Increase Sales, Lead Generation, Conversion rates and receive good Call to Action rates with smart WordPress popup plugin.
Prioritized issue groups from the latest Plugin Check scan
Maintainability
454
16 issue groups
Security
296
8 issue groups
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$URL".
Sample message
Processing form data without nonce verification.
Sample message
Use of a direct database call is discouraged.
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $columns_name_placeholders at "SELECT $table.$columns_name_placeholders FROM `$table`"
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "autoCloseOptions".
Sample message
Unescaped parameter $deleteTable used in $wpdb->query()\n$deleteTable assigned unsafely at line 248.
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
Sample message
Function "add_term_meta()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 4.2.0.
Sample message
$_GET['post'] not unslashed before sanitization. Use wp_unslash() or similar
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Sample message
Attempting a database schema change is discouraged.
Sample message
Processing form data without nonce verification.
Sample message
wp_get_sites() has been deprecated since WordPress version 4.6.0. Use get_sites() instead.
Sample message
Detected usage of a non-sanitized input variable: $_GET['post']
Sample message
Plugin Updater detected. Detected code which may be altering WordPress update routines. Detected: _site_transient_update_plugins
Sample message
No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.
Sample message
Replacement variables found, but no valid placeholders found in the query.
Sample message
Detected usage of tax_query, possible slow query.
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$option".
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "ConfigDataHelper".
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "$name".
Sample message
Tested up to: 7.0.1 The version number should only include major versions 7.0.
Sample message
Plugin Updater detected. These are not permitted in WordPress.org hosted plugins. Detected: site_transient_update_plugins
Potential connections found in static code analysis.
Outbound calls
58
External assets
2
Incoming endpoints
38
wp_ajax
wp_ajax
wp_ajax
admin_post
admin_post
admin_post
admin_post
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
23 more hidden
2 score snapshots
v4.4.5
30
Latest
v4.4.4
30
Score
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 30 | 750 | 28 | 722 | v4.4.5 | 2.0.0 |
| 30 | 748 | 26 | 722 | v4.4.4 | 2.0.0 |
Author, categories, issues, domains, and nearby plugins.