Essential toolkit for a WordPress site: block editor enhancements, cookie consent, maintenance mode, image optimization, login and more.
81
Score
9
Errors
8
Warnings
+0
Change
Category Scores
Security73
Repo94
Performance100
Maintainability86
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
12
7 issue groups
Security
3
2 issue groups
Repo Compliance
2
2 issue groups
ERRORMaintainabilityOffloaded ContentFound call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $sql2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $sql
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "the_content".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "the_content".
ERRORMaintainabilityOffloaded ContentOffloading images, js, css, and other scripts to your servers or any remote service is disallowed.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$placeholder_base64".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$placeholder_base64".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'base64_decode'.1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'base64_decode'.
WARNINGMaintainabilitymissing composer json fileThe "/vendor" directory using composer exists, but "composer.json" file is missing.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The "/vendor" directory using composer exists, but "composer.json" file is missing.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGRepo Complianceplugin header nonexistent domain pathThe "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
Show 1 moreShow less
WARNINGRepo Compliancereadme parser warnings trimmed section description1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Description" section is too long and was truncated. A maximum of 2500 characters is supported.
External Connections
Potential connections found in static code analysis.
Outbound calls
119
External assets
4
Incoming endpoints
15
Notable Domains
close.technology16 · outbound
php.net5 · outbound
actionscheduler.org4 · outbound
analytics.clientify.net4 · outbound
en.wikipedia.org4 · outbound
googletagmanager.com4 · outbound
Platform / Reference Domains
w3.org27 · platform/reference
github.com12 · platform/reference
wordpress.org4 · platform/reference
core.trac.wordpress.org2 · platform/reference
gnu.org2 · platform/reference
schema.org2 · platform/reference
opensource.org1 · platform/reference
External Asset Domains
accounts.google.com3 · asset + outbound
cdnjs.cloudflare.com3 · asset + outbound
unpkg.com3 · asset + outbound
Incoming Endpoints
/wp-json/frontblocks/v1/google-signinREST
register_rest_route
wp_ajax_nopriv_public
wp_ajax
wp_ajax_nopriv_frbl_get_cookie_notice_configpublic
wp_ajax
wp_ajax_nopriv_frbl_get_cookie_notice_log_noncepublic
wp_ajax
wp_ajax_nopriv_frbl_log_cookie_consentpublic
wp_ajax
wp_ajax_nopriv_frbl_search_postspublic
wp_ajax
Admin AJAX endpoints9
wp_ajax_frbl_dismiss_redundant_plugin_noticeauthenticated
wp_ajax
wp_ajax_frbl_dismiss_review_noticeauthenticated
wp_ajax
wp_ajax_frbl_get_cookie_notice_configauthenticated
wp_ajax
wp_ajax_frbl_get_cookie_notice_log_nonceauthenticated
wp_ajax
wp_ajax_frbl_image_bulk_job_statusauthenticated
wp_ajax
wp_ajax_frbl_list_image_attachment_idsauthenticated
wp_ajax
wp_ajax_frbl_log_cookie_consentauthenticated
wp_ajax
wp_ajax_frbl_search_postsauthenticated
wp_ajax
wp_ajax_frbl_start_image_bulk_jobauthenticated
wp_ajax
Score History
6 score snapshots
v1.5.4
81
Latest
- Findings
- 17
- Errors
- 9
- Warnings
- 8
- Check
- 2.1.0
v1.5.3
81
Score
- Findings
- 17
- Errors
- 9
- Warnings
- 8
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 81 | 17 | 9 | 8 | v1.5.4 | 2.1.0 |
| 81 | 17 | 9 | 8 | v1.5.3 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor23 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreNinja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder24 scoreHappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates23 scorePixelYourSite – Your smart PIXEL (TAG) & API Manager24 scoreWP Go Maps – Google Map, OpenStreetMap, Leaflet Map25 scoreClassic Editor63 scoreClassic Widgets97 scoreAdvanced Editor Tools42 score
Author
Issue
Domain
Related
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor23 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreNinja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder24 scoreHappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates23 scorePixelYourSite – Your smart PIXEL (TAG) & API Manager24 scoreWP Go Maps – Google Map, OpenStreetMap, Leaflet Map25 scoreClassic Editor63 scoreClassic Widgets97 scoreAdvanced Editor Tools42 score
Related Plugins
Crowdsignal Forms
200k+ active installs
100
eRecht24 Legal Texts
50k+ active installs
100
WF Cookie Consent
10k+ active installs
100
Shortcode Redirect
10k+ active installs
100
Gmap Block
10k+ active installs
100
No Gutenberg? – Choose Where to Use the Block Editor or the Classic Editor
9k+ active installs
100