Generate multiple types of sitemaps to improve SEO and get your website indexed quickly.
35
Score
43
Errors
94
Warnings
-2
Change
Category Scores
Security0
Repo94
Performance96
Maintainability56
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
67
10 issue groups
Maintainability
46
13 issue groups
I18n
10
1 issue group
Performance
4
1 issue group
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['pluginList']. Check that the array index exists before using it.17
- Category
- Security
- Occurrences
- 17
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['pluginList']. Check that the array index exists before using it.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script>\n'.13
- Category
- Security
- Occurrences
- 13
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script>\n'.
WARNINGSecurityRequest data is not unslashed$_POST['pluginList'] not unslashed before sanitization. Use wp_unslash() or similar13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
$_POST['pluginList'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_SERVER['HTTP_HOST']12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_SERVER['HTTP_HOST']
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $taxonomy->label10
- Category
- I18n
- Occurrences
- 10
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $taxonomy->label
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGPerformancePost Not In excludeUsing exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://docs.wpvip.com/databases/optimize-queries/using-post__not_in/ for more information.4
- Category
- Performance
- Occurrences
- 4
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://docs.wpvip.com/databases/optimize-queries/using-post__not_in/ for more information.
Show 15 moreShow less
ERRORMaintainabilityDeprecated parameter: get_terms parameter 23
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
The parameter "array( 'exclude' => $excludes )" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
ERRORMaintainabilityOffloaded Content2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityDiscouraged PHP function2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The use of function set_time_limit() is discouraged
WARNINGSecurityInterpolated SQL is not prepared2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $legacy_placeholders at \t\t\t\t\t\tWHERE tt.term_id IN ($legacy_placeholders)\n
WARNINGSecurityUnfinished Prepare2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityerror log error log2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGSecurityInput is not validated or sanitized2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized, non-validated input variable _SERVER: "://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]"
ERRORMaintainabilityrename rename2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
rename() is discouraged. Use WP_Filesystem::move() to rename a file.
WARNINGMaintainabilityDefine WP DEBUG1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected production-time change to PHP error reporting: define().
WARNINGMaintainabilityDefine WP DEBUG DISPLAY1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected production-time change to PHP error reporting: define().
WARNINGMaintainabilityDirect Error Reporting Call1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected production-time change to PHP error reporting: error_reporting().
ERRORSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Unescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 1740.
ERRORSecuritySQL query is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $sql
WARNINGMaintainabilityslow db query tax query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityprevent path disclosure error reporting1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
error_reporting() can lead to full path disclosure.
External Connections
Potential connections found in static code analysis.
Outbound calls
27
External assets
0
Incoming endpoints
1
Notable Domains
arnebrachhold.de5 · outbound
sitemaps.org4 · outbound
auctollo.com3 · outbound
api.auctollo.com2 · outbound
api.indexnow.org2 · outbound
8rkh4sskhh.execute-api.us-east-1.amazonaws.com1 · outbound
Platform / Reference Domains
w3.org2 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints1
wp_ajax_disable_pluginsauthenticated
wp_ajax
Score History
2 score snapshots
v4.1.25
35
Latest
- Findings
- 137
- Errors
- 43
- Warnings
- 94
- Check
- 2.1.0
v4.1.24
37
Score
- Findings
- 122
- Errors
- 43
- Warnings
- 79
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 35 | 137 | 43 | 94 | v4.1.25 | 2.1.0 |
| 37 | 122 | 43 | 79 | v4.1.24 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreDuplicate Page40 scoreHostinger Tools82 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreLiteSpeed Cache35 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings29 scoreAll in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)94 scoreSpeedyCache – Cache, Optimization, Performance29 score
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreDuplicate Page40 scoreHostinger Tools82 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreLiteSpeed Cache35 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings29 scoreAll in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)94 scoreSpeedyCache – Cache, Optimization, Performance29 score
Related Plugins
WP Robots Txt
40k+ active installs
100
Dynamic Month & Year into Posts
8k+ active installs
100
VS Meta Description
3k+ active installs
100
Siteboosterseo
3k+ active installs
100
Unique Title Checker
1k+ active installs
100
Advance Canonical URL
1k+ active installs
100