Allows members to sign in to MembershipWorks and as a WordPress user on your site.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
99
6 issue groups
I18n
6
1 issue group
Maintainability
3
3 issue groups
Repo Compliance
1
1 issue group
WARNINGSecurityRequest data is not unslashed$_POST['log'] not unslashed before sanitization. Use wp_unslash() or similar23
- Category
- Security
- Occurrences
- 23
- Severity
- warning
Sample message
$_POST['log'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['log']20
- Category
- Security
- Occurrences
- 20
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['log']
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$SF_widget_login'.19
- Category
- Security
- Occurrences
- 19
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$SF_widget_login'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.17
- Category
- Security
- Occurrences
- 17
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.14
- Category
- Security
- Occurrences
- 14
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_SERVER['HTTP_USER_AGENT']. Check that the array index exists before using it.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER['HTTP_USER_AGENT']. Check that the array index exists before using it.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORMaintainabilitystrip tags strip tagsstrip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
ERRORMaintainabilityinvalid plugin namePlugin name header in your readme is missing or invalid. Please update your readme with a valid plugin name header. Eg: "=== Example Name ==="1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Plugin name header in your readme is missing or invalid. Please update your readme with a valid plugin name header. Eg: "=== Example Name ==="
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Show 1 moreShow less
WARNINGRepo Compliancereadme parser warnings too many tags1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
One or more tags were ignored. Please limit your plugin to 5 tags.
External Connections
Potential connections found in static code analysis.
Outbound calls
2
External assets
0
Incoming endpoints
3
Notable Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax
wp_ajax
Admin AJAX endpoints1
wp_ajax
Score History
First score snapshot
v6.4
43
Latest
- Findings
- 109
- Errors
- 28
- Warnings
- 81
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 43 | 109 | 28 | 81 | v6.4 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.