Create and manage custom post types and custom taxonomies with an easy-to-use UI in WordPress.
50
Score
61
Errors
55
Warnings
+0
Change
Category Scores
Security21
Repo100
Performance94
Maintainability68
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
47
10 issue groups
I18n
36
1 issue group
Security
29
5 issue groups
Performance
4
2 issue groups
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.36
- Category
- I18n
- Occurrences
- 36
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilitywp function not compatible with requires wpFunction "wp_has_ability_category()" requires WordPress 6.9.0, but your plugin minimum supported version is WordPress 6.5.0.16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- error
Sample message
Function "wp_has_ability_category()" requires WordPress 6.9.0, but your plugin minimum supported version is WordPress 6.5.0.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['mode']8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['mode']
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityRequest data is not unslashed$_GET['mode'] not unslashed before sanitization. Use wp_unslash() or similar6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
$_GET['mode'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityOffloaded ContentFound call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "MB_CPT_DIR".4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "MB_CPT_DIR".
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $query3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
Show 8 moreShow less
WARNINGMaintainabilityNon-prefixed hook name2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "the_content".
WARNINGMaintainabilityNon-prefixed global variable2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$query".
WARNINGSecurityInput is not validated2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['order_data']. Check that the array index exists before using it.
WARNINGPerformancePost Not In exclude2
- Category
- Performance
- Occurrences
- 2
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGPerformancePost Not In post not in2
- Category
- Performance
- Occurrences
- 2
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilityNon-prefixed function1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "mb_cpt_load".
ERRORMaintainabilityinvalid tested upto minor1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 7.0.1 The version number should only include major versions 7.0.
WARNINGMaintainabilitymissing composer json file1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The "/vendor" directory using composer exists, but "composer.json" file is missing.
External Connections
Potential connections found in static code analysis.
Outbound calls
22
External assets
5
Incoming endpoints
4
Notable Domains
metabox.io4 · outbound
php-fig.org2 · outbound
fontawesome.com1 · outbound
getcomposer.org1 · outbound
stackoverflow.com1 · outbound
Platform / Reference Domains
w3.org4 · platform/reference
codex.wordpress.org2 · platform/reference
github.com2 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
cdn.jsdelivr.net9 · asset + outbound
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints4
wp_ajax_mb_cpt_save_orderauthenticated
wp_ajax
wp_ajax_mb_cpt_save_order_termsauthenticated
wp_ajax
wp_ajax_mbcpt_migrate_post_typesauthenticated
wp_ajax
wp_ajax_mbcpt_migrate_taxonomiesauthenticated
wp_ajax
Score History
3 score snapshots
v2.12.1
50
Latest
- Findings
- 116
- Errors
- 61
- Warnings
- 55
- Check
- 2.0.0
v2.12.0
50
Score
- Findings
- 115
- Errors
- 60
- Warnings
- 55
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 50 | 116 | 61 | 55 | v2.12.1 | 2.0.0 |
| 50 | 115 | 60 | 55 | v2.12.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
LiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreCustom Post Type UI51 scoreMeta Box95 scoreCustom Post Type Permalinks35 scorePods – Custom Content Types and Fields41 score
Author
Category
Issue
Domain
Related
LiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreCustom Post Type UI51 scoreMeta Box95 scoreCustom Post Type Permalinks35 scorePods – Custom Content Types and Fields41 score
Related Plugins
Essential Content Types
20k+ active installs
100
CubeWP Framework
4k+ active installs
100
Simple Taxonomy Refreshed
400 active installs
100
Custom Post Type Widgets
10k+ active installs
99
Post Admin Word Count
2k+ active installs
99
Custom Post Type Rewrite
1k+ active installs
99