Speed up your WordPress site with one-click optimizations like Page Cache, Critical CSS, and Image CDN to improve Core Web Vitals.
29
Score
659
Errors
247
Warnings
+0
Change
Category Scores
Security0
Repo97
Performance94
Maintainability27
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
595
2 issue groups
Maintainability
233
14 issue groups
Security
73
2 issue groups
Performance
4
2 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'jetpack-boost' but got 'jetpack-admin-ui'.594
- Category
- I18n
- Occurrences
- 594
- Severity
- error
Sample message
Mismatched text domain. Expected 'jetpack-boost' but got 'jetpack-admin-ui'.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'jitm_' . $envelope->CTA->hook".59
- Category
- Maintainability
- Occurrences
- 59
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'jitm_' . $envelope->CTA->hook".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.54
- Category
- Maintainability
- Occurrences
- 54
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $custom_table_name used in $wpdb->get_row()\n$custom_table_name assigned unsafely at line 614.41
- Category
- Security
- Occurrences
- 41
- Severity
- warning
Sample message
Unescaped parameter $custom_table_name used in $wpdb->get_row()\n$custom_table_name assigned unsafely at line 614.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().37
- Category
- Maintainability
- Occurrences
- 37
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Debug: Attempting to create {$this->action} nonce before the user is set."'.32
- Category
- Security
- Occurrences
- 32
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Debug: Attempting to create {$this->action} nonce before the user is set."'.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;31
- Category
- Maintainability
- Occurrences
- 31
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityslow db query meta keyDetected usage of meta_key, possible slow query.13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$boost_css_concatenate".11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$boost_css_concatenate".
WARNINGMaintainabilityslow db query meta valueDetected usage of meta_value, possible slow query.10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
Show 11 moreShow less
WARNINGMaintainabilityDiscouraged PHP function6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilityNon-prefixed constant4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DONOTCACHEPAGE".
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "Jetpack Boost - Website Speed, Performance and Critical CSS" - contains the restricted term "jetpack" and cannot be used to begin your plugin name. We disallow the use of certain terms in ways that are abused, or potentially infringe on and/or are misleading with regards to trademarks. You may use the term "jetpack" elsewhere in your plugin name, such as "... for jetpack".
WARNINGPerformancePost Not In exclude2
- Category
- Performance
- Occurrences
- 2
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGPerformancePost Not In post not in2
- Category
- Performance
- Occurrences
- 2
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilityupdate modification detected2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
ERRORMaintainabilityPlugin Directory Write1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using file_put_contents(). Detected usage of constant WP_CONTENT_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Jetpack Boost - Website Speed, Performance and Critical CSS" is different from the name declared in plugin header "Jetpack Boost".
WARNINGRepo Complianceplugin header nonexistent domain path1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
ERRORMaintainabilityplugin updater detected1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins
External Connections
Potential connections found in static code analysis.
Outbound calls
240
External assets
3
Incoming endpoints
57
Notable Domains
svelte.dev20 · outbound
automattic.com15 · outbound
jetpack.com14 · outbound
darkvisitors.com13 · outbound
wordpress.com10 · outbound
public-api.wordpress.com8 · outbound
Platform / Reference Domains
w3.org25 · platform/reference
github.com20 · platform/reference
core.trac.wordpress.org8 · platform/reference
developer.wordpress.org2 · platform/reference
code.trac.wordpress.org1 · platform/reference
codex.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
plugins.trac.wordpress.org1 · platform/reference
External Asset Domains
i0.wp.com17 · asset + outbound
widgets.wp.com6 · asset + outbound
Incoming Endpoints
/wp-json/jetpack/v4/connectionREST
register_rest_route
/wp-json/jetpack/v4/jitmREST
register_rest_route
/wp-json/my-jetpack/v1/site/recommendations/evaluation/result/REST
register_rest_route
/wp-json/jetpack/v4/connection/authorize_urlREST
register_rest_route
/wp-json/jetpack/v4/connection/checkREST
register_rest_route
/wp-json/jetpack/v4/connection/dataREST
register_rest_route
Admin AJAX endpoints7
admin_post_jetpack_invite_user_to_wpcomauthenticated
admin_post
admin_post_jetpack_resend_invite_user_to_wpcomauthenticated
admin_post
admin_post_jetpack_revoke_invite_user_to_wpcomauthenticated
admin_post
wp_ajax_boost_proxy_cssauthenticated
wp_ajax
wp_ajax_boost_proxy_igauthenticated
wp_ajax
wp_ajax_health-check-jetpack-connection-healthauthenticated
wp_ajax
wp_ajax_jetpack_tracksauthenticated
wp_ajax
Score History
3 score snapshots
v4.6.3
29
Latest
- Findings
- 906
- Errors
- 659
- Warnings
- 247
- Check
- 2.0.0
v4.6.2
29
Score
- Findings
- 906
- Errors
- 659
- Warnings
- 247
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 29 | 906 | 659 | 247 | v4.6.3 | 2.0.0 |
| 29 | 906 | 659 | 247 | v4.6.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Jetpack – WP Security, Backup, Speed, & Growth22 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreImage Optimization – Compress Images and Convert to WebP or AVIF87 scoreManageWP Worker23 scoreSpeed Optimizer – The All-In-One Performance-Boosting Plugin36 score
Author
Issue
Domain
Related
Jetpack – WP Security, Backup, Speed, & Growth22 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreImage Optimization – Compress Images and Convert to WebP or AVIF87 scoreManageWP Worker23 scoreSpeed Optimizer – The All-In-One Performance-Boosting Plugin36 score
Related Plugins
Modern Image Formats
100k+ active installs
100
Disable Emojis (GDPR friendly)
60k+ active installs
100
Image Placeholders
60k+ active installs
100
Optimization Detective
60k+ active installs
100
Embed Optimizer
50k+ active installs
100
PWA for WP – Progressive Web Apps Made Simple
20k+ active installs
100