PluginScore

Real Estate Manager – Property Listing and Agent Management

A comprehensive WordPress plugin designed to create feature-rich real estate websites and portals including Agent Management System.

v7.3Rameez IqbalUpdated Added 600 installs98% rating
listingspropertyreal-estaterealtywp-property
23
Score
606
Errors
2,301
Warnings
+0
Change

Category Scores

Security0
Repo91
Performance95
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

2,907 findings

Maintainability

1,960

15 issue groups

Security

913

6 issue groups

I18n

27

4 issue groups

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_key".841
Category
Maintainability
Occurrences
841
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_key".

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<$wrap class='title'>$icon "'.419
Category
Security
Occurrences
419
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<$wrap class='title'>$icon "'.

WordPress.Security.EscapeOutput.OutputNotEscapedReference
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;&#039;rem_after_admin_tab_&#039;.$name&quot;.401
Category
Maintainability
Occurrences
401
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;&#039;rem_after_admin_tab_&#039;.$name&quot;.

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
WARNINGMaintainabilityMissing VersionResource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.297
Category
Maintainability
Occurrences
297
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WordPress.WP.EnqueuedResourceParameters.MissingVersion
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.194
Category
Security
Occurrences
194
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Recommended
WARNINGMaintainabilityNot In FooterIn footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.179
Category
Maintainability
Occurrences
179
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WordPress.WP.EnqueuedResourceParameters.NotInFooter
WARNINGSecurityRequest data is not unslashed$_GET[$field[&#039;key&#039;]] not unslashed before sanitization. Use wp_unslash() or similar136
Category
Security
Occurrences
136
Severity
warning

Sample message

$_GET[$field[&#039;key&#039;]] not unslashed before sanitization. Use wp_unslash() or similar

WordPress.Security.ValidatedSanitizedInput.MissingUnslash
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET[$field[&#039;key&#039;]]124
Category
Security
Occurrences
124
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET[$field[&#039;key&#039;]]

WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;111
Category
Maintainability
Occurrences
111
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

missing_direct_file_access_protectionReference
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;get_search_fields_for_page_builders&quot;.51
Category
Maintainability
Occurrences
51
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;get_search_fields_for_page_builders&quot;.

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound
Show 15 more
WARNINGSecurityInput is not validated38
Category
Security
Occurrences
38
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_GET[&#039;lat&#039;]. Check that the array index exists before using it.

WordPress.Security.ValidatedSanitizedInput.InputNotValidated
ERRORMaintainabilitywp function not compatible with requires wp31
Category
Maintainability
Occurrences
31
Severity
error

Sample message

Function "add_term_meta()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 3.5.0.

wp_function_not_compatible_with_requires_wpReference
ERRORMaintainabilityOffloaded Content12
Category
Maintainability
Occurrences
12
Severity
error

Sample message

Found call to wp_enqueue_script() with external resource. Offloading scripts to your servers or any remote service is disallowed.

PluginCheck.CodeAnalysis.EnqueuedResourceOffloading.OffloadedContent
WARNINGMaintainabilityNon-prefixed class11
Category
Maintainability
Occurrences
11
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;REM_AJAX_Search_Property_Widget&quot;.

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound
WARNINGMaintainabilityslow db query meta key10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_key
ERRORI18nMissing Translators Comment10
Category
I18n
Occurrences
10
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WordPress.WP.I18n.MissingTranslatorsCommentReference
ERRORI18nNon Singular String Literal Text8
Category
I18n
Occurrences
8
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $fvalue

WordPress.WP.I18n.NonSingularStringLiteralTextReference
ERRORI18nUnordered Placeholders Text5
Category
I18n
Occurrences
5
Severity
error

Sample message

Multiple placeholders in translatable strings should be ordered. Expected "%1$u, %2$e", but got "%u, %e" in ' when new agent is registered. You can use %username% and %email% for details'.

WordPress.WP.I18n.UnorderedPlaceholdersTextReference
WARNINGMaintainabilityslow db query meta value4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Detected usage of meta_value, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_value
WARNINGMaintainabilityslow db query tax query4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_tax_query
ERRORI18nText Domain Mismatch4
Category
I18n
Occurrences
4
Severity
error

Sample message

Mismatched text domain. Expected 'real-estate-manager' but got 'elementor'.

WordPress.WP.I18n.TextDomainMismatchReference
WARNINGMaintainabilityNon-prefixed constant3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;REM_PATH&quot;.

WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound
ERRORMaintainabilityNon Enqueued Script3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Scripts must be registered/enqueued via wp_enqueue_script()

WordPress.WP.EnqueuedResources.NonEnqueuedScript
WARNINGMaintainabilityslow db query meta query2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WordPress.DB.SlowDBQuery.slow_db_query_meta_query
WARNINGSecurityMissing nonce verification2
Category
Security
Occurrences
2
Severity
warning

Sample message

Processing form data without nonce verification.

WordPress.Security.NonceVerification.Missing

External Connections

Potential connections found in static code analysis.

65 domains

Outbound calls

235

External assets

37

Incoming endpoints

25

Notable Domains

developer.mozilla.org29 · outbound
en.wikipedia.org27 · outbound
wp-rem.com18 · outbound
openstreetmap.org17 · outbound
creativecommons.org8 · outbound
server.arcgisonline.com7 · outbound

Platform / Reference Domains

github.com24 · platform/reference
w3.org6 · platform/reference
wordpress.org3 · platform/reference
gnu.org1 · platform/reference

External Asset Domains

maps.googleapis.com19 · asset + outbound
unpkg.com15 · asset + outbound
google.com9 · asset + outbound
maps.google.com9 · asset + outbound
cdn.datatables.net3 · asset + outbound

Incoming Endpoints

wp_ajax_nopriv_rem_agent_registerpublic

wp_ajax

wp_ajax_nopriv_rem_compare_propertiespublic

wp_ajax

wp_ajax_nopriv_rem_contact_agentpublic

wp_ajax

wp_ajax_nopriv_rem_get_statespublic

wp_ajax

wp_ajax_nopriv_rem_list_properties_ajaxpublic

wp_ajax

wp_ajax_nopriv_rem_search_autocompletepublic

wp_ajax

Admin AJAX endpoints17
wp_ajax_approve_agentauthenticated

wp_ajax

wp_ajax_deny_agentauthenticated

wp_ajax

wp_ajax_rem_change_passwordauthenticated

wp_ajax

wp_ajax_rem_compare_propertiesauthenticated

wp_ajax

wp_ajax_rem_contact_agentauthenticated

wp_ajax

wp_ajax_rem_create_pages_autoauthenticated

wp_ajax

wp_ajax_rem_create_pro_ajaxauthenticated

wp_ajax

wp_ajax_rem_delete_propertyauthenticated

wp_ajax

wp_ajax_rem_get_statesauthenticated

wp_ajax

wp_ajax_rem_list_properties_ajaxauthenticated

wp_ajax

wp_ajax_rem_save_bulk_editauthenticated

wp_ajax

wp_ajax_rem_save_profile_frontauthenticated

wp_ajax

5 more hidden

Score History

First score snapshot

v7.3

23

Latest

Findings
2,907
Errors
606
Warnings
2,301
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

HivePress Favorites

8k+ active installs

99
WPCasa Advanced Search

700 active installs

99
HivePress Authentication

1k+ active installs

98
ERE Colors – Essential Real Estate Add-On

1k+ active installs

92
ERE Similar Properties – Essential Real Estate Add-On

1k+ active installs

91
HivePress Messages

7k+ active installs

90