Security headers are directives used by web applications to configure browser-side security defenses.
88
Score
2
Errors
6
Warnings
+0
Change
Category Scores
Security82
Repo89
Performance100
Maintainability100
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
5
2 issue groups
Repo Compliance
2
2 issue groups
I18n
1
1 issue group
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['fpd_headers_import_json']1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['fpd_headers_import_json']
ERRORRepo Complianceoutdated tested upto headerTested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
ERRORRepo Complianceplugin header no licenseMissing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
External Connections
Potential connections found in static code analysis.
Outbound calls
2
External assets
0
Incoming endpoints
6
Notable Domains
firstpagedigital.sg1 · outbound
linkedin.com1 · outbound
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/firstpage-sg-security-headers/v1/csp-reportREST
register_rest_route
Admin AJAX endpoints5
admin_post_fpd_headers_clear_csp_reportsauthenticated
admin_post
admin_post_fpd_headers_export_settingsauthenticated
admin_post
admin_post_fpd_headers_import_settingsauthenticated
admin_post
admin_post_fpd_headers_reset_settingsauthenticated
admin_post
admin_post_fpd_headers_test_headersauthenticated
admin_post
Score History
First score snapshot
v1.4.0
88
Latest
- Findings
- 8
- Errors
- 2
- Warnings
- 6
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 88 | 8 | 2 | 6 | v1.4.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Related
HTTP Headers59 scoreContent Security Policy Manager68 scoreHTTP Security Header99 scoreSecurity Header Generator87 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreHostinger Tools82 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 score
Plugin
Author
Issue
Related
HTTP Headers59 scoreContent Security Policy Manager68 scoreHTTP Security Header99 scoreSecurity Header Generator87 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreHostinger Tools82 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 score
Related Plugins
HTTP Security Header
1k+ active installs
99
Security Header Generator
500 active installs
87
Content Security Policy Manager
2k+ active installs
68
HTTP Headers
50k+ active installs
59