WordPress blocks, page builder, and website builder for the Block Editor and Site Editor with templates, popups, and block themes.
47
Score
22
Errors
49
Warnings
-1
Change
Category Scores
Security16
Repo100
Performance96
Maintainability69
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
32
15 issue groups
Security
30
5 issue groups
I18n
6
3 issue groups
Performance
3
1 issue group
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_print_footer_scripts".11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "admin_print_footer_scripts".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$bracket'.8
- Category
- Security
- Occurrences
- 8
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$bracket'.
WARNINGMaintainabilityslow db query tax queryDetected usage of tax_query, possible slow query.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_SERVER['HTTP_HOST']3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_SERVER['HTTP_HOST']
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_SERVER['HTTP_HOST']. Check that the array index exists before using it.3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER['HTTP_HOST']. Check that the array index exists before using it.
WARNINGSecurityRequest data is not unslashed$_SERVER['HTTP_HOST'] not unslashed before sanitization. Use wp_unslash() or similar3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_SERVER['HTTP_HOST'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGPerformancePost Not In post not inUsing exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://docs.wpvip.com/databases/optimize-queries/using-post__not_in/ for more information.3
- Category
- Performance
- Occurrences
- 3
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://docs.wpvip.com/databases/optimize-queries/using-post__not_in/ for more information.
Show 14 moreShow less
WARNINGMaintainabilityerror log print r2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
ERRORI18nMissing Arg Domain2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
ERRORMaintainabilityOffloaded Content1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityslow db query meta query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityNon-prefixed constant1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DOING_CRON".
WARNINGMaintainabilityerror log error log1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORMaintainabilityfile system operations is writable1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORMaintainabilityfile system operations touch1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: touch().
ERRORMaintainabilityrename rename1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
rename() is discouraged. Use WP_Filesystem::move() to rename a file.
WARNINGMaintainabilityMissing Version1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Gutenverse - WordPress Blocks, Page Builder & Site Editor" is different from the name declared in plugin header "Gutenverse".
WARNINGMaintainabilitytrademarked term1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "Gutenverse - WordPress Blocks, Page Builder & Site Editor" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.
ERRORMaintainabilitywp function not compatible with requires wp1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Function "traverse_and_serialize_blocks()" requires WordPress 6.4.0, but your plugin minimum supported version is WordPress 5.9.0.
External Connections
Potential connections found in static code analysis.
Outbound calls
151
External assets
12
Incoming endpoints
10
Notable Domains
gutenverse.com11 · outbound
fb.me7 · outbound
github.com7 · outbound
fontawesome.com6 · outbound
app.lemonsqueezy.com3 · outbound
checkout.freemius-local.com3 · outbound
Platform / Reference Domains
w3.org56 · platform/reference
wordpress.org8 · platform/reference
opensource.org2 · platform/reference
schema.org2 · platform/reference
codex.wordpress.org1 · platform/reference
developer.wordpress.org1 · platform/reference
ps.w.org1 · platform/reference
External Asset Domains
fonts.googleapis.com8 · asset + outbound
fonts.gstatic.com8 · asset
Incoming Endpoints
/wp-json/gutenverse/v1/get-post-dataREST
register_rest_route
wp_ajax_nopriv_gutenverse_generate_noncepublic
wp_ajax
Admin AJAX endpoints8
wp_ajax_gutenverse_compatibility_notice_closeauthenticated
wp_ajax
wp_ajax_gutenverse_dismiss_global_event_bannerauthenticated
wp_ajax
wp_ajax_gutenverse_generate_nonceauthenticated
wp_ajax
wp_ajax_gutenverse_notice_closeauthenticated
wp_ajax
wp_ajax_gutenverse_notice_reviewauthenticated
wp_ajax
wp_ajax_gutenverse_upgrader_framework_init_closeauthenticated
wp_ajax
wp_ajax_gutenverse_upgrader_page_content_closeauthenticated
wp_ajax
wp_ajax_gutenverse_upgrader_page_upgrade_closeauthenticated
wp_ajax
Score History
9 score snapshots
v4.0.8
47
Latest
- Findings
- 71
- Errors
- 22
- Warnings
- 49
- Check
- 2.1.0
v4.0.7
48
Score
- Findings
- 69
- Errors
- 22
- Warnings
- 47
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 47 | 71 | 22 | 49 | v4.0.8 | 2.1.0 |
| 48 | 69 | 22 | 47 | v4.0.7 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreClassic Editor63 scoreAdvanced Editor Tools42 scoreSpectra Legacy – Gutenberg Blocks25 scoreKadence Blocks — Page Builder Toolkit for Gutenberg Editor22 scoreWebsite Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode29 scoreSuperb Addons: Blocks, Patterns, Pre-built Pages, Sliders, Popups, Free Forms, Animations & More100 scoreBetter Font Awesome100 score
Author
Category
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreClassic Editor63 scoreAdvanced Editor Tools42 scoreSpectra Legacy – Gutenberg Blocks25 scoreKadence Blocks — Page Builder Toolkit for Gutenberg Editor22 scoreWebsite Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode29 scoreSuperb Addons: Blocks, Patterns, Pre-built Pages, Sliders, Popups, Free Forms, Animations & More100 scoreBetter Font Awesome100 score
Related Plugins
100
Better Font Awesome
60k+ active installs
100
No Gutenberg? – Choose Where to Use the Block Editor or the Classic Editor
9k+ active installs
100
Justify for Paragraph Block
3k+ active installs
100
FrontEdit – Live Frontend Block Editor
2k+ active installs
100
100