Pluginception

A plugin that lets you quickly and easily create new plugins.

v1.3Samuel Wood (Otto)Updated Added 3k+ installs100% rating
56
Score
7
Errors
29
Warnings
+0
Change

Category Scores

Security27
Repo89
Performance100
Maintainability91

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

36 findings

Security

27

5 issue groups

Maintainability

7

5 issue groups

Repo Compliance

2

2 issue groups

WARNINGSecurityRequest data is not unslashed$_POST['pluginception_name'] not unslashed before sanitization. Use wp_unslash() or similar9
Category
Security
Occurrences
9
Severity
warning

Sample message

$_POST['pluginception_name'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityInput is not validated or sanitizedDetected usage of a non-sanitized, non-validated input variable _POST: Author URI: {$_POST['pluginception_author_uri']}\r\n8
Category
Security
Occurrences
8
Severity
warning

Sample message

Detected usage of a non-sanitized, non-validated input variable _POST: Author URI: {$_POST['pluginception_author_uri']}\r\n

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['pluginception_slug']7
Category
Security
Occurrences
7
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['pluginception_slug']

WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "Pluginception" - contains the restricted term "plugin" which cannot be used at all in your plugin name.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "Pluginception" - contains the restricted term "plugin" which cannot be used at all in your plugin name.

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"' value='{$value}'></td></tr>\n"'.2
Category
Security
Occurrences
2
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"' value='{$value}'></td></tr>\n"'.

ERRORMaintainabilityNot AllowedUse of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_SERVER[&#039;REQUEST_METHOD&#039;]. Check that the array index exists before using it.1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_SERVER[&#039;REQUEST_METHOD&#039;]. Check that the array index exists before using it.

WARNINGMaintainabilityDeprecated function: screen_iconscreen_icon() has been deprecated since WordPress version 3.8.0.1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

screen_icon() has been deprecated since WordPress version 3.8.0.

ERRORRepo Compliancelicense mismatchYour plugin has a different license declared in the readme file and plugin header. Please update your readme with a valid GPL license identifier.1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Your plugin has a different license declared in the readme file and plugin header. Please update your readme with a valid GPL license identifier.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Show 2 more
ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.5 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

ERRORMaintainabilitywp function not compatible with requires wp1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Function "submit_button()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.0.

Score History

First score snapshot

v1.3

56

Latest

Findings
36
Errors
7
Warnings
29
Check
2.0.0

Related Plugins

PHP Code Widget

80k+ active installs

64
Blogger Importer

50k+ active installs

38
Restore Link Title Field

3k+ active installs

98