The best WordPress giveaway plugin. Grow your email list, website traffic, and social media followers with viral contests, giveaways, and sweepstakes.
42
Score
171
Errors
501
Warnings
+8
Change
Category Scores
Security0
Repo91
Performance100
Maintainability93
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
665
9 issue groups
Maintainability
5
4 issue groups
Repo Compliance
2
2 issue groups
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $query167
- Category
- Security
- Occurrences
- 167
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
WARNINGSecurityRequest data is not unslashed$_COOKIE['rafflepress_hash_' . $giveaway_id] not unslashed before sanitization. Use wp_unslash() or similar116
- Category
- Security
- Occurrences
- 116
- Severity
- warning
Sample message
$_COOKIE['rafflepress_hash_' . $giveaway_id] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $safe_sql used in $wpdb->get_results()\n$safe_sql assigned unsafely at line 112.97
- Category
- Security
- Occurrences
- 97
- Severity
- warning
Sample message
Unescaped parameter $safe_sql used in $wpdb->get_results()\n$safe_sql assigned unsafely at line 112.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_COOKIE['rafflepress_hash_' . $giveaway_id]. Check that the array index exists before using it.83
- Category
- Security
- Occurrences
- 83
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_COOKIE['rafflepress_hash_' . $giveaway_id]. Check that the array index exists before using it.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.78
- Category
- Security
- Occurrences
- 78
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE['rafflepress_hash_' . $giveaway_id]63
- Category
- Security
- Occurrences
- 63
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE['rafflepress_hash_' . $giveaway_id]
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.52
- Category
- Security
- Occurrences
- 52
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validated or sanitizedDetected usage of a non-sanitized, non-validated input variable _SERVER: "://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]"5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of a non-sanitized, non-validated input variable _SERVER: "://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]"
WARNINGSecuritywp redirect wp redirectwp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.
ERRORMaintainabilityfive star reviews detectedLinking directly to 5 stars reviews is not allowed.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Linking directly to 5 stars reviews is not allowed.
Show 5 moreShow less
WARNINGMaintainabilityerror log var dump1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
var_dump() found. Debug code should not normally be used in production.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Giveaways and Contests by RafflePress - Get More Website Traffic, Email Subscribers, and Social Followers" is different from the name declared in plugin header "RafflePress Lite".
ERRORRepo Compliancereadme mismatched header requires1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched Requires at least: 4.8 != 6.3. "Requires at least" needs to be exactly the same with that in your main plugin file's header.
WARNINGRepo Compliancereadme parser warnings too many tags1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
One or more tags were ignored. Please limit your plugin to 5 tags.
ERRORMaintainabilitystable tag mismatch1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Mismatched Stable Tag: 1.12.23 != 1.12.24. Your Stable Tag is meant to be the stable version of your plugin and it needs to be exactly the same with the Version in your main plugin file's header. Any mismatch can prevent users from downloading the correct plugin files from WordPress.org.
External Connections
Potential connections found in static code analysis.
Outbound calls
199
External assets
5
Incoming endpoints
57
Notable Domains
rafflepress.com59 · outbound
fontawesome.com28 · outbound
app.rafflepress.com5 · outbound
facebook.com5 · outbound
getbootstrap.com4 · outbound
app.rafflepress.test3 · outbound
Platform / Reference Domains
downloads.wordpress.org16 · platform/reference
github.com8 · platform/reference
w3.org7 · platform/reference
wordpress.org3 · platform/reference
opensource.org2 · platform/reference
s.w.org1 · platform/reference
External Asset Domains
youtube.com10 · asset + outbound
google.com3 · asset + outbound
staging.rafflepress.com2 · asset
connect.facebook.net1 · asset
Incoming Endpoints
wp_ajax_nopriv_rafflepress_lite_action_tokenpublic
wp_ajax
wp_ajax_nopriv_rafflepress_lite_giveaway_apipublic
wp_ajax
wp_ajax_nopriv_rafflepress_lite_giveaway_commentpublic
wp_ajax
wp_ajax_nopriv_rafflepress_lite_run_one_click_upgradepublic
wp_ajax
Admin AJAX endpoints49
wp_ajax_rafflepress_lite_activate_addonauthenticated
wp_ajax
wp_ajax_rafflepress_lite_create_giveawayauthenticated
wp_ajax
wp_ajax_rafflepress_lite_deactivate_addonauthenticated
wp_ajax
wp_ajax_rafflepress_lite_install_addonauthenticated
wp_ajax
admin_post_rafflepress_create_giveawayauthenticated
admin_post
wp_ajax_rafflepress_lite_action_tokenauthenticated
wp_ajax
wp_ajax_rafflepress_lite_activate_automationauthenticated
wp_ajax
wp_ajax_rafflepress_lite_archive_selected_giveawaysauthenticated
wp_ajax
wp_ajax_rafflepress_lite_confirm_selected_contestantsauthenticated
wp_ajax
wp_ajax_rafflepress_lite_contestants_datatableauthenticated
wp_ajax
wp_ajax_rafflepress_lite_contestants_resend_emailauthenticated
wp_ajax
wp_ajax_rafflepress_lite_deactivate_automationauthenticated
wp_ajax
37 more hidden
Score History
2 score snapshots
v1.12.24
42
Latest
- Findings
- 672
- Errors
- 171
- Warnings
- 501
- Check
- 2.0.0
v1.12.23
34
Score
- Findings
- 1,124
- Errors
- 261
- Warnings
- 863
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 42 | 672 | 171 | 501 | v1.12.24 | 2.0.0 |
| 34 | 1,124 | 261 | 863 | v1.12.23 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
SQL query is not prepared167 findingsRequest data is not unslashed116 findingsDatabase parameter is not escaped97 findingsInput is not validated83 findingsNonce verification recommended78 findingsInput is not sanitized63 findingsMissing nonce verification52 findingsInput is not validated or sanitized5 findings
Domain
Related
Points and Rewards for WooCommerce100 scoreLoyalty Points Rewards and Referral for WooCommerce – WPLoyalty76 scoreMyRewards89 scoreWoobox97 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More31 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 score
Author
Issue
SQL query is not prepared167 findingsRequest data is not unslashed116 findingsDatabase parameter is not escaped97 findingsInput is not validated83 findingsNonce verification recommended78 findingsInput is not sanitized63 findingsMissing nonce verification52 findingsInput is not validated or sanitized5 findings
Domain
Related
Points and Rewards for WooCommerce100 scoreLoyalty Points Rewards and Referral for WooCommerce – WPLoyalty76 scoreMyRewards89 scoreWoobox97 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreClassic Editor63 scoreAkismet Anti-spam: Spam Protection35 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreRank Math SEO – AI SEO Tools to Dominate SEO Rankings30 scoreWPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More31 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 score
Related Plugins
Points and Rewards for WooCommerce
7k+ active installs
100
Woobox
1k+ active installs
97
MyRewards
2k+ active installs
89
Loyalty Points Rewards and Referral for WooCommerce – WPLoyalty
3k+ active installs
76
Woorise – Landing Pages, Forms & Surveys
1k+ active installs
71
Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program
600 active installs
34