Improve your WP security with powerful one-click tools like backup, WAF, and malware scan. Includes free tools like stats, CDN and social sharing.
22
Score
2,975
Errors
1,348
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance73
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
2,568
1 issue group
Maintainability
1,536
19 issue groups
Security
159
3 issue groups
Performance
33
2 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'jetpack' but got 'jetpack-account-protection'.2,568
- Category
- I18n
- Occurrences
- 2,568
- Severity
- error
Sample message
Mismatched text domain. Expected 'jetpack' but got 'jetpack-account-protection'.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$global_name".454
- Category
- Maintainability
- Occurrences
- 454
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$$global_name".
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'jitm_' . $envelope->CTA->hook".299
- Category
- Maintainability
- Occurrences
- 299
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'jitm_' . $envelope->CTA->hook".
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;194
- Category
- Maintainability
- Occurrences
- 194
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "Markdown".155
- Category
- Maintainability
- Occurrences
- 155
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "Markdown".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.89
- Category
- Maintainability
- Occurrences
- 89
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$errstr (file: $errfile; line: $errline)"'.89
- Category
- Security
- Occurrences
- 89
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$errstr (file: $errfile; line: $errline)"'.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().68
- Category
- Maintainability
- Occurrences
- 68
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilitybadly named filesFile and folder names must not contain spaces or special characters.65
- Category
- Maintainability
- Occurrences
- 65
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $child_table used in $wpdb->get_results()\n$child_table assigned unsafely at line 356.56
- Category
- Security
- Occurrences
- 56
- Severity
- warning
Sample message
Unescaped parameter $child_table used in $wpdb->get_results()\n$child_table assigned unsafely at line 356.
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed constant48
- Category
- Maintainability
- Occurrences
- 48
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DISABLE_JETPACK_WAF".
ERRORMaintainabilityNot Allowed35
- Category
- Maintainability
- Occurrences
- 35
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
WARNINGMaintainabilityNon-prefixed class29
- Category
- Maintainability
- Occurrences
- 29
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Abstract_Jetpack_Site".
WARNINGMaintainabilityslow db query meta key18
- Category
- Maintainability
- Occurrences
- 18
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGPerformancePost Not In exclude18
- Category
- Performance
- Occurrences
- 18
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilityDiscouraged PHP function16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilityslow db query meta query15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGPerformancePost Not In post not in15
- Category
- Performance
- Occurrences
- 15
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilityslow db query meta value14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
WARNINGMaintainabilityDynamic hook name14
- Category
- Maintainability
- Occurrences
- 14
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$filter".
WARNINGSecurityMissing nonce verification14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityerror log var export8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
var_export() found. Debug code should not normally be used in production.
ERRORMaintainabilityOffloaded Content5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityslow db query tax query5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of tax_query, possible slow query.
WARNINGMaintainabilityerror log error log5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
External Connections
Potential connections found in static code analysis.
Outbound calls
251
External assets
1
Incoming endpoints
48
Notable Domains
schemas.wp.org47 · outbound
jetpack.com9 · outbound
1.gravatar.com6 · outbound
wordpress.com6 · outbound
0.gravatar.com5 · outbound
2.gravatar.com5 · outbound
Platform / Reference Domains
w3.org101 · platform/reference
github.com8 · platform/reference
wordpress.org7 · platform/reference
developer.wordpress.org2 · platform/reference
schema.org2 · platform/reference
core.trac.wordpress.org1 · platform/reference
opensource.org1 · platform/reference
profiles.wordpress.org1 · platform/reference
External Asset Domains
public-api.wordpress.com11 · asset + outbound
Incoming Endpoints
/wp-json/jetpack/v4/module/(?P<service>[a-z\-]+)/key/checkREST
register_rest_route
/wp-json/jetpack/v4/module/(?P<slug>[a-z\-]+)REST
register_rest_route
/wp-json/jetpack/v4/verify-site/(?P<service>[a-z\-_]+)REST
register_rest_route
/wp-json/jetpack/v4/connection/urlREST
register_rest_route
/wp-json/jetpack/v4/features/availableREST
register_rest_route
/wp-json/jetpack/v4/features/enabledREST
register_rest_route
Score History
4 score snapshots
v16.0.1
22
Latest
- Findings
- 4,323
- Errors
- 2,975
- Warnings
- 1,348
- Check
- 2.0.0
v16.0
22
Score
- Findings
- 4,323
- Errors
- 2,975
- Warnings
- 1,348
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 22 | 4,323 | 2,975 | 1,348 | v16.0.1 | 2.0.0 |
| 22 | 4,323 | 2,975 | 1,348 | v16.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
LiteSpeed Cache35 scoreWooCommerce22 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreAll-in-One WP Migration and Backup34 scoreUpdraftPlus: WP Backup & Migration Plugin24 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreImage Optimization – Compress Images and Convert to WebP or AVIF87 score
Author
Issue
Domain
Related
LiteSpeed Cache35 scoreWooCommerce22 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreAll-in-One WP Migration and Backup34 scoreUpdraftPlus: WP Backup & Migration Plugin24 scoreDuplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More21 scoreImage Optimization – Compress Images and Convert to WebP or AVIF87 score
Related Plugins
Aruba Migration Tool
600 active installs
100
Cache Using Gzip
400 active installs
100
Core Web Vitals & PageSpeed Booster
1k+ active installs
100
Disable Emojis (GDPR friendly)
60k+ active installs
100
Embed Optimizer
50k+ active installs
100
Export Media as ZIP
1k+ active installs
100