Adds any number of extra Post types, besides Post and Page, for the WordPess Admin. Also allows for special editing rights for specific User roles for …
Prioritized issue groups from the latest Plugin Check scan
I18n
146
5 issue groups
Maintainability
139
13 issue groups
Security
136
7 issue groups
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$a".
Sample message
Mismatched text domain. Expected 'more-types' but got 'more-plugins'.
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<code>$dir</code>"'.
Sample message
Missing $domain parameter in function call to __().
Sample message
$_GET[$f] not unslashed before sanitization. Use wp_unslash() or similar
Sample message
Processing form data without nonce verification.
Sample message
Detected usage of a non-sanitized input variable: $_GET[$f]
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['action_keys']. Check that the array index exists before using it.
Sample message
Processing form data without nonce verification.
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->filter".
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "__d".
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "$more_common".
Sample message
print_r() found. Debug code should not normally be used in production.
Sample message
The parameter "'orderby=count&hide_empty=0'" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
Sample message
The $text parameter must be a single text string literal. Found: 'Default ' . $t->labels->name
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
Sample message
Found usage of constant "TEMPLATEPATH". Use get_template_directory() instead.
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s, %3$s, %4$s", but got "%s, %s, %s, %s" in 'The %s plugin can read objects from a file. The default location for these files is in the %s directory. To create a file object, copy the text below (<code>CTRL/CMD + c</code>), paste it into a text file and save it as %s to the aforementioned directory. If an object exists both in the %s settings and as a file, the file will override the data stored in the database.'.
Potential connections found in static code analysis.
Outbound calls
18
External assets
1
Incoming endpoints
0
No public endpoints detected.
First score snapshot
v1.2
33
Latest
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 33 | 425 | 227 | 198 | v1.2 | 2.0.0 |
Author, categories, issues, domains, and nearby plugins.