Automate your WordPress Editorial Workflow with Oasis Workflow. Simple, intuitive drag and drop workflow builder to streamline your editorial process.
21
Score
775
Errors
575
Warnings
+0
Change
Category Scores
Security0
Repo70
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
655
4 issue groups
Maintainability
559
14 issue groups
Security
124
7 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'oasis-workflow' but got "oasisworkflow".608
- Category
- I18n
- Occurrences
- 608
- Severity
- error
Sample message
Mismatched text domain. Expected 'oasis-workflow' but got "oasisworkflow".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$abort_workflow_label".364
- Category
- Maintainability
- Occurrences
- 364
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$abort_workflow_label".
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $auto_submit_stati_list58
- Category
- Security
- Occurrences
- 58
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $auto_submit_stati_list
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "ow_is_role_applicable".54
- Category
- Maintainability
- Occurrences
- 54
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "ow_is_role_applicable".
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to _n_noop().40
- Category
- I18n
- Occurrences
- 40
- Severity
- error
Sample message
Missing $domain parameter in function call to _n_noop().
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().32
- Category
- Maintainability
- Occurrences
- 32
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;27
- Category
- Maintainability
- Occurrences
- 27
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityRequest data is not unslashed$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar24
- Category
- Security
- Occurrences
- 24
- Severity
- warning
Sample message
$_GET['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "OW_Action_History".23
- Category
- Maintainability
- Occurrences
- 23
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "OW_Action_History".
Show 15 moreShow less
ERRORSecurityDatabase parameter is not escaped17
- Category
- Security
- Occurrences
- 17
- Severity
- error
Sample message
Unescaped parameter $auto_submit_stati_list used in $wpdb->get_results()\n$auto_submit_stati_list assigned unsafely at line 2482.
WARNINGSecurityNonce verification recommended11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilitySchema Change10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGSecurityDatabase parameter is not escaped6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Unescaped parameter $sql used in $wpdb->get_row()\n$sql assigned unsafely at line 1018.
WARNINGSecuritywp redirect wp redirect6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
WARNINGMaintainabilityNot In Footer6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORI18nNon Singular String Literal Text4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $status
ERRORI18nMissing Translators Comment3
- Category
- I18n
- Occurrences
- 3
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilitywp function not compatible with requires wp3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Function "sanitize_textarea_field()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.4.0.
WARNINGMaintainabilityNon-prefixed constant2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "IS_OASISWF_ACTIVATED".
ERRORSecurityHeredoc Output Not Escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found interpolation in unescaped heredoc.
WARNINGMaintainabilityDeprecated parameter: get_terms parameter 22
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The parameter "$args" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
ERRORMaintainabilitylibrary core files2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Library files that are already in the WordPress core are not permitted.
ERRORMaintainabilityOffloaded Content1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
ERRORMaintainabilitydate date1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
External Connections
Potential connections found in static code analysis.
Outbound calls
99
External assets
0
Incoming endpoints
50
Notable Domains
oasisworkflow.com28 · outbound
stackoverflow.com4 · outbound
ericmmartin.com3 · outbound
redux.js.org3 · outbound
docs.jquery.com2 · outbound
jquery.org2 · outbound
Platform / Reference Domains
opensource.org28 · platform/reference
w3.org6 · platform/reference
wordpress.org3 · platform/reference
gnu.org1 · platform/reference
login.wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/oasis-workflow/v1/priorities/REST
register_rest_route
/wp-json/oasis-workflow/v1/settings/REST
register_rest_route
/wp-json/oasis-workflow/v1/usercap/REST
register_rest_route
/wp-json/oasis-workflow/v1/workflows/abort/REST
register_rest_route
/wp-json/oasis-workflow/v1/workflows/claim/REST
register_rest_route
/wp-json/oasis-workflow/v1/workflows/claim/actionHistoryId=(?P<action_history_id>\d+)REST
register_rest_route
Admin AJAX endpoints34
wp_ajax_check_applicable_rolesauthenticated
wp_ajax
wp_ajax_check_for_claim_ajaxauthenticated
wp_ajax
wp_ajax_claim_processauthenticated
wp_ajax
wp_ajax_copy_stepauthenticated
wp_ajax
wp_ajax_create_new_workflowauthenticated
wp_ajax
wp_ajax_delete_workflowauthenticated
wp_ajax
wp_ajax_delete_workflow_confirmationauthenticated
wp_ajax
wp_ajax_execute_sign_off_decisionauthenticated
wp_ajax
wp_ajax_get_all_custom_statusesauthenticated
wp_ajax
wp_ajax_get_edit_inline_htmlauthenticated
wp_ajax
wp_ajax_get_first_stepauthenticated
wp_ajax
wp_ajax_get_post_publish_date_edit_formatauthenticated
wp_ajax
22 more hidden
Score History
First score snapshot
v6.5.4
21
Latest
- Findings
- 1,350
- Errors
- 775
- Warnings
- 575
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 21 | 1,350 | 775 | 575 | v6.5.4 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
Schema Engine AI – AI Schema Markup, Reviews & Rich Snippets for SEO97 scoreAbsolute Reviews99 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreTrustpilot Reviews51 score
Plugin
Author
Issue
Domain
Related
Schema Engine AI – AI Schema Markup, Reviews & Rich Snippets for SEO97 scoreAbsolute Reviews99 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreTrustpilot Reviews51 score
Related Plugins
Absolute Reviews
6k+ active installs
99
Save with keyboard
3k+ active installs
98
Star Rating Block
1k+ active installs
98
Star Rating Block for Block Editor
600 active installs
98
Schema Engine AI – AI Schema Markup, Reviews & Rich Snippets for SEO
10k+ active installs
97
Gutena Testimonial Slider
3k+ active installs
97