Allows users to add Google One Tap Sign-in Or Sign-up to wordpress website.
63
Score
6
Errors
30
Warnings
+0
Change
Category Scores
Security38
Repo94
Performance100
Maintainability89
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
19
5 issue groups
Maintainability
14
5 issue groups
I18n
2
2 issue groups
Repo Compliance
1
1 issue group
WARNINGSecurityRequest data is not unslashed$_POST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
$_POST['_wpnonce'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityerror log error logerror_log() found. Debug code should not normally be used in production.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['_wpnonce']. Check that the array index exists before using it.5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['_wpnonce']. Check that the array index exists before using it.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$enable_auto_login".4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$enable_auto_login".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$nonce'.2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$nonce'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['_wpnonce']2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['_wpnonce']
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "one_tap_google_sign_in_settings_page".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "one_tap_google_sign_in_settings_page".
WARNINGMaintainabilityerror log print rprint_r() found. Debug code should not normally be used in production.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityNo Explicit VersionVersion parameter is not explicitly set or has been set to an equivalent of "false" for wp_register_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_register_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
Show 3 moreShow less
ERRORI18nMissing Arg Domain1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORI18nText Domain Mismatch1
- Category
- I18n
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched text domain. Expected 'one-tap-google-sign-in' but got 'google-one-tap-login'.
ERRORRepo Complianceplugin header no license1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
External Connections
Potential connections found in static code analysis.
Outbound calls
300
External assets
0
Incoming endpoints
0
Notable Domains
apache.org74 · outbound
datatracker.ietf.org30 · outbound
php.net27 · outbound
googleapis.com22 · outbound
developers.google.com14 · outbound
tools.ietf.org14 · outbound
Platform / Reference Domains
github.com26 · platform/reference
opensource.org2 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
First score snapshot
v1.4.2
63
Latest
- Findings
- 36
- Errors
- 6
- Warnings
- 30
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 63 | 36 | 6 | 30 | v1.4.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreAll-in-One WP Migration and Backup34 scoreAkismet Anti-spam: Spam Protection35 scoreHostinger Tools82 scoreWPS Hide Login41 scoreLoginizer25 scoreSecurity Optimizer – The All-In-One Protection Plugin35 scoreWidgets for Google Reviews95 scoreGoogle for WooCommerce37 score
Author
Issue
Domain
Related
Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreAll-in-One WP Migration and Backup34 scoreAkismet Anti-spam: Spam Protection35 scoreHostinger Tools82 scoreWPS Hide Login41 scoreLoginizer25 scoreSecurity Optimizer – The All-In-One Protection Plugin35 scoreWidgets for Google Reviews95 scoreGoogle for WooCommerce37 score
Related Plugins
Login Security Captcha
10k+ active installs
100
Simple Login Log
5k+ active installs
100
Shibboleth
3k+ active installs
100
Magic robots.txt
1k+ active installs
100
Logged-in-only
700 active installs
100
Protect Login
600 active installs
100