Makes your website faster by combining all Google Fonts in a single request. Your websites gets a higher PageSpeed score which is good for SEO.
36
Score
45
Errors
49
Warnings
+0
Change
Category Scores
Security0
Repo88
Performance100
Maintainability66
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
50
10 issue groups
Maintainability
38
11 issue groups
Repo Compliance
3
3 issue groups
I18n
2
1 issue group
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '", $argc"'.23
- Category
- Security
- Occurrences
- 23
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '", $argc"'.
ERRORMaintainabilitywp function not compatible with requires wpFunction "add_screen_option()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.1.8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
Function "add_screen_option()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.1.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $columns at "CREATE TABLE IF NOT EXISTS $full_table_name ( $columns ) $table_options;"5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $columns at "CREATE TABLE IF NOT EXISTS $full_table_name ( $columns ) $table_options;"
WARNINGMaintainabilityerror log trigger errortrigger_error() found. Debug code should not normally be used in production.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $full_table_name used in $wpdb->query()\n$full_table_name assigned unsafely at line 191.3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Unescaped parameter $full_table_name used in $wpdb->query()\n$full_table_name assigned unsafely at line 191.
Show 15 moreShow less
WARNINGMaintainabilitySchema Change3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGSecurityInput is not sanitized3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_SERVER['HTTP_HOST']
WARNINGSecurityInput is not validated3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['post_ID']. Check that the array index exists before using it.
WARNINGSecurityRequest data is not unslashed3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_SERVER['HTTP_HOST'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "Google Webfont Optimizer" - contains the restricted term "google" and cannot be used to begin your plugin name. We disallow the use of certain terms in ways that are abused, or potentially infringe on and/or are misleading with regards to trademarks. You may use the term "google" elsewhere in your plugin name, such as "... for google".
ERRORMaintainabilityNon Enqueued Stylesheet2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
ERRORI18nNon Singular String Literal Domain2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: $this->textdomain
ERRORMaintainabilityNot Allowed1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
ERRORSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Unescaped parameter $keys used in $wpdb->query()\n$keys assigned unsafely at line 152.
WARNINGSecuritywp redirect wp redirect1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
ERRORMaintainabilityparse url parse url1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORMaintainabilityDeprecated function: screen_icon1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
screen_icon() has been deprecated since WordPress version 3.8.0.
ERRORRepo Complianceoutdated tested upto header1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 4.2 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
WARNINGRepo Compliancereadme parser warnings ignored tags1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
One or more tags were ignored. The following tags are not permitted: "plugin", "wordpress"
WARNINGRepo Compliancereadme parser warnings too many tags1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
One or more tags were ignored. Please limit your plugin to 5 tags.
External Connections
Potential connections found in static code analysis.
Outbound calls
3
External assets
1
Incoming endpoints
0
Notable Domains
quickfalcon.com2 · outbound
Platform / Reference Domains
codex.wordpress.org1 · platform/reference
External Asset Domains
fonts.googleapis.com1 · asset
Incoming Endpoints
No public endpoints detected.
Score History
First score snapshot
v0.2.4
36
Latest
- Findings
- 94
- Errors
- 45
- Warnings
- 49
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 36 | 94 | 45 | 49 | v0.2.4 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
LiteSpeed Cache35 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreElementor Website Builder – more than just a page builder39 scoreWooCommerce21 scoreWP Fastest Cache – WordPress Cache Plugin24 scoreW3 Total Cache23 scoreAutoptimize23 scoreAdvanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance30 scoreAruba HiSpeed Cache97 scoreSpeculative Loading99 score
Author
Category
Issue
Domain
Related
LiteSpeed Cache35 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreElementor Website Builder – more than just a page builder39 scoreWooCommerce21 scoreWP Fastest Cache – WordPress Cache Plugin24 scoreW3 Total Cache23 scoreAutoptimize23 scoreAdvanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance30 scoreAruba HiSpeed Cache97 scoreSpeculative Loading99 score
Related Plugins
Code Embed
10k+ active installs
100
Speculative Loading
70k+ active installs
99
Web Worker Offloading
10k+ active installs
99
Offload, AI & Optimize with Cloudflare Images
1k+ active installs
99
Autover
800 active installs
98
Internet Speed Test
500 active installs
98