PluginScore

Poptics – Popup Builder, Email Opt-ins, Exit-Intent & WooCommerce Popups Sales

Create high-converting popups, email opt-ins, exit-intent popups & WooCommerce popups to boost leads, subscribers and sales.

v1.0.22AethonicUpdated Added 2k+ installs100% rating
email opt-in popupexit intent popuppopuppopup builderwoocommerce popup
37
Score
59
Errors
64
Warnings
+0
Change

Category Scores

Security0
Repo83
Performance100
Maintainability74

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

123 findings

Security

77

7 issue groups

Maintainability

42

13 issue groups

Repo Compliance

3

3 issue groups

I18n

1

1 issue group

ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $campaign_id43
Category
Security
Occurrences
43
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $campaign_id

WordPress.DB.PreparedSQL.NotPrepared
WARNINGMaintainabilityDynamic hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$poptics_menu_permission . 'ab-testing'".16
Category
Maintainability
Occurrences
16
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$poptics_menu_permission . 'ab-testing'".

WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $placeholders at "DELETE FROM $table_name WHERE id IN ($placeholders)"13
Category
Security
Occurrences
13
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $placeholders at "DELETE FROM $table_name WHERE id IN ($placeholders)"

WordPress.DB.PreparedSQL.InterpolatedNotPrepared
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $table_name used in $wpdb->get_results()\n$table_name assigned unsafely at line 694.10
Category
Security
Occurrences
10
Severity
warning

Sample message

Unescaped parameter $table_name used in $wpdb->get_results()\n$table_name assigned unsafely at line 694.

PluginCheck.Security.DirectDB.UnescapedDBParameter
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $prepared_count_query used in $wpdb->get_results()\n$prepared_count_query assigned unsafely at line 316.8
Category
Security
Occurrences
8
Severity
error

Sample message

Unescaped parameter $prepared_count_query used in $wpdb->get_results()\n$prepared_count_query assigned unsafely at line 316.

PluginCheck.Security.DirectDB.UnescapedDBParameter
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "allow_svg_upload".8
Category
Maintainability
Occurrences
8
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "allow_svg_upload".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Use of a direct database call is discouraged.

WordPress.DB.DirectDatabaseQuery.DirectQuery
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WordPress.DB.DirectDatabaseQuery.NoCaching
ERRORMaintainabilitywp function not compatible with requires wpFunction "get_block_editor_settings()" requires WordPress 5.8.0, but your plugin minimum supported version is WordPress 5.2.0.3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Function "get_block_editor_settings()" requires WordPress 5.8.0, but your plugin minimum supported version is WordPress 5.2.0.

wp_function_not_compatible_with_requires_wpReference
WARNINGMaintainabilitySchema ChangeAttempting a database schema change is discouraged.2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Attempting a database schema change is discouraged.

WordPress.DB.DirectDatabaseQuery.SchemaChange
Show 14 more
WARNINGI18nDiscouraged text-domain loading1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFoundReference
WARNINGSecurityUnfinished Prepare1
Category
Security
Occurrences
1
Severity
warning

Sample message

Replacement variables found, but no valid placeholders found in the query.

WordPress.DB.PreparedSQLPlaceholders.UnfinishedPrepare
WARNINGMaintainabilityslow db query meta query1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_query
WARNINGMaintainabilityNon-prefixed hook name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "plugin_locale".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
WARNINGMaintainabilityNon-prefixed global variable1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "$name".

WordPress.NamingConventions.PrefixAllGlobals.VariableConstantNameFound
ERRORSecurityOutput is not escaped1
Category
Security
Occurrences
1
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$output'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
WARNINGSecuritywp redirect wp redirect1
Category
Security
Occurrences
1
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WordPress.Security.SafeRedirect.wp_redirect_wp_redirectReference
WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Poptics – Popup Builder, Email Opt-ins, Exit-Intent & WooCommerce Popups Sales" is different from the name declared in plugin header "Poptics".

mismatched_plugin_nameReference
WARNINGMaintainabilitymissing composer json file1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The "/vendor" directory using composer exists, but "composer.json" file is missing.

missing_composer_json_fileReference
ERRORMaintainabilityMissing direct file access protection1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
ERRORRepo Complianceoutdated tested upto header1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

outdated_tested_upto_headerReference
ERRORRepo Compliancereadme mismatched header requires1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Mismatched Requires at least: 5.6 != 5.2. "Requires at least" needs to be exactly the same with that in your main plugin file's header.

readme_mismatched_header_requiresReference
ERRORRepo Compliancereadme mismatched header requires php1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Mismatched Requires PHP: 7.4 != 7.3. "Requires PHP" needs to be exactly the same with that in your main plugin file's header.

readme_mismatched_header_requires_phpReference
WARNINGMaintainabilitytrademarked term1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

The plugin name includes a restricted term. Your chosen plugin name - "Poptics – Popup Builder, Email Opt-ins, Exit-Intent &amp; WooCommerce Popups Sales" - contains the restricted term "woocommerce" which cannot be used within in your plugin name, unless your plugin name contains one of the allowed patterns: "for woocommerce", "with woocommerce", "using woocommerce", or "and woocommerce". The term must still not appear anywhere else in your name.

trademarked_term

External Connections

Not analyzed yet.

Score History

First score snapshot

v1.0.22

37

Latest

Findings
123
Errors
59
Warnings
64
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

28 nodes

Related

Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings31 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder35 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation32 scorePopup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder55 scorePopup Builder – Create highly converting, mobile friendly marketing popups.30 scoreLightbox & Modal Popup WordPress Plugin – FooBox25 scorePopups for Divi89 score

Related Plugins

All In One Lightbox – Display Images, Audio, and Video in Popups

3k+ active installs

100
Popup for Elementor

700 active installs

100
Advanced Popups

60k+ active installs

99
Fastest Age Verification

500 active installs

99
Light Modal Block

2k+ active installs

99
MakeITeasy Popup

1k+ active installs

99