Flex Import is a powerful one-click demo importer plugin built to supercharge your website setup experience.
44
Score
15
Errors
121
Warnings
+5
Change
Category Scores
Security9
Repo100
Performance98
Maintainability69
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
83
9 issue groups
Security
51
5 issue groups
I18n
1
1 issue group
Performance
1
1 issue group
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$allowed".48
- Category
- Maintainability
- Occurrences
- 48
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$allowed".
WARNINGSecurityRequest data is not unslashed$_POST['content_path'] not unslashed before sanitization. Use wp_unslash() or similar20
- Category
- Security
- Occurrences
- 20
- Severity
- warning
Sample message
$_POST['content_path'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.17
- Category
- Security
- Occurrences
- 17
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "get_fleximp_bundle_status".12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "get_fleximp_bundle_status".
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['plugin_main_file']. Check that the array index exists before using it.11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['plugin_main_file']. Check that the array index exists before using it.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORMaintainabilitybadly named filesFile and folder names must not contain spaces or special characters.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['plugins']2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['plugins']
Show 6 moreShow less
WARNINGMaintainabilityNot In Footer2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORSecurityOutput is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'htmlspecialchars'.
WARNINGMaintainabilityMissing Version1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
ERRORI18nMissing Translators Comment1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGPerformancePost Not In exclude1
- Category
- Performance
- Occurrences
- 1
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
ERRORMaintainabilityfive star reviews detected1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Linking directly to 5 stars reviews is not allowed.
External Connections
Potential connections found in static code analysis.
Outbound calls
35
External assets
0
Incoming endpoints
16
Notable Domains
flextheme.net7 · outbound
demo.flextheme.net2 · outbound
fontawesome.com2 · outbound
getbootstrap.com2 · outbound
license.flextheme.net2 · outbound
swiperjs.com2 · outbound
Platform / Reference Domains
w3.org5 · platform/reference
downloads.wordpress.org4 · platform/reference
github.com3 · platform/reference
api.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints16
wp_ajax_fleximp_checked_install_pluginauthenticated
wp_ajax
wp_ajax_fleximp_deactivate_licenseauthenticated
wp_ajax
wp_ajax_fleximp_get_plugin_statusesauthenticated
wp_ajax
wp_ajax_fleximp_get_required_pluginsauthenticated
wp_ajax
wp_ajax_fleximp_import_demo_contentauthenticated
wp_ajax
wp_ajax_fleximp_import_inner_pages_dataauthenticated
wp_ajax
wp_ajax_fleximp_install_activate_themeauthenticated
wp_ajax
wp_ajax_fleximp_install_elementorauthenticated
wp_ajax
wp_ajax_fleximp_install_pluginauthenticated
wp_ajax
wp_ajax_fleximp_install_single_pluginauthenticated
wp_ajax
wp_ajax_fleximp_set_text_domainauthenticated
wp_ajax
wp_ajax_fleximp_uninstall_templateauthenticated
wp_ajax
4 more hidden
Score History
3 score snapshots
v3.1
44
Latest
- Findings
- 136
- Errors
- 15
- Warnings
- 121
- Check
- 2.0.0
v3.0
39
Score
- Findings
- 147
- Errors
- 15
- Warnings
- 132
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 44 | 136 | 15 | 121 | v3.1 | 2.0.0 |
| 39 | 147 | 15 | 132 | v3.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Category
Issue
Domain
Related
Inspiro Starter Sites – 20+ Free Demo Templates for Gutenberg & Elementor35 scoreBlaze Demo Importer36 scoreHashThemes Demo Importer38 scoreTheme Demo Importer and Patterns Library for CozyThemes – Cozy Essential Addons31 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 score
Plugin
Author
Category
Issue
Domain
Related
Inspiro Starter Sites – 20+ Free Demo Templates for Gutenberg & Elementor35 scoreBlaze Demo Importer36 scoreHashThemes Demo Importer38 scoreTheme Demo Importer and Patterns Library for CozyThemes – Cozy Essential Addons31 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 score
Related Plugins
Easy Demo Importer – A Modern One-Click Demo Import Solution
2k+ active installs
100
Easy Demo Import for Omega Themes
400 active installs
42
HashThemes Demo Importer
6k+ active installs
38
Blaze Demo Importer
8k+ active installs
36
Inspiro Starter Sites – 20+ Free Demo Templates for Gutenberg & Elementor
10k+ active installs
35
31