Media Library Assistant

Enhances the Media Library; powerful gallery and list shortcodes, full taxonomy support, IPTC/EXIF/XMP/PDF processing, bulk/quick edit.

v3.38David LingrenUpdated Added 70k+ installs96% rating89% support resolved
23
Score
1,144
Errors
3,943
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance84
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

5,087 findings

Security

2,760

9 issue groups

Maintainability

1,739

11 issue groups

I18n

329

4 issue groups

Performance

19

1 issue group

WARNINGSecurityRecommendedProcessing form data without nonce verification.1,656
Category
Security
Occurrences
1,656
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityerror log var exportvar_export() found. Debug code should not normally be used in production.634
Category
Maintainability
Occurrences
634
Severity
warning

Sample message

var_export() found. Debug code should not normally be used in production.

WARNINGMaintainabilityNon Prefixed Hookname FoundHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "ajax_query_attachments_args".370
Category
Maintainability
Occurrences
370
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "ajax_query_attachments_args".

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <div class=\"{$messages_class}\" id=\"message\"><p>\n"'.273
Category
Security
Occurrences
273
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <div class=\"{$messages_class}\" id=\"message\"><p>\n"'.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_POST[&#039;query&#039;]253
Category
Security
Occurrences
253
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST[&#039;query&#039;]

WARNINGSecurityMissing Unslash$_POST[&#039;query&#039;] not unslashed before sanitization. Use wp_unslash() or similar235
Category
Security
Occurrences
235
Severity
warning

Sample message

$_POST[&#039;query&#039;] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilityNon Prefixed Class FoundClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;AC_Addon_MLA_ListScreen&quot;.174
Category
Maintainability
Occurrences
174
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;AC_Addon_MLA_ListScreen&quot;.

ERRORI18nText Domain MismatchMismatched text domain. Expected 'media-library-assistant' but got 'MLAParentCustomFieldMapping'.149
Category
I18n
Occurrences
149
Severity
error

Sample message

Mismatched text domain. Expected 'media-library-assistant' but got 'MLAParentCustomFieldMapping'.

ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;136
Category
Maintainability
Occurrences
136
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().130
Category
I18n
Occurrences
130
Severity
error

Sample message

Missing $domain parameter in function call to __().

Show 15 more
WARNINGMaintainabilityDirect Query126
Category
Maintainability
Occurrences
126
Severity
warning

Sample message

Use of a direct database call is discouraged.

ERRORSecurityNot Prepared125
Category
Security
Occurrences
125
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $clause

WARNINGMaintainabilityNo Caching121
Category
Maintainability
Occurrences
121
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGMaintainabilityNon Prefixed Variable Found99
Category
Maintainability
Occurrences
99
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;$active_tab&quot;.

ERRORSecurityUnescaped DBParameter89
Category
Security
Occurrences
89
Severity
error

Sample message

Unescaped parameter $current_user->ID used in $wpdb->get_results()\n$current_user->ID used without escaping.

WARNINGSecurityInput Not Validated69
Category
Security
Occurrences
69
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST[&#039;query&#039;]. Check that the array index exists before using it.

WARNINGSecurityMissing39
Category
Security
Occurrences
39
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORI18nMissing Translators Comment31
Category
I18n
Occurrences
31
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERRORSecurityUnsafe Printing Function21
Category
Security
Occurrences
21
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERRORMaintainabilityunlink unlink21
Category
Maintainability
Occurrences
21
Severity
error

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

WARNINGMaintainabilityslow db query meta value20
Category
Maintainability
Occurrences
20
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

ERRORMaintainabilityfile system operations fread20
Category
Maintainability
Occurrences
20
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().

ERRORI18nNon Singular String Literal Plural19
Category
I18n
Occurrences
19
Severity
error

Sample message

The $plural parameter must be a single text string literal. Found: $item_values['multiple_text']

WARNINGPerformancePost Not In exclude19
Category
Performance
Occurrences
19
Severity
warning

Sample message

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

ERRORMaintainabilitydate date18
Category
Maintainability
Occurrences
18
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

Score History

First score snapshot

v3.38

23

Latest

Findings
5,087
Errors
1,144
Warnings
3,943
Check
2.0.0

Related Plugins

Disable Lazy Load

10k+ active installs

100
Image Placeholders

60k+ active installs

100
Modern Image Formats

100k+ active installs

100
Attachment Pages Redirect

20k+ active installs

99