JSON API Auth

Extends the JSON API Plugin for RESTful user authentication

v3.1.0Ali QureshiUpdated Added 700 installs94% rating
79
Score
5
Errors
11
Warnings
+0
Change

Category Scores

Security66
Repo94
Performance100
Maintainability91

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

16 findings

Maintainability

8

4 issue groups

Security

6

4 issue groups

I18n

1

1 issue group

Repo Compliance

1

1 issue group

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "auth_action_links".4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "auth_action_links".

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.2
Category
Security
Occurrences
2
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.2
Category
Security
Occurrences
2
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORMaintainabilitywp function not compatible with requires wpFunction "get_avatar_url()" requires WordPress 4.2.0, but your plugin minimum supported version is WordPress 3.0.1.2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Function "get_avatar_url()" requires WordPress 4.2.0, but your plugin minimum supported version is WordPress 3.0.1.

WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "auth_cookie_expiration".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "auth_cookie_expiration".

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.1
Category
Security
Occurrences
1
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGSecurityRequest data is not unslashed$_POST[$param] not unslashed before sanitization. Use wp_unslash() or similar1
Category
Security
Occurrences
1
Severity
warning

Sample message

$_POST[$param] not unslashed before sanitization. Use wp_unslash() or similar

ERRORRepo Compliancelicense mismatchYour plugin has a different license declared in the readme file and plugin header. Please update your readme with a valid GPL license identifier.1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Your plugin has a different license declared in the readme file and plugin header. Please update your readme with a valid GPL license identifier.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

External Connections

Potential connections found in static code analysis.

2 domains

Outbound calls

5

External assets

0

Incoming endpoints

0

Notable Domains

parorrey.com4 · outbound

Platform / Reference Domains

github.com1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Score History

First score snapshot

v3.1.0

79

Latest

Findings
16
Errors
5
Warnings
11
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related Plugins

99
WP REST Yoast Meta

1k+ active installs

97
ACF to WP-API

400 active installs

96