FV Player 8

WordPress's most reliable, easy to use and feature-rich video player. Supports playlists, ads, stats and user video position saving.

v8.1.5FolioVisionUpdated Added 1k+ installs80% rating
24
Score
323
Errors
1,383
Warnings
+0
Change

Category Scores

Security0
Repo97
Performance96
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

1,706 findings

Maintainability

977

14 issue groups

Security

554

8 issue groups

I18n

117

3 issue groups

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "FV_Player_Bunny_Stream".190
Category
Maintainability
Occurrences
190
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "FV_Player_Bunny_Stream".

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.187
Category
Maintainability
Occurrences
187
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().174
Category
Maintainability
Occurrences
174
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"\t\t\t<video:$videoTag>$videoTagValue</video:$videoTag>\n"'.157
Category
Security
Occurrences
157
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"\t\t\t<video:$videoTag>$videoTagValue</video:$videoTag>\n"'.

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;&#039;fv_flowplayer_buttons_&#039;.$key&quot;.151
Category
Maintainability
Occurrences
151
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;&#039;fv_flowplayer_buttons_&#039;.$key&quot;.

WARNINGSecurityRequest data is not unslashed$_COOKIE[$cookie_name] not unslashed before sanitization. Use wp_unslash() or similar117
Category
Security
Occurrences
117
Severity
warning

Sample message

$_COOKIE[$cookie_name] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$FV_Player_Checker&quot;.109
Category
Maintainability
Occurrences
109
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$FV_Player_Checker&quot;.

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES[&#039;file_chunk&#039;][&#039;error&#039;]. Check that the array index exists before using it.91
Category
Security
Occurrences
91
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES[&#039;file_chunk&#039;][&#039;error&#039;]. Check that the array index exists before using it.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.83
Category
Security
Occurrences
83
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FV_Player_BunnyCDN_Rewrite&quot;.62
Category
Maintainability
Occurrences
62
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FV_Player_BunnyCDN_Rewrite&quot;.

Show 15 more
ERRORI18nText Domain Mismatch47
Category
I18n
Occurrences
47
Severity
error

Sample message

Mismatched text domain. Expected 'fv-player' but got 'bbpress'.

ERRORI18nMissing Arg Domain39
Category
I18n
Occurrences
39
Severity
error

Sample message

Missing $domain parameter in function call to __().

WARNINGSecurityMissing nonce verification36
Category
Security
Occurrences
36
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORI18nMissing Translators Comment31
Category
I18n
Occurrences
31
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGMaintainabilityslow db query meta key26
Category
Maintainability
Occurrences
26
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WARNINGSecurityInput is not sanitized26
Category
Security
Occurrences
26
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_FILES[&#039;file_chunk&#039;]

WARNINGSecurityDatabase parameter is not escaped23
Category
Security
Occurrences
23
Severity
warning

Sample message

Unescaped parameter $date_query used in $wpdb-&gt;get_results()\n$date_query assigned unsafely at line 452.

WARNINGMaintainabilityslow db query meta value22
Category
Maintainability
Occurrences
22
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

WARNINGSecurityInterpolated SQL is not prepared21
Category
Security
Occurrences
21
Severity
warning

Sample message

Use placeholders and $wpdb-&gt;prepare(); found interpolated variable $order at &quot;SELECT * FROM `{$wpdb-&gt;prefix}fv_player_encoding_jobs` $where ORDER BY $order_by $order LIMIT %d, %d&quot;

WARNINGMaintainabilityNot In Footer17
Category
Maintainability
Occurrences
17
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WARNINGMaintainabilitySchema Change13
Category
Maintainability
Occurrences
13
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WARNINGMaintainabilityerror log print r9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

ERRORMaintainabilityMissing direct file access protection8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityerror log trigger error5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

trigger_error() found. Debug code should not normally be used in production.

ERRORMaintainabilitydate date4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

External Connections

Potential connections found in static code analysis.

71 domains

Outbound calls

269

External assets

0

Incoming endpoints

31

Notable Domains

docs.aws.amazon.com26 · outbound
foliovision.com21 · outbound
youtube.com11 · outbound
video.bunnycdn.com7 · outbound
api.bunny.net6 · outbound

Platform / Reference Domains

github.com67 · platform/reference
w3.org19 · platform/reference
gnu.org13 · platform/reference
schema.org4 · platform/reference
opensource.org3 · platform/reference
core.trac.wordpress.org1 · platform/reference
downloads.wordpress.org1 · platform/reference
plugins.trac.wordpress.org1 · platform/reference
wordpress.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

wp_ajax_nopriv_fv_wp_flowplayer_email_signuppublic

wp_ajax

Admin AJAX endpoints27
wp_ajax_fv_foliopress_ajax_pointersauthenticated

wp_ajax

wp_ajax_fv_player_authenticated

wp_ajax

wp_ajax_flowplayer_conversion_scriptauthenticated

wp_ajax

wp_ajax_fv_flowplayer_settings_saveauthenticated

wp_ajax

wp_ajax_fv_player_db_cloneauthenticated

wp_ajax

wp_ajax_fv_player_db_exportauthenticated

wp_ajax

wp_ajax_fv_player_db_importauthenticated

wp_ajax

wp_ajax_fv_player_db_loadauthenticated

wp_ajax

wp_ajax_fv_player_db_removeauthenticated

wp_ajax

wp_ajax_fv_player_db_retrieve_all_players_for_dropdownauthenticated

wp_ajax

wp_ajax_fv_player_db_saveauthenticated

wp_ajax

wp_ajax_fv_player_edit_posts_cellauthenticated

wp_ajax

15 more hidden

Score History

First score snapshot

v8.1.5

24

Latest

Findings
1,706
Errors
323
Warnings
1,383
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins