Prioritized issue groups from the latest Plugin Check scan
Maintainability
65
12 issue groups
Security
60
6 issue groups
Supply Chain
2
1 issue group
Repo Compliance
2
2 issue groups
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$SETTING_TABS".
Sample message
Processing form data without nonce verification.
Sample message
Processing form data without nonce verification.
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<a href=\"$url\" $ex_props $rel_target>$btn_text</a>$imp_tag"'.
Sample message
Editor blocks must define "apiVersion" 3 or higher in block.json for WordPress 7.0+ iframe editor compatibility.
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Sample message
Detected usage of a non-sanitized input variable: $_GET[$request_key]
Sample message
$_GET[$request_key] not unslashed before sanitization. Use wp_unslash() or similar
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "AwsV4".
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "get_amazon_item_data".
Sample message
Hidden files are not permitted.
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
Sample message
Sanitization missing for register_setting().
Sample message
Detected usage of meta_key, possible slow query.
Sample message
Detected usage of tax_query, possible slow query.
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
Sample message
The parameter "[ 'fields' => 'id=>name' ]" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
Sample message
AI instruction directory ".claude" detected. These directories should not be included in production plugins.
Sample message
The readme description contains unofficial language. It must be written in standard English.
Sample message
The readme short description contains unofficial language. It must be written in standard English.
Sample message
Unexpected markdown file "AGENTS.md" detected in plugin root. Only specific markdown files are expected in production plugins.
Not analyzed yet.
First score snapshot
v1.19.0
35
Latest
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 35 | 129 | 27 | 102 | v1.19.0 | 2.0.0 |
Author, categories, issues, domains, and nearby plugins.