Trusted by 30,000+ WordPress sites · IAB Europe TCF v2.3 Registered · Google Certified CMP Partner · Setup in under 5 minutes, no coding required · No …
25
Score
1,250
Errors
1,929
Warnings
+0
Change
Category Scores
Security0
Repo97
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
2,542
12 issue groups
Security
523
10 issue groups
I18n
101
3 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$AcceptAllfinalColor".1,313
- Category
- Maintainability
- Occurrences
- 1,313
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$AcceptAllfinalColor".
ERRORMaintainabilitywp function not compatible with requires wpFunction "get_edit_user_link()" requires WordPress 3.5.0, but your plugin minimum supported version is WordPress 3.3.1.927
- Category
- Maintainability
- Occurrences
- 927
- Severity
- error
Sample message
Function "get_edit_user_link()" requires WordPress 3.5.0, but your plugin minimum supported version is WordPress 3.3.1.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$AcceptAllfinalColor'.201
- Category
- Security
- Occurrences
- 201
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$AcceptAllfinalColor'.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.102
- Category
- Maintainability
- Occurrences
- 102
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().91
- Category
- Maintainability
- Occurrences
- 91
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityRequest data is not unslashed$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar78
- Category
- Security
- Occurrences
- 78
- Severity
- warning
Sample message
$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.66
- Category
- Security
- Occurrences
- 66
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: "Maximum duration of Cookies: ".$vendor->cookieMaxAgeSeconds/(60 * 60 * 24). " days"66
- Category
- I18n
- Occurrences
- 66
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: "Maximum duration of Cookies: ".$vendor->cookieMaxAgeSeconds/(60 * 60 * 24). " days"
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['_wpnonce']56
- Category
- Security
- Occurrences
- 56
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['_wpnonce']
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['activated_key']. Check that the array index exists before using it.38
- Category
- Security
- Occurrences
- 38
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['activated_key']. Check that the array index exists before using it.
Show 15 moreShow less
WARNINGSecurityMissing nonce verification36
- Category
- Security
- Occurrences
- 36
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed hook name29
- Category
- Maintainability
- Occurrences
- 29
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wpl_dnsmpd_column_' . $column_name".
ERRORI18nText Domain Mismatch29
- Category
- I18n
- Occurrences
- 29
- Severity
- error
Sample message
Mismatched text domain. Expected 'gdpr-cookie-consent' but got "wplegalpages".
WARNINGSecurityInterpolated SQL is not prepared25
- Category
- Security
- Occurrences
- 25
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $fieldname at "SELECT count(*) from {$wpdb->prefix}wpl_data_req WHERE email = %s and $fieldname=1"
WARNINGMaintainabilityupgrade notice limit25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- warning
Sample message
The upgrade notice for "1.7.6" exceeds the limit of 300 characters.
WARNINGMaintainabilityNon-prefixed function20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_gdpr_cookie_consent".
ERRORMaintainabilityMissing direct file access protection18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityDatabase parameter is not escaped16
- Category
- Security
- Occurrences
- 16
- Severity
- warning
Sample message
Unescaped parameter $advanced_scripts_table used in $wpdb->get_results()\n$advanced_scripts_table assigned unsafely at line 11081.
WARNINGMaintainabilityerror log error log6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORI18nMissing Arg Domain6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGMaintainabilityslow db query meta query5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGSecuritywp redirect wp redirect5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
WARNINGMaintainabilityNon-prefixed class3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WC_AM_Client_2_7_WPGDPR".
WARNINGMaintainabilityNon-prefixed constant3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "BASE_PATH".
WARNINGSecurityUnfinished Prepare2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
External Connections
Potential connections found in static code analysis.
Outbound calls
256
External assets
0
Incoming endpoints
44
Notable Domains
club.wpeka.com71 · outbound
wplegalpages.com26 · outbound
app.wplegalpages.com21 · outbound
vuejs.org4 · outbound
en.wikipedia.org2 · outbound
html.spec.whatwg.org2 · outbound
Platform / Reference Domains
w3.org107 · platform/reference
github.com9 · platform/reference
gnu.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_data_reqs_form_submitpublic
wp_ajax
wp_ajax_nopriv_gdpr_cookie_consent_deactivate_popuppublic
wp_ajax
wp_ajax_nopriv_gdpr_fire_scriptspublic
wp_ajax
Admin AJAX endpoints41
admin_post_gdpr_export_consent_logs_csvauthenticated
admin_post
admin_post_gdpr_export_data_req_csvauthenticated
admin_post
admin_post_gdpr_policies_export.csvauthenticated
admin_post
wp_ajax_ab_testing_enableauthenticated
wp_ajax
wp_ajax_data_reqs_form_submitauthenticated
wp_ajax
wp_ajax_gcc_auto_generated_bannerauthenticated
wp_ajax
wp_ajax_gcc_clear_schedule_scanauthenticated
wp_ajax
wp_ajax_gcc_enable_iabauthenticated
wp_ajax
wp_ajax_gcc_get_preview_banner_stateauthenticated
wp_ajax
wp_ajax_gcc_get_schedule_scanauthenticated
wp_ajax
wp_ajax_gcc_restore_default_settingsauthenticated
wp_ajax
wp_ajax_gcc_save_abtesting_settingsauthenticated
wp_ajax
29 more hidden
Score History
6 score snapshots
v4.3.9
25
Latest
- Findings
- 3,179
- Errors
- 1,250
- Warnings
- 1,929
- Check
- 2.0.0
v4.3.8
25
Score
- Findings
- 3,133
- Errors
- 1,214
- Warnings
- 1,919
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 25 | 3,179 | 1,250 | 1,929 | v4.3.9 | 2.0.0 |
| 25 | 3,133 | 1,214 | 1,919 | v4.3.8 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice)99 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreCookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice)87 scoreGDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law33 scoreiubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more60 scoreCookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode49 score
Author
Category
Issue
Domain
Related
WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice)99 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreCookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice)87 scoreGDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law33 scoreiubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more60 scoreCookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode49 score
Related Plugins
WF Cookie Consent
10k+ active installs
100
CookieRay – Cookie Banner for Cookie Consent (GDPR/CCPA Compliant)
600 active installs
100
Kansleri Cookie Consent
400 active installs
100
99
consentmanager Cookie Banner
5k+ active installs
98
Simple Cookie Notice
2k+ active installs
98