Change plugin order and selectively enable/disable plugins on each post/page.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
299
10 issue groups
Maintainability
223
13 issue groups
I18n
58
2 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"regex['$key'] = $val;\n"'.104
- Category
- Security
- Occurrences
- 104
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"regex['$key'] = $val;\n"'.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.96
- Category
- Maintainability
- Occurrences
- 96
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $addColumnSql95
- Category
- Security
- Occurrences
- 95
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $addColumnSql
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().88
- Category
- Maintainability
- Occurrences
- 88
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().56
- Category
- I18n
- Occurrences
- 56
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $addColumnSql used in $wpdb->query()\n$addColumnSql assigned unsafely at line 456.40
- Category
- Security
- Occurrences
- 40
- Severity
- error
Sample message
Unescaped parameter $addColumnSql used in $wpdb->query()\n$addColumnSql assigned unsafely at line 456.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.19
- Category
- Security
- Occurrences
- 19
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;15
- Category
- Maintainability
- Occurrences
- 15
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE['po_assigned_roles']12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE['po_assigned_roles']
WARNINGSecurityRequest data is not unslashed$_COOKIE['po_assigned_roles'] not unslashed before sanitization. Use wp_unslash() or similar12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
$_COOKIE['po_assigned_roles'] not unslashed before sanitization. Use wp_unslash() or similar
Show 15 moreShow less
WARNINGSecurityDatabase parameter is not escaped10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Unescaped parameter $this used in $wpdb->get_results()
WARNINGMaintainabilitySchema Change7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGSecurityInput is not validated4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['PO_nonce']. Check that the array index exists before using it.
ERRORMaintainabilityunlink unlink4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGMaintainabilityMissing Version3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Resource version not set in call to wp_register_style(). This means new versions of the style may not always be loaded due to browser caching.
WARNINGMaintainabilitytrademarked term3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "Plugin Organizer" - contains the restricted term "plugin" which cannot be used at all in your plugin name.
WARNINGSecurityMissing nonce verification2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityfile system operations mkdir2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
ERRORI18nMissing Translators Comment2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORMaintainabilityOffloaded Content1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Found call to wp_register_style() with external resource. Offloading styles to your servers or any remote service is disallowed.
WARNINGMaintainabilityslow db query meta key1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
ERRORSecurityUnsafe printing function1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORMaintainabilityrand mt rand1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
mt_rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORMaintainabilitystrip tags strip tags1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.
ERRORMaintainabilityNon Enqueued Script1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Scripts must be registered/enqueued via wp_enqueue_script()
Score History
First score snapshot
v10.2.4
32
Latest
- Findings
- 583
- Errors
- 326
- Warnings
- 257
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 32 | 583 | 326 | 257 | v10.2.4 | 2.0.0 |