Limit, Debug, Optimize WP_HTTP requests. Limit by request count, page load time, reduce timeout for each request. Speed up login and admin pages.
37
Score
96
Errors
90
Warnings
+1
Change
Category Scores
Security0
Repo97
Performance100
Maintainability60
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
115
10 issue groups
Maintainability
67
13 issue groups
I18n
1
1 issue group
Repo Compliance
1
1 issue group
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$k'.54
- Category
- Security
- Occurrences
- 54
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$k'.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $limit20
- Category
- Security
- Occurrences
- 20
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $limit
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_vphrm_active_plugins".12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_vphrm_active_plugins".
WARNINGSecurityRequest data is not unslashed$_POST['action'] not unslashed before sanitization. Use wp_unslash() or similar10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
$_POST['action'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 3175.9
- Category
- Security
- Occurrences
- 9
- Severity
- error
Sample message
Unescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 3175.
ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGMaintainabilitySchema ChangeAttempting a database schema change is discouraged.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed constant3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WP_ACCESSIBLE_HOSTS".
WARNINGMaintainabilityerror log wp debug backtrace summary3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
wp_debug_backtrace_summary() found. Debug code should not normally be used in production.
ERRORMaintainabilityrand rand3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
WARNINGSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Unescaped parameter db_table_log()) used in $wpdb->query()
WARNINGMaintainabilityNon-prefixed hook name2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
WARNINGSecurityNonce verification recommended2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitized2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['id']
ERRORMaintainabilityMissing direct file access protection2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityInterpolated SQL is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $prepare_id_placeholders at \t\t\t\t\tWHERE id IN ( $prepare_id_placeholders )\t\t\t\t\t\n
WARNINGSecurityUnfinished Prepare1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGMaintainabilityerror log debug backtrace1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
debug_backtrace() found. Debug code should not normally be used in production.
ERRORMaintainabilityparse url parse url1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
WARNINGMaintainabilityNot In Footer1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORI18nNon Singular String Literal Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $text
WARNINGRepo Complianceplugin header nonexistent domain path1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
External Connections
Potential connections found in static code analysis.
Outbound calls
27
External assets
0
Incoming endpoints
8
Notable Domains
Platform / Reference Domains
api.wordpress.org8 · platform/reference
wordpress.org2 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints8
wp_ajax_vphrm_clearauthenticated
wp_ajax
wp_ajax_vphrm_custom_rule_deleteauthenticated
wp_ajax
wp_ajax_vphrm_custom_rule_saveauthenticated
wp_ajax
wp_ajax_vphrm_disable_loggingauthenticated
wp_ajax
wp_ajax_vphrm_load_must_useauthenticated
wp_ajax
wp_ajax_vphrm_mode_changeauthenticated
wp_ajax
wp_ajax_vphrm_queryauthenticated
wp_ajax
wp_ajax_vphrm_save_viewauthenticated
wp_ajax
Score History
2 score snapshots
v1.3.11
37
Latest
- Findings
- 186
- Errors
- 96
- Warnings
- 90
- Check
- 2.0.0
v1.3.10
36
Score
- Findings
- 188
- Errors
- 98
- Warnings
- 90
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 37 | 186 | 96 | 90 | v1.3.11 | 2.0.0 |
| 36 | 188 | 98 | 90 | v1.3.10 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreClassic Editor63 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreAMP43 scoreWP Crontrol42 scoreQuery Monitor31 scoreCheck & Log Email – Easy Email Testing & Mail logging98 scorePerformance Lab99 scoreEmail Log95 score
Author
Issue
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreClassic Editor63 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreAMP43 scoreWP Crontrol42 scoreQuery Monitor31 scoreCheck & Log Email – Easy Email Testing & Mail logging98 scorePerformance Lab99 scoreEmail Log95 score
Related Plugins
Optimization Detective
60k+ active installs
100
Simple Login Log
5k+ active installs
100
DietPress
2k+ active installs
100
Core Web Vitals & PageSpeed Booster
1k+ active installs
100
CodingBunny Image Optimizer LITE
400 active installs
100
Memory Limit Manager
400 active installs
100