پینوا یک افزونه رایگان، متنباز و سبک برای ورود و عضویت کاربران وردپرس با رمز یکبار مصرف (OTP) از طریق تلفن همراه، ایمیل، پیامک و پیامرسان بله است.
33
Score
171
Errors
75
Warnings
+0
Change
Category Scores
Security0
Repo83
Performance100
Maintainability51
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
188
8 issue groups
Maintainability
42
15 issue groups
I18n
6
2 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$contents'.94
- Category
- Security
- Occurrences
- 94
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$contents'.
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$email'.41
- Category
- Security
- Occurrences
- 41
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$email'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.20
- Category
- Security
- Occurrences
- 20
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_GET['_pinova_nonce'] not unslashed before sanitization. Use wp_unslash() or similar16
- Category
- Security
- Occurrences
- 16
- Severity
- warning
Sample message
$_GET['_pinova_nonce'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['_pinova_nonce']10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['_pinova_nonce']
ERRORMaintainabilityNon Enqueued ScriptScripts must be registered/enqueued via wp_enqueue_script()6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
Scripts must be registered/enqueued via wp_enqueue_script()
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGMaintainabilityNon-prefixed global symbolThe "pinova/export_users" prefix is not a valid namespace/function/class/variable/constant prefix in PHP.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
The "pinova/export_users" prefix is not a valid namespace/function/class/variable/constant prefix in PHP.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$custom_styles".4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$custom_styles".
Show 15 moreShow less
ERRORMaintainabilityNon Enqueued Stylesheet4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
ERRORI18nMissing Translators Comment4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilityDirect Query3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGSecurityMissing nonce verification3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityDatabase parameter is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Unescaped parameter $query used in $wpdb->get_var()\n$query assigned unsafely at line 42.
ERRORSecuritySQL query is not prepared2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
WARNINGMaintainabilityerror log error log2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
error_log() found. Debug code should not normally be used in production.
ERRORI18nUnordered Placeholders Text2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s, %3$s", but got "%s, %s, %s" in 'حساب کاربری «%s %s» با تلفن همراه %s با موفقیت ایجاد شد.'.
WARNINGMaintainabilityNo PHP code found1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.
WARNINGMaintainabilityslow db query meta key1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta value1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_value, possible slow query.
ERRORMaintainabilitycurl curl error1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl exec1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl getinfo1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
External Connections
Potential connections found in static code analysis.
Outbound calls
288
External assets
0
Incoming endpoints
12
Notable Domains
schemas.openxmlformats.org37 · outbound
php.net28 · outbound
schemas.microsoft.com16 · outbound
bugs.php.net15 · outbound
en.wikipedia.org8 · outbound
openoffice.org8 · outbound
Platform / Reference Domains
github.com36 · platform/reference
w3.org21 · platform/reference
opensource.org6 · platform/reference
gnu.org1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
/wp-json/pinova/admin/blocks/addREST
register_rest_route
/wp-json/pinova/admin/blocks/deleteREST
register_rest_route
/wp-json/pinova/admin/blocks/filtersREST
register_rest_route
/wp-json/pinova/admin/blocks/indexREST
register_rest_route
/wp-json/pinova/admin/gateway/get-optionsREST
register_rest_route
/wp-json/pinova/admin/test/smsREST
register_rest_route
Score History
First score snapshot
v1.1.4
33
Latest
- Findings
- 246
- Errors
- 171
- Warnings
- 75
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 33 | 246 | 171 | 75 | v1.1.4 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Domain
Related
WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreWPS Hide Login41 scoreLoginizer25 scoreMC4WP: Mailchimp for WordPress57 scoreSecurity Optimizer – The All-In-One Protection Plugin35 scoreEasy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more15 score
Plugin
Author
Issue
Domain
Related
WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreWPS Hide Login41 scoreLoginizer25 scoreMC4WP: Mailchimp for WordPress57 scoreSecurity Optimizer – The All-In-One Protection Plugin35 scoreEasy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more15 score
Related Plugins
100
Block for Mailchimp – Add Email Subscription Forms and Collect Leads
2k+ active installs
100
Contact Form Query
1k+ active installs
100
Firebase Authentication
500 active installs
100
Logged-in-only
700 active installs
100
Login Security Captcha
10k+ active installs
100