Build a beautiful, responsive, and filterable portfolio grid with images, videos, and custom links in minutes. Includes a native Gutenberg block.
32
Score
436
Errors
163
Warnings
-2
Change
Category Scores
Security0
Repo91
Performance100
Maintainability43
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
496
11 issue groups
Maintainability
78
12 issue groups
I18n
16
2 issue groups
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script type='text/javascript'> location.href='$location';</script>"'.351
- Category
- Security
- Occurrences
- 351
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script type='text/javascript'> location.href='$location';</script>"'.
WARNINGSecurityRequest data is not unslashed$_GET['action'] not unslashed before sanitization. Use wp_unslash() or similar53
- Category
- Security
- Occurrences
- 53
- Severity
- warning
Sample message
$_GET['action'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['AllKeywordTranslate']. Check that the array index exists before using it.31
- Category
- Security
- Occurrences
- 31
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_POST['AllKeywordTranslate']. Check that the array index exists before using it.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().20
- Category
- Maintainability
- Occurrences
- 20
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $filerValsQuery19
- Category
- Security
- Occurrences
- 19
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $filerValsQuery
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $filerValsQuery used in $wpdb->get_var()\n$filerValsQuery assigned unsafely at line 3505.17
- Category
- Security
- Occurrences
- 17
- Severity
- error
Sample message
Unescaped parameter $filerValsQuery used in $wpdb->get_var()\n$filerValsQuery assigned unsafely at line 3505.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'responsive-filterable-portfolio' but got 'best-testimonial-slider'.15
- Category
- I18n
- Occurrences
- 15
- Severity
- error
Sample message
Mismatched text domain. Expected 'responsive-filterable-portfolio' but got 'best-testimonial-slider'.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['search_term']10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['search_term']
Show 15 moreShow less
ERRORMaintainabilitydate date9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
ERRORMaintainabilityunlink unlink8
- Category
- Maintainability
- Occurrences
- 8
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGMaintainabilityMissing Version7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.
WARNINGMaintainabilityNot In Footer5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
WARNINGSecurityInput is not validated or sanitized2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized, non-validated input variable _SERVER: "http://{$_SERVER['HTTP_HOST']}{$_SERVER['REQUEST_URI']}"
ERRORMaintainabilityparse url parse url2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORMaintainabilityrename rename2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
rename() is discouraged. Use WP_Filesystem::move() to rename a file.
ERRORMaintainabilityDeprecated function: image_resize2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
image_resize() has been deprecated since WordPress version 3.5.0. Use wp_get_image_editor() instead.
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
WARNINGSecurityDatabase parameter is not escaped1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Unescaped parameter $table used in $wpdb->get_var()
WARNINGSecurityInterpolated SQL is not prepared1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $table at "SELECT COUNT(*) FROM `$table`"
ERRORSecurityUnsafe printing function1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORMaintainabilityfile system operations fclose1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fwrite1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
External Connections
Potential connections found in static code analysis.
Outbound calls
31
External assets
0
Incoming endpoints
4
Notable Domains
i13websolution.com7 · outbound
site.com6 · outbound
connect.facebook.net3 · outbound
facebook.com3 · outbound
fancybox.net2 · outbound
img.youtube.com2 · outbound
Platform / Reference Domains
gnu.org2 · platform/reference
opensource.org2 · platform/reference
github.com1 · platform/reference
wordpress.org1 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints4
wp_ajax_rfp_check_file_exist_portfolioauthenticated
wp_ajax
wp_ajax_rfp_get_metacafe_info_portfolioauthenticated
wp_ajax
wp_ajax_rfp_get_youtube_info_portfolioauthenticated
wp_ajax
wp_ajax_rfp_review_dismissauthenticated
wp_ajax
Score History
3 score snapshots
v1.0.28
32
Latest
- Findings
- 599
- Errors
- 436
- Warnings
- 163
- Check
- 2.0.0
v1.0.27
34
Score
- Findings
- 601
- Errors
- 439
- Warnings
- 162
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 32 | 599 | 436 | 163 | v1.0.28 | 2.0.0 |
| 34 | 601 | 439 | 162 | v1.0.27 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Show Posts36 scoreGallery by Visual Portfolio39 scoreQi Blocks31 scorePortfolio Post Type70 scorePremium Portfolio Features for Phlox theme33 scoreThemify Portfolio Post30 scoreCarousel Block – Showcase Images in Elegant Sliding Displays100 score
Author
Category
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreAkismet Anti-spam: Spam Protection35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Show Posts36 scoreGallery by Visual Portfolio39 scoreQi Blocks31 scorePortfolio Post Type70 scorePremium Portfolio Features for Phlox theme33 scoreThemify Portfolio Post30 scoreCarousel Block – Showcase Images in Elegant Sliding Displays100 score
Related Plugins
Carousel Block – Showcase Images in Elegant Sliding Displays
7k+ active installs
100
bSlider – Create Responsive Image, Post, Product, and Video Sliders
6k+ active installs
100
Button Block – stylish buttons that get more clicks
5k+ active installs
100
PDF Embed Block – share documents right inside your posts
4k+ active installs
100
All In One Lightbox – show any media in beautiful popups
3k+ active installs
100
Filter Gallery
3k+ active installs
100