PluginScore

ITRO Popup Plugin

Display a popup to your WordPress site: age verification popup for adult-content site ★ multilanguage popup with qTransalte-X ★ very easy to use

v5.2.6ITRO TeamUpdated Added 6k+ installs92% rating
multilingual popuppopuppopup boxpopup messagepopuup optin
33
Score
591
Errors
135
Warnings
+0
Change

Category Scores

Security0
Repo86
Performance100
Maintainability51

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

726 findings

Security

461

8 issue groups

I18n

164

4 issue groups

Maintainability

97

13 issue groups

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<input type='checkbox' name='roles[]' id='roles_$role' value='$role' $checked $disabled>"'.312
Category
Security
Occurrences
312
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<input type='checkbox' name='roles[]' id='roles_$role' value='$role' $checked $disabled>"'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
ERRORI18nText Domain MismatchMismatched text domain. Expected 'itro-popup' but got "itro-plugin".146
Category
I18n
Occurrences
146
Severity
error

Sample message

Mismatched text domain. Expected 'itro-popup' but got "itro-plugin".

WordPress.WP.I18n.TextDomainMismatchReference
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.104
Category
Security
Occurrences
104
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WordPress.Security.EscapeOutput.UnsafePrintingFunctionReference
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$allowedRoles&quot;.32
Category
Maintainability
Occurrences
32
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$allowedRoles&quot;.

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.17
Category
Maintainability
Occurrences
17
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().15
Category
Maintainability
Occurrences
15
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;check_tables_ipp&quot;.14
Category
Maintainability
Occurrences
14
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;check_tables_ipp&quot;.

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST[$opt_name[$i]]12
Category
Security
Occurrences
12
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST[$opt_name[$i]]

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGSecurityRequest data is not unslashed$_POST[$opt_name[$i]] not unslashed before sanitization. Use wp_unslash() or similar12
Category
Security
Occurrences
12
Severity
warning

Sample message

$_POST[$opt_name[$i]] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().11
Category
I18n
Occurrences
11
Severity
error

Sample message

Missing $domain parameter in function call to __().

WordPress.WP.I18n.MissingArgDomainReference
Show 15 more
WARNINGSecurityInterpolated SQL is not prepared8
Category
Security
Occurrences
8
Severity
warning

Sample message

Use placeholders and $wpdb-&gt;prepare(); found interpolated variable $field_name at &quot;SELECT * FROM $field_table_name WHERE field_name=&#039;$field_name&#039;&quot;

WordPress.DB.PreparedSQL.InterpolatedNotPrepared
ERRORI18nNon Singular String Literal Text6
Category
I18n
Occurrences
6
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: force_balance_tags(do_shortcode( $custom_field))

WordPress.WP.I18n.NonSingularStringLiteralTextReference
WARNINGMaintainabilityNon-prefixed constant5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;IPP_FIELD_TABLE_NAME&quot;.

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound
WARNINGSecurityInput is not validated5
Category
Security
Occurrences
5
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST[&#039;perc_&#039; . $opt_name[$i]]. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
ERRORSecurityDatabase parameter is not escaped4
Category
Security
Occurrences
4
Severity
error

Sample message

Unescaped parameter $field_name used in $wpdb->get_results()\n$field_name used without escaping.

PluginCheck.Security.DirectDB.UnescapedDBParameter
WARNINGSecurityNonce verification recommended4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGMaintainabilityMissing Version3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WordPress.WP.EnqueuedResourceParameters.MissingVersion
WARNINGMaintainabilitySchema Change2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WordPress.DB.DirectDatabaseQuery.SchemaChange
WARNINGMaintainabilityNot In Footer2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WordPress.WP.EnqueuedResourceParameters.NotInFooter
WARNINGMaintainabilitytrademarked term2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "ITRO Popup Plugin" - contains the restricted term "plugin" which cannot be used at all in your plugin name.

trademarked_term
ERRORMaintainabilitywp function not compatible with requires wp2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Function "wp_editor()" requires WordPress 3.3.0, but your plugin minimum supported version is WordPress 3.0.1.

wp_function_not_compatible_with_requires_wpReference
WARNINGI18nDiscouraged text-domain loading1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFoundReference
ERRORMaintainabilityOffloaded Content1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.

PluginCheck.CodeAnalysis.Offloading.OffloadedContent
ERRORMaintainabilityDeprecated function: get_current_theme1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

get_current_theme() has been deprecated since WordPress version 3.4.0. Use wp_get_theme() instead.

WordPress.WP.DeprecatedFunctions.get_current_themeFound
ERRORMaintainabilityDeprecated function: get_theme1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

get_theme() has been deprecated since WordPress version 3.4.0. Use wp_get_theme( $stylesheet ) instead.

WordPress.WP.DeprecatedFunctions.get_themeFound

External Connections

Not analyzed yet.

Score History

First score snapshot

v5.2.6

33

Latest

Findings
726
Errors
591
Warnings
135
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related

Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreWooCommerce21 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup40 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth23 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scorePopup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder66 scorePopup Builder – Create highly converting, mobile friendly marketing popups.30 scoreLightbox & Modal Popup WordPress Plugin – FooBox25 score

Related Plugins

All In One Lightbox – Display Images, Audio, and Video in Popups

3k+ active installs

100
Advanced Popups

60k+ active installs

99
Promolayer – Popup Builder & Abandonment Preventer

1k+ active installs

99
Alligator Popup

2k+ active installs

98
Light Modal Block

2k+ active installs

98
WPC Added To Cart Notification for WooCommerce

3k+ active installs

98