

Detected usage of meta_value, possible slow query.

WARNING5
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

ERROR4
Generic.PHP.BacktickOperator.Found

Use of the backtick operator is forbidden

ERROR4
WordPress.DB.PreparedSQLPlaceholders.QuotedSimplePlaceholder

Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.

Latest Snapshot

Findings

815

Errors

496

Warnings

319

Score History

First score snapshot

First scan completed Jun 20, 2026

v2026.0517 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v2026.0517

24

Latest

Findings
815
Errors
496
Warnings
319
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins