MainWP Child establishes a secure link between your WordPress sites and your self-hosted MainWP Dashboard, simplifying site management.
35
Score
13
Errors
183
Warnings
-3
Change
Category Scores
Security0
Repo100
Performance96
Maintainability54
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
129
16 issue groups
Security
55
7 issue groups
I18n
8
1 issue group
Performance
3
1 issue group
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".52
- Category
- Maintainability
- Occurrences
- 52
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().38
- Category
- Maintainability
- Occurrences
- 38
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.17
- Category
- Security
- Occurrences
- 17
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $_select at "SELECT $_select FROM $gpi_page_stats WHERE ( $reports_typestocheck[0] ) AND $nullcheck"10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $_select at "SELECT $_select FROM $gpi_page_stats WHERE ( $reports_typestocheck[0] ) AND $nullcheck"
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "BACKWPUP_INITIALIZED".9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "BACKWPUP_INITIALIZED".
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['f']9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['f']
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.8
- Category
- I18n
- Occurrences
- 8
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $identifier used in $wpdb->query()\n$identifier assigned unsafely at line 1391.7
- Category
- Security
- Occurrences
- 7
- Severity
- warning
Sample message
Unescaped parameter $identifier used in $wpdb->query()\n$identifier assigned unsafely at line 1391.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$bulk_settings_managercurrent_time".6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$bulk_settings_managercurrent_time".
Show 15 moreShow less
WARNINGMaintainabilityABSPATHDetected3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Writing files using ABSPATH may be problematic. Consider using wp_upload_dir() instead if storing user data or generated files.
ERRORMaintainabilityPlugin Directory Write3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using rename(). Detected usage of constant WP_PLUGIN_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
WARNINGMaintainabilityDiscouraged PHP function3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The use of function set_time_limit() is discouraged
WARNINGMaintainabilityNon-prefixed function3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_screen_option".
WARNINGPerformancePost Not In exclude3
- Category
- Performance
- Occurrences
- 3
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://docs.wpvip.com/databases/optimize-queries/using-post__not_in/ for more information.
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "MainWP Child - Securely Connects to the MainWP Dashboard to Manage Multiple Sites" - contains the restricted term "wp" which cannot be used at all in your plugin name.
WARNINGMaintainabilityDirect Query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGSecurityUnfinished Prepare2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGSecurityRequest data is not unslashed2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
$_POST['is_individual'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityupdate modification detected2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins
WARNINGMaintainabilityDefine WP DEBUG1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected production-time change to PHP error reporting: define().
WARNINGMaintainabilityDynamic hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook_name".
WARNINGMaintainabilityNon-prefixed class1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "PslTrie".
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "MainWP Child - Securely Connects to the MainWP Dashboard to Manage Multiple Sites" is different from the name declared in plugin header "MainWP Child".
ERRORMaintainabilityplugin updater detected1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins
External Connections
Potential connections found in static code analysis.
Outbound calls
298
External assets
0
Incoming endpoints
2
Notable Domains
mainwp.com37 · outbound
phpseclib.sourceforge.net20 · outbound
updraftplus.com15 · outbound
tools.ietf.org10 · outbound
en.wikipedia.org9 · outbound
code-reference.mainwp.com8 · outbound
Platform / Reference Domains
developer.wordpress.org75 · platform/reference
opensource.org17 · platform/reference
wordpress.org9 · platform/reference
github.com8 · platform/reference
api.wordpress.org4 · platform/reference
codex.wordpress.org2 · platform/reference
gnu.org2 · platform/reference
w3.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints2
wp_ajax_mainwp_backupbuddy_download_archiveauthenticated
wp_ajax
wp_ajax_mainwp_wordfence_download_htaccessauthenticated
wp_ajax
Score History
8 score snapshots
v6.2
35
Latest
- Findings
- 196
- Errors
- 13
- Warnings
- 183
- Check
- 2.1.0
v6.1.8
38
Score
- Findings
- 143
- Errors
- 3
- Warnings
- 140
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 35 | 196 | 13 | 183 | v6.2 | 2.1.0 |
| 38 | 143 | 3 | 140 | v6.1.8 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreHostinger Tools82 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention24 scoreUser Role Editor100 scoreMainWP Child Reports35 score
Author
Issue
Domain
Related
Contact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreHostinger Tools82 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention24 scoreUser Role Editor100 scoreMainWP Child Reports35 score
Related Plugins
User Role Editor
700k+ active installs
100
Stop User Enumeration
50k+ active installs
100
Login Security Captcha
10k+ active installs
100
Stop XML-RPC Attacks
6k+ active installs
100
Dam Spam
3k+ active installs
100
Compromise Scanner for wp2shell
3k+ active installs
100