FV Simpler SEO

Simple and effective SEO. Non-invasive, elegant. Ideal for client facing projects.

v1.9.7FolioVisionUpdated Added 2k+ installs92% rating100% support resolved
24
Score
766
Errors
308
Warnings
+0
Change

Category Scores

Security0
Repo83
Performance98
Maintainability7

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

1,074 findings

Security

625

10 issue groups

I18n

330

4 issue groups

Maintainability

92

11 issue groups

ERRORI18nText Domain MismatchMismatched text domain. Expected 'fv-all-in-one-seo-pack' but got "fv_seo".272
Category
I18n
Occurrences
272
Severity
error

Sample message

Mismatched text domain. Expected 'fv-all-in-one-seo-pack' but got "fv_seo".

ERRORSecurityUnsafe Printing FunctionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.244
Category
Security
Occurrences
244
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$aImage[0]'.128
Category
Security
Occurrences
128
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$aImage[0]'.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_POST['aiosp_dont_use_desc_for_excerpt']101
Category
Security
Occurrences
101
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['aiosp_dont_use_desc_for_excerpt']

WARNINGSecurityMissing Unslash$_POST['aiosp_dont_use_desc_for_excerpt'] not unslashed before sanitization. Use wp_unslash() or similar101
Category
Security
Occurrences
101
Severity
warning

Sample message

$_POST['aiosp_dont_use_desc_for_excerpt'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.35
Category
I18n
Occurrences
35
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGSecurityInput Not ValidatedDetected usage of a possibly undefined superglobal array index: $_POST['fv_seo_category_update_nonce']. Check that the array index exists before using it.23
Category
Security
Occurrences
23
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['fv_seo_category_update_nonce']. Check that the array index exists before using it.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.14
Category
Maintainability
Occurrences
14
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().14
Category
Maintainability
Occurrences
14
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: "<p>Please check the latest changes below:</p><ol>".$sNotices."</ol>"13
Category
I18n
Occurrences
13
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: "<p>Please check the latest changes below:</p><ol>".$sNotices."</ol>"

Show 15 more
WARNINGMaintainabilityslow db query meta key12
Category
Maintainability
Occurrences
12
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

ERRORMaintainabilitycurl curl setopt12
Category
Maintainability
Occurrences
12
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilitydate date10
Category
Maintainability
Occurrences
10
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORMaintainabilitystrip tags strip tags10
Category
Maintainability
Occurrences
10
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

ERRORI18nMissing Arg Domain10
Category
I18n
Occurrences
10
Severity
error

Sample message

Missing $domain parameter in function call to __().

WARNINGSecurityRecommended8
Category
Security
Occurrences
8
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORSecurityUnescaped DBParameter6
Category
Security
Occurrences
6
Severity
error

Sample message

Unescaped parameter $desc_meta_value used in $wpdb->get_results()\n$desc_meta_value assigned unsafely at line 3194.

WARNINGSecurityInterpolated Not Prepared6
Category
Security
Occurrences
6
Severity
warning

Sample message

Use placeholders and $wpdb-&gt;prepare(); found interpolated variable $desc_meta_value at WHERE meta_key = &#039;$desc_meta_value&#039;\n

WARNINGMaintainabilityNon Prefixed Variable Found6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$FV_Events&quot;.

WARNINGSecurityMissing6
Category
Security
Occurrences
6
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon Prefixed Class Found4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FV_Events&quot;.

WARNINGMaintainabilityNon Prefixed Function Found4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;fv_simpler_seo_meta_fields_auth_always_allow&quot;.

ERRORMaintainabilitymissing direct file access protection4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityNon Prefixed Hookname Found2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;fv_get_adjacent_post_where_post_types&quot;.

WARNINGSecuritywp redirect wp redirect2
Category
Security
Occurrences
2
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the &quot;allowed_redirect_hosts&quot; filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

Score History

First score snapshot

v1.9.7

24

Latest

Findings
1,074
Errors
766
Warnings
308
Check
2.0.0

Related Plugins

wp_head() cleaner

2k+ active installs

100
Custom Post Exporter

3k+ active installs

99
Header and Footer Scripts

200k+ active installs

99
ICS Calendar

10k+ active installs

99
IndexMeNow

2k+ active installs

99