Zen Feed

Плагин формирует RSS-ленту (фид), которая подходит для таких сервисов как: "Свежее и актуальное" в панели вебмастера Яндекс, "Яндекс.

v0.8.5mihdanUpdated Added 500 installs100% rating
39
Score
39
Errors
22
Warnings
+0
Change

Category Scores

Security0
Repo77
Performance100
Maintainability87

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

61 findings

Security

42

6 issue groups

Maintainability

10

7 issue groups

Repo Compliance

5

5 issue groups

I18n

4

3 issue groups

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$form['id']'.21
Category
Security
Occurrences
21
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$form['id']'.

ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.9
Category
Security
Occurrences
9
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.7
Category
Security
Occurrences
7
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wsa_form_bottom_' . $form['id']".4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'wsa_form_bottom_' . $form['id']".

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST[$this->slug . '_excerpt']2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST[$this->slug . '_excerpt']

WARNINGSecurityRequest data is not unslashed$_POST[$this->slug . '_excerpt'] not unslashed before sanitization. Use wp_unslash() or similar2
Category
Security
Occurrences
2
Severity
warning

Sample message

$_POST[$this->slug . '_excerpt'] not unslashed before sanitization. Use wp_unslash() or similar

ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().2
Category
I18n
Occurrences
2
Severity
error

Sample message

Missing $domain parameter in function call to __().

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "Migrations".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Migrations".

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.1
Category
Security
Occurrences
1
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

Show 11 more
ERRORMaintainabilityNo Explicit Version1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.

ERRORI18nMissing Translators Comment1
Category
I18n
Occurrences
1
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERRORI18nText Domain Mismatch1
Category
I18n
Occurrences
1
Severity
error

Sample message

Mismatched text domain. Expected 'mihdan-mailru-pulse-feed' but got 'mihdan-yandex-turbo-feed'.

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Zen Feed" is different from the name declared in plugin header "Zen Feed (Свежее и актуальное, Дзен, Пульс, Яндекс.Новости)".

WARNINGMaintainabilitymissing composer json file1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The "/vendor" directory using composer exists, but "composer.json" file is missing.

ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.6 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

WARNINGRepo Complianceplugin header nonexistent domain path1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"

ERRORRepo Compliancereadme description non official language1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

The readme description contains unofficial language. It must be written in standard English.

WARNINGRepo Compliancereadme parser warnings trimmed short description1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.

ERRORRepo Compliancereadme short description non official language1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

The readme short description contains unofficial language. It must be written in standard English.

ERRORMaintainabilitywp function not compatible with requires wp1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Function "wp_admin_notice()" requires WordPress 6.4.0, but your plugin minimum supported version is WordPress 5.3.0.

External Connections

Potential connections found in static code analysis.

23 domains

Outbound calls

63

External assets

0

Incoming endpoints

1

Notable Domains

php.net13 · outbound
help.mail.ru5 · outbound
dzen.ru3 · outbound
kobzarev.com3 · outbound
tools.ietf.org3 · outbound
getcomposer.org2 · outbound

Platform / Reference Domains

github.com6 · platform/reference
gnu.org4 · platform/reference
wordpress.org4 · platform/reference
w3.org2 · platform/reference
profiles.wordpress.org1 · platform/reference
ru.wordpress.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints1
wp_ajax_wptrt_dismiss_noticeauthenticated

wp_ajax

Score History

First score snapshot

v0.8.5

39

Latest

Findings
61
Errors
39
Warnings
22
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

100
Send Images to RSS

3k+ active installs

98
WebSub (FKA. PubSubHubbub)

100k+ active installs

98
92
Widgets for Social Post Feed

400 active installs

91