Embed Instagram, TikTok, Pinterest, and Twitter feeds in WordPress with Gutenberg blocks. Full control over layout, design, and behavior.
68
Score
1
Errors
30
Warnings
+28
Change
Category Scores
Security43
Repo100
Performance100
Maintainability95
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
24
4 issue groups
Maintainability
7
3 issue groups
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_GET['account_id'] not unslashed before sanitization. Use wp_unslash() or similar11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
$_GET['account_id'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "IFBInstagramFeed".3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "IFBInstagramFeed".
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "My Social Feeds – Social Feeds Embedder Plugin for WP" - contains the restricted term "plugin" which cannot be used at all in your plugin name.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "My Social Feeds – Social Feeds Embedder Plugin for WP" - contains the restricted term "plugin" which cannot be used at all in your plugin name.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<div class='bsbFrontShortcode' id='bsbFrontShortcode-$post_ID'>\n'.1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<div class='bsbFrontShortcode' id='bsbFrontShortcode-$post_ID'>\n'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['data']1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['data']
External Connections
Potential connections found in static code analysis.
Outbound calls
108
External assets
2
Incoming endpoints
22
Notable Domains
wptiktokfeed.com16 · outbound
bblockswp.com15 · outbound
bplugins.com9 · outbound
api.bplugins.com6 · outbound
graph.instagram.com5 · outbound
miromannino.github.io4 · outbound
Platform / Reference Domains
w3.org8 · platform/reference
wordpress.org4 · platform/reference
ps.w.org3 · platform/reference
api.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
fonts.googleapis.com3 · asset + outbound
tiktok.com2 · asset + outbound
Incoming Endpoints
wp_ajax_nopriv_bPinterestAjaxRequestpublic
wp_ajax
wp_ajax_nopriv_ifbAjaxRequestpublic
wp_ajax
wp_ajax_nopriv_ttp_tiktok_videospublic
wp_ajax
Admin AJAX endpoints19
wp_ajax_bPinterestAjaxRequestauthenticated
wp_ajax
wp_ajax_bsdk_fetch_info_authenticated
wp_ajax
wp_ajax_fs_lite_init_authenticated
wp_ajax
wp_ajax_fs_notice_dismiss_authenticated
wp_ajax
wp_ajax_ifbAjaxRequestauthenticated
wp_ajax
wp_ajax_ifbDeleteTransientauthenticated
wp_ajax
wp_ajax_msfbp-delete-instagram-access-tokenauthenticated
wp_ajax
wp_ajax_msfbp-delete-pinterest-credentialsauthenticated
wp_ajax
wp_ajax_msfbp-delete-twitter-credentialsauthenticated
wp_ajax
wp_ajax_msfbp-get-instagram-access-tokenauthenticated
wp_ajax
wp_ajax_msfbp-get-pinterest-credentialsauthenticated
wp_ajax
wp_ajax_msfbp-get-twitter-credentialsauthenticated
wp_ajax
7 more hidden
Score History
2 score snapshots
v1.0.6
68
Latest
- Findings
- 31
- Errors
- 1
- Warnings
- 30
- Check
- 2.0.0
v1.0.5
40
Score
- Findings
- 85
- Errors
- 8
- Warnings
- 77
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 68 | 31 | 1 | 30 | v1.0.6 | 2.0.0 |
| 40 | 85 | 8 | 77 | v1.0.5 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Crowdsignal Forms100 scoreAdvance Custom HTML – Show Off Code Snippets with Live Preview100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreSmash Balloon Social Photo Feed – Easy Social Feeds Plugin25 scoreSpectra Legacy – Gutenberg Blocks25 scoreBreadcrumb NavXT36 score
Author
Category
Issue
Domain
Related
Crowdsignal Forms100 scoreAdvance Custom HTML – Show Off Code Snippets with Live Preview100 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreSmash Balloon Social Photo Feed – Easy Social Feeds Plugin25 scoreSpectra Legacy – Gutenberg Blocks25 scoreBreadcrumb NavXT36 score
Related Plugins
Crowdsignal Forms
200k+ active installs
100
Advance Custom HTML – Show Off Code Snippets with Live Preview
10k+ active installs
100
Shortcode Redirect
10k+ active installs
100
Carousel Block – Showcase Images in Elegant Sliding Displays
7k+ active installs
100
Hyperlink Group Block
7k+ active installs
100
bSlider – Create Responsive Image, Post, Product, and Video Sliders
6k+ active installs
100