Showcase Behance projects on your site with GS Behance Portfolio. Display in Grid, Slider, Gallery & more responsive layouts.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
1,545
12 issue groups
Security
641
11 issue groups
I18n
237
2 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".1,086
- Category
- Maintainability
- Occurrences
- 1,086
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.528
- Category
- Security
- Occurrences
- 528
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'gs-behance-portfolio' but got 'gs-behance'.207
- Category
- I18n
- Occurrences
- 207
- Severity
- error
Sample message
Mismatched text domain. Expected 'gs-behance-portfolio' but got 'gs-behance'.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_fs_text".100
- Category
- Maintainability
- Occurrences
- 100
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_fs_text".
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_API__ADDRESS".98
- Category
- Maintainability
- Occurrences
- 98
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_API__ADDRESS".
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "FS_Admin_Menu_Manager".55
- Category
- Maintainability
- Occurrences
- 55
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "FS_Admin_Menu_Manager".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.49
- Category
- Maintainability
- Occurrences
- 49
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().37
- Category
- Maintainability
- Occurrences
- 37
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'GS_Plugins/Force_Enqueue_Assets/' . $this->get_assets_key()".31
- Category
- Maintainability
- Occurrences
- 31
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'GS_Plugins/Force_Enqueue_Assets/' . $this->get_assets_key()".
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().30
- Category
- I18n
- Occurrences
- 30
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
Show 15 moreShow less
WARNINGMaintainabilityDynamic hook name26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$handler . '--script'".
WARNINGMaintainabilityNon-prefixed namespace25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- warning
Sample message
Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "GSBEH".
ERRORMaintainabilitywp function not compatible with requires wp22
- Category
- Maintainability
- Occurrences
- 22
- Severity
- error
Sample message
Function "get_current_network_id()" requires WordPress 4.6.0, but your plugin minimum supported version is WordPress 4.3.0.
WARNINGSecurityNonce verification recommended21
- Category
- Security
- Occurrences
- 21
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
$_GET[$param_name] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInterpolated SQL is not prepared14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $ids at "DELETE FROM {$tableName} WHERE ID IN($ids)"
WARNINGSecurityInput is not sanitized13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['import_file']
WARNINGSecurityDatabase parameter is not escaped10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Unescaped parameter $old_table_name used in $wpdb->query()\n$old_table_name assigned unsafely at line 75.
ERRORSecurityDatabase parameter is not escaped9
- Category
- Security
- Occurrences
- 9
- Severity
- error
Sample message
Unescaped parameter $fields used in $wpdb->get_results()\n$fields assigned unsafely at line 645.
ERRORSecuritySQL query is not prepared9
- Category
- Security
- Occurrences
- 9
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
ERRORMaintainabilityMissing direct file access protection9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityMissing nonce verification8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilitySchema Change7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORSecurityException output is not escaped7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.
ERRORSecurityUnsafe printing function7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
External Connections
Potential connections found in static code analysis.
Outbound calls
205
External assets
5
Incoming endpoints
19
Notable Domains
Platform / Reference Domains
External Asset Domains
Incoming Endpoints
wp_ajax
wp_ajax
Admin AJAX endpoints17
admin_post
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
5 more hidden
Score History
First score snapshot
v3.1.4
24
Latest
- Findings
- 2,472
- Errors
- 855
- Warnings
- 1,617
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 2,472 | 855 | 1,617 | v3.1.4 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.