Easy to use tools to help make your website GDPR-compliant. Fully documented, extendable and developer-friendly. Extensions to enterprise GDPR compli …
23
Score
1,277
Errors
498
Warnings
+0
Change
Category Scores
Security0
Repo88
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
833
9 issue groups
Maintainability
810
11 issue groups
I18n
101
5 issue groups
ERRORMaintainabilityShort PHP open tag foundShort PHP opening tag used with echo; expected "<?php echo ! ..." but found "<?= ! ..."526
- Category
- Maintainability
- Occurrences
- 526
- Severity
- error
Sample message
Short PHP opening tag used with echo; expected "<?php echo ! ..." but found "<?= ! ..."
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<a href='{$helpUrl}' target='_blank'>"'.497
- Category
- Security
- Occurrences
- 497
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<a href='{$helpUrl}' target='_blank'>"'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;124
- Category
- Maintainability
- Occurrences
- 124
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.89
- Category
- Security
- Occurrences
- 89
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_COOKIE['gdpr_key'] not unslashed before sanitization. Use wp_unslash() or similar67
- Category
- Security
- Occurrences
- 67
- Severity
- warning
Sample message
$_COOKIE['gdpr_key'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.63
- Category
- Security
- Occurrences
- 63
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['gdpr-step']. Check that the array index exists before using it.49
- Category
- Security
- Occurrences
- 49
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['gdpr-step']. Check that the array index exists before using it.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.41
- Category
- Maintainability
- Occurrences
- 41
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $content38
- Category
- I18n
- Occurrences
- 38
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $content
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().36
- Category
- Maintainability
- Occurrences
- 36
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Show 15 moreShow less
WARNINGSecurityInput is not sanitized28
- Category
- Security
- Occurrences
- 28
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE['gdpr_key']
WARNINGMaintainabilityNon-prefixed global variable25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$arg".
ERRORI18nMissing Arg Domain24
- Category
- I18n
- Occurrences
- 24
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGSecurityInterpolated SQL is not prepared23
- Category
- Security
- Occurrences
- 23
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $column at "SELECT $column FROM $this->tableName WHERE $column_where = %s LIMIT 1;"
WARNINGMaintainabilityMissing Version18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
ERRORI18nMissing Translators Comment15
- Category
- I18n
- Occurrences
- 15
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORI18nText Domain Mismatch13
- Category
- I18n
- Occurrences
- 13
- Severity
- error
Sample message
Mismatched text domain. Expected 'gdpr-framework' but got '(Admin)'.
WARNINGMaintainabilityNot In Footer12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORSecurityUnsafe printing function11
- Category
- Security
- Occurrences
- 11
- Severity
- error
Sample message
All output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.
ERRORI18nUnordered Placeholders Text11
- Category
- I18n
- Occurrences
- 11
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'Go to %sTools > Data443 GDPR%s and make sure all fields are filled in.'.
WARNINGMaintainabilityNon-prefixed hook name10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'bs_db_post_insert_' . $type".
WARNINGSecurityDatabase parameter is not escaped6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Unescaped parameter $table_name used in $wpdb->get_results()\n$table_name assigned unsafely at line 158.
WARNINGMaintainabilityNon-prefixed function6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "TermAndConditionWithPrivacyContent".
WARNINGMaintainabilityerror log trigger error6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
ERRORMaintainabilitybadly named files6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
External Connections
Potential connections found in static code analysis.
Outbound calls
87
External assets
1
Incoming endpoints
7
Notable Domains
data443.atlassian.net12 · outbound
data443.com11 · outbound
dataprotection.ie3 · outbound
api.ipify.org2 · outbound
carlalexander.ca2 · outbound
ec.europa.eu2 · outbound
Platform / Reference Domains
github.com5 · platform/reference
wordpress.org5 · platform/reference
External Asset Domains
orders.data443.com5 · asset + outbound
Incoming Endpoints
wp_ajax_nopriv_donot_sell_save_postpublic
wp_ajax
wp_ajax_nopriv_gdpr_add_consent_accept_cookiespublic
wp_ajax
wp_ajax_nopriv_gdpr_add_consent_deny_cookiespublic
wp_ajax
wp_ajax_nopriv_validation_privacysafepublic
wp_ajax
Admin AJAX endpoints3
wp_ajax_donot_sell_save_postauthenticated
wp_ajax
wp_ajax_gdpr_add_consent_accept_cookiesauthenticated
wp_ajax
wp_ajax_gdpr_add_consent_deny_cookiesauthenticated
wp_ajax
Score History
2 score snapshots
v2.4.0
23
Latest
- Findings
- 1,775
- Errors
- 1,277
- Warnings
- 498
- Check
- 2.0.0
v2.3.0
23
Score
- Findings
- 1,804
- Errors
- 1,287
- Warnings
- 517
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 23 | 1,775 | 1,277 | 498 | v2.4.0 | 2.0.0 |
| 23 | 1,804 | 1,287 | 517 | v2.3.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreLoco Translate27 scoreMeta Box95 scorePixelYourSite – Your smart PIXEL (TAG) & API Manager24 scoreHappy Addons for Elementor22 scoreComplianz – GDPR/CCPA Cookie Consent24 scoreCookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice)87 score
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreLoco Translate27 scoreMeta Box95 scorePixelYourSite – Your smart PIXEL (TAG) & API Manager24 scoreHappy Addons for Elementor22 scoreComplianz – GDPR/CCPA Cookie Consent24 scoreCookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice)87 score
Related Plugins
Disable Emojis (GDPR friendly)
60k+ active installs
100
eRecht24 Legal Texts
50k+ active installs
100
WF Cookie Consent
10k+ active installs
100
EU Withdrawal Compliance
1k+ active installs
100
CookieRay – Cookie Banner for Cookie Consent (GDPR/CCPA Compliant)
600 active installs
100
Show Me The Cookies
400 active installs
100