Receive donations on your Ko-fi page with a button on your WordPress site.
41
Score
75
Errors
15
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability81
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
52
3 issue groups
Maintainability
22
7 issue groups
I18n
16
2 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<p>{$instance['description']}</p>"'.43
- Category
- Security
- Occurrences
- 43
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<p>{$instance['description']}</p>"'.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to _e().15
- Category
- I18n
- Occurrences
- 15
- Severity
- error
Sample message
Missing $domain parameter in function call to _e().
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$args".10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$args".
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORMaintainabilitywp function not compatible with requires wpFunction "get_block_wrapper_attributes()" requires WordPress 5.6.0, but your plugin minimum supported version is WordPress 4.6.0.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Function "get_block_wrapper_attributes()" requires WordPress 5.6.0, but your plugin minimum supported version is WordPress 4.6.0.
ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Sanitization missing for register_setting().
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "Default_Ko_Fi_Options".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Default_Ko_Fi_Options".
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "write_log".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "write_log".
Show 2 moreShow less
WARNINGMaintainabilityerror log print r1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
ERRORI18nText Domain Mismatch1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched text domain. Expected 'ko-fi-button' but got 'Ko_fi'.
External Connections
Not analyzed yet.
Score History
First score snapshot
v1.4.1
41
Latest
- Findings
- 90
- Errors
- 75
- Warnings
- 15
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 41 | 90 | 75 | 15 | v1.4.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Plugin
Author
Category
Issue
Output is not escaped43 findingsMissing Arg Domain15 findingsNon-prefixed global variable10 findingsUnsafe printing function7 findingswp function not compatible with requires wp5 findingsSetting is missing a sanitization callback2 findingserror log error log2 findingsMissing direct file access protection2 findings
Related
Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More88 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreHostinger Tools82 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreUltimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin24 score
Plugin
Author
Category
Issue
Output is not escaped43 findingsMissing Arg Domain15 findingsNon-prefixed global variable10 findingsUnsafe printing function7 findingswp function not compatible with requires wp5 findingsSetting is missing a sanitization callback2 findingserror log error log2 findingsMissing direct file access protection2 findings
Related
Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More88 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreHostinger Tools82 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreUltimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin24 score
Related Plugins
Ultimate Member – reCAPTCHA
20k+ active installs
98
Prevent Concurrent Logins
900 active installs
97
RoleMaster Suite – User Role Editor for E-Commerce, Membership & Admin Panel
700 active installs
97
Expire Passwords
500 active installs
92
Simple Membership Form Shortcode
2k+ active installs
91
