MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites

Build professional WordPress sites faster. All features free forever. No locked blocks. Optional Cloud Library saves you time.

v2.2.0Christiaan PieterseUpdated Added 700 installs100% rating
33
Score
2
Errors
503
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance100
Maintainability38

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

505 findings

Maintainability

400

13 issue groups

Security

105

8 issue groups

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_pseudo_element_selector".123
Category
Maintainability
Occurrences
123
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_pseudo_element_selector".

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.110
Category
Maintainability
Occurrences
110
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().100
Category
Maintainability
Occurrences
100
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGSecurityRequest data is not unslashed$_COOKIE['maxi_blocks_key'] not unslashed before sanitization. Use wp_unslash() or similar31
Category
Security
Occurrences
31
Severity
warning

Sample message

$_COOKIE['maxi_blocks_key'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $placeholders at "SELECT * FROM {$wpdb->prefix}maxi_blocks_styles WHERE post_id IN ($placeholders)"20
Category
Security
Occurrences
20
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $placeholders at "SELECT * FROM {$wpdb->prefix}maxi_blocks_styles WHERE post_id IN ($placeholders)"

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$coreClass".19
Category
Maintainability
Occurrences
19
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$coreClass".

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE['maxi_blocks_key']19
Category
Security
Occurrences
19
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE['maxi_blocks_key']

WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.18
Category
Maintainability
Occurrences
18
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WARNINGMaintainabilityslow db query tax queryDetected usage of tax_query, possible slow query.17
Category
Maintainability
Occurrences
17
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $db_css_table_name used in $wpdb->get_col()11
Category
Security
Occurrences
11
Severity
warning

Sample message

Unescaped parameter $db_css_table_name used in $wpdb->get_col()

Show 11 more
WARNINGSecurityUnfinished Prepare8
Category
Security
Occurrences
8
Severity
warning

Sample message

Replacement variables found, but no valid placeholders found in the query.

WARNINGSecurityMissing nonce verification8
Category
Security
Occurrences
8
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityNonce verification recommended6
Category
Security
Occurrences
6
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilitySchema Change4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WARNINGMaintainabilityNon-prefixed constant2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "REQUIRED_MARIADB_VERSION".

WARNINGMaintainabilityNon-prefixed hook name2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "page_template_plugin_dir_path".

WARNINGSecurityInput is not validated or sanitized2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a non-sanitized, non-validated input variable _SERVER: "://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]"

ERRORMaintainabilityMissing direct file access protection2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityNon-prefixed class1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "StylesDefaults".

WARNINGMaintainabilityMissing Version1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites" is different from the name declared in plugin header "MaxiBlocks".

External Connections

Potential connections found in static code analysis.

42 domains

Outbound calls

169

External assets

2

Incoming endpoints

22

Notable Domains

my.maxiblocks.com11 · outbound
api.openai.com8 · outbound
js.langchain.com7 · outbound
json-schema.org7 · outbound
unpkg.com6 · outbound
youtu.be6 · outbound

Platform / Reference Domains

w3.org9 · platform/reference
gnu.org1 · platform/reference
wordpress.org1 · platform/reference

External Asset Domains

maxiblocks.com60 · asset + outbound
github.com6 · asset + outbound

Incoming Endpoints

wp_ajax_nopriv_maxi_get_frontend_assetspublic

wp_ajax

/wp-json/maxi-blocks/v1.0/check-importer-statusREST

register_rest_route

/wp-json/maxi-blocks/v1/dismiss-noticeREST

register_rest_route

Admin AJAX endpoints17
wp_ajax_maxi_get_frontend_assetsauthenticated

wp_ajax

wp_ajax_maxi_activate_importerauthenticated

wp_ajax

wp_ajax_maxi_activate_themeauthenticated

wp_ajax

wp_ajax_maxi_add_custom_image_sizeauthenticated

wp_ajax

wp_ajax_maxi_check_auth_statusauthenticated

wp_ajax

wp_ajax_maxi_complete_quick_startauthenticated

wp_ajax

wp_ajax_maxi_get_optionauthenticated

wp_ajax

wp_ajax_maxi_install_importerauthenticated

wp_ajax

wp_ajax_maxi_network_check_auth_statusauthenticated

wp_ajax

wp_ajax_maxi_network_validate_licenseauthenticated

wp_ajax

wp_ajax_maxi_remove_custom_image_sizeauthenticated

wp_ajax

wp_ajax_maxi_save_design_settingsauthenticated

wp_ajax

5 more hidden

Score History

First score snapshot

v2.2.0

33

Latest

Findings
505
Errors
2
Warnings
503
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins