Cookie Banner for GDPR / CCPA – WPLP Cookie Consent

WPLP Cookie Consent helps WordPress website owners display cookie consent banners, manage user preferences, and control third-party scripts in line wi …

v4.3.4WP Legal PagesUpdated Added 9k+ installs94% rating0% support resolved
24
Score
1,201
Errors
1,912
Warnings
+0
Change

Category Scores

Security0
Repo91
Performance100
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

3,113 findings

Maintainability

2,501

12 issue groups

Security

532

11 issue groups

I18n

72

2 issue groups

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$AcceptAllfinalColor".1,293
Category
Maintainability
Occurrences
1,293
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$AcceptAllfinalColor".

ERRORMaintainabilitywp function not compatible with requires wpFunction "get_edit_user_link()" requires WordPress 3.5.0, but your plugin minimum supported version is WordPress 3.3.1.911
Category
Maintainability
Occurrences
911
Severity
error

Sample message

Function "get_edit_user_link()" requires WordPress 3.5.0, but your plugin minimum supported version is WordPress 3.3.1.

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$AcceptAllfinalColor'.199
Category
Security
Occurrences
199
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$AcceptAllfinalColor'.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.101
Category
Maintainability
Occurrences
101
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().90
Category
Maintainability
Occurrences
90
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGSecurityMissing Unslash$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar79
Category
Security
Occurrences
79
Severity
warning

Sample message

$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityRecommendedProcessing form data without nonce verification.71
Category
Security
Occurrences
71
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: "Maximum duration of Cookies: ".$vendor->cookieMaxAgeSeconds/(60 * 60 * 24). " days"66
Category
I18n
Occurrences
66
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: "Maximum duration of Cookies: ".$vendor->cookieMaxAgeSeconds/(60 * 60 * 24). " days"

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_GET['_wpnonce']56
Category
Security
Occurrences
56
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['_wpnonce']

WARNINGSecurityMissingProcessing form data without nonce verification.41
Category
Security
Occurrences
41
Severity
warning

Sample message

Processing form data without nonce verification.

Show 15 more
WARNINGSecurityInput Not Validated38
Category
Security
Occurrences
38
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['activated_key']. Check that the array index exists before using it.

WARNINGMaintainabilityNon Prefixed Hookname Found29
Category
Maintainability
Occurrences
29
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wpl_dnsmpd_column_' . $column_name".

WARNINGSecurityInterpolated Not Prepared24
Category
Security
Occurrences
24
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $fieldname at "SELECT count(*) from {$wpdb->prefix}wpl_data_req WHERE email = %s and $fieldname=1"

WARNINGMaintainabilityupgrade notice limit22
Category
Maintainability
Occurrences
22
Severity
warning

Sample message

The upgrade notice for "1.7.6" exceeds the limit of 300 characters.

WARNINGMaintainabilityNon Prefixed Function Found20
Category
Maintainability
Occurrences
20
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_gdpr_cookie_consent".

ERRORMaintainabilitymissing direct file access protection18
Category
Maintainability
Occurrences
18
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGSecurityUnescaped DBParameter15
Category
Security
Occurrences
15
Severity
warning

Sample message

Unescaped parameter $advanced_scripts_table used in $wpdb->get_results()\n$advanced_scripts_table assigned unsafely at line 11004.

WARNINGMaintainabilityerror log error log6
Category
Maintainability
Occurrences
6
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

ERRORI18nMissing Arg Domain6
Category
I18n
Occurrences
6
Severity
error

Sample message

Missing $domain parameter in function call to __().

WARNINGMaintainabilityslow db query meta query5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WARNINGSecuritywp redirect wp redirect5
Category
Security
Occurrences
5
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WARNINGMaintainabilityNon Prefixed Class Found3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "WC_AM_Client_2_7_WPGDPR".

WARNINGMaintainabilityNon Prefixed Constant Found3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "BASE_PATH".

WARNINGSecurityUnfinished Prepare2
Category
Security
Occurrences
2
Severity
warning

Sample message

Replacement variables found, but no valid placeholders found in the query.

WARNINGSecurityUnnecessary Prepare2
Category
Security
Occurrences
2
Severity
warning

Sample message

It is not necessary to prepare a query which doesn't use variable replacement.

Score History

First score snapshot

v4.3.4

24

Latest

Findings
3,113
Errors
1,201
Warnings
1,912
Check
2.0.0

Related Plugins

Disable Emojis (GDPR friendly)

60k+ active installs

100
consentmanager Cookie Banner

5k+ active installs

98
Flexible Cookies

3k+ active installs

97
96
Local Google Fonts

100k+ active installs

93