Responsive Filterable Portfolio

This is a beautiful responsive portfolio with responsive lightbox plugin for WordPress blogs and sites. Admin can manage any number of videos, images, …

v1.0.25NksUpdated Added 1k+ installs92% rating
34
Score
441
Errors
156
Warnings
+0
Change

Category Scores

Security0
Repo88
Performance100
Maintainability53

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

597 findings

Security

500

9 issue groups

Maintainability

77

14 issue groups

I18n

17

2 issue groups

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script type='text/javascript'> location.href='$location';</script>"'.361
Category
Security
Occurrences
361
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script type='text/javascript'> location.href='$location';</script>"'.

WARNINGSecurityMissing Unslash$_GET[&#039;action&#039;] not unslashed before sanitization. Use wp_unslash() or similar53
Category
Security
Occurrences
53
Severity
warning

Sample message

$_GET[&#039;action&#039;] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityInput Not ValidatedDetected usage of a possibly undefined superglobal array index: $_POST[&#039;AllKeywordTranslate&#039;]. Check that the array index exists before using it.31
Category
Security
Occurrences
31
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST[&#039;AllKeywordTranslate&#039;]. Check that the array index exists before using it.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.19
Category
Maintainability
Occurrences
19
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().19
Category
Maintainability
Occurrences
19
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORSecurityNot PreparedUse placeholders and $wpdb->prepare(); found $filerValsQuery19
Category
Security
Occurrences
19
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $filerValsQuery

ERRORSecurityUnescaped DBParameterUnescaped parameter $filerValsQuery used in $wpdb->get_var()\n$filerValsQuery assigned unsafely at line 3247.17
Category
Security
Occurrences
17
Severity
error

Sample message

Unescaped parameter $filerValsQuery used in $wpdb->get_var()\n$filerValsQuery assigned unsafely at line 3247.

ERRORI18nText Domain MismatchMismatched text domain. Expected 'responsive-filterable-portfolio' but got 'best-testimonial-slider'.16
Category
I18n
Occurrences
16
Severity
error

Sample message

Mismatched text domain. Expected 'responsive-filterable-portfolio' but got 'best-testimonial-slider'.

WARNINGSecurityInput Not SanitizedDetected usage of a non-sanitized input variable: $_GET[&#039;search_term&#039;]10
Category
Security
Occurrences
10
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET[&#039;search_term&#039;]

ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.9
Category
Maintainability
Occurrences
9
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

Show 15 more
ERRORMaintainabilitywp function not compatible with requires wp8
Category
Maintainability
Occurrences
8
Severity
error

Sample message

Function "wp_enqueue_media()" requires WordPress 3.5.0, but your plugin minimum supported version is WordPress 3.0.0.

WARNINGMaintainabilityMissing Version7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNINGSecurityRecommended6
Category
Security
Occurrences
6
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNot In Footer5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WARNINGSecurityInput Not Validated Not Sanitized2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a non-sanitized, non-validated input variable _SERVER: &quot;http://{$_SERVER[&#039;HTTP_HOST&#039;]}{$_SERVER[&#039;REQUEST_URI&#039;]}&quot;

ERRORMaintainabilityrename rename2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

rename() is discouraged. Use WP_Filesystem::move() to rename a file.

WARNINGMaintainabilityimage resize Found2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

image_resize() has been deprecated since WordPress version 3.5.0. Use wp_get_image_editor() instead.

ERRORSecurityUnsafe Printing Function1
Category
Security
Occurrences
1
Severity
error

Sample message

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERRORMaintainabilityfile system operations fclose1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERRORMaintainabilityfile system operations fopen1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

ERRORMaintainabilityfile system operations fwrite1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

ERRORMaintainabilityfile system operations is writable1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().

ERRORMaintainabilityrand rand1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

rand() is discouraged. Use the far less predictable wp_rand() instead.

ERRORI18nMissing Arg Domain1
Category
I18n
Occurrences
1
Severity
error

Sample message

Missing $domain parameter in function call to _e().

ERRORMaintainabilitymissing direct file access protection1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Score History

First score snapshot

v1.0.25

34

Latest

Findings
597
Errors
441
Warnings
156
Check
2.0.0

Related Plugins