Adds fields to the post and page edit pages that allow you to insert custom JavaScript or CSS for that post or page.
41
Score
64
Errors
19
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance100
Maintainability86
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
44
5 issue groups
I18n
29
2 issue groups
Maintainability
9
6 issue groups
Repo Compliance
1
1 issue group
ERRORI18nText Domain MismatchMismatched text domain. Expected 'insert-javascript-css' but got 'ijsc'.27
- Category
- I18n
- Occurrences
- 27
- Severity
- error
Sample message
Mismatched text domain. Expected 'insert-javascript-css' but got 'ijsc'.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.23
- Category
- Security
- Occurrences
- 23
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$css'.7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$css'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['ijsc-field-css']4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['ijsc-field-css']
WARNINGSecurityRequest data is not unslashed$_POST['ijsc-field-css'] not unslashed before sanitization. Use wp_unslash() or similar4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
$_POST['ijsc-field-css'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_register_script(). This means new versions of the script may not always be loaded due to browser caching.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Resource version not set in call to wp_register_script(). This means new versions of the script may not always be loaded due to browser caching.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to _e().2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Missing $domain parameter in function call to _e().
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitywp function not compatible with requires wpFunction "wp_dequeue_script()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.0.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Function "wp_dequeue_script()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.0.
Show 4 moreShow less
WARNINGMaintainabilityslow db query meta query1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityNot In Footer1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Insert JavaScript and CSS" is different from the name declared in plugin header "Insert JavaScript & CSS".
ERRORRepo Complianceoutdated tested upto header1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 3.4 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
External Connections
Potential connections found in static code analysis.
Outbound calls
3
External assets
0
Incoming endpoints
0
Notable Domains
nutt.net3 · outbound
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
First score snapshot
v0.2
41
Latest
- Findings
- 83
- Errors
- 64
- Warnings
- 19
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 41 | 83 | 64 | 19 | v0.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Header and Footer Scripts99 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreDuplicate Page40 scoreAdvanced Custom Fields (ACF®)23 scoreWordPress Importer25 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreCode Snippets36 scorePost Duplicator60 score
Author
Issue
Domain
Related
Header and Footer Scripts99 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreDuplicate Page40 scoreAdvanced Custom Fields (ACF®)23 scoreWordPress Importer25 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreCode Snippets36 scorePost Duplicator60 score
Related Plugins
Pages with category and tag
50k+ active installs
100
Code Embed
10k+ active installs
100
Header and Footer Scripts
200k+ active installs
99
Blocks Animation: CSS Animations for Gutenberg Blocks
90k+ active installs
99
Speculative Loading
70k+ active installs
99
Web Worker Offloading
10k+ active installs
99