Nova Blocks by Pixelgrade

A collection of distinctive Gutenberg blocks, committed to making your site shine like a newborn star.

v2.1.17pixelgradeUpdated Added 800 installs0% rating
29
Score
250
Errors
96
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance96
Maintainability23

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

346 findings

Security

174

6 issue groups

Maintainability

150

14 issue groups

I18n

16

4 issue groups

Performance

4

1 issue group

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$anchor'.107
Category
Security
Occurrences
107
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$anchor'.

ERRORMaintainabilityblock api version too lowEditor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility.48
Category
Maintainability
Occurrences
48
Severity
error

Sample message

Editor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility.

ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.36
Category
Maintainability
Occurrences
36
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;24
Category
Maintainability
Occurrences
24
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.21
Category
Security
Occurrences
21
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityRequest data is not unslashed$_GET['moderation-hash'] not unslashed before sanitization. Use wp_unslash() or similar18
Category
Security
Occurrences
18
Severity
warning

Sample message

$_GET['moderation-hash'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.14
Category
Security
Occurrences
14
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['nb_comment_extra_details']12
Category
Security
Occurrences
12
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['nb_comment_extra_details']

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "comments_array".8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "comments_array".

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_novablocks_get_block_patterns_files".7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_novablocks_get_block_patterns_files".

Show 15 more
ERRORMaintainabilityOffloaded Content6
Category
Maintainability
Occurrences
6
Severity
error

Sample message

Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.

ERRORI18nMissing Translators Comment6
Category
I18n
Occurrences
6
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERRORI18nText Domain Mismatch6
Category
I18n
Occurrences
6
Severity
error

Sample message

Mismatched text domain. Expected 'nova-blocks' but got '__components_txtd'.

ERRORMaintainabilityNo Explicit Version5
Category
Maintainability
Occurrences
5
Severity
error

Sample message

Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_register_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.

WARNINGMaintainabilityMissing Version4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Resource version not set in call to wp_register_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNINGMaintainabilityNot In Footer4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_register_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WARNINGPerformancePost Not In post not in4
Category
Performance
Occurrences
4
Severity
warning

Sample message

Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

ERRORMaintainabilityLocalhost URL found2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Do not use Localhost/127.0.0.1/*.local in your code. Found: http://nova.local/wp-content/uploads/2021/12/IMG_0240-150x150.jpeg","orientation":"landscape"},"medium":{"height":237,"width":300,"url":"http://nova.local/wp-content/uploads/2021/12/IMG_0240-300x237.jpeg","orientation":"landscape"},"novablocks_tiny":{"height":379,"width":480,"url":"http://nova.local/wp-content/uploads/2021/12/IMG_0240-480x379.jpeg","orientation":"landscape"},"full":{"url":"http://nova.local/wp-content/uploads/2021/12/IMG_0240.jpeg","height":450,"width":570,"orientation":"landscape"}},"mime":"image/jpeg","type":"image","subtype":"jpeg","id":3278,"url":"http://nova.local/wp-content/uploads/2021/12/IMG_0240.jpeg","alt":"","link":"http://nova.local/

WARNINGSecurityInput is not validated2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['nonce']. Check that the array index exists before using it.

ERRORMaintainabilityparse url parse url2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

ERRORMaintainabilitystrip tags strip tags2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

ERRORI18nMissing Arg Domain2
Category
I18n
Occurrences
2
Severity
error

Sample message

Missing $domain parameter in function call to __().

ERRORI18nNo Empty Strings2
Category
I18n
Occurrences
2
Severity
error

Sample message

The $text text string should have translatable content. Found: '%s'

ERRORMaintainabilityOffloaded Content1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Found call to wp_register_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.

ERRORMaintainabilityDeprecated parameter: get_terms parameter 21
Category
Maintainability
Occurrences
1
Severity
error

Sample message

The parameter "[\n\t\t\t'child_of' => $category_id,\n\t\t]" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.

External Connections

Potential connections found in static code analysis.

51 domains

Outbound calls

297

External assets

1

Incoming endpoints

2

Notable Domains

images.unsplash.com18 · outbound
jedwatson.github.io18 · outbound
nova.local10 · outbound
polymer.github.io4 · outbound
trix-editor.org3 · outbound
fb.me2 · outbound

Platform / Reference Domains

w3.org56 · platform/reference
developer.wordpress.org10 · platform/reference
github.com8 · platform/reference
schema.org6 · platform/reference
gnu.org2 · platform/reference
make.wordpress.org2 · platform/reference
wordpress.org2 · platform/reference
core.trac.wordpress.org1 · platform/reference
opensource.org1 · platform/reference

External Asset Domains

trial.pixelgrade.com117 · asset + outbound

Incoming Endpoints

/wp-json/novablocks/v1/categoriesREST

register_rest_route

Admin AJAX endpoints1
wp_ajax_toggle_highlight_commentauthenticated

wp_ajax

Score History

First score snapshot

v2.1.17

29

Latest

Findings
346
Errors
250
Warnings
96
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

Breadcrumb Block

3k+ active installs

100
Counting Number Block

2k+ active installs

100
Crowdsignal Forms

200k+ active installs

100
Events Block

500 active installs

100