MxChat is the best free AI chatbot and content generation plugin for WordPress in 2026. Train ChatGPT, Claude, Gemini, or Grok on your website content …
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
2,719
2 issue groups
Security
1,019
12 issue groups
Maintainability
685
11 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'mxchat-basic' but got 'mxchat'.2,655
- Category
- I18n
- Occurrences
- 2,655
- Severity
- error
Sample message
Mismatched text domain. Expected 'mxchat-basic' but got 'mxchat'.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.269
- Category
- Maintainability
- Occurrences
- 269
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().239
- Category
- Maintainability
- Occurrences
- 239
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated Not PreparedUse placeholders and $wpdb->prepare(); found interpolated variable $chat_table at "SHOW TABLES LIKE '$chat_table'"213
- Category
- Security
- Occurrences
- 213
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $chat_table at "SHOW TABLES LIKE '$chat_table'"
WARNINGSecurityMissing Unslash$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar171
- Category
- Security
- Occurrences
- 171
- Severity
- warning
Sample message
$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityUnescaped DBParameterUnescaped parameter $chat_table used in $wpdb->get_var()\n$chat_table assigned unsafely at line 1235.156
- Category
- Security
- Occurrences
- 156
- Severity
- warning
Sample message
Unescaped parameter $chat_table used in $wpdb->get_var()\n$chat_table assigned unsafely at line 1235.
WARNINGSecurityMissingProcessing form data without nonce verification.142
- Category
- Security
- Occurrences
- 142
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$additional_class'.140
- Category
- Security
- Occurrences
- 140
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$additional_class'.
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.82
- Category
- Maintainability
- Occurrences
- 82
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.64
- Category
- I18n
- Occurrences
- 64
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
Show 15 moreShow less
WARNINGSecurityInput Not Sanitized61
- Category
- Security
- Occurrences
- 61
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_FILES['pdf_file']
ERRORSecurityNot Prepared29
- Category
- Security
- Occurrences
- 29
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $alter_sql
WARNINGSecurityRecommended29
- Category
- Security
- Occurrences
- 29
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityUnescaped DBParameter24
- Category
- Security
- Occurrences
- 24
- Severity
- error
Sample message
Unescaped parameter $alter_sql used in $wpdb->query()\n$alter_sql assigned unsafely at line 557.
WARNINGSecurityUnfinished Prepare20
- Category
- Security
- Occurrences
- 20
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGSecurityInput Not Validated18
- Category
- Security
- Occurrences
- 18
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES['pdf_file']['error']. Check that the array index exists before using it.
ERRORSecurityUnsafe Printing Function16
- Category
- Security
- Occurrences
- 16
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilitySchema Change15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORMaintainabilityunlink unlink15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGMaintainabilityerror log error log12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORMaintainabilityparse url parse url12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORMaintainabilitycurl curl close11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl getinfo10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl init10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitystrip tags strip tags10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
Score History
First score snapshot
v3.2.10
24
Latest
- Findings
- 4,542
- Errors
- 3,157
- Warnings
- 1,385
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 4,542 | 3,157 | 1,385 | v3.2.10 | 2.0.0 |
Related Plugins
1k+ active installs
2k+ active installs
2k+ active installs
1k+ active installs
2k+ active installs
10k+ active installs