Elementor Carousel, Mega Menu, Posts List/Slider, WooCommerce Widgets, Display Conditions, AI Abilities, Premade Templates & more.
22
Score
208
Errors
1,135
Warnings
+0
Change
Category Scores
Security0
Repo88
Performance83
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
1,116
12 issue groups
Security
98
6 issue groups
I18n
81
5 issue groups
Performance
9
2 issue groups
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'pa_pinterest_token_' . $widget_id".521
- Category
- Maintainability
- Occurrences
- 521
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'pa_pinterest_token_' . $widget_id".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$abilities_by_cat".500
- Category
- Maintainability
- Occurrences
- 500
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$abilities_by_cat".
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$bg_css'.56
- Category
- Security
- Occurrences
- 56
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$bg_css'.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'premium-addons-for-elementor' but got 'elementor'.48
- Category
- I18n
- Occurrences
- 48
- Severity
- error
Sample message
Mismatched text domain. Expected 'premium-addons-for-elementor' but got 'elementor'.
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_rplg_curl_urlopen".29
- Category
- Maintainability
- Occurrences
- 29
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_rplg_curl_urlopen".
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;29
- Category
- Maintainability
- Occurrences
- 29
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORI18nNon Singular String Literal TextThe $text parameter must be a single text string literal. Found: $settings['subtotal_txt']10
- Category
- I18n
- Occurrences
- 10
- Severity
- error
Sample message
The $text parameter must be a single text string literal. Found: $settings['subtotal_txt']
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $clients used in $wpdb->query()\n$clients assigned unsafely at line 304.9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
Unescaped parameter $clients used in $wpdb->query()\n$clients assigned unsafely at line 304.
Show 15 moreShow less
WARNINGSecurityRequest data is not unslashed9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
$_GET['is_id'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORI18nMissing Translators Comment9
- Category
- I18n
- Occurrences
- 9
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORI18nMissing Arg Domain7
- Category
- I18n
- Occurrences
- 7
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORI18nNo Empty Strings7
- Category
- I18n
- Occurrences
- 7
- Severity
- error
Sample message
The $text text string should have translatable content. Found: '%1$s'
WARNINGSecurityInput is not sanitized6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['itemKey']
ERRORMaintainabilitycurl curl close6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGSecurityMissing nonce verification5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGPerformancePost Not In exclude5
- Category
- Performance
- Occurrences
- 5
- Severity
- warning
Sample message
Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilityNon-prefixed constant4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "PINTEREST_API_URL".
ERRORMaintainabilitycurl curl getinfo4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl setopt4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
WARNINGPerformancePost Not In post not in4
- Category
- Performance
- Occurrences
- 4
- Severity
- warning
Sample message
Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.
WARNINGMaintainabilityslow db query meta key3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityslow db query meta query3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
ERRORMaintainabilitycurl curl exec3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
External Connections
Potential connections found in static code analysis.
Outbound calls
281
External assets
0
Incoming endpoints
19
Notable Domains
premiumaddons.com177 · outbound
youtube.com34 · outbound
fonts.googleapis.com6 · outbound
elementor.com1 · outbound
facebook.com1 · outbound
lottiefiles.com1 · outbound
Platform / Reference Domains
w3.org53 · platform/reference
wordpress.org3 · platform/reference
downloads.wordpress.org2 · platform/reference
github.com2 · platform/reference
plugins.svn.wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints19
admin_post_premium_addons_rollbackauthenticated
admin_post
wp_ajax_get_shape_divider_svgauthenticated
wp_ajax
wp_ajax_pa_check_unused_widgetsauthenticated
wp_ajax
wp_ajax_pa_clear_site_cursor_settingsauthenticated
wp_ajax
wp_ajax_pa_disable_elementor_mc_templateauthenticated
wp_ajax
wp_ajax_pa_disable_oauth_connectauthenticated
wp_ajax
wp_ajax_pa_dismiss_admin_noticeauthenticated
wp_ajax
wp_ajax_pa_enable_oauth_connectauthenticated
wp_ajax
wp_ajax_pa_get_menu_item_settingsauthenticated
wp_ajax
wp_ajax_pa_get_unused_widgetsauthenticated
wp_ajax
wp_ajax_pa_hide_unused_widgets_dialogauthenticated
wp_ajax
wp_ajax_pa_reset_admin_noticeauthenticated
wp_ajax
7 more hidden
Score History
12 score snapshots
v4.11.94
22
Latest
- Findings
- 1,343
- Errors
- 208
- Warnings
- 1,135
- Check
- 2.0.0
v4.11.93
22
Score
- Findings
- 1,343
- Errors
- 208
- Warnings
- 1,135
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 22 | 1,343 | 208 | 1,135 | v4.11.94 | 2.0.0 |
| 22 | 1,343 | 208 | 1,135 | v4.11.93 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreEssential Addons for Elementor – Popular Elementor Templates & Widgets31 scoreUltimate Addons for Elementor33 scoreElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor39 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 scoreRoyal Addons for Elementor – Addons and Templates Kit for Elementor21 scoreInput Mask For Elementor Form Fields100 scoreSelection Lite100 scoreTurbo Addons Elementor100 score
Author
Category
Issue
Domain
Related
Elementor Website Builder – more than just a page builder39 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreLiteSpeed Cache35 scoreWooCommerce21 scoreAkismet Anti-spam: Spam Protection35 scoreEssential Addons for Elementor – Popular Elementor Templates & Widgets31 scoreUltimate Addons for Elementor33 scoreElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor39 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 scoreRoyal Addons for Elementor – Addons and Templates Kit for Elementor21 scoreInput Mask For Elementor Form Fields100 scoreSelection Lite100 scoreTurbo Addons Elementor100 score
Related Plugins
Input Mask For Elementor Form Fields
20k+ active installs
100
Selection Lite
9k+ active installs
100
Turbo Addons Elementor
3k+ active installs
100
Easy Elements for Elementor – Addons & Website Templates
1k+ active installs
100
100
Popup for Elementor
800 active installs
100