PluginScore

Public Post Preview

Allow anonymous users to preview a draft of a post before it is published.

v3.1.2Dominik SchillingUpdated Added 100k+ installs90% rating0% support resolved
anonymousdraftspostspreviewpublic
57
Score
8
Errors
11
Warnings
+0
Change

Category Scores

Security24
Repo94
Performance100
Maintainability98

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

19 findings

Security

17

6 issue groups

Maintainability

1

1 issue group

Repo Compliance

1

1 issue group

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.6
Category
Security
Occurrences
6
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.4
Category
Security
Occurrences
4
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WordPress.Security.EscapeOutput.UnsafePrintingFunctionReference
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.2
Category
Security
Occurrences
2
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '__'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['checked']2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['checked']

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
WARNINGSecurityRequest data is not unslashed$_POST['checked'] not unslashed before sanitization. Use wp_unslash() or similar2
Category
Security
Occurrences
2
Severity
warning

Sample message

$_POST['checked'] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.1
Category
Security
Occurrences
1
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
ERRORRepo Compliancemissing readme header testedThe "Tested up to" header is missing in the readme file.1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

The "Tested up to" header is missing in the readme file.

missing_readme_header_testedReference

External Connections

Not analyzed yet.

Score History

First score snapshot

v3.1.2

57

Latest

Findings
19
Errors
8
Warnings
11
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

29 nodes

Related Plugins

Hide Drafts in Menus

1k+ active installs

100
Default Post Author

1k+ active installs

99
Essential Widgets

10k+ active installs

99
List all posts by Authors, nested Categories and Titles

700 active installs

99
Quick Drafts Access

400 active installs

99
Advanced Posts Listing – Show Post List Easily

4k+ active installs

98