The plugin integrates any WordPress with a Post Affiliate Pro account. Post Affiliate Pro is the leading affiliate tracking tool worldwide.
24
Score
293
Errors
335
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance100
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
351
8 issue groups
Maintainability
262
17 issue groups
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.104
- Category
- Security
- Occurrences
- 104
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().94
- Category
- Security
- Occurrences
- 94
- Severity
- error
Sample message
Sanitization missing for register_setting().
ERRORMaintainabilitywp function not compatible with requires wpFunction "esc_textarea()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.0.80
- Category
- Maintainability
- Occurrences
- 80
- Severity
- error
Sample message
Function "esc_textarea()" requires WordPress 3.1.0, but your plugin minimum supported version is WordPress 3.0.0.
WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "Gpf".63
- Category
- Maintainability
- Occurrences
- 63
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "Gpf".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$TRACKING_IP_ADDRESS".40
- Category
- Maintainability
- Occurrences
- 40
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$TRACKING_IP_ADDRESS".
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot add request param: Value ($name=$value) is not scalar or Gpf_Rpc_Serializable"'.40
- Category
- Security
- Occurrences
- 40
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot add request param: Value ($name=$value) is not scalar or Gpf_Rpc_Serializable"'.
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.33
- Category
- Security
- Occurrences
- 33
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$HTMLcontent'.31
- Category
- Security
- Occurrences
- 31
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$HTMLcontent'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$name]24
- Category
- Security
- Occurrences
- 24
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$name]
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.23
- Category
- Maintainability
- Occurrences
- 23
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
Show 15 moreShow less
WARNINGSecurityRequest data is not unslashed21
- Category
- Security
- Occurrences
- 21
- Severity
- warning
Sample message
$_COOKIE[$name] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGMaintainabilityerror log print r10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
WARNINGMaintainabilityDirect Query7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityNon-prefixed interface6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Interfaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "Gpf_Data_Row".
WARNINGMaintainabilityerror log var export5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
var_export() found. Debug code should not normally be used in production.
ERRORSecuritySQL query is not prepared4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $sanitizedQuery
WARNINGMaintainabilityNon-prefixed constant3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "PAP_API_VERSION".
WARNINGMaintainabilityerror log debug backtrace3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
debug_backtrace() found. Debug code should not normally be used in production.
WARNINGMaintainabilityprevent path disclosure error reporting3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
error_reporting() can lead to full path disclosure.
ERRORMaintainabilityfile system operations fclose3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityNon Enqueued Script3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Scripts must be registered/enqueued via wp_enqueue_script()
WARNINGMaintainabilityerror log set error handler2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
set_error_handler() found. Debug code should not normally be used in production.
WARNINGMaintainabilityerror log trigger error2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
trigger_error() found. Debug code should not normally be used in production.
ERRORMaintainabilitycurl curl getinfo2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
External Connections
Potential connections found in static code analysis.
Outbound calls
24
External assets
1
Incoming endpoints
2
Notable Domains
cl.cam.ac.uk16 · outbound
postaffiliatepro.com4 · outbound
qualityunit.com2 · outbound
myaccount.postaffiliatepro.com1 · outbound
Platform / Reference Domains
wordpress.org1 · platform/reference
External Asset Domains
fonts.googleapis.com1 · asset
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints2
wp_ajax_pap_login_redirect_ajaxauthenticated
wp_ajax
wp_ajax_pap_recompute_ajaxauthenticated
wp_ajax
Score History
First score snapshot
v1.29.5
24
Latest
- Findings
- 628
- Errors
- 293
- Warnings
- 335
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 24 | 628 | 293 | 335 | v1.29.5 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Nonce verification recommended104 findingsSetting is missing a sanitization callback94 findingswp function not compatible with requires wp80 findingsNon-prefixed class63 findingsNon-prefixed global variable40 findingsException output is not escaped40 findingsMissing nonce verification33 findingsOutput is not escaped31 findings
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreYoast Duplicate Post70 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreUltimate Addons for Elementor33 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreImagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF21 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation34 scorePopup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder66 score
Author
Category
Issue
Nonce verification recommended104 findingsSetting is missing a sanitization callback94 findingswp function not compatible with requires wp80 findingsNon-prefixed class63 findingsNon-prefixed global variable40 findingsException output is not escaped40 findingsMissing nonce verification33 findingsOutput is not escaped31 findings
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder39 scoreWooCommerce22 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreYoast Duplicate Post70 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreUltimate Addons for Elementor33 scoreAll-In-One Security (AIOS) – Security and Firewall24 scoreImagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF21 scoreHostinger Reach – AI-Powered Email Marketing for WordPress40 scorePopup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation34 scorePopup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder66 score
Related Plugins
GetResponse Official
4k+ active installs
100
Block for Mailchimp – grow your email list with signup forms
2k+ active installs
100
Affiliates WooCommerce Light
1k+ active installs
100
Coupon Shortcodes for WooCommerce
1k+ active installs
100
What Would Seth Godin Do
900 active installs
100
Advanced Popups
60k+ active installs
99