Optimize pages for faster load and render in the browser.
35
Score
70
Errors
41
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance100
Maintainability52
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
44
17 issue groups
Security
40
6 issue groups
I18n
25
1 issue group
Repo Compliance
1
1 issue group
ERRORI18nNon Singular String Literal DomainThe $domain parameter must be a single text string literal. Found: page_optimize_get_text_domain()25
- Category
- I18n
- Occurrences
- 25
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: page_optimize_get_text_domain()
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.11
- Category
- Security
- Occurrences
- 11
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityparse url parse urlparse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "css_do_concat".8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "css_do_concat".
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['load-mode-js']6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['load-mode-js']
WARNINGSecurityRequest data is not unslashed$_GET['load-mode-js'] not unslashed before sanitization. Use wp_unslash() or similar6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
$_GET['load-mode-js'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$inline_after'.4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$inline_after'.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_SERVER['REQUEST_METHOD']. Check that the array index exists before using it.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER['REQUEST_METHOD']. Check that the array index exists before using it.
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed constant2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "ALLOW_GZIP_COMPRESSION".
WARNINGMaintainabilityNon-prefixed global variable2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_tests_dir".
WARNINGMaintainabilityerror log error log2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORMaintainabilityNon Enqueued Script2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Scripts must be registered/enqueued via wp_enqueue_script()
ERRORMaintainabilityNon Enqueued Stylesheet2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
WARNINGMaintainabilityDiscouraged PHP function1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilityNon-prefixed function1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_manually_load_plugin".
ERRORMaintainabilityfile system operations fclose1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fread1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().
ERRORMaintainabilityfile system operations is writable1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORMaintainabilityfile system operations mkdir1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
ERRORMaintainabilityunlink unlink1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORMaintainabilityapplication detected1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Application files are not permitted.
ERRORRepo Complianceplugin header no license1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
External Connections
Not analyzed yet.
Score History
First score snapshot
v0.6.3
35
Latest
- Findings
- 111
- Errors
- 70
- Warnings
- 41
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 35 | 111 | 70 | 41 | v0.6.3 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Plugin
Author
Category
Issue
Related
WooCommerce21 scoreManageWP Worker23 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreClassic Editor63 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreWordPress Importer25 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreBreadcrumb NavXT36 scoreThe Events Calendar23 scoreWP-PageNavi36 scoreLiteSpeed Cache35 score
Plugin
Author
Category
Issue
Related
WooCommerce21 scoreManageWP Worker23 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreClassic Editor63 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreDuplicate Page40 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreWordPress Importer25 scoreLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention25 scoreBreadcrumb NavXT36 scoreThe Events Calendar23 scoreWP-PageNavi36 scoreLiteSpeed Cache35 score
Related Plugins
Modern Image Formats
100k+ active installs
100
Disable Emojis (GDPR friendly)
60k+ active installs
100
Image Placeholders
60k+ active installs
100
Optimization Detective
60k+ active installs
100
Embed Optimizer
50k+ active installs
100
SQLite Object Cache
10k+ active installs
100