Prioritized issue groups from the latest Plugin Check scan
Maintainability
89
14 issue groups
I18n
17
4 issue groups
Security
6
2 issue groups
Repo Compliance
2
2 issue groups
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_composite_products_cart".
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "KL_Plugins_Screen_Updates".
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wck_option_' . $option".
Sample message
Mismatched text domain. Expected 'klaviyo' but got 'klaviyo-checkout-block'.
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$my_plugin_file".
Sample message
Missing $domain parameter in function call to esc_html_e().
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Sample message
Processing form data without nonce verification.
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "OLD_KLAVIYO_PLUGINS".
Sample message
Use of a direct database call is discouraged.
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Sample message
Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "WCK\Blocks".
Sample message
$_POST['nonce'] not unslashed before sanitization. Use wp_unslash() or similar
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
Sample message
wp_reset_query() is discouraged. Use wp_reset_postdata() instead.
Sample message
The $text parameter must be a single text string literal. Found: ( 'Title:' )
Sample message
Editor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility.
Sample message
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "i18n/languages"
Sample message
Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins
Sample message
The "Text Domain" header in the plugin file does not match the slug. Found "woocommerce-klaviyo", expected "klaviyo".
Sample message
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins
Potential connections found in static code analysis.
Outbound calls
36
External assets
0
Incoming endpoints
2
No external asset domains detected.
No public endpoints detected.
wp_ajax
wp_ajax
2 score snapshots
v3.8.2
79
Latest
v3.8.0
79
Score
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 79 | 114 | 27 | 87 | v3.8.2 | 2.0.0 |
| 79 | 112 | 26 | 86 | v3.8.0 | 2.0.0 |
Author, categories, issues, domains, and nearby plugins.