Prioritized issue groups from the latest Plugin Check scan
Maintainability
232
17 issue groups
Security
136
6 issue groups
I18n
13
2 issue groups
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$attr_arr".
Sample message
$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "activate_ipytw".
Sample message
Processing form data without nonce verification.
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES[$option_name . '_image_upload']['name']. Check that the array index exists before using it.
Sample message
Processing form data without nonce verification.
Sample message
Detected usage of a non-sanitized input variable: $_GET['_wpnonce']
Sample message
error_log() found. Debug code should not normally be used in production.
Sample message
Detected usage of meta_query, possible slow query.
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$attachment_id'.
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'woocommerce_taxonomy_args_' . $pa_attribute_name".
Sample message
Missing $domain parameter in function call to __().
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
Sample message
The $text parameter must be a single text string literal. Found: $date_last_import
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "ICPD_Promo".
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
Potential connections found in static code analysis.
Outbound calls
131
External assets
0
Incoming endpoints
1
No external asset domains detected.
No public endpoints detected.
wp_ajax
2 score snapshots
v4.6.4
24
Latest
v4.6.3
23
Score
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 403 | 97 | 306 | v4.6.4 | 2.0.0 |
| 23 | 405 | 97 | 308 | v4.6.3 | 2.0.0 |
Author, categories, issues, domains, and nearby plugins.