Social Login with Discord, Facebook, Google, Twitter, LinkedIn and 40+ apps. Social login with social share and comments. Free, fast & easy! WooCo …
29
Score
92
Errors
898
Warnings
+0
Change
Category Scores
Security0
Repo97
Performance100
Maintainability21
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
762
5 issue groups
Maintainability
214
17 issue groups
I18n
13
2 issue groups
Repo Compliance
1
1 issue group
WARNINGSecurityRequest data is not unslashed$_COOKIE['redirect_current_url'] not unslashed before sanitization. Use wp_unslash() or similar441
- Category
- Security
- Occurrences
- 441
- Severity
- warning
Sample message
$_COOKIE['redirect_current_url'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['action']. Check that the array index exists before using it.314
- Category
- Security
- Occurrences
- 314
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['action']. Check that the array index exists before using it.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;52
- Category
- Maintainability
- Occurrences
- 52
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.35
- Category
- Maintainability
- Occurrences
- 35
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.34
- Category
- Maintainability
- Occurrences
- 34
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().33
- Category
- Maintainability
- Occurrences
- 33
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGMaintainabilityupgrade notice limitThe upgrade notice for "4.0" exceeds the limit of 300 characters.13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
The upgrade notice for "4.0" exceeds the limit of 300 characters.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'miniorange-login-openid' but got 'flw'.9
- Category
- I18n
- Occurrences
- 9
- Severity
- error
Sample message
Mismatched text domain. Expected 'miniorange-login-openid' but got 'flw'.
ERRORMaintainabilitystrip tags strip tagsstrip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
Show 15 moreShow less
ERRORMaintainabilitydate date5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGSecurityInput is not sanitized5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_SERVER['REQUEST_URI']
ERRORMaintainabilityNon Enqueued Script5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Scripts must be registered/enqueued via wp_enqueue_script()
WARNINGMaintainabilitySchema Change4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORI18nNon Singular String Literal Text4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $customLogoutLink
WARNINGMaintainabilityerror log print r3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
ERRORMaintainabilityNon Enqueued Stylesheet3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
ERRORMaintainabilityLocalhost URL found2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Do not use Localhost/127.0.0.1/*.local in your code. Found: http://127.0.0.1/
ERRORMaintainabilitytimezone change date default timezone set1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Using date_default_timezone_set() and similar isn't allowed, instead use WP internal timezone support.
ERRORSecurityOutput is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$result['body']'.
WARNINGSecurityMissing nonce verification1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilitylibrary core files1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Library files that are already in the WordPress core are not permitted.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn)" is different from the name declared in plugin header "Social Login, Social Sharing by miniOrange".
WARNINGRepo Compliancereadme parser warnings trimmed short description1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.
ERRORMaintainabilitywp function not compatible with requires wp1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Function "apply_shortcodes()" requires WordPress 5.4.0, but your plugin minimum supported version is WordPress 4.1.0.
External Connections
Potential connections found in static code analysis.
Outbound calls
267
External assets
15
Incoming endpoints
18
Notable Domains
linkedin.com14 · outbound
plugins.miniorange.com14 · outbound
twitter.com10 · outbound
facebook.com9 · outbound
digg.com8 · outbound
getpocket.com8 · outbound
Platform / Reference Domains
wordpress.org9 · platform/reference
github.com4 · platform/reference
opensource.org2 · platform/reference
gnu.org1 · platform/reference
w3.org1 · platform/reference
External Asset Domains
youtube.com27 · asset + outbound
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints18
wp_ajax_custom_app_enable_change_updateauthenticated
wp_ajax
wp_ajax_mo_disable_appauthenticated
wp_ajax
wp_ajax_mo_openid_app_enableauthenticated
wp_ajax
wp_ajax_mo_openid_app_instructionsauthenticated
wp_ajax
wp_ajax_mo_openid_capp_deleteauthenticated
wp_ajax
wp_ajax_mo_openid_capp_detailsauthenticated
wp_ajax
wp_ajax_mo_openid_check_capp_enableauthenticated
wp_ajax
wp_ajax_mo_openid_profile_compauthenticated
wp_ajax
wp_ajax_mo_openid_rating_givenauthenticated
wp_ajax
wp_ajax_mo_openid_shareauthenticated
wp_ajax
wp_ajax_mo_openid_social_linkingauthenticated
wp_ajax
wp_ajax_mo_openid_test_configuration_updateauthenticated
wp_ajax
6 more hidden
Score History
3 score snapshots
v7.8.1
29
Latest
- Findings
- 990
- Errors
- 92
- Warnings
- 898
- Check
- 2.0.0
v7.8.0
29
Score
- Findings
- 990
- Errors
- 92
- Warnings
- 898
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 29 | 990 | 92 | 898 | v7.8.1 | 2.0.0 |
| 29 | 990 | 92 | 898 | v7.8.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreDuplicate Page40 scoreHostinger Tools82 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWidgets for Google Reviews95 scoreGoogle for WooCommerce38 scoreGA Google Analytics – Connect Google Analytics to WordPress42 scoreMeta for WooCommerce94 scoreMeta pixel for WordPress98 score
Author
Issue
Domain
Related
Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreDuplicate Page40 scoreHostinger Tools82 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWidgets for Google Reviews95 scoreGoogle for WooCommerce38 scoreGA Google Analytics – Connect Google Analytics to WordPress42 scoreMeta for WooCommerce94 scoreMeta pixel for WordPress98 score
Related Plugins
Magic robots.txt
1k+ active installs
100
ICS Calendar
10k+ active installs
99
VS Meta Description
3k+ active installs
99
Very Simple Google Maps
3k+ active installs
99
IndexMeNow
2k+ active installs
99
Web Stories Widgets For Elementor
1k+ active installs
99