Easily block visitors by country, state or ISP provider. Also, protects your site from spam, login attempts, malicious access & more.
25
Score
521
Errors
624
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
618
11 issue groups
Maintainability
346
10 issue groups
I18n
116
4 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$action'.132
- Category
- Security
- Occurrences
- 132
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$action'.
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$_error'.92
- Category
- Security
- Occurrences
- 92
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$_error'.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "Net_DNS2".84
- Category
- Maintainability
- Occurrences
- 84
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Net_DNS2".
WARNINGSecurityRequest data is not unslashed$_COOKIE[$cookie_name] not unslashed before sanitization. Use wp_unslash() or similar70
- Category
- Security
- Occurrences
- 70
- Severity
- warning
Sample message
$_COOKIE[$cookie_name] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.69
- Category
- Security
- Occurrences
- 69
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$cookie_name]60
- Category
- Security
- Occurrences
- 60
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$cookie_name]
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.53
- Category
- I18n
- Occurrences
- 53
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$RandomCompatCOMtest".52
- Category
- Maintainability
- Occurrences
- 52
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$RandomCompatCOMtest".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.46
- Category
- Maintainability
- Occurrences
- 46
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().46
- Category
- Maintainability
- Occurrences
- 46
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Show 15 moreShow less
WARNINGSecurityNonce verification recommended42
- Category
- Security
- Occurrences
- 42
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInterpolated SQL is not prepared39
- Category
- Security
- Occurrences
- 39
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $table at "ALTER TABLE $table ADD `city` VARCHAR(100) DEFAULT NULL AFTER `code`"
WARNINGMaintainabilityNon-prefixed hook name39
- Category
- Maintainability
- Occurrences
- 39
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "google-charts".
WARNINGI18nNo Html Wrapped Strings36
- Category
- I18n
- Occurrences
- 36
- Severity
- warning
Sample message
Translatable string should not be wrapped in HTML. Found: '<dfn title="IP address cache and local databases are scanned at the top priority.">API selection and key settings</dfn>'
WARNINGSecurityMissing nonce verification33
- Category
- Security
- Occurrences
- 33
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validated33
- Category
- Security
- Occurrences
- 33
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['length']. Check that the array index exists before using it.
ERRORSecuritySQL query is not prepared27
- Category
- Security
- Occurrences
- 27
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $key
ERRORMaintainabilityMissing direct file access protection26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecurityDatabase parameter is not escaped21
- Category
- Security
- Occurrences
- 21
- Severity
- error
Sample message
Unescaped parameter $sql used in $wpdb->get_results()\n$sql assigned unsafely at line 1037.
WARNINGMaintainabilityNon-prefixed constant21
- Category
- Maintainability
- Occurrences
- 21
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DONOTCACHEPAGE".
ERRORMaintainabilitymysql PDO20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- error
Sample message
Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: \PDO.
ERRORI18nUnordered Placeholders Text16
- Category
- I18n
- Occurrences
- 16
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$d", but got "%s, %d" in 'The user %s (user ID: %d) is in use.'.
ERRORI18nMissing Arg Domain11
- Category
- I18n
- Occurrences
- 11
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORMaintainabilityfile system operations fclose6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fread6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().
External Connections
Potential connections found in static code analysis.
Outbound calls
296
External assets
2
Incoming endpoints
2
Notable Domains
developer.mozilla.org61 · outbound
en.wikipedia.org36 · outbound
iplocationblock.com34 · outbound
datatables.net8 · outbound
stackoverflow.com8 · outbound
app.iplocationblock.com6 · outbound
Platform / Reference Domains
github.com30 · platform/reference
w3.org15 · platform/reference
codex.wordpress.org10 · platform/reference
wordpress.org4 · platform/reference
core.trac.wordpress.org2 · platform/reference
developer.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
gstatic.cn2 · asset + outbound
gstatic.com2 · asset + outbound
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints2
admin_post_ip_location_blockauthenticated
admin_post
wp_ajax_ip_location_blockauthenticated
wp_ajax
Score History
2 score snapshots
v1.3.9
25
Latest
- Findings
- 1,145
- Errors
- 521
- Warnings
- 624
- Check
- 2.0.0
v1.3.8
25
Score
- Findings
- 1,145
- Errors
- 521
- Warnings
- 624
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 25 | 1,145 | 521 | 624 | v1.3.9 | 2.0.0 |
| 25 | 1,145 | 521 | 624 | v1.3.8 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Crowdsignal Forms100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreSpectra Legacy – Gutenberg Blocks25 scoreBreadcrumb NavXT36 scorePDF Embedder91 scoreLayout Grid Block98 score
Author
Issue
Domain
Related
Crowdsignal Forms100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreSpectra Legacy – Gutenberg Blocks25 scoreBreadcrumb NavXT36 scorePDF Embedder91 scoreLayout Grid Block98 score
Related Plugins
Crowdsignal Forms
200k+ active installs
100
Advance Custom HTML – Show Off Code Snippets with Live Preview
10k+ active installs
100
Shortcode Redirect
10k+ active installs
100
Carousel Block – Showcase Images in Elegant Sliding Displays
7k+ active installs
100
Hyperlink Group Block
7k+ active installs
100
bSlider – Create Responsive Image, Post, Product, and Video Sliders
6k+ active installs
100