MetaSlider Gallery is the ultimate gallery plugin. Build an image gallery, or show your images, videos, and slideshows in a beautiful gallery window.
32
Score
166
Errors
70
Warnings
+0
Change
Category Scores
Security0
Repo83
Performance98
Maintainability51
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
161
7 issue groups
Maintainability
53
14 issue groups
I18n
14
2 issue groups
Supply Chain
3
1 issue group
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$action_label'.73
- Category
- Security
- Occurrences
- 73
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$action_label'.
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.48
- Category
- Security
- Occurrences
- 48
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.27
- Category
- Security
- Occurrences
- 27
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "ml_duplicate_gallery_pro".15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "ml_duplicate_gallery_pro".
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.13
- Category
- I18n
- Occurrences
- 13
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilityNon Enqueued ScriptScripts must be registered/enqueued via wp_enqueue_script()8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
Scripts must be registered/enqueued via wp_enqueue_script()
ERRORMaintainabilityNon Enqueued StylesheetStylesheets must be registered/enqueued via wp_enqueue_style()7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_FILES['zip']['tmp_name']6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['zip']['tmp_name']
WARNINGSecurityRequest data is not unslashed$_POST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
$_POST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed constant3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "ML_LIGHTGALLERY_LICENSE_KEY".
ERRORSupply ChainHidden files included3
- Category
- Supply Chain
- Occurrences
- 3
- Severity
- error
Sample message
Hidden files are not permitted.
ERRORMaintainabilitywp function not compatible with requires wp3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Function "wp_get_registered_image_subsizes()" requires WordPress 5.3.0, but your plugin minimum supported version is WordPress 5.0.0.
WARNINGMaintainabilityDirect Query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNon-prefixed class2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "MLSliderLightbox_Notices".
WARNINGMaintainabilityNon-prefixed function2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "getProperty".
WARNINGMaintainabilityNon-prefixed global variable2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$jsonContent".
WARNINGMaintainabilityNo Caching1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$placeholders} at AND post_type IN ({$placeholders})\n
WARNINGSecurityReplacements Wrong Number1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 3.
WARNINGMaintainabilityDynamic hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "str_replace('.', '_', $website_home) . '_link'".
ERRORMaintainabilityfile system operations rmdir1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().
ERRORMaintainabilityparse url parse url1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORI18nUnordered Placeholders Text1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in '%s specific %s'.
WARNINGPerformancePost Not In exclude1
- Category
- Performance
- Occurrences
- 1
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
External Connections
Potential connections found in static code analysis.
Outbound calls
57
External assets
0
Incoming endpoints
10
Notable Domains
metaslider.com8 · outbound
img.youtube.com6 · outbound
vimeo.com6 · outbound
vumbnail.com6 · outbound
lightgalleryjs.com5 · outbound
youtube.com5 · outbound
Platform / Reference Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/ml-slider-lightbox/v1/gallery/previewREST
register_rest_route
Admin AJAX endpoints9
admin_post_ml_convert_slideshowauthenticated
admin_post
admin_post_ml_duplicate_galleryauthenticated
admin_post
admin_post_ml_save_galleryauthenticated
admin_post
wp_ajax_ml_gallery_browse_folderauthenticated
wp_ajax
wp_ajax_ml_gallery_import_folderauthenticated
wp_ajax
wp_ajax_ml_gallery_import_zipauthenticated
wp_ajax
wp_ajax_ml_get_caption_fieldsauthenticated
wp_ajax
wp_ajax_ml_lightbox_notice_handlerauthenticated
wp_ajax
wp_ajax_ml_save_captionauthenticated
wp_ajax
Score History
5 score snapshots
v2.36.0
32
Latest
- Findings
- 236
- Errors
- 166
- Warnings
- 70
- Check
- 2.0.0
v2.35.0
32
Score
- Findings
- 236
- Errors
- 166
- Warnings
- 70
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 32 | 236 | 166 | 70 | v2.36.0 | 2.0.0 |
| 32 | 236 | 166 | 70 | v2.35.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider23 scoreClassic Editor63 scoreWooCommerce21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreSmart Slider 323 scorePhoto Gallery, Sliders, Proofing and Themes – NextGEN Gallery23 scoreFirelight Lightbox52 score
Author
Category
Issue
Domain
Related
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider23 scoreClassic Editor63 scoreWooCommerce21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWordPress Importer25 scoreSmart Slider 323 scorePhoto Gallery, Sliders, Proofing and Themes – NextGEN Gallery23 scoreFirelight Lightbox52 score
Related Plugins
Album Gallery for Flickr
4k+ active installs
100
Lightbox Images for Divi Enhanced
4k+ active installs
100
Filter Gallery
3k+ active installs
100
Gallery with thumbnail slider
3k+ active installs
100
WF Magnific Lightbox
1k+ active installs
100
Simple Block Gallery
1k+ active installs
100