Prioritized issue groups from the latest Plugin Check scan
Security
55
7 issue groups
Maintainability
29
11 issue groups
Repo Compliance
3
3 issue groups
Sample message
Processing form data without nonce verification.
Sample message
Use placeholders and $wpdb->prepare(); found $query
Sample message
Use of a direct database call is discouraged.
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Sample message
Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 117.
Sample message
$_GET[$name] not unslashed before sanitization. Use wp_unslash() or similar
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Sample message
Unescaped parameter $table_name used in $wpdb->get_var()\n$table_name assigned unsafely at line 101.
Sample message
Detected usage of a non-sanitized input variable: $_GET[$name]
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
Sample message
Writing files using ABSPATH may be problematic. Consider using wp_upload_dir() instead if storing user data or generated files.
Sample message
Attempting a database schema change is discouraged.
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
Sample message
Detected usage of a possibly undefined superglobal array index: $_REQUEST['page']. Check that the array index exists before using it.
Sample message
mt_rand() is discouraged. Use the far less predictable wp_rand() instead.
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
Sample message
The "Plugin Name" header in the plugin file is not valid. It needs to contain at least 5 latin letters (a-Z) and/or numbers. This is necessary because the initial plugin slug is generated from the name.
Sample message
The readme description contains unofficial language. It must be written in standard English.
Sample message
The readme short description contains unofficial language. It must be written in standard English.
Potential connections found in static code analysis.
Outbound calls
15
External assets
0
Incoming endpoints
1
No external asset domains detected.
No public endpoints detected.
wp_ajax
First score snapshot
v0.0.7
37
Latest
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 37 | 87 | 31 | 56 | v0.0.7 | 2.0.0 |
Author, categories, issues, domains, and nearby plugins.