Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
128
5 issue groups
Maintainability
79
6 issue groups
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $col97
- Category
- Security
- Occurrences
- 97
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $col
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.39
- Category
- Maintainability
- Occurrences
- 39
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $col used in $wpdb->get_results()\n$col used without escaping.19
- Category
- Security
- Occurrences
- 19
- Severity
- error
Sample message
Unescaped parameter $col used in $wpdb->get_results()\n$col used without escaping.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter self::$table_actor ) used in $wpdb->query()10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Unescaped parameter self::$table_actor ) used in $wpdb->query()
WARNINGMaintainabilitySchema ChangeAttempting a database schema change is discouraged.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORMaintainabilityPlugin Directory WritePlugin folders are deleted when upgraded. Do not save data to the plugin folder using file_put_contents(). Detected usage of __FILE__ or __DIR__ magic constant. Use wp_upload_dir() to get the uploads directory path or save to the database instead.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using file_put_contents(). Detected usage of __FILE__ or __DIR__ magic constant. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['columns']1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['columns']
WARNINGSecurityRequest data is not unslashed$_POST['columns'] not unslashed before sanitization. Use wp_unslash() or similar1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
$_POST['columns'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityfile system operations fcloseFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
Show 1 moreShow less
ERRORMaintainabilitywp function not compatible with requires wp1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Function "wp_add_privacy_policy_content()" requires WordPress 4.9.6, but your plugin minimum supported version is WordPress 4.0.0.
External Connections
Potential connections found in static code analysis.
Outbound calls
149
External assets
0
Incoming endpoints
7
Notable Domains
schemas.openxmlformats.org58 · outbound
datatables.net15 · outbound
schemas.microsoft.com7 · outbound
getbootstrap.com6 · outbound
popper.js.org6 · outbound
eligrey.com3 · outbound
Platform / Reference Domains
github.com24 · platform/reference
w3.org14 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_h5pxapikatchu_delete_datapublic
wp_ajax
wp_ajax_nopriv_h5pxapikatchu_insert_datapublic
wp_ajax
Admin AJAX endpoints5
wp_ajax_h5pxapikatchu_delete_dataauthenticated
wp_ajax
wp_ajax_h5pxapikatchu_download_table_dataauthenticated
wp_ajax
wp_ajax_h5pxapikatchu_get_column_optionsauthenticated
wp_ajax
wp_ajax_h5pxapikatchu_get_table_dataauthenticated
wp_ajax
wp_ajax_h5pxapikatchu_insert_dataauthenticated
wp_ajax
Score History
First score snapshot
v0.4.24
41
Latest
- Findings
- 207
- Errors
- 119
- Warnings
- 88
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 41 | 207 | 119 | 88 | v0.4.24 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
WPLMS H5P36 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 score
Author
Category
Issue
Domain
Related
WPLMS H5P36 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 score
Related Plugins
WPLMS H5P
1k+ active installs
36