Audio Player for Elementor – the go-to plugin for adding MP3s, podcasts & playlists. Fully customizable, WooCommerce-ready, and mobile-friendly.
25
Score
641
Errors
1,455
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
1,404
13 issue groups
Security
611
8 issue groups
I18n
66
4 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".1,105
- Category
- Maintainability
- Occurrences
- 1,105
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_addon_ids".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.520
- Category
- Security
- Occurrences
- 520
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_fs_text".99
- Category
- Maintainability
- Occurrences
- 99
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_fs_text".
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "FS_Admin_Menu_Manager".58
- Category
- Maintainability
- Occurrences
- 58
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "FS_Admin_Menu_Manager".
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.45
- Category
- Maintainability
- Occurrences
- 45
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().44
- Category
- Maintainability
- Occurrences
- 44
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORI18nText Domain MismatchMismatched text domain. Expected 'music-player-for-elementor' but got 'Background Control'.35
- Category
- I18n
- Occurrences
- 35
- Severity
- error
Sample message
Mismatched text domain. Expected 'music-player-for-elementor' but got 'Background Control'.
ERRORI18nToo Many Function ArgsToo many parameters passed to function "esc_html__()". Expected: 2 parameters, received: 327
- Category
- I18n
- Occurrences
- 27
- Severity
- error
Sample message
Too many parameters passed to function "esc_html__()". Expected: 2 parameters, received: 3
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_API__ADDRESS".26
- Category
- Maintainability
- Occurrences
- 26
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "FS_API__ADDRESS".
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $event_id_placeholder at \t\t\tVALUES ($event_id_placeholder, %s, %s, %s, %d, %s, %s, %d, %d, %d, %s)\r\n22
- Category
- Security
- Occurrences
- 22
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $event_id_placeholder at \t\t\tVALUES ($event_id_placeholder, %s, %s, %s, %d, %s, %s, %d, %d, %d, %s)\r\n
Show 15 moreShow less
ERRORSecuritySQL query is not prepared21
- Category
- Security
- Occurrences
- 21
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $sql
WARNINGSecurityDatabase parameter is not escaped15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
Unescaped parameter $events_table used in $wpdb->get_var()\n$events_table assigned unsafely at line 282.
ERRORSecurityDatabase parameter is not escaped14
- Category
- Security
- Occurrences
- 14
- Severity
- error
Sample message
Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 608.
WARNINGSecurityNonce verification recommended9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilitySchema Change8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORSecurityException output is not escaped7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.
ERRORMaintainabilityMissing direct file access protection5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityNon-prefixed hook name4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "fs_plugins_api".
ERRORMaintainabilitydate date3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGSecurityInput is not sanitized3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['period']
WARNINGMaintainabilityMissing Version3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
WARNINGI18nDiscouraged text-domain loading2
- Category
- I18n
- Occurrences
- 2
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
ERRORI18nDeprecated parameter: load_plugin_textdomain parameter 22
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
The parameter "FALSE" at position #2 of load_plugin_textdomain() has been deprecated since WordPress version 2.7.0. Use "" instead.
WARNINGMaintainabilityNot In Footer2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORMaintainabilityplugin updater detected2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: class FS_Plugin_Updater
External Connections
Potential connections found in static code analysis.
Outbound calls
203
External assets
2
Incoming endpoints
10
Notable Domains
your-link.com17 · outbound
freemius.com10 · outbound
php.net6 · outbound
benalman.com2 · outbound
checkout.freemius-local.com2 · outbound
checkout.freemius.com2 · outbound
Platform / Reference Domains
gnu.org112 · platform/reference
wordpress.org10 · platform/reference
w3.org5 · platform/reference
github.com3 · platform/reference
api.wordpress.org2 · platform/reference
make.wordpress.org2 · platform/reference
core.trac.wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/mpfe/v1/analyticsREST
register_rest_route
wp_ajax_nopriv_mpfe_get_analytics_noncepublic
wp_ajax
wp_ajax_nopriv_mpfe_record_analytics_eventpublic
wp_ajax
Admin AJAX endpoints7
admin_post_fs_clone_resolutionauthenticated
admin_post
wp_ajax_fs_dismiss_notice_action_{$ajax_action_suffix}authenticated
wp_ajax
wp_ajax_fs_toggle_debug_modeauthenticated
wp_ajax
wp_ajax_mpfe_get_analytics_nonceauthenticated
wp_ajax
wp_ajax_mpfe_import_templateauthenticated
wp_ajax
wp_ajax_mpfe_prevent_noticeauthenticated
wp_ajax
wp_ajax_mpfe_record_analytics_eventauthenticated
wp_ajax
Score History
3 score snapshots
v2.6.1
25
Latest
- Findings
- 2,096
- Errors
- 641
- Warnings
- 1,455
- Check
- 2.1.0
v2.6
25
Score
- Findings
- 2,100
- Errors
- 641
- Warnings
- 1,459
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 25 | 2,096 | 641 | 1,455 | v2.6.1 | 2.1.0 |
| 25 | 2,100 | 641 | 1,459 | v2.6 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreCompact WP Audio Player61 scoreMP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar24 scoreAudioIgniter Music Player59 scoreCP Media Player – Audio Player and Video Player66 score
Author
Category
Issue
Domain
Related
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreCompact WP Audio Player61 scoreMP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar24 scoreAudioIgniter Music Player59 scoreCP Media Player – Audio Player and Video Player66 score
Related Plugins
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player
10k+ active installs
100
Audio Player Block – Advanced Block for Embedding Audio Files
2k+ active installs
99
StreamCast – bring live radio to your site with a sleek player
1k+ active installs
99
PlayerJS – Free Custom HTML5 Video and Audio Player Builder
1k+ active installs
85
Media Player Addons for Elementor – Audio and Video Widgets for Elementor
1k+ active installs
82
Player for SoundCloud – share your music without leaving your site
1k+ active installs
78