Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.
25
Score
1,304
Errors
242
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
999
20 issue groups
Security
478
4 issue groups
I18n
24
1 issue group
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;692
- Category
- Maintainability
- Occurrences
- 692
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$function_name does not exist."'.434
- Category
- Security
- Occurrences
- 434
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$function_name does not exist."'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$alias".112
- Category
- Maintainability
- Occurrences
- 112
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$alias".
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.34
- Category
- Maintainability
- Occurrences
- 34
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "U_IDNA_ACE_PREFIX_ERROR".28
- Category
- Maintainability
- Occurrences
- 28
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "U_IDNA_ACE_PREFIX_ERROR".
WARNINGI18nText Domain MismatchMismatched text domain. Expected 'google-site-kit' but got 'default'.24
- Category
- I18n
- Occurrences
- 24
- Severity
- warning
Sample message
Mismatched text domain. Expected 'google-site-kit' but got 'default'.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Since {$package} {$version}: "'.22
- Category
- Security
- Occurrences
- 22
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Since {$package} {$version}: "'.
ERRORMaintainabilityfile system operations fcloseFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilitywp function not compatible with requires wpFunction "str_contains()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.2.0.15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
Function "str_contains()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.2.0.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_ENV['SSH_AUTH_SOCK']12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_ENV['SSH_AUTH_SOCK']
Show 15 moreShow less
ERRORMaintainabilityfile system operations fopen12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
WARNINGMaintainabilityerror log set error handler11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
set_error_handler() found. Debug code should not normally be used in production.
WARNINGSecurityRequest data is not unslashed10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
$_SERVER['HTTP_USER_AGENT'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityfile system operations fputs10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fputs().
ERRORMaintainabilityForbidden PHP function found9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
The use of function eval() is forbidden
ERRORMaintainabilityparse url parse url9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
WARNINGMaintainabilityerror log var export8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
var_export() found. Debug code should not normally be used in production.
ERRORMaintainabilitycurl curl init8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGMaintainabilityerror log trigger error7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
WARNINGMaintainabilityNon-prefixed hook name6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "https_ssl_verify".
ERRORMaintainabilityfile system operations fread5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().
ERRORMaintainabilityfile system operations fwrite5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilityrand mt rand5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
mt_rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORMaintainabilitydate date4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityDynamic hook name4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".
External Connections
Potential connections found in static code analysis.
Outbound calls
300
External assets
0
Incoming endpoints
0
Notable Domains
googleapis.com36 · outbound
googletagmanager.com28 · outbound
policies.google.com18 · outbound
support.google.com12 · outbound
sitekit.withgoogle.com10 · outbound
reactjs.org6 · outbound
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
3 score snapshots
v1.183.0
25
Latest
- Findings
- 1,546
- Errors
- 1,304
- Warnings
- 242
- Check
- 2.0.0
v1.182.0
25
Score
- Findings
- 1,546
- Errors
- 1,304
- Warnings
- 242
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 25 | 1,546 | 1,304 | 242 | v1.183.0 | 2.0.0 |
| 25 | 1,546 | 1,304 | 242 | v1.182.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreMonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)25 scoreWidgets for Google Reviews95 scoreGoogle for WooCommerce37 scoreWP Statistics – Simple, privacy-friendly Google Analytics alternative25 score
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreMonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)25 scoreWidgets for Google Reviews95 scoreGoogle for WooCommerce37 scoreWP Statistics – Simple, privacy-friendly Google Analytics alternative25 score
Related Plugins
Magic robots.txt
1k+ active installs
100
PufferSights – AI Crawler Insights
0 active installs
100
VigIA – AI Visibility, Analytics & Control
1k+ active installs
100
WP Client Reports
6k+ active installs
100
ICS Calendar
10k+ active installs
99
IndexMeNow
2k+ active installs
99