MasterStudy LMS WordPress Plugin – for Online Courses and Education

Learning Management System and eLearning plugin for WordPress. Create easily LMS WordPress website, add and sell Courses, Lessons, Quizzes online.

v3.7.36StylemixUpdated Added 10k+ installs90% rating0% support resolved
23
Score
1,419
Errors
4,875
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance85
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

6,294 findings

Maintainability

5,091

15 issue groups

Security

739

8 issue groups

I18n

278

2 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_label".3,027
Category
Maintainability
Occurrences
3,027
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_label".

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;723
Category
Maintainability
Occurrences
723
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'stm_lms_quiz_' . $status".319
Category
Maintainability
Occurrences
319
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'stm_lms_quiz_' . $status".

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "addCustomImportButton".312
Category
Maintainability
Occurrences
312
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "addCustomImportButton".

ERRORI18nText Domain MismatchMismatched text domain. Expected 'masterstudy-lms-learning-management-system' but got 'companion-elementor'.223
Category
I18n
Occurrences
223
Severity
error

Sample message

Mismatched text domain. Expected 'masterstudy-lms-learning-management-system' but got 'companion-elementor'.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.186
Category
Maintainability
Occurrences
186
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGSecurityRequest data is not unslashed$_COOKIE[$cookie_name] not unslashed before sanitization. Use wp_unslash() or similar175
Category
Security
Occurrences
175
Severity
warning

Sample message

$_COOKIE[$cookie_name] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().171
Category
Maintainability
Occurrences
171
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.136
Category
Security
Occurrences
136
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$cookie_name]107
Category
Security
Occurrences
107
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE[$cookie_name]

Show 15 more
ERRORSecurityOutput is not escaped99
Category
Security
Occurrences
99
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$error'.

WARNINGSecurityDatabase parameter is not escaped94
Category
Security
Occurrences
94
Severity
warning

Sample message

Unescaped parameter $assignments_table used in $wpdb->get_results()\n$assignments_table assigned unsafely at line 13.

WARNINGMaintainabilityNon-prefixed class86
Category
Maintainability
Occurrences
86
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "ApiNotifications".

ERRORMaintainabilitywp function not compatible with requires wp73
Category
Maintainability
Occurrences
73
Severity
error

Sample message

Function "determine_locale()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 4.6.0.

ERRORSecurityException output is not escaped64
Category
Security
Occurrences
64
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"$argumentName cannot be null"'.

ERRORI18nMissing Translators Comment55
Category
I18n
Occurrences
55
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGMaintainabilityNon-prefixed constant43
Category
Maintainability
Occurrences
43
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_CHMOD_DIR".

WARNINGMaintainabilityslow db query meta query38
Category
Maintainability
Occurrences
38
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

ERRORMaintainabilitycurl curl setopt34
Category
Maintainability
Occurrences
34
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNINGSecurityInput is not validated33
Category
Security
Occurrences
33
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_GET['author_id']. Check that the array index exists before using it.

WARNINGSecurityMissing nonce verification31
Category
Security
Occurrences
31
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityslow db query meta key26
Category
Maintainability
Occurrences
26
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WARNINGMaintainabilityslow db query tax query25
Category
Maintainability
Occurrences
25
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

WARNINGMaintainabilityNon-prefixed namespace14
Category
Maintainability
Occurrences
14
Severity
warning

Sample message

Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "ANP".

ERRORMaintainabilityfile system operations fread14
Category
Maintainability
Occurrences
14
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().

External Connections

Not analyzed yet.

Score History

First score snapshot

v3.7.36

23

Latest

Findings
6,294
Errors
1,419
Warnings
4,875
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related Plugins

Design Upgrade for LearnDash

7k+ active installs

97
PowerPack for LearnDash

1k+ active installs

97
76
Resume Builder

1k+ active installs

74