Front End Users

A customizable front end user management plugin for membership sites. Use shortcodes for registration, login, restricting access, membership fees, etc

v3.2.35RustauriusUpdated Added 400 installs82% rating
21
Score
719
Errors
2,759
Warnings
+0
Change

Category Scores

Security0
Repo72
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

3,478 findings

Security

1,799

13 issue groups

Maintainability

1,537

10 issue groups

I18n

84

2 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$Address_Line_One_Field".703
Category
Maintainability
Occurrences
703
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$Address_Line_One_Field".

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.306
Category
Security
Occurrences
306
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityRequest data is not unslashed$_COOKIE[$CookieName] not unslashed before sanitization. Use wp_unslash() or similar286
Category
Security
Occurrences
286
Severity
warning

Sample message

$_COOKIE[$CookieName] not unslashed before sanitization. Use wp_unslash() or similar

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.245
Category
Security
Occurrences
245
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.239
Category
Maintainability
Occurrences
239
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().230
Category
Maintainability
Occurrences
230
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $Order at "SELECT * FROM $ewd_feup_fields_table_name ORDER BY $OrderBy $Order LIMIT %d, 200"216
Category
Security
Occurrences
216
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $Order at "SELECT * FROM $ewd_feup_fields_table_name ORDER BY $OrderBy $Order LIMIT %d, 200"

WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $ewd_feup_fields_table_name used in $wpdb->get_col()194
Category
Security
Occurrences
194
Severity
warning

Sample message

Unescaped parameter $ewd_feup_fields_table_name used in $wpdb->get_col()

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "Add_EWD_FEUP_Field".190
Category
Maintainability
Occurrences
190
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "Add_EWD_FEUP_Field".

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.136
Category
Security
Occurrences
136
Severity
warning

Sample message

Processing form data without nonce verification.

Show 15 more
WARNINGSecurityInput is not validated111
Category
Security
Occurrences
111
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES[$Field_Name]['name']. Check that the array index exists before using it.

ERRORSecurityOutput is not escaped87
Category
Security
Occurrences
87
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" {$username}'>"'.

WARNINGSecurityInput is not sanitized80
Category
Security
Occurrences
80
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE[$CookieName]

ERRORMaintainabilityMissing direct file access protection78
Category
Maintainability
Occurrences
78
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORSecurityException output is not escaped57
Category
Security
Occurrences
57
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Could not parse list url into parts: $url"'.

ERRORSecurityQuoted Simple Placeholder45
Category
Security
Occurrences
45
Severity
error

Sample message

Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%d'.

ERRORI18nMissing Arg Domain42
Category
I18n
Occurrences
42
Severity
error

Sample message

Missing $domain parameter in function call to __().

ERRORI18nText Domain Mismatch42
Category
I18n
Occurrences
42
Severity
error

Sample message

Mismatched text domain. Expected 'front-end-only-users' but got 'EWD_FEUP'.

ERRORMaintainabilitydate date34
Category
Maintainability
Occurrences
34
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGMaintainabilityMissing Version25
Category
Maintainability
Occurrences
25
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNINGMaintainabilityNot In Footer22
Category
Maintainability
Occurrences
22
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERRORSecuritySQL query is not prepared19
Category
Security
Occurrences
19
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $FieldsString

ERRORSecurityDatabase parameter is not escaped17
Category
Security
Occurrences
17
Severity
error

Sample message

Unescaped parameter $Order used in $wpdb->get_results()\n$Order assigned unsafely at line 12.

ERRORMaintainabilitywp function not compatible with requires wp9
Category
Maintainability
Occurrences
9
Severity
error

Sample message

Function "register_block_type()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 3.9.0.

ERRORMaintainabilitystrip tags strip tags7
Category
Maintainability
Occurrences
7
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

External Connections

Potential connections found in static code analysis.

26 domains

Outbound calls

288

External assets

1

Incoming endpoints

11

Notable Domains

php.net10 · outbound
openoffice.org7 · outbound
purl.org5 · outbound
ewbi.blogs.com4 · outbound
sourceforge.net4 · outbound

Platform / Reference Domains

github.com69 · platform/reference
opensource.org66 · platform/reference
w3.org18 · platform/reference
schema.org5 · platform/reference
wordpress.org3 · platform/reference

External Asset Domains

youtube.com1 · asset

Incoming Endpoints

wp_ajax_nopriv_feup_user_eventpublic

wp_ajax

Admin AJAX endpoints10
wp_ajax_ewd_feup_hide_review_askauthenticated

wp_ajax

wp_ajax_ewd_feup_hide_uwpm_bannerauthenticated

wp_ajax

wp_ajax_ewd_feup_send_feedbackauthenticated

wp_ajax

wp_ajax_ewd_feup_update_field_orderauthenticated

wp_ajax

wp_ajax_ewd_feup_update_levels_orderauthenticated

wp_ajax

wp_ajax_feup_send_email_blastauthenticated

wp_ajax

wp_ajax_feup_send_test_emailauthenticated

wp_ajax

wp_ajax_feup_user_eventauthenticated

wp_ajax

wp_ajax_feup-dismiss-wp-pointersauthenticated

wp_ajax

wp_ajax_get_ewd_feup_levelsauthenticated

wp_ajax

Score History

First score snapshot

v3.2.35

21

Latest

Findings
3,478
Errors
719
Warnings
2,759
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

34 nodes

Related Plugins