Create video portfolio with YouTube and Vimeo video galleries. Features YouTube API integration, lightbox popup player, and grid layouts.
40
Score
53
Errors
69
Warnings
+0
Change
Category Scores
Security0
Repo97
Performance100
Maintainability78
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
91
5 issue groups
I18n
17
3 issue groups
Maintainability
13
10 issue groups
Repo Compliance
1
1 issue group
WARNINGSecurityRequest data is not unslashed$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar42
- Category
- Security
- Occurrences
- 42
- Severity
- warning
Sample message
$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<input type='button' onclick='return vg_clone_run_$post_id($post_id);' readonly value='Duplicate Gallery' style='font-weight: 600; background-color: #ffffff; color: #475569; border: 1px solid #cbd5e1; border-radius: 6px; padding: 0 16px; height: 32px; line-height: 30px; cursor: pointer; transition: all 0.15s ease; box-shadow: 0 1px 2px rgba(0,0,0,0.05); margin-left: 4px; display: inline-block; vertical-align: middle;' onmouseover='this.style.background=\"#f8fafc\"; this.style.color=\"#1e293b\"; this.style.borderColor=\"#94a3b8\"' onmouseout='this.style.background=\"#ffffff\"; this.style.color=\"#475569\"; this.style.borderColor=\"#cbd5e1\"' />"'.30
- Category
- Security
- Occurrences
- 30
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<input type='button' onclick='return vg_clone_run_$post_id($post_id);' readonly value='Duplicate Gallery' style='font-weight: 600; background-color: #ffffff; color: #475569; border: 1px solid #cbd5e1; border-radius: 6px; padding: 0 16px; height: 32px; line-height: 30px; cursor: pointer; transition: all 0.15s ease; box-shadow: 0 1px 2px rgba(0,0,0,0.05); margin-left: 4px; display: inline-block; vertical-align: middle;' onmouseover='this.style.background=\"#f8fafc\"; this.style.color=\"#1e293b\"; this.style.borderColor=\"#94a3b8\"' onmouseout='this.style.background=\"#ffffff\"; this.style.color=\"#475569\"; this.style.borderColor=\"#cbd5e1\"' />"'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['_wpnonce']11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['_wpnonce']
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.11
- Category
- I18n
- Occurrences
- 11
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to _x().5
- Category
- I18n
- Occurrences
- 5
- Severity
- error
Sample message
Missing $domain parameter in function call to _x().
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['slideId']. Check that the array index exists before using it.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['slideId']. Check that the array index exists before using it.
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
ERRORMaintainabilityOffloaded ContentFound call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.
Show 9 moreShow less
ERRORMaintainabilityfile system operations fclose1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fputs1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fputs().
ERRORMaintainabilityparse url parse url1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORMaintainabilitystrip tags strip tags1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
ERRORMaintainabilityNo Explicit Version1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_register_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
WARNINGMaintainabilityNot In Footer1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORMaintainabilityNon Enqueued Stylesheet1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Video Gallery - YouTube, Vimeo Gallery & YouTube API" is different from the name declared in plugin header "Video Gallery".
WARNINGRepo Complianceplugin header nonexistent domain path1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"
External Connections
Potential connections found in static code analysis.
Outbound calls
67
External assets
5
Incoming endpoints
5
Notable Domains
awplife.com10 · outbound
googleapis.com8 · outbound
sachinchoolur.github.io7 · outbound
vimeo.com6 · outbound
youtube.com4 · outbound
img.youtube.com3 · outbound
Platform / Reference Domains
wordpress.org3 · platform/reference
github.com2 · platform/reference
profiles.wordpress.org2 · platform/reference
gnu.org1 · platform/reference
s.w.org1 · platform/reference
External Asset Domains
fonts.googleapis.com3 · asset + outbound
cdn.jsdelivr.net2 · asset + outbound
dailymotion.com1 · asset
fast.wistia.net1 · asset
Incoming Endpoints
wp_ajax_nopriv_vg_track_video_playpublic
wp_ajax
Admin AJAX endpoints4
wp_ajax_nvgall_fetch_youtube_contentauthenticated
wp_ajax
wp_ajax_vg_clone_galleryauthenticated
wp_ajax
wp_ajax_vg_track_video_playauthenticated
wp_ajax
wp_ajax_video_gallery_jsauthenticated
wp_ajax
Score History
3 score snapshots
v2.0.2
40
Latest
- Findings
- 122
- Errors
- 53
- Warnings
- 69
- Check
- 2.0.0
v2.0.0
40
Score
- Findings
- 126
- Errors
- 52
- Warnings
- 74
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 40 | 122 | 53 | 69 | v2.0.2 | 2.0.0 |
| 40 | 126 | 52 | 74 | v2.0.0 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
HTML5 Video Player – embed fast, responsive videos with ease99 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreModula Image Gallery – Photo Grid & Video Gallery22 scorePresto Player35 scoreGallery by Visual Portfolio39 scoreSimpLy Gallery24 scoreAll-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos22 scorePortfolio Filter Gallery – Photo Gallery85 score
Author
Category
Issue
Domain
Related
HTML5 Video Player – embed fast, responsive videos with ease99 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreModula Image Gallery – Photo Grid & Video Gallery22 scorePresto Player35 scoreGallery by Visual Portfolio39 scoreSimpLy Gallery24 scoreAll-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos22 scorePortfolio Filter Gallery – Photo Gallery85 score
Related Plugins
Video Player Block – play videos beautifully on any device
2k+ active installs
100
Video Playlist for YouTube
1k+ active installs
100
HTML5 Video Player – embed fast, responsive videos with ease
20k+ active installs
99
Video Gallery Block – showcase your videos in a filterable gallery
1k+ active installs
99
HLS Player
600 active installs
99
Video Player for WPBakery
2k+ active installs
98