Kadence Memberships is a powerful WordPress membership plugin that gives you full control over who can and cannot view content on your WordPress site.
19
Score
5,083
Errors
2,982
Warnings
+0
Change
Category Scores
Security0
Repo63
Performance98
Maintainability0
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
2,907
12 issue groups
I18n
2,902
3 issue groups
Maintainability
2,047
10 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'restrict-content' but got "rcp".2,588
- Category
- I18n
- Occurrences
- 2,588
- Severity
- error
Sample message
Mismatched text domain. Expected 'restrict-content' but got "rcp".
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.1,018
- Category
- Security
- Occurrences
- 1,018
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$access'.724
- Category
- Security
- Occurrences
- 724
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$access'.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'get_template_part_' . $slug".673
- Category
- Maintainability
- Occurrences
- 673
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'get_template_part_' . $slug".
WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_rcp_sanitize_duration_unit".580
- Category
- Maintainability
- Occurrences
- 580
- Severity
- warning
Sample message
Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_rcp_sanitize_duration_unit".
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$access".321
- Category
- Maintainability
- Occurrences
- 321
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$access".
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.262
- Category
- I18n
- Occurrences
- 262
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.251
- Category
- Security
- Occurrences
- 251
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed$_COOKIE[$rp_cookie] not unslashed before sanitization. Use wp_unslash() or similar243
- Category
- Security
- Occurrences
- 243
- Severity
- warning
Sample message
$_COOKIE[$rp_cookie] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[$rp_cookie]208
- Category
- Security
- Occurrences
- 208
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_COOKIE[$rp_cookie]
Show 15 moreShow less
WARNINGSecurityInput is not validated135
- Category
- Security
- Occurrences
- 135
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_FILES['import_file']['name']. Check that the array index exists before using it.
WARNINGSecurityMissing nonce verification110
- Category
- Security
- Occurrences
- 110
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityMissing direct file access protection107
- Category
- Maintainability
- Occurrences
- 107
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitydate date99
- Category
- Maintainability
- Occurrences
- 99
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGMaintainabilityDirect Query75
- Category
- Maintainability
- Occurrences
- 75
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo Caching74
- Category
- Maintainability
- Occurrences
- 74
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecurityException output is not escaped71
- Category
- Security
- Occurrences
- 71
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot save property `{$key}` containing an API resource of type "'.
WARNINGMaintainabilityNon-prefixed namespace53
- Category
- Maintainability
- Occurrences
- 53
- Severity
- warning
Sample message
Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "RCP".
ERRORI18nUnordered Placeholders Text52
- Category
- I18n
- Occurrences
- 52
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in '%d / %d'.
ERRORSecuritySQL query is not prepared51
- Category
- Security
- Occurrences
- 51
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $compare_string
WARNINGSecurityInterpolated SQL is not prepared44
- Category
- Security
- Occurrences
- 44
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $rcp_discounts_db_name at "UPDATE $rcp_discounts_db_name SET code = LOWER(code)"
WARNINGMaintainabilityNon-prefixed class37
- Category
- Maintainability
- Occurrences
- 37
- Severity
- warning
Sample message
Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "RCP_Add_On_Updater".
ERRORSecurityDatabase parameter is not escaped29
- Category
- Security
- Occurrences
- 29
- Severity
- error
Sample message
Unescaped parameter $fields used in $wpdb->get_results()\n$fields assigned unsafely at line 583.
WARNINGMaintainabilityerror log var export28
- Category
- Maintainability
- Occurrences
- 28
- Severity
- warning
Sample message
var_export() found. Debug code should not normally be used in production.
WARNINGSecurityDatabase parameter is not escaped23
- Category
- Security
- Occurrences
- 23
- Severity
- warning
Sample message
Unescaped parameter $customer_table used in $wpdb->get_var()\n$customer_table assigned unsafely at line 702.
External Connections
Potential connections found in static code analysis.
Outbound calls
277
External assets
1
Incoming endpoints
22
Notable Domains
restrictcontentpro.com55 · outbound
stripe.com32 · outbound
dev.mysql.com10 · outbound
dashboard.stripe.com7 · outbound
google.com6 · outbound
help.ithemes.com5 · outbound
Platform / Reference Domains
opensource.org105 · platform/reference
github.com19 · platform/reference
wordpress.org2 · platform/reference
codex.wordpress.org1 · platform/reference
core.trac.wordpress.org1 · platform/reference
gnu.org1 · platform/reference
make.wordpress.org1 · platform/reference
External Asset Domains
js.stripe.com2 · asset + outbound
Incoming Endpoints
wp_ajax_nopriv_rcp_braintree_3ds_validation_fieldspublic
wp_ajax
wp_ajax_nopriv_rcp_calc_discountpublic
wp_ajax
wp_ajax_nopriv_rcp_load_gateway_fieldspublic
wp_ajax
wp_ajax_nopriv_rcp_stripe_create_setup_intent_for_saved_cardpublic
wp_ajax
wp_ajax_nopriv_rcp_stripe_handle_initial_payment_failurepublic
wp_ajax
wp_ajax_nopriv_rcp_validate_registration_statepublic
wp_ajax
Admin AJAX endpoints15
admin_post_restrict_content_try_freeauthenticated
admin_post
wp_ajax_rcp_braintree_3ds_validation_fieldsauthenticated
wp_ajax
wp_ajax_rcp_calc_discountauthenticated
wp_ajax
wp_ajax_rcp_get_membership_billing_cycleauthenticated
wp_ajax
wp_ajax_rcp_get_subscription_expirationauthenticated
wp_ajax
wp_ajax_rcp_load_gateway_fieldsauthenticated
wp_ajax
wp_ajax_rcp_process_batchauthenticated
wp_ajax
wp_ajax_rcp_process_csv_importauthenticated
wp_ajax
wp_ajax_rcp_search_usersauthenticated
wp_ajax
wp_ajax_rcp_stripe_create_setup_intent_for_saved_cardauthenticated
wp_ajax
wp_ajax_rcp_stripe_delete_saved_payment_methodauthenticated
wp_ajax
wp_ajax_rcp_stripe_handle_initial_payment_failureauthenticated
wp_ajax
3 more hidden
Score History
2 score snapshots
v4.0.2
19
Latest
- Findings
- 8,065
- Errors
- 5,083
- Warnings
- 2,982
- Check
- 2.0.0
v4.0.1
19
Score
- Findings
- 8,064
- Errors
- 5,082
- Warnings
- 2,982
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 19 | 8,065 | 5,083 | 2,982 | v4.0.2 | 2.0.0 |
| 19 | 8,064 | 5,082 | 2,982 | v4.0.1 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreDuplicate Page40 scoreAdvanced Custom Fields (ACF®)23 scoreWordPress Importer25 scoreKadence Security – Password, Two Factor Authentication, and Brute Force Protection21 scoreNinja Forms – The Contact Form Builder That Grows With You24 scoreKadence Blocks — Page Builder Toolkit for Gutenberg Editor23 scoreThe Events Calendar23 score
Author
Category
Issue
Domain
Related
Wordfence Security – Firewall, Malware Scan, and Login Security21 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreDuplicate Page40 scoreAdvanced Custom Fields (ACF®)23 scoreWordPress Importer25 scoreKadence Security – Password, Two Factor Authentication, and Brute Force Protection21 scoreNinja Forms – The Contact Form Builder That Grows With You24 scoreKadence Blocks — Page Builder Toolkit for Gutenberg Editor23 scoreThe Events Calendar23 score
Related Plugins
Ultimate Member – reCAPTCHA
20k+ active installs
98
Prevent Concurrent Logins
900 active installs
97
RoleMaster Suite – User Role Editor for E-Commerce, Membership & Admin Panel
700 active installs
97
Expire Passwords
500 active installs
92
Simple Membership Form Shortcode
2k+ active installs
91
Page and Post Restriction
2k+ active installs
90