PhastPress automatically optimizes your site for the best possible performance.
28
Score
101
Errors
53
Warnings
-1
Change
Category Scores
Security0
Repo83
Performance100
Maintainability29
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
92
7 issue groups
Maintainability
51
17 issue groups
Supply Chain
2
1 issue group
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '": {$pattern}"'.31
- Category
- Security
- Occurrences
- 31
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '": {$pattern}"'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.18
- Category
- Security
- Occurrences
- 18
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.13
- Category
- Security
- Occurrences
- 13
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$message'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_SERVER['DOCUMENT_ROOT']11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_SERVER['DOCUMENT_ROOT']
WARNINGSecurityRequest data is not unslashed$_SERVER['DOCUMENT_ROOT'] not unslashed before sanitization. Use wp_unslash() or similar11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
$_SERVER['DOCUMENT_ROOT'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitymysql PDOAccessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: \PDO.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- error
Sample message
Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: \PDO.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_SERVER['DOCUMENT_ROOT']. Check that the array index exists before using it.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER['DOCUMENT_ROOT']. Check that the array index exists before using it.
ERRORMaintainabilityfile system operations fcloseFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityparse url parse urlparse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
Show 15 moreShow less
ERRORMaintainabilityrand mt rand4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
mt_rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORMaintainabilityfile system operations fopen3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations mkdir3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
ERRORMaintainabilityunlink unlink3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORMaintainabilityForbidden PHP function found2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
The use of function str_rot13() is forbidden
WARNINGMaintainabilityerror log set error handler2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
set_error_handler() found. Debug code should not normally be used in production.
WARNINGSecurityMissing nonce verification2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSupply ChainHidden files included2
- Category
- Supply Chain
- Occurrences
- 2
- Severity
- error
Sample message
Hidden files are not permitted.
ERRORMaintainabilityShort PHP open tag found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Short PHP opening tag used with echo; expected "<?php echo esc_html ..." but found "<?= esc_html ..."
ERRORMaintainabilityNot Allowed1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
WARNINGMaintainabilityNon-prefixed constant1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "REQUESTS_SILENCE_PSR0_DEPRECATIONS".
WARNINGMaintainabilityerror log error log1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORMaintainabilitycurl curl errno1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl error1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl exec1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
External Connections
Potential connections found in static code analysis.
Outbound calls
33
External assets
0
Incoming endpoints
1
Notable Domains
developer.mozilla.org4 · outbound
ns.adobe.com3 · outbound
code.google.com2 · outbound
ecma-international.org2 · outbound
optimize.phast.io2 · outbound
3site.eu1 · outbound
Platform / Reference Domains
w3.org6 · platform/reference
github.com4 · platform/reference
dev.w3.org1 · platform/reference
downloads.wordpress.org1 · platform/reference
opensource.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints1
wp_ajax_phastpress_ajax_dispatchauthenticated
wp_ajax
Score History
2 score snapshots
v3.11
28
Latest
- Findings
- 154
- Errors
- 101
- Warnings
- 53
- Check
- 2.0.0
v3.10
29
Score
- Findings
- 147
- Errors
- 95
- Warnings
- 52
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 28 | 154 | 101 | 53 | v3.11 | 2.0.0 |
| 29 | 147 | 95 | 52 | v3.10 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Category
Issue
Domain
Related
Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreAMP43 scoreAsset CleanUp: Page Speed Booster22 scorePerformance Lab99 scoreTinyPNG – JPEG, PNG & WebP image compression72 score
Plugin
Author
Category
Issue
Domain
Related
Site Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreAMP43 scoreAsset CleanUp: Page Speed Booster22 scorePerformance Lab99 scoreTinyPNG – JPEG, PNG & WebP image compression72 score
Related Plugins
Optimization Detective
60k+ active installs
100
Leverage Browser Caching
10k+ active installs
100
DietPress
2k+ active installs
100
Core Web Vitals & PageSpeed Booster
1k+ active installs
100
Speed Up – JavaScript To Footer
1k+ active installs
100
Speed Up – Optimize CSS Delivery
600 active installs
100