The WP Team Member is a elementor addons, visual composer addons, WordPress Default widgets and Ready Shortcode for WordPress.
38
Score
537
Errors
36
Warnings
+0
Change
Category Scores
Security0
Repo97
Performance100
Maintainability65
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
433
6 issue groups
Security
112
6 issue groups
Maintainability
27
8 issue groups
Repo Compliance
1
1 issue group
ERRORI18nText Domain MismatchMismatched text domain. Expected 'ht-team-member' but got 'ht-instagram'.399
- Category
- I18n
- Occurrences
- 399
- Severity
- error
Sample message
Mismatched text domain. Expected 'ht-team-member' but got 'ht-instagram'.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['after_title']'.92
- Category
- Security
- Occurrences
- 92
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['after_title']'.
ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: $this->text_domain16
- Category
- I18n
- Occurrences
- 16
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: $this->text_domain
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $value['socialicon']12
- Category
- I18n
- Occurrences
- 12
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $value['socialicon']
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$designation".8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$designation".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['htdesignation']6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['htdesignation']
WARNINGSecurityRequest data is not unslashed$_POST['htdesignation'] not unslashed before sanitization. Use wp_unslash() or similar6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
$_POST['htdesignation'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
Show 11 moreShow less
WARNINGSecurityInput is not validated3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['htdesignation']. Check that the array index exists before using it.
ERRORMaintainabilitystrip tags strip tags3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
WARNINGMaintainabilityNon-prefixed hook name2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wsa_form_bottom_' . $form['id']".
ERRORMaintainabilityForbidden PHP function found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The use of function create_function() is forbidden
WARNINGSecurityNonce verification recommended1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityDiscouraged PHP function1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
wp_reset_query() is discouraged. Use wp_reset_postdata() instead.
WARNINGI18nNo Html Wrapped Strings1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
Translatable string should not be wrapped in HTML. Found: '<h2 class="htteamop-headding">Slider Options</h2>'
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "WP Team - WordPress Team Member Plugin" is different from the name declared in plugin header "HT Team Member".
WARNINGRepo Complianceplugin header nonexistent domain path1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
WARNINGI18ntextdomain mismatch1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
The "Text Domain" header in the plugin file does not match the slug. Found "ht-teammember", expected "ht-team-member".
WARNINGMaintainabilitytrademarked term1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "WP Team - WordPress Team Member Plugin" - contains the restricted term "plugin" which cannot be used at all in your plugin name.
External Connections
Potential connections found in static code analysis.
Outbound calls
47
External assets
0
Incoming endpoints
0
Notable Domains
hasthemes.com32 · outbound
facebook.com3 · outbound
fontawesome.io2 · outbound
htplugins.com2 · outbound
kenwheeler.github.io2 · outbound
tareq.co1 · outbound
Platform / Reference Domains
github.com2 · platform/reference
codex.wordpress.org1 · platform/reference
developer.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
First score snapshot
v1.1.8
38
Latest
- Findings
- 573
- Errors
- 537
- Warnings
- 36
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 38 | 573 | 537 | 36 | v1.1.8 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Text Domain Mismatch399 findingsOutput is not escaped92 findingsNon Singular String Literal Domain16 findingsNon Singular String Literal Text12 findingsMissing direct file access protection10 findingsNon-prefixed global variable8 findingsInput is not sanitized6 findingsRequest data is not unslashed6 findings
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreElementor Website Builder – more than just a page builder39 scoreEssential Addons for Elementor – Popular Elementor Templates & Widgets31 scoreUltimate Addons for Elementor33 scoreOne Click Demo Import38 score
Author
Issue
Text Domain Mismatch399 findingsOutput is not escaped92 findingsNon Singular String Literal Domain16 findingsNon Singular String Literal Text12 findingsMissing direct file access protection10 findingsNon-prefixed global variable8 findingsInput is not sanitized6 findingsRequest data is not unslashed6 findings
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreElementor Website Builder – more than just a page builder39 scoreEssential Addons for Elementor – Popular Elementor Templates & Widgets31 scoreUltimate Addons for Elementor33 scoreOne Click Demo Import38 score
Related Plugins
Quick Adsense
20k+ active installs
100
Input Mask For Elementor Form Fields
20k+ active installs
100
Selection Lite
9k+ active installs
100
Business Card Block – present your team and contact info in style
1k+ active installs
100
Easy Elements for Elementor – Addons & Website Templates
1k+ active installs
100
