Easily create high-converting, responsive landing pages with 120+ templates using the free PluginOps Page Builder for WordPress.
21
Score
1,120
Errors
2,913
Warnings
+0
Change
Category Scores
Security0
Repo75
Performance98
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
2,702
17 issue groups
Security
1,222
8 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$Columni".2,326
- Category
- Maintainability
- Occurrences
- 2,326
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$Columni".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <!DOCTYPE html>\r\n'.801
- Category
- Security
- Occurrences
- 801
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <!DOCTYPE html>\r\n'.
WARNINGSecurityRequest data is not unslashed$_COOKIE[$key] not unslashed before sanitization. Use wp_unslash() or similar130
- Category
- Security
- Occurrences
- 130
- Severity
- warning
Sample message
$_COOKIE[$key] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_COOKIE[$this->tag . '-' . $this->test_name]. Check that the array index exists before using it.103
- Category
- Security
- Occurrences
- 103
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_COOKIE[$this->tag . '-' . $this->test_name]. Check that the array index exists before using it.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$key]79
- Category
- Security
- Occurrences
- 79
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$key]
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.77
- Category
- Maintainability
- Occurrences
- 77
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.60
- Category
- Security
- Occurrences
- 60
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "AWeberAPI".54
- Category
- Maintainability
- Occurrences
- 54
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "AWeberAPI".
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "CS_REST_SERIALISATION_get_available".41
- Category
- Maintainability
- Occurrences
- 41
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "CS_REST_SERIALISATION_get_available".
WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "CS_HOST".35
- Category
- Maintainability
- Occurrences
- 35
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "CS_HOST".
Show 15 moreShow less
ERRORMaintainabilityMissing direct file access protection28
- Category
- Maintainability
- Occurrences
- 28
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecurityUnsafe printing function22
- Category
- Security
- Occurrences
- 22
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORSecurityException output is not escaped19
- Category
- Security
- Occurrences
- 19
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$data['error']'.
ERRORMaintainabilitydate date16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityerror log trigger error16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
ERRORMaintainabilityNo Explicit Version16
- Category
- Maintainability
- Occurrences
- 16
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
ERRORMaintainabilitycurl curl exec15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl init15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl error13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGMaintainabilityMissing Version13
- Category
- Maintainability
- Occurrences
- 13
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.
ERRORMaintainabilitycurl curl close12
- Category
- Maintainability
- Occurrences
- 12
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityNon Enqueued Script11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- error
Sample message
Scripts must be registered/enqueued via wp_enqueue_script()
WARNINGSecurityInput is not validated or sanitized8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Detected usage of a non-sanitized, non-validated input variable _SERVER: "$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]"
WARNINGMaintainabilityDirect Query7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
External Connections
Potential connections found in static code analysis.
Outbound calls
221
External assets
40
Incoming endpoints
39
Notable Domains
pluginops.com45 · outbound
cl.cam.ac.uk16 · outbound
storage.googleapis.com11 · outbound
momentjs.com7 · outbound
jqueryui.com6 · outbound
kb.mailchimp.com6 · outbound
Platform / Reference Domains
github.com21 · platform/reference
w3.org8 · platform/reference
wordpress.org5 · platform/reference
ps.w.org4 · platform/reference
opensource.org1 · platform/reference
External Asset Domains
fonts.googleapis.com23 · asset + outbound
youtube.com18 · asset + outbound
google.com4 · asset + outbound
googletagmanager.com1 · asset
placehold.it1 · asset
Incoming Endpoints
wp_ajax_nopriv_ulpb_admin_datapublic
wp_ajax
wp_ajax_nopriv_ulpb_cta_click_conversion_recordpublic
wp_ajax
wp_ajax_nopriv_ulpb_formBuilderEmail_ajaxpublic
wp_ajax
wp_ajax_nopriv_ulpb_rc_current_usr_clickpublic
wp_ajax
wp_ajax_nopriv_ulpb_subscribeForm_datapublic
wp_ajax
wp_ajax_nopriv_ulpb_subscribeForm_mailchimp_datapublic
wp_ajax
Admin AJAX endpoints33
wp_ajax_popb_enable_safe_modeauthenticated
wp_ajax
wp_ajax_popb_get_form_submissionsauthenticated
wp_ajax
wp_ajax_popb_get_row_blocksauthenticated
wp_ajax
wp_ajax_popb_get_templateauthenticated
wp_ajax
wp_ajax_popb_send_user_feedbackauthenticated
wp_ajax
wp_ajax_popb_update_custom_fontsauthenticated
wp_ajax
wp_ajax_popb_update_data_collection_optionauthenticated
wp_ajax
wp_ajax_popb_update_databaseUrls_imageLibauthenticated
wp_ajax
wp_ajax_ulpb_activate_pb_requestauthenticated
wp_ajax
wp_ajax_ulpb_admin_dataauthenticated
wp_ajax
wp_ajax_ulpb_aweber_connectauthenticated
wp_ajax
wp_ajax_ulpb_aweber_connection_checkauthenticated
wp_ajax
21 more hidden
Score History
2 score snapshots
v1.5.3.7
21
Latest
- Findings
- 4,033
- Errors
- 1,120
- Warnings
- 2,913
- Check
- 2.0.0
v1.5.3.6
21
Score
- Findings
- 4,156
- Errors
- 1,173
- Warnings
- 2,983
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 21 | 4,033 | 1,120 | 2,913 | v1.5.3.7 | 2.0.0 |
| 21 | 4,156 | 1,173 | 2,983 | v1.5.3.6 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Maintenance99 scoreMinimal Coming Soon – Coming Soon Page88 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWebsite Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode29 scoreUnder Construction35 scoreCMP – Coming Soon & Maintenance Plugin by NiteoThemes24 score
Author
Category
Issue
Domain
Related
Maintenance99 scoreMinimal Coming Soon – Coming Soon Page88 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreClassic Editor63 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWebsite Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode29 scoreUnder Construction35 scoreCMP – Coming Soon & Maintenance Plugin by NiteoThemes24 score
Related Plugins
Maintenance
1m+ active installs
99
Super Easy Maintenance Mode – Coming Soon & Under Construction
400 active installs
99
Minimal Coming Soon – Coming Soon Page
100k+ active installs
88
Coming Soon & Maintenance Mode Page & Under Construction
10k+ active installs
78
Simple Maintenance
1k+ active installs
78
Maintenance Notice
800 active installs
78