PluginScore

Pie Register – User Registration, Profiles & Content Restriction

Create customized registration forms, Invite through email, Email Notification, User Roles assignment, and more. Pie Register is a User Registration p …

v3.8.4.11Genetech ProductsUpdated Added 1k+ installs84% rating
User Registrationlogin formmembership formregistration formuser profile
27
Score
0
Errors
1,779
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance100
Maintainability12

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

1,779 findings

Security

1,098

9 issue groups

Maintainability

673

15 issue groups

I18n

2

1 issue group

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$PR_Bot_List".310
Category
Maintainability
Occurrences
310
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$PR_Bot_List".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.278
Category
Security
Occurrences
278
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.241
Category
Security
Occurrences
241
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
WARNINGSecurityRequest data is not unslashed$_COOKIE['tab_' . $currentTabId . '_piereg_math_captcha_Login_form'] not unslashed before sanitization. Use wp_unslash() or similar205
Category
Security
Occurrences
205
Severity
warning

Sample message

$_COOKIE['tab_' . $currentTabId . '_piereg_math_captcha_Login_form'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_COOKIE['currentTabId']. Check that the array index exists before using it.155
Category
Security
Occurrences
155
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_COOKIE['currentTabId']. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'Add_payment_option_'.$allowed_payment_gateway_name".129
Category
Maintainability
Occurrences
129
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'Add_payment_option_'.$allowed_payment_gateway_name".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE['tab_' . $currentTabId . '_piereg_math_captcha_Login_form']124
Category
Security
Occurrences
124
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE['tab_' . $currentTabId . '_piereg_math_captcha_Login_form']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.74
Category
Maintainability
Occurrences
74
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().73
Category
Maintainability
Occurrences
73
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $codetable at "DELETE FROM $codetable WHERE `id` IN($format)"42
Category
Security
Occurrences
42
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $codetable at "DELETE FROM $codetable WHERE `id` IN($format)"

WordPress.DB.PreparedSQL.InterpolatedNotPrepared
Show 15 more
WARNINGSecurityDatabase parameter is not escaped37
Category
Security
Occurrences
37
Severity
warning

Sample message

Unescaped parameter $codetable used in $wpdb->get_results()\n$codetable assigned unsafely at line 278.

PluginCheck.Security.DirectDB.UnescapedDBParameter
WARNINGMaintainabilityNon-prefixed class21
Category
Maintainability
Occurrences
21
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "API_Manager_Example_Password_Management".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound
WARNINGMaintainabilityNon-prefixed function19
Category
Maintainability
Occurrences
19
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "PR_show_renew_account".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
WARNINGSecurityUnfinished Prepare13
Category
Security
Occurrences
13
Severity
warning

Sample message

Replacement variables found, but no valid placeholders found in the query.

WordPress.DB.PreparedSQLPlaceholders.UnfinishedPrepare
WARNINGMaintainabilitySchema Change11
Category
Maintainability
Occurrences
11
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WordPress.DB.DirectDatabaseQuery.SchemaChange
WARNINGMaintainabilityslow db query meta key7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_key
WARNINGMaintainabilityslow db query meta value7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_value
WARNINGMaintainabilityNon-prefixed constant5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "OPTION_PIE_REGISTER".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound
WARNINGMaintainabilityerror log print r5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_print_r
WARNINGMaintainabilityNot In Footer5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WordPress.WP.EnqueuedResourceParameters.NotInFooter
WARNINGMaintainabilityslow db query meta query3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_query
WARNINGSecuritywp redirect wp redirect3
Category
Security
Occurrences
3
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WordPress.Security.SafeRedirect.wp_redirect_wp_redirectReference
WARNINGMaintainabilityerror log error log2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

WordPress.PHP.DevelopmentFunctions.error_log_error_log
WARNINGMaintainabilityMissing Version2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WordPress.WP.EnqueuedResourceParameters.MissingVersion
WARNINGI18nNo Html Wrapped Strings2
Category
I18n
Occurrences
2
Severity
warning

Sample message

Translatable string should not be wrapped in HTML. Found: "<p>You are already logged in.</p>"

WordPress.WP.I18n.NoHtmlWrappedStringsReference

External Connections

Not analyzed yet.

Score History

First score snapshot

v3.8.4.11

27

Latest

Findings
1,779
Errors
0
Warnings
1,779
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related

Custom Login Page Customizer95 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreNinja Forms – The Contact Form Builder That Grows With You24 scoreUltimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin24 scorePaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress24 scoreUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor21 scoreUser Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder24 scoreNo CAPTCHA reCAPTCHA40 score

Related Plugins

Custom Login Page Customizer

50k+ active installs

95
ForumWP – Forum & Discussion Board

800 active installs

82
Registration Form for WooCommerce

1k+ active installs

75
Osom Modal Login

400 active installs

73
No CAPTCHA reCAPTCHA

4k+ active installs

40
Login Page Customizer – Customize Login Screen & Branding

1k+ active installs

38