Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
57
9 issue groups
Security
53
5 issue groups
Supply Chain
3
1 issue group
Repo Compliance
2
2 issue groups
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$SETTING_TABS".41
- Category
- Maintainability
- Occurrences
- 41
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$SETTING_TABS".
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.31
- Category
- Security
- Occurrences
- 31
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET[$request_key]5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET[$request_key]
WARNINGSecurityRequest data is not unslashed$_GET[$request_key] not unslashed before sanitization. Use wp_unslash() or similar5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
$_GET[$request_key] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "AwsV4".3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "AwsV4".
ERRORSupply ChainHidden files includedHidden files are not permitted.3
- Category
- Supply Chain
- Occurrences
- 3
- Severity
- error
Sample message
Hidden files are not permitted.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "get_amazon_item_data".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "get_amazon_item_data".
ERRORMaintainabilityNot AllowedUse of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
Show 7 moreShow less
ERRORSecuritySetting is missing a sanitization callback1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Sanitization missing for register_setting().
ERRORMaintainabilitydate date1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORMaintainabilityDeprecated parameter: get_terms parameter 21
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
The parameter "[ 'fields' => 'id=>name' ]" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
WARNINGMaintainabilityai instruction directory1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
AI instruction directory ".claude" detected. These directories should not be included in production plugins.
ERRORRepo Compliancereadme description non official language1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
The readme description contains unofficial language. It must be written in standard English.
ERRORRepo Compliancereadme short description non official language1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
The readme short description contains unofficial language. It must be written in standard English.
WARNINGMaintainabilityunexpected markdown file1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Unexpected markdown file "AGENTS.md" detected in plugin root. Only specific markdown files are expected in production plugins.
External Connections
Potential connections found in static code analysis.
Outbound calls
89
External assets
4
Incoming endpoints
8
Notable Domains
pochipp.com23 · outbound
amazon.co.jp15 · outbound
affiliate.amazon.co.jp5 · outbound
jp.mercari.com5 · outbound
search.rakuten.co.jp4 · outbound
shopping.yahoo.co.jp4 · outbound
Platform / Reference Domains
External Asset Domains
i.moshimo.com3 · asset
ad.jp.ap.valuecommerce.com1 · asset
Incoming Endpoints
/wp-json/pochipp/dataREST
register_rest_route
Admin AJAX endpoints7
wp_ajax_auto_updateauthenticated
wp_ajax
wp_ajax_pochipp_registerd_by_blockauthenticated
wp_ajax
wp_ajax_pochipp_search_amazonauthenticated
wp_ajax
wp_ajax_pochipp_search_rakutenauthenticated
wp_ajax
wp_ajax_pochipp_search_registerdauthenticated
wp_ajax
wp_ajax_pochipp_search_yahooauthenticated
wp_ajax
wp_ajax_pochipp_update_dataauthenticated
wp_ajax
Score History
4 score snapshots
v1.20.2
35
Latest
- Findings
- 115
- Errors
- 15
- Warnings
- 100
- Check
- 2.1.0
v1.20.1
35
Score
- Findings
- 115
- Errors
- 15
- Warnings
- 100
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 35 | 115 | 15 | 100 | v1.20.2 | 2.1.0 |
| 35 | 115 | 15 | 100 | v1.20.1 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Category
Issue
Domain
Related
Crowdsignal Forms100 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSpectra Legacy – Gutenberg Blocks25 scoreBreadcrumb NavXT37 scorePDF Embedder – PDF Viewer & Embed PDF Files for WordPress91 scoreLayout Grid Block98 scoreAdvanced Ads – Ad Manager & AdSense25 scoreThe Icon Block100 score
Plugin
Author
Category
Issue
Domain
Related
Crowdsignal Forms100 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreLiteSpeed Cache35 scoreAll-in-One WP Migration and Backup34 scoreSpectra Legacy – Gutenberg Blocks25 scoreBreadcrumb NavXT37 scorePDF Embedder – PDF Viewer & Embed PDF Files for WordPress91 scoreLayout Grid Block98 scoreAdvanced Ads – Ad Manager & AdSense25 scoreThe Icon Block100 score
Related Plugins
Crowdsignal Forms
200k+ active installs
100
The Icon Block
40k+ active installs
100
Embed PDF Viewer
20k+ active installs
100
Advance Custom HTML – Show Off Code Snippets with Live Preview
10k+ active installs
100
Shortcode Redirect
10k+ active installs
100
Carousel Block – Showcase Images in Elegant Sliding Displays
7k+ active installs
100