Build responsive off-canvas menus, drawer menus, and exit intent popups with a lightweight Gutenberg block. Includes advanced triggers & analytics.
40
Score
20
Errors
81
Warnings
+0
Change
Category Scores
Security0
Repo100
Performance100
Maintainability77
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
50
10 issue groups
Maintainability
41
8 issue groups
I18n
10
2 issue groups
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.17
- Category
- Maintainability
- Occurrences
- 17
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $table at FROM $table\n15
- Category
- Security
- Occurrences
- 15
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $table at FROM $table\n
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $registry used in $wpdb->get_results()\n$registry assigned unsafely at line 941.10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Unescaped parameter $registry used in $wpdb->get_results()\n$registry assigned unsafely at line 941.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'offcanvas-block' but got 'offcanvas'.9
- Category
- I18n
- Occurrences
- 9
- Severity
- error
Sample message
Mismatched text domain. Expected 'offcanvas-block' but got 'offcanvas'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['favorites']5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['favorites']
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityRequest data is not unslashed$_POST['pageNumber'] not unslashed before sanitization. Use wp_unslash() or similar3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_POST['pageNumber'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $bucket_sql used in $wpdb->get_results()\n$bucket_sql assigned unsafely at line 641.2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Unescaped parameter $bucket_sql used in $wpdb->get_results()\n$bucket_sql assigned unsafely at line 641.
Show 10 moreShow less
ERRORSecuritySQL query is not prepared2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found get_table_name
WARNINGSecurityReplacements Wrong Number2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.
WARNINGMaintainabilityMixed line endings1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
File has mixed line endings; this may cause incorrect results
WARNINGMaintainabilitySchema Change1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGSecurityUnfinished Prepare1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
ERRORSecurityOutput is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'get_block_wrapper_attributes'.
ERRORMaintainabilityunlink unlink1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORMaintainabilityblock api version too low1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Editor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "OffCanvas / Drawer – add sleek slide-in panels to any page" is different from the name declared in plugin header "OffCanvas Block".
WARNINGI18ntextdomain mismatch1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
The "Text Domain" header in the plugin file does not match the slug. Found "offcanvas", expected "offcanvas-block".
External Connections
Potential connections found in static code analysis.
Outbound calls
58
External assets
5
Incoming endpoints
12
Notable Domains
bplugins.com11 · outbound
bblockswp.com8 · outbound
freemius.com6 · outbound
api.bplugins.com4 · outbound
facebook.com2 · outbound
templates.bplugins.com2 · outbound
Platform / Reference Domains
w3.org5 · platform/reference
ps.w.org4 · platform/reference
wordpress.org4 · platform/reference
api.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
External Asset Domains
placehold.co4 · asset
fonts.googleapis.com2 · asset + outbound
Incoming Endpoints
/wp-json/offcanvas-block/v1/analyticsREST
register_rest_route
/wp-json/offcanvas-block/v1/analytics/dataREST
register_rest_route
/wp-json/offcanvas-block/v1/statsREST
register_rest_route
/wp-json/offcanvas-block/v1/trackREST
register_rest_route
Admin AJAX endpoints8
wp_ajax_bsdk_fetch_info_authenticated
wp_ajax
wp_ajax_fs_initauthenticated
wp_ajax
wp_ajax_fs_notice_dismiss_authenticated
wp_ajax
wp_ajax_ocbOffCanvas_template_countsauthenticated
wp_ajax
wp_ajax_ocbOffCanvas_template_favoritesauthenticated
wp_ajax
wp_ajax_ocbOffCanvas_template_importauthenticated
wp_ajax
wp_ajax_ocbOffCanvas_templatesauthenticated
wp_ajax
wp_ajax_ocbOffCanvas_templates_mainauthenticated
wp_ajax
Score History
4 score snapshots
v2.1.7
40
Latest
- Findings
- 101
- Errors
- 20
- Warnings
- 81
- Check
- 2.1.0
v2.0.7
40
Score
- Findings
- 101
- Errors
- 20
- Warnings
- 81
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 40 | 101 | 20 | 81 | v2.1.7 | 2.1.0 |
| 40 | 101 | 20 | 81 | v2.0.7 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Crowdsignal Forms100 scoreAdvance Custom HTML – Show Off Code Snippets with Live Preview100 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation34 scoreSpectra Legacy – Gutenberg Blocks25 scoreBreadcrumb NavXT37 scorePopup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder66 scorePDF Embedder – PDF Viewer & Embed PDF Files for WordPress91 score
Author
Issue
Domain
Related
Crowdsignal Forms100 scoreAdvance Custom HTML – Show Off Code Snippets with Live Preview100 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation34 scoreSpectra Legacy – Gutenberg Blocks25 scoreBreadcrumb NavXT37 scorePopup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder66 scorePDF Embedder – PDF Viewer & Embed PDF Files for WordPress91 score
Related Plugins
Crowdsignal Forms
200k+ active installs
100
The Icon Block
40k+ active installs
100
Embed PDF Viewer
20k+ active installs
100
Advance Custom HTML – Show Off Code Snippets with Live Preview
10k+ active installs
100
Shortcode Redirect
10k+ active installs
100
Carousel Block – Showcase Images in Elegant Sliding Displays
7k+ active installs
100