Pixel Gallery is an Elementor gallery plugin for creating responsive image and portfolio grids with customizable layouts and effects.
28
Score
146
Errors
259
Warnings
+0
Change
Category Scores
Security0
Repo72
Performance76
Maintainability47
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
136
9 issue groups
I18n
90
5 issue groups
Performance
81
2 issue groups
Maintainability
81
8 issue groups
WARNINGPerformancePost Not In excludeUsing exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.78
- Category
- Performance
- Occurrences
- 78
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.54
- Category
- I18n
- Occurrences
- 54
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_modules".46
- Category
- Maintainability
- Occurrences
- 46
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$active_modules".
WARNINGSecurityRequest data is not unslashed$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar38
- Category
- Security
- Occurrences
- 38
- Severity
- warning
Sample message
$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<div class='pg-option-item {$class} {$widget_used_status}' {$data_type}>"'.29
- Category
- Security
- Occurrences
- 29
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<div class='pg-option-item {$class} {$widget_used_status}' {$data_type}>"'.
ERRORI18nUnordered Placeholders TextMultiple placeholders in translatable strings should be ordered. Expected "%1$1s, %2$2s", but got "%1s, %2s" in 'Enter your clip path value, if you don\'t understand clip path so please %1s look here %2s'.28
- Category
- I18n
- Occurrences
- 28
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$1s, %2$2s", but got "%1s, %2s" in 'Enter your clip path value, if you don\'t understand clip path so please %1s look here %2s'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.20
- Category
- Security
- Occurrences
- 20
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST[$moudle_id]20
- Category
- Security
- Occurrences
- 20
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST[$moudle_id]
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_is_elementor_installed".11
- Category
- Maintainability
- Occurrences
- 11
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_is_elementor_installed".
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Processing form data without nonce verification.
Show 15 moreShow less
WARNINGSecurityInput is not validated8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST[$moudle_id]. Check that the array index exists before using it.
ERRORSupply ChainCompressed files included8
- Category
- Supply Chain
- Occurrences
- 8
- Severity
- error
Sample message
Compressed files are not permitted.
ERRORMaintainabilityMissing direct file access protection8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGMaintainabilityprevent path disclosure error reporting6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
error_reporting() can lead to full path disclosure.
ERRORI18nNon Singular String Literal Domain5
- Category
- I18n
- Occurrences
- 5
- Severity
- error
Sample message
The $domain parameter must be a single text string literal. Found: $this->settings['text_domain']
WARNINGSecuritywp redirect wp redirect4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
WARNINGSecurityDatabase parameter is not escaped3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Unescaped parameter $table_cat used in $wpdb->query()\n$table_cat assigned unsafely at line 239.
ERRORSecuritySQL query is not prepared3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $table_cat
WARNINGMaintainabilityNon-prefixed hook name3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "bdthemes_pixel_gallery/init".
WARNINGMaintainabilityNot In Footer3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGPerformancePost Not In post not in3
- Category
- Performance
- Occurrences
- 3
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
ERRORMaintainabilityparse url parse url2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORMaintainabilityunlink unlink2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
ERRORI18nNon Singular String Literal Text2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: 'View ' . $args['name'] . ' Video Tutorial'
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
External Connections
Potential connections found in static code analysis.
Outbound calls
279
External assets
2
Incoming endpoints
19
Notable Domains
youtu.be75 · outbound
pixelgallery.pro72 · outbound
developer.mozilla.org32 · outbound
facebook.com5 · outbound
feedback.bdthemes.com3 · outbound
instagram.com3 · outbound
Platform / Reference Domains
ps.w.org23 · platform/reference
github.com18 · platform/reference
wordpress.org6 · platform/reference
api.wordpress.org1 · platform/reference
codex.wordpress.org1 · platform/reference
External Asset Domains
bdthemes.com17 · asset + outbound
Incoming Endpoints
wp_ajax_nopriv_pg_get_pluginspublic
wp_ajax
wp_ajax_nopriv_pixel_gallery_ajax_loginpublic
wp_ajax
Admin AJAX endpoints14
wp_ajax_pg_get_pluginsauthenticated
wp_ajax
wp_ajax_pg_install_pluginauthenticated
wp_ajax
wp_ajax_import_elementor_templateauthenticated
wp_ajax
wp_ajax_import_pg_elementor_bundle_runner_templateauthenticated
wp_ajax
wp_ajax_import_pg_elementor_bundle_templateauthenticated
wp_ajax
wp_ajax_pg_admin_api_biggopti_dismissauthenticated
wp_ajax
wp_ajax_pg_fetch_api_biggoptiesauthenticated
wp_ajax
wp_ajax_pg_revoke_white_label_tokenauthenticated
wp_ajax
wp_ajax_pg_save_custom_codeauthenticated
wp_ajax
wp_ajax_pg_save_white_labelauthenticated
wp_ajax
wp_ajax_pixel_gallery_dynamic_select_input_dataauthenticated
wp_ajax
wp_ajax_pixel_gallery_settings_saveauthenticated
wp_ajax
2 more hidden
Score History
4 score snapshots
v2.1.14
28
Latest
- Findings
- 405
- Errors
- 146
- Warnings
- 259
- Check
- 2.0.0
v2.1.13
28
Score
- Findings
- 405
- Errors
- 146
- Warnings
- 259
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 28 | 405 | 146 | 259 | v2.1.14 | 2.0.0 |
| 28 | 405 | 146 | 259 | v2.1.13 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
WooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreSmart Slider 323 scoreSlider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider23 scorePhoto Gallery, Sliders, Proofing and Themes – NextGEN Gallery23 scoreFirelight Lightbox52 score
Author
Category
Issue
Domain
Related
WooCommerce21 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreSmart Slider 323 scoreSlider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider23 scorePhoto Gallery, Sliders, Proofing and Themes – NextGEN Gallery23 scoreFirelight Lightbox52 score
Related Plugins
Album Gallery for Flickr
4k+ active installs
100
Lightbox Images for Divi Enhanced
4k+ active installs
100
Filter Gallery
3k+ active installs
100
Gallery with thumbnail slider
3k+ active installs
100
WF Magnific Lightbox
1k+ active installs
100
Simple Block Gallery
1k+ active installs
100