Let your data speak — assistants with different perspectives help you understand your site, alongside heatmaps and replays.
Prioritized issue groups from the latest Plugin Check scan
Maintainability
782
15 issue groups
Security
232
10 issue groups
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$access_type".
Sample message
Use of a direct database call is discouraged.
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
Sample message
Unescaped parameter $create_query used in $wpdb->query()\n$create_query assigned unsafely at line 972.
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $dateCondition at $dateCondition\n
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
Sample message
Replacement variables found, but no valid placeholders found in the query.
Sample message
Processing form data without nonce verification.
Sample message
Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "COMPENSABLE_MEDIA".
Sample message
Attempting a database schema change is discouraged.
Sample message
Processing form data without nonce verification.
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE['qa_id_z']
Sample message
Plugin folders are deleted when upgraded. Do not save data to the plugin folder using rename(). Detected usage of constant WP_CONTENT_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "apache_request_headers".
Sample message
$_COOKIE['qa_id_z'] not unslashed before sanitization. Use wp_unslash() or similar
Sample message
The use of function ini_set() is discouraged
Sample message
debug_backtrace() found. Debug code should not normally be used in production.
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
Sample message
File has mixed line endings; this may cause incorrect results
Sample message
No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.
Sample message
Unescaped parameter $table_pv used in $wpdb->get_results()\n$table_pv assigned unsafely at line 2873.
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 2.
Sample message
error_log() found. Debug code should not normally be used in production.
Sample message
Plugin name "QA Assistants - Driven by data" is different from the name declared in plugin header "QA Assistants".
Sample message
The "/vendor" directory using composer exists, but "composer.json" file is missing.
Potential connections found in static code analysis.
Outbound calls
294
External assets
0
Incoming endpoints
6
No external asset domains detected.
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
wp_ajax
3 score snapshots
v5.3.0.0
29
Latest
v5.2.0.1
30
Score
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 29 | 1,015 | 5 | 1,010 | v5.3.0.0 | 2.1.0 |
| 30 | 871 | 4 | 867 | v5.2.0.1 | 2.0.0 |
Author, categories, issues, domains, and nearby plugins.