The official companion plugin for Peregrine Themes. Adds widgets, customization options, Elementor widgets, and demo import features.
27
Score
253
Errors
103
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance88
Maintainability19
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
168
5 issue groups
Maintainability
126
16 issue groups
I18n
34
2 issue groups
Performance
14
2 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Since $package $version: "'.86
- Category
- Security
- Occurrences
- 86
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Since $package $version: "'.
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$base'.38
- Category
- Security
- Occurrences
- 38
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$base'.
WARNINGMaintainabilityNon-prefixed namespaceNamespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "Psr\EventDispatcher".37
- Category
- Maintainability
- Occurrences
- 37
- Severity
- warning
Sample message
Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "Psr\EventDispatcher".
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().31
- Category
- I18n
- Occurrences
- 31
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.25
- Category
- Security
- Occurrences
- 25
- Severity
- error
Sample message
All output should be run through an escaping function (like echo esc_html_x() or echo esc_attr_x()), found '_ex'.
ERRORMaintainabilitywp function not compatible with requires wpFunction "_wp_has_noncharacters_fallback()" requires WordPress 6.9.0, but your plugin minimum supported version is WordPress 5.9.0.17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- error
Sample message
Function "_wp_has_noncharacters_fallback()" requires WordPress 6.9.0, but your plugin minimum supported version is WordPress 5.9.0.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGPerformancePost Not In post not inUsing exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.10
- Category
- Performance
- Occurrences
- 10
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilityerror log var exportvar_export() found. Debug code should not normally be used in production.8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
var_export() found. Debug code should not normally be used in production.
Show 15 moreShow less
WARNINGSecurityNonce verification recommended8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityGoto statement found7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
The "goto" language construct should not be used.
ERRORMaintainabilityfile system operations fclose7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityLocalhost URL found5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Do not use Localhost/127.0.0.1/*.local in your code. Found: http://localhost/
WARNINGMaintainabilityNon-prefixed function5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "normalizer_is_normalized".
WARNINGMaintainabilityNon-prefixed constant4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DS".
ERRORMaintainabilityfile system operations fopen4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityDeprecated parameter: get_terms parameter 24
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
The parameter "$cat_args" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
WARNINGPerformancePost Not In exclude4
- Category
- Performance
- Occurrences
- 4
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
ERRORMaintainabilityNot Allowed3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
WARNINGMaintainabilityNon-prefixed global variable3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$section_priority".
ERRORI18nText Domain Mismatch3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
Mismatched text domain. Expected 'hester-core' but got 'data-liberation'.
WARNINGMaintainabilityDiscouraged PHP function2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilityslow db query tax query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityerror log trigger error2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
External Connections
Not analyzed yet.
Score History
2 score snapshots
v1.1.9
27
Latest
- Findings
- 356
- Errors
- 253
- Warnings
- 103
- Check
- 2.0.0
v1.1.6
27
Score
- Findings
- 356
- Errors
- 253
- Warnings
- 103
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 27 | 356 | 253 | 103 | v1.1.9 | 2.0.0 |
| 27 | 356 | 253 | 103 | v1.1.6 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Plugin
Author
Issue
Output is not escaped86 findingsException output is not escaped38 findingsNon-prefixed namespace37 findingsMissing Arg Domain31 findingsUnsafe printing function25 findingswp function not compatible with requires wp17 findingsMissing direct file access protection16 findingsMissing nonce verification11 findings
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreElementor Website Builder – more than just a page builder39 scoreEssential Addons for Elementor – Popular Elementor Templates & Widgets31 scoreUltimate Addons for Elementor33 scoreOne Click Demo Import38 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 score
Plugin
Author
Issue
Output is not escaped86 findingsException output is not escaped38 findingsNon-prefixed namespace37 findingsMissing Arg Domain31 findingsUnsafe printing function25 findingswp function not compatible with requires wp17 findingsMissing direct file access protection16 findingsMissing nonce verification11 findings
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreElementor Website Builder – more than just a page builder39 scoreEssential Addons for Elementor – Popular Elementor Templates & Widgets31 scoreUltimate Addons for Elementor33 scoreOne Click Demo Import38 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 score
Related Plugins
Kliken: Ads + Pixel for Meta
30k+ active installs
100
Paystack WooCommerce Payment Gateway
30k+ active installs
100
Quick Adsense
20k+ active installs
100
Store Vacation Lite for WooCommerce
20k+ active installs
100
Input Mask For Elementor Form Fields
20k+ active installs
100
EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory
10k+ active installs
100